grep -l "Flask" ./machines [1] sorted: date ▼

namediffosdatetags

Browsed medium linux 2026-01-10 Malicious Chrome MV3 extension uploaded to server-side browser achieved RCE via bash arithmetic evaluation in a Flask/bash backend, then escalated to root via .pyc injection into a world-writable __pycache__ directory of a sudo-allowed Python script. chrome extension·bash arithmetic evaluation·python pyc injection·sudo abuse·gitea·flask

no machines match that filter