You are here:
Here you will find reports, interviews and news. We give you an insight into our work and report on 0day (zero-day) vulnerabilities discovered by our staff on customer projects or in their research time.
Page 5 of 13
Emanuel Duss and Sylvain Heiniger identified multiple vulnerabilities in the OpenVPN status monitor software openvpn-monitor.
Emanuel Duss identified a biometric authentication bypass vulnerability in the Ionic Identity Vault secure storage solution on Android.
Philipp Mao identified a hardcoded credentials vulnerability in the electronic time recording system timeCard
Emanuele Barbeno identified a vulnerability in the open source software NeDi.
Stephan Sekula identified an XSS vulnerability in the report generation tool Canopy.
Alex Joss and Emanuele Barbeno identified vulnerabilities in Intland Software´s Application-Lifecycle-Management codeBeamer.
Tino Kautschke identified an XSS vulnerability in the content management system Plone.
Sylvain Heiniger and Alex Joss identified vulnerabilities in Avaya Equinox® Conferencing, an all-inclusive solution for voice, video and desktop…
Nicolas Heiniger identified a OS Command Injection (RCE) in WorkCentre 78XX Series.
Philipp Mao identified an XML External Entity vulnerability in the FusionAuth SAML Library.
Emanuele Barbeno identified a Privilege Escalation vulnerability in Pi-hole.
Emanuele Barbeno identified an XXE vulnerability in Helix ALM, the application lifecycle management tool by Perforce.
Depending on the customer’s preference, possible initial access vectors in our red teaming exercises typically include deployment of dropboxes,…
SINDEX is the leading Swiss exhibition for industrial automation. The industry meeting place presents the trends, innovations and key technologies of…