<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
  <title>0x5t — Security Research</title>
  <link href="https://deserialization.party/feed.xml" rel="self" type="application/atom+xml"/>
  <link href="https://deserialization.party/" rel="alternate" type="text/html"/>
  <id>https://0x5t.raptx.org/</id>
  <updated>2026-02-06T00:00:00Z</updated>
  <author><name>0x5t</name></author>
  <subtitle>Vulnerability research and CVE writeups.</subtitle>
  <entry>
    <title>CVE-2026-25635: Calibre CHM Path Traversal to RCE</title>
    <link href="https://deserialization.party/posts/calibre-chm-rce" rel="alternate" type="text/html"/>
    <id>https://0x5t.raptx.org/posts/calibre-chm-rce.html</id>
    <updated>2026-02-06T00:00:00Z</updated>
    <summary>Path traversal vulnerability in Calibre 9.1.0's CHM reader allows arbitrary file writes and code execution by dropping payloads into the Windows Startup folder.</summary>
    <category term="CVE"/>
    <category term="RCE"/>
    <category term="Path Traversal"/>
    <category term="Calibre"/>
    <category term="CHM"/>
    <category term="Arbitrary File Write"/>
  </entry>
  <entry>
    <title>CVE-2026-25636: Calibre EPUB Path Traversal to RCE</title>
    <link href="https://deserialization.party/posts/calibre-epub-rce" rel="alternate" type="text/html"/>
    <id>https://0x5t.raptx.org/posts/calibre-epub-rce.html</id>
    <updated>2026-02-06T00:00:00Z</updated>
    <summary>Path traversal vulnerability in Calibre 9.1.0's EPUB conversion allows arbitrary file corruption and code execution via malicious ebook files.</summary>
    <category term="CVE"/>
    <category term="RCE"/>
    <category term="Path Traversal"/>
    <category term="Calibre"/>
  </entry>
</feed>
