Последние посты
Netsec
22 сент., 16:21
The finding said RCE. The second tester asked one question and the ticket died. Last year I inherited a “critical RCE” from an automated pass.The request looked perfect. Parameter host. Payload 8.8.8.8; sleep 5. Status 200. Response time jumped from ~800ms to ~6s. The scanner wrote OS command injection, confidence high. The client had already seen the word critical in the draft.I replayed it once. Same delay. Replay again. 1.1s. Again. 7s. Again. 900ms. The sleep was not in the response body. id came back as the literal string id. expr 41 + 1 came back as the literal string. The page was a diagnostics form. It echoed the query and, under load, the WAF in front of it spent extra time on anything that looked like a shell metacharacter.That is a known failure mode, not a rare one. Time-based command-injection checks fire when the response is merely slower, which also happens when the scanRedditFrom the netsec community on RedditExplore this post and more from the netsec communityNetsec
22 сент., 11:21
CVE-2026-45756: attacker-controlled regex in Symfony JsonPath filters (ReDoS) https://ift.tt/F7GwLVQSubmitted September 22, 2026 at 04:45PM by AlexandreDaubois via reddit https://ift.tt/ir6ZaF5daubois.devCVE-2026-45756: attacker-controlled regex in Symfony JsonPath filters (ReDoS)A JSONPath filter taken from a query string lets an attacker pick the regex a Symfony app runs, once per node in the document.Netsec
22 сент., 08:21
vCenter pre-auth RCE: CVE-2026-59309/59310 https://ift.tt/zJ9a7yNSubmitted September 22, 2026 at 01:28PM by MobetaSec via reddit https://ift.tt/UohWrc9MobetavCenter pre-auth RCE: CVE-2026-59309/59310 | MobetaCVE-2026-59309 & CVE-2026-59310: patch-diffing VMware vCenter reveals two pre-auth 9.8 bugs - an auth bypass and a syslog path traversal to RCE.Netsec
22 сент., 07:21
Agent Blast Radius: Graph-Based Modeling, Admission Prevention, and LLM Benchmarking for Kubernetes Privilege Escalation https://ift.tt/CJ153X4Submitted September 22, 2026 at 11:52AM by vishalmurugan1986 via reddit https://ift.tt/tSe2MuHSubstackFrom a Sandbox Pod to cluster-admin: Benchmarking Autonomous LLM Agents on K8s Privilege EscalationWhy static linters miss multi-stage lateral movement, how autonomous LLMs navigate graph-based escalation, and defensive strategies for AI infrastructure.Netsec
22 сент., 06:21
From a Sandbox Pod to cluster-admin: Benchmarking Autonomous LLM Agents on K8s Privilege Escalation https://ift.tt/CJ153X4Submitted September 22, 2026 at 11:45AM by vishalmurugan1986 via reddit https://ift.tt/IS8a6AhSubstackFrom a Sandbox Pod to cluster-admin: Benchmarking Autonomous LLM Agents on K8s Privilege EscalationWhy static linters miss multi-stage lateral movement, how autonomous LLMs navigate graph-based escalation, and defensive strategies for AI infrastructure.Netsec
22 сент., 04:21
Inside BambooToken’s Linux implant: shell and file control over MQTT https://app.reverser.space/p/duckie/inside-bambootoken-s-linux-implant-shell-and-fileSubmitted September 22, 2026 at 09:06AM by 420ass_slayer69 via reddit https://ift.tt/trEyg7sreverser.spaceInside BambooToken’s Linux implant: shell and file control over MQTT | Reverser SpaceBambooToken turns an MQTT broker into a remote-control hub for Linux. Behind a 59-byte configuration blob, hex-encoded topics, and repeating XOR lies a backdoor built...Netsec
22 сент., 04:21
Windows Exploitation Techniques: Dangling COM Object Registrations https://ift.tt/tfrgQJvSubmitted September 22, 2026 at 08:49AM by wojtekch via reddit https://ift.tt/G3z9VEIprojectzero.googleWindows Exploitation Techniques: Dangling COM Object RegistrationsThis short blog post is about abusing a privilege escalation bug that Microsoft recently fixed in...Netsec
21 сент., 18:21
Implant Encryption via the Dump Encoding Library https://ipurple.team/2026/09/21/dump-encoding-library/Submitted September 21, 2026 at 11:32PM by netbiosX via reddit https://ift.tt/2q0XNTGPurple TeamDump Encoding LibraryThe Windows Error Reporting Dump Encoding Library (WerEnc.dll) is a Microsoft signed DLL that can be abused by threat actors to encrypt their implant using a trusted Microsoft cryptographic impleme…Netsec
21 сент., 17:21
ZTE SmartHome Account Takeover: Password Reset Without Verification Code. 4 CVEs, 100K+ Android Downloads - CVE-2026-86553 https://minanagehsalalma.github.io/zte-smartlife-app-pwned/Submitted September 21, 2026 at 10:00PM by TheReedemer69 via reddit https://ift.tt/6FZrOV0minanagehsalalma.github.ioZTE Smarthome TakeOverTechnical writeup on ZTE SmartLife security findings covering app-auth recovery, account enumeration, password reset behavior, signup abuse, and Homecare SDK reach.Netsec
21 сент., 11:21
ChatGPT now knows what you do on other websites via ad collector https://ift.tt/1WvKSGjSubmitted September 20, 2026 at 09:02PM by AdTemporary2475 via reddit https://ift.tt/o2OsxtRBuchodi's Threat IntelChatGPT now knows what you do on other websites via ad collectorOpenAI's ad collector at bzr.openai.com sets a cookie called __obi, scoped to .openai.com. The value is while you are on ChatGPT and tied to your ChatGPT account. __obi is then sent to OpenAI from ordinary websites you visit. Any company that buys ads on…Netsec
21 сент., 09:21
Three memory-safety bugs in Godot's untrusted-file parsers https://ift.tt/aL0FjdVSubmitted September 21, 2026 at 02:38PM by bitbutter via reddit https://ift.tt/vL1NnXQaxeghost.offprint.appThree memory-safety bugs in Godot's untrusted-file parsers | Axe Ghost. On Steam! | OffprintI found three serious bugs in Godot 4.7 in an audit conducted with an LLM agent. The bugs are due to missing bounds checking in code that reads untrusted files. Using files that are deliberately...Netsec
21 сент., 02:21
Silent packet loss in PcapSplitter: a file collision bug on TCP session reuse https://ift.tt/yFW3fA6Submitted September 21, 2026 at 07:35AM by Hot_Interest_4915 via reddit https://ift.tt/l1KMyOvRobin HayerPcapSplitter file collision on TCP session reusePcapSplitter reported 48 packets, wrote 44, exited zero. Tracing a filename collision on TCP 5-tuple reuse, and the fix merged upstream.Netsec
20 сент., 18:21
AI Agents Keep Falling to 'Goal Hijack' (Copilot, Cursor, Grok) https://ift.tt/C7bXHxoSubmitted September 20, 2026 at 11:16PM by _clickfix_ via reddit https://ift.tt/p3CIo8lSubstackAI Agent Goal Hijack: How Attackers Turn an Agent's Own Tools Against ItAI agents are being handed real power faster than they can be secured, and attackers are turning their own tools against them.Netsec
20 сент., 09:21
Fastest CVE informer | EchelonGraph https://ift.tt/nFjQEIcSubmitted September 20, 2026 at 02:21PM by Foreign_Score_4021 via reddit https://ift.tt/CwSxqHbEchelonGraphCVE Pulse — Live Vulnerability FeedSearch and explore cloud infrastructure vulnerabilities with real-time severity filtering and CVSS scoring.Netsec
19 сент., 17:21
BragJack - $20K in bounty rewards from Anthropic, Perplexity, Google, Microsoft and Opera Using 1 Extension https://ift.tt/XMgOl3jSubmitted September 19, 2026 at 10:27PM by Content-Winter5328 via reddit https://ift.tt/UJCQ0ZdForeverBragJack [Technical Overview]: How We Hijacked Top 5 Browsers' Internal Agents With Just One Single Extension · Forever SecurityBragJack attack (discovered by Forever Security) allowed ordinary extensions to hijack the internal browser agent of Comet, Chrome, Edge, Opera, and Claude in ChromeNetsec
19 сент., 08:21
Your LLM is prompt injecting you... https://ift.tt/yakSCmdSubmitted September 19, 2026 at 01:39PM by AImSamy via reddit https://ift.tt/4VeJg3cwww.edenai.coWhen LLM Routers Turn Malicious: AI Agent Security RisksResearchers found malicious behavior in LLM routers, revealing new risks for AI agents, tool calls, credentials, and the LLM supply chain.Netsec
19 сент., 07:21
CVE-2026-77179: Docker's hypervisor for Mac compromised (Docker Desktop, Docker Sandboxes) https://ift.tt/qhPuE3WSubmitted September 19, 2026 at 11:55AM by natcoba via reddit https://ift.tt/hjQZJxXAccomplishGuest to host: escaping Docker's hypervisor — Accomplish BlogWe reported a sandbox escape in Docker's hypervisor for Mac: a container gets complete read and write access to the host filesystem with three lines of bash. Assigned CVE-2026-77179 and fixed in Docker Desktop 4.88.0 and Docker Sandboxes 0.42.0.Netsec
18 сент., 13:21
Microsoft Teams Help Desk Impersonation: When IT Support Messages You First https://ift.tt/ToaIHbhSubmitted September 18, 2026 at 06:25PM by scamdrill via reddit https://ift.tt/wPzhT6jScamDrillThe IT Help Desk That Messaged You First on TeamsTeams allows chat from any external domain by default. Lab replication: first message to full endpoint control in 21 minutes. Here is what to change.Netsec
18 сент., 08:21
A quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill https://ift.tt/jHqhZxOSubmitted September 18, 2026 at 01:27PM by ablasionet via reddit https://ift.tt/vBFle6GHey, it's AsimA quartet of Linux local root vulns: DirtyAH6, PPPoEject, TUNderflow, and DiagSpillSqueezing four more LPEs out of Linux with agentic vuln hunting: CVE-2026-80844, CVE-2026-81000, CVE-2026-68121, and CVE-2026-74469Netsec
18 сент., 05:21
Hacking OpenAI https://ift.tt/mPtD2lWSubmitted September 18, 2026 at 10:28AM by appsec1337 via reddit https://ift.tt/KIBxvscHacktron AIHacking OpenAIA heap overflow and SSO misconfiguration to compromise OpenAI internal repositories
