Eresus Security Research Feed https://www.eresussec.com Research, advisories, and offensive security writing from Eresus Security. en-us Tue, 25 Aug 2026 11:23:55 GMT <![CDATA[wp2shell: Unauthenticated WordPress Core RCE via REST API Batch-Route Confusion (CVE-2026-63030 + CVE-2026-60137)]]> https://www.eresussec.com/en/blog/wp2shell-wordpress-core-rce-cve-2026-63030 https://www.eresussec.com/en/blog/wp2shell-wordpress-core-rce-cve-2026-63030 Mon, 20 Jul 2026 00:00:00 GMT <![CDATA[RFC 10008's New HTTP QUERY Method Is a Blind Spot for Every WAF Written Before June 2026]]> https://www.eresussec.com/en/blog/rfc-10008-http-query-method-waf-bypass https://www.eresussec.com/en/blog/rfc-10008-http-query-method-waf-bypass Mon, 20 Jul 2026 00:00:00 GMT <![CDATA[CVE-2026-58420: Understanding Gitea Migration Restore Local File Inclusion]]> https://www.eresussec.com/en/blog/gitea-cve-2026-58420-local-file-inclusion-en https://www.eresussec.com/en/blog/gitea-cve-2026-58420-local-file-inclusion-en Tue, 14 Jul 2026 00:00:00 GMT <![CDATA[FreeBSD TIOCSTI: Terminal Input Injection and Local Privilege Risk]]> https://www.eresussec.com/en/blog/freebsd-tiocsti-terminal-input-injection-disclosure https://www.eresussec.com/en/blog/freebsd-tiocsti-terminal-input-injection-disclosure Tue, 14 Jul 2026 00:00:00 GMT <![CDATA[Evidence-First Application Security: Turning Findings into Verifiable Decisions with Eresus Guard]]> https://www.eresussec.com/en/blog/evidence-first-application-security-eresus-guard https://www.eresussec.com/en/blog/evidence-first-application-security-eresus-guard Tue, 14 Jul 2026 00:00:00 GMT <![CDATA[Four Chrome Extensions, One Scheme: How a Roblox Extension Network Is Farming Its Users]]> https://www.eresussec.com/en/blog/roblox-extension-network-roearn-research https://www.eresussec.com/en/blog/roblox-extension-network-roearn-research Mon, 29 Jun 2026 00:00:00 GMT <![CDATA[Linux Kernel LPE 2026: Copy Fail, Dirty Frag, and Fragnesia Compared]]> https://www.eresussec.com/en/blog/linux-kernel-lpe-2026-copy-fail-dirty-frag-fragnesia https://www.eresussec.com/en/blog/linux-kernel-lpe-2026-copy-fail-dirty-frag-fragnesia Sun, 17 May 2026 00:00:00 GMT <![CDATA[JavaScript Obfuscation Reverse Engineering: A Practical Deobfuscation Playbook]]> https://www.eresussec.com/en/blog/javascript-obfuscation-reverse-engineering-deobfuscation https://www.eresussec.com/en/blog/javascript-obfuscation-reverse-engineering-deobfuscation Sun, 17 May 2026 00:00:00 GMT <![CDATA[Fragnesia CVE-2026-46300: Linux Kernel XFRM ESP-in-TCP Local Privilege Escalation]]> https://www.eresussec.com/en/blog/fragnesia-cve-2026-46300-linux-kernel-xfrm-esp-privilege-escalation https://www.eresussec.com/en/blog/fragnesia-cve-2026-46300-linux-kernel-xfrm-esp-privilege-escalation Sun, 17 May 2026 00:00:00 GMT <![CDATA[Dirty Frag CVE-2026-43284: Linux Kernel Local Privilege Escalation via ESP and RxRPC]]> https://www.eresussec.com/en/blog/dirty-frag-cve-2026-43284-linux-kernel-privilege-escalation https://www.eresussec.com/en/blog/dirty-frag-cve-2026-43284-linux-kernel-privilege-escalation Sun, 17 May 2026 00:00:00 GMT <![CDATA[AI Chatbot Web Application Pentesting: Attack Surface Beyond Prompt Injection]]> https://www.eresussec.com/en/blog/ai-chatbot-web-application-pentest-methodology https://www.eresussec.com/en/blog/ai-chatbot-web-application-pentest-methodology Sun, 17 May 2026 00:00:00 GMT <![CDATA[CVE-2026-7482: Ollama GGUF Heap Out-of-Bounds Read — Full Technical Analysis]]> https://www.eresussec.com/en/blog/ollama-cve-2026-7482-heap-oob-gguf-vulnerability https://www.eresussec.com/en/blog/ollama-cve-2026-7482-heap-oob-gguf-vulnerability Mon, 04 May 2026 00:00:00 GMT <![CDATA[CVE-2026-41940: Emergency Action Plan for cPanel & WHM Authentication Bypass]]> https://www.eresussec.com/en/blog/cpanel-whm-cve-2026-41940-authentication-bypass-action-plan https://www.eresussec.com/en/blog/cpanel-whm-cve-2026-41940-authentication-bypass-action-plan Fri, 01 May 2026 00:00:00 GMT <![CDATA[Copy Fail CVE-2026-31431: Linux Kernel Local Privilege Escalation]]> https://www.eresussec.com/en/blog/copy-fail-cve-2026-31431-linux-kernel-privilege-escalation https://www.eresussec.com/en/blog/copy-fail-cve-2026-31431-linux-kernel-privilege-escalation Fri, 01 May 2026 00:00:00 GMT <![CDATA[The Limitations of WAF: Why Firewalls Alone Can't Prevent Hacks]]> https://www.eresussec.com/en/blog/waf-vs-pentest-limitations https://www.eresussec.com/en/blog/waf-vs-pentest-limitations Tue, 31 Mar 2026 00:00:00 GMT <![CDATA[Kubernetes (K8s) Penetration Testing Playbook: The Black Box Approach]]> https://www.eresussec.com/en/blog/kubernetes-k8s-black-box-pentest-playbook https://www.eresussec.com/en/blog/kubernetes-k8s-black-box-pentest-playbook Tue, 31 Mar 2026 00:00:00 GMT <![CDATA[The Overlooked Threat in AI Models: Keras & Pickle File Vulnerabilities]]> https://www.eresussec.com/en/blog/keras-llamafile-model-vulnerabilities https://www.eresussec.com/en/blog/keras-llamafile-model-vulnerabilities Tue, 31 Mar 2026 00:00:00 GMT <![CDATA[Forgotten Secrets in the Frontend: What Hackers Extract from JavaScript Files]]> https://www.eresussec.com/en/blog/javascript-front-end-secrets-exposure https://www.eresussec.com/en/blog/javascript-front-end-secrets-exposure Tue, 31 Mar 2026 00:00:00 GMT <![CDATA[The Silent Assassin of Modern APIs: BOLA / IDOR Vulnerabilities and Their Impact]]> https://www.eresussec.com/en/blog/api-bola-idor-vulnerabilities-backend-security https://www.eresussec.com/en/blog/api-bola-idor-vulnerabilities-backend-security Tue, 31 Mar 2026 00:00:00 GMT <![CDATA[ERESUS-ADV-2026-002: Server-Side Request Forgery (SSRF) via Cloud Metadata Endpoints]]> https://www.eresussec.com/en/blog/eresus-adv-2026-002 https://www.eresussec.com/en/blog/eresus-adv-2026-002 Sat, 28 Mar 2026 00:00:00 GMT