While doing an internal assessment, I stumbled upon a very weird looking NTLMv2 hash (I will not use the "Net-NTLM" terminology but I’m talking about the NTLM protocol ) while using Responder with the –lm option (which afaik/wha…
Does lssas.exe store local and domain account user hashs and if lssas.exe store hash on memory, when I reboot computer attacker could not get older login user hashs right? But when I dump lssas.exe with crackmapexe I got domain admin hash…
A vulnerability classified as problematic has been found in IBM Storage Defender 2.0. This affects an unknown part of the component Resiliency Service. The manipulation leads to unprotected storage of credentials.
This vulnerability is uniquely identi…
A vulnerability was found in IBM Storage Defender 2.0. It has been rated as critical. Affected by this issue is some unknown functionality of the component Resiliency Service. The manipulation leads to improper privilege management.
This vulnerability…
A vulnerability was found in IBM Storage Defender 2.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Resiliency Service. The manipulation leads to hard-coded credentials.
This vulnerabili…
A vulnerability was found in IBM Semeru Runtime up to 8.0.392.0/11.0.21.0/17.0.9.0/21.0.1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to risky cryptographic algorithm.
This vulnerability is traded …
I noticed some strange behaviour on my firewall WAN interface last night, and then later on my LAN interface as well.
There seems to be traffic to a known tor node 192.99.168.180 on port 123. I block all tor by default on my network, and I…
SqliSniper is a robust Python tool designed to detect time-based blind SQL injections in HTTP request headers. It enhances the security assessment process by rapidly scanning and identifying potential vulnerabilities using multi-threaded, ensuring spee…
SqliSniper is a robust Python tool designed to detect time-based blind SQL injections in HTTP request headers. It enhances the security assessment process by rapidly scanning and identifying potential vulnerabilities using multi-threaded, ensuring spee…
A vulnerability was found in DeepFaceLab pretrained DF.wf.288res.384.92.72.22 and classified as problematic. This issue affects the function apply_xseg of the file main.py. The manipulation leads to deserialization. NOTE: This vulnerability only affect…
