z0vsky - Network

CVE Foundation Launched to Secure the Future of the CVE Program https://www.thecvefoundation.org/home

CVE Foundation Launched to Secure the Future of the CVE Program https://www.thecvefoundation.org/home

EUropean Vulnerability Database https://euvd.enisa.europa.eu/

EUropean Vulnerability Database https://euvd.enisa.europa.eu/

CVE-2023-38545 #curl #SOCKS5 #heap_buffer_overflow Dockerfile and exploit...

CVE-2023-38545
#curl #SOCKS5 #heap_buffer_overflow Dockerfile and exploit code
https://gist.github.com/xen0bit/0dccb11605abbeb6021963e2b1a811d3

CVE-2023-38545 #curl #SOCKS5 #heap_buffer_overflow https://curl.se/docs/CVE-2023-38545.html

CVE-2023-38545
#curl #SOCKS5 #heap_buffer_overflow
https://curl.se/docs/CVE-2023-38545.html

DM me if you have the same talk on your #SSTIC2023 badge! #SSTIC

DM me if you have the same talk on your #SSTIC2023 badge! #SSTIC

OECD publication: Security of the Domain Name System...

OECD publication: Security of the Domain Name System (DNS)
https://www.oecd.org/digital/security-of-the-domain-name-system-dns-285d7875-en.htm

NIST Retires SHA-1 Cryptographic Algorithmhttps://www.nist.gov/news-events/news/2022/12/nist-retires-sha-1-cryptographic-algorithm

NIST Retires SHA-1 Cryptographic Algorithm
https://www.nist.gov/news-events/news/2022/12/nist-retires-sha-1-cryptographic-algorithm

Nebuchadnezzar: practically-exploitable cryptographic vulnerabilities in Matrixhttps://nebuchadnezzar-megolm.github.io/

Nebuchadnezzar: practically-exploitable cryptographic vulnerabilities in Matrix

https://nebuchadnezzar-megolm.github.io/

Charles V of Spain Secret Code Cracked: https://www.schneier.com/blog/archives/2022/11/charles-v-of-spain-secret-code-cracked.html

Charles V of Spain Secret Code Cracked:
https://www.schneier.com/blog/archives/2022/11/charles-v-of-spain-secret-code-cracked.html

A Confused Deputy Vulnerability in AWS AppSynchttps://securitylabs.datadoghq.com/articles/appsync-vulnerability-disclosure/This attack...

A Confused Deputy Vulnerability in AWS AppSync
https://securitylabs.datadoghq.com/articles/appsync-vulnerability-disclosure/

This attack abuses the AppSync service to assume IAM roles in other AWS accounts, which allows an attacker to pivot into a victim organization and access resources in those accounts.

L’attractivité et la représentation des métiers de la...

L’attractivité et la représentation des métiers de la cybersécurité

https://www.ssi.gouv.fr/guide/lattractivite-et-la-representation-des-metiers-de-la-cybersecurite/

https://github.com/r-pufky/wireguard-initramfsUse dropbear over wireguard.Enables wireguard networking during kernel boot, before encrypted...

https://github.com/r-pufky/wireguard-initramfs

Use dropbear over wireguard.

Enables wireguard networking during kernel boot, before encrypted partitions are mounted. Combined with dropbear this can enable FULLY ENCRYPTED remote booting without storing key material or exposing ports on the remote network. An Internet connection simply needs to exist that can reach the wireguard server endpoint.

This is my account on Twitter - https://twitter.com/Z0vsky - verified by https://Twittodon.com

This is my account on Twitter - https://twitter.com/Z0vsky - verified by https://Twittodon.com