Day[0]

266 Episodes

1. [binary] OpenSSL Off-by-One, Java XML Bugs, and an In-the-Wild Samsung Chain

   Published: 11/10/2022
2. [bounty] Apache Batik, Static Site Generators, and an Android App Vuln

   Published: 11/8/2022
3. [binary] XNU's kalloc_type, Stranger Strings, and a NetBSD Bug

   Published: 11/3/2022
4. [bounty] A Galaxy Store Bug, Facebook CSRF, and Google IDOR

   Published: 11/1/2022
5. [binary] Edge Vulns, a SHA-3 Overflow, and an io_uring Exploit

   Published: 10/27/2022
6. [bounty] XMPP Stanza Smuggling in Jabber and a Cobalt Strike RCE

   Published: 10/25/2022
7. [binary] Some Browser Exploitation and a Format String Bug?

   Published: 10/20/2022
8. [bounty] GitHub to GitLab RCE and a new PHP Supply Chain Attack

   Published: 10/18/2022
9. [binary] i.MX Secure Boot Bypass and a Hancom Office Underflow

   Published: 10/13/2022
10. [bounty] Got UNIX Sockets and Some Filter Bypasses?

    Published: 10/11/2022
11. [binary] Pwning Scoreboards, uClibC, and PS5 Exploitation

    Published: 10/6/2022
12. [bounty] Akamai Cache Poisoning and a Chrome Universal XSS

    Published: 10/4/2022
13. [binary] SoCs with Holes, Crow HTTP Bugs, and Bypassing Intel CET

    Published: 9/29/2022
14. [bounty] Web3 Universal XSS, Breaking BitBucket, and WAF Bypasses

    Published: 9/27/2022
15. [binary] An iOS Bug, Attacking Titan-M, and MTE Arrives

    Published: 9/22/2022
16. [bounty] Reading GitLab Hidden HackerOne Reports and Golang Parameter Smuggling

    Published: 9/20/2022
17. [binary] Fuchsia OS, Printer Bugs, and Hacking Radare2

    Published: 6/2/2022
18. [bounty] A Zoom RCE, VMware Auth Bypass, and GitLab Stored XSS

    Published: 5/31/2022
19. [binary] Pwn2Own, Parallels Desktop, and an AppleAVD Bug

    Published: 5/26/2022
20. [bounty] Stealing DropBox Google Drive Tokens, a GitLab Bug, and macOS "Powerdir" Vulnerability

    Published: 5/24/2022