Fur1na

Security Researcher、Furina's fans、Like cats.
Spending most of the day floating on the water.

[Fur1na @HuTa0kj]

@aabyzov Through multi-stage agent autonomous probing, I believe I will be more effective than rule-based detection.

[Fur1na @HuTa0kj]

A single command checks the security of your agent skill, preventing poisoning attacks.
https://t.co/NwnRxTSbCl

[Fur1na @HuTa0kj]

To avoid CVE-2025-55182 (CVE-2025-66478), please refer to: https://t.co/xVaHxC0GPA

Thanks to them.

[Fur1na @HuTa0kj]

After releasing version 1.10.1-fix.1, Dify submitted a new PR updating the image address in the docker-compose file (which has not yet been released). This means that when you use dify 1.10.1-fix.1 and deploy it using Docker, you are still vulnerable to CVE-2025-66478.

[LoL Esports @lolesports]

10 years. 1189 games.

End of an era.

[Fur1na @HuTa0kj]

The ultimate combination of natural sciences!

[Elon Musk @elonmusk]

The tower has caught the rocket!!

[Genshin Impact @GenshinImpact]

Happy Birthday, #Furina! #GenshinImpact

Oops, you're here early. I haven't even finished getting ready yet!
You think my makeup and outfit look fabulous today? Of course, darling Gentilhomme Usher always does an impeccable job.
Since you're here, how about I have them style you too?
This special day is the perfect opportunity for us to make a glamorous entrance~ Hehe, I bet no one will be able to take their eyes off us!

Want to see more videos and GIFs of Furina? Hurry over to Genshin Impact's TikTok account to watch them together! https://t.co/seVwVZSgOK

[Orange Tsai 🍊 @orange_8361]

Thrilled to release my latest research on Apache HTTP Server, revealing several architectural issues! https://t.co/7ygwWXY0pd

Highlights include:
⚡ Escaping from DocumentRoot to System Root
⚡ Bypassing built-in ACL/Auth with just a '?'
⚡ Turning XSS into RCE with legacy code from 1996

[Fur1na @HuTa0kj]

lol

[DogeDesigner @cb_doge]

everything else is down, this app still works 🚬

[Fur1na @HuTa0kj]

If you encounter a 500 status code when reproducing CVE-2024-4577, try adding `%add+error_reporting%3d0` (-d error_reporting=0), because the deprecated allow_url_include will cause a warning. God bless you.🙏
#CVE-2024-4577 #CVE

[Fur1na @HuTa0kj]

Why is it so cute!

[Fur1na @HuTa0kj]

@Bugcrowd ZoomEye
ZoomEye's new package is now available, starting at only $19! Link👉https://t.co/y35BaHaEiA
If you want to know more cybersecurity information, please join👉https://t.co/cLmdip7PEp

[Fur1na @HuTa0kj]

@TheHackersNews I used ZoomEye to search
https://t.co/Y29EHoRR7l"%2Fwp-content%2Fplugins%2FLayerSlider"&from=tw

ZoomEye's new package is now available, starting at only $19! Link👉https://t.co/y35BaHaEiA
If you want to know more cybersecurity information, please join👉https://t.co/cLmdip7PEp

[Fur1na @HuTa0kj]

Wink !

[Fur1na @HuTa0kj]

CVE-2024-3094

[Malwar3Ninja | Threatview.io @Malwar3Ninja]

[https://t.co/otlIKKsosi] ⚠️ Resources for responding to #CVE-2024-3094

1. Detection script https://t.co/CAwuKKaZ62

2. Detailed analysis along with exploit code and detection
https://t.co/y7mzyeHzS0

3. #ThreatHunt query
https://t.co/uZn6OTFuTW

#threatintel
#DFIR

[Fur1na @HuTa0kj]

@Ayushshende0 @zoomeye_team @pdnuclei Hello, you can go through the bug bounty platform and use ZoomEye’s site:https://t.co/QBUudosH7U syntax to get the subdomain name, and hope you can find the vulnerable website.😃

[Fur1na @HuTa0kj]

@zoomeye_team Thanks to the ZoomEye team!

[Fur1na @HuTa0kj]

@Dinosn Thanks for your exp, I'm using ZoomEye to search for more ColdFusion assets.

https://t.co/ohij1knBVs

I will publish my findings on the official channel: https://t.co/YpVJ8JcN4r

[Fur1na @HuTa0kj]

@the_yellow_fall I used ZoomEye to search for more ColdFusion assets.

https://t.co/zFM74LqxII

[Fur1na @HuTa0kj]

@evanconnelly I also used ZoomEye to find more Tesla devices, such as title: "TeslaMate"

Click https://t.co/FYuNwgECBk

I will post my findings on the official channel: https://t.co/YpVJ8JcN4r