AI tools, cybersecurity and development news aggregated from top sources — saved permanently with unique URLs.
SCTPhantom: An 18-Year-Old SCTP ASCONF Transport Use-After-Free · Tencent Zhuque Lab
Yes, given that the legacy SCT protocol has known security vulnerabilities such as sctphantom, the i…
tl;dv (Too Lazy; Didn't Validate): 181,874 Meetings Left Wide Open
The meetingscollection has no tenant isolation. Any authenticated tl;dv user can query every meeting…
TrustFall: When the Trusted Execution Environment Cannot Be Trusted
ByteRay researchers have published a blog on a set of vulnerabilities they are calling TrustFall, an…
Claude Code RCE: How a Malicious PR Triggers Code Execution
Abusing the trust boundary in Claude Code for RCE. Trust is never broken and that opens up a few ave…
From wallet drains to a 12-year-old CryptoJS entropy bug: the Ill Bloom investigation
submitted by /u/coinspect [link] [comments]…
Stored XSS in Django's admin via an unvalidated URLField display path (CVE-2026-15920)
submitted by /u/Sandwich_1337 [link] [comments]…
New Linux Bridge STP Vulnerability
A use-after-free vulnerability in the Linux kernel bridge (net/bridge) Spanning Tree Protocol (STP) …
Bugtraq is back 🥹
submitted by /u/loselasso [link] [comments]…
Hardware Hacking: From zero to a Pre-Auth Stack Buffer Overflow on Amazon's best-selling router
submitted by /u/Internal-Key64 [link] [comments]…
HEVD: From Stack Overflows to Modern Pool Grooming
Hi. I just published a four-part deep dive into windows kernel exploitation, progressing from classi…
Code Execution via Provisioning Packages
submitted by /u/netbiosX [link] [comments]…
Jackpot: a browser lab of 10 deliberately vulnerable LLM apps, one per OWASP LLM Top 10 category
submitted by /u/callmejackfrost1 [link] [comments]…