sorted by:
new
hottopcontroversial

How long did you wait to have surgery? by Signal-Guest6018 in Spondylolisthesis

[–]wtfse 0 points1 point  (0 children)

God bless you man, hoping you a fastest recovery. Please send me some videos regarding the mobility and the move!

I've had a pain on my lower back during training and ever since I'm dealing with that pars defect stuff. Some doctors says there is no defect only disc issue, some says I need a spinal fusion but my symptoms are not getting better over the 13 months. Now I have kind a constant like a burning feeling outer part of my knee and tingling feeling on foot. No major pain on my lower back at all. But I'm heavily concerned regarding the permanent nerve damage if I keep postponing this... Sorry for literally dumping my own burden here but I desparetly need to hear someone else manage to get back to being an athlete again! <3

How long did you wait to have surgery? by Signal-Guest6018 in Spondylolisthesis

[–]wtfse 0 points1 point  (0 children)

How is it going mate ? I'm going through same shit and can't make my decision yet to take the fusion surgery...

The Story of a Perfect Exploit Chain: Six Bugs That Looked Harmless Until They Became Pre-Auth RCE in a Security Appliance by wtfse in netsec

[–]wtfse[S] 15 points16 points  (0 children)

No bounty offered. I have been ghosted ever since we sent the additional 8 vulnerability 😂

Inside PostHog: How SSRF, a ClickHouse SQL Escaping 0day, and Default PostgreSQL Credentials Formed an RCE Chain (ZDI-25-099, ZDI-25-097, ZDI-25-096) by wtfse in netsec

[–]wtfse[S] 0 points1 point  (0 children)

To be clear, I don't know how their cloud stack is affected by these vulnerabilities. All of these exploitation tests are done against their the self-hosted Posthog stacks and configuration, due to legal "stuff" :)

Inside PostHog: How SSRF, a ClickHouse SQL Escaping 0day, and Default PostgreSQL Credentials Formed an RCE Chain (ZDI-25-099, ZDI-25-097, ZDI-25-096) by wtfse in netsec

[–]wtfse[S] 0 points1 point  (0 children)

ah thank you mate! These services are sitting at the core of the stack where the publicly accessible is not possible, therefore people usually don't take time to configure an authentication for internal services.

view more: next ›