execveat

It's like nuclei templates I guess, but built into Burp. Only available in the Early Adopter release for now.

OOXML signatures are rendered pretty much useless due to 3 flaws in specification and 2 flaws in implementation.

"The vulnerabilities have been acknowledged by Microsoft. However, Microsoft has decided that the vulnerabilities do not require immediate attention."

They've chained 4 logic bugs to achieve RCE in CS:GO, pretty impressive. Valve sucks at communication and bug bounty payouts though.

cross-posted from: https://infosec.pub/post/48321

If you're working on a research or side project, this is your platform to share your findings, roadblocks, breakthroughs, and more. Doesn't matter if it's still a work in progress or has been recently published - all stages of research are welcome.

Maybe you're not actively researching, but you're closely following an interesting development in the industry or a certain researcher's work - feel free to share that here too!

Or perhaps, you've got an idea for a project or research you wish to undertake, but need resources, collaborators, or simply some guidance - let the community know.

Here's a simple guideline to kickstart the conversation:

• What's the research about? (Give a brief overview of the project or topic)
• Current progress/Findings (If applicable)
• Challenges and roadblocks (What issues are you facing or expect to face?)
• Help needed (Are you looking for collaborators, resources, advice, etc.?)

If you're working on a research or side project, this is your platform to share your findings, roadblocks, breakthroughs, and more. Doesn't matter if it's still a work in progress or has been recently published - all stages of research are welcome.

Maybe you're not actively researching, but you're closely following an interesting development in the industry or a certain researcher's work - feel free to share that here too!

Or perhaps, you've got an idea for a project or research you wish to undertake, but need resources, collaborators, or simply some guidance - let the community know.

Here's a simple guideline to kickstart the conversation:

• What's the research about? (Give a brief overview of the project or topic)
• Current progress/Findings (If applicable)
• Challenges and roadblocks (What issues are you facing or expect to face?)
• Help needed (Are you looking for collaborators, resources, advice, etc.?)