The Fault in Our Drafts: Vulnerabilities in RPKI Specification and Software

The Resource Public Key Infrastructure RPKI secures the Internet's routing system by defining a complex trust and validation framework for certificates, Route Origin Authorizations ROAs, manifests, and Certificate Revocation Lists CRLs. These mechanisms are specified across dozens of RFCs. This...

The vulnerabilities of the ML connector functions and the Alerting service of the Kibana data visualization service allow a perpetrator to execute arbitrary code.

The vulnerability of the ML connector functions and the Alerting service of the Kibana data visualization service is related to uncontrolled changes in object prototype attributes. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...