CVEs

Vulnerability writeups with enough detail to check my work.

What the bug does, what it requires, and whether the score attached to it survived contact with the product.

Everything here has been disclosed. If the vendor shipped a patch, I’ll tell you. If they didn’t, I’ll tell you that too.

Don’t expect copy-and-paste exploits.