
cve-2024-30350-research-notes
Research notes documenting CVE-2024-30350, an out-of-bounds read in Foxit PDF Reader annotation handling, covering triage, disclosure, and defensive…

Research notes documenting CVE-2024-30350, an out-of-bounds read in Foxit PDF Reader annotation handling, covering triage, disclosure, and defensive…

Provides a proof-of-concept check script and documentation for CVE-2024-31969, a local privilege escalation in sudo's sudoedit, including affected…

CVE-2024-57551, CVE-2024-57552, CVE-2024-57553 advisories by Aman Bahiniya

SOC investigation of a CVE-2024-49138 exploitation alert using log analysis, threat intelligence, and endpoint containment.

Curated collection of proof-of-concept exploits for web vulnerabilities including cross-site scripting and SQL injection, with detailed technical…

Instrumented analysis and reproducibility materials for ECDSA timing leakage in OpenSSL CVE-2024-13176


Hello,

Security analysis project: Real-world CVE breakdown

CVE-2024-3094 - Checker (fix for arch etc)

CVE-2024-3094 exposed a backdoor in the XZ compression library, allowing remote SSH access by bypassing authentication. It’s a major supply chain…

Investigation into the XZ Utils backdoor (CVE-2024-3094): chronology, attack chain, risk to SSH, and supply-chain insights. Includes slides, sources,…

History of commits related to the xz backdoor Discovered On March 29, 2024: CVE-2024-3094.

Information for CVE-2024-3094

Verify if your installed version of xz-utils is vulnerable to CVE-2024-3094 backdoor

apocalypxze: xz backdoor (2024) AKA CVE-2024-3094 related links