July 19, 2026 Headless Browser RCE, Part 2: Chaining Three JavaScriptCore Bugs Chaining three old JavaScriptCore bugs into a single-file RCE against Splash's QtWebKit engine, under W^X and ASLR.

February 9, 2026 Building a Headless Browser RCE with Claude Opus 4.6 Using Claude Opus 4.6 to build a working RCE exploit for a heap buffer overflow in PhantomJS, from existing CVE to PoC.