Technical Information Security Content & Discussion

8 readers

1 users here now

/r/netsec is a community-curated aggregator of technical information security content. Our mission is to extract signal from the noise — to...

founded 1 year ago

MODERATORS

[email protected]

126

1

Class Pollution in Ruby: A Deep Dive into Exploiting Recursive Merges (blog.doyensec.com)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/nibblesec on 2024-10-02 17:54:15.

127

1

HTTP Parameter Pollution in 2024! (medium.com)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/AlmondOffSec on 2024-10-02 08:32:09.

128

1

Exploiting AMD atdcm64a.sys arbitrary pointer dereference - Part 2 (security.humanativaspa.it)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/0xdea on 2024-10-02 08:09:07.

129

1

Exploiting trust: Weaponizing permissive CORS configurations (outpost24.com)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/AlmondOffSec on 2024-10-01 13:49:41.

130

1

Zimbra - Remote Command Execution (CVE-2024-45519) (blog.projectdiscovery.io)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/AlmondOffSec on 2024-10-01 13:48:28.

131

1

Vesta Admin Takeover: Exploiting Reduced Seed Entropy in bash $RANDOM (fortbridge.co.uk)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/adrian_rt on 2024-10-01 09:19:43.

132

1

Finding classes for exploiting Unsafe Reflection vulnerabilities in Java with Joern (blog.convisoappsec.com)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/sercurity on 2024-09-30 15:45:53.

133

1

Iconv, set the charset to RCE: Exploiting the glibc to hack the PHP engine (part 3) (www.ambionics.io)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/cfambionics on 2024-09-30 07:43:55.

134

1

The most powerful combination of React ecosystem tools in 2024! (beckmoulton.medium.com)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/Several_Relation_920 on 2024-09-29 04:19:07.

135

1

Probing Slack Workspaces for Authentication Information and other Treats (papermtn.co.uk)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/TheAlphaBravo on 2024-09-28 08:24:57.

136

1

DNS poisoning in 30M domains caused by the Great Firewall (www.assetnote.io)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/albinowax on 2024-09-27 13:56:48.

137

1

Unath RCE in CUPS which triggers after a print job - affects most desktop linux flavors (www.evilsocket.net)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/FlyingTriangle on 2024-09-26 20:47:47.

138

1

Hacking Kia: Remotely Controlling Cars With Just a License Plate (samcurry.net)

submitted 2 months ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/Titokhan on 2024-09-26 15:56:40.

139

1

Critical Vulnerabilities Discovered in Automated Tank Gauge Systems - Impact can range from DoS to physical damage. (www.bitsight.com)

submitted 2 months ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/JollyCartoonist3702 on 2024-09-25 22:47:44.

140

1

Jorkle's OSCP Guide (jorkle.com)

submitted 2 months ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/jorkle0895 on 2024-09-25 20:44:00.

141

1

New CVE! Nortek Linear eMerge E3 Pre-Auth RCE! (ssd-disclosure.com)

submitted 2 months ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/Straight-Zombie-646 on 2024-09-25 16:58:34.

142

1

Subdomain search engine (www.merklemap.com)

submitted 2 months ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/SomeoneIsSomeWhere on 2024-09-25 16:42:47.

143

1

A vulnerability in the Nortek Linear eMerge E3 allows remote unauthenticated attackers to cause the device to execute arbitrary commands (ssd-disclosure.com)

submitted 2 months ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/SSDisclosure on 2024-09-25 12:02:48.

144

1

Critical Vulnerabilities in WatchGuard SSO Agent (www.redteam-pentesting.de)

submitted 2 months ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/RedTeamPentesting on 2024-09-25 11:26:20.

145

1

CVE-2024-28987: SolarWinds Web Help Desk Hardcoded Credential Vulnerability Deep-Dive – Horizon3.ai (www.horizon3.ai)

submitted 2 months ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/scopedsecurity on 2024-09-25 10:33:07.

146

1

Exploiting AMD atdcm64a.sys arbitrary pointer dereference - Part 1 (security.humanativaspa.it)

submitted 2 months ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/0xdea on 2024-09-25 07:59:33.

147

1

Open to Exploitation: The Security Risks of Unauthenticated Pager Networks (telescope.ac)

submitted 2 months ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/vasiliborodin on 2024-09-23 08:09:19.

148

1

Decentralized Encrypted P2P Chat (positive-intentions.com)

submitted 2 months ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/Accurate-Screen8774 on 2024-09-22 17:54:13.

149

1

Announcing Security Exception Program Pack 1.0 (www.sectemplates.com)

submitted 2 months ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/SecTemplates on 2024-09-21 23:57:27.

150

1

0-Click RCE in MediaTek Wi-Fi Chipsets — 4 exploits, 1 bug: exploiting CVE-2024-20017 4 different ways (blog.coffinsec.com)

submitted 2 months ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/MegaManSec2 on 2024-09-21 06:19:21.