> cat ./research/old-wine-in-a-new-bottle-lxd-group-root.log
外部发表 STAR Labs ↗
Old Wine in a New Bottle: A Decade-Old lxd-Group Root, Re-Armed
复盘 Ubuntu Server 默认 lxd 组成员关系如何与现代 LXD 安装机制组合，重新形成一条无需输入 sudo 密码的本地提权链。
// CATEGORY_CHANNEL
# VulnerabilityAnalysis
4LOGS_FOUND
> cat ./research/race-against-the-patch-litellm.log
外部发表 STAR Labs ↗
Race Against The Patch: The Evolution of Four Exploit Chains in LiteLLM
围绕 Pwn2Own Berlin 2026，复盘 LiteLLM 四个版本中从低权限入口到容器 RCE 的四条利用链，以及补丁推进下不断重构攻击路径的过程。
> cat ./research/CVE-2026-41651-analysis.log
CVE-2026-41651 PackageKit TOCTOU 本地提权漏洞分析
> cat ./research/tp-link-wr841n-router-cve-analysis.log
TP-Link WR841N router CVE-2023-50224 and CVE-2025-9377
> cat ./research/cve-2025-32023-redis-rce-via-out-of-bounds-write.log
CVE-2025-32023 Redis 漏洞分析
> cat ./research/cve-2025-36463-sudo-chroot-elevation.log
CVE-2025-36463 Sudo_chroot Elevation of Privilege 漏洞分析
> cat ./research/cve-2025-0282-ivanti-connect-secure-vpn-stack-overflow.log
CVE-2025-0282 Ivanti Connect Secure VPN 栈溢出漏洞分析
> cat ./research/cve-2024-41592-vigor-stack-overflow.log
CVE-2024-41592 vigor 栈溢出漏洞分析
> cat ./research/cve-2024-21626-container-escape.log
CVE-2024-21626 容器逃逸漏洞分析
> cat ./research/cve-2023-4966-citrix-memory-leak.log