Disclosure for CVE-2026-53615. A uint32_t integer overflow in parse_dos_extended() — libblkid's EBR (Extended Boot Record) parser — lets a crafted disk image or USB stick trick the library into…
This writeup documents the discovery of three Remote Code Execution vulnerabilities found through taint analysis of PowerEditor's source code (v8.9.5). All three share the same root cause — data read…
During an audit of sudo's env.c module (1.9.17p2 / 1.9.18rc1), seven environment variables were identified that can be passed through to privileged processes when env_reset is disabled. These…
In this article we bring the phenomenon of the DNS Poisoning Attack into the laboratory, controlling the variables, reducing entropy, analyzing the behavior of the resolver; all to understand…
The evolution of quantum computing poses a direct threat to the cryptographic algorithms most widely used today. Schemes such as RSA and Diffie-Hellman, which form the backbone of modern…
