|
Article: Securing Internet-Critical Software: How We Could Have Backdoored Bash - published 5 days ago. Content: (May 2026) TL;DR: an email address like atouch${IFS}/tmp/savane-rce-proof@attacker.example gave any registered user code execution on its backend. From there, we made our account a superuser, impersonated Bash’s maintainer, and confirmed we could add an SSH key with push access to the upstream Bash repository. An unpatched kernel gave us root access and acc... https://www.reddit.com/r/netsec/comments/1xlsxqk/securing_internetcritical_software_how_we_could/ Published: 2026 11 02 09:43:15 Received: 2026 11 05 17:18:08 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
Article: Remote code execution on Linux systems with multipath TCP - published 5 days ago. Content: submitted by /u/lucidsparrow982 [link] [comments] https://www.reddit.com/r/netsec/comments/1xlsqor/remote_code_execution_on_linux_systems_with/ Published: 2026 11 02 09:30:42 Received: 2026 11 05 17:18:08 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
|
Article: WordPress pingback and Brotli RCE - published 5 days ago. Content: submitted by /u/adrian_rt [link] [comments] https://www.reddit.com/r/netsec/comments/1xlsgc8/wordpress_pingback_and_brotli_rce/ Published: 2026 11 02 09:11:50 Received: 2026 11 05 17:18:08 Feed: /r/netsec - Information Security News and Discussion Source: /r/netsec - Information Security News and Discussion Category: Cyber Security Topic: Cyber Security |
|
Click to Open Code Editor