Dolev Aviv · Lead security researcher
Hacking by Doing
I research vulnerabilities in software and reverse engineer malware. The writeups here trace each finding from root cause to a working exploit.
latest findings
CVE-2026-1579: Unauthenticated Remote Command Execution in PX4 Autopilot via MAVLink
An unauthenticated attacker within network range can run arbitrary shell commands on a PX4 drone flight controller through the MAVLink SERIAL_CONTROL handler (CVSS 9.8).
›Unauthenticated RCE in Livewire Filemanager (CVE-2025-14894)
An unauthenticated attacker can upload a PHP web shell to the Livewire Filemanager package for Laravel and execute it, achieving remote code execution (CVSS 9.8).
›CVE-2025-13184 - TOTOLINK X5000R (AX1800 router) Authentication Bypass
An authentication bypass in the TOTOLINK X5000R (AX1800) router gives anyone on the local network full admin access without valid credentials.
›CVE-2025-65199 - Windscribe VPN Local Privilege Escalation
On Linux, a local user in the windscribe group can abuse the Windscribe VPN root helper over its Unix socket to escalate to root.
›CVE-2025-13654: Stack Buffer Overflow in Duc via Integer Underflow
An integer underflow in Duc, a disk-usage tool in the Debian repositories, triggers a stack buffer overflow that causes denial of service and possible information disclosure.
›Heap Out-of-Bounds Read in Hermes JavaScript Engine: A Technical Deep Dive
A heap out-of-bounds read in the SerializedLiteralParser of Meta's Hermes JavaScript engine, leading to denial of service and memory disclosure.