Loading video...

Video Failed to Load

Go Home

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention...

carlos_crowsec's profile picture

Carlos Vieira (lynx)

3,099 subscribers

81,336 views • 1 year ago •via X (Twitter)

EducationScience & TechnologyNews & Politics
LIVE

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

1/ A DoS exploit demo for CVE-2024-49112 by SafeBreach. RCE exploit is probably coming soon. Patch!
0:16

1/ A DoS exploit demo for CVE-2024-49112 by SafeBreach. RCE exploit is probably coming soon. Patch!

Tal Be'ery

69,367 views • 1 year ago

📞 Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk bronzebee Read the write-up:
0:10

📞 Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk bronzebee Read the write-up:

PT SWARM

34,514 views • 5 months ago

Meet our new buddy, Argusee — an AI-powered, automated vulnerability hunter that has already discovered 15+ vulnerabilities across projects, including a previously unknown Linux kernel flaw (CVE-2025-37891) enabling LPE. Demo and details:
0:16

Meet our new buddy, Argusee — an AI-powered, automated vulnerability hunter that has already discovered 15+ vulnerabilities across projects, including a previously unknown Linux kernel flaw (CVE-2025-37891) enabling LPE. Demo and details:

DARKNAVY

13,165 views • 1 year ago

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04
0:10

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04

V4bel

15,887 views • 1 year ago

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ, exploiting the vm:// protocol to achieve Remote Code Execution
0:11

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ, exploiting the vm:// protocol to achieve Remote Code Execution

pyn3rd

20,835 views • 2 months ago

In this research, Hakai Security Research Team has identified a critical Remote Code Execution (RCE) vulnerability in Wazuh versions up to 4.14.1 that allows arbitrary command execution on the master node through insecure deserialization in the cluster communication protocol. Written by Texugo
0:16

In this research, Hakai Security Research Team has identified a critical Remote Code Execution (RCE) vulnerability in Wazuh versions up to 4.14.1 that allows arbitrary command execution on the master node through insecure deserialization in the cluster communication protocol. Written by Texugo

Hakai Offsec

38,780 views • 3 months ago

Microsoft has addressed a one-click NTLM leak vulnerability affecting Windows Snipping Tool (CVE-2026-33829), discovered by our researcher Marcos Díaz (Marcos Díaz). ➡️ Read the write-up: ➡️ Microsoft bulletin:
0:18

Microsoft has addressed a one-click NTLM leak vulnerability affecting Windows Snipping Tool (CVE-2026-33829), discovered by our researcher Marcos Díaz (Marcos Díaz). ➡️ Read the write-up: ➡️ Microsoft bulletin:

BlackArrow

113,353 views • 2 months ago

My very first blog post is live: During research, I've run into and documented a simple universal SQLite Injection RCE trick. Enjoy! N-day Analysis about Synology Beestation RCE (CVE-2024-50629~50631) by legendary DEVCORE 🎃 🍊 Thanks to Pumpkin 🎃 Orange Tsai 🍊 for original finding and allowing to post, and to Ryan Emmons for the invaluable references 🔥 Enjoy the Demo! PoC:
0:17

My very first blog post is live: During research, I've run into and documented a simple universal SQLite Injection RCE trick. Enjoy! N-day Analysis about Synology Beestation RCE (CVE-2024-50629~50631) by legendary DEVCORE 🎃 🍊 Thanks to Pumpkin 🎃 Orange Tsai 🍊 for original finding and allowing to post, and to Ryan Emmons for the invaluable references 🔥 Enjoy the Demo! PoC:

kiddo

33,559 views • 7 months ago

October 1944 footage from the Battle of Leyte Gulf shows Wildcats finding a landing spot after their carrier was bombed, only to discover the hard way that the airstrip wasn't yet operational. (The carriers CVL-23, CVE-73, and CVE-63 were all lost in that battle.)🫡
0:11

October 1944 footage from the Battle of Leyte Gulf shows Wildcats finding a landing spot after their carrier was bombed, only to discover the hard way that the airstrip wasn't yet operational. (The carriers CVL-23, CVE-73, and CVE-63 were all lost in that battle.)🫡

Aviation Archive - Tim Farmer

182,504 views • 4 months ago

Exploit Demo & Analysis Article by 78ResearchLab(78ResearchLab) CVE-2026-20817 : Windows Error Reporting(WER) Service Elevation of Privilege Vulnerability #CVE_2026_20817 #LPE #Windows
0:18

Exploit Demo & Analysis Article by 78ResearchLab(78ResearchLab) CVE-2026-20817 : Windows Error Reporting(WER) Service Elevation of Privilege Vulnerability #CVE_2026_20817 #LPE #Windows

Moonbeom(Daniel)

13,247 views • 5 months ago

GhostLock (CVE-2026-43499) is a 15yr old kernel 0-day we used in IonStack full chain exploit. Everything around you, as long as it runs Linux, from IoT to mobile to desktop, is affected. Read how we won $92,337 bug bounty with GhostLock and see our exploit on Github. Link below
0:16

GhostLock (CVE-2026-43499) is a 15yr old kernel 0-day we used in IonStack full chain exploit. Everything around you, as long as it runs Linux, from IoT to mobile to desktop, is affected. Read how we won $92,337 bug bounty with GhostLock and see our exploit on Github. Link below

Nebula Security

137,198 views • 5 days ago

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in replies
0:18

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in replies

chebuya

89,196 views • 1 year ago

Hot off the press from watchTowr Labs member SinSinology, with a nice side of silent patching from Veeam 😉 details to come later (CVE-2024-40711 and friends..). Special thanks to Soroush Dalili for his help with this exploit!
0:15

Hot off the press from watchTowr Labs member SinSinology, with a nice side of silent patching from Veeam 😉 details to come later (CVE-2024-40711 and friends..). Special thanks to Soroush Dalili for his help with this exploit!

watchTowr

31,104 views • 1 year ago

Rooting Android: Exploiting Your GPU On Smartphone (CVE-2024-23380) by Eugene Rodionov PoC exploit is not available for download. [slides] #BlackHat
0:19

Rooting Android: Exploiting Your GPU On Smartphone (CVE-2024-23380) by Eugene Rodionov PoC exploit is not available for download. [slides] #BlackHat

Mobile Hacker

28,402 views • 1 year ago

I found a CVE in my studio lights💡 ✨【𝒞𝒱𝐸－𝟤𝟢𝟤𝟧－𝟩𝟤𝟢𝟤】✨ I discovered a CSRF vulnerability in Elgato’s Key Lights that allows any website make your Elgato lights flicker aggressively. Want to learn more about how I did this? Read the full blog post below 👇
0:12

I found a CVE in my studio lights💡 ✨【𝒞𝒱𝐸－𝟤𝟢𝟤𝟧－𝟩𝟤𝟢𝟤】✨ I discovered a CSRF vulnerability in Elgato’s Key Lights that allows any website make your Elgato lights flicker aggressively. Want to learn more about how I did this? Read the full blog post below 👇

PinkDraconian

51,231 views • 11 months ago

An analysis of CVE-2026-21236 - A heap based buffer overflow in the Microsoft Windows Kernel afd.sys - was just published by Emily L a recent secondment with my team EDG! Nice work for her first triage of a kernel memory corruption bug!
0:13

An analysis of CVE-2026-21236 - A heap based buffer overflow in the Microsoft Windows Kernel afd.sys - was just published by Emily L a recent secondment with my team EDG! Nice work for her first triage of a kernel memory corruption bug!

Alex Plaskett

16,834 views • 3 months ago

Introducing nginx-poolslip, a fresh RCE for the the latest nginx release 1.31.0. nginx-rift has been patched, but our security agent Vega has found a new 0 day. We will release the full technical writeup with ASLR bypass 30 days after the patch on
0:17

Introducing nginx-poolslip, a fresh RCE for the the latest nginx release 1.31.0. nginx-rift has been patched, but our security agent Vega has found a new 0 day. We will release the full technical writeup with ASLR bypass 30 days after the patch on

Nebula Security

483,894 views • 1 month ago

OUR FIRST-EVER PLAYER IS CLAIRE THOMPSON 🗣️ The Walter Cup Champion and 2025 Defender of the Year Finalist has signed with the team for the 2025-26 season! 📰
0:10

OUR FIRST-EVER PLAYER IS CLAIRE THOMPSON 🗣️ The Walter Cup Champion and 2025 Defender of the Year Finalist has signed with the team for the 2025-26 season! 📰

Vancouver Goldeneyes

164,543 views • 1 year ago