دلم واسه این بدبختی که 1 میلیارد با پول فیشینگ دونیت شده سوخت واقعا گناه داشت
از اونور بعدش اومد توضیح بده دوباره 300 تومن دیگه زدن مجبور شد ببنده کلا لینکش رو
سیستم فشل پرداخت ایران خیلی مسخرست
اینجا یه پرداخت خارج از عادت انجام بدی درجا تراکنش hold میشه زنگ میزنن تایید میگیرن

eMudhra login to download customer's certs can be cracked

Their 1FA login generates a OTP & sends it. It also sends a RSA public key to front end

They haven't rate limited checks, so you can offline brute force 0 to 9999 encrypted with public key & find the OTP

@ni5arga

AWWWWOOOOOOOGAAAAAAA

9.8 severity use-after-free vulnerability in the kernel’s IPv4 TCP stack just landed

Time to patch!

ubuntu.com/security/CVE-2…

باید دید تا کجا میشه تحمل کرد

چه کثافتی از تلگرام بیرون میزنه -_-

یک مثال ساده
یک کانال به عنوان مثال بد افزار منتشر میکنه ولی چجوری پروموت میشه :
حالا هر کدوم از این node ها چه چیز های دیگه رو منتشر کردن و چه ارتباط هایی دارن (تصویر با بالاترین تعداد node مربوط به node اولی هست) :

Congrats to @killa who solved stealmybitcoin.com hours ago but I screwed up which key went on the server (the flag was a root wallet WIF instead of the branch WIF).

Check out their awesome writeup here: github.com/KillaBoi/Steal…

داره جالب میشه

حالا فک کن این بهترین ورژن بوده که اپل ساخته :)) بدترینش چی بوده :
reddit.com/r/iPhoneDuo

این واقعا عالی بود

‼️ After PHP2Shell comes Node2Shell, a critical bug found by OpenAI's Codex Security that can let attackers run code in Node.js apps.

It was successfuly demonstrated on the official Node.js 24.22.0 image.

Node 20, 23 and 25 (all EoL) get no fix.

CVE-2026-64638: XSS2Shell WordPress Pre-Authentication XSS to Remote Code Execution

PoC: github.com/Boreas37/CVE-2…

Current information I have on php2Shell:

- The RCEs requires the attacker to obtain memory addresses which are typically protected by ASLR.

- I suspect the original author (lcfr_hax) likely has a reliable exploit which leads to stable code execution.

- Most of the PoCs being posted are completely non-functional AI slop.

- There is at least 1 working non-slop exploit being passed around, but it's reliant on bruteforcing for ASLR bypass, so not particularly impactful.

- Rumor of ITW exploitation are patchy. There are attempts being seen using the non-functional leaked RCE, or variants that are config / system specific.

- Some rumors point towards a known-working exploit being used by threat actors (I've personally confirmed this specific exploit works, but the ASLR bypass technique is unreliable at best and massively limits the potential impact).

- I'd expect heavy ITW exploitation in the next few weeks based on how many people are looking at this. Though, success rates will vary heavily based on the specific exploit chain.

RT @gezine_dev: Hello 14.10

‼️ PS5 hackers have just jailbroken Sony's latest firmware, 14.10.

Keeping your console offline ensures you can use it to play future games.

‼️ BREAKING: OVHcloud's official CLI was hijacked in a supply chain attack.

A hacker used a developer's GitHub account to plant a binary built to grab secrets in versions v0.11.0 to v0.15.0.

Introducing Clairic, from Cloudflare. A System One extraction modeI, capable of extracting, computing, estimating, and forecasting data from unstructured inputs. cfl.re/4zIgfpH

هر چندوقت یه بار به این میرسم تو انتخاب آدم ها واقعا باید تجدید نظر کنم :)) این چه وضعیتیه آخه

دیشب تریلر بازیمون بعد از ۳ سال منتشر شد اینجا هم میزارمش

از امشب ساعت 8:30 دقیقه میتونید دمو بازی رو به مدت یک هفته با اپدیت های روزانه

با دوستاتون تجربه کنید قطعا شیر شما میتونه کمک زیادی به دیده شدن بازی در استیم در کامنت ها هم لینک استیم رو گذاشتم