Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

🚨PoC for CVE-2024-51378; CyberPanel Command Injection Vulnerability

DarkWebInformer's profile picture

Dark Web Informer - Cyber Threat Intelligence

108,712 subscribers

14,834 görüntüleme • 1 yıl önce •via X (Twitter)

Bilim & TeknolojiEğitimHaberler & Politika
LIVE

Anya Rossi• Live Now

Private livecam show

0 Yorum

Yorum bulunmuyor

Orijinal gönderinin yorumları burada görünecek

Benzer Videolar

My very first blog post is live: During research, I've run into and documented a simple universal SQLite Injection RCE trick. Enjoy! N-day Analysis about Synology Beestation RCE (CVE-2024-50629~50631) by legendary DEVCORE 🎃 🍊 Thanks to Pumpkin 🎃 Orange Tsai 🍊 for original finding and allowing to post, and to Ryan Emmons for the invaluable references 🔥 Enjoy the Demo! PoC:
0:17

My very first blog post is live: During research, I've run into and documented a simple universal SQLite Injection RCE trick. Enjoy! N-day Analysis about Synology Beestation RCE (CVE-2024-50629~50631) by legendary DEVCORE 🎃 🍊 Thanks to Pumpkin 🎃 Orange Tsai 🍊 for original finding and allowing to post, and to Ryan Emmons for the invaluable references 🔥 Enjoy the Demo! PoC:

kiddo

33,506 görüntüleme • 6 ay önce

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04
0:10

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04

V4bel

15,887 görüntüleme • 1 yıl önce

I've confirmed Samsung's MagicINFO 21.1050 is VULNERABLE to the publicly reported POC in the blog below. The media is reporting this as CVE-2024-7399, but if it is then the patch is incomplete. There is currently NO PATCH AVAILABLE!
0:17

I've confirmed Samsung's MagicINFO 21.1050 is VULNERABLE to the publicly reported POC in the blog below. The media is reporting this as CVE-2024-7399, but if it is then the patch is incomplete. There is currently NO PATCH AVAILABLE!

Jai Minton

15,205 görüntüleme • 1 yıl önce

Exploit Demo & Analysis Article by 78ResearchLab(78ResearchLab) CVE-2026-20817 : Windows Error Reporting(WER) Service Elevation of Privilege Vulnerability #CVE_2026_20817 #LPE #Windows
0:18

Exploit Demo & Analysis Article by 78ResearchLab(78ResearchLab) CVE-2026-20817 : Windows Error Reporting(WER) Service Elevation of Privilege Vulnerability #CVE_2026_20817 #LPE #Windows

Moonbeom(Daniel)

13,239 görüntüleme • 4 ay önce

1/ A DoS exploit demo for CVE-2024-49112 by SafeBreach. RCE exploit is probably coming soon. Patch!
0:16

1/ A DoS exploit demo for CVE-2024-49112 by SafeBreach. RCE exploit is probably coming soon. Patch!

Tal Be'ery

69,367 görüntüleme • 1 yıl önce

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm
0:14

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm

Carlos Vieira (lynx)

81,336 görüntüleme • 1 yıl önce

Video of my PoC for CVE-2023-43641: out-of-bounds array access in libcue. libcue is used by tracker-miners, which automatically scans new files in ~/Downloads, so the bug is triggered by downloading a file.
0:10

Video of my PoC for CVE-2023-43641: out-of-bounds array access in libcue. libcue is used by tracker-miners, which automatically scans new files in ~/Downloads, so the bug is triggered by downloading a file.

Kev

128,677 görüntüleme • 2 yıl önce

CVE-2023-20593 — Exploiting Zenbleed from Chrome This repository contains a proof-of-concept for exploiting Zenbleed from Chrome using a V8 vulnerability which enbles arbitrary code execution in the renderer process. Details: #cybersecurity #pentesting #redteam #bugbounty
0:14

CVE-2023-20593 — Exploiting Zenbleed from Chrome This repository contains a proof-of-concept for exploiting Zenbleed from Chrome using a V8 vulnerability which enbles arbitrary code execution in the renderer process. Details: #cybersecurity #pentesting #redteam #bugbounty

HackGit

26,398 görüntüleme • 2 yıl önce

EvilLoader: Yesterday was published PoC for unpatched vulnerability affecting Telegram for Android The exploit has been sold on underground forum since January 2025 ✅Don't install external players if requested by received corrupted video file on Telegram
0:17

EvilLoader: Yesterday was published PoC for unpatched vulnerability affecting Telegram for Android The exploit has been sold on underground forum since January 2025 ✅Don't install external players if requested by received corrupted video file on Telegram

Mobile Hacker

58,182 görüntüleme • 1 yıl önce

Microsoft has addressed a one-click NTLM leak vulnerability affecting Windows Snipping Tool (CVE-2026-33829), discovered by our researcher Marcos Díaz (Marcos Díaz). ➡️ Read the write-up: ➡️ Microsoft bulletin:
0:18

Microsoft has addressed a one-click NTLM leak vulnerability affecting Windows Snipping Tool (CVE-2026-33829), discovered by our researcher Marcos Díaz (Marcos Díaz). ➡️ Read the write-up: ➡️ Microsoft bulletin:

BlackArrow

113,288 görüntüleme • 2 ay önce

Meet our new buddy, Argusee — an AI-powered, automated vulnerability hunter that has already discovered 15+ vulnerabilities across projects, including a previously unknown Linux kernel flaw (CVE-2025-37891) enabling LPE. Demo and details:
0:16

Meet our new buddy, Argusee — an AI-powered, automated vulnerability hunter that has already discovered 15+ vulnerabilities across projects, including a previously unknown Linux kernel flaw (CVE-2025-37891) enabling LPE. Demo and details:

DARKNAVY

13,165 görüntüleme • 1 yıl önce

27 Octubre, 2017 19 Descembre, 2024 Delirant, vergonyós, patètic , insultant …. és poc !
0:36

27 Octubre, 2017 19 Descembre, 2024 Delirant, vergonyós, patètic , insultant …. és poc !

VIQUI ||☆||

47,275 görüntüleme • 1 yıl önce

Think you’ve seen every OS command injection trick? Think again, read our latest blog post! Link in the comments👇
0:19

Think you’ve seen every OS command injection trick? Think again, read our latest blog post! Link in the comments👇

d4d

16,573 görüntüleme • 1 yıl önce

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in replies
0:18

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in replies

chebuya

89,112 görüntüleme • 1 yıl önce

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ, exploiting the vm:// protocol to achieve Remote Code Execution
0:11

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ, exploiting the vm:// protocol to achieve Remote Code Execution

pyn3rd

20,835 görüntüleme • 2 ay önce

Hot off the press from watchTowr Labs member SinSinology, with a nice side of silent patching from Veeam 😉 details to come later (CVE-2024-40711 and friends..). Special thanks to Soroush Dalili for his help with this exploit!
0:15

Hot off the press from watchTowr Labs member SinSinology, with a nice side of silent patching from Veeam 😉 details to come later (CVE-2024-40711 and friends..). Special thanks to Soroush Dalili for his help with this exploit!

watchTowr

31,104 görüntüleme • 1 yıl önce

M’ho han d’explicar a poc a poc, perquè no ho entenc.
0:15

M’ho han d’explicar a poc a poc, perquè no ho entenc.

Ferran Falcó

17,880 görüntüleme • 2 ay önce

Least favorite weekend... bye far #GoCougs #CVE #byefelicia #pleasecomeback
0:14

Least favorite weekend... bye far #GoCougs #CVE #byefelicia #pleasecomeback

Butch T. Cougar

11,683 görüntüleme • 2 yıl önce