/dev/posts/

Shell command and Emacs Lisp injection in emacsclient-mail.desktop

Published:

Shell command injection and Emacs Lisp injection vulnerabilities in one of the Emacs Desktop Entry (emacsclient-mail.desktop) leading to arbitrary code execution through a crafted mailto: URI.

Read more…

Arbitrary file write in Stellarium file association

Published:

I found an arbitrary file write vulnerability (through path traversal) which would be exploited for arbitrary code execution in Stellarium (desktop version).

Read more…

MIME-type spoofing in Firefox/Thunderbird and file managers

Published:

An interesting spoofing attack resulting from the interaction between Firefox (or Thunderbird) MIME types handling and file managers.

Read more…

Code execution through MIME-type association of Mono interpreter

Published:

A dangerous file type association in Debian which could be used to trigger arbitrary code execution.

Read more…

Using a Kap&Link smart card reader with CPS3 smart cards on Linux

Published:

Tutorial on how to get Carte Professionnel de Santé 3 (CPS3) smart cards work with Firefox under Linux with a Kap&Link smart card reader. It has some information to understand the related lingo, how the different components interact and how you might try to enable support for a PC/SC (Personal computer/Smart Card) / CCID (Chip/Smart Card Interface Devices) smart card reader which is not supported by the driver.

Read more…

OAuth 2.x and OpenID Connect sequence diagrams

Published:

Some sequence diagrams about OAuth 2.x and OpenID Connect.

Read more…

Entering in Podman containers

Published:

Some commands for interacting with the namespaces of Podman containers.

Read more…

Switching from Docker to Podman

Published:

Some notes about using Podman instead of Docker, on Linux. This has been tested on Podman v3.4.7.

Read more…

Stable Diffusion on an AMD Ryzen 5 5600G

Published:

Executing the Stable Diffusion text-to-image model on an AMD Ryzen 5 5600G integrated GPU (iGPU).

Read more…

Extract the schema from a remote LDAP server

Published:

How to extract the schema from a remote LDAP server and use it on a OpenLDAP instance.

Read more…

Page 2 of 10 | | | JSON Feed | Atom Feed