Signal's Contact Discovery automatically sends your contact list information to an SGX enclave in the cloud.
V12 broke into that enclave and leaked the key, allowing the server host to decrypt everything.
Two separate critical bugs: arbitrary read and RCE.
Here's how. 🧵
surprise! bonus redis server RCE poc: github.com/v12-security/p…
use-after-free in tlsProcessPendingData(). patched in release 8.8.2.
Featuring some ctf z3 magic!
Stick around on our web page for 10 minutes and all your funds are gone.
Just connect your wallet to the dApp and enjoy some Temple Run. Unlock your wallet again and it’s empty 😇.
A silent signature extraction in @Rabby_io, leading to a full wallet drain. 🧵
surprise! bonus redis server RCE poc: github.com/v12-security/p… use-after-free in tlsProcessPendingData(). patched in release 8.8.2. Featuring some ctf z3 magic!
