Cyber Labs |Research, Vulnerability Disclosures & More| LRQA

How Circle Banned Tornado Cash Users

28 Sep 2022

Tornado Cash is an open-source, decentralised cryptocurrency mixer. Using zero-knowledge proofs, this mixes identifiable funds with others, obscuring...

CVE-2021-44076: Cross-Site Scripting (XSS) in CrushFTP

14 Sep 2022

During the course of our work, Nettitude have identified a stored Cross-Site Scripting (XSS) vulnerability within the CrushFTP...

Network Relaying Abuse in a Windows Domain

31 Aug 2022

Network relaying abuse in the context of a legacy Windows authentication protocol is by no means a novel...

CVE-2022-30211: Windows L2TP VPN Memory Leak and Use after...

17 Aug 2022

Nettitude discovered a Memory Leak turned Use after Free (UaF) bug in the Microsoft implementation of the L2TP...

Offensive Security: From OSCE to OSCE3

8 Aug 2022

OSCE3 (Offensive Security Certified Expert 3) is a certification from Offensive Security which has replaced the (now retired)...

Logparser Query Files

7 Aug 2022

We have created a set of queries for sysmon log files that will process each of the Event...

CVE-2022-24004 & CVE-2022-24127: Vanderbilt REDCap - Stored Cross Site...

15 Jun 2022

Nettitude identified two stored Cross Site Scripting (XSS) vulnerabilities within Vanderbilt REDCap. These have been assigned CVE-2022-24004...

How we found a second critical Microsoft vpn vulnerability

11 May 2022

Our latest blog delves into how we found a second critical Microsoft VPN vulnerability, and exactly how you...

CVE-2022-23270 - Windows Server VPN Remote Kernel Use After...

11 May 2022

Following yesterday’s Microsoft VPN vulnerability, today we’re presenting CVE-2022-23270, which is another windows VPN Use after Free (UaF)...

CVE-2022-21972: Windows Server VPN Remote Kernel Use After Free...

10 May 2022

CVE-2022-21972 is a Windows VPN Use after Free (UaF) vulnerability that was discovered through reverse engineering the raspptp.sys...

Tools

Tutorials

Blogs

Filter by

How Circle Banned Tornado Cash Users

CVE-2021-44076: Cross-Site Scripting (XSS) in CrushFTP

Network Relaying Abuse in a Windows Domain

CVE-2022-30211: Windows L2TP VPN Memory Leak and Use after...

Offensive Security: From OSCE to OSCE3

Logparser Query Files

CVE-2022-24004 & CVE-2022-24127: Vanderbilt REDCap - Stored Cross Site...

How we found a second critical Microsoft vpn vulnerability

CVE-2022-23270 - Windows Server VPN Remote Kernel Use After...

CVE-2022-21972: Windows Server VPN Remote Kernel Use After Free...

Error

No results found