#authenticated

SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE

Sep 22, 2026 // 14:22

A SharePoint Server vulnerability that Microsoft initially classified as a spoofing flaw with a CVSS score of 6.5 actually enables authenticated remote code execution, according […]

Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers

Aug 14, 2026 // 14:13

Cybersecurity researchers have detailed a post-exploitation technique that enables the Chrome DevTools Protocol (CDP) inside a running Google Chrome or Microsoft Edge process on Windows, […]

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Jul 25, 2026 // 12:10

Security researcher Yuhang Wu at depthfirst has published a working proof-of-concept (PoC) exploit that executes commands as git on an unpatched self-managed GitLab 18.11.3 server. […]