Compass Security News

Here you will find reports, interviews and news. We give you an insight into our work and report on 0day (zero-day) vulnerabilities discovered by our staff on customer projects or in their research time.

 

Emanuel Duss identified a biometric authentication bypass vulnerability in the Ionic Identity Vault secure storage solution on Android.

Read more

Philipp Mao identified a hardcoded credentials vulnerability in the electronic time recording system timeCard

Read more

Emanuele Barbeno identified a vulnerability in the open source software NeDi.

Read more

Stephan Sekula identified an XSS vulnerability in the report generation tool Canopy.

Read more

Alex Joss and Emanuele Barbeno identified vulnerabilities in Intland Software´s Application-Lifecycle-Management codeBeamer.

Read more

Tino Kautschke identified an XSS vulnerability in the content management system Plone.

 

Read more

Sylvain Heiniger and Alex Joss identified vulnerabilities in Avaya Equinox® Conferencing, an all-inclusive solution for voice, video and desktop…

Read more

Nicolas Heiniger identified a OS Command Injection (RCE) in WorkCentre 78XX Series.

Read more

Philipp Mao identified an XML External Entity vulnerability in the FusionAuth SAML Library.

Read more

Emanuele Barbeno identified a Privilege Escalation vulnerability in Pi-hole.

Read more

Emanuele Barbeno identified an XXE vulnerability in Helix ALM, the application lifecycle management tool by Perforce.

Read more

It is clear: Swiss governments and companies need more qualified cyber security professionals. The new training (with Federal Diploma of Higher…

Read more