Old Wine in a New Bottle: A Decade-Old lxd-Group Root, Re-Armed
复盘 Ubuntu Server 默认 lxd 组成员关系如何与现代 LXD 安装机制组合，重新形成一条无需输入 sudo 密码的本地提权链。
Swing'Blog 有恨无人省
Please support the site operations by clicking ads.
Race Against The Patch: The Evolution of Four Exploit Chains in LiteLLM
1 month 2 weeks ago
围绕 Pwn2Own Berlin 2026，复盘 LiteLLM 四个版本中从低权限入口到容器 RCE 的四条利用链，以及补丁推进下不断重构攻击路径的过程。
Swing
CVE-2026-41651 PackageKit TOCTOU 本地提权漏洞分析
4 months 1 week ago
Swing
CVE-2025-36463 Sudo_chroot Elevation of Privilege 漏洞分析
4 months 1 week ago
Swing
Preempted: From ADB Service Call to Bootloader Unlock on Xiaomi
6 months ago
Swing
Qualcomm ABL Cmdline Injection: When Fastboot OEM Commands Don't Filter Space
6 months ago
Swing
Pickling the Mailbox: A Deep Dive into CVE-2025-20393
6 months ago
Swing
如何给 Linux 内核提交补丁：一次真实的踩坑记录
7 months ago
Swing
议题分享： 企业设备安全设备漏洞分析与利用
7 months ago
Swing
议题分享：Vigor2960 Memoirs Pursuit of the Elusive 0day & 1day
7 months ago
Swing
CVE-2025-0282 Ivanti Connect Secure VPN 栈溢出漏洞分析
7 months ago
Swing
CVE-2024-41592 vigor 栈溢出漏洞分析
7 months ago
Swing
CVE-2022-32548 DrayTeck 栈溢出漏洞分析
7 months ago
Swing
Real World CTF 5th writeup
7 months ago
Swing
从JustCTF 2023 中学到的一点关于 sqlite3 代码执行的方法
7 months ago
Swing
CVE-2022-42475-FortiGate-SSLVPN-HeapOverflow
7 months ago
CVE-2022-42475
Swing
CVE-2023-27997-FortiGate-SSLVPN-HeapOverflow
7 months ago
CVE-2023-27997
Swing
CVE-2023-4966 citrix 内存泄漏
7 months ago
Swing
CVE-2024-21626 容器逃逸漏洞分析
7 months ago
Swing
CVE-2024-3400 Palo Alto Networks PAN-OS命令注入漏洞
7 months ago
Swing
Checked
23 hours 48 minutes ago
努力是为了 站在万人中央 成为别人的光
Swing'Blog 有恨无人省 feed