Загрузка видео...

Не удалось загрузить видео

На главную

🚨CVE-2025-25257: Pre-Auth SQL Injection to RCE - Fortinet FortiWeb Fabric Connector PoC: Write-up:

DarkWebInformer's profile picture

Dark Web Informer

141,132 subscribers

13,749 просмотров • 1 год назад •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 0

Нет доступных комментариев

Здесь появятся комментарии из оригинального поста

Похожие видео

🚨PoC for SysAid PreAuth RCE Chain (CVE-2025-2775, CVE-2025-2776, CVE-2025-2777, CVE-2025-2778) GitHub: Write-up:
0:25

🚨PoC for SysAid PreAuth RCE Chain (CVE-2025-2775, CVE-2025-2776, CVE-2025-2777, CVE-2025-2778) GitHub: Write-up:

Dark Web Informer

18,120 просмотров • 9 месяцев назад

🚨POC RELEASED🚨PoC for SQL Injection leads to RCE in Wordpress released (CVE-2024-27956). #Clearnet #DarkWebInformer #DarkWeb #Exploit #Cyberattack #Cybercrime #Wordpress #Infosec #CTI #CVE202427956 #Vulnerability
1:06

🚨POC RELEASED🚨PoC for SQL Injection leads to RCE in Wordpress released (CVE-2024-27956). #Clearnet #DarkWebInformer #DarkWeb #Exploit #Cyberattack #Cybercrime #Wordpress #Infosec #CTI #CVE202427956 #Vulnerability

Dark Web Informer

51,516 просмотров • 2 лет назад

patch your wordpress. cve-2026-63030 is a pre-auth rce via sql injection. 6.8.5 and below: not affected 6.9.0–6.9.4: affected 7.0.0–7.0.1: affected props to our friends at Assetnote for the crazy find
0:41

patch your wordpress. cve-2026-63030 is a pre-auth rce via sql injection. 6.8.5 and below: not affected 6.9.0–6.9.4: affected 7.0.0–7.0.1: affected props to our friends at Assetnote for the crazy find

Hacktron AI

38,919 просмотров • 27 дней назад

🚨PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE
0:33

🚨PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE

Dark Web Informer

64,458 просмотров • 1 год назад

🚨CVE-2025-24071 // CVE-2025-24054: PoC for NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File Write-up: GitHub:
0:46

🚨CVE-2025-24071 // CVE-2025-24054: PoC for NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File Write-up: GitHub:

Dark Web Informer

28,569 просмотров • 10 месяцев назад

Here's wp2shell 🐚 single-file, zero-dependency PoC for the WordPress core pre-auth RCE (CVE-2026-63030 + CVE-2026-60137) one anonymous HTTP request: REST batch route confusion → unauth SQLi → admin hash → shell default install. no plugins. no login. the best of other public PoCs, unified into one file. scanner + full-chain code + deep dive + lab to play 👇
0:53

Here's wp2shell 🐚 single-file, zero-dependency PoC for the WordPress core pre-auth RCE (CVE-2026-63030 + CVE-2026-60137) one anonymous HTTP request: REST batch route confusion → unauth SQLi → admin hash → shell default install. no plugins. no login. the best of other public PoCs, unified into one file. scanner + full-chain code + deep dive + lab to play 👇

0xSha

28,435 просмотров • 27 дней назад

🚨 wp2shell : pre-auth RCE in WordPress core, reproduced end-to-end. Nested /batch/v1 "double confusion" · (CVE-2026-63030) → WP_Query SQLi · (CVE-2026-60137) → anonymous shell on a stock install. A couple of prompts later: · Opus 4.8 orchestrating, Sonnet agents executing. Exploit dev has gotten scary easy. Patched in 6.9.5 / 7.0.2 - update now. 👇
0:56

🚨 wp2shell : pre-auth RCE in WordPress core, reproduced end-to-end. Nested /batch/v1 "double confusion" · (CVE-2026-63030) → WP_Query SQLi · (CVE-2026-60137) → anonymous shell on a stock install. A couple of prompts later: · Opus 4.8 orchestrating, Sonnet agents executing. Exploit dev has gotten scary easy. Patched in 6.9.5 / 7.0.2 - update now. 👇

Aseem Shrey

33,300 просмотров • 27 дней назад

🚨 CVE-2025-6389: WordPress Sneeit Framework plugin vulnerability currently under active exploitation PoC: ▪️Vulnerability Type: Remote Code Execution (RCE) ▪️CVSS: 9.8 ▪️Published: 11/24/2025 Impact: ▪️Full site compromise ▪️Create admin accounts ▪️Install backdoors/malicious files ▪️Redirect visitors or inject malware Credit:
1:17

🚨 CVE-2025-6389: WordPress Sneeit Framework plugin vulnerability currently under active exploitation PoC: ▪️Vulnerability Type: Remote Code Execution (RCE) ▪️CVSS: 9.8 ▪️Published: 11/24/2025 Impact: ▪️Full site compromise ▪️Create admin accounts ▪️Install backdoors/malicious files ▪️Redirect visitors or inject malware Credit:

Dark Web Informer

16,001 просмотров • 7 месяцев назад

Lotta chatter around #ScreenConnect vulnerabilities now as folks are getting spun up. Fellow Huntress researchers and I were up all night to recreate the auth bypass and RCE exploit. I'm not a huge fan of giving a PoC to threat actors, but I do dig snazzy video demos 😜
0:33

Lotta chatter around #ScreenConnect vulnerabilities now as folks are getting spun up. Fellow Huntress researchers and I were up all night to recreate the auth bypass and RCE exploit. I'm not a huge fan of giving a PoC to threat actors, but I do dig snazzy video demos 😜

John Hammond

79,137 просмотров • 2 лет назад

💥 Remote Code Execution in GitHub Copilot (CVE-2025-53773) 👉 Prompt injection exploit writes to Copilot config file and puts it into YOLO mode, then we get immediate RCE 🔥 Bypasses all user approvals 🛡️ Patch is out today. Update before someone else does it for you
0:32

💥 Remote Code Execution in GitHub Copilot (CVE-2025-53773) 👉 Prompt injection exploit writes to Copilot config file and puts it into YOLO mode, then we get immediate RCE 🔥 Bypasses all user approvals 🛡️ Patch is out today. Update before someone else does it for you

Johann Rehberger

117,565 просмотров • 1 год назад

Last year in Feb I was playing around with some hardware. I got this tp-link AC1200 which was the most purchased router at the time IIRC. I was cleaning up my place and I wanted to dust off and complete my old research before throwing it out. Pre-auth RCE, latest firmware 👀
0:23

Last year in Feb I was playing around with some hardware. I got this tp-link AC1200 which was the most purchased router at the time IIRC. I was cleaning up my place and I wanted to dust off and complete my old research before throwing it out. Pre-auth RCE, latest firmware 👀

b33f | 🇺🇦✊

14,930 просмотров • 4 месяцев назад

🚨 BIG ANNOUNCEMENT! 🚨 Your Boys Are Back! We’re thrilled to reveal The Two Mr Ps in a Podcast LIVE Tour 2025/2026: Let That Be A Lesson! 🎉 Sign up at to get the pre-sale link on Wednesday 4th December! 🎟️ General sale starts Saturday 7th December.
1:00

🚨 BIG ANNOUNCEMENT! 🚨 Your Boys Are Back! We’re thrilled to reveal The Two Mr Ps in a Podcast LIVE Tour 2025/2026: Let That Be A Lesson! 🎉 Sign up at to get the pre-sale link on Wednesday 4th December! 🎟️ General sale starts Saturday 7th December.

Mr P MBE

38,164 просмотров • 1 год назад

We just received a bounty reward from UniFi for reporting a vulnerability affecting UniFi OS devices. As part of the Hakai Labs (Hakai Offsec) research team at QuimeraX Intelligence, we independently identified a Path Traversal vulnerability (CVE-2026-34911) that allowed an attacker with network access to access internal routes on the underlying system without a valid token, exposing a sensitive information. Our research was conducted independently, but the vulnerability we reported could be chained with other vulnerabilities disclosed during the same period, including Improper Access Control and Command Injection flaws reported by other researchers. When combined, these issues lead to a pre-auth RCE affecting multiple UniFi OS products. Affected products include UDM, UDM-Pro, UDM-SE, UDM-Pro-Max, EFG, UDW, UDR, UDR7, Express 7, UNVR, UNVR-Pro, UNVR-Instant, ENVR, UCG-Ultra, UCG-Max, UCG-Fiber, and several other UniFi OS devices. We strongly recommend updating affected systems to the latest available version. Technical details remain under coordinated disclosure, and the only public information currently available is UniFi’s Security Advisory Bulletin.
1:13

We just received a bounty reward from UniFi for reporting a vulnerability affecting UniFi OS devices. As part of the Hakai Labs (Hakai Offsec) research team at QuimeraX Intelligence, we independently identified a Path Traversal vulnerability (CVE-2026-34911) that allowed an attacker with network access to access internal routes on the underlying system without a valid token, exposing a sensitive information. Our research was conducted independently, but the vulnerability we reported could be chained with other vulnerabilities disclosed during the same period, including Improper Access Control and Command Injection flaws reported by other researchers. When combined, these issues lead to a pre-auth RCE affecting multiple UniFi OS products. Affected products include UDM, UDM-Pro, UDM-SE, UDM-Pro-Max, EFG, UDW, UDR, UDR7, Express 7, UNVR, UNVR-Pro, UNVR-Instant, ENVR, UCG-Ultra, UCG-Max, UCG-Fiber, and several other UniFi OS devices. We strongly recommend updating affected systems to the latest available version. Technical details remain under coordinated disclosure, and the only public information currently available is UniFi’s Security Advisory Bulletin.

Carlos Vieira

37,588 просмотров • 2 месяцев назад

JUST ANNOUNCED 🚨— Harlem Globetrotters are back on the road for the 2025 World Tour presented by Jersey Mike's Subs subs. Sign up now to get your pre-sale code at tickets go live worldwide on 9/30 🎟️ #DearHarlemGlobetrotters #GlobetrotterNation
0:30

JUST ANNOUNCED 🚨— Harlem Globetrotters are back on the road for the 2025 World Tour presented by Jersey Mike's Subs subs. Sign up now to get your pre-sale code at tickets go live worldwide on 9/30 🎟️ #DearHarlemGlobetrotters #GlobetrotterNation

Harlem Globetrotters

27,023 просмотров • 1 год назад

🚨 PP Krit's Final Call! This is your absolute last chance to grab the 'PP Krit Undress Zoetrope & Picture Disc Vinyl' #PPKritUndressVinyl #ZoetropeVinyl #PictureDisc #PPKritEntertainment #PPKritt ----- 2 SIDED VINYL ZOETROPE & PICTURE DISC 1 LP VINYL 180 GRAM / 33⅓ RPM POSTER TRACKLIST Side A เสนอตัว (Ooh!) FIRE BOY เส้นเรื่องเดิม (RERUN) Side B ลังเล (Hesitate) ขอโทษละกัน (friend to friend) BONUS TRACK - FIRE BOY (SpatChies Remix) Price: THB 2,450 🛒 Start Pre-order from 21st September 2025 (12:00 PM | GMT+7) to 31st October 2025 (11:59 PM | GMT+7) at Made to order products will be shipped within 90 days after the pre-order period ends 🌟 เงื่อนไขการ Pre-order - เปิด Pre-order สินค้าตั้งแต่วันนี้ - 31 ตุลาคม 2568 (11:59 น. l GMT+7) ผ่านช่องทาง - การสั่งซื้อสินค้าบนเว็บไซต์ สามารถซื้อสินค้าได้ครั้งละ 2 ชิ้น / คำสั่งซื้อ (ราคายังไม่รวมค่าขนส่งสินค้า) 🌟 Pre-order Conditions - Pre-order starts from now - 31st October 2025 (11:59 PM l GMT+7), through the website - Each order placed on the website can include up to 2 items (Shipping costs are not included).
0:29

🚨 PP Krit's Final Call! This is your absolute last chance to grab the 'PP Krit Undress Zoetrope & Picture Disc Vinyl' #PPKritUndressVinyl #ZoetropeVinyl #PictureDisc #PPKritEntertainment #PPKritt ----- 2 SIDED VINYL ZOETROPE & PICTURE DISC 1 LP VINYL 180 GRAM / 33⅓ RPM POSTER TRACKLIST Side A เสนอตัว (Ooh!) FIRE BOY เส้นเรื่องเดิม (RERUN) Side B ลังเล (Hesitate) ขอโทษละกัน (friend to friend) BONUS TRACK - FIRE BOY (SpatChies Remix) Price: THB 2,450 🛒 Start Pre-order from 21st September 2025 (12:00 PM | GMT+7) to 31st October 2025 (11:59 PM | GMT+7) at Made to order products will be shipped within 90 days after the pre-order period ends 🌟 เงื่อนไขการ Pre-order - เปิด Pre-order สินค้าตั้งแต่วันนี้ - 31 ตุลาคม 2568 (11:59 น. l GMT+7) ผ่านช่องทาง - การสั่งซื้อสินค้าบนเว็บไซต์ สามารถซื้อสินค้าได้ครั้งละ 2 ชิ้น / คำสั่งซื้อ (ราคายังไม่รวมค่าขนส่งสินค้า) 🌟 Pre-order Conditions - Pre-order starts from now - 31st October 2025 (11:59 PM l GMT+7), through the website - Each order placed on the website can include up to 2 items (Shipping costs are not included).

PP Krit Entertainment

111,190 просмотров • 9 месяцев назад

🚨ZUCK: "Probably in 2025, Meta, as well as other companies, will have an AI that can effectively be a mid-level engineer that you have at your company that can write code. In the beginning that will be very expensive to run, then at some point a lot of the code we have in our apps will be built by AI engineers instead of people engineers. In my opinion that will augment the people working on it. My view is that in the future people will be so much more creative and freed up to do crazy things."
1:02

🚨ZUCK: "Probably in 2025, Meta, as well as other companies, will have an AI that can effectively be a mid-level engineer that you have at your company that can write code. In the beginning that will be very expensive to run, then at some point a lot of the code we have in our apps will be built by AI engineers instead of people engineers. In my opinion that will augment the people working on it. My view is that in the future people will be so much more creative and freed up to do crazy things."

Autism Capital 🧩

1,666,495 просмотров • 1 год назад

🎯Debunked: ‘Pak False Flag Fiction’ 🚨 Several Pakistan based accounts are calling the 2025 Pahalgam terror attack a ‘false flag’ - a recycled playbook of denial. The pattern is consistent; violence on ground, immediate denial and then a coordinated surge of disinformation to muddy attribution to terrorism emanating from Pakistan. ✅ The similar cycle has always been observed. After the 22 April 2025 Pahalgam Terror Attack, after the 10 November 2025 Red Fort Blast and a pre-emptive narrative play up on 31 March 2026. ✅ The same narratives were amplified within hours… unverified claims, bot-driven hashtags and selective ‘experts’ pushing confusion over clarity. The aim is always to deflect, distort and delay accountability. 🎥 Check the video to understand the ISPR playbook. 🔎Always verify before believing. Don't amplify disinformation. #FalseFlagNarrativeDebunked #PakManufacturedFalseFlag #PahalgamAttack #PakTerrorFiles #JusticeEndures #SindoorAnniversary #NationFirst ADG PI - INDIAN ARMY Rajnath Singh President of India
1:47

🎯Debunked: ‘Pak False Flag Fiction’ 🚨 Several Pakistan based accounts are calling the 2025 Pahalgam terror attack a ‘false flag’ - a recycled playbook of denial. The pattern is consistent; violence on ground, immediate denial and then a coordinated surge of disinformation to muddy attribution to terrorism emanating from Pakistan. ✅ The similar cycle has always been observed. After the 22 April 2025 Pahalgam Terror Attack, after the 10 November 2025 Red Fort Blast and a pre-emptive narrative play up on 31 March 2026. ✅ The same narratives were amplified within hours… unverified claims, bot-driven hashtags and selective ‘experts’ pushing confusion over clarity. The aim is always to deflect, distort and delay accountability. 🎥 Check the video to understand the ISPR playbook. 🔎Always verify before believing. Don't amplify disinformation. #FalseFlagNarrativeDebunked #PakManufacturedFalseFlag #PahalgamAttack #PakTerrorFiles #JusticeEndures #SindoorAnniversary #NationFirst ADG PI - INDIAN ARMY Rajnath Singh President of India

INDIAN ARMY FACT CHECK

163,910 просмотров • 3 месяцев назад

🚨🎉 TON Battleground PRE-SEASON is coming ! 📆 Jan 7th - Jan 27th, 2025 🎁 A prize pool worthy of $1M+ is up for grabs. Complete quests, Climb the game leaderboard, and Gain points ! 🔫🔥 🔗 Game: 🔗 Community: 🔗 Our $500 USDT Launch Celebration giveaway: What’s in the prize pool? 🎁 The prize pool is composed of in-game Gold and $TBG tokens. How to win rewards? 👉 Rewards are calculated based on the points you gained during the January pre-season. 👉 Your points accumulated is based on a few factors including: 1️⃣ Time spent in the TON Battleground game 2️⃣ Number of kills 3️⃣ Number of headshots 4️⃣ Quests completed 5️⃣ Your number of successful referrals ‼️ Rewards are high for the pre-season, and it only happens once… so don’t miss it ! 🚀
0:25

🚨🎉 TON Battleground PRE-SEASON is coming ! 📆 Jan 7th - Jan 27th, 2025 🎁 A prize pool worthy of $1M+ is up for grabs. Complete quests, Climb the game leaderboard, and Gain points ! 🔫🔥 🔗 Game: 🔗 Community: 🔗 Our $500 USDT Launch Celebration giveaway: What’s in the prize pool? 🎁 The prize pool is composed of in-game Gold and $TBG tokens. How to win rewards? 👉 Rewards are calculated based on the points you gained during the January pre-season. 👉 Your points accumulated is based on a few factors including: 1️⃣ Time spent in the TON Battleground game 2️⃣ Number of kills 3️⃣ Number of headshots 4️⃣ Quests completed 5️⃣ Your number of successful referrals ‼️ Rewards are high for the pre-season, and it only happens once… so don’t miss it ! 🚀

TON Battleground

58,731 просмотров • 1 год назад

🚨 POC for CVE-2025-55182 that works on Next.js 16.0.6 Here are the exact, battle-tested queries you need — Censys, Shodan, FOFA, ZoomEye, Quake, BinaryEdge, and Nuclei matchers — all tuned specifically to find Next.js RSC / React Server Components instances vulnerable to CVE-2025-55182 (React2Shell). ⸻ ✅ 1. SHODAN QUERY (380K+ ASSETS) Find all servers leaking RSC Server Actions: Basic Query "Vary: RSC, Next-Router-State-Tree" More Aggressive Variant http.headers.vary:"RSC" AND http.headers.vary:"Next-Router-State-Tree" Superwide Coverage "Next-Router-State-Tree" OR "x-nextjs-cache" OR "server-actions" OR "__RSC__" Focused on Vulnerable Cache Indicators "x-nextjs-cache: HIT" "Next-Router-State-Tree" ⸻ ✅ 2. CENSYS QUERY (270K+ ASSETS) (match the screenshot you posted) Exact Censys Search services.http.response.headers.vary: "RSC, Next-Router-State-Tree" Safer Multi-Matcher services.http.response.headers.vary: "RSC" AND services.http.response.headers.vary: "Next-Router-State-Tree" Detect RSC Payload Exposure (critical) services.http.response.body: "__RSC__" Detect Flight Data Leaks services.http.response.body: "server-reference-manifest" ⸻ ✅ 3. FOFA QUERY (CHINA’S OSINT GIANT) (VERY POWERFUL for RSC/Next.js) Exact Header Based header="Next-Router-State-Tree" && header="RSC" Alternative (match screenshot patterns) "Next-Router-State-Tree" && "x-nextjs-cache" For massive result count body="__RSC__" || header="server-actions" ⸻ ✅ 4. ZOOMEYE QUERY ZoomEye scans often catch Node.js apps Shodan misses. Exact Unicode-Ready Query "Next-Router-State-Tree" && "RSC" Advanced app:"Next.js" && header:"RSC" ⸻ ✅ 5. QUAKE SEARCH (360K+ MATCHES) header:"Next-Router-State-Tree" AND header:"RSC" ⸻ ✅ 6. BINARYEDGE QUERY http.response.headers.vary:"Next-Router-State-Tree" ⸻ ✅ 7. QUERY headers:"Next-Router-State-Tree" && headers:"RSC" ⸻ 🎯 8. NUCLEI MATCHER (to detect RSC without scanning payloads) If you want a nuclei detector you can plug into your scanner: matchers: - type: word part: header words: - "RSC" - "Next-Router-State-Tree" - "server-actions" - "__RSC__" ⸻ 🚩 BONUS — THE MOST ADVANCED CROSS-ENGINE QUERY Use this when you want maximum global coverage: "Next-Router-State-Tree" OR "RSC" OR "__RSC__" OR "server-actions" OR "x-nextjs-cache" OR "Next-Server-Action" This identifies: •Next.js App Router •RSC endpoints •Server Actions •Flight data APIs •Pages exposing cache HITs (required for exploitation) •Systems likely vulnerable to CVE-2025-55182 (React2Shell)
0:32

🚨 POC for CVE-2025-55182 that works on Next.js 16.0.6 Here are the exact, battle-tested queries you need — Censys, Shodan, FOFA, ZoomEye, Quake, BinaryEdge, and Nuclei matchers — all tuned specifically to find Next.js RSC / React Server Components instances vulnerable to CVE-2025-55182 (React2Shell). ⸻ ✅ 1. SHODAN QUERY (380K+ ASSETS) Find all servers leaking RSC Server Actions: Basic Query "Vary: RSC, Next-Router-State-Tree" More Aggressive Variant http.headers.vary:"RSC" AND http.headers.vary:"Next-Router-State-Tree" Superwide Coverage "Next-Router-State-Tree" OR "x-nextjs-cache" OR "server-actions" OR "__RSC__" Focused on Vulnerable Cache Indicators "x-nextjs-cache: HIT" "Next-Router-State-Tree" ⸻ ✅ 2. CENSYS QUERY (270K+ ASSETS) (match the screenshot you posted) Exact Censys Search services.http.response.headers.vary: "RSC, Next-Router-State-Tree" Safer Multi-Matcher services.http.response.headers.vary: "RSC" AND services.http.response.headers.vary: "Next-Router-State-Tree" Detect RSC Payload Exposure (critical) services.http.response.body: "__RSC__" Detect Flight Data Leaks services.http.response.body: "server-reference-manifest" ⸻ ✅ 3. FOFA QUERY (CHINA’S OSINT GIANT) (VERY POWERFUL for RSC/Next.js) Exact Header Based header="Next-Router-State-Tree" && header="RSC" Alternative (match screenshot patterns) "Next-Router-State-Tree" && "x-nextjs-cache" For massive result count body="__RSC__" || header="server-actions" ⸻ ✅ 4. ZOOMEYE QUERY ZoomEye scans often catch Node.js apps Shodan misses. Exact Unicode-Ready Query "Next-Router-State-Tree" && "RSC" Advanced app:"Next.js" && header:"RSC" ⸻ ✅ 5. QUAKE SEARCH (360K+ MATCHES) header:"Next-Router-State-Tree" AND header:"RSC" ⸻ ✅ 6. BINARYEDGE QUERY http.response.headers.vary:"Next-Router-State-Tree" ⸻ ✅ 7. QUERY headers:"Next-Router-State-Tree" && headers:"RSC" ⸻ 🎯 8. NUCLEI MATCHER (to detect RSC without scanning payloads) If you want a nuclei detector you can plug into your scanner: matchers: - type: word part: header words: - "RSC" - "Next-Router-State-Tree" - "server-actions" - "__RSC__" ⸻ 🚩 BONUS — THE MOST ADVANCED CROSS-ENGINE QUERY Use this when you want maximum global coverage: "Next-Router-State-Tree" OR "RSC" OR "__RSC__" OR "server-actions" OR "x-nextjs-cache" OR "Next-Server-Action" This identifies: •Next.js App Router •RSC endpoints •Server Actions •Flight data APIs •Pages exposing cache HITs (required for exploitation) •Systems likely vulnerable to CVE-2025-55182 (React2Shell)

X

10,544 просмотров • 8 месяцев назад