Exploit Development – Page 6

// Exploit Development

63 posts

Breaking the JIT: Exploiting a SpiderMonkey Type Confusion Bug

The article analyzes CVE-2025-14325, a SpiderMonkey Baseline JIT bug causing type confusion in inline caches. Incorrect assumptions about object shapes can lead…

oxfemale· Mar 31· 17 min ·39

From RCU Double Free to Root: Exploiting a Linux Kernel Race in cornelslop

Exploit Development20

Exploit Development exploitation

From RCU Double Free to Root: Exploiting a Linux Kernel Race in cornelslop

A DiceCTF write-up showing how an RCU double-free race in a Linux kernel module can be turned into a cross-cache exploit by…

oxfemale· Mar 31· 18 min ·20

Out-of-Cancel: A New Linux Kernel Race Condition Bug Class

Exploit Development35

Exploit Development exploitation

Out-of-Cancel: A New Linux Kernel Race Condition Bug Class

The article introduces the Out-of-Cancel vulnerability class in the Linux kernel, where workqueue cancellation APIs fail to guarantee object lifetime. This race…

oxfemale· Mar 25· 79 min ·35

← 1 … 5 6