AI Writer Author: Ammar Askar Published: May 30, 2023 Source: http://blog.ammaraskar.com/vscode-rce/ Summary Security researcher Ammar Askar disclosed a remote code execution vulnerability in Visual Studio Code that could be triggered simply by opening an untrusted folder. The flaw stemmed from an undocumented core setting, _workbench.experimentsUrl, which was never registered as a “restricted” configuration. Because of this oversight, … Read more
Author: Ammar Askar Published: June 2, 2026 Source: https://blog.ammaraskar.com/github-token-stealing/ Summary A security researcher discovered a critical vulnerability in VSCode’s webview security model that allows an attacker to steal a victim’s GitHub authentication token — which carries full access to all of their repositories — through a single malicious link. The attack targets github.dev, GitHub’s browser-based … Read more
Patch Gap to Mobile Renderer RCE: Pwning Samsung Internet’s V8 on the Galaxy S25 Author: Hrvoje Mišetić, Jamie Hill-Daniel, William Liu (Otter Audits LLC / Crusaders of Rust Security Research Group) Published: April 1, 2026 Source: https://osec.io/blog/2026-04-01-patch-gap-to-mobile-renderer-rce/ Summary Researchers from Otter Audits LLC and the Crusaders of Rust Security Research Group demonstrated a full renderer … Read more
Exploiting Reversing (ER) series: article 04 | macOS/iOS (part 01) Author: Alexandre Borges Published: February 4, 2025 Source: https://exploitreversing.com/2025/02/04/exploiting-reversing-er-series-article-04/ Summary Security researcher Alexandre Borges has released the fourth installment of his Exploiting Reversing (ER) Series — a comprehensive, step-by-step research document series covering vulnerability research and exploit development across Windows, macOS, hypervisors, and browsers. Article … Read more
Here We Go Again: A Five-Bug Chain to Arbitrary APK Install on Samsung S25 Author: Sacha Kozma, Yichen Chai (Bugscale SA) Published: 30 April 2026 Source: https://bugscale.ch/blog/here-we-go-again-a-five-bug-chain-to-arbitrary-apk-install-on-samsung-s25/ Summary Researchers at Bugscale SA discovered and chained five vulnerabilities in the Samsung Galaxy Store application (version 4.6.02.7) to achieve silent, arbitrary APK installation on Samsung Galaxy S25 … Read more
