LuX1eL

Security Researcher | Bug hunter | Red Teaming Enthusiast

[OpenHack @openhack]

🚨 PHP is going to be dropping emergency security updates tomorrow (October 21st, 14:00 UTC).

- CVE-2026-109618 & CVE-2026-109619 are unauthenticated RCE vulnerabilities both with a score of CVSS 9.2

- The RCE appears to work on default installations of many services & frameworks such as WordPress, Magento, Laravel and more

- PHP versions >5.4.0 affected

- Discovered by team @calif_io

[LuX1eL @0xLuX1eL]

@h4x0r_dz ask ai to make it "human toned" report 😆

[LuX1eL @0xLuX1eL]

i've even made typo refering "deepseek" while reporting this to ASRC🤦‍♂️. Initially, i've found this vulnerability on deepseek first, then it it turns out qwen is vulenrable as well lol

[LuX1eL @0xLuX1eL]

non-sandbox XSS on qwen chat💀
they patched the vulnerability and got medium sev bounty :V

I've also open an issue to Deepseek as well, yet there's still no response (same payload)

Check it out:
https://t.co/3ZduxYWYme

#Bugbounty #XSS #EthicalHacking

[LuX1eL @0xLuX1eL]

Hi everyone!
I built this tool to automate the deep dive domain recon on Virustotal. It recursively hunts subdomains and URLs.
feel free to enhance it🤗
https://t.co/8Z8Mj6GPr7
full case study here: https://t.co/uAfOUjFemV
If you find it useful, a star ⭐️ is much appreciated

[Marius Avram @securityshell]

Holy shit… the exploitation of CVE-2025-55182 has reached a new level. There’s now a publicly available Chrome extension on GitHub that automatically scans for and exploits vulnerable sites as you browse. Absolutely wild. 🤦‍♂️

[LuX1eL @0xLuX1eL]

I just pwned Fries on Hack The Box! https://t.co/S8mEYeeVop #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[LuX1eL @0xLuX1eL]

I just pwned NanoCorp on Hack The Box! https://t.co/bUm87cdSn5 #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[LuX1eL @0xLuX1eL]

I just pwned Giveback on Hack The Box! https://t.co/euGlAEAYEW #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[LuX1eL @0xLuX1eL]

I just pwned Noncesense Encryption on Hack The Box! https://t.co/PZs8dSe06N #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[LuX1eL @0xLuX1eL]

I just pwned Signed on Hack The Box! https://t.co/tc1ZSyjs8C #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[LuX1eL @0xLuX1eL]

I just pwned HackNet on Hack The Box! https://t.co/fbFTPleE53 #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[LuX1eL @0xLuX1eL]

Thank you so much! @inspectiv #bugbounty #ethicalhacking #cybersecurity #infosec

[LuX1eL @0xLuX1eL]

I just pwned Cobblestone on Hack The Box! https://t.co/XMRkndLYQK #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[LuX1eL @0xLuX1eL]

I just pwned Era on Hack The Box! https://t.co/6A7dXERDcP #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[LuX1eL @0xLuX1eL]

I just pwned Mirage on Hack The Box! https://t.co/PtikQzQ7xM #HackTheBox #htb #CyberSecurity #EthicalHacking #InfoSec #PenTesting

[LuX1eL @0xLuX1eL]

@VAG33K @Bugcrowd thanks brother, sadly its unresolve can't disclose yet

[LuX1eL @0xLuX1eL]

I earned $150 for my submission on @bugcrowd https://t.co/yoPcCMUorv #ItTakesACrowd

[LuX1eL @0xLuX1eL]

@r00t_ak @Bugcrowd its mark as unresolve, maybe if its fix already😅

[LuX1eL @0xLuX1eL]

@syper_shuvo @Bugcrowd thanks brother🫡