A Brief Retrospective on SPARC Register Windows

https://danielmangum.com/posts/retrospective-sparc-register-windows/

#risc #sparc

[RSS] Linksys Velop Routers Caught Sending WiFi Creds in the Clear

https://hackaday.com/2024/07/15/linksys-velop-routers-caught-sending-wifi-creds-in-the-clear/

We love Open Source contributors.

If you are a significant contributor to an Open Source project, DM us, and we will give you a full briefings pass to BlackHat USA (absolutely free).

__
* Tickets handed out totally at our discretion;
** We only have a few tickets left;

fq 0.12.0 released 🥳 nothing fancy, REPL and jpeg fixes otherwise mostly update of dependencies.

https://github.com/wader/fq/releases/tag/v0.12.0

#fq #jq

[oss-security] backtrace_symbols() misuse by Ceph and its supposedly-safe use

Interesting thread on safe crash handling in the light of signal handler races

https://www.openwall.com/lists/oss-security/2024/07/12/1

[RSS] A 64-bit x86 Bootloader from Scratch

https://hackaday.com/2024/07/14/a-64-bit-x86-bootloader-from-scratch/

[RSS] [Internet Bug Bounty] high - important: Apache HTTP Server on WIndows UNC SSRF (CVE-2024-38472) (4920.00USD)

https://hackerone.com/reports/2585385

[RSS] [Internet Bug Bounty] high - important: Apache HTTP Server weakness with encoded question marks in backreferences (CVE-2024-38474) (4920.00USD)

https://hackerone.com/reports/2585381

Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in directories permitted by the configuration but not directly reachable by any URL or source disclosure of scripts meant to only to be executed as CGI.

[RSS] Resurrecting a dead Dune RTS game

https://wheybags.com/blog/emperor.html

Spent the last four days coordinating incident response for the Squarespace domain hijackings with @tay and @AndrewMohawk. Now that it seems to be resolved, we wrote a little postmortem/retrospective

https://securityalliance.notion.site/A-Squarespace-Retrospective-or-How-to-Coordinate-an-Industry-Wide-Incident-Response-fead693b66c14543a48283d85aec19ad

Starting from v0.10 (the next version), HyperDbg uses @keystone_engine as its assembler. ❤️

Thanks to our new team member @AbbasMasoumiG for adding it.

The following commands are added to assemble virtual and physical memory:

- https://docs.hyperdbg.org/commands/debugging-commands/a

- https://docs.hyperdbg.org/commands/extension-commands/a

Clever & fun technique to dump #Windows LSA secrets bypassing #EDR by @sensepost

Dumping LSA secrets: a story about task decorrelation

https://sensepost.com/blog/2024/dumping-lsa-secrets-a-story-about-task-decorrelation/

I almost felt guilty finding out the guy accidentally gave me two of these "original palestinian" scarves instead of one

[RSS] Announcing AES-GEM (AES with Galois Extended Mode)

https://blog.trailofbits.com/2024/07/12/announcing-aes-gem-aes-with-galois-extended-mode/

[RSS] MongoDB NoSQL Injection with Aggregation Pipelines

https://soroush.me/blog/2024/06/mongodb-nosql-injection-with-aggregation-pipelines/

[RSS] SSD Advisory – SonicWall SMA100 Stored XSS to RCE

https://ssd-disclosure.com/ssd-advisory-sonicwall-sma100-stored-xss-to-rce/

Introduction to the Wild West of Proof of Concept #Exploit Code (#PoC) aka SSHing the Masses

https://santandersecurityresearch.github.io/blog/sshing_the_masses.html

Everyone complains about meetings, but rarely anybody puts time before the meeting to do the work needed for the meeting to be useful.

Evernote RCE: From PDF.js font-injection to All-platform Electron exposed ipcRenderer with listened BrokerBridge Remote-Code Execution

https://0reg.dev/blog/evernote-rce