Exploiting Kaseya Unitrends Backup Appliance – Part 1

Fri, 20 May 2022 14:50:25 +0000

In 2021 I discovered several high and critical vulnerabilities in the Kaseya Unitrends backup appliance. This research was conducted and published as part of my day job. Part one details a chain of vulnerabilities by leveraging an insecure PostgreSQL database to ultimately gain shell access to the remote server. Visit https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1 for the full write-up. Stay tuned for part two.

Critical Vulnerabilities Discovered in MoFi Routers

Wed, 02 Sep 2020 18:08:08 +0000

I discovered several vulnerabilities in the MoFi4500 LTE router. Several vulnerabilities have not been patched, including an unauthenticated remote command injection and several undocumented backdoors. The full write-up can be viewed at https://cyberonesecurity.com/offensive-security/critical-vulnerabilities-discovered-in-mofi-routers/.

Media Coverage

Follow the conversation on Twitter