CVE-2025-23298: Getting Remote Code Execution in NVIDIA Merlin

September 24, 2025 | Peter Girnus CONTINUE READING

Running with Scissors: The Dangers of Cutting and Pasting Sample Code

Blog post

Running with Scissors: The Dangers of Cutting and Pasting Sample Code

May 02, 2018
Research, JSON

When Java throws you a Lemon, make Limenade: Sandbox escape by type confusion

Blog post

When Java throws you a Lemon, make Limenade: Sandbox escape by type confusion

April 25, 2018
Java, Oracle, Research

Inverting Your Assumptions: A Guide to JIT Comparisons

Blog post

Inverting Your Assumptions: A Guide to JIT Comparisons

April 12, 2018
Webkit, JavaScript, Research

The April 2018 Security Update Review

Blog post

The April 2018 Security Update Review

April 10, 2018
Microsoft, Apple, Adobe, Security Patch

Quickly Pwned, Quickly Patched: Details of the Mozilla Pwn2Own Exploit

Blog post

Quickly Pwned, Quickly Patched: Details of the Mozilla Pwn2Own Exploit

April 05, 2018
Mozilla, Pwn2Own, Exploit

Tales from HallwayCon – Busting Myths Over Adult Beverages

Blog post

Tales from HallwayCon – Busting Myths Over Adult Beverages

March 29, 2018
Pwn2Own, Research, Techniques

Pwn2Own 2018 – Day Two Results and Master of Pwn

Blog post

Pwn2Own 2018 – Day Two Results and Master of Pwn

March 16, 2018
Pwn2Own, Apple, Mozilla, Microsoft

Pwn2Own 2018 – Day Two Schedule

Blog post

Pwn2Own 2018 – Day Two Schedule

March 15, 2018
Mozilla, Apple, Pwn2Own

Pwn2Own 2018: Results from Day One

Blog post

Pwn2Own 2018: Results from Day One

March 15, 2018
Microsoft, Oracle, Pwn2Own, Apple

Welcome to Pwn2Own 2018: The Schedule

Blog post

Welcome to Pwn2Own 2018: The Schedule

March 14, 2018
Microsoft, Apple, Mozilla, Oracle, Pwn2Own, Google