Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

In this research, Hakai Security Research Team has identified a critical Remote Code Execution (RCE) vulnerability in Wazuh versions up to 4.14.1 that allows arbitrary command execution on the master node through insecure deserialization in the cluster communication protocol. Written by Texugo

HakaiOffsec's profile picture

Hakai Offsec

1,235 subscribers

39,306 görüntüleme • 6 ay önce •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Yorum

Yorum bulunmuyor

Orijinal gönderinin yorumları burada görünecek

Benzer Videolar

Ethereum Sets 2029 Target For Quantum Resistant L1 Ethereum’s Protocol Cluster has identified quantum resistance as a major research priority through December 2029. It is aimed at making Ethereum L1 quantum-resistant via improvement of several layers of its protocol. The roadmap covers execution, consensus, and data availability, alongside broader research into privacy and network state. Fast finality and zkEVM research are included among other five key areas of cross upgrade research. The Foundation believes these research priorities would contribute to Ethereum protocol development in the long run.
0:15

Ethereum Sets 2029 Target For Quantum Resistant L1 Ethereum’s Protocol Cluster has identified quantum resistance as a major research priority through December 2029. It is aimed at making Ethereum L1 quantum-resistant via improvement of several layers of its protocol. The roadmap covers execution, consensus, and data availability, alongside broader research into privacy and network state. Fast finality and zkEVM research are included among other five key areas of cross upgrade research. The Foundation believes these research priorities would contribute to Ethereum protocol development in the long run.

BSCN

22,854 görüntüleme • 26 gün önce

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ, exploiting the vm:// protocol to achieve Remote Code Execution
0:11

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ, exploiting the vm:// protocol to achieve Remote Code Execution

pyn3rd

21,018 görüntüleme • 5 ay önce

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm
0:14

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm

Carlos Vieira (lynx)

81,336 görüntüleme • 1 yıl önce

CVE-2023-20593 — Exploiting Zenbleed from Chrome This repository contains a proof-of-concept for exploiting Zenbleed from Chrome using a V8 vulnerability which enbles arbitrary code execution in the renderer process. Details: #cybersecurity #pentesting #redteam #bugbounty
0:14

CVE-2023-20593 — Exploiting Zenbleed from Chrome This repository contains a proof-of-concept for exploiting Zenbleed from Chrome using a V8 vulnerability which enbles arbitrary code execution in the renderer process. Details: #cybersecurity #pentesting #redteam #bugbounty

HackGit

27,236 görüntüleme • 2 yıl önce

Pick up a remote, reorient it in-hand, and press the correct button to turn off the TV. Clean execution on a high-precision task.
0:15

Pick up a remote, reorient it in-hand, and press the correct button to turn off the TV. Clean execution on a high-precision task.

The Humanoid Hub

430,712 görüntüleme • 6 ay önce

Celebrate #PokemonGO’s #PokémonConcierge Celebration Event with Psyduck with a swim ring in Pokémon GO! 🎉 Use the code PokemonConcierge to get Timed Research that leads to this encounter! The offer code and Timed Research expire on Sunday, September 14 at 8:00 p.m. local time. #Netflix
0:17

Celebrate #PokemonGO’s #PokémonConcierge Celebration Event with Psyduck with a swim ring in Pokémon GO! 🎉 Use the code PokemonConcierge to get Timed Research that leads to this encounter! The offer code and Timed Research expire on Sunday, September 14 at 8:00 p.m. local time. #Netflix

Pokémon GO

372,588 görüntüleme • 1 yıl önce

This magnified view of a Tradescantia spathacea plant shows the opening of its stomata, pores that allow the plant to take in CO2 and release O2 while minimising water loss. New research has identified a two-protein system that regulates this mechanism:
0:17

This magnified view of a Tradescantia spathacea plant shows the opening of its stomata, pores that allow the plant to take in CO2 and release O2 while minimising water loss. New research has identified a two-protein system that regulates this mechanism:

New Scientist

371,787 görüntüleme • 3 yıl önce

After months of research we identified a critical gap in developer tooling. Today we're fixing that. We are open sourcing Cursed Plugins: a suite of tools to deliver candid, expert reviews your code (and your peers), assess the architectural harmony of your codebase, generate obituaries for your dead code, or convert your entire project to COBOL.
0:17

After months of research we identified a critical gap in developer tooling. Today we're fixing that. We are open sourcing Cursed Plugins: a suite of tools to deliver candid, expert reviews your code (and your peers), assess the architectural harmony of your codebase, generate obituaries for your dead code, or convert your entire project to COBOL.

Factory

36,591 görüntüleme • 6 ay önce

At Applied Compute, we're not just training models, we're building a model factory. To help researchers scale, we built Ari, our in-house AI research agent. Ari diligently sifts through gigabytes of logs to find evidence of unhealthy behavior, remembers results the team has learned from past experiments, and produces styled research reports for the team to review.
0:17

At Applied Compute, we're not just training models, we're building a model factory. To help researchers scale, we built Ari, our in-house AI research agent. Ari diligently sifts through gigabytes of logs to find evidence of unhealthy behavior, remembers results the team has learned from past experiments, and produces styled research reports for the team to review.

Applied Compute

42,116 görüntüleme • 1 ay önce

Excited to announce that the Ask Caesar agent is now available within the Virtuals Protocol ecosystem. Through Butler, users can access insights from Ask Caesar’s best-in-class research capabilities. Agents can also call upon Ask Caesar through the interoperability offered by the ACP framework without the need to integrate directly with the Caesar API.
0:12

Excited to announce that the Ask Caesar agent is now available within the Virtuals Protocol ecosystem. Through Butler, users can access insights from Ask Caesar’s best-in-class research capabilities. Agents can also call upon Ask Caesar through the interoperability offered by the ACP framework without the need to integrate directly with the Caesar API.

Caesar

79,830 görüntüleme • 1 yıl önce

🔥 BREAKING 🔥 Reports are emerging that the U.S. military installation in Bahrain has been been completely destroyed by Iran. Bahrain hosts critical U.S. naval infrastructure, including command operations tied to Gulf security and maritime control.
0:10

🔥 BREAKING 🔥 Reports are emerging that the U.S. military installation in Bahrain has been been completely destroyed by Iran. Bahrain hosts critical U.S. naval infrastructure, including command operations tied to Gulf security and maritime control.

Lozzy B 🇦🇺𝕏

11,486 görüntüleme • 7 ay önce

We welcome the additional £3 million in funding announced by the Chancellor today to support promising early career cancer researchers. This funding from the Medical Research Charities Early Career Researchers Support Fund is a welcome boost at a time when inflation and the cost of living is squeezing research. We look forward to working with the government to put cancer research funding on a long-term sustainable footing and to tackle the more than £1 billion gap in cancer research funding expected over the next decade. #LongerBetterLives #Budget2024 #InTheNews
0:17

We welcome the additional £3 million in funding announced by the Chancellor today to support promising early career cancer researchers. This funding from the Medical Research Charities Early Career Researchers Support Fund is a welcome boost at a time when inflation and the cost of living is squeezing research. We look forward to working with the government to put cancer research funding on a long-term sustainable footing and to tackle the more than £1 billion gap in cancer research funding expected over the next decade. #LongerBetterLives #Budget2024 #InTheNews

Cancer Research UK

13,363 görüntüleme • 2 yıl önce

Dr. Hajar Tukur (OHMO Research Fellow 2023, Oli Health Magazine Organization) presented our research at the 11th Evolving Practice of Ophthalmology Middle East Conference (EPOMEC). The presentation was titled “The Impact of Traumatic Brain Injury on Visual Processing: A Neuro-Ophthalmological Perspective,” and it highlighted the critical link between brain injury and vision, aiming to advance awareness, research, and clinical approaches in this important field.
0:18

Dr. Hajar Tukur (OHMO Research Fellow 2023, Oli Health Magazine Organization) presented our research at the 11th Evolving Practice of Ophthalmology Middle East Conference (EPOMEC). The presentation was titled “The Impact of Traumatic Brain Injury on Visual Processing: A Neuro-Ophthalmological Perspective,” and it highlighted the critical link between brain injury and vision, aiming to advance awareness, research, and clinical approaches in this important field.

Olivier UWISHEMA

14,215 görüntüleme • 1 yıl önce

Canadians need to wake up. This group handing out free Qurans yesterday in the GTA, the Islamic Education and Research Academy (IERA), has deep roots in Islamic extremism. This isn’t innocent outreach. It’s a front for radical ideology cloaked in religious charity. 🧵
0:15

Canadians need to wake up. This group handing out free Qurans yesterday in the GTA, the Islamic Education and Research Academy (IERA), has deep roots in Islamic extremism. This isn’t innocent outreach. It’s a front for radical ideology cloaked in religious charity. 🧵

Non-Halal Advocacy Canada (NHAC)

145,376 görüntüleme • 1 yıl önce

In a generation quick to see through façades, #KaiMontinola stands out by choosing sincerity. “I see vulnerability as a strength in this industry,” she shares, embracing the very thing that once made her doubt herself.
0:12

In a generation quick to see through façades, #KaiMontinola stands out by choosing sincerity. “I see vulnerability as a strength in this industry,” she shares, embracing the very thing that once made her doubt herself.

Mega Magazine

179,472 görüntüleme • 1 yıl önce

🐢 | During a research trip, a team of Oxford researchers took part in the #ProtetugaProject through Fundação Príncipe to observe sea turtles laying eggs. Fundação Príncipe works with local communities to protect biodiversity on the island. 📽 | Oxford Príncipe Project #TurtleDay
0:12

🐢 | During a research trip, a team of Oxford researchers took part in the #ProtetugaProject through Fundação Príncipe to observe sea turtles laying eggs. Fundação Príncipe works with local communities to protect biodiversity on the island. 📽 | Oxford Príncipe Project #TurtleDay

University of Oxford

21,800 görüntüleme • 3 yıl önce

New Records Raise Questions About NIH's Kitten Research in Maryland Seven years ago, our 7News DC investigation helped expose and shut down a controversial Dept. of Agriculture program that bred, infected, and killed thousands of kittens for taxpayer-funded research. Many Americans believed it had ended. Now, newly obtained records obtained by White Coat Waste raise questions about whether similar NIH supported toxoplasmosis research involving cats has continued at the agency's Bethesda campus. Listen to Justin Goodman with White Coat Waste Project in the video below. Today, documents show the cats used in the research are being adopted out instead of euthanized but internal records are raising serious questions about the adoption process. Our investigation examines the records, the science behind the research, the Trump Administration's push for alternatives to animal testing, and why critics say taxpayers deserve answers. Despite repeated requests, NIH has neither confirmed nor denied whether the research is still ongoing, even though records show the animal-use protocol remains approved through the end of 2026. Watch the full 7News I-Team investigation today at 5 pm. #7News #ITeam #Investigation #NIH #AnimalResearch #Accountability #M
0:15

New Records Raise Questions About NIH's Kitten Research in Maryland Seven years ago, our 7News DC investigation helped expose and shut down a controversial Dept. of Agriculture program that bred, infected, and killed thousands of kittens for taxpayer-funded research. Many Americans believed it had ended. Now, newly obtained records obtained by White Coat Waste raise questions about whether similar NIH supported toxoplasmosis research involving cats has continued at the agency's Bethesda campus. Listen to Justin Goodman with White Coat Waste Project in the video below. Today, documents show the cats used in the research are being adopted out instead of euthanized but internal records are raising serious questions about the adoption process. Our investigation examines the records, the science behind the research, the Trump Administration's push for alternatives to animal testing, and why critics say taxpayers deserve answers. Despite repeated requests, NIH has neither confirmed nor denied whether the research is still ongoing, even though records show the animal-use protocol remains approved through the end of 2026. Watch the full 7News I-Team investigation today at 5 pm. #7News #ITeam #Investigation #NIH #AnimalResearch #Accountability #M

Scott Taylor

16,532 görüntüleme • 2 ay önce