ROSECURIFY
Subscribe
~/ seclog/ #46

Seclog - #46

32 curated links

g3n3r4l24

  1. Google Cloud Vertex AI - Data Exfiltration Vulnerability Fixed in Generative AI Studio (embracethered.com)
  2. GPT-4 Vision Prompt Injection (evren.ninja)
  3. Post Mortem on Cloudflare Control Plane and Analytics Outage (blog.cloudflare.com)
  4. 1466183 - Security: Memory corrupt in v8, leading to RCE - chromium (bugs.chromium.org)
  5. Enumerate/Bruteforce/Attack All the Things! Presenting Legba (evilsocket.net)
  6. Now available: Building a scalable vulnerability management program on AWS | AWS Security Blog (aws.amazon.com)
  7. Shielder - CVE-2023-33466 - Exploiting Healthcare Servers with Polyglot Files (shielder.com)
  8. Citrix Bleed: Leaking Session Tokens with CVE-2023-4966 (assetnote.io)
  9. Cascade: CPU Fuzzing via Intricate Program Generation - Computer Security Group (comsec.ethz.ch)
  10. Java Deserialization Vulnerability Still Alive (blog.pyn3rd.com)
  11. Introducing HAR Sanitizer: secure HAR sharing (blog.cloudflare.com)
  12. Samy Kamkar - KeySweeper (samy.pl)
  13. Semgrep's New Rule Syntax (parsiya.net)
  14. Data-bouncing (thecontractor.io)
  15. DOM-based race condition: racing in the browser for fun - RyotaK's Blog (blog.ryotak.net)
  16. The Future of Drone Warfare - Schneier on Security (schneier.com)
  17. Cisco IOS XE CVE-2023-20198: Deep Dive and POC (horizon3.ai)
  18. Stealing OAuth tokens of connected Microsoft accounts via open redirect in Harvest App (eval.blog)
  19. Chaos-Sec-Lab: Grand Theft Auto – RF Locks Hacking Flipper-Zero Edition Part 1 (chaos-lab.blogspot.com)
  20. Chaos-Sec-Lab: Grand Theft Auto – RF Locks Hacking Flipper-Zero Edition Part 2 (chaos-lab.blogspot.com)
  21. Cloudflare incident on October 30, 2023 (blog.cloudflare.com)
  22. Rusty Droid: Under the Hood of a Dangerous Android RAT - K7 Labs (labs.k7computing.com)
  23. Compromising F5 BIGIP with Request Smuggling (praetorian.com)
  24. The CVSS Special Interest Group is proud to announce the official release of CVSS v4.0. (infosec.exchange)

y0utube2

  1. AWS Cloud Penetration Testing Explained with Example (youtube.com)
  2. I Stole a Microsoft 365 Account. Here's How. (youtube.com)

g1thub6

  1. ethicalhackingplayground/dnsresolver (github.com)
  2. evilsocket/legba (github.com)
  3. Escape-Technologies/graphql-wordlist (github.com)
  4. CycodeLabs/raven) (github.com)
  5. D00Movenok/BounceBack (github.com)
  6. nopcorn/DuckDuckC2 (github.com)
← All Seclogs