Exploiting deobfuscation in ImunifyAV for code execution (CVE-2025-65530)
A write-up of CVE-2025-65530, a vulnerability in the ImunifyAV malware scanner enabling code execution and privilege escalation.
a blog by aleksejs
Hi! I am Aleksejs and this is my blog. Sometimes I write about computer security, and sometimes I write about other things. You can learn more about me on...
Latest posts
Postcard stamps are Forever
A brief history of US postage, focusing on the odd omission of the word "Forever" on nondenominated postage stamps.
You cannot turn your iPad into a giant 3DS with a $1.4 plastic sheet
If you like gimmicky lenticular/3D postcards, you may be tempted to buy some blanks and try to make your own. And then you'll wonder if you can just stick them to your screen. You cannot.
Visualizing canvas fingerprinting
A look at some common JavaScript fingerprinting libraries, focusing on the specific images that they use in their canvas fingerprinting routines.
Leaking silhouettes of cross-origin images using a timing side channel (CVE-2020-16012)
A writeup for CVE-2020-16012, a timing side-channel vulnerability in Chrome and Firefox that could have been used to recover pixels from cross-origin images.