congratulations whatever that is

so close

Your @Gifting stats — forward this anywhere.

No

Send me approximately nine thousand one hundred and ninety two dollars and six seven cents

its big boss absurd here

speaking to the nation

The Big Three

small IOS drop:

RawCamera.bundle allocates the DNG image plane without zeroing it when there is a codec failure, this means a crafted DNG file can leave old data from the heap, inside the buffer. even though the decoder says it was successful the renderer treats this data as an image. then the photos app saves this data as a derivative!

IOS 27.0.1

im going to be reverse engineering abit of ios 27.2 because they updated to patch some vulnerabilities amongst other things

need to download the firmware and use my burner iphone to PoC it on :)

just a heads up

i dont think (given the obvious usage a majority of people around the communities i seem to be in would engage in) i will drop any IOS 0 click RCEs, i think they’d be used to steal a large large amount of crypto but ill drop some cool pieces every now and then

v12sec posted a PoC vid of telegram widgets being capable of RCE which is abit alarming

22 hours after pavel tweeted the feature.

going to check it out when im home

Me and @outkeeps found this months ago

was this around months ago

Ye, we were also recently talking abt another RCE via webapp

oh

my sources tell me qwen 4 weights will not be dropping