azizk

[azizk @realazizk]

@YogSoth0 @h4x0r_dz @whmcs none, it's a preauth with default config, will post details soon after webpros gives the greenlight.

[azizk @realazizk]

We found a preauth rce in @whmcs 9.0.0 to 9.0.6, since this has been already fixed in 9.0.7, I'll drop the details soon.

[azizk @realazizk]

1cf3fbd928da1e48b3b4781600cedd9045724e2864cfb023d630e2da477fb58e

[azizk @realazizk]

@HuynhPhuon89764 @VirtualPr0tect it seems they are not buying right now..

[azizk @realazizk]

@S1r1u5_ @_NathanCalvin > gpt-5.6 sol is broadly accessible to anyone in the world
not true, can't get access to this as a tunisian citizen.

[azizk @realazizk]

@HackerOx26 @TheHackersNews this seems to be a real rce unlike the xss2shell one

[azizk @realazizk]

@Chocapikk_ there is another one :) (sent you a DM)

[Washi @washi_dev]

The timer for #flareon13 started on https://t.co/fEUtjEEqD4

I will likely participate, but not sure I will try to speed-solve it like previous years.

Last year was already somewhat pay-to-win. I expect this year to be worse. I don't see any fun in competing against unlimited AI

[azizk @realazizk]

1cf3fbd928da1e48b3b4781600cedd9045724e2864cfb023d630e2da477fb58e

[Paul Graham @paulg]

The danger of selling to big companies, if you're a startup, is that they don't say no outright. They have months of meetings with you first. Since you hate meetings, that seems to you a sign of commitment. But it's not. They love having meetings! It's almost all they do.

[Sami Laiho @samilaiho]

Plesk: Blind SQL injection in Plesk's XML-RPC API
URL: https://t.co/woYzXZiP0l
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.9