⟵ Advisories

[MZ-25-01] Via Browser for Android

ID: MZ-25-01

Release: February 27, 2025

Credits: Finn Westendorf

The full disclosure report can be found here.

Other News

PLAYGROUND

ROPing our way to RCE

February 7, 2025

From vulnerability to exploit - this post explores the journey of developing an ARM ROP chain to exploit a buffer overflow in uc-http. Dive into the process of reverse engineering, gadget hunting, and crafting a working exploit.

PLAYGROUND

Exploiting SSTI in a Modern Spring Boot Application (3.3.4)

January 8, 2025

Learn how to exploit Server-Side Template Injection (SSTI) in a Spring Boot application using the Thymeleaf templating engine. Special focus will be set on bypassing defenses in newer versions.