I’ve updated my blog post about CVE-2025-9501 and included bypasses for all W3 Total Cache versions up to and including the latest 2.8.15. #wordpress #security www.rcesecurity.com/2025/11/expl...

We took WPScan's one-liner #security advisory for CVE-2025-9501 affecting the W3 Total Cache plugin for #WordPress, analysed its cache parsing internals and built a pre-auth RCE exploit for it 😎 www.rcesecurity.com/2025/11/expl... #infosec

I try to get Rocket Software to fix my pre-auth SSRF affecting TRUfusion for 8 months now. Considering I'm doing this for free, and they didn't even bother to credit me last time, I feel they don't really care. Maybe I shouldn't care either and drop a 0day (+chain to RCE)... #security

Our friends @hashicorp.com released a new version of Consul fixing our reported Denial of Service vulnerabilities (CVE-2025-11374 and CVE-2025-11375). See our official advisories for the details and remediation steps: www.rcesecurity.com/security-adv... #security

OK, Rocket Software believes that the likelihood of my unauthenticated RCE "being exploited is rare"...🤦‍♂️ docs.rocketsoftware.com/bundle/trufu... #security

Another day, another Remote Code Execution (and its 3 friends). Pre-auth path traversal, hard-coded crypto key allowing cookie forgery, arbitrary file write, and PII disclosure in TRUfusion Enterprise (CVE-2025-27222 to CVE-2025-27225) #security www.rcesecurity.com/2025/09/when...

Remember I wanted to drop more bugs (Pre-Auth RCE, Cookie Forgery etc.) in June? Unfortunately, I had to postpone the disclosure because there are still too many vulnerable instances online and the vendor apparently needs to manually patch each one... 🤦‍♂️ #BugBounty #security

"We take our freedom for granted. It’s better to pay the price of convenience and take back ownership of your data." This is it 💯 #privacy

Critical Wing FTP Server vulnerability exploited in the wild (CVE-2025-47812) 📖 Read more: www.helpnetsecurity.com/2025/07/11/c... #cybersecurity #cybersecuritynews #exploit #filesharing @censys.bsky.social @rcesecurity.com @mrtuxracer.bsky.social

In terms of that, big shout-out to @proton.me for their stance on #privacy and for their Mail/Drive/Pass products that are a perfect alternative to some of these products! Cheers guys! Appreciate your hard work!

I am a huge fan of the #BuyFromEU movement! So far, I've ditched a lot of US stuff already, including Microsoft, Dropbox, 1Password, Notion, Grammarly, Amazon, Slack, and Google. This helped a lot: european-alternatives.eu

Here's an update to the blog post about CVE-2025-47812, which now includes a way to leak a user's password (CVE-2025-27889), but requires a bit of social engineering. #security #BugBounty

As promised! Here's a root/SYSTEM-level RCE (aka CVE-2025-47812) affecting Wing FTP Server in versions before 7.4.4. Enjoy 🥷 #security #BugBounty

I'll publish 4 CVEs later today, including one unauthenticated Root/SYSTEM-level RCE. I'm a bit nervous, TBH, because it potentially affects 15k systems on the internet. But, according to the vendor, most instances should've been updated already 😬

I have plenty of public disclosures planned for June: 2x RCE (one as root!), Full SSRF, Directory traversal, Cookie forgery leading to auth bypass, Multiple information disclosures incl. PII Link injection leaking clear-text passwords All pre-auth 🙃 #security #BugBounty

Yay! They even decided to reward a $7,000 #BugBounty for the cool chain. Looks like trying harder was absolutely worth it! Also: Triaged, fixed, and rewarded within 2 hours of submission 😎

OK, nvm. I've just used a postMessage listener to leak what I want. Much cooler than a lame open redirect 🙃

I'm just a freaking open URL redirect away from a $5,000 ATO. At this point, I start to dislike people who report those for an informative/$100 bounty... 😒

After last week example (ERNW), here’s another infosec company (WatchTowr) which refused to abide by the vendor’s vulnerability disclosure terms labs.watchtowr.com/sysowned-you...

Since Hex-Rays changed their licensing model, I've switched to @binary.ninja, and I'm really impressed with how good it is, especially their high-level IL is 🔥

Let's say you have a web app that runs on Windows and has its own auth system (so it's decoupled from Windows Auth). It has a built-in feature that allows admin users of the web app to execute code on the underlying server. However, it does so using NT Authority/SYSTEM. Is this a vulnerability?

When you jump on an AI trend just remember the environmental harm that’s causing for absolutely nothing of value whatsoever. Then decide if it’s worth it for an unimpressive image. Just sayin

After being active here for a while now, I noticed that I don't have the same reach compared to X (i.e., waaaaay fewer visits on my blog). I'm considering reposting my stuff there again for visibility; maybe with a delay to lure more users to Bluesky? 🤔

Watch out for my latest discovery, CVE-2025-27889, which will be released next week. Based on the number of hits on Shodan, things look quite promising 😎

I do have quite a backlog of blog posts, so let's start with this one 😎

This place feels so much calmer and a lot less toxic than Elon‘s place 👌

Oh, beautiful Japan ❤️ It's a shame I'll have to leave you soon 😢

Hello world 👋