隠者 Inja Security
隠者 Inja Security
  • Home
  • ~$ whoami

Vulnerability Research

Vulnerability Research

Unbounded PBKDF2 Iterations Allow Pre-Auth Denial of Service in UrBackup

Introduction UrBackup is an open-source software that offers multiple features for backup and ransomware protection: UrBackup is an easy to setup Open Source client/server backup system, that through a combination of image and file backups accomplishes both data safety and a fast restoration time. According to GitHub and Shodan, there Read more

By Matheus Boschetti, 2 daysSeptember 2, 2026 ago
Vulnerability Research

CVE-2024-29320: SQL Injection in Wallos

Introduction An open-source personal subscription tracker, Wallos designed to empower people to manage their finances with ease. Wallos is written in PHP with a SQLite database, it has over 1.000 stars in GitHub and over 100.00 downloads for its Docker image. A quick search on Shodan reveals at least 66 Read more

By Matheus Boschetti, 2 yearsApril 4, 2024 ago
Vulnerability Research

CVE-2024-27613: Arbitrary File Manipulation in Numbas

Introduction Developed by Newcastle University’s School of Mathematics, Statistics, and Physics, Numbas is an open-source e-assessment/e-learning system. According to its website, Numbas is used in over 1.000 institutions worldwide and has been in use for over a decade. It is written using mainly JavaScript and Python with Django, with a Read more

By Matheus Boschetti, 2 yearsMarch 15, 2024 ago

Recent Posts

  • Unbounded PBKDF2 Iterations Allow Pre-Auth Denial of Service in UrBackup
  • About PetitPotam, NetExec, and False Positives
  • Trusted Tools, Untrusted Intent: Using Slack as a C2 Channel
  • CVE-2024-29320: SQL Injection in Wallos
  • CVE-2024-27613: Arbitrary File Manipulation in Numbas

Archive

  • September 2026
  • August 2026
  • July 2026
  • April 2024
  • March 2024
  • August 2023
  • July 2023
  • June 2023
  • January 2023
  • October 2022
  • July 2022
  • April 2022
  • February 2022

Categories

  • Binary Exploitation
  • Certification Review
  • Defense Evasion
  • Malware Development
  • Phishing
  • Red Team
  • Vulnerability Research
  • Windows
Hestia | Developed by ThemeIsle