Gabriel Corona

Results 26 issues of Gabriel Corona

This an absolute must-have feature :smile:

**Describe the bug** Hetty is vulnerable to DNS rebinding attacks because it does not validate the Host header. A malicious remote server could exploit this to: * trigger arbitrary HTTP...

[FlameGraph](https://github.com/brendangregg/FlameGraph) is another profiling visualization tool. It grokes a simple text-based line-oriented format. It ships with a series of `stackcollapse` scripts which generate the expected input from different tools (gdb,...

enhancement

I'm trying to connect with my SSH agent and I get the following error in the syslog: NetworkManager[1700]: [1473107735.4072] vpn-connection[0xfb83f0,65c3312c-19f6-4eb3-814d-ced8b08fdb7d,"SSH Tunnel",0]: Saw the service appear; activating connection NetworkManager[1700]: [1473107735.5571] vpn-connection[0xfb83f0,65c3312c-19f6-4eb3-814d-ced8b08fdb7d,"SSH...

bug

Undisclosed vulnerability. It would be nice to add support for security issues in order to discuss and track this.

This generates VAS layouts like this: 555555554000-5555555a8000 r--p 00000000 08:02 919707 /opt/python-3.6.8/bin/python3.6 5555555a8000-55555573d000 r-xp 00054000 08:02 919707 /opt/python-3.6.8/bin/python3.6 55555573d000-5555557ce000 r--p 001e9000 08:02 919707 /opt/python-3.6.8/bin/python3.6 5555557cf000-555555835000 rw-p 0027a000 08:02 919707 /opt/python-3.6.8/bin/python3.6...

The security section of the specification does not mention the risk associated with exploiting the user browser for executing commands on the WebDriver. In practice, several implementation of WebDriver have...

The specification does not specify the `Content-Type` used for WebDriver requests. Even if the content of the request body is JSON, it appears to be valid (according to the specification)...

It'd be nice to have an option to disable certificate verification (`verify_mode=CERT_NONE`): something like `config['verify'] = False`?