jiva

Joined 15 years ago

Karma

33

Submissions

18

Member since

Dec 6

https://jiva.io/

View on Hacker News

Recent submissions

Comment · 6 months ago

Root cause analysis and full PoC. Coordinated disclosure — patch is available as of 4/4/2026

Dolibarr 23.0.0: PHP eval() whitelist bypass → RCE via two bugs (CVE-2026-22666) jivasecurity.com

2 jiva 6 months ago 1 comments

EspoCRM: Formula engine and path traversal → RCE in six requests(CVE-2026-33656) jivasecurity.com

1 jiva 7 months ago 0 comments

Comment · 3 years ago

Check out this project https://hackaday.io/project/184810-usb-c-cable-tester

Comment · 3 years ago

Sorry but I am skeptical. Unless you’ve managed to reverse engineer “almost any IP camera”, I’ll believe this when I see it.

Comment · 3 years ago

I was ghosted by Tenable after spending about 48 hours completing their CTF challenges, so I just posted the interview questions/challenges and my solutions to my GitHub.

https://github.com/jiva/tenable_zero_day_assessment

Comment · 4 years ago

Did you happen to have these thoughts when the CEOs were white males?

Comment · 5 years ago

I’m not hopeful they’ll release anytime soon considering how long the project has been in alpha.

Comment · 5 years ago

Sure: https://gist.github.com/jiva/954a22bafcafec2d594b5c3454a10b0...

Comment · 5 years ago

I use gdb dashboard

https://github.com/cyrus-and/gdb-dashboard

It makes for a very pleasant debugging experience

https://i.imgur.com/iw21sbU.jpg

Comment · 7 years ago

My phone preferably.

Comment · 7 years ago

Bank of America's ShopSafe is similarly garbage - it's a flash app that halfway works.

Comment · 7 years ago

Generating virtual credit card numbers is kind of a big sell for me. I double any other credit card companies will have anything comparable to Apple's UI/UX of it either.

Comment · 7 years ago

If your SSH session gets locked, you can kill the session without killing the terminal window by pressing Enter, ~, . (period)

Comment · 7 years ago

"there will be no updates, not even source-only security patches" from the man himself: https://mail.python.org/pipermail/python-dev/2018-March/1523...