[MZ-26-01] TeamSpeak

ID: MZ-26-01

Release: May 27, 2026

Credits: Michael Imfeld

The full disclosure report can be found here.

Other News

COMPANY
We're Hiring!
March 12, 2026
We’re hiring! We are currently looking for a Penetration Tester and a Senior Red Teamer. Check out our open positions and reach out if you think you’d be a great fit.

RESEARCH
No Leak, No Problem – Bypassing ASLR with a ROP Chain to Gain RCE
November 10, 2025
Following a previous post on ARM exploitation, this post walks through extracting and analyzing modern IoT firmware to discover a previously unknown vulnerability. We then construct an ARM ROP chain that bypasses ASLR without an address leak to achieve unauthenticated RCE.