Room: Beach Bar Event: Hacker’s Holiday Category: Boot2Root

TL;DR A researcher has published full details and a working proof-of-concept for a macOS privilege escalation bug. It turns an unprivileged user into root in about two seconds, with no user intera…

TL;DR A new Linux kernel vulnerability, tracked as CVE-2026-53264, lets a local user run arbitrary code and escalate to root. The flaw sits in the net/sched packet scheduler and comes from a use-a…

Beach Bar

TL;DR Security researchers have detailed a critical Linux suTrap local privilege escalation flaw. This interactive su TIOCSTI bug allows an unprivileged user to gain root access during an active s…

Description : Sign’s on the door. Room’s active. You have access you were never given, and so does he.

Users of anonymous operating systems typically rely on the guarantee that no single program running within the environment can betray their true identity. Sometimes, however, a solitary flaw in th…

How I approach authorization boundary testing when the same application serves multiple accounts and multiple regions from a shared…

In this challenge, a seemingly harmless web server exposed a configuration file containing SSH credentials. Those credentials granted…

TL;DR A Linux kernel use-after-free in SCTP, tracked as CVE-2026-64564, allows local attackers to gain root. Researchers demonstrated privilege escalation and container-to-host escape on five dist…