Maciej Domański

Summary: This is an author index page for Trail of Bits Blog posts by Maciej Domański, listing entries from 2023 through 2025 on topics including snapshot fuzzing for kernel-level testing, a Burp Suite Professional chapter in the Testing Handbook, introducing Semgrep to an organization, and a cURL audit. One listed post, dated September 18, 2023, reports 10 security vulnerabilities in the caddy-security plugin for the Caddy web server that could enable client-side code execution, OAuth replay attacks, and unauthorized access to resources.
What's compelling: The index surfaces a concrete finding worth noting: 10 vulnerabilities in a single SSO plugin for Caddy, a component deployed as a reverse proxy, where flaws can expose authentication flows across every application behind it.

Read the original at Trail of Bits Blog ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026