curl disclosed on HackerOne: Stack Buffer Overflow in cURL Cookie...
hackerone.com
## Summary I discovered a critical stack-based buffer overflow vulnerability in cURL's cookie parsing mechanism that can lead to remote code execution. The vulnerability occurs when processing maliciously crafted HTTP cookies, affecting all applications that use libcurl for HTTP requests. ## Description During security research on cURL's cookie handling implementation, I identified a stack...
  • Lvxferre [he/him]@mander.xyzEnglish
    2·
    2 hours ago

    If I was a dev I’d have a zero-tolerance policy towards shit like this. I don’t care if the muppet is “just chrying to halp lol lmao”; people like this are a dead weight and a burden.