Story
Sourcehut account takeover via build logs (XSS in ansi2html)
1 report
1 website
1 discussion
Latest report
Overview
Welcome to my first big impact vulnerability writeup! I like good stories, so let me describe some background first. I recently had a ‘great’ idea (I know, I know, I should stop having these) to set up a sr.ht instance that would pay people for hosting their projects. You can find it shamelessly plugged in the timeline section, in case you want to try it or flame me for it on socials. Anyway, the ...
Summary from blog.arusekk.pl.
Reports
One report so far. Additional coverage will appear here when it is linked to this story.
Community reactions
Each reaction summarizes sampled comments from the linked discussion.
Hacker News · blog.arusekk.pl
Hacker News discussion ↗
Historical count: 10 · 10 saved in sample · Historical sample
Awaiting analysis