Posts, page 2
2026
U-Boot TCP/NFS Vulnerabilities: Integer Underflow and Buffer Overflow in the World’s Most Popular Bootloader
Three CVEs in U-Boot’s network stack: one unchecked TCP header length that gives two reads past the packet, and an NFS path overflow past a 2048-byte buffer.
Four Vulnerabilities in barebox: From DHCP Parsing to EFI PE Loading
Four CVEs in barebox: an unbounded DHCP option scan, two ext4 parsing flaws, and a PE virtual-size integer overflow in the EFI loader.
Rebuilding a Security Researcher’s Mind in an AI: the Method, the Rig, and What It Cannot Do Yet
Building an AI that reverse-engineers undocumented Windows internals and raises its own hypotheses. The method, the rig, and the limit it has not crossed.
Same Workflow, New Target: AI-Assisted Discovery of CVE-2026-29004 in BusyBox
CVE-2026-29004: a 9-year-old heap buffer overflow in BusyBox’s DHCPv6 client, with a full PoC walkthrough.
Finding a 15-Year-Old Zero-Day in strongSwan with AI-Assisted Code Analysis
CVE-2026-25075: an integer underflow in strongSwan’s EAP-TTLS AVP parser, present since 2010, found with a multi-pass AI analysis workflow.