#SKshieldus: Korea's leading cybersecurity firm with 20+ yrs of tech expertise & a vast customer base. #1 in full-cycle services. Contact : 1800-6400
경기도 성남시 분당구 판교로227번길 23 (삼평동)
Joined April 2023
- Tweets279
- Following11
- Followers1K
- Likes38
EQST retweeted
Confirmed! Taejin Kim (@tae3), Junsu Yeo (@junactually), Sunmin Park (@sunminpark4503), Sungmin Son (@_ssm98), and Hoseok Lee of SKShieldus (@EQSTLab) of 299 exploited a hardcoded credential (CWE-798) to achieve code execution via CWE-494 on the Grizzl-E Smart 40A, earning $40,000 USD and 4 Master of Pwn points. #Pwn2Own #P2OAuto
EQST retweeted
Don’t blindly run scripts
I found fake CVE-2024-5932 RCE PoCs on GitHub. One Python script contained malicious code that clones a repo, executes a shell script, and then cleans up. The shell script downloads and sets up xmrig to run at startup using cron and starts crypto mining
EQST retweeted
🔥🔥🔥Deep Dive from @EQSTLab: PoC and analysis for PHP Object Injection vulnerability in GiveWP (CVE-2024-5932)
🔗Learn more here: github.com/EQSTSeminar/CVE-2…
🚨Alert🚨CVE-2024-5932 (CVSS 10): Critical RCE Vulnerability Impacts 100k+ WordPress Sites!
📊 173K+ Services are found on hunter.how yearly
🔗Hunter Link: hunter.how/list?searchValue=…
👇Search Query
HUNTER: web.body="/wp-content/plugins/give"
📰Refer:securityonline.info/cve-2024…
#WordPress #RCE #hunterhow #infosec #infosecurity #OSINT #Vulnerability
