Aggregator

VEEAM Backup and Replication Vulnerability

X-Force Exchange - Collection Feed
4 years ago
Summary A post from Veeam details vulnerabilities in its backup and replication solution. The vulnerability could lead to remote code execution (RCE) in versions 9.5, 10, and 11. Threat Type Vulnerability Overview Vulnerabilities in Veeam's backup and replication software have the potential to be used for RCE and eventual gaining control over the target system. Scoring 9.8 on the CVSS v3 scale, these vulnerabilities are critical. Patches have been issued for versions 10 and 11. Version 9.5 is no longer sup

AWS Scaled Command Bash Script - Run AWS commands for many profiles

Embrace The Red
4 years ago

One area that I have encountered quite often over the years is that during recon phase of a bug bounty hunt or pentest a set of AWS access keys are being discovered.

Let’s say you found 50 AWS access keys by drooling and hunting through public Github repos and using other nifty tricks and means.

How do you go about checking their validity? And what do they have access to and provide the Bug Bounty Program or Blue Team the dates, times, and IP address when those keys were used?

AKG：攻击者知识图谱

404NotF0und
4 years ago
攻击者知识图谱作为一个数据中心，当数据累积到一定量级，可能完成数据、情报中心向决策中心的进化。

AKG：攻击者知识图谱

404NotF0und
4 years ago
攻击者知识图谱作为一个数据中心，当数据累积到一定量级，可能完成数据、情报中心向决策中心的进化。

AKG：攻击者知识图谱

404NotF0und
4 years ago
攻击者知识图谱作为一个数据中心，当数据累积到一定量级，可能完成数据、情报中心向决策中心的进化。

Managed ad