Several vulnerabilities in Victure Cam and the IPC360 Cloud Platform
https://ift.tt/3CRa4SY
Submitted September 27, 2021 at 08:53PM by jaymzu
via reddit https://ift.tt/2ZCR8sH
https://ift.tt/3CRa4SY
Submitted September 27, 2021 at 08:53PM by jaymzu
via reddit https://ift.tt/2ZCR8sH
Finding Number Related Memory Corruption Vulns
https://ift.tt/3zRv1eE
Submitted September 27, 2021 at 08:47PM by mdulin2
via reddit https://ift.tt/3zOPjVQ
https://ift.tt/3zRv1eE
Submitted September 27, 2021 at 08:47PM by mdulin2
via reddit https://ift.tt/3zOPjVQ
Tackling Email Spoofing and Phishing
https://ift.tt/3kJNXY6
Submitted September 27, 2021 at 08:34PM by mariemariemar
via reddit https://ift.tt/3AY58uE
https://ift.tt/3kJNXY6
Submitted September 27, 2021 at 08:34PM by mariemariemar
via reddit https://ift.tt/3AY58uE
Privilege escalation in ASUS ROG Armoury Crate
https://ift.tt/3m0fsfH
Submitted September 27, 2021 at 09:27PM by last0x00
via reddit https://ift.tt/2XS4Neu
https://ift.tt/3m0fsfH
Submitted September 27, 2021 at 09:27PM by last0x00
via reddit https://ift.tt/2XS4Neu
fail2ban - Remote Code Execution - CVE-2021-32749
https://ift.tt/3kYBHnb
Submitted September 28, 2021 at 08:59AM by Gallus
via reddit https://ift.tt/3F0WZYQ
https://ift.tt/3kYBHnb
Submitted September 28, 2021 at 08:59AM by Gallus
via reddit https://ift.tt/3F0WZYQ
research.securitum.com
fail2ban - Remote Code Execution - research.securitum.com
This article is about the recently published security advisory for a pretty popular software, fail2ban (CVE-2021-32749). It is about a bug that may lead to Remote Code Execution.
Exploiting Client-Side Prototype Pollution in the wild
https://ift.tt/3m7BLzY
Submitted September 28, 2021 at 12:38PM by albinowax
via reddit https://ift.tt/3lYeWP2
https://ift.tt/3m7BLzY
Submitted September 28, 2021 at 12:38PM by albinowax
via reddit https://ift.tt/3lYeWP2
How malware gets into the App Store and why Apple can't stop that
https://ift.tt/3o8jPrH
Submitted September 28, 2021 at 08:01PM by illusionofchaos
via reddit https://ift.tt/3F1tB51
https://ift.tt/3o8jPrH
Submitted September 28, 2021 at 08:01PM by illusionofchaos
via reddit https://ift.tt/3F1tB51
Habr
How malware gets into the App Store and why Apple can't stop that
Only after I had published a post detailing three iOS 0-day vulnerabilities and expressing my frustration with Apple Security Bounty Program, I received a reply from Apple:We saw your blog post...
Hey everyone! My friends and I are hosting this workshop, BugéDex, for people to get started on bug bounty. You can get to win prizes worth over 1.3k USD. It’s on the 3rd of October and is completely free to register!
https://ift.tt/3kUbRR7
Submitted September 28, 2021 at 07:48PM by softboy_01
via reddit https://ift.tt/3CNTOBY
https://ift.tt/3kUbRR7
Submitted September 28, 2021 at 07:48PM by softboy_01
via reddit https://ift.tt/3CNTOBY
Typeform
BugéDex
The Art of Bug Bounty, Bug Bash and Reporting
Abusing VT as a downloader
https://ift.tt/3ESzJwa
Submitted September 28, 2021 at 11:38PM by AkiJos
via reddit https://ift.tt/3B1QFhi
https://ift.tt/3ESzJwa
Submitted September 28, 2021 at 11:38PM by AkiJos
via reddit https://ift.tt/3B1QFhi
Vimeo
Abusing VT as downloader
In this video we would be abusing VT as a downloader. We would use a simple PowerShell one liner, base64 it and then chunk into 250 characters and create dummy files…
Costly mistakes made by developers when managing secrets and how to avoid them
https://ift.tt/2Y14Ogs
Submitted September 29, 2021 at 12:59AM by xTrilton
via reddit https://ift.tt/3ohhH0W
https://ift.tt/2Y14Ogs
Submitted September 29, 2021 at 12:59AM by xTrilton
via reddit https://ift.tt/3ohhH0W
Medium
Costly mistakes made by developers when managing secrets and how to avoid them
There’s now more money and information stored digitally than physically. Secrets unlock the infrastructure holding millions of dollars and…
Proof of Vaccination - Port Pass Data Breach
https://ift.tt/3ifPmUP
Submitted September 29, 2021 at 03:18AM by 3luSiv3One
via reddit https://ift.tt/3ib7WgT
https://ift.tt/3ifPmUP
Submitted September 29, 2021 at 03:18AM by 3luSiv3One
via reddit https://ift.tt/3ib7WgT
CBC
Private proof-of-vaccination app may have exposed hundreds of thousands of users' personal data | CBC News
Private proof-of-vaccination app Portpass exposed personal information, including the driver's licences, of what might be hundreds of thousands of users by leaving its website unsecured.
Telegram deleted account was still able to receive messages.
https://ift.tt/3kNBti9
Submitted September 29, 2021 at 06:47AM by davtur19
via reddit https://ift.tt/3umXyYf
https://ift.tt/3kNBti9
Submitted September 29, 2021 at 06:47AM by davtur19
via reddit https://ift.tt/3umXyYf
Hackintosh 5
Telegram bug in terminated sessions
Do you think that Telegram servers are coded by monkeys?
Security for Your Business through Offshore Software Developers
https://ift.tt/2WndIUZ
Submitted September 29, 2021 at 03:48PM by Caterpillarfox
via reddit https://ift.tt/3ogHmGU
https://ift.tt/2WndIUZ
Submitted September 29, 2021 at 03:48PM by Caterpillarfox
via reddit https://ift.tt/3ogHmGU
Competenza Innovare
Cybersecurity for Your Business through Offshore Software Developers
Cybersecurity via offshore IT developers can help your business stay safe. Remove vulnerabilities & prevent your app, website, enterprise software from hackers.
Massive Phishing Campaign Impacted 75K Email Inboxes
https://ift.tt/3olHp4f
Submitted September 29, 2021 at 06:31PM by kidhiplot
via reddit https://ift.tt/3CZNTtw
https://ift.tt/3olHp4f
Submitted September 29, 2021 at 06:31PM by kidhiplot
via reddit https://ift.tt/3CZNTtw
Cisco Hyperflex: How We Got Remote Code Execution Through Login Form and Other Findings
https://ift.tt/3uuyEpB
Submitted September 29, 2021 at 07:35PM by yarbabin
via reddit https://ift.tt/39MQfzo
https://ift.tt/3uuyEpB
Submitted September 29, 2021 at 07:35PM by yarbabin
via reddit https://ift.tt/39MQfzo
Directory illegal Entry Magic
https://ift.tt/3F1ZkD1
Submitted September 29, 2021 at 09:05PM by banginpadr
via reddit https://ift.tt/3AUQftl
https://ift.tt/3F1ZkD1
Submitted September 29, 2021 at 09:05PM by banginpadr
via reddit https://ift.tt/3AUQftl
Medium
Directory illegal Entry Magic
A hacker manifest Real-World Scenarios, Labs, and Attacks
GitOops! Lateral movement and privesc in GitHub orgs via CI/CD pipelines
https://ift.tt/2XP1FjY
Submitted September 29, 2021 at 09:26PM by alexksak
via reddit https://ift.tt/3m4e77w
https://ift.tt/2XP1FjY
Submitted September 29, 2021 at 09:26PM by alexksak
via reddit https://ift.tt/3m4e77w
GitHub
GitHub - ovotech/gitoops: all paths lead to clouds
all paths lead to clouds. Contribute to ovotech/gitoops development by creating an account on GitHub.
Converting unix timestamps with osquery
https://ift.tt/3uqzV0J
Submitted September 30, 2021 at 02:01AM by Silly-Pop-7437
via reddit https://ift.tt/2YbS6vt
https://ift.tt/3uqzV0J
Submitted September 30, 2021 at 02:01AM by Silly-Pop-7437
via reddit https://ift.tt/2YbS6vt
Medium
Converting unix timestamps with osquery
Human readable timestamps
CC7F Round 1: Cryptocurrency and cryptography hacking CTF (largest competition and prizes so far, registration open)
https://ift.tt/3ifkYtx
Submitted September 30, 2021 at 01:55AM by Alcoholas
via reddit https://ift.tt/2ZMTJR3
https://ift.tt/3ifkYtx
Submitted September 30, 2021 at 01:55AM by Alcoholas
via reddit https://ift.tt/2ZMTJR3
TLS.support - A tool (and REST API) for debugging client TLS version and cipher support issues
https://tls.support/
Submitted September 30, 2021 at 02:27AM by sullivanmatt
via reddit https://ift.tt/3okUBpV
https://tls.support/
Submitted September 30, 2021 at 02:27AM by sullivanmatt
via reddit https://ift.tt/3okUBpV
tls.support
Test your browser's TLS configuration - TLS.support
TLS.support is a free diagnostic tool and REST API for testing browser and client TLS version and cipher support. The service also checks browsers and clients for common TLS-related issues and misconfigurations.
FaPro: A mass network protocol server simulator
https://ift.tt/3hxewOx
Submitted September 30, 2021 at 01:21PM by ntestoc3
via reddit https://ift.tt/2Wqu2nX
https://ift.tt/3hxewOx
Submitted September 30, 2021 at 01:21PM by ntestoc3
via reddit https://ift.tt/2Wqu2nX
GitHub
GitHub - fofapro/fapro: Fake Protocol Server
Fake Protocol Server. Contribute to fofapro/fapro development by creating an account on GitHub.