Brb, need to update my resume. Changing "wrote Fortran exploit for the lulz" to "crafted totally serious exploit in the 10th most popular programming language in the world". Sauce:
https://www.tiobe.com/tiobe-index/Thank you all for reading. If you enjoyed this PR, please leave an approving review and don't forget to smash that merge button. See you at the next one!
Any horror fans out here? Is Hereditary a sane choice if you used to be into horror but have gotten kinda soft since becoming a parent? Asking for myself obviously
I think I speak for everyone when I say that the world will be a better place if the Teams outage is never fixed.
Purging Teams from my phone has been by far the best mental health decision I've made in years. 10/10 would delete again.
- Have you tried this pentesting tool?
- Ah that's interes- It has a swastika in the logo
- You're so funny. It's pretty innovative bec-
- It has a swastika in the logo
- It's really cool how-
- It has a swastika in the logo
- Seriously though, I use-
- Swastika. In. Logo.
Before the holiday break, I started looking at CVE-2022-1471 in Confluence and Bitbucket, which led me to trying to understand how SnakeYAML deserialization vulnerabilities actually work. It was quite the ride, full of open source drama and a plethora of related vulns. I wrote it all up in this blog post:
https://www.labs.greynoise.io/grimoire/2024-01-03-snakeyaml-deserialization/
#vuln #vulnerability #poc #java #deserialization #snakeyaml #yaml
GreyNoise Labs - Panic!! At the YAML
An overview of SnakeYAML deserialiation vulnerabilities (CVE-2022-1471) - how it works, why it works, and what it affects
Pretty annoyed that it took me around 25 years to realize it's fine to pursue math just because you like it, even if you're nothing like the Good Will Hunting guy.
Ron Bowes