News

• 02/11/2020
  Today we released our new blog. The first post describes analysis and exploitation of a vulnerability in Apache Tomcat.
• 21/10/2020
  New advisory released: Arbitrary File Disclosure and Server-Side Request Forgery in BigBlueButton.
• 19/10/2020
  New advisory released: FRITZ!Box DNS Rebinding Protection Bypass.
• 08/10/2020
  New advisory released: Denial of Service in D-Link DSR-250N.
• 02/09/2020
  New advisory released: Inconsistent Behavior of Go's CGI and FastCGI Transport May Lead to Cross-Site Scripting.

Advisories

• rt-sa-2020-005
  Arbitrary File Disclosure and Server-Side Request Forgery in BigBlueButton
• rt-sa-2020-004
  Inconsistent Behavior of Go's CGI and FastCGI Transport May Lead to Cross-Site Scripting
• rt-sa-2020-003
  FRITZ!Box DNS Rebinding Protection Bypass
• rt-sa-2020-002
  Denial of Service in D-Link DSR-250N
• rt-sa-2020-001
  Credential Disclosure in WatchGuard Fireware AD Helper Component