We discovered an arbitrary file read vulnerability in Discourse's image pipeline by chaining a JPEG race condition with ImageMagick and Ghostscript.

A practical guide to setting up OpenCode, Claude-BugHunter, and Burp Suite MCP Server for automated HTTP history analysis and security…

Samsung Galaxy S26 hacked three times. OpenAI Codex falls to a single bug. Oracle AI Database chained with 5 zero-days. Here is the full Day 1 breakdown. #Pwn2Own #ZeroDay #ZeroHack

Watch me trying to find a Whatsapp nDay, thanks to Meta and inline compiling it's not that easy !

This post details an attack on Google’s internal APIs, bypassing authorization to exploit the GFile library to gain access to internal filesystems and storage.

A Flask cookie on developers.google.com was signed with a secret it carried inside itself. Pulling that secret out turned a forged session into code execution across Google's developer sites.

Team82 researched the attack surface of the Danfoss AK-SM 800A refrigeration controller platform and identified multiple vulnerabilities affecting the embedded web management interface. Team82 disclosed the vulnerabilities to Danfoss, which addressed them…

CVE-2026-81983: an Adobe Acrobat integer overflow vulnerability that corrupts memory when a malicious PDF is opened.

XBOW recently discovered and built a Chrome full-chain exploit affecting an estimated billion users globally.

Learn what happened when curl co-founder Daniel Stenberg requested an AI-powered security audit by AISLE.

A vulnerability in Broadcom’s proprietary WPS implementation enables unauthenticated attackers within WiFi range to leak memory and achieve unauthenticated remote code execution on millions of routers. This post covers its discovery through agentic vulnerability…

We put Claude Code, Codex and Gemini CLI through PortSwigger labs covering discovery, exploitation and validation. See how each performed.

CVE-2026-108097: how a Drupal Field UI callback led to file disclosure and RCE in a paired lab. The contributed-module writer remains unverified.

This was my first real bug bounty finding, and somehow, it turned into a Critical vulnerability with a $1,500 bounty.

Python scanner for CVE-2026-109618, CVE-2026-109619 and the php2shell session chains (handler mismatch + LFI). No external dependencies. - pentestershell/php2shellbt

Preface AWS announced the general availability of the AWS MCP Server on May 6, 2026. It is a managed remote Model Context Protocol (MCP) server.
An MCP server exposes certain tools/functions and lets your AI agent call them. It extends your AI agent’s capabilities.…

Diving into the Steam platform for local and remote code execution vulnerabilities.

Cursor, GitHub Copilot, Codex, VS Code and Claude Desktop each built a browser into their AI assistant, then enriched it beyond what a normal browser allows. Those enrichments broke the browser threat model, letting a web page or a local file reach the machine…

This is what I built for Pwn2Own Berlin 2026 — a completely handmade, logic-only Microsoft Edge Full Chain, with no memory corruption, and no AI at all! 🔥

How CVE-2026-16481 leaked OAuth tokens through Google MCP Toolbox SSRF, and how a $0 reward decision became a $9,760.44 bounty.