CVE-2023-27310

Siemens RUGGEDCOM CROSSBOW privilege escalation | CVE-2023-27310

March 15, 2023

NAME__________Siemens RUGGEDCOM CROSSBOW privilege escalationPlatforms Affected:Siemens RUGGEDCOM CROSSBOW 5.1Risk Level:6.6Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Siemens RUGGEDCOM CROSSBOW could allow a remote authenticated attacker...

HackerOne Bug Bounty Disclosure: member-role-which-doesn-t-have-permission-to-send-message-can-send-by-executing-channel-commands-ramsakal

May 8, 2024

HackerOne Bug Bounty Disclosure: incorrect-type-conversion-in-interpreting-ipv-mapped-ipv-addresses-and-below-curl-results-in-indeterminate-ssrf-vulnerabilities-z-r-yu

May 8, 2024

HackerOne Bug Bounty Disclosure: improper-access-control-financial-fraud-allows-attacker-to-disclose-add-arbitrary-products-to-another-s-user-s-order-doomerhunter

May 8, 2024

HackerOne Bug Bounty Disclosure: a-member-with-editor-permissions-can-create-an-access-list-that-cannot-be-modified-viewed-or-deleted-mr-asg

May 8, 2024

Sliver C2 Detected – 168[.]138[.]179[.]33:31337

May 8, 2024

Siemens RUGGEDCOM CROSSBOW privilege escalation | CVE-2023-27310

You may have missed

HackerOne Bug Bounty Disclosure: member-role-which-doesn-t-have-permission-to-send-message-can-send-by-executing-channel-commands-ramsakal

HackerOne Bug Bounty Disclosure: incorrect-type-conversion-in-interpreting-ipv-mapped-ipv-addresses-and-below-curl-results-in-indeterminate-ssrf-vulnerabilities-z-r-yu

HackerOne Bug Bounty Disclosure: improper-access-control-financial-fraud-allows-attacker-to-disclose-add-arbitrary-products-to-another-s-user-s-order-doomerhunter

HackerOne Bug Bounty Disclosure: a-member-with-editor-permissions-can-create-an-access-list-that-cannot-be-modified-viewed-or-deleted-mr-asg

Sliver C2 Detected – 168[.]138[.]179[.]33:31337