V12's banner
V12's profile picture

V12

@v12sec • 4,299 subscribers

dangerously powerful agentic security

Shorts

another day, another universal linux LPE

another day, another universal linux LPE

542,413 views

complete guest-to-host escape in ppsspp emulator. more emulator escapes (+ pocs) dropping next week 🎮 🕹️

complete guest-to-host escape in ppsspp emulator. more emulator escapes (+ pocs) dropping next week 🎮 🕹️

17,309 views

🐬🐬🐬 dolphin rce 🐬🐬🐬

🐬🐬🐬 dolphin rce 🐬🐬🐬

205,952 views

Signal's Contact Discovery automatically sends your contact list information to an SGX enclave in the cloud. V12 broke into that enclave and leaked the key, allowing the server host to decrypt everything. Two separate critical bugs: arbitrary read and RCE. Here's how. 🧵

Signal's Contact Discovery automatically sends your contact list information to an SGX enclave in the cloud. V12 broke into that enclave and leaked the key, allowing the server host to decrypt everything. Two separate critical bugs: arbitrary read and RCE. Here's how. 🧵

140,136 views

today we are releasing a qemu escape

today we are releasing a qemu escape

330,525 views

We can use our Ghostscript exploits to directly attack KDE's file manager from a single link click in Chrome. This PoC Downloads the file, then pops open the file manager for unsandboxed RCE (lovingly refered to as the full chain from temu)

We can use our Ghostscript exploits to directly attack KDE's file manager from a single link click in Chrome. This PoC Downloads the file, then pops open the file manager for unsandboxed RCE (lovingly refered to as the full chain from temu)

28,406 views

Saturday was national boyfriend day so we forgot to post, but here's a Libreoffice RCE

Saturday was national boyfriend day so we forgot to post, but here's a Libreoffice RCE

16,959 views

unauthenticated root RCE on TerraMaster TOS4 NAS appliances. (+free additional LPE) something light for sunday. bigger stuff this week! :-)

unauthenticated root RCE on TerraMaster TOS4 NAS appliances. (+free additional LPE) something light for sunday. bigger stuff this week! :-)

103,469 views

new fragnesia variant (unpatched)

new fragnesia variant (unpatched)

68,578 views

XSS to full account takeover and wallet drain in Ditto. V12 found a deeplink parser bug that steals Nostr private keys with just one click. Here's how. 🧵

XSS to full account takeover and wallet drain in Ditto. V12 found a deeplink parser bug that steals Nostr private keys with just one click. Here's how. 🧵

20,785 views

🪿🪿🪿 goose rce 🪿🪿🪿

🪿🪿🪿 goose rce 🪿🪿🪿

12,042 views

Videos

LIVE
1.2k

Anya Rossi

sweetdream.ai

SweetDream.aiSponsored•Livecam
Streaming Now

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

HD live stream
Exclusive private shows
1.2k viewers online

Free preview available • Premium content

firefox focus universal xss 0day (universal account takeover) this is still unpatched after almost a year in disclosure so we are releasing our poc
0:36
v12sec's profile picture

firefox focus universal xss 0day (universal account takeover) this is still unpatched after almost a year in disclosure so we are releasing our poc

V12

1,161,693 views • 4 months ago

Stick around on our web page for 10 minutes and all your funds are gone. Just connect your wallet to the dApp and enjoy some Temple Run. Unlock your wallet again and it’s empty 😇. A silent signature extraction in Rabby Wallet, leading to a full wallet drain. 🧵
0:44
v12sec's profile picture

Stick around on our web page for 10 minutes and all your funds are gone. Just connect your wallet to the dApp and enjoy some Temple Run. Unlock your wallet again and it’s empty 😇. A silent signature extraction in Rabby Wallet, leading to a full wallet drain. 🧵

V12

321,239 views • 2 months ago

found another one! redis 8.8.0 bidirectional RCE we will release poc after the patch
0:24
v12sec's profile picture

found another one! redis 8.8.0 bidirectional RCE we will release poc after the patch

V12

225,919 views • 3 months ago

since this is now patched, it is now safe to repost the video
0:36
v12sec's profile picture

since this is now patched, it is now safe to repost the video

V12

205,357 views • 3 months ago

And here's postgres bidirectional RCE no admin required, client infects server, server infects client ♻️🐛
0:22
v12sec's profile picture

And here's postgres bidirectional RCE no admin required, client infects server, server infects client ♻️🐛

V12

185,886 views • 3 months ago

AnyPwn: AnyDesk preauth 0click RCE (heap buffer overflow) we will release PoC post disclosure and patch
0:21
v12sec's profile picture

AnyPwn: AnyDesk preauth 0click RCE (heap buffer overflow) we will release PoC post disclosure and patch

V12

157,559 views • 3 months ago

user → root privesc 0-day in CUPS a free PoC while we wait for some bigger disclosures to go through 😇
0:25
v12sec's profile picture

user → root privesc 0-day in CUPS a free PoC while we wait for some bigger disclosures to go through 😇

V12

44,275 views • 1 month ago

here's a mariadb RCE, what should we look at next?
0:26
v12sec's profile picture

here's a mariadb RCE, what should we look at next?

V12

72,248 views • 2 months ago

linux LPE in rds kernel module
0:23
v12sec's profile picture

linux LPE in rds kernel module

V12

66,557 views • 5 months ago

you can now audit your code from the comfort of Slack you can chat with your bugs too
0:51
v12sec's profile picture

you can now audit your code from the comfort of Slack you can chat with your bugs too

V12

24,881 views • 3 months ago

No more content to load