A vulnerability classified as critical was found in SimpleNetwork up to 29bc615. Affected by this vulnerability is an unknown functionality of the file TCPServer.cpp of the component TCP Packet Handler. The manipulation leads to buffer overflow.
This …
A vulnerability classified as problematic has been found in O-RAN Near-RT RIC. Affected is an unknown function of the component xApp Registration. The manipulation leads to missing initialization of a variable.
This vulnerability is traded as CVE-2024…
I’m doing an IR on a Linux machine. The attacker has a trojan executed in memory, the file content is backed by a memfd_create based fd.
My questions
How can I extract the contents from memfd?
When a userland program calls memfd_create, a…
One of my classes is a term project to be planned, implemented and delivered and which solves a cybersecurity problem. It can either be analytical or practical, and must be at least a hundred hours of work.
So far my ideas are securing my …
I have a verified injection which looks like:
/page/(SELECT+SLEEP(10))
But sqlmap cannot detect it no matter what.
This is how I’m running sqlmap:
sqlmap -u ‘http://MY-SITE/page/*’ –level=5 –risk=3 –threads=10 –dbms=mysql –method=POST…
What client side software other than the OS (Windows, Linux, MacOS, Android, iOS) is needed in order to virtualize applications such as Microsoft Word and Microsoft Excel using a server based approach? I understand that the installation of…
A vulnerability was found in IBM Aspera Orchestrator 4.0.1. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to observable response discrepancy.
The identification of this vulnerability is CVE-2023-2…
Is there any way to positively identify that sudo is being used to execute a command other than to identify the logs? I phrase this in the present tense because I would like to make a command fail if it detects that someone else is using …
My Android device today popped up a screen indicating that it had joined the new Find My Device Network that allows two-way scanning of device locations over Bluetooth.
Despite Google’s claims of encryption, this sounds really weird to me….
JavaScript payload and supporting software to be used as XSS payload or post exploitation implant to monitor users as they use the targeted application. Also includes a C2 for executing custom JavaScript payloads in clients. Changelogs Major changes …
