6/5/24, 3:00 AM
Coldfusion
5/14/24, 3:00 AM
Coldfusion
5/14/24, 3:00 AM
Coldfusion
5/14/24, 3:00 AM
Coldfusion
5/13/24, 3:00 AM
Coldfusion
5/13/24, 3:00 AM
Coldfusion
5/13/24, 3:00 AM
Coldfusion
CF Summit East 2024 Recap
Last week was the 2024 edition of CF Summit East in Washington DC.
From: South of Shasta: Software Development, Web Design, Training
5/9/24, 3:00 AM
Coldfusion
CF Summit East 2024 Recap
Last week was the 2024 edition of CF Summit East in Washington DC.
From: South of Shasta: Software Development, Web Design, Training
5/9/24, 3:00 AM
Coldfusion
CF Summit East 2024 Recap
Last week was the 2024 edition of CF Summit East in Washington DC.
From: South of Shasta: Software Development, Web Design, Training
5/9/24, 3:00 AM
Coldfusion
Left and Right Accept Negative Counts
8 ) { //strip https:// website = right(website, len(website)-8); } As long as you are doing that kind of check, you should not have any issue with unexpected change of behavior due to this change.
From: Pete Freitag's Homepage
5/2/24, 4:51 PM
Coldfusion
Left and Right Accept Negative Counts
8 ) { //strip https:// website = right(website, len(website)-8); } As long as you are doing that kind of check, you should not have any issue with unexpected change of behavior due to this change.
From: Pete Freitag's Homepage
5/2/24, 4:51 PM
Coldfusion
Left and Right Accept Negative Counts
8 ) { //strip https:// website = right(website, len(website)-8); } As long as you are doing that kind of check, you should not have any issue with unexpected change of behavior due to this change.
From: Pete Freitag's Homepage
5/2/24, 4:51 PM
Coldfusion
Bypassing Imperva SecureSphere WAF (CVE-2023-50969)
Background Imperva SecureSphere Web Application Firewall (WAF) is an on-premise security solution to inspect, monitor and block traffic to web applications.
3/27/24, 5:00 AM
Coldfusion
Bypassing Imperva SecureSphere WAF (CVE-2023-50969)
Background Imperva SecureSphere Web Application Firewall (WAF) is an on-premise security solution to inspect, monitor and block traffic to web applications.
3/27/24, 5:00 AM
Coldfusion
Bypassing Imperva SecureSphere WAF (CVE-2023-50969)
Background Imperva SecureSphere Web Application Firewall (WAF) is an on-premise security solution to inspect, monitor and block traffic to web applications.
3/27/24, 5:00 AM
Coldfusion
Speaking at CF Summit East 2024
The kind folks at Adobe have invited me back to speak at CF Summit East 2024 in Washington DC.
From: South of Shasta: Software Development, Web Design, Training
3/26/24, 3:00 AM
Coldfusion
Speaking at CF Summit East 2024
The kind folks at Adobe have invited me back to speak at CF Summit East 2024 in Washington DC.
From: South of Shasta: Software Development, Web Design, Training
3/26/24, 3:00 AM
Coldfusion
Speaking at CF Summit East 2024
The kind folks at Adobe have invited me back to speak at CF Summit East 2024 in Washington DC.
From: South of Shasta: Software Development, Web Design, Training
3/26/24, 3:00 AM
Coldfusion
Defending Against CVE-2024-20767 (ColdFusion Arbitrary File System Read)
Technical details for CVE-2024-20767 (ColdFusion Arbitrary File System Read) from APSB24-14 have now been publicly disclosed by the researcher who reported it to Adobe PSIRT: https://jeva.
3/25/24, 10:45 AM
Coldfusion
Defending Against CVE-2024-20767 (ColdFusion Arbitrary File System Read)
Technical details for CVE-2024-20767 (ColdFusion Arbitrary File System Read) from APSB24-14 have now been publicly disclosed by the researcher who reported it to Adobe PSIRT: https://jeva.
3/25/24, 10:45 AM
Coldfusion
Defending Against CVE-2024-20767 (ColdFusion Arbitrary File System Read)
Technical details for CVE-2024-20767 (ColdFusion Arbitrary File System Read) from APSB24-14 have now been publicly disclosed by the researcher who reported it to Adobe PSIRT: https://jeva.
3/25/24, 10:45 AM
Coldfusion
Fixinator fixes unscoped variables
Last week's Adobe ColdFusion security update disabled searchImplicitScopes by default.
From: Pete Freitag's Homepage
3/21/24, 5:39 PM
Coldfusion
Fixinator fixes unscoped variables
Last week's Adobe ColdFusion security update disabled searchImplicitScopes by default.
From: Pete Freitag's Homepage
3/21/24, 5:39 PM
Coldfusion
If You're Running an Intranet Connections Lucee Instance, Ensure That You've Change the Default Lucee Admin Password
Last week, researchers at Sprocket Security wrote about post-exploitation in Lucee via malicious extensions.
3/21/24, 10:50 AM
Coldfusion
If You're Running an Intranet Connections Lucee Instance, Ensure That You've Change the Default Lucee Admin Password
Last week, researchers at Sprocket Security wrote about post-exploitation in Lucee via malicious extensions.
3/21/24, 10:50 AM
Coldfusion