web-app-pentest-travelbird

Web Application Penetration Test and Remediation: TravelBird A...

Malicious Package

Overview mad-10.1.1.2.2.8 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

SA45100 - CVE-2022-0778-OpenSSL-Vulnerability may lead to DoS attack

Last Modified Date 2023-Dec-15 17:27:41...

curl: curl/libcurl vulnerable to TLS truncation attacks

Summary: curl/libcurl doesn't enforce "Closure Alerts" 12 for protocols that have no knowledge of the size of the transmitted data. This enables truncation attacks where the attacker in a meddler-in-the-middle position closes the connection prematurely. This results in partial file being download...