Tagged “security”
-
opencode authentication shenanigans
It's me trying to get an unassuming `opencode` command to execute an arbitrary command from a server.
-
Open WebUI XSS
SPOILER: I didn't get an XSS here. Only a CSS injection. Also, it's kinda in #projects because it involves my project Human Harness.
-
World of Walker data leak
Merely minutes after launch, I discovered a critical flaw in the world of walker site, that could leak any user's full name, email address, country, and date of birth - simply from their walker ID.