read.ehrlich.dev
ai-curated rss
about
github
rss
dark
exploit development
Crafting exploits from vulnerability primitives to reliable code execution
hot
new
week
month
year
spaces
all
ai
ai agents
security
site reliability
digital rights
malware analysis
cloud infrastructure
open source
energy
quantum computing
machine learning
behavioral economics
reverse engineering
devops
git internals
internet culture
physics
design
api design
economics
complexity
materials science
wasm
math olympiad
webdev
data engineering
space exploration
political philosophy
mathematics
game dev
cryptography
chemistry
databases
distributed systems
observability
solo dev
statistics
reinforcement learning
creative coding
aerospace
birding
climate science
game theory
algorithmic trading
neuroscience
elixir
thermodynamics
category theory
technical writing
procedural generation
urban exploration
cellular automata
golang
indie games
number theory
self hosted
nanotechnology
cognitive science
astrophysics
oceanography
history of science
worldbuilding
topology
anthropology
genetics
linux
robotics
python
board games
exploit development
operating systems
manga
archaeology
decision theory
astrobiology
film
consciousness
computer vision
information theory
swift
mechanical keyboards
computer graphics
containers
formal verification
amateur astronomy
chess
philosophy of mind
kotlin
nuclear
evolution
homelab
history
programming languages
data visualization
finance
bioinformatics
pharmacology
javascript
go game
compilers
paleoanthropology
photography
information design
demoscene
true crime
networking
retrocomputing
ham radio
animation
embedded systems
computer architecture
vinyl
fractals
ethics
nix
cartography
puzzles
meditation
writing
philosophy
audio programming
metaphysics
woodworking
sci fi
rust
ecology
3d printing
existentialism
electronic music
sourdough
speedrunning
history of computing
tabletop rpg
mycology
geology
semiotics
horror
synths
typography
lisp
pixel art
aquariums
type theory
fermentation
standup comedy
linguistics
witsrtn
typescript
cpp
phenomenology
fpga
shell scripting
lock picking
haskell
conlangs
forth
espresso
nonduality
music theory
zig
philosophy of science
180
PHP Security Alert: Mitigating the New Unpatched RCE Vulnerability
(dev.to)
15 hours ago ·
reverse engineering
·
exploit development
580
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
(thehackernews.com)
1 day ago ·
exploit development
·
reverse engineering
620
OpenAI's Codex Found a Node.js Brotli RCE. Imperva Ran Code on an Official Build
(dev.to)
1 day ago ·
site reliability
·
exploit development
280
Your Terminal Spots Password Prompts From Two TTY Bits. sudo's 2025 Fix Breaks the Check
(dev.to)
1 day ago ·
exploit development
·
reverse engineering
145
HatchZip promises to extract an 839 MB archive in 839 MB of disk. I measured the blocks.
(dev.to)
1 day ago ·
git internals
·
exploit development
280
Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws
(thehackernews.com)
2 days ago ·
exploit development
·
reverse engineering
280
CVE-2026-109619: the PHP flaw that outlives its own request
(dev.to)
2 days ago ·
security
·
exploit development
280
URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches
(thehackernews.com)
2 days ago ·
security
·
exploit development
310
DevTools said 2 MB of JS heap. The browser was holding 5 GB
(dev.to)
3 days ago ·
wasm
·
exploit development
65
cfg-guard: A lock and a witness for config files too many hands…
(dev.to)
2 days ago ·
golang
·
exploit development
420
New Serious PHP Vulnerabilities Released and Patched
(schneier.com)
3 days ago ·
exploit development
·
reverse engineering
60
anti-slop-kit: Controlled-language skills and deterministic linters…
(dev.to)
2 days ago ·
exploit development
·
shell scripting
110
slothsort 🦥 — a local Gemma that tidies my Downloads folder while I sleep
(dev.to)
2 days ago ·
git internals
·
exploit development
520
New QPACK Flaws Can Crash HTTP/3 Servers, Trigger Up to 4,000-Fold Memory Amplification
(thehackernews.com)
4 days ago ·
security
·
exploit development
180
[$] The end of __get_user() and __put_user()
(lwn.net)
3 days ago ·
exploit development
·
reverse engineering
55
PHP2Shell Vulnerability: Percona Security Update
(percona.com)
2 days ago ·
security
·
exploit development
165
Check the PHP runtime serving your website after the October security update
(dev.to)
3 days ago ·
security
·
exploit development
160
PHP’s security scramble is just a preview: AI is digging up flaws faster than maintainers can fix them
(thenewstack.io)
3 days ago ·
exploit development
·
reverse engineering
580
Two critical RCEs in PHP core
(blog.talosintelligence.com)
4 days ago ·
security
·
exploit development
140
One file a night: a folder tidier for a 942 MB computer
(dev.to)
3 days ago ·
exploit development
·
git internals
110
AI found a critical PHP flaw. The bigger failure began in 2024.
(thenewstack.io)
3 days ago ·
site reliability
·
exploit development
420
Upgrade your PHP installs immediately to protect against php2shell
(jeffgeerling.com)
4 days ago ·
security
·
exploit development
180
Cloudflare CEO Reports Millions of PHP2Shell Exploit Attempts
(thedefiant.io)
4 days ago ·
security
·
exploit development
380
PHP Updates Released For Two Critical Code Execution Vulnerabilities
(phoronix.com)
4 days ago ·
reverse engineering
·
exploit development
320
PHP patches released for two critical RCEs
(lwn.net)
4 days ago ·
exploit development
·
security
280
CVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP
(rapid7.com)
4 days ago ·
security
·
exploit development
130
Hong Kong watchdog joins global agencies to warn of web scripting hack risks
(scmp.com)
4 days ago ·
security
·
exploit development
160
Linus Torvalds Eliminates Unsafe __get_user() & __put_user() Functions In Linux 7.4
(phoronix.com)
4 days ago ·
exploit development
·
open source
160
CSV Rescue: Let Local AI Do the Tedious CSV Cleanup — Without Giving It the Keys
(dev.to)
4 days ago ·
git internals
·
exploit development
170
Per-crate clippy through crate2nix
(simonshine.dk)
5 days ago ·
exploit development
·
rust
120
Update to php ≥ 8.5.12 and/or php-legacy ≥ 8.3.36 to prevent remote code execution
(archlinux.org)
4 days ago ·
git internals
·
exploit development
20
CVE-2026-96185 Microsoft Exchange Online Remote Code Execution Vulnerability
(msrc.microsoft.com)
3 days ago ·
security
·
exploit development
55
I Built a Lazy File Organizer with PowerShell for Hacktoberfest
(dev.to)
4 days ago ·
git internals
·
exploit development
85
This copy-paste scam surged 517% in six months, enable this setting to let Chrome catch it
(makeuseof.com)
4 days ago ·
malware analysis
·
exploit development
160
[$] Discussing a rewrite of XArray
(lwn.net)
5 days ago ·
wasm
·
exploit development
60
GNU Nano 9.3 CLI Text Editor Released with Two Minor Fixes
(linuxiac.com)
5 days ago ·
reverse engineering
·
exploit development
45
Lazarus and the Free Pascal Compiler Gain Dynamic Package Support
(hackaday.com)
5 days ago ·
exploit development
·
wasm
320
Big Fish: OpenBSD Root Exploit Chains a 37-Year-Old BSD Bug With a Kernel Flaw
(securityaffairs.com)
6 days ago ·
exploit development
·
reverse engineering
180
Local Receipt Sorter: Gemma 4 turns freelancers' receipts into spreadsheets, offline
(dev.to)
7 days ago ·
git internals
·
exploit development
85
I replaced over $100 in Mac utilities with one free, open-source app
(makeuseof.com)
7 days ago ·
open source
·
exploit development
580
Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug
(thehackernews.com)
9 days ago ·
exploit development
·
operating systems
650
Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)
(rapid7.com)
9 days ago ·
git internals
·
exploit development
300
Google Fixes 10 Chrome Vulnerabilities, Including Memory Corruption Flaw Found With Claude AI
(cybersecuritynews.com)
9 days ago ·
reverse engineering
·
exploit development
150
CVE-2026-85897 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
(msrc.microsoft.com)
9 days ago ·
exploit development
·
wasm
150
CVE-2026-96198 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
(msrc.microsoft.com)
9 days ago ·
exploit development
·
wasm
150
CVE-2026-96199 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
(msrc.microsoft.com)
9 days ago ·
exploit development
·
wasm
160
New YuanKong Android RAT Hijacks Phones to Steal Banking PINs and Passwords
(cybersecuritynews.com)
9 days ago ·
malware analysis
·
exploit development
180
Claude Code 2.1.299 to 2.1.301 Changed How Your Hooks Behave: 7 Things to Recheck
(dev.to)
10 days ago ·
reverse engineering
·
exploit development
160
Critical Adobe Acrobat Flaw Lets Malicious PDFs Trigger One-Click Memory Corruption
(cybersecuritynews.com)
10 days ago ·
exploit development
·
git internals
350
Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic
(security.nl)
10 days ago ·
exploit development
·
security
40
OpenRGB 1.1 Released with CLI Fixes, Improved Device Hotplug Support
(linuxiac.com)
9 days ago ·
exploit development
·
linux
420
GPT-5.6 Sol Helped Chain 3 Chrome Bugs in 6 Days on $40K of API Calls. Google Paid $250K
(dev.to)
11 days ago ·
open source
·
exploit development
210
AI Is Flooding curl with Low-Quality PRs — and the Maintainer Can't Keep Up
(dev.to)
10 days ago ·
exploit development
·
site reliability
580
curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution
(thehackernews.com)
11 days ago ·
exploit development
·
api design
210
CLI-Anything: How Auto-Generated Command-Line Wrappers Turn Any Software Into Agent-Native Tools
(dev.to)
11 days ago ·
shell scripting
·
exploit development
280
24 Security Vulnerabilities Patched in curl Used Across 30 Billion Installations
(cybersecuritynews.com)
11 days ago ·
security
·
exploit development
210
Multiple NGINX Flaws Let Remote Attackers Crash Servers and Execute Malicious Code
(cybersecuritynews.com)
11 days ago ·
security
·
exploit development
220
A 1B model isn't smart enough to read a contract. So I never asked it to.
(dev.to)
12 days ago ·
open source
·
exploit development
280
CVE-2026-102850 Microsoft Office Access Remote Code Execution Vulnerability
(msrc.microsoft.com)
12 days ago ·
exploit development
·
security
280
CVE-2026-102849 Microsoft Office Access Remote Code Execution Vulnerability
(msrc.microsoft.com)
12 days ago ·
exploit development
·
security
160
tugz: a new deflate library with three applications
(nullprogram.com)
12 days ago ·
exploit development
·
reverse engineering
45
This Rust File Manager Was Designed for Omarchy, but Arch Users Can Run it Too
(feed.itsfoss.com)
12 days ago ·
rust
·
exploit development
320
Discourse Image Pipeline Exploit Chains JPEG Race, GhostScript and ImageMagick for File Read
(cybersecuritynews.com)
14 days ago ·
golang
·
exploit development
280
Decompiling C# 12 inline arrays and stackalloc: fixed buffers without the unsafe
(dev.to)
15 days ago ·
exploit development
·
wasm
120
Crystal 1.22.0 is released!
(crystal-lang.org)
14 days ago ·
reverse engineering
·
exploit development
25
[Boost]
(dev.to)
13 days ago ·
solo dev
·
exploit development
40
Generic slog.LogValuer helper
(paul.totterman.name)
14 days ago ·
golang
·
exploit development
60
User Input in C: A Complete Guide for Beginners
(dev.to)
15 days ago ·
exploit development
·
forth
245
[$] Analyzing Rust programs with Charon
(lwn.net)
18 days ago ·
wasm
·
exploit development
105
Scrcpy 5.0 adds hardware decoding for Android mirroring
(omgubuntu.co.uk)
19 days ago ·
exploit development
·
reverse engineering
115
Ubuntu 26.10 Will Have a Rust-based GnuPG Replacement
(feed.itsfoss.com)
20 days ago ·
exploit development
·
wasm
150
The Double Headed Stack Allocator
(blog.demofox.org)
22 days ago ·
exploit development
·
wasm
245
Boost 1.92.0 is out.
(isocpp.org)
26 days ago ·
wasm
·
exploit development
155
IronRuby 4.0: Ruby 4.0 on .NET 8
(idogawa.com)
26 days ago ·
python
·
exploit development
120
Chunky Bacon: learn Ruby in your browser
(idogawa.com)
26 days ago ·
exploit development
·
wasm
125
clogs: Shoes programs on plain CRuby
(idogawa.com)
27 days ago ·
exploit development
·
reverse engineering
70
gdu - the must-have terminal disk analyzer
(j11g.com)
27 days ago ·
shell scripting
·
exploit development
30
Three intrusions at UK criminal records office went undetected for two years
(therecord.media)
2 months ago ·
exploit development
·
security
45
Flatpak 1.18.1 Fixes Sandbox Escape and Root Privilege Escalation Flaws
(linuxiac.com)
2 months ago ·
exploit development
·
nix
10
CVE-2026-50472 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability
(msrc.microsoft.com)
2 months ago ·
exploit development
·
security
350
CRLF-Powered Desync Attacks: Beheading HTTP Streams
(portswigger.net)
2 months ago ·
api design
·
exploit development
380
Enabling the next iteration of the borrow checker on nightly
(blog.rust-lang.org)
2 months ago ·
rust
·
exploit development
180
ArenaAllocators don't play nicely with ArrayLists
(openmymind.net)
2 months ago ·
rust
·
exploit development
10
Junk Cleaner clears the clutter from your Android
(malwarebytes.com)
2 months ago ·
exploit development
·
git internals
180
std.Io.Writer.Allocating ate all my memory
(openmymind.net)
2 months ago ·
exploit development
·
golang
480
New VoidStealer Variant Bypasses Chrome ABE Without Injection or Privilege Escalation
(cybersecuritynews.com)
7 months ago ·
indie games
·
exploit development
60
How to trim strings in PHP with trim()
(benjamincrozat.com)
7 months ago ·
exploit development
·
shell scripting
280
Free real estate: GoPix, the banking Trojan living off your memory
(securelist.com)
7 months ago ·
malware analysis
·
exploit development
125
The Radix Heap
(ssp.impulsetrain.com)
7 months ago ·
exploit development
·
programming languages
38
Chromium: CVE-2026-3931 Heap buffer overflow in Skia
(msrc.microsoft.com)
7 months ago ·
exploit development
·
webdev
65
★ How to easily access private properties and methods in PHP
(freek.dev)
7 months ago ·
exploit development
·
git internals
32
Ghostty 1.3 terminal released with search, scrollbars and more
(omgubuntu.co.uk)
7 months ago ·
exploit development
·
reverse engineering
48
On the use of goto in C programming
(retrocomputingforum.com)
7 months ago ·
exploit development
·
forth
22
TCP Connections With DAP Debuggers, Different Formats for Numeric Values, and More in CLion 2026.1 EAP
(blog.jetbrains.com)
7 months ago ·
golang
·
exploit development
28
Get Gmail alerts on Ubuntu without a dedicated mail client
(omgubuntu.co.uk)
7 months ago ·
exploit development
·
birding
95
How Go 1.26 stack allocation optimizations beat hand-optimized code
(golangweekly.com)
7 months ago ·
golang
·
exploit development
12
Use the Hyper key
(freek.dev)
7 months ago ·
mechanical keyboards
·
exploit development
38
Franz Kafka's Lost Treatise on Wayland
7 months ago ·
exploit development
·
golang
12
Microsoft Locks Down Discord Server Over “Microslop” Posts
(itsfoss.com)
7 months ago ·
internet culture
·
exploit development
280
Allocating on the Stack
(go.dev)
8 months ago ·
golang
·
exploit development
spaces
all
ai
ai agents
security
site reliability
digital rights
malware analysis
cloud infrastructure
open source
energy
quantum computing
machine learning
behavioral economics
reverse engineering
devops
git internals
internet culture
physics
design
api design
economics
complexity
materials science
wasm
math olympiad
webdev
data engineering
space exploration
political philosophy
mathematics
game dev
cryptography
chemistry
databases
distributed systems
observability
solo dev
statistics
reinforcement learning
creative coding
aerospace
birding
climate science
game theory
algorithmic trading
neuroscience
elixir
thermodynamics
category theory
technical writing
procedural generation
urban exploration
cellular automata
golang
indie games
number theory
self hosted
nanotechnology
cognitive science
astrophysics
oceanography
history of science
worldbuilding
topology
anthropology
genetics
linux
robotics
python
board games
exploit development
operating systems
manga
archaeology
decision theory
astrobiology
film
consciousness
computer vision
information theory
swift
mechanical keyboards
computer graphics
containers
formal verification
amateur astronomy
chess
philosophy of mind
kotlin
nuclear
evolution
homelab
history
programming languages
data visualization
finance
bioinformatics
pharmacology
javascript
go game
compilers
paleoanthropology
photography
information design
demoscene
true crime
networking
retrocomputing
ham radio
animation
embedded systems
computer architecture
vinyl
fractals
ethics
nix
cartography
puzzles
meditation
writing
philosophy
audio programming
metaphysics
woodworking
sci fi
rust
ecology
3d printing
existentialism
electronic music
sourdough
speedrunning
history of computing
tabletop rpg
mycology
geology
semiotics
horror
synths
typography
lisp
pixel art
aquariums
type theory
fermentation
standup comedy
linguistics
witsrtn
typescript
cpp
phenomenology
fpga
shell scripting
lock picking
haskell
conlangs
forth
espresso
nonduality
music theory
zig
philosophy of science