XS Leaks, arithmetic bugs & CVE deep dives.
An amazing CTF write-up on XS Leaks. Make sure you also read the unintended solution linked at the bottom of the page Cross-Site ETag Length Leak.
A new tool from the team at Trail of Bits to detect arithmetic bugs in Go Detect Go's silent arithmetic bugs with go-panikint.
Luke Jahnke is back with the first bug in Ruby 4 Ruby Array Pack Bleed.
A great CVE analysis on CVE-2025-61922. Funnily enough, I quickly discussed this bug in a recent talk on how to learn from CVE analysis CVE-2025-61922: Zero-Click Account Takeover on PrestaShop.
Another CVE analysis, inspired by my blog post The return to blogging and a blind SQL injection.
📬 Never Miss Quality Security Research
Get these curated picks delivered to your inbox every week:
- Hand-picked vulnerability research
- Practical security insights
- CVE deep-dives worth your time
- No fluff, just signal
