Technical Information Security Content & Discussion

10 readers
1 users here now

/r/netsec is a community-curated aggregator of technical information security content. Our mission is to extract signal from the noise — to...

founded 2 years ago
MODERATORS
[email protected]
listing: all - local
251
1
CISA ICS Advisory: ControlbyWeb Relay (www.cisa.gov)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/deepwatch_sec on 2023-12-07 19:40:54+00:00.

252
1
Qilin Ransomware malware analysis (www.shadowstackre.com)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/ShadowStackRE on 2023-12-07 15:22:58+00:00.

253
1
CVE-2023-46818: PHP Code Injection Vulnerability in ISPConfig <= 3.2.11 (karmainsecurity.com)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/eg1x on 2023-12-07 16:56:08+00:00.

254
1
Introducing Fuzzomatic: Using AI to Automatically Fuzz Rust Projects from Scratch (research.kudelskisecurity.com)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/tmlxs on 2023-12-07 15:32:46+00:00.

255
1
CVE-2023-46818: PHP Code Injection Vulnerability in ISPConfig <= 3.2.11 (karmainsecurity.com)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/eg1x on 2023-12-07 16:56:08+00:00.

256
1
Web API testing techniques & labs (portswigger.net)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/albinowax on 2023-12-07 13:53:08+00:00.

257
1
Cybresec & Opensource firmware online party! - today at 5 PM UTC (vpub.dasharo.com)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/Mike-Banon1 on 2023-12-07 08:42:05+00:00.

258
1
Cueing up a calculator: an introduction to exploit development on Linux (github.blog)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/poltess0 on 2023-12-07 08:33:21+00:00.

259
1
Cueing up a calculator: an introduction to exploit development on Linux (github.blog)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/poltess0 on 2023-12-07 08:33:21+00:00.

260
1
What is Loader Lock? (elliotonsecurity.com)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/elliotkillick on 2023-12-06 19:18:16+00:00.

261
1
Red team or adversary? Hunting Supply Chain Threat Actors Targeting A Major Financial Institution. (blog.phylum.io)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/louis11 on 2023-12-06 21:59:01+00:00.

262
1
New RCE popchain in Laravel (fenrisk.com)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/monoimpact on 2023-12-06 15:53:04+00:00.

263
1
Vulnerability disclosure for Zyxel's personal cloud storage device (NAS326) - Part1 (bugprove.com)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/BugProve on 2023-12-06 13:52:18+00:00.

264
1
New RCE popchain in Laravel (fenrisk.com)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/monoimpact on 2023-12-06 15:53:04+00:00.

265
1
Vulnerability disclosure for Zyxel's personal cloud storage device (NAS326) - Part1 (bugprove.com)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/BugProve on 2023-12-06 13:52:18+00:00.

266
1
Split-Second DNS Rebinding in Chrome, Edge and Safari (www.intruder.io)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/dcthatch on 2023-12-06 13:29:02+00:00.

267
1
Split-Second DNS Rebinding in Chrome, Edge and Safari (www.intruder.io)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/dcthatch on 2023-12-06 13:29:02+00:00.

268
1
+1500 HuggingFace API Tokens were exposed, leaving millions of Meta-Llama, Bloom, and Pythia users vulnerable to supply chain attacks (www.lasso.security)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/Lany_B on 2023-12-06 12:08:20+00:00.

269
1
Blind CSS Exfiltration: exfiltrate unknown web pages (portswigger.net)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/albinowax on 2023-12-06 10:18:39+00:00.

270
1
Unicode XSS via Combining Characters (gist.github.com)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/ablativeyoyo on 2023-12-05 14:12:00+00:00.

271
1
Pre-Auth Kiosk Escape Privilege Escalation in One Identity Password Manager Secure Password Extension (sec-consult.com)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/0x9000 on 2023-12-06 06:38:28+00:00.

272
1
Multiple Vulnerabilities In Extreme Networks ExtremeXOS (rhinosecuritylabs.com)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/hackers_and_builders on 2023-12-05 17:53:38+00:00.

273
1
RFC 1510: The Kerberos Network Authentication Service (V5) (datatracker.ietf.org)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/ducm on 2023-12-06 09:34:37+00:00.

Having noticed some strange DNS settings on my phone, I followed the new connection to find bundles of info like this. Hope this is an interesting read for redditors. The whole site is worth a visit just to see where all the swiped information ends up.

274
1
Pre-Auth Kiosk Escape Privilege Escalation in One Identity Password Manager Secure Password Extension (sec-consult.com)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/0x9000 on 2023-12-06 06:38:28+00:00.

275
1
Multiple Vulnerabilities In Extreme Networks ExtremeXOS (rhinosecuritylabs.com)
submitted 1 year ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/hackers_and_builders on 2023-12-05 17:53:38+00:00.

view more: ‹ prev next ›