Aggregator
Vulnerabilities in PanelView Plus devices could lead to remote code execution
Microsoft discovered and responsibly disclosed two vulnerabilities in Rockwell’s PanelView Plus that could be remotely exploited by unauthenticated attackers, allowing them to perform remote code execution (RCE) and denial-of-service (DoS). PanelView Plus devices are graphic terminals, which are known as human machine interface (HMI) and are used in the industrial space.
The post Vulnerabilities in PanelView Plus devices could lead to remote code execution appeared first on Microsoft Security Blog.
Weaponizing API discovery metadata
Learn how to weaponize API discovery metadata to improve your recon of the APIs you are hacking or conducting security testing on.
The post Weaponizing API discovery metadata appeared first on Dana Epp's Blog.
Like Shooting Phish in a Barrel
Modern Cryptographic Attacks: A Guide for the Perplexed
Introduction Cryptographic attacks, even more advanced ones, are often made more difficult to understand than they need to be. Sometimes it’s because the explanation is “too much too soon” — it skips the simple general idea and goes straight to real world attacks with all their messy details. Other times it’s because of too much […]
The post Modern Cryptographic Attacks: A Guide for the Perplexed appeared first on Check Point Research.