Mohammad Wahyudi

manusia biasa dan mahasiswa yg mencoba move on #ngenes

[Md Ismail Šojal 🕷️ @0x0SojalSec]

https://t.co/OCyl5a02xq

[Aircorridor @_aircorridor]

Getting Started with the Pack2TheRoot (CVE-2026-41651) Vulnerability to Escalate Privileges

Pack2TheRoot is a security flaw that allows unprivileged users to gain full root access on Linux systems via the PackageKit service. Details below:
https://t.co/fpZYBZBaPb
@three_cube

[NullSecurityX @NullSecurityX]

Dissecting and Exploiting Linux LPE Variant: DirtyClone (CVE-2026-43503)
https://t.co/v7EZYKm9ou

[jp / kw0 @JoshuaProvoste]

🚨 Django RCE - Remote Code Execution

https://t.co/8Bi4AcXoVU #BugBounty

[thority @AuthorityNull]

@github

[Gabe Greenberg @gabegreenberg]

I'm looking for 50 more software engineers to join my team at https://t.co/dSpoqHsWo9 for the next week. We work with frontier labs to help them train models.

100 - 200 USD /hr. Fully remote. Hiring in 150+ countries. RT's appreciated!

https://t.co/DGV9sKw6di

[Wiz @wiz_io]

🚨 BREAKING: Wiz Research discovered Remote Code Execution on https://t.co/SvN2lGsnbO with a single git push

The flaw in @github allowed unauthorized access to millions of repositories belonging to other users and organizations 🤯

[4nzn @paoloanzn]

we cracked it. the cch= signing system in claude code is fully reverse engineered - all credits for the work go to @ssslomp who did an amazing re work

now any opensource client can let users actually use the anthropic subscription they already paid for. with whatever tool they want

already merged into free-code. third party clients can generate valid cch= hashes now, no official binary needed

the "native attestation layer" lasted about a day lol

[spaceraccoon | Eugene Lim @spaceraccoonsec]

You may have read @AnthropicAI Frontier Red Team's blogpost about finding zero-day vulnerabilities at scale. I think it's more than that - LLM workflows greatly improve "negative-day" and "never-day" discovery. Here's the tool I built to do this.

https://t.co/2U5VHOiBBD

[RyotaK @ryotkak]

Another vulnerability in React Server Components (CVE-2026-23864) that I reported was disclosed today.

This is separate from the one disclosed in December, so you'll need to update again.

https://t.co/k7hgEzIWDb

[Malwarebytes @Malwarebytes]

Cybercriminals stole the sensitive information of 17.5 million Instagram accounts, including usernames, physical addresses, phone numbers, email addresses, and more.

[VIEH Group @viehgroup]

WAF Bypass Discovered - Akamai & Cloudflare : 🙌🏻

A fresh technique has been spotted that successfully bypasses WAFs like Akamai and Cloudflare.

Credit: @0x0SojalSec
#infosec #cybersec #bugbountytips #bugbounty

[React @reactjs]

Researchers have found two new vulnerabilities in React Server Components while attempting to exploit the patches last week.

These are new issues, separate from the critical CVE last week. The patch for React2Shell remains effective for the Remote Code Execution exploit.

[Joe Desimone @dez_]

All credit to @maple3142 but verified this works. Full PoC: https://t.co/4K21aVGGQT

[Bour Abdelhadi @BourAbdelhadi]

Hey everyone! I’ve been building rep+, a lightweight HTTP Repeater inside Chrome DevTools. No proxy setup or certificates. Just open DevTools and start poking requests. It also has built-in AI for explanations and attack ideas. I’ll share one rep+ feature every day.
Try it 👇

[Mohammad Wahyudi @youdie07]

@infinitelogins @spaceraccoonsec ZERODAY

[shubs @infosec_au]

IP whitelisting is fundamentally broken. At @assetnote, we've successfully bypassed network controls by routing traffic through a specific location (cloud provider, geo-location). Today, we're releasing Newtowner, to help test for this issue: https://t.co/X3dkMz9gwK

[shubs @infosec_au]

How do we turn bad SSRF (blind) into good SSRF (full response)? The @assetnote Security Research team at @SLCyberSec used a novel technique involving HTTP redirect loops and incremental status codes that leaked the full HTTP resp. It may work elsewhere! https://t.co/CTSTEtKiD1

[Mohammad Wahyudi @youdie07]

@damianplayer Vault