kriware Jan 29

Vulnerability Root-Cause Analysis on Linux

A walk-through of conducting a root-cause analysis on a Linux program vulnerability using debugging tools to trace a crash from FFmpeg back to corrupted EXIF metadata and invalid frees

https://2ourc3.com/posts/rca/

#vulnerabilityanalysis

Vulnerability root-cause analysis on Linux

Introduction As you may know: finding bugs is one of the greatest things in life — but once you finally obtain the precious memory corruption you were praying for, you still need to actually understand it. In this article we’ll explore how to conduct a root-cause analysis of a vulnerability in a Linux open-source program that we compiled ourselves. That matters because it lets us disable stripping and enable debug symbols, which makes the investigation dramatically easier.

2ourc3
benzogaga33 Jan 19
Automating Android App Component Testing with New APK Inspector https://www.mobile-hacker.com/2025/09/18/automating-android-app-component-testing-with-new-apk-inspector/?utm_source=rss&utm_medium=rss&utm_campaign=automating-android-app-component-testing-with-new-apk-inspector #vulnerabilityanalysis #exportedcomponents #Vulnerability #BugBounty #bugbounty
Automating Android App Component Testing with New APK Inspector

If improperly secured, exported components become easy entry points for attackers to execute arbitrary code, access sensitive data, or manipulate the app’s behavior.

Mobile Hacker
The DefendOps DiariesNov 5

A single overlooked input in CentOS Web Panel turned into a full-blown takeover—attackers hacked servers with no password needed. How did one bug spark such a cybersecurity uproar? Read on to get the inside scoop.

https://thedefendopsdiaries.com/centos-web-panel-vulnerability-cve-2025-48703-technical-analysis-and-lessons-for-cybersecurity/

#centoswebpanel
#cve202548703
#vulnerabilityanalysis
#cybersecurity
#patchmanagement

CentOS Web Panel Vulnerability (CVE-2025-48703): Technical Analysis and Lessons for Cybersecurity

Explore the technical details and cybersecurity lessons from the CentOS Web Panel CVE-2025-48703 vulnerability and its rapid exploitation.

The DefendOps Diaries
Alexandre BorgesMay 25, 2024

CVE-2024–23897 – Arbitrary file read in Jenkins:

https://blog.securelayer7.net/arbitrary-file-read-in-jenkins/

#cve #vulnerability #security #jenkins #vulnerabilityanalysis #analysis #cybersecurity #informationsecurity

CVE-2024–23897 – Arbitrary file read in Jenkins

Overview CVE-2024–23897 is a critical vulnerability discovered in Jenkins, with a high CVSS score of 9.8. This vulnerability allows the attacker to read files in the […]

Penetration Testing and CyberSecurity Solution - SecureLayer7
Alexandre BorgesMay 25, 2024

CVE-2024–23897 – Arbitrary file read in Jenkins:

https://blog.securelayer7.net/arbitrary-file-read-in-jenkins/

#cve #vulnerability #security #jenkins #vulnerabilityanalysis #analysis #cybersecurity #informationsecurity

CVE-2024–23897 – Arbitrary file read in Jenkins

Overview CVE-2024–23897 is a critical vulnerability discovered in Jenkins, with a high CVSS score of 9.8. This vulnerability allows the attacker to read files in the […]

Penetration Testing and CyberSecurity Solution - SecureLayer7
ITSEC NewsOct 6, 2020
90 days, 16 bugs, and an Azure Sphere Challenge - Cisco Talos reports 16 vulnerabilities in Microsoft Azure Sphere's sponsored research challenge.
By ... http://feedproxy.google.com/~r/feedburner/Talos/~3/n4-X8h4AfAA/Azure-Sphere-Challenge.html #informationdisclosure #unsignedcodeexecution #vulnerabilityanalysis #privilegeescalation #denialofservice #microsoftazure #vulnspotlight #vulnerability #vulndev #talos
90 days, 16 bugs, and an Azure Sphere Challenge

A blog from the world class Intelligence Group, Talos, Cisco's Intelligence Group

ITSEC NewsApr 14, 2020

Vulnerability Spotlight: Information disclosure vulnerability in Microsoft Media Foundation - Marcin “Icewall” Noga of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw.

Microsoft ... more: http://feedproxy.google.com/~r/feedburner/Talos/~3/VnXYz6tR7IU/vuln-spotlight-microsoft-media-foundation-april-2020.html #microsoftmediafoundation #vulnerabilityspotlight #microsoftpatchtuesday #vulnerabilityanalysis #vulnerabilityresearch

Vulnerability Spotlight: Information disclosure vulnerability in Microsoft Media Foundation

A blog from the world class Intelligence Group, Talos, Cisco's Intelligence Group

ITSEC NewsMar 10, 2020
Vulnerability Spotlight: Information disclosure in Windows 10 Kernel - Marcin Towalski of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw.Cisco Talos recent... more: http://feedproxy.google.com/~r/feedburner/Talos/~3/fqXfmBjGe5A/vuln-spotlight-windows-10-kernel-information-disclosure.html #vulnerabilityspotlight #microsoftpatchtuesday #vulnerabilityanalysis #vulnerabilityresearch #microsofwindows #windows10kernel #microsoft
Vulnerability Spotlight: Information disclosure in Windows 10 Kernel

A blog from the world class Intelligence Group, Talos, Cisco's Intelligence Group

ITSEC NewsFeb 11, 2020
Vulnerability Spotlight: Use-after-free vulnerability in Windows 10 win32kbase - Marcin Towalski of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw.Cisco Talos is rel... more: http://feedproxy.google.com/~r/feedburner/Talos/~3/gnDmun7x3E0/vuln-spotlight-Windows-10-use-after-free-feb-2020.html #vulnerabilityspotlight #microsoftpatchtuesday #vulnerabilityanalysis #microsoftpatches #vulnerabilities #microsoft #windows10
Vulnerability Spotlight: Use-after-free vulnerability in Windows 10 win32kbase

A blog from the world class Intelligence Group, Talos, Cisco's Intelligence Group

ITSEC NewsFeb 11, 2020
Vulnerability Spotlight: Code execution vulnerability in Microsoft Media Foundation - Marcin Noga of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw.Microsoft Media Founda... more: http://feedproxy.google.com/~r/feedburner/Talos/~3/IHtPwJjhRI4/vuln-spotlight-code-media-foundation-feb-2020.html #microsoftmediafoundations #vulnerabilityspotlight #microsoftpatchtuesday #vulnerabilityanalysis #microsoftpatches #vulnerabilities #microsoft
Vulnerability Spotlight: Code execution vulnerability in Microsoft Media Foundation

A blog from the world class Intelligence Group, Talos, Cisco's Intelligence Group