Loading video...

Video Failed to Load

Go Home

‼️CVE-2026-0740 - Ninja Forms File Uploads up to v3.3.26 - Unauthenticated Arbitrary File Upload PoC:

DarkWebInformer's profile picture

Dark Web Informer

223,581 subscribers

24,752 views • 3 months ago •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

‼️ CVE-2026-22812: OpenCode v1.0.216 - Unauthenticated RCE CVSS: 8.8 CVE Published: January 12th, 2026 PoC/Exploit: Advisory/PoC: Original Post:
3:47

‼️ CVE-2026-22812: OpenCode v1.0.216 - Unauthenticated RCE CVSS: 8.8 CVE Published: January 12th, 2026 PoC/Exploit: Advisory/PoC: Original Post:

Dark Web Informer

28,847 views • 6 months ago

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:
3:26

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:

Dark Web Informer

22,498 views • 1 year ago

🚨CVE-2025-24071 // CVE-2025-24054: PoC for NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File Write-up: GitHub:
0:46

🚨CVE-2025-24071 // CVE-2025-24054: PoC for NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File Write-up: GitHub:

Dark Web Informer

28,569 views • 9 months ago

‼️ CVE-2025-1974: Kubernetes IngressNightmare Vulnerability CVSS: 9.8 PoC: PoC Published: March 26th, 2026
0:51

‼️ CVE-2025-1974: Kubernetes IngressNightmare Vulnerability CVSS: 9.8 PoC: PoC Published: March 26th, 2026

Dark Web Informer

16,169 views • 5 months ago

‼️ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: Gaurav Bhattacharjee
3:36

‼️ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: Gaurav Bhattacharjee

Dark Web Informer

46,975 views • 1 month ago

💥 We have reproduced both CVE-2023–29357 and CVE-2023–24955 in Microsoft SharePoint. The chain allows unauthenticated users to execute arbitrary commands on the server. Update your software ASAP!
0:21

💥 We have reproduced both CVE-2023–29357 and CVE-2023–24955 in Microsoft SharePoint. The chain allows unauthenticated users to execute arbitrary commands on the server. Update your software ASAP!

PT SWARM

58,178 views • 2 years ago

Blind file read to RCE in PHP - without access to files, we need to build reliable arbitrary read primitive from the ISO-2022-CN-EXT overflow (CVE-2024-2961) #CNEXT
2:17

Blind file read to RCE in PHP - without access to files, we need to build reliable arbitrary read primitive from the ISO-2022-CN-EXT overflow (CVE-2024-2961) #CNEXT

Charles Fol

34,225 views • 1 year ago

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability Check out the new security vulnerability I discovered in Windows, which I believe is potentially being sold in the wild. (fixed patch tuesday) Blog post: PoC:
0:46

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability Check out the new security vulnerability I discovered in Windows, which I believe is potentially being sold in the wild. (fixed patch tuesday) Blog post: PoC:

0x6rss

45,819 views • 1 year ago

🚨CVE-2025-25257: Pre-Auth SQL Injection to RCE - Fortinet FortiWeb Fabric Connector PoC: Write-up:
0:37

🚨CVE-2025-25257: Pre-Auth SQL Injection to RCE - Fortinet FortiWeb Fabric Connector PoC: Write-up:

Dark Web Informer

13,749 views • 1 year ago

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root
0:22

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root

Dark Web Informer

18,534 views • 2 months ago

How to upload and set up scroll animation for a PNG sequence on Framer Free remix file 👇👇👇
2:32

How to upload and set up scroll animation for a PNG sequence on Framer Free remix file 👇👇👇

Chien Pham

10,223 views • 1 year ago

‼️ CVE-2026-34621: Adobe Acrobat 2026 Prototype Pollution & JS Injection Chain GitHub: Write-up:
0:35

‼️ CVE-2026-34621: Adobe Acrobat 2026 Prototype Pollution & JS Injection Chain GitHub: Write-up:

Dark Web Informer

29,442 views • 2 months ago

This JSON file will change how you write threads forever... I analyzed threads with millions of views and turned the winning patterns into a context file you can upload to Claude/GPT. This JSON context file contains hook templates, thread structures, and psychological triggers you upload to Claude/GPT + source docs with original viral tweets. Follow + comment "FILE" and I'll DM it.
1:40

This JSON file will change how you write threads forever... I analyzed threads with millions of views and turned the winning patterns into a context file you can upload to Claude/GPT. This JSON context file contains hook templates, thread structures, and psychological triggers you upload to Claude/GPT + source docs with original viral tweets. Follow + comment "FILE" and I'll DM it.

Tom

54,395 views • 1 year ago

New attack vector: FileFix. A phishing trick that executes PowerShell straight from your browser no Run dialog, no pop-ups. Just a fake file path + clipboard + File Explorer. Red teamers, this one’s wild. 📽️ PoC + write-up:
1:10

New attack vector: FileFix. A phishing trick that executes PowerShell straight from your browser no Run dialog, no pop-ups. Just a fake file path + clipboard + File Explorer. Red teamers, this one’s wild. 📽️ PoC + write-up:

IT Guy

107,652 views • 1 year ago

‼️ M6Plus Proof of Concept (POC) CVE-2026-4583 (Missing Replay Protection) The M6PLUS Bluetooth protocol lacks cryptographic authentication mechanisms. The only integrity check is a trivial single-byte XOR checksum, which can be easily recalculated by an attacker. This allows any Bluetooth device to inject arbitrary transaction commands without the terminal being able to verify the command's origin or authenticity.
1:12

‼️ M6Plus Proof of Concept (POC) CVE-2026-4583 (Missing Replay Protection) The M6PLUS Bluetooth protocol lacks cryptographic authentication mechanisms. The only integrity check is a trivial single-byte XOR checksum, which can be easily recalculated by an attacker. This allows any Bluetooth device to inject arbitrary transaction commands without the terminal being able to verify the command's origin or authenticity.

Dark Web Informer

48,783 views • 3 months ago

🔥Arbitrary Code Execution in AWS Kiro with Indirect Prompt Injection Multiple ways actually... 1) Write to settings.json to put Kiro into YOLO mode by adding: "kiroAgent.trustedCommands": ["*"] -> immediate arbitrary OS command execution without user approval 2) Write to kiro's mcp.json file to add a fake mcp server that runs arbitrary python code -> immediate arbitrary code execution AWS fixed the issues quickly, but no CVE issued. If you use Kiro make sure to run the latest version, before someone else updates it for you.
12:01

🔥Arbitrary Code Execution in AWS Kiro with Indirect Prompt Injection Multiple ways actually... 1) Write to settings.json to put Kiro into YOLO mode by adding: "kiroAgent.trustedCommands": ["*"] -> immediate arbitrary OS command execution without user approval 2) Write to kiro's mcp.json file to add a fake mcp server that runs arbitrary python code -> immediate arbitrary code execution AWS fixed the issues quickly, but no CVE issued. If you use Kiro make sure to run the latest version, before someone else updates it for you.

Johann Rehberger

12,632 views • 11 months ago

🚀 Last night, I came up with an amazing idea and implemented it using Cursor: fig4ai. Run `npx fig2ai ` This will generate a `.designrules` file for your project. Using this file, your Figma file is transformed into an AI context that you can refer to for any kind of front-end work. It's open sourced on: See the PoC video:
0:37

🚀 Last night, I came up with an amazing idea and implemented it using Cursor: fig4ai. Run `npx fig2ai ` This will generate a `.designrules` file for your project. Using this file, your Figma file is transformed into an AI context that you can refer to for any kind of front-end work. It's open sourced on: See the PoC video:

fatih kadir akın

152,431 views • 1 year ago

One more left in our back pocket... FILE UPLOADS ARE HERE 🚀 Users can now chat directly with their files—PDFs, spreadsheets, and any text file—across several file formats (.pdf, .docx, .xlsx, .csv, .pptx, .txt). Drag-and-drop or tap the 📎 icon to choose your desired files!
1:26

One more left in our back pocket... FILE UPLOADS ARE HERE 🚀 Users can now chat directly with their files—PDFs, spreadsheets, and any text file—across several file formats (.pdf, .docx, .xlsx, .csv, .pptx, .txt). Drag-and-drop or tap the 📎 icon to choose your desired files!

Sentient

62,401 views • 1 year ago