Actualités

février 15, 2019

Chashell is a Go reverse shell that communicates over DNS. It can be used to bypass firewalls or tightly restricted networks.

janvier 10, 2019

En mars 2018, Sysdream a découvert plusieurs vulnérabilités sur le téléphone IP AudioCodes 420HD (version du logiciel embarqué : 2.2.12.126).

janvier 10, 2019

Easy!Appointments is a highly customizable web application that offers scheduling management for businesses. We found multiple leaks of confidential user information.

janvier 10, 2019

Easy!Appointments is a highly customizable web application that offers scheduling management for businesses. We found a way to bypass its CAPTCHA mechanism.

janvier 10, 2019

The AudioCodes 400HD series of IP phones is a range of easy-to-use, feature-rich desktop devices for the service provider hosted services, enterprise IP telephony and contact center markets. Most of...

janvier 10, 2019

The AudioCodes 400HD series of IP phones consists in a range of easy-to-use, feature-rich desktop devices for the service provider hosted services, enterprise IP telephony and contact center markets. The...

janvier 4, 2019

Two XSS vulnerabilities have been discovered in Zimbra Collaboration (initially in version 8.8.8). Zimbra Collaboration is an open source messaging and collaboration solution.

septembre 21, 2018

Antidote, a spell checker program for Windows, Linux and macOS operating systems, has been affected by a remote code execution against the update component.

juillet 5, 2018

In March 2018, Sysdream have discovered several vulnerabilities in the 420HD IP phone (firmware version: 2.2.12.126). This article describes the exploitation steps.