/explore
|
You are here 
|
srcincite.io | ||
| | | | |
foxglovesecurity.com
By @breenmachine What? The most underrated, underhyped vulnerability of 2015 has recently come to my attention, and I'm about to bring it to yours. No one gave it a fancy name, there were no press releases, nobody called Mandiant to come put out the fires. In fact, even though proof of concept code was released... |
|
| | | | | ||
| | | | |
www.thezdi.com
[AI summary] Trend Micro researchers detail a patched remote code execution vulnerability in VMware Aria Operations for Logs caused by insecure deserialization of user-supplied data. |
|
| | | | | ||
| | | | |
y4y.space
Intro The exploitation of this RCE consists of two parts, one being the lack of authentication validation to h5-vsan endpoint, and another being the unsafe reflection usage in Java which then caused a JNDI injection. I was not smart enough to come up with the JDNI attack chain, but certainly learned a lot while attempting... |
|
| | | | | ||
| | | | |
mazinahmed.net
Application and Infrastructure Security Engineering |
|
| | | |||
