Devfile file write vulnerability in Gitlab – walkthrough finding CVE-2024-0402gitlab-com.gitlab.io·3 pts·pentestercrab·0
Talkback: Keeping up with the pwnses, a next gen infosec resource aggregatorelttam.com·1 pts·pentestercrab·0
PHP Development Server <= 7.4.21 – Remote Source Disclosureblog.projectdiscovery.io·1 pts·pentestercrab·0
Reverse Branch Target Buffer Poisoning – New ASLR Bypass via CPU Vulns [pdf]cos.ufrj.br·3 pts·pentestercrab·0
Attacking Firecracker: AWS' MicroVM Monitor Written in Rustgraplsecurity.com·212 pts·pentestercrab·29
ESP-IDF Setup Guide – Setting up an environment for ESP32 vulnerability researchelttam.com·2 pts·pentestercrab·0
Round Two: An Updated Universal Deserialisation Gadget for Ruby 2.x-3.xdevcraft.io·1 pts·pentestercrab·0
Ruby Deserialization Exploitation – New Gadget Chain for Ruby on Railsgithub.com·8 pts·pentestercrab·0
Exploitation via Git embedded bare repos and core.fsmonitor, affects IDEsgithub.com·1 pts·pentestercrab·0
Impossible color – Claimed evidence of ability to see colors not in color spaceen.wikipedia.org·2 pts·pentestercrab·0
Bypass of allowedLdapHost check in Log4j 2.15.0 – Log4Shell (CVE-2021-44228)twitter.com·3 pts·pentestercrab·1
The search for the “perfect” Advent Calendar (involves Python and Processing)blog.jgc.org·1 pts·pentestercrab·1
The status of Ruby memory trimming and how you can help with testing (2019)joyfulbikeshedding.com·4 pts·pentestercrab·0