A TantoSec proof-of-concept turns an AES-CBC "padding oracle" in Telerik UI for ASP.NET AJAX into unauthenticated remote code execution — but only against applications in a specific non-default configuration, and Progress patched the chain in July. There are no confirmed reports of exploitation in the wild. Security firm TantoSec has published a working exploit chain targeting vulnerabilities

#infosec #threatintel #exploit #telerik #unauthenticated #bug #chained

Article URL: https://blog.thezilber.com/3-youtube-had-a-bug-chatgpt-helped-me-to-investigate Comments URL: https://news.ycombinator.com/item?id=49588483 Points: 5 # Comments: 2

#hackernews #tech #startup #bug #chatgpt #investigate #used #youtube