Activity

• reportharness Gitspace hardcoded password for every user account2026-09-24
• reportnps cleartext secrets, unsalted MD5 tunnel keys, and timing-unsafe compares2026-09-24
• reportdive tar-slip in image file extraction2026-09-24
• reportharness registry webhook sort_order blind SQL injection2026-09-24
• reportvnt VPN defaults to skipping TLS certificate verification2026-09-23
• reportRust glib `PtrSlice::from` null pointer write2026-09-19
• reportRust glib `BoxedInline` slice heap overflow2026-09-19
• reportusvg SVGZ decompression bomb in `Tree::from_data`2026-09-18
• reportcrates.io `/svelte` middleware backslash open redirect2026-09-03
• blogUnbounded Channels Are Mostly a Mistake2026-07-19
• reportPHP 8.5.7 `dom_xml_serialization_algorithm()` stack-overflow2026-06-18
• reportPHP 8.5.7 `levenshtein()` signed-integer overflow2026-06-18
• reportPHP 8.5.7 `mb_substr()` 'SJIS-mac' size_t underflow2026-06-18
• reportPHP 8.5.7 `FILTER_SANITIZE_ENCODED` uninitialized read2026-06-18
• blogZig: A Good Language Drowning in Bad Decisions2026-05-18
• blogFrashokereti in the Age of AI2026-05-11
• blogOptimization First Rule: Don't, but aim for it2026-05-06
• blogKanal on Rustacean Station2022-11-20
• reportJoomla 1.5.x to 3.4.5 Object Injection Exploit2015-12-31
• blogHow to use Google reCAPTCHA in Node.js and Express Framework2015-08-16