LoginAn exploit chain was found in LG webOS, leading to root command execution. The chain starts with a client-key issuance bypass, progresses through service-level access, and ultimately leads to root command execution.
[link] [comments]
Normal view
Received — 12 October 2026
⏭
/r/netsec - Information Security News & Discussion
-
/r/netsec - Information Security News & Discussion
- CVE-2026-91768: FastCGI allowed_clients compared only 96 of an IPv6 address's 128 bits
LG webOS sync-demo Preauth RCE
12 October 2026 at 08:58
submitted by /u/SSDisclosure
[link] [comments]
Google paid me $90,000 for this RCE
12 October 2026 at 07:09
-
- Telegram Desktop vulnerability allowed any user file to be stolen
Telegram Desktop vulnerability allowed any user file to be stolen
12 October 2026 at 03:13
-
- A story of wifi secrets, UART lockdowns and a damaged flash memory chip
A story of wifi secrets, UART lockdowns and a damaged flash memory chip
10 October 2026 at 17:32
-
- GitHub Actions leaking secrets when Miri output is cached
GitHub Actions leaking secrets when Miri output is cached
10 October 2026 at 11:54
-
- Smashing the token limit with overlapping fragments (CSS injection token exfiltration, PortSwigger Research)
