41554 blogs · [ { "id": "01a08c8f-2fb2-70e3-8fba-076a2f9fa98f", "title": "Guest-to-host heap overflow via integer overflow in VMXNET3 TSO segmentation (CVE-2026-59346)", "url": "https://cyberstan.co.uk/vmxnet3-tso-overflow/", "published_at": "2026-09-10T13:11:16+00:00" }, { "id": "01a08766-0e58-7273-932d-1dbd7fb0c51e", "title": "15-Year-Old Pre-Auth nginx RCE Across 13 Call Sites: Two-Pass Capture Clobbering CVE-2026-42533", "url": "https://cyberstan.co.uk/nginx-rce/", "published_at": "2026-07-15T14:59:32+00:00" }, { "id": "01a08766-0e58-7273-932d-1dbd802ff9d1", "title": "Unprivileged root via an out-of-bounds write in the FUSE readdir cache (CVE-2026-31694)", "url": "https://cyberstan.co.uk/fuse-readdir-oob/", "published_at": "2026-06-30T12:05:29+00:00" }, { "id": "01a08766-0e58-7273-932d-1dbd80cba86e", "title": "Unprivileged root via a use-after-free in DRM GEM change_handle (CVE-2026-46215)", "url": "https://cyberstan.co.uk/drm-lpe-linux/", "published_at": "2026-06-18T16:16:03+00:00" }, { "id": "01a08766-0e58-7273-932d-1dbd81463f92", "title": "Bounding against the wrong buffer: an OOB read/write in KVM SEV-SNP (CVE-2026-53360)", "url": "https://cyberstan.co.uk/sev-snp-oob/", "published_at": "2026-05-30T16:28:07+00:00" }, { "id": "01a08766-0e58-7273-932d-1dbd81d5b5a6", "title": "Guest-to-host escape via QEMU CXL Type 3 mailbox overflows", "url": "https://cyberstan.co.uk/cxl-guest-to-host-escape/", "published_at": "2026-05-05T18:53:39+00:00" }, { "id": "01a08766-0e58-7273-932d-1dbd824046a8", "title": "Use-after-free in CPython’s perf_trampoline via unsynchronised arena teardown", "url": "https://cyberstan.co.uk/python-uaf-1/", "published_at": "2026-01-02T14:10:50+00:00" }, { "id": "01a08766-0e58-7273-932d-1dbd82460a98", "title": "Technical Write-up: SQL Injection in Django ORM CVE-2025-64459", "url": "https://cyberstan.co.uk/cve-2025-64459/", "published_at": "2025-11-07T00:29:56+00:00" } ] posts Claim your blog

Blog · corpus.blog/blogs/cyberstan.co.uk/posts