/explore
|
You are here 
|
googleprojectzero.blogspot.com | ||
| | | | |
blog.quarkslab.com
On February 9, 2017, Natalie Silvanovich from Google Project Zero unrestricted access to P0's issue #983 [1], titled "Microsoft Edge: Use-after-free in TypedArray.sort", which got assigned CVE-2016-7288 and was patched as part of Microsoft security bulletin MS16-145 [2] during December 2016. In this blog post we discuss how I managed to exploit this UAF issue to obtain remote code execution on MS Edge. |
|
| | | | | ||
| | | | |
www.syntaxbearror.io
Supply Chain Attack on MSPs leave thousands with ransomware, Print Spooler woes continue with Windows, and more on this week's episode of Bear Security. |
|
| | | | | ||
| | | | |
blog.thalium.re
[AI summary] The blog post discusses the author's experience in vulnerability research and exploitation targeting Steam and its related products, including Steam Link and Remote Play. It covers various vulnerabilities such as format string vulnerabilities, request forgery, heap overflows, and a remote code execution (RCE) exploit. The author also details their interactions with HackerOne and Valve, highlighting the challenges in getting timely responses and the eventual resolution of the reported issues. |
|
| | | | | ||
| | | | |
azraelsec.sh
Scanning and EnumerationThe target IP address is 10.10.10.171, so let's run a port scanning to identify the services: As you can see, two services are running: a SSH server and an HTTP one. Both of t |
|
| | | |||
