Attack Blogs
Filter Content:
Categories:
Tags:
January 12, 2024 | Attack Blogs, Disclosures
Introduction Back in Aug. 2023 we released an advisory for CVE-2023-39143, a critical vulnerability that affects Windows installs of the…
October 30, 2023 | Attack Blogs
Introduction This post is a follow up to https://www.horizon3.ai/cisco-ios-xe-cve-2023-20198-theory-crafting/. Previously, we explored the patch for CVE-2023-20273 and CVE-2023-20198 affecting Cisco…
October 25, 2023 | Attack Blogs
Introduction There has been a lot of news around the recent Cisco IOS XE vulnerabilities CVE-2023-20198 and CVE-2023-2073. Information about…
October 25, 2023 | Attack Blogs, Disclosures
Mirth Connect, by NextGen HealthCare, is an open source data integration platform widely used by healthcare companies. Versions prior to…
October 20, 2023 | Attack Blogs
Introduction This report is a follow up to https://www.horizon3.ai/vmware-vrealize-log-insight-vmsa-2023-0001-technical-deep-dive/. Earlier this year we reported the technical details for VMSA-2023-0001 affecting…
October 19, 2023 | Attack Blogs
On Monday, 16 October, Cisco reported a critical zero-day vulnerability in the web UI feature of its IOS XE software…September 6, 2023 | Attack Blogs, Disclosures
Apache Superset is a popular open source data exploration and visualization tool. In a previous post, we disclosed a vulnerability,…
August 24, 2023 | Attack Blogs
Introduction Ivanti has recently published an advisory for CVE-2023-38035. The vulnerability has been added to CISA KEV and is described…August 10, 2023 | Attack Blogs
Introduction In December 2022, we competed at our first pwn2own. We were able to successfully exploit the Lexmark MC3224i using…August 4, 2023 | Attack Blogs, Disclosures
Summary CVE-2023-39143 is a critical vulnerability we disclosed to PaperCut that affects the widely used PaperCut NG/MF print management software.…
