fffvr (@FFFVR_) profile picture
Joined October 2023
Photo by fffvr (@FFFVR_)
[1/6] We survived the "RCE Linux" apocalypse which finally turned out to be a bunch of vulns in CUPS (printing softw for Unix). Writeup by @evilsocket is still funny and well-written but the real impact is very limited by the fact that CUPS is not typically installed in servers.
1
15
28
5,880
🚨 New advisory was just published! 🚨 A critical out-of-bound access vulnerability has been identified in the Linux Kernel. This vulnerability was disclosed by a security researcher participating in TyphoonPWN 2024. ssd-disclosure.com/ssd-advis…
8
23
3,860
fffvr retweeted
In the spirit of kicking a dead horse while it's down, here's a PoC for what *was* another n_gsm 0day: github.com/roddux/ixode This is patched in newer kernels since 67c3775689, but is probably still 0day for anything <6.6, or anything not on an LTS release. have fun
I released an writeup for the n_gsm vulnerability that is currently an issue. github.com/fff-vr/n_gsm_expl…
21
43
6,611
We (@vaber_b and I) have discovered a Google Chrome zero-day that is actively used in targeted attacks. It was just fixed as CVE-2024-4947 and we're going to reveal more details soon 🔥🔥🔥. Update now! chromereleases.googleblog.co…
4
44
2
182
32,278
fffvr retweeted
Support for Windows enums has just been added to auto-enum!
4
26
1
132
16,278
I don't often tweet about patched bugs, but here's one that looks interesting - let's discuss ZDI-24-195 or kernel commit 38d20c62903d669693a1869aa68c4dd5674e2544, in a short 🧵
2
31
1
107
29,223