We found an unauthenticated arbitrary file read in Gazebo Sim's WebsocketServer plugin where a single WebSocket frame reads any file on the server, including /etc/shadow and SSH keys.

We found an integer overflow in Bullet3's STL mesh loader where a crafted triangle count bypasses the sanity check, causing the parser to read 4 GB from an 88-byte heap buffer.

We fine-tuned a Flux Dev LoRA on 12 images to generate custom figurine designs in a specific art style, from data preparation to a working Gradio app.

We built a dashboard that aggregates over 14,000 publicly disclosed HackerOne bug bounty reports with POC detection, searchable filters, and weekly auto-updates.

A new module in TTPForge leveraging WhiteChocolateMacademiaNut tool to extract cookies from Chromium-based browsers without requiring root access.

A walkthrough of the latest AI security challenge released by Wiz called Prompt Airlines.