abraxas

cooler than the other side of the pillow. former @mandiant and @TrellixARC. white hat hero.

[abraxas @abraxas_null]

brand new wordpress core release, brand new exploit. get it while it's hot! unauthorized local file inclusion; conditional RCE

https://t.co/cKCWdO7PxS

[abraxas @abraxas_null]

@r_ressl How long ago did you find this? I did a really deep dive on the WP core source and didn’t come across this. When was it disclosed?

[ExploitGrid @exploitgrid]

💥 The flaw can allow inclusion of readable local PHP files and may lead to RCE under certain conditions.

❌ The PoC demonstrates LFI/witness behavior, not a direct RCE or reverse shell.

✅ Fixed in WordPress 7.1.2+

🔗 PoC: https://t.co/0NxHtTuFFP

#CyberSecurity #WordPress

[abraxas @abraxas_null]

@hraness @DevinAI @zeddotdev All of them rebuilding existing tools in rust

[portbuster @portbuster1337]

lpe-toolkit has been updated with new LPE exploits!

New exploits added:
- RefluXFS CVE-2026-64600
- CrackArmor CVE-2026-23268
- skb_shift CVE-2026-43503
- GRO Flag Loss CVE-2026-43503
- snap-confine CVE-2026-8933

https://t.co/Uafh1WjbqV

[BleepingComputer @BleepinComputer]

Hackers start exploiting critical WordPress flaw for code execution
https://t.co/QmfITLRy8z

https://t.co/QmfITLRy8z

[abraxas @abraxas_null]

@uwu_underground Has SH been known to have PeopleSoft 0day?

[abraxas @abraxas_null]

@nmatt0 @njcve_ BB scene is cursed. It’s going to backfire big time. I’ve just been releasing 0day instead of disclosing. Not worth it.

[abraxas @abraxas_null]

@_colonel_panic @dustrial DHT is a bitch

[amrit @amritwt]

from reddit

[Dark Web Informer @DarkWebInformer]

🚨[POC] CVE-2026-87902: WordPress Core versions up to and including 7.1.1 are affected by a Local File Inclusion vulnerability in the locate_template() function.

GitHub: https://t.co/VqaHEnmKku

[ExploitGrid @exploitgrid]

🚨 CRITICAL | WordPress Core — CVE-2026-87902
A PoC by @abraxas_null has been released for an unauthenticated Local File Inclusion (LFI) flaw.

🔴 CVE: CVE-2026-87902
⚠️ CVSS 4.0: 9.2 Critical
⚠️ CVSS 3.1: 8.1 High
🎯 CWE-98
��� Affected: ≤ 7.1.1

[Robert Ressl @r_ressl]

@abraxas_null https://t.co/098sAahCXs
https://t.co/mxhvemE9Cz

[abraxas @abraxas_null]

Glory belongs to this guy… he did it all (including finding the bug). https://t.co/QxBBjIBMzR

[abraxas @abraxas_null]

brand new wordpress core release, brand new exploit. get it while it's hot! unauthorized local file inclusion; conditional RCE

https://t.co/cKCWdO7PxS

[abraxas @abraxas_null]

@Moto @Snapdragon Not nearly enough cameras

[abraxas @abraxas_null]

@dir @h4x0r_dz Bro have you seen the banner???

[abraxas @abraxas_null]

@r_ressl @TheHackersNews Oh wow, excellent work!

[abraxas @abraxas_null]

@cat3lyst Just release the 0day. They respond pretty quickly to that.

[abraxas @abraxas_null]

@r_ressl @TheHackersNews Glad I didn’t write a report ���

[abraxas @abraxas_null]

@ptdbugs Big fat exploit here: https://t.co/cKCWdO7PxS

[abraxas @abraxas_null]

New ragebait idea: steal your mutuals tweets word for word and tweet it yourself