Loading video...

Video Failed to Load

Go Home

CVE-2026-112621 POC

Xplo8E's profile picture

vinaykumar🍁

1,734 subscribers

229,388 views • 13 days ago •via X (Twitter)

Science & Technology
LIVE

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

Just dropped a PoC for CVE-2026-43786. Local privilege escalation to root through macOS CoreServices. Patched in Sequoia 15.8, Tahoe 26.7 and Golden Gate 27. Malwation
0:19

Just dropped a PoC for CVE-2026-43786. Local privilege escalation to root through macOS CoreServices. Patched in Sequoia 15.8, Tahoe 26.7 and Golden Gate 27. Malwation

Kağan IŞILDAK

12,079 views • 1 month ago

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ, exploiting the vm:// protocol to achieve Remote Code Execution
0:11

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ, exploiting the vm:// protocol to achieve Remote Code Execution

pyn3rd

21,018 views • 6 months ago

Rooting Android: Exploiting Your GPU On Smartphone (CVE-2024-23380) by Eugene Rodionov PoC exploit is not available for download. [slides] #BlackHat
0:19

Rooting Android: Exploiting Your GPU On Smartphone (CVE-2024-23380) by Eugene Rodionov PoC exploit is not available for download. [slides] #BlackHat

Mobile Hacker

31,208 views • 2 years ago

⚠️CVE-2026-85706 (CVSS 10.0)⚠️ Your GitLab will hand a stranger its files. 😱 No login. No account. An attacker just URL-encodes one letter of commits → %63ommits, and GitLab-Workhorse waves the request through — so a single unauthenticated POST to the repository commits API reads files straight off the server filesystem. Config, internal logs, source paths, versions… all without ever signing in. Already in CISA KEV — exploited in the wild. 🚨 If you self-host GitLab, patch to 19.1.8 / 19.2.6 / 19.3.2 now. 🔥PoC + setup: #GitLab #ArbitraryFileRead #CVE #PoC #Exploit #CyberSecurity #CVE_2026_85706
0:11

⚠️CVE-2026-85706 (CVSS 10.0)⚠️ Your GitLab will hand a stranger its files. 😱 No login. No account. An attacker just URL-encodes one letter of commits → %63ommits, and GitLab-Workhorse waves the request through — so a single unauthenticated POST to the repository commits API reads files straight off the server filesystem. Config, internal logs, source paths, versions… all without ever signing in. Already in CISA KEV — exploited in the wild. 🚨 If you self-host GitLab, patch to 19.1.8 / 19.2.6 / 19.3.2 now. 🔥PoC + setup: #GitLab #ArbitraryFileRead #CVE #PoC #Exploit #CyberSecurity #CVE_2026_85706

EQST

173,090 views • 1 month ago

I was able to reproduce the MacOS screensharing pre-auth RCE. Patched in 26.6.1 (CVE-2026-65400)
0:11

I was able to reproduce the MacOS screensharing pre-auth RCE. Patched in 26.6.1 (CVE-2026-65400)

matteyeux

24,885 views • 1 month ago

Video of my PoC for CVE-2023-43641: out-of-bounds array access in libcue. libcue is used by tracker-miners, which automatically scans new files in ~/Downloads, so the bug is triggered by downloading a file.
0:10

Video of my PoC for CVE-2023-43641: out-of-bounds array access in libcue. libcue is used by tracker-miners, which automatically scans new files in ~/Downloads, so the bug is triggered by downloading a file.

Kev

128,698 views • 3 years ago

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in replies
0:18

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in replies

chebuya

89,505 views • 1 year ago

reported a chrome fullchain (web -> shell) on pixel 10 to google. got a 9.6 cve (cve-2026-87464) and a fix in chrome. now they bend the rules and refuse to pay the fullchain bonus bc one of the vulns in the chain was an unpatched nday. total payout: $2.5k. despite cve + shell :|
0:19

reported a chrome fullchain (web -> shell) on pixel 10 to google. got a 9.6 cve (cve-2026-87464) and a fix in chrome. now they bend the rules and refuse to pay the fullchain bonus bc one of the vulns in the chain was an unpatched nday. total payout: $2.5k. despite cve + shell :|

lexi <img src=x onerror=alert(1)>

273,484 views • 1 month ago

I've confirmed Samsung's MagicINFO 21.1050 is VULNERABLE to the publicly reported POC in the blog below. The media is reporting this as CVE-2024-7399, but if it is then the patch is incomplete. There is currently NO PATCH AVAILABLE!
0:17

I've confirmed Samsung's MagicINFO 21.1050 is VULNERABLE to the publicly reported POC in the blog below. The media is reporting this as CVE-2024-7399, but if it is then the patch is incomplete. There is currently NO PATCH AVAILABLE!

Jai Minton

15,229 views • 1 year ago

Exploit Demo & Analysis Article by 78ResearchLab(78ResearchLab) CVE-2026-20817 : Windows Error Reporting(WER) Service Elevation of Privilege Vulnerability #CVE_2026_20817 #LPE #Windows
0:18

Exploit Demo & Analysis Article by 78ResearchLab(78ResearchLab) CVE-2026-20817 : Windows Error Reporting(WER) Service Elevation of Privilege Vulnerability #CVE_2026_20817 #LPE #Windows

Moonbeom(Daniel)

13,380 views • 9 months ago

📞 Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk bronzebee Read the write-up:
0:10

📞 Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk bronzebee Read the write-up:

PT SWARM

34,631 views • 9 months ago

“se um homem fala pra mim tome poc poc eu mando ele embora” KKKKKKKKKKKKKK
0:12

“se um homem fala pra mim tome poc poc eu mando ele embora” KKKKKKKKKKKKKK

sari

117,879 views • 7 months ago

“POC solidarity”
0:17

“POC solidarity”

Kampa🧩

145,781 views • 7 months ago

Exim 4.99.3 is out, patching CVE-2026-45185, a critical RCE found by XBOW! Check out our post linked in the reply; I'll summarize some details in this thread.
0:14

Exim 4.99.3 is out, patching CVE-2026-45185, a critical RCE found by XBOW! Check out our post linked in the reply; I'll summarize some details in this thread.

Brendan Dolan-Gavitt

33,710 views • 6 months ago

Today's exploit is for the latest Fedora 44, a UAF in netfilter, CVE-2026-52912. It was introduced in Mar 2016 and fixed upstream in May 2026. Discovered and exploited by the NebuSec security pipeline. (RANDOM_KMALLOC_CACHES + SELinux) Exp source code:
0:13

Today's exploit is for the latest Fedora 44, a UAF in netfilter, CVE-2026-52912. It was introduced in Mar 2016 and fixed upstream in May 2026. Discovered and exploited by the NebuSec security pipeline. (RANDOM_KMALLOC_CACHES + SELinux) Exp source code:

NebuSec

12,030 views • 2 months ago

o peter poc
0:13

o peter poc

matthel 🦢

28,261 views • 5 days ago

Least favorite weekend... bye far #GoCougs #CVE #byefelicia #pleasecomeback
0:14

Least favorite weekend... bye far #GoCougs #CVE #byefelicia #pleasecomeback

Butch T. Cougar

11,727 views • 3 years ago