6 min read
CVE-2021-26411: Internet Explorer JavaScript Engine Use-After-Free RCE
Analysis of CVE-2021-26411, a UAF vulnerability in the Internet Explorer JavaScript engine that the Lazarus Group exploited in real-world attacks
Read full articleTags
javascript
12 min read
CTF 2019 oob-v8: V8 Out-of-Bounds Read/Write Exploit
A step-by-step breakdown of a V8 OOB exploit: type confusion, addrOf/fakeObj primitives, and WASM RWX shellcode execution
Read full article