breno_css

[Medeirus @jmedeiros1337]

Publiquei minha pesquisa sobre uma vulnerabilidade de RCE em visualizadores PDF Linux como Atril, Evince e Xreader, resultando na CVE-2026-46529.

Abrindo o PDF, e clicando qualquer parte da pagina um comando arbitrário é executado no sistema

O artigo:
https://t.co/NgkUNYmhHJ

[TrendAI Zero Day Initiative @thezdi]

Dialed in! Nikolaos Mourousias (@deltaclock), Caue Obici (@caueobici) & Bruno Halltari (@BrunoModificato) of OtterSec used a Code Injection bug to exploit LM Studio in the second round, earning $20,000 and 4 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin

[Orange Tsai 🍊 @orange_8361]

That's my chain — a full chain w/ logic bugs only! No memory corruption, no AI, and of course no collisions at all 😉

[James Kettle @albinowax]

CVSS' Attack Complexity metric is the bane of bug bounty hunters: "you tried really hard to find that bug, so we'll pay you less".

[0xor0ne @0xor0ne]

CVE-2025-6554: in-the-wild V8 the_hole based vulnerability analysis and exploit

Bug analysis by @r3tr074:
https://t.co/XwOJY0GD62

PoC by @mistymntncop:
https://t.co/biGiS60sIt

#infosec

[TRAMOIA @tramoia_sh]

TRAMOIA 0x2
https://t.co/swjV1RvhmY

[corvo @pqcorvo]

A comunidade de Bug Bounty Brasileira está fazendo um evento GRATUITO e trazendo gringo para palestrar.

Você de São Paulo ou q pode está nessa data em SP simplesmente VÁ nesse evento.

#Bolhasec

Maiores detalhes aqui neste tweet.

[breno_css @breno_css]

@samm0uda Cool bug

[Mente Binária (ONG) @mentebinaria]

🚀 Orgulho nacional! 🇧🇷

Parabenizamos todos os envolvidos por essa conquista histórica! Vocês levaram o nome do Brasil ao topo e mostraram que nossa comunidade de CTF está cada vez mais forte e preparada para desafios globais!

🔗 Assista o vídeo em https://t.co/21PUgIfSek

[Epic Leet Team @eltctfbr]

https://t.co/xaLgRIBDaT

Obrigado @mentebinaria !

Não foi dessa vez mas DEFCON que nos espere ano que vem!

Até lá, como todos devem fazer sempre, estudaremos!

Obrigado novamente ao @hackaflag por nos receber!

[Epic Leet Team @eltctfbr]

Brazil made history last weekend, and of course, ELT was a part of it!

Thanks @GaneshICMC , @boitatech , @gris_ufrj and #hawksec_unifei for partnership! We got 17th place, the best brazilian result, at #DEFCONCTF Quals as "pwn de queijo"!

Thanks @hackaflag for hosting us!

[bugcrowd @Bugcrowd]

Where there’s bug bounty, there’s #Bugcrowd. 😉✨

We’re honored to have supported the @BugBountyBr at H2HC in #Brazil, big thanks to @bsysop! Seeing the hacker community come together with such passion was nothing short of amazing (as always). 🥲

Huge thanks to the organizers, sponsors, and everyone who joined—you made it unforgettable! 🎉💚

[OtterSec @osec_io]

NEW blog post: Netfilter Universal Root 1-day

Our latest blog dives deep into the state of Linux kernel security and the open-source patch-gap, exploring how we monitored new bug fixes and achieved 0day-like capabilities by exploiting a 1-day vulnerability.

Read more here →

[Alex Plaskett @alexjplaskett]

✍️ Pivoting Capabilities and Conquering the Linux Kernel by @_0xTen

https://t.co/h2d5yTNISd

[Luan Herrera @lbherrera_]

Seeing that Pwn2Win isn't happening this year, here's an unreleased beginner-level XSS challenge I created for it (shouldn't be too difficult).

https://t.co/jHJ5leyBBx

[breno_css @breno_css]

@jobertabma I think it's cool, but I would put this in a mutual-only (the first reporter can see the name of the person who took dup and the dup see the name of the first reporter) and also as an optional flag and only allow to be shared if both sides have this enabled(just like WhatsApp)

[HackerOne @Hacker0x01]

The results are in!🥇

Congratulations to these 32 teams who will move on to the Group Round of the 2024 #AmbassadorWorldCup! 🙌

The next round kicks off at the end of August! Stay tuned for the latest info, and read more about the AWC here. https://t.co/ZKBzjgwKWv

[Balthasar @BalthasarMartin]

Today at #Troopers24 we released Certiception – the ADCS honeypot we always wanted to have.

Blog: https://t.co/2NCzLTtItc
Source code: https://t.co/WLSMq2Bl8m
Slide deck, including our guide to deception strategy: https://t.co/xEAUPhqaGR

[Luan Herrera @lbherrera_]

Decided to give my childhood game a try now that they relaunched Habbo's 2005 version back again, oops! (It was already reported and fixed).