Finding P1 Vulnerabilities: Tools & Resources

The second, more in-depth part of ‘Finding P1 Vulnerabilities: A Step by Step Guide’.Continue reading on The Gray Area »
Read more...

Finding P1 Vulnerabilities: Tools & Resources
https://medium.com/the-gray-area/finding-p1-vulnerabilities-tools-resources-32bb2e7a52fb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

The second, more in-depth part of ‘Finding P1 Vulnerabilities: A Step by Step Guide’.Continue reading on The Gray Area » (https://medium.com/the-gray-area/finding-p1-vulnerabilities-tools-resources-32bb2e7a52fb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Chrome AccountSelectionBubbleView::OnAccountImageFetched Heap Use-After-Free

https://3.bp.blogspot.com/-jrxagBWWEzc/WWlvX2ct0sI/AAAAAAAAIOc/SeYUuYsvaHQ6pP3Hky0NtyeOgPg6HpFpgCLcBGAs/s1600/h54.png
Chrome suffers from a heap use-after-free vulnerability in AccountSelectionBubbleView::OnAccountImageFetched.

SHA-256 | 58250b99dc0491f82cdc58424c569b8f9d2df212310a3407eb9441507e365641

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Cisco Jabber XMPP Stanza Smuggling

https://1.bp.blogspot.com/-ASAiGIAsbZo/WWlu3lcAbmI/AAAAAAAAII0/K9TarDW1B-wz0w-5-5rrjX8jWsow7QyegCLcBGAs/s1600/h100.png
There is a vulnerability in Cisco Jabber that allows an attacker to send arbitrary XMPP stanzas (XMPP control messages) to another Cisco Jabber client, including XMPP stanzas that are normally sent only by the trusted server.

SHA-256 | ed2115ba91caeae4b0245ae0141359b56fa7d27077ea7a8cb6d34c1aa2ad914c

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Chrome offline_items_collection::OfflineContentAggregator::OnItemRemoved Heap Buffer Overflow

https://3.bp.blogspot.com/-8aNXwMYQICE/WWlvIs7ranI/AAAAAAAAILw/f2UnTjqyD14e3ZIoWuyFJjQ7Is9Nz7MtQCLcBGAs/s1600/h144.png
Chrome suffers from a heap buffer overflow vulnerability in offline_items_collection::OfflineContentAggregator::OnItemRemoved.

SHA-256 | a12649cc87b93dc4f1206b4520f0269c90067ff6042cf3fbf667a38af1956ab3

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Zimbra Collaboration Suite TAR Path Traversal

___________________________
@hacking_Attack
@Hacking_Video

New Vault Alert: Welcome PhononDAO

We are excited to welcome PhononDAO to the Hats ecosystem! This unique partnership will take part in two steps; starting with a short term…Continue reading on Medium »
Read more...

Dark Reading: Attacks/Breaches
Name That Toon: Witching Hour

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

Dark Reading: Attacks/Breaches
Banco Santander and Forgepoint Capital Announce Strategic Alliance to Advance Cybersecurity Investment and Innovation Globally

.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Anonos Secures $50 Million in IP-Backed Financing to Deliver Data Privacy Technology with 100% Accuracy and Utility to Data-Driven Enterprises

Global data privacy software innovator will use growth funding, led by GT Investment Partners and facilitated by Aon, to fuel customer success and expand global partnerships, sales, marketing, and industry education.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Corsa Security Drives Forward with Additional $10 Million Funding

Latest investment to broaden integrations with top firewall vendors.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Datadog Launches Cloud Security Management to Provide Cloud Native Application Protection

Product brings together workload and infrastructure security into a single platform to provide a unified approach to protecting cloud environments.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Only 4% of Security and IT Leaders Believe All of Their Cloud Data is Sufficiently Secured

New cloud data survey from the Cloud Security Alliance and BigID sheds light on the state of cloud data security in 2022.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
CyCognito Launches Next Generation of Exploit Intelligence Threat Remediation Platform

External attack surface management leader unveils evolution of risk intelligence solution, including a virtual sandbox environment to safely validate steps to remediation.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
SynSaber Adds New Dynamic Pipeline to OT Cybersecurity Platform

ICS/OT cybersecurity and asset monitoring vendor improves scalability and flexibility with new update.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
New Torii Report Finds 60% of IT Leaders Don’t Know What Apps They Have

Surprisingly poor cross-team collaboration leads to mismanaged SaaS, wasted money and time.

___________________________
@hacking_Attack
@Hacking_Video