7 stories tagged exploit, newest first.
620 points by ammar2 | 95 comments
A blog post describing a VSCode webview bug that lets an attacker steal a GitHub token with repo read/write access, including private repos, via a single click.
523 points by nolok | 223 comments
TechSpot news article about a researcher's claim that Microsoft built a BitLocker backdoor, with a released YellowKey exploit that bypasses encryption via USB and WinRE.
427 points by hetsaraiya | 97 comments
GitHub repository containing a proof-of-concept exploit for Nginx vulnerability CVE-2026-42945, called Nginx-Rift.
427 points by jviide | 152 comments
A Medium write-up describing a zero-click vulnerability chain in macOS triggered by a malicious Calendar invite.
658 points by ndiddy | 90 comments
Blog post by Ryan Miceli describing a strcpy buffer overflow exploit in Tony Hawk's Pro Skater games across GameCube, PS2, Xbox and Xbox 360.
816 points by q3k | 425 comments
GitHub repository with notes, a honeypot, and an exploit demo for the xz backdoor (CVE-2024-3094), including Go code and an OpenSSH patch.
372 points by Unroll0201 | 102 comments
GitHub repository with a universal local privilege escalation proof-of-concept exploit for CVE-2024-1086 in Linux nf_tables, affecting kernels v5.14 to v6.6.