Creează un cont pentru a te abona la acest blog și a-i urmări articolele pe pagina Lectură.
-
A crafted MeshCore node name could compromise any Home Assistant instance running meshcore-card as soon as someone viewed a dashboard with that card.
-
RIPE NCC’s single sign-on did not rotate session tokens on login, leaving 12000 Atlas probe hosts in a position to compromise other RIPE NCC users’ logins.
-
The RIPE NCC made its all-powerful single sign-on tokens available to over 1000 third parties.
-
One click on a malicious, but not suspicious, link.
-
This post covers the disclosure process for the vulnerabilities described in my RPKI exploit chain, through RIPE NCC’s Responsible Disclosure Policy.
-
Lately, I’ve been experimenting with unusual XSS vectors.
-
Originally published October 2014.