Edra retweeted
Our research team discovered two vulnerabilities in Discourse: a pre-authentication cache poisoning to sitewide XSS (CVE-2026-55674), and an arbitrary file read (RCE) chaining a JPEG race condition with ImageMagick and Ghostscript (CVE-2026-55420). You can read more here:
Edra retweeted
Seems that wp2shell PoCs are now floating around the internet, so we've published our blog post including our research methodology for finding the bug as well as a deep dive into the chain itself - slcyber.io/research-center/e…
Edra retweeted
I reported a pre auth RCE in Wordpress - it can be exploited with no preconditions, patch your instances!
slcyber.io/research-center/w…
Edra retweeted
I left my pentest job to fix what every pentester complains about: reporting and team management.
18 months building, 6 months tested on real engagements.
Today it goes live.
Vulnotes is officially available 🚀
It's official: Vulnotes is live 🎉
The platform for your entire pentest engagement
✍️ Visual report editor
🔁 Built-in review workflow
📤 Export to docx, pdf, csv..
🤖 AI: screenshots → findings, translate, rewrite
🔌 API + MCP
👉 vulnotes.com
Edra retweeted
We’ve received notice that the Department of Commerce has lifted export controls on Claude Fable 5 and Mythos 5.
We'll begin restoring access tomorrow, and will share an update soon.
We’re grateful to our users for their patience, and to everyone who worked with us on redeploying the models.
Edra retweeted
One Month Letting Claude Code Hunt Bugs For Me - @0xEdra
edrabb.fr/posts/one-month-le…
Just got a reward for a high vulnerability submitted on @yeswehack -- Improper Neutralization of Input Used for LLM Prompting (CWE-1427). yeswehack.com/hunters/edra #YesWeRHackers
Edra retweeted
The Internet is falling down, falling down, falling down
Welcome back to another disaster - this time, an Auth Bypass in cPanel/WHM, tracked as CVE-2026-41940
Enjoy with us..
labs.watchtowr.com/the-inter…
Edra retweeted
(っ◔◡◔)っ We are joining @MistralAI ! c(◔◡◔c)
I’m thrilled to announce that we are merging forces with @MistralAI
I am officially starting a new chapter as Cyber Ops Lead, and the best part is I’m not coming alone! I’m bringing part of the AllVei team with me to build the future of AI for Cyber :D
After talking with @GuillaumeLample and the founding team, it quickly became clear that we share the exact same obsession and mindset.
With Mistral, we’re scaling up to a whole new level: the innovative spirit of the French AI champion, incredible resources, and absolutely brilliant people to work with every day.
The fit was just too obvious 😄
A huge thanks to Guillaume and the entire Mistral team for their trust.
I also want to thank everyone who believed in AllVei over the last few months. Thank you to the incredible tech ecosystem in Brittany (Village By CA Finistère, @regionbretagne , @FTBrestPlus , @Bpifrance ), to the VCs, and to our amazing design partners.
Your support meant the world ❤️
Can’t wait to show you what we’re building. Let’s get to work 🔥
𝑯𝑨𝑪𝑲 𝑻𝑯𝑬 𝑷𝑳𝑨𝑵𝑬𝑻 :𝑫
Edra retweeted
I've been doing bug bounty full-time for 4 years.
I just published everything I know. Methodology, AI workflow, templates, prompts, report structure, and the mental side nobody talks about.
It's mostly to prove to you that there is no magic tricks or payload
aituglo.com/guide/bug-bounty
Edra retweeted
Q1 recap time - and our hunters checked off several Bucket List items 😎
Huge congrats to @0xEdra, hannibal813 and ap4sh for a fruitful first quarter 🔥
Swag packs are on the way!
🚨 To all our community: 6 items still unsolved… who’s next to tick one off?
Edra retweeted
I'm happy to release the first version of my DOMLogger++ plugin for @CaidoIO! 🔎
It improves the browser extension in several ways:
• Persistent, per-project storage
• Temporary session recording
• AI support
• Stack trace reconstitution
• ...
👉 github.com/kevin-mizu/domlog…
Recap of my last month bug hunting with my bro Claude and finished Top 2 for Q1 2026 on yeswehack 🏆
edrabb.fr/posts/one-month-le…
Introducing Claude Code Security, now in limited research preview.
It scans codebases for vulnerabilities and suggests targeted software patches for human review, allowing teams to find and fix issues that traditional tools often miss.
Learn more: anthropic.com/news/claude-co…


























