raylax

public static String normalize(String text) {
    StringBuilder sb = new StringBuilder();
    int ci;
    int pi = -1;
    while ((ci = text.indexOf('/', pi + 1)) != -1) {
        if (ci == 0) {
            sb.append('/');
        } else {
            String s  = text.substring(pi + 1, ci);
            if (s.equals("..")) {

raylax

Security Advisories / Bulletins linked to Log4Shell (CVE-2021-44228)

Errors, typos, something to say ?

• If you want to add a link, comment or send it to me
• Feel free to report any mistake directly below in the comment or in DM on Twitter @SwitHak

Other great ressources

• Royce Williams list is different, listed by vendors responses:
• https://www.techsolvency.com/story-so-far/cve-2021-44228-log4j-log4shell/
• TBD

raylax

import sys
import tarfile


def check(path: str):
    no_asciis: list[str] = []
    with tarfile.open(path) as tar:
        for item in tar.getmembers():
            if item.name.isascii():
                continue