Cve

Hi everyone, this time I am back with an exciting new. Few weeks ago I got my first CVE. …

A recursive DNS lookup occurs when a DNS server communicates with several other DNS servers to look up an IP address and return it to the client. Allowing recursive DNS queries against open DNS servers creates a security vulnerability as this configuration could allow attackers to perform DNS amplification attacks. While we…

This critical vulnerability impacts all versions of the Outlook desktop app on any Windows system. Outlook web app (OWA) and Microsoft 365 aren’t vulnerable since they do not support NTLM authentication. This vulnerability has been patched as of March 14th if you have the latest security fixes. This is a…

Technology Brief 📝 Elementor is a popular WordPress plugin that provides a drag-and-drop page builder interface, allowing users to design and customize their websites without any coding knowledge. It simplifies the process of creating and editing WordPress websites by providing a visual, intuitive, and user-friendly interface. Essential Addons for Elementor is an add-on…

One of the most interesting stuff in cybersecurity field is IoT, and one of the researchers in vsociety analyzed and exploited all TOTOLINK Router vulnerabilities. Following with the CVE-2021–42889, where the researcher will explain how to leak the Access Points information. Introduction A vulnerability discovered in TOTOLINK EX1200T model known as…

One of the most interesting stuff in cybersecurity field is IoT, and one of the researchers in vsociety analyzed and exploited all TOTOLINK Router vulnerabilities. Following with the CVE-2021–42887, where the researcher will explain bypassing the login bypass. Introduction A vulnerability discovered in TOTOLINK EX1200T model known as CVE-2021-42887 which lead…

One of the most interesting stuff in cybersecurity field is IoT, and one of the researchers in vsociety analyzed and exploited all TOTOLINK Router vulnerabilities. Starting with CVE-2021–42888 Introduction A vulnerability discovered in TOTOLINK EX1200T model known as CVE-2021-42888 which lead to Remote Command Injection, as a results anyone exploit this…

One of the most interesting stuff in cybersecurity field is IoT, and one of the researchers in vsociety analyzed and exploited all TOTOLINK Router vulnerabilities. Following with CVE-2021–42886, where the researcher will explain how to disclose information about the router such as username and password. Introduction A vulnerability discovered in TOTOLINK…

One of the most interesting stuff in cybersecurity field is IoT, and one of the researchers in vsociety analyzed and exploited all TOTOLINK Router vulnerabilities. Following with the CVE-2021–42890, where the researcher will explain how to achieve Remote command injection through HostTime parameter . Introduction A vulnerability discovered in TOTOLINK EX1200T…