CVE-2017-1000367 in Sudo's get_process_ttyname() for Linux

terminal emulators' processing of escape sequences

Systemd v228 local root exploit

OpenSSH 6.8-6.9 PTY local privilege escalation exploit (CVE-2015-6565)

WordPress (all versions): SPOF, RCE, and Negligence

Systemd v209+: local denial-of-service attack

Ruining the Magic of Magento's Encryption Library

OpenSSL: “the hard coded 1024 bit DH p parameter was not prime”

Qualys Security Advisory - LibreSSL (CVE-2015-5333 and CVE-2015-5334)

S/party/hack like it's 1999

“Why are you releasing a full exploit just minutes after the patch is released?”

Major Security Problems with Automatic Crash Analysis

Wordexp(3) security