Found a heap overflow vulnerability in Windows SMB that... leads to RCE and reported it to MSRC in June. The vulnerability has now been addressed with CVE-2026-62800 in the August Patch Tuesday updates.show more

Our team has just successfully reproduced the IngressNightmare vulnerability... (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asmshow more

Microsoft has addressed a one-click NTLM leak vulnerability affecting... Windows Snipping Tool (CVE-2026-33829), discovered by our researcher Marcos Díaz (Marcos Díaz). ➡️ Read the write-up: ➡️ Microsoft bulletin:show more

💥 Introducing "Zapscape" (CVE-2026-64561) A Guest-to-Host Escape in KVM/x86... exploiting a UAF in the shadow MMU's recursive "ZAP" path. Can escape to the host on x86 public clouds that expose nested virtualization. A separate vulnerability from Januscape. If you match the vulnerable conditions, apply the patch immediately. Details:show more

An analysis of CVE-2026-21236 - A heap based buffer... overflow in the Microsoft Windows Kernel afd.sys - was just published by Emily L a recent secondment with my team EDG! Nice work for her first triage of a kernel memory corruption bug!show more

In this research, Hakai Security Research Team has identified... a critical Remote Code Execution (RCE) vulnerability in Wazuh versions up to 4.14.1 that allows arbitrary command execution on the master node through insecure deserialization in the cluster communication protocol. Written by Texugoshow more

Since V8 had heap sandbox, Chrome renderer RCE usually... means chaining 2 bugs Today we bring the Spear of Longinus 1 bug, 100% success, no heap spray, found in 40+ major versions, arbitrary renderer read/write + V8 sandbox escape Our CVE-2026-6307 writeupshow more

Exim 4.99.3 is out, patching CVE-2026-45185, a critical RCE... found by XBOW! Check out our post linked in the reply; I'll summarize some details in this thread.show more

A Toronto synagogue’s windows were smashed with a hammer... on Tuesday morning, marking the tenth time that it has been vandalised in a year and a half.show more

qwerty and I exploited a VSock 1-day in Google... kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04show more

I found a CVE in my studio lights💡 ✨【𝒞𝒱𝐸－𝟤𝟢𝟤𝟧－𝟩𝟤𝟢𝟤】✨... I discovered a CSRF vulnerability in Elgato’s Key Lights that allows any website make your Elgato lights flicker aggressively. Want to learn more about how I did this? Read the full blog post below 👇show more

I've confirmed Samsung's MagicINFO 21.1050 is VULNERABLE to the... publicly reported POC in the blog below. The media is reporting this as CVE-2024-7399, but if it is then the patch is incomplete. There is currently NO PATCH AVAILABLE!show more

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ,... exploiting the vm:// protocol to achieve Remote Code Executionshow more

Heavy rainfall in the catchment areas caused the water... level in Nullah Lai to rise to 10 feet. It has now receded to 7 feet and continues to fall. There is a temporary overflow in tributaries across Rawalpindi is due to sudden surges. I have directed all concerned departments to ensure that the overflow is cleared within the next two hours. Rescue 1122, the Commissioner, Deputy Commissioner, WASA, Local Government, and Suthra Punjab teams are on the ground, monitoring the situation and ensuring a swift response. I am monitoring the situation directly and receiving live updates. Citizens are requested to remain calm and follow official advisory.show more

Earlier this year, Lexfo published details of a pre-authentication... #RCE vuln in #Fortinet SSL VPN. We then published a #vulnerability scanner & analysis of vulnerable systems on the internet along w/ a proof-of-concept demo. Read how we built it here.show more

It is being reported that the CRAM system at... the American Embassy in Baghdad has been targeted by a drone.show more

The Bible that was found in North Carolina, which... was wrapped around a pole from Hurricane Helene and was opened to Revelation 14 and 15, has now been encasedshow more

BREAKING: Tornado touches down in Montebello, CA. Watch as... the tornado touches down and causes damage to businesses in the area. It has been reported that one person sustained injuries, and several buildings have substantial damage.show more

‼️ZELENSKYY: Ukraine’s positions on the battlefield and in other... key areas are the strongest they’ve been in years. “Overall, now Ukrainian positions at the front and in our long-range sanctions, and in joint results with partners, are the strongest they’ve been in years. We need to maintain this momentum and keep delivering results.” - Ukrainian President on Tuesday, May 12, 2026.show more