Tom Sellers

Security geek, packet abuser
Research Eng at
runZero, Inc (npub1jsz…ghgq)

http://LinkedIn.com/in/tomsellers
http://fadedlab.wordpress.com he/him/they/goofball

GitHub: https://github.com/TomSellers
Blog: https://fadedcode.net/

Last Notes

2025-10-06 22:50:21 GMT

Hey folks, if you run Redis you should be aware of a CVSS 10 vuln, CVE-2025-49844, which is a lua related RCE. Redis have release a patch for this and 3 other CVEs. According to Wiz, this vuln has existed for 13 years. That means forks such as Valkey may also be impacted. Valkey has also released updates to address the same CVEs.
Redis: https://www.runzero.com/blog/redis/
Valkey: https://www.runzero.com/blog/valkey/
#Security #Redis #Valkey #CVE-2025-49844 #CVE202549844

2025-09-25 16:45:08 GMT

- reply

It looks like CISA typo'd one of the CVEs. They use CVE-2025-30333 instead of CVE-2025-20333.

2025-04-16 13:37:15 GMT

I see a couple online news sources stating that CISA has extended the funding. They are using statements such as the following:
> CISA says the U.S. government has extended funding to ensure no continuity issues with the critical Common Vulnerabilities and Exposures (CVE) program.
They leave out the sourcing on this. Who said it? How was it said? Via direct email requesting a comment? X post? Was it official or OTR? Like, I believe them but please provide SOME form of indication of provenance when claiming statements are made by the US Gov.
#Security #CISA #CVE

2024-12-08 15:29:47 GMT

New York City Mayor Eric Adams talking about the hunt for the CEO killer
> Adams was quoted by the Post as saying the police were withholding the suspect's name for now to deny him any advantage.
> “We don’t want to release that now,” the mayor said. “If you do, you are basically giving a tip to the person we are seeking and we do not want to give him an upper hand at all. Let him continue to believe he can hide behind the mask."
Do they... do they think he doesn't know his own name?
Mayor: /announces name
Killer: What?!? Oh, oh shit, that's me.. I didn't know that I did that! Um.. I better run!
Source: https://www.reuters.com/world/us/nyc-mayor-says-suspect-identified-unitedhealth-executives-murder-ny-post-reports-2024-12-07/

2024-10-29 19:06:17 GMT

- reply

What video card are you driving that with?
TIA