News for hackers. Stuff that matters.
Re:Researcher discloses zero-day vulnerability in FireEye by ddddddddq on Monday September 07, 2015 @03:36PM (#10182709)
Here's the exploit posting that they refer to in the first paragraph: https://www.exploit-db.com/exploits/38090/
[ Parent | on HN ]
Re:Researcher discloses zero-day vulnerability in FireEye by jessaustin on Monday September 07, 2015 @04:36PM (#10182939) 

    ...&name=../../../../../../../../../../../etc/passwd...
There's nothing like the old classics...
[ Parent | on HN ]
Re:Researcher discloses zero-day vulnerability in FireEye by tptacek on Monday September 07, 2015 @05:54PM (#10183230)
One reason these vulnerabilities are so common is that the admin interfaces of appliances like FireEye's aren't normally exposed on the Internet.
[ Parent | on HN ]
Re:Researcher discloses zero-day vulnerability in FireEye by wglb on Monday September 07, 2015 @07:23PM (#10183454)
Ah, but there is no perimeter!
[ Parent | on HN ]
Re:Researcher discloses zero-day vulnerability in FireEye by qCOVET on Monday September 07, 2015 @05:55PM (#10183234)
A cyber security company that does this

"the box has Apache, pushing PHP, running as root."

is not a cyber security company .. lol

[ Parent | on HN ]