PwnEscape is not a hypervisor bug. It is a host-kernel IPv4 flaw where a guest’s checksum-offload metadata rewrites a header the kernel already acted on — leaking host memory, crashing the host, or, in the researcher’s lab, running code as root.
unixshadow — permissions setuid, setgid, and the Sticky Bit The three permission bits every sysadmin uses and few can explain […]
unixshadow — cursor-backdoor The Cursor Marketplace Backdoor A trusted editor extension auto-updated, and a stranger’s SSH key quietly moved into […]
node — CVE-2026-111497 ~ node –version # if this prints anything older than the fixed lines below, keep reading Node2Shell: […]
analyst@unixshadow: ~/cve-count/2026.log analyst@unixshadow:~# curl -s “https://services.nvd.nist.gov/rest/json/cves/2.0?pubStartDate=2026-10-01T00:00:00.000Z&pubEndDate=2026-10-26T00:00:00.000Z&resultsPerPage=1” # totalResults: 13934 The CVE Flood: Why 2026 Brokethe Vulnerability Count October 2026 published […]
root@rescue: ~/initramfs/rebuild.log root@rescue:~# dracut -f /boot/initramfs-$(uname -r).img $(uname -r) # panic on boot, rebuild it right Panic on Boot? Rebuilding […]
