#эксплойт
-
A 37-Year-Old Bug Surfaces: Rooting OpenBSD via Code Older Than BSD Itself
Researchers at Calif gained root on OpenBSD with KARL, SMAP and SMEP enabled by overflowing a counter that had stayed 16-bit since the original BSD sources.
-
A Race in AF_ALG: a 14-Year-Old Linux Kernel Hole Worth $113,337
A STAR Labs researcher found a race condition in the Linux kernel's crypto subsystem that lets an ordinary user become root and break out of a Docker container. The flaw, CVE-2025-39964, had lived in the code for roughly fourteen years.
-
“ShieldCrash”: a new zero-day exploit for Microsoft Defender grants SYSTEM privileges
An anonymous researcher going by the handle Nightmare Eclipse has released an exploit for Microsoft Defender right after September's “Patch Tuesday.”
-
Researcher Publishes FalconFlank — a 0day Exploit for CrowdStrike Falcon
A hacker going by the handle Chaotic Eclipse has released a PoC for a privilege-escalation vulnerability in CrowdStrike Falcon — already the third exploit against popular security products in a short span.
-
Device Takeover via Screen Sharing in Zoom — an AI Found the Flaw in 20 Prompts
Researchers uncovered vulnerabilities in Zoom that allowed an attacker to silently seize control of the device of any participant in a screen-sharing video call. The alarming part: the hole was found by a public AI tool in fewer than twenty prompts.
-
Exploit Published for Already-Patched Pre-Auth RCE in vBulletin
Researchers have disclosed CVE-2026-61511 — a vulnerability in vBulletin's template engine that allows code execution without authentication. The patch came out nearly a month before the exploit was published, but many forums still haven't updated.
-
Researcher Publishes New PoC for Windows Vulnerability Shortly After Patch Tuesday
A specialist using the alias Chaotic Eclipse has presented the LegacyHive exploit, which leverages a vulnerability in the Windows User Profile Service to escalate privileges.
-
A loader has appeared for running Linux on the PlayStation 5
The ps5-linux-loader project has been published on GitHub — a payload that uses hypervisor exploits to launch a custom loader on the PlayStation 5. This opens the way to installing Linux on the console.