Submissions from seclists.org

		Remote Authentication By-Pass in Telnetd (2026) (seclists.org)
		7 points by faebi 89 days ago \| past \| 1 comment
		GNU InetUtils Security Advisory: remote authentication by-pass in telnetd (seclists.org)
		3 points by DyslexicAtheist 89 days ago \| past
		The Malloc Maleficarum (2005) (seclists.org)
		2 points by todsacerdoti 3 months ago \| past
		The Curious Case of Stack Pivot Detection (seclists.org)
		1 point by todsacerdoti 3 months ago \| past
		RunC vulnerabilities CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881 (seclists.org)
		3 points by moebrowne 4 months ago \| past
		Are these real CVEs? VulDB entries for dnsmasq rely on replacing config files (seclists.org)
		55 points by JawsofDeath 5 months ago \| past \| 52 comments
		eSIM security research – GSMA eUICC compromise and certificate theft (seclists.org)
		2 points by pabs3 9 months ago \| past
		iOS Activation Flaw Enables Pre-User Device Compromise and Identity Exposure (seclists.org)
		15 points by pabs3 9 months ago \| past
		0-Click iMessage Chain → Secure Enclave Key Theft, Wormable RCE, Crypto Theft (seclists.org)
		1 point by pabs3 10 months ago \| past \| 1 comment
		CVE-2024-47081: Netrc credential leak in PSF requests library (seclists.org)
		62 points by jupenur 10 months ago \| past \| 23 comments
		Ruby on Rails Cross-Site Request Forgery (seclists.org)
		5 points by thricegr8 11 months ago \| past
		OSS-SEC: Three bypasses of Ubuntu's unprivileged user namespace restrictions (seclists.org)
		73 points by birdculture on March 29, 2025 \| past \| 23 comments
		Three bypasses of Ubuntu's unprivileged user namespace restrictions (seclists.org)
		2 points by eyberg on March 27, 2025 \| past
		Python's official documentation contains textbook example of insecure code (XSS) (seclists.org)
		43 points by campuscodi on Feb 23, 2025 \| past \| 11 comments
		AMD Microcode Signature Verification Vulnerability (seclists.org)
		4 points by weinzierl on Jan 23, 2025 \| past
		Shell wildcard expansion (un)safety (seclists.org)
		3 points by yarapavan on Nov 14, 2024 \| past \| 1 comment
		OSS-SEC: shell wildcard expansion (un)safety (seclists.org)
		3 points by todsacerdoti on Nov 7, 2024 \| past
		Security Mailing List Archive (seclists.org)
		2 points by udev4096 on Aug 31, 2024 \| past
		Microsoft leak of PlayReady developer / Warbird libs (seclists.org)
		2 points by croes on June 26, 2024 \| past
		Arbitrary shell command evaluation in Org Mode (GNU Emacs) (seclists.org)
		119 points by todsacerdoti on June 23, 2024 \| past \| 26 comments
		Microsoft leak of PlayReady developer / Warbird libs (seclists.org)
		3 points by vitplister on June 21, 2024 \| past
		BugTraq Shutdown (2021) (seclists.org)
		1 point by susam on May 27, 2024 \| past
		Format String Attacks (2000) (seclists.org)
		24 points by aragonite on May 19, 2024 \| past \| 3 comments
		Microsoft PlayReady – Complete Client Identity Compromise (seclists.org)
		182 points by tithe on May 9, 2024 \| past \| 168 comments
		NMAP 7.95 Release. +6500 New Service Fingerprints (seclists.org)
		4 points by zeroheight on May 9, 2024 \| past
		BugTraq Shutdown (2021) (seclists.org)
		1 point by susam on April 19, 2024 \| past
		Backdoor in upstream xz/liblzma leading to SSH server compromise (seclists.org)
		10 points by JamesCoyne on March 29, 2024 \| past \| 2 comments
		GNU Emacs 29.3 released to fix security issues (seclists.org)
		5 points by todsacerdoti on March 25, 2024 \| past \| 1 comment
		Android passkeys unexpectedly deleted or useless after sync (seclists.org)
		1 point by JDW1023 on March 1, 2024 \| past
		Heap-based buffer overflow in the glibc's syslog() (seclists.org)
		1 point by Tomte on Jan 31, 2024 \| past
		More

HN For You