# exploits.club Weekly Newsletter 84 - Stealing Exploits, Competition Misconfigs, Android Physical Memory, And More

DevFeed: [exploits.club Weekly Newsletter 84 - Stealing Exploits, Competition Misconfigs, Android Physical Memory, And More](<https://devfeed.tech/articles/exploits-club-weekly-newsletter-84-stealing-exploits-competition-misconfigs-android-physical-memory-and-more-32641.md>)

Original publisher: [Read original article](<https://blog.exploits.club/exploits-club-weekly-newsletter-84-stealing-exploits-competition-misconfigs-android-physical-memory-and-more/>)

Author: exploits.club

Published: 2025-08-28T15:00:41Z

Content type: article

Language: en

Sources: [exploits.club](<https://devfeed.tech/sources/exploits-club.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [ctf](<https://devfeed.tech/topics/ctf.md>), [race-condition](<https://devfeed.tech/topics/race-condition.md>), [HTTP](<https://devfeed.tech/topics/http.md>)

Tags: [analysis](<https://devfeed.tech/tags/analysis.md>), [ctf](<https://devfeed.tech/tags/ctf.md>), [cve](<https://devfeed.tech/tags/cve.md>), [exploits](<https://devfeed.tech/tags/exploits.md>), [http](<https://devfeed.tech/tags/http.md>), [race-condition](<https://devfeed.tech/tags/race-condition.md>), [rce](<https://devfeed.tech/tags/rce.md>)

## AI overview

This newsletter highlights a reproduced in-the-wild CrushFTP exploit involving a race condition triggered by two HTTP requests, a HITCON CTF challenge involving AARCH64 PAC and BTI mitigations and exploitation, and a postmortem of Shellphish's AIxCC submission.

## Source excerpt

Someone recently reached out any said it was supposed to be "anyway" instead of....Annnnnnyways 👇 In Case You Missed It... BSides London CFP Open Now - get-em in! Honestly...nothing else really happened this week. I finished Sword Of Kaigen Resources And Write-Ups From This Week: