ROSECURIFY
Subscribe
~/ seclog/ #203

Seclog - #203

13 curated links

g3n3r4l11

  1. Linux's October 2026 TCP Use-After-Free: CVE-2026-98432 — Atlas (atlasum.net)

    CVE-2026-98432 is a CVSS 9.8 remote use-after-free in Linux's IPv4 TCP handshake, fixed upstream Oct 15. Red Hat shipped fixed kernels Nov 1; Ubuntu hasn't yet.

  2. Hacking Two Automakers: ForgeRock Path Confusion, RCE, and Remote… (samcurry.net)

    Shubham Shah and Sam Curry chained a ForgeRock WAF bypass into code execution on the identity systems of two automakers, then demonstrated remote vehicle control in the US.

  3. Researching PHP2Shell and Node2Shell: Building RCE Exploits Using… (invicti.com)

    How we used local AI models to develop working PHP2Shell and Node2Shell RCE exploits, and what the experiments reveal about exploitability for memory corruption bugs.

  4. CVE-2026-119977: When Updating WordPress Becomes the Vulnerability (picussecurity.com)

    CVE-2026-119977 is an unauthenticated RCE in the WordPress core updater, now on CISA KEV. See which sites are at risk and how to patch to 7.1.4 safely.

  5. ARTEX AI Pentest Tool: What Security Teams Need to Know (socradar.io)

    ARTEX AI has moved from a GitHub research project to the engine behind some of the fastest-moving agentic AI cyberattacks of 2026.

  6. sshhole (sshhole.com)
  7. Claude Code was sending your email in the User-Agent header (aydinnyunus.github.io)

    Claude Code handed the model your signed-in email and told it not to put that address in a request header. I verified issue 107757 and read the privacy mod that was meant to stop it.

  8. hacking chatbots with winnie the pooh (mll.sh)

    I was poking around llm ctfs while prepping for the OSAI and landed on lakera’s agent breaker.

  9. Firecracker VM Escape: PwnEscape Part 2 (pwn.ai)

    A malicious guest crossed Firecracker's microVM boundary, resolved the live VMM from inside the VM, and took control of a root-run host process—turning a Linux networking flaw into a guest-to-host code-execution primitive.

  10. jailbreaking the switch 2 (pepsipu.com)
  11. From Webshell to Proxy Exit: Inside an Exposed AhsayCBS Operation… (threatmon.io)

    Blog From Webshell to Proxy Exit: Inside an Exposed AhsayCBS Operation ThreatMon examined a recovered workspace used to check access to internet-facing systems and deploy reverse proxy tunnels. The clearest records concern AhsayCBS: 189 webshell probes, 134 responding endpoints and follow-on deployment attempts using Chisel and GOST. The operator’s wider result files report positive proxy […].

y0utube1

  1. I discovered a sound that leaks your exact location (and it's… (youtube.com)

    This video examines the amount of location information carried by inaudible background sounds, using the Doppler effect to locate a reference recording withi...

g1thub1

  1. devvm: One VM for every project. An isolated sandbox with your… (github.com)
← All Seclogs