⟵ Advisories

[MZ-22-01] Meeting Owl

ID: MZ-22-01

Release: May 31, 2022

Credits: Christoph Wolff, Joel Gunzenreiner, Katharina Männle, Max Moser, Pascal Zenker & Thorsten Schröder

The full disclosure report can be found here, an overview of the vulnerabilities is given in our blog post.

Other News

PLAYGROUND

Tutorial: How we learned to love the doc(umentation)

October 14, 2024

Just read documentation to get RCE?! Our colleague Theresa designed a tutorial guiding you through an OpenVPN exploit scenario — for you to try at home!

DISCLOSURE

Beyond the @ Symbol: Exploiting the Flexibility of Email Addresses For Offensive Purposes

June 7, 2024

We exploited an unauthenticated command injection within the spam filter appliance MailCleaner that can be triggered through a malicious email address.