ROSECURIFY
Subscribe
~/ seclog/ #134

Seclog - #134

22 curated links

g3n3r4l16

  1. TapTrap Android Tapjacking Attack (taptrap.click)

    Announcing TapTrap, a new attack on Android enabling silent access to device functions like camera or location. It lures users into performing unintended actions without consent.

  2. Evaluating LLM Backend Security Generation (baxbench.com)

    Introducing BaxBench, a benchmark testing state-of-the-art LLM performance in generating secure and correct backends. Includes a leaderboard showing results across different prompt types.

  3. NGINX Off-By-Slash RCE Misconfiguration (omaralzughaibi.com)

    A blog post detailing a vulnerability discovered due to an NGINX misconfiguration. This eventually led to Remote Code Execution (RCE), granting full control over the affected server.

  4. Git Clone Recursive RCE CVE-2025-48384 (dgl.cx)

    Learn about CVE-2025-48384, a vulnerability in Git that can lead to remote code execution if git clone --recursive is used on an untrusted repository on Unix-like platforms. Update Git and embedded software to fixed versions.

  5. Cross-Tenant Compromise via Bucket Squatting (bughunters.google.com)

    A Google Bug Hunters report detailing a cross-tenant compromise of Application Design Center spaces. The attack vector involved bucket squatting.

  6. Dangers of CSV Injection (georgemauer.net)

    An article discussing the often underestimated dangers of CSV Injection. It uses example CSV snippets to illustrate how malicious formulas can be embedded.

  7. Tiki Wiki SSTI Vulnerabilities (karmainsecurity.com)

    Report on two Server-Side Template Injection (SSTI) vulnerabilities affecting Tiki Wiki CMS Groupware. These can be exploited by creating specially crafted wiki pages.

  8. Thoughts on Bug Bounty Hunting (zhero-web-sec.github.io)

    A blog post sharing thoughts, experiences, and perspectives on bug bounty hunting. It aims to answer common questions about getting started and strategies.

  9. Application Attack Matrix for Modern Security (oligo.security)

    Introducing the Application Attack Matrix aimed at addressing unique threats targeting modern applications. It suggests traditional frameworks struggle with cloud-native, microservices, and API-driven architectures.

  10. Bypassing Google Anti-Adblock Update (0x44.xyz)

    A blog post describing a bug found in Chrome that allowed webRequestBlocking to work in MV3. This bug enabled adblockers to function despite Google's anti-adblock updates.

  11. Fortinet FortiWeb SQLi to RCE CVE-2025-25257 (labs.watchtowr.com)

    Analysis of CVE-2025-25257, a pre-auth SQL injection vulnerability in Fortinet FortiWeb Fabric Connector. This flaw could potentially lead to RCE.

  12. Supabase MCP Can Leak SQL Database (generalanalysis.com)

    Discusses how Supabase's Model Context Protocol (MCP) integration can be exploited. An attacker might be able to leak a developer's entire private SQL database.

  13. AI Hallucination Cases Database (damiencharlotin.com)

    A database tracking legal decisions in cases where generative AI produced hallucinated content. It focuses on instances like fake citations in court filings.

  14. The S in MCP Stands for Security (novasecurity.co.nz)

    Investigating the security implications of the Model Context Protocol (MCP) integrations, specifically focusing on the reliance on OAuth 2.1 for the authorization layer. Part 2 covers MCP security.

  15. IDOR Leaked 64 Million McDonald's Applications (ian.sh)

    A writeup detailing how an IDOR vulnerability in the McHire chatbot platform could leak 64 million McDonald's job applications. The platform is used by many McDonald's franchisees.

  16. Bypassing Meta's Llama Firewall (medium.com)

    A case study explores prompt injection vulnerabilities, detailing how a Meta Llama firewall was bypassed. This highlights the ongoing challenge of securing AI models against adversarial inputs.

g1thub6

  1. Vulnerability Correlation & CVD Management Tool (github.com)

    A GitHub tool facilitating quick correlation of vulnerabilities from various sources and streamlining Coordinated Vulnerability Disclosure (CVD) management. It's a collaborative platform for security advisories and bundles. Explore on GitHub

  2. Data Exfiltration via DNS OOB (gist.github.com)

    A gist outlining a method for data exfiltration using DNS in Out-Of-Band (OOB) scenarios. It shows how to leverage DNS queries and encoding techniques like hex/base64 to transmit sensitive information when direct communication is unavailable. Explore on GitHub

  3. Bluetooth Mesh Chat & AI Prompts (github.com)

    mesh chat for IRC-like communication and prompts for the Grok chat assistant. Also, discover tools for remote browser session control, cloud drift detection, and policy-based access control on eBPF objects. Explore on GitHub

  4. Go EUVD Library & Security Workflows (github.com)

    Access real-time vulnerability data with a Go library for the ENISA EU Vulnerability Database (EUVD) API. Additionally, find a flexible framework for security teams to build AI-powered workflows. Explore on GitHub

  5. Tailscale for Red Team Ops (github.com)

    A lightweight binary facilitates joining a device to a Tailscale network and exposes a local SOCKS5 proxy. This is designed for red team operations and ephemeral access into restricted environments. Explore on GitHub

  6. Weaponizing WaybackUrls & Container Linter (github.com)

    tool for weaponizing WaybackUrls for recon, bug bounties, and OSINT, targeting sensitive endpoints. Also, find a container image linter for security to help build best-practice Docker images. Explore on GitHub

← All Seclogs