N45HT

Cybersecurity Expert
.
📧 [email protected]
🌐

[N45HT @N45HTOfficial]

Codex Discovered a Hidden HTTP/2 Bomb 🤯🔥

🔗 https://t.co/A5pbENdbqc
🔗 https://t.co/JVgiUcGCUA

[N45HT @N45HTOfficial]

Cracking SameSite for a $2,000 Web Cache Deception by cTino 🤯🔥

👨‍💻 cTino (x/tinopreter)
🔗 https://t.co/I5gqoT50o0

[N45HT @N45HTOfficial]

MAD Bugs: "cat readme.txt" is not safe in iTerm2 by Calif Team 🤯🔥

👨‍💻 Calif Team
🔗 https://t.co/fn176VSQqF
🔗 https://t.co/x3WwC2iMQh

[N45HT @N45HTOfficial]

$1,000 LY Corporation Bug Bounty 💲

https://t.co/Y23Ikcm1oG Open Redirect Leading to OAuth Authorization Code Exposure and Access Token Compromise by imnotr3al 🤯🔥

👨‍💻 Natthakul Raingoen (imnotr3al)
🔗 https://t.co/8DwNHya8rK

[N45HT @N45HTOfficial]

First public macOS kernel memory corruption exploit on Apple M5 🤯🔥

👨‍💻 Calif Team
🔗 https://t.co/nqEwFCZnga
🔗 https://t.co/BZ4wxyQ4u2

[N45HT @N45HTOfficial]

CVE-2026-7270: How I Get Root on FreeBSD with a Shell Script by Calif Team 🤯🔥

👨‍💻
🔗 https://t.co/GusEenVrWB
🔗 https://t.co/tWkzzCKdWc
🔗 https://t.co/vvlHP3r89o

[N45HT @N45HTOfficial]

Codex Hacked a Samsung TV 🤯🔥

🔗 https://t.co/UZHkFMXoUf

[N45HT @N45HTOfficial]

$25,000 RCE in Unifi Access by Alruwaybikh 🤯🔥

👨‍💻 Abdulaziz Alruwaybikh / Catchify
🔗 https://t.co/pKs0YXnlwV
🔗 https://t.co/GVrKkdk9mK

[N45HT @N45HTOfficial]

CVE-2026-46529: 10-year-old RCE in Linux PDF Viewer (XReader/Evince/Atril) by N1et 🤯🔥

👨‍💻 João Medeiros (N1et)
🔗 https://t.co/HCbuk4SktD
🔗 https://t.co/1fJzAuuK3R
🔗 https://t.co/qRQLt8PY8f

[N45HT @N45HTOfficial]

Critical Remote Code Execution (RCE) in Roundcube: Your Email is Not Safe! 🤯🔥​

👨‍💻 AirCorridor / Hackers-Arise
🔗 https://t.co/igVoNpEMrE

[N45HT @N45HTOfficial]

Client-side Authentication Bypass: 3 Real-World Pentesting Case Studies by Pandya 🤯🔥

👨‍💻 Kuldeep Pandya / Synack
🔗 https://t.co/fgc1j195QG

🔗 https://t.co/48kAyS0Vab
🔗 https://t.co/5K7svXbXzb

[N45HT @N45HTOfficial]

Leaking 2M+ Records and Documents Without Attacking Core Application by Catchify Security 🤯🔥

👨‍💻 Catchify Security (x/catchifysa)
🔗 https://t.co/05X5C9Mau0

🔗 https://t.co/48kAyS0Vab
🔗 https://t.co/5K7svXbXzb

[N45HT @N45HTOfficial]

"How I Discovered Account Takeover (ATO) via XSS and Open redirect" by Jeetpal 🤯🔥​

👨‍💻 Jeetpal (x/Mr_mars_hacker)
🔗 https://t.co/BsJkIcsDyu

🔗 https://t.co/48kAyS0Vab
🔗 https://t.co/5K7svXbXzb

[N45HT @N45HTOfficial]

$2,500 Bug Bounty 🤑

"How I Took Over Any Account on a Major Platform With One Click — A Client-Side Path Traversal Story" by patrickbatman 🤯🔥​

👨‍💻 patrickbatman (x/hamidonsolo)
🔗 https://t.co/g6CLW5h8ZT

🔗 https://t.co/48kAyS0Vab
🔗 https://t.co/5K7svXbXzb

[N45HT @N45HTOfficial]

According to a signed statement, the account was also used for prior vulnerability disclosures that allegedly received no bounty payouts. The message concluded with a threatening line directed at Microsoft, referencing July 14th. https://t.co/oNguERWuI0 https://t.co/4K0T70Qp9P

[N45HT @N45HTOfficial]

🚨💥 A security researcher known as “Nightmare-Eclipse” claims their GitHub account was suspended and removed after publishing zero-day PoCs affecting Microsoft products.

[N45HT @N45HTOfficial]

Two cPanel Zero Day Vulnerabilities 👾💥

Two pre-auth XSS zero-days in cPanel's bundled Mailman fork: a reflected script-context breakout via json.dumps(), and a stored XSS in the moderator queue by Voorivex Team

👨‍💻 Shahinzadeh & Amirmohammad
🔗 https://t.co/UfIpCNk9Es

[N45HT @N45HTOfficial]

Drupal CVE-2026-9082 Blind SQL Injection Checker 👾💉

🔗 https://t.co/vUxmFfHCGT

🔗 https://t.co/N6QEWRC7vm
🔗 https://t.co/8FeI5kQpkt

[N45HT @N45HTOfficial]

Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer 👾⚠️

🔗 https://t.co/Ir1FEHg3aH

[N45HT @N45HTOfficial]

StubZero: $148,337 RCE in Google Cloud Production by brutecat 🤯🔥

👨‍💻 skull (x/brutecat)
🔗 https://t.co/zdoOICSwqM