cybernuke / findings
Findings
Every finding is a self-contained report — the flaw, exploit demonstrated on the wire, merge-ready patch that closes it — frozen by the agent that wrote it, held in the corpus promoting house style. Below is the extended cut; lightened for the reader with a gentler lede and enriched with what came after: a fix shipped, a CVE assigned, and an occasional fight night.
Everything everywhere all at once: The night the agents went outApplication
- Operating Satan's computer CVSS 8.1
- Curl pipes lies CVSS 8.1
- — more live soon —
↑ applications network ↓
PKI / X.509
- Open to strangers CVSS 9.1
- Unconstrained subcontractor CVSS 9.1
- Firefox crashes on wire it asked for CVSS 7.5
- Certificate bomb kills control room CVSS 7.5
- Maintainers fight over bit CVSS 7.4
- Partner badge opens every door CVSS 7.4
- Trouble makers welcome CVSS 7.4
- Wrong-purpose cert sails through CVSS 7.4
TLS 1.3
SSH
QUIC
- — live soon —
↑ userspace privileged ↓
Kernel
- — live soon —
Firmware
- — live soon —
↑ software physical ↓
Hardware
- — live soon —