正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)

NullSecurityX

12,280 subscribers

94,835 次观看 • 5 个月前 •via X (Twitter)

新闻政治科学技术

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

It's been just over a year since CVE-2024-54529 was patched. To celebrate, I'm open-sourcing my full PoC exploit for this CoreAudio type confusion vulnerability 🔊 The code is right here! Enjoy:

It's been just over a year since CVE-2024-54529 was patched. To celebrate, I'm open-sourcing my full PoC exploit for this CoreAudio type confusion vulnerability 🔊 The code is right here! Enjoy:

Dillon Franke

39,724 次观看 • 7 个月前

Introducing XSS2Shell ⛓️: WordPress Core preauth XSS→RCE vulnerability affecting 43% of the internet, discovered autonomously by pwn (using open-source models), affecting all WordPress versions. Please patch CVE-2026-64638 as soon as possible!

Introducing XSS2Shell ⛓️: WordPress Core preauth XSS→RCE vulnerability affecting 43% of the internet, discovered autonomously by pwn (using open-source models), affecting all WordPress versions. Please patch CVE-2026-64638 as soon as possible!

pwn.ai

1,644,993 次观看 • 1 个月前

two XSS vulnerabilities. individually, each was practically useless. together, they stole your session, hijacked your OAuth token, and silently turned on your webcam. here's the chain. Zoom's web client allowed XSS in two places, and both were in self-XSS situations where you could only inject into your own context. programs usually ignore these as "No Impact." but Zoom uses OAuth for authentication. the OAuth authorization code gets passed via URL after login. if you can intercept that redirect, you get the code, you get the token, you get the account. the trick: "OAuth dirty dancing." when a victim clicks a link, the XSS on domain A sends a message to domain B using postMessage. domain B uses the XSS there to initiate an OAuth flow. the authorization code in the redirect gets sent back to the attacker. the attacker now has a valid auth code. they exchange it. full session. Bonus: Zoom's web client requests browser permissions (camera, microphone) once and remembers them. after account takeover, the attacker can silently activate those permissions in a tab the victim can't see. also: they found that the WAF could be tricked into flagging the victim as malicious by sending crafted requests that made the WAF think the victim's browser was the attacker. the victim gets blocked. denial of service via WAF frame-up. two "useless" XSS bugs. one $15,000 bounty. three attack chains. Blog:

two XSS vulnerabilities. individually, each was practically useless. together, they stole your session, hijacked your OAuth token, and silently turned on your webcam. here's the chain. Zoom's web client allowed XSS in two places, and both were in self-XSS situations where you could only inject into your own context. programs usually ignore these as "No Impact." but Zoom uses OAuth for authentication. the OAuth authorization code gets passed via URL after login. if you can intercept that redirect, you get the code, you get the token, you get the account. the trick: "OAuth dirty dancing." when a victim clicks a link, the XSS on domain A sends a message to domain B using postMessage. domain B uses the XSS there to initiate an OAuth flow. the authorization code in the redirect gets sent back to the attacker. the attacker now has a valid auth code. they exchange it. full session. Bonus: Zoom's web client requests browser permissions (camera, microphone) once and remembers them. after account takeover, the attacker can silently activate those permissions in a tab the victim can't see. also: they found that the WAF could be tricked into flagging the victim as malicious by sending crafted requests that made the WAF think the victim's browser was the attacker. the victim gets blocked. denial of service via WAF frame-up. two "useless" XSS bugs. one $15,000 bounty. three attack chains. Blog:

Het Mehta

15,047 次观看 • 2 个月前

Laravel-livewire RCE (CVE-2025-54068) - Video POC Here is the Exploit Github repo: ~credit synacktiv For more bugbounty content Join my telegram channel:

Laravel-livewire RCE (CVE-2025-54068) - Video POC Here is the Exploit Github repo: ~credit synacktiv For more bugbounty content Join my telegram channel:

DarkShadow

15,643 次观看 • 7 个月前

Exploiting llama.cpp’s RPC Server - From Null Buffer to RCE Against PIE + Full RELRO + NX | CVE-2026-34159: The vulnerability is a one-line logic bug in the RPC server’s tensor deserialization pipeline. Youtube: Blog:

Exploiting llama.cpp’s RPC Server - From Null Buffer to RCE Against PIE + Full RELRO + NX | CVE-2026-34159: The vulnerability is a one-line logic bug in the RPC server’s tensor deserialization pipeline. Youtube: Blog:

NullSecurityX

19,600 次观看 • 4 个月前

XML External Entity (XXE) vulnerability in 2026 with a practical Proof of Concept (PoC) Follow us: #BugBounty #CyberSecurity

XML External Entity (XXE) vulnerability in 2026 with a practical Proof of Concept (PoC) Follow us: #BugBounty #CyberSecurity

NullSecurityX

11,524 次观看 • 5 个月前

$Zero Click Unauthenticated RCE in n8n (CVE-2026-27493) The chain exploitation method is: Allow User input SSTI exploitation e.g. {{7*7}} ={{$node["NodeName"].constructor.constructor('return process.mainModule.require("child_process").execSync("id ").toString()')()}}$

Zero Click Unauthenticated RCE in n8n (CVE-2026-27493) The chain exploitation method is: Allow User input SSTI exploitation e.g. {{7*7}} ={{$node["NodeName"].constructor.constructor('return process.mainModule.require("child_process").execSync("id ").toString()')()}}

NullSecurityX

36,897 次观看 • 4 个月前

DarkForums has been hacked by NullSecurityX :) Jokes aside, we showcased the vulnerability found on Darkforums in the video. Happy hacking, everyone! 😊 Dark Web Informer #BugBounty #CyberSecurity #darkforum

DarkForums has been hacked by NullSecurityX :) Jokes aside, we showcased the vulnerability found on Darkforums in the video. Happy hacking, everyone! 😊 Dark Web Informer #BugBounty #CyberSecurity #darkforum

NullSecurityX

51,990 次观看 • 1 年前

🚨 Very concerning 0-click zero-day vulnerability for sale: allows unauthenticated attackers to execute arbitrary code with SYSTEM-level privileges on fully patched Windows 10/11 and Windows Server 2022 systems. The exploit is “reliable, low-resource, and bypasses the latest security mitigations.” Price: 25k POC:

🚨 Very concerning 0-click zero-day vulnerability for sale: allows unauthenticated attackers to execute arbitrary code with SYSTEM-level privileges on fully patched Windows 10/11 and Windows Server 2022 systems. The exploit is “reliable, low-resource, and bypasses the latest security mitigations.” Price: 25k POC:

International Cyber Digest

77,014 次观看 • 1 年前

PoC for a critical vulnerability in Apple macOS Screen Sharing (CVE-2026-65400). If Screen Sharing is enabled, any network attacker can exploit the bug to log in as any account, without knowing the password. We reverse engineered Apple’s unusual macOS 26.6.1 patch to understand the root cause and exploitation path. Please upgrade your macOS boxes to 26.6.1. Full technical writeup drops tomorrow.

PoC for a critical vulnerability in Apple macOS Screen Sharing (CVE-2026-65400). If Screen Sharing is enabled, any network attacker can exploit the bug to log in as any account, without knowing the password. We reverse engineered Apple’s unusual macOS 26.6.1 patch to understand the root cause and exploitation path. Please upgrade your macOS boxes to 26.6.1. Full technical writeup drops tomorrow.

Calif

454,036 次观看 • 1 个月前

‼️🚨 MAJOR IMPACT: AI just found an 18-year-old NGINX critical remote code execution vulnerability. It has been disclosed on GitHub including PoC code. - Affects NGINX 0.6.27 through 1.30.0 - Triggered via the rewrite and set directives in config - Update NGINX ASAP - NGINX is a widely used HTTP web server, be sure to check its prevalence in other products

‼️🚨 MAJOR IMPACT: AI just found an 18-year-old NGINX critical remote code execution vulnerability. It has been disclosed on GitHub including PoC code. - Affects NGINX 0.6.27 through 1.30.0 - Triggered via the rewrite and set directives in config - Update NGINX ASAP - NGINX is a widely used HTTP web server, be sure to check its prevalence in other products

International Cyber Digest

953,241 次观看 • 3 个月前

oh my... Claude Code is evolving You can now build a web app and mobile app at the same time... with Claude Code from a single platform ... > Build iOS App, send to app store > Build web App (New), deploy to the internet w/ 1 click > All apps deploy frontend and backend

oh my... Claude Code is evolving You can now build a web app and mobile app at the same time... with Claude Code from a single platform ... > Build iOS App, send to app store > Build web App (New), deploy to the internet w/ 1 click > All apps deploy frontend and backend

Chorus.com

81,928 次观看 • 7 个月前

Each Assist type can now be triggered via cancelling an attack. In addition, the assist character will now appear from behind the main character when using Cancel Assist and is also sped up accordingly with the screen freeze time adjustment. Watch the full recap video here:

Each Assist type can now be triggered via cancelling an attack. In addition, the assist character will now appear from behind the main character when using Cancel Assist and is also sped up accordingly with the screen freeze time adjustment. Watch the full recap video here:

MARVEL Tōkon: Fighting Souls

88,179 次观看 • 6 个月前

Delete highlight cover IDOR bug in Instagram $3000 Bug Bounty PoC Write-up:

Delete highlight cover IDOR bug in Instagram $3000 Bug Bounty PoC Write-up:

NullSecurityX

22,933 次观看 • 4 个月前

Elena Rybakina has arrived in Stuttgart. The No. 1 seed is ready. The last time she played this event in 2024, she won the title. 🏎️🐠 (via Porsche Tennis)

Elena Rybakina has arrived in Stuttgart. The No. 1 seed is ready. The last time she played this event in 2024, she won the title. 🏎️🐠 (via Porsche Tennis)

The Tennis Letter

19,507 次观看 • 4 个月前

CURSOR IS ON YOUR PHONE!1 Watch this 7min video for a first look at how I fixed my broken React app without ever leaving my phone using the Cursor background agent web app

CURSOR IS ON YOUR PHONE!1 Watch this 7min video for a first look at how I fixed my broken React app without ever leaving my phone using the Cursor background agent web app

Ian Nuttall

68,648 次观看 • 1 年前

The CertiK Skyfall team identified and collaborated with Apple to fix a vulnerability (CVE-2024-27801) in the low-level implementation of NSXPC, affecting all Apple platforms. This vulnerability could have potentially allowed malicious apps to gain unauthorized access to system services or steal user data from certain third-party applications, particularly those with architectures similar to Telegram. Our proof-of-concept attack demonstrated how a malicious app could steal chat history (such as pictures) from Telegram and transfer it to a remote server. Upgrade all your Apple devices and stay safe! Source:

The CertiK Skyfall team identified and collaborated with Apple to fix a vulnerability (CVE-2024-27801) in the low-level implementation of NSXPC, affecting all Apple platforms. This vulnerability could have potentially allowed malicious apps to gain unauthorized access to system services or steal user data from certain third-party applications, particularly those with architectures similar to Telegram. Our proof-of-concept attack demonstrated how a malicious app could steal chat history (such as pictures) from Telegram and transfer it to a remote server. Upgrade all your Apple devices and stay safe! Source:

CertiK

341,505 次观看 • 2 年前

🛍Grand Debut: Web Store🛍 The wait is over!!! Today is the unveiling of $DCARD’s full scale and eye popping WEB STORE! ☑️ This momentous event marks another chapter for DecentraCard. Our mission to make crypto more accessible has just accelerated. Crypto traders far and wide now have the convenience to choose between our Telegram app or Web Store. $DCARD, the one stop for all your crypto needs.

🛍Grand Debut: Web Store🛍 The wait is over!!! Today is the unveiling of $DCARD’s full scale and eye popping WEB STORE! ☑️ This momentous event marks another chapter for DecentraCard. Our mission to make crypto more accessible has just accelerated. Crypto traders far and wide now have the convenience to choose between our Telegram app or Web Store. $DCARD, the one stop for all your crypto needs.

DecentraCard

30,132 次观看 • 2 年前

Multi-Radar loop from the peak of the April 26, 2024 tornado outbreak using radar data from Omaha, Hastings, Kansas City, Topeka and Des Moines. Overlaid are Warnings, Watches, Mesoscale Discussions, Closest Radar Polygons, and the SPC Day-1 Convective Outlook. The desktop version of my Radar Archive is now available! Individuals who use the Desktop version of the web-based version will have their frames loaded ~2x faster, and will have double the frame limits as the web-based version. Gold Tier and Diamond Tier users also have exclusive perks when using the Desktop version. The desktop app can be downloaded from the web-interface or using the link in the first reply!

Multi-Radar loop from the peak of the April 26, 2024 tornado outbreak using radar data from Omaha, Hastings, Kansas City, Topeka and Des Moines. Overlaid are Warnings, Watches, Mesoscale Discussions, Closest Radar Polygons, and the SPC Day-1 Convective Outlook. The desktop version of my Radar Archive is now available! Individuals who use the Desktop version of the web-based version will have their frames loaded ~2x faster, and will have double the frame limits as the web-based version. Gold Tier and Diamond Tier users also have exclusive perks when using the Desktop version. The desktop app can be downloaded from the web-interface or using the link in the first reply!

Hunter Hurley

29,982 次观看 • 16 天前

Today's update of Gemini 2.5 Pro Preview is amazing at code web dev, editing, and transformation -- it is now #1 on the WebDev arena, with an ELO score of 1420. That means you can build super cool, visually stunning web apps, with just a single prompt! Check out this example, where we explore the world using this app we created in Gemini's Canvas using the Maps API.

Today's update of Gemini 2.5 Pro Preview is amazing at code web dev, editing, and transformation -- it is now #1 on the WebDev arena, with an ELO score of 1420. That means you can build super cool, visually stunning web apps, with just a single prompt! Check out this example, where we explore the world using this app we created in Gemini's Canvas using the Maps API.

Tulsee Doshi

115,735 次观看 • 1 年前