uraid

3 ms·

1. 1.▲
   SSH protocol flaw – Terrapin Attack CVE-2023-48795: All you need to know(jfrog.com)

   3 points by uraid 3y ago|0 comments
2. 2.▲
   Attackers are starting to target .NET developers with malicious NuGet packages(jfrog.com)

   1 points by uraid 4y ago|0 comments
3. 3.▲
   Examining OpenSSH Sandboxing and Privilege Separation – Attack Surface Analysis(jfrog.com)

   3 points by uraid 4y ago|0 comments
4. 4.▲
   by uraid 4y ago

   This is exploitable in the latest Archlinux 2023.02.01. Also, this doesn't require enabling old key exchange algorithms.
5. 5.▲
   OpenSSH Pre-Auth Double Free – Writeup and Proof-of-Concept(jfrog.com)

   161 points by uraid 4y ago|102 comments