Conversation

Notices

1. Embed this notice
   ~swapgs (swapgs@infosec.exchange)'s status on Tuesday, 19-Nov-2024 23:46:21 JST ~swapgs

   Finally got to publish the CVE for a "forever-day" path traversal in the .NET library DotNetZip affecting all releases since 2018. Enjoy, the PoC is in the patch! :blobcatsuit: #CVE_2024_48510

   https://www.cve.org/CVERecord?id=CVE-2024-48510

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Tuesday, 19-Nov-2024 23:46:48 JST Kevin Beaumont

     in reply to

     @swapgs you forgot to tag it #directorytraversalmemes 🤣