Mix 3 years ago

Yet More ImageMagick Vulnerabilities

ImageMagick is a popular open-source image manipulation library used by many websites and software applications to process and display images....

Read more →

Mix 3 years ago

Getting into a Development Career with Seho Lim

Getting into a Development Career with Seho Lim Source link

Read more →

Mix 3 years ago

TomNomNom answers questions for 4 hours straight

TomNomNom answers questions for 4 hours straight Source link

Read more →

Mix 3 years ago

[tl;dr sec] #167 – SBOM, Scaling Security Alert Management, Mitigating RBAC-Based PrivEsc in Kubernetes

Hey there, I hope you’ve been doing well! Come say “How ya?” at OWASP Dublin If you’re going to be...

Read more →

Mix 3 years ago

Unveiling the Wild World of Bug Bounties

Unveiling the Wild World of Bug Bounties Source link

Read more →

Mix 3 years ago

CSRF protection on OIDC login is broken

Nextcloud disclosed a bug submitted by mikaelgundersen: https://hackerone.com/reports/1878381 Source link

Read more →

Mix 3 years ago

Top 3 Most Dangerous Lines of Code

Top 3 Most Dangerous Lines of Code Source link

Read more →

Mix 3 years ago

Firefox privacy and security hardening guide (2022 revised edition)

Firefox privacy and security hardening guide (2022 revised edition) Source link

Read more →

Mix 3 years ago

Easily leaking passenger information on an Airline | by Sean (zseano)

This post is going to outline how I simply applied my methodology and managed to find multiple vulnerabilities leaking airline...

Read more →

Mix 3 years ago

Reflected XSS at Philips.com. A full write-up; reflected XSS was… | by Jonathan Bouman

Proof of concept Are you aware of any (private) bug bounty programs? I would love to get an invite. Please...

Read more →

Mix 3 years ago

BOUNTY THURSDAYS – LIVE #1 (SVG-XML/Redirects/OOB servers and Community Questions)

BOUNTY THURSDAYS – LIVE #1 (SVG-XML/Redirects/OOB servers and Community Questions) Source link

Read more →

Mix 3 years ago

Applying Offensive Reverse Engineering to Facebook Gameroom

Late last year, I was invited to Facebook’s Bountycon event, which is an invitation-only application security conference with a live-hacking...

Read more →