Загрузка видео...

Не удалось загрузить видео

На главную

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)

NullSecurityX's profile picture

NullSecurityX

12,255 subscribers

94,139 просмотров • 3 месяцев назад •via X (Twitter)

Новости и политикаНаука и технологии
LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 0

Нет доступных комментариев

Здесь появятся комментарии из оригинального поста

Похожие видео

It's been just over a year since CVE-2024-54529 was patched. To celebrate, I'm open-sourcing my full PoC exploit for this CoreAudio type confusion vulnerability 🔊 The code is right here! Enjoy:
0:23

It's been just over a year since CVE-2024-54529 was patched. To celebrate, I'm open-sourcing my full PoC exploit for this CoreAudio type confusion vulnerability 🔊 The code is right here! Enjoy:

Dillon Franke

39,533 просмотров • 5 месяцев назад

Laravel-livewire RCE (CVE-2025-54068) - Video POC Here is the Exploit Github repo: ~credit synacktiv For more bugbounty content Join my telegram channel:
1:31

Laravel-livewire RCE (CVE-2025-54068) - Video POC Here is the Exploit Github repo: ~credit synacktiv For more bugbounty content Join my telegram channel:

DarkShadow

15,389 просмотров • 5 месяцев назад

Exploiting llama.cpp’s RPC Server - From Null Buffer to RCE Against PIE + Full RELRO + NX | CVE-2026-34159: The vulnerability is a one-line logic bug in the RPC server’s tensor deserialization pipeline. Youtube: Blog:
0:37

Exploiting llama.cpp’s RPC Server - From Null Buffer to RCE Against PIE + Full RELRO + NX | CVE-2026-34159: The vulnerability is a one-line logic bug in the RPC server’s tensor deserialization pipeline. Youtube: Blog:

NullSecurityX

19,539 просмотров • 2 месяцев назад

XML External Entity (XXE) vulnerability in 2026 with a practical Proof of Concept (PoC) Follow us: #BugBounty #CyberSecurity
1:13

XML External Entity (XXE) vulnerability in 2026 with a practical Proof of Concept (PoC) Follow us: #BugBounty #CyberSecurity

NullSecurityX

11,524 просмотров • 4 месяцев назад

Zero Click Unauthenticated RCE in n8n (CVE-2026-27493) The chain exploitation method is: Allow User input SSTI exploitation e.g. {{7*7}} ={{$node["NodeName"].constructor.constructor('return process.mainModule.require("child_process").execSync("id ").toString()')()}}
1:23

Zero Click Unauthenticated RCE in n8n (CVE-2026-27493) The chain exploitation method is: Allow User input SSTI exploitation e.g. {{7*7}} ={{$node["NodeName"].constructor.constructor('return process.mainModule.require("child_process").execSync("id ").toString()')()}}

NullSecurityX

36,836 просмотров • 3 месяцев назад

DarkForums has been hacked by NullSecurityX :) Jokes aside, we showcased the vulnerability found on Darkforums in the video. Happy hacking, everyone! 😊 Dark Web Informer #BugBounty #CyberSecurity #darkforum
0:37

DarkForums has been hacked by NullSecurityX :) Jokes aside, we showcased the vulnerability found on Darkforums in the video. Happy hacking, everyone! 😊 Dark Web Informer #BugBounty #CyberSecurity #darkforum

NullSecurityX

51,990 просмотров • 1 год назад

🚨 Very concerning 0-click zero-day vulnerability for sale: allows unauthenticated attackers to execute arbitrary code with SYSTEM-level privileges on fully patched Windows 10/11 and Windows Server 2022 systems. The exploit is “reliable, low-resource, and bypasses the latest security mitigations.” Price: 25k POC:
0:53

🚨 Very concerning 0-click zero-day vulnerability for sale: allows unauthenticated attackers to execute arbitrary code with SYSTEM-level privileges on fully patched Windows 10/11 and Windows Server 2022 systems. The exploit is “reliable, low-resource, and bypasses the latest security mitigations.” Price: 25k POC:

International Cyber Digest

77,014 просмотров • 10 месяцев назад

‼️🚨 MAJOR IMPACT: AI just found an 18-year-old NGINX critical remote code execution vulnerability. It has been disclosed on GitHub including PoC code. - Affects NGINX 0.6.27 through 1.30.0 - Triggered via the rewrite and set directives in config - Update NGINX ASAP - NGINX is a widely used HTTP web server, be sure to check its prevalence in other products
0:36

‼️🚨 MAJOR IMPACT: AI just found an 18-year-old NGINX critical remote code execution vulnerability. It has been disclosed on GitHub including PoC code. - Affects NGINX 0.6.27 through 1.30.0 - Triggered via the rewrite and set directives in config - Update NGINX ASAP - NGINX is a widely used HTTP web server, be sure to check its prevalence in other products

International Cyber Digest

951,843 просмотров • 2 месяцев назад

oh my... Claude Code is evolving You can now build a web app and mobile app at the same time... with Claude Code from a single platform ... > Build iOS App, send to app store > Build web App (New), deploy to the internet w/ 1 click > All apps deploy frontend and backend
0:55

oh my... Claude Code is evolving You can now build a web app and mobile app at the same time... with Claude Code from a single platform ... > Build iOS App, send to app store > Build web App (New), deploy to the internet w/ 1 click > All apps deploy frontend and backend

Chorus.com

81,928 просмотров • 6 месяцев назад

Each Assist type can now be triggered via cancelling an attack. In addition, the assist character will now appear from behind the main character when using Cancel Assist and is also sped up accordingly with the screen freeze time adjustment. Watch the full recap video here:
0:54

Each Assist type can now be triggered via cancelling an attack. In addition, the assist character will now appear from behind the main character when using Cancel Assist and is also sped up accordingly with the screen freeze time adjustment. Watch the full recap video here:

MARVEL Tōkon: Fighting Souls

87,723 просмотров • 4 месяцев назад

CURSOR IS ON YOUR PHONE!1 Watch this 7min video for a first look at how I fixed my broken React app without ever leaving my phone using the Cursor background agent web app
7:12

CURSOR IS ON YOUR PHONE!1 Watch this 7min video for a first look at how I fixed my broken React app without ever leaving my phone using the Cursor background agent web app

Ian Nuttall

68,633 просмотров • 1 год назад

Delete highlight cover IDOR bug in Instagram $3000 Bug Bounty PoC Write-up:
2:17

Delete highlight cover IDOR bug in Instagram $3000 Bug Bounty PoC Write-up:

NullSecurityX

22,320 просмотров • 3 месяцев назад

Elena Rybakina has arrived in Stuttgart. The No. 1 seed is ready. The last time she played this event in 2024, she won the title. 🏎️🐠 (via Porsche Tennis)
0:21

Elena Rybakina has arrived in Stuttgart. The No. 1 seed is ready. The last time she played this event in 2024, she won the title. 🏎️🐠 (via Porsche Tennis)

The Tennis Letter

19,507 просмотров • 3 месяцев назад

The CertiK Skyfall team identified and collaborated with Apple to fix a vulnerability (CVE-2024-27801) in the low-level implementation of NSXPC, affecting all Apple platforms. This vulnerability could have potentially allowed malicious apps to gain unauthorized access to system services or steal user data from certain third-party applications, particularly those with architectures similar to Telegram. Our proof-of-concept attack demonstrated how a malicious app could steal chat history (such as pictures) from Telegram and transfer it to a remote server. Upgrade all your Apple devices and stay safe! Source:
1:09

The CertiK Skyfall team identified and collaborated with Apple to fix a vulnerability (CVE-2024-27801) in the low-level implementation of NSXPC, affecting all Apple platforms. This vulnerability could have potentially allowed malicious apps to gain unauthorized access to system services or steal user data from certain third-party applications, particularly those with architectures similar to Telegram. Our proof-of-concept attack demonstrated how a malicious app could steal chat history (such as pictures) from Telegram and transfer it to a remote server. Upgrade all your Apple devices and stay safe! Source:

CertiK

341,505 просмотров • 2 лет назад

Today's update of Gemini 2.5 Pro Preview is amazing at code web dev, editing, and transformation -- it is now #1 on the WebDev arena, with an ELO score of 1420. That means you can build super cool, visually stunning web apps, with just a single prompt! Check out this example, where we explore the world using this app we created in Gemini's Canvas using the Maps API.
0:30

Today's update of Gemini 2.5 Pro Preview is amazing at code web dev, editing, and transformation -- it is now #1 on the WebDev arena, with an ELO score of 1420. That means you can build super cool, visually stunning web apps, with just a single prompt! Check out this example, where we explore the world using this app we created in Gemini's Canvas using the Maps API.

Tulsee Doshi

115,545 просмотров • 1 год назад

Today we're excited to launch Action: a Claude computer use launcher for macOS. Action is a macOS launcher that can take actions (click, type, and more) on your Mac using Claude’s computer use API. The interface is a floating window triggered by a keyboard shortcut, similar to Spotlight. This lets you see what the model outputs as it performs actions.
0:23

Today we're excited to launch Action: a Claude computer use launcher for macOS. Action is a macOS launcher that can take actions (click, type, and more) on your Mac using Claude’s computer use API. The interface is a floating window triggered by a keyboard shortcut, similar to Spotlight. This lets you see what the model outputs as it performs actions.

Lawrence Chen

21,622 просмотров • 1 год назад

[Trickcal: Chibi Go] 🥰New 3-star Apostle Epica is coming! 🎁Join the event now for a chance to win Amazon Gift Cards! [Event Rewards] $100 Amazon Gift Card: 5 [How to Participate] 1. Follow Trickcal:Chibi Go 2. Share this post 3. Winners will be notified via private message after the event ends. [Event Ends] 1/6/2026 #Trickcal —— ≡ Official Website ≡ ≡ App Store/Google Play Store≡ ≡ Official Discord ≡
1:25

[Trickcal: Chibi Go] 🥰New 3-star Apostle Epica is coming! 🎁Join the event now for a chance to win Amazon Gift Cards! [Event Rewards] $100 Amazon Gift Card: 5 [How to Participate] 1. Follow Trickcal:Chibi Go 2. Share this post 3. Winners will be notified via private message after the event ends. [Event Ends] 1/6/2026 #Trickcal —— ≡ Official Website ≡ ≡ App Store/Google Play Store≡ ≡ Official Discord ≡

Trickcal:Chibi Go

26,155 просмотров • 6 месяцев назад

Empower your guns with some Arknights vibes and let the Operators from Rhodes Island help you shine during the combat! The collab-exclusive Schwarz·Skyline series, including PSG-1 - Schwarz·Skyline, G3 - Ceylon, and MP5 - Poncirus, is now available via the Lucky Draw web event: 💻PC Users: 📱Mobile Users:
0:47

Empower your guns with some Arknights vibes and let the Operators from Rhodes Island help you shine during the combat! The collab-exclusive Schwarz·Skyline series, including PSG-1 - Schwarz·Skyline, G3 - Ceylon, and MP5 - Poncirus, is now available via the Lucky Draw web event: 💻PC Users: 📱Mobile Users:

Delta Force Game

20,405 просмотров • 1 год назад

we're working on adding user info collection to wallet connection flows when using base account. the goal is to allow you to share your contact info and authenticate into an app with your wallet in 1 click
0:51

we're working on adding user info collection to wallet connection flows when using base account. the goal is to allow you to share your contact info and authenticate into an app with your wallet in 1 click

Stephan

33,851 просмотров • 11 месяцев назад

The next generation of AI apps will be powered by agents that reason, act, and pay. Mentor Session #1 features Ben Greenberg from Arbitrum on Agentic Payment Flows and Private AI Inference using x402 & AP2. If you’re building for x402, this session is a must watch. App Layer FTW.
21:43

The next generation of AI apps will be powered by agents that reason, act, and pay. Mentor Session #1 features Ben Greenberg from Arbitrum on Agentic Payment Flows and Private AI Inference using x402 & AP2. If you’re building for x402, this session is a must watch. App Layer FTW.

Capx AI

41,278 просмотров • 7 месяцев назад