早前の研究

漏洞链接

• PHP 5.4.34 unserialize UAF exploit
  • http://blog.knownsec.com/2016/06/php-5-4-34-unserialize-uaf-exploit/
• Samba 3.0.37 EnumPrinters 堆内存溢出漏洞
  • http://blog.knownsec.com/2015/05/samba-3-0-37-enumprinters-memory-corruption/
• Linux drm_legacy_lock_free 空指针引用bug分析
  • http://blog.knownsec.com/2015/09/linux-drm_legacy_lock_free-null-pointer-dereference-analysis/
• PHP 7 ZEND_HASH_IF_FULL_DO_RESIZE Use After Free 漏洞分析
  • http://blog.knownsec.com/2015/08/php-7-zend_hash_if_full_do_resize-use-after-free-analysis/
• ImageMagick popen_utf8命令注入 漏洞报告
  • http://blog.knownsec.com/2016/05/imagemagick-popen-remote-command-execution-vulnerability/
• 华硕路由器9999端口远程命令执行研究报告
  • http://blog.knownsec.com/2015/01/report-of-asua-router-9999-port-remote-command-execution-v1/
• DokuWiki fetch.php SSRF漏洞与tok安全验证绕过分析
  • https://paper.seebug.org/230/
• Node.js CVE-2017-14849 漏洞分析
  • https://security.tencent.com/index.php/blog/msg/121