βββββββ βββββββ βββββββ ββββββββββββββββββββ ββββββββββββββ βββ
ββββββββββββββββββββββββββββββββββββββββββββββ ββββββββββββββ βββ
βββββββββββ ββββββ βββ βββ ββββββββββββββββββββββ βββ βββ
βββββββββββ ββββββ βββ βββ ββββββββββββββββββββββ βββ βββ
βββ βββββββββββββββββββββ βββ βββββββββββ βββββββββββββββββββββββββββ
βββ βββ βββββββ βββββββ βββ βββββββββββ βββββββββββββββββββββββββββ
Welcome to RootShell
Hardcore cybersecurity deep dives & breaking security news
Operator Injection in MongoDB: Bypassing Auth with $ne, $gt, $lt
Learn how MongoDB operator injection using $ne, $gt, $lt (and related operators) can bypass naΓ―ve authentication, how to craft payloads, test them, and implement robust defenses.
Advanced SVG XXE Exploitation: Multi-Stage RCE via Rendering Engines
Learn how SVG-based XML external entity attacks can bypass file checks, exfiltrate data, and chain into ImageMagick, librsvg or GD to achieve remote code execution on vulnerable servers.
Certificate Transparency Log Mining 101: Fundamentals and Data Sources
Learn the basics of Certificate Transparency (CT) logs, how to query them via crt.sh, automate extraction with Python, parse results, and correlate with DNS history to spot phishing and typosquatting.
SSRF Port Scanning via Error Messages - Techniques & Automation
Learn how to turn SSRF into a stealthy port scanner by leveraging error messages, timing, and response codes. Covers payload crafting, automated tools, bypass tricks, and enumeration of internal services.
POODLE Attack Deep Dive: Exploiting SSLv3 Downgrade
Learn how the POODLE padding-oracle works, why SSLv3 fallback exists, and how to craft malicious payloads with OpenSSL and Python. Walk through downgrade forcing with sslsplit/mitmproxy, exfiltration techniques, and robust mitigations.
DNS Rebinding Fundamentals: Theory and Attack Surface
Learn the core mechanics of DNS rebinding, how it defeats the browser's same-origin policy, and why internal services like routers or Docker APIs become easy targets. Practical payloads, server setup, detection and mitigation are covered.
SonicWall SMA1000 Zero-Day Crisis: Critical SSRF & Code Injection Actively Exploited
Two zero-day flaws (CVE-2026-15409, CVE-2026-15410) in SonicWall SMA1000 appliances are being weaponised in the wild. The SSRF bug scores a perfect 10.0 CVSS, while the code-injection flaw rates 7.2, prompting urgent hotfixes and CISA KEV alerts.
Microsoft July 2026 Patch Tuesday Breaks Records: 622 Fixes, 2 Active Zero-Days
Microsoftβs July 2026 Patch Tuesday delivered a historic 622 vulnerability fixes, far exceeding any prior month. Two zero-days - CVE-2026-56155 (ADβ―FS) and CVE-2026-56164 (SharePoint) - were actively exploited, and a critical VM-escape (CVE-2026-57092) threatens hyper-visors.
Ubiquiti Deploys Critical Patches for UniFi Suite - CVE-2026 Flaws Fixed
Ubiquiti has released emergency updates for UniFi Connect, Talk, Access, Protect, and UniFi OS, addressing four critical CVEs (CVE-2026-55115, CVE-2026-54402, CVE-2026-50746, CVE-2026-50747) with CVSS scores up to 10.0. The flaws enable SSRF, unauthenticated command injection, and authenticated SQL injection, posing severe risk to enterprise and ISP deployments.
RoguePlanet Zero-Day (CVE-2026-50656) Patched: Critical Defender Privilege-Escalation Fixed
Microsoft released an out-of-band update on Julyβ―9,β―2026 that patches the RoguePlanet race-condition in mpengine.dll (CVE-2026-50656). The flaw let a low-privileged user spawn a SYSTEM-level command prompt, and a public PoC showed 100β―% success on vulnerable machines.
Bad Epoll (CVE-2026-46242): Critical Linux/Android Root Escalation
A newly disclosed kernel flaw (CVE-2026-46242) in the epoll subsystem lets any unprivileged user gain root on Linux servers, desktops, and Android devices. The bug, uncovered by Anthropicβs AI model Mythos, can be chained from Chromeβs renderer sandbox for full kernel code execution.
Cisco SD-WAN Zero-Day (CVE-2026-20245) Exploited for Months Before Patch
Mandiant discovered that threat actors leveraged CVE-2026-20245 to gain root on Cisco Catalyst SD-WAN Manager devices months before Cisco disclosed and patched the flaw, marking the seventh SD-WAN zero-day of 2026.
Support RootShell
Help keep this blog growing and maintained
β€οΈ Sponsor MeSupport on GitHub Sponsors
What your sponsorship helps with:
- β‘ Server hosting and maintenance
- β‘ Publishing new security research and CVE analysis
- β‘ Building and maintaining open-source tools
- β‘ Community support and development
Thank you for supporting open-source cybersecurity! π
contact
Feel free to reach out for collaboration, security consulting, or just to say hello.
[email protected]