Jiqiang Feng | Innora AI Security
hbrpgmL'Érosion Calculée du Contrôle Territorial
When the signature verifier is itself remotely replaceable...
PatchProxy controls 146,173 methods in Alipay, including verifyApk() — the trust anchor recursively under attacker control. Turtles all the way down.
Batch-3 filed (10 new, 28 total):
- PatchProxy RCE: CVSS 9.8
- Lua VM RCE: CVSS 9.8
- Payment auth bypass: CVSS 9.1
Details: innora.ai/zfb/
