adb014

I have a directory where the current user has write permission, but needs to overwrite a file owned by someone else. I use something like ``` lftp -c "open sftp://user:@host/Dir;...

Add the possibility to include solution write ups, and to hide them

3

This is an updated version of the pull request #2238 that also includes - The possibility to hide solutions individually - The possibility to bulk edit the visibilty of the...

XSS injection in webssh hostname field

3

There is a XSS injection attack possible against the hostname field of webssh. For example if webssh is port 443 of the local machine ``` https://localhost/?hostname=%3Cscript%3Ealert(%221%22)%3C/script%3E ``` will demonstrate the...

I'm using osslsigncode in an airgapped environment where all files entering the zone are scanned before permitiing them to enter. Recent changes (since version 2.6) in osslsigncode have added the...

Make plugins respect APPLICATION_ROOT

2

See discussion in [#2871](https://github.com/CTFd/CTFd/issues/2871)

/admin/config plugin routes not respecting APPLICATION_ROOT

1

Whether this is an issue I suppose is a matter of perspective. The routes in /admin/config for the plugins don't include APPLICATION_ROOT. I suppose the routes are given by the...

Question: Ulimit with services.create ?

1

I'm trying to migrate some of my code to docker swarm and even though I can do ``` docker service create --ulimit nofile=66535 alpine sleep infinity ``` and I can...