Chris Issing

hacking, ctfs. playoff rondo

[Xchg Labs @xchglabs]

86 vulnerabilities to vendors across the AI and infrastructure stack, PyTorch, NVIDIA, Linux kernel (KVM), Oracle, Docker, Ollama, Chroma, LiteLLM, llama.cpp, and stb_image.

Writeups will publish as patches ship.

#cybersecurity #0day #infosec #xchglabs #pwn2own

[Chris Issing @ChrisIssing]

@_mixy1 Varun says stop whining and if ctfs suck stop playing

[Chris Issing @ChrisIssing]

@_mixy1 What’s this?

[Chris Issing @ChrisIssing]

@m4ul3r_0x00 idk

[Chris Issing @ChrisIssing]

@verd1c337 lowbob

[Chris Issing @ChrisIssing]

@0xTriboulet @m4ul3r_0x00 answer this

[Chris Issing @ChrisIssing]

@m4ul3r_0x00 @the_codedog @FoVeS_FPS @m4ul3r_0x00

[Chris Issing @ChrisIssing]

@m4ul3r_0x00 @0xTriboulet Gef

[Chris Issing @ChrisIssing]

@malta_ctf mvm

[Chris Issing @ChrisIssing]

@_bradan @tf2shmoo mvm

[Chris Issing @ChrisIssing]

@toasterpwn mvm

[Chris Issing @ChrisIssing]

@_mixy1 mvm

[Rich @lain3d]

Part 3 is out! https://t.co/5tYWCR1HkS

[Chris Issing @ChrisIssing]

@g3rry_mandarin *chigg

[Trellix Advanced Research Center @TrellixARC]

@Abraxus7331 took the lead exploring the python tarfile module in question, which is a default module in any Python project and found extensively in open-source frameworks and applications used for machine learning, automation and docker containerization. 🧵2

[HackTricks @hacktricks_live]

Yes, there is a NEW HACKTRICKS. Yes, I want to make it public.
We just need to reach 10.000 points:
- Like this = 1 point
- Retweet this = 3 points
- Buy Hacktricks PDF = 20 points (https://t.co/5bebk8oFj3)
1/3

[Chris Issing @ChrisIssing]

@elbee_ez Needs binja sticker

[Chris Issing @ChrisIssing]

@sqrtrev Twist??? I did the same