A vulnerability was found in Quarkus in the quarkus-security-webauthn module. The Quarkus WebAuthn module publishes default REST endpoints for registering and logging users in while allowing developers to provide custom REST endpoints. When developers provide custom REST endpoints, the default endpoints remain accessible, potentially allowing attackers to obtain a login cookie that has no corresponding user in the Quarkus application or, depending on how the application is written, could correspond to an existing user that has no relation with the current attacker, allowing anyone to log in as an existing user by just knowing that user's user name.
#CONFERENCE

Hacking techniques and research. Focused on the ongoing discussion and documentation of vulnerabilities and exploitation techniques. Please read the rules before posting here.

OffensiveCon Berlin is a highly technical international security conference focused on offensive security only. The aim of OffensiveCon is to bring the hacker community together for high quality and deep technical talks, engaging and renowned technical trainings. The talks at OffensiveCon are focused on offensive IT security topics such as vulnerability discovery, advanced exploitation techniques and reverse engineering.

Security conference and hacking contest founded and organized by @orangecyberch since 2008.

The world's most comprehensive student-run cybersecurity event. It serves as an engaging platform for experiential learning and aims to inspire students to pursue education and careers in the field of cybersecurity.

The largest hacking and security conference with presentations, workshops, contests, villages and the premier Capture The Flag Contest.

An internationally recognized cybersecurity event series providing the most technical and relevant information security research.

We Cover All Information Security Conferences / Niches. We’re the original Cybersecurity Conferences directory. Our directory is updated and checked manually to prevent spam and ensure that we remain the community’s preferred resource information for Cybersecurity Conferences, Events, Meetings, and Seminars throughout 2024, 2025, and onwards!

Indexing Security Calls For Papers (CFP) for nternational conferences and others.

Car Hacking Village is a non-profit organization providing education and awareness around security within the automotive industry.