Episode 42

iOS 0days are worthless, PrintDemon, and a takeover of hackerone

19 May 2020

Show Notes

[UPDATE] Huawei HKSP Introduces Trivially Exploitable Vulnerability

Additional Links: https://github.com/cloudsec/aksp/blob/master/hksp.patch

iOS one-click chains prices likely to drop

Additional Links: https://www.hackasat.com/

Defcon Quals 2020

Additional Links: https://hxp.io/blog/72/DEFCON-CTF-Quals-2020-notbefoooled/

vBulletin 5.6.1 SQL Injection

Subdomain takeover of resources.hackerone.com

MyLittleAdmin PreAuth RCE

DOM-Based XSS at accounts.google.com by Google Voice Extension.

Playing with GZIP: RCE in GLPI [CVE-2020-11060]

Reverse RDP - The Path Not Taken

PrintDemon: Print Spooler Privilege Escalation, Persistence & Stealth [CVE-2020-1048]

Additional Links: https://twitter.com/VbScrub/status/1260598344650539009

Security Flaws in Adobe Acrobat Reader Allow Malicious Program to Gain Root on macOS Silently

Cloud WAF Comparison Using Real-World Attacks

Additional Links: https://medium.com/fraktal/cloud-waf-comparison-part-2-e6e2d25f558c https://en.wikipedia.org/wiki/Server_Side_Includes

Fuzzing TLS certificates from their ASN.1 grammar

DHS CISA and FBI share list of top 10 most exploited vulnerabilities