🔐 [CTF] Neo4j Cypher injection via Rust derive macros — full chain on HTB Sorcery A Rust web app +...
A Rust web app + Neo4j + a Gitea instance. Three CVEs in one chain. The interesting part isn't any single bug — it's how a typo in a derive(Debug) macro becomes a full database takeover without ever touching the Neo4j port directly.
What this covers:
• What a Cypher injection actually is (and why it's not "just SQL for graphs")
• Why Rust derive macros are a surprisingly fertile bug surface
• The 3-CVE chain on Sorcery (CVE-2026-31431 / 43284 / 43500)
AI vulnerability chaining overwhelms open source disclosure; 6% upstreamed, forcing trusted forks.
1. Basic Information Article Title: ArrayRef Rust Crate Supply Chain Attack Publisher:...
A rapid wave of AI-driven security vulnerabilities shows how chasing individual CVEs can be a losing battle. Learn how Red Hat’s…
The previous parts of this series were written from a comfortable distance. I read the Trend Micro...
Malicious updates turned routine builds into a delivery system for infostealer malware
There's a documented real-world case worth learning from: in 2025, researchers at Legit Security...
