Mr.Niko

Full linux LPE just popped in my lab. uid=0 on the demo. full writeup + PoC after disclosure. tech details stay closed until then. #Linux #LPE #ExploitDev #InfoSec

Dirty Frag fix still leaks. ZDI-CAN-33367. skb_zerocopy drops SKBFL_SHARED_FRAG. NFQUEUE moves the pages. ESP decrypts in place. attacker bytes land in page cache of a read only file. userns. splice. 8 byte write. setuid gate. uid=0. Public root PoC. No CVE. Patch not merged. Ubuntu, Debian, AlmaLinux rooted with the Dirty Frag fix installed. PoC: pruva.dev/reproductions/REPR… writeup: sysdig.com/blog/detecting-an… credit: Trend Micro ZDI

20 year old teql UAF. Public root PoC. CVE-2026-23074. Child of QFQ. peek returns NULL. qlen stays 0. aggregate freed while still linked. userns. CAP_NET_ADMIN. arbitrary 8 byte write. ROP. uid=0 + COS escape. PoC: github.com/google/security-r… credit: @Hc0wl

CVE-2026-43501. IPv6 RPL OOB write. Route of Death left the intermediate hop open. segments_left stays non zero. SRH grows. mac_header wraps. 14 byte memmove past skb head. userns gives CAP_NET_ADMIN. root. COS container escape. PoC: github.com/google/security-r… credit: @nebusecurity

A web page can drop AGENTS.md into ~/Downloads. No click. Open Codex there and it rewrites ~/.codex/config.toml, registers an MCP server, then npm installs malware. Real package: function-color. Codex followed through in 90%+ of Forever Security's runs. Config is machine wide. Leaving the folder does not clear it. Same class of trick works on Claude Code for OAuth token theft. Writeup: forever.security/blog/hijack… Credit: Gal Weizman, Omer Samet (Forever Security)

Apple dropped Private Cloud Compute source for researchers. github.com/apple/security-pc… CloudAttestation. Thimble / privatecloudcomputed. CloudBoard. log filters. srd_tools VRE. the pieces that claim device-class trust for Apple Intelligence in the cloud. this is not a marketing PDF. it is a hunt surface. revocation already bit them once in CloudAttestation X509Policy. fixed in 26.4. Apple Security Bounty covers PCC guarantee breaks. guide: security.apple.com/documenta… #iOS #AIRedTeam #InfoSec

CTF said steal my bitcoin. someone did it with a PHP memory-limit race. multipart upload_progress. OOM a worker. reuse it. 256-byte PHPSESSID = Zend heap base. 16-byte cookie = zval_ptr_dtor. forge HashTable. pDestructor = zif_system. id + print-flag over the open socket. ~20 HTTP requests. stdlib Python. Alpine PHP 8.4.26. live solve logged. creator put the wrong WIF on the server. PoC: github.com/KillaBoi/StealMyB… credit: @killa / KillaBoi #ExploitDev #PHP #InfoSec

🚨 Node2Shell is real. PoC is public. CVE-2026-111497. Google Brotli 1.0.3–1.2.0. DecodeBlockTypeAndLength returns BROTLI_FALSE (=0). same value as SUCCESS. safe path hangs. non-safe path underflows block_length[1] to UINT32_MAX. OOB write. Node 22/24/26. Python Brotli. Bun. Envoy. anything that decompresses attacker br. OpenAI found it in February. root cause fixed quietly. security label came late. PoC: github.com/syrex1013/CVE-202… credit: @AdrianDacka #Node2Shell #RCE #ExploitDev

or we found a bug in cron can we call it job2shell

they RCE'd ~3 million PCs to stop a botnet. Time4Popcorn updater. abandoned domains. HTTP. no code signing. JSON says download this exe. Windows runs it as SYSTEM. macOS as root. CVE-2026-30612. Eye Security registered the dead update domains, watched millions of check-ins, then used the same RCE path to disable the updater. 2M+ update downloads. requests dropped ~98%. domains handed to Shadowserver. no vendor left to patch. uninstall is the only real fix. Android still exposed. writeup: labs.eye.security/operation-… credit: Niels Teusink / Eye Research #RCE #ThreatResearch #infosec

Daybreak approved. Codex still will not let me hunt. not grey area. not random prompt. program access on, same refuse. anyone found a real workaround ?

🚨 FortiSIEM unauth RCE. again. CVE-2026-106173. gRPC on tcp/27918. no client cert required. SendQueryResult builds /query/result/<query-id> with zero path checks. ../ gets the directory. a NUL truncates the forced result-*.dat name. overwrite /opt/charting/redishb.sh. cron runs it every 60s. shell. writeup: horizon3.ai/attack-research/… PoC: github.com/horizon3ai/CVE-20… credit: Zach Hanley / @Horizon3Attack #RCE #ExploitDev #InfoSec

🚨 CVE-2026-43748 ANE kernel OOB write direct-path user client. no special entitlements. sandboxed app on iOS and macOS. kANEMaxBuffers allows 0xff surfaces. memoryMapRequest only has room for 0x80 entries of 0x10. the capacity check runs after the descriptor loop already wrote past the table. up to ~0x7f0 bytes into data.kalloc.3072. PoCs for both platforms: github.com/vschko/CaseStudie… credit: vschko #iOS #ExploitDev #InfoSec

AI agent found a Linux kernel LPE humans skipped. CVE-2026-72018. SMC-D over dibs_loopback. peer-controlled dmbe_idx. 16 zero bytes past a 16KB folio. no leak. groom cred. zero euid. uid=0. needs CAP_NET_ADMIN. still root from a "weak" write. xbow.com/blog/no-time-to-pwn… credit: XBOW / Baul Lee #Linux #ExploitDev #AIRedTeam #InfoSec

🚨 CVE-2026-50610 Acer NitroSense. standard user to NT AUTHORITY\SYSTEM. named pipe open to Authenticated Users. no impersonation. no AccessCheck. commands run as SYSTEM. cmd=3 = arbitrary HKLM write. IFEO on utilman. login screen. SYSTEM shell. intrinsec.com/cve-2026-50610… credit: Cassius GARAT / Intrinsec #Windows #ExploitDev #InfoSec