hannob

--- wordpress/wp-comments-post.php	2015-01-08 08:05:25.000000000 +0100
+++ htdocs/wp-comments-post.php	2015-04-27 16:50:24.250000000 +0200
@@ -12,6 +12,12 @@
 	exit;
 }
 
+$psize=0;
+foreach($_POST as $p) {
+	$psize += strlen($p);
+}

hannob

Collecting some information about the extend and affected products and keys of the Infineon RSA vulnerability (ROCA).

• Official ROCA infos by the bug finders
• Test tool on Github
• Online test
• Information from Infineon
• CVE-2017-15361
• CERT/CC advisory

Estonian eID cards

hannob

--- squirrelmail.stable/squirrelmail/class/deliver/Deliver.class.php	2017-01-27 21:31:33.000000000 +0100
+++ htdocs/class/deliver/Deliver.class.php	2018-03-14 17:21:10.320000000 +0100
@@ -281,6 +281,7 @@
                 global $username, $attachment_dir;
                 $hashed_attachment_dir = getHashedDir($username, $attachment_dir);
                 $filename = $message->att_local_name;
+		if(!ctype_alnum($filename)) die();
 
                 // inspect attached file for lines longer than allowed by RFC,
                 // in which case we'll be using base64 encoding (so we can split