ROSECURIFY
Subscribe
~/ seclog/ #44

Seclog - #44

36 curated links

g3n3r4l26

  1. Unpacking CVE-2023-20198: A Critical Weakness In Cisco IOS XE: (greynoise.io)
  2. Encrypt. Now. (blog.tripu.info)
  3. One Scheme to Rule Them All: OAuth Account Takeover | Ostorlab: Mobile App Security Testing for Android and iOS (blog.ostorlab.co)
  4. Risky Biz News: Israel warns citizens of security camera hack risk (riskybiznews.substack.com)
  5. Cybersecurity burnout - Haklule's Experience - Blog Detectify (blog.detectify.com)
  6. Leveraging an SSRF to leak a secret API key (jub0bs.com)
  7. Advanced fuzzing unmasks elusive vulnerabilities (srlabs.de)
  8. Encrypted traffic interception on Hetzner and Linode targeting the largest Russian XMPP (Jabber) messaging service (notes.valdikss.org.ru)
  9. The 3 AI Security Trends You CANNOT Ignore in 2024 | by Taimur Ijlal | The Generator | Oct, 2023 | Medium (medium.com)
  10. Persistent cross-site scripting vulnerabilities in Liferay Portal | Pentagrid AG (pentagrid.ch)
  11. Using silent SMS to localize LTE users (mandomat.github.io)
  12. Squid Caching Proxy Security Audit: 55 vulnerabilities and 35 0days | Squid-Security-Audit (megamansec.github.io)
  13. Using Cloudflare to bypass Cloudflare – Certitude Blog (certitude.consulting)
  14. Attacking AWS Cognito with Pacu (p1) - Rhino Security Labs (rhinosecuritylabs.com)
  15. Attacking AWS Cognito with Pacu (p2) - Rhino Security Labs (rhinosecuritylabs.com)
  16. Data Exposure and ServiceNow: The Elephant in the ITSM Room — Enumerated (enumerated.ie)
  17. CVE-2022-4908: SOP bypass in Chrome using Navigation API - Johan Carlsson (joaxcar.com)
  18. Chaining an IDOR with a business-logic error to achieve critical impact :: (jub0bs.com)
  19. Spam iOS, Android and Windows with Bluetooth pairing messages using Flipper Zero or Android smartphone - Mobile Hacker (mobile-hacker.com)
  20. Threat Brief: Cisco IOS XE Web UI Privilege Escalation Vulnerability (unit42.paloaltonetworks.com)
  21. Webcam Hacking (again) - Safari UXSS | Ryan Pickren (ryanpickren.com)
  22. Getting RCE in Chrome with incomplete object initialization in the Maglev compiler - The GitHub Blog (github.blog)
  23. Knocking on the Front Door (client side desync attack on Azure CDN) :: Jeti's blog (blog.jeti.pw)
  24. About This Series | Beyond XSS (aszx87410.github.io)
  25. Security Vulnerabilities in CasaOS | Sonar (sonarsource.com)
  26. From SSRF to RCE on Mastodon (CVE-2023-42450) · scumjr (scumjr.github.io)

y0utube3

  1. Kubernetes Hacking: From Weak Applications to Cluster Control (youtube.com)
  2. Hacking Cloud For Fun and Profit (youtube.com)
  3. Getting Started with Semgrep Secrets (youtube.com)

g1thub7

  1. Limmen/csle (github.com)
  2. OWASP/QRLJacking (github.com)
  3. 0xk1h0/ChatGPT\DAN (github.com)
  4. gogotheauditor/audits (github.com)
  5. saelo/jscpwn (github.com)
  6. dafthack/GraphRunner (github.com)
  7. nxenon/grpc-pentest-suite (github.com)
← All Seclogs