Viewing profile — albinolobster

albinolobster

HN member

No profile information was provided.

story
Comment #36057557
Wed, May 24, 2023, 1:14 PM UTC
story
Comment #36057549
Wed, May 24, 2023, 1:13 PM UTC
story
Comment #35391030
Fri, Mar 31, 2023, 6:16 PM UTC
story
Joomla CVE-2023-23752 to Code Execution
Thu, Mar 23, 2023, 3:09 PM UTC
story
A Memory Resident Payload for CVE-2022-47966
Tue, Feb 14, 2023, 3:54 PM UTC
story
Moobot Uses a Fake Vulnerability
Tue, Dec 06, 2022, 2:32 PM UTC
story
Xiongmai IoT Exploitation
Tue, Nov 29, 2022, 10:12 PM UTC
story
CVE-2021-38406 or CISA KEV Catalog Lacks Accountability
Fri, Sep 02, 2022, 10:55 AM UTC
story
Dropping Files on a Domain Controller Using CVE-2021-43893
Mon, Feb 14, 2022, 4:05 PM UTC
story
Cisco ASDM: Manage at Your Own Risk
Fri, Feb 11, 2022, 6:17 PM UTC
story
Writing an Exploit for CVE-2021-20038 (SonicWall SSL VPN)
Tue, Jan 11, 2022, 2:17 PM UTC
story
Driver-Based Attacks: Past and Present
Mon, Dec 13, 2021, 2:29 PM UTC
comment
Comment #29121719
Not only that, but it still works in exactly this way. I would have thought they would have fixed this "feature." But an unauthenticated user can still provide GitLab with tiff/jpe…

Fri, Nov 05, 2021, 4:43 PM UTC
comment
Comment #29120071
Full disclosure, I wrote both of these. The following describes the entire unauthenticated attack: https://attackerkb.com/topics/D41jRUXCiJ/cve-2021-22205/rapi... And, if you like …

Fri, Nov 05, 2021, 2:49 PM UTC