

Information for CVE-2024-3094

Instrumented analysis and reproducibility materials for ECDSA timing leakage in OpenSSL CVE-2024-13176

apocalypxze: xz backdoor (2024) AKA CVE-2024-3094 related links

Research notes documenting CVE-2024-30350, an out-of-bounds read in Foxit PDF Reader annotation handling, covering triage, disclosure, and defensive…

Verify if your installed version of xz-utils is vulnerable to CVE-2024-3094 backdoor

Curated collection of proof-of-concept exploits for web vulnerabilities including cross-site scripting and SQL injection, with detailed technical…


Provides a proof-of-concept check script and documentation for CVE-2024-31969, a local privilege escalation in sudo's sudoedit, including affected…

SOC investigation of a CVE-2024-49138 exploitation alert using log analysis, threat intelligence, and endpoint containment.

CVE-2024-3094 exposed a backdoor in the XZ compression library, allowing remote SSH access by bypassing authentication. It’s a major supply chain…

Security analysis project: Real-world CVE breakdown

Hello,

History of commits related to the xz backdoor Discovered On March 29, 2024: CVE-2024-3094.

CVE-2024-57551, CVE-2024-57552, CVE-2024-57553 advisories by Aman Bahiniya

Investigation into the XZ Utils backdoor (CVE-2024-3094): chronology, attack chain, risk to SSH, and supply-chain insights. Includes slides, sources,…

CVE-2024-3094 - Checker (fix for arch etc)