use after free in skipwhite in vim/vim https://huntr.dev/bounties/8628b4cd-4055-4059-aed4-64f7fdc10eba/
Reverse Engineering an old Mario & Luigi game for fun https://cybergeeks.tech/reverse-engineering-an-old-mario-luigi-game-for-fun/
“DogWalk”, nueva vulnerabilidad 0-day para Windows https://unaaldia.hispasec.com/2022/06/dogwalk-nueva-vulnerabilidad-0-day-para-windows.html
Una al Día
“DogWalk”, nueva vulnerabilidad 0-day para Windows
Se ha descurbierto una nueva vulnerabilidad para los Sistemas operativos Windows, la cual se le ha asignado el nombre de “DogWalk”.
How to detect the containers’ escape capabilities with Falco https://sysdig.com/blog/container-escape-capabilities-falco-detection/
Sysdig
How to detect the containers’ escape capabilities with Falco | Sysdig
With a tool like Falco, it’s possible to detect when specific container capabilities like CAP_SYS_ADMIN are misused.
How to stop Firefox from spamming your proxy tools like Burp/Fiddler with “detectportal.firefox.com” https://iamyuthan.medium.com/how-to-stop-firefox-from-spamming-your-proxy-tools-like-burp-fiddler-with-detectportal-firefox-com-7db7ce1de9a0
Medium
How to stop Firefox from spamming your proxy tools like Burp/Fiddler with “detectportal.firefox.com”
Stop Firefox from sending requests to Burp & Fiddler to the host “detectportal.firefox.com” with 3 simple steps.
Exploring a New Class of Kernel Exploit Primitive https://msrc-blog.microsoft.com/2022/03/22/exploring-a-new-class-of-kernel-exploit-primitive/
Microsoft
Exploring a New Class of Kernel Exploit Primitive | MSRC Blog
| Microsoft Security Response Center
| Microsoft Security Response Center
The security landscape is dynamic, changing often and as a result, attack surfaces evolve. MSRC receives a wide variety of cases spanning different products, bug types and exploit primitives. One particularly interesting primitive we see is an arbitrary kernel…
Hacking into WordPress themes for CVEs and Fun https://medium.com/pentesternepal/hacking-into-wordpress-themes-for-cves-and-fun-bdde6c834344
Medium
Hacking into WordPress themes for CVEs and Fun.
Hi there! I hope all is well with you. In this writeup, I’ll discuss about the research I did on a WordPress theme, which taught me a lot…
Magnet Forensics June 2022 CTF - Linux https://www.forgottennook.com/2022/06/magnet-june-2022-ctf-linux.html
Forgottennook
Magnet Forensics June 2022 CTF - Linux
This CTF was hosted by Magnet Forensics and was held on June 15, 2022, from 3 PM - 6 PM EST. Two datasets were provided - a Linux box and an...
BRATA Android Malware Gains Advanced Mobile Threat Capabilities https://thehackernews.com/2022/06/brata-android-malware-gains-advanced.html
Trend Micro Cloud App Security Threat Report 2021 https://www.trendmicro.com/vinfo/us/security/research-and-analysis/threat-reports/roundup/trend-micro-cloud-app-security-threat-report-2021
Trendmicro
Trend Micro Cloud App Security Threat Report 2021
In this report, we highlight the notable email threats of 2021, including over 33.6 million high-risk email threats (representing a 101% increase from 2020’s numbers) that we’ve detected using the Trend Micro Cloud App Security platform.
Managing risk in blockchain deployments https://blog.trailofbits.com/2022/06/24/managing-risk-in-blockchain-deployments/
The Trail of Bits Blog
Managing risk in blockchain deployments
Do you need a blockchain? And if so, what kind? Trail of Bits has released an operational risk assessment report on blockchain technology. As more businesses consider the innovative advantages of blockchains and, more generally, distributed ledger technologies…
We're going on vacation, we'll be back in September. Have a good summer! https://media1.giphy.com/media/v1.Y2lkPWU4MjZjOWZjZDVoMmM0Y2Z2bjFnYmpldnc0dTI5YXUweWRkN3k0YzByMmNxdXBtYyZjdD1n/etn52ENYVnpxqMaXiT/200_s.gif
GIPHY
Pool Party Swimming GIF by The Dodo - Find & Share on GIPHY
For animal people.
Golang code review notes: Quick summary of some of the bug classes in Go https://www.elttam.com/blog/golang-codereview/
Elttam
Golang code review notes - elttam
elttam is a globally recognised, independent information security company, renowned for our advanced technical security assessments.
CVE-2022-31749: WatchGuard Authenticated Arbitrary File Read/Write (Fixed) https://www.rapid7.com/blog/post/2022/06/23/cve-2022-31749-watchguard-authenticated-arbitrary-file-read-write-fixed/
Rapid7
CVE-2022-31749: WatchGuard Authenticated Arbitrary File Read/Write (Fixed) | Rapid7 Blog
[BugTales] UnZiploc: From 0-click To Platform Compromise https://labs.taszk.io/articles/post/unziploc/
labs.taszk.io
[BugTales] UnZiploc: From 0-click To Platform Compromise
Exploring remote OTA interfaces on HarmonyOS/Android to get RCE using logic bugs
Exploiting vulnerabilities in iOS Application https://lonewolf-raj.medium.com/exploiting-vulnerabilities-in-ios-application-cf5718910c47
Medium
Exploiting vulnerabilities in iOS Application
Hello Everyone, Here I’m going to share one of my findings which I got while enumerating iOS application, below are my findings and the…
The Sound of Malware https://www.trellix.com/en-us/about/newsroom/stories/threat-labs/the-sound-of-malware.html
Trellix
The Sound of Malware
We have frequently used code comparisons and visualizations but would it be possible to compare malware samples using a more abstract technique? What about sound?
Notes on OpenSSL remote memory corruption https://guidovranken.com/2022/06/27/notes-on-openssl-remote-memory-corruption/
Guido Vranken
Notes on OpenSSL remote memory corruption
OpenSSL version 3.0.4, released on June 21th 2022, is susceptible to remote memory corruption which can be triggered trivially by an attacker. BoringSSL, LibreSSL and the OpenSSL 1.1.1 branch are n…