Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

🚨PoC for CVE-2024-51378; CyberPanel Command Injection Vulnerability

DarkWebInformer's profile picture

Dark Web Informer - Cyber Threat Intelligence

108,712 subscribers

14,834 Aufrufe • vor 1 Jahr •via X (Twitter)

Wissenschaft & TechnologieBildungNachrichten & Politik
LIVE

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

My very first blog post is live: During research, I've run into and documented a simple universal SQLite Injection RCE trick. Enjoy! N-day Analysis about Synology Beestation RCE (CVE-2024-50629~50631) by legendary DEVCORE 🎃 🍊 Thanks to Pumpkin 🎃 Orange Tsai 🍊 for original finding and allowing to post, and to Ryan Emmons for the invaluable references 🔥 Enjoy the Demo! PoC:
0:17

My very first blog post is live: During research, I've run into and documented a simple universal SQLite Injection RCE trick. Enjoy! N-day Analysis about Synology Beestation RCE (CVE-2024-50629~50631) by legendary DEVCORE 🎃 🍊 Thanks to Pumpkin 🎃 Orange Tsai 🍊 for original finding and allowing to post, and to Ryan Emmons for the invaluable references 🔥 Enjoy the Demo! PoC:

kiddo

33,432 Aufrufe • vor 6 Monaten

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04
0:10

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04

V4bel

15,157 Aufrufe • vor 1 Jahr

I've confirmed Samsung's MagicINFO 21.1050 is VULNERABLE to the publicly reported POC in the blog below. The media is reporting this as CVE-2024-7399, but if it is then the patch is incomplete. There is currently NO PATCH AVAILABLE!
0:17

I've confirmed Samsung's MagicINFO 21.1050 is VULNERABLE to the publicly reported POC in the blog below. The media is reporting this as CVE-2024-7399, but if it is then the patch is incomplete. There is currently NO PATCH AVAILABLE!

Jai Minton

15,205 Aufrufe • vor 1 Jahr

Exploit Demo & Analysis Article by 78ResearchLab(78ResearchLab) CVE-2026-20817 : Windows Error Reporting(WER) Service Elevation of Privilege Vulnerability #CVE_2026_20817 #LPE #Windows
0:18

Exploit Demo & Analysis Article by 78ResearchLab(78ResearchLab) CVE-2026-20817 : Windows Error Reporting(WER) Service Elevation of Privilege Vulnerability #CVE_2026_20817 #LPE #Windows

Moonbeom(Daniel)

13,231 Aufrufe • vor 4 Monaten

1/ A DoS exploit demo for CVE-2024-49112 by SafeBreach. RCE exploit is probably coming soon. Patch!
0:16

1/ A DoS exploit demo for CVE-2024-49112 by SafeBreach. RCE exploit is probably coming soon. Patch!

Tal Be'ery

69,367 Aufrufe • vor 1 Jahr

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm
0:14

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm

Carlos Vieira (lynx)

81,336 Aufrufe • vor 1 Jahr

Video of my PoC for CVE-2023-43641: out-of-bounds array access in libcue. libcue is used by tracker-miners, which automatically scans new files in ~/Downloads, so the bug is triggered by downloading a file.
0:10

Video of my PoC for CVE-2023-43641: out-of-bounds array access in libcue. libcue is used by tracker-miners, which automatically scans new files in ~/Downloads, so the bug is triggered by downloading a file.

Kev

128,668 Aufrufe • vor 2 Jahren

CVE-2023-20593 — Exploiting Zenbleed from Chrome This repository contains a proof-of-concept for exploiting Zenbleed from Chrome using a V8 vulnerability which enbles arbitrary code execution in the renderer process. Details: #cybersecurity #pentesting #redteam #bugbounty
0:14

CVE-2023-20593 — Exploiting Zenbleed from Chrome This repository contains a proof-of-concept for exploiting Zenbleed from Chrome using a V8 vulnerability which enbles arbitrary code execution in the renderer process. Details: #cybersecurity #pentesting #redteam #bugbounty

HackGit

26,398 Aufrufe • vor 2 Jahren

EvilLoader: Yesterday was published PoC for unpatched vulnerability affecting Telegram for Android The exploit has been sold on underground forum since January 2025 ✅Don't install external players if requested by received corrupted video file on Telegram
0:17

EvilLoader: Yesterday was published PoC for unpatched vulnerability affecting Telegram for Android The exploit has been sold on underground forum since January 2025 ✅Don't install external players if requested by received corrupted video file on Telegram

Mobile Hacker

58,182 Aufrufe • vor 1 Jahr

Microsoft has addressed a one-click NTLM leak vulnerability affecting Windows Snipping Tool (CVE-2026-33829), discovered by our researcher Marcos Díaz (Marcos Díaz). ➡️ Read the write-up: ➡️ Microsoft bulletin:
0:18

Microsoft has addressed a one-click NTLM leak vulnerability affecting Windows Snipping Tool (CVE-2026-33829), discovered by our researcher Marcos Díaz (Marcos Díaz). ➡️ Read the write-up: ➡️ Microsoft bulletin:

BlackArrow

113,118 Aufrufe • vor 1 Monat

Meet our new buddy, Argusee — an AI-powered, automated vulnerability hunter that has already discovered 15+ vulnerabilities across projects, including a previously unknown Linux kernel flaw (CVE-2025-37891) enabling LPE. Demo and details:
0:16

Meet our new buddy, Argusee — an AI-powered, automated vulnerability hunter that has already discovered 15+ vulnerabilities across projects, including a previously unknown Linux kernel flaw (CVE-2025-37891) enabling LPE. Demo and details:

DARKNAVY

13,143 Aufrufe • vor 1 Jahr

27 Octubre, 2017 19 Descembre, 2024 Delirant, vergonyós, patètic , insultant …. és poc !
0:36

27 Octubre, 2017 19 Descembre, 2024 Delirant, vergonyós, patètic , insultant …. és poc !

VIQUI ||☆||

47,275 Aufrufe • vor 1 Jahr

Think you’ve seen every OS command injection trick? Think again, read our latest blog post! Link in the comments👇
0:19

Think you’ve seen every OS command injection trick? Think again, read our latest blog post! Link in the comments👇

d4d

16,573 Aufrufe • vor 1 Jahr

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in replies
0:18

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in replies

chebuya

89,051 Aufrufe • vor 1 Jahr

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ, exploiting the vm:// protocol to achieve Remote Code Execution
0:11

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ, exploiting the vm:// protocol to achieve Remote Code Execution

pyn3rd

20,689 Aufrufe • vor 1 Monat

Hot off the press from watchTowr Labs member SinSinology, with a nice side of silent patching from Veeam 😉 details to come later (CVE-2024-40711 and friends..). Special thanks to Soroush Dalili for his help with this exploit!
0:15

Hot off the press from watchTowr Labs member SinSinology, with a nice side of silent patching from Veeam 😉 details to come later (CVE-2024-40711 and friends..). Special thanks to Soroush Dalili for his help with this exploit!

watchTowr

31,096 Aufrufe • vor 1 Jahr

M’ho han d’explicar a poc a poc, perquè no ho entenc.
0:15

M’ho han d’explicar a poc a poc, perquè no ho entenc.

Ferran Falcó

17,880 Aufrufe • vor 2 Monaten

Least favorite weekend... bye far #GoCougs #CVE #byefelicia #pleasecomeback
0:14

Least favorite weekend... bye far #GoCougs #CVE #byefelicia #pleasecomeback

Butch T. Cougar

11,683 Aufrufe • vor 2 Jahren