Exploits
PwnEscape Part 2: Escaping a Firecracker MicroVM by Hijacking a Live KVM vCPU Thread
A deep technical breakdown of PwnEscape Part 2—how an attacker uses a host physical memory primitive to hijack a live Firecracker KVM vCPU thread and execute host code reversibly
CivSwitch: How a Civ VII Cartridge Jailbreaks the Switch 2
A chat box bug in Civilization VII's Switch 1 cartridge now jailbreaks the Switch 2. Here's how CivSwitch works, and why 2K just recalled the game
CVE-2026-119977: How the WordPress Core Update Race Condition Enables Unauthenticated RCE
CVE-2026-119977 turns the WordPress core update into an unauthenticated RCE window. See how the race works, who is exposed, and how to update safely
BTCPay Server Hot Wallet Sweeps: How Attackers Drained On-Chain Wallets and How to Protect Yours
BTCPay Server hot wallets were swept on Nov 1, 2026. See how the attack worked, how it differs from the August LND breach and how to protect
CVE-2026-112816 Explained: The LXD and MicroCloud Authentication Bypass That Scored a Perfect CVSS 10.0
CVE-2026-112816 is a CVSS 10.0 LXD and MicroCloud authentication bypass. Learn how the PeerCertificates loop works, affected versions, and how to patch
CVE-2026-58882 explained: how an 8-byte SMS kills Android’s phone process
An 8-byte WAP Push message crashes com.android.phone and drops calls on Android 12-17. Full breakdown of CVE-2026-58882, the SMS of Death bug
TeamViewer CVE-2026-111585: Integer Overflow Turns the Remote Host Against the Technician
CVE-2026-111585 is a CVSS 8.8 integer overflow in TeamViewer that lets a malicious remote host corrupt the heap on the technician’s machine. Here is how it works and how to patch
Telegram Android RCE: How a tgcalls MediaState Bug Let a Voice Call Run Code
Telegram Android vulnerability, tgcalls, MediaState, remote code execution, NebuSec, ARM64
CVE-2026-98432: Linux Kernel TCP Use-After-Free and the AI-Built Root Exploit
What is CVE-2026-98432? CVE-2026-98432 is a use-after-free in the IPv4 TCP implementation of the Linux kernel, disclosed in October 2026 ...
CVE-2026-76418: Cisco ASA and FTD SSL VPN zero-day explained (affected versions, fixes, mitigation)
CVE-2026-76418 lets an unauthenticated attacker reboot Cisco ASA and FTD firewalls. See affected versions, fixed releases, mitigation and an audit script
