curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution
A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the client’s memory, and the researcher who reported it turned that into code execution on the uploading machine.
The curl project fixed it on October 14 in curl 8.23.0. Taking over a client needs exact knowledge of its build and memory layout, and curl expects a real attack to end in a crash
Source: The Hacker News
WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers WordPress has fixed a critical flaw in its core software that lets an attacker with no
OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models’ Reasoning A newly disclosed flaw in the way OpenAI, Anthropic, and Google carried hidden AI reasoning between API
Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 136.107.24.253 — 988 requests (recent log) 136.107.187.28 — 764 requests (recent log) 89.167.35.212 — 501 requests (recent