CoFeed

GitHub

Cybersecurity spotlight on bug bounty researcher @imrerad

For this year’s Cybersecurity Awareness Month, the GitHub Bug Bounty team is excited to feature another spotlight on a talented security res...

GitHub

Kicking off Cybersecurity Awareness Month: Researcher spotlights and additional incentives!

For this year’s Cybersecurity Awareness Month, GitHub’s Bug Bounty team is excited to offer some additional incentives to security researche...

GitHub

From object transition to RCE in the Chrome renderer

In this post, I'll exploit CVE-2024-5830, a type confusion in Chrome that allows remote code execution (RCE) in the renderer sandbox of Chro...

GitHub

3 ways to get Remote Code Execution in Kafka UI

In this blog post, we'll explain how we discovered three critical vulnerabilities in Kafka UI and how they can be exploited.

GitHub

3 ways to get Remote Code Execution in Kafka UI

In this blog post, we'll explain how we discovered three critical vulnerabilities in Kafka UI and how they can be exploited.

GitHub

Attack of the clones: Getting RCE in Chrome’s renderer with duplicate object properties

In this post, I'll exploit CVE-2024-3833, an object corruption bug in v8, the Javascript engine of Chrome, that allows remote code execution...