Tag
7 results in the archive.
New intrusion paths ESC1 and ESC8 reveal attackers leveraging help desk impersonation for remote access, runtime code execution, and Certificate Services abuse through authentication relay and Kerberos techniques.
Tailscale is addressing multiple SSH-related vulnerabilities that allow credential theft, server crashes, and root privilege escalation, posing significant risk to affected environments.
Dell released a critical patch for a privilege escalation vulnerability in its System Update CLI tool that could let attackers gain root access.
CVE-2026-54121 enables a standard domain user to escalate privileges by exploiting an Enterprise Certificate Authority to become a Domain Controller, exposing risks in PKI infrastructure trust models.
A critical vulnerability in cPanel (CVE-2026-58048) allowed authenticated hosting customers to execute SQL commands with root database privileges, risking full database control.
Multiple high-severity vulnerabilities in Weintek cMT3092X HMI may allow attackers to escalate privileges and steal credentials, impacting critical manufacturing environments.
A zero-day vulnerability named LegacyHive enables privilege escalation on fully updated Windows systems, allowing attackers to gain admin-level access.