Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2026.03.07.md

Self-XSS in Facebook payments flow leads to Instagram and Facebook account takeovers - https://ysamm.com/uncategorized/2025/01/15/self-xss-facebook-payments.html

TP-Link ER605 DDNS Pre-Auth RCE: Chaining CVE-2024-5242, CVE-2024-5243, CVE-2024-5244 - https://oobs.io/posts/er605-1day-exploit/

The Shady World of IP Leasing - https://acid.vegas/blog/the-shady-world-of-ip-leasing/

A Race Within A Race: Exploiting CVE-2025-38617 in Linux Packet Sockets - https://blog.calif.io/p/a-race-within-a-race-exploiting-cve

Avira: Deserialize, Delete and Escalate - The Proper Way to Use an AV - https://blog.quarkslab.com/avira-deserialize-delete-and-escalate-the-proper-way-to-use-an-av.html

#informatyka