@v12sec

dangerously powerful agentic security

v12.sh
Joined May 2026
  • Tweets258
  • Following14
  • Followers9.9K
75Media
Pinned Tweet
V12
@v12secJul 30

How to raise a $10M Seed Round

Article · @v12sec
85
148
99
1,022
545,284
Found by @rt1rz using V12. V12 is our autonomous AI hacker. Find bugs like this in your code: v12.sh/

v12.sh

V12 is your security agent for mission critical code.

v12.sh
6
1,587
poc: github.com/v12-security/pocs…
1
6
1,926
complete guest-to-host escape in ppsspp emulator. more emulator escapes (+ pocs) dropping next week 🎮 🕹️
11
23
1
414
17,461
Replying to @HacktronAI @sudhanshur705
this was a bypass of the fix to v12 bug below, poc is built on top of their work
V12
@v12secOct 5
Saturday was national boyfriend day so we forgot to post, but here's a Libreoffice RCE
3
7
794
V12 retweeted
Renwa@RenwaX23Oct 13
Zebra is the most used ZCash node, one request and the validator is down
V12
@v12secOct 13
felt cute, might crash your @zcash node later.
2
14
1,963
felt cute, might crash your @zcash node later.
3
1
1
33
3,684
One message to the public P2P port could crash a Zebra node. No auth required. A v6 transaction with an old branch ID like NU6.1 would pass parsing but fail re-serialization, the result error crashed the node before handshake completed. Patched in 6.4.2: github.com/ZcashFoundation/z…

Unauthenticated peer can crash zebrad by sending a version 6 transaction whose consensus branch...

## Am I affected You are affected if all of the following hold: - You run zebrad v6.4.0 or v6.4.1. Earlier releases reject the triggering transaction at parse time and are not affected. - Yo...

github.com
1
1
5
865
Found by @RenwaX23 using V12. V12 is our autonomous AI hacker. Find bugs like this in your code: v12.sh/

v12.sh

V12 is your security agent for mission critical code.

v12.sh
4
411
‼️ Researchers have published a working exploit for an AnyDesk Linux flaw that can execute commands as root before connection approval. Called AnyPwn, the exploit targets version 8.0.2 via direct TCP port 7070. The flaw was fixed in 8.0.3. Details → thehackernews.com/2026/10/re…
9
62
6
261
41,015
V12 retweeted
blasty
@bl4styOct 9
lmao
V12
@v12secOct 8
Replying to @v12sec
It appears the vendor deleted the version we targeted in our poc while leaving other vulnerable versions available for download. Porting the 7 ROP gadgets over to 8.0.1 is left as an exercise to the reader or their agent.
6
1
48
6,112
Here's our PoC for AnyDesk RCE: github.com/v12-security/pocs…
V12
@v12secJun 22
AnyPwn: AnyDesk preauth 0click RCE (heap buffer overflow) we will release PoC post disclosure and patch
3
73
4
461
25,165
It appears the vendor deleted the version we targeted in our poc while leaving other vulnerable versions available for download. Porting the 7 ROP gadgets over to 8.0.1 is left as an exercise to the reader or their agent.
3
12
3
101
18,826
Saturday was national boyfriend day so we forgot to post, but here's a Libreoffice RCE
7
33
5
336
17,070
POC: github.com/v12-security/pocs…
1
2
12
1,873
Found by @rdjgr using V12. V12 is our autonomous AI hacker. Find bugs like this in your code: v12.sh/

v12.sh

V12 is your security agent for mission critical code.

v12.sh
4
1,163
We found a critical auth bypass in @better_auth, one of the most popular auth libraries in 2026 with over 9.5 million weekly downloads. CVSS 9.1. Fixed in Better Auth 1.7.7 PoC below 👇
7
47
2
357
18,859
more replies
Check out our blog for the full write-up, including PoC: v12.sh/blog/better-auth

V12 Found a Critical Bug in Better Auth

Better Auth kept OAuth state and magic-link tokens in the same table, so an attacker could redeem their own OAuth state as a magic-link token and sign in as any user. Fixed in Better Auth 1.7.7.

v12.sh
1
1
7
1,339
Found by @rdjgr using V12. V12 is our autonomous AI hacker. Find bugs like this in your code: v12.sh

v12.sh

V12 is your security agent for mission critical code.

v12.sh
6
1,071
Load more