Evan Prodromou at 2013-07-24T17:13:00Z
Security alert: cross-site scripting vulnerability in pump.io 0.2.x and 0.3.x (master)
A security researcher who asked to remain anonymous identified several cross-site scripting vulnerabilities in pump.io. These attacks allow a user of a pump.io site to insert JavaScript code into the displayName property of a pump.io activity object (like a person, image, or note) which will be executed on other users' pages.
A new release of the 0.2.x (stable) branch has been made and is available in npm:https://npmjs.org/package/pump.io
The same patches have been made to the 0.3.x (master) branch and are available from Github.
All administrators should upgrade their pump.io servers as soon as possible to the tip of the master version or to version 0.2.4.Cyber Killer, Douglas Perkins, ostfriesenmärz, Ⓧⓞⓟⓗⓔⓡ and 3 others likes this.
arthurlutz, Olivier Mehani, Olivier Mehani, ostfriesenmärz and 7 others shared this.
I guess ident.ca has already been patched
Got it, thanks!
Thank you for telling us and fixing :)
Thanks man am a do that as soon as I get back home
Escuelas Libres at 2013-07-10T00:03:24+00:00
Datos abiertos para la educación científica - http://ur1.ca/el1x8ducuchu likes this.
ducuchu shared this.
CNTI at 2013-05-07T18:52:21+00:00
ducuchu likes this.
ducuchu, ducuchu, Jesus Alexis, Jesus Alexis shared this.
iloveubuntu.net at 2013-03-31T21:07:12+00:00
How to easily generate spectrograms in Ubuntu with Spek, simplistic handy utility !ubuntu http://ur1.ca/d850tducuchu likes this.
Renata Avila at 2013-02-08T23:34:03+00:00
#FOSS Groups for Women and Girls http://ur1.ca/ae8jfducuchu likes this.
l30bravo at 2013-01-22T23:13:21+00:00
Crea tu propio DVD de #Debian personalizado http://ur1.ca/clahdducuchu likes this.
Gatoso Oso at 2013-01-08T20:48:56+00:00
Ejercicios para evitar la tendinitis y el síndrome del túnel carpiano ur1.ca/2ixcx (si pasa mucho tiempo tecleando debería hacerlos)ducuchu likes this.
Octavio Rossell, Octavio Rossell, ducuchu, ducuchu shared this.
jmaslibre at 2013-01-06T14:31:37+00:00
#Octopress genera páginas estáticas, se ve muy interesante http://octopress.org/ creo que lo probaré :) #blog #manualesducuchu likes this.
Yusuf Felly at 2012-12-31T18:47:06+00:00
“How To Always Open An Application In A Specific Workspace [How To]”: http://identi.ca/url/74714009 !ubuntuducuchu likes this.
victorhck at 2012-12-31T19:47:27+00:00
ducuchu, EVAnaRkISTO likes this.
Excelente 100% recomendado xD ♻ @victorhck Software libre para una sociedad libre http://ur1.ca/cd8fs !freesoftware !softwarelibre !GNU !fsf
P00K4 at 2012-12-26T14:28:26+00:00
Free Software and Free Textbooks | Canadian Education Association (CEA) - http://ur1.ca/cad7jducuchu likes this.
Diego Cordoba at 2012-12-13T05:44:24+00:00
RD @bachitux 15 excelentes programas #OpenSource para la Terminal que dejó el 2012 http://goo.gl/eqHVy !Linux < #recomendadoducuchu, Adán Cabrera León likes this.
eepica at 2012-12-10T16:33:46+00:00
Lea(h), un libro de acertijos muy especial http://ur1.ca/byhvdducuchu likes this.
Gatoso Oso at 2012-12-04T00:19:07+00:00
Ahora puede instalar GNU/Linux con Windows 8 ur1.ca/bskwb #Microsoftducuchu likes this.
Escuelas Libres at 2012-11-20T14:52:13+00:00
Portugal publica catálogo de estándares abiertos. ODF, PDF y otros estándares son obligatorios - http://ur1.ca/b5i85ducuchu likes this.
Fernando dos Santos, Fernando dos Santos, Octavio Rossell, Octavio Rossell and 2 others shared this.
Arne Babenhauserheide at 2012-11-20T14:18:40+00:00
Human brain, internet and cosmology: Similar laws at work? http://ur1.ca/b5gto !scienceducuchu likes this.
Sociedad Astronómica de Puebla Germán Martínez Hidalgo A.C. at 2012-11-17T03:00:27+00:00
Ya puede descargar nuestro mapa estelar para la Noche de las Estrellas http://bit.ly/UsCXaT #NochedelasEstrellas #astronomía #Puebla #Méxicoducuchu likes this.
Monica at 2012-11-05T15:12:07+00:00
Disponibles los materiales del curso "Introducción al Derecho de Autor y las Licencias Libres" http://ow.ly/f1Qrh via @ccColducuchu likes this.
Ramón Ramón Sánchez, Ramón Ramón Sánchez, ducuchu, ducuchu shared this.
Marcelo Nicolas Manso at 2012-09-24T13:02:11+00:00
@d1cor jajaa no era para pasar chivo de mi blog, mejor pasar chivo de esa excelente biblioteca http://ur1.ca/4fjh1ducuchu likes this.
Monica at 2012-08-21T21:22:14+00:00
Llamado a propuestas para investigaciones en Open Data en países en vías de desarrollo, via @ocwnews http://ow.ly/d8ifUducuchu, Ricardo Chung likes this.
Ramón Ramón Sánchez, Ramón Ramón Sánchez shared this.