--- title: Best Vulnerability posts of 2024 | daily.dev description: The most upvoted Vulnerability posts of 2024, curated by the daily.dev community. canonical: https://daily.dev/tags/vulnerability/best-of/2024 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/tags/vulnerability/best-of/2024 og:type: website og:site_name: daily.dev og:title: Best Vulnerability posts of 2024 | daily.dev og:description: The most upvoted Vulnerability posts of 2024, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of Vulnerability — 2024 1. 1 [](/posts/docker-vs-podman-a-new-era-in-secure-orchestration-5njngk5g4 "Docker vs Podman: A New Era in Secure Orchestration") Article Community Picks · 2y Docker vs Podman: A New Era in Secure Orchestration Explore the differences between Docker and Podman in terms of secure orchestration and enhanced security. 277 8 2. 2 [](/posts/what-you-should-know-about-php-security-vulnerabilities-so6h7dz7c "What you should know about PHP security vulnerabilities") Article Snyk · 2y What you should know about PHP security vulnerabilities PHP is a popular scripting language for web development, which makes it a target for hackers. Developers must understand PHP security risks like SQL Injection and code injection, and use practices like sanitizing inputs, using prepared statements, and regularly updating dependencies to mitigate these risks. Tools like Snyk can automate the process of identifying and fixing vulnerabilities in PHP applications, ensuring compliance and protecting against breaches. 70 2 3. 3 [](/posts/reverse-engineering-101-tutorial-with-the-amazing-stephen-sims--g9dvckidj "Reverse Engineering 101 tutorial with the amazing Stephen Sims!") Video David Bombal · 2y Reverse Engineering 101 tutorial with the amazing Stephen Sims! 36 4. 4 [](/posts/new-php-vulnerability-exposes-windows-servers-to-remote-code-execution-cyfwmaits "New PHP Vulnerability Exposes Windows Servers to Remote Code Execution") Article The Hacker News · 2y New PHP Vulnerability Exposes Windows Servers to Remote Code Execution A new critical security flaw in PHP exposes Windows servers to remote code execution. The vulnerability allows unauthenticated attackers to bypass previous protections and execute arbitrary code on remote PHP servers. A fix has been released in PHP versions 8.3.8, 8.2.20, and 8.1.29\. Users are urged to apply the patches quickly. 31 2 5. 5 [](/posts/matt-brown-digs-deep-into-an-ip-camera-s-firmware-and-finds-a-hard-coded-root-password-ukkawofnl "Matt Brown Digs Deep Into an IP Camera's Firmware — and Finds a Hard-Coded Root Password") Article Community Picks · 2y Matt Brown Digs Deep Into an IP Camera's Firmware — and Finds a Hard-Coded Root Password Matt Brown of Brown Fine Security has demonstrated a serious security flaw in the VStarcam CB73 IP camera by discovering a hard-coded root password. Using a detailed process involving physical hardware examination, firmware dumping, and software analysis with Ghidra, Brown exposed vulnerabilities that highlight the risks of using devices with hard-coded credentials. His findings stress the importance of better security regulations for IoT devices. 30 3 6. 6 [](/posts/anatomy-of-a-cyber-attack-pan-os-firewall-zero-day-i-arctic-wolf-cajmw0hbf "Anatomy of a Cyber Attack: PAN-OS Firewall Zero-Day I Arctic Wolf") Article Arctic Wolf · 2y Anatomy of a Cyber Attack: PAN-OS Firewall Zero-Day I Arctic Wolf In April 2024, Palo Alto Networks disclosed a critical zero-day vulnerability, CVE-2024-3400, affecting their PAN-OS firewalls with a severity score of 10.0\. The vulnerability allows remote attackers to execute arbitrary code with root privileges. Upon its disclosure, approximately 22,542 internet-exposed firewall devices were vulnerable. Security teams quickly worked to mitigate the threat, stopping attacks in their tracks with proactive measures. Arctic Wolf prevented exploitation through active customer communication and monitoring, successfully thwarting multiple attacks and preventing ransomware infections. 22 7. 7 [](/posts/all-php-applications-are-vulnerable-fnr8la1v3 "All PHP Applications are Vulnerable") Video Mental Outlaw · 2y All PHP Applications are Vulnerable A 24-year-old bug in the GBC library can be exploited to take over virtually any PHP application. 21 3 8. 8 [](/posts/root-your-docker-host-in-10-seconds-for-fun-and-profit-o7nng0qbw "Root your Docker host in 10 seconds for fun and profit") Article Hacker News · 2y Root your Docker host in 10 seconds for fun and profit A post discussing the vulnerability of adding users to the 'docker' group, which grants root access to the Docker daemon. It demonstrates how easy it is to exploit this vulnerability and provides a workaround solution using UID remapping. 20 9. 9 [](/posts/can-malware-escape-virtual-machines--6bhtrkhd6 "Can Malware escape Virtual Machines?") Video Eric Parker · 2y Can Malware escape Virtual Machines? Malware can theoretically escape from virtual machines, but it's rare due to the specific conditions needed, including outdated hypervisors and complex exploits. The main risks come from human error, such as improper configurations and using shared folders. Keeping systems updated with security patches significantly reduces these risks. Nested virtualization can offer additional security, albeit with performance costs. 16 2 10. 10 [](/posts/i-found-thousands-of-errors-in-this-program-you-ve-probably-used-it--4sa61lqoe "i found thousands of errors in this program. (you've probably used it)") Video Low Level Learning · 2y i found thousands of errors in this program. (you've probably used it) A deep dive into a vulnerability found in the szip program, highlighting the steps taken to identify and triage over a thousand crashes. The author explains the process of fuzzing, the details of the integer underflow vulnerability, and the resulting potential for remote code execution. The bug was fixed in 7zip version 2407, and users are advised to update to this or a newer version to mitigate the security risk. 14 11. 11 [](/posts/critical-ipv6-bug-found-in-windows-f05p5sk4w "Critical IPv6 Bug Found in Windows") Video Mental Outlaw · 2y Critical IPv6 Bug Found in Windows 12 1 12. 12 [](/posts/why-you-should-upgrade-postgresql-today-o6knhm5er "Why you should upgrade PostgreSQL today") Article Community Picks · 2y Why you should upgrade PostgreSQL today A critical security vulnerability, CVE-2024-7348, impacts PostgreSQL versions 12 through 16, allowing attackers to execute arbitrary SQL code during \`pg\_dump\` operations. The PostgreSQL team has released minor updates that fix this TOCTOU race condition vulnerability by introducing a new server parameter, \`restrict\_nonsystem\_relation\_kind\`. Users are urged to upgrade immediately and review their setup, including user permissions, to avoid potential data compromise. 12 13. 13 [](/posts/critical-security-flaw-in-php-cve-2024-4577-blt2k9uyw "Critical Security Flaw in PHP: CVE-2024-4577") Article PHP Dev · 2y Critical Security Flaw in PHP: CVE-2024-4577 New critical security flaw in PHP allows remote code execution due to a CGI argument injection vulnerability. Impacting all versions of PHP on Windows. Secure alternatives to PHP CGI recommended. 12 14. 14 [](/posts/ethical-hacking-101-how-to-set-up-metasploitable-on-your-computer-plreej2ap "Ethical Hacking 101 – How to Set Up Metasploitable on Your Computer") Article freeCodeCamp · 3y Ethical Hacking 101 – How to Set Up Metasploitable on Your Computer Learn about virtual machines, Metasploitable, and how to set it up for ethical hacking purposes. 12 1 15. 15 [](/posts/the-new-9-9-severity-linux-vunlerability-awfvvhtsx "the new "9.9" Severity Linux Vunlerability") Video Eric Parker · 2y the new "9.9" Severity Linux Vunlerability A CVSS 9.9 severity vulnerability affecting all systems using the CUPS (Common Unix Printing System) allows remote unauthenticated attackers to execute arbitrary commands when a print job is started. This is less severe than vulnerabilities like EternalBlue but still poses a significant risk, especially if systems are exposed to the internet. Properly configured firewalls can mitigate some threats, and updating CUPS is recommended to prevent exploitation. 11 16. 16 [](/posts/php-annotated-april-2024-lmt30aekg "PHP Annotated – April 2024") Article JetBrains · 2y PHP Annotated – April 2024 Highlights include the exaggerated hype around CVE-2024-2961, the collaboration between PHP Foundation and other software foundations for the Cyber Resilience Act, and the addition of property hooks in PHP. 11 17. 17 [](/posts/cve-2024-38827-spring-security-authorization-bypass-for-case-sensitive-comparisons-tzjmjlhsm "CVE-2024-38827: Spring Security Authorization Bypass for Case Sensitive Comparisons") Article Spring · 2y CVE-2024-38827: Spring Security Authorization Bypass for Case Sensitive Comparisons Broadcom and third-party partners utilize cookies and similar technology to analyze site usage, enhance user experience, and assist with advertising. Visiting their site implies consent to their cookie policy. 10 18. 18 [](/posts/zendesk-mega-backdoor-rkcjzdchn "Zendesk Mega Backdoor") Video ThePrimeTime · 2y Zendesk Mega Backdoor A 15-year-old programmer discovered a vulnerability in Zendesk that allowed remote attackers to read ticket histories via email spoofing. Despite the severity of the issue, Zendesk initially dismissed the report, leading the teenager to disclose the bug to affected companies directly. This eventually pressured Zendesk to fix the issue, but they did not reward the programmer, citing a breach of disclosure guidelines. 10 19. 19 [](/posts/real-world-gitlab-account-take-over-k1kel26i0 "Real World GitLab Account Take Over") Article InfoSec Write-ups · 2y Real World GitLab Account Take Over An attacker managed to exploit a vulnerability in GitLab, taking over accounts of a company that provides VoIP solutions, including government organizations, banks, and telecom providers. The post describes the reconnaissance process, the GitLab enumeration, the specific vulnerability (CVE-2023-7028), and the exploitation process. The attacker harvested email addresses of the company's employees to carry out the account takeover. Once inside, they gained access to all company projects and extracted API keys and credentials. 9 [See all Vulnerability archives](/tags/vulnerability/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/tags/vulnerability/best-of/2024#page","url":"https://daily.dev/tags/vulnerability/best-of/2024","name":"Best Vulnerability Posts of 2024","description":"The most upvoted Vulnerability posts of 2024, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/tags/vulnerability/best-of/2024#items","numberOfItems":19,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/docker-vs-podman-a-new-era-in-secure-orchestration-5njngk5g4","name":"Docker vs Podman: A New Era in Secure Orchestration"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/what-you-should-know-about-php-security-vulnerabilities-so6h7dz7c","name":"What you should know about PHP security vulnerabilities"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/reverse-engineering-101-tutorial-with-the-amazing-stephen-sims--g9dvckidj","name":"Reverse Engineering 101 tutorial with the amazing Stephen Sims!"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/new-php-vulnerability-exposes-windows-servers-to-remote-code-execution-cyfwmaits","name":"New PHP Vulnerability Exposes Windows Servers to Remote Code Execution"},{"@type":"ListItem","position":5,"url":"https://daily.dev/posts/matt-brown-digs-deep-into-an-ip-camera-s-firmware-and-finds-a-hard-coded-root-password-ukkawofnl","name":"Matt Brown Digs Deep Into an IP Camera's Firmware — and Finds a Hard-Coded Root Password"},{"@type":"ListItem","position":6,"url":"https://daily.dev/posts/anatomy-of-a-cyber-attack-pan-os-firewall-zero-day-i-arctic-wolf-cajmw0hbf","name":"Anatomy of a Cyber Attack: PAN-OS Firewall Zero-Day I Arctic Wolf"},{"@type":"ListItem","position":7,"url":"https://daily.dev/posts/all-php-applications-are-vulnerable-fnr8la1v3","name":"All PHP Applications are Vulnerable"},{"@type":"ListItem","position":8,"url":"https://daily.dev/posts/root-your-docker-host-in-10-seconds-for-fun-and-profit-o7nng0qbw","name":"Root your Docker host in 10 seconds for fun and profit"},{"@type":"ListItem","position":9,"url":"https://daily.dev/posts/can-malware-escape-virtual-machines--6bhtrkhd6","name":"Can Malware escape Virtual Machines?"},{"@type":"ListItem","position":10,"url":"https://daily.dev/posts/i-found-thousands-of-errors-in-this-program-you-ve-probably-used-it--4sa61lqoe","name":"i found thousands of errors in this program. (you've probably used it)"},{"@type":"ListItem","position":11,"url":"https://daily.dev/posts/critical-ipv6-bug-found-in-windows-f05p5sk4w","name":"Critical IPv6 Bug Found in Windows"},{"@type":"ListItem","position":12,"url":"https://daily.dev/posts/why-you-should-upgrade-postgresql-today-o6knhm5er","name":"Why you should upgrade PostgreSQL today"},{"@type":"ListItem","position":13,"url":"https://daily.dev/posts/critical-security-flaw-in-php-cve-2024-4577-blt2k9uyw","name":"Critical Security Flaw in PHP: CVE-2024-4577"},{"@type":"ListItem","position":14,"url":"https://daily.dev/posts/ethical-hacking-101-how-to-set-up-metasploitable-on-your-computer-plreej2ap","name":"Ethical Hacking 101 – How to Set Up Metasploitable on Your Computer"},{"@type":"ListItem","position":15,"url":"https://daily.dev/posts/the-new-9-9-severity-linux-vunlerability-awfvvhtsx","name":"the new \"9.9\" Severity Linux Vunlerability"},{"@type":"ListItem","position":16,"url":"https://daily.dev/posts/php-annotated-april-2024-lmt30aekg","name":"PHP Annotated – April 2024"},{"@type":"ListItem","position":17,"url":"https://daily.dev/posts/cve-2024-38827-spring-security-authorization-bypass-for-case-sensitive-comparisons-tzjmjlhsm","name":"CVE-2024-38827: Spring Security Authorization Bypass for Case Sensitive Comparisons"},{"@type":"ListItem","position":18,"url":"https://daily.dev/posts/zendesk-mega-backdoor-rkcjzdchn","name":"Zendesk Mega Backdoor"},{"@type":"ListItem","position":19,"url":"https://daily.dev/posts/real-world-gitlab-account-take-over-k1kel26i0","name":"Real World GitLab Account Take Over"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Tags","item":"https://daily.dev/tags"},{"@type":"ListItem","position":3,"name":"Vulnerability","item":"https://daily.dev/tags/vulnerability"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/tags/vulnerability/best-of"},{"@type":"ListItem","position":5,"name":"2024"}]}]} ```