Numb3rs

doing cool things such as opening files with nano

[Numb3rs @numbrs]

I've never worked on WhatsApp before, so I thought it'd be interesting to poke it with a stick!

I wrote an article about my attempt to uncover WhatsApp's CVE-2026-23866:
https://t.co/56bQA9fuHZ

This is my first article on mobile VR, let me know what you think!

[Numb3rs @numbrs]

I've never worked on WhatsApp before, so I thought it'd be interesting to poke it with a stick!

I wrote an article about my attempt to uncover WhatsApp's CVE-2026-23866:
https://t.co/56bQA9fuHZ

This is my first article on mobile VR, let me know what you think!

[Numb3rs @numbrs]

@brucedang @pwnlambda Dng accepted ?

[Curtis Spencer @curtis0x]

The hardest problems in computer science rn:

- Solving Millennium Prize problems
- Memory safety in the Linux kernel
- Pasting images reliably over ssh

[Numb3rs @numbrs]

@OfficialBenSaff @sweis @penlume

[def1ant @0xdef1ant]

"we had a good thing, you stupid son of a bitch! we had Lows. we had Mediums. we had renderer RCE bonuses, and it all ran like clockwork! you could have shut your mouth, let your fuzzers run, and made as much money as you ever needed! it was perfect! but no, you just HAD to go and flood the team with your AI-hallucinated slop reports"

[Numb3rs @numbrs]

@vmfunc isn’t it pretty low impact since you need control over indent ?

[Numb3rs @numbrs]

@LenSanook @Seifert1969 @vxunderground + you could just spoof it lol

[Numb3rs @numbrs]

@cr4zyengineer @m1thr1da @realpastaya i might have been angry for nothing and I am sorry but my point stands: why would you lie about it being a bof ? it doesn’t make sense. Sorry again for the previous tweet 😛

[Numb3rs @numbrs]

@cr4zyengineer @m1thr1da @realpastaya why would you lie about such thing ? Buffer overflow in a discord bot ? Cmon man wtf… + saying “my kernel research paid off” when you’re just reusing a token - what is wrong with you ?

[Numb3rs @numbrs]

@guime_guimeLove @5mukx From what I read from the writeup it appears that the sRIP offset is <1000 so the buffer’s size isn’t 1000 bytes (which doesn’t make sense regarding the check i agree)

[Numb3rs @numbrs]

@onejailbreak_ Was the AudioCore bug in audiomxd ?

[Root-Me @rootme_org]

🎄 New Root-Xmas Challenge 🎄

✨Today, heap your skills and parse your way through Santa’s picture-perfect surprises!
📌Submitted by : Numb3rs

🔗Details & participation here: https://t.co/a9mhshchcy

Good luck to you all !🎅

[Numb3rs @numbrs]

@NaMi____NaMi @popovicu94 This is how SROP works. We make a segfault so that we can control the state in which the kernel is gonna put the process after the signal.

[Numb3rs @numbrs]

@ChadSigmaRizz @osec_io Aslr is bypassable with a leak or relative writes

[Numb3rs @numbrs]

@JDG_1980 @robertgraham this could be a never ending debate and i don’t care that much but those mitigations can be bypassed + i don’t see how the end-user would accept using a software that is vulnerable to such a strong primitive (for this specific vuln)

[Numb3rs @numbrs]

@JDG_1980 @robertgraham the end user doesn’t know ffmpeg exists + google is never gonna give a poc that does code exec for obvious reasons

[Numb3rs @numbrs]

@JDG_1980 @robertgraham Those crashes mean that there is a memory error and those can be weaponized by attackers.

[Numb3rs @numbrs]

You just got a black box target and zero context.
Where do you even begin?
Here’s my take after two years in vuln research - what actually matters, and what’s just noise 👇

https://t.co/qtX4QJyc8c

[Numb3rs @numbrs]

@lea_linux ahah