# exploits.club An exclusive newsletter for exploit developers, vuln researchers, and hackers This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## exploits.club Weekly(ish) Newsletter 94 - P20 VMWare Bugs, ExpDev With LLMs, Pixel 0-Click Bugs, and More DevFeed: [exploits.club Weekly(ish) Newsletter 94 - P20 VMWare Bugs, ExpDev With LLMs, Pixel 0-Click Bugs, and More]() Original publisher: [Read original article]() Author: exploits.club Published: 2026-01-30T16:00:22Z Content type: article Language: en Sources: [exploits.club]() Topics: [Security](), [Exploit](), [Large Language Model](), [Artificial Intelligence](), [Code](), [Claude](), [ChatGPT](), [Network architectures](), [P2P](), [Open Source](), [Linux]() Tags: [ai](), [chatgpt](), [code](), [exploit](), [linux](), [llms](), [network](), [open-source](), [peer](), [poc](), [rce](), [remote-code-execution](), [security]() ### AI overview This newsletter surveys recent security research, including experiments using Claude and ChatGPT to generate proofs of concept for QuickJS vulnerabilities, a wormable remote code execution chain in Command & Conquer, a MediaTek bootloader exploit, and VMware workstation research. ### Source excerpt Good morning friends....been a minute. But we are SO back. Annnnnyways 👇 In Case You Missed It... RE//verse Tickets Still On Sale - If you were just at DistrictCon, escape the snow-pocalypse to Florida next month OffensiveCon CFP - 30 days to get-em submitted! Resources And Write-Ups ## exploits.club Weekly(ish) Newsletter 93 - Old QEMU Bugs, Android Auto Bluetooth PoCs, BeeStation P20, and More DevFeed: [exploits.club Weekly(ish) Newsletter 93 - Old QEMU Bugs, Android Auto Bluetooth PoCs, BeeStation P20, and More]() Original publisher: [Read original article]() Author: exploits.club Published: 2025-12-11T16:24:59Z Content type: article Language: en Sources: [exploits.club]() Topics: [qemu](), [Exploit](), [vulnerability](), [Synology](), [Hardware](), [HTTP](), [container]() Tags: [bugs](), [exploit](), [exploits](), [firmware](), [hardware](), [newsletter](), [qemu](), [synology](), [vault](), [vulnerability](), [weekly]() ### AI overview This issue of the exploits.club Weekly(ish) Newsletter rounds up security write-ups and resources, including a QEMU privilege-level bug that can enable arbitrary writes, a Synology BeeStation exploit involving a stack-based buffer overflow, and research into the Cypherock X1 Vault hardware wallet. The supplied text ends before the final item is complete. ### Source excerpt Welcome back to your favorite "mostly weekly but sometimes whenever we feel like it" newsletter. Annnnnnyways 👇 In Case You Missed It... HEXACON Videos Are OUT Advent Of Pwn - PwnCollege's Advent Of Pwn ends today. If you haven't already given it a go, make ## exploits.club Weekly(ish) Newsletter 92 - S23 N-Day PoCs, Printer Overflows, DNG OOB Writes, And More DevFeed: [exploits.club Weekly(ish) Newsletter 92 - S23 N-Day PoCs, Printer Overflows, DNG OOB Writes, And More]() Original publisher: [Read original article]() Author: exploits.club Published: 2025-11-21T16:10:47Z Content type: article Language: en Sources: [exploits.club]() Topics: [Hacking](), [Exploit](), [Security](), [Vulnerabilities](), [Linux](), [Kernel](), [GPU](), [Qualcomm](), [samsung](), [Android](), [ctf](), [Advent of Code]() Tags: [android](), [code](), [ctf](), [exploits](), [gpu](), [hacking](), [kernel](), [linux](), [newsletter](), [printer](), [qualcomm](), [samsung]() ### AI overview The 92nd exploits.club Weekly(ish) Newsletter rounds up recent developer and security content, including Advent-themed CTFs, Advent of Code 2025, Binary Ninja 5.2, conference slides, an exploit for Qualcomm GPU microcode vulnerability CVE-2025-21479 on a Samsung S23, Linux KASLR research, and printer security flaws. ### Source excerpt We are so back. Annnnnyways 👇 In Case You Missed It... HEX ADVENT 2025: Crack the Advent, Conquer the Threat - STAR Labs has put together a Holiday Themed CTF open to women residing in Singapore or Malaysia. Advent of Code 2025 - It's almost the most wonderful time of ## exploits.club Weekly Newsletter 91 - Patch-gapping Browsers, Ubuntu LPEs, Bluetooth Int Underflows, And More DevFeed: [exploits.club Weekly Newsletter 91 - Patch-gapping Browsers, Ubuntu LPEs, Bluetooth Int Underflows, And More]() Original publisher: [Read original article]() Author: exploits.club Published: 2025-10-31T17:00:46Z Content type: news Language: en Sources: [exploits.club]() Topics: [Vulnerabilities](), [browsers](), [Ubuntu](), [Bluetooth](), [V8](), [Linux](), [Kernel]() Tags: [bluetooth](), [browsers](), [chrome](), [cve](), [exploit](), [kernel](), [linux](), [ubuntu](), [vulnerabilities]() ### AI overview The 91st exploits.club weekly newsletter rounds up exploit-development news and write-ups, including future architecture technologies, Pwn2Own Ireland results, a patch-gap V8 vulnerability in Alibaba's UC Browser, an Ubuntu kernel local privilege-escalation bug, and a Bluetooth GATT integer underflow. ### Source excerpt Welcome to exploits.club, spoooky edition. It's basically the exact same, except there is one mention of vMTE. Annnnnyways 👇 In Case You Missed It... Future Architecture Technologies: POE2 and vMTE - More pain and suffering in the works for exploit devs Pwn2Own Ireland Results - Congrats to the Summoning ## exploits.club Weekly Newsletter 90 - Fuzzing Rust Subsystems, Pwn2Own Near Misses, Linux 1-Days, And More DevFeed: [exploits.club Weekly Newsletter 90 - Fuzzing Rust Subsystems, Pwn2Own Near Misses, Linux 1-Days, And More]() Original publisher: [Read original article]() Author: exploits.club Published: 2025-10-23T17:00:02Z Content type: news Language: en Sources: [exploits.club]() Topics: [Fuzzing/Fuzz testing](), [Rust](), [vulnerability](), [Security](), [Linux](), [network security](), [Kernel](), [Parsing]() Tags: [fuzzing](), [kernel](), [linux](), [network-security](), [parsing](), [rce](), [rust](), [security](), [vulnerability]() ### AI overview This weekly newsletter rounds up security research and developer-related resources, including fuzzing of Rust code in the Windows kernel, a WatchGuard Fireware OS vulnerability analysis, and a near-miss Pwn2Own printer exploit write-up. ### Source excerpt Good thing that absolutely no drama whatsoever took place for US vuln research firms this week...annnnnyways 👇 In Case You Missed It... OffensiveCon CFP - Closes March 1st, 2026 so let the procrastination begin! RE//Verse CFP - These need to be in by November 14th, so a bit less procrastinating. ## exploits.club Weekly Newsletter 89 - iOS GPU Driver Bugs, Kernel Stack UAFs, Hardware Wallet Auth Bypasses, and More DevFeed: [exploits.club Weekly Newsletter 89 - iOS GPU Driver Bugs, Kernel Stack UAFs, Hardware Wallet Auth Bypasses, and More]() Original publisher: [Read original article]() Author: exploits.club Published: 2025-10-16T15:00:32Z Content type: article Language: en Sources: [exploits.club]() Topics: [iOS](), [Security](), [GPU](), [vulnerability](), [Hacking](), [Memory Safety](), [UEFI]() Tags: [firmware](), [gpu](), [hacking](), [ios](), [memory-safety](), [security](), [vulnerability]() ### AI overview This weekly newsletter rounds up security research and announcements, including an iOS GPU kernel driver vulnerability whose patched underflow could enable out-of-bounds read/write, though modern allocator hardening may prevent a practical exploit. It also covers x86 memory-safety instructions, Apple security bounty changes, and a Nokia Beacon 1 router teardown involving UART access, command injection, and password generation. ### Source excerpt Our NBA Finals game 7 prediction didn't go too well earlier this year, but mark these words now: Piastri and Lando are taking each other out at USGP this week. Annnnnnyways 👇 In Case You Missed It... Save the Date for OffensiveCon26 - May 15th and 16th of next ## exploits.club Weekly Newsletter 88 - kCTF RCAs, Tesla Shells, Remote Pointer Leaks, And More DevFeed: [exploits.club Weekly Newsletter 88 - kCTF RCAs, Tesla Shells, Remote Pointer Leaks, And More]() Original publisher: [Read original article]() Author: exploits.club Published: 2025-10-03T15:00:41Z Content type: news Language: en Sources: [exploits.club]() Topics: [Security](), [vulnerability](), [Linux Kernel](), [TLS (Transport Layer Security)](), [bug](), [macOS](), [Android](), [Cloud]() Tags: [analysis](), [android](), [aws](), [azure](), [linux](), [linux-kernel](), [macos](), [security](), [tls](), [vulnerability]() ### AI overview This weekly newsletter highlights security news and write-ups, including an OSS zero-day competition involving AWS, GCP, and Azure; the Android September Security Bulletin; a Tesla Telematics Control Unit ADB authentication bypass; an Apple macOS font vulnerability; and analysis of a Linux kernel TLS vulnerability. ### Source excerpt We hope everyone is enjoying their new t swizzle album with a pumpkin spice latte on the side...annnnnyways 👇 In Case You Missed It... ZeroDay Cloud - AWS, GCP, and Azure have teamed up to put on an OSS 0-day competition. Find bugs in the targets, demo them on ## exploits.club Weekly Newsletter 87 - NVIDIA Merlin Bugs, GrapheneOS's Allocator, Intel CPU Bugs, And More DevFeed: [exploits.club Weekly Newsletter 87 - NVIDIA Merlin Bugs, GrapheneOS's Allocator, Intel CPU Bugs, And More]() Original publisher: [Read original article]() Author: exploits.club Published: 2025-09-26T15:00:49Z Content type: news Language: en Sources: [exploits.club]() Topics: [Nvidia](), [GrapheneOS](), [Exploit](), [intel](), [PyTorch](), [recommendation systems](), [GPU]() Tags: [exploit](), [intel](), [nvidia](), [pytorch](), [rca](), [recommendation-systems](), [updates]() ### AI overview The 87th exploits.club weekly newsletter reviews developer and security news, including a remote code execution vulnerability in NVIDIA Merlin Transformers4Rec, GrapheneOS's hardened memory allocator, and an Intel GPU driver crash during power transitions. It also mentions Google Cloud VRP updates and other security resources. ### Source excerpt Happy Friday. Almost that time of the week again: Annnnnyway 👇 In Case You Missed It... Google Cloud VRP: Enhancing Transparency and Impact in Our Rewards Program - Some VRP updates for Google Cloud with more transparency and consistency, less ambiguity New chITchat by pamoutaf Episode - A chat with @PinkDraconian that ## exploits.club Weekly Newsletter 86 - KSMBD 0Clicks, Apple Ends Memory Corruption, Mini-Kernels in Zig, And More DevFeed: [exploits.club Weekly Newsletter 86 - KSMBD 0Clicks, Apple Ends Memory Corruption, Mini-Kernels in Zig, And More]() Original publisher: [Read original article]() Author: exploits.club Published: 2025-09-18T15:00:23Z Content type: article Language: en Sources: [exploits.club]() Topics: [Hacking](), [Exploit](), [Linux Kernel](), [Security]() Tags: [apple](), [exploits](), [kernels](), [memory](), [newsletter](), [weekly]() ### AI overview A weekly newsletter covering OrangeCon videos, an open DistrictCon CFP, a Linux kernel ksmbd exploit write-up, DEF CON car-hacking challenges, and Apple's Memory Integrity Enforcement research. ### Source excerpt Write a weekly newsletter, they said. It will be fun, they said....Annnnnnyway 👇 In Case You Missed It... OrangeCon 2025 Videos Online - Hours of new content...go check it out! DistrictCon CFP Still Open - Get em in by the end of the month! Resources And Write-Ups From This ## exploits.club Weekly Newsletter 85 -Fuzzing KSMBD, Kernel-Hack-Drill, Vibe-Crashing, And More DevFeed: [exploits.club Weekly Newsletter 85 -Fuzzing KSMBD, Kernel-Hack-Drill, Vibe-Crashing, And More]() Original publisher: [Read original article]() Author: exploits.club Published: 2025-09-04T15:00:32Z Content type: article Language: en Sources: [exploits.club]() Topics: [Fuzzing/Fuzz testing](), [Linux Kernel](), [vulnerability](), [Security](), [race-condition](), [Exploit](), [Ubuntu]() Tags: [exploits](), [fuzzing](), [kernel](), [linux-kernel](), [race-condition](), [security](), [vulnerability]() ### AI overview The 85th exploits.club weekly newsletter highlights work on fuzzing improvements and vulnerability discovery in ksmbd, including 23 reported bugs. It also covers Kernel-Hack-Drill research on exploiting CVE-2024-50264, a Linux kernel socket race condition resulting in use-after-free, and related exploitation constraints. ### Source excerpt New idea - let AI submit a different, buzzwordy talks to every CFP. What could go wrong? Annnnnnnnyways 👇 In Case You Missed It... 0-day Hunting Strategy with Eugene "Spaceraccoon" Lim - Following the release of his recent No Starch Press book, @spaceraccoonsec will be on tomorrow' ## exploits.club Weekly Newsletter 84 - Stealing Exploits, Competition Misconfigs, Android Physical Memory, And More DevFeed: [exploits.club Weekly Newsletter 84 - Stealing Exploits, Competition Misconfigs, Android Physical Memory, And More]() Original publisher: [Read original article]() Author: exploits.club Published: 2025-08-28T15:00:41Z Content type: article Language: en Sources: [exploits.club]() Topics: [Vulnerabilities](), [Exploit](), [ctf](), [race-condition](), [HTTP]() Tags: [analysis](), [ctf](), [cve](), [exploits](), [http](), [race-condition](), [rce]() ### AI overview This newsletter highlights a reproduced in-the-wild CrushFTP exploit involving a race condition triggered by two HTTP requests, a HITCON CTF challenge involving AARCH64 PAC and BTI mitigations and exploitation, and a postmortem of Shellphish's AIxCC submission. ### Source excerpt Someone recently reached out any said it was supposed to be "anyway" instead of....Annnnnnyways 👇 In Case You Missed It... BSides London CFP Open Now - get-em in! Honestly...nothing else really happened this week. I finished Sword Of Kaigen Resources And Write-Ups From This Week: ## exploits.club Weekly Newsletter 83: Windows Kernel and Xbox Exploit Research, Plus an LLM-Assisted Security Tool DevFeed: [exploits.club Weekly Newsletter 83: Windows Kernel and Xbox Exploit Research, Plus an LLM-Assisted Security Tool]() Original publisher: [Read original article]() Author: exploits.club Published: 2025-08-21T15:00:46Z Content type: article Language: en Sources: [exploits.club]() Topics: [Hacking](), [Windows](), [Linux Kernel](), [Large Language Model](), [Code]() Tags: [exploit](), [hacking](), [kernel](), [linux-kernel](), [llms](), [race-condition](), [vulnerability](), [windows]() ### AI overview This issue of the exploits.club weekly newsletter highlights a Phrack anniversary release, a Phrack CTF, research into a Windows kernel vulnerability that was adapted to target Xbox One, and a new LLM-related security analysis tool. The supplied text ends before the tool's details are complete. ### Source excerpt We are getting dangerously close to hacking fueled by PSLs. Get your cozy VS Code color schemes ready...Annnnnnyways 👇 In Case You Missed It... Phrack 4oth Anniversary Release - If you weren't lucky enough to get snag a physical copy from one of the recent cons, the digital ## exploits.club Weekly Newsletter 82 - Synology Decryption, AI Thought Traces, FortiWeb Auth bypasses, And More DevFeed: [exploits.club Weekly Newsletter 82 - Synology Decryption, AI Thought Traces, FortiWeb Auth bypasses, And More]() Original publisher: [Read original article]() Author: exploits.club Published: 2025-08-14T15:00:35Z Content type: news Language: en Sources: [exploits.club]() Topics: [Synology](), [Artificial Intelligence](), [Encryption](), [Hacking](), [Traces](), [SQLite](), [nginx]() Tags: [ai](), [blog](), [bug](), [hacking](), [newsletter](), [nginx](), [release](), [sqlite](), [synology](), [traces](), [weekly]() ### AI overview The 82nd exploits.club weekly newsletter rounds up security research and developer resources, including Synology encrypted archive decryption, AI agent thought traces from vulnerability assessments, Black Hat slides, a radare2 release, and other security research. ### Source excerpt We hope everyone enjoyed drinking and partying as a business expense Hacker Summer Camp. Annnnnyways 👇 In Case You Missed It... Black Hat Slides Out! - Most of the links now have the associated slides for you to checkout. radare2 6.0.2 Release - Bug fixes and new features Resources And ## exploits.club Weekly Newsletter 81 - Safari Spills, SonicWall Overflows, Pixel 8 KGDB, and More DevFeed: [exploits.club Weekly Newsletter 81 - Safari Spills, SonicWall Overflows, Pixel 8 KGDB, and More]() Original publisher: [Read original article]() Author: exploits.club Published: 2025-08-07T15:00:14Z Content type: news Language: en Sources: [exploits.club]() Topics: [vulnerability](), [browsers](), [Compiler](), [heap overflow](), [XSS](), [HTTP](), [Android](), [Kernel](), [debugging](), [Hardware]() Tags: [browsers](), [compiler](), [cve](), [debug](), [debugging](), [hardware](), [heap-overflow](), [kernel](), [newsletter](), [weekly]() ### AI overview The 81st exploits.club weekly newsletter rounds up security research and developer-oriented write-ups covering a Safari vulnerability, SonicWall SMA100 stack and heap overflows plus reflected XSS, and kernel debugging over a serial connection on a Pixel 8. It also mentions Project Zero disclosure guidelines, Pwn2Own Ireland, Phrack print copies, and an Interrupt Labs release. ### Source excerpt Your friendly neighborhood editor will BE at HACKER SUMMER CAMP! Just look out for a beard, black t-shirt, and backpack...you won't miss me. Annnnnnnyways 👇 In Case You Missed It... Print Copies Of Phrack - Snag yours if you'll be at one of the events! ## exploits.club Weekly Newsletter 80 - ITW Windows Bugs, Deterministic iOS Exploits, Pwn2Own Firefox Vulns, and More DevFeed: [exploits.club Weekly Newsletter 80 - ITW Windows Bugs, Deterministic iOS Exploits, Pwn2Own Firefox Vulns, and More]() Original publisher: [Read original article]() Author: exploits.club Published: 2025-07-24T15:21:15Z Content type: news Language: en Sources: [exploits.club]() Topics: [iOS](), [Firefox](), [Windows](), [bug](), [Exploit](), [Kernel](), [Fuzzing/Fuzz testing](), [IO](), [Mozilla]() Tags: [bugs](), [cve](), [exploits](), [firefox](), [fuzzing](), [ios](), [kernel](), [love](), [windows]() ### AI overview This issue of exploits.club Weekly Newsletter reviews recent security research and resources, including white-box fuzzing with AFL++, deterministic iOS kernel exploits extended to additional chipsets, an analysis of the Windows vulnerability CVE-2025-29824 and its use in the wild, and a Mozilla Firefox vulnerability discussed in connection with Pwn2Own. ### Source excerpt The Cameraman at that Coldplay concert pic.twitter.com/MHtqBxbwC6 -- Hater Report (@HaterReport_) July 18, 2025 Annnnnnnyways 👇 80 NEWSLETTERS 🎉 In Case You Missed It... Fuzzing 1001: Introductory white-box fuzzing with AFL++ - new course from OST2! Pwnie Nominees for 2025 - Released this week. Check them out!! Resources