jiva · HackerTrans

jiva

no profile record

Submissions

Dolibarr 23.0.0: PHP eval() whitelist bypass → RCE via two bugs (CVE-2026-22666)

jivasecurity.com

2 pointsby jiva3 maanden geleden1 comments

EspoCRM: Formula engine and path traversal → RCE in six requests(CVE-2026-33656)

jivasecurity.com

1 pointsby jiva4 maanden geleden0 comments

Google Wallet Card is shutting down

google.com

6 pointsby jiva10 jaar geleden1 comments

A discussion about the breaking of the Internet

medium.com

1 pointsby jiva10 jaar geleden0 comments

comments

jiva

3 maanden geledendiscuss

Root cause analysis and full PoC. Coordinated disclosure — patch is available as of 4/4/2026

jiva

3 jaar geledendiscuss

Check out this project https://hackaday.io/project/184810-usb-c-cable-tester

jiva

3 jaar geledendiscuss

Sorry but I am skeptical. Unless you’ve managed to reverse engineer “almost any IP camera”, I’ll believe this when I see it.

jiva

3 jaar geledendiscuss

I was ghosted by Tenable after spending about 48 hours completing their CTF challenges, so I just posted the interview questions/challenges and my solutions to my GitHub.

https://github.com/jiva/tenable_zero_day_assessment

jiva

5 jaar geledendiscuss

Did you happen to have these thoughts when the CEOs were white males?

jiva

5 jaar geledendiscuss

I’m not hopeful they’ll release anytime soon considering how long the project has been in alpha.

jiva

6 jaar geledendiscuss

Sure: https://gist.github.com/jiva/954a22bafcafec2d594b5c3454a10b0...

jiva

6 jaar geledendiscuss

I use gdb dashboard

https://github.com/cyrus-and/gdb-dashboard

It makes for a very pleasant debugging experience

https://i.imgur.com/iw21sbU.jpg

jiva

7 jaar geledendiscuss

My phone preferably.

jiva

7 jaar geledendiscuss

Bank of America's ShopSafe is similarly garbage - it's a flash app that halfway works.

jiva

7 jaar geledendiscuss

Generating virtual credit card numbers is kind of a big sell for me. I double any other credit card companies will have anything comparable to Apple's UI/UX of it either.

jiva

7 jaar geledendiscuss

If your SSH session gets locked, you can kill the session without killing the terminal window by pressing Enter, ~, . (period)

jiva

7 jaar geledendiscuss

"there will be no updates, not even source-only security patches" from the man himself: https://mail.python.org/pipermail/python-dev/2018-March/1523...