- V12RT @TheHackersNews: 🚨 A malicious API could drain an AI agent's token balance via an x402 SDK flaw. V12 rated 3 bugs critical: — No default spending cap — Solana approvals passed as payments — Logins signed for other sites All patched. No advisory, so npm audit & PyPI miss them. Read more ↓0220186
- V12RT @RenwaX23: Hunting with V12 VS hunting manuallyV12 @v12secV12 found 25 vulnerabilities in the x402 protocol. Critical findings included: - Requests approved without any payment - Maliciously high requests being paid by default - Session takeover from relayed login signatures Here's how. 🧵030169
- Posts @v12secFor more details on this bug, and a breakdown of the other two critical vulnerabilities we reported, check out our blog post below:103727
- V12RT @HacktronAI: @sudhanshur705 this was a bypass of the fix to v12 bug below, poc is built on top of their workV12 @v12secSaturday was national boyfriend day so we forgot to post, but here's a Libreoffice RCE030162
- Posts @v12secOne message to the public P2P port could crash a Zebra node. No auth required. A v6 transaction with an old branch ID like NU6.1 would pass parsing but fail re-serialization, the result error crashed the node before handshake completed. Patched in 6.4.2:1151.1K
- V12RT @TheHackersNews: ‼️ Researchers have published a working exploit for an AnyDesk Linux flaw that can execute commands as root before connection approval. Called AnyPwn, the exploit targets version 8.0.2 via direct TCP port 7070. The flaw was fixed in 8.0.3. Details →0610151
- Show more posts
