buherator

Technical tasks where LLMs proved to be incredibly useful for me:

- Fixing bugs in Gradle scripts
- Resolving systemd and Network Manager fights

I see a pattern emerging!


Original->

endpoint handles a POST request that includes a user-input value that is passed to the unsafe open() function provided by the open NPM package, which will cause OS command execution."
2/2

Original->

[RSS] Critical RCE Vulnerability CVE-2025-11953 Puts React Native Developers at Risk


jfrog.com ->

"The Metro development server [..] binds to external interfaces by default [...] The server%27s /open-url
1/2

[RSS] Four Bytes, One Lie: A SMAP-Free Confidence Trick on Kernel Pointers :: Out of Bounds


www.oobs.io ->

CVE-2025-50168


Original->

[RSS] BGGP6 Announcement


n0.lol ->


Original->

[RSS] Drawn to Danger: Windows Graphics Vulnerabilities Lead to Remote Code Execution and Memory Exposure


research.checkpoint.com ->


Original->

[RSS] deepSURF: Detecting Memory Safety Vulnerabilities in Rust Through Fuzzing LLM-Augmented Harnesses


github.com ->


Original->

[RSS] exploits.club Weekly Newsletter 91 - Patch-gapping Browsers, Ubuntu LPEs, Bluetooth Int Underflows, And More


blog.exploits.club ->

My clearest (and slightly frightening) measure of the passage of time is the weekly exploits.club newsletter.


Original->

[RSS] Dubious security vulnerability: Denial of service by loading a very large file


devblogs.microsoft.com ->


Original->

I completely forgot how horrible IDAPython is...


Original->

One thing I really appreciate at @kagihq is that they accept feedback - I just found and extended an issue about this:


kagifeedback.org ->


Original->

Why do online maps hide street names?! They literally had one job...


Original->

Alt text TBD, sorry!

Original->

It's been over a decade since I first heard a guitarist playing Black Dahlia Murder on a beat up classical guitar, it was about time to check out his band too...

Really cool stuff!


unhumanofficial.bandcamp.com ->

(TBDM classival cover is here:
1/2

[RSS] Micropatches Released for Windows Installer Elevation of Privilege Vulnerability (CVE-2025-50173)


blog.0patch.com ->


Original->

[RSS] [Blog] A Retrospective Analysis of CVE-2025-59287 in Microsoft WSUS


code-white.com ->


Original->

[RSS] Python - Zip64 Locator Offset Vulnerability


github.com ->

#NoCVE


Original->

Legendary DJ's reunite, I just don't get why anyone thought this MC would bring any value to the show...


www.youtube.com ->

I mean I can shout "Let's go" every few minutes for a ticket and drinks?


Original->

[RSS] Paint it blue: Attacking the bluetooth stack


www.synacktiv.com ->


Original->

[RSS] Windows ARM64 Internals: Exception & Privilege Model, Virtual Memory Management, and Windows under Virtualization Host Extensions (VHE)


connormcgarr.github.io ->


Original->

COM to the Darkside - Slides and resources from MCTTP 2025 Talk by Dylan Tran (d_tranman) and Jimmy Bayne (@bohops)


github.com ->


Original->

I know inference is _relatively_ cheap but do we really need to invoke Copilot for each commit message?


Original->

me that this goal is worth pursuing.

I'm looking for contributors, esp. for #BinaryNinja, #IDA and #radare2 scripting so we can bring all these worlds together!
2/2

Original->

Alt text TBD, sorry!

As a result of working on r4ghidra I set the ambitious goal to create REshare, an exchange format for #ReverseEngineering tools:


github.com ->

The code is still in its early days (literally) but the fact that it works with complex, real life binaries tells
1/2

You can watch my #r2con2025 talk here:

When worlds collide: r4ghidra


www.youtube.com ->

Slides:


scrapco.de ->


Original->

[RSS] exploits.club Weekly Newsletter 90 - Fuzzing Rust Subsystems, Pwn2Own Near Misses, Linux 1-Days, And More


blog.exploits.club ->


Original->

Alt text TBD, sorry!

My talk about integrating #ReverseEngineering tools is to be broadcasted in a couple of hours for #r2con2025:


rada.re ->

I'll release a ton of code and will be around on Discord for questions and comments.


Original->

Theory: the output file got cached and I was looking at old output (which is weird because I only use `with open(...)` blocks)


Original->

caching that affects my object reference but does not affect additional logging/exception throwing??

Any ideas?
3/3

Original->

file output contains garbage).

I add logging, the logs appear and show everything is fine.

Add more logs, exceptions even (to stop at a specific state). They run and show all is fine.

After I restart Ghidra the bug is gone.

To be clear: there must be some kind of bytecode
2/3