Я продолжаю серию интервью с отечественными разработчиками игр. Не так давно на Хабре уже был материал про инди‑студию Baba Yaga Games, потом про мобильных разработчиков Black Cavair Games. На очереди студия разработки, которая существует уже 13 лет — это студия Creepy Brothers. Читать далее
Недавно удалось получить удалённый доступ к компьютеру Дмитрия Бачило Sun Blade 1500 на процессоре Ultra Sparc IIIi, который выставляется в его недавно открытом музее, а также попросил пользователя Limows протестировать машину Netra T1 с процессором Ultra Sparc IIe 500 МГц. Плюс удалённо удалось получить результаты тестов процессоров серии МЦСТ-R на архитектуре SPARC, поэтому я решил сравнить производительность процессоров от компании SUN (которую купил Oracle) и МЦСТ. Читать далее
Я пришел в Google незадолго до пандемии, когда компания AppSheet, в которой я был одним из основателей, была поглощена Google Cloud. Команда поглощения и руководство компании радушно приняли нас и прекрасно к нам относились. Мы влились в коллектив с большим энтузиазмом и готовностью…
Cross-Site Request Forgery (CSRF) vulnerability in AutomatorWP plugin <= 2.5.0 leads to object delete.
Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Form Builder Team Formidable Forms plugin <= 5.5.6 versions.
The GN Publisher plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
The WP Meta SEO plugin for WordPress is vulnerable to unauthorized options update due to a missing capability check on the wpmsGGSaveInformation function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to update google analytics options maintained by the plugin. This vulnerability occurred as a result of the plugin relying on nonce checks as a means of access control, and that nonce being accessible to all authenticated users…
The WP Meta SEO plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the saveSitemapSettings function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to change sitemap-related settings of the plugin. This vulnerability occurred as a result of the plugin relying on nonce checks as a means of access control, and that nonce being accessible to all authenticated users regardless of
The WP Meta SEO plugin for WordPress is vulnerable to unauthorized sitemap generation due to a missing capability check on the regenerateSitemaps function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to generate sitemaps. This vulnerability occurred as a result of the plugin relying on nonce checks as a means of access control, and that nonce being accessible to all authenticated users regardless of role.
The WP Meta SEO plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the listPostsCategory function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to get post listings by category as long as those posts are published. This vulnerability occurred as a result of the plugin relying on nonce checks as a means of access control, and that nonce being accessible to all authenticated users…