SwitHak

Security Advisories / Bulletins / vendors Responses linked to Log4Shell (CVE-2021-44228)

Errors, typos, something to say ?

• If you want to add a link, comment or send it to me
• Feel free to report any mistake directly below in the comment or in DM on Twitter @SwitHak

Other great resources

• Royce Williams list sorted by vendors responses Royce List
• Very detailed list NCSC-NL
• The list maintained by U.S. Cybersecurity and Infrastructure Security Agency: CISA List

Gerrit0

// @ts-check

const fs = require("fs");
const http = require("http");
const esbuild = require("esbuild");
const { join } = require("path");

// ===== Configuration =====

const port = parseInt(process.argv[process.argv.indexOf("--port") + 1]) || 8080;

carltesta

-- licensed with CC BY-NC-SA 4.0 https://creativecommons.org/licenses/by-nc-sa/4.0/
-- Carl Testa

--2021-11-16
stack [
slow 4 $ note "0 -2 ~ ~" # s "flbass" # speed 0.8 # gain 0.8,
off 0.25 (+ speed "<0.5 1 2 4>") $ s "glitch*16?" # n (irand 9) # pan perlin # speed (range "<0.6 0.8>" "<1 1.2>" square),
slow 1 $ s "[drum*4, [~ hh]*4]",
slow 4 $ degradeBy 0.5 $ ply 4 $ scramble 6 $ note (scale "minor" ("7 6 5 2 1 0" + "<0 -2 -2 -2>")) # speed 0.8 # s "gtr"
]

aparrish

quend

Existing AE work focused on Restricted Models: 
Sean Heelan’s “Automatic Generation of Control Flow Hijacking Exploits for Software Vulnerabilities” 
David Brumley (@ Carnegie Mellon) et al. (AEG, MAYHEM, etc) 
Most whitepapers on Cyber Grand Challenge! (CGC)

[Good Course Material]
https://www.cs.umd.edu/class/spring2013/cmsc631/lectures/symbolic-exec.pdf
https://www.utdallas.edu/~zxl111930/spring2012/public/lec4.pdf
http://web.mit.edu/16.399/www/lecture_01-intro/Cousot_MIT_2005_Course_01_4-1.pdf
http://homepage.cs.uiowa.edu/~tinelli/classes/seminar/Cousot.pdf

anvaka

npm rank

This gist is updated daily via cron job and lists stats for npm packages:

1. Top 1,000 most depended-upon packages
2. Top 1,000 packages with largest number of dependencies
3. Top 1,000 packages with highest PageRank score

markd2

#import <Foundation/Foundation.h>
#import <objc/runtime.h>

#import "typestring.h"

// clang -g -fobjc-arc -Wall -framework Foundation -o runtime typestring.m runtime.m

// Runtime reference, at least until Apple breaks the link
// http://developer.apple.com/library/ios/#documentation/Cocoa/Reference/ObjCRuntimeRef/Reference/reference.html

0x75

/*
Copyright (c) 2003, Brian Alliet. All rights reserved. 

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the above copyright notice,
this list of conditions and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright notice,