Get the app
public
ios_share
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
chevron_right
ISC StormCast for Wednesday, April 26th, 2023
Apr 26, 2023
06:21
forum
Ask episode
play_arrow
Play
view_agenda
Chapters
auto_awesome
Transcript
info_circle
Episode notes
1
The Problem With the Service Location Protocol
00:00 • 4min
chevron_right
2
How to Fix a Vulnerability in Apache Super Set
03:35 • 3min
chevron_right
Calculating CVSS Scores with ChatGPT
https://isc.sans.edu/diary/Calculating%20CVSS%20Scores%20with%20ChatGPT/29774
Amplifying SLP Traffic
https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp
Insecure Default Configuration in Apache Superset
https://www.horizon3.ai/cve-2023-27524-insecure-default-configuration-in-apache-superset-leads-to-remote-code-execution/
SLP Amplification; Apache Superset RCE;
PoC Exploit for Sophos Web Appliciance
https://github.com/W01fh4cker/CVE-2023-1671-POC