RCE via MKP Packages in Checkmk - Remote Command Execution through the Web Interface
Abstract In this research conducted by me and Lucas Katashi, we identified two critical vulnerabilities in Checkmk Enterprise Edition 2.4.0p2 that allow
RESEARCH AREA
en
![Behind the Bug: Logic Error in Roundcube Session Parser [CVE-2025-49113]](/content/images/size/w720/hakaisecurity-io/wp-content/uploads/2025/06/caixeta.png)
Behind the Bug: Logic Error in Roundcube Session Parser [CVE-2025-49113]
Recently, a vulnerability was discovered in the Roundcube webmail service that allows an authenticated user to obtain remote execution of commands on the server.
Defend your home: Real-world Threat Modeling – Part 2 of 3
Introduction In the first blog post about threat modeling we focused our efforts on the theoretical basis, addressing the development and different methodologies. Now,
AI and Voice Deepfakes: How Did We Created One?
Download final.wav We live in an era where technology is advancing at an incredibly fast pace. Tools that were once exclusive to laboratories
Group Managed Service Accounts: A Solution Against Kerberoasting or an Incentive for Golden GMSA Attacks?
Introduction For information security professionals or system administrators, user account management is always challenging. When it comes to service accounts, the problem becomes even
The Dark Side of JWT: Exploiting Token Vulnerabilities
Many modern applications use JSON Web Tokens (JWTs) to authenticate and authorize users in their functionalities. In this article, we will explore vulnerabilities in
Save money brushing your teeth - unveiling the Threat Modeling - part 1 of 3
Threat modeling is a cyclic process to avoid future problems. Just like brushing your teeth, that prevents decay, tartar or dental calculus, threat modeling
Stealer Logs: An in-depth analysis of over half a billion stolen credentials
Key Findings * We analyzed over 590 million credentials from more than 20 million unique infected computers worldwide. * Brazil is one of the most affected
Malware that detects Wine and infects both Windows and Linux?
If you are a slightly above-average user – and you certainly are; otherwise, you wouldn't be reading this article =D – you'