nafiez's banner

nafiez

@zeifan • 2,208 subscribers

Computer Security Researcher

Shorts

Found a heap overflow vulnerability in Windows SMB that leads to RCE and reported it to MSRC in June. The vulnerability has now been addressed with CVE-2026-62800 in the August Patch Tuesday updates.

Found a heap overflow vulnerability in Windows SMB that leads to RCE and reported it to MSRC in June. The vulnerability has now been addressed with CVE-2026-62800 in the August Patch Tuesday updates.

31,194 views

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

Bought a product 2 years ago for 400USD+. Last week I installed the vendor’s firmware update. Device got bricked 🤦🏻‍♀️ Vendor’s solution: replace the board assembly for half of the product price. My solution: reverse engineer the driver and write an exploit. PoC soon 😆

Bought a product 2 years ago for 400USD+. Last week I installed the vendor’s firmware update. Device got bricked 🤦🏻‍♀️ Vendor’s solution: replace the board assembly for half of the product price. My solution: reverse engineer the driver and write an exploit. PoC soon 😆

21,843 views • 2 months ago

I’ve successfully reproduced the CVE-2026-32223. If I get the opportunity, I’ll put together a detailed write-up.

I’ve successfully reproduced the CVE-2026-32223. If I get the opportunity, I’ll put together a detailed write-up.

15,045 views • 4 months ago

Last but not least bug of the year, 2025. Found a remote printer bug that allows remote arbitrary write file. This was reported to MSRC however they told us is not replicated on their side.

Last but not least bug of the year, 2025. Found a remote printer bug that allows remote arbitrary write file. This was reported to MSRC however they told us is not replicated on their side.

21,360 views • 8 months ago

A quick writeup on potential security issue of Windows LNK that I reported to MSRC last month. They decided to not fix due to relying on MOTW. In the blog I included the proof of concept. All you have to do is to Right-Click and get Info Disclosure :)

A quick writeup on potential security issue of Windows LNK that I reported to MSRC last month. They decided to not fix due to relying on MOTW. In the blog I included the proof of concept. All you have to do is to Right-Click and get Info Disclosure :)

25,296 views • 1 year ago

No more content to load