How I Discovered Thousands of Open Databases on AWS
My journey on finding and reporting databases with sensitive data about Fortune-500 companies, Hospitals, Crypto platforms, Startups during due diligence, and more. Table Of Contents OverviewBackgroundMy HypothesisScanningBI & Automation: From thousands to hundredsExamples of data I foundConclusionOverviewIt is easy to find misconfigured assets on cloud services, by scanning the CIDR blocks (IP ra
Zoom Zero Day: 4+ Million Webcams & maybe an RCE? Just get them to visit your website!
CVE-NumbersDOS Vulnerability — Fixed in Client version 4.4.2 — CVE-2019–13449Information Disclosure (Webcam) — Unfixed —CVE-2019–13450UPDATE — July 9th (am)As far as I can tell this vulnerability also impacts Ringcentral. Ringcentral for their web conference system is a white labeled Zoom system. UPDATE — July 9th (pm)According to Zoom, they will have a fix shipped by midnight tonight pacific time
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
処理を実行中です
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
