🕵️ RESEARCH & DEEP DIVES
Sponsored: Authentik is rethinking PAM for AI agents — Risky Business News
SourceCodester Class and Exam Timetabling System modal_add_coursea.php mysqli... — CVE ThreatInt
SourceCodester Class and Exam Timetabling System modal_add_course2.php mysqli... — CVE ThreatInt
SourceCodester Class and Exam Timetabling System modal_add_course1.php mysqli... — CVE ThreatInt
domain-scoped PSL domain cookieWhen libpsl support is enabled, libcurl fails ... — CVE ThreatInt
wolfSSL CA-cache hit overrides callbackWith the wolfSSL backend, when CA cach... — CVE ThreatInt
secure cookie attribute bypass with tabA
Set-Cookie:header using tab (hori... — CVE ThreatIntnative CA store conn reuseA flaw in libcurl makes it wrongly reuse an existin... — CVE ThreatInt
OpenSSL pinning bypassWhen
CURLOPT_PINNEDPUBLICKEYis configured alongside ... — CVE ThreatIntOpenSSL provider use-after-freeWhen performing transfers via libcurl’s multi ... — CVE ThreatInt
Negotiate ambient user conn reuseA flaw in libcurl makes it wrongly reuse an ... — CVE ThreatInt
HTTP/2 server push UAFA flaw in libcurl's handling of HTTP/2 Server Push stre... — CVE ThreatInt
OpenLDAP SASL authentication bypassA flaw in the libcurl SASL negotiation for... — CVE ThreatInt
Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replaye... — CVE ThreatInt
Just as one of its states was holding a major regional election, Russian disinfo group Matryoshka was busy pushing... — @campuscodi@mastodon.social
ConnectWise warns of a ScreenConnect remote access bug, promises a CVE and patch next week https://www. — @campuscodi@mastodon.social
After the DOJ and State Department, Congress now wants CyberCommand to use cyber contractors too A new provision... — @campuscodi@mastodon.social
Once Wikipedia is stuck with a picture of you from 2007, you basically can't risk it and be seen in public at that... — @SwiftOnSecurity@infosec.exchange