正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

In our latest analysis, we dive into CVE-2026-4802, a high-severity vulnerability discovered by our team in Cockpit that allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). Read the full analysis... show more

Hakai Offsec

1,216 subscribers

11,409 次观看 • 3 个月前 •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

It's the bug of the month for June 2026! CVE-2026-45657 - A CVSS 9.8 vulnerability in Kernel that allows remote, unauthenticated code execution at SYSTEM without user interaction. Yikes!

It's the bug of the month for June 2026! CVE-2026-45657 - A CVSS 9.8 vulnerability in Kernel that allows remote, unauthenticated code execution at SYSTEM without user interaction. Yikes!

TrendAI Zero Day Initiative

33,599 次观看 • 2 个月前

🔥 Microsoft fixed CVE-2025-47955, discovered by our researcher Sergey Bliznyuk! This vulnerability allows a locally authenticated attacker to elevate privileges to SYSTEM via the Windows RasMan service. 🔗 Advisory:

🔥 Microsoft fixed CVE-2025-47955, discovered by our researcher Sergey Bliznyuk! This vulnerability allows a locally authenticated attacker to elevate privileges to SYSTEM via the Windows RasMan service. 🔗 Advisory:

PT SWARM

13,379 次观看 • 1 年前

Here goes nginx-quicburst (CVE-2026-42530), a new RCE in Nginx discovered by our security agent VEGA and demonstrated by Nebula Security. This is only the third NGINX vulnerability since 2014 to receive NGINX’s “major” severity rating. If you use Nginx 1.31 with QUIC enabled, we recommend upgrading to the latest version. This bug has been patched in the latest Nginx release. We will publish the technical writeup, including the ASLR bypass, on July 18 together with the previous nginx-poolslip writeup.

Here goes nginx-quicburst (CVE-2026-42530), a new RCE in Nginx discovered by our security agent VEGA and demonstrated by Nebula Security. This is only the third NGINX vulnerability since 2014 to receive NGINX’s “major” severity rating. If you use Nginx 1.31 with QUIC enabled, we recommend upgrading to the latest version. This bug has been patched in the latest Nginx release. We will publish the technical writeup, including the ASLR bypass, on July 18 together with the previous nginx-poolslip writeup.

Nebula Security

104,283 次观看 • 2 个月前

🔥Arbitrary Code Execution in AWS Kiro with Indirect Prompt Injection Multiple ways actually... 1) Write to settings.json to put Kiro into YOLO mode by adding: "kiroAgent.trustedCommands": ["*"] -> immediate arbitrary OS command execution without user approval 2) Write to kiro's mcp.json file to add a fake mcp server that runs arbitrary python code -> immediate arbitrary code execution AWS fixed the issues quickly, but no CVE issued. If you use Kiro make sure to run the latest version, before someone else updates it for you.

🔥Arbitrary Code Execution in AWS Kiro with Indirect Prompt Injection Multiple ways actually... 1) Write to settings.json to put Kiro into YOLO mode by adding: "kiroAgent.trustedCommands": ["*"] -> immediate arbitrary OS command execution without user approval 2) Write to kiro's mcp.json file to add a fake mcp server that runs arbitrary python code -> immediate arbitrary code execution AWS fixed the issues quickly, but no CVE issued. If you use Kiro make sure to run the latest version, before someone else updates it for you.

Johann Rehberger

12,632 次观看 • 11 个月前

Unai Emery and the Aston Villa High Line Our latest analysis covers the coaching of Aston Villa's high defensive line. The analysis includes - A detailed article and animation - Downloadable PDF's - Technical, skill and game practices to coach this system All are available on our website!

Unai Emery and the Aston Villa High Line Our latest analysis covers the coaching of Aston Villa's high defensive line. The analysis includes - A detailed article and animation - Downloadable PDF's - Technical, skill and game practices to coach this system All are available on our website!

Tactx

22,059 次观看 • 2 年前

$🔥 ESET fixed CVE-2024-7400 found by our researcher Dmitriy Zuzlov! This is an LPE that affects 13 ESET solutions and allows a low-privileged attacker to delete arbitrary files, which can be used to obtain NT AUTHORITY\SYSTEM privileges! The advisory 👉$

🔥 ESET fixed CVE-2024-7400 found by our researcher Dmitriy Zuzlov! This is an LPE that affects 13 ESET solutions and allows a low-privileged attacker to delete arbitrary files, which can be used to obtain NT AUTHORITY\SYSTEM privileges! The advisory 👉

PT SWARM

15,381 次观看 • 1 年前

🚀 Our latest briefing paper, co-authored by Fred de Fossard and Emmanuel Igwe, is live. For the most up-to-date analysis and numbers on the damage that rejoining the EU Customs Union would do to the British economy, watch below and read the latest on our website. Link in comments 👇

🚀 Our latest briefing paper, co-authored by Fred de Fossard and Emmanuel Igwe, is live. For the most up-to-date analysis and numbers on the damage that rejoining the EU Customs Union would do to the British economy, watch below and read the latest on our website. Link in comments 👇

Prosperity Institute

12,825 次观看 • 6 个月前

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root

Dark Web Informer

18,534 次观看 • 3 个月前

We are finalizing an Stage Analysis App on Deepvue which will allow you to look at the markets from a Stage Analysis perspective in one place. · Stages by Sector, Group, Industry, Sub-Industry · Drill down by Stages · Connect to charts using our Color Grouping System

We are finalizing an Stage Analysis App on Deepvue which will allow you to look at the markets from a Stage Analysis perspective in one place. · Stages by Sector, Group, Industry, Sub-Industry · Drill down by Stages · Connect to charts using our Color Grouping System

Ameet Rai

33,014 次观看 • 6 个月前

“This gives us the ability to go anywhere in the world and challenge a team…” - Clive’s analysis on our performance vs Leverkusen.

“This gives us the ability to go anywhere in the world and challenge a team…” - Clive’s analysis on our performance vs Leverkusen.

ArsenalVision Podcast

18,708 次观看 • 5 个月前

Imagine a launchpad Built by Homies in the trenches For the homies in the trenches. A user first mentality and market Our service fees will directly be distributed … To every single user of fun pump It’s in our smart contract in fact Let’s bring back the $fun

Imagine a launchpad Built by Homies in the trenches For the homies in the trenches. A user first mentality and market Our service fees will directly be distributed … To every single user of fun pump It’s in our smart contract in fact Let’s bring back the $fun

Fun💊

26,371 次观看 • 1 年前

Powered by Hyperliquid, Trust integrates the most performant trading stack with a seamless user interface, allowing our users to stay on top as the market moves. PS: spot anything else that’s new in this video? Coming soon on Trust Wallet.

Powered by Hyperliquid, Trust integrates the most performant trading stack with a seamless user interface, allowing our users to stay on top as the market moves. PS: spot anything else that’s new in this video? Coming soon on Trust Wallet.

Trust Wallet

77,187 次观看 • 23 天前

This may be live footage of the failed rocket that hit the hospital in Gaza. We have said that according to our intelligence analysis, the explosion was caused by a failed rocket fired by the Islamic Jihad.

This may be live footage of the failed rocket that hit the hospital in Gaza. We have said that according to our intelligence analysis, the explosion was caused by a failed rocket fired by the Islamic Jihad.

Jonathan Conricus

1,763,726 次观看 • 2 年前

Recently, I discovered a campaign spreading via Telegram Mini Apps. In fact, a threat actor attempted to phish me using this tactic.👇 The technique is highly convincing because it involves a trust boundary violation in Telegram’s MiniApp SDK (affecting Android, Desktop, iOS, and Web versions). Telegram allows third-party code to use its trusted native UI through showPopup(), but it does so without clearly indicating the source to the user or providing safeguards against abuse. This constitutes a design weakness, as the triggered pop-up belongs to Telegram and can be used in an arbitrary manner. -The attacker misleads the user by leveraging Telegram’s own native UI component. -The popup is rendered outside the MiniApp iframe, within Telegram’s own UI layer. -The user perceives it as a legitimate warning from Telegram itself. -By placing a single button, the attacker can redirect the user to a phishing page. -Since the phishing page opens inside the Mini App, the phishing URL is not visibly exposed. After conducting detailed research, I simulated this attack and demonstrated it in the video below. Be cautious when opening Mini Apps in bots.

Recently, I discovered a campaign spreading via Telegram Mini Apps. In fact, a threat actor attempted to phish me using this tactic.👇 The technique is highly convincing because it involves a trust boundary violation in Telegram’s MiniApp SDK (affecting Android, Desktop, iOS, and Web versions). Telegram allows third-party code to use its trusted native UI through showPopup(), but it does so without clearly indicating the source to the user or providing safeguards against abuse. This constitutes a design weakness, as the triggered pop-up belongs to Telegram and can be used in an arbitrary manner. -The attacker misleads the user by leveraging Telegram’s own native UI component. -The popup is rendered outside the MiniApp iframe, within Telegram’s own UI layer. -The user perceives it as a legitimate warning from Telegram itself. -By placing a single button, the attacker can redirect the user to a phishing page. -Since the phishing page opens inside the Mini App, the phishing URL is not visibly exposed. After conducting detailed research, I simulated this attack and demonstrated it in the video below. Be cautious when opening Mini Apps in bots.

0x6rss

49,167 次观看 • 5 个月前

We continue to make enormous progress on our platform. In the background, we are simultaneously working on a project this year to drive quality to new levels. Our User group dropped this video at our all hands today to highlight the project...

We continue to make enormous progress on our platform. In the background, we are simultaneously working on a project this year to drive quality to new levels. Our User group dropped this video at our all hands today to highlight the project...

David Baszucki

98,370 次观看 • 2 年前

The #NanoPyx #preprint is finally out!! 😍 Our project brings bioimage analysis into #Python with a special emphasis in high speeds for *everyone* with the new system: the Liquid Engine (1/n)

The #NanoPyx #preprint is finally out!! 😍 Our project brings bioimage analysis into #Python with a special emphasis in high speeds for everyone with the new system: the Liquid Engine (1/n)

Inês Cunha

25,355 次观看 • 3 年前

Take a virtual tour of our brand new building at the CD PROJEKT RED Headquarters in Warsaw! This state-of-the-art space was built with creating revolutionary role-playing games in mind — and is now home to our team developing The Witcher 4. ⚔️ 💬 “It’s a reflection of our philosophy — a space shaped by the same passion that drives our games — because we don’t just build digital worlds, we bring that same energy into the world around us.” — Piotr Nielubowicz, CFO Read more about this incredible space on Beyond the Game Blog:

CD PROJEKT RED

133,144 次观看 • 11 个月前

We've just posted a new dev blog! In this community update, we cover a bunch of upcoming critter improvements like critter growth and powerful alpha critters. We also share sneak peeks at the work-in-progress ambient audio system and our progress on other immersive features. Check out our full blog for our latest news here!:

We've just posted a new dev blog! In this community update, we cover a bunch of upcoming critter improvements like critter growth and powerful alpha critters. We also share sneak peeks at the work-in-progress ambient audio system and our progress on other immersive features. Check out our full blog for our latest news here!:

Path of Titans

16,487 次观看 • 1 年前