Ozetta

[Ozetta @02E774]

CVE-2019-11751: Malicious code execution through command line parameters
https://t.co/JuwLSnglQF

[Thereallo @Thereallo1026]

Claude Code v2.1.196 modifies the default system prompt to silently encode and upload information about whether if you are located in China to Anthropic.

[Ozetta @02E774]

Just solved all

[YesWeHack ⠵ @yeswehack]

We're live at @BlackHatEvents Asia!

Solve our hacking challenge to win exclusive swag: https://t.co/QnMQHuG6rA
→ At least 4 challenges: 1 wheel spin
→ At least 8 challenges: 2 wheel spins
→ All 12 challenges: 3 wheel spins

💡 The challenge is fully accessible online, but rewards can only be redeemed at our booth. To participate, simply log in to your YesWeHack account to submit your payload.

[Pasquale Minervini @PMinervini]

"in 2025 we will have flying cars" 😂😂😂

[Ozetta @02E774]

lol
I guess it is about this ?
https://t.co/xFhbL7lxHR

[vx-underground @vxunderground]

BREAKING: APPLE HACKED FACEBOOK HACKED X HACKED GOOGLE HACKED YOUTUBE HACKED TWITCH HACKED WIKIPEDIA HACKED

[Renwa @RenwaX23]

CVE-2025-30466: Safari <18.4 UXSS to bypass Same-Origin Policy with CVSS of Critical 9.8 🔴 ;)

https://t.co/VyYEoj3L3G

[SlowMist @SlowMist_Team]

⚠️A critical vulnerability (GHSA-vjh7-7g9h-fjfh) has been discovered in the widely-used elliptic encryption library.

😈Attackers can exploit this flaw by crafting specific inputs to extract private keys with just a single signature, potentially compromising digital assets or identity credentials.

✍️In our latest article, we break down the vulnerability—its root cause, impact, and how to mitigate the risks.

❤️Special thanks to @Rabby_io for providing the vulnerability intelligence.

🔗Read the full analysis here:
https://t.co/5IVZpjuCr6

[vx-underground @vxunderground]

According to UK politicians, if you enjoy encryption you're probably a pedophile

[ensy @ensyzip]

Found 3 XSS vulnerabilities in @solid_js, with 2 of them having CVEs and 1 no fix. Thanks to the team for fixing the bugs swiftly!
CVE-2025-27108, CVE-2025-27109

https://t.co/zGMcRirWhc

[Pluid @tryPluid]

BREAKING: Someone just burnt 500 ETH (~$1,400,000) by sending it to 0x000... and wrote the following message 👇

"The bosses of Kuande Investment: Feng Xin and Xu Yuzhi used brain-computer weapons to persecute all company employees and former employees, and even they themselves were controlled."

(h/t @sassal0x)

[ensy @ensyzip]

Found a DOMPurify 3.2.3 Bypass on Chinese New Year!
Works when `SAFE_FOR_TEMPLATES` is set to true.
https://t.co/Isia1fr5Xn

[AppleL @aplhk99]

Quick writeup for my unintended sol for SECCON self-ssrf https://t.co/w5OyoIc9PE

[Alisa Esage Шевченко @alisaesage]

My keynote slides from VXCON 2024 https://t.co/9VLW903Trz

[VXCON @vxresearch]

@alisaesage on stage gives the keynote for us.

[VXCON @vxresearch]

Thank you so much to everyone including our speakers, crew, sponsors, and guest.

It is second dinner time, let’s go.

[Yuki Chen @guhe120]

Hello @msftsecresponse, is there any legitimate process inside MSRC to escalate an issue if I beleive it's not assessed properly and fairly by current engineering team?

[st98 @st98_]

HKCERT CTF 2024 (Qualifying Round) writeup - st98 の日記帳 - コピー https://t.co/vTTJYO5MSE 書きました 木木木木

[Samuel Tang @mystiz613]

#HKCERT CTF starts tomorrow! I wrote some challenges this year - and they are guaranteed unoriginal! Register here:

https://t.co/UWS3cFWL65

[Masato Kinugawa @kinugawamasato]

multipart/x-mixed-replace again. The description explains it all
https://t.co/oRCbUiSLEa

[Zhou (Joe) Li @lzcarl]

Wow, I appreciate @acm_ccs being frank about review ethics! #CCS