Open Source Projects - Xint Blog | Insights from Offensive Security Researchers

See All Vulnerability Research AI for Security Competitions News Product Open Source Projects FAQ Case Study Competitive Comparison

Node2Shell (CVE-2026-111497) Emergency Response Plan

Node2Shell allows server takeover without authentication. Please check the methods for verifying the vulnerability and remediation measures that were directly reproduced and verified.

Nov 09, 2026

Vulnerability ResearchOpen Source ProjectsNews

WordPress Core Update Race: When the Update Becomes the Attack Path

Not only did we find a pre-auth RCE in WordPress core that fires during a core update, we also identified and addressed a blind spot in LLM vulnerability discovery.

Nov 03, 2026

Vulnerability ResearchOpen Source Projects

Stealing OpenAI Reasoning Traces via Compaction Smuggling

Compaction Smuggling allowed for the large-scale distillation of state of the art models.

Oct 26, 2026

News Vulnerability ResearchAI for SecurityOpen Source Projects

PHP2Shell (CVE-2026-109618/109619) Emergency Response Plan

Xint provides emergency response measures and methods for PHP2Shell (CVE-2026-109618/109619), a PHP vulnerability that allows server takeover without authentication.

Oct 21, 2026

News Vulnerability ResearchOpen Source Projects

GhostCompact: How Compaction Made OpenAI Inference Nearly Free

Xint researchers discovered an accounting logic bug in the OpenAI API that could extract nearly-free inference from frontier OpenAI models.

Oct 08, 2026

Vulnerability ResearchOpen Source ProjectsAI for SecurityCase Study

Node2Shell (CVE-2026-111497) Emergency Response Plan

Node2Shell allows server takeover without authentication. Please check the methods for verifying the vulnerability and remediation measures that were directly reproduced and verified.

Nov 09, 2026

Vulnerability ResearchOpen Source ProjectsNews

WordPress Core Update Race: When the Update Becomes the Attack Path

Not only did we find a pre-auth RCE in WordPress core that fires during a core update, we also identified and addressed a blind spot in LLM vulnerability discovery.

Nov 03, 2026

Vulnerability ResearchOpen Source Projects

Stealing OpenAI Reasoning Traces via Compaction Smuggling

Compaction Smuggling allowed for the large-scale distillation of state of the art models.

Oct 26, 2026

News Vulnerability ResearchAI for SecurityOpen Source Projects

PHP2Shell (CVE-2026-109618/109619) Emergency Response Plan

Xint provides emergency response measures and methods for PHP2Shell (CVE-2026-109618/109619), a PHP vulnerability that allows server takeover without authentication.

Oct 21, 2026

News Vulnerability ResearchOpen Source Projects

GhostCompact: How Compaction Made OpenAI Inference Nearly Free

Xint researchers discovered an accounting logic bug in the OpenAI API that could extract nearly-free inference from frontier OpenAI models.

Oct 08, 2026

Vulnerability ResearchOpen Source ProjectsAI for SecurityCase Study

Google stopped paying for tails

Reports are commoditized. What actually matters for bug discovery is validation and remediation.

Oct 06, 2026

NewsOpen Source Projects

DARPA Selects Xint to Research Source Code Vulnerabilities in Critical Messaging Applications Used in Military Communications

DARPA will use Xint’s proven ability to find critical flaws in source code, runtime, and binaries to test the use of AI to protect the security of military communications across inhouse, open-source, and proprietary messaging applications at scale.

Sep 30, 2026

AI for SecurityCase StudyOpen Source ProjectsNews

Any Android App Can Shut Down the Phone - We Found It in Three Hours Without Source Code

Any app on your Pixel can turn the phone off. We found it in a driver binary, and the part that should bother you is how long it took.

Sep 14, 2026

Vulnerability ResearchOpen Source ProjectsAI for Security

Xint Code Discovers 9.8 CVSS Critical Bug in Apple Devices

This is an overview of the two vulnerabilities uncovered by Xint Code impacting Apple devices running iOS, macOS, and iPad OS

Aug 03, 2026

Vulnerability ResearchOpen Source ProjectsNews

Xint Research: What Type of Security Flaws Does AI Code Produce?

Xint researcher analyzes the types of vulnerabilities that AI coding produces.

Jul 22, 2026

Open Source Projects Vulnerability ResearchNews

Xint Code Discovers Three High Sev Bugs in Android

This is an overview of the three high-severity vulnerabilities uncovered by Xint Code in Android which have now been patched by Google Devices

Jul 20, 2026

Vulnerability ResearchOpen Source ProjectsAI for Security

Copy Fail: From Pod to Host.

A walkthrough of Copy Fail (CVE-2026-31431) as a container escape primitive: from a 4-byte page cache write to host root on Kubernetes.

May 19, 2026

Vulnerability ResearchAI for SecurityOpen Source Projects

Working With DARPA to Secure Open Source Infrastructure: CVE-2026-31789

The story behind CVE-2026-31789 demonstrates how DARPA and Xint are accelerating AI cyber defenses

May 04, 2026

CompetitionsNews Vulnerability ResearchOpen Source Projects

Copy Fail: 732 Bytes to Root on Every Major Linux Distribution.

Xint Code disclosed CVE-2026-31431, an authencesn scratch-write bug chaining AF_ALG + splice() into a 4-byte page cache write. A 732-byte PoC gets root on Ubuntu, Amazon Linux, RHEL, SUSE.

Apr 29, 2026

AI for Security Vulnerability ResearchOpen Source Projects

The Frontier Isn’t the Model: Why ‘Good Enough’ Reasoning + Scaffolding Is More Important

In this exclusive report, Xint researchers compare Mythos's publicly disclosed results versus what broadly available models can accomplish using advanced scaffolding

Apr 16, 2026

AI for Security Vulnerability ResearchOpen Source Projects

Finding and Patching a CPython 0day in Hours: CVE-2026-6100

A critical CPython CVE today took less than 45 minutes of human work to find, triage, and fix because of Xint Code

Apr 13, 2026

Vulnerability ResearchOpen Source Projects