iSpeech
It chained the CVE-2019-11510 and CVE-2019-11539 to a preAuth RCE! We also demonstrate how to leverage the logon script feature to compromise back all the connected VPN clients!
More details can be found from the slides "Infiltrating Corporate Intranet Like NSA - Pre-auth RCE on Leading SSL VPNs" by Orange Tsai & Meh Chang
source
Hackers Exploiting WP-Automatic Plugin Bug to Create… April 26, 2024 Apr 26, 2024NewsroomThreat Intelligence / Cyber Attack Threat actors are… (9)
Red Hat Security Advisory 2024-2585-03 – Torchsec May 2, 2024 The following advisory data is extracted from:https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_2585.jsonRed Hat officially shut… (8)
China-Linked Hackers Suspected in ArcaneDoor… May 6, 2024 May 06, 2024NewsroomNetwork Security / Malware The recently uncovered cyber… (8)Red Hat Security Advisory 2024-2049-03 – Torchsec May 4, 2024 The following advisory data is extracted from:https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_2049.jsonRed Hat officially shut… (8)
0 Responses to Pulse Secure SSL VPN PreAuth Remote Code Execution with Compromising All the Connected VPN Clients