⚠️ Cloudflare Zero-Day Vulnerability Enables Any Host Access Bypassing Protections
Source: https://t.co/BBJAp1bRZq
A critical zero-day vulnerability in Cloudflare's Web Application Firewall (WAF) allowed attackers to bypass security controls and directly access protected origin servers through a certificate validation path.
The requests targeting the /.well-known/acme-challenge/ directory could reach origins even when customer-configured WAF rules explicitly blocked all other traffic.
The vulnerability was detected while reviewing applications where WAF configurations blocked global access and permitted only specific sources.
#CybersecurityNews #vulnerabilitynews
𝗠𝗮𝘀𝘁𝗲𝗿 𝗕𝗮𝗰𝗸𝗲𝗻𝗱 𝗗𝗲𝘃𝗲𝗹𝗼𝗽𝗺𝗲𝗻𝘁 𝘄𝗶𝘁𝗵 𝗣𝘆𝘁𝗵𝗼𝗻 - 𝗗𝗷𝗮𝗻𝗴𝗼 & 𝗙𝗹𝗮𝘀𝗸!
I’m sharing the 𝗯𝗲𝘀𝘁 𝗣𝘆𝘁𝗵𝗼𝗻 𝗗𝗷𝗮𝗻𝗴𝗼 & 𝗙𝗹𝗮𝘀𝗸 𝗕𝗼𝗼𝗸𝘀 📚 Covering everything from fundamentals to deployment & advanced API building.
📘 Absolutely FREE for the first 500 people!
To claim your copy 👇
1️⃣ Like & Repost
2️⃣ Comment “PYTHON”
3️⃣ Follow (must) so I can DM you the books
💡 Backend mastery starts with the right foundation, start building yours today!
It was good while it lasted... ⬇️
Starting today, ParrotOS will only be available through a monthly subscription model 💰
We’ve put years into building and maintaining this project, and to continue delivering quality, sustainability is no longer optional.
ParrotOS is now available for $3.99/month — same power, same freedom, just a new way to support it 📦
Thanks for understanding, and we hope you’ll continue hacking with us 💚
Visit our website and check subscription options 🔗
https://t.co/WpOD5IgAry
#ParrotSec #ParrotOS #linux #linuxdistro #closedsource #cybersecurity #cybersecuritynews
Four days to go! Are you ready for Advent of Cyber? 👀🎄🎁
Get started with cyber security for FREE with daily beginner-friendly challenges released throughout December!
https://t.co/63LmazMo7X
Arsenal
A quick inventory, reminder and launcher for pentest commands. This project written by pentesters for #pentesters simplify the use of all the hard-to-remember commands.
https://t.co/hAi2VUbc7j
#cybersecurity#infosec#redteam
Are you ready for this year's #AdventOfCyber? 🎄🎁
Discover everything you need to know about the topics, prizes, characters, and a tease of the upcoming storyline 😉
🔗 https://t.co/1xZPbV1reL