Ambionics Security

A @LexfoSecurite solution.

Ambionics is a native Continuous Threat Exposure Management (CTEM) solution that helps organizations reduce cyber exposure.

[Ambionics Security @ambionics]

🔓 On an asset under our continuous monitoring, our pentester @nol_tech turned a SELECT-only PostgreSQL SQLi in Drupal (CVE-2026-9082) into a full RCE when DB role is superuser. Details below 👇
📝 https://t.co/R7F5XQ2vZD
🛠️ https://t.co/yRJ8zX1Nlb
#Drupal #PostgreSQL #RCE #SQLi

[Lexfo @LexfoSecurite]

Congratulations to our pentester @nol_tech on placing 2nd in the Web Senior category at the #FCSC2026 qualifications, with a score of 3,616 points.

This kind of result speaks for itself. Best of luck for the next rounds! 🍀

#CTF #Cybersecurity

[Ambionics Security @ambionics]

🚨 Critical File Upload to RCE in @NinjaForms File Uploads @WordPress plugin (CVE-2026-0740)!

Deep dive & PoC:
👉https://t.co/ZLu5KMsj9D
🔍By @whattheslime from @Ambionics CTEM solution
🛡️Patch available (v3.3.27) — Update now!

#WordPress #RCE #InfoSec #CyberSecurity #CVE

[Lexfo @LexfoSecurite]

🔔 New research from Lexfo on pre- & post-authentication vulnerabilities in WSO2 products — uncovering bypasses, RCE, SSRF, CSRF, and account-takeover risks. See our detail article → https://t.co/1jNmsIhdZl
#cybersecurity #infosec #offensivesecurity #pentest #WSO2

[Ambionics Security @ambionics]

🚀 Huge thanks to @cfreal_ for the threading PR.
Lightyear is now faster than ever! We truly appreciate continued contributions.
If you haven’t yet, give lightyear a try and see the difference yourself!

#opensource #lightyear #performance #php #pentest #infosec #cybersecurity

[Charles Fol @cfreal_]

lightyear just got 6 times faster!

Although I now work at @Synacktiv, I proposed a PR for the tool to support threading and compression, greatly reducing the time required to dump a file.

Dumping the demo /etc/passwd now takes 48s instead of 5m30.
https://t.co/d7n4baN12a

[Ambionics Security @ambionics]

The discovered chain contains interesting new vectors : Pre-authentication SQLi on the Inventory native feature ->Authentication bypass by fetching api_token or personal_token -> Either plugin command injection through the Marketplace or a new LFI vector via PDF exports->RCE.

[Ambionics Security @ambionics]

GLPI, an open-source IT service management software suite, has released version 10.0.18, addressing two critical vulnerabilities found by our experts : an SQL injection (CVE-2025-24799) and a remote code execution (CVE-2025-24801). Checkout our blog post: https://t.co/INba9ohWNL.

[Ambionics Security @ambionics]

New #PHP research by @ptswarm ! Using our tools wrapwrap (https://t.co/u0QOYqhpQ6) and our latest one lightyear (https://t.co/g0kGkHZQgg) developed by @cfreal_ ! #php #xxe #infosec #CyberSecurity

[PT SWARM @ptswarm]

🔥 The "impossible" XXE in PHP? Not so impossible anymore.

Our researcher Aleksandr Zhurnakov discovered an interesting combination of PHP wrappers and a feature of XML parsing in libxml2 to exploit it.

Read: https://t.co/GuW2Vf5qLN

[Ambionics Security @ambionics]

We're proud to announce LIGHTYEAR, a tool that let you dump files, blind, in PHP, based on a new algorithm.
https://t.co/GG4tSNnUCf

[Ambionics Security @ambionics]

Kudos to @cfreal_ for his talk @defcon a few weeks ago !
You can watch it now on Youtube !
https://t.co/j6bwJdGa98

[Ambionics Security @ambionics]

At long last: Iconv, set the charset to RCE (part 3): in this final part of the iconv series, @cfreal_ demonstrates how you can use CVE-2024-2961 to convert BLIND file reads to RCE. https://t.co/NipFAehQXY

[Ambionics Security @ambionics]

In August, @cfreal_ will be at @defcon to talk about CVE-2024-2961. Don't miss Iconv, set the charset to RCE: Exploiting the glibc to hack the PHP engine ! #DEFCON32

[Ambionics Security @ambionics]

@JHennyArt1 Surely you mean @ambionics_uk!

[Ambionics Security @ambionics]

Iconv, set the charset to RCE (part 2): @cfreal_ exploits direct iconv() calls to hack the PHP engine, and its most popular webmail, @Roundcube (CVE-2024-2961). https://t.co/PCnWmGsnRw

[Ambionics Security @ambionics]

@threadreaderapp unroll

[Ambionics Security @ambionics]

📷 Learn more and contribute: Scalpel is in Alpha and your feedback is valuable. Check the docs and join us on GitHub!
https://t.co/tLb1pP36ey

[Ambionics Security @ambionics]

Scalpel is here: this @Burp_Suite extension lets you edit your requests, in Python 3, in the repeater or on-the-fly. https://t.co/5z5VwojG1b

[Ambionics Security @ambionics]

📷 Modify the entire traffic with Scalpel. Implement custom logic to manipulate requests globally using the request function: