1. Overview of CVE-2026–65761

“The Fortress - Building the Shield, Breaking Your Own Attack, and Proving the Defense”

On the unmodified, stock MariaDB 13.0.1-rc Docker image, a chain of five steps gets an attacker from a low-privilege SQL account all the…

CVE-2026–39987 is a critical pre-authentication Remote Code Execution (RCE) vulnerability affecting Marimo, an open-source reactive Python…

Cryptographic flaw in THORChain's TSS implementation allowed three vulnerabilities to grant hackers $10.8 million

A comprehensive technical deep dive into the Windows TCP/IP IPv6 RCE bug, featuring root cause analysis and a complete lab setup guide.

From a GSM Heap Crash to Program Counter Control in FirmWire This is a prepared-lab walkthrough for turning the SA-RIOT Module 2 heap testcase into two deterministic program-counter (PC) control …

Proofpoint threat researchers uncovered state-aligned espionage groups deploying zero-day browser exploit chains in late August 2026. Field Details Actor or Group Suspected China-aligned espionage…

Most people believe that a hack is a single vulnerability that was discovered in a moment of inspiration. Reality is different though.

Hey everyone,