Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

Found a heap overflow vulnerability in Windows SMB that leads to RCE and reported it to MSRC in June. The vulnerability has now been addressed with CVE-2026-62800 in the August Patch Tuesday updates.

zeifan's profile picture

nafiez

2,340 subscribers

30,619 görüntüleme • 5 gün önce •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Yorum

Yorum bulunmuyor

Orijinal gönderinin yorumları burada görünecek

Benzer Videolar

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm
0:14

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm

Carlos Vieira (lynx)

81,336 görüntüleme • 1 yıl önce

Microsoft has addressed a one-click NTLM leak vulnerability affecting Windows Snipping Tool (CVE-2026-33829), discovered by our researcher Marcos Díaz (Marcos Díaz). ➡️ Read the write-up: ➡️ Microsoft bulletin:
0:18

Microsoft has addressed a one-click NTLM leak vulnerability affecting Windows Snipping Tool (CVE-2026-33829), discovered by our researcher Marcos Díaz (Marcos Díaz). ➡️ Read the write-up: ➡️ Microsoft bulletin:

BlackArrow

113,616 görüntüleme • 4 ay önce

💥 Introducing "Zapscape" (CVE-2026-64561) A Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU's recursive "ZAP" path. Can escape to the host on x86 public clouds that expose nested virtualization. A separate vulnerability from Januscape. If you match the vulnerable conditions, apply the patch immediately. Details:
0:17

💥 Introducing "Zapscape" (CVE-2026-64561) A Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU's recursive "ZAP" path. Can escape to the host on x86 public clouds that expose nested virtualization. A separate vulnerability from Januscape. If you match the vulnerable conditions, apply the patch immediately. Details:

V4bel

30,165 görüntüleme • 10 gün önce

An analysis of CVE-2026-21236 - A heap based buffer overflow in the Microsoft Windows Kernel afd.sys - was just published by Emily L a recent secondment with my team EDG! Nice work for her first triage of a kernel memory corruption bug!
0:13

An analysis of CVE-2026-21236 - A heap based buffer overflow in the Microsoft Windows Kernel afd.sys - was just published by Emily L a recent secondment with my team EDG! Nice work for her first triage of a kernel memory corruption bug!

Alex Plaskett

17,030 görüntüleme • 5 ay önce

In this research, Hakai Security Research Team has identified a critical Remote Code Execution (RCE) vulnerability in Wazuh versions up to 4.14.1 that allows arbitrary command execution on the master node through insecure deserialization in the cluster communication protocol. Written by Texugo
0:16

In this research, Hakai Security Research Team has identified a critical Remote Code Execution (RCE) vulnerability in Wazuh versions up to 4.14.1 that allows arbitrary command execution on the master node through insecure deserialization in the cluster communication protocol. Written by Texugo

Hakai Offsec

39,135 görüntüleme • 5 ay önce

Since V8 had heap sandbox, Chrome renderer RCE usually means chaining 2 bugs Today we bring the Spear of Longinus 1 bug, 100% success, no heap spray, found in 40+ major versions, arbitrary renderer read/write + V8 sandbox escape Our CVE-2026-6307 writeup
0:15

Since V8 had heap sandbox, Chrome renderer RCE usually means chaining 2 bugs Today we bring the Spear of Longinus 1 bug, 100% success, no heap spray, found in 40+ major versions, arbitrary renderer read/write + V8 sandbox escape Our CVE-2026-6307 writeup

Nebula Security

50,550 görüntüleme • 1 ay önce

Exim 4.99.3 is out, patching CVE-2026-45185, a critical RCE found by XBOW! Check out our post linked in the reply; I'll summarize some details in this thread.
0:14

Exim 4.99.3 is out, patching CVE-2026-45185, a critical RCE found by XBOW! Check out our post linked in the reply; I'll summarize some details in this thread.

Brendan Dolan-Gavitt

33,510 görüntüleme • 3 ay önce

A Toronto synagogue’s windows were smashed with a hammer on Tuesday morning, marking the tenth time that it has been vandalised in a year and a half.
0:14

A Toronto synagogue’s windows were smashed with a hammer on Tuesday morning, marking the tenth time that it has been vandalised in a year and a half.

Michael Starr

234,699 görüntüleme • 9 ay önce

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04
0:10

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04

V4bel

15,887 görüntüleme • 1 yıl önce

MY #BBUK WINNER🏆 No one else in that house this series has been on the rollercoaster Olivia has with the British public, has provided comedy, drama, vulnerability, opinions on LGBTQ+ subjects, owned to her mistakes. Her journey has been iconic to watch
0:17

MY #BBUK WINNER🏆 No one else in that house this series has been on the rollercoaster Olivia has with the British public, has provided comedy, drama, vulnerability, opinions on LGBTQ+ subjects, owned to her mistakes. Her journey has been iconic to watch

teen of paint🎨

137,390 görüntüleme • 2 yıl önce

I found a CVE in my studio lights💡 ✨【𝒞𝒱𝐸－𝟤𝟢𝟤𝟧－𝟩𝟤𝟢𝟤】✨ I discovered a CSRF vulnerability in Elgato’s Key Lights that allows any website make your Elgato lights flicker aggressively. Want to learn more about how I did this? Read the full blog post below 👇
0:12

I found a CVE in my studio lights💡 ✨【𝒞𝒱𝐸－𝟤𝟢𝟤𝟧－𝟩𝟤𝟢𝟤】✨ I discovered a CSRF vulnerability in Elgato’s Key Lights that allows any website make your Elgato lights flicker aggressively. Want to learn more about how I did this? Read the full blog post below 👇

PinkDraconian

51,231 görüntüleme • 1 yıl önce

I've confirmed Samsung's MagicINFO 21.1050 is VULNERABLE to the publicly reported POC in the blog below. The media is reporting this as CVE-2024-7399, but if it is then the patch is incomplete. There is currently NO PATCH AVAILABLE!
0:17

I've confirmed Samsung's MagicINFO 21.1050 is VULNERABLE to the publicly reported POC in the blog below. The media is reporting this as CVE-2024-7399, but if it is then the patch is incomplete. There is currently NO PATCH AVAILABLE!

Jai Minton

15,205 görüntüleme • 1 yıl önce

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ, exploiting the vm:// protocol to achieve Remote Code Execution
0:11

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ, exploiting the vm:// protocol to achieve Remote Code Execution

pyn3rd

21,018 görüntüleme • 3 ay önce

Heavy rainfall in the catchment areas caused the water level in Nullah Lai to rise to 10 feet. It has now receded to 7 feet and continues to fall. There is a temporary overflow in tributaries across Rawalpindi is due to sudden surges. I have directed all concerned departments to ensure that the overflow is cleared within the next two hours. Rescue 1122, the Commissioner, Deputy Commissioner, WASA, Local Government, and Suthra Punjab teams are on the ground, monitoring the situation and ensuring a swift response. I am monitoring the situation directly and receiving live updates. Citizens are requested to remain calm and follow official advisory.
0:14

Heavy rainfall in the catchment areas caused the water level in Nullah Lai to rise to 10 feet. It has now receded to 7 feet and continues to fall. There is a temporary overflow in tributaries across Rawalpindi is due to sudden surges. I have directed all concerned departments to ensure that the overflow is cleared within the next two hours. Rescue 1122, the Commissioner, Deputy Commissioner, WASA, Local Government, and Suthra Punjab teams are on the ground, monitoring the situation and ensuring a swift response. I am monitoring the situation directly and receiving live updates. Citizens are requested to remain calm and follow official advisory.

Maryam Nawaz Sharif

321,451 görüntüleme • 16 gün önce

Earlier this year, Lexfo published details of a pre-authentication #RCE vuln in #Fortinet SSL VPN. We then published a #vulnerability scanner & analysis of vulnerable systems on the internet along w/ a proof-of-concept demo. Read how we built it here.
0:18

Earlier this year, Lexfo published details of a pre-authentication #RCE vuln in #Fortinet SSL VPN. We then published a #vulnerability scanner & analysis of vulnerable systems on the internet along w/ a proof-of-concept demo. Read how we built it here.

Bishop Fox

10,042 görüntüleme • 2 yıl önce

On PS5 quite a few people reported this horrible visual bug with water and underwater base parts, affecting both VR and flat-mode. A fix is now in today’s experimental build and should make it to a future patch. My bug - rolling eyes when I found it.
0:13

On PS5 quite a few people reported this horrible visual bug with water and underwater base parts, affecting both VR and flat-mode. A fix is now in today’s experimental build and should make it to a future patch. My bug - rolling eyes when I found it.

Martin Griffiths

26,401 görüntüleme • 1 yıl önce

It is being reported that the CRAM system at the American Embassy in Baghdad has been targeted by a drone.
0:14

It is being reported that the CRAM system at the American Embassy in Baghdad has been targeted by a drone.

ayden

62,526 görüntüleme • 5 ay önce

The Bible that was found in North Carolina, which was wrapped around a pole from Hurricane Helene and was opened to Revelation 14 and 15, has now been encased
0:16

The Bible that was found in North Carolina, which was wrapped around a pole from Hurricane Helene and was opened to Revelation 14 and 15, has now been encased

Frank Fighting For Freedom 🗡️🇺🇸

19,191,464 görüntüleme • 1 yıl önce

BREAKING: Tornado touches down in Montebello, CA. Watch as the tornado touches down and causes damage to businesses in the area. It has been reported that one person sustained injuries, and several buildings have substantial damage.
0:17

BREAKING: Tornado touches down in Montebello, CA. Watch as the tornado touches down and causes damage to businesses in the area. It has been reported that one person sustained injuries, and several buildings have substantial damage.

Los Angeles Magazine

73,838 görüntüleme • 3 yıl önce

‼️ZELENSKYY: Ukraine’s positions on the battlefield and in other key areas are the strongest they’ve been in years. “Overall, now Ukrainian positions at the front and in our long-range sanctions, and in joint results with partners, are the strongest they’ve been in years. We need to maintain this momentum and keep delivering results.” - Ukrainian President on Tuesday, May 12, 2026.
0:15

‼️ZELENSKYY: Ukraine’s positions on the battlefield and in other key areas are the strongest they’ve been in years. “Overall, now Ukrainian positions at the front and in our long-range sanctions, and in joint results with partners, are the strongest they’ve been in years. We need to maintain this momentum and keep delivering results.” - Ukrainian President on Tuesday, May 12, 2026.

Kateryna Lisunova

42,899 görüntüleme • 3 ay önce