Hi,

So I found this in mruby as part of the shopify-noscripts program, and I notice that my patch also landed upstream in ruby as well. Shame on me for not checking ruby as well!

Wondered if it...

UEFI firmware security is a hot topic these days. We take a look at attacks against UEFI firmware from a practical point of view and analyze applicability of disclosed attacks in real life scenarios: whether these vulnerabilities can be easily used in real…

WikiLeaks' #Vault7 reveals numerous CIA 'zero day' vulnerabilities in Android phones https://t.co/yHg7AtX5gg

Contribute to eastee/rebreakcaptcha development by creating an account on GitHub.

Possible Remote Code Execution when performing file upload based on Jakarta Multipart parser. ... It is possible to perform a RCE attack with a malicious Content-Type value. If the Content-Type val...

A Phishing Dropper designed to Pentest. Contribute to 4w4k3/Umbrella development by creating an account on GitHub.

The USG is Good, not Bad. Contribute to robertfisk/USG development by creating an account on GitHub.

Hacking an ATM with Raspberry Pi via blog.ptsecurity First days of new year came with the warning about a new class of ATM fraud named “black box attack”. The crooks gain physical acces…