
Vulnerabilities
Secure Froxlor Servers Before 2.3.15 to Block Critical Root Escalation Risk
Authenticated Froxlor customers can seize full server control by exploiting a symlink flaw in versions prior to 2.3.15, granting them root-level access.
Everything Shell Bulletin has reported about privilege escalation: 3 stories, newest first. Part of our Vulnerabilities coverage.

Authenticated Froxlor customers can seize full server control by exploiting a symlink flaw in versions prior to 2.3.15, granting them root-level access.

A critical flaw in the My Calendar plugin allows attackers to hijack administrator accounts without credentials, granting full control over affected WordPress sites.

Microsoft releases updates for CVE-2026-96231, a high-severity flaw in .NET runtimes that allows local attackers to gain elevated system privileges.