Exploits

Discover expert insights on the latest exploits, penetration testing tactics, and real-world vulnerabilities to strengthen your cybersecurity defenses.

the exploit blog logo
The Exploit: Penetration Testing Insights From The Frontlines

Articles Categorized as Exploits

  • wp2shell: Critical WordPress Unauthenticated to Remote Code Execution Vulnerability

    wp2shell: Critical WordPress Unauthenticated to Remote Code Execution Vulnerability

    It’s rare for WordPress itself to have CVEs. CVE-2026-63030 and CVE-2026-60137 combine to create the critical unauthenticated to RCE vulnerability wp2shell.
    Read More
  • usbliter8 - Apple A12 and A13 SecureROM Exploit

    usbliter8 – Apple A12 and A13 SecureROM Exploit

    The usbliter8 SecureROM exploit is big news for jailbreaking iPhones. This hardware vulnerability cannot be fixed with a software update.
    Read More
  • RoguePlanet: the Defender Zero-day that Survived Microsoft’s June Patch

    RoguePlanet: The Defender Zero-day that Survived Microsoft’s June Patch

    The new critical Microsoft Defender exploit, RoguePlanet (CVE-2026-50656), is confirmed active in the wild. Learn what it is and how to protect your network.
    Read More
  • Building Security Tools from Source to Bypass Endpoint Security

    Building Security Tools from Source to Bypass Endpoint Security

    Endpoint security detects many malicious files created with pentest tools, but pentesters can sometimes bypass this by rebuilding source code. Learn how here.
    Read More
  • Cool Tools: Bloodhound CE

    Cool Tools: Bloodhound CE

    BloodHound’s Community Edition has everything a penetration tester needs to enumerate relationships in a domain in order to gain more access, even Domain Admin.
    Read More
  • CVE-2026-36748: XSS in Rock RMS Leads to Privilege Escalation

    CVE-2026-36748: XSS in Rock RMS Leads to Privilege Escalation

    Raxis Lead Pentester Jason Taylor recently discovered CVE-2026-36748, a high-risk XSS vulnerability in Rock RMS that allows privilege escalation to admin.
    Read More