Jimi Sebree

I find mediocre bugs and write about them sometimes.

[Jimi Sebree @DinoBytes]

@SinSinology @merlos1977 @smaury92 🔥🔥🔥

[Horizon3 Attack Team @Horizon3Attack]

Our latest disclosures for CVE-2025-8355 and CVE-2025-8356 - discovering a critical RCE in Xerox FreeFlow Core

https://t.co/GOyasjmYCa

[watchTowr @watchtowrcyber]

Happy Friday! We're ending the week by publishing our analysis of Fortinet's FortiWeb CVE-2025-25257....

https://t.co/p8v99cD5LG

[Horizon3 Attack Team @Horizon3Attack]

Session keys and passwords aplenty, here’s our deep-dive for CVE-2025-5777, aka CitrixBleed 2. Apart from the normal root-cause analysis, we’ve doubled down on actionable steps to investigate Indicators of Compromise.

https://t.co/fTfaW1DbJG

[Horizon3 Attack Team @Horizon3Attack]

CVE-2025-5777, aka #CitrixBleed 2, allows leaking of memory in the response which can allow for compromising session tokens, and other sensitive information. A deep-dive to follow next week.

[Horizon3 Attack Team @Horizon3Attack]

Checkout our new deep dive on CVE-2025-34508 -- a path traversal vulnerability in #ZendTo.
https://t.co/2NY1YdWiks

[Horizon3 Attack Team @Horizon3Attack]

Our latest blog looks at CVE-2025-20188, an arbitrary file upload in #Cisco IOS XE Wireless Controllers due to a hardcoded credential.

https://t.co/XTG5PmnoVh

[Horizon3 Attack Team @Horizon3Attack]

Check out our latest deep dive into the #Fortinet CVE-2025-32756, a classic buffer overflow! This is being exploited in the wild and was added to the CISA KEV catalog last week.
https://t.co/HYNCsIPkMl

[Horizon3 Attack Team @Horizon3Attack]

Just finished reproducing CVE-2025-32433 and putting together a quick PoC exploit — surprisingly easy. Wouldn’t be shocked if public PoCs start dropping soon. If you’re tracking this, now’s the time to take action. #Erlang #SSH

[Horizon3 Attack Team @Horizon3Attack]

We discovered an interesting code injection vulnerability, CVE-2025-3248, affecting #Langflow, a popular agentic AI workflow tool.

This enables unauthenticated attackers to fully compromise Langflow servers.
https://t.co/o3YQ3fE4XR

[Horizon3 Attack Team @Horizon3Attack]

Our Indicators of Compromise blog post for CVE-2025-2825, an authentication bypass affecting #CrushFTP.
https://t.co/1F0WfFhwlA

[Horizon3.ai @Horizon3ai]

New from @Horizon3Attack: There's now a Rapid Response test in #NodeZero for CVE-2025-1974. Affecting #Kubernetes clusters using NGINX Ingress controllers, this vulnerability can allow an unauthenticated attacker with access to the pod network to achieve arbitrary code execution.

➡️ Confirm you're not exploitable and start your free trial at https://t.co/zSQGLl2aMW. #IngressNightmare #infosec

[GreyNoise @GreyNoiseIO]

🚨 New GreyNoise Tag Alert: We've added a fresh tag tracking CrushFTP Authentication Bypass (CVE-2025-2825) exploitation attempts. Thanks to @Horizon3ai for the intel! Dive into the details: https://t.co/sBTHT7ZyAV

[TrendAI Zero Day Initiative @thezdi]

Confirmed! In his #Pwn2Own debut Evan Grant (@stargravy) used an OS command injection bug to exploit the Kenwood DMX958XR in the last attempt of the contest. His unique approach earns him $10,000 and 2 Master of Pwn points. #P2OAuto

[TrendAI Zero Day Initiative @thezdi]

Whew! Evan Grant (@stargravy) needed all but five minutes of his attempt, but he successfully exploited the Kenwood DMX958XR using only his hands, which now must be registered under the Wassenaar arrangement. #Pwn2Own #P2OAuto

[TrendAI Zero Day Initiative @thezdi]

Nice! Tenable Researcher used their second attempt to compromise the Lorex 2K Indoor Wi-Fi in the most subtle of way. They head off to the disclosure room with the details. #Pwn2Own #P2OIreland

[Jimi Sebree @DinoBytes]

@stargravy 🫡

[evan @stargravy]

This was the last thing I found / worked on while still at Tenable.
A fun SSRF via Microsoft Copilot Studio leading to a critical info disclosure (CVE-2024-38206).

Thanks to @DinoBytes and the team for helping get this one out.

https://t.co/VExmmKYgvE

[Jimi Sebree @DinoBytes]

@quarkslab @_cryptocorn_ @Mad5quirrel @RobinDavid1 @virtualabs A CVE assigned for the firmware signing issue back in March if you'd like to add a reference for it :) :https://t.co/0LfMm0TuKd

[Jimi Sebree @DinoBytes]

@mahal0z @cl4sm CVE-2022-47208 was already registered for this issue. Any reason a duplicate identifier has been registered? https://t.co/jbczQ23WRO