MrBruh

5 ms·

1.
Unauthenticated RCE in Motorola's MR2600 Router(mrbruh.com)
84 points by MrBruh 2mo ago|28 comments
2.
How a throwback to 2006 took down Telstra's national phone network(theguardian.com)
2 points by MrBruh 2mo ago|0 comments
3.
MSI Center – How to gain SYSTEM privileges in seconds(mrbruh.com)
146 points by MrBruh 3mo ago|65 comments
4.
The RCE that AMD wouldn't fix(mrbruh.com)
322 points by MrBruh 3mo ago|123 comments
5.
MSI's full mailbox is leaving critical vulnerabilities unpatched(mrbruh.com)
6 points by MrBruh 4mo ago|0 comments
6.
NZ Government taking 10 initiatives to safeguard undersea internet(rnz.co.nz)
3 points by MrBruh 4mo ago|0 comments
7.
Remote Code Execution Vulnerability in Fooocus(mrbruh.com)
2 points by MrBruh 4mo ago|0 comments
8.
You gave me a u32. I gave you root. (io_uring ZCRX freelist LPE)(ze3tar.github.io)
215 points by MrBruh 4mo ago|144 comments
9.
Finding a RCE in my old TP-Link router(mrbruh.com)
4 points by MrBruh 5mo ago|1 comments
10.
by MrBruh 6mo ago
You can directly call your representatives by looking them up here: https://www.europarl.europa.eu/portal/en
11.
The EU still wants to scan your private messages and photos(fightchatcontrol.eu)
1450 points by MrBruh 6mo ago|393 comments
12.
The RCE that AMD won't fix(mrbruh.com)
373 points by MrBruh 7mo ago|173 comments
13.
1.4 Billion user records exposed by insecure Firebase instances in mobile apps(mrbruh.com)
4 points by MrBruh 8mo ago|1 comments
14.
by MrBruh 8mo ago
Out of the top 1.5 Million Android apps on the Play Store, 11,126 were insecure and exposed users’ PII. In total these 11 thousand apps exposed 1.43 Billion user records. This includes 5 apps with 100 Million downloads and 10 apps with 50 M
15.
1.4 Billion user records exposed by insecure Firebase instances in Android apps(mrbruh.com)
7 points by MrBruh 8mo ago|1 comments
16.
ASUSpicious Flaw – Users' Information Exposed Since 2022(mrbruh.com)
73 points by MrBruh 1y ago|11 comments
17.
by MrBruh 1y ago
On the black market such an exploit would be worth 200-500k USD
18.
by MrBruh 1y ago
Nice idea, just checked it now and can confirm there was nothing suspicious in the wildcard records.
19.
by MrBruh 1y ago
ignore the post thx <3
20.
by MrBruh 1y ago
Feedback on my blog posts are always appreciated! :)
21.
One-Click RCE in Asus's Preinstalled Driver Software(mrbruh.com)
523 points by MrBruh 1y ago|242 comments
22.
How I pwned a major New Zealand service provider(mrbruh.com)
55 points by MrBruh 1y ago|46 comments
23.
by MrBruh 3y ago
When manually reviewing a lot of these sites it was not identifying PII that were in non-english since the automated scanner checks the variable name for known data types (e.g phone) but that would only work for English sites.
24.
by MrBruh 3y ago
Correct, that's why we couldn't post a list of affected sites or malicious actors would immediately abuse it :/
25.
by MrBruh 3y ago
Bro woke up on the wrong side of the bed
26.
by MrBruh 3y ago
Can't blame a company for trying to make their AI charismatic :D
27.
by MrBruh 3y ago
Glad to hear you enjoyed it, it was a messenger called "Line"
28.
by MrBruh 3y ago
That's because I wrote both of those articles, and this is the sequel to that blog post. :P
29.
by MrBruh 3y ago
No worries, support like this really helps to make it feel worthwhile. :)
30.
900 Sites, 125M accounts, 1 Vulnerability(env.fail)
573 points by MrBruh 3y ago|136 comments

More ›