Mel
63 posts




kimi k3 also did a zero-click arbitrary command execution in Telegram Desktop and iOS app (aslr pinned, one gadget away from full rce).


Note on WordPress pre-auth RCE (CVE-2026-63030). There are SQLi poc's out there, but RCE PoC has not yet been exploited in the wild. Will only release our technical post if we have proof of exploitation. Our RCE payload does NOT require poorly configured MySQL.



Apple has now unsigned: iPhone 5 (GSM) (iPhone5,1) 10.3.3/10.3.4 IPSW 8.4.1 (OTA)


Today, Apple has begun unsigning old iOS versions for legacy devices: iPhone 5c (GSM)/(CDMA) (iPhone5,3)/(iPhone5,4) 10.3.3/10.3.4 IPSW iPad mini Wi-Fi + Cellular (iPad2,6) 8.4.1 OTA 9.3.5/9.3.6 IPSW iPad 2 Wi-Fi + 3G (CDMA) (iPad2,3) 6.1.3 OTA 8.4.1 OTA 9.3.5/9.3.6 IPSW






I kinda don't want these anymore,. WTF people are sick. Authorities contacted.



























