complete guest-to-host escape in ppsspp emulator. more emulator escapes (+ pocs) dropping next week 🎮 🕹️
17,309 次观看
🐬🐬🐬 dolphin rce 🐬🐬🐬
205,952 次观看
Signal's Contact Discovery automatically sends your contact list information to an SGX enclave in the cloud. V12 broke into that enclave and leaked the key, allowing the server host to decrypt everything. Two separate critical bugs: arbitrary read and RCE. Here's how. 🧵
140,136 次观看
today we are releasing a qemu escape
330,525 次观看
We can use our Ghostscript exploits to directly attack KDE's file manager from a single link click in Chrome. This PoC Downloads the file, then pops open the file manager for unsandboxed RCE (lovingly refered to as the full chain from temu)
28,406 次观看
Saturday was national boyfriend day so we forgot to post, but here's a Libreoffice RCE
16,959 次观看
unauthenticated root RCE on TerraMaster TOS4 NAS appliances. (+free additional LPE) something light for sunday. bigger stuff this week! :-)
103,469 次观看
new fragnesia variant (unpatched)
68,578 次观看
XSS to full account takeover and wallet drain in Ditto. V12 found a deeplink parser bug that steals Nostr private keys with just one click. Here's how. 🧵
