https://ctulhu.me/tags/vdp/ Recent content in vdp on Christian Niel Angel Hugo -- gohugo.io en © 2024 Christian Niel Angel Tue, 29 Oct 2019 00:00:00 +0000 https://ctulhu.me/security/exposed-s3-credentials-of-quadx/ Tue, 29 Oct 2019 00:00:00 +0000 https://ctulhu.me/security/exposed-s3-credentials-of-quadx/ I found a exposed sensitive credential in the website and was able to access the Amazon S3 Bucket of Paylink, One of the digital platforms of QuadX. This allowed me to retrieve, upload and remove all files in the S3 Bucket. https://ctulhu.me/security/cve-2018-19937/ Wed, 30 Jan 2019 00:00:00 +0000 https://ctulhu.me/security/cve-2018-19937/ A local, authenticated attacker can bypass the passcode in the VideoLAN VLC media player app before 3.1.5 for iOS by opening a URL and turning the phone. Product: VLC for Mobile IOS Vendor: VideoLAN/Open Source Software Version: 3.