Details a pre-auth format string vulnerability in tac_plus, a popular daemon implementing TACACS+ for network device management, and the shared secret oracle that makes it a practical RCE chain.

Three critical vulnerabilities in Jupyter Enterprise Gateway allow a notebook user to escalate privileges and fully compromise the underlying Kubernetes cluster.

elttam is a globally recognised, independent information security company, renowned for our advanced technical security assessments.

elttam is a globally recognised, independent information security company, renowned for our advanced technical security assessments.

Black Hat

elttam is a globally recognised, independent information security company, renowned for our advanced technical security assessments.

YouTube video by BSides Canberra