Loading video...

Video Failed to Load

Go Home

I found a vulnerability in OpenVPN’s Windows kernel driver involving a use-after-free / double-free condition, resulting in a reproducible BSOD. I built a working PoC and reported the issue to the OpenVPN team. Currently waiting for a fix before sharing technical details. #openvpn #bsod #uaf #research #vulnerable #kernel

okan_kurtuluss's profile picture

Okan Kurtulus

2,066 subscribers

39,159 views • 7 days ago •via X (Twitter)

Science & TechnologyHealth & Wellness
LIVE

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04
0:10

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04

V4bel

15,887 views • 1 year ago

Found a heap overflow vulnerability in Windows SMB that leads to RCE and reported it to MSRC in June. The vulnerability has now been addressed with CVE-2026-62800 in the August Patch Tuesday updates.
0:19

Found a heap overflow vulnerability in Windows SMB that leads to RCE and reported it to MSRC in June. The vulnerability has now been addressed with CVE-2026-62800 in the August Patch Tuesday updates.

nafiez

31,194 views • 29 days ago

Excited to share the KDA: Kernel Design Agents that powers HAN Lab Kernel Mafia top ranking #1~3 kernels at Kernel Contest🚀🚀🚀 Thanks to agents, everyone can be a "kernel bro" in 2026: By adapting the KDA, the team ranked #1 in MoE, #2 in DSA, and #3 in GDN in the Pure Agent track at MLSys FlashInfer Kernel Contest – especially given the fact that the main participant (dongyun zou) has only written ~400 LoC triton and 0 lines of CUDA in 2026. The core philosophy here is to leverage Humanize (the best harness framework) to let the agent run autonomously for as long as possible. By minimizing human involvement and input, and placing full trust in the agent, we can achieve kernel performance that nears SOTA levels. HAN Lab Mafia Solution to MLSys’26 Kernel Contest: KDA Github:
0:10

Excited to share the KDA: Kernel Design Agents that powers HAN Lab Kernel Mafia top ranking #1~3 kernels at Kernel Contest🚀🚀🚀 Thanks to agents, everyone can be a "kernel bro" in 2026: By adapting the KDA, the team ranked #1 in MoE, #2 in DSA, and #3 in GDN in the Pure Agent track at MLSys FlashInfer Kernel Contest – especially given the fact that the main participant (dongyun zou) has only written ~400 LoC triton and 0 lines of CUDA in 2026. The core philosophy here is to leverage Humanize (the best harness framework) to let the agent run autonomously for as long as possible. By minimizing human involvement and input, and placing full trust in the agent, we can achieve kernel performance that nears SOTA levels. HAN Lab Mafia Solution to MLSys’26 Kernel Contest: KDA Github:

Ligeng Zhu

110,205 views • 3 months ago

Southern California firefighters race to free a driver trapped underneath a loaded tractor-trailer after a crash on Interstate 10. Dramatic footage from the San Bernardino County Fire Department shows crews working around the crushed sedan in Fontana Saturday morning. Officials say the driver remained "awake and responsive" while trapped before crews successfully extricated the motorist and rushed them to a local trauma center for treatment.
0:19

Southern California firefighters race to free a driver trapped underneath a loaded tractor-trailer after a crash on Interstate 10. Dramatic footage from the San Bernardino County Fire Department shows crews working around the crushed sedan in Fontana Saturday morning. Officials say the driver remained "awake and responsive" while trapped before crews successfully extricated the motorist and rushed them to a local trauma center for treatment.

Fox News

244,418 views • 10 days ago

I accidentally stumbled on a GitHub repo list that VPN companies LEFT PUBLIC. Downloaded it before they noticed. What I found inside explains EVERYTHING about how to bypass restrictions WITHOUT paying $10/month. Here are 9 VPN repos worth bookmarking: ↳ ⭐ 23.5k | Streisand. Self-hosted VPN with WireGuard, OpenVPN, Tor. ↳ ⭐ 21.7k | Hysteria. Fast censorship-resistant proxy. ↳ ⭐ 21.2k | NekoBox for Android. Universal proxy toolchain. ↳ ⭐ 40.7k | Free VPN nodes (v2ray/trojan/shadowsocks) ↳ ⭐ 34.1k | V2fly v2ray-core. Build proxies to bypass restrictions. ↳ ⭐ 33.5k | XX-Net. Proxy tool to bypass GFW. ↳ ⭐ 20.6k | OpenVPN installer for Ubuntu, Debian, Fedora. ↳ ⭐ 15.7k | Lantern open-source VPN. Android iOS Windows macOS. ↳ ⭐ 15.1k | Brook. Cross-platform programmable network tool.
0:16

I accidentally stumbled on a GitHub repo list that VPN companies LEFT PUBLIC. Downloaded it before they noticed. What I found inside explains EVERYTHING about how to bypass restrictions WITHOUT paying $10/month. Here are 9 VPN repos worth bookmarking: ↳ ⭐ 23.5k | Streisand. Self-hosted VPN with WireGuard, OpenVPN, Tor. ↳ ⭐ 21.7k | Hysteria. Fast censorship-resistant proxy. ↳ ⭐ 21.2k | NekoBox for Android. Universal proxy toolchain. ↳ ⭐ 40.7k | Free VPN nodes (v2ray/trojan/shadowsocks) ↳ ⭐ 34.1k | V2fly v2ray-core. Build proxies to bypass restrictions. ↳ ⭐ 33.5k | XX-Net. Proxy tool to bypass GFW. ↳ ⭐ 20.6k | OpenVPN installer for Ubuntu, Debian, Fedora. ↳ ⭐ 15.7k | Lantern open-source VPN. Android iOS Windows macOS. ↳ ⭐ 15.1k | Brook. Cross-platform programmable network tool.

Kanika

21,877 views • 2 months ago

PSA: Do not open your windows in Waymos. I was assaulted and robbed in a Waymo in the Mission District. I was punched three times in the face and head. Waymo treats criminals as pedestrians and stops moving, leaving you vulnerable. They gave me 5 free rides tho
0:14

PSA: Do not open your windows in Waymos. I was assaulted and robbed in a Waymo in the Mission District. I was punched three times in the face and head. Waymo treats criminals as pedestrians and stops moving, leaving you vulnerable. They gave me 5 free rides tho

armand type beat

2,361,542 views • 3 months ago

is it a real game or a token with a logo? on solana you find that out after your money's already in. so i built the basement. the steam of solana games, every verdict from a player verified on-chain. free to use, can't be bought.
0:11

is it a real game or a token with a logo? on solana you find that out after your money's already in. so i built the basement. the steam of solana games, every verdict from a player verified on-chain. free to use, can't be bought.

Potato

41,178 views • 2 months ago

Are you editing in CapCut? If yes, I made a FREE CapCut course for beginners and I will also provide you with all the necessary assets that I use to make these videos. Retweet and comment "CAPCUT" and I will send you the link to jump in right now for free.
0:13

Are you editing in CapCut? If yes, I made a FREE CapCut course for beginners and I will also provide you with all the necessary assets that I use to make these videos. Retweet and comment "CAPCUT" and I will send you the link to jump in right now for free.

Martin Lešnjak I Entrepreneur

52,489 views • 2 years ago

Most people use Linux every day. But Very few understand what actually happens after they press the power button. >>>Here’s the sequences Linux goes through before you get the login screen. Power button pressed → BIOS or UEFI initializes hardware and runs POST. Firmware locates the bootloader from disk. Bootloader loads the Linux kernel and initramfs into RAM. Kernel decompresses and takes control of the CPU. Memory management and the scheduler are initialized. Device drivers load to communicate with hardware. Temporary root filesystem mounts from initramfs. PID 1 starts as systemd and userspace begins. System services and daemons start in order. Login prompt or GUI becomes available. You run a command and it becomes a process with a PID. Process runs in user mode with limited privileges. When hardware access is needed, a system call is made. CPU switches from user mode to kernel mode. Kernel validates the request and executes through drivers. Result is returned back to user space. Scheduler continuously allocates CPU time across processes. Virtual memory isolates and protects processes. Filesystem manages data abstraction over storage. Network stack processes packets inside the kernel. Linux is the kernel coordinating hardware, processes, memory, and security through strict privilege control.
0:14

Most people use Linux every day. But Very few understand what actually happens after they press the power button. >>>Here’s the sequences Linux goes through before you get the login screen. Power button pressed → BIOS or UEFI initializes hardware and runs POST. Firmware locates the bootloader from disk. Bootloader loads the Linux kernel and initramfs into RAM. Kernel decompresses and takes control of the CPU. Memory management and the scheduler are initialized. Device drivers load to communicate with hardware. Temporary root filesystem mounts from initramfs. PID 1 starts as systemd and userspace begins. System services and daemons start in order. Login prompt or GUI becomes available. You run a command and it becomes a process with a PID. Process runs in user mode with limited privileges. When hardware access is needed, a system call is made. CPU switches from user mode to kernel mode. Kernel validates the request and executes through drivers. Result is returned back to user space. Scheduler continuously allocates CPU time across processes. Virtual memory isolates and protects processes. Filesystem manages data abstraction over storage. Network stack processes packets inside the kernel. Linux is the kernel coordinating hardware, processes, memory, and security through strict privilege control.

Akhilesh Mishra

35,042 views • 6 months ago

🇮🇷 In Iran, The Basij forces who have been on the streets for a month or more are now actively working for the homeland, repairing and renovating people's house windows for free.
0:16

🇮🇷 In Iran, The Basij forces who have been on the streets for a month or more are now actively working for the homeland, repairing and renovating people's house windows for free.

Sprinter Press

91,374 views • 6 months ago

Even with close confirmation I sometimes close my terminal and think "OH FUCK NO." Coming soon to Ghostty, you can undo that. 🥰 (Technical details: we keep the terminal running for a configurable time in the background before terminating for real, similar to email undo send). (macOS only for now, AppKit APIs provide a nice undo manager implementation that eases this quite a bit. I still have to do research on GTK for Linux.)
0:11

Even with close confirmation I sometimes close my terminal and think "OH FUCK NO." Coming soon to Ghostty, you can undo that. 🥰 (Technical details: we keep the terminal running for a configurable time in the background before terminating for real, similar to email undo send). (macOS only for now, AppKit APIs provide a nice undo manager implementation that eases this quite a bit. I still have to do research on GTK for Linux.)

Mitchell Hashimoto

87,223 views • 1 year ago

⚠KNOWN ISSUE⚠ In todays update, the procedure to hide the character from only the local player no longer works. I am trying to apply a temp patch to restore functionality while I research ways to fully fix this issue. Thank you oogghii for bringing this to my attention!
0:10

⚠KNOWN ISSUE⚠ In todays update, the procedure to hide the character from only the local player no longer works. I am trying to apply a temp patch to restore functionality while I research ways to fully fix this issue. Thank you oogghii for bringing this to my attention!

TNE Altitude

14,611 views • 3 months ago

【Free Project File】 I created a Portals GeometryNode in Blender. You can download the project file for free and give it a try👉
0:12

【Free Project File】 I created a Portals GeometryNode in Blender. You can download the project file for free and give it a try👉

Casey Sheep

203,237 views • 1 year ago

The secret to a high-performing Google Ads campaign? Keyword Research. The Pro's never tell you how to do it. I have created a FREE guide on how to conduct Keyword Research. Reply "word" and I will DM you the Doc. Must be following for DM.
0:10

The secret to a high-performing Google Ads campaign? Keyword Research. The Pro's never tell you how to do it. I have created a FREE guide on how to conduct Keyword Research. Reply "word" and I will DM you the Doc. Must be following for DM.

Samuel | Google & YouTube Ads Specialist

15,642 views • 2 years ago

HEADS UP DRIVERS: A house fire in Treme' is blowing smoke onto I-10 West. Use caution in the area. We are working to get new details
0:13

HEADS UP DRIVERS: A house fire in Treme' is blowing smoke onto I-10 West. Use caution in the area. We are working to get new details

wdsu

12,538 views • 3 years ago

Just launched a new website where I’m sharing all the AI agent-specific components I build as ready-to-use code snippets. 12 are already available. 👉 Still in beta, and a lot is WIP, but I’ll be adding a lot more over the next few weeks to build out a solid free library. Want to contribute? Feel free to DM me 🫡
0:17

Just launched a new website where I’m sharing all the AI agent-specific components I build as ready-to-use code snippets. 12 are already available. 👉 Still in beta, and a lot is WIP, but I’ll be adding a lot more over the next few weeks to build out a solid free library. Want to contribute? Feel free to DM me 🫡

Kevin

35,487 views • 1 month ago

$500 per UGC video is a scam in 2026. This FREE MakeUGC + Kling 2.6 guide replaces a $65k/year content team. - No filming - No creators - No waiting weeks - No $500 UGC videos Generate scroll-stopping ads from a simple brief. Creators, hooks, angles, variations—on demand. I built a FREE guide showing how to. Comment + RT “UGC” and I’ll DM you.
0:16

$500 per UGC video is a scam in 2026. This FREE MakeUGC + Kling 2.6 guide replaces a $65k/year content team. - No filming - No creators - No waiting weeks - No $500 UGC videos Generate scroll-stopping ads from a simple brief. Creators, hooks, angles, variations—on demand. I built a FREE guide showing how to. Comment + RT “UGC” and I’ll DM you.

Stijn Feijen

22,291 views • 7 months ago

I found a component library with 250+ animations that will make your frontend look insane. And it's completely FREE ! >Ready to use components with animations built in >Copy and drop straight into your project >The kind of UI that makes your app look like a $50K build Your frontend will never look the same.
0:11

I found a component library with 250+ animations that will make your frontend look insane. And it's completely FREE ! >Ready to use components with animations built in >Copy and drop straight into your project >The kind of UI that makes your app look like a $50K build Your frontend will never look the same.

Harshil Tomar

185,321 views • 1 month ago

The Phillies will use an opener before Taijuan Walker in his next outing. After some tweaks to his routine didn’t fix his first-inning issues, it’s “trial and error” as the team tries to find a solution.
0:14

The Phillies will use an opener before Taijuan Walker in his next outing. After some tweaks to his routine didn’t fix his first-inning issues, it’s “trial and error” as the team tries to find a solution.

Ty Daubert

17,590 views • 4 months ago