Trustico's website was vulnerable to a trivial shell command substitution injection, running as uid=0 Security News & Discussion

---

• Trustico's website was vulnerable to a trivial shell command substitution injection, running as uid=0
• Demonstrating a VMware guest-to-host escape: ZDI researchers break down a winning Pwn2Own exploit chain that executes code on the hypervisor.
• DigiCert Statement on Trustico Certificate Revocation
• Basics of Web Scraping
• A know-how on how you can support responsible disclosures by implementing "security.txt" file.
• Low-Resource Eclipse Attacks on Ethereum's Peer-to-Peer Network
• Cloud flare is starting to see more and more amplification attacks using memcache
• Intercepting COM Objects with CoGetInterceptor (with source code)
• Akamai detecs 13 TBS DDOS attacks through misconfigured memcache servers.
• antMan <= 0.9.0c Authentication Bypass
• firepwned: Check if your Firefox saved passwords have been compromised in a known data breach
• OpenJDK Vulnerability Group
• Dear Developers, Beware of DNS Rebinding: DNS Rebinding and CSRF with Etcd
• The /r/netsec Monthly Discussion Thread - March 2018

Trustico's website was vulnerable to a trivial shell command substitution injection, running as uid=0 Posted: 01 Mar 2018 07:55 AM PST submitted by /u/jw12321 [link] [comments]

Demonstrating a VMware guest-to-host escape: ZDI researchers break down a winning Pwn2Own exploit chain that executes code on the hypervisor. Posted: 01 Mar 2018 07:57 AM PST submitted by /u/RedmondSecGnome [link] [comments]

DigiCert Statement on Trustico Certificate Revocation Posted: 28 Feb 2018 06:23 PM PST submitted by /u/sifex [link] [comments]

Basics of Web Scraping Posted: 01 Mar 2018 07:01 AM PST submitted by /u/jacob16682 [link] [comments]

A know-how on how you can support responsible disclosures by implementing "security.txt" file. Posted: 01 Mar 2018 01:25 AM PST submitted by /u/xrna [link] [comments]

Low-Resource Eclipse Attacks on Ethereum's Peer-to-Peer Network Posted: 01 Mar 2018 10:55 AM PST submitted by /u/xor_rotate [link] [comments]

Cloud flare is starting to see more and more amplification attacks using memcache Posted: 01 Mar 2018 01:22 PM PST submitted by /u/rfelsburg [link] [comments]

Intercepting COM Objects with CoGetInterceptor (with source code) Posted: 28 Feb 2018 09:52 PM PST submitted by /u/TechLord2 [link] [comments]

Akamai detecs 13 TBS DDOS attacks through misconfigured memcache servers. Posted: 01 Mar 2018 10:15 AM PST submitted by /u/Neo-Bubba [link] [comments]

antMan <= 0.9.0c Authentication Bypass Posted: 28 Feb 2018 05:34 PM PST submitted by /u/Bowserjklol [link] [comments]

firepwned: Check if your Firefox saved passwords have been compromised in a known data breach Posted: 28 Feb 2018 11:56 PM PST submitted by /u/thorn42 [link] [comments]

OpenJDK Vulnerability Group Posted: 01 Mar 2018 01:52 AM PST submitted by /u/artem_smotrakov [link] [comments]

Dear Developers, Beware of DNS Rebinding: DNS Rebinding and CSRF with Etcd Posted: 01 Mar 2018 01:38 AM PST submitted by /u/reddit_read_today [link] [comments]

The /r/netsec Monthly Discussion Thread - March 2018 Posted: 28 Feb 2018 08:35 PM PST Overview Questions regarding netsec and discussion related directly to netsec are welcome here. Rules & Guidelines Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary. Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely. If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely. Avoid use of memes. If you have something to say, say it with real words. All discussions and questions should directly relate to netsec. No tech support is to be requested or provided on /r/netsec. As always, the content & discussion guidelines should also be observed on /r/netsec. Feedback Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox. submitted by /u/AutoModerator [link] [comments]

You are subscribed to email updates from /r/netsec - Information Security News & Discussion. To stop receiving these emails, you may unsubscribe now.	Email delivery powered by Google
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States