Exploit brokers pay $500k for WordPress RCEs. I found one with GPT5.6 and $25

漏洞经纪人开出 50 万美元悬赏 WordPress 远程代码执行漏洞，我用 GPT-5.6 和 25 美元就找到了一个

---

Research: Smashing the ServiceNow Sandbox – Pre-Authentication RCE

研究：击碎 ServiceNow 沙箱——预认证远程代码执行 (RCE)

Find out more 了解更多

---

Research: CargoWise WebTracker – The Keys Were in the Cargo

研究：CargoWise WebTracker——钥匙就在货物里

Find out more 了解更多

---

Research: Two Bypasses for Chrome’s Sanitizer API

研究：针对 Chrome Sanitizer API 的两种绕过方法

Find out more 了解更多

---

Research: Keys to the Kingdom: Anonymous SQL Injection in Drupal Core (CVE-2026-9082)

研究：通往王国的钥匙——Drupal 核心中的匿名 SQL 注入 (CVE-2026-9082)

Find out more 了解更多

---

Research: New Age of Collisions: Reading Arbitrary Files Pre-Auth as root in cPanel (CVE-2026-29205)

研究：碰撞的新时代——在 cPanel 中以 root 权限预认证读取任意文件 (CVE-2026-29205)

Find out more 了解更多

---

Research: Ghosts of Encryption Past – How we Read All Your Emails in Salesforce Marketing Cloud

研究：加密往事的幽灵——我们是如何读取你在 Salesforce Marketing Cloud 中的所有邮件的

Find out more 了解更多