Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

Fun react bug, (CVE-2025-55183) if you have a server side component and it explicitly or implicitly exposes a stringified argument you can get the source code for that function. Also found DoS, but reported it to vercel instead of meta and some else reported the next day 🙃

AndrewMohawk⁽ⁿᵘˡˡ⁾

5,770 subscribers

20,369 views • 11 months ago •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

5 Comments

Vishal Mishra11 months ago

You did a very great job of reporting it to the Vercel, I got to know about you through vercel blog, explaining about this vulnerability.

Benjamin Woodruff11 months ago

This was a pretty clever find. Congrats!

0xSaiyangod11 months ago

🥲

Casey Spaulding10 months ago

Good work!

Evtdanya11 months ago

give code + poc pls

Related Videos

Dear Mr Lere Olayinka - Aresa 1, thank you for sharing the number to report uncleared refuse. I reported this one at Ebitu Ukiwe Street in Jabi to Official FCTA some 5 days ago. I have also reported it to the helplines that you helpfully provided below but it has still not been cleared and is actually getting worse. I wonder if you can intervene in any way. Thank you. Compliments of the season.

Dear Mr Lere Olayinka - Aresa 1, thank you for sharing the number to report uncleared refuse. I reported this one at Ebitu Ukiwe Street in Jabi to Official FCTA some 5 days ago. I have also reported it to the helplines that you helpfully provided below but it has still not been cleared and is actually getting worse. I wonder if you can intervene in any way. Thank you. Compliments of the season.

Dr Joe Abah, OON

195,408 views • 10 months ago

Last but not least bug of the year, 2025. Found a remote printer bug that allows remote arbitrary write file. This was reported to MSRC however they told us is not replicated on their side.

Last but not least bug of the year, 2025. Found a remote printer bug that allows remote arbitrary write file. This was reported to MSRC however they told us is not replicated on their side.

nafiez

21,360 views • 10 months ago

you can steal react components from any website without source code most people screenshot UIs and ask AI to recreate them. but with react fiber, you can extract the exact component 1:1 - same styling, props, design system, component structure

you can steal react components from any website without source code most people screenshot UIs and ask AI to recreate them. but with react fiber, you can extract the exact component 1:1 - same styling, props, design system, component structure

david fant

332,073 views • 10 months ago

This is some good information to know. The US mail system aggregates stewardship of delivery but not deadlines. The work around this is signing up for USPS digital or online account and it is free service. It sends you an image scan via email of the current postal mail to be delivered that day so the proof of what was delivered or not is given to you. You get a notification everyday whether you have mail or not. I don't know if this service varies by state so consider looking into the availability for your postal zip code covered area. . 's a state-by-state. If you can get this access depending on the state you live in. But I believe every state should have the account. You can set it up, it's easy. And then you can see your mail. That's coming. If you have packages coming, you can see your account and it gives you notifications every day regardless if you get mail or not, whether you have something coming or not. #Inspirenaire

This is some good information to know. The US mail system aggregates stewardship of delivery but not deadlines. The work around this is signing up for USPS digital or online account and it is free service. It sends you an image scan via email of the current postal mail to be delivered that day so the proof of what was delivered or not is given to you. You get a notification everyday whether you have mail or not. I don't know if this service varies by state so consider looking into the availability for your postal zip code covered area. . 's a state-by-state. If you can get this access depending on the state you live in. But I believe every state should have the account. You can set it up, it's easy. And then you can see your mail. That's coming. If you have packages coming, you can see your account and it gives you notifications every day regardless if you get mail or not, whether you have something coming or not. #Inspirenaire

Inspirenaire

18,205 views • 7 months ago

Datadog CISO Emilio Escobar says intent is now a must-have for AI security solutions: "These agents are trained on existing code, and they have a reward structure. If code is meant to solve the bug, but it gets rewarded on that, it doesn't care if it's doing something else outside of that." "You have to be careful how you prompt these things, but also how it actually interprets your prompt and executes on that. So we have this judge now evaluating the code output of the agents to then make sure that we're doing that." "I did a roundtable last week about agentic security, and the sense that I got from a bunch of the security leaders was a sense of helplessness. Of just waiting for a commercial solution to come in and solve it all." Emilio Escobar Datadog, Inc.

Datadog CISO Emilio Escobar says intent is now a must-have for AI security solutions: "These agents are trained on existing code, and they have a reward structure. If code is meant to solve the bug, but it gets rewarded on that, it doesn't care if it's doing something else outside of that." "You have to be careful how you prompt these things, but also how it actually interprets your prompt and executes on that. So we have this judge now evaluating the code output of the agents to then make sure that we're doing that." "I did a roundtable last week about agentic security, and the sense that I got from a bunch of the security leaders was a sense of helplessness. Of just waiting for a commercial solution to come in and solve it all." Emilio Escobar Datadog, Inc.

a16z

34,697 views • 3 months ago

Someone asked me, "How can I host my website using Vercel and Netlify for free domain or subdomain?" Here is my answer: In the video, I showed how to upload the website created by Ai into Vercel and it will give you a link you can share to clients Thank me later Also, if you have other options, share it let's learn

Someone asked me, "How can I host my website using Vercel and Netlify for free domain or subdomain?" Here is my answer: In the video, I showed how to upload the website created by Ai into Vercel and it will give you a link you can share to clients Thank me later Also, if you have other options, share it let's learn

Richard U. | Web Developer

25,002 views • 3 months ago

You can now connect your React application to any MCP server! And it only takes a single command: $ npx copilotkit@latest init -m MCP This is massive for anyone building React applications! Using the CopilotKit🪁 MCP Client Component, you can get an MCP Client chat component in your application and instant access to any MCP server out there! It doesn't get easier than this. Check out the link below for instructions on how to proceed ↓

You can now connect your React application to any MCP server! And it only takes a single command: $ npx copilotkit@latest init -m MCP This is massive for anyone building React applications! Using the CopilotKit🪁 MCP Client Component, you can get an MCP Client chat component in your application and instant access to any MCP server out there! It doesn't get easier than this. Check out the link below for instructions on how to proceed ↓

Santiago

40,009 views • 1 year ago

Why is it important to hear the argument of the other side? Watch what Putin says in the video (left) and how it is reported in the media (right). Ask yourself if the purpose is to inform the reader or to build a narrative

Why is it important to hear the argument of the other side? Watch what Putin says in the video (left) and how it is reported in the media (right). Ask yourself if the purpose is to inform the reader or to build a narrative

Glenn Diesen

570,204 views • 2 years ago

I see this comment now and then but pro or not, the argument is that the game CAN be played like that, due to a learning curve that recent games got rid of. You can pull it off if you want to and once you get the hang of it, this is what your gameplay can effortlessly look like.

I see this comment now and then but pro or not, the argument is that the game CAN be played like that, due to a learning curve that recent games got rid of. You can pull it off if you want to and once you get the hang of it, this is what your gameplay can effortlessly look like.

Sebastian Highwind Dell’Aria 🌌

594,200 views • 11 months ago

A stomach bug caused by a parasite has been reported by hundreds of people in 17 states, according to the CDC. Cyclosporiasis is spread by eating food or drinking beverages containing the parasite – but the CDC does not yet know the source of the current outbreaks. It also does not know if the clusters of cases are linked and have the same source, but they are working on tracing the origins. Here's what to know about the virus and how to try and abate it. #health #healthwarning

A stomach bug caused by a parasite has been reported by hundreds of people in 17 states, according to the CDC. Cyclosporiasis is spread by eating food or drinking beverages containing the parasite – but the CDC does not yet know the source of the current outbreaks. It also does not know if the clusters of cases are linked and have the same source, but they are working on tracing the origins. Here's what to know about the virus and how to try and abate it. #health #healthwarning

CBS News

1,601,245 views • 4 months ago

How would you react if your date made you a #homecookedmeal instead of taking you taking you out to eat at #CapitolGrill?? It was the #entitlement, the #disrespect and the #babyhair that did it for me.

How would you react if your date made you a #homecookedmeal instead of taking you taking you out to eat at #CapitolGrill?? It was the #entitlement, the #disrespect and the #babyhair that did it for me.

Rickey Smiley

63,325 views • 3 years ago

Some of you haven’t been touched in years, and instead of letting that reality wake you up, you found ways to numb it. Screens, fantasy, comfort. I get it, but at some point you have to decide if you want to cope… Or actually change something. Because life won’t come find you in your room: you have to step into it. Full video is on youtube.

Some of you haven’t been touched in years, and instead of letting that reality wake you up, you found ways to numb it. Screens, fantasy, comfort. I get it, but at some point you have to decide if you want to cope… Or actually change something. Because life won’t come find you in your room: you have to step into it. Full video is on youtube.

Command Within | Build Self-Command

134,971 views • 6 months ago

"Running for office can have the objective of raising consciousness. It can stop the bleeding in some aspects -- especially if you beat out a completely pernicious candidate. It can have the effect of mobilization...That is the function of electoralism. The function of electoralism is not to bring about socialism. " - Dr. CBS

"Running for office can have the objective of raising consciousness. It can stop the bleeding in some aspects -- especially if you beat out a completely pernicious candidate. It can have the effect of mobilization...That is the function of electoralism. The function of electoralism is not to bring about socialism. " - Dr. CBS

Briahna Joy Gray

14,009 views • 3 months ago

“If results continue in this fashion it does become untenable. But you have to get the next bit right if there is a next bit because if you don’t, it can set you back years. “There’s got to be a plan. You can’t just say ‘get rid of him anyone else will do’.” The Anfield Wrap🗣️

“If results continue in this fashion it does become untenable. But you have to get the next bit right if there is a next bit because if you don’t, it can set you back years. “There’s got to be a plan. You can’t just say ‘get rid of him anyone else will do’.” The Anfield Wrap🗣️

The Anfield Wrap

63,999 views • 11 months ago

Can You Be Successful with Trading only Part-Time? Kristjan Kullamägi 🇺🇦 "Yes, you can make money if you have a full-time job, but the thing is to get to the profitability level you need to put in a lot of effort, a lot of concentrated effort over a several year period. But once you get it, once you get all the bullshit beliefs out of your system and really can focus on the things that work, I think you can do a lot of things on the side. You don't have to focus too much on the market, but it's a very hard thing to do to get to the level where you only focus on like a very, very few things. I'm not able to do that, but some people can. But I don't think you can, I don't think it's easy to get to be a profitable trader if you are doing something else full-time. It's incredibly hard. It's incredibly hard if you put in a full-time focus. It's even harder if you do something else full-time. I don't know. I haven't tried it. I've already always focused on this one thing, except for in the first couple of years where I lost money. Being a consistently successful trader is a tough life, man. I've put in so much effort to get to that level. Most people just give up. If you want to be a successful trader, you really need to want it. You really need to think you're going to do this on the side, make some money and then go do some art or some art to make it. It needs to be your calling, otherwise you can just put your money in the index funds, you'll be better off."

Can You Be Successful with Trading only Part-Time? Kristjan Kullamägi 🇺🇦 "Yes, you can make money if you have a full-time job, but the thing is to get to the profitability level you need to put in a lot of effort, a lot of concentrated effort over a several year period. But once you get it, once you get all the bullshit beliefs out of your system and really can focus on the things that work, I think you can do a lot of things on the side. You don't have to focus too much on the market, but it's a very hard thing to do to get to the level where you only focus on like a very, very few things. I'm not able to do that, but some people can. But I don't think you can, I don't think it's easy to get to be a profitable trader if you are doing something else full-time. It's incredibly hard. It's incredibly hard if you put in a full-time focus. It's even harder if you do something else full-time. I don't know. I haven't tried it. I've already always focused on this one thing, except for in the first couple of years where I lost money. Being a consistently successful trader is a tough life, man. I've put in so much effort to get to that level. Most people just give up. If you want to be a successful trader, you really need to want it. You really need to think you're going to do this on the side, make some money and then go do some art or some art to make it. It needs to be your calling, otherwise you can just put your money in the index funds, you'll be better off."

Ted Zhang

17,434 views • 15 days ago

Treyarch TreyarchCM Matt Scronce (and Xclusive Ace Just a heads-up) I found a weird bug and I've also found the solution (and the cause) for it. Sometimes, your class keeps resetting every single time you make a change and then return to the menu or start a match. It will revert to what it was before. The reason this is happening is that if you previously went to a private match and equipped any overclock for an equipment, field upgrade, or scorestreak that you haven't unlocked yet, it will remain equipped indefinitely. This occurs even if you haven't unlocked the item in public matches, and consequently, every time you create a class with that item, the class will bug The solution is to go to the "Create a Class" menu in a public match and deselect the overclock (even if you don't have it unlocked), and it will fix the issue. Hope it gets fixed asap. I also hope I made it clear, as English is not my native language haha

Treyarch TreyarchCM Matt Scronce (and Xclusive Ace Just a heads-up) I found a weird bug and I've also found the solution (and the cause) for it. Sometimes, your class keeps resetting every single time you make a change and then return to the menu or start a match. It will revert to what it was before. The reason this is happening is that if you previously went to a private match and equipped any overclock for an equipment, field upgrade, or scorestreak that you haven't unlocked yet, it will remain equipped indefinitely. This occurs even if you haven't unlocked the item in public matches, and consequently, every time you create a class with that item, the class will bug The solution is to go to the "Create a Class" menu in a public match and deselect the overclock (even if you don't have it unlocked), and it will fix the issue. Hope it gets fixed asap. I also hope I made it clear, as English is not my native language haha

Caprio

19,502 views • 11 months ago

THIS GUY ADDED A LIVE BROWSER TO CLAUDE CODE SO YOU CAN CLICK ANY ELEMENT AND EDIT IT INSTANTLY biggest issue with vibe coding UI is that you have to describe what you want to change. if you prompt it the wrong selector or wrong component, Claude can't find it. now you just click it. your app runs in an embedded browser with Claude Code. you can click any button, any text, any div. Claude instantly knows exactly what you're pointing at. click. instruct. done. no more "change the button in the top right corner of the second card component." all you have to do now is just click the button. AND its open source

THIS GUY ADDED A LIVE BROWSER TO CLAUDE CODE SO YOU CAN CLICK ANY ELEMENT AND EDIT IT INSTANTLY biggest issue with vibe coding UI is that you have to describe what you want to change. if you prompt it the wrong selector or wrong component, Claude can't find it. now you just click it. your app runs in an embedded browser with Claude Code. you can click any button, any text, any div. Claude instantly knows exactly what you're pointing at. click. instruct. done. no more "change the button in the top right corner of the second card component." all you have to do now is just click the button. AND its open source

Om Patel

154,329 views • 7 months ago

Linux tip of the day 💡 Get any previous argument In bash shell, you can use the syntax !:n to get the nth argument for the previous command. For example, if you have a command: ls -l agatha.txt agatha_complete.txt You can get the 2nd argument of the above command, that is agatha_complete.txt by using !:2 .

Linux tip of the day 💡 Get any previous argument In bash shell, you can use the syntax !:n to get the nth argument for the previous command. For example, if you have a command: ls -l agatha.txt agatha_complete.txt You can get the 2nd argument of the above command, that is agatha_complete.txt by using !:2 .

Linux Handbook

23,742 views • 11 months ago

.President Donald J. Trump: "Do you know that the news never reported the words, 'Walk or march PEACEFULLY and patriotically to the Capitol' ... they never reported it—it's a scandal. The Unselect Committee never reported that. They never reported that Nancy Pelosi was offered 10,000 soldiers."

.President Donald J. Trump: "Do you know that the news never reported the words, 'Walk or march PEACEFULLY and patriotically to the Capitol' ... they never reported it—it's a scandal. The Unselect Committee never reported that. They never reported that Nancy Pelosi was offered 10,000 soldiers."

Rapid Response 47

207,066 views • 10 months ago

I found a vulnerability in Oracle VirtualBox (CVE-2026-21957) back in September 2025. It can be turned into AAR/AAW, and then escaping the VM is pretty easy. I originally planned to find a vulnerability for Pwn2Own, but since I found the vuln in September, sitting on a practical vuln for that long didn’t feel very ethical, so I eventually reported it to ZDI. But I still finished the exploitation + demo video as practice.

I found a vulnerability in Oracle VirtualBox (CVE-2026-21957) back in September 2025. It can be turned into AAR/AAW, and then escaping the VM is pretty easy. I originally planned to find a vulnerability for Pwn2Own, but since I found the vuln in September, sitting on a practical vuln for that long didn’t feel very ethical, so I eventually reported it to ZDI. But I still finished the exploitation + demo video as practice.

NiNi

93,229 views • 8 months ago