ROSECURIFY
Subscribe
~/ seclog/ #62

Seclog - #62

22 curated links

g3n3r4l17

  1. Go Go XSS Gadgets: Chaining a DOM Clobbering Exploit in the Wild | Brett Buerhaus (buer.haus)

    Detailed analysis of a DOM clobbering-based XSS exploit.

  2. Understanding Task Injection Vulnerabilities: A Bug Bounty Perspective (evren.ninja)

    Insights into task injection vulnerabilities from a bug bounty viewpoint.

  3. The "KeyTrap" DNS Vulnerability \[ (lwn.net)

    \] - Exploration of a critical DNS flaw.

  4. CSP Bypass on (hackerone.com)

    PortSwigger.net using Google Script Resources \- Analysis of a CSP bypass using Google script resources.

  5. Attacking APIs (blog.devsecopsguides.com)

    Strategies and methods for effective API attacks.

  6. GreyNoise Labs - Code Injection or Backdoor: A New Look at Ivanti’s CVE-2021-44529 (labs.greynoise.io)

    Investigating the Ivanti exploit.

  7. “To Live is to Fight, to Fight is to Live! - IBM ODM Remote Code Execution (labs.watchtowr.com)

    Analysis of a remote code execution vulnerability in IBM ODM.

  8. Critical RCE Patched in Bricks Builder Theme - Patchstack (patchstack.com)

    Discussion of a critical RCE vulnerability in the Bricks Builder theme.

  9. curl HTTP/3 Security Audit (daniel.haxx.se)

    - A security audit of curl's HTTP/3 implementation.

  10. Bypassing Origin Policies to Exploit Local Network Devices | CYTRES (cytres.com)

    Techniques for exploiting local network devices by bypassing origin policies.

  11. AI for Security: Eight Areas of Opportunity - Menlo Ventures (menlovc.com)

    Exploring the potential of AI in cybersecurity.

  12. Exploiting Cacheable Responses - Attack Ships on Fire (attackshipsonfi.re)

    Techniques for exploiting cacheable HTTP responses.

  13. Nom for Security: A Proactive Security Review of Nomulus - Google Bug Hunters (bughunters.google.com)

    A proactive security review of Google's Nomulus.

  14. Azure DevOps Zero-Click CI/CD Vulnerability (legitsecurity.com)

    Uncovering a zero-click vulnerability in Azure DevOps.

  15. Strengthening Cyber Defenses: Best Practices for Email Security Headers (beaglesecurity.substack.com)

    Best practices for implementing email security headers.

  16. TruffleHog Now Detects AWS Canaries without Setting Them Off ◆ Truffle Security Co. (trufflesecurity.com)

    TruffleHog's new capability to detect AWS canaries.

  17. Herr Bischoff's Blocklists (ipbl.herrbischoff.com)

    Comprehensive blocklists for improved online security and privacy. Read

X2

  1. Ron Masas on X (@CertiKAlert)

    Discussion of stored XSS vulnerabilities in ChatGPT. View Tweet

  2. ](https://twitter.com/CertiKAlert/status/1760583150382579879?utmsource=rosecurify.com&utmmedium=referral&utmcampaign=seclog-62) (@fr0gger_)

    Thomas Roccia 🤘 on X - Insights into analyzing data leaks in foreign languages. View Tweet

y0utube1

  1. Vision (youtube.com)

    Pro Teardown: Behind the Complex and Creepy Tech - A teardown analysis of the Vision Pro technology. Watch Here

g1thub2

  1. xaitax/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability (github.com)

    Information on a Microsoft Outlook remote code execution vulnerability. Explore on GitHub

  2. cloudflare/cfssl: CFSSL: Cloudflare's PKI and TLS toolkit (github.com)

    Cloudflare's toolkit for PKI and TLS. Explore on GitHubI hope this format meets your expectations!

← All Seclogs