TL;DR Researchers have published full details and working exploit code for CVE-2026-31694. This Linux kernel FUSE bug lets a local user overflow the page cache and seize root. It reaches recent ke…

Boot2root, Web exploitation, Privilege escalation, LFI

TL;DR A security researcher has published full details and proof-of-concept code for a Foxit PDF Reader vulnerability. Tracked as CVE-2026-57239, the flaw lets a local, unprivileged user gain NT A…

TL;DR A researcher has published a write-up and proof-of-concept code for the Windows AppResolver LPE. The chain abuses a missing capability check in Windows.UI.Storage.dll to bypass UAC and reach…

A developer recently spotted a notable proposal. Google engineers want to curb a potential security flaw in the Android Debug Bridge, or ADB. To do so, they suggest restricting local ADB connectio…

I’m back lol, this time with a web pentest room — Recruit. Here’s the challenge description:

TL;DR CVE-2026-49176 is an elevation of privilege flaw in Windows WalletService. It lets a standard user gain SYSTEM rights on a Windows machine. Researcher David Carliez published full technical …

TL;DR The OVSwrap local root flaw lets an unprivileged user gain root on many Linux systems. It affects the kernel’s Open vSwitch datapath and carries the ID CVE-2026-64531. Researcher Asim …

A researcher has published full technical details and working proof-of-concept code for a Linux kernel vulnerability named Fraggap. Tracked as CVE-2026-53362, the bug lives in the kernel’s U…

Developer FareedKhan recently set out to execute the formidable Kimi K3 model on consumer-grade hardware. Typically, running a model of this magnitude locally proves entirely impossible for standa…

TL;DR Apple has patched a macOS privilege escalation flaw tracked as CVE-2026-39875. A malicious app can chain two CUPS logic bugs to gain root. The researcher who reported it, Dallas Dubs, has al…

Exploiting Local File Inclusion and a Zip Slip Vulnerability to Gain Remote Code Execution on the Target Server

Introduction

Microsoft has recently unveiled a new system named Project Zenith, offering developers a ready-to-code Windows 11 PC experience straight out of the box. To call it a new system is, admittedly, a s…

The well-known enthusiast BobPony recently uncovered a new way to circumvent account sign-in on Windows 11 Home. The method proves remarkably simple yet effective. Thereafter, when users installin…

TL;DR A researcher disclosed four Linux kernel privilege escalation flaws on September 18, 2026. Each one can give a local user root on affected systems. The full technical details and proof-of-co…

TL;DR A Sharp printer vulnerability, now tracked as CVE-2024-58388, lets unauthenticated attackers read any file on the device. Exploit details and a working proof-of-concept have been public sinc…

This machine focuses on chain-exploiting web vulnerability misconfigurations and local package security flaws. The primary objectives test…

TL;DR On October 16, 2026, Calif published full technical details and working proof-of-concept code for “Big Fish,” an OpenBSD kernel vulnerability chain. The chain gives a local user …