Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

Found a heap overflow vulnerability in Windows SMB that leads to RCE and reported it to MSRC in June. The vulnerability has now been addressed with CVE-2026-62800 in the August Patch Tuesday updates.

zeifan's profile picture

nafiez

2,426 subscribers

31,521 Aufrufe • vor 1 Monat •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm
0:14

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm

Carlos Vieira (lynx)

81,336 Aufrufe • vor 1 Jahr

Microsoft has addressed a one-click NTLM leak vulnerability affecting Windows Snipping Tool (CVE-2026-33829), discovered by our researcher Marcos Díaz (Marcos Díaz). ➡️ Read the write-up: ➡️ Microsoft bulletin:
0:18

Microsoft has addressed a one-click NTLM leak vulnerability affecting Windows Snipping Tool (CVE-2026-33829), discovered by our researcher Marcos Díaz (Marcos Díaz). ➡️ Read the write-up: ➡️ Microsoft bulletin:

BlackArrow

113,748 Aufrufe • vor 5 Monaten

💥 Introducing "Zapscape" (CVE-2026-64561) A Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU's recursive "ZAP" path. Can escape to the host on x86 public clouds that expose nested virtualization. A separate vulnerability from Januscape. If you match the vulnerable conditions, apply the patch immediately. Details:
0:17

💥 Introducing "Zapscape" (CVE-2026-64561) A Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU's recursive "ZAP" path. Can escape to the host on x86 public clouds that expose nested virtualization. A separate vulnerability from Januscape. If you match the vulnerable conditions, apply the patch immediately. Details:

V4bel

31,182 Aufrufe • vor 1 Monat

An analysis of CVE-2026-21236 - A heap based buffer overflow in the Microsoft Windows Kernel afd.sys - was just published by Emily L a recent secondment with my team EDG! Nice work for her first triage of a kernel memory corruption bug!
0:13

An analysis of CVE-2026-21236 - A heap based buffer overflow in the Microsoft Windows Kernel afd.sys - was just published by Emily L a recent secondment with my team EDG! Nice work for her first triage of a kernel memory corruption bug!

Alex Plaskett

17,121 Aufrufe • vor 6 Monaten

In this research, Hakai Security Research Team has identified a critical Remote Code Execution (RCE) vulnerability in Wazuh versions up to 4.14.1 that allows arbitrary command execution on the master node through insecure deserialization in the cluster communication protocol. Written by Texugo
0:16

In this research, Hakai Security Research Team has identified a critical Remote Code Execution (RCE) vulnerability in Wazuh versions up to 4.14.1 that allows arbitrary command execution on the master node through insecure deserialization in the cluster communication protocol. Written by Texugo

Hakai Offsec

39,306 Aufrufe • vor 6 Monaten

I found a vulnerability in OpenVPN’s Windows kernel driver involving a use-after-free / double-free condition, resulting in a reproducible BSOD. I built a working PoC and reported the issue to the OpenVPN team. Currently waiting for a fix before sharing technical details. #openvpn #bsod #uaf #research #vulnerable #kernel
0:18

I found a vulnerability in OpenVPN’s Windows kernel driver involving a use-after-free / double-free condition, resulting in a reproducible BSOD. I built a working PoC and reported the issue to the OpenVPN team. Currently waiting for a fix before sharing technical details. #openvpn #bsod #uaf #research #vulnerable #kernel

Okan Kurtulus

39,639 Aufrufe • vor 1 Monat

Since V8 had heap sandbox, Chrome renderer RCE usually means chaining 2 bugs Today we bring the Spear of Longinus 1 bug, 100% success, no heap spray, found in 40+ major versions, arbitrary renderer read/write + V8 sandbox escape Our CVE-2026-6307 writeup
0:15

Since V8 had heap sandbox, Chrome renderer RCE usually means chaining 2 bugs Today we bring the Spear of Longinus 1 bug, 100% success, no heap spray, found in 40+ major versions, arbitrary renderer read/write + V8 sandbox escape Our CVE-2026-6307 writeup

NebuSec

51,241 Aufrufe • vor 3 Monaten

Exim 4.99.3 is out, patching CVE-2026-45185, a critical RCE found by XBOW! Check out our post linked in the reply; I'll summarize some details in this thread.
0:14

Exim 4.99.3 is out, patching CVE-2026-45185, a critical RCE found by XBOW! Check out our post linked in the reply; I'll summarize some details in this thread.

Brendan Dolan-Gavitt

33,710 Aufrufe • vor 4 Monaten

A Toronto synagogue’s windows were smashed with a hammer on Tuesday morning, marking the tenth time that it has been vandalised in a year and a half.
0:14

A Toronto synagogue’s windows were smashed with a hammer on Tuesday morning, marking the tenth time that it has been vandalised in a year and a half.

Michael Starr

234,719 Aufrufe • vor 11 Monaten

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04
0:10

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04

V4bel

15,887 Aufrufe • vor 1 Jahr

⚠️Telegram 0-Click Crash Exploit Telegram Messenger This vulnerability can make Telegram unusable regardless of the version or platform. Sending just a single malicious sticker to the target chat is enough. The vulnerability was confirmed and reported to Telegram along with a PoC.
0:18

⚠️Telegram 0-Click Crash Exploit Telegram Messenger This vulnerability can make Telegram unusable regardless of the version or platform. Sending just a single malicious sticker to the target chat is enough. The vulnerability was confirmed and reported to Telegram along with a PoC.

0x6rss

121,706 Aufrufe • vor 27 Tagen

I've confirmed Samsung's MagicINFO 21.1050 is VULNERABLE to the publicly reported POC in the blog below. The media is reporting this as CVE-2024-7399, but if it is then the patch is incomplete. There is currently NO PATCH AVAILABLE!
0:17

I've confirmed Samsung's MagicINFO 21.1050 is VULNERABLE to the publicly reported POC in the blog below. The media is reporting this as CVE-2024-7399, but if it is then the patch is incomplete. There is currently NO PATCH AVAILABLE!

Jai Minton

15,226 Aufrufe • vor 1 Jahr

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ, exploiting the vm:// protocol to achieve Remote Code Execution
0:11

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ, exploiting the vm:// protocol to achieve Remote Code Execution

pyn3rd

21,018 Aufrufe • vor 5 Monaten

Just landed: /diff is now a persistent pane that you can scroll and click. It updates in real-time. For the times when you want to see the code without having to switch windows. Enjoy!
0:13

Just landed: /diff is now a persistent pane that you can scroll and click. It updates in real-time. For the times when you want to see the code without having to switch windows. Enjoy!

Boris Cherny

278,766 Aufrufe • vor 23 Tagen

A second missile threat has been reported at the site of the rubble in Kramatorsk. Rescue operations have now been suspended. The State Emergency Service has also reported that a 15-year-old child is among the dead, and a baby born in 2022 is among the wounded. #StandWithUkraine
0:16

A second missile threat has been reported at the site of the rubble in Kramatorsk. Rescue operations have now been suspended. The State Emergency Service has also reported that a 15-year-old child is among the dead, and a baby born in 2022 is among the wounded. #StandWithUkraine

Denes Torteli 🇪🇺🇭🇺🇺🇦

14,674 Aufrufe • vor 3 Jahren

Heavy rainfall in the catchment areas caused the water level in Nullah Lai to rise to 10 feet. It has now receded to 7 feet and continues to fall. There is a temporary overflow in tributaries across Rawalpindi is due to sudden surges. I have directed all concerned departments to ensure that the overflow is cleared within the next two hours. Rescue 1122, the Commissioner, Deputy Commissioner, WASA, Local Government, and Suthra Punjab teams are on the ground, monitoring the situation and ensuring a swift response. I am monitoring the situation directly and receiving live updates. Citizens are requested to remain calm and follow official advisory.
0:14

Heavy rainfall in the catchment areas caused the water level in Nullah Lai to rise to 10 feet. It has now receded to 7 feet and continues to fall. There is a temporary overflow in tributaries across Rawalpindi is due to sudden surges. I have directed all concerned departments to ensure that the overflow is cleared within the next two hours. Rescue 1122, the Commissioner, Deputy Commissioner, WASA, Local Government, and Suthra Punjab teams are on the ground, monitoring the situation and ensuring a swift response. I am monitoring the situation directly and receiving live updates. Citizens are requested to remain calm and follow official advisory.

Maryam Nawaz Sharif

322,196 Aufrufe • vor 2 Monaten

LEKKI, LAGOS: Suspicious movement of suspected cultists in an unknown black Mercedes-Benz GLK 350 SUV has been reported in the Lafiaji area of Lekki, close to Orchid Road. This area is filled with dang£rous cultists, with cult clashes reported recently. Just last week Thursday, August 6, 2026, Naija Confra received reports that cultists were at it again, with several gvnshots reported. Security operatives should take note of the recent development in order to avert any planned att@cks tonight. Stay safe out there.
0:11

LEKKI, LAGOS: Suspicious movement of suspected cultists in an unknown black Mercedes-Benz GLK 350 SUV has been reported in the Lafiaji area of Lekki, close to Orchid Road. This area is filled with dang£rous cultists, with cult clashes reported recently. Just last week Thursday, August 6, 2026, Naija Confra received reports that cultists were at it again, with several gvnshots reported. Security operatives should take note of the recent development in order to avert any planned att@cks tonight. Stay safe out there.

Naija Confra

31,725 Aufrufe • vor 1 Monat

BREAKING NEWS: A woman in her 30s has been found shot and killed in Tembisa’s Temong section this morning. The discovery brings to 12 the number of women’s bodies found in and around Ekurhuleni in recent months. Police are currently at the scene and investigating the circumstances surrounding the killing. The discovery comes two days after another woman’s body was found at Mooifontein Cemetery in Tembisa. Police have since arrested a suspect in connection with that murder. It has not been established whether the latest killing is linked to the other cases under investigation in Ekurhuleni. #Ekurhuleni #BeastOfNews
0:17

BREAKING NEWS: A woman in her 30s has been found shot and killed in Tembisa’s Temong section this morning. The discovery brings to 12 the number of women’s bodies found in and around Ekurhuleni in recent months. Police are currently at the scene and investigating the circumstances surrounding the killing. The discovery comes two days after another woman’s body was found at Mooifontein Cemetery in Tembisa. Police have since arrested a suspect in connection with that murder. It has not been established whether the latest killing is linked to the other cases under investigation in Ekurhuleni. #Ekurhuleni #BeastOfNews

BEAST OF NEWS

42,820 Aufrufe • vor 6 Tagen

Earlier this year, Lexfo published details of a pre-authentication #RCE vuln in #Fortinet SSL VPN. We then published a #vulnerability scanner & analysis of vulnerable systems on the internet along w/ a proof-of-concept demo. Read how we built it here.
0:18

Earlier this year, Lexfo published details of a pre-authentication #RCE vuln in #Fortinet SSL VPN. We then published a #vulnerability scanner & analysis of vulnerable systems on the internet along w/ a proof-of-concept demo. Read how we built it here.

Bishop Fox

10,042 Aufrufe • vor 2 Jahren