One of the most interesting Windows NT kernel bugs is MS08-067 - tracked as CVE-2008-4250 - learn.microsoft.com/en-us/se…
The vulnerability was in the Server service ("srvsvc") and was triggered remotely through a crafted RPC request. An unchecked path parsing routine led to a stack buffer overflow, allowing attackers to execute code in kernel-related services without authentication.
It became the primary infection vector for the Conficker worm, proving that a single parsing bug could compromise millions of Windows machines worldwide.
1
4
119
David Valles retweeted
10-Year-Old RCE Found in Linux PDF Viewers 🤯🔥
CVE-2026-46529 affects XReader, Evince, and Atril, allowing code execution through a malicious PDF.
Huge find by N1et 👏
🔗 medeiros.zip/posts/CVE-2026-…
#CyberSecurity #Linux #RCE #CVE
Join team 👉t.me/luckyhacker43
1
10
177
Bogdan D Sergiu retweeted
Critical RCE in Roundcube 🤯🔥
Your inbox could be the attack vector.
CVE-2025-49113 allows Remote Code Execution on vulnerable Roundcube instances, putting countless email servers at risk. 🚨
👨💻 AirCorridor / Hackers-Arise
🔗 hackers-arise.com/critical-r…
#CyberSecurity #RCE
1
7
147
40代から年収が止まる人間と、伸び続ける人間の差は、月の学習時間じゃない。
月10時間しか勉強していなくても伸びる人間がいる。月50時間やっても止まる人間もいる。差は「何を学んだか」じゃなくて「学んだ後に自分の現場の何を変えたか」だ。
技術書を読んだ後に、社内ドキュメントを1つ書き直す。論文を読んだ後に、構成図のリスク欄に1行足す。CVE 速報を読んだ後に、社内の影響資産を1分で照会できる仕組みを試す。学習量じゃなく、学習を「自社の変化」に直結させた回数だ。
経営は学習時間を評価しない。変化させた現場の数を評価する。君の今月のインプット、何個が「現場の変化」に変わった？
42
Vera | Cloud SE retweeted
Honestly at this point, “accidentally public S3” should be a CVE category of its own.
1
23
Santhosh Raman retweeted
AIADMK leader CVe Shanmugam has alleged that EPS takes decisions based only on inputs from his family. He further claimed that EPS is making moves to pave the way for his son Mithun entry into politics.
18h
#Exclusive: AIADMK district functionaries have urged EPS to appoint his son Mithun as either Youth Wing Secretary or IT Wing Secretary during a review meeting in Chennai today. Interestingly, Deputy General Secretary KP Munusamy backed the idea saying Mithun should not be prevented from entering party politics if it benefits AIADMK. The discussion has sparked debate within the party.
vikatan.com/government-and-p…
3
17
87
6,911
atomicedge.io/cve-proof/cve-… CVE-2026-49104 cf7-infusionsoft (CVSS Score 8.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomic…
5
இலையின் தோழன் 🌱✌️💚 retweeted
3
5
55
1,889
Kofi Kesia retweeted
Jun 13
🚨 CVE-2026-48907 — JoomlaSniper v1.0 released
Unauthenticated RCE in Joomla JCE Editor (≤2.9.99.4)
CVSS 10.0 • Affects ALL production versions
File upload → PHP execution in /tmp/ — no auth required
🔗 github.com/ynsmroztas/Joomla…
---
🧵 2/3
Tool features:
✅ Dual vector (tmp/ JCE browser)
✅ Interactive shell
✅ Zero dependencies (stdlib only)
✅ Pipeline: subfinder | httpx | JoomlaSniper
✅ Multi-function fallback (shell_exec → system → passthru)
✅ Auto store code detection
Fixed in JCE 2.9.99.5
---
🧵 3/3
Quick test:
python3 JoomlaSniper.py -u target.com --shell
Subdomain tarama:
subfinder -d target.com | httpx -silent | python3 JoomlaSniper.py
⚠️ Authorized testing only
#BugBounty #InfoSec #RedTeam #AppSec #bugbountytip #bugbountytips #infosec #recon
29
120
5,406
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
CVE-2026-3909 Google Skia Out-of-Bounds Write Vulne @CISACyber rfr.bz/t4fe310
5
Günter Born retweeted
So, we need to figure out what is going on with CVE-2026-41089, the Netlogon vulnerability that Microsoft patched in May and that the Center Cybersecurity Belgium said on 05/29 is being exploited in the wild.
If the latter is true that's a *huge* deal.
But no public confirmation?
2
9
30
4,716
BlueHammer TOCTOU race condition exploits Microsoft Defender/VSS integration to escalate privileges and decrypt NTLM hashes on unpatched Windows systems. No CVE assigned, no official fix available since April disclosure.
#DFIR_Radar
1
15
1
Raana retweeted
EPS must convene the Executive Committee meeting; otherwise, we know what needs to be done- AIADMK MLA Cve Shanmugam
4
6
68
2,586
#CVE-2026-48558 - Critical authentication bypass in Simplehelp (CVSS 10). #OIDC #tokens accepted without signature verification. Unauthenticated remote attackers can forge tokens for full technician access. No patch available. Disable OIDC if ... valtersit.com/cve/CVE-2026-4…
17