Daniele Berardinelli

/Daniele BerardinelliA minimal, responsive and feature-rich Jekyll theme for technical writing. 2026-07-28T05:06:52+00:00 Daniele Berardinelli / Jekyll © 2026 Daniele Berardinelli /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png Printing Infinite Money on the Cosmos Blockchain2026-07-28T00:00:00+00:00 2026-07-28T05:06:31+00:00 /posts/cosmos/ Daniele Berardinelli

A uint256 underflow in cosmos blockchain

Exploiting LangSmith: LangGhost RCE (CVE-2026-45134)2026-05-11T00:00:00+00:00 2026-05-11T00:00:00+00:00 /posts/langghost/ Daniele Berardinelli

A technical breakdown of the RCE vulnerability in LangSmith

Reverse Engineering AnyDesk2026-04-24T00:00:00+00:00 2026-05-11T22:59:58+00:00 /posts/anydesk/ Daniele Berardinelli

A deep dive into AnyDesk 9.7.0

My thoughts on MongoBleed (CVE-2025-14847)2025-12-27T00:00:00+00:00 2025-12-27T00:00:00+00:00 /posts/mongobleed/ Daniele Berardinelli

MongoBleed (CVE-2025-14847) A parser-amplified uninitialized heap disclosure in MongoDB’s OP_COMPRESSED (zlib) path. MongoBleed is a vulnerability in the way that MongoDB processes zlib-compressed wire messages. If you follow the execution path a little further, you will see that it quietly turns a database into a heap oracle MongoDB shipped fixes across all supported branches and publis...