Category Archives: CVE

[CVE-2021-20532] IBM Spectrum Protect Backup-Archive Client & IBM Spectrum Protect for Virtual Environments: Local Privilege Escalation

I have always been fascinated by fat client applications and I believe this goes back almost 20 years ago to when I was a teenager with a computer and a passion to learn, and I still am, passionate to learn ­čÖé My start was with HTML and Assembly, an odd combination I admit, but that […]

[CVE-2019-18635] Moolticute: a NULL-pointer dereference

I started ticking differently after taking on the Corelan Advanced Win32 Exploit Development training last month at BruCON 0x0B. I am very delighted and excited about that, and looking forward to putting the new experience to more practical use. A NULL-pointer dereference According to Wikipedia┬╣: The program can potentially dereference a null pointer, thereby raising […]

[CVE-2019-12967] Moolticute: Improper Access Control

Mooltipass is a hardware-based password manager that is simple to use and provides an added layer of security (say no more to passwords-reuse). The passwords that are stored on the device are encrypted with AES-256, where the encryption key is stored on an external card, that works as a 2FA-token. The key on the card […]