RomeoSec

dios no crea nada en vano
• Cybersec Enthusiast • AI Pecuters •

[Zara @Zara42hz]

jenius kena hack
pegawai dev nya nyimpen .env credentials database ga bener
akhirnya kena hack dari malware stealer

meskipun kena hack, jangan lu matiin server prod nya goblok + klo lagi developing pake environment yg secure

nasabah lu mau login gabisa ini @JeniusConnect

[cindy @saatumiliar]

Ternyata KALTIM punya WATER CANON, tapi bukan buat nyiram API melainkan nyiram MAHASISWA 😤

[sen✮ @jenostalker]

Guys situasi di depan Kantor Gubernur Kaltim.

STAY SAFE SEMUA
SALING JAGA YA

[RomeoSec @rome0xsec]

@kyyy444_ @sosmedkeras karena yg spesial endognya 2?

[vinaykumar🍁 @Xplo8E]

CVE-2026-112621 POC

[Dhiyaneshwaran @DhiyaneshDK]

🚨 PHP2Shell (CVE-2026-109618/CVE-2026-109619)

Nuclei Template : https://t.co/gGhrsBq5KX

Reference: https://t.co/AI7cruXnbh

#hackwithautomation #php2shell

[Robin Syihab @anvie]

Di IG dan TokTik banyak yang bahas issue PHP tapi jarang yg bahas issue SSL eMudhra, padahal dampaknya bisa jauh lebih luas ini daripada yg PHP.

Ini saya coba buatkan video penjelasan bagaimana issue SSL eMudhra ini bisa sangat berbahaya.

[A. Bobby @fraviato]

Terus komdigidawnya be like:

"kalau bisa, hacker jangan menyerang.."

[AWP 🇵🇸 @adith_wp]

“Hey! CVE-2026-109618 dan CVE-2026-109619 Kami bangsa Indonesia tidak gentarrrr…tidak takut! Kita punya kekuatan, punya keberanian, dan kita RELA BERKORBAN! Dan kita tidak mengenal menyerah!”

[RomeoSec @rome0xsec]

@anvie pake apa ini mas

[Kirill Firsov @k_firsov]

php2shell

Tomorrow is a helluva day.

[EBENEZER ADU-BITHERMAN @focus_furry]

🤔

[xyspg @xyspgUwU]

这是真的与神对话了

[EQST @EQSTLab]

⚠️ CVE-2026-94545 (CVSS 9.5) ⚠️

Your Next.js OG image endpoint can hand an attacker a shell. 😱

If you use next/og on the Node runtime with sharp installed (what Next recommends for prod), one unauthenticated POST to that route runs commands on your server. Here's why: Satori builds the image as an SVG and drops your text in without escaping it, so an attacker breaks out of the tag and injects their own markup. It reaches the native image libs (sharp, libvips, librsvg, libxml2) and corrupts memory there, and since Node ships non-PIE, a hardcoded ROP chain lands execve every time.

This is the default prod setup, not some weird edge case. 🚨

Not affected: edge runtime or no sharp — that path uses the wasm renderer.

Patched in Next.js 16.3.6 / Satori 0.33.5. On 16.2.0–16.3.5? Update now.

🔥 PoC + setup: https://t.co/qt1uFnxCia

#Nextjs #RCE #CVE #PoC #Exploit #CyberSecurity #nextog #CVE_2026_94545

[RomeoSec @rome0xsec]

@fitra_luth9801 @ptrfu13 mending di kamar ajasih. soalnya yg diluar juga cari kamar.

[RomeoSec @rome0xsec]

@ptrfu13 mending gaji 35jt tapi bersyukur dari pada gaji 2jt ngeluh terus

[Param @Param_eth]

Sorry to say,

Lazarus Group might be the hardest working security researchers in Web3.

Other security auditors charge $70K+ to find vulnerabilities.

Lazarus finds them for free by compromising the people, keys, multisigs and interfaces around the contracts.

Their Resume:

• Bybit: $1.5B
• Drift: $285M
• Bitget: $350M
• WazirX: $235M
• KelpDAO: $292M
• Ronin Bridge: $625M
• DMM Bitcoin: $308M

And many more.

[RomeoSec @rome0xsec]

@ptrfu13 miring itu kayaknya deh