Top all-time · #9249
Paolo Stagno
Personal blog · voidsec.comsecurity
Paolo Stagno writes VoidSec, a personal blog at voidsec.com about security. Since 2015, 8 different Hacker News readers have linked it 26 times, most often “CVE-2026-40369: 12 Bytes to Escape the Browser Sandbox”. It is still writing: the last post was on 2026-05-20, and you can follow it by feed.
Paolo Stagno, aka VoidSec, is a Vulnerability Researcher and Exploit Developer specialised in developing Computer Network Exploitation (CNE) capabilities.
Most-linked posts?
- CVE-2026-40369: 12 Bytes to Escape the Browser Sandbox2 people · 2 mentions · first linked 2026-05-21
- Hacking the DJI Phantom 32 people · 2 mentions · first linked 2017-01-24
- CVE-2020-1337 – PrintDemon is dead, long live PrintDemon2 people · 2 mentions · first linked 2020-08-11
- VPN leaks users’ IPs via WebRTC2 people · 2 mentions · first linked 2018-03-27
What Hacker News says?
Submitted VPN leaks users’ IPs via WebRTC as a story · 434 points
HN discussionSubmitted Windows Kernel Debugging and Exploitation: Setting up the lab as a story · 22 points
HN discussionSubmitted 23% of VPN providers leaks users’ IPs via WebRTC as a story · 5 points
HN discussionSubmitted Buffer Overflow in IBM Tivoli Storage Manager as a story · 4 points
HN discussionSubmitted CVE-2026-40369: 12 Bytes to Escape the Browser Sandbox as a story · 3 points
HN discussionSubmitted Tabletopia, from XSS to RCE as a story · 3 points
HN discussionSubmitted Post-Exploitation Tool to Decrypt SolarPuTTY's Sessions Files as a story · 3 points
HN discussionSubmitted ECG: Static source code analysis for Tcl/ADP source-code as a story · 3 points
HN discussionSubmitted Hacking the DJI Phantom 3 as a story · 3 points
HN discussionSubmitted Cybersecurity in Italy as a story · 3 points
HN discussionSubmitted Aethra Botnet: Meet the botnet made up of 12000 Italian routers as a story · 3 points
HN discussionSubmitted CVE-2020-1337 – PrintDemon is dead, long live PrintDemon as a story · 2 points
HN discussionSubmitted Building a working custom shellcode encoder for exploit development purposes as a story · 2 points
HN discussionSubmitted Minds.com Multiple Vulnerabilities [pdf] as a story · 2 points
HN discussionSubmitted CVE-2026-40369: Twelve Bytes to Escape the Browser Sandbox as a story · 1 points
HN discussionSubmitted AI Vulnerability Research and the Fuzzer Era Déjà Vu as a story · 1 points
HN discussionSubmitted .NET Grey Box Approach: Source Code Review and Dynamic Analysis as a story · 1 points
HN discussionSubmitted PrintDemon is dead, long live PrintDemon as a story · 1 points
HN discussionSubmitted A Tale of a Kiosk Escape: ‘Sricam CMS’ Stack Buffer Overflow as a story · 1 points
HN discussionSubmitted State of Industrial Control Systems (ICS) in Italy as a story · 1 points
HN discussionSubmitted Metasploit RCE (CVE-2019-5624) as a story · 1 points
HN discussionSubmitted DJI Drone Hacking and Forensics as a story · 1 points
HN discussionSubmitted Instrumenting Electron Apps for Security Testing as a story · 1 points
HN discussionSubmitted Exposing #GraphQL to Penetration Testers: Why Should You Care? as a story · 1 points
HN discussionSubmitted Leveraging “French Kiss Attack” to boost your phishing campaign as a story · 1 points
HN discussionSubmitted Hacking the DJI Phantom 3 as a story · 1 points
HN discussion
