/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 truesecdev.wordpress.com
Exploiting rootpipe again |
| | reverse.put.as
Patching what Apple doesn't want to or how to make your "old" OS X versions a bit safer | Reverse Engineering
12.2 parsecs away

Travel
| | Today a local privilege escalation vulnerability was disclosed in this blog post. It describes a vulnerability in IOBluetoothFamily kernel extension (IOKit is a never-ending hole of security vulnerabilities). Mavericks and most probably all previous versions are vulnerable but not Yosemite. The reason for this is that Apple silently patched the bug in Yosemite. This is not a new practice, where Apple patches bugs in the latest and newly released OS X version and doesn't care about older versions.
| | www.sektioneins.de
OS X 10.10 DYLD_PRINT_TO_FILE Local Privilege Escalation Vulnerability | SektionEins GmbH
15.0 parsecs away

Travel
| | The DYLD_PRINT_TO_FILE environment variable can be used for local privilege escalation in OS X Yosemite. blockquote p, blockquote {font-family: monospace; font-size: 14px;} #imgtc {float: right; mar
| | securitylabs.datadoghq.com
The OverlayFS vulnerability CVE-2023-0386: Overview, detection, and remediation | Datadog Security Labs
15.1 parsecs away

Travel
| | Learn how the OverlayFS vulnerability CVE-2023-0386 works, how to detect it and how to reproduce it.
| | www.openapis.org
OpenAPI Specification 3.1.0 Released - OpenAPI Initiative
26.2 parsecs away

Travel
| [AI summary] The OpenAPI Initiative announces the release of OpenAPI Specification 3.1.0, which offers 100% compatibility with the latest JSON Schema draft and includes new features for webhooks and API licenses.