Boot2root, Web exploitation, Privilege escalation, LFI

TL;DR A security researcher has published full details and proof-of-concept code for a Foxit PDF Reader vulnerability. Tracked as CVE-2026-57239, the flaw lets a local, unprivileged user gain NT A…

TL;DR A researcher has published a write-up and proof-of-concept code for the Windows AppResolver LPE. The chain abuses a missing capability check in Windows.UI.Storage.dll to bypass UAC and reach…

A developer recently spotted a notable proposal. Google engineers want to curb a potential security flaw in the Android Debug Bridge, or ADB. To do so, they suggest restricting local ADB connectio…

I’m back lol, this time with a web pentest room — Recruit. Here’s the challenge description:

TL;DR CVE-2026-49176 is an elevation of privilege flaw in Windows WalletService. It lets a standard user gain SYSTEM rights on a Windows machine. Researcher David Carliez published full technical …

TL;DR The OVSwrap local root flaw lets an unprivileged user gain root on many Linux systems. It affects the kernel’s Open vSwitch datapath and carries the ID CVE-2026-64531. Researcher Asim …

A researcher has published full technical details and working proof-of-concept code for a Linux kernel vulnerability named Fraggap. Tracked as CVE-2026-53362, the bug lives in the kernel’s U…

Developer FareedKhan recently set out to execute the formidable Kimi K3 model on consumer-grade hardware. Typically, running a model of this magnitude locally proves entirely impossible for standa…

TL;DR Apple has patched a macOS privilege escalation flaw tracked as CVE-2026-39875. A malicious app can chain two CUPS logic bugs to gain root. The researcher who reported it, Dallas Dubs, has al…

Exploiting Local File Inclusion and a Zip Slip Vulnerability to Gain Remote Code Execution on the Target Server