V12
@v12sec

dangerously powerful agentic security

v12.sh
Joined May 2026
75 Photos and videos
Pinned Tweet
V12
@v12sec
Jul 30
Article

How to raise a $10M Seed Round

Earlier this month, we won a $2.5M bug bounty–the largest bounty ever received by an AI agent. This was a bug in a major blockchain, and it put >$100M of funds at risk. We found the bug fully

85
148
1,022
545,187
poc: github.com/v12-security/pocs…
1
6
1,912
Found by @rt1rz using V12. V12 is our autonomous AI hacker. Find bugs like this in your code: v12.sh/

v12.sh

V12 is your security agent for mission critical code.

v12.sh
6
1,586
complete guest-to-host escape in ppsspp emulator. more emulator escapes (+ pocs) dropping next week 🎮 🕹️
11
23
413
17,425
Replying to @sudhanshur705
this was a bypass of the fix to v12 bug below, poc is built on top of their work
V12
@v12sec
Oct 5
Saturday was national boyfriend day so we forgot to post, but here's a Libreoffice RCE
3
7
791
V12 retweeted
Renwa@RenwaX23
Oct 13
Zebra is the most used ZCash node, one request and the validator is down
V12
@v12sec
Oct 13
felt cute, might crash your @zcash node later.
2
14
1,961
felt cute, might crash your @zcash node later.
3
1
32
3,671
One message to the public P2P port could crash a Zebra node. No auth required. A v6 transaction with an old branch ID like NU6.1 would pass parsing but fail re-serialization, the result error crashed the node before handshake completed. Patched in 6.4.2: github.com/ZcashFoundation/z…

Unauthenticated peer can crash zebrad by sending a version 6 transaction whose consensus branch...

## Am I affected You are affected if all of the following hold: - You run zebrad v6.4.0 or v6.4.1. Earlier releases reject the triggering transaction at parse time and are not affected. - Yo...

github.com
1
1
5
857
Found by @RenwaX23 using V12. V12 is our autonomous AI hacker. Find bugs like this in your code: v12.sh/

v12.sh

V12 is your security agent for mission critical code.

v12.sh
4
410
‼️ Researchers have published a working exploit for an AnyDesk Linux flaw that can execute commands as root before connection approval. Called AnyPwn, the exploit targets version 8.0.2 via direct TCP port 7070. The flaw was fixed in 8.0.3. Details → thehackernews.com/2026/10/re…
9
62
261
41,004
V12 retweeted
blasty
@bl4sty
Oct 9
lmao
V12
@v12sec
Oct 8
Replying to @v12sec
It appears the vendor deleted the version we targeted in our poc while leaving other vulnerable versions available for download. Porting the 7 ROP gadgets over to 8.0.1 is left as an exercise to the reader or their agent.
6
48
6,110
Here's our PoC for AnyDesk RCE: github.com/v12-security/pocs…
V12
@v12sec
Jun 22
AnyPwn: AnyDesk preauth 0click RCE (heap buffer overflow) we will release PoC post disclosure and patch
3
73
461
25,148
It appears the vendor deleted the version we targeted in our poc while leaving other vulnerable versions available for download. Porting the 7 ROP gadgets over to 8.0.1 is left as an exercise to the reader or their agent.
3
12
101
18,816
Saturday was national boyfriend day so we forgot to post, but here's a Libreoffice RCE
7
33
336
17,031
POC: github.com/v12-security/pocs…
1
2
12
1,866
Found by @rdjgr using V12. V12 is our autonomous AI hacker. Find bugs like this in your code: v12.sh/

v12.sh

V12 is your security agent for mission critical code.

v12.sh
4
1,163
We found a critical auth bypass in @better_auth, one of the most popular auth libraries in 2026 with over 9.5 million weekly downloads. CVSS 9.1. Fixed in Better Auth 1.7.7 PoC below 👇
7
47
357
18,851
more replies
Check out our blog for the full write-up, including PoC: v12.sh/blog/better-auth

V12 Found a Critical Bug in Better Auth

Better Auth kept OAuth state and magic-link tokens in the same table, so an attacker could redeem their own OAuth state as a magic-link token and sign in as any user. Fixed in Better Auth 1.7.7.

v12.sh
1
1
7
1,339
Found by @rdjgr using V12. V12 is our autonomous AI hacker. Find bugs like this in your code: v12.sh

v12.sh

V12 is your security agent for mission critical code.

v12.sh
6
1,071
Load more