ROSECURIFY
Subscribe
~/ seclog/ #39

Seclog - #39

25 curated links

g3n3r4l16

  1. Apple urges security update after NSO's spyware hacked U.S. iPhone (fastcompany.com)
  2. New Cyber Espionage Campaign Targets Tech, Government Entities (duo.com)
  3. Zero-day Vulnerability Database (zero-day.cz)
  4. Bypass Two-Factor Authentication of Facebook Accounts ($25,300) (linkedin.com)
  5. Methods to Backdoor an AWS Account (mystic0x1.github.io)
  6. ATHI — An AI Threat Modeling Framework for Policymakers (danielmiessler.com)
  7. HoyaHaxa: A Security Research Blog: Technical Details for CVE-2023-29301: Adobe ColdFusion Access Control Bypass for a CFAdmin Authentication Component (hoyahaxa.blogspot.com)
  8. Manu's Code & Hacking Port - Understanding Bluetooth security I (unam.re)
  9. Diving into Starlink's User Terminal Firmware (blog.quarkslab.com)
  10. Docker for Pentesters (blog.ropnop.com)
  11. Secure FastAPI with eBPF. Leverage eBPF to secure internet-facing… (avi-lumelsky.medium.com)
  12. Hacking GTA V RP Servers Using Web Exploitation Techniques (nullpt.rs)
  13. Apache Superset Part II: RCE, Credential Harvesting and More (horizon3.ai)
  14. Blog: CVE-2023-4634 - Tricky Unauthenticated RCE on Wordpress Media Library Assistant Plugin using a good old Imagick (patrowl.io)
  15. When URL parsers disagree (CVE-2023-38633) (canva.dev)
  16. XSS with CSP bypass leads to diagrams backdoor vulnerability found in drawio (huntr.dev)

y0utube1

  1. A New Attack Interface in Java Applications (youtube.com)

g1thub8

  1. XMCyber/XMGoat (github.com)
  2. e1abrador/sub.Monitor (github.com)
  3. jthack/PIPE (github.com)
  4. mrd0x/BITB (github.com)
  5. HalilDeniz/DNSWatch (github.com)
  6. sensity-ai/dot (github.com)
  7. Zigrin-Security/CakeFuzzer (github.com)
  8. glitchedgitz/cook (github.com)
← All Seclogs