Victor Gevers
Co-founder / Senior Researcher
https://victorgevers.com/about
Featured articles
CSIRT cases
- DIVD-2024-00004 - 2024-00004 Global NGOs
- DIVD-2023-00014 - Critical Broken Authentication Flaw in Jira Service Management Products
- DIVD-2022-00033 - Atlassian Confluence 0-day unauthenticated RCE
- DIVD-2022-00022 - WatchGuard Firebox and XTM appliance ACE vulnerability
- DIVD-2022-00021 - Ivanti EPM CSA remote code execution
Show more Show less
- DIVD-2022-00019 - Insecure Mendix Applications
- DIVD-2022-00017 - Global Healthcare Vulnerabilities
- DIVD-2022-00012 - Global Charity Vulnerabilities
- DIVD-2021-00039 - HP iLO
- DIVD-2021-00038 - Apache Log4j2
- DIVD-2021-00037 - Critical vulnerabilities in ITarian MSP platform and on-premise solution
- DIVD-2021-00030 - GitLab Unauthenticated RCE Flaw
- DIVD-2021-00029 - Smartertrack
- DIVD-2021-00023 - Atlassian Confluence OGNL injection (RCE)
- DIVD-2021-00020 - OSNexsus QuantaStor limited disclosure and product warning
- DIVD-2021-00017 - SolarWinds N-able N-central agent vulnerabilities
- DIVD-2021-00015 - Telegram OD
- DIVD-2021-00014 - Kaseya Unitrends
- DIVD-2021-00012 - Warehouse Botnet
- DIVD-2021-00011 - Kaseya VSA Disclosure
- DIVD-2021-00010 - vCenter Server PreAuth RCE
- DIVD-2021-00005 - Pulse Secure PreAuth RCE
- DIVD-2021-00004 - Gelekte phishing gegevens / Leaked phishing credentials
- DIVD-2021-00002 - Kaseya VSA
- DIVD-2021-00001 - Microsoft on-prem Exchange Servers
- DIVD-2020-00011 - Four critical vulnerabilities in Vembu BDR
- DIVD-2020-00008 - 313 000 Wordpress sites scanned
CVE Records
- Authenticated Remote COmmand Execution as root in OSNEXUS QuantaStor version 6.0.0.355 and others
- Authenticated Stored XSS in OSNEXUS QuantaStor 6.0.0.335
- Local Privilege Escalation to root in OSNEXUS QuantaStor before 6.0.0.355
- Authenticated Remote Command Execution vulnerability in OSNEXUS QuantaStor before 6.0.0.355
- Reflected XSS vulnerability in OSNEXUS QuantaStor before 6.0.0.355