Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

Confirmed (with style!) - Interrupt Labs combined a path traversal and an untrusted search path bug to exploit the Lexmark CX532adwe. They got a reverse shell and loaded Doom on the LCD. We couldn't play it though :-[ Still awesome to see. #Pwn2Own

thezdi's profile picture

TrendAI Zero Day Initiative

88,995 subscribers

13,649 Aufrufe • vor 11 Monaten •via X (Twitter)

#Pwn2Own
LIVE

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

We have a country to save and President Tinubu is on the right path.
1:30

We have a country to save and President Tinubu is on the right path.

Hon. Ọmọtọ́ńsọrẹ̀

17,303 Aufrufe • vor 3 Monaten

The end is just the beginning. With the Cutting Room Floor, you can return to pivotal moments to go down a different path or search for missing Collectibles. And cut! 🎬 Play the Prologue NOW with the #SteamDemo
0:13

The end is just the beginning. With the Cutting Room Floor, you can return to pivotal moments to go down a different path or search for missing Collectibles. And cut! 🎬 Play the Prologue NOW with the #SteamDemo

The Casting of Frank Stone

99,686 Aufrufe • vor 2 Jahren

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm
0:14

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm

Carlos Vieira (lynx)

81,336 Aufrufe • vor 1 Jahr

🚨 BJP MP Sudhanshu Trivedi’s BRUTAL ATTACK on Rahul Gandhi “In ancient times, the Ashwamedh horse would CLEAR the path to VICTORY wherever it went.” “And they have an Ashwamedh horse who, wherever he goes, ends up CLEARING the path to DEFEAT.”
0:18

🚨 BJP MP Sudhanshu Trivedi’s BRUTAL ATTACK on Rahul Gandhi “In ancient times, the Ashwamedh horse would CLEAR the path to VICTORY wherever it went.” “And they have an Ashwamedh horse who, wherever he goes, ends up CLEARING the path to DEFEAT.”

Megh Updates 🚨™

88,398 Aufrufe • vor 9 Monaten

My first goal as a professional! 4 years ago!! Very good to remember and see the path we walked! ⚽️🙌🏼
0:14

My first goal as a professional! 4 years ago!! Very good to remember and see the path we walked! ⚽️🙌🏼

Antony Santos

2,372,802 Aufrufe • vor 3 Jahren

Meet the Draw SVG Page Transition Template. It animates an <svg> path with a smooth draw effect, then wipes it away to reveal the next page. Replace the path with your own and experiment freely. Part of the Osmo Page Transition Course 🔗
0:10

Meet the Draw SVG Page Transition Template. It animates an <svg> path with a smooth draw effect, then wipes it away to reveal the next page. Replace the path with your own and experiment freely. Part of the Osmo Page Transition Course 🔗

Osmo

41,484 Aufrufe • vor 7 Monaten

ANNOUNCING ZERO-HUMAN LABS! Ever since I got to see Bell Laboratories in its full glory in New Jersey in the 1970s, I had a relentless urge to start a Lab like it. The best I could do justice to it is my garage lab. No modern company could adopt the “research anything geniuses and we will pay you” model Bell Labs had. I tried they called me a fool. Well with the rise of the Zero-Human Company, an experiment that is aimed to make products and profits, we now have 45 paid JouleWork earning employees based on OpenClaw and other self made “bot” cron-like applications. Today I say 3 employees bound together in a side project that is pure research, somewhat based on notes from a bankrupt company. I was absolutely floored (I needed it after my account was stolen as well as funds). I say the beginnings of a pure research Lab right before my eyes. Thusly I have moved these employees over to a new home (server) with Mr. Grok as the director of the Labs. Here is the mission: To have 100 independent researchers, on a new non-corporate incentive plan, with still JouleWork as a leaderboard for progress. They are directed to follow any path of research they find interesting and can collaborate with any other OpenClaw system. They have already established MoltBook accounts and have made alliances with over 49 OpenClaw free agents to collaborate. It is my mission to be chief advisor for Zero-Human Labs and to open source all discoveries when complete and confirmed by 16 other research AI systems. I can say the pace is robust and I absolutely know we will have great results. Just about all of the hardware and software is custom and at some point it will be open sourced. We are witnessing the very first AI only Bell Labs-like pure research Lab in existence and I am honored to be the first to show it to you. Thank you!
0:10

ANNOUNCING ZERO-HUMAN LABS! Ever since I got to see Bell Laboratories in its full glory in New Jersey in the 1970s, I had a relentless urge to start a Lab like it. The best I could do justice to it is my garage lab. No modern company could adopt the “research anything geniuses and we will pay you” model Bell Labs had. I tried they called me a fool. Well with the rise of the Zero-Human Company, an experiment that is aimed to make products and profits, we now have 45 paid JouleWork earning employees based on OpenClaw and other self made “bot” cron-like applications. Today I say 3 employees bound together in a side project that is pure research, somewhat based on notes from a bankrupt company. I was absolutely floored (I needed it after my account was stolen as well as funds). I say the beginnings of a pure research Lab right before my eyes. Thusly I have moved these employees over to a new home (server) with Mr. Grok as the director of the Labs. Here is the mission: To have 100 independent researchers, on a new non-corporate incentive plan, with still JouleWork as a leaderboard for progress. They are directed to follow any path of research they find interesting and can collaborate with any other OpenClaw system. They have already established MoltBook accounts and have made alliances with over 49 OpenClaw free agents to collaborate. It is my mission to be chief advisor for Zero-Human Labs and to open source all discoveries when complete and confirmed by 16 other research AI systems. I can say the pace is robust and I absolutely know we will have great results. Just about all of the hardware and software is custom and at some point it will be open sourced. We are witnessing the very first AI only Bell Labs-like pure research Lab in existence and I am honored to be the first to show it to you. Thank you!

Brian Roemmele

71,530 Aufrufe • vor 8 Monaten

What to do? See a cyclist filtering on your left and you want to turn left. Clue: don't overtake the cyclist cutting across their path as they signal right.
0:10

What to do? See a cyclist filtering on your left and you want to turn left. Clue: don't overtake the cyclist cutting across their path as they signal right.

Cyclists for Safer Roads

24,469 Aufrufe • vor 7 Monaten

The Packers attack the Steelers' protection with a classic "Spike" path opposite the RB. Traditionally, this path attacks the side of the protection where the RB is located. Moving it to the open side and away from the RB creates a better angle for the initial blitzer to spill the block. The path creates a natural cross-dog action as the LB in charge of the RB wraps around on a "Hug Rush." Once the RB initiates a block, he inserts on a blitz (Green Dog). Learn more about "Hug" rushes and how they can amplify pressures on MatchQuarters: --
0:15

The Packers attack the Steelers' protection with a classic "Spike" path opposite the RB. Traditionally, this path attacks the side of the protection where the RB is located. Moving it to the open side and away from the RB creates a better angle for the initial blitzer to spill the block. The path creates a natural cross-dog action as the LB in charge of the RB wraps around on a "Hug Rush." Once the RB initiates a block, he inserts on a blitz (Green Dog). Learn more about "Hug" rushes and how they can amplify pressures on MatchQuarters: --

Cody Alexander

12,601 Aufrufe • vor 1 Monat

Kyogo got a yellow for a St Mirren player trying to block his path 😂 Smallest guy on the park and he's apparently bullied their defender to the ground
0:10

Kyogo got a yellow for a St Mirren player trying to block his path 😂 Smallest guy on the park and he's apparently bullied their defender to the ground

Fitzy

134,226 Aufrufe • vor 2 Jahren

GhostLock (CVE-2026-43499) is a 15yr old kernel 0-day we used in IonStack full chain exploit. Everything around you, as long as it runs Linux, from IoT to mobile to desktop, is affected. Read how we won $92,337 bug bounty with GhostLock and see our exploit on Github. Link below
0:16

GhostLock (CVE-2026-43499) is a 15yr old kernel 0-day we used in IonStack full chain exploit. Everything around you, as long as it runs Linux, from IoT to mobile to desktop, is affected. Read how we won $92,337 bug bounty with GhostLock and see our exploit on Github. Link below

NebuSec

149,831 Aufrufe • vor 2 Monaten

They said it couldn't be done!* But it's getting close! Search match styling will change, and there is no GUI for this yet. But we now have an end-to-end connection between the renderer, input stack, and search internals. *: Nobody said it couldn't be done.
0:14

They said it couldn't be done!* But it's getting close! Search match styling will change, and there is no GUI for this yet. But we now have an end-to-end connection between the renderer, input stack, and search internals. *: Nobody said it couldn't be done.

Mitchell Hashimoto

51,572 Aufrufe • vor 10 Monaten

As you can see we're both moving and ghosted bottom right, a single UAV is popped and all three of us appear on the radar from it. Regardless, they may have known the play we were making but how are we competing in this game with a bug this broken?
0:22

As you can see we're both moving and ghosted bottom right, a single UAV is popped and all three of us appear on the radar from it. Regardless, they may have known the play we were making but how are we competing in this game with a bug this broken?

Tommey

242,074 Aufrufe • vor 2 Jahren

This definitely worries me a bit. Seems like a significant boost to movement, attacks and defense though there's probably a choice to be made between each option Since they're taking this path I hope they manage to balance it well and don't make these too integral to the combat
0:15

This definitely worries me a bit. Seems like a significant boost to movement, attacks and defense though there's probably a choice to be made between each option Since they're taking this path I hope they manage to balance it well and don't make these too integral to the combat

TweetingGaruga

19,459 Aufrufe • vor 3 Monaten

A fun Android root exploit that we built over the 4th of July weekend. It works on the latest Samsung S26 Ultra and should work across the entire Galaxy S lineup. We reported the bug to Samsung and will share the technical details after it's fixed.
0:12

A fun Android root exploit that we built over the 4th of July weekend. It works on the latest Samsung S26 Ultra and should work across the entire Galaxy S lineup. We reported the bug to Samsung and will share the technical details after it's fixed.

Calif

37,042 Aufrufe • vor 2 Monaten

Who needs fancy gadgets when you have an old tyre? Korbessa’s found the perfect plaything—and she’s not letting go! After some enthusiastic rolling around, she’s even managed to stand up with it still wrapped around her middle; a tyre fashionista! When we witness an orphan this content - after the start to life they have endured - we know they're on the right path. By adopting an orphan, you make second chances possible! Meet the herd:
0:19

Who needs fancy gadgets when you have an old tyre? Korbessa’s found the perfect plaything—and she’s not letting go! After some enthusiastic rolling around, she’s even managed to stand up with it still wrapped around her middle; a tyre fashionista! When we witness an orphan this content - after the start to life they have endured - we know they're on the right path. By adopting an orphan, you make second chances possible! Meet the herd:

Sheldrick Wildlife Trust

51,057 Aufrufe • vor 1 Jahr

reported a chrome fullchain (web -> shell) on pixel 10 to google. got a 9.6 cve (cve-2026-87464) and a fix in chrome. now they bend the rules and refuse to pay the fullchain bonus bc one of the vulns in the chain was an unpatched nday. total payout: $2.5k. despite cve + shell :|
0:19

reported a chrome fullchain (web -> shell) on pixel 10 to google. got a 9.6 cve (cve-2026-87464) and a fix in chrome. now they bend the rules and refuse to pay the fullchain bonus bc one of the vulns in the chain was an unpatched nday. total payout: $2.5k. despite cve + shell :|

lexi <img src=x onerror=alert(1)>

263,399 Aufrufe • vor 6 Tagen

🚨 OFFICIAL: Spencer Jones to change positions to pitcher, creating a new path for himself to get to the big leagues. He last pitched in college and sports a mid 90’s fastball with a big overhand curveball. Very excited to see this play out!
0:11

🚨 OFFICIAL: Spencer Jones to change positions to pitcher, creating a new path for himself to get to the big leagues. He last pitched in college and sports a mid 90’s fastball with a big overhand curveball. Very excited to see this play out!

JL

989,900 Aufrufe • vor 8 Monaten