Quote from: dkbit98 on August 29, 2019, 06:17:33 PM

Quote from: Security Engineer on August 29, 2019, 05:51:56 PM

Funny that a Hungarian also was in the project called Laszlo Hanyecz. Hungarians are invented a ton of things including the Hydrogen bomb, holography, self-replicating computer programs... Roll Eyes

Funny that you know a lot about Hungarians... but cant read or speak hungarian....

ELFOGATÓPARANCS ALAPJÁN KÖRÖZÖTT SZEMÉLY

Should we call Interpol?

You talk about a Hungarian human rights dude and it is totally off-topic. Again, you have serious problems, hallucinations, paranoia and we will see what else. I going to leave a feedback on your profile about that you only disrupting conversation. Interpol? Grin

Call them and tell them an engineer looks suspicious on BitcoinTalk. Roll Eyes

You can also contact the U.S. Cyber Command and tell them I'm using Bitcoin to buy zerodays for attacking, manipulating the votes in the U.S. election of 2020. Cheesy

Tell them I'm a Russian spy with a Huawei phone Shocked

!

Quote from: iasenko on August 29, 2019, 04:41:46 PM

Before to move to the bitcointalk domain, the forum with the same SMF was on bitcoin.org/forum (or something like that, if I remember correctly) . That was the first transition from sourceforge to SMF. Seems that the database was moved to the new domain so that's why you can find the posts prior to the domain registration date.

I do not have a PC around me but if you check the wayback machine you'll find all you need to know.
If you want I can check it out tomorrow

That would be great! Thanks!

Who is responsible for the security of this forum? Anyone noticed that there is an exploit for SMF 1.1.19?
Remote Memory Exfiltration Exploit

I do recommend to upgrade SMF to version 2.0.15!

Code:

SMF 2.0.15 November 19, 2017
===============================================================================

September 2017
! Fixed a minor $smcFunc bug in Search-Fulltext.php
! Fixed a saving Settings.php bools being reset bug
! Fixed a security issue (Reported by Daniel Le Gall from SCRT SA)

June 2017
-------------------------------------------------------------------------------
! Cache the admin search results in the session and avoid IE's 2083 character limit
! Fixed a Mark Board Read bug

May 2017
-------------------------------------------------------------------------------
! Fixed Proxy URLs not handling redirects properly due to case sensitivity
! Fixed SendTopic using incorrect Post data
! Fixed SSI.php having a bad login panel
! Fixed Maintenance Page having a double login button
! Fixed a minor unsigned int typo in MySQL DB
! Fixed Deprecated installer message for ftp_connection.
! Fixed a loop bug in custom search
! Fixed SM Stat collection
! Added SM Stat collection registration to the Admin Control Panel

SMF 2.0.14 May 14, 2017
===============================================================================
! Updating session handlers
! Adding HTTPS
! fetch_web_data now uses cURL, falling back to sockets
! Ported image proxy support from SMF 2.1
! Also added HTTPS for avatars
! Added a simple exception handler
! Check session while logging in
! Sanitize some fields to help guard against XSS
! Validate email addresses with PHP’s filter method
! Fix search highlighting to not mangle/expose some HTML
! Fix password acceptance when special characters were used in UTF-8;
! Correct some random logic errors in the profile area
! Use ampersands instead of semi-colons for PayPal’s return link
! Fix sending multiple MIME-Version headers in notification mail
! Fix sending multipel Content-Type headers in all requests

SMF 2.0.13 January 4, 2017
===============================================================================
! Some file versions didn't get modified in the 2.0.12 patch
! Added check and sanitization for $_REQUEST['u'] in LogInOut.php and Reminder.php
! Added check and sanitization for $_REQUEST['uid'] in Reminder.php
! Properly sanitize author's website for packages
! Added session check when uploading packages
! Added session check when copying template files from one theme to another
! The code to remove empty BBCode was sometimes breaking things (reported by @rjen; fix provided by Sesquipedalian)
! Remove hardcoded limits for safe_unserialize as it was causing cache problems
! Update the cal_max_year setting to 2030

SMF 2.0.12 July 7, 2016
===============================================================================
! Fixed word censor injection by disallowing an empty 'proper word'
! Fixed vulnerable unserialize() code by converting all instances to safe_unserialize()
! Added a more thorough safe_unserialize() function to prevent object injection
! Fixed a bug where leaving a custom profile field blank on registration that has an email mask would throw an error
! Fixed PayPal integration to comply with the new forced SSL
! Fixed a bug where notifications were sent for messages in inaccessible boards
! Fixed editor to make the editor work with Microsoft Edge
! Fixed issue where smiley popup is blank on iOS 9 devices
! Fixed WYSIWYG editor in mobile devices
! Fixed an undefined $_POST['icon'] in Sources/Post.php
! Fixed a minor bug in Login2()
! Fixed an issue where SMF doesn't recognize new domain names and considers these as invalid
! Fixed an issue where SMF would allow empty BBC
! Fixed an issue where theme variants could not be selected
! Fixed an issue where the file version of Subs-Post.php could have been 2.0.8 or 2.0.11. It will be updated to 2.0.12 in either case.
! Updated copyright year to 2016

SMF 2.0.11 September 18 2015
===============================================================================

September 2015
-------------------------------------------------------------------------------
! Security vulnerability patched (Reported by Andrea Palazzo - Truel IT)
! safe_unserialize() function added to Subs.php
! Instances of unserialize() with user-supplied data changed to safe_unserialize()

Security vulnerability patched (Reported by Andrea Palazzo - Truel IT) Author of the exploit mentioned above!