RSSAmplifier

Blog

Khang's Stuff

khang06.github.ioRSS feed ↗2 posts

Latest posts

Slipping up Slippi with spectator RCE

This vulnerability is patched in Slippi Playback Dolphin 3.5.2, released January 14th, 2026. The launcher automatically updates it. Super Smash Bros. Melee is a very popular party fighting game for the Nintendo GameCube. Despite three other entries (four if you're weird and count Smash 4 as two games) in the nearly 25 years since its release, Melee still enjoys a healthy competitive scene to…

Breaking out of VRChat using a Unity bug

This vulnerability is patched in VRChat 2024.3.1p4 and Unity 6000.0.20f1 , 2022.3.48f1 and 2021.3.44f1 . THIS DOESN'T MEAN THAT OTHER UNITY GAMES ARE VULNERABLE! Exploiting the bug requires far more user control than the vast majority of other games allow. VRChat is a fairly popular game that heavily revolves around user-generated content. It's well known for letting users express…