Joel Land

TFW a rep for a vendor you are trying to get a login for to exploit their software asks for a meeting to discuss your company's requirements

So apparently starting with Linux 5.18, ASLR is weakened for 64-bit executables, and absolutely BROKEN (i.e. not present) for 32-bit executables when the library is 2MB or larger.
Oops? 🤦‍♂️
zolutal.github.io/aslrnt/
(Insert desire for BlueSky to support animated GIFs here)

CVE-2023-49103: Critical Information Disclosure in ownCloud Graph API | Rapid7 Blog On November 21, 2023, ownCloud disclosed CVE-2023-49103, an unauthenticated information disclosure vulnerability affecting ownCloud.

Full info on the ownCloud vulnerability / exploit are live now, from Rapid7

Alright, infosec twitter 2.0… Go!