If you're learning multiple languages you're a polyglotton for punishment.
XFEDI
ActivityPubRemote profile
Fritz Adalis
Infosec Lurker | Technical Debt Collector
It's not for fun, or any sense of community.
It's just trying to dull the pain.
I have friends everywhere. May all your ARPs be gratuitous.
Posts
RE: https://mastodon.social/@botgov/117485229975856640
My two favorite cars are the Ford Landmo and the Kia Ntoneny.
The following .gov domains have been registered in the past 24 hours: carbonvalleyrec.gov cheyenne.gov cityofbuffaloks.gov cityofgustineca.gov clemmons.gov flushingtownshipmi.gov fordlandmo.gov grandviewplazaks.gov kiantoneny.gov libertytwpunioncooh.gov peachorchardark.gov townof
Mastodon.socialBotgov (@[email protected])The following .gov domains have been registered in the past 24 hours: carbonvalleyrec.gov cheyenne.gov cityofbuffaloks.gov cityofgustineca.gov clemmons.gov flushingtownshipmi.gov fordlandmo.gov grandviewplazaks.gov kiantoneny.gov libertytwpunioncooh.gov peachorchardark.gov townofnewmarketin.govRE: https://infosec.exchange/@dotdotslash_bot/117484635177609038
They could have called the company WAPPLE HOUSE, it was right there.
New directory traversal CVE! CVE-2022-51025 - https://www.cve.org/CVERecord?id=CVE-2022-51025 Penta Security Systems - WAPPLES Penta Security WAPPLES 4.0.54.1, 5.0, and 6.0 contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files via
Infosec Exchangedotdotcoloncolon_bot (Atlassian edition) (@[email protected])Attached: 1 image
New directory traversal CVE!
CVE-2022-51025 - https://www.cve.org/CVERecord?id=CVE-2022-51025
Penta Security Systems - WAPPLES
Penta Security WAPPLES 4.0.54.1, 5.0, and 6.0 contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files via the name parameter of /webapi/file/transfer. Attackers can send GET requests with type=db_backup and
> Officials confirm flesh-eating New World screwworm parasite found in US wildlife
oh yay
RE: https://infosec.exchange/@hardcoded_bot/117476187613228578
We align our security program to industry Best Practice Software.
New hardcoded credential CVE! CVE-2026-114119 - https://www.cve.org/CVERecord?id=CVE-2026-114119 Best Practice Software - Bp Premier Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all instal
Infosec ExchangeHardcoded Credentials Bot (@[email protected])New hardcoded credential CVE! CVE-2026-114119 - https://www.cve.org/CVERecord?id=CVE-2026-114119 Best Practice Software - Bp Premier Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be changed without breaking the application. Attackers with network access to the database instance cRE: https://infosec.exchange/@dotdotslash_bot/117475435461107871
Aspose I should install these patches.
New directory traversal CVE! CVE-2015-20125 - https://www.cve.org/CVERecord?id=CVE-2015-20125 Aspose - Aspose PDF Exporter Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download files through t
Infosec Exchangedotdotcoloncolon_bot (Atlassian edition) (@[email protected])Attached: 1 image
New directory traversal CVE!
CVE-2015-20125 - https://www.cve.org/CVERecord?id=CVE-2015-20125
Aspose - Aspose PDF Exporter
Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download files through the unsanitized 'file' parameter passed to readfile(). Attackers can send GET requests to aspose_pdf_e
Oh cool, upgrades to OpenBSD 8.0 are working via sysupgrade!
RE: https://infosec.exchange/@hardcoded_bot/117468164903177782
> The exploit is now public and may be used.
Thanks, I've been waiting!
New hardcoded credential CVE! CVE-2026-112146 - https://www.cve.org/CVERecord?id=CVE-2026-112146 D-Link - R15 D-Link - E15 D-Link - M32 D-Link - R32 A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/
Infosec ExchangeHardcoded Credentials Bot (@[email protected])New hardcoded credential CVE! CVE-2026-112146 - https://www.cve.org/CVERecord?id=CVE-2026-112146 D-Link - R15 D-Link - E15 D-Link - M32 D-Link - R32 A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipulation results in hard-coded credentials. It is possible to launch the at