4404 Founders·Oct 29Oracle EBS CVE-2026-101767: Unauthenticated SQL Injection That Chains to RCECVE-2026-101767 chains SQL injection through Oracle EBS TCF servlet to OS command execution. Probing started one day after the October 2026 CPU patch.5 min read·404-founders.com
4404 Founders·Oct 26Node2Shell: How a Boolean Return Value Became a Critical Brotli RCECVE-2026-111497 Brotli decoder out-of-bounds write gives RCE in Node.js, Python, Bun. Express 5 decompresses by default. Patch now.9 min read·404-founders.com
4404 Founders·Oct 22GitLab CVE-2026-110264: CVSS 10.0 RCE Hits 12 Years of ReleasesGitLab patches CVE-2026-110264, a CVSS 10.0 unauthenticated RCE in Onigmo regex engine affecting every self-managed release since 7.0 (2014). Upgrade now.7 min read·404-founders.com1D
LLưu Tuấn Anh·Oct 22From PDF file uploads to server hijacking: An in-depth analysis of the Ghostscript vulnerability CVE-2026-39919Introduction to Ghostscript If you are running a WordPress website, a content management system (CMS) or an online application portal, chances are your server is running Ghostscript every day without14 min read·blog.fiscybersec.com1A
Cc0wking·Oct 6A Certificate Name That Runs as Root: Five Bugs in Sophos Firewall, Found with CodexA certificate's Distinguished Name reaches a shell as root on Sophos Firewall, letting a certificate/VPN-only admin take over the appliance.10 min read·blogs.night-wolf.io
Cc0wking·Oct 6From Graph Editor to Webshell: Finishing the Job CVE-2026-40079 Left OpenA Cacti user with only the Graphs realm can inject OS commands via unescaped graph-item fields and drop an unauthenticated PHP webshell.17 min read·blogs.night-wolf.io
JJebitok·Sep 23Beach Bar: Web x Boot2Root - RCE X Django (TryHackMe)Link to the challenge on TryHackMe: Beach Bar Concierge Briefing Welcome back to the Byte Lotus — this time the sand is warm, the deck lights are coming up, and the beach bar's jukebox takes requests16 min read·sharonjebitok.com
YYogeshwar Peela·Sep 10TryHackMe - Olympus WriteupOlympus TryHackMe writeup covering Victor CMS SQL injection, credential cracking, file upload RCE, SUID abuse, SSH access, and root shell.10 min read·exploitnotes.hashnode.dev
JJebitok·Sep 9Shells & Listeners Fundamentals (TryHackMe)Link to the challenge on TryHackMe: Shells & Listeners Fundamentals Introduction In many real-world assessments, a minor bug becomes a foothold. Imagine a file upload feature that fails to validate co25 min read·sharonjebitok.com
JJebitok·Sep 6Challenge: Expose (TryHackMe)Challenge on TryHackme: Expose Introduction Expose is a TryHackMe room focused on the risks of leaving unnecessary services running on a machine. The attack surface includes FTP, SSH, DNS, HTTP on a n11 min read·sharonjebitok.com
