Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

CVE-2026-81376: VS Code RCE via Security Feature Bypass; $4,000 bounty. Write-up:

DarkWebInformer's profile picture

Dark Web Informer

251,629 subscribers

25,333 Aufrufe • vor 17 Tagen •via X (Twitter)

Wissenschaft & Technologie
LIVE

Anya Rossi• Live Now

Private livecam show

5 Kommentare

Profilbild von skxrx
skxrxvor 17 Tagen

open the repo, nothing runs until you click allow - that was the promise. nested settings objects slip past the restricted-settings filter, so on 1.136.1 and below a cloned workspace reaches an attacker host and runs code with no trust granted. patched in 1.136.2.

Profilbild von Omi ✦
Omi ✦vor 17 Tagen

💀💀💀lol

Profilbild von Vito Botta
Vito Bottavor 17 Tagen

Everyone I know runs that editor with a pile of extensions and no sandbox. Fun week.

Profilbild von AnkhCorp
AnkhCorpvor 17 Tagen

Wtf

Profilbild von Paparakos
Paparakosvor 17 Tagen

mariconazo

Ähnliche Videos

CVE-2026-42530 NGINX RCE
0:27

CVE-2026-42530 NGINX RCE

Clandestine

57,981 Aufrufe • vor 4 Monaten

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:
3:26

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:

Dark Web Informer

22,498 Aufrufe • vor 1 Jahr

‼️ CVE-2026-22812: OpenCode v1.0.216 - Unauthenticated RCE CVSS: 8.8 CVE Published: January 12th, 2026 PoC/Exploit: Advisory/PoC: Original Post:
3:47

‼️ CVE-2026-22812: OpenCode v1.0.216 - Unauthenticated RCE CVSS: 8.8 CVE Published: January 12th, 2026 PoC/Exploit: Advisory/PoC: Original Post:

Dark Web Informer

28,847 Aufrufe • vor 9 Monaten

Demo of recently published android zero click RCE via wireless debugging, (CVE-2026-0073) Educational purposes only Check Mobile hacker for more
0:27

Demo of recently published android zero click RCE via wireless debugging, (CVE-2026-0073) Educational purposes only Check Mobile hacker for more

Mololuwa | Cybersecurity - (The God Complex)

40,319 Aufrufe • vor 3 Monaten

Rce -> uaf 26.4 down better variant of cve-2026-20637 unpatched
0:42

Rce -> uaf 26.4 down better variant of cve-2026-20637 unpatched

zip

19,266 Aufrufe • vor 6 Monaten

Here’s the Age of Empires RCE from yesterday’s Patch Tuesday: CVE-2026-50663. Join an attacker’s lobby, (auto-)accept UCG, and you get remote code execution.
0:22

Here’s the Age of Empires RCE from yesterday’s Patch Tuesday: CVE-2026-50663. Join an attacker’s lobby, (auto-)accept UCG, and you get remote code execution.

Rick de Jager

500,811 Aufrufe • vor 3 Monaten

Open-sourcing our RCE implementation for CVE-2026-42533! This is an incredibly powerful NGINX bug that provides both info leak and an out-of-bounds heap write primitives (so, yes, ASLR bypass!). F5 released the security advisory a week ago on July 15th. Fun fact: this bug appears to have been found concurrently by multiple groups. Our team at depthfirst caught it using our internal systems, right alongside CVE-2026-42530, a separate issue in NGINX’s HTTP/3 QPACK implementation.
0:34

Open-sourcing our RCE implementation for CVE-2026-42533! This is an incredibly powerful NGINX bug that provides both info leak and an out-of-bounds heap write primitives (so, yes, ASLR bypass!). F5 released the security advisory a week ago on July 15th. Fun fact: this bug appears to have been found concurrently by multiple groups. Our team at depthfirst caught it using our internal systems, right alongside CVE-2026-42530, a separate issue in NGINX’s HTTP/3 QPACK implementation.

Zhenpeng (Leo) Lin

30,570 Aufrufe • vor 3 Monaten

‼️ CVE-2026-34621: Adobe Acrobat 2026 Prototype Pollution & JS Injection Chain GitHub: Write-up:
0:35

‼️ CVE-2026-34621: Adobe Acrobat 2026 Prototype Pollution & JS Injection Chain GitHub: Write-up:

Dark Web Informer

29,554 Aufrufe • vor 5 Monaten

🚨CVE-2025-24071 // CVE-2025-24054: PoC for NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File Write-up: GitHub:
0:46

🚨CVE-2025-24071 // CVE-2025-24054: PoC for NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File Write-up: GitHub:

Dark Web Informer

28,647 Aufrufe • vor 1 Jahr

⚠️ Update for CVE-2024-21413 💣 Managed & confirmed Microsoft Outlook Remote Code Execution (RCE) but won't publish details (yet).
0:22

⚠️ Update for CVE-2024-21413 💣 Managed & confirmed Microsoft Outlook Remote Code Execution (RCE) but won't publish details (yet).

Alex

175,950 Aufrufe • vor 2 Jahren

‼️ CVE-2025-26529: Moodle XSS to RCE Exploit GitHub:
3:48

‼️ CVE-2025-26529: Moodle XSS to RCE Exploit GitHub:

Dark Web Informer

41,057 Aufrufe • vor 3 Monaten

I’ve successfully reproduced the CVE-2026-32223. If I get the opportunity, I’ll put together a detailed write-up.
0:42

I’ve successfully reproduced the CVE-2026-32223. If I get the opportunity, I’ll put together a detailed write-up.

nafiez

15,045 Aufrufe • vor 6 Monaten

POC for CVE-2024-38063 (RCE in Windows TCP/IP) :
0:26

POC for CVE-2024-38063 (RCE in Windows TCP/IP) :

Binni Shah

41,335 Aufrufe • vor 2 Jahren

🚨PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE
0:33

🚨PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE

Dark Web Informer

64,458 Aufrufe • vor 2 Jahren

patch your wordpress. cve-2026-63030 is a pre-auth rce via sql injection. 6.8.5 and below: not affected 6.9.0–6.9.4: affected 7.0.0–7.0.1: affected props to our friends at Assetnote for the crazy find
0:41

patch your wordpress. cve-2026-63030 is a pre-auth rce via sql injection. 6.8.5 and below: not affected 6.9.0–6.9.4: affected 7.0.0–7.0.1: affected props to our friends at Assetnote for the crazy find

Hacktron AI

40,093 Aufrufe • vor 3 Monaten

🚨PoC CVE-2025-32433: Critical Erlang/OTP SSH RCE Vulnerability Credit:
0:37

🚨PoC CVE-2025-32433: Critical Erlang/OTP SSH RCE Vulnerability Credit:

Dark Web Informer

12,352 Aufrufe • vor 1 Jahr

🚨CVE-2025-3776: Full WordPress Takeover Without Login (Critical RCE Exploit) Credit:
6:14

🚨CVE-2025-3776: Full WordPress Takeover Without Login (Critical RCE Exploit) Credit:

Dark Web Informer

80,833 Aufrufe • vor 1 Jahr

Here's wp2shell 🐚 single-file, zero-dependency PoC for the WordPress core pre-auth RCE (CVE-2026-63030 + CVE-2026-60137) one anonymous HTTP request: REST batch route confusion → unauth SQLi → admin hash → shell default install. no plugins. no login. the best of other public PoCs, unified into one file. scanner + full-chain code + deep dive + lab to play 👇
0:53

Here's wp2shell 🐚 single-file, zero-dependency PoC for the WordPress core pre-auth RCE (CVE-2026-63030 + CVE-2026-60137) one anonymous HTTP request: REST batch route confusion → unauth SQLi → admin hash → shell default install. no plugins. no login. the best of other public PoCs, unified into one file. scanner + full-chain code + deep dive + lab to play 👇

0xSha

28,781 Aufrufe • vor 3 Monaten