PodParley PodParley
PodParley
[bounty] GitHub to GitLab RCE and a new PHP Supply Chain Attack episode artwork

EPISODE · Oct 18, 2022 · 25 MIN

[bounty] GitHub to GitLab RCE and a new PHP Supply Chain Attack

from Day[0] · host dayzerosec

This week we look at a insecure deserialization (GitLab), argument injection (Packagist), and insecure string interpolation (Apache Commons Text) Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/159.html [00:00:00] Introduction [00:01:01] New reward system to accelerate learning and growth on Detectify [00:04:33] RCE via github import [00:11:27] Securing Developer Tools: A New Supply Chain Attack on PHP [00:17:32] FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive [CVE-2022-40684] [00:23:08] Apache Commons Text Interpolation leading to potential RCE [CVE-2022-42889]

Episode metadata supplied by the publisher feed · Published Oct 18, 2022

What this episode covers

This week we look at a insecure deserialization (GitLab), argument injection (Packagist), and insecure string interpolation (Apache Commons Text) Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/159.html [00:00:00] Introduction [00:01:01] New reward system to accelerate learning and growth on Detectify [00:04:33] RCE via github import [00:11:27] Securing Developer Tools: A New Supply Chain Attack on PHP [00:17:32] FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive [CVE-2022-40684] [00:23:08] Apache Commons Text Interpolation leading to potential RCE [CVE-2022-42889]

PodParley-generated summary based on available episode metadata and transcript content.

NOW PLAYING

[bounty] GitHub to GitLab RCE and a new PHP Supply Chain Attack

0:00 25:37

No transcript for this episode yet

We transcribe on demand. Request one and we'll notify you when it's ready — usually under 10 minutes.

Share this episode

Similar Episodes

The Hobbit by J. R. R. Tolkien Audiobook, Chapter 19 of 19

Sep 22, 2023 ·20m

The Hobbit by J. R. R. Tolkien Audiobook, Chapter 18 of 19

Sep 22, 2023 ·20m

The Hobbit by J. R. R. Tolkien Audiobook, Chapter 17 of 19

Sep 22, 2023 ·27m

The Hobbit by J. R. R. Tolkien Audiobook, Chapter 16 of 19

Sep 22, 2023 ·14m

The Hobbit by J. R. R. Tolkien Audiobook, Chapter 15 of 19

Sep 22, 2023 ·24m

The Hobbit by J. R. R. Tolkien Audiobook, Chapter 14 of 19

Sep 22, 2023 ·22m

Similar Podcasts

Ask A Spaceman Archives - 365 Days of Astronomy Ask A Spaceman Archives - 365 Days of Astronomy Podcasting Astronomy Every Day of the Year Wild WinsDay Wild WinsDay Pump the hump with WILD WINSday 🐪💪: Your 3-minute weekly video boost for leadership, sales, marketing, and business breakthroughs to WIN the day! Modern Day Modern Day Weekly convos between Emma Lembke and Jules Terpak FEAR NOTHING and Have Lots of Fun with Carlie Lara Wallace carlielara Welcome to The Fear Nothing and Have Lots of Fun Podcast!! We get vulnerable, we have fun, and there’s always a bit of the gospel! These episodes detail all that God is doing in my life right now, and what I’m learning through these experiences. NEW EPISODES come out every Wednesday at 6:05am for those hump day early risers!

Frequently Asked Questions

How long is this episode of Day[0]?

This episode is 25 minutes long.

When was this Day[0] episode published?

This episode was published on October 18, 2022.

What is this episode about?

This week we look at a insecure deserialization (GitLab), argument injection (Packagist), and insecure string interpolation (Apache Commons Text) Links and vulnerability summaries for this episode are available at:...

Can I download this Day[0] episode?

Yes, you can download this episode by clicking the download button on the episode player, or subscribe to the podcast in your preferred podcast app for automatic downloads.
URL copied to clipboard!