what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files Date: 2017-04-23

Starscream 2.0.3 SSL Pinning Bypass

Posted Apr 23, 2017

Authored by Giuliano Galea, Lukas Futera

Starscream library version prior to 2.0.4 suffer from an SSL pinning vulnerability due to the pinning occurring too late in the stream function.

tags | advisory, bypass

advisories | CVE-2017-5887

SHA-256 | 64a188b368b05fc0c83b778a896addd96b7d6adfd09af4f4173cf80627a8b788

Download | Favorite | View

SquirrelMail 1.4.22 Remote Code Execution

Posted Apr 23, 2017

Authored by Dawid Golunski

SquirrelMail versions 1.4.22 and below suffer from a remote code execution vulnerability.

tags | exploit, remote, code execution

advisories | CVE-2017-7692

SHA-256 | de177f6f9977394beaa2b7397b15b81799bfe18c2f8520e2c8cfe277e5f308a5

Download | Favorite | View