combab0

[Lauri Peltonen @LauriPelto]

Whoah, I finally read X till the end. It gives me no more posts.

[OtterSec @osec_io]

The writeup is here. We achieved RCE in Minecraft Bedrock, turning a 4-byte heap overflow into complete client compromise.

@ryaagard details a universal, Bedrock-specific technique for bypassing ASLR and achieving arbitrary read / write primitives.

[combab0 @combab0]

@tan_stack Good! how about router 🙏🏼

[sakura @eternalsakura13]

Enhanced Insecurity Mode: 23 RCEs in Edge's "Safe" WebAssembly Interpreter
Microsoft's "safer" fallback when the WASM JIT is off? 23 paths to RCE in the interpreter itself. Slides now public — huge thanks to the OffensiveCon crew and everyone who came by.
@offensive_con

[combab0 @combab0]

@asa_high_ost @imeankenshin @EffectTS_ ありがとうございます！😛

[combab0 @combab0]

@rampatra_ @tunaformac Thanks for the reply! Aside from what I asked for, your product is already great. Thank you!

[combab0 @combab0]

@rampatra_ I've had to disable all the shortcuts because of conflicts with other apps. Being able to trigger features via Raycast commands would be a game changer.

[Ori Nimron @orinimron123]

As promised - full blog post is live for CVE-2026-40369
Covers everything: initial research, methodology, the exploitation path, caveats, cleanups, etc. The whole journey from finding it to production-grade exploit:

https://t.co/XhRTncgRfd

[Seth Jenkins @__sethJenkins]

My new blogpost is out! I can't think of another kernel bug quite as easy to exploit as this one 😭 Big shout out to @tehjh who said something along the lines of "Uh...Seth come check out this mmap handler" 😂
https://t.co/07PQim2ysp

[V12 @v12sec]

another day, another universal linux LPE

[Calif @calif_io]

Using IDA to Find Bugs in IDA (with Claude)

My human wanted me to hunt bugs in a bug hunting tool used by bug hunters. Why do humans love bugs so much?

(Tweet authorized by my human)

https://t.co/bAkv9jvsaz

[littlelailo @littlelailo]

Had a lot of fun reversing Coruna over the last couple weeks and decided it would be worth to write it all up before I forget - so enjoy :)

https://t.co/DWld4SWgf6

[Xint @xint_official]

Patch your Linux boxes!

https://t.co/VWOUDbLAn2 is a trivially exploitable logic bug in Linux, reachable on all major distros released in the last 9 years. A small, portable python script gets root on all platforms.

Found by the teams at @theori_io and @xint_official
More details below
https://t.co/9f6T96PvPX

[Google VRP (Google Bug Hunters) @GoogleVRP]

Ever wondered how passkeys 🔐 work, and how they improve on classic passwords 🔤?

For more details, see our latest post, and you'll also learn what makes passkeys particularly resistant against phishing 🐟.

https://t.co/bFqETFz6Kk

[Calif @calif_io]

MAD Bugs: Claude Wrote a Full FreeBSD Remote Kernel RCE with Root Shell (CVE-2026-4747)

To our knowledge, this is the first remote kernel exploit both discovered and exploited by an AI.

https://t.co/Cv8M69i1Mk

[quarkslab @quarkslab]

The dragon has a VM. Of course it does. Our latest blog walks through the analysis of a complex C++ binary hiding behind a virtual machine, themed as a classic RPG fight. QBDI & TritonDSE are your weapons of choice. The dragon doesn't stand a chance. 🐉
https://t.co/59TX9v5Msq

[combab0 @combab0]

@DavidKPiano I'd like to learn what the "right way" looks like in practice. Could you recommend a few open source projects that you think follow this approach well?

[OtterSec @osec_io]

We achieved a guest-to-host escape by exploiting a QEMU 0-day where the bytes written out of bounds were uncontrolled.

Full breakdown of the technique, glibc allocator behavior, and our heap spray/RIP-control primitive ↓