Security Researcher & Exploit Developer @VulnCheckAI
Joined April 2022
- Tweets2.2K
- Following322
- Followers4.1K
- Likes5.5K
ʞʞıdɐɔoɥƆ retweeted
Reprise de Stream en vue ! 🔭
La rentrée x41 - Retex 1A, 2A, et Profs 🍀
- Date : Mardi 20 Octobre à 20h 🗓️
- Location : twitch.tv/thelaluka + rediffs on @OteriaCS
- Guests Staff : @TheLaluka @itsmebeemo @spritz_41
- Guests Studs : @thismathis1 @wyshteria @anska_ Erwan
🤖 Made with AI
ʞʞıdɐɔoɥƆ retweeted
"Un ingé IA en France ne gagne que 50k/ans à Paris alors qu'aux US il en gagnerai 500k"
job-boards.greenhouse.io/ant…
ʞʞıdɐɔoɥƆ retweeted
A hell of a week indeed — though @Chocapikk_ is underselling just how many of these exploits were his own 😂 🐚
Hell of a week with the IAI team at @VulnCheckAI. 26 exploits shipped in a single release. Grateful to work alongside people this sharp. Full coverage here: docs.vulncheck.com/initial-a…
Hell of a week with the IAI team at @VulnCheckAI. 26 exploits shipped in a single release. Grateful to work alongside people this sharp. Full coverage here: docs.vulncheck.com/initial-a…
ʞʞıdɐɔoɥƆ retweeted
The @VulnCheckAI research team has a root cause analysis and exploit walk-through on Cisco SD-WAN CVE-2026-76504 here. Big ups to Landon Rice on our exploit dev squad! Private exploit and detections (etc.) available to customers as of this morning.
vulncheck.com/blog/revenge-o…
CVE-2026-76570: unauth SQLi in JCTables (JoomCode's Joomla data-table), read/write to RCE.
No auth, no CSRF, broken escaping. One request leaks the admin creds, then reset the password, log in, and drop a webshell.
Affected through 1.10.31.2, fixed 1.21.1.
vulncheck.com/blog/jctables-…
On Virtualizor, the way past the login is to... send act=login 😄 That value skips the guard into a billing hook that pastes your uid field straight into a root shell command. The password to bypass logging in was 'login' all along. CVE-2026-43641 (9.8)
vulncheck.com/blog/virtualiz…
ʞʞıdɐɔoɥƆ retweeted
As a French 9/11 should not be that impactful for me
BUT:
I was 20, just released from jail and I was in Spain (Alicante) in order to change my whole life and never do bad choices again.
That shit happened at the exact moment my life was turning around (for the better) so I find myself connected to that event, just like thousands upon thousands of other people.
So from Europe, to my American followers: my thoughts are for you today 🙏
ʞʞıdɐɔoɥƆ retweeted
We bought an $88 router on Amazon looking for the ENDLESSDOORS implant. We found two others instead
DARKLANTERN gives anyone on the Internet an unauthenticated root shell.
SPEAKINGSTONE phones home to ZBT infrastructure and supports remote surveillance.
vulncheck.com/blog/zbt-darkl…
ʞʞıdɐɔoɥƆ retweeted
Gg to my guys TableBasse & Midfirewear, students at @OteriaCS for their frappe RCE under @OffenSkillCorp supervised research! 🍻
A few months ago, I suggested researching wkhtmltopdf, but this lead them to unexpected places! 😻
thinkloveshare.com/offenskil…
Some vendors sanitize their inputs. Others just buy ionCube.
New vulnerability disclosure from @Chocapikk_ : CVE-2026-14863 is an OS command injection-to-RCE in FileRun, a commercial self-hosted file manager. Internet footprint is an appreciable 3.5K+ based on the team's ASM queries. Good stuff as always 🎉
vulncheck.com/blog/filerun-t…
ʞʞıdɐɔoɥƆ retweeted
stop putting implants in the routers. i can't get anything done. thank you for your consideration.
ʞʞıdɐɔoɥƆ retweeted
VulnCheck recently disclosed CVE-2026-65883, a critical unauthenticated PHP object injection vulnerability affecting versions 18.0–20.0 of the Aimy Captcha-Less Form Guard plugin for Joomla.
Read more: vulncheck.com/blog/aimy-capt…
