Security
The Classics Return: Vulnerable E-Mail Scripts, (Wed, Nov 4th)
SANS ISC0 views
One of the early web application vulnerabilities I remember was CVE-2000-0411 [CVE]. This was a simple vulnerability in a CGI-bin script used to send e-mail. The vulnerability was pretty straightforward: Adding additional parameters to the URL leaked environment variables. Other vulnerabilities allowed setting the "To" address and were heavily abused by spammers. And if parameters were passed directly to the sendmail binary, similar vulnerabilities could allow arbitrary code execution.
Source：https://isc.sans.edu/diary/rss/33488PreviousColorOS 17 Arrives on OPPO F35 Series With AI Call Guard and Privacy FeaturesNextAI on the Ballot
Related posts
Binance says hackers who stole billions in crypto spent months planning heist
0Ars Technica
How Competitive Learning Can Make Cybersecurity Practice More Engaging.
0dev.to
Rsync 3.5.2 Fixes Security Vulnerability, Improves Interrupted Transfers
0Linuxiac
Security Notice: Important Action Recommended for all Puppet Users
0dev.to Security
Your Cryptography Conspiracy Theory Is Wrong
0Lobsters
Making HTTP header injection critical with one prompt
0PortSwigger Research