TRAPA Security @TrapaSecurity

Advance Cybersecurity Awareness. trapa.tw Taiwan Joined August 2020

Tweets

8
Followers

517
Following

4
Likes

0

TRAPA Security @TrapaSecurity

2 years ago

Zyxel fixed multiple vulnerabilities reported by our research team on February 20th, including CVE-2023-6764, a WAN side Pre-Auth RCE in the IPSec VPN service. Update your Zyxel Firewall and AP ASAP. zyxel.com/global/en/supp…

0 8 26 4K 5

Download Image

TRAPA Security @TrapaSecurity

2 years ago

Zyxel fixed two Pre-Auth RCEs (CVE-2023-33009, CVE-2023-33010) reported by our research team. Like CVE-2023-28771, both vulnerabilities are exploitable from the WAN side. Update your Zyxel Firewall ASAP. also kudos to @starlabs_sg zyxel.com/global/en/supp…

1 8 41 6K 5

TRAPA Security @TrapaSecurity

2 years ago

Demo video out for Zyxel VPN Pre-Auth RCE (CVE-2023-28771) No extra config or web access needed, exploitable via WAN. More details will be released, patch your device ASAP. youtu.be/R68QJIRSwU0

2 24 37 9K 7

TRAPA Security @TrapaSecurity

2 years ago

We have reported a critical Pre-Auth RCE in Zyxel VPN Firewall (CVE-2023-28771) The device can be exploited as soon as it connects to the internet, without any additional configuration. Patch your Zyxel devices as soon as possible. thehackernews.com/2023/04/zyxel-…

2 47 96 88K 27

Trend Zero Day Initiative @thezdi

5 years ago

Confirmed! The team of @Jeffxx_Chao, @atdog_tw, @_L4ys, @0xddaa and @TrapaSecurity used a command injection bug to take over the #NETGEAR router and get root. They win $5,000 and 1 Master of Pwn point.

1 5 23 0 0

Download Gif

Trend Zero Day Initiative @thezdi

5 years ago

Confirmed! The @Jeffxx_Chao, @atdog_tw, @_L4ys, @0xddaa and @TrapaSecurity team combined an auth bypass and a command injection bug to get root on the Western Digital NAS. They win $20K and 2 point towards Master of Pwn.

0 9 30 0 1

Download Gif

Trend Zero Day Initiative @thezdi

5 years ago

The next attempt will see @Jeffxx_Chao, @atdog_tw, @_L4ys, @0xddaa and @TrapaSecurity target the Western Digital My Cloud Pro. They start at 1200 Eastern (UTC-4). It's the 1st NAS entry in #Pwn2Own history! #P2OTokyo