Collaborate Disseminate
I am looking at some of the high security malloc implementations and omalloc and smalloc both look promising as an alternative to Google’s Malloc. But, instead of just taking my own opinion – what is the view of the community when it come… Continue reading Now that it is *almost* 2024, what are some of the most secure malloc implementations we have available?
I am trying to exploit a use-after-free that was previously patched for practice/to get good 🙂 I am trying to bypass ALSR and get code execution in the process.
The program allocates an object in the scope of a function, then frees it (ov… Continue reading UAF Exploitation Tips
I am studying an exploit of use-after-free called DirtyCred, it’s a recent exploit of flaws released in August 2022 allowing a privilege escalation, through this paper.
And I have a lot of misunderstanding around this, and I haven’t really… Continue reading DirtyCred: Free object through the vulnerability
I want to reproduce CVE-2022-32250. I found this this git repo as a repository for the exploit and a code proof of concept provided here.
So I installed Ubuntu 22.04 on VM, and installed kernel version 5.15.0-27, then installed libmnl-dev … Continue reading What is missing to reproduce CVE-2022-32250?
24 existing bugs fixed. And, we hope, numerous potential future bugs prevented. Continue reading Chrome patches 24 security holes, enables “Sanitizer” safety system
What’s wrong with this sequence? 1. Step into the road 2. Check if it’s safe 3. Keep on walki… Continue reading Irony alert! PHP fixes security flaw in input validation code
Desktop versions of the browser received a total of eight fixes, half rated high-severity. Continue reading High-Severity Chrome Bugs Allow Browser Hacks
A previous fix for the critical remote code execution bug was “incomplete,” according to VMware. Continue reading VMware Issues Updated Fix For Critical ESXi Flaw
Mozilla has fixed three high-severity flaws with the release of Firefox 81 and Firefox ESR 78.3. Continue reading Firefox 81 Release Kills High-Severity Code-Execution Bugs
Here’s the short version: Google just issued a Chrome update with a note that says, “This update includes 1 critical security fix.” Continue reading Critical bug in Google Chrome – get your update now