Why certificates issued by "Cloudflare" and "Baltimore" are really issued by DigiCert

libgit2, when compiled using the optional, included [libssh2](https://www.libssh2.org) backend, fails to verify SSH keys by default.

## Denoscription

When using an SSH remote with the optional,...

Vendor: DENX Software Engineering Vendor URL: Versions affected: v2012.10-rc1 to v2023.01-rc1 Systems Affected: All systems with CONFIG_DFU_OVER_USB or CONFIG_SPL_DFU enabled Author: <Sultan Qas…

Script to test NetSec capabilities. Contribute to asluppiter/Somnium development by creating an account on GitHub.

iTLB multihit PoC. Contribute to ergot86/itlb_poc development by creating an account on GitHub.

We explore a vulnerability we found in a popular implementation of the markdown engine and the potential Denial-of-Service (DoS) attack that it could cause on projects rendering markdown.

Linux Security and Monitoring Scripts. Contribute to sqall01/LSMS development by creating an account on GitHub.

What is Pass? What is “Pass; the standard unix password manager”?
Password management should be simple and follow Unix philosophy. With pass, each password lives inside of a gpg encrypted file whose filename is the noscript of the website or resource that requires…

CVE-2020-36109 PoC causing DoS. Contribute to sunn1day/CVE-2020-36109-POC development by creating an account on GitHub.

Simple CVE-2021-20294 poc. Contribute to tin-z/CVE-2021-20294-POC development by creating an account on GitHub.

Posted by [Deleted Account] - 38 votes and 2 comments

Quickly visualize and identify attack paths an attacker could leverage. Relationship graphs provide an interactive visualization to navigate resource relationships and drill into asset details without authenticating into multiple accounts or jumping across…

2FA Day on 2nd of FebruAry promotes two-factor authentication to enhance online security. It raises awareness about the importance of an extra security layer.

It turns out that the first “all Google” phone includes a non-Google bug. Learn about the details of CVE-2022-38181, a vulnerability in the Arm Mali GPU. Join me on my journey through reporting the vulnerability to the Android security team, and the exploit…

Community for hackers, pentesters, programmers, activists, philosophers, cyberpunks, artists, infosec, privacy professionals, and those genuinely curious about technology.

Intel introduced the 8086 microprocessor in 1978 and it had a huge influence on computing. I'm reverse-engineering the 8086 by examining t...

Bitwarden is a hot candidate for a LastPass replacement. Looking into how they encrypt data, it doesn’t do things that much better however.

Doyensec's Blog :: Doyensec is an independent security research and development company focused on vulnerability discovery and remediation.