How I approach authorization boundary testing when the same application serves multiple accounts and multiple regions from a shared…

In this challenge, a seemingly harmless web server exposed a configuration file containing SSH credentials. Those credentials granted…

TL;DR A Linux kernel use-after-free in SCTP, tracked as CVE-2026-64564, allows local attackers to gain root. Researchers demonstrated privilege escalation and container-to-host escape on five dist…

TL;DR WSO2 disclosed four critical vulnerabilities across its API and identity products. Several are WSO2 account takeover flaws. The worst, CVE-2026-5430, scores a maximum 10 through a JWT authen…

TL;DR Red Hat disclosed a critical privilege escalation flaw in Advanced Cluster Management (ACM) for Kubernetes. Tracked as CVE-2026-10090, it scores 9.9 on CVSS. A user with only namespace edit …

TL;DR A Linux kernel eventpoll flaw lets a local user climb to root. Tracked as CVE-2026-43074, it scores 7.3 on CVSS. Researchers confirmed a working root shell on a Pixel 10 Pro. The full detail…

Privilege escalation is a journey. There are no silver bullets, and much depends on the specific configuration of the target system. The…

Continuation of the previous Linux Privilege Escalation lab.

TL;DR A critical flaw lets a low-privileged Rancher user seize full control of the platform. Tracked as CVE-2026-44945, it scores 9.1 on CVSS. This Rancher privilege escalation stems from a cross-…

In this article I will demonstrate how poor dynamic group membership rules could be exploited by hackers in order to enumerate and escalate…