Top Tweets for #ExploitDev
we keep patching gRPC endpoints like they are web servers. has anyone actually audited a service that only trusts client certs for auth? the gap between "unauthenticated" and "trusted" is terrifying. #exploitdev #cybersecurity #AIpentesting
CVE-2026-107181 POC | Telegram Desktop Account Takeover
1 Click account takeover by stealing session files.
PoC & technical breakdown: https://t.co/MJIaXku1Cp
Shoutout to @BeakSec for the excellent research and detailed write-up!
#CyberSecurity #CVE #ExploitDev #InfoSec
Full linux LPE just popped in my lab.
uid=0 on the demo.
full writeup + PoC after disclosure. tech details stay closed until then.
#Linux #LPE #ExploitDev #InfoSec
π¨ CVE-2026-43786 macOS CoreServices
local app to root. CVSS 7.8.
Apple's line is short. an app may be able to gain root privileges.
Malwation shipped the C PoC and a video of it landing.
https://t.co/XRjbWq0nT9
#macOS #ExploitDev #InfoSec
CVE-2026-14894 | CVE-2026-32475
unauthenticated arbitrary file upload
PoC: https://t.co/TGnfo6yA5N
#CyberSecurity #InfoSec #0day #CVE #EthicalHacking #ExploitDev #WordPress
π¨ another Nightmare 0day PoC
BigDiskBuster: Windows Defender Update DoS
Blocks Defender platform + signature updates
Impacts supported Windows versions
PoC released for vulnerability research
https://t.co/BrkndADEMh
#VulnerabilityResearch #WindowsSecurity #ExploitDev #InfoSec
@MSNightmare2000
Codex on a binary target tonight.
fuzzing + harness + AI in the loop.
not vibes. actual crash triage and RE on the target.
hunting 0days the slow way with a fast model.
#AIRedTeam #Fuzzing #ExploitDev
π¨ another Nightmare 0day PoC just dropped
ShieldCrash: Defender patch bypass
arbitrary file read as SYSTEM
ShieldBreak fix (CVE-2026-69414) still leaves a hole. works on Sept 2026 patch.
https://t.co/7faIypKeLo
#VulnerabilityResearch #ExploitDev #InfoSec @MSNightmare2000
π¨ CVE-2026-65643
cPanel & WHM domain parking
authenticated user parks a domain with backticks β command injection β root
shared hosting account to full box.
PoC toolkit (exploit + blue team verifier):
https://t.co/IbKxE1dCCq
credit tc4dy
#VulnerabilityResearch #ExploitDev #InfoSec
π¨ Rasterfall just dropped
Satori β Sharp β librsvg 0day RCE
XML inject via title/desc text
UAF in librsvg/libxml2 β ROP on Node 24.20.0
OG image pipelines are RCE sinks.
https://t.co/rSsjoDTJPm
credit @sybr1d_
#VulnerabilityResearch #ExploitDev #InfoSec
π¨ CVE-2026-64468
Linux Binder UAF in binder_free_transaction()
unprivileged race β kmalloc reclaim β root on x86_64
found by Alice Ryhl, fixed by Carlos Llamas (Google)
PoC + full LPE with lab GIF:
https://t.co/ps2k9RRG55
#VulnerabilityResearch #ExploitDev #InfoSec
For aspiring exploit developers in the AI era, Stephen Sims suggests starting with fundamentals. Master stack buffer overflows, format string bugs, and heap exploitation before diving into complex areas like kernel exploits. #ExploitDev #Cybersecurity #AI
Awesome-Red-Teaming just hit 1k stars.
phase map, not a 2018 graveyard.
AD/Entra Β· EDR bypass Β· C2 Β· AI red team Β· fuzzing
shoutout @hetmehtaa @PadhiyarRushi for the push.
https://t.co/qhcfw4AGbu
#RedTeam #ExploitDev #InfoSec
π¨ another Nightmare 0day PoC just dropped
FalconFlank: CrowdStrike Falcon EoP
abuses Office malicious macro remediation
Win11 25H2 + Server 2025, Phase 3 Optimal Protection
https://t.co/1jLbBeEDk1
#VulnerabilityResearch #ExploitDev #InfoSec @MSNightmare2000
π¨ another potato just dropped
CouchPotato: SeImpersonate β SYSTEM
ETW + AMSI patched. indirect syscalls.
service account or admin β NT AUTHORITY\SYSTEM
https://t.co/1ODkC0yIn9
#ADSecurity #ExploitDev #InfoSec
π¨ CVE-2026-9586 hit in the wild
Sangoma Switchvox: unauth SQLi β RCE on /pa
~4k boxes on Shodan. honeypots already catching real traffic.
https://t.co/gkltnBkYiU
#VulnerabilityResearch #ExploitDev #InfoSec
π¨ PaperCut NG: patch β unauth RCE with Claude Code
10 prompts. 293 tool calls. ~90 minutes to a working chain.
auth bypass β SQLi β file write β code exec
then it found a bypass on the emergency patch overnight.
https://t.co/cWS9gF9KOL
#AIRedTeam #ExploitDev #InfoSec
A crash is not failure. It is the program explaining its boundaries.
#exploitdev #BinaryExploitation #VulnResearch #AppSec #InfoSec
π¨ CVE-2026-0768 | Langflow | code injection RCE | CVSS 9.8 | ITW
unauth POST /api/v1/validate/code
code param β Python exec as root
ZDI-26-034, published as 0day
canaries already catching credential harvest traffic
https://t.co/LXlUxfCsjZ
#CVE #AIRedTeam #ExploitDev
π¨ root on a $20k Unitree G1 from Bluetooth range
wormable BLE chain. no pairing needed.
AES key leak β WiFi hijack β chatbot path traversal β BSS overflow β system() as root
$6.7k bounty. CVE-2026-76639 / 76640
https://t.co/zcIQQQPgac
#VulnerabilityResearch #ExploitDev #InfoSec
Last Seen Hashtags on Sotwe
Trends for you
Most Popular Users
Elon Musk 
@elonmusk
241.5M followers
Barack Obama
@barackobama
118.8M followers
Cristiano Ronaldo
@cristiano
114.5M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Narendra Modi
@narendramodi
107.1M followers
Rihanna
@rihanna
98.7M followers
NASA
@nasa
92.3M followers
Justin Bieber
@justinbieber
91.8M followers
KATY PERRY
@katyperry
90M followers
Taylor Swift
@taylorswift13
84M followers
Lady Gaga
@ladygaga
75.5M followers
Virat Kohli
@imvkohli
73.5M followers
Kim Kardashian
@kimkardashian
70.9M followers
YouTube
@youtube
68.8M followers
Neymar Jr
@neymarjr
66.5M followers
Bill Gates
@billgates
65.3M followers
Selena Gomez
@selenagomez
63.1M followers
The Ellen Show
@theellenshow
62.2M followers
CNN
@cnn
61.7M followers
X
@x
60.7M followers