09/18

Finding 0day to hack Apple | HTTPVoid Research

https://httpvoid.com/Apple-RCE.md
Finding 0day to hack Apple | HTTPVoid Research

Remote code execution on Discord Desktop | Hacktron AI

https://www.hacktron.ai/blog/discord-rce
Remote code execution on Discord Desktop | Hacktron AI

Pwning AI Agents (Part 1/4) - Exploiting AI Coding Agents and Read-Only SQL MCP Servers :: Maximilian Hildebrand — Penetration Testing & Cyber Security Research

https://m10x.de/posts/2026/04/pwning-ai-agents-part-1/4-exploiting-ai-coding-agents-and-read-only-sql-mcp-servers/
Pwning AI Agents (Part 1/4) - Exploiting AI Coding Agents and Read-Only SQL MCP Servers :: Maximilian Hildebrand — Penetration Testing & Cyber Security Research

Hello Lucee! Let us hack Apple again? | HTTPVoid Research

https://httpvoid.com/Hello-Lucee!-Let-us-hack-Apple-again.md
Hello Lucee! Let us hack Apple again? | HTTPVoid Research

Hacking Apple - SQL Injection to Remote Code Execution | HTTPVoid Research

https://httpvoid.com/Hacking-Apple-with-SQL-Injection.md
Hacking Apple - SQL Injection to Remote Code Execution | HTTPVoid Research

GitHub Enterprise SAML Authentication Bypass (CVE-2024-4985 / CVE-2024-9487) | HTTPVoid Research

https://httpvoid.com/GitHub-Enterprise-SAML-Authentication-Bypass.md
GitHub Enterprise SAML Authentication Bypass (CVE-2024-4985 / CVE-2024-9487) | HTTPVoid Research

Adobe ColdFusion Pre-Auth RCE(s) — ProjectDiscovery Blog

https://projectdiscovery.io/blog/adobe-coldfusion-rce
Adobe ColdFusion Pre-Auth RCE(s) — ProjectDiscovery Blog

RCE in Google's AI code editor Antigravity - $10000 Bounty | Hacktron AI

https://www.hacktron.ai/blog/hacking-google-antigravity
RCE in Google's AI code editor Antigravity - $10000 Bounty | Hacktron AI

Aaditya%20Purani%20-%20ElectroVolt%20Pwning%20popular%20desktop%20apps%20while%20uncovering%20new%20attack%20surface%20on%20Electron.pdf

https://media.defcon.org/DEF%20CON%2030/DEF%20CON%2030%20presentations/Aaditya%20Purani%20-%20ElectroVolt%20Pwning%20popular%20desktop%20apps%20while%20uncovering%20new%20attack%20surface%20on%20Electron.pdf
Aaditya%20Purani%20-%20ElectroVolt%20Pwning%20popular%20desktop%20apps%20while%20uncovering%20new%20attack%20surface%20on%20Electron.pdf

$170k in Bypasses: The Vercel React2Shell Challenge | Hacktron AI

https://www.hacktron.ai/blog/react2shell-vercel-waf-bypass
$170k in Bypasses: The Vercel React2Shell Challenge | Hacktron AI

Hacking Discord for $5000 Bounty - YouTube

https://www.youtube.com/watch?v=R3SE4VKj678
Hacking Discord for $5000 Bounty - YouTube

Turning Cluely Into Malware | Hacktron AI

https://www.hacktron.ai/blog/hacking-cluely
Turning Cluely Into Malware | Hacktron AI

Pwning OpenAI Atlas Through Exposed Browser Internals | Hacktron AI

https://www.hacktron.ai/blog/hacking-openai-atlas-browser
Pwning OpenAI Atlas Through Exposed Browser Internals | Hacktron AI

Securing Perplexity’s AI Browser from a One-Click UXSS | Hacktron AI

https://www.hacktron.ai/blog/perplexity-comet-uxss
Securing Perplexity’s AI Browser from a One-Click UXSS | Hacktron AI

When Your VPN Opens Your Private Network to the Public | Hacktron AI

https://www.hacktron.ai/blog/cve-2026-0265-panos-globalprotect-cas-auth-bypass
When Your VPN Opens Your Private Network to the Public | Hacktron AI

CVE-2024-53991 - Discourse Backup Disclosure: Rails send_file Quirk — ProjectDiscovery Blog

https://projectdiscovery.io/blog/discourse-backup-disclosure-rails-send_file-quirk
CVE-2024-53991 - Discourse Backup Disclosure: Rails send_file Quirk — ProjectDiscovery Blog

Breaking Into PostHog Prod Database | Hacktron AI

https://www.hacktron.ai/blog/posthog-rce
Breaking Into PostHog Prod Database | Hacktron AI