Our Specialized LLM Agent Surpasses Mythos Preview's Record in a V8 Evaluation
Our specialized LLM agent reached arbitrary code execution in all 10 trials across two V8 vulnerabilities.
Research & Development
Articles filed under Research & Development.
08 ARTICLES
Firefox 153.0 Vulnerability Discovery and Disclosure (CVE-2026-16373)
Our member discovered an information disclosure vulnerability in the Privacy component of Firefox for Android and reported it to Mozilla.
Discovery and Disclosure of 14 Vulnerabilities in TeX Live, Including Arbitrary Code Execution
Our team discovered multiple memory safety vulnerabilities that lead to arbitrary code execution in tools shipped with the TeX Live typesetting system, and reported them to the developer under coordinated disclosure. We demonstrated that arbitrary code execution is achievable on the official distribution binaries simply by compiling a malicious document.
Discovery and Disclosure of a Linux Kernel Privilege Escalation 0-day
Our member discovered a local privilege escalation 0-day on the latest Linux kernel, chaining two kernel bugs, and reported it to the vendor.
Firefox 151.0 Vulnerability Discovery and Disclosure (CVE-2026-8947, CVE-2026-8964)
Our member discovered vulnerabilities in Firefox's DOM: Bindings (WebIDL) and Popup Blocker components and reported them to Mozilla.
Discovery and Disclosure of an RxGK Variant in the Linux Kernel Privilege Escalation Vulnerability Family "Dirty Frag"
Our member discovered a new privilege escalation variant of the Dirty Frag family in the Linux kernel's RxRPC RxGK security class.
Firefox 150.0 Vulnerability Discovery and Disclosure (CVE-2026-6768, CVE-2026-6769)
Our member discovered vulnerabilities in Firefox's Networking: Cookies and Debugger components and reported them to Mozilla.
Firefox 149.0 Vulnerability Discovery and Disclosure (CVE-2026-4717)
Our member discovered a privilege escalation vulnerability in Firefox's Netmonitor component and reported it to Mozilla.