https://book.llcczz.org/categories/vulnerability-research/Recent content in Vulnerability Research on lcz's BlogHugoen-USFri, 05 Apr 2024 00:00:00 +0000https://book.llcczz.org/posts/xz-utils-backdoor-cve-2024-3094/Fri, 05 Apr 2024 00:00:00 +0000https://book.llcczz.org/posts/xz-utils-backdoor-cve-2024-3094/A near-miss that would have put a backdoor in sshd across major Linux distributions, undone by a curious engineer noticing sshd was 500ms slower.https://book.llcczz.org/posts/moveit-cve-2023-34362/Mon, 05 Jun 2023 00:00:00 +0000https://book.llcczz.org/posts/moveit-cve-2023-34362/How a pre-authentication SQL injection in a managed file transfer product became one of the largest data theft campaigns of 2023.https://book.llcczz.org/posts/spring4shell-cve-2022-22965/Wed, 30 Mar 2022 00:00:00 +0000https://book.llcczz.org/posts/spring4shell-cve-2022-22965/How Java Bean data binding turned into remote code execution on Spring MVC applications deployed as WAR files on Tomcat.https://book.llcczz.org/posts/log4shell-cve-2021-44228/Wed, 15 Dec 2021 00:00:00 +0000https://book.llcczz.org/posts/log4shell-cve-2021-44228/A week after disclosure, what we knew about the Log4j JNDI flaw, why the blast radius was so large, and how to find affected systems.https://book.llcczz.org/posts/proxylogon-cve-2021-26855/Wed, 10 Mar 2021 00:00:00 +0000https://book.llcczz.org/posts/proxylogon-cve-2021-26855/Notes on the four-vulnerability chain that let an unauthenticated attacker take over on-premises Exchange servers in early 2021.