Skip To Main Content
Earlier versions on Muck Rack

Earlier versions

As seen in: Packetst Storm
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile
Back to Earlier versions’s profile

Articles by Earlier versions

RT-Thread RTOS 5.0.2 Overflows / Weak Random Source

|
By Marco Ivaldi, Earlier versions, TinyDir codebases
| Packetst Storm
--[ HNS-2024-05 - HN Security Advisory - https://security.humanativaspa.it/ * Title: Multiple vulnerabilities in RT-Thread RTOS * OS: RT-Thread <= 5.0.2 * Author: Marco Ivaldi <marco.ivaldi@hnsecurity.it> * Date: 2024-03-05 * CVE IDs and advisory URLs: * CVE-2024-24334 - https://github.com/RT-Thread/rt-thread/issues/8282 * CVE-2024-24335 - https://github.com/RT-Thread/rt-thread/issues/8271 * CVE-2024-25388 - https://github.com/RT-Thread/rt-thread/issues/8285 * CVE-2024-25389 -...
Open in Who Shared Issue with article?

Garmin Express can not find my FOrerunner 305

|
By Earlier versions
| garmin.com
On my MAC, I am unable to upload activities, garmin express can not find the Forerunner 305. Switched cables same result, those same cables work for my Garmin Edge 500.
Open in Who Shared Issue with article?

Technical Advisory: Adobe ColdFusion WDDX Deserialization Gadgets

|
By Earlier versions, 'setClient Cert', 'setCluster Name', Adam Roberts
| research.nccgroup.com
Is this the real life? Is this just fantasy? Caught in a landslide, NoEscape from NCC Group The Spelling Police: Searching for Malicious HTTP Servers by Identifying Typos in HTTP Responses Public Report – WhatsApp Auditable Key Directory (AKD) Implementation Review
Open in Who Shared Issue with article?

RWS WorldServer 11.7.3 - Session Token Enumeration

|
By Earlier versions, Jens Liebchen
| exploit-db.com
Exploit Title: RWS WorldServer 11.7.3 - Session Token Enumeration Session tokens in RWS WorldServer have a low entropy and can be enumerated, leading to unauthorised access to user sessions.
Open in Who Shared Issue with article?

RWS WorldServer 11.7.3 Session Token Enumeration

|
By Earlier versions, Jens Liebchen
| Packetst Storm
RWS WorldServer 11.7.3 Session Token Enumeration Site redteam-pentesting.de RWS WorldServer versions 11.7.3 and below suffer from a session token enumeration vulnerability. tags | exploit advisories | CVE-2023-38357 SHA-256 | 3809eddfb426d1ed940f1b902726114b7c7322dfe9d241fc6e98fd22830832ca Download | Favorite | View Advisory: Session Token Enumeration in RWS WorldServer Session tokens in RWS WorldServer have a low entropy and can be enumerated, leading to unauthorised access to user sessions.
Open in Who Shared Issue with article?

[RT-SA-2023-001] Session Token Enumeration in RWS WorldServer

|
By Earlier versions, Jens Liebchen
| seclists.org
Full Disclosure mailing list archives From: RedTeam Pentesting GmbH <release () redteam-pentesting de> Date: Wed, 19 Jul 2023 09:53:20 +0200 Advisory: Session Token Enumeration in RWS WorldServer Session tokens in RWS WorldServer have a low entropy and can be enumerated, leading to unauthorised access to user sessions.
Open in Who Shared Issue with article?

STARFACE 7.3.0.10 - Authentication with Password Hash Possible

|
By Earlier versions, Jens Liebchen
| exploit-db.com
Platform: JSP Date: 2023-06-04 Exploit Title: STARFACE 7.3.0.10 - Authentication with Password Hash Possible Affected Versions: 7.3.0.10 and earlier versions Fixed Versions: - Vulnerability Type: Broken Authentication Security Risk: low Vendor URL: https://www.starface.de Vendor Status: notified Advisory URL: https://www.redteam-pentesting.de/advisories/rt-sa-2022-004 Advisory Status: published CVE: CVE-2023-33243 CVE URL: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33243...
Open in Who Shared Issue with article?

STARFACE 7.3.0.10 Broken Authentication

|
By Earlier versions, Jens Liebchen, Ivan Fratric
| Packetst Storm
STARFACE 7.3.0.10 Broken Authentication Site redteam-pentesting.de RedTeam Pentesting discovered that the web interface of STARFACE as well as its REST API allows authentication using the SHA512 hash of the password instead of the cleartext password.
Open in Who Shared Issue with article?

[RT-SA-2022-004] STARFACE: Authentication with Password Hash Possible

|
By Earlier versions, Jens Liebchen
| seclists.org
Full Disclosure mailing list archives From: RedTeam Pentesting GmbH <release () redteam-pentesting de> Date: Thu, 1 Jun 2023 15:39:25 +0200 Advisory: STARFACE: Authentication with Password Hash Possible RedTeam Pentesting discovered that the web interface of STARFACE as well as its REST API allows authentication using the SHA512 hash of the password instead of the cleartext password.
Open in Who Shared Issue with article?

BeyondTrust Remote Support 6.0 Cross Site Scripting

|
By Earlier versions, Matthias Deeg
# Exploit Title: BeyondTrust Remote Support - Reflected Cross-Site Scripting (XSS) (Unauthenticated) # Google Dork: intext:"BeyondTrust" "Redistribution Prohibited" # Date: 30/12/2021 # Exploit Author: Malcrove # Vendor Homepage: https://www.beyondtrust.com/ # Version: v6.0 and earlier versions # CVE: CVE-2021-31589 Summary: Unauthenticated cross-site scripting (XSS) vulnerability in BeyondTrust Secure Remote Access Base Software through 6.0.1 allow remote attackers to inject arbitrary web...
Open in Who Shared Issue with article?

BeyondTrust Remote Support 6.0 Cross Site Scripting

|
By Earlier versions, Andreas Andersen, Mark Staal Steenberg
| Packetst Storm
# Exploit Title: BeyondTrust Remote Support - Reflected Cross-Site Scripting (XSS) (Unauthenticated) # Google Dork: intext:"BeyondTrust" "Redistribution Prohibited" # Date: 30/12/2021 # Exploit Author: Malcrove # Vendor Homepage: https://www.beyondtrust.com/ # Version: v6.0 and earlier versions # CVE: CVE-2021-31589 Summary: Unauthenticated cross-site scripting (XSS) vulnerability in BeyondTrust Secure Remote Access Base Software through 6.0.1 allow remote attackers to inject arbitrary web...
Open in Who Shared Issue with article?

New Study Of Old Real Estate Bubbles (1582-1810) Finds Two Surprising Similarities With Modern Bubbles

|
By John Wake, Earlier versions
| realestatedecoded.com
Earlier versions of this piece on Forbes.com here and here got over 50,000 views combined. I guess I'm not the only one fascinated by this mysterious, natural economic phenomenon — real estate bubbles. Amsterdam had three large real estate bubbles from 1582 to 1810. The real estate market was entirely different 200-400 years ago but those Amsterdam bubbles shared at least two similarities with modern real estate bubbles.
Open in Who Shared View Duplicates (158) Issue with article?
Show More