2026-10-19T04:51:54Z https://nostr.now MrTuxracer https://nostr.now/npub1jcett84ggsp5yt776epnm4wnalrs6t56d25ry6y6kzkgq0v6qc5qsq3ymk https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/281/591/855/326/102/original/3d880f254164b49c.jpeg https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/281/591/855/326/102/original/3d880f254164b49c.jpeg https://nostr.now/nevent1qqsp6csqlkelm47x3zdhj3hms5gq2q4dm0c6m39cxjneezprlx9l3lczyztr9dv74pzqxs30mmtyx0w460huwrfwnf42svngn2c2eqpangrzsxf3t6x Not quite php2shell, but we found an unauthenticated SSTI → RCE in an enterprise CMS used by the police. 👀 <br/><br/><a href="https://www.rcesecurity.com/2026/10/imperia-cms-siteactive-template-unauthenticated-ssti-rce-cve-2026-110355/">https://www.rcesecurity.com/2026/10/imperia-cms-siteactive-template-unauthenticated-ssti-rce-cve-2026-110355/</a> 2026-10-23T14:49:44Z https://nostr.now/nevent1qqs8czztfn63wlg3x9q07mt9seuefex2zsrc4wz8nfxyxuxt9dukyuszyztr9dv74pzqxs30mmtyx0w460huwrfwnf42svngn2c2eqpangrzsxtd4yy Reversing public #security advisories has been a lot of fun lately. Here&#39;s an exploit I&#39;ve built for CVE-2025-9501 that potentially affects 1+ million #WordPress installations:<br/><br/><a href="https://www.rcesecurity.com/2025/11/exploiting-a-pre-auth-rce-in-w3-total-cache-for-wordpress-cve-2025-9501/">https://www.rcesecurity.com/2025/11/exploiting-a-pre-auth-rce-in-w3-total-cache-for-wordpress-cve-2025-9501/</a> 2025-11-20T09:15:45Z https://nostr.now/nevent1qqs2ltz2adjlvayahmgqz2q0whe2kg78ff547sdwspgskzhqnlyzqsszyztr9dv74pzqxs30mmtyx0w460huwrfwnf42svngn2c2eqpangrzstxtczv I am a huge fan of the #BuyFromEU movement! So far, I&#39;ve ditched a lot of US stuff already, including Microsoft, Dropbox, 1Password, Notion, Grammarly, Amazon, Slack, and Google.<br/><br/>This helped a lot: <a href="https://european-alternatives.eu">https://european-alternatives.eu</a> 2025-07-10T14:27:36Z