Kerbit

Exploit chain in Pascom Cloud Phone System uncovered by security researchers at @KerbitSec portswigger.net/daily-swig/exp…

You're most welcome. We would like to note that the response and cooperation we received from @pascom_net have been exceptional. Kudos.

@jleyden We have sent you a DM with the answers.

@KerbitSec Looking into this for a @DailySwig story. Some Qs: How did you come across these vulns./ exploit chain in @pascom_net's systems? How many systems are vulnerable? Also any wider lessons on VoIp systems more generally?

Now blog post is out. Read how 3 bugs were chained to gain a pre auth RCE. kerbit.io/research/read/…

Critical vulnerabilities have been uncovered in the #VoIPmonitor software that could allow unauthenticated attackers to escalate their privileges to the administrator level and execute arbitrary commands. Read details: thehackernews.com/2022/03/critic… #infosec #cybersecurity

New blog post, Multiple vulnerabilities in Voipmonitor GUI kerbit.io/research/read/…