Category: Mix

GitLab - GitLab-Runner on Windows `DOCKER_AUTH_CONFIG` container host Command Injection
08
May
2024

GitLab – GitLab-Runner on Windows `DOCKER_AUTH_CONFIG` container host Command Injection

HackerOne bug report to GitLab: GitLab-Runner, when running on Windows with a docker executor, is vulnerable to Command Injection via…

community/VMT/KCSA/KCSA-CVE-2020-28914.md at main · kata-containers/community · GitHub
08
May
2024

community/VMT/KCSA/KCSA-CVE-2020-28914.md at main · kata-containers/community · GitHub

announcement-date: 2020-11-17 id: KCSA-CVE-2020-28914 title: Kata Containers Improper file permissions for read-only volumes description: An improper file permissions vulnerability affects…

Access to remapped root allows privilege escalation to real root · Advisory · moby/moby · GitHub
08
May
2024

Access to remapped root allows privilege escalation to real root · Advisory · moby/moby · GitHub

Impact When using –userns-remap, if the root user in the remapped namespace has access to the host filesystem they can…

The Meta AI Ray-Bans Are Awesome · Joseph Thacker
08
May
2024

The Meta AI Ray-Bans Are Awesome · Joseph Thacker

My wife got me the new Meta AI Ray-Bans as an early birthday present, and I have to say, they…

Container security: Privilege escalation bug patched in Docker Engine
08
May
2024

Container security: Privilege escalation bug patched in Docker Engine

Adam Bannister 09 February 2021 at 12:47 UTC Updated: 09 February 2021 at 12:59 UTC ‘An odd one, impact wise’…

What you need to know
08
May
2024

What you need to know

To stay on top of relevant and emerging threats, CISOs must adjust and refine their cybersecurity strategies to address the…

Wallarm wins 2024 Cybersecurity Excellence Award -
08
May
2024

Wallarm wins 2024 Cybersecurity Excellence Award –

We are thrilled to announce that Wallarm has clinched the sought-after 2024 Cybersecurity Excellence Award, under the category Best API…

Email Marketing Powered by Mailchimp
07
May
2024

Hey, it’s EdOverflow!

96 Hey, it’s EdOverflow! p{ margin:10px 0; padding:0; } table{ border-collapse:collapse; } h1,h2,h3,h4,h5,h6{ display:block; margin:0; padding:0; } img,a img{ border:0;…

Supporting Sprocket Security's offensive security testing with BChecks, from Burp Suite | Blog
07
May
2024

One month of Burp Suite in the Cloud – how are AppSec teams using it? | Blog

Mike Eaton | 07 May 2024 at 14:25 UTC It’s now been a month since we launched the new Cloud-based…

Hackerone logo
06
May
2024

Join HackerOne’s Ambassador World Cup

Customers who take part in the Ambassador World Cup get dedicated focus from highly motivated and expert teams of hackers….

Companies Are Just a Graph of Algorithms
06
May
2024

Companies Are Just a Graph of Algorithms

I think the reason so many people don’t understand how big AI is going to be is that they don’t…

Wordpress Plug-in Threatens 90,000+ websites
06
May
2024

WordPress Plug-in Threatens 90,000+ websites

A highly concerning security loophole was recently discovered in a WordPress plugin called “Email Subscribers by Icegram Express,” a popular…