CVE-2024-2961 主要是 glibc 的 iconv 函式，在進行字元轉換時，因為呼叫 Escape Sequence 到輸出時沒有檢查邊界問題，因此可以造成 OOB Write，後續也利用這個 Off by one 來打達成 PHP 的 LFI to RCE 漏洞。
I'm Suzu. From BELL.
Cybersecurity Researcher, CTF Player, Windows Vulnerability Researcher.
Featured
See all postsLatest Writing
Writing ArchiveLecturer: jserv / Course: Computer Architecture 2026
Projects
All ProjectsBELL PR
Open Source
A local-first AI workbench for open-source contributions. An agent team builds the change, then you review every file, explain it back, and approve the pull request yourself.
AI Agents Open Source Developer Tools
Open The Door
Open Source
A browser-based CTF puzzle game. Explore the map, collect keys, and find a way to open the door.
CTF Game
CTFd
A CTF practice platform with cybersecurity challenges, flag submissions, and a scoreboard.
CTF Cybersecurity
GitHub Contributions
Public pull requests to projects beyond my own repositories.
- Merged PRs
- 17
- Open PRs
- 4
- Repositories
- 11
