Security

Exploitation Protections From Old To Bleeding Edge pt 1

Bookstack CVE-2020–5256: RCE Through File Upload

Security Issues on Knowage SpagoBI

Researching the platform, me and my coworkers, Edward Amaral and Luca Ottoni, security researchers from STOLabs we have found some security issues on SpagoBI from…

Security Issues on Samsung Syncthru Web Service

Researching the platform, me, Edward Amaral, a security researchers from Stone Payments found some security issues on the Printing application from samsung…

Security Issues on 3cx Web Service

I’m Edward Toledano, a security researcher of STOLabs, me and my coworkers, Ricardo Fajin, Daniel Chactoura, Lucas Carmo, Kelvin Clark, Found some issues on the famous pabx 3cx .

Appdynamics authenticated SQL Injection

Researching the platform, Today we will show you guys, a way to dump some information from appdynamics’ database.

Security Issues on Eramba

Researching the platform, me, Edward Amaral and my coworkers Kelvin Clark and Lucas Carmo, security researchers from Stone Payments found some security issues on the IT…

Path traversal in 3cx.

We constantly choose some well known apps to take a closer look here in the lab. Besides the learning factor we take joy in attacking and observing different plataforms. 3CX was the target this time.

PhishingPlace!! Phishing with a facebook help.

As most of us that works with pentesting and security assessment know doing a…

Security Issues on Ajenti.

Researching the platform, me, Edward Amaral and my coworker Daniel Chactoura, security researchers from Stone Payments found some security issues on the Admin panel by Ajenti.