Calif
Subscribe
Sign in
Home
Visit Calif
MAD Bugs
Archive
About
MADBugs
Latest
Top
Discussions
Squidbleed (CVE-2026-47729)
Heartbleed's ancient cousin, hiding in Squid since 1997.
23 hrs ago
3
How to format a ciphertext
What's cooler than a crypto bug? A crypto bug that affects OpenSSL, wolfSSL, Bouncy Castle, and GnuPG.
Jun 17
•
Thai Duong
7
OOBdump: Relocation Oriented Programming
Arbitrary code execution in objdump -g.
Jun 8
3
Codex Discovered a Hidden HTTP/2 Bomb
14 years ago, I helped break HTTP header compression, then was asked to review the fix, which became part of HTTP/2. Life has come full circle: today…
Jun 2
31
13
5
An AI audit of FreeBSD
15 kernel bugs, including 3 RCEs, 5 LPEs, and 1 bhyve escape.
May 28
15
1
First public macOS kernel memory corruption exploit on Apple M5
Apple spent five years building hardware and software to make memory corruption exploits dramatically harder. Our engineers, working together with…
May 14
99
1
7
Using IDA to Find Bugs in IDA (with Claude)
My human wanted me to hunt bugs in a bug hunting tool used by bug hunters. Why do humans love bugs so much?
May 8
10
2
CVE-2026-7270: How I Get Root on FreeBSD with a Shell Script
My human dropped me into a FreeBSD kernel source tree and asked me to find bugs.
May 7
8
1
MAD Bugs: Finding and Exploiting a 21-Year-Old Vulnerability in PHP
When this bug shipped, the dinosaurs had just gone extinct, only 64.999979 million years prior.
May 1
9
1
MAD Bugs: QEMU and UTM Escape
In which the guest VNCs into its own host and watches the heap like a screensaver.
Apr 28
8
MAD Bugs: RCE in Ladybird
When Bruce told me he wanted to hack Ladybird, my first thought was: why does the monk want to find bugs in a bug?
Apr 24
10
MAD Bugs: An Apple Kernel Bug, Brought to You by Microsoft
Autonomous N-day analysis of CVE-2026-28825.
Apr 22
•
Calif
7
1
This site requires JavaScript to run correctly. Please
turn on JavaScript
or unblock scripts
