TGViewer
Channel Public Channel
Infosec Fortress

Infosec Fortress

@infosec_fortress

In this channel, I put interesting stuff about computer systems security
Open in Telegram
Subscribers
1.71K
Photos
65
Videos
5
Links
221
Recent Posts 20 shown
Post #354 135
Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)

🔗 Link

#heap
#cve
———
🆔 @Infosec_Fortress
watchTowr Labs Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127) Well, well, well, well, well, well, well, well, well, well, well, well, well, well, well. We're back. Sorry. We've been watching the onslaught of vulnerabilities flood the internet. Every man, dog, and their grandmas (apparently?) are now using LLMs to find…
Post #349 510
You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))

🔗 Link

#cve
———
🆔 @Infosec_Fortress
watchTowr Labs You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?)) Suddenly, you’re in a room. You look around - oh, you’re surrounded by other new starters at your new job. Yes, it’s Monday, and you’re being onboarded. You know the drill - it’s the typical enterprise “please don’t be a bad person or we may have
Post #348 592

Forwarded from Source Byte

Route of Root: Bring a "DoS only" bug to LPE and bypass the existing patch to win $10,500 in kernelCTF
#CVE-2023-2156 (“Route of Death”) is a Linux kernel vulnerability that was believed to only lead to a DoS attack, and was considered patched in April 2023. However, Nebula Security discovered a bypass of the patch and found that it is actually exploitable and can lead to LPE on any Linux distribution that has IPv6 and namespaces enabled. This writeup covers the technical details of the exploit.

https://nebusec.ai/research/cve-2026-43501-route-of-root/
Post #346 765
Black Hat USA 2026 Keynote: Vulnerability Research in the Agentic Age

🔗 Link

#AI
#blackhat
#conference
#exploitation
#vr
———
🆔 @Infosec_Fortress
YouTube Black Hat USA 2026 | Keynote: Vulnerability Research in the Agentic Age Hear from Yan Shoshitaishvili in a compelling discussion exploring how agentic AI is transforming the security landscape, from new attack surfaces and emerging risks to the next wave of defensive innovation. This session tackles one of the most important…
Post #345 872
Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037)

🔗 Link

#heap
#cve
———
🆔 @Infosec_Fortress
watchTowr Labs Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037) Welcome back to another watchTowr Labs blog post. This time, we're looking at Progress Kemp LoadMaster, a load balancer that sits at the edge of a lot of enterprise networks. Edge appliances have a habit of becoming the way in rather than the thing keeping…
Post #344 689
CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451)

🔗 Link

#cve
———
🆔 @Infosec_Fortress
watchTowr Labs CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451) Well, well, well - once again, the cat has dragged us in and spat us out. Today, we find ourselves questioning the reality we sit within. Must it be so predictable, and why us? “But watchTowr, what do you mean?” Well, if you’re here, you likely fit into…
Post #343 582
It’s 37oC, And All We Can Think About Is ColdFusion (Adobe ColdFusion Security Bulletin APSB26-68 CVE Bonanza)

🔗 Link

#cve
———
🆔 @Infosec_Fortress
watchTowr Labs It’s 37oC, And All We Can Think About Is ColdFusion (Adobe ColdFusion Security Bulletin APSB26-68 CVE Bonanza) We’re back, melting - we’ve tried shouting, screaming, and throwing things at the Sun, and it is just not working. Before we begin our analysis, we want to be clear - given the number of vulnerabilities fixed (and some not mentioned..), we’ve struggled to…
Post #341 752
Unprivileged root via a use-after-free in DRM GEM change_handle (CVE-2026-46215)


🔗 Link

#linux
#kernel
#exploitation
———
🆔 @Infosec_Fortress
Post #340 913
More Evidence That Words Don't Mean What We Thought They Meant (Ivanti Sentry Pre-Auth OS Command Injection CVE-2026-10520)

🔗 Link

#cve
———
🆔 @Infosec_Fortress
watchTowr Labs More Evidence That Words Don't Mean What We Thought They Meant (Ivanti Sentry Pre-Auth OS Command Injection CVE-2026-10520) Today, Ivanti published an advisory. “No way?” we hear you say. "Yes way!" Today’s advisory outlines two vulnerabilities in Ivanti’s Sentry product, appealing directly to our inner desire for sophisticated server-side, pre-authenticated vulnerabilities.…
Post #339 678
Marking Your Own Homework (Check Point Remote Access VPN IKEv1 Authentication Bypass CVE-2026-50751)

🔗 Link

#cve
———
🆔 @Infosec_Fortress
watchTowr Labs Marking Your Own Homework (Check Point Remote Access VPN IKEv1 Authentication Bypass CVE-2026-50751) It is yet another day in this parallel universe of security, where the devices we bolt onto the edge of our networks to keep the bad people out are, with remarkable consistency, the exact thing that let the bad people in. While we’ve seemingly had a breather…
Post #338 642
Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE)

🔗 Link

#cve
———
🆔 @Infosec_Fortress
watchTowr Labs Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE) Three posts? In three days? Are we insane? We're home alone, there's no one to stop us, and we're up past bedtime. So, we need to talk about Splunk. On June 10th, Splunk published this CVE-2026-20253 advisory: It has everything that we love: * No authentication
Post #334 875
Arbitrary Kernel Address Increment via NtQuerySystemInformation

🔗 Link 1
🔗 Link 2

#windows
#browser
#kernel
#exploitation
———
🆔 @Infosec_Fortress
GitHub GitHub - orinimron123/CVE-2026-40369-EXPLOIT: Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability… Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox - orinimron123/CVE-2026-40369-EXPLOIT
  • 👍 2
Older posts →

About this channel

How can I read @infosec_fortress without a Telegram account?
TGViewer shows the public web preview Telegram publishes for Infosec Fortress: recent posts, photos, videos and the subscriber count, with no app, login or account.
How many subscribers does Infosec Fortress have?
Infosec Fortress (@infosec_fortress) has 1.71K subscribers on Telegram, refreshed roughly every 30 minutes.
Does Infosec Fortress know I viewed it here?
No. Public channel previews carry no viewer identity, and TGViewer has no accounts or tracking of what you look up.
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →