NCC Group Research Blog
Technical Advisory: Gaining root access on Sumpple S610 IP Camera via Telnet; and Unprotected client and server data transmission between Android and IOS clients
10 months 2 weeks ago
Technical advisory: “ROHNP”- key extraction side channel in multiple crypto libraries
10 months 2 weeks ago
Technical Advisory – SonicWall SMA 100 Series – Unauthenticated Arbitrary File Deletion
10 months 2 weeks ago
Technical Advisory – SonicWall SMA 100 Series – Unauthenticated File Upload Path Traversal (CVE-2021-20040)
10 months 2 weeks ago
Technical Advisory – SonicWall Global Management System (GMS) & Analytics – Multiple Critical Vulnerabilities
10 months 2 weeks ago
Technical Advisory – SerComm h500s – Authenticated Remote Command Execution (CVE-2021-44080)
10 months 2 weeks ago
Technical Advisory – Ollama DNS Rebinding Attack (CVE-2024-28224)
10 months 2 weeks ago
Technical Advisory – Multiple Vulnerabilities in Victure WR1200 WiFi Router (CVE-2021-43282, CVE-2021-43283, CVE-2021-43284)
10 months 2 weeks ago
Technical Advisory – NULL Pointer Derefence in McAfee Drive Encryption (CVE-2021-23893)
10 months 2 weeks ago
Technical Advisory – Multiple Vulnerabilities in PandoraFMS Enterprise
10 months 2 weeks ago
Technical Advisory – Multiple Vulnerabilities in Trendnet TEW-831DR WiFi Router (CVE-2022-30325, CVE-2022-30326, CVE-2022-30327, CVE-2022-30328, CVE-2022-30329)
10 months 2 weeks ago
Technical Advisory – Multiple Vulnerabilities in Nagios XI
10 months 2 weeks ago
Technical Advisory – Multiple Vulnerabilities in Netgear ProSAFE Plus JGS516PE / GS116Ev2 Switches
10 months 2 weeks ago
Technical Advisory – Multiple Vulnerabilities in Faronics Insight (CVE-2023-28344, CVE-2023-28345, CVE-2023-28346, CVE-2023-28347, CVE-2023-28348, CVE-2023-28349, CVE-2023-28350, CVE-2023-28351, CVE-2023-28352, CVE-2023-28353)
10 months 2 weeks ago
Technical Advisory – Multiple Vulnerabilities in Juplink RX4-1800 WiFi Router (CVE-2022-37413, CVE-2022-37414)
10 months 2 weeks ago
Technical Advisory – Linksys WRT160NL – Authenticated Command Injection (CVE-2021-25310)
10 months 2 weeks ago
Technical Advisory – Linksys WRT160NL – Authenticated Remote Buffer Overflow (CVE-2020-26561)
10 months 2 weeks ago
Technical Advisory – Jitsi Meet Electron – Arbitrary Client Remote Code Execution (CVE-2020-27162)
10 months 2 weeks ago
Technical Advisory – Jitsi Meet Electron – Limited Certificate Validation Bypass (CVE-2020-27161)
10 months 2 weeks ago
Checked
5 hours 7 minutes ago