Загрузка видео...

Не удалось загрузить видео

На главную

CVE-2026-20841-POC REMOTE CODE EXECUTION VULNERABILITY IN NOTEPAD VERSION 11 Mr Phil Ghana 🇬🇭 Nana Sei Anyemedu

h4ruk7's profile picture

H4RUK1 KIRA🇯🇵

10,460 subscribers

21,113 просмотров • 8 месяцев назад •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 2

Фото профиля NtTestAlert
NtTestAlert8 месяцев назад

@mrphilghana @RedHatPentester Cmon this is not RCE...

Фото профиля H4RUK1 KIRA🇯🇵
H4RUK1 KIRA🇯🇵8 месяцев назад

@mrphilghana @RedHatPentester it is this the poc from a chinese guy

Похожие видео

🚨CVE-2024-21413 - Microsoft Outlook Remote Code Execution Vulnerability PoC (no audio) Credit:
2:37

🚨CVE-2024-21413 - Microsoft Outlook Remote Code Execution Vulnerability PoC (no audio) Credit:

Dark Web Informer

69,383 просмотров • 1 год назад

CVE-2024-29269: Remote Code Execution PoC Credit:
3:00

CVE-2024-29269: Remote Code Execution PoC Credit:

Dark Web Informer

72,035 просмотров • 1 год назад

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:
3:26

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:

Dark Web Informer

22,498 просмотров • 1 год назад

🚨CVE-2025-26666: Windows Media Remote Code Execution Vulnerability Credit:
1:39

🚨CVE-2025-26666: Windows Media Remote Code Execution Vulnerability Credit:

Dark Web Informer

13,379 просмотров • 1 год назад

It's the bug of the month for June 2026! CVE-2026-45657 - A CVSS 9.8 vulnerability in Kernel that allows remote, unauthenticated code execution at SYSTEM without user interaction. Yikes!
0:38

It's the bug of the month for June 2026! CVE-2026-45657 - A CVSS 9.8 vulnerability in Kernel that allows remote, unauthenticated code execution at SYSTEM without user interaction. Yikes!

TrendAI Zero Day Initiative

34,389 просмотров • 4 месяцев назад

Windows Notepad.exe Now Has Remote Code Execution Vulnerability First Notepad++ gets hijacked by Chinese hackers, now Notepad.exe gets a "Severe" CVE. Apparently editing a plain text file is the most dangerous thing you can do on Windows.
12:41

Windows Notepad.exe Now Has Remote Code Execution Vulnerability First Notepad++ gets hijacked by Chinese hackers, now Notepad.exe gets a "Severe" CVE. Apparently editing a plain text file is the most dangerous thing you can do on Windows.

The Lunduke Journal

17,782 просмотров • 8 месяцев назад

🚨 CVE-2025-6389: WordPress Sneeit Framework plugin vulnerability currently under active exploitation PoC: ▪️Vulnerability Type: Remote Code Execution (RCE) ▪️CVSS: 9.8 ▪️Published: 11/24/2025 Impact: ▪️Full site compromise ▪️Create admin accounts ▪️Install backdoors/malicious files ▪️Redirect visitors or inject malware Credit:
1:17

🚨 CVE-2025-6389: WordPress Sneeit Framework plugin vulnerability currently under active exploitation PoC: ▪️Vulnerability Type: Remote Code Execution (RCE) ▪️CVSS: 9.8 ▪️Published: 11/24/2025 Impact: ▪️Full site compromise ▪️Create admin accounts ▪️Install backdoors/malicious files ▪️Redirect visitors or inject malware Credit:

Dark Web Informer

16,083 просмотров • 9 месяцев назад

‼️ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: Gaurav Bhattacharjee
3:36

‼️ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: Gaurav Bhattacharjee

Dark Web Informer

47,445 просмотров • 3 месяцев назад

Here is ENLBufferPwn (CVE ID pending), a severe vulnerability in many first party 3DS, Wii U and Switch games. It allows remote code execution in a victim console by just having an online game session with an attacker. Vulnerability report: 🧵(1/7)
0:27

Here is ENLBufferPwn (CVE ID pending), a severe vulnerability in many first party 3DS, Wii U and Switch games. It allows remote code execution in a victim console by just having an online game session with an attacker. Vulnerability report: 🧵(1/7)

PabloMK7

591,174 просмотров • 3 лет назад

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.
1:28

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.

Dark Web Informer

71,789 просмотров • 3 месяцев назад

Here’s the Age of Empires RCE from yesterday’s Patch Tuesday: CVE-2026-50663. Join an attacker’s lobby, (auto-)accept UCG, and you get remote code execution.
0:22

Here’s the Age of Empires RCE from yesterday’s Patch Tuesday: CVE-2026-50663. Join an attacker’s lobby, (auto-)accept UCG, and you get remote code execution.

Rick de Jager

495,603 просмотров • 3 месяцев назад

🤬CVE-2025-49113: Post‑Auth Remote Code Execution in Roundcube via PHP Object Deserialization FOFA Link: FOFA Query: app="roundcube" Results: 51,584,735 Advisory: CVSS: 9.9
0:28

🤬CVE-2025-49113: Post‑Auth Remote Code Execution in Roundcube via PHP Object Deserialization FOFA Link: FOFA Query: app="roundcube" Results: 51,584,735 Advisory: CVSS: 9.9

X

14,985 просмотров • 1 год назад

‼️🚨 MAJOR IMPACT: AI just found an 18-year-old NGINX critical remote code execution vulnerability. It has been disclosed on GitHub including PoC code. - Affects NGINX 0.6.27 through 1.30.0 - Triggered via the rewrite and set directives in config - Update NGINX ASAP - NGINX is a widely used HTTP web server, be sure to check its prevalence in other products
0:36

‼️🚨 MAJOR IMPACT: AI just found an 18-year-old NGINX critical remote code execution vulnerability. It has been disclosed on GitHub including PoC code. - Affects NGINX 0.6.27 through 1.30.0 - Triggered via the rewrite and set directives in config - Update NGINX ASAP - NGINX is a widely used HTTP web server, be sure to check its prevalence in other products

International Cyber Digest

953,831 просмотров • 5 месяцев назад

In our latest analysis, we dive into CVE-2026-4802, a high-severity vulnerability discovered by our team in Cockpit that allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). Read the full analysis on our blog:
0:47

In our latest analysis, we dive into CVE-2026-4802, a high-severity vulnerability discovered by our team in Cockpit that allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). Read the full analysis on our blog:

Hakai Offsec

11,413 просмотров • 5 месяцев назад

Our team discovered a critical remote code execution vulnerability in Next.js. If you self-host Next.js, update immediately. Vercel managed Next.js hosts are safe! We’ll publish the technical details and proof of concept soon!
0:20

Our team discovered a critical remote code execution vulnerability in Next.js. If you self-host Next.js, update immediately. Vercel managed Next.js hosts are safe! We’ll publish the technical details and proof of concept soon!

Hacktron AI

109,921 просмотров • 1 месяц назад

Claude Code Full Sandbox Escape (CVE-2026-55607) writeup: prompt injection -> code execution on the host. works even in read-only permissions mode + full sandbox (it could be my Pwn2Own bug, but p2o was weird this year lol)
0:41

Claude Code Full Sandbox Escape (CVE-2026-55607) writeup: prompt injection -> code execution on the host. works even in read-only permissions mode + full sandbox (it could be my Pwn2Own bug, but p2o was weird this year lol)

vladimir metnew

101,985 просмотров • 3 месяцев назад

“You turn on your camera and start insulting South Africans “ - A Proud Ghanaian 🇬🇭 Nana Sei advices Ghanaians in South Africa to come home and he advices for Africans addressing South Africans to state their nationality moving forward. #Politics #Ghana #SouthAfrica #Africa #Africa#WestAfrica #News #GH 🇬🇭🌍🇿🇦🌍🇬🇭🌍🇿🇦🌍🇬🇭🌍🇿🇦🌍🇬🇭🌍🇿🇦🌍🇬🇭🌍🇿🇦
2:26

“You turn on your camera and start insulting South Africans “ - A Proud Ghanaian 🇬🇭 Nana Sei advices Ghanaians in South Africa to come home and he advices for Africans addressing South Africans to state their nationality moving forward. #Politics #Ghana #SouthAfrica #Africa #Africa#WestAfrica #News #GH 🇬🇭🌍🇿🇦🌍🇬🇭🌍🇿🇦🌍🇬🇭🌍🇿🇦🌍🇬🇭🌍🇿🇦🌍🇬🇭🌍🇿🇦

GhanaBoy Ni3🇬🇭

11,999 просмотров • 4 месяцев назад

💥 Remote Code Execution in GitHub Copilot (CVE-2025-53773) 👉 Prompt injection exploit writes to Copilot config file and puts it into YOLO mode, then we get immediate RCE 🔥 Bypasses all user approvals 🛡️ Patch is out today. Update before someone else does it for you
0:32

💥 Remote Code Execution in GitHub Copilot (CVE-2025-53773) 👉 Prompt injection exploit writes to Copilot config file and puts it into YOLO mode, then we get immediate RCE 🔥 Bypasses all user approvals 🛡️ Patch is out today. Update before someone else does it for you

Johann Rehberger

117,677 просмотров • 1 год назад

Philanthropist and MTN Digital Hero of Change Award Winner, Nana Tea shares the incredible story of how he helped transform the life of Mr. Tawiah, a person with disability who was abandoned and left to his fate in a remote village, somewhere in Ghana.
4:38

Philanthropist and MTN Digital Hero of Change Award Winner, Nana Tea shares the incredible story of how he helped transform the life of Mr. Tawiah, a person with disability who was abandoned and left to his fate in a remote village, somewhere in Ghana.

SIKAOFFICIAL🦍

135,382 просмотров • 1 год назад

🔥Arbitrary Code Execution in AWS Kiro with Indirect Prompt Injection Multiple ways actually... 1) Write to settings.json to put Kiro into YOLO mode by adding: "kiroAgent.trustedCommands": ["*"] -> immediate arbitrary OS command execution without user approval 2) Write to kiro's mcp.json file to add a fake mcp server that runs arbitrary python code -> immediate arbitrary code execution AWS fixed the issues quickly, but no CVE issued. If you use Kiro make sure to run the latest version, before someone else updates it for you.
12:01

🔥Arbitrary Code Execution in AWS Kiro with Indirect Prompt Injection Multiple ways actually... 1) Write to settings.json to put Kiro into YOLO mode by adding: "kiroAgent.trustedCommands": ["*"] -> immediate arbitrary OS command execution without user approval 2) Write to kiro's mcp.json file to add a fake mcp server that runs arbitrary python code -> immediate arbitrary code execution AWS fixed the issues quickly, but no CVE issued. If you use Kiro make sure to run the latest version, before someone else updates it for you.

Johann Rehberger

12,632 просмотров • 1 год назад