41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a0bb6c-6abf-7293-9bc9-5c99cf39bb36

Recipes

0day.click · published 12 May 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at 0day.click Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 15
Words captured: 690

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

Claude Code RCE: Exploiting Deeplink Handlers via Settings Injection Read at the source ↗

RCE via LDAP truncation on hg.mozilla.org Read at the source ↗

https://hackerone.com/mozilla_critical_services

hackerone.com

https://social.security.plumbing/@freddy

social.security.plumbing

https://www.mozilla.org/en-US/about/governance/policies/commit/access-policy/

mozilla.org

https://hg.mozilla.org/hgcustom/version-control-tools/

hg.mozilla.org

Discourse SNS webhook RCE Read at the source ↗

https://github.com/discourse/discourse/blob/1472e47aae5bfdfb6fd9abfe89beb186c751f514/app/jobs/regular/confirm_sns_subscription.rb

github.com

Discourse Read at the source ↗

Discourse themes OS Command Injection Read at the source ↗

https://github.com/discourse/discourse/commit/94301854938a0b36dd64666fb7a7c8406544a781

github.com

https://meta.discourse.org/t/introducing-discourse-compatibility-pinned-plugin-theme-versions-for-older-discourse-versions/156971

meta.discourse.org

Mosaic "0day" Read at the source ↗

https://warcon.pl

warcon.pl

https://twitter.com/teh_gerg

twitter.com