Gh0xE9 | Ghost In The Bytes

Gh0xE9 is a team dedicated to exposing real threats and delivering verified reports to keep you safe from misinformation.

[Gh0xE9 | Ghost In The Bytes @Gh0xE9]

我觉得未来的所有计算机行业都要达成一个共识，不要在网络上公开炫耀自己做了什么软体、实现了什么功能，有哪些创新性的想法在过去我们通常会用来学习，但现在有AI的加持下人人都可以1:1复刻你的产品，并且在未来，乙方这个概念会越来越淡化计算机市场，过去一个软体几万块，现在花几十块钱就能复刻了

[Gh0xE9 | Ghost In The Bytes @Gh0xE9]

@github
Hello, I am a community developer. I discovered today that I am unable to log in to my GitHub account—could you tell me what might be the issue? My ID is
@icecliffs
, I have dozens of open-source projects, but I am currently unable to log into my account. #GitHubSupport

[Gh0xE9 | Ghost In The Bytes @Gh0xE9]

We have released an AI-powered red teaming and penetration testing tool designed for cybersecurity professionals. https://t.co/Ao9txVApxh
#Hacking #AI #Hacker

[Gh0xE9 | Ghost In The Bytes @Gh0xE9]

I've created a bot related to Github, CVE, and cybersecurity incidents. If you're interested, please follow our Telegram channel for the latest information on cybersecurity activities.

https://t.co/TnBkp1Isyn

[Gh0xE9 | Ghost In The Bytes @Gh0xE9]

It is recommended to avoid opening Cursor or VSCode projects casually, and to check the "Trust Workspace" option, because once you do, your data may be stolen by hackers.
https://t.co/Xo2LQ5fJjJ

[Gh0xE9 | Ghost In The Bytes @Gh0xE9]

The n8n AI workflow platform has been found to have a high-risk Remote Code Execution (RCE) vulnerability, which could allow attackers to completely take over the system
https://t.co/nC4R6DEejL

[Gh0xE9 | Ghost In The Bytes @Gh0xE9]

A photo circulating on the Chinese internet shows the principle behind how the PLA photographed Taipei 101 #PLA #China #WW3 #War

[Gh0xE9 | Ghost In The Bytes @Gh0xE9]

[⚠️NEWS]:Early this morning, Trust Wallet's official X account also released an official statement confirming that Trust Wallet browser extension version 2.68 has a security risk, reminding all users using version 2.68 to immediately disable it and upgrade to version 2.69

[Gh0xE9 | Ghost In The Bytes @Gh0xE9]

Some little-known tips and tricks for achieving RCE using YAML syntax

#bugbounty #bughunting #hacking

[Gh0xE9 | Ghost In The Bytes @Gh0xE9]

GitLab released critical security updates this week for both its CE and EE, addressing a high-severity XSS vulnerability (CVE-2025-12716). The flaw allows attackers to hijack user sessions by crafting malicious Wiki pages, posing a significant security risk.

[Gh0xE9 | Ghost In The Bytes @Gh0xE9]

The initial patch released earlier this week was incomplete. If you're running versions 19.0.2, 19.1.3, or 19.2.2, you remain vulnerable to the DoS issue Developers should immediately upgrade to these safe versions:
19.0.x → 19.0.3
19.1.x → 19.1.4
19.2.x → 19.2.3

[Gh0xE9 | Ghost In The Bytes @Gh0xE9]

New flaws in React enable DoS attacks and source code exposure. Earlier patches (19.0.2, 19.1.3, 19.2.2) were incomplete and require urgent updates. Malicious requests to Server Functions can trigger an infinite deserialization loop and exhaust CPU, taking the server down.

[Gh0xE9 | Ghost In The Bytes @Gh0xE9]

https://t.co/JvPfwPkYH9

[Gh0xE9 | Ghost In The Bytes @Gh0xE9]

I've discovered a very sad fact: most people aren't following the official X account of the Chinese Ministry of National Defense, but rather a poorly made fake account impersonating an official one. This is why X banned it

[Gh0xE9 | Ghost In The Bytes @Gh0xE9]

Furthermore, I found an official article published within China stating that MND_China is the true X account of the Chinese Ministry of National Defense. It's truly foolish of some people not to bother to understand the facts.

[Gh0xE9 | Ghost In The Bytes @Gh0xE9]

@kurokarasumaru @zuilizhishier @ChnEmbassy_jp Furthermore, I found an official article published within China stating that MND_China is the true Twitter account of the Chinese Ministry of National Defense. It's truly foolish of some people not to bother to understand the facts...

[Gh0xE9 | Ghost In The Bytes @Gh0xE9]

@kurokarasumaru @zuilizhishier @ChnEmbassy_jp I've discovered a very sad fact: most people aren't following the official X account of the Chinese Ministry of National Defense, but rather a poorly made fake account impersonating an official one. This is why X banned it

[Gh0xE9 | Ghost In The Bytes @Gh0xE9]

Two major events today:

1. CVE-2025-55182, a vulnerability related to Next.js and React
2. Cloudflare enterprise users experienced a temporary outage.

Excellent internet connection, please keep running.

[PortSwigger @PortSwigger]

React2Shell (CVE-2025-55182 / 66478) detection is now available in Burp Suite.

Update/install ActiveScan++ v2.0.8 → https://t.co/gXFCfLF2Co

or use the Custom scan check → https://t.co/6Xa6xBDOPj

#React2Shell #AppSec #BurpSuite

[Gh0xE9 | Ghost In The Bytes @Gh0xE9]

Cloudflare is back! :)