Did you also write the gnuplot plugin? Because that's also vulnerable, as found ... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

CapacitorSet on April 2, 2017 | parent | context | favorite | on: How we exploited a code execution vulnerability in...

Did you also write the gnuplot plugin? Because that's also vulnerable, as found by the same @denysvitali: https://github.com/LucentW/s-uzzbot/issues/9

yagop on April 2, 2017 | [–]

That was from @francesco-p (he renammed his account from psykomantis) https://github.com/yagop/telegram-bot/commit/89b92b4cbf81ce1... its in my repo but disabled by default.

dvitali on April 2, 2017 | [–]

Proof: http://i.imgur.com/BpLtg0b.png

Consider applying for YC's Spring batch! Applications are open till Feb 11.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact