HNHacker News
TopNewBestAskShowJobs

fwilhelm

142 karma · joined January 8, 2013

submissionscomments
fwilhelm··on Xen hypervisor memory corruption due to x86 emulator flaw
I wrote a blogpost with some more details about the bug, which you can find here: http://www.insinuator.net/2015/03/xen-xsa-123/
fwilhelm··on Multiple vulnerabilities in parameter parsing in Action Pack
The post does not include any directly usable exploit code and does not describe command execution vectors. Furthermore information about the bug were published on twitter almost a week ago. But I probably will not convince you about the advantages of Full Disclosure :)
fwilhelm··on Multiple vulnerabilities in parameter parsing in Action Pack
For those of you interested in more details about this bug: I've posted a first analysis at http://www.insinuator.net/2013/01/rails-yaml/