Skip To Main Content
Jason A. Donenfeld on Muck Rack

Jason A. Donenfeld

As seen in: Packetst Storm
Support WireGuard development via patreon.com/zx2c4 and wireguard.com/donations/
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile

Get in touch with Jason A.

Contact Jason A., search articles and posts on X, monitor coverage, and track replies from one place.

Learn more about Muck Rack

Actions

Share this page

Is this you?

As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile

Articles

Re: Local information disclosure in apport and systemd-coredump

|
By Jason A. Donenfeld
| seclists.org
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Fri, 6 Jun 2025 03:49:14 +0200 On Thu, Jun 05, 2025 at 05:31:41AM +0200, Solar Designer wrote: On Tue, Jun 03, 2025 at 10:16:52AM +0200, Vegard Nossum wrote: newgrp: fix potential string injection Since newgrp is setuid-root, any write() system calls it does in order to print error messages will be done as the root user.
Open in Who Shared Issue with article?

WordPress W3-Total-Cache 0.9.2.4 Username / Hash Extraction

|
By Jason A. Donenfeld, Christian Mehlmauer, Jay Turla
| Packetst Storm
## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule < Msf::Auxiliary include Msf::Exploit::Remote::HTTP::Wordpress include Msf::Auxiliary::Report include Msf::Auxiliary::Scanner def initialize super( 'Name' => 'WordPress W3-Total-Cache Plugin 0.9.2.4 (or before) Username and Hash Extract', 'Description' => "The W3-Total-Cache Wordpress Plugin <= 0.9.2.4 can cache database statements...
Open in Who Shared Issue with article?

Re: linux-distros list policy and Linux kernel

|
By Jason A. Donenfeld, Hi Seth, Linux developers
| seclists.org
Nmap Announce Nmap Dev Full Disclosure Security Lists Internet Issues Open Source Dev oss-sec mailing list archives From: "Jason A. Donenfeld" <Jason () zx2c4 com> Date: Tue, 17 May 2022 13:10:16 +0200 Hi Seth, On Tue, May 17, 2022 at 03:30:33AM +0000, Seth Arnold wrote: I think playing CVEs with the kernel (and possibly other humongous projects too) is in large part a fool's errand.
Open in Who Shared Issue with article?
See all 74 articles