Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

‼️CVE-2026-0740 - Ninja Forms File Uploads up to v3.3.26 - Unauthenticated Arbitrary File Upload PoC:

DarkWebInformer's profile picture

Dark Web Informer

223,381 subscribers

24,746 görüntüleme • 3 ay önce •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Yorum

Yorum bulunmuyor

Orijinal gönderinin yorumları burada görünecek

Benzer Videolar

‼️ CVE-2026-22812: OpenCode v1.0.216 - Unauthenticated RCE CVSS: 8.8 CVE Published: January 12th, 2026 PoC/Exploit: Advisory/PoC: Original Post:
3:47

‼️ CVE-2026-22812: OpenCode v1.0.216 - Unauthenticated RCE CVSS: 8.8 CVE Published: January 12th, 2026 PoC/Exploit: Advisory/PoC: Original Post:

Dark Web Informer

28,847 görüntüleme • 5 ay önce

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:
3:26

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:

Dark Web Informer

22,486 görüntüleme • 1 yıl önce

🚨CVE-2025-24071 // CVE-2025-24054: PoC for NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File Write-up: GitHub:
0:46

🚨CVE-2025-24071 // CVE-2025-24054: PoC for NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File Write-up: GitHub:

Dark Web Informer

28,528 görüntüleme • 9 ay önce

‼️ CVE-2025-1974: Kubernetes IngressNightmare Vulnerability CVSS: 9.8 PoC: PoC Published: March 26th, 2026
0:51

‼️ CVE-2025-1974: Kubernetes IngressNightmare Vulnerability CVSS: 9.8 PoC: PoC Published: March 26th, 2026

Dark Web Informer

16,169 görüntüleme • 5 ay önce

‼️ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: Gaurav Bhattacharjee
3:36

‼️ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: Gaurav Bhattacharjee

Dark Web Informer

46,888 görüntüleme • 22 gün önce

💥 We have reproduced both CVE-2023–29357 and CVE-2023–24955 in Microsoft SharePoint. The chain allows unauthenticated users to execute arbitrary commands on the server. Update your software ASAP!
0:21

💥 We have reproduced both CVE-2023–29357 and CVE-2023–24955 in Microsoft SharePoint. The chain allows unauthenticated users to execute arbitrary commands on the server. Update your software ASAP!

PT SWARM

58,178 görüntüleme • 2 yıl önce

Blind file read to RCE in PHP - without access to files, we need to build reliable arbitrary read primitive from the ISO-2022-CN-EXT overflow (CVE-2024-2961) #CNEXT
2:17

Blind file read to RCE in PHP - without access to files, we need to build reliable arbitrary read primitive from the ISO-2022-CN-EXT overflow (CVE-2024-2961) #CNEXT

Charles Fol

34,225 görüntüleme • 1 yıl önce

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability Check out the new security vulnerability I discovered in Windows, which I believe is potentially being sold in the wild. (fixed patch tuesday) Blog post: PoC:
0:46

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability Check out the new security vulnerability I discovered in Windows, which I believe is potentially being sold in the wild. (fixed patch tuesday) Blog post: PoC:

0x6rss

45,809 görüntüleme • 1 yıl önce

🚨CVE-2025-25257: Pre-Auth SQL Injection to RCE - Fortinet FortiWeb Fabric Connector PoC: Write-up:
0:37

🚨CVE-2025-25257: Pre-Auth SQL Injection to RCE - Fortinet FortiWeb Fabric Connector PoC: Write-up:

Dark Web Informer

13,749 görüntüleme • 1 yıl önce

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root
0:22

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root

Dark Web Informer

18,534 görüntüleme • 2 ay önce

How to upload and set up scroll animation for a PNG sequence on Framer Free remix file 👇👇👇
2:32

How to upload and set up scroll animation for a PNG sequence on Framer Free remix file 👇👇👇

Chien Pham

10,223 görüntüleme • 1 yıl önce

‼️ CVE-2026-34621: Adobe Acrobat 2026 Prototype Pollution & JS Injection Chain GitHub: Write-up:
0:35

‼️ CVE-2026-34621: Adobe Acrobat 2026 Prototype Pollution & JS Injection Chain GitHub: Write-up:

Dark Web Informer

29,442 görüntüleme • 2 ay önce

This JSON file will change how you write threads forever... I analyzed threads with millions of views and turned the winning patterns into a context file you can upload to Claude/GPT. This JSON context file contains hook templates, thread structures, and psychological triggers you upload to Claude/GPT + source docs with original viral tweets. Follow + comment "FILE" and I'll DM it.
1:40

This JSON file will change how you write threads forever... I analyzed threads with millions of views and turned the winning patterns into a context file you can upload to Claude/GPT. This JSON context file contains hook templates, thread structures, and psychological triggers you upload to Claude/GPT + source docs with original viral tweets. Follow + comment "FILE" and I'll DM it.

Tom

54,384 görüntüleme • 1 yıl önce

New attack vector: FileFix. A phishing trick that executes PowerShell straight from your browser no Run dialog, no pop-ups. Just a fake file path + clipboard + File Explorer. Red teamers, this one’s wild. 📽️ PoC + write-up:
1:10

New attack vector: FileFix. A phishing trick that executes PowerShell straight from your browser no Run dialog, no pop-ups. Just a fake file path + clipboard + File Explorer. Red teamers, this one’s wild. 📽️ PoC + write-up:

IT Guy

107,652 görüntüleme • 1 yıl önce

‼️ M6Plus Proof of Concept (POC) CVE-2026-4583 (Missing Replay Protection) The M6PLUS Bluetooth protocol lacks cryptographic authentication mechanisms. The only integrity check is a trivial single-byte XOR checksum, which can be easily recalculated by an attacker. This allows any Bluetooth device to inject arbitrary transaction commands without the terminal being able to verify the command's origin or authenticity.
1:12

‼️ M6Plus Proof of Concept (POC) CVE-2026-4583 (Missing Replay Protection) The M6PLUS Bluetooth protocol lacks cryptographic authentication mechanisms. The only integrity check is a trivial single-byte XOR checksum, which can be easily recalculated by an attacker. This allows any Bluetooth device to inject arbitrary transaction commands without the terminal being able to verify the command's origin or authenticity.

Dark Web Informer

48,688 görüntüleme • 3 ay önce

🔥Arbitrary Code Execution in AWS Kiro with Indirect Prompt Injection Multiple ways actually... 1) Write to settings.json to put Kiro into YOLO mode by adding: "kiroAgent.trustedCommands": ["*"] -> immediate arbitrary OS command execution without user approval 2) Write to kiro's mcp.json file to add a fake mcp server that runs arbitrary python code -> immediate arbitrary code execution AWS fixed the issues quickly, but no CVE issued. If you use Kiro make sure to run the latest version, before someone else updates it for you.
12:01

🔥Arbitrary Code Execution in AWS Kiro with Indirect Prompt Injection Multiple ways actually... 1) Write to settings.json to put Kiro into YOLO mode by adding: "kiroAgent.trustedCommands": ["*"] -> immediate arbitrary OS command execution without user approval 2) Write to kiro's mcp.json file to add a fake mcp server that runs arbitrary python code -> immediate arbitrary code execution AWS fixed the issues quickly, but no CVE issued. If you use Kiro make sure to run the latest version, before someone else updates it for you.

Johann Rehberger

12,632 görüntüleme • 10 ay önce

🚀 Last night, I came up with an amazing idea and implemented it using Cursor: fig4ai. Run `npx fig2ai ` This will generate a `.designrules` file for your project. Using this file, your Figma file is transformed into an AI context that you can refer to for any kind of front-end work. It's open sourced on: See the PoC video:
0:37

🚀 Last night, I came up with an amazing idea and implemented it using Cursor: fig4ai. Run `npx fig2ai ` This will generate a `.designrules` file for your project. Using this file, your Figma file is transformed into an AI context that you can refer to for any kind of front-end work. It's open sourced on: See the PoC video:

fatih kadir akın

152,431 görüntüleme • 1 yıl önce

One more left in our back pocket... FILE UPLOADS ARE HERE 🚀 Users can now chat directly with their files—PDFs, spreadsheets, and any text file—across several file formats (.pdf, .docx, .xlsx, .csv, .pptx, .txt). Drag-and-drop or tap the 📎 icon to choose your desired files!
1:26

One more left in our back pocket... FILE UPLOADS ARE HERE 🚀 Users can now chat directly with their files—PDFs, spreadsheets, and any text file—across several file formats (.pdf, .docx, .xlsx, .csv, .pptx, .txt). Drag-and-drop or tap the 📎 icon to choose your desired files!

Sentient

62,401 görüntüleme • 11 ay önce