Analysis of XXE 0days in PHPSpreadsheet < 3.4.0
We deep-dive into how it has been possible to find two XXE 0day vulnerabilities in PHPSPreadsheet, bypassing the actual defences and subsequent fixes.
Tampering the RAM: a new way to break into any VM
Imagine a VM with no exposed services, no known credentials, an encrypted disk and a GRUB with no shortcuts. It looks secure! But is it for real?