PT-2021-11052

Name of the Vulnerable Software and Affected Versions: Airwave Glass versions prior to 1.3.3 Description: The issue is caused by insufficient input validation, allowing for arbitrary command execution in a containerized environment. This can lead to complete compromise of the underlying host...

Billion Laugh Attack in https://sites.google.com

tl;dr https://sites.google.com suffered from a Billion Laugh Attack vulnerability that made the containerized environment to crash with a single invocation. Introduction Few months ago I applied for a talk at a security conference titled So you wanna be a Bug Bounty Hunter but it was rejected :...