sedje

@cy@chaos.social @bert_hubert@eupolicy.social I get a WAF denied screen, as if I tried some SQL injection. From a big Dutch ISP.

If you're looking at the #Wordpress PoC for https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-ff9f-jf42-662q at https://github.com/attackercan/wp2shell-poc2 , please be aware that the "check" and "read" PoC do not always work. I assume it was created on an empty Wordpress install (with 0 posts). But if it's populated, the OR SLEEP(3) is short circuited away. Trust your version.php instead. (wp2shell-poc does not have an issue tracker enabled to report this to.) #sqlinjection #vulnerability #cve #infosec

@wdormann Of course Microsoft used their GitHub ownership to remove the repo instead of fixing both problems (the exploit and the video requirement). #bluehammer #github #censorship #responsibledisclosure

@justdude Mooi plaatje. Ben je daar, of gewoon mooi? Of andere context?

@schellevis Ja, #odido mailde mij ook dat m'n gegevens gelekt waren. En dat ze die hadden omdat ze die 2 jaar vasthouden en ik korter geleden klant was. Maar 2021+2 is niet 2026, dus ze kunnen daar niet rekenen. Of ze liegen en ruimen hun data niet netjes op. Of allebei... #ap #datalek