jp / kw0

[jp / kw0 @JoshuaProvoste]

Genesis - Version 0.4.6 / Remote Code Execution (RCE) via Insecure Deserialization based on sink pickle.load and Global Cache Poisoning via Predictable Asset Hashing (SHA256)

https://t.co/WSlnCIreAv

[jp / kw0 @JoshuaProvoste]

@v12sec Brilliant and painful at the same time. #BugBounty

[jp / kw0 @JoshuaProvoste]

@Dinosn Another RCE vectors in LeRobot:
1) https://t.co/CcOGuqS1vK
2) https://t.co/aw0P4kYLFF

[jp / kw0 @JoshuaProvoste]

@YogSoth0 @Dinosn I'm looking for new Python-based targets 😂

[jp / kw0 @JoshuaProvoste]

@vuln_tracker @Chocapikk_ Another RCE vectors in LeRobot:
1) https://t.co/CcOGuqS1vK
2) https://t.co/aw0P4kYLFF

[jp / kw0 @JoshuaProvoste]

@JDSalbego Another RCE vectors in LeRobot:
1) https://t.co/CcOGuqS1vK
2) https://t.co/aw0P4kYLFF

[jp / kw0 @JoshuaProvoste]

@TheCyberSecHub Another RCE vectors in LeRobot:
1) https://t.co/CcOGuqS1vK
2) https://t.co/aw0P4kYLFF

[jp / kw0 @JoshuaProvoste]

@cytexsmb Another RCE vectors in LeRobot:
1) https://t.co/CcOGuqS1vK
2) https://t.co/aw0P4kYLFF

[jp / kw0 @JoshuaProvoste]

@UpwindMDR Another RCE vectors in LeRobot:

1) https://t.co/CcOGuqS1vK
2) https://t.co/aw0P4kYLFF

[jp / kw0 @JoshuaProvoste]

@ChrisShort Old but gold.

[jp / kw0 @JoshuaProvoste]

🚨 Django RCE - Remote Code Execution

https://t.co/8Bi4AcXoVU #BugBounty

[jp / kw0 @JoshuaProvoste]

@0x0SojalSec Thanks for sharing

[jp / kw0 @JoshuaProvoste]

@NyxoAce Looks like mexican boxing style

[jp / kw0 @JoshuaProvoste]

@AlexisJesusCL @ANCIChile Aún crees en el viejito pascuero? 😂

[jp / kw0 @JoshuaProvoste]

@ANCIChile

[jp / kw0 @JoshuaProvoste]

@wiz_io @github

[jp / kw0 @JoshuaProvoste]

@HenryMa79561893

[jp / kw0 @JoshuaProvoste]

@Xbow

[jp / kw0 @JoshuaProvoste]

@tecchirp @GoogleVRP 😂😂😂😂