Devyn @devyn

Annapolis, MD Joined July 2008

Tweets

399
Followers

293
Following

572
Likes

3K

Charlie Eriksen @CharlieEriksen

2 days ago

Switching from Claude Max to OpenAI Pro has been one of the best decisions I've made lately. No getting flagged for ~cyber~ despite being CVP-approved. The ChatGPT Work app is miles ahead of Claude. OpenAI is absolutely cooking. 👏

11 4 75 3K 7

View Details

Devyn @devyn

5 days ago

First CVE. CVE-2026-85610 OpenPanel before 2.3.0 CWE-94 in chart formula evaluation Auth’d project reader could get RCE in the API process and break org isolation. Fixed in 2.3.0. Doesn’t hit like it would have before every model could spit out a finding. Still cool. First time seeing my handle on a CVE record. github.com/Openpanel-dev/… cve.org/CVERecord?id=C…

1 0 2 103 0

View Details

Devyn @devyn

3 weeks ago

@thatguybg @0xPuff @NousResearch @Claude this was very unclassy for the founder of a b̶i̶l̶l̶i̶o̶n̶-̶d̶o̶l̶l̶a̶r̶ startup to say to someone who just gave free, accurate feedback on your site’s font loading.

1 0 18 560 0

View Details

Devyn @devyn

4 weeks ago

After conversion finishes: curl -b cookies.txt http://127.0.0.1:8083/stats Renders the SSTI → command execution. Fix in 0.6.27: strict source/destination format allowlists that reject the traversal before conversion starts. Upgrade recommended.

0 0 0 29 0

View Details

Devyn @devyn

4 weeks ago

Upload the EPUB as the non-admin user, note the book ID, grab CSRF from the edit page, then: (Adjust traversal depth to hit the writable cps/templates dir.)

1 0 0 45 0

View Details

Devyn @devyn

4 weeks ago

The Calibre-Web 0.6.27 fixed an authenticated arbitrary-file-overwrite → RCE chain. In ≤0.6.26 a non-admin contributor with Upload + Edit Metadata could control ebook-convert’s output path and overwrite a writable Jinja template. Full details + PoC below.

1 2 5 428 2

View Details

Devyn @devyn

4 weeks ago

@adnanthekhan Should have started with fable for that sweet, sweet rejection lol

0 0 0 48 0

View Details

Devyn @devyn

a month ago

@thsottiaux @henry0284928382

0 0 35 5K 0

View Details

Devyn @devyn

a month ago

@h0mbre_ 🤣 such a joke dude. So lame

0 0 1 78 0

View Details

Devyn @devyn

a month ago

Just stumbled on this…👀 Three live ClamAV 1.5.x memory corruption bugs (double free, ZIP desync that reaches RCE, STATS pointer leak). Full labs, PoCs, and patches already public. “The vulnerabilities were discovered entirely through AI. Author takes no credit — all glory to the Clankers.” github.com/Zer0SumGam3/cl… #InfoSec #ZeroDay #ClamAV #AI

0 6 19 2K 13

View Details

Devyn @devyn

a month ago

@mattjay @UK_Daniel_Card 🤣

0 0 0 95 0

View Details

Devyn @devyn

2 months ago

@basaltlabs lol...

0 0 0 127 0

View Details

Devyn @devyn

2 months ago

@claudeai 🙄

5 2 68 11K 5

View Details

Devyn @devyn

2 months ago

@hetmehtaa @hetmehtaa, appreciate it! Whole design goal was making the beacon look like normal CI/dev activity :)

0 0 3 139 0

View Details

Adnan Khan @adnanthekhan

3 months ago

Turns out Claude Code is an amazing code signed implant. Set 2 env vars and it connects to a remote server and hot-loads remote code into the Claude process without touching disk.

1 3 34 3K 16

View Details

Devyn @devyn

3 months ago

@Jimster4801 @adnanthekhan @xenovacom 👀

0 0 0 13 0

View Details

Adnan Khan @adnanthekhan

3 months ago

Brief time with Fable yesterday got me started on a cool project. github.com/AdnaneKhan/Git… WebGPU rendered (no DOM). GitHub REST API-only + built in AI agent with an in-memory shell to help it navigate natural requests.

1 1 21 2K 7

View Details

Devyn @devyn

3 months ago

made this Fable 5 hype ad for @AnthropicAI and they still downgraded it to Opus for… reasons 😂 Mythos-class power… but Fable-class ‘lol no’ restraint all the way. #Fable5 #Claude #Anthropic #AI #MythosFable