Exploiting System Management Mode with a very very very very very very very long interrupt. It turns out that you can break SMM — the secure, ultra privileged execution environment running invisibly in the background of every x86 CPU — … Read more
Eaton • Jul 27, 2026 Copy Link Share Key Points / Summary VE Commercial Vehicles, a joint venture between the Volvo Group and Eicher Motors, builds and maintains a fleet management system called My Eicher for Indian commercial vehicle customers. … Read more
Versión en Español aquí; gh:v1ctorio/e2ee-slack Introduction Some time ago, while exploring Slack’s Block Kit reference, I noticed something peculiar: the video block. When I saw that it accepted a video_url, the first thing I thought was: how does it distinguish … Read more
We successfully exploited two discontinued network devices at DistrictCon’s inaugural Junkyard competition in February, winning runner-up for Most Innovative Exploitation Technique. Our exploit chains demonstrate why end-of-life (EOL) hardware poses persistent security risks: when manufacturers stop releasing updates, unpatched vulnerabilities … Read more
Download PDF
Introduction In today’s world of fast-paced development and continuous integration, security vulnerabilities can be easy to overlook. Recently, I discovered a severe exploit chain, starting from a publicly exposed .git directory, which led to a full server takeover. This blog … Read more
tl;dr: Many WordPress plugins use nonces and nothing else to authorize requests. This often has a potential for exploitation to gain privilege escalation. In this article, I elaborate on WordPress security features connected to nonces and AJAX/REST requests and describe … Read more
Posted by Seth Jenkins, Project Zero For a fair amount of time, null-deref bugs were a highly exploitable kernel bug class. Back when the kernel was able to access userland memory without restriction, and userland programs were still able to … Read more
Maintaining stability of the target Let’s say we send a beacon frame that uses the primitive to overwrite an area of kernel memory. There is going to be a problem at some point when the kernel subsequently tries to free … Read more
In this write-up we’re going to take a look at exploiting the Wii U’s USB Host Stack. Over the past few months I spent a lot of time reverse engineering USB related things on the Wii U. Overview The Wii … Read more