g3n3r4l12
-
php-fpm accepted FastCGI connections from any address sharing the first 96 bits of an allowed IPv6 address, because one memcmp asked for 12 bytes instead of 16.
-
Google awarded this chain the first $250,000 Chrome full-chain reward under the VRP rules introduced in April 2026. This post is about the exploit.
-
Cisco published CVE-2026-76504, a critical authentication bypass in Catalyst SD-WAN Manager. Landon Rice at VulnCheck showed that a single percent-encoded POST to /%6asecuritycheck plus a reserved Viptela username mints an admin JSESSIONID, because getRequestURI() does not decode while WildFly does. About 1,500 vManage consoles were internet-exposed; the bug was exploited as a zero-day.
-
How a $1 million sandbox challenge led pwn to a Linux CHECKSUMPARTIAL trust-boundary bug: a post-validation IPv4 header mutation, a 32-byte host-memory disclosure, and an owned-host VM escape.
-
We hacked our way into Lovable's office by demoing SupaPwn — a chain that could potentially enable region-wide tenant takeover: event-trigger privilege window, DB superuser, host RCE, SUID escalation, exposed configs, orchestration takeover.
-
HTB: DevHub (0xdf.gitlab.io)
-
Escaping SPACE: Part I (perplexity.ai)
Red-Teaming VM Isolation and Network Confinement for AI Agents.
-
Breaking an AI Platform (gdroz3r.github.io)
Three findings in a self-hosted LLM platform, chained by information: a stack trace, a pinned version, and a cross-user OAuth token leak.
-
PIChef. A tool for Prompt Injection inspired by CyberChef (blog.sentry.security)
Manual prompt-injection payloads get fiddly quite quickly and require experimentation. PIChef gives that experimentation a workbench. Inspired by CyberChef, it lets you combine transformations into recipes and watch a payload change at every step.
-
Pwning AI labs and the model supply chain through their own employees (projectdiscovery.io)
We found live write-scoped tokens and API keys belonging to employees at NVIDIA, Nutanix, AllenAI, [redacted] and others in public Git history, roughly 122,000 HuggingFace account credentials in stealer logs and breach databases, and stolen logins from employee machines at Google, Amazon, Microsoft and NVIDIA.
-
REA — Reverse Engineering for Your Coding Agent (rea.tools)
Reverse engineer apps, binaries and browser behavior with your coding agent. Follow clear guides and try interactive examples with REA.
-
Who Is Planting Backdoors in Ledger Crypto Wallets? (zetter-zeroday.com)
The theft last week of an estimated $100 million in crypto using a hardware backdoor planted in Ledger wallets points to a sophisticated and systematic attack aimed at subverting crypto wallets sold by legitimate resellers in Asia and Europe.
X2
-
Ledger Flex sold at Singapore Airport confirmed to contain a spy implant! @BenYorke found suspicious marks on his @Ledger and sent it to me rather than using it, that was probably the best decision here. https://t.co/aP7gDEbvtq. https://t.co/3VumJyBFD2 https://t.co/2NtXWIbJYs.
-
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users. We have notified them all this morning via email. The incident is ongoing so we cannot share more details at this point but we are working with.
g1thub1
-
PoC script for CVE-2026-107651 - Heap Buffer Overflow in the PNG… (gist.github.com)
PoC script for CVE-2026-107651 - Heap Buffer Overflow in the PNG Metadata Reader - genchrmoverflow.py.