nailed another defense contract interview today with a govt les gooooo
🔥8❤6
Gifting
Your @Gifting stats — forward this anywhere.
Send me approximately nine thousand one hundred and ninety two dollars and six seven cents
❤2
small IOS drop:
RawCamera.bundle allocates the DNG image plane without zeroing it when there is a codec failure, this means a crafted DNG file can leave old data from the heap, inside the buffer. even though the decoder says it was successful the renderer treats this data as an image. then the photos app saves this data as a derivative!
IOS 27.0.1
RawCamera.bundle allocates the DNG image plane without zeroing it when there is a codec failure, this means a crafted DNG file can leave old data from the heap, inside the buffer. even though the decoder says it was successful the renderer treats this data as an image. then the photos app saves this data as a derivative!
IOS 27.0.1
🔥6❤1
im going to be reverse engineering abit of ios 27.2 because they updated to patch some vulnerabilities amongst other things
❤7
need to download the firmware and use my burner iphone to PoC it on :)
❤4
just a heads up
i dont think (given the obvious usage a majority of people around the communities i seem to be in would engage in) i will drop any IOS 0 click RCEs, i think they’d be used to steal a large large amount of crypto but ill drop some cool pieces every now and then
i dont think (given the obvious usage a majority of people around the communities i seem to be in would engage in) i will drop any IOS 0 click RCEs, i think they’d be used to steal a large large amount of crypto but ill drop some cool pieces every now and then
❤6
v12sec posted a PoC vid of telegram widgets being capable of RCE which is abit alarming
❤3