Episode 31

One-Two-Three Named Vulns (kr00k, Forgot2kEyXCHANGE, GhostCat) and more OpenSMTPD and Samsung Vulnerabilities

03 March 2020

Show Notes

Facial-Recognition Company That Works With Law Enforcement Says Entire Client List Was Stolen

Firefox continues push to bring DNS over HTTPS by default for US users

Additional Links: https://github.com/curl/curl/wiki/DNS-over-HTTPS

Securing Memory at EPYC Scale

How a Hacker's Mom Broke Into a Prison—and the Warden's Computer

CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys

CVE-2020-1938: Ghostcat vulnerability

LPE and RCE in OpenSMTPD's default install (CVE-2020-8794)

Blind SSRF on debug.nordvpn.com due to misconfigured sentry instance

Additional Links: https://hackerone.com/reports/374737

x-request-id header reflected in server response without sanitization

Malformed .BMP file in Counter-Strike 1.6 may cause shellcode injection

Additional Links: https://hackerone.com/valve/hacktivity

Samsung Kernel /dev/hdcp2 hdcp_session_close() Race Condition

Samsung Kernel Arbitrary /dev/vipx / /dev/vertex kfree

Samsung Kernel /dev/vipx Pointer Leak

HFL: Hybrid Fuzzing on the Linux Kernel – NDSS Symposium

Et Tu Alexa? When Commodity WiFi Devices Turn into Adversarial Motion Sensors

Evasion techniques

Hacking Unicode Like a Boss

Pwning VMware, Part 2: ZDI-19-421, a UHCI bug | nafod

Intro to chrome's v8 from an exploit development angle