Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

Exploiting a DOM-XSS vulnerability in a BBP with DorkixAI

4osp3l's profile picture

Gospel

20,116 subscribers

15,055 görüntüleme • 2 ay önce •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Yorum

Yorum bulunmuyor

Orijinal gönderinin yorumları burada görünecek

Benzer Videolar

Yeeeeah you could manually figure out a payload for DOM XSS... or you could just ask Burp AI to do it for you.
0:55

Yeeeeah you could manually figure out a payload for DOM XSS... or you could just ask Burp AI to do it for you.

Burp Suite

19,365 görüntüleme • 8 ay önce

Exploiting the #EvilVideo vulnerability on Telegram We discovered a 0-day Telegram for Android exploit that allows sending malicious apps disguised as videos ESET Research ESET
0:37

Exploiting the #EvilVideo vulnerability on Telegram We discovered a 0-day Telegram for Android exploit that allows sending malicious apps disguised as videos ESET Research ESET

Lukas Stefanko

55,818 görüntüleme • 2 yıl önce

Exploiting llama.cpp’s RPC Server - From Null Buffer to RCE Against PIE + Full RELRO + NX | CVE-2026-34159: The vulnerability is a one-line logic bug in the RPC server’s tensor deserialization pipeline. Youtube: Blog:
0:37

Exploiting llama.cpp’s RPC Server - From Null Buffer to RCE Against PIE + Full RELRO + NX | CVE-2026-34159: The vulnerability is a one-line logic bug in the RPC server’s tensor deserialization pipeline. Youtube: Blog:

NullSecurityX

19,539 görüntüleme • 2 ay önce

Memory Corruption Vulnerability in Linux "Memory Safe" Rust Code Rust programmers re-wrote a portion of the Linux kernel in Rust. That Rust code had a crashing vulnerability in an "unsafe" chunk of code... which Linux is littered with.
18:23

Memory Corruption Vulnerability in Linux "Memory Safe" Rust Code Rust programmers re-wrote a portion of the Linux kernel in Rust. That Rust code had a crashing vulnerability in an "unsafe" chunk of code... which Linux is littered with.

The Lunduke Journal

70,616 görüntüleme • 7 ay önce

XML External Entity (XXE) vulnerability in 2026 with a practical Proof of Concept (PoC) Follow us: #BugBounty #CyberSecurity
1:13

XML External Entity (XXE) vulnerability in 2026 with a practical Proof of Concept (PoC) Follow us: #BugBounty #CyberSecurity

NullSecurityX

11,524 görüntüleme • 4 ay önce

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]
0:31

I found 2 stored XSS vulnerabilities in ChatGPT. The XSS bug was the easy part, but sharing it required bypassing CSP, leveraging a mass assignment issue for client-side path traversal (thanks Critical Thinking - Bug Bounty Podcast) to force a request to a BFLA endpoint. 🧵 [1/5]

Ron Masas

76,731 görüntüleme • 2 yıl önce

Exploiting people with a pre existing mental condition is not cool.
2:06

Exploiting people with a pre existing mental condition is not cool.

AlphaFox

65,063 görüntüleme • 3 yıl önce

Here is ENLBufferPwn (CVE ID pending), a severe vulnerability in many first party 3DS, Wii U and Switch games. It allows remote code execution in a victim console by just having an online game session with an attacker. Vulnerability report: 🧵(1/7)
0:27

Here is ENLBufferPwn (CVE ID pending), a severe vulnerability in many first party 3DS, Wii U and Switch games. It allows remote code execution in a victim console by just having an online game session with an attacker. Vulnerability report: 🧵(1/7)

PabloMK7

590,834 görüntüleme • 3 yıl önce

Footage of a player exploiting in the New Time Trials 🤯❌
1:00

Footage of a player exploiting in the New Time Trials 🤯❌

Pet Simulator News

18,796 görüntüleme • 1 yıl önce

"A Vulnerability to Hack The World" - CVE-2023-4863 The start of a mini series digging into the recent WebP vulnerability. In this first episode, we explore huffman tables!
17:59

"A Vulnerability to Hack The World" - CVE-2023-4863 The start of a mini series digging into the recent WebP vulnerability. In this first episode, we explore huffman tables!

LiveOverflow 🔴

44,787 görüntüleme • 2 yıl önce

Date with a Dom 3
0:25

Sensitive content

Date with a Dom 3

OfficialEmpressJennifer

80,015 görüntüleme • 2 yıl önce

Dom Kennedy With a Game Saving Home Run Robbery in a Celebrity Softball Game 😂⚾️🔥
0:23

Dom Kennedy With a Game Saving Home Run Robbery in a Celebrity Softball Game 😂⚾️🔥

AuxGod

40,041 görüntüleme • 1 yıl önce

vulnerability is a huge strength
0:28

vulnerability is a huge strength

The Notorious J.O.V.

123,282 görüntüleme • 1 yıl önce

firefox focus universal xss 0day (universal account takeover) this is still unpatched after almost a year in disclosure so we are releasing our poc
0:36

firefox focus universal xss 0day (universal account takeover) this is still unpatched after almost a year in disclosure so we are releasing our poc

V12

1,161,693 görüntüleme • 1 ay önce

exploiting a v8 engine pwn challenge
0:42

exploiting a v8 engine pwn challenge

Ruikai Peng

30,361 görüntüleme • 1 yıl önce

0xJS is an AI-powered JS security tool; - it can identify API keys, and other medium to critical severity secrets with high accuracy. - also scans for potential security issues in JS i.e DOM-XSS, postMessage, URL redirect. e..t..c - e..t..c; 0xJS v4.0 ( )
4:39

0xJS is an AI-powered JS security tool; - it can identify API keys, and other medium to critical severity secrets with high accuracy. - also scans for potential security issues in JS i.e DOM-XSS, postMessage, URL redirect. e..t..c - e..t..c; 0xJS v4.0 ( )

Gospel

10,682 görüntüleme • 4 ay önce

A parlay instead of a tip? Exploiting homeless people?
1:02

A parlay instead of a tip? Exploiting homeless people?

Beau Knows

39,719 görüntüleme • 1 yıl önce