Re: [FD] "." (period) in file extension(s) in windows

2018-01-02 Thread Dave Horsfall
On Tue, 2 Jan 2018, Gynvael Coldwind wrote: It's the same with spaces btw (see also James Forshaw's mention of this in his post [1]): That's almost as hilarious as the Mac: ozzie:~ dave$ date > test ozzie:~ dave$ cAT TeSt Wed Jan 3 16:03:19 AEDT 2018 ozzie:~ dave$ ls -l Test

[FD] ChromeOS Doesn’t Always Use SSL During Startup [CVE-2017-15397]

2018-01-02 Thread Nightwatch Cybersecurity Research
[Original at: https://wwws.nightwatchcybersecurity.com/2018/01/01/chromeos-doesnt-always-use-ssl-during-startup-cve-2017-15397/] SUMMARY ChromeOS did not use SSL in all network calls originating from the ChromeVox component during startup. This could potentially have allowed an MITM attacker to

[FD] EMC xDashboard - SQL Injection Vulnerability

2018-01-02 Thread Paweł Gocyla
Title: EMC xDashboard - SQL Injection Vulnerability Author: Pawel Gocyla Date: 02 January 2018 CVE: CVE-2017-14960 Affected Software: == EMC xPression v4.5SP1 Patch 13 Probably other versions are also vulnerable. SQL Injection Vulnerability: == This

[FD] Gain Access to SSH Group via ssh-agent and OpenSSL

2018-01-02 Thread halfdog
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hello List, Although for ssh-agent this is just a funny bug and no security problem, other software might be vulnerable to privilege escalation. And apart from escalation, the openssl code execution feature is a nice and very reliable way to load an

Re: [FD] "." (period) in file extension(s) in windows

2018-01-02 Thread Gynvael Coldwind
Hi there, It's the same with spaces btw (see also James Forshaw's mention of this in his post [1]): >echo test > asdf >type asdf test >type "asdf. . . ... .. . . ." test Reading doesn't seem to work with Windows Subsystem for Linux (Windows 10) though :( $ cat asdf test $ cat "asdf