SSD Secure Disclosure
@SecuriTeam_SSD
Followers
24K
Following
633
Media
851
Statuses
2K
SSD provides the support you need to turn your experience uncovering security vulnerabilities into a highly paid career. [email protected]
Cupertino, CA
Joined November 2016
Our new 2024 product scope is now out!. Check out all the latest software and hardware we added and see how much your research is really worth:.
3
15
207
💻 Have you read our recent publications?. ISPConfig Authenticated Remote Code Execution:. Kerio Control Authentication Bypass and RCE:.
0
0
12
🚨 New advisory was just published! 🚨. Kerio Control has a design flaw in the implementation of the communication with GFI AppManager, leading to an authentication bypass vulnerability in the product under audit. Once the authentication bypass is achieved, the attacker can cause.
0
12
103
🚨 New advisory was just published! 🚨. ISPConfig contains design flaws in the user creation and editing functionality, which allow a client user to escalate their privileges to superadmin. Additionally, the language modification feature enables arbitrary PHP code injection due.
1
9
80
Submit your pfSense, Sophos & KerioControl vulnerabilities at:
1
7
44
RT @typhooncon: 🌪️ TyphoonCon 2025 has officially wrapped up and it was an incredible experience, all thanks to YOU!. Shoutout to our atten….
0
4
0
🚗 System setup in progress! Tomorrow at @typhooncon we’re unveiling a game-changer: remote access to automotive platforms for security researchers. No physical car needed. Come see the future of car hacking at the SSD Labs display at #TyphoonCon2025.
1
2
30
💻 Have you read our latest publication?. Multiple vulnerabilities were discovered in Foscam X5. These vulnerabilities allow a remote attacker to trigger code execution vulnerabilities in the product:
0
3
10
0
2
0
🚨 New advisory was just published! 🚨. Multiple vulnerabilities were discovered in Foscam X5. These vulnerabilities allow a remote attacker to trigger code execution vulnerabilities in the product:
0
2
24
💻 Have you read our recent publication?. MagicINFO exposes an endpoint with several flaws that, when combined, allow an unauthenticated attacker to upload a JSP file and execute arbitrary server-side code:.
0
2
12
Found a vulnerability in Chrome browser? Submit your findings today and get the compensation you deserve:
0
0
0
💻 Have you read our recent publication?. Two Use After Free (UAF) vulnerabilities were discovered within Chrome’s Browser process by one of our researchers at SSD Labs:
1
4
32
Submit your Chrome, Safari & Firefox vulnerabilities at:
0
1
1
RT @typhooncon: 🌪️TyphoonCon’s 2025 conference tickets are officially sold out!🌪️. Join our waitlist now for a chance at any openings: http….
0
2
0
🚨 New advisory was just published! 🚨. MagicINFO exposes an endpoint with several flaws that, when combined, allow an unauthenticated attacker to upload a JSP file and execute arbitrary server-side code:.
2
10
60
🚨 New advisory was just published! 🚨. Two Use After Free (UAF) vulnerabilities were discovered within Chrome’s Browser process by one of our researchers at SSD Labs:.
3
22
140
🚨 New advisory was just published! 🚨. A vulnerability in PHP's extract() function allows attackers to trigger a double-free in version 5.x or a user-after-free in versions 7.x, 8.x, which in turn allows arbitrary code execution (native code):
1
35
265