thinkycx

[Nebula Security @nebusecurity]

Here goes nginx-quicburst (CVE-2026-42530), a new RCE in Nginx discovered by our security agent VEGA and demonstrated by Nebula Security.

This is only the third NGINX vulnerability since 2014 to receive NGINX’s “major” severity rating. If you use Nginx 1.31 with QUIC enabled, we recommend upgrading to the latest version.

This bug has been patched in the latest Nginx release. We will publish the technical writeup, including the ASLR bypass, on July 18 together with the previous nginx-poolslip writeup.

[Clandestine @akaclandestine]

CVE-2026-42530 NGINX RCE

[Thomas Yao  @ghosTM55]

经过 @kevinzhow 确认，我们的挚友左耳朵耗子 @haoel 已于周六晚突发心梗辞世

陈皓是个有原则、正直、风趣、聪明的人，他对 IT 行业作出了不可磨灭的贡献

他一生有很多成就，而我愿意最后以一起打游戏的好友记住他

R.I.P.

[Rich Mirch @0xm1rch]

EDR or SIEM flagging your Linux commands when reading sensitive files like /etc/shadow? Read the file from the raw disk to avoid simple detections. #redteamtips #hacking

[Hao Chen @haoel]

这年代最讽刺的事是一一

人不知疲倦地996重复劳动，
让自己变成机器

机器不断地训练学习提升智能，
让自己变成人

[thinkycx @thinkycx]

@Volexity As the article mentioned: "then search for the entire HTTP body of these specific requests throughout the entire memory sample", how did you search the body in the memory and where are the body stored in? Is there any more details？

[thinkycx @thinkycx]

demo https://t.co/QHyK0evKdb

[Rod Johnson @springrod]

Don't drown in a sea of vulnerability reports: Get the notifications you need to make your projects more secure every day. https://t.co/QqXvrqQds8

[TrendAI Zero Day Initiative @thezdi]

Confirmed! The Devcore team used an authentication bypass and a privilege escalation to take over the #Exchange server. They win the full $200,000 and 20 Master of Pwn points.

[ege @egeblc]

OMG !! Rumors are real😱😱 Immunity CANVAS 7.26 exploit pack is leaked. More than 800 1days and weaponized spectre exploit.

[thinkycx @thinkycx]

@JHyrathon 🐮

[blasty @bl4sty]

The Linux (e)BPF bytecode verifier, the gift that keeps on giving! Wrote an exploit for CVE-2020-27194. :-) Shout out to @scannell_simon for the bug and @_manfp for exploitation strategy inspiration!

[hacker.house @hackerfantastic]

There is a 0day in VMware fusion for MacOS that allows any user to get root permissions. The bug is public and the fix for cve2020-3950 is incorrect, thus the weakness is a public 0day. It is a very straight forward LPE on any macOS with fusion installed.

[thinkycx @thinkycx]

Feel it is too expensive to renew a domain at GoDaddy?
Just call them and you will get a discount at about 75%. :)

[PentesterLab @PentesterLab]

Every week, our twitter account @PentesterLab publishes a list of articles worth-reading. This is the list of all the articles for 2019. Enjoy!! https://t.co/dhssbpEmOL

[Paul Graham @paulg]

Several people asked which essays are my favorites:

https://t.co/yFNe1NW55B

https://t.co/HdUSjESNGl

https://t.co/ASjOx0YHUu

https://t.co/XNW3ov6yXQ

https://t.co/Ww2vBKYMt9

https://t.co/GQ6IECES02

https://t.co/jOQbXXji14

https://t.co/52xghlUODR

https://t.co/oMGkyfOQ4H

[thinkycx @thinkycx]

Inspiration comes from watching videos here https://t.co/41ezwEPegw

[thinkycx @thinkycx]

How to learn English? The best way is to use it. Dip yourself in the English environment such as English books, twitter, youtube, Quora and it will help you to use it everyday. What will happen if you have made the English your second mother language? Open a new world!

[LIN WEI @skywind3000]

如何看待任正非回应华为 HR 胡玲事件的邮件？

[thinkycx @thinkycx]

@sunichi17 所以遇到bug了

[thinkycx @thinkycx]

#pwntools Maybe here is a tip to use pwntools(python3).

Give it up(python3-pwntools): https://t.co/frYYobb6SK
and use pwntools(branch dev3): https://t.co/wgjo8aK54d

As I just found a bug in python3-pwntools https://t.co/Xyu3gC35X3 and can't pull an issue as it is read-only now