Secfault Security Blog

• May 23, 2024 - Fuzzing the FreeBSD Kernel with Syzkaller and Nested Virtualization on a Linux Host
• April 23, 2024 - Deno: Digging Tunnels out of a JS Sandbox
• March 12, 2024 - OpenOlat - XML external entity (XXE) injection (CVE-2024-28198)
• June 19, 2023 - LibreOffice Arbitrary File Write (CVE-2023-1883)
• March 22, 2023 - Further Public 1Password Reports
• March 7, 2023 - Feeding Tasty Objects to Visual Studio's App Center SDK for Apple
• January 17, 2023 - Reverse-Engineering Wireless Kinetic Switches
• May 4, 2022 - 1Password Security Assessment
• March 15, 2022 - Code Execution in F*EX
• July 20, 2020 - Writing an iOS Kernel Exploit from Scratch
• April 22, 2020 - Pro-bono Pentests for COVID-19-Related Apps
• January 22, 2020 - Continuous Security
• August 30, 2019 - More on FreeBSD Refcount Overflows
• July 8, 2019 - Exploiting FreeBSD-SA-19:02.fd