Reverse Engineering CVE-2026-2796: How Claude Built a Firefox WebAssembly Exploit
Original text: "Reverse engineering Claude’s CVE-2026-2796 exploit" — Evyatar Ben Asher, Keane Lucas, Nicholas Carlini, Newton Cheng, and Daniel Freeman, Anthropic Frontier Red Team (6 March 2026). The prose below is an independent technical summary; the code listings are reproduced verbatim from the source with attribution.
Executive Summary
In March 2026 Anthropic’s Frontier Red Team…
https://core-jmp.org/2026/07/cve-2026-2796-claude-firefox-webassembly-exploit/
Original text: "Reverse engineering Claude’s CVE-2026-2796 exploit" — Evyatar Ben Asher, Keane Lucas, Nicholas Carlini, Newton Cheng, and Daniel Freeman, Anthropic Frontier Red Team (6 March 2026). The prose below is an independent technical summary; the code listings are reproduced verbatim from the source with attribution.
Executive Summary
In March 2026 Anthropic’s Frontier Red Team…
https://core-jmp.org/2026/07/cve-2026-2796-claude-firefox-webassembly-exploit/
🔥3
CVE-2026-58635: How the Windows Narrator Braille Bug Escalates a Standard User to SYSTEM
Original text: "CVE-2026-58635: Windows Narrator Braille Local Privilege Escalation" (proof-of-concept) — DavidCarliez, GitHub (July 2026), released under the MIT License. Source code, scripts, tables and terminal output below are reproduced verbatim with attribution.
Executive Summary
CVE-2026-58635 is a local privilege-escalation vulnerability in an unlikely place: the Braille accessibility component that ships with Windows Narrator. Microsoft…
https://core-jmp.org/2026/07/cve-2026-58635-windows-narrator-braille-privilege-escalation/
Original text: "CVE-2026-58635: Windows Narrator Braille Local Privilege Escalation" (proof-of-concept) — DavidCarliez, GitHub (July 2026), released under the MIT License. Source code, scripts, tables and terminal output below are reproduced verbatim with attribution.
Executive Summary
CVE-2026-58635 is a local privilege-escalation vulnerability in an unlikely place: the Braille accessibility component that ships with Windows Narrator. Microsoft…
https://core-jmp.org/2026/07/cve-2026-58635-windows-narrator-braille-privilege-escalation/
🔥1
Direct $MFT Parsing: Reading NTFS Below the Monitored API Layer
Original text: “Direct $MFT Parsing” — S12 — 0x12Dark Development, on Medium. This article summarises the technique in our own words for readers of core-jmp.org; the ASCII pipeline diagram and the short C++ excerpts below are reproduced with attribution to illustrate the discussion. For the complete C++17 header, main runner, and YARA rule, follow the…
https://core-jmp.org/2026/07/direct-mft-parsing-ntfs-raw-enumeration/
Original text: “Direct $MFT Parsing” — S12 — 0x12Dark Development, on Medium. This article summarises the technique in our own words for readers of core-jmp.org; the ASCII pipeline diagram and the short C++ excerpts below are reproduced with attribution to illustrate the discussion. For the complete C++17 header, main runner, and YARA rule, follow the…
https://core-jmp.org/2026/07/direct-mft-parsing-ntfs-raw-enumeration/
🔥2
CVE-2026-58613: Use-After-Free in the Windows Cloud Files Mini Filter Driver (cldflt.sys)
Original text: “Microsoft Windows Cloud Files Mini Filter Driver CldiStreamCompleteRequest use-after-free vulnerability” — Marcin ‘Icewall’ Noga, Cisco Talos (July 17, 2026). Register dumps, decompiled listings and crash logs below are reproduced verbatim with attribution.
Executive Summary
Cisco Talos researcher Marcin ‘Icewall’ Noga disclosed CVE-2026-58613, a kernel-mode use-after-free in cldflt.sys — the Windows Cloud Files Mini…
https://core-jmp.org/2026/07/cve-2026-58613-cldflt-cloud-files-use-after-free/
Original text: “Microsoft Windows Cloud Files Mini Filter Driver CldiStreamCompleteRequest use-after-free vulnerability” — Marcin ‘Icewall’ Noga, Cisco Talos (July 17, 2026). Register dumps, decompiled listings and crash logs below are reproduced verbatim with attribution.
Executive Summary
Cisco Talos researcher Marcin ‘Icewall’ Noga disclosed CVE-2026-58613, a kernel-mode use-after-free in cldflt.sys — the Windows Cloud Files Mini…
https://core-jmp.org/2026/07/cve-2026-58613-cldflt-cloud-files-use-after-free/
👍3🔥1
CVE-2026-58532: An Integer Overflow in Windows tcpip.sys
Original text: “How I found an integer overflow in tcpip.sys (CVE-2026-58532)” — April Ivy (aprilpet), April Ivy’s Writing (aprl.pet), 17 July 2026. The prose below is a paraphrase; the call stack, code snippets and proof-of-concept are reproduced verbatim with attribution.
Executive Summary
Security researcher April Ivy discovered an unsigned 64-bit integer overflow in tcpip.sys, the…
https://core-jmp.org/2026/07/cve-2026-58532-tcpip-sys-integer-overflow/
Original text: “How I found an integer overflow in tcpip.sys (CVE-2026-58532)” — April Ivy (aprilpet), April Ivy’s Writing (aprl.pet), 17 July 2026. The prose below is a paraphrase; the call stack, code snippets and proof-of-concept are reproduced verbatim with attribution.
Executive Summary
Security researcher April Ivy discovered an unsigned 64-bit integer overflow in tcpip.sys, the…
https://core-jmp.org/2026/07/cve-2026-58532-tcpip-sys-integer-overflow/
😱4🔥2👍1
CVE-2026-58629: A Double-Free in dxgkrnl’s CreateAllocation Rollback
Original text: “July 2026 Patch Tuesday [CVE-2026-58629] Freeing the Wrong Allocation: a double-free in dxgkrnl’s CreateAllocation rollback” — gengstah, gengstah (personal blog), July 14, 2026. Disassembly, crash dumps and code below are reproduced verbatim with attribution captions.
Executive Summary
CVE-2026-58629 is a local elevation-of-privilege bug in dxgkrnl, the Windows Display Driver Model (WDDM) kernel component…
https://core-jmp.org/2026/07/cve-2026-58629-dxgkrnl-createallocation-double-free/
Original text: “July 2026 Patch Tuesday [CVE-2026-58629] Freeing the Wrong Allocation: a double-free in dxgkrnl’s CreateAllocation rollback” — gengstah, gengstah (personal blog), July 14, 2026. Disassembly, crash dumps and code below are reproduced verbatim with attribution captions.
Executive Summary
CVE-2026-58629 is a local elevation-of-privilege bug in dxgkrnl, the Windows Display Driver Model (WDDM) kernel component…
https://core-jmp.org/2026/07/cve-2026-58629-dxgkrnl-createallocation-double-free/
🔥2
[QuickNote] SolidPDFCreator – Mustang Panda Stage-1 Backdoor (Target India)
Original text: “[QuickNote] SolidPDFCreator – Mustang Panda Stage-1 Backdoor (Target India)” — AI, 0day in {REA_TEAM} (July 13, 2026). Code blocks, tables, diagrams, and technical artefacts are reproduced verbatim with attribution captions.
Executive Summary
SolidPDFCreator.dll is a sophisticated stage-1 backdoor loader disguised as a legitimate SolidPDF product, attributed to Mustang Panda and targeting India. The…
https://core-jmp.org/2026/07/solidpdfcreator-mustang-panda-stage-1-backdoor-india/
Original text: “[QuickNote] SolidPDFCreator – Mustang Panda Stage-1 Backdoor (Target India)” — AI, 0day in {REA_TEAM} (July 13, 2026). Code blocks, tables, diagrams, and technical artefacts are reproduced verbatim with attribution captions.
Executive Summary
SolidPDFCreator.dll is a sophisticated stage-1 backdoor loader disguised as a legitimate SolidPDF product, attributed to Mustang Panda and targeting India. The…
https://core-jmp.org/2026/07/solidpdfcreator-mustang-panda-stage-1-backdoor-india/
🔥2👍1
CVE-2026-49176 Exploit Development: WalletService to SYSTEM
Original text: “CVE-2026-49176 Exploit Development: WalletService to SYSTEM” — David Carliez, 17 July 2026. Code blocks, tables, and technical diagrams are reproduced verbatim with attribution.
Executive Summary
CVE-2026-49176 represents a critical local privilege-escalation vulnerability affecting Windows WalletService, a LocalSystem-hosted service that manages wallet operations through the public Windows.ApplicationModel.Wallet WinRT API. The vulnerability emerges from a…
https://core-jmp.org/2026/07/cve-2026-49176-walletservice-to-system/
Original text: “CVE-2026-49176 Exploit Development: WalletService to SYSTEM” — David Carliez, 17 July 2026. Code blocks, tables, and technical diagrams are reproduced verbatim with attribution.
Executive Summary
CVE-2026-49176 represents a critical local privilege-escalation vulnerability affecting Windows WalletService, a LocalSystem-hosted service that manages wallet operations through the public Windows.ApplicationModel.Wallet WinRT API. The vulnerability emerges from a…
https://core-jmp.org/2026/07/cve-2026-49176-walletservice-to-system/
😱3🔥1
GDID: The Windows Global Device Identifier
Original text: “GDID: The Windows Global Device Identifier” — Smukx, ZeroTrace Lab (July 18, 2026). Code blocks, commands, tables, and technical specifications reproduced verbatim with attribution.
Executive Summary
Every Windows installation receives a unique 64-bit Global Device Identifier (GDID) that serves as Microsoft’s canonical device-level tracking mechanism. The GDID originates as a plaintext registry value…
https://core-jmp.org/2026/07/gdid-windows-global-device-identifier/
Original text: “GDID: The Windows Global Device Identifier” — Smukx, ZeroTrace Lab (July 18, 2026). Code blocks, commands, tables, and technical specifications reproduced verbatim with attribution.
Executive Summary
Every Windows installation receives a unique 64-bit Global Device Identifier (GDID) that serves as Microsoft’s canonical device-level tracking mechanism. The GDID originates as a plaintext registry value…
https://core-jmp.org/2026/07/gdid-windows-global-device-identifier/
🔥2
Breaking ONLYOFFICE in 3 steps: OnlyShells vulnerability chain
Original text: “Breaking ONLYOFFICE in 3 steps: OnlyShells vulnerability chain” — BI.ZONE Vulnerability Research team, BI.ZONE (July 21, 2026). Code, CVE metadata, figures and the demonstration video below are reproduced with attribution captions.
Executive Summary
OnlyShells is a chain of five vulnerabilities discovered in ONLYOFFICE Desktop Editors during a fall 2025 security assessment. Chained together,…
https://core-jmp.org/2026/07/onlyoffice-onlyshells-vulnerability-chain/
Original text: “Breaking ONLYOFFICE in 3 steps: OnlyShells vulnerability chain” — BI.ZONE Vulnerability Research team, BI.ZONE (July 21, 2026). Code, CVE metadata, figures and the demonstration video below are reproduced with attribution captions.
Executive Summary
OnlyShells is a chain of five vulnerabilities discovered in ONLYOFFICE Desktop Editors during a fall 2025 security assessment. Chained together,…
https://core-jmp.org/2026/07/onlyoffice-onlyshells-vulnerability-chain/
🔥4😱3👍2
KernelCallbackTable Process Injection
Original text: “KernelCallbackTable Process Injection” — S12, Medium (2026). Code blocks and technical implementation details are reproduced verbatim with attribution.
Executive Summary
Windows message handling is everywhere. Every GUI application sits in a message loop waiting for user input and window events. But what happens when an attacker corrupts the callback table that decides which…
https://core-jmp.org/2026/07/kernelcallbacktable-process-injection/
Original text: “KernelCallbackTable Process Injection” — S12, Medium (2026). Code blocks and technical implementation details are reproduced verbatim with attribution.
Executive Summary
Windows message handling is everywhere. Every GUI application sits in a message loop waiting for user input and window events. But what happens when an attacker corrupts the callback table that decides which…
https://core-jmp.org/2026/07/kernelcallbacktable-process-injection/
🔥2
Escalating All The Privileges With Foxit PDF Reader (CVE-2026-57239)
Original text: “Escalating All The Privileges With Foxit PDF Reader (CVE-2026–57239)” — Luke Paris, Paradoxis (July 15, 2026). Code snippets, technical analysis, and detection/mitigation guidance are reproduced verbatim with attribution.
Executive Summary
CVE-2026-57239 is a local privilege escalation vulnerability discovered in Foxit PDF Reader that allows an unprivileged user to escalate privileges to NT AUTHORITYSYSTEM…
https://core-jmp.org/2026/07/escalating-privileges-foxit-pdf-reader-cve-2026-57239/
Original text: “Escalating All The Privileges With Foxit PDF Reader (CVE-2026–57239)” — Luke Paris, Paradoxis (July 15, 2026). Code snippets, technical analysis, and detection/mitigation guidance are reproduced verbatim with attribution.
Executive Summary
CVE-2026-57239 is a local privilege escalation vulnerability discovered in Foxit PDF Reader that allows an unprivileged user to escalate privileges to NT AUTHORITYSYSTEM…
https://core-jmp.org/2026/07/escalating-privileges-foxit-pdf-reader-cve-2026-57239/
🔥2😱1
Dnsmasq DNS Remote Heap Buffer Overflow (CVE-2026-2291)
Original text: “Dnsmasq DNS Remote Heap Buffer Overflow” — David Barksdale, Exodus Intelligence (July 20, 2026). Code snippets, DNS responses, and exploitation details are reproduced verbatim with attribution.
Executive Summary
CVE-2026-2291 is a critical remote code execution vulnerability in dnsmasq, a widely deployed lightweight DNS and DHCP server used in embedded systems, routers, and Linux…
https://core-jmp.org/2026/07/dnsmasq-dns-remote-heap-buffer-overflow-cve-2026-2291/
Original text: “Dnsmasq DNS Remote Heap Buffer Overflow” — David Barksdale, Exodus Intelligence (July 20, 2026). Code snippets, DNS responses, and exploitation details are reproduced verbatim with attribution.
Executive Summary
CVE-2026-2291 is a critical remote code execution vulnerability in dnsmasq, a widely deployed lightweight DNS and DHCP server used in embedded systems, routers, and Linux…
https://core-jmp.org/2026/07/dnsmasq-dns-remote-heap-buffer-overflow-cve-2026-2291/
🔥7😱3👍1
NEUROMANCER
*
timeline:
Книгу Гибсон написал в 80х
Экранизировать пытались с 90х
Прочитал я ее где то в 2007.
Толпы фанатов, тонны ФанФиков, миллионы всякого арта и тд и пт, в итоге - невероятнейший долгострой.
В принципе можно было бы уже ИИ самим подключить, да и закрыть гештальт.
И тем не менее яблоко вываливает:
NEUROMANCER First Teaser
#cyberpunk
*
timeline:
Книгу Гибсон написал в 80х
Экранизировать пытались с 90х
Прочитал я ее где то в 2007.
Толпы фанатов, тонны ФанФиков, миллионы всякого арта и тд и пт, в итоге - невероятнейший долгострой.
В принципе можно было бы уже ИИ самим подключить, да и закрыть гештальт.
И тем не менее яблоко вываливает:
NEUROMANCER First Teaser
#cyberpunk
🔥17👍4😱1