We are the VNG Security Response Center. To report security vulnerabilities or abuse in VNG products, visit https://teapawt.net/t.co/R99U661uO4.
Vietnam
Joined February 2022
- Tweets5
- Following0
- Followers629
- Likes2
We've successfully developed a new PoC exploit for CVE-2024-3400 PAN-OS Command Injection without the Telemetry enablement requirement. Please patch it ASAP 🌐
#CVE-2024-3400
Oops! V.A.R check: Bug collision! Hopefully we'll have better luck next year. Kudos to our guys @ducnt_ @tuo4n8 @xchym @n3mohb also thanks to ZDI with awesome event.
Collision – The VNG Security Response Center was able to execute a 2-bug chain against the QNAP TS-464. However, the exploit they used was previously known. They still earn $5,000 and 1 Master of Pwn point. #Pwn2Own
Our team has successfully reproduced PoC for CVE-2023-2825 GitLab Arbitrary file read via uploads path traversal. Only effect to GitLab 16.0.0 version. Patch it ASAP 😁😉.
We're really happy to share our improvements and some experiments for the CookieMonster tool.
Weaponizing Monster for Cookies Attacks: vsrc.vng.com.vn/blog/weaponi…
Also include burp-extender plugin for burp suite. Hope you guys enjoy it.
~Cheers,
VSRC
Ladies and Gentlemen: The new Dojo opens to welcome black belt Hackers to fight for honor!!! #VSRC
Liferay revisited: A tale of 20k$. vsrc.vng.com.vn/blog/liferay…
Hope you guys enjoy it and stay tuned for more technique writeups / blogs / exploits ... will come.
~Cheers,
VSRC
