iiinova — where your digital self keeps evolving

Read our full analysis of the vulnerability and its potential exploitation here: blog.amberwolf.com/blog/2025/ju...

ThinOS - Unencrypted Memory Dumps (CVE-2025-32752)

000

These core dumps may contain sensitive data and compromise the integrity of ThinOS’s storage encryption, directly contradicting Dell’s documentation, which states that all partitions except the boot partition are encrypted.

100

If the device configuration allows it, this option can be accessed by unauthenticated users. In addition, previously generated core dumps may be accessible to unauthenticated attackers.

100

AmberWolf @amberwolfsec.bsky.social · 17/01/2025

AmberWolf has published technical details on CVE-2025-32752, a vulnerability affecting Dell ThinOS. Security researcher Darren McDonald discovered that when the troubleshooting feature “Create Core Dump” is used, ThinOS saves core dumps to an unencrypted partition.

110

You can read our latest blog at blog.amberwolf.com/blog/2025/ja...

Reproducing CVE-2024-9042: Command Injection in Windows Kubernetes Nodes

AmberWolf @amberwolfsec.bsky.social · 17/01/2025

020

The Kubernetes Security Response Committee has published an advisory for CVE-2024-9042, affecting Windows worker nodes querying the /logs endpoint. Iain Smart, Principal Security Consultant at AmberWolf, reproduced the issue & shared detection insights in our latest blog.

134

AmberWolf @amberwolfsec.bsky.social · 28/12/2024

All I want for Christmas is U(RL handlers not vulnerable to RCE)... AmberWolf has published information about CVE-2024-12908, a Remote Code Execution vulnerability in the Delinea Secret Server Protocol Handler. You can read our blog & PoC here: blog.amberwolf.com/blog/2024/de...

Delinea Protocol Handler - Remote Code Execution via Update Process (CVE-2024-12908)

032

CVE-2024-5921 is a Remote Code Execution and Privilege Escalation vulnerability in Palo Alto Global Protect, which is also exploitable using NachoVPN. Our full technical write up is available here: blog.amberwolf.com/blog/2024/no...

Palo Alto GlobalProtect - RCE and Privilege Escalation via Malicious VPN Server (CVE-2024-5921)

110

CVE-2024-29014 is an RCE as SYSTEM vulnerability in SonicWall NetExtender that is exploitable using NachoVPN. Full technical details of the vulnerability are available in out blog: blog.amberwolf.com/blog/2024/no...

SonicWall NetExtender for Windows - RCE as SYSTEM via EPC Client Update (CVE-2024-29014)

100

GitHub - AmberWolfCyber/NachoVPN: A tasty, but malicious SSL-VPN server 🌮

You can get the code, the prebuilt container or contribute modules on GitHub: github.com/AmberWolfCyb...

github.com

A tasty, but malicious SSL-VPN server 🌮. Contribute to AmberWolfCyber/NachoVPN development by creating an account on GitHub.

100

NachoVPN is a modular server that allows for the automatic exploitation of VPN clients when they connect. It currently supports Cisco AnyConnect, SonicWall NetExtender, Palo Alto GlobalProtect and Pulse/Ivanti Connect Secure) across a multiple platforms. blog.amberwolf.com/blog/2024/no...

Introducing NachoVPN: One VPN Server to Pwn Them All

100