Podcast Episodes (Page 13)

Plenty of exploit strategy talk this week with vulnerabilities and complete exploits targeting a NAS, a router, and a Linux Kernel module with a page-level overflow.

Some easy vulnerabilities this week, a directory traversal due to a bad regex, a simply yet somewhat mysterious authentication bypass, arbitrary file read in GitLab thanks to archives with symlinks, and a PHP filter_var bypass.

A few issues this week, a OOB access in chrome and in the Linux Kernel's Netfilter, and a few issues in Smart UPS devices.

Several easy issues this week from leaking envrionment variables, to gaining host code execution and an XSS to RCE.

Some unusual issues this week as we get into some speculative executive issues, and some more usual Linux and Window's kernel vulnerabilities. Also some discussion about security through obscurity and the nvidia leaks.

We've got some cloud issues this week, in Azure Automation and GKE Autopilot along with a couple other interesting chains.

No spot the vuln this week, but we do have a cool kernel bug, "Dirty Pipe", a look at a stack based overflow: BrokenPrint, and finally some discussion about memory tagging.

A few interesting issues you this week, a JS race condition in some auth related code for Facebook, some fake prepared queries, and a RCE through sed commands (in pfSense)

Quick episode with four somewhat simple bugs in JPEG parsing, a remote memory disclosure in libcurl due to the difference `sizeof(long)` on Linux vs Windows, and a heap out of bounds write in the Linux Kernel.

Re-accessing the stup page, an unlikely scenario leaking Github Secrets, and a proxying issue in Carbon Black.