Pursuing M.Sc. in Cybersecurity at NFSU and interning at Cyndia. Focused on ethical hacking, penetration testing, and developing expertise in offensive security techniques.
CVE
π¨ CVE-2025-0927 is a heap overflow vulnerability in the HFS+ file system implementation of the Linux Kernel. By mounting a specially crafted HFS+ image, attackers can trigger a denial of service (crash) or potentially achieve arbitrary code execution. This flaw critically affects systems like Ubuntu 22.04, posing serious security risks if left unpatched. β οΈ
π₯CVE-2025-37899 is a critical use-after-free flaw in the Linux kernelβs ksmbd module, triggered by a race condition between session setup and teardown. It allows remote, unauthenticated attackers to crash the system or potentially execute code. Rated 9.8 CVSS, it highlights the growing role of AI in uncovering deep kernel-level threats.
π Dive into a deep technical breakdown of CVE-2025-1137 a high-severity command injection flaw in IBM Storage Scale. This blog explores reverse engineering insights, real-world exploitation, PoCs, and detection strategies tailored for red teamers and defenders.