SEC Consult
sec-consult.com
Actively hiring
Application Security
Information Security
Cybersecurity
As featured in
Follow
Overview
News
Salaries
Products
People
Growth
Offices
Financials
News
Hands-Free Lockpicking: Critical Vulnerabilities in dormakaba's Physical Access Control System
In this post, Clemens Stockenreitner and Werner Schober of the SEC Consult Vulnerability Lab highlight several critical vulnerabilities found in dormakaba's physical access control systems based on exos 9300.
Read more
Report
Microsoft Windows MSI Installer - Repair to SYSTEM - A detailed journey
Repair functions of Microsoft Windows MSI installers can be vulnerable in several ways, for instance allowing local attackers to escalate their privileges to SYSTEM rights. This vulnerability is referenced as CVE-2024-38014.
Read more
Report
Local Privilege Escalation via MSI installer in SoftMaker Office / FreeOffice
The MSI installers of SoftMaker Office and FreeOffice (SoftMaker) contained a privilege escalation vulnerability. This enabled a local, low-privileged attacker with GUI access to a system, where SoftMaker Office or FreeOffice are installed via MSI, to esc
Read more
Report
Database Passwords in Server Response in Amazon AWS Glue
The password of database connections in Amazon AWS Glue is loaded into the website when a connection's edit page is requested. Principals with appropriate permissions can read the password. This behavior also increases the risk that database passwords wil
Read more
Report
SMTP Smuggling - Spoofing E-Mails Worldwide
Introducing a novel technique for e-mail spoofing
Read more
Report
Someone call the patch manager
How COVID-19 left hundreds of thousands of printers vulnerable
Read more
Report
Multiple critical vulnerabilities in Trend Micro InterScan Web Security Virtual Appliance (IWSVA)
The Trend Micro InterScan Web Security Virtual Appliance (IWSVA) is affected by multiple critical security issues. Unauthenticated attackers are able to gain root access to the appliance via chained attack vectors, such as CSRF protection bypass, authoriz
Read more
Report
Portable Hardware Write Blocker WriteProtect
Protect digital evidence with the Logicube WriteProtect-PORTABLE, a compact hardware write blocker supporting PCIe, SATA and USB 3.0 forensic workflows.
Read more
Report
Reverse Engineering Architecture And Pinout of Custom Asics
Learn about the process of initial reverse engineering the pinout of unknown ASICs by using moderate methods. The two described ICs are good examples out of many industry-solutions and have been chosen to demonstrate how design decisions from vendors are
Read more
Report
Show more news