/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 google.github.io
CVE-2021-22555: Turning \x00\x00 into 10000$ | security-research
| | docfate111.github.io
CVE-2021-42327 GPU kernel driver SLUB overflow | The blog
2.6 parsecs away

Travel
| | [AI summary] A detailed explanation of a Linux kernel vulnerability (CVE-2021-42327) in the GPU driver, involving a SLUB buffer overflow that allows privilege escalation and arbitrary code execution through exploitation techniques like heap spraying and KASLR bypass.
| | allelesecurity.com
Use-after-free in CAN BCM subsystem leading to information disclosure (CVE-2023-52922)
2.8 parsecs away

Travel
| | In 2024, our research team noticed and wrote proofs of concept for a use-after-free vulnerability affecting the latest Red Hat Enterprise Linux 9 (RHEL 9). At the time, kernel version 5.14.0-503.15.1.el9_5. The vulnerability had been fixed on the Linux kernel upstream on July 17, 2023 [1][2]. After we reported it, it was backported to Red...
| | www.willsroot.io
Will's Root: CVE-2022-0185 - Winning a $31337 Bounty after Pwning Ubuntu and Escaping Google's KCTF Containers
2.9 parsecs away

Travel
| | Vulnerability Research on Low-Level Systems
| | mutur4.github.io
Sig-Return Oriented Programming Attack (SROP) | BinaryChunk's Blog
20.4 parsecs away

Travel
| This post covers yet another Binary Exploitation attack that is somewhat similar to return-oriented-programming (ROP) to understand how this works, we first need to understand Linux signals.