Exploit Development122 A heap use-after-free in NASM's response-file parser (CVE-2026-6068) sounds boring — until the dangling pointer is reused as a filename for fopen().…
Application Security139 CVE-2025-49113 is a critical authenticated remote-code-execution flaw in Roundcube webmail — the default in cPanel, Plesk, and many hosting stacks — caused…
Hardware153 TREVEX is a post-silicon black-box CPU fuzzer from CISPA designed to discover data-flow transient execution vulnerabilities without needing RTL access, an ISA…
Exploit Development172 CVE-2025-54539 is a deserialization policy bypass in Apache.NMS.AMQP (≤ 2.3.0) that lets a single 290-byte AMQP message reach BinaryFormatter inside an unsuspecting…
