Deschide articolul original într-un tab nou Schimbarea acestei opțiuni se aplică imediat și reîncarcă pagina.
LECTURA
Înapoi la articole →

iam.chi

ctrsec.io/feed.xml
Vizitează site-ul

Cel mai recent articol

Ultima verificare

Urmăritori 0 urmăritori
Articole: 10

  1. Three Injections and a Rootkit: How the lurves PyPI typosquat attacks the AI in your toolchain

    (iam.chi)

    ollamaa, langgrap, transfomers, openaii — one payload, .pth startup execution, and a C2 whose every MCP tool description is a command At Amazon Inspector, we invest heavily in software supply-chain security.

  2. CVE-2024-45719: Predictable Authorization Token Vulnerability in Apache Answer

    (iam.chi)

    Overview CVE-2024-45719 highlights a critical vulnerability in Apache Answer, where UUID Version 1 (UUIDv1) is used as an authorization token.

  3. CVE-2024-46911: Uncovering CSRF vulnerabilities in Apache Roller

    (iam.chi)

    Overview Apache Roller, an open-source blog server platform, has long been favored for managing and publishing content on the web.

  4. How I nabbed a new CVE from a Cookie-Munching, Scam-Slinging Browser Extension

    (iam.chi)

    Friday night @ 9PM….

  5. [Pwn2Own 2022] CVE-2023-0855: Canon imageClass MF743CDW IPP BOF

    (iam.chi)

    Overview In December 2022, I participated and got a success in Pwn2Own Toronto 2022 targeting Canon Printer category.

  6. Pwning the Samsung TV

    (iam.chi)

    Overview Next, following up on the failed Pwn2Own 2021 series, this blog post will be talking about the vulnerability found on Samsung TV - a Pwn2Own 2021 target.

  7. Pwning the Facebook Portal

    (iam.chi)

    Overview Back in November, 2021, my friend and I were trying to make an attempt to participate Pwn2Own.

  8. How I faked tons of COVID passes — Weak Key Cryptography in real world

    (iam.chi)

    Vulnerability Summary A Non-US Government agency was using a QR generation system to provide COVID passes for its citizens to go out.

  9. [ZDI-21-977] D-Link DAP-2020 webproc Stack-based BOF RCE

    (iam.chi)

    Overview Discoverer: Chi Tran & phieulang93 & chung96vn Vendor & Product: D-Link Version: DAP-2020 A1 Zero Day Initiative: ZDI-21-977 CVE Reference: CVE-2021-34861 Vulnerability Detail This vulnerability allows network-adjacent attackers to execute arbitr…

  10. [CVE-2020-8962] D-LINK DIR-842 Stack-based Buffer-overflow

    (iam.chi)

    Overview Author: Chi Tran Vendor & Product: D-Link Version: DIR-842_REVC_RELEASE_NOTES_v3.13B09_HOTFIX CVE Reference: CVE-2020-8962 Vulnerability Detail On December 31, 2019, D-Link released DIR-842_REVC_RELEASE_NOTES_v3.13B09_HOTFIX to fix the hard-coded…