https://nitter.cf/t.co/qju40dBXtK
Brazil
Joined May 2011
- Tweets94
- Following271
- Followers2K
- Likes226
Erick Fernando retweeted
🚨 WARNING: A 0day vulnerability in Adobe Acrobat Reader is being actively exploited in the wild for 4 months now.
Simply opening a malicious PDF can lead to data theft and potentially full system compromise.
Adobe has not released a patch for this vulnerability.
Erick Fernando retweeted
A very good xss payload.🔥
<sCriPt x>(((confirm)))``</scRipt x>
credit: @viehgroup
#bugbountytips #xss #bugbounty
Erick Fernando retweeted
Tamo bem rankeado na @bugcrowod no mês de agosto dentre os BR hein @sushicomabacate @erickfernandox
Erick Fernando retweeted
🚨Chrome Zero-day Alert: PATCH NOW‼️
Google released an emergency security update for Chrome to patch CVE-2025-6558, a high-severity zero-day vulnerability (CVSS 8.8) that is actively exploited in the wild.
The flaw resides in Chrome’s ANGLE and GPU components, where insufficient validation of untrusted input can allow remote attackers to perform a sandbox escape through a crafted HTML page.
This enables attackers to break out of the browser’s security environment and potentially gain access to the underlying system without user interaction.
The vulnerability was discovered by Clément Lecigne and Vlad Stolyarov from Google’s Threat Analysis Group (TAG) on June 23, 2025. While the full details of the exploitation have not been disclosed, Google’s acknowledgment suggests possible nation-state involvement.
Users are urged to update Chrome to version 138.0.7204.157 or later.
more:
thehackernews.com/2025/07/ur…
Erick Fernando retweeted
This Tiny JWT Mistake = Massive Bug Bounty (with a real world example!)
watch here 👉🏼 youtu.be/0R3xHx7fPUM
Erick Fernando retweeted
CVE-2024-49505 A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in openSUSE Tumbleweed MirrorCache allows the execution of arbitr… cve.org/CVERecord?id=CVE-202…
Erick Fernando retweeted
Top 5 Trending CVEs:
1 - CVE-2024-4985
2 - CVE-2024-21683
3 - CVE-2020-17519
4 - CVE-2024-4956
5 - CVE-2024-29269
#cve #cvetrends #cveshield #cybersecurity
cveshield.com/dashboard
Erick Fernando retweeted
🚨Alert🚨CVE-2024-4956:Nexus Repository Flaw Exposed, Software Supply Chains Threatened
⚠This vulnerability, discovered and responsibly reported by @erickfernandox, could allow attackers to access and download sensitive system files without authentication.
📊284K+ Services are found on hunter.how
🔗Hunter Link:hunter.how/list?searchValue=…
📰Refer:securityonline.info/software…
👇Query
Hunter:/product.name="Nexus Repository"
FOFA:app="Nexus-Repository-Manager"
SHODAN:http.html:"Nexus Repository"
#Nexus #Sonatype #infosec #infosecurity #Infosys #Vulnerability
Erick Fernando retweeted
CVE-2024-4956 Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1. cve.org/CVERecord?id=CVE-202…
Erick Fernando retweeted
CVE-2023-6275 A vulnerability was found in TOTVS Fluig Platform 1.6.x/1.7.x/1.8.0/1.8.1. It has been rated as problematic. Affected by this issue is some unknown functionality of the… cve.org/CVERecord?id=CVE-202…
Erick Fernando retweeted
🚨Bypass email filter leading to SQL injection (JSON).
credit:@hackEnews
credit: @RootMoksha
#bugbountytips #BugBounty #bugbountytip #bugbounty
Erick Fernando retweeted
O inglês do presidente da Embratur convidando os greengos pra vir pro Brasil tá nível Joel Santana
Erick Fernando retweeted
Ouvir do novo ministro da Saúde que há um "alinhamento total com Bolsonaro" é como escutar uma marcha fúnebre, tendo o presidente da República como regente.
#BolsonaroGenocida
#BolsonaroVirus