正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

📞 Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk bronzebee Read the write-up:

PT SWARM

18,766 subscribers

34,481 次观看 • 5 个月前 •via X (Twitter)

新闻政治科学技术

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

Microsoft has addressed a one-click NTLM leak vulnerability affecting Windows Snipping Tool (CVE-2026-33829), discovered by our researcher Marcos Díaz (Marcos Díaz). ➡️ Read the write-up: ➡️ Microsoft bulletin:

Microsoft has addressed a one-click NTLM leak vulnerability affecting Windows Snipping Tool (CVE-2026-33829), discovered by our researcher Marcos Díaz (Marcos Díaz). ➡️ Read the write-up: ➡️ Microsoft bulletin:

BlackArrow

113,353 次观看 • 2 个月前

Since V8 had heap sandbox, Chrome renderer RCE usually means chaining 2 bugs Today we bring the Spear of Longinus 1 bug, 100% success, no heap spray, found in 40+ major versions, arbitrary renderer read/write + V8 sandbox escape Our CVE-2026-6307 writeup

Since V8 had heap sandbox, Chrome renderer RCE usually means chaining 2 bugs Today we bring the Spear of Longinus 1 bug, 100% success, no heap spray, found in 40+ major versions, arbitrary renderer read/write + V8 sandbox escape Our CVE-2026-6307 writeup

Nebula Security

38,437 次观看 • 7 天前

Exim 4.99.3 is out, patching CVE-2026-45185, a critical RCE found by XBOW! Check out our post linked in the reply; I'll summarize some details in this thread.

Exim 4.99.3 is out, patching CVE-2026-45185, a critical RCE found by XBOW! Check out our post linked in the reply; I'll summarize some details in this thread.

Brendan Dolan-Gavitt

33,510 次观看 • 1 个月前

Exploit Demo & Analysis Article by 78ResearchLab(78ResearchLab) CVE-2026-20817 : Windows Error Reporting(WER) Service Elevation of Privilege Vulnerability #CVE_2026_20817 #LPE #Windows

Exploit Demo & Analysis Article by 78ResearchLab(78ResearchLab) CVE-2026-20817 : Windows Error Reporting(WER) Service Elevation of Privilege Vulnerability #CVE_2026_20817 #LPE #Windows

Moonbeom(Daniel)

13,247 次观看 • 4 个月前

An analysis of CVE-2026-21236 - A heap based buffer overflow in the Microsoft Windows Kernel afd.sys - was just published by Emily L a recent secondment with my team EDG! Nice work for her first triage of a kernel memory corruption bug!

An analysis of CVE-2026-21236 - A heap based buffer overflow in the Microsoft Windows Kernel afd.sys - was just published by Emily L a recent secondment with my team EDG! Nice work for her first triage of a kernel memory corruption bug!

Alex Plaskett

16,778 次观看 • 3 个月前

using microsoft windows in 2026:

using microsoft windows in 2026:

CEO of Antifa

558,337 次观看 • 3 个月前

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm

Carlos Vieira (lynx)

81,336 次观看 • 1 年前

1/ A DoS exploit demo for CVE-2024-49112 by SafeBreach. RCE exploit is probably coming soon. Patch!

1/ A DoS exploit demo for CVE-2024-49112 by SafeBreach. RCE exploit is probably coming soon. Patch!

Tal Be'ery

69,367 次观看 • 1 年前

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in replies

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in replies

chebuya

89,150 次观看 • 1 年前

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ, exploiting the vm:// protocol to achieve Remote Code Execution

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ, exploiting the vm:// protocol to achieve Remote Code Execution

pyn3rd

20,835 次观看 • 2 个月前

I bypassed user approvals and achieved RCE in VS Code Copilot by flipping 4 bits. Find out how: Thanks to Microsoft Security Response Center for rapidly triaging and patching this vulnerability.

I bypassed user approvals and achieved RCE in VS Code Copilot by flipping 4 bits. Find out how: Thanks to Microsoft Security Response Center for rapidly triaging and patching this vulnerability.

jro

67,405 次观看 • 8 个月前

Meet our new buddy, Argusee — an AI-powered, automated vulnerability hunter that has already discovered 15+ vulnerabilities across projects, including a previously unknown Linux kernel flaw (CVE-2025-37891) enabling LPE. Demo and details:

Meet our new buddy, Argusee — an AI-powered, automated vulnerability hunter that has already discovered 15+ vulnerabilities across projects, including a previously unknown Linux kernel flaw (CVE-2025-37891) enabling LPE. Demo and details:

DARKNAVY

13,165 次观看 • 1 年前

🇮🇱 A secular Jew who supports military service and an ultra-Orthodox Jew who is against military service in the Israeli army are fighting. And the scene is being filmed by an Arab. Israel 2026.

🇮🇱 A secular Jew who supports military service and an ultra-Orthodox Jew who is against military service in the Israeli army are fighting. And the scene is being filmed by an Arab. Israel 2026.

S p r i n t e r

31,198 次观看 • 8 天前

I've discovered CVE-2026-32173 by steering a single agent The vuln: you could listen to anyone's AI chat stream on Azure SRE agent. Including LLM thinking, commands, tools. The auth check was there, but at the wrong place. Patched. Critical, Information Disclosure. $20k bounty

I've discovered CVE-2026-32173 by steering a single agent The vuln: you could listen to anyone's AI chat stream on Azure SRE agent. Including LLM thinking, commands, tools. The auth check was there, but at the wrong place. Patched. Critical, Information Disclosure. $20k bounty

Yanir Tsarimi

47,854 次观看 • 2 个月前

My very first blog post is live: During research, I've run into and documented a simple universal SQLite Injection RCE trick. Enjoy! N-day Analysis about Synology Beestation RCE (CVE-2024-50629~50631) by legendary DEVCORE 🎃 🍊 Thanks to Pumpkin 🎃 Orange Tsai 🍊 for original finding and allowing to post, and to Ryan Emmons for the invaluable references 🔥 Enjoy the Demo! PoC:

My very first blog post is live: During research, I've run into and documented a simple universal SQLite Injection RCE trick. Enjoy! N-day Analysis about Synology Beestation RCE (CVE-2024-50629~50631) by legendary DEVCORE 🎃 🍊 Thanks to Pumpkin 🎃 Orange Tsai 🍊 for original finding and allowing to post, and to Ryan Emmons for the invaluable references 🔥 Enjoy the Demo! PoC:

kiddo

33,535 次观看 • 7 个月前

A large black hole in the Firmament was discovered by an amateur astronomer.👀

A large black hole in the Firmament was discovered by an amateur astronomer.👀

FLAT OUT TRUTH

1,800,678 次观看 • 1 天前

Some F1 fans discovered they could get an unobstructed view of the Strip by riding the escalators up and down.

Some F1 fans discovered they could get an unobstructed view of the Strip by riding the escalators up and down.

Las Vegas Locally 🌴

1,085,294 次观看 • 2 年前

I found a CVE in my studio lights💡 ✨【𝒞𝒱𝐸－𝟤𝟢𝟤𝟧－𝟩𝟤𝟢𝟤】✨ I discovered a CSRF vulnerability in Elgato’s Key Lights that allows any website make your Elgato lights flicker aggressively. Want to learn more about how I did this? Read the full blog post below 👇

I found a CVE in my studio lights💡 ✨【𝒞𝒱𝐸－𝟤𝟢𝟤𝟧－𝟩𝟤𝟢𝟤】✨ I discovered a CSRF vulnerability in Elgato’s Key Lights that allows any website make your Elgato lights flicker aggressively. Want to learn more about how I did this? Read the full blog post below 👇

PinkDraconian

51,231 次观看 • 11 个月前

#Microsoft #Windows #crowdstrike IT employees who took leave today

#Microsoft #Windows #crowdstrike IT employees who took leave today

Tweeting Quarantino

1,650,411 次观看 • 1 年前