Related Articles
All Mix →
What Are Bug Bounties? How Do They Work? [With Examples]
Table of Contents How Do Bug Bounties Work? What Exactly Is a Bug Bounty? How Does a Bug Bounty Program Work? Bug Bounty Program Examples…
![[tl;dr sec] #298 - Good CISO / Bad CISO, AWS Infra Canarytokens, Protect Yourself from Compromised NPM Packages](https://image.cybernoz.com/wp-content/uploads/2025/09/tldr-sec-298-Good-CISO-Bad-CISO-AWS.png)
[tl;dr sec] #298 – Good CISO / Bad CISO, AWS Infra Canarytokens, Protect Yourself from Compromised NPM Packages
Table of Contents How to be an effective CISO, deploy decoy assets that fit in to your AWS environment, tips and tools to minimize the…
The Best Generations
According to today’s regulators and bureaucrats, those of us who were kids in the 40’s, 50’s, 60’s, or even maybe the early 70’s probably shouldn’t…
WHY YOU SUCK AT HACKING // How To Bug Bounty
WHY YOU SUCK AT HACKING // How To Bug Bounty Source link
How to Hack Web Application
Table of Contents 🔍 Introduction What is Web? HTTP 🗡 Hack Mechanism MITM Proxy Testing Methods Testing Resources 🛠 Environment Embeded Browser Common Browser 📚…
Newly added security tests March 23, 2017: CVE-2017-5638 and Joomla SQL injections
To bring you the most up-to-date security service and help you stay on top of threats, we update Detectify on a regular basis. Here are…
Impact
When using
--userns-remap, if the root user in the remapped namespace has access to the host filesystem they can modify files under/var/lib/docker/that cause writing files with extended privileges.Patches
Versions 20.10.3 and 19.03.15 contain patches that prevent privilege escalation from remapped user.
Credits
Maintainers would like to thank Alex Chapman for discovering the vulnerability; @awprice, @nathanburrell, @raulgomis, @chris-walz, @erin-jensby, @BassMatt, @mark-adams, @dbaxa for working on it and Zac Ellis for responsibly disclosing it to security@docker.com