# Escaping Linux Sandboxes via PipeWire (CVE-2026-5674) This post walks through a sandbox escape from a Flatpak application via PipeWire. The vulnerability was discovered using my automated research pipeline with `Claude Code` and `Opus 4.6` back in April 2026. It was an exciting find, as this was the first bug […]

# Exploiting Titan Quest Titan Quest is a hack-and-slash video game released in 2006. In 2016, THQ Nordic released an _Anniversary Edition_. In the version provided by GOG, several development tools are installed with the game. These allow for the creation of new maps, items, and effects. This article details […]

I recently ran into an interesting behavior on Windows that I found unintuitive so I figured other people may want to know about it too. An application can call `AddClipboardFormatListener` to register a callback that gets called whenever the clipboard contents change, like when you copy a file or some […]

# When AI Makes 0-Days Feel Like N-Days **Table of Contents** ## Introduction After my n-day analysis on net/tls bugs and exploit writing for a patched net/rxrpc bug, I moved on to 0-day bug hunting. With the help of AI, I found a UAF bug in net/sched, and went about […]

Hacking Lab Hacking Lab Home People Publications Contact Light Dark Automatic QueryHouse: Cross-DBMS Differential Testing with LLM and Query Transpilation Seoyeon Oh , Juhyun Song , Jaemin Park , Kwanghee Lee , Minae Hyeon , Minji Kim , Sehyuk Ka , Gwangwun Jung , Brian Pak , Insu Yun September […]

Automatic Program Repair (APR) has emerged as a critical technology for autonomously addressing software vulnerabilities. While recent advances in Large Language Models (LLMs) have enabled sophisticated agentic APR systems, existing approaches still struggle to generate patches for vulnerabilities whose root causes are difficult to identify. This happens because prior methods […]

(c) WUNDERWUZZI 2018-2026 Disclaimer: Penetration testing requires authorization from proper stakeholders. Information on this blog is provided for research and educational purposes to advance understanding of attacks and countermeasures to help secure the Internet. | Privacy

# Autonomous AI Intrusions Are Here: Lessons from the Hugging Face Compromise Hugging Face disclosed an intrusion that, according to them, was driven end to end by an autonomous AI agent system. Along similar lines, Sysdig recently published a blog on JADEPUFFER, which it assesses to be an agent-driven ransomware […]

# Rustifying Image Codecs in Chromium > A cross-team effort to make browser image decoding safer without slowing the web down. ## Introduction Image decoding is on the hot path in every modern browser. Page loads, “ tags, and favicons all require parsing bytes straight from the untrusted web. Media […]

On Ethereum block `25118335` at `2026-05-17T23:55:23Z`, attacker EOA `0x5abb91b9c01a5ed3ae762d32b236595b459d5777` called bridge dispatcher `0x71518580f36feceffe0721f06ba4703218cd7f63` and drained bridge-held assets to drainer `0x65cb8b128bf6e690761044cceca422bb239c25f9`. The trace shows a BTC-import and proof-processing flow followed immediately by bridge payouts, which is consistent with a logic error in the bridge’s import/proof path rather than a flash-loan or […]