The Curious Engineer

All blogs / Security

Codean Labs

codeanlabs.com/blog

Security that fits your product’s stage

SecurityReverse engineeringC

’18’19’20’21’22’23’24’25’26
Posts
11 from 7 Nov 2018 to 9 Oct 2026
Posting
now and then (2 in the last year)
Kind
company blog
Feed
https://codeanlabs.com/blog/feed/

2026 2

  1. Breaking GNOME: the core
  2. CVE-2026-45184 – Popping calc on Kdenlive

2025 3

  1. CVE-2025-47934 – Spoofing OpenPGP.js signature verification
  2. CVE-2025-32464 – Overflowing HAProxy regsub converter
  3. Exploiting LibreOffice (CVE-2024-12425 and CVE-2024-12426)

2024 4

  1. Ghostscript wrap-up: overflowing buffers
  2. CVE-2024-29511 – Abusing Ghostscript’s OCR device
  3. CVE-2024-29510 – Exploiting Ghostscript using format strings
  4. CVE-2024-4367 – Arbitrary JavaScript execution in PDF.js

2023 1

  1. Vulnerability write-up: “Dangerous assumptions”

2018 1

  1. On the security (or lack thereof) of Anna the connected IoT thermostat