Original post has a comment by a possible 'black hat' who claims to have sold a cURL exploit [1]: >[ZERO_DAYS_4_EVA] LMFAO, $100 isn’t much of a reward, especi

Original post has a comment by a possible 'black hat' who claims to have sold a cURL exploit [1]: >[ZERO_DAYS_4_EVA] LMFAO, $100 isn’t much of a reward, especially since we sold a curl exploit to a third-party broker for much, much, MUCH more than that a few months ago. This exploit has survived multiple patches and your OSS fuzzer because the code isn’t being actively fuzzed. [1] https://daniel.haxx.se/blog/2021/03/30/howto-backdoor-curl/comment-page-1/#comment-24545 https://daniel.haxx.se/blog/2021/03/30/howto-backdoor-curl/c...