Working on fast, accurate and auditable CVE enrichment at Volerion.
The Netherlands
Joined February 2012
- Tweets827
- Following323
- Followers2.5K
- Likes9.1K
Pinned Tweet
The $15,000 secret of viewing posts from private Instagram accounts.
003random.com/posts/meta-bou…
#bugbounty #bugbountytips #writeup
003random retweeted
We did research on the new NVD prioritization strategy, which led to some interesting insights! blog.volerion.com/posts/two-…
Super excited about this launch! @Karel_Origin and I have been working on this for years. We also presented at #VulnCon this year about our underlying attack-graph method to derive CVSS.
If your team is using the NVD API, then it's worth giving our drop-in replacement a try.
Still using the NVD API?
Coverage gaps, inconsistent CVSS scoring, missing CPEs, and enrichment delays can slow down triage and automation.
We just released our NVD-compatible API, designed as a drop-in replacement. Swap the base URL and try it free.
app.volerion.com/solutions/n…
003random retweeted
Exposing Instagram posts from private users. A writeup by @rub003
003random.com/posts/meta-bou…
This bug was buried so deep. You had to use a mobile user agent to reach the code path. Then block the victim account. And then request one of their posts via the oEmbed endpoint. This would trigger a try catch condition where super user privileges were used to fetch the post.
1️⃣ How I Exposed Instagram's Private Posts by Blocking Users
@rub003 won 3rd place at BountyCon 2022 by chaining Instagram oEmbed endpoint quirks with mobile user agent detection to access private posts (earning him $14,500 in bounties).
003random.com/posts/meta-bou…
003random retweeted
@VolerionSec's algorithm looks better, 0.6 impact seems more correct.
volerion.com/vulnerabilities…
003random retweeted
🦾💼 #DEFCON33 may feel like a “hacker holiday,” but the CVE conveyor belt never stops.
Out of the 249 newly published CVEs, the highest EPSS in the set is 0.09475 — CVE-2025-47188 — with a CRITICAL CVSS score.
Volerion gives it a contextual risk score of 3.6/10, factoring in real-world usage and internet exposure of the affected products.
The ecosystem doesn’t take time off — and neither does Volerion’s AI-driven analysis, turning raw CVEs into actionable, prioritized risk.
#DEFCON #CVE
CVE-2025-54576 is quite cool. It's so easy to make your web app vulnerable to this. You would expect `skip_auth_routes` to match routes only, but meanwhile it was comparing against `GetRequestURI`. Fixed in v7.11.0 by comparing against `GetRequestPath`.
👉blog.volerion.com/posts/CVE-…
The largest description award goes to nvd.nist.gov/vuln/detail/CVE…, but nvd.nist.gov/vuln/detail/CVE… is quite funny too. Who actually reads these?
.@VolerionSec writes consistent length summaries. For example, the one from above: volerion.com/vulnerabilities…
"in various models" is so much better than listing all 50 vulnerable versions in the description. We have a products tab for the actual affected products and versions.
Can the person farming CVEs in sample software projects just stop please. This year already, 448 CVEs were reported on phpgurukul, which is just a sample project not meant to deploy😭. Why vuldb is allowing this, idk... The CVE ecosystem is getting ruined by sh*t submissions.
Personal opinion. However, at @volerionsec
we're thinking the exact same 🤡. Most CVE submissions are just spam nowadays. Made possible by a couple specific CNAs.
getJS will now ignore certificate errors, so that your bug bounty automation will less likely error on the hosts that are the most interesting (e.g. self-signed certificates).
github.com/003random/getJS/
003random retweeted
Pre-orders have started shipping and getting to readers around the world!
Whether you’re new to vulnerability research or sharpening an existing skill set, this book will show you how to think (and work) like a bug hunter.
This book will teach you how to:
✅ Identify promising targets across codebases, protocols, and file formats.
✅ Trace code paths with taint analysis and map attack surfaces with precision.
✅ Reverse engineer binaries using Ghidra, Frida, and angr.
✅ Apply coverage-guided fuzzing, symbolic execution, and variant analysis.
✅ Build and validate proof-of-concept exploits to demonstrate real-world impact.
More than a toolkit, this is a window into how top vulnerability researchers approach the work. You’ll gain not just techniques but also the mindset to go deeper, ask better questions, and find what others miss.
Use promo code ZERODAYDEAL at checkout to get 30% off!
Buy now:
📘 No Starch: nostarch.com/zero-day
📘 Amazon: amazon.com/Day-Zero/dp/17185…
#FromTheDayZeroToZeroDay #Cybersecurity #BugBounty #Hacking #VulnerabilityResearch #InfoSec #BookLaunch
CVSS can be confusing. Therefore, I've created a CVSS calculator with lots of information (click the ? icons) and even a guided walkthrough. Let me know what you think!
volerion.com/cvss/3.1
#bugbountytips #bugbountytip #infosec
CVSS 4.0 version as well 👀 volerion.com/cvss/4.0
Go boost your bug bounty report severities!