Thanks to visit codestin.com
Credit goes to github.com

Skip to content
View caveeroo's full-sized avatar
🎯
🎯
18 followers · 22 following

Achievements

Achievement: QuickdrawAchievement: Pull SharkAchievement: YOLO

Achievements

Achievement: QuickdrawAchievement: Pull SharkAchievement: YOLO

Highlights

Organizations

@B64CTF

Block or report caveeroo

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
caveeroo/README.md

caveeroo (jaime cavero sánchez), security research, appsec and reverse engineering. Disclosures: CVE-2026-54512 (jackson-databind PTV bypass), CVE-2026-7375 (wireshark), CVE-2026-39973 (apktool), and GHSA-r625-mph7-wf6j (ghidra, reported to the NSA).

Disclosures

CVE-2026-54512 · jackson-databind · advisory ↗
PolymorphicTypeValidator bypass via generic type parameters. A denied class smuggled as a generic argument of an allow-listed container (ArrayList<Evil>) is instantiated with attacker-controlled properties, defeating the PTV allow-list and opening an unauthenticated RCE path. Fixed in 2.18.8 / 2.21.4 / 3.1.4.

CVE-2026-7375 · wireshark · advisory ↗
Infinite loop in the UDS dissector. A crafted packet, live capture or PCAP, hangs it. Fixed in 4.6.5 / 4.4.15.

CVE-2026-39973 · apktool · advisory ↗
Arbitrary file write on decode. A dropped path-sanitization check let a crafted APK write outside the output directory. Fixed in 3.0.2.

GHSA-r625-mph7-wf6j · ghidra (nsa) · advisory ↗
Unsafe deserialization. Opening a malicious project instantiates attacker-specified classes. Reported to the National Security Agency.

caveeroo.dev · madrid

Pinned Loading

  1. gv_decryptor gv_decryptor Public

    Gallery Vault dump recovery tool with automated discovery, key derivation and automatic media restoration.

    Python 3 1

  2. ctfd-rewind ctfd-rewind Public

    Interesting insights on CTFd competitions.

    Python 7

  3. Infractory-TFG Infractory-TFG Public

    Responsibly automated red team infrastructure management. Unmaintained.

    Java