Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

In our latest analysis, we dive into CVE-2026-4802, a high-severity vulnerability discovered by our team in Cockpit that allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). Read the full analysis... show more

Hakai Offsec

1,216 subscribers

11,409 views • 3 months ago •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

It's the bug of the month for June 2026! CVE-2026-45657 - A CVSS 9.8 vulnerability in Kernel that allows remote, unauthenticated code execution at SYSTEM without user interaction. Yikes!

It's the bug of the month for June 2026! CVE-2026-45657 - A CVSS 9.8 vulnerability in Kernel that allows remote, unauthenticated code execution at SYSTEM without user interaction. Yikes!

TrendAI Zero Day Initiative

33,599 views • 2 months ago

🔥 Microsoft fixed CVE-2025-47955, discovered by our researcher Sergey Bliznyuk! This vulnerability allows a locally authenticated attacker to elevate privileges to SYSTEM via the Windows RasMan service. 🔗 Advisory:

🔥 Microsoft fixed CVE-2025-47955, discovered by our researcher Sergey Bliznyuk! This vulnerability allows a locally authenticated attacker to elevate privileges to SYSTEM via the Windows RasMan service. 🔗 Advisory:

PT SWARM

13,379 views • 1 year ago

Here goes nginx-quicburst (CVE-2026-42530), a new RCE in Nginx discovered by our security agent VEGA and demonstrated by Nebula Security. This is only the third NGINX vulnerability since 2014 to receive NGINX’s “major” severity rating. If you use Nginx 1.31 with QUIC enabled, we recommend upgrading to the latest version. This bug has been patched in the latest Nginx release. We will publish the technical writeup, including the ASLR bypass, on July 18 together with the previous nginx-poolslip writeup.

Here goes nginx-quicburst (CVE-2026-42530), a new RCE in Nginx discovered by our security agent VEGA and demonstrated by Nebula Security. This is only the third NGINX vulnerability since 2014 to receive NGINX’s “major” severity rating. If you use Nginx 1.31 with QUIC enabled, we recommend upgrading to the latest version. This bug has been patched in the latest Nginx release. We will publish the technical writeup, including the ASLR bypass, on July 18 together with the previous nginx-poolslip writeup.

Nebula Security

104,283 views • 2 months ago

🔥Arbitrary Code Execution in AWS Kiro with Indirect Prompt Injection Multiple ways actually... 1) Write to settings.json to put Kiro into YOLO mode by adding: "kiroAgent.trustedCommands": ["*"] -> immediate arbitrary OS command execution without user approval 2) Write to kiro's mcp.json file to add a fake mcp server that runs arbitrary python code -> immediate arbitrary code execution AWS fixed the issues quickly, but no CVE issued. If you use Kiro make sure to run the latest version, before someone else updates it for you.

🔥Arbitrary Code Execution in AWS Kiro with Indirect Prompt Injection Multiple ways actually... 1) Write to settings.json to put Kiro into YOLO mode by adding: "kiroAgent.trustedCommands": ["*"] -> immediate arbitrary OS command execution without user approval 2) Write to kiro's mcp.json file to add a fake mcp server that runs arbitrary python code -> immediate arbitrary code execution AWS fixed the issues quickly, but no CVE issued. If you use Kiro make sure to run the latest version, before someone else updates it for you.

Johann Rehberger

12,632 views • 11 months ago

Unai Emery and the Aston Villa High Line Our latest analysis covers the coaching of Aston Villa's high defensive line. The analysis includes - A detailed article and animation - Downloadable PDF's - Technical, skill and game practices to coach this system All are available on our website!

Unai Emery and the Aston Villa High Line Our latest analysis covers the coaching of Aston Villa's high defensive line. The analysis includes - A detailed article and animation - Downloadable PDF's - Technical, skill and game practices to coach this system All are available on our website!

Tactx

22,059 views • 2 years ago

$🔥 ESET fixed CVE-2024-7400 found by our researcher Dmitriy Zuzlov! This is an LPE that affects 13 ESET solutions and allows a low-privileged attacker to delete arbitrary files, which can be used to obtain NT AUTHORITY\SYSTEM privileges! The advisory 👉$

🔥 ESET fixed CVE-2024-7400 found by our researcher Dmitriy Zuzlov! This is an LPE that affects 13 ESET solutions and allows a low-privileged attacker to delete arbitrary files, which can be used to obtain NT AUTHORITY\SYSTEM privileges! The advisory 👉

PT SWARM

15,381 views • 1 year ago

🚀 Our latest briefing paper, co-authored by Fred de Fossard and Emmanuel Igwe, is live. For the most up-to-date analysis and numbers on the damage that rejoining the EU Customs Union would do to the British economy, watch below and read the latest on our website. Link in comments 👇

🚀 Our latest briefing paper, co-authored by Fred de Fossard and Emmanuel Igwe, is live. For the most up-to-date analysis and numbers on the damage that rejoining the EU Customs Union would do to the British economy, watch below and read the latest on our website. Link in comments 👇

Prosperity Institute

12,825 views • 6 months ago

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root

‼️ Dirty Frag: A Universal Linux Local Privilege Escalation via Page-Cache Write Primitives GitHub: Patches: CVE-2026-43284: A page-cache write flaw in the Linux kernel's xfrm-ESP (IPsec) subsystem that lets a local user corrupt read-only file pages via in-place decryption on shared skb fragments CVE-2026-43500: A sibling page-cache write flaw in the Linux kernel's RxRPC subsystem (AFS protocol) where the same fast-path pattern enables arbitrary plaintext writes into attacker-chosen pages, escalating to root

Dark Web Informer

18,534 views • 3 months ago

We are finalizing an Stage Analysis App on Deepvue which will allow you to look at the markets from a Stage Analysis perspective in one place. · Stages by Sector, Group, Industry, Sub-Industry · Drill down by Stages · Connect to charts using our Color Grouping System

We are finalizing an Stage Analysis App on Deepvue which will allow you to look at the markets from a Stage Analysis perspective in one place. · Stages by Sector, Group, Industry, Sub-Industry · Drill down by Stages · Connect to charts using our Color Grouping System

Ameet Rai

33,014 views • 6 months ago

“This gives us the ability to go anywhere in the world and challenge a team…” - Clive’s analysis on our performance vs Leverkusen.

“This gives us the ability to go anywhere in the world and challenge a team…” - Clive’s analysis on our performance vs Leverkusen.

ArsenalVision Podcast

18,708 views • 5 months ago

Imagine a launchpad Built by Homies in the trenches For the homies in the trenches. A user first mentality and market Our service fees will directly be distributed … To every single user of fun pump It’s in our smart contract in fact Let’s bring back the $fun

Imagine a launchpad Built by Homies in the trenches For the homies in the trenches. A user first mentality and market Our service fees will directly be distributed … To every single user of fun pump It’s in our smart contract in fact Let’s bring back the $fun

Fun💊

26,371 views • 1 year ago

Powered by Hyperliquid, Trust integrates the most performant trading stack with a seamless user interface, allowing our users to stay on top as the market moves. PS: spot anything else that’s new in this video? Coming soon on Trust Wallet.

Powered by Hyperliquid, Trust integrates the most performant trading stack with a seamless user interface, allowing our users to stay on top as the market moves. PS: spot anything else that’s new in this video? Coming soon on Trust Wallet.

Trust Wallet

77,187 views • 23 days ago

This may be live footage of the failed rocket that hit the hospital in Gaza. We have said that according to our intelligence analysis, the explosion was caused by a failed rocket fired by the Islamic Jihad.

This may be live footage of the failed rocket that hit the hospital in Gaza. We have said that according to our intelligence analysis, the explosion was caused by a failed rocket fired by the Islamic Jihad.

Jonathan Conricus

1,763,726 views • 2 years ago

Recently, I discovered a campaign spreading via Telegram Mini Apps. In fact, a threat actor attempted to phish me using this tactic.👇 The technique is highly convincing because it involves a trust boundary violation in Telegram’s MiniApp SDK (affecting Android, Desktop, iOS, and Web versions). Telegram allows third-party code to use its trusted native UI through showPopup(), but it does so without clearly indicating the source to the user or providing safeguards against abuse. This constitutes a design weakness, as the triggered pop-up belongs to Telegram and can be used in an arbitrary manner. -The attacker misleads the user by leveraging Telegram’s own native UI component. -The popup is rendered outside the MiniApp iframe, within Telegram’s own UI layer. -The user perceives it as a legitimate warning from Telegram itself. -By placing a single button, the attacker can redirect the user to a phishing page. -Since the phishing page opens inside the Mini App, the phishing URL is not visibly exposed. After conducting detailed research, I simulated this attack and demonstrated it in the video below. Be cautious when opening Mini Apps in bots.

Recently, I discovered a campaign spreading via Telegram Mini Apps. In fact, a threat actor attempted to phish me using this tactic.👇 The technique is highly convincing because it involves a trust boundary violation in Telegram’s MiniApp SDK (affecting Android, Desktop, iOS, and Web versions). Telegram allows third-party code to use its trusted native UI through showPopup(), but it does so without clearly indicating the source to the user or providing safeguards against abuse. This constitutes a design weakness, as the triggered pop-up belongs to Telegram and can be used in an arbitrary manner. -The attacker misleads the user by leveraging Telegram’s own native UI component. -The popup is rendered outside the MiniApp iframe, within Telegram’s own UI layer. -The user perceives it as a legitimate warning from Telegram itself. -By placing a single button, the attacker can redirect the user to a phishing page. -Since the phishing page opens inside the Mini App, the phishing URL is not visibly exposed. After conducting detailed research, I simulated this attack and demonstrated it in the video below. Be cautious when opening Mini Apps in bots.

0x6rss

49,167 views • 5 months ago

We continue to make enormous progress on our platform. In the background, we are simultaneously working on a project this year to drive quality to new levels. Our User group dropped this video at our all hands today to highlight the project...

We continue to make enormous progress on our platform. In the background, we are simultaneously working on a project this year to drive quality to new levels. Our User group dropped this video at our all hands today to highlight the project...

David Baszucki

98,370 views • 2 years ago

The #NanoPyx #preprint is finally out!! 😍 Our project brings bioimage analysis into #Python with a special emphasis in high speeds for *everyone* with the new system: the Liquid Engine (1/n)

The #NanoPyx #preprint is finally out!! 😍 Our project brings bioimage analysis into #Python with a special emphasis in high speeds for everyone with the new system: the Liquid Engine (1/n)

Inês Cunha

25,355 views • 3 years ago

Take a virtual tour of our brand new building at the CD PROJEKT RED Headquarters in Warsaw! This state-of-the-art space was built with creating revolutionary role-playing games in mind — and is now home to our team developing The Witcher 4. ⚔️ 💬 “It’s a reflection of our philosophy — a space shaped by the same passion that drives our games — because we don’t just build digital worlds, we bring that same energy into the world around us.” — Piotr Nielubowicz, CFO Read more about this incredible space on Beyond the Game Blog:

CD PROJEKT RED

133,144 views • 11 months ago

We've just posted a new dev blog! In this community update, we cover a bunch of upcoming critter improvements like critter growth and powerful alpha critters. We also share sneak peeks at the work-in-progress ambient audio system and our progress on other immersive features. Check out our full blog for our latest news here!:

We've just posted a new dev blog! In this community update, we cover a bunch of upcoming critter improvements like critter growth and powerful alpha critters. We also share sneak peeks at the work-in-progress ambient audio system and our progress on other immersive features. Check out our full blog for our latest news here!:

Path of Titans

16,487 views • 1 year ago