Plus récents
yaracroft

Security flaw in allows leveraging GitHub Actions to bypass the required reviews mechanism and push unreviewed code to a protected branch, potentially allowing malicious code to be used by other users or flow down the pipeline to production

medium.com/cider-sec/bypassing

0
yaracroft

CVE-2021-33021 Cross-site scripting & improper input validation vulnerabilities still remain in xArrow's xArrow SCADA informatique

isssource.com/holes-remain-in-

0
yaracroft

Building a POC for CVE-2021-40438

firzen.de/building-a-poc-for-c

0
yaracroft

MysterySnail - Kaspersky finds zero-day exploit for

kaspersky.com/about/press-rele

0
yaracroft

Weak SSH Key Generation Fix in GitKraken v8.0.1

gitkraken.com/blog/weak-ssh-ke

0
yaracroft

On April 30th, 2021, WhiteHoodHacker rickrolled his high school district. Not just his school but the entirety of Township High School District 214. It's the second-largest high school district in Illinois, consisting of 6 different schools with over 11,000 enrolled students

whitehoodhacker.net/posts/2021

0
yaracroft

*I accidentally discovered a potential vulnerability in during a late night debugging session on a MP4 muxer

realkeyboardwarrior.github.io/

0
yaracroft

CVE-2021-30883 Bindiff & PoC for the IOMFB vulnerability, iOS 15.0.2

github.com/saaramar/IOMFB_inte

0
yaracroft

CVE-2021-30883 Vulnerability in IOMobileFrameBuffer/AppleCLCD exploited in the wild

saaramar.github.io/IOMFB_integ

0
yaracroft

CVE-2021-25635 Vulnérabilité dans le système de signature numérique de LibreOffice & OpenOffice

libreoffice.org/about-us/secur

0
yaracroft

Oops! They did it again. silently patches yet another 0-day - check you have 15.0.2

nakedsecurity.sophos.com/2021/

0
yaracroft

💥 CVE-2021-1594 A vulnerability in the REST API of Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to perform a command injection attack & elevate privileges to root

tools.cisco.com/security/cente

0
yaracroft

💥 Zero-Day in HTTP Server 2.4.49 (only that version) already exploited ITW

tenable.com/blog/cve-2021-4177

0
yaracroft

Des pirates exploitent une faille du système d'authentification à 2 facteurs et pillent l'argent de plus de 6.000 comptes sur

geeko.lesoir.be/2021/10/05/des

0
yaracroft

Analysis of CVE-2021-1810 Gatekeeper bypass

labs.f-secure.com/blog/analysi

0
yaracroft

CVE-2021-1810 The discovery of Gatekeeper bypass

labs.f-secure.com/blog/the-dis

0
yaracroft

(CVE-2021-36260) +70 Hikvision camera & NVR models affected - vulnerability allow hackers to remotely take control of devices without any user interaction

watchfulip.github.io/2021/09/1

0
yaracroft

Analysis of Autodiscover, a protocol used to authenticate to Microsoft Exchange servers and to configure client access

guardicore.com/labs/autodiscov

0
yaracroft

(CVE-2021-3437) HP OMEN Gaming Hub (omen.com) A driver privilege-escalation « bug » gives attackers kernel-mode access to millions of PCs used for . HP put out a fix on Sept. 14, 2021.

sentinelone.com/labs/cve-2021-

0
yaracroft

silently install management agents on VMs, which now have RCE & LPE vulnerabilities ! « OMI is just one example of a secret agent that's pre-installed and silently deployed in cloud environments » ; « Thanks to the combination of a simple conditional statement coding mistake and an uninitialized auth struct, any request without an Authorization header has its privileges default to uid=0, gid=0, which is root »

wiz.io/blog/secret-agent-expos

0
Plus anciens

yaracroft recommande :

informatique

2,96K

threats

2,03K

ransomware

1,24K

france

589

vuln

270

europe

125

tools

124

infosec

61

phishing

48
nanao

Comme le soleil, les machines ne se couchent jamais.

Ressources

Développeurs

Qu’est-ce que Mastodon ?

nanao.cybtex.fr

Davantage…