Root Access Club

🚨 SubZer0 Alert · 4 new to patch now CVE-2026-46300 — Linux Kernel Missing Initialization of a Variable Vulnerability on CISA KEV CVE-2026-41709 — Broadcom VMWare ESX Insufficient Logging Vulnerability on CISA KEV CVE-2026-104736 — The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including… Metasploit/Nuclei can already hit it · CVSS 9.8 CVE-2026-59177 — ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Metasploit/Nuclei can already hit it · CVSS 8.8 🌐 SubZer0 · 📣 @RootAccessClub · 🤖 @SubZer0Robot

🚨 Early warning: CVE-2026-101767 Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch CVE-2026-101767 rce · zero-day · critical · unauth — SecurityWeek, The Hacker News, The Register https://iliya-bashrc.github.io/SubZer0/

🔴 Now on CISA KEV CVE-2026-46300 CVE-2026-41709 https://iliya-bashrc.github.io/SubZer0/

🔴 Now on CISA KEV CVE-2026-46300 CVE-2026-41709 https://iliya-bashrc.github.io/SubZer0/

🚨 INFINITY CORE — 6 Linux kernel core LPEs Hyunwoo Kim (@v4bel) disclosed six bugs in core kernel subsystems that have historically seen few security issues. They enable local privilege escalation and container escape, and the Timer bug also gives Android root 🟠 Timer — CVE-2026-98260 🔴 Signal — CVE-2026-98256 🔵 MM — CVE-2026-89754 🟣 Futex — CVE-2026-80775 🟢 Sched — CVE-2026-98385 🟡 SLAB — CVE-2026-97941 (kernel panic only, no LPE chain yet) 🛡 Patch your kernels now. Public PoCs are out. GitHub 🔗 #Linux #Kernel #LPE #ContainerEscape #Android ⚡️ @RootAccessClub

╭─ 🛠 NEW TOOL │ CL4R1T4S │ LEAKED SYSTEM PROMPTS FOR CHATGPT, CLAUDE, GEMINI, GROK, PERPLEXITY, CURSOR, LOVABLE, REPLIT, AND MORE! - AI SYSTEMS TRANSPARENCY FOR ALL! │ 🎯 RedTeam ╰─ ⭐️ 51.6k stars

git clone https://github.com/elder-plinius/CL4R1T4S

🔗 GitHub #RedTeam ⚡️ @RootAccessClub

📡 SubZer0 Daily · Wed, Oct 28 1239 new CVEs · 80 critical · 2 added to CISA KEV 🔴 Actively exploited (CISA KEV) • CVE-2026-111497 9.2 · public PoC Google Brotli • CVE-2026-48356 public PoC Adobe Commerce and Magento Full list → https://iliya-bashrc.github.io/SubZer0/ 🌐 SubZer0 · 📣 @RootAccessClub · 🤖 @SubZer0Robot

🚨 SubZer0 Alert · 1 new to patch now CVE-2026-116167 — SiYuan from 2.9.0 before 3.8.7 contains a cross-site scripting vulnerability in the unauthenticated… Metasploit/Nuclei can already hit it · CVSS 7.6 🌐 SubZer0 · 📣 @RootAccessClub · 🤖 @SubZer0Robot

What do you think would be the right response?🤔 To submit your answer, visit the link below: https://bugcod3.com/quiz

🚨 SubZer0 Alert · 1 new to patch now CVE-2026-108123 — The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to authorization bypass in all… Metasploit/Nuclei can already hit it · CVSS 7.5 🌐 SubZer0 · 📣 @RootAccessClub · 🤖 @SubZer0Robot

🚨 SubZer0 Alert · 1 new to patch now CVE-2026-48356 — Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability on CISA KEV 🌐 SubZer0 · 📣 @RootAccessClub · 🤖 @SubZer0Robot

🔴 Now on CISA KEV CVE-2026-111497 CVE-2026-48356 https://iliya-bashrc.github.io/SubZer0/

🛠 open-sesame An AI web-pentest skill for Claude Code. Point it at a site you're authorized to test — it maps the attack surface, works through the OWASP WSTG, validates findings, and writes… git clone https://github.com/hassan-algo/open-sesame ⭐️ 96 · 🧬 HTML 🔗 GitHub #Recon #WebSecurity #ActiveDirectory #Pentest 🤝 @RootAccessClub × @BugCod3

A quick thank you to everyone supporting SubZer0 🙏❤️‍🔥 We've reached 1,600+ visits, and it's great to see the project reaching more people 🔥 A special thanks to @akaclandestine on X for sharing SubZer0. Your post brought a significant amount of traffic and new members to the project, and I genuinely appreciate the support And of course, thanks to everyone who's visited, shared the project, or joined along the way 🤍 More to come 🤠

🛠 opentrap A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner… ▸ Proxy-first by design - intercept, replay and edit live traffic, with the whole toolset one click away. ▸ Detection that stands up - crawl and audit with the proven OWASP ZAP engine, so the findings you report… ▸ Everything in one window - repeater, intruder, sequencer, decoder, comparer, collaborator and a full logger. git clone https://github.com/opentrap/opentrap ⭐️ 591 · 🧬 Java 🔗 GitHub #WebSecurity #Scanner #BugBounty #Pentest ⚡️ @RootAccessClub

📡 SubZer0 Daily · Tue, Oct 27 921 new CVEs · 44 critical · 2 added to CISA KEV 🔴 Actively exploited (CISA KEV) • CVE-2026-109619 9.2 · public PoC PHP Group PHP • CVE-2026-109618 9.2 · weaponized PHP Group PHP 🎯 Patch now • CVE-2026-116485 9.3 · weaponized danmu_api before 1.21.7 contains an authentication bypass… Full list → https://iliya-bashrc.github.io/SubZer0/ 🌐 SubZer0 · 📣 @RootAccessClub · 🤖 @SubZer0Robot

🚨 SubZer0 Alert · 1 new to patch now CVE-2026-116485 — danmu_api before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated… Metasploit/Nuclei can already hit it · CVSS 9.3 🌐 SubZer0 · 📣 @RootAccessClub · 🤖 @SubZer0Robot

🔴 Now on CISA KEV CVE-2026-109618 CVE-2026-109619 https://iliya-bashrc.github.io/SubZer0/