rootxharsh (Author) | Hacktron AI

rootxharsh

(he/him)

SupaPwn: Hacking Our Way into Lovable's Office and Helping Secure Supabase

We hacked our way into Lovable's office by demoing SupaPwn — a chain that could potentially enable region-wide tenant takeover: event-trigger privilege window, DB superuser, host RCE, SUID escalation, exposed configs, orchestration takeover

s s1r1us
r rootxharsh
z zayne
l liveoverflow
・ November 17, 2025

research
Hacktron finds pre-auth RCE in Dassault Delmia Apriso

For years, this vulnerability hid in plain sight — missed by multiple audits and even used in production by Apple. In just ten minutes, Hacktron exposed a full pre‐auth RCE path.

r rootxharsh
・ June 3, 2025

research
Hacktron finds another pre-auth RCE variant in Ivanti EPMM

Hacktron AI uncovers a new pre-authenticated RCE variant in Ivanti EPMM by identifying a fresh EL injection sink.

r rootxharsh
・ May 16, 2025

research