Numen Cyber

Exploring Android ROOT via CVE-2025–21479 @numencyberlabs/exploring-android-root-via-cve-2025-21479-eca9fb7ca6e9" target="_blank" rel="nofollow noopener">medium.com/@numencyberlab…

CVE-2026–5283: Uninitialized GPU Memory Disclosure via Partial Clear in ANGLE (Chrome WebGL) @numencyberlabs/cve-2026-5283-uninitialized-gpu-memory-disclosure-via-partial-clear-in-angle-chrome-webgl-3740ca481149" target="_blank" rel="nofollow noopener">medium.com/@numencyberlab…

Android ART JNI In-the-Wild Vulnerability: Bypassing Class Checks to Instantiate Abstract Classes/Interfaces, Leading to Potential Crashes and Privilege Escalation. medium.com/p/analysis-rep… #Android #cybersec #JNI

🎉 LUCKY DRAW – DAY 2 PRIZES ARE HERE! 🎁 From exclusive cyber security access to adorable panda merch and smart gadgets — you won’t want to miss today’s rewards!

Day 1 at #CYDES2025! We are showcasing our latest mobile phone forensics product here. We welcome technical discussions and collaboration. 📍 Putrajaya International Convention Centre (PICC) 🔍 Booth: 139

•Arctic Security •CelcomDigi •KPMG •MIMOS •MydigitalID •Mynic •NACSA •Numen Cyber •Paloalto Networks

CVE-2024–36401 Memory Shell Exploit for JDK 11–22 @numencyberlabs/cve-2024-36401-memory-shell-exploit-for-jdk-11-22-1a40162494c9" target="_blank" rel="nofollow noopener">medium.com/@numencyberlab…

@HBh25Y @offbyoneconf More details to come @numencyberlabs/the-forgotten-treasure-in-classic-targets-94b0a71a5ec7" target="_blank" rel="nofollow noopener">medium.com/@numencyberlab…

Our researcher Slim (@HBh25Y) shared at @offbyoneconf: The Forgotten Treasure in Classic Targets: Despite powerful fuzzers like AFLplusplus & syzkaller, recent vulnerabilities show secrets lie deep in the code. Manual audits on Linux kernel & mobile decoders reveal many high-value vulnerabilities. #CyberSecurity #FuzzTesting #offbyone2024

Two topics presented by Numen Cyber employees at the #SINCON2024 conference: "Bug Bounty Hunting for ChromeOS Kernel Vulnerability" and "Chrome V8 Sandbox Bypass". @frust93717815 @hackyzh

Numen Cyber extends warm wishes for a delightful Lunar New Year celebration, filled with joy and togetherness with loved ones. 🎉 🎉

🌟 As the New Year arrives, we extend our warmest wishes to every friend who follows us. May 2024 bring you boundless success and happiness! We will continue our commitment to providing excellent cybersecurity services and products to safeguard your digital world. Thank you for your support, and let's welcome the brand new year together! 🎉 #HappyNewYear #Cybersecurity #InfiniteFuture

The Numen security team discovered that @Ledger’s @Ledgerhq/connect-kit module has been implanted with malicious phishing code, and that a large number of dapps integrate this functionality, with no clear statistics on the list of affected dapps, which is extremely wide-ranging. #web3 #connect-kit #Security #numencyber @numencyberlabs/web3-security-ledgerhq-connect-kit-supply-chain-attack-warning-abf4ed952b71" target="_blank" rel="nofollow noopener">medium.com/@numencyberlab…

Have you prepared for google's CTF(@GoogleVRP)？ today we shared the "Modern Chrome Exploitation" topic at POC2023(@POC_Crew) and now we're make the latest Chrome V8 sandbox bypass method public. #Google_CTF #POC2023 #CyberSecurity #NumenCyber @numencyberlabs/use-wasm-to-bypass-latest-chrome-v8sbx-again-639c4c05b157" target="_blank" rel="nofollow noopener">medium.com/@numencyberlab…

🤟

Numen Cyber Labs vulnerability researchers have discovered an SSRF vulnerability in Apache ShenYu< version 2.6 @numencyberlabs/numen-security-labs-vulnerability-researchers-have-discovered-an-ssrf-vulnerability-in-apache-3f9c5f51e4a0" target="_blank" rel="nofollow noopener">medium.com/@numencyberlab… #CVE-2023–25753 #ApacheShenYu #Numencyber #CyberSecurity

Thrilled to share that our expert researchers have identified a remote command execution vulnerability in @OctoPrint3D . It's our mission to contribute to the security of outstanding digital platforms. #Cybersecurity #OctoPrint @blog_50308/octoprint-rce-octoprint-%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-78231d77e40e" target="_blank" rel="nofollow noopener">medium.com/@blog_50308/oc…

📢 Today at the MOSEC(@MosecOfficial) conference hosted by PanGu Lab and POC Security , our security researchers showcased technical achievements during the BaiJiuCon session! 🔍 After we make issue1378239 public to show how to bypass the latest v8 sbx ,we also finished CVE-2023-21674-ALPC exploit which can be used to escape chrome sbx. we poped up cmd with system privilege from untrust process. 📱 Additionally, we played an oob crash in mobile and we will make IT public when time permits. Thanks to all participants for the support. Looking forward to more security exchanges in the future! 🤝 #MOSEC2023 #Security #NumenCyber #web3Security