Using Lua To Break Redis (CVE-2025-46817)

YouTube Excerpt: Time to return to the new project. Our goal: successfully exploit the recent redis vulnerabilities, CVE-2025-49844, CVE-2025-46817 and CVE-2025-46818, and achieve remote-code-execution through injection of malicious lua scripts as payloads. I will be walking through the current process, writing down observations, in particular to take note of the state of various registers based on payload values, offset of injections, and how these values change in order to try and force program execution to jump somewhere we can predict. No execute is set on the stack and heap, so we will likely have to dig into ropchains as well...we'll see how far we can get today. Tools used: gdb, gef, python3, lua, linux Play My Game's Demo: https://evildojo.itch.io/projectrpg Game public source code: https://github.com/mikedesu/raylib-rpg-c Discord: https://discord.gg/gf74aVUHB9 Patreon: https://www.patreon.com/evildojo666 Twitter/X: https://www.twitter.com/evildojo666 Twitch: https://www.twitch.tv/evildojo666 Youtube: https://www.youtube.com/@evildojo666 Github: https://www.github.com/mikedesu #game #development #gamedev #gamedevelopment #developer #coding #coder #code #programming #programmer #software #linux #raylib #neovim #nvim #indie #Programming #CPlusPlus #Cpp #2d #indie #indierpg #indiegame #debian #ubuntu #demo #browsergame #gaming #pcgame #mobilegame #hacking #infosec #security #linux #lua #reversing #reverse #analysis

Time to return to the new project. Our goal: successfully exploit the recent redis vulnerabilities, CVE-2025-49844, CVE-2025-46817 and...

Read Full Article 🔍

Curious about Using Lua To Break Redis (CVE-2025-46817)'s Color? Explore detailed estimates, income sources, and financial insights that reveal the true scope of their profile.

Source ID: Rg0ifF7_JCg

Category: color style guide