Frycos
@frycos.bsky.social
Private account! Red teamer @codewhitesec. @frycos@infosec.exchange @frycos@X
Oh no, it's a variant of CVE-2024-29974...I accidentally found that a similar vuln affected Zyxel NWA50AX (Pro) and tested against devices (obviously) lacking the latest patches. This CVE was never publicly related to NWA50AX, though. Well, nice nday exercise then.
June 16, 2025 at 9:34 PM
Oh no, it's a variant of CVE-2024-29974...I accidentally found that a similar vuln affected Zyxel NWA50AX (Pro) and tested against devices (obviously) lacking the latest patches. This CVE was never publicly related to NWA50AX, though. Well, nice nday exercise then.
That sums up my week's vacation pretty well. And I have to say, I like it.
April 16, 2025 at 8:46 PM
That sums up my week's vacation pretty well. And I have to say, I like it.
This was a pretty cool online course by @voidstarsec I can recommend.
March 30, 2025 at 8:36 AM
This was a pretty cool online course by @voidstarsec I can recommend.
First blog post draft for 2025 queued for release. Waiting for patches then…
February 5, 2025 at 10:52 PM
First blog post draft for 2025 queued for release. Waiting for patches then…
Most of you know about Telerik or DevExpress but ever heard of Syncfusion as another big global player? I found some interesting vulnerabilities in it, fixed in version v27.1.55. Unfortunately, Syncfusion still tries to understand CVE assignments 😅
December 2, 2024 at 8:46 AM
Most of you know about Telerik or DevExpress but ever heard of Syncfusion as another big global player? I found some interesting vulnerabilities in it, fixed in version v27.1.55. Unfortunately, Syncfusion still tries to understand CVE assignments 😅
My view at home a few minutes ago towards the Vorarlberg Alps
November 1, 2024 at 10:49 AM
My view at home a few minutes ago towards the Vorarlberg Alps