Remote code execution via cross site request forgery in InternetCube and YunoHost

Published: Feb 12 2019

How I found remote code execution vulnerabilities via Cross Site Request Forgery (CSRF) on the administration interfaces of InternetCube applications and of the YunoHost administration interface which could have been used to execute arbitrary code as root. These vulnerabilities were fixed in YunoHost 3.3, OpenVPN Client app 1.3.0. and YunoHost 3.4.

IP address spoofing in order to watch South Park

Published: Nov 22 2018

Trying to bring back some old IP spoofing Firefox extension for watching South Park episodes.

Use HTML pipeline in Middleman

Published: Jul 4 2015

How to use html-pipeline in middleman.