Posts
- 68 Years of Patience: Defeating rsync's Timeout With One Integer
- Reading /etc/shadow Through rsync: Server-Side Path Traversal in Incremental Backups
- Zero-Length Blocks, Negative Offsets: Crashing rsync Daemons With Protocol Math
- How I Bypassed OAuth Consent in Privy's Cross-App Connection Flow
- AWPCP <= 4.4.7: Unauthenticated Payment Bypass in the PayPal Standard Return Handler
- Gitea Draft-Release Attachments Leak to Anyone With the Link