FreeBSD pf bypass when using IPv6(enricobassetti.it)

53 points by todsacerdoti 3 years ago | 38 comments

OpenBSD has a use-after-free allowing local privilege escalation to root(nvd.nist.gov)

243 points by linggen 3 months ago | 125 comments

Oracle VM VirtualBox – VM Escape via VGA Device(github.com)

54 points by serhack_ 1 year ago | 30 comments

A new vulnerability on IPv6 parsing in linux(nvd.nist.gov)

25 points by flyahn06 1 year ago | 6 comments

ASP.NET Security Feature Bypass Vulnerability(nvd.nist.gov)

77 points by zeraye 1 year ago | 50 comments

Unauthenticated Remote Code Execution in Erlang/OTP SSH(nvd.nist.gov)

183 points by kimi 1 year ago | 48 comments

Nvidia's Risky Business(stratechery.com)

325 points by jonbaer 2 months ago | 157 comments

Stratechery article by Ben Thompson analyzing Nvidia's business risks, opening with a historical anecdote about financier Jay Cooke.

Claude Code can debug low-level cryptography(words.filippo.io)

446 points by Bogdanp 11 months ago | 199 comments

Filippo Valsorda's blog post on using Claude Code to debug his new Go implementation of the ML-DSA post-quantum signature algorithm.

Ghidra by NSA(github.com)

419 points by handfuloflight 8 months ago | 208 comments

GitHub repository for Ghidra, the NSA's open-source software reverse engineering framework licensed under Apache 2.0.

PeerTube is a free, decentralized and federated video platform(github.com)

592 points by doener 3 months ago | 274 comments

GitHub repository for PeerTube, an AGPL-licensed ActivityPub-federated video streaming platform that uses P2P delivery in the browser.

CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq(lists.thekelleys.org.uk)

358 points by chizhik-pyzhik 5 months ago | 199 comments

Mailing list post by dnsmasq maintainer Simon Kelley announcing six CERT CVEs for long-standing dnsmasq vulnerabilities and a patched 2.92rel2 release.

Vulnerability reports are not special anymore(words.filippo.io)

358 points by goranmoomin 4 months ago | 204 comments

Blog post by Filippo Valsorda arguing that vulnerability reports no longer deserve special treatment from open source maintainers.