Besides php2shell, anyone got a "favourite" CVE? One that impressed/scared/intrigued you the most? I think the Plex CVEs from earlier this year definitely rank up there for me
Commit
4fc9d1a
https://projectzero.google/2021/12/a-deep-dive-into-nso-zero-click.html
This has to the craziest shit I can imagine. Absolutely insane engineering effort

projectzero.googleA deep dive into an NSO zero-click iMessage exploit: Remote Code ExecutionPosted by Ian Beer & Samuel Groß of Google Project Zero We want to thank Citizen Lab ...