正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

GhostLock (CVE-2026-43499) is a 15yr old kernel 0-day we used in IonStack full chain exploit. Everything around you, as long as it runs Linux, from IoT to mobile to desktop, is affected. Read how we won $92,337 bug bounty with GhostLock and see our exploit on Github. Link below

Nebula Security

5,008 subscribers

120,245 次观看 • 1 天前 •via X (Twitter)

科学技术新闻政治教育

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04

qwerty and I exploited a VSock 1-day in Google kernelCTF back in February, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04

V4bel

15,887 次观看 • 1 年前

Valve taking suspiciously long to fix the bhop exploit…. I’m convinced a dev is clip farming as we speak, I just can’t prove it yet.

Valve taking suspiciously long to fix the bhop exploit…. I’m convinced a dev is clip farming as we speak, I just can’t prove it yet.

psp1g

130,202 次观看 • 11 个月前

As a messianic narcissist like Putin, Elon Musk detests “Western Civilization” because it incorporates the concept of empathy. He says caring about people is an “exploit” and a “bug.” Isn’t this what we used to call “evil” or am I remembering that wrong?

As a messianic narcissist like Putin, Elon Musk detests “Western Civilization” because it incorporates the concept of empathy. He says caring about people is an “exploit” and a “bug.” Isn’t this what we used to call “evil” or am I remembering that wrong?

Jim Stewartson, Antifascist 🇨🇦🇺🇦🏴‍☠️🇺🇸

186,794 次观看 • 1 年前

This game is DONE! Play it on mobile or desktop in the browser. Based on the classic Egg game from Game & Watch. See how many critters you can "collect"! Link below! ⌄⌄⌄⌄⌄⌄⌄

Sensitive content

This game is DONE! Play it on mobile or desktop in the browser. Based on the classic Egg game from Game & Watch. See how many critters you can "collect"! Link below! ⌄⌄⌄⌄⌄⌄⌄

Yezt

40,831 次观看 • 11 个月前

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm

Carlos Vieira (lynx)

81,336 次观看 • 1 年前

Next week is going to be AMAZING as we gear up with our #5G network to power the #LasVegasGP from the pit building to the sales terminals and everything in between...T-Mobile has fans covered with ⚡ fast speeds! (It IS a race, after all...)

Next week is going to be AMAZING as we gear up with our #5G network to power the #LasVegasGP from the pit building to the sales terminals and everything in between...T-Mobile has fans covered with ⚡ fast speeds! (It IS a race, after all...)

Mike Katz

2,893,195 次观看 • 2 年前

Confirmed (with style!) - Interrupt Labs combined a path traversal and an untrusted search path bug to exploit the Lexmark CX532adwe. They got a reverse shell and loaded Doom on the LCD. We couldn't play it though :-[ Still awesome to see. #Pwn2Own

Confirmed (with style!) - Interrupt Labs combined a path traversal and an untrusted search path bug to exploit the Lexmark CX532adwe. They got a reverse shell and loaded Doom on the LCD. We couldn't play it though :-[ Still awesome to see. #Pwn2Own

TrendAI Zero Day Initiative

13,630 次观看 • 8 个月前

‼️Copy Fail (CVE-2026-31431) is a Linux privilege escalation bug that lets any local user get root using a 732-byte Python script, and itworks on basically every major Linux distro shipped since 2017. Website: Write-up: GitHub: It's a logic flaw in the kernel's crypto code (authencesn via AF_ALG and splice()) that allows a small write into the page cache, which can be used to tamper with a setuid binary like /usr/bin/su. Think how bad this is going to be for shared environments like Kubernetes, CI runners, and cloud sandboxes, where it enables container escape and tenant-to-host compromise. Found by Theori's Xint Code scanner, patched in the mainline kernel, and publicly disclosed on April 29, 2026; if you can't patch right away, the recommended workaround is to disable the algif_aead module.

‼️Copy Fail (CVE-2026-31431) is a Linux privilege escalation bug that lets any local user get root using a 732-byte Python script, and itworks on basically every major Linux distro shipped since 2017. Website: Write-up: GitHub: It's a logic flaw in the kernel's crypto code (authencesn via AF_ALG and splice()) that allows a small write into the page cache, which can be used to tamper with a setuid binary like /usr/bin/su. Think how bad this is going to be for shared environments like Kubernetes, CI runners, and cloud sandboxes, where it enables container escape and tenant-to-host compromise. Found by Theori's Xint Code scanner, patched in the mainline kernel, and publicly disclosed on April 29, 2026; if you can't patch right away, the recommended workaround is to disable the algif_aead module.

Dark Web Informer

443,027 次观看 • 2 个月前

Valentine’s Day is around the corner & we have a Valentine’s game for you to play, thanks to our friends at Breshna⚡️! The highest score from the mobile & desktop version will each receive a $50 gift card for a date night, on us 💘

Valentine’s Day is around the corner & we have a Valentine’s game for you to play, thanks to our friends at Breshna⚡️! The highest score from the mobile & desktop version will each receive a $50 gift card for a date night, on us 💘

Jarritos

37,103 次观看 • 1 年前

The biggest bug bounty in history is now live. Uniswap just raised the standard of building in public 🪐 With $15.5M on the line, it's an unprecedented testament to the rigorous security of v4. Think you can find a critical bug? Give it a shot. 🔗 Bounty link below

The biggest bug bounty in history is now live. Uniswap just raised the standard of building in public 🪐 With $15.5M on the line, it's an unprecedented testament to the rigorous security of v4. Think you can find a critical bug? Give it a shot. 🔗 Bounty link below

Cantina 🪐

425,401 次观看 • 1 年前

‼️🚨 Security researcher ggwhyp demonstrated a full-chain Firefox exploit on Windows. He opens an HTML page, Firefox runs the code, cmd.exe spawns, Calculator opens. Signature of a browser-to-OS exploit. Prepared for Pwn2Own. ZDI rejected it. According to the researcher, it was responsibly disclosed to Mozilla.

‼️🚨 Security researcher ggwhyp demonstrated a full-chain Firefox exploit on Windows. He opens an HTML page, Firefox runs the code, cmd.exe spawns, Calculator opens. Signature of a browser-to-OS exploit. Prepared for Pwn2Own. ZDI rejected it. According to the researcher, it was responsibly disclosed to Mozilla.

International Cyber Digest

206,930 次观看 • 1 个月前

Portal Pay is a cornerstone of our product suite as we build the infra powering apps and games on every chain. Effortless cross-chain payment is a key step toward taking Web3 UX to the next level. All fees from Pay are used to buy $PORTAL.

Portal Pay is a cornerstone of our product suite as we build the infra powering apps and games on every chain. Effortless cross-chain payment is a key step toward taking Web3 UX to the next level. All fees from Pay are used to buy $PORTAL.

Portal

27,375 次观看 • 1 年前

Excited to share the KDA: Kernel Design Agents that powers HAN Lab Kernel Mafia top ranking #1~3 kernels at Kernel Contest🚀🚀🚀 Thanks to agents, everyone can be a "kernel bro" in 2026: By adapting the KDA, the team ranked #1 in MoE, #2 in DSA, and #3 in GDN in the Pure Agent track at MLSys FlashInfer Kernel Contest – especially given the fact that the main participant (dongyun zou) has only written ~400 LoC triton and 0 lines of CUDA in 2026. The core philosophy here is to leverage Humanize (the best harness framework) to let the agent run autonomously for as long as possible. By minimizing human involvement and input, and placing full trust in the agent, we can achieve kernel performance that nears SOTA levels. HAN Lab Mafia Solution to MLSys’26 Kernel Contest: KDA Github:

Excited to share the KDA: Kernel Design Agents that powers HAN Lab Kernel Mafia top ranking #1~3 kernels at Kernel Contest🚀🚀🚀 Thanks to agents, everyone can be a "kernel bro" in 2026: By adapting the KDA, the team ranked #1 in MoE, #2 in DSA, and #3 in GDN in the Pure Agent track at MLSys FlashInfer Kernel Contest – especially given the fact that the main participant (dongyun zou) has only written ~400 LoC triton and 0 lines of CUDA in 2026. The core philosophy here is to leverage Humanize (the best harness framework) to let the agent run autonomously for as long as possible. By minimizing human involvement and input, and placing full trust in the agent, we can achieve kernel performance that nears SOTA levels. HAN Lab Mafia Solution to MLSys’26 Kernel Contest: KDA Github:

Ligeng Zhu

109,445 次观看 • 1 个月前

Thank you for all who checked on us. We are all still alive, but we aren't well. After 66 days of war & siege, there is no longer food available in the markets except canned tuna. Unfortunately, it is being sold at exorbitant prices beyond imagination, & despite the fact that we have become only eaten one meal a day, but the food runs out and we only have two meals left. We ask everyone to donate as much as possible to protect us all from starvation. We don't want food to satisfy us, but we want enough to keep us alive. 💡our DONATION link is in our bio #gaza #gazaunderattack

Thank you for all who checked on us. We are all still alive, but we aren't well. After 66 days of war & siege, there is no longer food available in the markets except canned tuna. Unfortunately, it is being sold at exorbitant prices beyond imagination, & despite the fact that we have become only eaten one meal a day, but the food runs out and we only have two meals left. We ask everyone to donate as much as possible to protect us all from starvation. We don't want food to satisfy us, but we want enough to keep us alive. 💡our DONATION link is in our bio #gaza #gazaunderattack

Animal Friends Shelter

40,932 次观看 • 2 年前

I know kmedia is probably mad asf they saw the cb date from army twt rather than sniffing it out from their sources and trying to exploit it before BTS drops it, we truly won and it should always be like that!

I know kmedia is probably mad asf they saw the cb date from army twt rather than sniffing it out from their sources and trying to exploit it before BTS drops it, we truly won and it should always be like that!

Carterrr⁷ | ⊙⊝⊜

99,110 次观看 • 6 个月前

"Yes we are crazy turks" "As a turk we also use tea glass for everything" "Haha tea glass is very important in our culture. We use 'incebelli' word to our tea glasses which means slim waisted as you can see in this picture."

"Yes we are crazy turks" "As a turk we also use tea glass for everything" "Haha tea glass is very important in our culture. We use 'incebelli' word to our tea glasses which means slim waisted as you can see in this picture."

𝙈𝙪𝙩𝙡𝙖𝙠 𝘽𝙪𝙩𝙝𝙖𝙣

95,290 次观看 • 7 个月前

🏈 Base44 is going to the Big Game! To celebrate, we’re launching our BIGGEST contest yet - with $50,000 in prizes for the best game-day apps. From watch-party tools to score predictors to snack rankers - if it belongs on game day, it belongs in this contest. To enter check the link below, we can’t wait to see what you build 🎉

🏈 Base44 is going to the Big Game! To celebrate, we’re launching our BIGGEST contest yet - with $50,000 in prizes for the best game-day apps. From watch-party tools to score predictors to snack rankers - if it belongs on game day, it belongs in this contest. To enter check the link below, we can’t wait to see what you build 🎉

Base44

526,914 次观看 • 5 个月前

A big event is coming soon to CoinPoker's high stakes #poker tables, as we aim to be the best site for HS players and railbirds alike. Stay tuned! With the buzz around HS cash lately, comment below with how we can improve our nosebleed games and you may get a surprise...

A big event is coming soon to CoinPoker's high stakes #poker tables, as we aim to be the best site for HS players and railbirds alike. Stay tuned! With the buzz around HS cash lately, comment below with how we can improve our nosebleed games and you may get a surprise...

CoinPoker

617,962 次观看 • 1 年前

When we said trade “wherever” we meant it. Yes, even from your desktop. Open a trade on mobile, close it on web, or anything in between. All completely seamless. Link in bio.

When we said trade “wherever” we meant it. Yes, even from your desktop. Open a trade on mobile, close it on web, or anything in between. All completely seamless. Link in bio.

Liquid

38,642 次观看 • 6 个月前