CVE-2025-30741

Pixelfed before 0.12.5 allows anyone to follow private accounts and see private posts on other Fediverse servers. This affects users elsewhere in the Fediverse, if they otherwise have any followers from a Pixelfed instance...

CVE-2025-30741

CVE-2025-30741 affects Pixelfed before 0.12.5, where insufficient verification of follow requests allows an unauthenticated actor to follow private accounts and view private posts on other Fediverse servers. This can expose private content to users who have followers from a Pixelfed instance. The...

Instagram bypass Access Account Private Method Exploit

With this method you can hack almost any Instagram Account...

X (Formerly Twitter): View liked twits of private account via publish.twitter.com

https://publish.twitter.com/?url=https://twitter.com/privateaccountid/likes POC: Private account https://twitter.com/testprivateacc1 https://publish.twitter.com/?url=https://twitter.com/testprivateacc1/likes...

PCL-0002: Session Hijacking in "Sqwebmail"

--------------------------- PUCCIOLAB.ORG - ADVISORIES http://www.pucciolab.org --------------------------- PCL-0002: Session Hijacking in "Sqwebmail" --------------------------------------------------------------------------- PuCCiOLAB.ORG Security Advisories [email protected]...