panda

Focus on AI security

[panda @panda_sec]

So, what's the function of your CVP?

[Claude @claudeai]

We’re introducing Claude Fable 5.1 and Claude Mythos 5.1.

They're the world’s most advanced models for coding and knowledge work.

[panda @panda_sec]

一个月前就挖出来了这个洞，没想到这么快就被公开了。。实际上远不止next.js，还有nuxt.js，astro等都受到影响。
https://t.co/lTW4cv23sg

[H4x0r.DZ @h4x0r_dz]

127.0.0.1:3000/_next/image?url=/poc.avif&w=128&q=75

https://t.co/LfiiUu9A4N

https://t.co/t8ImWSiYEQ

[panda @panda_sec]

@CossackWang nb

[panda @panda_sec]

Don't reset it anymore, just give me a gift card. I've already done the reset properly.

[Tibo @thsottiaux]

I was gifted a very fancy new reset button today

[panda @panda_sec]

@confievil @thsottiaux same with you

[panda @panda_sec]

@thsottiaux But we have no remaining quota left. Could you please reset it for us? 😭

[panda @panda_sec]

@nicdunz @thsottiaux hhhhhh

[panda @panda_sec]

The PPT production of ChatGPT Work is truly excellent, be it the style, content layout or the relevant icon design — it is faread of the competition.

[Greg Brockman @gdb]

Was very cool to hear about the reasons people love Sol. We're doing the promotion again, except this time for ChatGPT Work:

Tweet what you love about ChatGPT Work, claim $100 in free credits, get more work done.

First 10k get the free tokens: https://t.co/w7QrPBYkrh

[panda @panda_sec]

@thsottiaux @melvynx Tibo make codex great again

[panda @panda_sec]

@thsottiaux I just reset it one hour ago🥲

[panda @panda_sec]

Codex's God

[Tibo @thsottiaux]

Dearest gentle codexer.

We did a sneaky double reset. Not only do you get a full reset on us. But you are also getting one into the reset bank to use at your own leisure.

Enjoy

[ϻг_ϻε @steventseeley]

I wrote a blog post regarding the technical details of CVE-2022-31700. It's an interesting case study of attacking custom Java Bean Validators (JSR 380) for RCE: https://t.co/UUAh4bVtf8

The original advisory can be found here: https://t.co/XmIKxAgPJT

[panda @panda_sec]

@Skay_00 vcenter 冲

[panda @panda_sec]

@4ra1nx 实际上别管其他人就是，逐步来，总会有收获，这也是积累的过程

[panda @panda_sec]

analyzed the RCE vulnerability of the Spring Cloud Gateway on Saturday

Read online: https://t.co/zc9Z5crZtv

A request flowchart for the Spring Cloud Gateway is attached

#CVE-2022-22947

[mingcheng @feelinglucky]

还真的是惊呆了，佩服这个老外竟然写了两千多页的 PPT 用来讲 K8S 和 Docker，非常适合入坑 https://t.co/WMhcjnC8p1

[panda @panda_sec]

@LoRexxar 感觉还是难的，自由职业收入来源不太稳定，据说所知的，有靠星球来收入的，有靠h1、src挖洞这种的，还有就是靠投资、外快、培训这种的

[panda @panda_sec]

Life is really too fragile to be caught off guard, Bye, Kobe Bryant

[Django @djangoproject]

Django security releases issued: 3.0.1, 2.2.9, and 1.11.27 https://t.co/jpezG5fYgd

[panda @panda_sec]

@RustyLoL ？