NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#callbackery

0 stories this week · 2 this month · 2 in 6 months · mostly security

Stories per day · 30 days

Relatedperl2 information-disclosure1 password-hashing1 path-traversal1 session-cookies1

2 stories, newest first · one card per story

oss-security12d ago

CallBackery before 0.62.0 has password and session flaws

The note describes unsalted HMAC-SHA1 passwords, cookie forgery via rand(), and session cookies accepted at any age.

callbackery perl

oss-security12d ago

CallBackery before 0.60.1 exposes POD via /doc path traversal

Unauthenticated clients can read the POD of any file through the Perl app’s /doc route; 0.60.1 is the fix.

perl path-traversal