NullSecX @NullSecurityX

See New Threats Before They Strike ~ Hacking Group https://t.co/4D4Ewi7xmL youtube.com/@NullSecurityX Joined May 2024

Tweets

300
Followers

5K
Following

91
Likes

329

NullSecX @NullSecurityX

8 hours ago

CVE-2025-57833: Deep Dive into Django SQL injection qs = Order.objects.annotate(total_amount=F("payment__amount")) nullsecurityx.codes/cve-2025-57833… #django #sqli #BugBounty

0 3 16 431 7

NullSecX @NullSecurityX

22 hours ago

🚨 We’re LIVE! Solving Google’s XSS Game step by step 🎯💻 Join me now and watch web security in action! 🔐 👉youtube.com/live/4ReJIQg_H… #XSSGame #CyberSecurity #WebSecurity #LiveCoding #BugBounty

0 0 9 903 2

🚨 New Blog Post: CVE-2025-57833 – Django ORM FilteredRelation Alias Vulnerability . Full PoC-like demos, SQL outputs & risk analysis included. 🔗 Read: nullsecurityx.codes/cve-2025-57833… #django #BugBounty #SQLi #CVE2025

1 6 11 1K 8

NullSecX @NullSecurityX

2 days ago

🚨 New Research Published 🚨 0-Click Account Takeover Using Punycode Emails for Access How Unicode confusables + IDN/Punycode mismatches break email-based authentication. 📝 Full technical write-up: nullsecurityx.codes/0-click-accoun… #Punycode #Exploit #CyberSecurity #BugBounty

1 6 49 2K 22

NullSecX @NullSecurityX

2 days ago

CVE-2025-8088: WinRAR ‘ExtractFile()’ path traversal bug allows evil .rar to drop payload in Startup → full RCE. Full Article: nullsecurityx.codes/cve-2025-8088-… DEMO: #BugBounty #rce #exploit #WinRAR

NullSecX @NullSecurityX

2 days ago

0 27 94 14K 45

5 42 206 10K 85

Download Gif

NullSecX @NullSecurityX

2 days ago

💀 CVE-2025-8088: WinRAR ‘ExtractFile()’ path traversal bug allows evil .rar to drop payload in Startup → full RCE. PoC: evil.rar → ../../../../Start Menu/Programs/Startup/evil.bat Fix & details: nullsecurityx.codes/cve-2025-8088-… #Infosec #WinRAR #CVE2025 #BugBounty

0 27 94 14K 45

NullSecX @NullSecurityX

3 days ago

🚨 CVE-2025-8088 – WinRAR Directory Traversal RCE Malicious .rar archives can drop files into Startup folders → Remote Code Execution. Critical vulnerability. Read the full breakdown 👇 nullsecurityx.codes/cve-2025-8088-… #CVE20258088 #WinRAR #BugBounty #CyberSecurity

9 4 29 1K 12

NullSecX @NullSecurityX

3 days ago

CVE-2025-49113 – Roundcube Post-Auth RCE POST /upload.php _from=O:8:"Exploit":1:{s:4:"code";s:13:"system('id');";} Details: nullsecurityx.codes/cve-2025-49113… #BugBounty #CyberSecurity #roundcube

0 43 186 10K 88

NullSecX @NullSecurityX

4 days ago

🚨 CVE-2025-49113 – Roundcube Post-Auth RCE A deep technical dive into how the _from parameter in upload.php enables PHP object deserialization leading to remote code execution. Read the full write-up here 👇 nullsecurityx.codes/cve-2025-49113… #PHP #RCE #BugBounty #CyberSecurity

1 1 16 897 7

NullSecX @NullSecurityX

5 days ago

🚨 Critical WordPress Vulnerability: Login Bypass with JWT Exploit! Learn how attackers could log in as any user using a forged JWT token — now patched ✅ 🔗 Watch & learn (educational only): youtube.com/watch?v=8sgGGD… #WordPress #JWT #Exploit #CyberSecurity #BugBounty

10 43 207 17K 138

NullSecX @NullSecurityX

5 days ago

🚨 CVE-2025-29927 – Next.js Middleware Bypass A deep technical dive into how x-middleware-subrequest can be exploited to bypass auth checks in Next.js apps. Read the full write-up here 👇 nullsecurityx.codes/cve-2025-29927… #NextJS #CVE2025 #WebSecurity #Pentesting #Hacking #BugBounty

2 20 110 5K 57

NullSecX @NullSecurityX

6 days ago

🎉 We just launched NullSecurityX! Your new hub for hacking & cybersecurity insights. 📝 First post: "UUID Sandwich Exploitation" – explore UUID vulnerabilities and rare collisions. Read more: nullsecurityx.codes/uuid-sandwich-… #CyberSecurity #Hacking #UUID #BugBounty

1 9 35 2K 24

NullSecX @NullSecurityX

6 days ago

Second-Order SQL Injection 1️⃣ Attacker injects payload into a field that is stored in DB (e.g., username). 2️⃣ Later, another query uses this stored value unsafely. 3️⃣ Payload executes → data leak, auth bypass, or privilege escalation. #SQLi #BugBounty #WebSecurity

2 43 263 9K 116

Download Image

NullSecX @NullSecurityX

a week ago

🎉 Thank you all for your support @OdyseeTeam 🙏 Here I am, and here’s my channel link 👇 🔗 odysee.com/@NullSecurityX… Special thanks to everyone who subscribed as soon as the channel launched 😄 #CyberSecurity #BugBounty #NullSecurityX

odysee @OdyseeTeam

a week ago

7 15 242 4K 4

2 2 14 1K 2

NullSecX @NullSecurityX

a week ago

YouTube shut down my ethical hacking & cybersecurity channel with 10,000 subscribers… 😅 I’ve connected my videos to Odysee, synchronization is in progress. Do you think I’ll face the same surprise here? 🤔 @OdyseeTeam

34 63 715 32K 235

Download Image

NullSecX @NullSecurityX

a week ago

One Message = Full Exploit! 🚨 New video is live: ⚡ The Hidden Danger in Chat Apps: Advanced XSS Exploitation (Live Bug Bounty | BMW PoC) 🔗 youtu.be/CejJWjyokFA Learn how a simple chat message can lead to XSS → Account Takeover → Full Compromise 🔥 #BugBounty #XSS

3 3 28 3K 19

NullSecX @NullSecurityX

a week ago

Stored XSS via File Metadata 1️⃣ User uploads image with malicious payload in EXIF metadata (e.g., Title or Comment). 2️⃣ Application displays metadata without sanitization. 3️⃣ Payload executes in victim’s browser. #XSS #BugBounty #AppSec

1 23 183 8K 75

Download Image

NullSecX @NullSecurityX

a week ago

DOM-Based XSS via URL Fragment 1️⃣ App reads location.hash or window.location without sanitization. 2️⃣ Attacker crafts URL: https://x(.)com/page#<script>alert(1)</script> 3️⃣ Victim clicks → script executes in browser context. Impact: Session hijack, keylogging.. #BugBounty