LCFR

0day Connoisseur

[LCFR @lcfr_hax]

d935be023a55b04681eccd1d2b8385b4b295e141a5df108e5e979d8d5d7124ac (posted in august)

(related)
8da579ec498d57c20977c8d186d7f6cd4c04f46ffa1b436dd646ec19b99bdf47
cb4c8532c245ff7e05d6e270fca5742bb3271f541ef80f0071ca3d4307eb2b53
957f8cc21b18483f80a9d723aa4f9ded26e456424ffd065a044d1ed9d58a4fbc
4f93976ef105f0d9ff2d60f35d48958c8bba9d9eb2873cd93b3f7105fa4716a6

[Justin Elze @HackingLZ]

Despite all the doom and gloom from InfoSec we are how many months are into people throwing endless tokens at various OSS projects? Hows Apache? Nginx? OpenSSH doing? Any public point and shoot RCEs in RDP/SMB in Windows? All of the above technology getting wrecked in the wild?

[_ZN4DionC1Ev @justdionysus]

Fancy human generated comics, a good story, and an annoyingly pervasive root cause. Yes, it’s exploitable. Yes, it’s exploitable under ASLR. Yes, disclosure was eventful. @lcfr_hax hacked the planet and then tried to patch it

[Calif @calif_io]

php2shell - A tale of two PHP remote vulnerabilities:

https://t.co/KEUVez9Zdl

[sagitz @sagitz_]

Kudos to @ThePHPF for fixing the issue, and to @OpenAI @itszn13 @calif_io @lcfr_hax for the collaborative work on patch validation and disclosure 👏🙏

[LCFR @lcfr_hax]

@m4rio_eth you literally posted the HN leak 15 hours ago btw - that was what prompted it to be pushed up.

[LCFR @lcfr_hax]

@furyan_eth 🫡

[LCFR @lcfr_hax]

@LiveOverflow @J4CK3L

[LCFR @lcfr_hax]

@fangpenlin thanks, i tried.

[LCFR @lcfr_hax]

@m4rio_eth omw to add Hack to the video ..

[LCFR @lcfr_hax]

@vanamerongen @malwaretech lots of wrong information in that.

[LCFR @lcfr_hax]

@m1ru1 coordination, patching, variant analysis has been a long process. a lot of bugs like this would miss variants.. pretty confident we nailed them all.

[LCFR @lcfr_hax]

Big week - first time posting a hash asap might end up being useful (for me) as well :')

https://t.co/QEuK9KSvIQ

[LCFR @lcfr_hax]

d935be023a55b04681eccd1d2b8385b4b295e141a5df108e5e979d8d5d7124ac

[LCFR @lcfr_hax]

@lmt_swallow 11AM ... which timezone?

[LCFR @lcfr_hax]

@rabidvermin @vxunderground @k_firsov thank you for knowing the actual reference - 9mm version coming tomorrow

[LCFR @lcfr_hax]

@vxunderground @k_firsov ask the author idk bro

[LCFR @lcfr_hax]

There was a hint in the last time i tweeted Thanos - he's PHPurple.

[LCFR @lcfr_hax]

Pwnies this year a joke or something (who am i kidding every year?)

Best RCE:

Winner: ITScape: Guest-to-Host escape in KVM/arm64 (CVE-2026-46316) <- a bug which requires a shell/foothold on a target? (awesome bug. but ..)

Remote authentication bypass in the GNU InetUtils telnetd (CVE-2026-24061) <- a daemon not in use anywhere.

SELECT shell FROM postgres (CVE-2026-2006) <- probably never going to be exploited ITW.

but not the preauth wordpress rce by @assetnote ...?

[LCFR @lcfr_hax]

@UK_Daniel_Card remix dropping tomorrow but glad people liking the corporate approved song

[LCFR @lcfr_hax]

@LiveOverflow good luck :)

[LCFR @lcfr_hax]

@k_firsov 🙃😂

[LCFR @lcfr_hax]

@watchtowrcyber respect++

[LCFR @lcfr_hax]

@m40282845 @h4x0r_dz Thanks, there is another team who found some related issues as well who will be publishing their own independent findings/details as well besides mine/calif.