/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 srcincite.io
IAM Whoever I Say IAM :: Infiltrating VMWare Workspace ONE Access Using a 0-Click Exploit
| | bdtechtalks.com
How a chain of security flaws exposed thousands of enterprise surveillance cameras to remote code execution - TechTalks
3.0 parsecs away

Travel
| | Security researchers find critical flaws in popular Axis cameras, allowing full remote control over thousands of surveillance systems in enterprises worldwide.
| | y4y.space
Learning JNDI Injection From CVE-2021-21985 - !
3.2 parsecs away

Travel
| | Intro The exploitation of this RCE consists of two parts, one being the lack of authentication validation to h5-vsan endpoint, and another being the unsafe reflection usage in Java which then caused a JNDI injection. I was not smart enough to come up with the JDNI attack chain, but certainly learned a lot while attempting...
| | www.thezdi.com
Zero Day Initiative - CVE-2023-20864: Remote Code Execution in VMware Aria Operations for Logs
2.5 parsecs away

Travel
| | [AI summary] Trend Micro researchers detail a patched remote code execution vulnerability in VMware Aria Operations for Logs caused by insecure deserialization of user-supplied data.
| | pentesterlab.com
OR 1=1 -- is Dying - PentesterLab's Blog
13.2 parsecs away

Travel
| This blog post explores the evolution of SQL Injection attacks and why traditional methods, like injecting ' OR 1=1;--, are less effective in modern web applications. It highlights the importance of using secure coding practices, such as parameterized queries and modern password hashing algorithms, to safeguard against these attacks.