Technical Information Security Content & Discussion

8 readers

1 users here now

/r/netsec is a community-curated aggregator of technical information security content. Our mission is to extract signal from the noise — to...

founded 1 year ago

MODERATORS

[email protected]

76

1

Give Me the Green Light Part 2: Dirty Little Secrets (www.redthreatsec.com)

submitted 3 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/towtoo893 on 2024-10-30 18:22:07.

77

1

Exploiting a Blind Format String Vulnerability in Modern Binaries: A Case Study from Pwn2Own Ireland 2024 (www.synacktiv.com)

submitted 3 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/vrebtimaj on 2024-10-30 18:17:25.

78

1

An analysis of the Keycloak authentication system (security.humanativaspa.it)

submitted 3 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/0xdea on 2024-10-30 14:20:29.

79

1

Using AFL++ on bug bounty programs: an example with Gnome libsoup (offsec.almond.consulting)

submitted 3 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/AlmondOffSec on 2024-10-30 12:55:18.

80

1

Cracking into a Just Eat / Takeaway.com terminal with an NFC card (blog.mgdproductions.com)

submitted 3 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/Titokhan on 2024-10-29 23:15:26.

81

1

What Are My OPTIONS? CyberPanel v2.3.6 pre-auth RCE (dreyand.rs)

submitted 3 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/albinowax on 2024-10-29 08:13:57.

82

1

Anatomy of an LLM RCE (www.cyberark.com)

submitted 4 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/jat0369 on 2024-10-28 14:10:49.

83

1

Privilege escalation through TPM Sniffing when BitLocker PIN is enabled (blog.scrt.ch)

submitted 4 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/dukeofmola on 2024-10-28 12:08:54.

84

1

Give Me the Green Light Part 1: Hacking Traffic Control Systems (www.redthreatsec.com)

submitted 4 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/towtoo893 on 2024-10-28 08:29:37.

85

1

Engineering WCF Hacks (blog.silentsignal.eu)

submitted 4 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/buherator on 2024-10-28 07:14:28.

86

1

Introducing zizmor: now you can have beautiful clean workflows (blog.yossarian.net)

submitted 4 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/yossarian_flew_away on 2024-10-28 01:10:45.

87

1

Akamai and Kyndryl partner for Zero Trust Segmentation defence (www.crn.com.au)

submitted 4 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/vrebtimaj on 2024-10-27 13:53:34.

88

1

Threats Spike Amid Rising Vulnerabilities (evrimagaci.org)

submitted 4 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/vrebtimaj on 2024-10-27 13:34:16.

89

1

Retrofitting encrypted firmware is a Bad Idea™ (haxx.in)

submitted 4 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/AlmondOffSec on 2024-10-27 12:40:12.

90

1

CVE-2024-26926 Binder n-day analysis (github.com)

submitted 4 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/pwntheplanet on 2024-10-24 20:21:21.

91

1

Vulnhuntr: Autonomous AI finds first 0-day vulnerabilities (github.com)

submitted 4 weeks ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/FlyingTriangle on 2024-10-23 11:50:04.

92

1

Multiple vulnerabilities in the Realtek card reader driver. Affects Dell, Lenovo, etc (zwclose.github.io)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/zwclose on 2024-10-25 22:00:56.

93

1

LLM Security: Playing with ChatGPT code execution capability (Part 1). (mohitdabas.wordpress.com)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/beyonderdabas on 2024-10-25 21:24:24.

94

1

Bench Press: Leaking Text Nodes with CSS (blog.pspaul.de)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/albinowax on 2024-10-25 10:32:55.

95

1

A vulnerability in the Common Log File System (CLFS) driver allows a local user to gain elevated privileges on Windows 11 (ssd-disclosure.com)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/SSDisclosure on 2024-10-25 09:23:05.

96

1

AWS CDK Risk: Exploiting a Missing S3 Bucket Allowed Account Takeover (www.aquasec.com)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/Pale_Fly_2673 on 2024-10-24 13:10:02.

97

1

China's Quantum Tunneling Breakthrough: The Future of Encryption is at Risk (nattothoughts.substack.com)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/Xaerr on 2024-10-24 01:10:09.

98

1

Using Nix to Fuzz Test a PDF Parser (mtlynch.io)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/mtlynch on 2024-10-23 14:58:46.

99

1

Auth RCE in multiple Xerox printer series (sec-consult.com)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/0x9000 on 2024-10-23 08:50:13.

there were even two more unauthenticated RCE and authentication bypass issues found, Xerox already patched those in the past, but did not mention them in their security notes? 🤔

100

1

SELinux bypasses (klecko.github.io)

submitted 1 month ago by [email protected] to c/[email protected]

0 comments fedilink

The original post: /r/netsec by /u/ffyns on 2024-10-23 06:16:05.