Archive

1. Vulnerability Properties

A few weeks ago (July 14, 2015), Microsoft had a busy patch Tuesday fixing quite a few privilege escalation vulnerabilities. Among these was a bug in DCOM/RPC which allows for an...

The Angler Exploit Kit (EK) recently added support for an Internet Explorer (IE) vulnerability (CVE-2015-2419) that was patched in July 2015.

big-list-of-naughty-strings - The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

SkypeDestroyer v-0.1 released – Exploits headers and the Skype protocol. | Security List Network™

This post was authored by Mahdi Namazifar and Yuxi Pan Once a piece of malware has been successfully installed on a vulnerable system one of the first orders of business is for the malware to reach out to the remote command-and-control (C&C) servers in order to receive further instructions, u

Solution for our little PHP security challenge

H5SC - HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

Привет, хабр! Одним прекрасным вечером, не предвещающим ничего интересного, в наш чатик поступило предложение от автора публикации «Переводим в код 5...

H5SC - HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

Posted by Chris Evans, Cookie Monster With the release of Flash 18.0.0.209 , two mitigations were introduced to combat abuse of Vector ...

CrowdShield | Create your bug bounty disclosure program and leverage ethical hackers from around the world!

H5SC - HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

More and more software vulnerabilities are discovered each year, and hundreds of public disclosures may occur on the same day. For example, the CVE …

Detecting XSS auditor James pointed out to me that XSS auditor in Chrome has a block mode and I thought it might be interesting to see if this could be exploited in some way. When the http header is s

NB: This blog post will be updated in the upcoming days with more information Introduction A few days before the publishing of this blog post I came across an unknown RTF exploit sample which I cou…

In Ming Loh has realised a new security note Firefox < 39.03 - pdf.js Same Origin Policy Exploit

NetFormation helps businesses navigate digital transformation via Level 3’s unique network with a focus on growth, efficiency, innovation and connections

sinkhole - Architectural privilege escalation on x86

Blue Frost has realised a new security note OpenSSH 6.9p1 Authentication Bypass / Use-After-Free