PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

RCE in Ladybird

calif.io | research | #rce | #vulnerability-research | #browser | #madbugs | #ladybird
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

# RCE in Ladybird When Bruce told me he wanted to hack Ladybird, my first thought was: why does the monk want to find bugs in a bug? Bruce Dang and Thai Duong April 24, 2026 madbugs Contents 1....
Published
Collected

Related coverage

research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · crowdstrike.com
CrowdStrike Protects Customers from Threats Delivered via PHP2Shell
The Falcon platform provides out-of-the-box visibility and detection coverage for post-exploitation activities of CVE-2026-109618 and CVE-2026-109619.
research · slcyber.io
More Critical Bugs in Adobe Experience Manager: Pre-Auth RCE
Chaining an unauthenticated bulk import, an in-band XXE, leaked IMS credentials and Groovy execution into full pre-auth RCE on Adobe Experience Manager Cloud.
vulnerability · vercel.com
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
How Vercel and Hacktron coordinated a fix for a remote code execution vulnerability that reached Next.js image optimization through sharp, libvips, and libheif.
research · calif.io
[CVE-2026-64704] Apple MIE Exploitation Challenge
# Apple MIE Exploitation Challenge The first public bypass of Apple MIE on macOS 26.4.1. Dion Blazakis, Bruce Dang, and Josh Maine July 27, 2026 Covered by The Wall Street Journal and Financial...
research · calif.io
Dark Elevator (CVE-2026-50343)
# Dark Elevator (CVE-2026-50343) A pure-logic, 100% reliable path from a normal user to SYSTEM. Carlos Roque July 22, 2026 windowsmadbugs Contents 1. The Bugs 2. PoC 3. Disclosure Timeline > No...
Back