29 January 2025

CVE-2024-49138 Windows CLFS heap-based buffer overflow analysis – Part 2

In the previous article, we discussed […]

29 January 2025

CVE-2024-49138 Windows CLFS heap-based buffer overflow analysis – Part 1

CVE-2024-49138 is a Windows vulnerability detected […]

15 January 2025

From arbitrary pointer dereference to arbitrary read/write in latest Windows 11

In the last part of this […]

30 October 2024

An analysis of the Keycloak authentication system

Earlier this year, I was working […]

9 October 2024

Exploiting AMD atdcm64a.sys arbitrary pointer dereference – Part 3

In the previous part of the […]

2 October 2024

Exploiting AMD atdcm64a.sys arbitrary pointer dereference – Part 2

Welcome back! We concluded the previous […]

25 September 2024

Exploiting AMD atdcm64a.sys arbitrary pointer dereference – Part 1

After attending the OST2 – Exp4011 […]

28 May 2024

Multiple vulnerabilities in Eclipse ThreadX

“Why don’t you pick on projects […]

7 May 2024

Multiple vulnerabilities in RIOT OS

“Where there is parsing, there are […]

5 March 2024

Multiple vulnerabilities in RT-Thread RTOS

“Security is in the mind of […]

7 November 2023

OST2, Zephyr RTOS, and a bunch of CVEs

“When hackers tell me it’s so […]

18 January 2023

Nothing new under the Sun – Discovering and exploiting a CDE bug chain

“What has been will be again, […]