@bef0rd & myself have exploited the Path Traversal and RCE in the latest patched version of Apache (2.4.50). We recommended to upgrade ASAP to the new version 2.4.51.
Security report: https://t.co/ni8hoaPqdc
CVE: 2021-42013
#security#apache#apache24#0day#CVE202142013
Stanford just did something wild. They put their entire graduate-level AI course on YouTube. No paywall, no signup. It’s the exact curriculum Stanford charges $7,570 for ❱❱❱❱ watch free now
@R3nnix hola! ¿Qué tal? ¿estas láminas con las instrucciones están disponibles? No alcancé a tomarles foto y quería ver el material para intentar hacer los otros desafíos post eko.
@IVANGOMEZDELEOM Viví algo muy similar años atrás, lo solucioné con una buena abogada que tenía bastante experiencia tratando temas cómo estos. Espero todo mejoré pronto 💪
@WebSecAcademy Hi, are the client side labs working as expected? I have tested 2 of them and they don't seem to work: the first one for CSRF and the last one for CORS. The wiener account is hacked fine with my payloads but the victim account is not. Ty.
I'm glad you were amused by the joke :). It has truly been a privilege to meet you Dr. @jordanbpeterson. Thanks for all your teachings, both from your books & psychology readings on YouTube.
@housecor From a security point of view pre-commit can be used to prevent leakage sensitive information in your commits. For example, hardcoded credentials, PII data.
And you can’t just delete it later, because it will still be leaked in the commit historical.
@mazen160 But SAST tools does the same. It would be great to test with others vulnerabilities when you can’t detect them with regex and patterns. Example: IDOR.
Today I am finally releasing a new 3-part browser exploitation series on Chrome! This was written to help beginners break into the browser exploitation field.
Part 1 covers V8 internals such as objects, properties, and memory optimizations. Enjoy! https://t.co/bbFjOOzlOu
@sudochmod4777 @RandoriAttack@springframework It also returns false positives for patched version of Tomcat: WebappClassLoaderBase.getResources() disabled.
8080: vulnerable
9090: patched