Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

CVE-2023-22518 - Improper Authorization Vulnerability In Confluence Data Center and Server Don’t use and never use this vulnerability lightly,because it is a master of data cleaning

shimizukawasak's profile picture

ShimizuKawasaki

1,172 subscribers

97,753 görüntüleme • 3 yıl önce •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

5 Yorum

CorSch profil fotoğrafı
CorSch3 yıl önce

Is this the "delete only" vulnerability? Looks like RCE to me.

ShimizuKawasaki profil fotoğrafı
ShimizuKawasaki3 yıl önce

clean before and install some plugins to rce

Debug profil fotoğrafı
Debug3 yıl önce

Nice work

Sem Jansen profil fotoğrafı
Sem Jansen3 yıl önce

Is there any way to get poc?

뚱이예요 profil fotoğrafı
뚱이예요3 yıl önce

Can I get a poc for study purposes? I beg you.

Benzer Videolar

CVE-2023-23397 Simple and dirty PoC of the CVE-2023-23397 vulnerability impacting the Outlook thick client. #CVE #cybersecurity #infosec
0:42

CVE-2023-23397 Simple and dirty PoC of the CVE-2023-23397 vulnerability impacting the Outlook thick client. #CVE #cybersecurity #infosec

HackGit

76,809 görüntüleme • 3 yıl önce

"A Vulnerability to Hack The World" - CVE-2023-4863 The start of a mini series digging into the recent WebP vulnerability. In this first episode, we explore huffman tables!
17:59

"A Vulnerability to Hack The World" - CVE-2023-4863 The start of a mini series digging into the recent WebP vulnerability. In this first episode, we explore huffman tables!

LiveOverflow 🔴 hextree.io

44,800 görüntüleme • 2 yıl önce

Android Universal Root Rooting Pixel 6 and 7 Pro running Android 13 👇 Analysis and Exploitation of CVE-2023-20938 (exploit a use-after-free vulnerability to elevate privileges to root and disable SELinux) [blog] [slides]
0:43

Android Universal Root Rooting Pixel 6 and 7 Pro running Android 13 👇 Analysis and Exploitation of CVE-2023-20938 (exploit a use-after-free vulnerability to elevate privileges to root and disable SELinux) [blog] [slides]

Mobile Hacker

21,799 görüntüleme • 2 yıl önce

CVE-2023-23397 Exploiting CVE-2023-23397: Microsoft Outlook Elevation of Privilege Vulnerability. Details: #infosec #CyberSecurity #Pentesting #redteam
0:56

CVE-2023-23397 Exploiting CVE-2023-23397: Microsoft Outlook Elevation of Privilege Vulnerability. Details: #infosec #CyberSecurity #Pentesting #redteam

HackGit

39,771 görüntüleme • 3 yıl önce

Exfiltrate #WhatsApp chat, or internal data of any Android app, running on Android 12 or 13 by exploiting CVE-2024-0044 vulnerability
1:47

Exfiltrate #WhatsApp chat, or internal data of any Android app, running on Android 12 or 13 by exploiting CVE-2024-0044 vulnerability

Mobile Hacker

143,833 görüntüleme • 2 yıl önce

Never use a persons vulnerability as a weapon during their time of weakness
1:23

Never use a persons vulnerability as a weapon during their time of weakness

Inky Johnson

172,646 görüntüleme • 2 yıl önce

Another new data center project that broke ground in Texas This is the Royse City Giga Data Center Project being put right in the middle of rural country life This data center will use the equivalent of 35,000 American homes in power and hundreds of thousands of gallons of water per day
2:25

Another new data center project that broke ground in Texas This is the Royse City Giga Data Center Project being put right in the middle of rural country life This data center will use the equivalent of 35,000 American homes in power and hundreds of thousands of gallons of water per day

Wall Street Apes

58,252 görüntüleme • 2 ay önce

Data Center will use a lot of water, Listen!
0:50

Data Center will use a lot of water, Listen!

Johnny Midnight ⚡️

11,749 görüntüleme • 5 ay önce

Cybersecurity Engineer on vulnerability of Flock's AI camera system: "Why create this much data when we can't secure it?"
1:30

Cybersecurity Engineer on vulnerability of Flock's AI camera system: "Why create this much data when we can't secure it?"

CSPAN

48,651 görüntüleme • 1 ay önce

The CertiK Skyfall team identified and collaborated with Apple to fix a vulnerability (CVE-2024-27801) in the low-level implementation of NSXPC, affecting all Apple platforms. This vulnerability could have potentially allowed malicious apps to gain unauthorized access to system services or steal user data from certain third-party applications, particularly those with architectures similar to Telegram. Our proof-of-concept attack demonstrated how a malicious app could steal chat history (such as pictures) from Telegram and transfer it to a remote server. Upgrade all your Apple devices and stay safe! Source:
1:09

The CertiK Skyfall team identified and collaborated with Apple to fix a vulnerability (CVE-2024-27801) in the low-level implementation of NSXPC, affecting all Apple platforms. This vulnerability could have potentially allowed malicious apps to gain unauthorized access to system services or steal user data from certain third-party applications, particularly those with architectures similar to Telegram. Our proof-of-concept attack demonstrated how a malicious app could steal chat history (such as pictures) from Telegram and transfer it to a remote server. Upgrade all your Apple devices and stay safe! Source:

CertiK

341,505 görüntüleme • 2 yıl önce

Demo of using #BlueDucky to exploit 0-click Bluetooth vulnerability of targeted Android smartphone (CVE-2023-45866) Executed by Raspberry Pi 4 and Android running #NetHunter
0:46

Demo of using #BlueDucky to exploit 0-click Bluetooth vulnerability of targeted Android smartphone (CVE-2023-45866) Executed by Raspberry Pi 4 and Android running #NetHunter

Mobile Hacker

129,830 görüntüleme • 2 yıl önce

Here is ENLBufferPwn (CVE ID pending), a severe vulnerability in many first party 3DS, Wii U and Switch games. It allows remote code execution in a victim console by just having an online game session with an attacker. Vulnerability report: 🧵(1/7)
0:27

Here is ENLBufferPwn (CVE ID pending), a severe vulnerability in many first party 3DS, Wii U and Switch games. It allows remote code execution in a victim console by just having an online game session with an attacker. Vulnerability report: 🧵(1/7)

PabloMK7

591,174 görüntüleme • 3 yıl önce

‼️🚨 This is alarming: Researchers found a one-click data exfiltration vulnerability in M365 Copilot. A single click on a trusted microsoft[.]com link let attackers pull emails, MFA codes, meeting notes, and SharePoint/OneDrive files, no permissions or second click required. Microsoft has patched it as CVE-2026-42824, rated critical.
0:58

‼️🚨 This is alarming: Researchers found a one-click data exfiltration vulnerability in M365 Copilot. A single click on a trusted microsoft[.]com link let attackers pull emails, MFA codes, meeting notes, and SharePoint/OneDrive files, no permissions or second click required. Microsoft has patched it as CVE-2026-42824, rated critical.

International Cyber Digest

144,422 görüntüleme • 4 ay önce

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:
3:26

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:

Dark Web Informer

22,498 görüntüleme • 1 yıl önce

American is in tears standing out front of a new massive Hyperscale Data Center campus being built in Alabama owned by Blackstone She says her neighbors are selling their homes and she’s in tears because she doesn’t want to be forced to sell and move This Data Center is called Project Marvel, it’s large scale hyperscale data center campus under development by QTS Data Centers which is owned by Blackstone. It is being built on 1,600 acres in Bessemer, Alabama There are 18 buildings planned totaling about 4.5 million square feet. Estimated cost is $14.5 billion It will use 130,000 gallons of municipal water per day. There have even been estimates of up to 2 million gallons per day. It will be closed loop BlackRock is the largest shareholder of Blackstone It will use the equivalent power of 1.2 million average US homes Remember when they told us not to run out AC because we were causing climate change and now they’re building data centers that use the equivalent power of over a million homes each
3:21

American is in tears standing out front of a new massive Hyperscale Data Center campus being built in Alabama owned by Blackstone She says her neighbors are selling their homes and she’s in tears because she doesn’t want to be forced to sell and move This Data Center is called Project Marvel, it’s large scale hyperscale data center campus under development by QTS Data Centers which is owned by Blackstone. It is being built on 1,600 acres in Bessemer, Alabama There are 18 buildings planned totaling about 4.5 million square feet. Estimated cost is $14.5 billion It will use 130,000 gallons of municipal water per day. There have even been estimates of up to 2 million gallons per day. It will be closed loop BlackRock is the largest shareholder of Blackstone It will use the equivalent power of 1.2 million average US homes Remember when they told us not to run out AC because we were causing climate change and now they’re building data centers that use the equivalent power of over a million homes each

Wall Street Apes

114,379 görüntüleme • 9 gün önce

How much water do data centres really use in the UK? Sky's technology correspondent Rowland Manthorpe visits a "waterless" data centre in London and reveals how much water data centres use in the UK and why the issue is more complicated than it first appears. 🔗Full report:
1:33

How much water do data centres really use in the UK? Sky's technology correspondent Rowland Manthorpe visits a "waterless" data centre in London and reveals how much water data centres use in the UK and why the issue is more complicated than it first appears. 🔗Full report:

Sky News

39,813 görüntüleme • 4 ay önce

CVE-2024-34470: Path Traversal vulnerability in HSC Mailinspector Credit:
0:59

CVE-2024-34470: Path Traversal vulnerability in HSC Mailinspector Credit:

Dark Web Informer

20,656 görüntüleme • 1 yıl önce

I'm gonna be banging this drum until people listen: The data centers are a REAL PROBLEM. FOR REPUBLICANS. They're loud. Use too much water. Cause pollution. Republicans, Independents, Democrats: ALL anti-data center And trump? PRO data center. Any questions?
0:57

I'm gonna be banging this drum until people listen: The data centers are a REAL PROBLEM. FOR REPUBLICANS. They're loud. Use too much water. Cause pollution. Republicans, Independents, Democrats: ALL anti-data center And trump? PRO data center. Any questions?

BrooklynDad_Defiant!☮️

44,790 görüntüleme • 3 ay önce