l1ackers

~/news

News

+1
newsAn auth bypass in the gateway that holds every model keycat ~/news/2026-09-21-litellm-mcp-auth-bypass.md
0
newsA GlobalProtect cookie logged in as admin, and the score moved aftercat ~/news/2026-09-21-panos-globalprotect-cookie-auth-bypass.md
0
newsAn ebtables ARP rewrite could write into a spliced file pagecat ~/news/2026-09-18-linux-ebtables-snat-out-of-bounds-write.md
0
newsA Cisco ISE API endpoint never asked who was callingcat ~/news/2026-09-16-cisco-ise-api-auth-bypass.md
0
newsA Google Pixel flaw is confirmed exploited in the wildcat ~/news/2026-09-16-google-pixel-kev.md
0
newsA WAF built its session signing key from the install clockcat ~/news/2026-09-16-safeline-session-key-from-install-clock.md
0
newsA predictable bucket name was taken as proof of ownershipcat ~/news/2026-09-10-aws-security-agent-bucket-ownership.md
0
newsA RouterOS flaw let a login raise its own permissionscat ~/news/2026-09-10-mikrotik-routeros-privilege-escalation.md
+1
newsA UEFI Shell embedded in firmware can be reopened with extra boot entriescat ~/news/2026-09-08-uefi-shell-secure-boot-bypass.md
0
newsA malicious npm package that does nothing at install timecat ~/news/2026-09-03-indexed-btree-npm-runtime-malware.md
0
newsAn alternate path walks past NetScaler's authenticationcat ~/news/2026-08-19-netscaler-alternate-path-auth-bypass.md
l1ackers · shell this is a way in, not a requirement
$