fedi.ml | Search

Search

Items tagged with: vulnerabilities

Ars Technica News

4 months ago

Ars Technica News
4 months ago

Open source project curl is sick of users submitting “AI slop” vulnerabilities arstechni.ca/LAhpm #vulnerabilities #bugreports #hackerone #security #Tech #curl #AI

Open source project curl is sick of users submitting “AI slop” vulnerabilities

“One way you can tell is it’s always such a nice report,” founder tells Ars.

^{Kevin Purdy (Ars Technica)}

#security #AI #tech #curl #hackerone #vulnerabilities #bugreports

Please wait

View in context

Marco Ivaldi

1 year ago

Marco Ivaldi
1 year ago

Cool bug 🪳

Incorrect Type Conversion in interpreting IPv4-mapped IPv6 addresses in #curl results in indeterminate SSRF #vulnerabilities.

hackerone.com/reports/2493548

curl disclosed on HackerOne: Incorrect Type Conversion in...

## Summary: Octal Type Handling of Errors in IPv4 Mapped IPv6 Addresses in curl allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many programs that...

^HackerOne

#curl #vulnerabilities