SLF Digest

We are the Security Liberation Front. We liberate information security research from the skewed metrics of conferences, academia, social media, and journalism. Each quarter we publish a selection of public research works that we feel are respectable enough that they will still be of interest a few years from now.

Follow @slffish for announcements.

• RegreSSHion - Remote unauthenticated vulnerability in OpenSSH https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh-server https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt
• When Samsung meets MediaTek: the story of a small bug chain https://www.sstic.org/media/SSTIC2024/SSTIC-actes/when_vendor1_meets_vendor2_the_story_of_a_small_bu/SSTIC2024-Article-when_vendor1_meets_vendor2_the_story_of_a_small_bug_chain-rossi-bellom_neveu.pdf
• EUCLEAK: https://ninjalab.io/eucleak/ https://ninjalab.io/wp-content/uploads/2024/09/20240903_eucleak.pdf
• PassPort: Forwarding TCP ports through Passkey servers to bypass censorship. https://github.com/c-skills/passport
• We Spent $20 To Achieve RCE And Accidentally Became The Admins Of .MOBI https://labs.watchtowr.com/we-spent-20-to-achieve-rce-and-accidentally-became-the-admins-of-mobi/

• XZ Utils backdoor in liblzma and JiaT75's operation https://www.openwall.com/lists/oss-security/2024/03/29/4 https://tukaani.org/xz-backdoor/ https://www.wiz.io/blog/cve-2024-3094-critical-rce-vulnerability-found-in-xz-utils#latest-wiz-research-findings-as-of-april-3-2024-33 https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27
• Randar Minecraft exploit https://github.com/spawnmason/randar-explanation
• PuTTY biased ECDSA-P-521 nonces https://www.openwall.com/lists/oss-security/2024/04/15/6

2023 Q4