Tootfinder

Turns out the Mastodon version underlying #Trump's social media platform #TruthSocial is outdated and has a vulnerability that allows arbitrary remote code execution and DoS attacks.
In totally unrelated news: It is utterly ILLEGAL to hack into, sabotage, shutdown or destroy counter-de…

Ryan Baumann (@ryanfb@digipres.club)
I don't know who needs to hear this but #TruthSocial, which is running a forked version of Mastodon, does not from the source code appear to have appropriate mitigations in place for CVE-2023-36460, which theoretically allows attackers to create and overwrite any file Mastodon has access to, allowing Denial of Service and arbitrary Remote Code Execution https://nvd.nist.gov/vuln/detail/CVE-2023-36460 (probably other CVE's as well, but some rely on federation which Truth Social doesn't use?) #in…

Bienensaison? Ich hab da mal was vorbereitet!
(handgemalter #wandklexschmuck, auf #miniaturepainting #art #artjewellery #bees #watercolor #watercolour #fediart #mastoArt #creativeToots #bienen