Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://infosec.exchange/users/screaminggoat/statuses/113205416736950747">screaminggoat (screaminggoat@infosec.exchange)'s status on Friday, 27-Sep-2024 09:49:16 JST</a><a href="https://infosec.exchange/@screaminggoat" title="screaminggoat@infosec.exchange"><img src="https://gnusocial.jp/avatar/278335-48-20250102170004.webp" width="48" height="48" alt="screaminggoat" style="position: absolute; left: 0; top: 0;">screaminggoat</a><div><ul><li><li><a href="https://gnusocial.jp/user/161036" title="cr0w@infosec.exchange">cR0w :cascadia:</a></li><li><a href="https://gnusocial.jp/user/240373" title="morb@mastodon.social">morb</a></li><li><a href="https://gnusocial.jp/user/284171" title="evilsocket@infosec.exchange">Simone Margaritelli</a></li></ul></div></section><article><p>FYSA: Simone Margaritelli <a href="https://infosec.exchange/@evilsocket">@evilsocket</a> dropping what appears to be vulnerability details of a Linux RCE in CUPS at 4pm EST (2000 UTC) today or 1 hour from now.</p><p>cc: <a href="https://mastodon.social/@Viss" rel="nofollow noreferrer">@Viss</a> <a href="https://mastodon.social/@morb" rel="nofollow noreferrer">@morb</a> <a href="https://infosec.exchange/@cR0w">@cR0w</a> </p><p><a href="https://infosec.exchange/tags/cups" rel="tag">#cups</a> <a href="https://infosec.exchange/tags/vulnerability" rel="tag">#vulnerability</a> <a href="https://infosec.exchange/tags/RCE" rel="tag">#RCE</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/3734407#notice-7311870">In conversation</a><time datetime="2024-09-27T09:49:16+09:00" title="Friday, 27-Sep-2024 09:49:16 JST">about 8 months ago</time> <span>from <span><a href="https://infosec.exchange/@screaminggoat/113205416736950747" rel="external" title="Sent from infosec.exchange via ActivityPub">infosec.exchange</a></span></span><a href="https://infosec.exchange/@screaminggoat/113205416736950747">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: www.now.cc</div><h5><a href="https://www.now.cc/">NOW共享域名-免費域名服務|Free Domain Name Service-NOW.CC</a></h5><div></div></header><div>NOW共享域名-免費域名支持A、CNAME、NS記錄及CDN加速的簡單、超快、穩定、安全、免費無廣告的二級域名服務，You.Now.cc</div><footer></footer></article></li><li><label><a rel="external" href="https://gnusocial.jp/attachment/3226724">screenshot of vx-underground post:
There's some noise in the infosec vulnerability and blue team space about an alleged 9.9 CVE score impacting all GNU/Linux systems.
Due to lack of details, some users have expressed criticism on the severity of the exploit — with the infamous Heartbleed being a 7.5 CVE. Some expressed concern that the exploit is overhyped, or acting as marketing material for the researcher.
Others have noted that they believe the exploit is real and possess a genuine score of 9.9 but question the impact of effecting [sic] all GNU/Linux systems.
From what we've seen, nobody knows anything and everyone is just yappin. We'll see what happens when  the details are released.When we said users, we mean nerds on social media. Currently posting from the restroom at Apple Bees. [sic]</a></label><br><a href="https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/205/392/522/922/849/original/29d3d34d5ac1ec95.png" rel="external">https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/205/392/522/922/849/original/29d3d34d5ac1ec95.png</a></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
screaminggoat (screaminggoat@infosec.exchange)'s status on Friday, 27-Sep-2024 09:49:16 JSTscreaminggoat
FYSA: Simone Margaritelli @evilsocket dropping what appears to be vulnerability details of a Linux RCE in CUPS at 4pm EST (2000 UTC) today or 1 hour from now.
cc: @Viss @morb @cR0w
#cups #vulnerability #RCE
In conversationabout 8 months ago from infosec.exchangepermalink
Attachments
1. Domain not in remote thumbnail source whitelist: www.now.cc
  NOW共享域名-免費域名服務|Free Domain Name Service-NOW.CC
  NOW共享域名-免費域名支持A、CNAME、NS記錄及CDN加速的簡單、超快、穩定、安全、免費無廣告的二級域名服務，You.Now.cc
2. screenshot of vx-underground post: There's some noise in the infosec vulnerability and blue team space about an alleged 9.9 CVE score impacting all GNU/Linux systems. Due to lack of details, some users have expressed criticism on the severity of the exploit — with the infamous Heartbleed being a 7.5 CVE. Some expressed concern that the exploit is overhyped, or acting as marketing material for the researcher. Others have noted that they believe the exploit is real and possess a genuine score of 9.9 but question the impact of effecting [sic] all GNU/Linux systems. From what we've seen, nobody knows anything and everyone is just yappin. We'll see what happens when the details are released. When we said users, we mean nerds on social media. Currently posting from the restroom at Apple Bees. [sic]
  https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/205/392/522/922/849/original/29d3d34d5ac1ec95.png

Public

Embed Notice

HTML Code

Corresponding Notice