ROSECURIFY
Subscribe
~/ seclog/ #47

Seclog - #47

36 curated links

g3n3r4l25

  1. sshx (sshx.io)
  2. The Everything App (anytype.io)
  3. Scapy (scapy.net)
  4. GPTs & Assistants API - Code Interpreter Data Exfiltration (evren.ninja)
  5. Scaling Detection and Response Operations at Coinbase (coinbase.com)
  6. Google’s AI Security Framework (safety.google)
  7. Terraform Security Best Practices – Sysdig (sysdig.com)
  8. Key Takeaways from the 2023 Kubernetes Security Report (wiz.io)
  9. Our Pwn2Own journey against time and randomness (part 1) (blog.quarkslab.com)
  10. Atlassian Confluence Data Center and Server Authentication Bypass - CVE-2023-22515 (nday.team)
  11. " [31m"?! ANSI Terminal security in 2023 and finding 10 CVEs (dgl.cx)

    \

  12. Post-exploiting a compromised etcd – Full control over the cluster and its nodes (research.nccgroup.com)
  13. Hacking into Toyota’s global supplier management network (eaton-works.com)
  14. Hacking Google Bard - From Prompt Injection to Data Exfiltration · Embrace The Red (embracethered.com)
  15. Remote Code Execution in Tutanota Desktop due to Code Flaw | Sonar (sonarsource.com)
  16. Race Conditions with pipelining (infosecwriteups.com)
  17. Exploiting (code-white.com)

    ASP.NET TemplateParser

  18. Adding build provenance to Homebrew | Trail of Bits Blog (blog.trailofbits.com)
  19. Office Documents Poisoning in SHVE (blog.doyensec.com)
  20. Your printer is not your printer ! - Hacking Printers at Pwn2Own Part I | DEVCORE (devco.re)
  21. Report 2180521 - Google Docs link in JS files allows editing & reading survey information (hackerone.com)
  22. A Pentester’s Approach to Kubernetes Security — Part 1 (blog.appsecco.com)
  23. PRTG Remote Code Execution - CVE-2023-32782 (baldursecurity.com)
  24. Introducing Advanced Vulnerability Insights for GKE (cloud.google.com)
  25. 50 Shades of Vulnerabilities: Uncovering Flaws in Open-Source Vulnerability Disclosures (blog.aquasec.com)

X1

  1. Wiz on X: "🚨 BREAKING: Wiz Research just released a groundbreaking Kubernetes security report. Analyzing over 200,000 cloud accounts revealed:" / X (@wiz_io)

g1thub10

  1. GitHub - xaitax/PatchaPalooza (github.com)
  2. GitHub - pwnwriter/haylxon (github.com)
  3. GitHub - projectdiscovery/nuclei-ai-extension (github.com)
  4. GitHub - vishalgarg-sec/Software-Supply-Chain-Security (github.com)
  5. GitHub - UnaPibaGeek/honeypots-detection (github.com)
  6. GitHub - nxenon/h2spacex (github.com)
  7. GitHub - redcanaryco/mac-monitor (github.com)
  8. GitHub - Enelg52/OffensiveGo (github.com)
  9. GitHub - c0dejump/HExHTTP (github.com)
  10. GitHub - doyensec/Session-Hijacking-Visual-Exploitation (github.com)
← All Seclogs