Memory corruption in JCRE: An unpatchable HSM may swallow your private key https://hardenedvault.net/blog/2023-04-18-java-card-runtime-memory-corruption/
hardenedvault.net
Memory corruption in JCRE: An unpatchable HSM may swallow your private key
Background The key has always been a core target of security protection.
Breaking Docker Named Pipes SYSTEMatically: Docker Desktop Privilege Escalation – Part 2 https://www.cyberark.com/resources/threat-research-blog/breaking-docker-named-pipes-systematically-docker-desktop-privilege-escalation-part-2
Cyberark
Breaking Docker Named Pipes SYSTEMatically: Docker Desktop Privilege Escalation – Part 2
In the previous blog post, we described how the Docker research started and showed how we could gain a full privilege escalation through a vulnerability in Docker Desktop. In this follow-up blog...
Threat Actors Rapidly Adopt Web3 IPFS Technology https://unit42.paloaltonetworks.com/ipfs-used-maliciously/
Unit 42
Threat Actors Rapidly Adopt Web3 IPFS Technology
Web3 technologies are seeing widespread adoption — including by TAs. We discuss Web3 technology InterPlanetary File System (IPFS), and malicious use of it.
👍1
APT28 Attacks on Cisco Routers: What We Know So Far https://www.securityengineering.dev/apt28-cisco-routers-vulnerability-april-2023/
Security Engineering Notebook
APT28 Attacks on Cisco Routers: What We Know So Far
Russian cyber-attack targets Cisco devices. Read on for the details and suggested mitigations.
Detecting and decrypting Sliver C2 – a threat hunter’s guide https://www.immersivelabs.com/blog/detecting-and-decrypting-sliver-c2-a-threat-hunters-guide/
Immersivelabs
Detecting and decrypting Sliver C2 – a threat hunter's guide
Originating from the Bishop Fox team, Sliver is an open-source, cross-platform, and extensible C2 framework. It’s written primarily in Go, making it fast, portable, and easy to customize.
CVE-2023-0339 — Technical Analysis https://attackerkb.com/topics/BYpdQRJKJd/cve-2023-0339/rapid7-analysis
AttackerKB
CVE-2023-0339 | AttackerKB
Relative Path Traversal vulnerability in ForgeRock Access Management Web Policy Agent allows Authentication Bypass. This issue affects Access Management Web Po…
The Fuzzing Guide to the Galaxy: An Attempt with Android System Services https://blog.thalium.re/posts/fuzzing-samsung-system-services/
THALIUM
The Fuzzing Guide to the Galaxy: An Attempt with Android System Services
Although the Android base is open source, many different constructors customize it with their own UIs and APIs. All these additions represent an extra attack surface that can change from one phone model to another. We tried to automatically fuzz the closed…
The Fuzzing Guide to the Galaxy: An Attempt with Android System Services https://blog.thalium.re/posts/fuzzing-samsung-system-services/
THALIUM
The Fuzzing Guide to the Galaxy: An Attempt with Android System Services
Although the Android base is open source, many different constructors customize it with their own UIs and APIs. All these additions represent an extra attack surface that can change from one phone model to another. We tried to automatically fuzz the closed…
Everything-is-wrong writeup: Reverse engineering Haskell like a masochist https://medium.com/@acheron2302/everything-is-wrong-writeup-reverse-engineering-haskell-like-a-masochist-9586f033d397
Medium
Everything-is-wrong writeup: Reverse engineering Haskell like a masochist
Disclaimer: My understanding about haskell reverse engineering is still limited so if I am wrong about anything feel free to ping me on my…
CVE-2023-29084 Command injection in ManageEngine ADManager Plus https://hnd3884.github.io/posts/CVE-2023-29084-Command-injection-in-ManageEngine-ADManager-plus/
HoangND
CVE-2023-29084 Command injection in ManageEngine ADManager Plus
CVE-2023-29084 analysis
A Journey Through the Secrets of Firmware: Exploring the Foundations https://medium.com/@tristejoursoir/a-journey-through-the-secrets-of-firmware-exploring-the-foundations-6d0d288d5917
Medium
A Journey Through the Secrets of Firmware: Exploring the Foundations
A lot of people are interested in how the computer starts up. This is where the magic begins and continues as long as the device is on. In…
nice blog series » mast1c0re: Introduction – Exploiting the PS4 and PS5 through a game save https://mccaulay.co.uk/mast1c0re-introduction-exploiting-the-ps4-and-ps5-through-a-gamesave/
Producing a POC for CVE-2022-42475 (Fortinet RCE) https://blog.scrt.ch/2023/03/14/producing-a-poc-for-cve-2022-42475-fortinet-rce/
CVE-2022-29844: A Classic Buffer Overflow on the Western Digital My Cloud Pro Series PR4100 https://www.zerodayinitiative.com/blog/2023/4/19/cve-2022-29844-a-classic-buffer-overflow-on-the-western-digital-my-cloud-pro-series-pr4100
Zero Day Initiative
Zero Day Initiative — CVE-2022-29844: A Classic Buffer Overflow on the Western Digital My Cloud Pro Series PR4100
This post covers an exploit chain demonstrated by Luca Moro ( @johncool__ ) during Pwn2Own Toronto 2022. At the contest, he used a classic buffer overflow to gain code execution on the My Cloud Pro Series PR4100 Network Attached Storage (NAS) device.…
Converting string to enum at the cost of 50 GB: let's analyze the CVE-2020-36620 vulnerability https://pvs-studio.com/en/blog/posts/csharp/1038/
PVS-Studio
Converting string to enum at the cost of 50 GB: let′s analyze the CVE-2020-36620 vulnerability
In this article, we′re going to discuss the CVE-2020-36620 vulnerability and see how a NuGet package for converting string to enum can make a C# application vulnerable to DoS attacks.
Analysis of VirtualBox CVE-2023-21987 and CVE-2023-21991 https://qriousec.github.io/post/vbox-pwn2own-2023/
Qrious Secure
Analysis of VirtualBox CVE-2023-21987 and CVE-2023-21991
Introduction Hi, I am Trung (xikhud). Last month, I joined Qrious Secure team as a new member, and my first target was to find and reproduce the security bugs that @bienpnn used at the Pwn2Own Vancouver 2023 to escape the VirtualBox VM.
Since VirtualBox is…
Since VirtualBox is…
PaperCut CVE-2023-27350 Deep Dive and Indicators of Compromise https://www.horizon3.ai/papercut-cve-2023-27350-deep-dive-and-indicators-of-compromise/
Horizon3.ai
CVE-2023-27350: PaperCut Deep Dive & IOCs
PaperCut CVE-2023-27350 Technical Deep-Dive, Indicators of Compromise, and Exploit Proof-of-Concept.
The Most Dangerous Codec in the World: Finding and Exploiting Vulnerabilities in H.264 Decoders https://www.usenix.org/conference/usenixsecurity23/presentation/vasquez
Odoo: Get your Content Type right, or else! https://www.sonarsource.com/blog/odoo-get-your-content-type-right-or-else/
Sonarsource
Odoo: Get your Content Type right, or else!
What do we need content types for anyway? Let's look into how an incorrect content type led to a real-world vulnerability in Odoo, CVE-2023-1434.