Approach Services
Penetration Testing Red Teaming Source Code Review IT Security Audit Security Awareness MAYASEVEN Left Shift
Industries Track record About Blog Thai Contact us

Security research & insights

Vulnerability research, CVE disclosures and write-ups from the MAYASEVEN penetration testing team.

ENGLISH ARTICLES
Certifications & Training ·

eLearnSecurity Certified eXploit Developer (eCXD) Review

I am the one who is passionate about binary exploitation for many years. I got OSCE and GXPN certified and I was looki…
Research & Vulnerabilities ·

[CVE-2019-12562] Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0

In May 2019, MAYASEVEN Researchers identified a vulnerability in DotNetNuke (DNN), an open-source web content manageme…
Pentest & Secure Coding Guides ·

Third-Party Software Help or Harm

“Have you ever used third-party software in your production, and did you trust them?” The third-party software is supp…
Research & Vulnerabilities ·

[CVE-2019-11013] Directory Traversal in Nimble Streamer version 3.0.2-2 to 3.5.4-9

While we had been performing penetration testing to our client, we found a vulnerability in one of our client’s third-…
MORE IN THAI 50 more articles in Thai CTF write-ups, pentest methodology, secure coding and threat analysis — browse the Thai blog →