TLDR Index
TLDR InfoSec

TLDR INFORMATION SECURITY 2023-10-13

5 sections15 entriesinline urlcomplete parse

Parse notes

  • Subscription/account footer truncated before parsefooter_truncated

01ATTACKS & VULNERABILITIES

HIGH SEVERITY CURL CVE

The nearly ubiquitous curl project has revealed details about a security issue that the maintainers warned of last week. The vulnerability is a heap-based buffer overflow in the SOCKS5 handshake process that occurs when a long hostname is provided and the handshake is too slow. An updated version of curl, as well as patches for older versions, has been released.

curl.se4 min read

DATA

techcrunch.com3 min read

02STRATEGIES & TACTICS

03LAUNCHES & TOOLS

NETEXEC

NetExec (a.k.a nxc) is a network service exploitation tool that helps automate assessing the security of large networks.

github.comGitHub repository

NORD STREAM

Nord Stream is a tool for deploying malicious pipelines in a CI/CD environment to extract secrets. By default, Nord Stream will also attempt to remove any logs that it made with its deployment. Currently, GitHub, GitLab, and Azure DevOps are supported.

github.comGitHub repository

04MISCELLANEOUS