368 Bytes Entered nslookup.exe Through Its Keyboard. Then They Became Executable.
A Windows proof of concept turned redirected standard input into a shellcode staging area inside nslookup.exe, removing two API calls many injection detections expect.
Rob Nidschelm
Tech tinkerer who spends too much time with home labs and Docker stacks. Into AI, Roman & Medieval history, and all things sci-fi. Avid traveller, reader and writer, with a passion for good food.
A Rancher Login Page Could Hand Attackers the Clusters Behind It
A critical Rancher flaw could let an unauthenticated attacker poison the login page and expose administrator access. Five branches have fixed releases.
Changing the Remote Desktop App Will Not Save an AVD Classic Deployment
The last Remote Desktop MSI support exception ends on 28 September. AVD Classic itself retires on 30 September. Moving users to Windows App cannot migrate Classic host pools.
Three Ways the Host Can Cross Contrast’s Confidential Boundary
The host was inside the threat model, yet attestation, a file-copy policy and ACPI each gave it a route back into the confidential workload.
Australia’s Critical-Infrastructure Regulator Wants More Than a Signed Risk Report
Australia's 2025-26 critical-infrastructure risk report is due on 28 September. The regulator says its next compliance cycle will look harder at serious or persistent gaps behind the board's statement.
Why a MONAI Model Bundle Deserves a Software Review
A model bundle, shared cache or medical-imaging data file can cross from content into code when a pipeline uses unsafe Python loading paths.
The Windows Fix That Restored Remote Desktop Still Leaves Some Citrix Users Staring at a Black Screen
Microsoft fixed September's Remote Desktop failure, but some Citrix and FSLogix environments can still leave users facing a black screen after sign-in.
Froxlor’s Cleanup Job Could Erase Another Tenant’s Files
Froxlor's FTP cleanup queued a root command, then trusted that the path would still mean the same thing when the cron job ran.
A Prefix Check Could Let JavaScript Escape vm2
A missing path boundary turned an allowed module into a route to neighbouring code running inside the host process.
A Sylius Customer Login Could Open the Admin API
In vulnerable Sylius shops, one reused email address can turn a customer token into administrator access while a separate flaw can mark an enlarged order paid.