サクサク読めて、アプリ限定の機能も多数!
トップへ戻る
Pixel 9
positive.security
-- MARKDOWN -- - The popular PHP library [dompdf](https://github.com/dompdf/dompdf) (used for rendering PDFs from HTML) suffers from a vulnerability that allows Remote Code Execution in certain configurations - By injecting CSS into the data processed by dompdf, it can be tricked into storing a malicious font with a `.php` file extension in its font cache, which can later be executed by accessing
Send My: Arbitrary data transmission via Apple's Find My network It's possible to upload arbitrary data from non-internet-connected devices by sending Find My BLE broadcasts to nearby Apple devices that then upload the data for youWe released an ESP32 firmware that turns the micocontroller into an (upload only) modem, and a macOS application to retrieve, decode and display the uploaded data: https
Allow arbitrary URLs, expect arbitrary code execution -- MARKDOWN -- - We found and reported 1-click code execution vulnerabilities in popular software including **Telegram**, **Nextcloud**, **VLC**, **Libre-/OpenOffice**, **Bitcoin/Dogecoin Wallets**, **Wireshark** and **Mumble** - Desktop applications which pass user supplied URLs to be opened by the operating system are frequently vulnerable to
このページを最初にブックマークしてみませんか?
『positive.security』の新着エントリーを見る
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く