Deep Dive OSINT and Finding XSS in a Million Websites

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   Deep Dive OSINT (Hacking, Shodan and more) with Rae Baker

   Watch : Deep Dive OSINT (Hacking, Shodan and more) with Rae Baker
2. /02

   CodeQL query to detect RCE via ZipSlip resulting in a $5,500 bounty from GitHub Security Lab

   Watch : CodeQL query to detect RCE via ZipSlip resulting in a $5,500 bounty from GitHub Security Lab
3. /03

   Finding XSS in a million websites (cPanel CVE-2023-29489)

   cPanel is a web hosting control panel software that is deployed widely across the internet. To be exact, there are about ~1.4 million installations of cPanel exposed on the external internet at the time of writing this blog post.

   Read : Finding XSS in a million websites (cPanel CVE-2023-29489)
4. /04

   Git Arbitrary Configuration Injection (CVE-2023-29007)

   Git’s implementation used to rename or delete sections of a configuration file contained a logic error that resulted in improperly treating configuration values longer than a fixed length as containing new sections.

   Read : Git Arbitrary Configuration Injection (CVE-2023-29007)
5. /05

   A stored XSS on Snyk Advisor service can allow full fabrication of npm packages health score (CVE-2023-1767)

   Read : A stored XSS on Snyk Advisor service can allow full fabrication of npm packages health score (CVE-2023-1767)