research

VMware Unified Access Gateway and Horizon View vulnerability

CVE-2017-4907

Claudio Moletta

Jan 6, 2020 — 1 min read

There is a heap-based buffer overflow vulnerability which affects VMware Unified Access Gateway (2.5.x, 2.7.x, 2.8.x prior to 2.8.1) and Horizon View (7.x prior to 7.1.0, 6.x prior to 6.2.4). This issue may be exploited remotely to execute code on the security gateway. VMware Unified Access Gateway 2.9 is not affected. This issue has been addressed in VMware Unified Access Gateway 2.8.1, Horizon View 7.1.0 and 6.2.4.

https://www.vmware.com/us/security/advisories/VMSA-2017-0008.html

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-4907

AI CTF Adventures with Vexbot

Introduction At the recent BSides Canberra, we ran a Capture the Flag (CTF) for visitors to our sponsor's booth. With recent interest in AI, we decided to create a Large Language Model based CTF; one that didn't require any custom tools, one that you could play

Breaking Down Office Security: What We Discovered During Our "Break-In"

When you think of office security, you probably picture high-tech firewalls and complex passwords, right? But what about the simpler tools we rely on daily, like lanyards and RFID cards? Sometimes, the real weak spots aren’t in the IT infrastructure at all - they’re in the everyday interactions

Navigating a SQL injection attack

SilentGrid delves into the impact of a SQL injection that affected a healthcare application, which claimed to adequately protect the privacy of its users

Hands-On Modbus Security

In the realm of industrial control, Industrial Control Systems (ICS) play a crucial role in overseeing complex processes, with the widely used Modbus protocol serving as a key player in communication. This blog will delve into the security concerns surrounding ICS, placing a particular focus on the Modbus protocol, which

Read more

AI CTF Adventures with Vexbot

Breaking Down Office Security: What We Discovered During Our "Break-In"

Navigating a SQL injection attack

Hands-On Modbus Security