Deschide articolul original într-un tab nou Schimbarea acestei opțiuni se aplică imediat și reîncarcă pagina.
LECTURA
Înapoi la articole →

Mehmet Ince @mdisec – Vulnerability Researcher | Building security products | Security Advisor | Amateur Muay Thai fighter

mehmetince.net/feed/atom/
Vizitează site-ul

Cel mai recent articol

Ultima verificare

Urmăritori 0 urmăritori
Articole: 11

  1. Part 2/6 | Breaking the Postgres Superuser Guardrails: Attacking Security-Hardening Extensions |Systemic Risks in the Managed PostgreSQL Industry

    (Mehmet Ince @mdisec – Vulnerability Researcher | Building security products | Security Advisor | Amateur Muay Thai fighter)

    It’s been a month since I published the first part of this research, and interest from the Postgres community has been higher than I expected.

  2. Part 1/6 | Systemic Risks in the Managed PostgreSQL Industry: Extension Risks Are Real! Exploiting PostGis Memory Corruption Bug at NeonDB, SupaBase and Many More

    (Mehmet Ince @mdisec – Vulnerability Researcher | Building security products | Security Advisor | Amateur Muay Thai fighter)

    Back in April, I was talking with our system and software engineering teams at PRODAFT about the possibilities of using a managed database service.

  3. The Story of a Perfect Exploit Chain: Six Bugs That Looked Harmless Until They Became Pre-Auth RCE in a Security Appliance

    (Mehmet Ince @mdisec – Vulnerability Researcher | Building security products | Security Advisor | Amateur Muay Thai fighter)

    It was May 2024, and our internal security team was evaluating the LogPoint SIEM/SOAR platform to replace our existing platform, potentially.

  4. Inside PostHog: How SSRF, a ClickHouse SQL Escaping 0day, and Default PostgreSQL Credentials Formed an RCE Chain (ZDI-25-099, ZDI-25-097, ZDI-25-096)

    (Mehmet Ince @mdisec – Vulnerability Researcher | Building security products | Security Advisor | Amateur Muay Thai fighter)

    It was yet another day at the office.

  5. The Chessboard of Security: Insights on Product Development and Vulnerabilities from a Hacker Perspective

    (Mehmet Ince @mdisec – Vulnerability Researcher | Building security products | Security Advisor | Amateur Muay Thai fighter)

    I was playing a quick game of chess while waiting for my coffee this morning.

  6. Digital Cosmos: A Journey Through the Galaxy of Vulnerabilities

    (Mehmet Ince @mdisec – Vulnerability Researcher | Building security products | Security Advisor | Amateur Muay Thai fighter)

    Whenever I ponder the vastness of space and our limited ability to observe only the Milky Way, I am utterly fascinated.

  7. CVE-2021-3825 | LiderAhenk 0day – All your PARDUS Clients Belongs To Me

    (Mehmet Ince @mdisec – Vulnerability Researcher | Building security products | Security Advisor | Amateur Muay Thai fighter)

    LiderAhenk is an open source software system that enables centralized management, monitoring and control of systems and users on the corporate network.

  8. CVE-2021-3806 | Pardus 21 Linux Distro – Remote Code Execution 0day

    (Mehmet Ince @mdisec – Vulnerability Researcher | Building security products | Security Advisor | Amateur Muay Thai fighter)

    A couple of days ago, I came up with news that Pardus will organize a report-bug contest.

  9. CVE-2021-21425 | Unexpected Journey #7 – GravCMS Unauthenticated Arbitrary YAML Write/Update leads to Code Execution

    (Mehmet Ince @mdisec – Vulnerability Researcher | Building security products | Security Advisor | Amateur Muay Thai fighter)

    It has been a while since I haven’t published a post on our beloved blog.

  10. Vesta Control Panel Second Order Remote Code Execution 0day Step-by-Step Analysis

    (Mehmet Ince @mdisec – Vulnerability Researcher | Building security products | Security Advisor | Amateur Muay Thai fighter)

    I believe that doing a security research is all about trying to understand high-level of architecture of the products and finding a creative attack vectors.

  11. Why Secure Design Matters ? Secure Approach to Session Validation on Modern Frameworks (Django Solution)

    (Mehmet Ince @mdisec – Vulnerability Researcher | Building security products | Security Advisor | Amateur Muay Thai fighter)

    I’ve been doing security researches on softwares for a quite long time.