More apps bundle cert stores tied to the eMudhra certificate issue
Hanno Böck points to several NixOS nixpkgs reports beyond nmap/ncat and texlive-infra.
Stories per day · 30 days
4 stories, newest first · one card per story
Stories tagged #nmap
Bundled root stores may include compromised eMudhra certificate
Hanno Böck found the affected Comodo AAA Services certificate in Gentoo's texlive curl CA bundle.
Automating Attack Graph Construction for Agentic Pentesting. Towards Neuro-Symbolic Vulnerability Hunting
Semi-automated pipeline converts Trivy, Semgrep, Nmap output into MulVAL attack graphs for agentic pentesting, 53.7% mean vulnerability coverage in CyBench.
[dos] Nmap 7.99 - Extension Header Integer Underflow
A proof-of-concept denial-of-service exploit for Nmap 7.99 leverages an integer underflow in extension header parsing to crash the scanner.