Assetnote 13

• High Signal Detection and Exploitation of Ivanti's Pulse Connect Secure Auth Bypass & RCE Jan 18, 2024
• Citrix Bleed: Leaking Session Tokens with CVE-2023-4966 Oct 23, 2023
• RCE in Progress WS_FTP Ad Hoc via IIS HTTP Modules (CVE-2023-40044) Oct 3, 2023
• Leaking File Contents with a Blind File Oracle in Flarum Aug 27, 2023
• Advisory: Flarum LFI - CVE-2023-40033 Aug 27, 2023
• Finding and Exploiting Citrix NetScaler Buffer Overflow (CVE-2023-3519) (Part 3) Aug 8, 2023
• Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway (Part 2) Jul 24, 2023
• Chaining our way to Pre-Auth RCE in Metabase (CVE-2023-38646) Jul 22, 2023
• Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway Jul 21, 2023
• Advisory: Metabase Pre-Auth RCE (CVE-2023-38646) Jul 21, 2023
• Encrypted Doesn't Mean Authenticated: ShareFile RCE (CVE-2023-24489) Jul 4, 2023
• Advisory: ShareFile Pre-Auth RCE (CVE-2023-24489) Jul 3, 2023
• Reversing Citrix Gateway for XSS Jun 29, 2023