WordPress 5.7 XXE Vulnerability Security News & Discussion

---

• WordPress 5.7 XXE Vulnerability
• API to help audit AD credentials against 'Pwned Passwords' from HIBP
• RemotePotato0 is an exploit that allows you to escalate your privileges from a generic User to Domain Admin.
• Examining JavaScript Inter-Process Communication in Firefox
• Using ADExplorer on engagements
• Abusing Replication: Stealing AD FS Secrets Over the Network
• Discovering Null Byte Injection Vulnerability in Embedded Web Server GoAhead
• I wrote a piece on the responsibility of Apple for the hack of their vendor, Quanta Computer. What do you think? Is there truth to this article? Leave your opinion in the comments! It is really a philosophical, but also a very practical issue which I believe can easily be solved by vendor's clients!
• Hacking the Furbo Dog Camera: Part I
• remote code execution on jinja. Learn and try it yourself!

WordPress 5.7 XXE Vulnerability Posted: 27 Apr 2021 08:25 AM PDT submitted by /u/monoimpact [link] [comments]

API to help audit AD credentials against 'Pwned Passwords' from HIBP Posted: 27 Apr 2021 06:14 AM PDT submitted by /u/mdj_ [link] [comments]

RemotePotato0 is an exploit that allows you to escalate your privileges from a generic User to Domain Admin. Posted: 26 Apr 2021 09:50 PM PDT submitted by /u/digicat [link] [comments]

Examining JavaScript Inter-Process Communication in Firefox Posted: 27 Apr 2021 05:56 AM PDT submitted by /u/mozfreddyb [link] [comments]

Using ADExplorer on engagements Posted: 27 Apr 2021 08:03 AM PDT submitted by /u/oddvarmoe [link] [comments]

Abusing Replication: Stealing AD FS Secrets Over the Network Posted: 27 Apr 2021 12:24 PM PDT submitted by /u/NaderZaveri [link] [comments]

Discovering Null Byte Injection Vulnerability in Embedded Web Server GoAhead Posted: 26 Apr 2021 08:25 PM PDT submitted by /u/luker983 [link] [comments]

I wrote a piece on the responsibility of Apple for the hack of their vendor, Quanta Computer. What do you think? Is there truth to this article? Leave your opinion in the comments! It is really a philosophical, but also a very practical issue which I believe can easily be solved by vendor's clients! Posted: 27 Apr 2021 12:51 PM PDT submitted by /u/xorredd [link] [comments]

Hacking the Furbo Dog Camera: Part I Posted: 26 Apr 2021 03:24 PM PDT submitted by /u/somersetrecon [link] [comments]

remote code execution on jinja. Learn and try it yourself! Posted: 26 Apr 2021 04:30 PM PDT submitted by /u/telehussam [link] [comments]

You are subscribed to email updates from /r/netsec - Information Security News & Discussion. To stop receiving these emails, you may unsubscribe now.	Email delivery powered by Google
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States