Pre-Auth RCE on OpenEMR: Using a rogue MySQL server to steal your health data
https://ift.tt/uxrZV7y
Submitted January 27, 2023 at 03:43PM by SonarPaul
via reddit https://ift.tt/lPTuXgN
https://ift.tt/uxrZV7y
Submitted January 27, 2023 at 03:43PM by SonarPaul
via reddit https://ift.tt/lPTuXgN
Sonarsource
OpenEMR - Remote Code Execution in your Healthcare System
We recently discovered three vulnerabilities that allow arbitrary code execution on OpenEMR. Let’s see what we can learn from them and discuss their patches!
Kamailio's exec module considered harmful – RTC security
https://ift.tt/FT7Dkvw
Submitted January 27, 2023 at 06:15PM by EnableSecurity
via reddit https://ift.tt/hjtZVmc
https://ift.tt/FT7Dkvw
Submitted January 27, 2023 at 06:15PM by EnableSecurity
via reddit https://ift.tt/hjtZVmc
Rtcsec
Kamailio's exec module considered harmful
How the Open Source SIP server may be vulnerable to OS command injection (remote code execution) when misusing the exec module, how to exploit and then fix it.
Factorization (DCQF) of a 48-bit integer using 10 trapped-ion qubits
https://ift.tt/cXhu5jN
Submitted January 27, 2023 at 07:07PM by c0r0n3r
via reddit https://ift.tt/zxGZPm8
https://ift.tt/cXhu5jN
Submitted January 27, 2023 at 07:07PM by c0r0n3r
via reddit https://ift.tt/zxGZPm8
Azure/ 365 discord for learning and discussions
https://ift.tt/wca4XqC
Submitted January 27, 2023 at 10:37PM by EchoFinal1753
via reddit https://ift.tt/e0LwjxV
https://ift.tt/wca4XqC
Submitted January 27, 2023 at 10:37PM by EchoFinal1753
via reddit https://ift.tt/e0LwjxV
Discord
Discord - A New Way to Chat with Friends & Communities
Discord is the easiest way to communicate over voice, video, and text. Chat, hang out, and stay close with your friends and communities.
Justice Dept. Dismantles a Major Ransomware Operation
https://ift.tt/ePm6a4H
Submitted January 27, 2023 at 11:40PM by dlorenc
via reddit https://ift.tt/B9UICy5
https://ift.tt/ePm6a4H
Submitted January 27, 2023 at 11:40PM by dlorenc
via reddit https://ift.tt/B9UICy5
NY Times
Justice Dept. Dismantles a Major Ransomware Operation
The department said it had successfully prevented victims from having to pay $130 million in ransoms to Hive, a prolific ransomware gang, before seizing two of the group’s servers on Wednesday night.
PHP Development Server <= 7.4.21 - Remote Source Disclosure
https://ift.tt/wHpJSYK
Submitted January 29, 2023 at 03:13PM by Gallus
via reddit https://ift.tt/KFNSOBn
https://ift.tt/wHpJSYK
Submitted January 29, 2023 at 03:13PM by Gallus
via reddit https://ift.tt/KFNSOBn
projectdiscovery.io
PHP Development Server <= 7.4.21 - Remote Source Disclosure — ProjectDiscovery Blog
Introduction
While testing request pipelining on multiple programming language built-in servers, we observed strange behavior with PHP’s. As we delved deeper, we discovered a security bug in PHP that could expose the source code of PHP files as if they were…
While testing request pipelining on multiple programming language built-in servers, we observed strange behavior with PHP’s. As we delved deeper, we discovered a security bug in PHP that could expose the source code of PHP files as if they were…
I am super bullish on security champions programs, but running it over a period of time is a challenge. This edition provides some ideas on how to avoid the trap
https://ift.tt/5qVtNCG
Submitted January 29, 2023 at 10:01PM by jubbaonjeans
via reddit https://ift.tt/rUPwtL7
https://ift.tt/5qVtNCG
Submitted January 29, 2023 at 10:01PM by jubbaonjeans
via reddit https://ift.tt/rUPwtL7
Boring AppSec
Edition 15: Is your champions program running out of steam?
Security champions programs usually start well, but taper off quickly. This edition provides a framework to help avoid that.
/r/netsec's Q1 2023 Information Security Hiring Thread
OverviewIf you have open positions at your company for information security professionals and would like to hire from the /r/netsec user base, please leave a comment detailing any open job listings at your company.We would also like to encourage you to post internship positions as well. Many of our readers are currently in school or are just finishing their education.Please reserve top level comments for those posting open positions.Rules & GuidelinesInclude the company name in the post. If you want to be topsykret, go recruit elsewhere. Include the geographic location of the position along with the availability of relocation assistance or remote work.If you are a third party recruiter, you must disclose this in your posting.Please be thorough and upfront with the position details.Use of non-hr'd (realistic) requirements is encouraged.While it's fine to link to the position on your companies website, provide the important details in the comment.Mention if applicants should apply officially through HR, or directly through you.Please clearly list citizenship, visa, and security clearance requirements.You can see an example of acceptable posts by perusing past hiring threads.FeedbackFeedback and suggestions are welcome, but please don't hijack this thread (use moderator mail instead.)
Submitted January 29, 2023 at 09:59PM by ranok
via reddit https://ift.tt/tp8Iaux
OverviewIf you have open positions at your company for information security professionals and would like to hire from the /r/netsec user base, please leave a comment detailing any open job listings at your company.We would also like to encourage you to post internship positions as well. Many of our readers are currently in school or are just finishing their education.Please reserve top level comments for those posting open positions.Rules & GuidelinesInclude the company name in the post. If you want to be topsykret, go recruit elsewhere. Include the geographic location of the position along with the availability of relocation assistance or remote work.If you are a third party recruiter, you must disclose this in your posting.Please be thorough and upfront with the position details.Use of non-hr'd (realistic) requirements is encouraged.While it's fine to link to the position on your companies website, provide the important details in the comment.Mention if applicants should apply officially through HR, or directly through you.Please clearly list citizenship, visa, and security clearance requirements.You can see an example of acceptable posts by perusing past hiring threads.FeedbackFeedback and suggestions are welcome, but please don't hijack this thread (use moderator mail instead.)
Submitted January 29, 2023 at 09:59PM by ranok
via reddit https://ift.tt/tp8Iaux
Hackers Using Microsoft OneNote Attachments To Spread Malware
https://ift.tt/jwZrQb1
Submitted January 29, 2023 at 11:43PM by achilles4828
via reddit https://ift.tt/KQR5WFa
https://ift.tt/jwZrQb1
Submitted January 29, 2023 at 11:43PM by achilles4828
via reddit https://ift.tt/KQR5WFa
FourCore
A Malicious Note: Hackers using Microsoft OneNote Attachments to spread malware - FourCore
Attackers are constantly looking for novel approaches to infect users with malware. Recently, hackers have been using OneNote attachments in phishing emails to spread malware and password stealers to their victims.
Public Disclosure for CVE-2022-42475
https://ift.tt/i2V10eX
Submitted January 30, 2023 at 07:14AM by BlackCatNeo
via reddit https://ift.tt/jU8xgLI
https://ift.tt/i2V10eX
Submitted January 30, 2023 at 07:14AM by BlackCatNeo
via reddit https://ift.tt/jU8xgLI
CataLpa's Home
CVE-2022-42475
2022 年 12 月 12 日，Fortinet 官方发布了影响 FortiGate SSLVPN 的 RCE 漏洞 CVE-2022-42475 相关信息。官方公告显示该漏洞已经被发现在野利用，建议所有用户尽快升级。本文对此漏洞的成因进行分析。
FIM (File Integrity Monitor) proof-of-concept implementation
https://ift.tt/bx8IQY0
Submitted January 30, 2023 at 05:45PM by CsaProtocol
via reddit https://ift.tt/2AhfxmI
https://ift.tt/bx8IQY0
Submitted January 30, 2023 at 05:45PM by CsaProtocol
via reddit https://ift.tt/2AhfxmI
GitHub
GitHub - CsaProtocol/PowerShell-FIM: File integrity monitor proof-of-concept in PowerShell sends a message via Telegram when it…
File integrity monitor proof-of-concept in PowerShell sends a message via Telegram when it detects changes to a specified directory. It continually checks for changes by generating hashes for all f...
Metasploit Framework 6.3 Released
https://ift.tt/FZNOmeE
Submitted January 30, 2023 at 07:45PM by Fugitif
via reddit https://ift.tt/euJBsiE
https://ift.tt/FZNOmeE
Submitted January 30, 2023 at 07:45PM by Fugitif
via reddit https://ift.tt/euJBsiE
Rapid7
Metasploit Framework 6.3 Released | Rapid7 Blog
Leopard Tank Announcement Prompt Retaliation
https://ift.tt/d0u8vQK
Submitted January 30, 2023 at 08:30PM by 0x636f6f6c
via reddit https://ift.tt/osz5EHF
https://ift.tt/d0u8vQK
Submitted January 30, 2023 at 08:30PM by 0x636f6f6c
via reddit https://ift.tt/osz5EHF
Cado Security | Cloud Investigation
Leopard Tank Announcement Prompts Cyber Retaliation - Cado Security | Cloud Investigation
The Cado Labs team discovered evidence of retaliation from high-profile Russian hacktivist groups in an effort to encourage collective cyber attacks against German infrastructure. This appears to be in response to yesterday’s expectations that Germany will…
DDoS attacks in Europe experienced a 73% increase in 2022 compared to the previous year
https://ift.tt/kyPAE4n
Submitted January 30, 2023 at 09:08PM by shapelez
via reddit https://ift.tt/hufNdsb
https://ift.tt/kyPAE4n
Submitted January 30, 2023 at 09:08PM by shapelez
via reddit https://ift.tt/hufNdsb
Habr
Q4 2022 DDoS Attacks and BGP Incidents
Now that 2022 has come to an end, we would like to share the DDoS attack mitigation and BGP incident statistics for the fourth quarter of the year, which overall saw unprecedented levels of DDoS...
Truffle Security is proud to host a new XSSHunter, that finds new vulnerabilities
https://ift.tt/zLlQYiD
Submitted January 30, 2023 at 09:56PM by wifihack
via reddit https://ift.tt/hIc75zi
https://ift.tt/zLlQYiD
Submitted January 30, 2023 at 09:56PM by wifihack
via reddit https://ift.tt/hIc75zi
Truffle Security
Truffle Security is proud to host a new XSSHunter - Truffle Security
Truffle Security is proud to be hosting a new XSSHunter, with new features, with the assistance of its original creator, Mandatory.
CloudGPT - Use ChatGPT to analyze AWS policies for vulnerabilities
https://ift.tt/lFWy9G5
Submitted January 31, 2023 at 08:01AM by ustayready
via reddit https://ift.tt/J8bgKLl
https://ift.tt/lFWy9G5
Submitted January 31, 2023 at 08:01AM by ustayready
via reddit https://ift.tt/J8bgKLl
Gist
CloudGPT - Use ChatGPT to analyze AWS policies for vulnerabilities
CloudGPT - Use ChatGPT to analyze AWS policies for vulnerabilities - gpt.py
Lockpicking The Lockout Policy For Information Correlation: Exploring the novel web app attack…
https://ift.tt/jS50Hfb
Submitted January 31, 2023 at 09:12AM by TheCrazyAcademic
via reddit https://ift.tt/zkeDalL
https://ift.tt/jS50Hfb
Submitted January 31, 2023 at 09:12AM by TheCrazyAcademic
via reddit https://ift.tt/zkeDalL
Medium
Lockpicking The Lockout Policy For Information Correlation: Exploring the novel web app attack…
If you don’t know what an oracle or testing oracle is in computer science in layman’s terms it’s where you ask a yes or no question in some…
How to identify and avoid malicious code in your software supply chain
https://ift.tt/v2GMN7D
Submitted January 31, 2023 at 04:33PM by n0llbyte
via reddit https://ift.tt/JwtQRZ5
https://ift.tt/v2GMN7D
Submitted January 31, 2023 at 04:33PM by n0llbyte
via reddit https://ift.tt/JwtQRZ5
JFrog
How to identify and avoid malicious code in your software supply chain
Dangerous payload scenarios are affecting cybersecurity now. Learn how attackers hide malicious code and methods to identify these packages to avoid infection.
The Good, Bad and Compromisable Aspects of Linux eBPF
https://ift.tt/XegUWO5
Submitted January 31, 2023 at 05:43PM by eberkut
via reddit https://ift.tt/TmG4loL
https://ift.tt/XegUWO5
Submitted January 31, 2023 at 05:43PM by eberkut
via reddit https://ift.tt/TmG4loL
Pentera
The Good, Bad and Compromisable Aspects of Linux eBPF - Pentera
2022 discoveries of new privilege escalation techniques Reading this blog will allow you to understand the eBPF mechanism and how a fairly small bug can
VMware vRealize Log Insight VMSA-2023-0001 Technical Deep Dive and Exploit POC
https://ift.tt/6HSIapt
Submitted January 31, 2023 at 05:41PM by scopedsecurity
via reddit https://ift.tt/rSz5wAJ
https://ift.tt/6HSIapt
Submitted January 31, 2023 at 05:41PM by scopedsecurity
via reddit https://ift.tt/rSz5wAJ
Horizon3.ai
VMware vRealize Log Insight VMSA-2023-0001 Technical Deep Dive
Technical deep-dive and exploit POC for VMware vRealize Log Insight RCE as reported in VMSA-2023-0001. This series of vulnerabilities leads to remote code execution and full system compromise. CVE-2022-31704, CVE-2022-31706, and CVE-2022-31711.
Exposing Secrets Via AppSec Tools: The SonarQube Case
https://ift.tt/lVpSnBO
Submitted January 31, 2023 at 04:59PM by roy_6472
via reddit https://ift.tt/CA0zVQd
https://ift.tt/lVpSnBO
Submitted January 31, 2023 at 04:59PM by roy_6472
via reddit https://ift.tt/CA0zVQd
Legitsecurity
Exposing Secrets Via SDLC Tools: The SonarQube Case
Legit Security | We investigate how sensitive information can get exposed via AppSec tools that you use in your dev pipeline, using the SonarQube Case.