justinsteven/advisories
140 best points · 62 comments · 10 Hacker News posts · 274 GitHub stars · View on GitHub
Hacker News discussions
- Pre-auth Remote Code Execution Vulnerability in Metasploit (140 points, 25 comments, by pimterry, 2016-09-20)
- GitHub Actions checkspelling community workflow GitHub_TOKEN leakage via symlink (129 points, 35 comments, by pentestercrab, 2021-09-09)
- Legacy LVFS S3 bucket takeover and CVE-2020-10759 fwupd sig verification bypass (6 points, 0 comments, by beefhash, 2020-06-09)
- Legacy LVFS S3 bucket takeover and CVE-2020-10759 fwupd sig verification bypass (3 points, 0 comments, by willlll, 2020-06-08)
- Fwupd – S3 bucket takeover and CVE-2020-10759 signature verification bypass (3 points, 1 comments, by pentestercrab, 2020-06-10)
- Fwupd – S3 bucket takeover and CVE-2020-10759 signature verification bypass (2 points, 1 comments, by pentestercrab, 2020-06-12)
- Exploitation via Git's core.fsmonitor, affects IDEs, shell prompts and pillagers (2 points, 0 comments, by caaqil, 2022-03-20)
- Vulnerabilities allowing offering malicious firmware updates to Linux systems (1 points, 0 comments, by pentestercrab, 2020-06-15)
- Exploitation via Git embedded bare repos and core.fsmonitor, affects IDEs (1 points, 0 comments, by pentestercrab, 2022-03-18)
- Git honours embedded bare repos and exploitation via core.fsmonitor (1 points, 0 comments, by pentestercrab, 2022-04-13)