Obtaining unauthenticated remote root access on RUCKUS IoT Controller via hardcoded SSH credentials and Docker socket abuse

RUCKUS Network Director Hardcoded SSH keys and PostgreSQL Credentials

FreePBX command injection, XSS and local privilege escalation chain

Windows Printers abuse for Command and Control

No story can start without a famous Arnold Schwarzenegger quote “None of us can make it alone”. Especially when you are in elementary school and you don’t have money to buy a computer. Fortunately,...