Our colleague @mal@infosec.exchange had another look at OpenOLAT and found a nice RCE (CVE-2026-28228 and CVE-2026-28228). If you're interested, details can be found on our blog https://secfault-security.com/blog/openolat-ssti.html
Remote
greg
@greg@infosec.exchange
mastodon 4.8.0-alpha.3+glitchCEO of Secfault Security, looks like a cliché hacker according to Halvar Flake
0 Followers
0 Following
5 Posts
Joined November 04, 2022
Company:
Birdchan:
Just had a real positive experience with @hetzner@mastodon.hetzner.social customer service. Thanks a ton and keep up the good work!
Replying to
@cure53 @buherator oh, c'mon. They just wanted to tell him that even if the toilet is not working, he doesn't have to shit himself.