Tcademy LA CTF 2026 Heap Tcache-Poisoning House-of-Apple-2 Libc-Got Pwn Heap exploitation on glibc 2.35: integer underflow to massive heap overflow, and two paths to shell: libc GOT overwrite or House of Apple 2 FSOP.
Narnes and Bobles & Bobles and Narnes LA CTF 2026 Bun Type-Confusion Javascript Sqlite Web Two type confusion bugs in a Bun bookstore: string price NaN trick, then batch INSERT column inference.
Blogler LA CTF 2026 Yaml Path-Traversal Aliasing Lfi Web YAML anchor aliasing creates a shared reference that bypasses path validation via display_name mutation.