[bounty] A PHP and Joomla Bug and some DOM Clobbering

Day[0]

Content provided by dayzerosec. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by dayzerosec or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

5M ago 48:30

MP3•Episode home

This week's episode features a cache deception issue, Joomla inherits a PHP bug, and a DOM clobbering exploit. Also covered is a race condition in Chrome's extension API published by project zero.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/245.html

[00:00:00] Introduction

[00:00:21] Cache Deception Without Path Confusion

[00:07:15] Hello Lucee! Let us hack Apple again?

[00:14:41] Joomla: PHP Bug Introduces Multiple XSS Vulnerabilities

[00:26:37] Go Go XSS Gadgets: Chaining a DOM Clobbering Exploit in the Wild

[00:38:23] chrome.pageCapture.saveAsMHTML() extension API can be used on blocked origins due to racy access check

[00:42:28] 🎮 Diving Back into Games-related Bugs!

[00:44:43] Exploiting Empire C2 Framework

[00:46:19] iMessage with PQ3: The new state of the art in quantum-secure messaging at scale

The DAY[0] Podcast episodes are streamed live on Twitch twice a week:

-- Mondays at 3:00pm Eastern (Boston) we focus on web and more bug bounty style vulnerabilities

-- Tuesdays at 7:00pm Eastern (Boston) we focus on lower-level vulnerabilities and exploits.

We are also available on the usual podcast platforms:

-- Apple Podcasts: https://podcasts.apple.com/us/podcast/id1484046063

-- Spotify: https://open.spotify.com/show/4NKCxk8aPEuEFuHsEQ9Tdt

-- Google Podcasts: https://www.google.com/podcasts?feed=aHR0cHM6Ly9hbmNob3IuZm0vcy9hMTIxYTI0L3BvZGNhc3QvcnNz

-- Other audio platforms can be found at https://anchor.fm/dayzerosec

You can also join our discord: https://discord.gg/daTxTK9

254 episodes

#Tech #dayzerosec