So many database implementations will have the option to save the data in the database to a file, which will then be loaded when the database process restarts. This is so the data will persist when the database process stops. Now in many database implementations, if you can write to this file, you can cause certain database operations like queries, to do other things, like leak additional data, or overwrite other records. The purpose of this project is to look at several different database implementations, investigate what can be done if you can write to the database save file, and general figuring out how these database implementations work.
Here are the different database implementations I looked:
Some recorded talks I did for this project:
Here is a list of CVEs that came from this project:
CVE-2021-45346
CVE-2022-27159
CVE-2022-29724