Kruxinator

Local #PrivilegeEscalation in Quanos SCHEMA ST4. Vulnerabilities in the update service allow low-privileged users to execute code or overwrite files. ➡️ On‑premise versions affected ➡️ Workaround available – disable update service ➡️ SaaS not affected 👉 r.sec-consult.com/quanos

🚨 New advisory by @Kruxinator & Christian Hager: Local privilege escalation in @genetec 's #RabbitMQ deployment (#CVE-2026-25112) Writable dir + missing binary + SeImpersonatePrivilege = SYSTEM via Rotten Potato 🥔 Patch available. Apply now! 🔗 r.sec-consult.com/genetec #privesc

@SawyerMerritt ts.la/johannes714700

I’m now maxed out on referrals for the rest of the year. Time to help you guys get some Tesla referrals! Drop your referral links below and I’ll send people asking for a code to the comment section to select one. Won’t be able to help everyone, but will do what I can. For those curious, here's what people ordered using my code: • Model Ys: 6 • Cybertrucks: 3 • Model 3: 1

Hands-Free Lockpicking: Critical Vulnerabilities in dormakaba's Physical Access Control System packetstorm.news/news/view/40219 #news

🚨 Critical vulns in dormakaba exos 9300! We’re sharing 20 CVEs in dormakaba’s physical access control system: doors can be opened without authentication with network access. Kudos to @dormakaba for excellent handling & patches. 👉 r.sec-consult.com/dormakaba #ResponsibleDisclosure

@SawyerMerritt @anthslife Germany changed to HW4 in may 2024. I got a HW3 built in feb 2024.

Australians are jumping from Autopilot straight to FSD V13. Their minds are gonna be blown!

@SawyerMerritt Wondering why I got an HW3 Model Y built in 2024.

NEWS: Tesla says it wants to get FSD (Unsupervised) finished on HW4 first before figuring out what to do with HW3 vehicles; The focus is first to get Unsupervised out.

🚨 Security Advisory: Critical vulnerabilities found in @Rittal IoT Interface & CMC III Processing Unit. Predictable session IDs, improper firmware update process allows #RCE. Patch available! Full details: r.sec-consult.com/rittaliot #CyberSecurity #IoT #VulnerabilityAlert @Kruxinator

The first version of an SMTP smuggling scanner is now available at github.com/The-Login/SMTP…. More tools to come! Feedback is much appreciated!

Just dropped a blog post about SMTP smuggling, a novel technique for e-mail spoofing! r.sec-consult.com/smtp

He did it again... @timolongin shows you how to poison the DNS name resolution of an entire country r.sec-consult.com/poison #infosec #hackerlife

@ReneFreingruber Gz :)

Got my OSED exam confirmation email today :) That was quite a ride, although I thought I already had a good amount of prior expierence, I still found the course/exam challening. The selection of extra mile challenges was really good, so I can recommend the course.

The DNS Analyzer extension is now officially available in the BApp Store! For more info on finding DNS vulnerabilities in web applications via Burp Suite, check out: sec-consult.com/blog/detail/dn…

msldap got a public update v0.4.7(pip+github) Added retrieval of gmsa user passwords and security descriptors Did some fixes and other features I forgot about since the last release Thx for @porchetta_ind supporters! github.com/skelsec/msldap

Electronic price tags can be manipulated to display arbitrary values. My team's research at #hardwear_io Slides: hardwear.io/usa-2022/prese…

Been working on some new features for PowerView, it's still a work in progress but just pushed a few, cert auth for LDAPS and StartTLS for Get-DomainObject, Get-DomainUser, Get-DomainComputer and Set-DomainObject 1/2 github.com/0xe7/PowerSplo…

And another one: Stacking of critical vulnerabilities allows unauthenticated attackers to hijack video streams in Poly's Eagle Eye Director II r.sec-consult.com/polyeagle Patch immediately! @PolyCompany #hybridworking #homeoffice #infosec @Kruxinator

Multiple #PolyStudio devices are prone to an authenticated OS Command Injection vulnerability ⚠️​r.sec-consult.com/polyx 🛡️The commands are executed with root privileges. @PolyCompany #hybridworking #homeoffice @kruxinator

A Different Approach to Printer Pentesting r.sec-consult.com/konica Learn how to escape the sandbox #konica #pentesting #infosec

Saving you 10 mins of googling. An .scr is just an .exe renamed: copy C:\Windows\system32\calc.exe Desktop\calc.scr rundll32.exe desk.cpl,InstallScreenSaver Desktop\calc.scr