locus-x64

Vulnerability Researcher

[locus-x64 @locus_x64]

Reverse-engineering toolkit for Qualcomm Adreno GPU command-processor (CP) microcode: the 32-bit microcontroller ISA that Mesa calls afuc / QRisc.

https://t.co/nlpNYiOBmd
#ReverseEngineering #Adreno #GPU #Qualcomm #Mesa #HardwareHacking #ExploitDevelopment

[locus-x64 @locus_x64]

https://t.co/uTp1SW48GM

[locus-x64 @locus_x64]

@chompie1337 @0xBoku I faced the same scenario while writing a GPU exploit for some Android target (though I was successful in manipulating it). I believe after getting restrictions from the States, Anthropic has hardened some guardrails, even on the CVP-approved accounts.

[V4bel @v4bel]

💥 Introducing "Dirty Frag"

A universal Linux LPE chaining two vulns in xfrm-ESP and RxRPC. A successor class to Dirty Pipe & Copy Fail.

No race, no panic on failure, fully deterministic. ~9 years latent.
Ubuntu / RHEL / Fedora / openSUSE / CentOS / AlmaLinux, and more.

Even if you've applied the "Copy Fail" mitigation, your Linux is still vulnerable to "Dirty Frag". Apply the Dirty Frag mitigation.

Details:
https://t.co/9nqku4svkY

[Kabir Acharya @Kabir4charya]

I've been seeing posts all over about the state of CTFs post-LLM. I've seen many attempts to explain why this is just a new evolution of CTFs, but I fundamentally disagree. I believe the original spirit is gone and I've written why in my blog.

https://t.co/tgUZOGkhGV

[locus-x64 @locus_x64]

@sirdarckcat Excited to see what the Singapore hub builds with this hybrid model. Human expertise + AI firepower is the winning combo.

[locus-x64 @locus_x64]

@sirdarckcat Fully agree, AI is going to massively scale VR by exploring at speeds and depths humans can't match alone. However, the real power comes when experienced hunters stay in the loop as expert navigators and mechanics..

[Xint @xint_official]

Patch your Linux boxes!

https://t.co/VWOUDbLAn2 is a trivially exploitable logic bug in Linux, reachable on all major distros released in the last 9 years. A small, portable python script gets root on all platforms.

Found by the teams at @theori_io and @xint_official
More details below
https://t.co/9f6T96PvPX

[Andrew G. Morgan @AndrewG_Morgan]

libcap-2.78 is released. Over libcap-2.77 this is mostly just a fix for CVE-202x6-4878. (A 19 year old bug.)

https://t.co/AOxfBzNsRI

[locus-x64 @locus_x64]

@saghul @bnoordhuis @Openwall @solardiz Since nobody's looked into the email and you closed the GH report, I opened this discussion to see if someone else, maybe a more experienced security researcher, can take a look at this bug and offer a perspective.

[locus-x64 @locus_x64]

@saghul @bnoordhuis @Openwall @solardiz Disregarding my report after accepting the patch with agreed changes was not respectful.

[H1 Disclosed - Public Disclosures @h1Disclosed]

⚡ Arbitrary Code Execution via Scanner Bypass in **aws-diagram-mcp-server** `exec()` Namespace
👨🏻‍💻 @locus_x64 ➟ AWS VDP
⬜ None
💰 None
🔗 https://t.co/3RdNuvpBd6
#bugbounty #bugbountytips #cybersecurity #infosec

[Andrey Konovalov @andreyknvl]

Extended the Pixel 8 KGDB article with the instructions on how to set up GEF. slub-dump, buddy-dump, and some other commands now work. Huge thanks to @bata_24 for implementing all required pieces.

https://t.co/dgz0HQllmP

[locus-x64 @locus_x64]

There was a scanner bypass I identified in https://t.co/PGPZ0A5hMQ that allows any MCP client to execute arbitrary code.

Check the detailed report:

[publiclyDisclosed @disclosedh1]

AWS VDP disclosed a bug submitted by @locus_x64: https://t.co/Y1uKFZSasA #hackerone #bugbounty

[locus-x64 @locus_x64]

pidfd_getfd (Linux 5.6+) can steal file descriptors across processes.

Blog covers the full technique e.g. why obvious approaches fail, kernel internals and shellcode design.

https://t.co/EfLmUQPsoa

#kernel #exploitdev #infosec

[Project Zero Bugs @ProjectZeroBugs]

A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby https://t.co/7n6n1uSKRD

[siri@fu4k1 @sirifu4k1]

CVE-2025-68472 poc for
MindsDB has improper sanitation of filepath that leads to information disclosure and DOS

https://t.co/0QtsibANhU

[Alex Plaskett @alexjplaskett]

Reviving Discarded Vulnerabilities: Exploiting Previously Unexploitable Linux Kernel Bugs Through Control Metadata Fields

https://t.co/gP0wdeaJOs

[locus-x64 @locus_x64]

#bhmea25