All posts by John Doe

■■■■■ Bluetooth Headphone Jacking: Full Disclosure of Airoha RACE Vulnerabilities. This blog post is about CVE-2025-20700, CVE-2025-20701, and CVE-2025-20702 vulnerabilities technical details in Airoha-based Bluetooth headphones and earbuds. Bluetooth Headphone Jacking: Full Disclosure of Airoha RACE Vulnerabilities https://github.com/blackorbird/APT_REPORT/blob/master/exploit_report/Bluetooth%20Headphone%20Jacking%20Full%20Disclosure%20of%20Airoha%20RACE%20Vulnerabilities.pdf

Zero-Day: Zero-Click RCE on🍏Apple iOS viz. decoding logic vulnerability in Apple’s image parser. 📹 https://youtu.be/jJ2QwvMDf7k

■■■■□ Open Source Intelligence (OSINT): Using Overpass Turbo for Strategic CyberWar Intelligence Gathering. Open Source Intelligence (OSINT): Using Overpass Turbo for Strategic CyberWar Intelligence Gathering https://overpass-turbo.eu/

■■■■□ Bangladesh Civilian Force: Fragmented Identities Behind a Single Hacktivist Brand. This report documents the process of untangling BCF’s online footprint. By following how its identities intersect, overlap, and reinforce one another, the investigation aims to move past surface-level confusion and examine what this structure reveals about the group’s motivations, organization, and intent. https://stealthmole-intelligence-hub.blogspot.com/2025/12/bangladesh-civilian-force-fragmented.html

■■■□□ [Untested Code] MongoBleed (CVE-2025-14847) – Unauthenticated Memory Leak PoC. https://github.com/joe-desimone/mongobleed

🐲 GhidraGPT: A powerful Ghidra plugin that integrates Large Language Models (LLMs) directly into Ghidra to enhance reverse engineering workflows with code analysis and enhancement capabilities. https://github.com/weirdmachine64/GhidraGPT

■■■□□ Smugglex is a security testing tool that detects HTTP Request Smuggling vulnerabilities in web applications. It tests for CL.TE, TE.CL, TE.TE, H2C, and H2 smuggling attacks. https://github.com/hahwul/smugglex

■■■□□ Disinformation: The corporate media defeat by social media (TikTok) and how Jews ✡️ got control back (partly).

🇮🇱 jmail.world

■■■■□ Critical RCE (CVSS 10) vulnerability affecting n8n instances: CVE-2025-68613. Detection script: https://github.com/rxerium/CVE-2025-68613/tree/main