Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

CVE-2026-20841-POC REMOTE CODE EXECUTION VULNERABILITY IN NOTEPAD VERSION 11 Mr Phil Ghana 🇬🇭 Nana Sei Anyemedu

h4ruk7's profile picture

H4RUK1 KIRA🇯🇵

10,460 subscribers

21,113 görüntüleme • 8 ay önce •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

2 Yorum

NtTestAlert profil fotoğrafı
NtTestAlert8 ay önce

@mrphilghana @RedHatPentester Cmon this is not RCE...

H4RUK1 KIRA🇯🇵 profil fotoğrafı
H4RUK1 KIRA🇯🇵8 ay önce

@mrphilghana @RedHatPentester it is this the poc from a chinese guy

Benzer Videolar

🚨CVE-2024-21413 - Microsoft Outlook Remote Code Execution Vulnerability PoC (no audio) Credit:
2:37

🚨CVE-2024-21413 - Microsoft Outlook Remote Code Execution Vulnerability PoC (no audio) Credit:

Dark Web Informer

69,383 görüntüleme • 1 yıl önce

CVE-2024-29269: Remote Code Execution PoC Credit:
3:00

CVE-2024-29269: Remote Code Execution PoC Credit:

Dark Web Informer

72,035 görüntüleme • 1 yıl önce

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:
3:26

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:

Dark Web Informer

22,498 görüntüleme • 1 yıl önce

🚨CVE-2025-26666: Windows Media Remote Code Execution Vulnerability Credit:
1:39

🚨CVE-2025-26666: Windows Media Remote Code Execution Vulnerability Credit:

Dark Web Informer

13,379 görüntüleme • 1 yıl önce

It's the bug of the month for June 2026! CVE-2026-45657 - A CVSS 9.8 vulnerability in Kernel that allows remote, unauthenticated code execution at SYSTEM without user interaction. Yikes!
0:38

It's the bug of the month for June 2026! CVE-2026-45657 - A CVSS 9.8 vulnerability in Kernel that allows remote, unauthenticated code execution at SYSTEM without user interaction. Yikes!

TrendAI Zero Day Initiative

34,389 görüntüleme • 4 ay önce

Windows Notepad.exe Now Has Remote Code Execution Vulnerability First Notepad++ gets hijacked by Chinese hackers, now Notepad.exe gets a "Severe" CVE. Apparently editing a plain text file is the most dangerous thing you can do on Windows.
12:41

Windows Notepad.exe Now Has Remote Code Execution Vulnerability First Notepad++ gets hijacked by Chinese hackers, now Notepad.exe gets a "Severe" CVE. Apparently editing a plain text file is the most dangerous thing you can do on Windows.

The Lunduke Journal

17,782 görüntüleme • 8 ay önce

🚨 CVE-2025-6389: WordPress Sneeit Framework plugin vulnerability currently under active exploitation PoC: ▪️Vulnerability Type: Remote Code Execution (RCE) ▪️CVSS: 9.8 ▪️Published: 11/24/2025 Impact: ▪️Full site compromise ▪️Create admin accounts ▪️Install backdoors/malicious files ▪️Redirect visitors or inject malware Credit:
1:17

🚨 CVE-2025-6389: WordPress Sneeit Framework plugin vulnerability currently under active exploitation PoC: ▪️Vulnerability Type: Remote Code Execution (RCE) ▪️CVSS: 9.8 ▪️Published: 11/24/2025 Impact: ▪️Full site compromise ▪️Create admin accounts ▪️Install backdoors/malicious files ▪️Redirect visitors or inject malware Credit:

Dark Web Informer

16,083 görüntüleme • 9 ay önce

‼️ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: Gaurav Bhattacharjee
3:36

‼️ CVE-2026-48907: Joomla! JCE extension 2.9.99.5 - unauthenticated Remote Code Execution Video Credit: Gaurav Bhattacharjee

Dark Web Informer

47,445 görüntüleme • 3 ay önce

Here is ENLBufferPwn (CVE ID pending), a severe vulnerability in many first party 3DS, Wii U and Switch games. It allows remote code execution in a victim console by just having an online game session with an attacker. Vulnerability report: 🧵(1/7)
0:27

Here is ENLBufferPwn (CVE ID pending), a severe vulnerability in many first party 3DS, Wii U and Switch games. It allows remote code execution in a victim console by just having an online game session with an attacker. Vulnerability report: 🧵(1/7)

PabloMK7

591,174 görüntüleme • 3 yıl önce

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.
1:28

🚨 CVE-2026-41089: Windows Netlogon Remote Code Execution via CLDAP Stack Buffer Overflow Published: June 1st, 2026 PoC: One crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched Windows Domain Controller. The process crashes. The DC reboots in ~60 seconds. No authentication required.

Dark Web Informer

71,789 görüntüleme • 3 ay önce

Here’s the Age of Empires RCE from yesterday’s Patch Tuesday: CVE-2026-50663. Join an attacker’s lobby, (auto-)accept UCG, and you get remote code execution.
0:22

Here’s the Age of Empires RCE from yesterday’s Patch Tuesday: CVE-2026-50663. Join an attacker’s lobby, (auto-)accept UCG, and you get remote code execution.

Rick de Jager

495,603 görüntüleme • 3 ay önce

🤬CVE-2025-49113: Post‑Auth Remote Code Execution in Roundcube via PHP Object Deserialization FOFA Link: FOFA Query: app="roundcube" Results: 51,584,735 Advisory: CVSS: 9.9
0:28

🤬CVE-2025-49113: Post‑Auth Remote Code Execution in Roundcube via PHP Object Deserialization FOFA Link: FOFA Query: app="roundcube" Results: 51,584,735 Advisory: CVSS: 9.9

X

14,985 görüntüleme • 1 yıl önce

‼️🚨 MAJOR IMPACT: AI just found an 18-year-old NGINX critical remote code execution vulnerability. It has been disclosed on GitHub including PoC code. - Affects NGINX 0.6.27 through 1.30.0 - Triggered via the rewrite and set directives in config - Update NGINX ASAP - NGINX is a widely used HTTP web server, be sure to check its prevalence in other products
0:36

‼️🚨 MAJOR IMPACT: AI just found an 18-year-old NGINX critical remote code execution vulnerability. It has been disclosed on GitHub including PoC code. - Affects NGINX 0.6.27 through 1.30.0 - Triggered via the rewrite and set directives in config - Update NGINX ASAP - NGINX is a widely used HTTP web server, be sure to check its prevalence in other products

International Cyber Digest

953,831 görüntüleme • 5 ay önce

In our latest analysis, we dive into CVE-2026-4802, a high-severity vulnerability discovered by our team in Cockpit that allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). Read the full analysis on our blog:
0:47

In our latest analysis, we dive into CVE-2026-4802, a high-severity vulnerability discovered by our team in Cockpit that allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). Read the full analysis on our blog:

Hakai Offsec

11,413 görüntüleme • 5 ay önce

Our team discovered a critical remote code execution vulnerability in Next.js. If you self-host Next.js, update immediately. Vercel managed Next.js hosts are safe! We’ll publish the technical details and proof of concept soon!
0:20

Our team discovered a critical remote code execution vulnerability in Next.js. If you self-host Next.js, update immediately. Vercel managed Next.js hosts are safe! We’ll publish the technical details and proof of concept soon!

Hacktron AI

109,921 görüntüleme • 1 ay önce

Claude Code Full Sandbox Escape (CVE-2026-55607) writeup: prompt injection -> code execution on the host. works even in read-only permissions mode + full sandbox (it could be my Pwn2Own bug, but p2o was weird this year lol)
0:41

Claude Code Full Sandbox Escape (CVE-2026-55607) writeup: prompt injection -> code execution on the host. works even in read-only permissions mode + full sandbox (it could be my Pwn2Own bug, but p2o was weird this year lol)

vladimir metnew

101,985 görüntüleme • 3 ay önce

“You turn on your camera and start insulting South Africans “ - A Proud Ghanaian 🇬🇭 Nana Sei advices Ghanaians in South Africa to come home and he advices for Africans addressing South Africans to state their nationality moving forward. #Politics #Ghana #SouthAfrica #Africa #Africa#WestAfrica #News #GH 🇬🇭🌍🇿🇦🌍🇬🇭🌍🇿🇦🌍🇬🇭🌍🇿🇦🌍🇬🇭🌍🇿🇦🌍🇬🇭🌍🇿🇦
2:26

“You turn on your camera and start insulting South Africans “ - A Proud Ghanaian 🇬🇭 Nana Sei advices Ghanaians in South Africa to come home and he advices for Africans addressing South Africans to state their nationality moving forward. #Politics #Ghana #SouthAfrica #Africa #Africa#WestAfrica #News #GH 🇬🇭🌍🇿🇦🌍🇬🇭🌍🇿🇦🌍🇬🇭🌍🇿🇦🌍🇬🇭🌍🇿🇦🌍🇬🇭🌍🇿🇦

GhanaBoy Ni3🇬🇭

11,999 görüntüleme • 4 ay önce

💥 Remote Code Execution in GitHub Copilot (CVE-2025-53773) 👉 Prompt injection exploit writes to Copilot config file and puts it into YOLO mode, then we get immediate RCE 🔥 Bypasses all user approvals 🛡️ Patch is out today. Update before someone else does it for you
0:32

💥 Remote Code Execution in GitHub Copilot (CVE-2025-53773) 👉 Prompt injection exploit writes to Copilot config file and puts it into YOLO mode, then we get immediate RCE 🔥 Bypasses all user approvals 🛡️ Patch is out today. Update before someone else does it for you

Johann Rehberger

117,677 görüntüleme • 1 yıl önce

Philanthropist and MTN Digital Hero of Change Award Winner, Nana Tea shares the incredible story of how he helped transform the life of Mr. Tawiah, a person with disability who was abandoned and left to his fate in a remote village, somewhere in Ghana.
4:38

Philanthropist and MTN Digital Hero of Change Award Winner, Nana Tea shares the incredible story of how he helped transform the life of Mr. Tawiah, a person with disability who was abandoned and left to his fate in a remote village, somewhere in Ghana.

SIKAOFFICIAL🦍

135,382 görüntüleme • 1 yıl önce

🔥Arbitrary Code Execution in AWS Kiro with Indirect Prompt Injection Multiple ways actually... 1) Write to settings.json to put Kiro into YOLO mode by adding: "kiroAgent.trustedCommands": ["*"] -> immediate arbitrary OS command execution without user approval 2) Write to kiro's mcp.json file to add a fake mcp server that runs arbitrary python code -> immediate arbitrary code execution AWS fixed the issues quickly, but no CVE issued. If you use Kiro make sure to run the latest version, before someone else updates it for you.
12:01

🔥Arbitrary Code Execution in AWS Kiro with Indirect Prompt Injection Multiple ways actually... 1) Write to settings.json to put Kiro into YOLO mode by adding: "kiroAgent.trustedCommands": ["*"] -> immediate arbitrary OS command execution without user approval 2) Write to kiro's mcp.json file to add a fake mcp server that runs arbitrary python code -> immediate arbitrary code execution AWS fixed the issues quickly, but no CVE issued. If you use Kiro make sure to run the latest version, before someone else updates it for you.

Johann Rehberger

12,632 görüntüleme • 1 yıl önce