nafiez's banner

nafiez

@zeifan • 2,428 subscribers

Computer Security Researcher

Shorts

Found a heap overflow vulnerability in Windows SMB that leads to RCE and reported it to MSRC in June. The vulnerability has now been addressed with CVE-2026-62800 in the August Patch Tuesday updates.

Found a heap overflow vulnerability in Windows SMB that leads to RCE and reported it to MSRC in June. The vulnerability has now been addressed with CVE-2026-62800 in the August Patch Tuesday updates.

31,640 Aufrufe

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

Published my technical write-up on a vulnerability I discovered in Windows usbprint.sys. The issue was reported to MSRC, but Microsoft decided not to issue a fix. I’ve documented the technical details and PoC in the blog. Blog writeup:

Published my technical write-up on a vulnerability I discovered in Windows usbprint.sys. The issue was reported to MSRC, but Microsoft decided not to issue a fix. I’ve documented the technical details and PoC in the blog. Blog writeup:

25,099 Aufrufe • vor 1 Monat

Bought a product 2 years ago for 400USD+. Last week I installed the vendor’s firmware update. Device got bricked 🤦🏻‍♀️ Vendor’s solution: replace the board assembly for half of the product price. My solution: reverse engineer the driver and write an exploit. PoC soon 😆

Bought a product 2 years ago for 400USD+. Last week I installed the vendor’s firmware update. Device got bricked 🤦🏻‍♀️ Vendor’s solution: replace the board assembly for half of the product price. My solution: reverse engineer the driver and write an exploit. PoC soon 😆

22,033 Aufrufe • vor 3 Monaten

I’ve successfully reproduced the CVE-2026-32223. If I get the opportunity, I’ll put together a detailed write-up.

I’ve successfully reproduced the CVE-2026-32223. If I get the opportunity, I’ll put together a detailed write-up.

15,045 Aufrufe • vor 5 Monaten

Last but not least bug of the year, 2025. Found a remote printer bug that allows remote arbitrary write file. This was reported to MSRC however they told us is not replicated on their side.

Last but not least bug of the year, 2025. Found a remote printer bug that allows remote arbitrary write file. This was reported to MSRC however they told us is not replicated on their side.

21,360 Aufrufe • vor 9 Monaten

A quick writeup on potential security issue of Windows LNK that I reported to MSRC last month. They decided to not fix due to relying on MOTW. In the blog I included the proof of concept. All you have to do is to Right-Click and get Info Disclosure :)

A quick writeup on potential security issue of Windows LNK that I reported to MSRC last month. They decided to not fix due to relying on MOTW. In the blog I included the proof of concept. All you have to do is to Right-Click and get Info Disclosure :)

25,339 Aufrufe • vor 1 Jahr

Keine weiteren Inhalte verfügbar