Someone has created a vulnerable PHP website, loaded it with a Bitcoin wallet, and challenged the Internet to hack into it and they can keep the Bitcoin. It has a running timer to show if the PHP exploitability was over-hyped. https://t.co/5Pk2aLtFR3
Nothing is safe, nothing is sacred
The bright forest is here
90% done with reverse engineering all of the pumpfun contracts
Should be done tonight
Open source everything or it will be open sourced for you
https://t.co/mKr7yzyw4W
I found this interesting "403 Forbidden" Bypass; through "Microsoft-Azure-Application-Gateway/v2"
1. Accessing the URL returns "403 Forbidden"
2. Appending the query "?x=.js", successfully bypasses the Azure restriction leading to direct access to the restricted resource.
فيلم
اخر رقصة في كيبور
من اعظم ما تم تقديمه عن حرب اكتوبر
في الحقيقة العمل مبهر و متكامل
و يعكس رغبة صادقة في تقديم الفكرة
تحية وتقدير لكل من ساهم في هذا العمل
إليكم الفيلم كاملا
شخص استهلك 200 مليار توكن وهو يضبط إعدادات Hermes Agent، والحين قرر يشارك شغله مع الجميع في مشروع مفتوح المصدر اسمه Oh-My-Hermes.
المشروع يجي معه أكثر من 150 مهارة، ونظام ذاكرة طويلة المدى، وأدوات لإدارة الذاكرة، وتوزيع المهام على وكلاء فرعيين باستخدام نماذج مختلفة.
وفيه تحسينات مثل تشغيل الأدوات بالتوازي وتقييم النتائج.
والأحلى؟ ما تحتاج تضبط كل شيء بنفسك؛ ثبّته بسطر واحد، وعطه المهمة اللي تبيها، وهو يتولى الباقي تلقائيًا.
المشروع متاح مجانًا ومفتوح المصدر على GitHub.
رابط المشروع:
https://t.co/b9qf7u5V68
Palantir-style world map. Open source.
OSIRIS is a free dashboard that puts a dozen public data feeds on one map:
→ Live flights and ships
→ Satellites and undersea cables
→ Earthquakes, wildfires and cyber-threat feeds
→ 6,000+ public traffic and open-webcam cameras
→ Optional AI analyst and 20 recon tools
Caveats: data quality varies by source, some feeds go stale, and camera coverage differs by country. The README says it's for research and education.
MIT licensed. Run it yourself.
https://t.co/b3AqsfGe4y
🚨 Critical pre-authentication RCE research published for two PHP core vulnerabilities; CVE-2026-109618 + CVE-2026-109619
PoC: https://t.co/UMqqumv8e1
The flaws affect PHP's session.upload_progress handling and can be chained through session-file injection, memory corruption, or deserialization behavior to achieve remote code execution under specific application conditions.
CVSS: 9.2 Critical
Affected: PHP 5.4.0 through 8.5.11
Fixed: PHP 8.2.35, 8.3.36, 8.4.27, and 8.5.12
The repository includes verification PoCs for session injection, a heap use-after-free, and handler-mismatch deserialization, along with a vulnerable Docker lab and detailed technical analysis.
MOSS IMAGE JUST UNLOCKED NSFW GENERATION
this community LoRA fine-tunes MOSS-Image for adult image generation
• built for 18+ image generation
• works with MOSS-Image Base and SFT
• open source under Apache 2.0
download it here 👇
https://t.co/mvP7oBqlvn