正在加载视频...

视频加载失败

返回首页

I found a vulnerability in OpenVPN’s Windows kernel driver involving a use-after-free / double-free condition, resulting in a reproducible BSOD. I built a working PoC and reported the issue to the OpenVPN team. Currently waiting for a fix before sharing technical details. #openvpn #bsod #uaf #research #vulnerable #kernel

okan_kurtuluss's profile picture

Okan Kurtulus

2,066 subscribers

39,159 次观看 • 7 天前 •via X (Twitter)

科学技术健康养生
LIVE

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04
0:10

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04

V4bel

15,887 次观看 • 1 年前

Found a heap overflow vulnerability in Windows SMB that leads to RCE and reported it to MSRC in June. The vulnerability has now been addressed with CVE-2026-62800 in the August Patch Tuesday updates.
0:19

Found a heap overflow vulnerability in Windows SMB that leads to RCE and reported it to MSRC in June. The vulnerability has now been addressed with CVE-2026-62800 in the August Patch Tuesday updates.

nafiez

31,194 次观看 • 29 天前

Excited to share the KDA: Kernel Design Agents that powers HAN Lab Kernel Mafia top ranking #1~3 kernels at Kernel Contest🚀🚀🚀 Thanks to agents, everyone can be a "kernel bro" in 2026: By adapting the KDA, the team ranked #1 in MoE, #2 in DSA, and #3 in GDN in the Pure Agent track at MLSys FlashInfer Kernel Contest – especially given the fact that the main participant (dongyun zou) has only written ~400 LoC triton and 0 lines of CUDA in 2026. The core philosophy here is to leverage Humanize (the best harness framework) to let the agent run autonomously for as long as possible. By minimizing human involvement and input, and placing full trust in the agent, we can achieve kernel performance that nears SOTA levels. HAN Lab Mafia Solution to MLSys’26 Kernel Contest: KDA Github:
0:10

Excited to share the KDA: Kernel Design Agents that powers HAN Lab Kernel Mafia top ranking #1~3 kernels at Kernel Contest🚀🚀🚀 Thanks to agents, everyone can be a "kernel bro" in 2026: By adapting the KDA, the team ranked #1 in MoE, #2 in DSA, and #3 in GDN in the Pure Agent track at MLSys FlashInfer Kernel Contest – especially given the fact that the main participant (dongyun zou) has only written ~400 LoC triton and 0 lines of CUDA in 2026. The core philosophy here is to leverage Humanize (the best harness framework) to let the agent run autonomously for as long as possible. By minimizing human involvement and input, and placing full trust in the agent, we can achieve kernel performance that nears SOTA levels. HAN Lab Mafia Solution to MLSys’26 Kernel Contest: KDA Github:

Ligeng Zhu

110,205 次观看 • 3 个月前

Southern California firefighters race to free a driver trapped underneath a loaded tractor-trailer after a crash on Interstate 10. Dramatic footage from the San Bernardino County Fire Department shows crews working around the crushed sedan in Fontana Saturday morning. Officials say the driver remained "awake and responsive" while trapped before crews successfully extricated the motorist and rushed them to a local trauma center for treatment.
0:19

Southern California firefighters race to free a driver trapped underneath a loaded tractor-trailer after a crash on Interstate 10. Dramatic footage from the San Bernardino County Fire Department shows crews working around the crushed sedan in Fontana Saturday morning. Officials say the driver remained "awake and responsive" while trapped before crews successfully extricated the motorist and rushed them to a local trauma center for treatment.

Fox News

244,418 次观看 • 10 天前

I accidentally stumbled on a GitHub repo list that VPN companies LEFT PUBLIC. Downloaded it before they noticed. What I found inside explains EVERYTHING about how to bypass restrictions WITHOUT paying $10/month. Here are 9 VPN repos worth bookmarking: ↳ ⭐ 23.5k | Streisand. Self-hosted VPN with WireGuard, OpenVPN, Tor. ↳ ⭐ 21.7k | Hysteria. Fast censorship-resistant proxy. ↳ ⭐ 21.2k | NekoBox for Android. Universal proxy toolchain. ↳ ⭐ 40.7k | Free VPN nodes (v2ray/trojan/shadowsocks) ↳ ⭐ 34.1k | V2fly v2ray-core. Build proxies to bypass restrictions. ↳ ⭐ 33.5k | XX-Net. Proxy tool to bypass GFW. ↳ ⭐ 20.6k | OpenVPN installer for Ubuntu, Debian, Fedora. ↳ ⭐ 15.7k | Lantern open-source VPN. Android iOS Windows macOS. ↳ ⭐ 15.1k | Brook. Cross-platform programmable network tool.
0:16

I accidentally stumbled on a GitHub repo list that VPN companies LEFT PUBLIC. Downloaded it before they noticed. What I found inside explains EVERYTHING about how to bypass restrictions WITHOUT paying $10/month. Here are 9 VPN repos worth bookmarking: ↳ ⭐ 23.5k | Streisand. Self-hosted VPN with WireGuard, OpenVPN, Tor. ↳ ⭐ 21.7k | Hysteria. Fast censorship-resistant proxy. ↳ ⭐ 21.2k | NekoBox for Android. Universal proxy toolchain. ↳ ⭐ 40.7k | Free VPN nodes (v2ray/trojan/shadowsocks) ↳ ⭐ 34.1k | V2fly v2ray-core. Build proxies to bypass restrictions. ↳ ⭐ 33.5k | XX-Net. Proxy tool to bypass GFW. ↳ ⭐ 20.6k | OpenVPN installer for Ubuntu, Debian, Fedora. ↳ ⭐ 15.7k | Lantern open-source VPN. Android iOS Windows macOS. ↳ ⭐ 15.1k | Brook. Cross-platform programmable network tool.

Kanika

21,877 次观看 • 2 个月前

PSA: Do not open your windows in Waymos. I was assaulted and robbed in a Waymo in the Mission District. I was punched three times in the face and head. Waymo treats criminals as pedestrians and stops moving, leaving you vulnerable. They gave me 5 free rides tho
0:14

PSA: Do not open your windows in Waymos. I was assaulted and robbed in a Waymo in the Mission District. I was punched three times in the face and head. Waymo treats criminals as pedestrians and stops moving, leaving you vulnerable. They gave me 5 free rides tho

armand type beat

2,361,542 次观看 • 3 个月前

is it a real game or a token with a logo? on solana you find that out after your money's already in. so i built the basement. the steam of solana games, every verdict from a player verified on-chain. free to use, can't be bought.
0:11

is it a real game or a token with a logo? on solana you find that out after your money's already in. so i built the basement. the steam of solana games, every verdict from a player verified on-chain. free to use, can't be bought.

Potato

41,178 次观看 • 2 个月前

Are you editing in CapCut? If yes, I made a FREE CapCut course for beginners and I will also provide you with all the necessary assets that I use to make these videos. Retweet and comment "CAPCUT" and I will send you the link to jump in right now for free.
0:13

Are you editing in CapCut? If yes, I made a FREE CapCut course for beginners and I will also provide you with all the necessary assets that I use to make these videos. Retweet and comment "CAPCUT" and I will send you the link to jump in right now for free.

Martin Lešnjak I Entrepreneur

52,489 次观看 • 2 年前

Most people use Linux every day. But Very few understand what actually happens after they press the power button. >>>Here’s the sequences Linux goes through before you get the login screen. Power button pressed → BIOS or UEFI initializes hardware and runs POST. Firmware locates the bootloader from disk. Bootloader loads the Linux kernel and initramfs into RAM. Kernel decompresses and takes control of the CPU. Memory management and the scheduler are initialized. Device drivers load to communicate with hardware. Temporary root filesystem mounts from initramfs. PID 1 starts as systemd and userspace begins. System services and daemons start in order. Login prompt or GUI becomes available. You run a command and it becomes a process with a PID. Process runs in user mode with limited privileges. When hardware access is needed, a system call is made. CPU switches from user mode to kernel mode. Kernel validates the request and executes through drivers. Result is returned back to user space. Scheduler continuously allocates CPU time across processes. Virtual memory isolates and protects processes. Filesystem manages data abstraction over storage. Network stack processes packets inside the kernel. Linux is the kernel coordinating hardware, processes, memory, and security through strict privilege control.
0:14

Most people use Linux every day. But Very few understand what actually happens after they press the power button. >>>Here’s the sequences Linux goes through before you get the login screen. Power button pressed → BIOS or UEFI initializes hardware and runs POST. Firmware locates the bootloader from disk. Bootloader loads the Linux kernel and initramfs into RAM. Kernel decompresses and takes control of the CPU. Memory management and the scheduler are initialized. Device drivers load to communicate with hardware. Temporary root filesystem mounts from initramfs. PID 1 starts as systemd and userspace begins. System services and daemons start in order. Login prompt or GUI becomes available. You run a command and it becomes a process with a PID. Process runs in user mode with limited privileges. When hardware access is needed, a system call is made. CPU switches from user mode to kernel mode. Kernel validates the request and executes through drivers. Result is returned back to user space. Scheduler continuously allocates CPU time across processes. Virtual memory isolates and protects processes. Filesystem manages data abstraction over storage. Network stack processes packets inside the kernel. Linux is the kernel coordinating hardware, processes, memory, and security through strict privilege control.

Akhilesh Mishra

35,042 次观看 • 6 个月前

🇮🇷 In Iran, The Basij forces who have been on the streets for a month or more are now actively working for the homeland, repairing and renovating people's house windows for free.
0:16

🇮🇷 In Iran, The Basij forces who have been on the streets for a month or more are now actively working for the homeland, repairing and renovating people's house windows for free.

Sprinter Press

91,374 次观看 • 6 个月前

Even with close confirmation I sometimes close my terminal and think "OH FUCK NO." Coming soon to Ghostty, you can undo that. 🥰 (Technical details: we keep the terminal running for a configurable time in the background before terminating for real, similar to email undo send). (macOS only for now, AppKit APIs provide a nice undo manager implementation that eases this quite a bit. I still have to do research on GTK for Linux.)
0:11

Even with close confirmation I sometimes close my terminal and think "OH FUCK NO." Coming soon to Ghostty, you can undo that. 🥰 (Technical details: we keep the terminal running for a configurable time in the background before terminating for real, similar to email undo send). (macOS only for now, AppKit APIs provide a nice undo manager implementation that eases this quite a bit. I still have to do research on GTK for Linux.)

Mitchell Hashimoto

87,223 次观看 • 1 年前

⚠KNOWN ISSUE⚠ In todays update, the procedure to hide the character from only the local player no longer works. I am trying to apply a temp patch to restore functionality while I research ways to fully fix this issue. Thank you oogghii for bringing this to my attention!
0:10

⚠KNOWN ISSUE⚠ In todays update, the procedure to hide the character from only the local player no longer works. I am trying to apply a temp patch to restore functionality while I research ways to fully fix this issue. Thank you oogghii for bringing this to my attention!

TNE Altitude

14,611 次观看 • 3 个月前

【Free Project File】 I created a Portals GeometryNode in Blender. You can download the project file for free and give it a try👉
0:12

【Free Project File】 I created a Portals GeometryNode in Blender. You can download the project file for free and give it a try👉

Casey Sheep

203,237 次观看 • 1 年前

The secret to a high-performing Google Ads campaign? Keyword Research. The Pro's never tell you how to do it. I have created a FREE guide on how to conduct Keyword Research. Reply "word" and I will DM you the Doc. Must be following for DM.
0:10

The secret to a high-performing Google Ads campaign? Keyword Research. The Pro's never tell you how to do it. I have created a FREE guide on how to conduct Keyword Research. Reply "word" and I will DM you the Doc. Must be following for DM.

Samuel | Google & YouTube Ads Specialist

15,642 次观看 • 2 年前

HEADS UP DRIVERS: A house fire in Treme' is blowing smoke onto I-10 West. Use caution in the area. We are working to get new details
0:13

HEADS UP DRIVERS: A house fire in Treme' is blowing smoke onto I-10 West. Use caution in the area. We are working to get new details

wdsu

12,538 次观看 • 3 年前

Just launched a new website where I’m sharing all the AI agent-specific components I build as ready-to-use code snippets. 12 are already available. 👉 Still in beta, and a lot is WIP, but I’ll be adding a lot more over the next few weeks to build out a solid free library. Want to contribute? Feel free to DM me 🫡
0:17

Just launched a new website where I’m sharing all the AI agent-specific components I build as ready-to-use code snippets. 12 are already available. 👉 Still in beta, and a lot is WIP, but I’ll be adding a lot more over the next few weeks to build out a solid free library. Want to contribute? Feel free to DM me 🫡

Kevin

35,487 次观看 • 1 个月前

$500 per UGC video is a scam in 2026. This FREE MakeUGC + Kling 2.6 guide replaces a $65k/year content team. - No filming - No creators - No waiting weeks - No $500 UGC videos Generate scroll-stopping ads from a simple brief. Creators, hooks, angles, variations—on demand. I built a FREE guide showing how to. Comment + RT “UGC” and I’ll DM you.
0:16

$500 per UGC video is a scam in 2026. This FREE MakeUGC + Kling 2.6 guide replaces a $65k/year content team. - No filming - No creators - No waiting weeks - No $500 UGC videos Generate scroll-stopping ads from a simple brief. Creators, hooks, angles, variations—on demand. I built a FREE guide showing how to. Comment + RT “UGC” and I’ll DM you.

Stijn Feijen

22,291 次观看 • 7 个月前

I found a component library with 250+ animations that will make your frontend look insane. And it's completely FREE ! >Ready to use components with animations built in >Copy and drop straight into your project >The kind of UI that makes your app look like a $50K build Your frontend will never look the same.
0:11

I found a component library with 250+ animations that will make your frontend look insane. And it's completely FREE ! >Ready to use components with animations built in >Copy and drop straight into your project >The kind of UI that makes your app look like a $50K build Your frontend will never look the same.

Harshil Tomar

185,321 次观看 • 1 个月前

The Phillies will use an opener before Taijuan Walker in his next outing. After some tweaks to his routine didn’t fix his first-inning issues, it’s “trial and error” as the team tries to find a solution.
0:14

The Phillies will use an opener before Taijuan Walker in his next outing. After some tweaks to his routine didn’t fix his first-inning issues, it’s “trial and error” as the team tries to find a solution.

Ty Daubert

17,590 次观看 • 4 个月前