Posts

• Off-by-One Read in libcoap check_segment() Percent-Encoding Validation
  December 29, 2025
• Use-After-Free in libuv's uv_spawn() Error Path
  December 23, 2025
• Finding an Integer Underflow in PHP's HEIC Parser
  December 2, 2025
• zkHack BLS-Pedersen Challenge - How I Wasted 3 Hours Before Realizing the Challenge Was Already Solved
  November 16, 2025
• Finding Memory Exhaustion in KeePassXC (And Getting Downgraded to a Bug)
  October 28, 2025
• Finding a DoS in Google's Longfellow-ZK (And Getting Rejected)
  September 8, 2025
• CVE-2025-66221: Windows Device Name Bypass in Werkzeug's safe_join()
  July 22, 2025
• Agent Name Length Validation Bypass in SPIRE httpchallenge Plugin
  July 16, 2025
• CVE-2025-27210: Finding a Path Traversal Bug in Node.js
  May 23, 2025