home.social

#patchyourshit — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #patchyourshit, aggregated by home.social.

fetched live
  1. Phillip :usa_distress: @[email protected] ·

    Welp. My Forgejo instance got popped by CVE-2026-60004. Hooray for RCE 🙃

    My two screw-ups were
    1. I pinned it to v13 "for stability" forever ago, then forgot about it.
    2. I accidentally left sign-ups enabled.

    Grabbed the seemingly obfuscated payload script from the attacker's server. Looks like it hits a different IP and grabs one of three different binaries depending on the victim's CPU architecture. You best believe I'm grabbing those too

    Will probably write a blog post on what I find, but I'll at least post updates here, too

    Edit:
    The postmortem is done!
    social.lol/@phillip/1170725452

    #Homelab #SelfHosted #PatchYourShit #Forgejo

    #homelab #selfhosted #patchyourshit #forgejo
  2. Phillip :usa_distress: @[email protected] ·

    Welp. My Forgejo instance got popped by CVE-2026-60004. Hooray for RCE 🙃

    My two screw-ups were
    1. I pinned it to v13 "for stability" forever ago, then forgot about it.
    2. I accidentally left sign-ups enabled.

    Grabbed the seemingly obfuscated payload script from the attacker's server. Looks like it hits a different IP and grabs one of three different binaries depending on the victim's CPU architecture. You best believe I'm grabbing those too

    Will probably write a blog post on what I find, but I'll at least post updates here, too

    Edit:
    The postmortem is done!
    social.lol/@phillip/1170725452

    #Homelab #SelfHosted #PatchYourShit #Forgejo

    #homelab #selfhosted #patchyourshit #forgejo
  3. Crazypedia won't Comply 🧿 @[email protected] ·

    Server VM Shuffle Dance for Patch Day ​:neko_dancing_nya:​

    #WindowsUpdate #patchtuesday #PatchYourShit

    #windowsupdate #patchtuesday #patchyourshit
  4. Geeky Malcölm 🇨🇦 @[email protected] ·

    Trimble Releases Security Updates to Address a Vulnerability in Cityworks Software

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #patchyourshit
  5. Geeky Malcölm 🇨🇦 @[email protected] ·

    Trimble Releases Security Updates to Address a Vulnerability in Cityworks Software

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #patchyourshit
  6. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Fortinet Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #fortinet #patchyourshit
  7. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Fortinet Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #fortinet #patchyourshit
  8. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Ivanti Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #ivanti #patchyourshit
  9. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Ivanti Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #ivanti #patchyourshit
  10. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Adobe Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #adobe #patchyourshit
  11. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Adobe Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #adobe #patchyourshit
  12. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Microsoft Releases January 2025 Security Updates

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #microsoft #patchyourshit
  13. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Microsoft Releases January 2025 Security Updates

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #microsoft #patchyourshit
  14. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Ivanti Releases Security Updates for Connect Secure, Policy Secure, and ZTA Gateways

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #ivanti #patchyourshit
  15. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Ivanti Releases Security Updates for Connect Secure, Policy Secure, and ZTA Gateways

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #ivanti #patchyourshit
  16. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Fortinet Releases Security Updates for FortiManager

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #fortinet #patchyourshit
  17. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Fortinet Releases Security Updates for FortiManager

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #fortinet #patchyourshit
  18. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Apple Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #apple #patchyourshit
  19. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Apple Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #apple #patchyourshit
  20. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Adobe Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #adobe #patchyourshit
  21. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Adobe Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #adobe #patchyourshit
  22. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Microsoft Releases December 2024 Security Updates

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #microsoft #patchyourshit
  23. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Microsoft Releases December 2024 Security Updates

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #microsoft #patchyourshit
  24. Gilgwath @[email protected] ·
    CW: Rude infosec joke

    We have so many unfortunate terms in #informationsecuriy . Like #offensivesecurity . What that sounds like in my head: Patch your shit right now your miserable excuse of corporate airhead. Your application is so full of holes, your incompetence is an insult to the chair you sit on.

    Haven't come up with a good #headcanon for "Hunt Forward" yet.

    But seriously now, go #patchyourshit 😬

    #security #infosec

    #informationsecuriy #offensivesecurity #headcanon #patchyourshit #security #infosec
  25. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Apple Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #apple #patchyourshit
  26. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Apple Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #apple #patchyourshit
  27. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Ivanti Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #ivanti #patchyourshit
  28. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Ivanti Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #ivanti #patchyourshit
  29. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Adobe Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #adobe #patchyourshit
  30. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Adobe Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #adobe #patchyourshit
  31. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Microsoft Releases November 2024 Security Updates

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #patchyourshit #microsoft
  32. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Microsoft Releases November 2024 Security Updates

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #microsoft #patchyourshit
  33. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Fortinet Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #fortinet #patchyourshit
  34. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Fortinet Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #fortinet #patchyourshit
  35. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Citrix Releases Security Updates for #NetScaler and Citrix Session Recording

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #citrix #netscaler #patchyourshit
  36. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Citrix Releases Security Updates for #NetScaler and Citrix Session Recording

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #citrix #netscaler #patchyourshit
  37. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Apple Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #apple #patchyourshit
  38. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Apple Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #apple #patchyourshit
  39. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Oracle Releases Quarterly Critical Patch Update Advisory for October 2024

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #oracle #patchyourshit
  40. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Oracle Releases Quarterly Critical Patch Update Advisory for October 2024

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #oracle #patchyourshit
  41. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Oracle October 2024 Critical Patch Update Addresses 198 CVEs

    tenable.com/blog/oracle-octobe

    #PatchYourShit

    #oracle #patchyourshit
  42. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Oracle October 2024 Critical Patch Update Addresses 198 CVEs

    tenable.com/blog/oracle-octobe

    #PatchYourShit

    #oracle #patchyourshit
  43. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Microsoft Releases October 2024 Security Updates

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #microsoft #patchyourshit
  44. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Microsoft Releases October 2024 Security Updates

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #microsoft #patchyourshit
  45. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Adobe Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #adobe #patchyourshit
  46. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Adobe Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #adobe #patchyourshit
  47. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Cisco Releases Security Updates for IOS and IOS XE Software

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #cisco #patchyourshit
  48. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Cisco Releases Security Updates for IOS and IOS XE Software

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #cisco #patchyourshit
  49. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Citrix Releases Security Updates for XenServer and Citrix Hypervisor

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #citrix #patchyourshit
  50. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Citrix Releases Security Updates for XenServer and Citrix Hypervisor

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #citrix #patchyourshit
  51. Geeky Malcölm 🇨🇦 @[email protected] ·

    #VMware Releases Security Advisory for VMware Cloud Foundation and vCenter Server

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #vmware #patchyourshit
  52. Geeky Malcölm 🇨🇦 @[email protected] ·

    #VMware Releases Security Advisory for VMware Cloud Foundation and vCenter Server

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #vmware #patchyourshit
  53. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Ivanti Releases Admin Bypass Security Update for Cloud Services Appliance

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #ivanti #patchyourshit
  54. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Ivanti Releases Admin Bypass Security Update for Cloud Services Appliance

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #ivanti #patchyourshit
  55. Geeky Malcölm 🇨🇦 @[email protected] ·

    Versa Networks Releases Advisory for a Vulnerability in Versa Director, CVE-2024-45229

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #patchyourshit
  56. Geeky Malcölm 🇨🇦 @[email protected] ·

    Versa Networks Releases Advisory for a Vulnerability in Versa Director, CVE-2024-45229

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #patchyourshit
  57. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Apple Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #apple #patchyourshit
  58. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Apple Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #apple #patchyourshit
  59. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Adobe Releases Security Updates for Multiple Products

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #adobe #patchyourshit
  60. Geeky Malcölm 🇨🇦 @[email protected] ·

    #Microsoft Releases September 2024 Security Updates

    cisa.gov/news-events/alerts/20

    #PatchYourShit

    #microsoft #patchyourshit