iSpeech
Video of a proof-of-concept exploit for Ubuntu's crash reporting system, written by GitHub security researcher Kevin Backhouse. The exploit uses a heap buffer overflow vulnerability in whoopsie (CVE-2019-11484) and an information disclosure vulnerability in Apport (CVE-2019-15790) to get a shell as the whoopsie user. In the voice-over, Kevin Backhouse explains what's happening.
source
Debian Security Advisory 5664-1 – Torchsec April 18, 2024 -----BEGIN PGP SIGNED MESSAGE-----Hash: SHA512- -------------------------------------------------------------------------Debian Security Advisory DSA-5664-1 security@debian.orghttps://www.debian.org/security/… (9)
Google Sues App Developers Over Fake Crypto… April 8, 2024 Apr 08, 2024NewsroomInvestment Scam / Mobile Security Google has filed… (8)Red Hat Security Advisory 2024-1687-03 – Torchsec April 9, 2024 The following advisory data is extracted from:https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_1687.jsonRed Hat officially shut… (8)Open Source Medicine Ordering System 1.0 SQL… April 8, 2024 # Exploit Title : Open Source Medicine Ordering System v1.0… (7)
Gloss