Loading video...

Video Failed to Load

Go Home

Our pentesting agent found a 1-click ATO to RCE in Gateway Control UI in under 2 hours. Local instances can also be exploited with one click. Patched in main, update now. Watch the exploit 👇

0xacb's profile picture

André Baptista

19,431 subscribers

24,498 views • 7 months ago •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

Lastly, customized characters can now be displayed in the Main Menu 🔥 We have also added a dedicated button hide the UI [Right stick click / N Key] to fully enjoy this feature! Show us your main menu in the comments below 👇
0:33

Lastly, customized characters can now be displayed in the Main Menu 🔥 We have also added a dedicated button hide the UI [Right stick click / N Key] to fully enjoy this feature! Show us your main menu in the comments below 👇

TEKKEN

15,559 views • 1 year ago

One UI 8.5 is a new function with five LUT styles built in, which can restore different video styles to Log video with one click, but this function is under development now, and there is something wrong with the color.
0:22

One UI 8.5 is a new function with five LUT styles built in, which can restore different video styles to Log video with one click, but this function is under development now, and there is something wrong with the color.

Ice Universe

43,458 views • 11 months ago

You can now clone any UI on the web and make it your own with one click. Just: - grab it with our Chrome extension - paste into Fusion - Type "adapt to our brand" Converts the UI to your design system and stack Links in reply:
0:21

You can now clone any UI on the web and make it your own with one click. Just: - grab it with our Chrome extension - paste into Fusion - Type "adapt to our brand" Converts the UI to your design system and stack Links in reply:

Steve (Builder.io)

40,275 views • 11 months ago

Agentic commerce is...actually...starting... You can now buy [coffee beans] via an AI agent using Stripe. 1/ Find [coffee] with AI 2/ Buy in 1-click with Link 3/ Agent gets one-time virtual card 4/ Agent purchases via ☕ Watch this video (built by Evan Fenster)
4:22

Agentic commerce is...actually...starting... You can now buy [coffee beans] via an AI agent using Stripe. 1/ Find [coffee] with AI 2/ Buy in 1-click with Link 3/ Agent gets one-time virtual card 4/ Agent purchases via ☕ Watch this video (built by Evan Fenster)

Jeff Weinstein

128,460 views • 1 year ago

It's over... Kling 2.6 Motion Control is absolutely genius. You can now swap your face with anyone in just one click. Free guide 👇
0:25

It's over... Kling 2.6 Motion Control is absolutely genius. You can now swap your face with anyone in just one click. Free guide 👇

Poonam Soni

144,682 views • 8 months ago

Welp, just found a 1-click RCE in pewdiepie's Odysseus Chat... more like Odysseus Hack amirite? CSRF + Command Injection allows you to pwn a users server in a single click including adding your own backdoored admin account (sound on). Will share full breakdown soon.
0:28

Welp, just found a 1-click RCE in pewdiepie's Odysseus Chat... more like Odysseus Hack amirite? CSRF + Command Injection allows you to pwn a users server in a single click including adding your own backdoored admin account (sound on). Will share full breakdown soon.

Jamieson O'Reilly

99,100 views • 3 months ago

Watch GCSA AI Agent in action. 🎥⚡ Our expert-level vulnerability discovery engine just identified a new Edge 0-click RCE, proving its power in auditing massive and complex binary codebases where traditional methods struggle. Autonomous vulnerability research is no longer the future—it's here. 🛡️ #Cybersecurity #AIAgent #RCE #ZeroDay
0:22

Watch GCSA AI Agent in action. 🎥⚡ Our expert-level vulnerability discovery engine just identified a new Edge 0-click RCE, proving its power in auditing massive and complex binary codebases where traditional methods struggle. Autonomous vulnerability research is no longer the future—it's here. 🛡️ #Cybersecurity #AIAgent #RCE #ZeroDay

GCSA全球网络安全联盟

1,270,764 views • 6 days ago

🚨 wp2shell : pre-auth RCE in WordPress core, reproduced end-to-end. Nested /batch/v1 "double confusion" · (CVE-2026-63030) → WP_Query SQLi · (CVE-2026-60137) → anonymous shell on a stock install. A couple of prompts later: · Opus 4.8 orchestrating, Sonnet agents executing. Exploit dev has gotten scary easy. Patched in 6.9.5 / 7.0.2 - update now. 👇
0:56

🚨 wp2shell : pre-auth RCE in WordPress core, reproduced end-to-end. Nested /batch/v1 "double confusion" · (CVE-2026-63030) → WP_Query SQLi · (CVE-2026-60137) → anonymous shell on a stock install. A couple of prompts later: · Opus 4.8 orchestrating, Sonnet agents executing. Exploit dev has gotten scary easy. Patched in 6.9.5 / 7.0.2 - update now. 👇

Aseem Shrey

33,609 views • 1 month ago

With one day left in our sale, we want to give back to our fans! If you're in a position where buying merch isn't feasible right now, please click the link in the comments, and we'll try to get as many of you as we can some stickers! Click here!
0:30

With one day left in our sale, we want to give back to our fans! If you're in a position where buying merch isn't feasible right now, please click the link in the comments, and we'll try to get as many of you as we can some stickers! Click here!

Natural Habitat Shorts

56,326 views • 1 year ago

NEW: our website is updated with plenty of research content, tech specs and FAQ Now you can order your Neurode in 1-click 20 min session = 2 hours of deep work
0:48

NEW: our website is updated with plenty of research content, tech specs and FAQ Now you can order your Neurode in 1-click 20 min session = 2 hours of deep work

Neurode

13,562 views • 11 months ago

HERMES AGENT DASHBOARD JUST GOT A FULL CONTROL PLANE. Before: you edited YAML files, ran CLI commands, and hoped nothing broke. Now: everything lives in one clean UI. → MCP catalog — browse and install servers in one click → Webhooks — create, toggle and disable without restarting gateway → Shell hooks — connect any script as a lifecycle hook (with consent) → Device pairing — approve or revoke remote devices → System monitoring — CPU, memory, disk, uptime and backup status The full control plane is finally here. Just run `hermes update` and open the dashboard.
0:46

HERMES AGENT DASHBOARD JUST GOT A FULL CONTROL PLANE. Before: you edited YAML files, ran CLI commands, and hoped nothing broke. Now: everything lives in one clean UI. → MCP catalog — browse and install servers in one click → Webhooks — create, toggle and disable without restarting gateway → Shell hooks — connect any script as a lifecycle hook (with consent) → Device pairing — approve or revoke remote devices → System monitoring — CPU, memory, disk, uptime and backup status The full control plane is finally here. Just run `hermes update` and open the dashboard.

YanXbt

18,146 views • 3 months ago

Video Drop! Binor Founder breaks down our mission! Click to watch now — Let’s dive in together!👇
1:10

Video Drop! Binor Founder breaks down our mission! Click to watch now — Let’s dive in together!👇

Binor

58,821 views • 10 months ago

It's time to break out of the box. Passage is your gateway to virtual events with infinite immersion in just 1 click. How can you get involved? Join the waitlist at and read on! 👇
1:08

It's time to break out of the box. Passage is your gateway to virtual events with infinite immersion in just 1 click. How can you get involved? Join the waitlist at and read on! 👇

Passage

11,800 views • 1 year ago

🚀 We just shipped a major update to LangSmith Agent Builder: • New agent chat: One always-available agent with access to all your workspace tools • Chat → Agent: Turn any conversation into a specialized agent with one click • File uploads: Attach files directly to Agent Builder • Tool registry: Add, authenticate, and manage your tools in one place Try it now: Learn more:
3:04

🚀 We just shipped a major update to LangSmith Agent Builder: • New agent chat: One always-available agent with access to all your workspace tools • Chat → Agent: Turn any conversation into a specialized agent with one click • File uploads: Attach files directly to Agent Builder • Tool registry: Add, authenticate, and manage your tools in one place Try it now: Learn more:

LangChain

24,885,978 views • 6 months ago

In a #Pwn2Own first, AI was involved in a successful exploit. The @claroty team used @openai 's #ChatGPT to write one of the backend modules used in their RCE of #Softing edgeAggregator. What a time to be alive.
0:21

In a #Pwn2Own first, AI was involved in a successful exploit. The @claroty team used @openai 's #ChatGPT to write one of the backend modules used in their RCE of #Softing edgeAggregator. What a time to be alive.

TrendAI Zero Day Initiative

16,445 views • 3 years ago

Nim one-click stories are now available for all 🎉 Start with a prompt or link → Nim does the rest Research + script + voiceover + captions + transitions All in 2-3 minutes and starting at under $1/story Examples and how to 👇
0:57

Nim one-click stories are now available for all 🎉 Start with a prompt or link → Nim does the rest Research + script + voiceover + captions + transitions All in 2-3 minutes and starting at under $1/story Examples and how to 👇

Nim

15,703 views • 1 year ago

How to level up Business in Pixels and collect $CYBER 1. Go to Drunken Goose 2. Click on pink game machine 3. Click on desk to order Pop Chip (collectibles every 4 hours) Continue in the comments👇
2:10

How to level up Business in Pixels and collect $CYBER 1. Go to Drunken Goose 2. Click on pink game machine 3. Click on desk to order Pop Chip (collectibles every 4 hours) Continue in the comments👇

MARIKO 🧚‍♀️ | KIND

23,062 views • 2 years ago

Maidenhead United Football Club is delighted to share a significant update in our ambitions to relocate to a new ground in Braywick Park. Over the past 12 months, the club has been engaging with the local authority regarding our ambitions to relocate away from York Road, as detailed in our new video, “Our Future”, and on our new dedicated website. Watch our new video and visit our website to find out more. Click here 👇
8:23

Maidenhead United Football Club is delighted to share a significant update in our ambitions to relocate to a new ground in Braywick Park. Over the past 12 months, the club has been engaging with the local authority regarding our ambitions to relocate away from York Road, as detailed in our new video, “Our Future”, and on our new dedicated website. Watch our new video and visit our website to find out more. Click here 👇

Maidenhead United

123,837 views • 8 months ago

This the most broken CS2 update I've ever seen. The Famas burst fire now shoots all 3 rounds at the same time. One click, 3 rounds in an instant. This also works for the Glock! Pocket Shotgun. This is definitely a glitch and will get patched shortly, but until then, I'm having a lot of fun in Premier.
0:30

This the most broken CS2 update I've ever seen. The Famas burst fire now shoots all 3 rounds at the same time. One click, 3 rounds in an instant. This also works for the Glock! Pocket Shotgun. This is definitely a glitch and will get patched shortly, but until then, I'm having a lot of fun in Premier.

WarOwl

933,656 views • 4 months ago