[ <- back-issue archive · live wire · issue #11 · HUB 30D · 2026-11-14 16:05 UTC ]
 .-.                    .-. 
(: `--------------------' :)
 )   intel brief // #11   ( 
(: .--------------------. :)
 `-'                    `-'
> /var/archive/digest/11.intel :: [ 2026-11-14 16:05 UTC ]
  • WordPress core upgrade-window RCE is live-fire -- CVE-2026-119977 is an unauthenticated race condition in the core update process, hitting 4.7 through 7.1.3, fixed in 7.1.4 plus backports; Wordfence logged exploitation attempts within days of release. Unauthenticated means the scanners get the same shot you do. [Ram Gall / Wordfence]
  • Apache HTTP/2 critical, CVE-2026-119618 -- RCE-class flaw sitting upstream of every WordPress site on Apache, and the patch lands on the host, not in wp-admin, so 'check with your provider' is the entire mitigation story. [Ram Gall / Wordfence]
  • CSP allowlists turned into credential exfil pipes -- @albinowax showed that an allowlisted host serving JSONP, uploads, or open redirects turns blocked XSS right back into token theft ('Blind trust'). Vendors still pitch CSP like a magic seatbelt; on most prod targets it's a pre-approved exfil list. [James Kettle / @albinowax]
  • SVG sanitizers bypassed by response headers alone -- 'Scalable Vector Grief' walked through six of eight popular sanitizers because Firefox will run script off response headers even when the body is benign XML. Sanitizing the markup is not sanitizing the response. [James Kettle / @albinowax]
  • Header injection escalated to desync in one move -- Kettle chained plain HTTP header injection into CRLF-powered request smuggling, serving random users a redirect to a collaborator host; PortSwigger shipped a scanner check for the pattern, which tells you how the vendors rate it. [James Kettle / @albinowax]
  • HTTP2Shell still echoing through unpatched fronts -- CVE-2026-111497, the critical Brotli flaw patched back in October 2025, now circulates as HTTP2
 .-.                      .-. 
(: `----------------------' :)
 )   possibilities // #11   ( 
(: .----------------------. :)
 `-'                      `-'
> /var/archive/digest/11.possibilities :: [ 74 sources ]
  • Review newly ingested writeups and repo commits below for fresh hunting angles.
 .-.                     .-. 
(: `---------------------' :)
 )   github brief // #11   ( 
(: .---------------------. :)
 `-'                     `-'
> /var/archive/digest/11.github :: [ code & repo tradecraft ]

Tracked GitHub repositories and recent code pushes for this window are listed below.