Загрузка видео...

Не удалось загрузить видео

На главную

CVE-2026-81376: VS Code RCE via Security Feature Bypass; $4,000 bounty. Write-up:

DarkWebInformer's profile picture

Dark Web Informer

260,733 subscribers

25,626 просмотров • 27 дней назад •via X (Twitter)

Наука и технологии
LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 5

Фото профиля skxrx
skxrx27 дней назад

open the repo, nothing runs until you click allow - that was the promise. nested settings objects slip past the restricted-settings filter, so on 1.136.1 and below a cloned workspace reaches an attacker host and runs code with no trust granted. patched in 1.136.2.

Фото профиля Omi ✦
Omi ✦27 дней назад

💀💀💀lol

Фото профиля Vito Botta
Vito Botta26 дней назад

Everyone I know runs that editor with a pile of extensions and no sandbox. Fun week.

Фото профиля AnkhCorp
AnkhCorp26 дней назад

Wtf

Фото профиля Paparakos
Paparakos26 дней назад

mariconazo

Похожие видео

CVE-2026-42530 NGINX RCE
0:27

CVE-2026-42530 NGINX RCE

Clandestine

57,981 просмотров • 4 месяцев назад

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:
3:26

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:

Dark Web Informer

22,498 просмотров • 1 год назад

‼️ CVE-2026-22812: OpenCode v1.0.216 - Unauthenticated RCE CVSS: 8.8 CVE Published: January 12th, 2026 PoC/Exploit: Advisory/PoC: Original Post:
3:47

‼️ CVE-2026-22812: OpenCode v1.0.216 - Unauthenticated RCE CVSS: 8.8 CVE Published: January 12th, 2026 PoC/Exploit: Advisory/PoC: Original Post:

Dark Web Informer

28,847 просмотров • 9 месяцев назад

Demo of recently published android zero click RCE via wireless debugging, (CVE-2026-0073) Educational purposes only Check Mobile hacker for more
0:27

Demo of recently published android zero click RCE via wireless debugging, (CVE-2026-0073) Educational purposes only Check Mobile hacker for more

Mololuwa | Cybersecurity - (The God Complex)

40,319 просмотров • 4 месяцев назад

Rce -> uaf 26.4 down better variant of cve-2026-20637 unpatched
0:42

Rce -> uaf 26.4 down better variant of cve-2026-20637 unpatched

zip

19,266 просмотров • 6 месяцев назад

Here’s the Age of Empires RCE from yesterday’s Patch Tuesday: CVE-2026-50663. Join an attacker’s lobby, (auto-)accept UCG, and you get remote code execution.
0:22

Here’s the Age of Empires RCE from yesterday’s Patch Tuesday: CVE-2026-50663. Join an attacker’s lobby, (auto-)accept UCG, and you get remote code execution.

Rick de Jager

512,042 просмотров • 4 месяцев назад

Open-sourcing our RCE implementation for CVE-2026-42533! This is an incredibly powerful NGINX bug that provides both info leak and an out-of-bounds heap write primitives (so, yes, ASLR bypass!). F5 released the security advisory a week ago on July 15th. Fun fact: this bug appears to have been found concurrently by multiple groups. Our team at depthfirst caught it using our internal systems, right alongside CVE-2026-42530, a separate issue in NGINX’s HTTP/3 QPACK implementation.
0:34

Open-sourcing our RCE implementation for CVE-2026-42533! This is an incredibly powerful NGINX bug that provides both info leak and an out-of-bounds heap write primitives (so, yes, ASLR bypass!). F5 released the security advisory a week ago on July 15th. Fun fact: this bug appears to have been found concurrently by multiple groups. Our team at depthfirst caught it using our internal systems, right alongside CVE-2026-42530, a separate issue in NGINX’s HTTP/3 QPACK implementation.

Zhenpeng (Leo) Lin

30,570 просмотров • 3 месяцев назад

‼️ CVE-2026-34621: Adobe Acrobat 2026 Prototype Pollution & JS Injection Chain GitHub: Write-up:
0:35

‼️ CVE-2026-34621: Adobe Acrobat 2026 Prototype Pollution & JS Injection Chain GitHub: Write-up:

Dark Web Informer

29,554 просмотров • 6 месяцев назад

🚨CVE-2025-24071 // CVE-2025-24054: PoC for NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File Write-up: GitHub:
0:46

🚨CVE-2025-24071 // CVE-2025-24054: PoC for NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File Write-up: GitHub:

Dark Web Informer

28,647 просмотров • 1 год назад

⚠️ Update for CVE-2024-21413 💣 Managed & confirmed Microsoft Outlook Remote Code Execution (RCE) but won't publish details (yet).
0:22

⚠️ Update for CVE-2024-21413 💣 Managed & confirmed Microsoft Outlook Remote Code Execution (RCE) but won't publish details (yet).

Alex

175,950 просмотров • 2 лет назад

‼️ CVE-2025-26529: Moodle XSS to RCE Exploit GitHub:
3:48

‼️ CVE-2025-26529: Moodle XSS to RCE Exploit GitHub:

Dark Web Informer

41,057 просмотров • 4 месяцев назад

I’ve successfully reproduced the CVE-2026-32223. If I get the opportunity, I’ll put together a detailed write-up.
0:42

I’ve successfully reproduced the CVE-2026-32223. If I get the opportunity, I’ll put together a detailed write-up.

nafiez

15,045 просмотров • 6 месяцев назад

patch your wordpress. cve-2026-63030 is a pre-auth rce via sql injection. 6.8.5 and below: not affected 6.9.0–6.9.4: affected 7.0.0–7.0.1: affected props to our friends at Assetnote for the crazy find
0:41

patch your wordpress. cve-2026-63030 is a pre-auth rce via sql injection. 6.8.5 and below: not affected 6.9.0–6.9.4: affected 7.0.0–7.0.1: affected props to our friends at Assetnote for the crazy find

Hacktron AI

40,093 просмотров • 3 месяцев назад

POC for CVE-2024-38063 (RCE in Windows TCP/IP) :
0:26

POC for CVE-2024-38063 (RCE in Windows TCP/IP) :

Binni Shah

41,335 просмотров • 2 лет назад

🚨PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE
0:33

🚨PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE

Dark Web Informer

64,458 просмотров • 2 лет назад

🚨CVE-2025-3776: Full WordPress Takeover Without Login (Critical RCE Exploit) Credit:
6:14

🚨CVE-2025-3776: Full WordPress Takeover Without Login (Critical RCE Exploit) Credit:

Dark Web Informer

80,833 просмотров • 1 год назад

🚨PoC CVE-2025-32433: Critical Erlang/OTP SSH RCE Vulnerability Credit:
0:37

🚨PoC CVE-2025-32433: Critical Erlang/OTP SSH RCE Vulnerability Credit:

Dark Web Informer

12,352 просмотров • 1 год назад

Here's wp2shell 🐚 single-file, zero-dependency PoC for the WordPress core pre-auth RCE (CVE-2026-63030 + CVE-2026-60137) one anonymous HTTP request: REST batch route confusion → unauth SQLi → admin hash → shell default install. no plugins. no login. the best of other public PoCs, unified into one file. scanner + full-chain code + deep dive + lab to play 👇
0:53

Here's wp2shell 🐚 single-file, zero-dependency PoC for the WordPress core pre-auth RCE (CVE-2026-63030 + CVE-2026-60137) one anonymous HTTP request: REST batch route confusion → unauth SQLi → admin hash → shell default install. no plugins. no login. the best of other public PoCs, unified into one file. scanner + full-chain code + deep dive + lab to play 👇

0xSha

28,781 просмотров • 3 месяцев назад