Tracking
Vulnerabilities
The bugs that reshaped the industry, taken apart one at a time: the flawed assumption underneath, the path to exploitation, and what it cost the people who ran the software.
The library
2 of 9 write-ups rated high. Each one is the analysis I wanted to find when it landed.
- CVE-2017-0144 Exploited8.1high
EternalBlue: RCE in SMBv1
A flaw in Microsoft SMBv1 allowed remote code execution from a crafted packet. Weaponised by WannaCry and NotPetya into some of the costliest malware outbreaks on record.
Microsoft PoC
- CVE-2014-01607.5high
Heartbleed: memory disclosure in OpenSSL
A missing bounds check in the OpenSSL TLS heartbeat extension let anyone read up to 64KB of server memory per request — including private keys.
OpenSSL PoC