nathan's blog.

Latest writing

02

  1. InstantDB Pre-Auth RCE via HoneySQL and Nippy

    How an anonymous InstantDB query became SQL injection and unsafe deserialization in the server process.

    Read article

  2. Analysis of CVE-2023-46214 + PoC

    CVE-2023-46214 is a Remote Code Execution (RCE) vulnerability found in Splunk Enterprise which was disclosed on November 16, 2023 in the Splunk security advisory SVD-2023-1104. The description of the vulnerability essentially states...

    Read article