Quan the third III

Infosec / security researcher 🔬 undiscovered talent Striving to Learn more and Earn more. #BugbountyHunter #Cultivator🌱#Systemanalyst Mentors welcome.

[Quan the third III @big_Rbs]

@greensec_ Is it?

[Kim Jinu @uz56764]

We just received a $250,000 Chrome Full Chain bonus! 🎉

We've claimed the second Full Chain bonus of 2026. Only two remain!

Under the rules, every vulnerability had to be a non-duplicate 0-day, and the entire exploit chain had to be completed before any of them were patched.

Huge thanks to @nebusecurity for discovering a V8 vulnerability in just a single day! Also, a big thank you to @_deayzl for collaborating with me on the V8 Heap Sandbox research.

P.S. KVM escapes have been getting a lot of attention. I actually captured the Full VM Escape flag in KVMCTF about three months ago. Hopefully, I'll be able to share that research soon, too!

[Quan the third III @big_Rbs]

@callmesteppa The tryna be cute wit it part is erkin me 😕

[Navid @navid_rebian]

Opus 4.6 found an IDOR with low impact and said it wasn't worth reporting since, with the victim's email, it could only change their first name. But I was able to combine it with Mass Assignment and an inconsistency between two parts of the app to escalate it to a zero-click ATO.

[payloadartist @payloadartist]

$3M for a smart contract bug 🤯

Dude doesn't even have an X handle.

#bugbounty #bugbountytips

[I'M H4CK3R 42 @luckyhacker43]

$6,000 Mozilla VPN Clients: RCE via file write and path traversal 🤯💥

👨‍💻 Rein Daelman (x/ReinDaelman)
🔗 https://t.co/3A19wTRnZh
🔗 https://t.co/cADA5DUdp5

[BytecodeAssassin @oneandonlyhusam]

Trying to hack video games at 11 years old for in game purchases is what got me into reverse engineering today. What a journey.

[zack0x01 @zack0x01_]

XSS using "xss.pdf" 👀

I’ve seen a lot of people successfully find XSS by uploading a malicious PDF that gets rendered inside a PDF viewer.

But there’s another angle people often miss: data exfiltration doesn’t always require JavaScript execution.

Depending on how the PDF viewer handles interactive PDF features, an attacker may be able to trick users into submitting sensitive information through a malicious prompt or form.

I put together the PDF PoC here:
https://t.co/9MgYEL0tE1

For more technical details on portable data exfiltration:
https://t.co/UlhWc07N8J

Only test this on systems you own or have explicit authorization to assess.

#bugbounty #bugbountytips

[I'M H4CK3R 42 @luckyhacker43]

$42,751 Ubiquiti Inc. Bug Bounty 🤑

Pre-Auth RCE in UniFi OS - CVE-2026-34909: One Request to Root Behind Seven Products by Catchify Security 🤯🔥

🔗 https://t.co/fqikOFoM3g

CVEs
🔗 https://t.co/dOlyBjqBnU
🔗 https://t.co/EoTcAOEmkn
🔗 https://t.co/YzgkyELSGh
Join team 👉https://t.co/CRSus3yB9T

[Coffin @lostsec_]

I think this is more than enough skills for bug hunting for now..

[Al-hassan abbas | الحسن عباس @exploit_msf]

I was awarded a $2,500 bounty on @Hacker0x01! https://t.co/5dbKBrWp1S #TogetherWeHitHarder
Tip: Check all endpoints to get vlaid jwt

[I'M H4CK3R 42 @luckyhacker43]

$10,000 Google Bug Bounty: AppSheet RCE

BugTraceAI found deserialization RCE in AppSheet automation. Malicious .NET payload → PowerShell execution on Google's backend.

🔗 https://t.co/XiBqxr8dLi

---

More writeups like this? 👇

🔗 Want to perfect?👉https://t.co/pJWHoCMDix

[I'M H4CK3R 42 @luckyhacker43]

$1,337 8x8 Bug Bounty 🤑

https://t.co/7lbU97WaER: JWT Algorithm Confusion Vulnerability by Ferreira 🤯🔥

👨‍💻 Kauã Ferreira (x/0xkyotozx)
🔗 https://t.co/DUXJ5b1TtC

🔗https://t.co/cADA5DUdp5

[Quan the third III @big_Rbs]

@sagitz_ @Rizwan_SiDdiqu1 @GitHubSecurity Insane 🔥🥵

[Mohd Farhan Khan @mfrhnkhn]

I don't need no AI

[SickSec 🇲🇦 🇵🇸 @OriginalSicksec]

I was about to sleep and then

[Brute @BRuteLogic]

OAuth Bypass Testbed

https://t.co/8WHf78YqCz

Test your skills against a LOGIN (randomly vulnerable) and/or 17 AUTHENTICATION SERVER endpoints.

Like with JWT, a fully automated OAuth tool with complete FFF (Find, Forge, Fire) PoCs is on the way, exclusively for Brute One.

[Het Mehta @hetmehtaa]

Someone made a website that discloses every scam done by a bug bounty program

https://t.co/mbv8sBNYMe

[I'M H4CK3R 42 @luckyhacker43]

$2,500 [CVE-2026-45156] Nextcloud Bug Bounty 💰

Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC 🤯🔥

👨‍💻 cybertechajju (h1/cybertechajju)
👨‍💻 priyanka chandrakar (h1/priyanka010)

🔗 https://t.co/FeMz53IqCy

[🇷🇴 cristi @CristiVlad25]

This is often flying under the radar, excessive data exposure, from Corey Ball's book Hacking APIs.