Original research, vulnerability disclosures, and CVE findings in real-world applications.
Two high-severity vulnerabilities in Databasement v1.5.5 chain together for full server compromise via cross-tenant data exfiltration and remote code execution.
How GNU Make's --eval flag, $(shell), and $(file) functions turn a permissive sudo rule into full root access — shell execution, arbitrary file read, and arbitrary file write — with no vulnerability involved.
How a misplaced chroot call in sudo 1.9.14 through 1.9.17 lets any local user — with no sudoers rule and no password — trick glibc into loading an attacker-controlled shared library as root. Full root cause analysis, lab reproduction, exploitation, and detection.
