blog

• Nginx RCE 2026-10-19
• GSSAPI Authentication State Confusion in OpenSSH sshd (CVE-2026-106555, CVE-2026-106553) 2026-10-17
• One Byte Too Far: Heap Buffer Overflow in Apache HTTP Server's mod_heartmonitor (CVE-2026-46729) 2026-10-03
• The Fourth Pickle: Unauthenticated Remote Code Execution in SGLang's Disaggregated Diffusion Server (CVE-2026-93088) 2026-09-22
• The Unguarded Setting: GPU-to-Browser Sandbox Escape in Chrome via GTK3's Gtk/Modules XSETTING (CVE-2026-76023) 2026-09-22