V12

@v12sec • 9,213 subscribers

dangerously powerful agentic security

Shorts

Signal's Contact Discovery automatically sends your contact list information to an SGX enclave in the cloud. V12 broke into that enclave and leaked the key, allowing the server host to decrypt everything. Two separate critical bugs: arbitrary read and RCE. Here's how. 🧵

Signal's Contact Discovery automatically sends your contact list information to an SGX enclave in the cloud. V12 broke into that enclave and leaked the key, allowing the server host to decrypt everything. Two separate critical bugs: arbitrary read and RCE. Here's how. 🧵

132,873 просмотров

🐬🐬🐬 dolphin rce 🐬🐬🐬

🐬🐬🐬 dolphin rce 🐬🐬🐬

204,707 просмотров

another day, another universal linux LPE

another day, another universal linux LPE

541,725 просмотров

today we are releasing a qemu escape

today we are releasing a qemu escape

329,831 просмотров

unauthenticated root RCE on TerraMaster TOS4 NAS appliances. (+free additional LPE) something light for sunday. bigger stuff this week! :-)

unauthenticated root RCE on TerraMaster TOS4 NAS appliances. (+free additional LPE) something light for sunday. bigger stuff this week! :-)

103,469 просмотров

new fragnesia variant (unpatched)

new fragnesia variant (unpatched)

68,370 просмотров

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

Stick around on our web page for 10 minutes and all your funds are gone. Just connect your wallet to the dApp and enjoy some Temple Run. Unlock your wallet again and it’s empty 😇. A silent signature extraction in Rabby Wallet, leading to a full wallet drain. 🧵

Stick around on our web page for 10 minutes and all your funds are gone. Just connect your wallet to the dApp and enjoy some Temple Run. Unlock your wallet again and it’s empty 😇. A silent signature extraction in Rabby Wallet, leading to a full wallet drain. 🧵

316,787 просмотров • 16 дней назад

firefox focus universal xss 0day (universal account takeover) this is still unpatched after almost a year in disclosure so we are releasing our poc

firefox focus universal xss 0day (universal account takeover) this is still unpatched after almost a year in disclosure so we are releasing our poc

1,161,693 просмотров • 2 месяцев назад

found another one! redis 8.8.0 bidirectional RCE we will release poc after the patch

found another one! redis 8.8.0 bidirectional RCE we will release poc after the patch

205,390 просмотров • 2 месяцев назад

And here's postgres bidirectional RCE no admin required, client infects server, server infects client ♻️🐛

And here's postgres bidirectional RCE no admin required, client infects server, server infects client ♻️🐛

184,413 просмотров • 2 месяцев назад

since this is now patched, it is now safe to repost the video

since this is now patched, it is now safe to repost the video

205,357 просмотров • 2 месяцев назад

here's a mariadb RCE, what should we look at next?

here's a mariadb RCE, what should we look at next?

71,235 просмотров • 1 месяц назад

AnyPwn: AnyDesk preauth 0click RCE (heap buffer overflow) we will release PoC post disclosure and patch

AnyPwn: AnyDesk preauth 0click RCE (heap buffer overflow) we will release PoC post disclosure and patch

131,362 просмотров • 2 месяцев назад

linux LPE in rds kernel module

linux LPE in rds kernel module

66,557 просмотров • 3 месяцев назад

you can now audit your code from the comfort of Slack you can chat with your bugs too

you can now audit your code from the comfort of Slack you can chat with your bugs too

24,881 просмотров • 2 месяцев назад

Больше нет контента для загрузки