隠者 Inja Security
隠者 Inja Security
  • Home
  • ~$ whoami

Vulnerability Research

Vulnerability Research

Stack-based Buffer Overflow in Bareos

Introduction Bareos is an open-source enterprise backup software solution: Bareos provides centralized backup and recovery for Linux, Windows, macOS and FreeBSD systems. The same platform can protect physical servers, virtual machines, databases and application data across mixed IT environments. Bareos provides centralized backup and recovery for Linux, Windows, macOS, and Read more

By Matheus Boschetti, 19 hoursSeptember 19, 2026 ago
Vulnerability Research

Unbounded PBKDF2 Iterations Allow Pre-Auth Denial of Service in UrBackup

Introduction UrBackup is an open-source software that offers multiple features for backup and ransomware protection: UrBackup is an easy to setup Open Source client/server backup system, that through a combination of image and file backups accomplishes both data safety and a fast restoration time. According to GitHub and Shodan, there Read more

By Matheus Boschetti, 2 weeksSeptember 2, 2026 ago
Vulnerability Research

CVE-2024-29320: SQL Injection in Wallos

Introduction An open-source personal subscription tracker, Wallos designed to empower people to manage their finances with ease. Wallos is written in PHP with a SQLite database, it has over 1.000 stars in GitHub and over 100.00 downloads for its Docker image. A quick search on Shodan reveals at least 66 Read more

By Matheus Boschetti, 2 yearsApril 4, 2024 ago
Vulnerability Research

CVE-2024-27613: Arbitrary File Manipulation in Numbas

Introduction Developed by Newcastle University’s School of Mathematics, Statistics, and Physics, Numbas is an open-source e-assessment/e-learning system. According to its website, Numbas is used in over 1.000 institutions worldwide and has been in use for over a decade. It is written using mainly JavaScript and Python with Django, with a Read more

By Matheus Boschetti, 3 yearsMarch 15, 2024 ago
Recent Posts
  • Stack-based Buffer Overflow in Bareos
  • Unbounded PBKDF2 Iterations Allow Pre-Auth Denial of Service in UrBackup
  • About PetitPotam, NetExec, and False Positives
  • Trusted Tools, Untrusted Intent: Using Slack as a C2 Channel
  • CVE-2024-29320: SQL Injection in Wallos
Archive
  • September 2026
  • August 2026
  • July 2026
  • April 2024
  • March 2024
  • August 2023
  • July 2023
  • June 2023
  • January 2023
  • October 2022
  • July 2022
  • April 2022
  • February 2022
Categories
  • Binary Exploitation
  • Certification Review
  • Defense Evasion
  • Malware Development
  • Phishing
  • Red Team
  • Vulnerability Research
  • Windows
Hestia | Developed by ThemeIsle