An anonymous GitHub account has begun releasing proof-of-concepts for exploits framed as undisclosed zero-days, accompanied by a note instructing readers to report the findings and claim credit for the associated CVEs themselves. 🛡️📝
https://github.com/bikini/exploitarium 🔗
https://github.com/bikini/exploitarium 🔗
❤6
🔐 NotHackable | Only a few hours left!
12-Hour Team CTF
📅 4 September 2026
⏰ 11 AM – 11 PM IST
👥 Team CTF | 🎟 Free
Find vulnerabilities. Solve puzzles. Capture flags. 🚩
Think you can break it?
🔗 https://ctf.rarebytehub.com/events/nothackable
12-Hour Team CTF
📅 4 September 2026
⏰ 11 AM – 11 PM IST
👥 Team CTF | 🎟 Free
Find vulnerabilities. Solve puzzles. Capture flags. 🚩
Think you can break it?
🔗 https://ctf.rarebytehub.com/events/nothackable
❤5
This media is not supported in your browser
VIEW IN TELEGRAM
🔗 https://github.com/watchtowrlabs/watchTowr-vs-cPanel-WHM-AuthBypass-to-RCE.py
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥6❤4
All about JWT Hacking.pdf
404.5 KB
All about JWT Hacking.pdf
❤3
Bug Bounty Tip – SQL Injection
Hard-to-exploit SQL injection?
This time-based payload worked when others failed:
Add it to your SQL wordlist.
Download - https://github.com/orwagodfather/SQL-Wordlist/blob/main/sql.txt
Credit: @GodfatherOrwa
Happy hunting ♥
#bugbounty #bugbountytips #bugbountytip
Hard-to-exploit SQL injection?
This time-based payload worked when others failed:
''||(select 1 from (select pg_sleep(6))x)||'
Add it to your SQL wordlist.
Download - https://github.com/orwagodfather/SQL-Wordlist/blob/main/sql.txt
Credit: @GodfatherOrwa
Happy hunting ♥
#bugbounty #bugbountytips #bugbountytip
1❤10🗿3🔥2👏1
CVE-2026-75650: Adobe Commerce and Magento Open Source RCE vulnerability (StyleSmuggler) exploited in the wild, 10.0 rating 🔥
Recently disclosed vulnerability in Adobe Commerce and Magento Open Source allows an unauthenticated attacker to execute arbitrary code. This vulnerability is being actively exploited in the wild!
Search at Netlas.io:
👉 Link: https://nt.ls/bX5dx
👉 Dork: tag.name:"magento"
Read more :
https://sansec.io/research/stylesmuggler-0day
Recently disclosed vulnerability in Adobe Commerce and Magento Open Source allows an unauthenticated attacker to execute arbitrary code. This vulnerability is being actively exploited in the wild!
Search at Netlas.io:
👉 Link: https://nt.ls/bX5dx
👉 Dork: tag.name:"magento"
Read more :
https://sansec.io/research/stylesmuggler-0day
❤8
Search for all leaked keys/secrets using one regex!
regex: https://gist.github.com/h4x0r-dz/be69c7533075ab0d3f0c9b97f7c93a59
#BugBounty #bugbountytip
regex: https://gist.github.com/h4x0r-dz/be69c7533075ab0d3f0c9b97f7c93a59
#BugBounty #bugbountytip
😱8👍4❤3👏3🔥1
CVE-2026-67401: SQL Injection Vulnerability in cPanel, 9.9 Rating 🔥
A vulnerability in cPanel's EmailTrack component allows an authenticated attacker with mail-related privileges to create arbitrary files on the server via SQL injection. This may lead to code execution as the root user, giving the attacker full control of the server.
Search at Netlas.io:
👉 Link: https://nt.ls/dIEpd
👉 Dork: http.title:cpanel OR http.headers.set_cookie:"cprelogin" OR http.headers.set_cookie:"cpsession"
Vendor's advisory:
https://support.cpanel.net/hc/en-us/articles/43187903921559-Security-CVE-2026-67401-SQL-Injection-Vulnerability-in-cPanel-s-EmailTrack-Functionality-September-8-2026
A vulnerability in cPanel's EmailTrack component allows an authenticated attacker with mail-related privileges to create arbitrary files on the server via SQL injection. This may lead to code execution as the root user, giving the attacker full control of the server.
Search at Netlas.io:
👉 Link: https://nt.ls/dIEpd
👉 Dork: http.title:cpanel OR http.headers.set_cookie:"cprelogin" OR http.headers.set_cookie:"cpsession"
Vendor's advisory:
https://support.cpanel.net/hc/en-us/articles/43187903921559-Security-CVE-2026-67401-SQL-Injection-Vulnerability-in-cPanel-s-EmailTrack-Functionality-September-8-2026
❤5🔥3👏1🫡1