ROSECURIFY
Subscribe
~/ seclog/ #29

Seclog - #29

20 curated links

g3n3r4l13

  1. Messing Around With AWS Batch For Privilege Escalations (blog.doyensec.com)
  2. Pre-authenticated RCE in VMware vRealize Network Insight (summoning.team)
  3. dangerzone.rocks (dangerzone.rocks)
  4. Unicode characters to Bypass Security Checks (sim4n6.beehiiv.com)
  5. Pentesting Xamarin Android apps: DLLs and root check bypass (security.humanativaspa.it)
  6. Getting Europe to become an active player in the global cybersecurity market: challenges, opportunities, and the way forward (ventureinsecurity.net)
  7. Why browser extension games need access to all websites | Almost Secure (palant.info)
  8. Introducing Google’s Secure AI Framework (blog.google)
  9. Ultimate 401 and 403 bypass methods (vidocsecurity.com)
  10. can I speak to your manager? hacking root EPP servers to take control of zones (hackcompute.com)
  11. Red Team Story Time! | LockBoxx (lockboxx.blogspot.com)
  12. Finding Vulnerabilities in Nuxt 3 (bryces.io)
  13. Freaky Leaky SMS: Extracting User Locations by Analyzing SMS Timings (arxiv.org)

g1thub7

  1. Prompt injection which leads to arbitrary code execution in langchain.chains.PALChain · Issue 5872 · hwchase17/langchain (github.com)
  2. CVE-2023-0630 (github.com)
  3. horizon3ai/CVE-2023-34362 (github.com)
  4. Sharpforce/XSS-Exploitation-Tool (github.com)
  5. ataradov/usb-sniffer (github.com)
  6. ihebski/DefaultCreds-cheat-sheet (github.com)
  7. luigigubello/PayloadsAllThePDFs: PDF Files for Pentesting (github.com)
← All Seclogs