[hp]

October 24, 2026

• The realistic target set is appliances that ship with ASLR off. Palo Alto firewall VMs, Citrix NetScaler, and HP System Management Homepage on ProLiant servers all bundle PHP without ASLR, removing the hardest part of the chain (Kevin Beaumont, Palo Alto advisory). On hardened targets, VulnCheck says its exploit team got RCE working across a range of ASLR-enabled x86 systems (Caitlin Condon); SecurityWeek has more on the emerging bypasses (SecurityWeek). · PHP2Shell: Attempts at Scale, Few Landings

in PHP2Shell's Reliability Problem — and a Third, Unpatched PHP Bug

September 4, 2026

• Three local privilege escalations in HP Easy Start for macOS (CVE-2026-12554/12555/12556) are documented with full technical write-up — a clean root path on managed Macs where the vendor helper is preinstalled (Cipher Security Labs). · Exploitation & Vulnerabilities

in Malware That Gaslights the AI Analyst

August 10, 2026

• Full-disk encryption on HP ThinPro can be bypassed because the TPM only measured half the boot chain. AmberWolf details the flaw alongside what they call a "terrible" vendor disclosure process that turned into a zero-day (AmberWolf). · Offensive & Exploitation

in ResetNightmare PoC Drops at Black Hat: One Kerberos Flaw, Any Account's Password Reset