Light The Night

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   Layer 8 Conference

   The Layer 8 conference is solely dedicated to social engineering and open source intelligence (OSINT) discussions.

   Watch : Layer 8 Conference
2. /02

   Double spending bug in Polygon’s Plasma bridge

   They thought they were out of the security game for a while now and that their interests have moved on to other fields. Polygon Double-Spend Bug Fix Postmortem — $2m Bounty.

   Read : Double spending bug in Polygon’s Plasma bridge
3. /03

   How to get useful answers to your questions

   5 years ago they wrote a post called how to ask good questions. But it’s missing a few of the tactics they use to get useful answers like “interrupt people when they’re going off on an irrelevant tangent”.

   Read : How to get useful answers to your questions
4. /04

   CVE-2021-2471 MySQL JDBC XXE

   Prior to MySQL Connector/J 8.0.27, the getSource() method exists in MysqlSQLXML, but the getSource() method has no security check when external general entities included in XML sources, consequently,here exists a XXE vulnerability.

   Read : CVE-2021-2471 MySQL JDBC XXE
5. /05

   Disclosed GitLab report from vakzz

   Stored XSS in markdown via the DesignReferenceFilter.

   Read : Disclosed GitLab report from vakzz