Oracle SBC: Multiple Security Vulnerabilities Leading to Unauthorized Access and Denial of Service

SpZ published on 24-08-2022 included in categories CVE Security

Oracle Communications Session Border Controller (SBC) is one of the most popular products worldwide, helping service providers deliver trusted, carrier-grade, real-time communications such as VoLTE, VoIP, video conferencing, calling, presence, IM, and IPTV. Harold Zang, Senior Technical Security Specialist, and Jeremy Nunn, Security Specialist at Trustwave SpiderLabs, identified three vulnerabilities in the Oracle SBC.

Luanne Box Writeup Walkthrough Htb Hackthebox – [HTB] – HackTheBox

SpZ published on 01-04-2021 included in categories HackTheBox Writeup

In this walkthrough, we’ll explore the HackTheBox challenge ‘Luanne’. We’ll detail the process to secure both user.txt and root.txt files, providing a comprehensive guide for cybersecurity enthusiasts.

D-Link: Multiple Security Vulnerabilities Leading to RCE

SpZ published on 18-12-2020 included in categories CVE Penetration Security

The D-Link 2888A firmware was found to have multiple vulnerabilities, including remote code execution (RCE), information leakage, authentication bypass, and several CVEs.

Install and Setup Burp Suite Proxy & Certificate with Java Application

SpZ published on 17-08-2020 included in categories Penetration Security

This article demonstrates how to configure the Burp Suite certificate for Java applications.

How I Discovered Command Injection in MVP-5150 (CVE-2019-11224)

SpZ published on 20-05-2019 included in categories CVE Penetration Security

This article explores my discovery of the CVE-2019-11224 vulnerability in the MVP-5150 device and introduces methods to bypass the space character limitation in Linux OS command injections.

CVE-2019-11224: Command Injection Vulnerability in HARMAN AMX MVP5150

SpZ published on 06-05-2019 included in categories CVE Security

This article shows the details of CVE-2019-11224 security vulnerability.