Insights & Updates
Security research, product releases, and offensive-security insights from the Sn1perSecurity team.
Attack Surface Management
CVE-2026-98432 is a CVSS 9.8 use-after-free in the Linux kernel's IPv4 TCP handshake, present since Linux 4.4. Remote root has been demonstrated against servers…
xer0dayz
·
24 min read
Attack Surface Management
CVE-2026-119977 lets an unauthenticated attacker race a WordPress core upgrade to remote code execution through the staged copy WordPress unpacks under wp-content/upgrade/. WordPress 7.1.4…
xer0dayz
·
21 min read
Attack Surface Management
CVE-2026-84295 is a CVSS 10.0 pre-auth Progress WS_FTP Server vulnerability that discloses administrative credentials. It is fixed in 2024.0.6 and 2025.0.3, but twelve more…
xer0dayz
·
25 min read
Try it free
Sn1per finds, ranks, and exploits real vulnerabilities autonomously - the same way attackers do.