U.S. ISBN registry ran "unauthorized code" on its checkout page for nearly 6 months Security News & Discussion

---

• U.S. ISBN registry ran "unauthorized code" on its checkout page for nearly 6 months
• New "Bleedingbit" Vulnerability could allow an attacker to run arbitrary code on Enterprise Access Points.
• CVE-2018-5407: new side-channel vulnerability on SMT/Hyper-Threading architectures
• CVE-2018-11759 – Apache mod_jk access control bypass
• Finding 0days in Embedded Systems - HackInTheBox 2018
• Pentesting in restricted VDI environments (Keyboard emulation + OCR)

U.S. ISBN registry ran "unauthorized code" on its checkout page for nearly 6 months Posted: 02 Nov 2018 05:16 AM PDT submitted by /u/ilamont [link] [comments]

New "Bleedingbit" Vulnerability could allow an attacker to run arbitrary code on Enterprise Access Points. Posted: 02 Nov 2018 06:58 AM PDT submitted by /u/alnarra_1 [link] [comments]

CVE-2018-5407: new side-channel vulnerability on SMT/Hyper-Threading architectures Posted: 01 Nov 2018 04:33 PM PDT submitted by /u/midael [link] [comments]

CVE-2018-11759 – Apache mod_jk access control bypass Posted: 02 Nov 2018 01:14 AM PDT submitted by /u/Nitr4x [link] [comments]

Finding 0days in Embedded Systems - HackInTheBox 2018 Posted: 02 Nov 2018 11:03 AM PDT submitted by /u/kamilton88 [link] [comments]

Pentesting in restricted VDI environments (Keyboard emulation + OCR) Posted: 02 Nov 2018 06:20 AM PDT submitted by /u/gid0rah [link] [comments]

You are subscribed to email updates from /r/netsec - Information Security News & Discussion. To stop receiving these emails, you may unsubscribe now.	Email delivery powered by Google
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States