5 matches found
SecBugs
보안 버그 CVE ID, 개념 증명, 익스플로잇, 0day 버그 등에 대한 전체 공개 정보입니다...
CVE-Disclosures
セキュリティ研究 & CVE 情報開示🔥 VETTRIVEL U がフリー・オープンソースソフトウェア(FOSS)で発見したセキュリティ脆弱性を記録したリポジトリ 企業には2種類しかない。侵害されたことを知っている企業と、侵害されたことをまだ知らない企業だ。 – エド・シュライン(Kleiner Perkins ゼネラルパートナー)...
USN-8371-1: Linux kernel vulnerabilities
It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker...
The Mythos Inflection Point: Dealing With the Upcoming Vulnerability Disclosure Avalanche and Compressed Exploitation Window
Having spent years at Qualys working on vulnerability risk and remediation management, I have watched the disclosure and remediation cycles from every angle. I have seen vulnerability researchers find a critical flaw in OpenSSH and the industry scramble to respond. I have seen organizations...