CyberArch Maeen

Timeline of two reports I submitted on @HackerOne: 🔹 #3516650 (Jan 19) – Closed as Informative Analyst: "Show a practical exploit & we'll reevaluate." 🔹 #3527652 (Jan 27) – I submitted exactly that Initially rated Critical (9.3) Closed as "Duplicate of #3516650" [1/2]

Updated list of papers on using LLMs for vulnerability detection github.com/huhusmang/Awes… #llm #infosec

GitHub - Icex0/wp2shell-poc: CVE-2026-63030 · GitHub github.com/Icex0/wp2shell…

Capital One opensourced an interesting tool. "VulnHunter identifies which defects are actually exploitable, maps prospective attack paths, and proposes targeted, evidence-backed fixes." github.com/capitalone/vul…

🔎 YesItsMe — Instagram OSINT Profile Finder An open-source OSINT tool that helps correlate Instagram profiles using a person's name with partial email or phone number data. ✨ Features: • Search Instagram profiles by name • Correlate accounts using partial email or phone information • Match confidence levels (High, Medium & Low) • Automates profile correlation to speed up investigations • Lightweight Python-based OSINT utility 🔗 github.com/0x0be/yesitsme #OSINT #SOCMINT #CyberSecurity #Python #OpenSource #InfoSec

‼️ You can check whether you are affected by wp2shell with a free scan at: wp2shell.com

Cyber Security — From Fundamentals to Real-World Defense 🎓 (Networking • Cryptography • Threat Intelligence • Security Architecture • Ethical Hacking) drive.google.com/drive/folders/…

🚨Searchlight Cyber's research team has found a pre-authentication RCE in WordPress Core. affected versions: 6.9.0–6.9.4, 7.0.0–7.0.1 No preconditions, exploitable by an anonymous user on a stock install with no plugins. CVE-2026-63030/CVE-2026-60137 wp2shell.com

🛡️ A Windows zero-day vulnerability, dubbed LegacyHive (MSNightmare), abuses the User Profile Service to enable local privilege escalation, tampering with administrator accounts, and admin-level code execution. The public proof‑of‑concept (PoC) from the MSNightmare GitHub account describes the bug as a “Windows user profile service arbitrary hive load elevation of privileges vulnerability.” Will Dormann demonstrated that by running LegacyHive.exe with a second standard user's credentials, specifying an administrator account name, and then starting regedit.exe as that second user, the non‑admin gains direct access to the administrator’s Classes. #cybersecuritynews

How Hackers hack phones and how to stay safe Note: For educational and security purposes only

#bugbountytip Always go subdomain.subdomain.test.com Below is Tip: 1. subfinder -d target.com -all > target.txt 2. httpx -l target-live.txt -ip 3. nuclei -l target-live.txt -t <DM Me to Get Full Nuclei Command> 4. You may find Gold #bugcrowd #hackerone #hacking

Everyone knows HackerOne Hacktivity. Nobody knows this repo: reddelexc/hackerone-reports (6.4k stars). Bug types Hacktivity doesn't: Business Logic, REST API, GraphQL, Web Cache, MFA, Auth Bypass, Mobile. reddelexc.github.io/hackerone-repo… Bookmark before it disappears.

I published my Bug Bounty Hunting Methodology on GitHub almost 2 years ago: github.com/wadgamaraldeen… Some parts may be outdated, but it still contains practical tips you can use in your AI prompts or to improve your current hunting methodology. Happy hunting! 🩵 #bugbountytips

@bitfunded France 0 – 2 England

⚽England 🏴󠁧󠁢󠁥󠁮󠁧󠁿 vs France🇫🇷 🎯 THE WORLD CUP IS ALMOST COMING TO AN END!!! STAND A CHANCE TO WIN BY PREDICTING THE BRONZE FINAL SCORE! 👊👊 💰One winner will get a $150,000 1-Step Funded Account. Comment down below with your result! 👇🔥 To enter:✅ Follow @BitFunded ✅ Comment with THE RESULT OF THE MATCH! #FrancevsEngland #FundedAccount #TradingChallenge #GiveawayAlert

الفلسفة قالت يقــــــــــول المنطق والمعرفة قالت تقــــــــول الحكمة مــــن كلمته كلمة وقــــــارح بندق لا قـــــال كلمة ما رجـــع في كلمة والفــرط صوتي والممــــــر الضيِّق باب الفــــرج ذي ينفتـــح بالبصمة والحمـــق عاهــــة والتورُّط موبق والمعتصم بالغـــــرب ما له عصمة اكبـــــر تحالــــف عالمي في مأزق والاقتصــــــــــاد العالمي في أزمة لا عــــاد يستغـــرب ولا يستشرق كل القوى خــارج نطـــاق الخدمة فك الخطـر لكبــر عليكـــم محدق والجــوع ضاري وانتــم آخر لقمة #بسام_شانع

إلى كل المسلمين في أصقاع الأرض : عصر هذا اليوم ستشاهدون في ساحات اليمانيين المعنى العملي للعبودية والتوحيد لله العلي الكبير بما لا سابقة له في كل التاريخ الإسلامي! فترقبوا!

‼️ CVE-2026-3891: A critical Unauthenticated Arbitrary File Upload vulnerability found in the Pix for WooCommerce WordPress plugin in versions up to and including 1.5.0. PoC: github.com/m4sh-wacker/CV…

#جلسة فنية سالم المسعودي صقر السلامي دعنا لا نطــيل ونسـ👂ـتمع

🚨 Two actively exploited zero-days affecting SonicWall SMA1000 appliances: CVE-2026-15409 (CVSS 10.0) and CVE-2026-15410 (CVSS 7.2) I’ve created vulnerability detection templates here (with confidence levels): CVE-2026-15409: github.com/rxerium/rxeriu… CVE-2026-15410: github.com/rxerium/rxeriu… CVE-2026-15409 is remotely exploitable without authentication, while CVE-2026-15410 requires an authenticated administrator. Platform hotfixes are available through SonicWall’s security advisory: psirt.global.sonicwall.com/vuln-detail/SN…

Demo of recently published android zero click RCE via wireless debugging, (CVE-2026-0073) Educational purposes only Check Mobile hacker for more