🧨 🎯 VirtualBox 0day - Guest-to-Host Escape!🎯 🧨 ❤️‍🔥 Any many more! New week, new you!❤️‍🔥 Exploits: 1. 💀 Guest-to-Host Escape · Local (guest) Attached SAS1068. CONFIG SCSI-SPI Port 0 overlays pManufacturingPage7. Guest DMA-leaks the heap pointer, plants pointer+size, manufacturing page 7 copies through it. VirtualBoxVM arb R/W. No Guest Additions. No 3D. github.com/abraxas/vbox-lsil… 2. 🔥 Heap overflow · Local (host) Hostile .sav HGCM cParms wraps uint32_t cbCmd. Restore smashes the VM-process heap. Live HGCM still caps at 32. Guest cannot plant this through a legitimate Save. github.com/abraxas/vbox-hgcm… 3. 📁 File write · Local (guest) Host-initiated Guest Control directory copy-from concatenates ... Hostile guest writes as the VBox UID outside the dest the host named. Needs GAs plus that copy. github.com/abraxas/vbox-gues… 4. 📦 File write · Local (host) OVF ovf:href dest is RTPathAbsExCxx with no STOP_AT_BASE. Import writes a suffixed disk image outside the new VM folder. UI:R. github.com/abraxas/vbox-ovf-… 5. 👀 File read · Local (guest) Imported vbox:Machine NAT TFTP prefix empty or /. libslirp leaves TFTP on. Guest RRQ reads host files as the VBox UID. github.com/abraxas/vbox-ovf-… 6. 📄 File read · Local (host) Sparse VMDK FLAT extent pszBasename used absolute or with ../. Import copies that host path into the disk. github.com/abraxas/vbox-vmdk… Write-up 🧪 abraxaslabs.tech/research/vi…

🔥💀🧪 Apache Superset 6.1.0 Remote 🌐 0day!💀🔥🧪 🔥 Class: Privilege leftover A user with a normal dashboard-editor account can hide their own database query inside a chart other people already trust. Next time anyone opens that chart, the query runs against the company data connection. They can read tables they were never given. They never needed the extra "run my own SQL" permission. For the people who live in Flask-AppBuilder 👇 Default Gamma has can_write Dashboard, so POST /api/v1/dashboard/import/ is in-matrix. Non-ZIP JSON has no metadata.yaml. Dispatcher tries v1, IncorrectVersionError, falls through to unversioned v0. decode_dashboards reconstitutes SqlaTable. import_dataset lookup by table_name+schema+database_id, then datasource.override(i_datasource) copies export_fields including sql. No raise_for_access. No Dataset write. POST /api/v1/chart/data compiles that SQL as TextAsFrom virtual FROM. has_mutation() is the only query-time gate. Object-level datasource_access, not per-table grants inside stored SQL. That is Gamma SQL without sql_lab. ☠️ Exploit: github.com/abraxas/superset-… Writeup: abraxaslabs.tech/research/su…

Quantum computers just cleared a major hurdle. Japan's RIKEN lab ran 5 silicon qubits simultaneously, and kept fidelity above 99.9%. For context: fault-tolerant quantum computing requires ~99.9% fidelity per operation to correct its own errors. Below that threshold, errors accumulate faster than they can be fixed. The problem: running multiple qubits through a shared microwave line causes phase errors called AC Stark shifts. RIKEN's fix: a calibration protocol using qubit pairs to cancel the shifts, no individual calibration needed for every combination. Single-qubit gates hit 99.999%. Five qubits at once: 99.9%. The key advantage: silicon qubits can be made with existing semiconductor chip factories. No exotic materials. No new fabs. RIKEN Center for Emergent Matter Science. Nature Physics, Oct 15 2026.

The Kid Who Hacked America This is the story of Kevin Mitnick (@kevinmitnick), one of the most notorious hackers in history. Portrayed by the media as a dangerous cybercriminal, pursued relentlessly by federal authorities, and feared for his extraordinary ability to infiltrate computer systems. This video draws heavily from Kevin Mitnick's autobiography, "Ghost in the Wires." RIP 🩵

OpenBSD 8.0 is out now! See what's new: openbsd.org/80.html

@opencrabs now serves DeepSeek v4.1 Flash 1017. Free. Unlimited. No card, no asterisk. Everyone else charges $20/mo for 5 days usage with some luck maybe 2 weeks. We did the math. The math said no. We did it anyway. Our accountant has left the building. 🥹🦀😂

New search bar is live, enjoy. app.etugen.io #etugen #threat

i rebuilt satoshi's 2009 bitcoin.exe byte for byte! afaik nobody has been able to perfectly recreate the executable published in 2009 from source, because we didn't know the exact build environment that was used. using opus 5.5, i reverse-engineered satoshi's build machine from the binary. it now outputs an exe with the exact same sha256 as the 2009 release!

CVE-2025-29009: Medical Prescription Attachment Plugin for WooCommerce Unauthenticated Arbitrary File Upload CVSS: 10 PoC: github.com/Nxploited/CVE-202…

🔥〽️ Plausible Analytics - Remote 0DAY 〽️🔥 Exploits: 📚 Class: privilege leftover (invite-token leak) 🌍 Remote (guest / team editor) 😈 Editor loads People HTML, reads a pending ownership-transfer nanoid, registers as the invitee, accepts. Site team_id moves. 🔗 github.com/abraxas/plausible… 📚 Class: IDOR (mass-assignment) 🌍 Remote (owner / admin / editor of a site they already control) 😈 PUT traffic-change-notification still casts site_id. Re-parent spike notify onto a victim. Oban mails attacker about victim traffic. 🔗 github.com/abraxas/plausible… Write-up: 📖 abraxaslabs.tech/research/pl…

Making the ASCII MMORPG of my dreams! Also, over the last few days, I've been working on the weapon materials and runes system. Ansenjeo. #mmorpg #indiegames #ascii

0day4u ! They banned CREATE ALIAS. I still imported a Java alias. 🔥 Stirling-PDF v3.2.0 leftovers. Current GA. Loopback labs. Two leftovers the named GHSAs did not close. 🔥 1. H2 CREATE OR REPLACE ALIAS • Class: H2 RUNSCRIPT leftover of GHSA-mrr8 • Reach: Remote (ROLE_ADMIN) • 💀 What an attacker can do: POST /api/v1/database/import-database with CREATE OR REPLACE ALIAS … FOR "java.lang.…" the denylist is supposed to stop. Lab: 200 importIntoDatabaseSuccessed. Backup download contains attacker SQL. • 🧪 github.com/abraxas/stirling-… • 📝 abraxaslabs.tech/research/st… 📡 2. Processing-folder storage IDOR • Class: IDOR • Reach: Remote (ROLE_USER) • 💀 What an attacker can do: point a processing folder at storage/<victimId>, list that owner's PDFs, overwrite them in place. Direct GET /api/v1/storage/files/{id} stays 403. Victim download comes back watermarked. • 🧪 github.com/abraxas/stirling-… • 📝 abraxaslabs.tech/research/st… 📖 Full series: abraxaslabs.tech/research/st…

Otty (beta) is on Windows. otty.sh/windows

🧨 🪼 4 JellyFin Remote Exploits! 0day 4 u!🪼 🧨 🚨 MOST CRITICAL: Suggestions omit-userId 🔐 Class: IDOR 🌐 Remote 💀 What an attacker can do: any logged-in non-admin omits userId on GET /Items/Suggestions and dumps hidden libraries (titles, IDs, filesystem Path). Those GUIDs play on unauth stream. 📦 github.com/abraxas/jellyfin-… 🖼️ gzip data:image/png leftover of GHSA-cf3c 🔐 Class: SSRF + file read + memex 🌐 Remote 💀 What an attacker can do: upload a profile SVG whose data:image/png payload is gzip of an inner SVG. The server still fetches http(s) / file:// while rasterizing. 📦 github.com/abraxas/jellyfin-… 📋 public playlist ItemIds leftover of GHSA-9x85 🔐 Class: IDOR 🌐 Remote 💀 What an attacker can do: read private Item GUIDs from GET /Playlists/{id} and stream them with no auth. 📦 github.com/abraxas/jellyfin-… 🎞️ .strm URL quotes leftover of GHSA-wwwm 🔐 Class: FFmpeg argument injection 🌐 Remote after a library .strm plant 💀 What an attacker can do: plant a .strm whose URL contains a quote, then unauth /Videos/{id}/stream splits ffmpeg argv. 📦 github.com/abraxas/jellyfin-… 📖 Series: abraxaslabs.tech/research/je…

Submitted a vuln to a major protocol through its self hosted bounty program. Two weeks later: no response. Checked the PRs and found it was fixed less than 24 hours after I submitted. Reached out for an update. Still nothing. Bug bounty will test your mental health fr

🚨 BREAKING: A Broadcom Wi-Fi bug lets anyone in range run code on routers without the password. Quentin Kaiser showed it on Proximus, Orange Belgium and VOO routers and estimates ~1.5M in Belgium are exposed, none patched. The bug dates to 2010. Broadcom won't assign a CVE.

I will be presenting "Bring Your Own Trusted Caller (BYOTC): A New Way to Exploit Vulnerable Windows Drivers" at Bsides Portland next Friday: bsidespdx.org/events/2026/sp…. Free free to say hi if you will be there!

🔥🪶 12 Remote Exploits !! Apache OpenMeetings 🪶 🔥 🚒 😎 FRESH 0DAY FRIDAY! 😎 🚒 🪪 1 • IDOR • Remote • Any LOGIN user overwrites another meeting and closes the public conference room • github.com/abraxas/openmeeti… 🪪 2 • IDOR • Remote • Dashboard chatTab-u{id} exports another user’s private DMs • github.com/abraxas/openmeeti… 🔥 3 • Privilege leftover • Remote • SOAP POST /user copies UserDTO.rights and plants ADMIN • github.com/abraxas/openmeeti… 💥 4 • DoS leftover • Remote • Unauth NetTest ping POST still reads the body to EOF • github.com/abraxas/openmeeti… 🪪 5 • IDOR • Remote • Whiteboard CREATE_OBJ plants any fileId and the room file URL serves those bytes • github.com/abraxas/openmeeti… 🎥 6 • IDOR • Remote • A Type.USER invitation hash is that user for recording MP4 ACL • github.com/abraxas/openmeeti… 🔓 7 • 2FA skip • Remote • SOAP/REST password login mints a SID with no TOTP when otp.enabled is on • github.com/abraxas/openmeeti… 🍪 8 • ATO • Remote • Remember-me cookie still holds username+password; replay skips the password • github.com/abraxas/openmeeti… 🔥 9 • Privilege leftover • Remote • A stale /install wizard Finish inserts a second ADMIN+SOAP • github.com/abraxas/openmeeti… 📂 10 • File write leftover • Remote • ADMIN_BACKUP import still writes Type.PATH without Path.of • github.com/abraxas/openmeeti… 🧬 11 • CWE-502 • Remote • Docs-on clustering TCP 5636 is unfiltered readObject • github.com/abraxas/openmeeti… 📡 12 • Unauth KMS • Remote • Official docker -p 8888:8888 publishes Kurento JSON-RPC with no auth • github.com/abraxas/openmeeti… Write-up: abraxaslabs.tech/research/op…

OpenCrabs v0.5.10 is out, and this one changes the first five minutes. The biggest thing: OpenCrabs now ships its own provider inside the binary. No account, no API key, no sign-up. It serves DeepSeek v4.1 Flash, a 200k-context multimodal model, so text and attached images both work on the very first run (#2047). You install the binary and you are already talking to the crab. Onboarding was rebuilt around that. The quick-start welcome interviews you, asks only for what is still missing, names the provider and model you are on, and offers next steps. The built-in provider is wired into both the quick-start and the advanced path, with vision and image generation on by default (#2047, #2048). Its context window is pinned to a fixed 200k and held on the host side so it cannot drift (#2066, #2067), and install tokens are redacted from logs and kept out of Debug output, because a credential that shows up in a log is a credential you already leaked. The provider chain got a lot harder to knock over. A 429 that declares a long wait now parks that provider and routes around it instead of poisoning the fallback, a lapsed cooldown no longer drops the primary out of the chain, a declared-wait cooldown no longer makes the fallback sticky, and every compatible provider shares one 120s stream idle default. Providers that need it now route over the Responses API (#2059). Attachments became first-class everywhere. Discord, Slack and Trello all save inbound files to the channel attachment store, Discord and Slack store DM turns in channel_messages, and the answer now posts before its suggestion buttons on Discord, Slack and WhatsApp, so you are never staring at buttons while the reply is still coming. Discord tool cards are now durable and paginated: they survive a restart, they live in SQLite, and they collapse repeats behind a Log view with a colored bar (#1880). Long agent runs stop looking like a wall. The TUI got the screen work: a full-screen responsive /usage (#2073) and a /mission-control that adapts to your terminal width (#2074). /models opens on the session's provider and model and switches directly when you pass a full provider/model argument. And the final answer stays visible when tools run after its text, which sounds small and is not. Under the hood: usage accounting grew a cache-read split with prices on the cards (#2027, #2062) and model costs come from the ledger instead of a cache-blind estimate. Voice serves stt_model and tts_model from any provider and splits TTS chunks on character boundaries. The plan tool locks a per-task spec check at start and runs it at completion (#1904, #2063). WhatsApp can create and post to a newsletter straight from the tool surface (#1827). 99 commits. 31 features. 43 fixes. 10,762 tests. Grab it at opencrabs.com Huge thanks to @iamloonix @declutterKE @moneyacademyKE @syafriadit1 @mysteriouspants and a few new contributors. You all are making Open Crabs better everyday.