corpus.blog
41554 blogs · [ { "id": "01a07df4-8001-71d8-a49c-3a1ca882d3b4", "title": "Security misconfiguration in IKEA DIRIGERA smart hub web server exposes large parts of the root filesystem (GCVE-2342-2026-1)", "url": "https://www.pentagrid.ch/de/blog/ikea-dirigera-security-misconfiguration-web-server-exposes-root-filesystem/", "published_at": "2026-06-17T13:42:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cb62542b8", "title": "Security misconfiguration in IKEA DIRIGERA smart hub web server exposes large parts of the root filesystem (GCVE-2342-2026-1)", "url": "https://www.pentagrid.ch/en/blog/ikea-dirigera-security-misconfiguration-web-server-exposes-root-filesystem/", "published_at": "2026-06-17T13:42:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1ca8bb531c", "title": "Parsing modern ASP.NET Core Identity password hashes to Hashcat", "url": "https://www.pentagrid.ch/de/blog/parsing-modern-aspnet-core-identity-password-hashes-to-hashcat/", "published_at": "2026-06-03T09:23:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cb69d3a80", "title": "Parsing modern ASP.NET Core Identity password hashes to Hashcat", "url": "https://www.pentagrid.ch/en/blog/parsing-modern-aspnet-core-identity-password-hashes-to-hashcat/", "published_at": "2026-06-03T09:23:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1ca8ef8403", "title": "ISO 20022, Pain001 and payment of your salary", "url": "https://www.pentagrid.ch/de/blog/pain001-interfaces-and-payment-of-your-salary/", "published_at": "2025-11-21T13:30:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cb6d01527", "title": "ISO 20022, Pain001 and payment of your salary", "url": "https://www.pentagrid.ch/en/blog/pain001-interfaces-and-payment-of-your-salary/", "published_at": "2025-11-21T13:30:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1ca9cf01b8", "title": "An excursion into Airlock WAF ruleset testing", "url": "https://www.pentagrid.ch/de/blog/airlock-web-application-firewall-ruleset-testing-and-waf-bypasses/", "published_at": "2024-12-11T12:00:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cb719c380", "title": "An excursion into Airlock WAF ruleset testing", "url": "https://www.pentagrid.ch/en/blog/airlock-web-application-firewall-ruleset-testing-and-waf-bypasses/", "published_at": "2024-12-11T12:00:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1caa9535cb", "title": "EAN-13- und TOTP-Hackvertor-Tags für Penetrationstests von Webanwendungen mit Burp", "url": "https://www.pentagrid.ch/de/blog/hackervertor-ean13-und-totp-tags-fuer-penetrationstests-von-webanwendungen-mit-burp/", "published_at": "2024-12-06T08:42:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cb78c392e", "title": "Hackvertor EAN-13 and TOTP tags for web-application penetration testing with Burp", "url": "https://www.pentagrid.ch/en/blog/hackervertor-ean13-and-totp-tags-for-web-application-penetration-testing-with-burp/", "published_at": "2024-12-06T08:42:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cab7e6252", "title": "How to prevent domain verification bypasses of your server certificates using CAA and account URI binding and how to monitor problems?", "url": "https://www.pentagrid.ch/de/blog/domain-verification-bypass-prevention-caa-accounturi/", "published_at": "2024-06-10T10:23:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cb861764b", "title": "How to prevent domain verification bypasses of your server certificates using CAA and account URI binding and how to monitor problems?", "url": "https://www.pentagrid.ch/en/blog/domain-verification-bypass-prevention-caa-accounturi/", "published_at": "2024-06-10T10:23:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cac28c88a", "title": "Kiosk-Modus-Bypass bei Hotel-Check-in-Terminal mit Ariane Allegro Scenario Player", "url": "https://www.pentagrid.ch/de/blog/ariane-allegro-hotel-check-in-terminal-kios-escape/", "published_at": "2024-06-05T07:42:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cb927b80e", "title": "Kiosk mode bypass for an Ariane Allegro Scenario Player based hotel check-in terminal", "url": "https://www.pentagrid.ch/en/blog/ariane-allegro-hotel-check-in-terminal-kios-escape/", "published_at": "2024-06-05T07:42:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1caca010e8", "title": "Preisgabe von Tastenschloss-Codes bei Check-in-Terminal von IBIS-Hotel", "url": "https://www.pentagrid.ch/de/blog/preisgabe-tastenschloss-codes-check-in-terminal-ibis-hotel/", "published_at": "2024-04-02T10:23:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cb93e8697", "title": "IBIS hotel check-in terminal keypad-code leakage", "url": "https://www.pentagrid.ch/en/blog/ibis-hotel-check-in-terminal-keypad-code-leakage/", "published_at": "2024-04-02T10:23:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cad789267", "title": "SQL-Injektion in Hafenverwaltung YABOOK erlaubt Umgehung der Authentisierung", "url": "https://www.pentagrid.ch/de/blog/sql-injection-in-hafenverwaltung-yabook/", "published_at": "2024-03-12T10:42:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cb9dccb83", "title": "SQL injection in YABOOK port administration allows authentication bypass", "url": "https://www.pentagrid.ch/en/blog/sql-injection-in-port-administration-software-yabook/", "published_at": "2024-03-12T10:42:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cadbe235e", "title": "Multiple vulnerabilities in Lantronix EDS-MD IoT gateway for medical devices", "url": "https://www.pentagrid.ch/de/blog/multiple-vulnerabilties-in-lantronix-eds-md-iot-gateway/", "published_at": "2024-01-08T09:23:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cbad693f3", "title": "Multiple vulnerabilities in Lantronix EDS-MD IoT gateway for medical devices", "url": "https://www.pentagrid.ch/en/blog/multiple-vulnerabilties-in-lantronix-eds-md-iot-gateway/", "published_at": "2024-01-08T09:23:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cade6a588", "title": "Remote code execution and elevation of local privileges in Mitel Unify OpenStage and OpenScape VoIP phones", "url": "https://www.pentagrid.ch/de/blog/rce-and-local-root-in-openstage-and-openscape-phones/", "published_at": "2023-12-08T05:42:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cbbd3eca1", "title": "Remote code execution and elevation of local privileges in Mitel Unify OpenStage and OpenScape VoIP phones", "url": "https://www.pentagrid.ch/en/blog/rce-and-local-root-in-openstage-and-openscape-phones/", "published_at": "2023-12-08T05:42:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1caed9e237", "title": "Nothing new, still broken, insecure by default since then: Python's e-mail libraries and certificate verification", "url": "https://www.pentagrid.ch/de/blog/python-mail-libraries-certificate-verification/", "published_at": "2023-11-14T09:23:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cbc55ab46", "title": "Nothing new, still broken, insecure by default since then: Python's e-mail libraries and certificate verification", "url": "https://www.pentagrid.ch/en/blog/python-mail-libraries-certificate-verification/", "published_at": "2023-11-14T09:23:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cafbb17ca", "title": "Persistent cross-site scripting vulnerabilities in Liferay Portal", "url": "https://www.pentagrid.ch/de/blog/stored-cross-site-scripting-vulnerabilities-in-liferay-portal/", "published_at": "2023-10-17T06:00:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cbcd65aef", "title": "Persistent cross-site scripting vulnerabilities in Liferay Portal", "url": "https://www.pentagrid.ch/en/blog/stored-cross-site-scripting-vulnerabilities-in-liferay-portal/", "published_at": "2023-10-17T06:00:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cb0088503", "title": "Archive Pwn tool released", "url": "https://www.pentagrid.ch/de/blog/archive-pwn-tool-release/", "published_at": "2023-10-03T15:42:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cbd165adf", "title": "Archive Pwn tool released", "url": "https://www.pentagrid.ch/en/blog/archive-pwn-tool-release/", "published_at": "2023-10-03T15:42:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cb03e8609", "title": "Wind River VxWorks tarExtract directory traversal vulnerability (CVE-2023-38346)", "url": "https://www.pentagrid.ch/de/blog/wind-river-vxworks-tarextract-directory-traversal-vulnerability/", "published_at": "2023-09-19T06:00:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cbda18192", "title": "Wind River VxWorks tarExtract directory traversal vulnerability (CVE-2023-38346)", "url": "https://www.pentagrid.ch/en/blog/wind-river-vxworks-tarextract-directory-traversal-vulnerability/", "published_at": "2023-09-19T06:00:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cb0eba5b0", "title": "IT-Sicherheit beim elektronischen Gesundheitsdossier im Fürstentum Liechtenstein", "url": "https://www.pentagrid.ch/de/blog/it-sicherheit-beim-elektronischen-gesundheitsdossier-im-fuerstentum-liechtenstein/", "published_at": "2023-09-14T20:30:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cbe9761c3", "title": "IT-Sicherheit beim elektronischen Gesundheitsdossier im Fürstentum Liechtenstein", "url": "https://www.pentagrid.ch/en/blog/it-sicherheit-beim-elektronischen-gesundheitsdossier-im-fuerstentum-liechtenstein/", "published_at": "2023-09-14T20:30:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cb10ae867", "title": "Busybox cpio directory traversal vulnerability (CVE-2023-39810)", "url": "https://www.pentagrid.ch/de/blog/busybox-cpio-directory-traversal-vulnerability/", "published_at": "2023-08-28T09:00:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cbf209832", "title": "Busybox cpio directory traversal vulnerability (CVE-2023-39810)", "url": "https://www.pentagrid.ch/en/blog/busybox-cpio-directory-traversal-vulnerability/", "published_at": "2023-08-28T09:00:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cb19b1741", "title": "Multiple vulnerabilities in Aten PE8108 power distribution unit", "url": "https://www.pentagrid.ch/de/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/", "published_at": "2023-04-03T09:42:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cbf423b18", "title": "Multiple vulnerabilities in Aten PE8108 power distribution unit", "url": "https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-aten-PE8108-power-distribution-unit/", "published_at": "2023-04-03T09:42:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cb1c64fc6", "title": "Credit card statement disclosure vulnerability in Viseca's eXpense portal", "url": "https://www.pentagrid.ch/de/blog/viseca-expense-credit-card-statement-disclosure/", "published_at": "2023-03-20T03:23:42+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cbfd9f6fc", "title": "Credit card statement disclosure vulnerability in Viseca's eXpense portal", "url": "https://www.pentagrid.ch/en/blog/viseca-expense-credit-card-statement-disclosure/", "published_at": "2023-03-20T03:23:42+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cb24bdd7a", "title": "Ein Open-Source-SMS-Gateway für Pentest-Projekte", "url": "https://www.pentagrid.ch/de/blog/open-source-sms-gateway-for-pentest-projects/", "published_at": "2022-12-06T08:23:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cc02285c2", "title": "An open source SMS gateway for pentest projects", "url": "https://www.pentagrid.ch/en/blog/open-source-sms-gateway-for-pentest-projects/", "published_at": "2022-12-06T08:23:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cb2ce81fe", "title": "Mehrere Verwundbarkeiten in SEPPmail 11.1.10", "url": "https://www.pentagrid.ch/de/blog/multiple-vulnerabilities-in-seppmail/", "published_at": "2022-11-15T09:00:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cc0ab1d8e", "title": "Multiple vulnerabilities in SEPPmail 11.1.10", "url": "https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-seppmail/", "published_at": "2022-11-15T09:00:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cb3b08f92", "title": "Reflected cross-site scripting vulnerability in Crealogix EBICS implementation (CVE-2022-3442)", "url": "https://www.pentagrid.ch/de/blog/reflected-xss-vulnerability-in-crealogix-ebics-implementation/", "published_at": "2022-10-10T09:00:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cc1512a50", "title": "Reflected cross-site scripting vulnerability in Crealogix EBICS implementation (CVE-2022-3442)", "url": "https://www.pentagrid.ch/en/blog/reflected-xss-vulnerability-in-crealogix-ebics-implementation/", "published_at": "2022-10-10T09:00:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cb447ac22", "title": "Improving web application security testing with the Pentagrid Scan Controller", "url": "https://www.pentagrid.ch/de/blog/improving-web-application-security-testing-with-pentagrid-scan-controller/", "published_at": "2022-08-23T12:42:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cc1a26457", "title": "Improving web application security testing with the Pentagrid Scan Controller", "url": "https://www.pentagrid.ch/en/blog/improving-web-application-security-testing-with-pentagrid-scan-controller/", "published_at": "2022-08-23T12:42:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cb4e3788d", "title": "Vulnerabilities in Printix Cloud Print Management", "url": "https://www.pentagrid.ch/de/blog/vulnerabilities-in-printix-cloud-print-management/", "published_at": "2022-08-18T07:42:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cc258f853", "title": "Vulnerabilities in Printix Cloud Print Management", "url": "https://www.pentagrid.ch/en/blog/vulnerabilities-in-printix-cloud-print-management/", "published_at": "2022-08-18T07:42:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cb55acc8e", "title": "We are hiring Security Analysts", "url": "https://www.pentagrid.ch/de/blog/we-are-hiring-security-analysts/", "published_at": "2022-08-11T07:00:00+00:00" }, { "id": "01a07df4-8001-71d8-a49c-3a1cc33f567a", "title": "We are hiring Security Analysts", "url": "https://www.pentagrid.ch/en/blog/we-are-hiring-security-analysts/", "published_at": "2022-08-11T07:00:00+00:00" } ] posts Claim your blog
Back to Pentagrid
Blog · corpus.blog/blogs/pentagrid.ch/posts

Pentagrid

pentagrid.ch

2026

Security misconfiguration in IKEA DIRIGERA smart hub web server exposes large parts of the root filesystem (GCVE-2342-2026-1)original ↗
17 Jun 2026
Security misconfiguration in IKEA DIRIGERA smart hub web server exposes large parts of the root filesystem (GCVE-2342-2026-1)original ↗
17 Jun 2026
Parsing modern ASP.NET Core Identity password hashes to Hashcatoriginal ↗
3 Jun 2026
Parsing modern ASP.NET Core Identity password hashes to Hashcatoriginal ↗
3 Jun 2026

2025

ISO 20022, Pain001 and payment of your salaryoriginal ↗
21 Nov 2025
ISO 20022, Pain001 and payment of your salaryoriginal ↗
21 Nov 2025

2024

An excursion into Airlock WAF ruleset testingoriginal ↗
11 Dec 2024
An excursion into Airlock WAF ruleset testingoriginal ↗
11 Dec 2024
EAN-13- und TOTP-Hackvertor-Tags für Penetrationstests von Webanwendungen mit Burporiginal ↗
6 Dec 2024
Hackvertor EAN-13 and TOTP tags for web-application penetration testing with Burporiginal ↗
6 Dec 2024
How to prevent domain verification bypasses of your server certificates using CAA and account URI binding and how to monitor problems?original ↗
10 Jun 2024
How to prevent domain verification bypasses of your server certificates using CAA and account URI binding and how to monitor problems?original ↗
10 Jun 2024
Kiosk-Modus-Bypass bei Hotel-Check-in-Terminal mit Ariane Allegro Scenario Playeroriginal ↗
5 Jun 2024
Kiosk mode bypass for an Ariane Allegro Scenario Player based hotel check-in terminaloriginal ↗
5 Jun 2024
Preisgabe von Tastenschloss-Codes bei Check-in-Terminal von IBIS-Hoteloriginal ↗
2 Apr 2024
IBIS hotel check-in terminal keypad-code leakageoriginal ↗
2 Apr 2024
SQL-Injektion in Hafenverwaltung YABOOK erlaubt Umgehung der Authentisierungoriginal ↗
12 Mar 2024
SQL injection in YABOOK port administration allows authentication bypassoriginal ↗
12 Mar 2024
Multiple vulnerabilities in Lantronix EDS-MD IoT gateway for medical devicesoriginal ↗
8 Jan 2024
Multiple vulnerabilities in Lantronix EDS-MD IoT gateway for medical devicesoriginal ↗
8 Jan 2024

2023

Remote code execution and elevation of local privileges in Mitel Unify OpenStage and OpenScape VoIP phonesoriginal ↗
8 Dec 2023
Remote code execution and elevation of local privileges in Mitel Unify OpenStage and OpenScape VoIP phonesoriginal ↗
8 Dec 2023
Nothing new, still broken, insecure by default since then: Python's e-mail libraries and certificate verificationoriginal ↗
14 Nov 2023
Nothing new, still broken, insecure by default since then: Python's e-mail libraries and certificate verificationoriginal ↗
14 Nov 2023
Persistent cross-site scripting vulnerabilities in Liferay Portaloriginal ↗
17 Oct 2023
Persistent cross-site scripting vulnerabilities in Liferay Portaloriginal ↗
17 Oct 2023
Archive Pwn tool releasedoriginal ↗
3 Oct 2023
Archive Pwn tool releasedoriginal ↗
3 Oct 2023
Wind River VxWorks tarExtract directory traversal vulnerability (CVE-2023-38346)original ↗
19 Sept 2023
Wind River VxWorks tarExtract directory traversal vulnerability (CVE-2023-38346)original ↗
19 Sept 2023
IT-Sicherheit beim elektronischen Gesundheitsdossier im Fürstentum Liechtensteinoriginal ↗
14 Sept 2023
IT-Sicherheit beim elektronischen Gesundheitsdossier im Fürstentum Liechtensteinoriginal ↗
14 Sept 2023
Busybox cpio directory traversal vulnerability (CVE-2023-39810)original ↗
28 Aug 2023
Busybox cpio directory traversal vulnerability (CVE-2023-39810)original ↗
28 Aug 2023
Multiple vulnerabilities in Aten PE8108 power distribution unitoriginal ↗
3 Apr 2023
Multiple vulnerabilities in Aten PE8108 power distribution unitoriginal ↗
3 Apr 2023
Credit card statement disclosure vulnerability in Viseca's eXpense portaloriginal ↗
20 Mar 2023
Credit card statement disclosure vulnerability in Viseca's eXpense portaloriginal ↗
20 Mar 2023

2022

Ein Open-Source-SMS-Gateway für Pentest-Projekteoriginal ↗
6 Dec 2022
An open source SMS gateway for pentest projectsoriginal ↗
6 Dec 2022
Mehrere Verwundbarkeiten in SEPPmail 11.1.10original ↗
15 Nov 2022
Multiple vulnerabilities in SEPPmail 11.1.10original ↗
15 Nov 2022
Reflected cross-site scripting vulnerability in Crealogix EBICS implementation (CVE-2022-3442)original ↗
10 Oct 2022
Reflected cross-site scripting vulnerability in Crealogix EBICS implementation (CVE-2022-3442)original ↗
10 Oct 2022
Improving web application security testing with the Pentagrid Scan Controlleroriginal ↗
23 Aug 2022
Improving web application security testing with the Pentagrid Scan Controlleroriginal ↗
23 Aug 2022
Vulnerabilities in Printix Cloud Print Managementoriginal ↗
18 Aug 2022
Vulnerabilities in Printix Cloud Print Managementoriginal ↗
18 Aug 2022
We are hiring Security Analystsoriginal ↗
11 Aug 2022
We are hiring Security Analystsoriginal ↗
11 Aug 2022