Vulnerability

SeleniumGreed: The RCE That Was Always There

TL;DR

Every Selenium Grid instance deployed with Firefox nodes is vulnerable to unauthenticated remote code execution. Not “was” - is. The …

Vinchin Backup & Recovery: CVE-2024-22899 to CVE-2024-22903

Table of Contents:

• Default SSH Root Credentials (CVE-2024-22902)
• Hardcoded Database Credentials and Configuration Flaw (CVE-2024-22901) …

CVE-2023-20273: IOS XE root priv escalation

On the 28th of October the exploit for CVE-2023-20198 was released by SECUINFRA after being captured on one of their honeypots.

While it enables full …

CVE-2023-45498: RCE in VinChin Backup

Update 2023-11-03: The issue has been fixed in version 7.2.

Vulnerability research

At LeakIX we analyse new vulnerabilities discovered by other …