/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 alexsci.com
HSTS preload adoption and challenges
| | endtimes.dev
.dev and HSTS preload | endtimes.dev
1.8 parsecs away

Travel
| |
| | jfhr.me
Strict Transport Security and preloading
3.3 parsecs away

Travel
| | You've probably heard that HTTPS makes websites more secure. That's true, but HTTPS has some limitations, and Strict Transport Security and Preloading are ways you can overcome those limitations.
| | labanskoller.se
Laban Sköllermark | Man-in-The-Middle Session Fixation in Securitas Direct My Pages
4.9 parsecs away

Travel
| | During 2021 I had access to a facility equipped with an alarm system from Securitas Direct. I had access as a regular user to Securitas Direct's My Pages at mypages-pro.securitas-direct.com, which is used to administer some aspects of one's security alarm installation. That web application suffered a CWE-384 Session Fixation vulnerability which can be used by an attacker in a so-called Man-In-The-Middle (MiTM) position. Home page of Securitas Direct My Pages In summary, if an attacker is on the same netw...
| | www.zerodayinitiative.com
ZDI-24-347 | Zero Day Initiative
18.3 parsecs away

Travel
| [AI summary] A critical remote code execution vulnerability in SolarWinds Access Rights Manager allows attackers to execute arbitrary code with service account privileges if proper data validation is not enforced.