Le Linh

Cyber Security Engineer at | Writer at

[Le Linh @lnlinh31]

A discovery about CVE-2019-16891 that allows exploiting this vulnerability on Liferay Portal without authentication as everyone knows.
#CVE #bugbounty #RCE #0day
https://t.co/KNNMICKMMY

[Le Linh @lnlinh31]

FPT AppSec – Application Security Posture Management Platform https://t.co/W2ztBdFo8k

[Le Linh @lnlinh31]

Excited to share our latest finding: CVE-2025-63601 (CVSS 9.9) — a post-auth RCE in Snipe-IT.
https://t.co/SgPfRYrrPm

[Le Linh @lnlinh31]

@sagitz_ Great research!
But regarding the .so file loading via fd in /tmp, doesn’t www-data lack permissions to read arbitrary FDs due to Ingress NGINX restrictions? Wouldn’t this limit exploitation unless additional conditions are met?

I’d love to hear your thoughts on this!

[Le Linh @lnlinh31]

@nirohfeld @sagitz_ @ronenshh @hillai @kubernetesio Great research! But regarding the .so file loading via fd in /tmp, doesn’t www-data lack permissions to read arbitrary FDs due to default Ingress NGINX restrictions? Wouldn’t this limit exploitation unless additional conditions are met?

[Gareth Heyes \u2028 @garethheyes]

You might have noticed that the recent SAML writeups omit some crucial details. In "SAML roulette: the hacker always wins", we share everything you need to know for a complete unauthenticated exploit on ruby-saml, using GitLab as a case-study.

https://t.co/Ywj2Y7rkIu

[Le Linh @lnlinh31]

A huge thank you to the security community and researchers for helping us strengthen our platform. We'll keep investing in security to ensure a safer, more reliable experience for everyone.

ShopBase 's Vulnerability Disclosure & Reward Program: https://t.co/cAvsgIJSoA

[Le Linh @lnlinh31]

https://t.co/XK0xpWCNff

[Le Linh @lnlinh31]

After a period of development, I'm excited share Eagle with you. This tool is designed to simplify your asset & attack surface management and boost your workflow efficiency.

Here's Eagle's major features 🧵👇

[Le Linh @lnlinh31]

Shodan Integration for deeper visibility into exposed hosts. Instantly retrieve critical information about your assets' exposure on the internet, helping you identify and fix potential vulnerabilities before they’re exploited.

[Le Linh @lnlinh31]

@bienpnn you can try lxml

[PortSwigger Research @PortSwiggerRes]

The results are in! We're proud to announce the Top 10 Web Hacking Techniques of 2023! https://t.co/KhiMEHP1dh

[Le Linh @lnlinh31]

Shared Access Signature (SAS) provides great agility for users, but it also creates the risk of granting too much access.

[Wiz @wiz_io]

🚨 BREAKING: Wiz Research discovers a massive 38TB data leak by Microsoft AI researchers, including 30,000+ internal Teams messages.

Here's what you need to know 🧵

[Le Linh @lnlinh31]

Defeating SQL Injection Attacks in Go: Preventing at scale
https://t.co/wDHpCFYJmw

[Le Linh @lnlinh31]

This post presents how to escape container via Kernel module by abusing containers with SYS_MODULE capability.

[Le Linh @lnlinh31]

My RCE story an application lead to escape container and how to secure it.
https://t.co/3fYnKTJoWy
#RCE #escapecontainer