LSB - Cybersecsloth

Headlines

Meme: Drake-style panels rejecting safe vLLM settings and approving trust_remote_code for CVE-2026-114053

meme dump: patch your stuff edition

4 hours ago

CVE-2026-115353: Mistune Include Path Traversal File Read

Mistune’s RST Include Just Read Your .env (CVE-2026-115353)

6 hours ago

CVE-2026-115375: Incus Backup Path Traversal to Host Root

Incus Backup Import: ../ in a Volume Name, Root on the Host (CVE-2026-115375)

6 hours ago

CVE-2026-114053: vLLM code_revision RCE via /tokenize

vLLM Will Import Your Attacker’s Processor If You Ask Nicely (CVE-2026-114053)

6 hours ago

WebRTC Datachannel C2 Lab Walkthrough and Detection

WebRTC Datachannels: C2 That Looks Like a Call Your Firewall Already Allows

10 hours ago

WebSocket C2 Channel Lab: Upgrade, Subprotocol, Detection

Your C2 Is a WebSocket Upgrade and the Proxy Logged It as Chat

10 hours ago

Linux memfd_create Fileless ELF Exec Lab Walkthrough

Linux Fileless ELF: memfd_create, fexecve, and a Fake kworker Name

10 hours ago

Plex2Shell CVE-2026-96652 to 96656: KEV Chain and Lab Hunt

Plex2Shell: Your Home Theater Just Joined CISA KEV and Learned dlopen

10 hours ago

PHP2Shell CVE-2026-109618 CVE-2026-109619: Patch PHP Now

PHP2Shell Just Turned Every Unpatched Upload Form Into a Shell Lottery

10 hours ago

Geolocation and Metadata Deep Dive: Verifying a Claim With OSINT

Verify or Burn a Claim: Chaining Photo, Map, and Public Records

6 days ago11 hours ago

PNG LSB Stego C2: Hide Beacon Config in Image Pixels (Lab)

Hide a C2 Beacon Config in a PNG Pixel and Call It a Profile Pic

Cybersecsloth Editorial6 days ago11 hours ago05 mins

the implant downloaded a profile pic, flipped the LSBs, and recovered where to phone home. no PE. just pixels. here is the lab and the hunt.

Read Full News