May 5, 2023, 5 a.m. | Ceri Coburn

Pen Test Partners www.pentestpartners.com

TL;DR The CyberGhost VPN client suffers from an elevation of privilege vulnerability and is filed under CVE-2023-30237.  A specially crafted JSON payload sent to the CyberGhost RPC service can lead […]


The post Bullied by Bugcrowd over Kape CyberGhost disclosure first appeared on Pen Test Partners.

bugcrowd client cve cyberghost disclosure json kape partners payload pen pen test privilege rpc service show on homepage test under vpn vulnerability vulnerability disclosure

Information Technology Specialist I, LACERA: Information Security Engineer

@ Los Angeles County Employees Retirement Association (LACERA) | Pasadena, CA

Security Compliance Manager

@ Aptiv | USA Boston Software Office 100 Northern - Eng

Senior Radar Threat Analyst | Secret clearance

@ Northern Trust | USA CA Point Mugu - 575 I Ave, Bldg 3015 (CAC212)

Space Information Systems Security Engineer (ISSE)

@ Parsons Corporation | USA VA Chantilly (Client Site)

Information Systems Security Manager -Journeyman

@ Parsons Corporation | USA CO Colorado Springs (5450 Tech Center Drive)

Information Systems Security Officer (ISSO) II

@ Northern Trust | USA CA Riverside - Customer Proprietary (CAC225)