OCHK0· SECURITY RESEARCH

ALL WRITEUPS

EVERY WRITEUP, INCLUDING THE PRACTICE NOTES

CVE-2026-25896: One Dot That Unmasks Every XML Entity

CVE-2026-25896 · CRITICAL · CVSS 9.3 · 970 WORDS · 2026-02-20

CVE-2026-7997: Local Privilege Escalation in Chrome's macOS Updater

CVE-2026-7997 · HIGH · CVSS 7.8 · 762 WORDS · 2026-06-24

CVE-2026-39365: Walking Out of Vite's Dev Server Through a .map File

CVE-2026-39365 · MODERATE · CVSS 6.3 · 928 WORDS · 2026-04-07

The Patch That Wasn't: An RCE Bypass in an Intel Open-Source Project

RESEARCH · BUG BOUNTY · 946 WORDS · 2026-03-11

Bypassing PIE: Leaking the Base and Landing the Shot

NOTE · TECHNIQUE · 616 WORDS · 2025-05-01

Buffer Overflow: From Overwrite to Control Hijack

NOTE · TECHNIQUE · 596 WORDS · 2025-04-30

x86-64 Shellcode Injection: Payloads That Actually Run

NOTE · TECHNIQUE · 619 WORDS · 2025-05-03