Friday Squid Blogging: Another Giant Squid Washes Up on New Zealand Beach

This one has chewed-up tentacles. Note that this is a different squid than the one that recently washed up on a South African beach. As usual, you can also use this squid post to talk about the security stories in the news that I havent covered. Read my blog posting guidelines here...

Remote Code Execution (RCE)

octobot is vulnerable to remote code execution. Lack of sanitization of Tentacles upload allows an attacker to inject and execute malicious package via uploading feature...

GHSA-FR75-X856-Q6J8 Octobot mishandles Tentacles upload

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled...

Octobot mishandles Tentacles upload

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled...

CVE-2021-36711

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled...

CVE-2021-36711

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled...

CVE-2021-36711

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled...

PYSEC-2022-235

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled...

PYSEC-2022-235

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled...

Remote code execution

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled...

CVE-2021-36711

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled...

CVE-2021-36711

The provided corpus confirms CVE-2021-36711 affects the OctoBot WebInterface, with remote code execution possible due to mishandled Tentacles uploads in versions before 0.4.4. The Red Hat, OSV, PacketStorm, ExploitDB, and NVD entries agree on the same description: vulnerability in the WebInterfac...

CVE-2021-36711: Unrestricted Upload of File with Dangerous Type

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled...

PT-2022-10536

Name of the Vulnerable Software and Affected Versions OctoBot versions prior to 0.4.4 Description The issue allows remote code execution due to mishandling of Tentacles upload in the WebInterface. Recommendations For versions prior to 0.4.4, update to version 0.4.4 or later to resolve the issue...

Friday Squid Blogging: 13-foot Giant Squid Caught off New Zealand Coast

It's probably a juvenile: Researchers aboard the New Zealand-based National Institute of Water and Atmospheric Research Ltd NIWA research vessel Tangaroa were on an expedition to survey hoki, New Zealand's most valuable commercial fish, in the Chatham Rise ­ an area of ocean floor to the east of...

Friday Squid Blogging: Calamari Squid Catching Prey

The calamari squid grabs prey three feet away with its fast tentacles. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...