I'm back and coming in hot with a 0day!
Writeup here:
https://hadrian.io/blog/client-side-template-injection-in-gitblit
| My website | https://skelli.win/ |
| My community | https://digitaloverdose.tech/ |
| Pronouns | They/them |
I'm back and coming in hot with a 0day!
Writeup here:
https://hadrian.io/blog/client-side-template-injection-in-gitblit
I hacked two websites using a Supabase backend. The results were catastrophic, with thousands of users PII leaked
7-Zip vulnerability enables remote code execution through malicious ZIP files
A critical directory traversal vulnerability (CVE-2025-11001) in 7-Zip allows remote code execution on Windows systems when users open malicious ZIP files, with a public proof-of-concept exploit available since October 2025. Although patched in version 25.00 (July 2025), the lack of automatic updates means many systems remain vulnerable and require immediate manual upgrade to version 25.01.
**Update your 7-Zip software on Windows to version 25.01 or later ASAP. There's an vulnerability that is exploitable just by opening a malicious ZIP file. And there's a public exploit PoC, so criminals can just copy it in their attacks. Don't ignore this one**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/7-zip-vulnerability-enables-remote-code-execution-through-malicious-zip-files-k-o-8-v-x/gD2P6Ple2L
A critical directory traversal vulnerability (CVE-2025-11001) in 7-Zip allows remote code execution on Windows systems when users open malicious ZIP files, with a public proof-of-concept exploit available since October 2025. Although patched in version 25.00 (July 2025), the lack of automatic updates means many systems remain vulnerable and require immediate manual upgrade to version 25.01.
unattended laptops will be upgraded to the arch linux operating system 
My talk from @defcon is finally out! Watch 'Secure Code Is Critical Infrastructure: Hacking Policy for Public Good' here:
https://twp.ai/4is4i0
If you like it, please give it a thumbs up. 👍
Honestly the two resources I recommend the most often for privacy
Are
@privacyguides https://www.privacyguides.org/
and @eff 's Surveillance Self Defense https://ssd.eff.org