Script kiddie. I love InfoSec, poke at malware, and write Rust when I'm not breaking something.

Home Tags javascript

Tag

javascript 1

Recently Updated

GHSA-7fh4-27xm-vxgg「Stored XSS via image/svg+xml served inline by StaticDir / NamedFile」
GHSA-5qh5-c9fp-66jm 「(Windows only) attacker-controlled symlink target triggers outbound SMB/NTLM authentication via std::fs::metadata() during extraction」
GHSA-x2x8-gq67-9mq6「With the default SymlinkExtractAction::ExtractRecursiveInFolder (since v9.0.0), symlinks pointing outside the extraction directory are still created」
CVE-2026-115908 「Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. (The defense against CVE-2025-29787 was broken in v7.2.0)」
Anthropic 「Cyber Verification Program」

Using the Chirpy theme for Jekyll.

A new version of content is available.