axsharma

16 ms·

151.
Node.js package downloaded 7M+ times lets hackers cause RCE and DoS(bleepingcomputer.com)
1 points by axsharma 6y ago|0 comments
152.
United States of Porn: Gov sites abused to get SEO by porn sites(bleepingcomputer.com)
2 points by axsharma 6y ago|1 comments
153.
by axsharma 6y ago
Abusing open redirects on many government sites including Weather.gov, spammers get easy organic SEO for porn sites.
154.
by axsharma 6y ago
An easier variation of an older technique using "mock folders" i.e. C:\Windows \System32 (notice the trailing space after Windows\) and DLL hijacking to bypass UAC and do other naughty things.
155.
Bypass Windows 10 UAC via Mock folders(bleepingcomputer.com)
3 points by axsharma 6y ago|2 comments
156.
Domain hoarder loses $88,000 to a cruise company, and hoards their domain too(axsharma.com)
1 points by axsharma 6y ago|1 comments
157.
by axsharma 6y ago
Affluent domain squatter "Domain King" apparently as $88k stuck with Crystal Cruises, so he hoards "CrystalCruisesSuck.com"
158.
20k GitHub projects use vulnerable Node.js `standard-version` library(securityreport.com)
1 points by axsharma 6y ago|1 comments
159.
by axsharma 6y ago
Other similar vulnerabilities in popular components revealed too.
160.
D-Link blunder: Firmware encryption key exposed in unencrypted image(bleepingcomputer.com)
8 points by axsharma 6y ago|1 comments
161.
by axsharma 6y ago
D-Link encrypted firmware can be easily cracked by the leaking key
162.
Windows 10 Store wsreset.exe tool lets attackers bypass antivirus(bleepingcomputer.com)
3 points by axsharma 6y ago|1 comments
163.
by axsharma 6y ago
Previously abused for privilege escalation/UAC bypass. A use-case (deleting arbitrary files needing privileged access) was brought to light by a researcher. The behaviour can be used to disable antivirus products.