Loading video...

Video Failed to Load

Go Home

Proxmox VE 7.x authentication bypass (pre-auth RCE)

nebusecurity's profile picture

NebuSec

7,160 subscribers

222,248 views • 7 days ago •via X (Twitter)

Science & TechnologyNews & Politics
LIVE

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

Citrix admins, your weekend plans just changed. CVE-2026-8452 was disclosed as a NetScaler memory overflow / DoS. Now watchTowr has dropped a Pre-Auth RCE PoC. Internet-facing edge appliances. No authentication. RCE. #ReverseEngineering #VulnerabilityResearch #Infosec
0:31

Citrix admins, your weekend plans just changed. CVE-2026-8452 was disclosed as a NetScaler memory overflow / DoS. Now watchTowr has dropped a Pre-Auth RCE PoC. Internet-facing edge appliances. No authentication. RCE. #ReverseEngineering #VulnerabilityResearch #Infosec

cr3ghost

17,416 views • 24 days ago

🚨CVE-2025-25257: Pre-Auth SQL Injection to RCE - Fortinet FortiWeb Fabric Connector PoC: Write-up:
0:37

🚨CVE-2025-25257: Pre-Auth SQL Injection to RCE - Fortinet FortiWeb Fabric Connector PoC: Write-up:

Dark Web Informer

13,749 views • 1 year ago

We've reproduced the pre-auth RCE chain in Wordpress (wp2shell). It's real, patch! Shoutout to hashkitten at Assetnote for catching such an awesome bug!
0:44

We've reproduced the pre-auth RCE chain in Wordpress (wp2shell). It's real, patch! Shoutout to hashkitten at Assetnote for catching such an awesome bug!

Calif

63,701 views • 1 month ago

Checkout our new blogpost! In this post we talk about SAML and the recent Ruby-SAML Auth bypass. CVE-2024-45409: Ruby-SAML Auth Bypass in GitLab
0:32

Checkout our new blogpost! In this post we talk about SAML and the recent Ruby-SAML Auth bypass. CVE-2024-45409: Ruby-SAML Auth Bypass in GitLab

HTTPVoid

40,138 views • 1 year ago

GitLab Authentication Bypass (CVE-2024-45409) : credits Harsh Jaiswal Rahul Maini
0:32

GitLab Authentication Bypass (CVE-2024-45409) : credits Harsh Jaiswal Rahul Maini

Binni Shah

119,244 views • 1 year ago

patch your wordpress. cve-2026-63030 is a pre-auth rce via sql injection. 6.8.5 and below: not affected 6.9.0–6.9.4: affected 7.0.0–7.0.1: affected props to our friends at Assetnote for the crazy find
0:41

patch your wordpress. cve-2026-63030 is a pre-auth rce via sql injection. 6.8.5 and below: not affected 6.9.0–6.9.4: affected 7.0.0–7.0.1: affected props to our friends at Assetnote for the crazy find

Hacktron AI

39,547 views • 1 month ago

🚨CVE-2025-31161: Authentication Bypass Vulnerability in CrushFTP Credit: Exploit:
8:14

🚨CVE-2025-31161: Authentication Bypass Vulnerability in CrushFTP Credit: Exploit:

Dark Web Informer

36,563 views • 1 year ago

The biometric authentication of the #EU #AgeVerification app can be easily bypass too...
0:49

The biometric authentication of the #EU #AgeVerification app can be easily bypass too...

Baptiste Robert

31,554 views • 4 months ago

This video shows my PoC for libssh CVE-2023-2283 (authentication bypass vuln). The attacker logs in with ED25519 authentication, despite not knowing the private key.
1:19

This video shows my PoC for libssh CVE-2023-2283 (authentication bypass vuln). The attacker logs in with ED25519 authentication, despite not knowing the private key.

Kev

173,816 views • 3 years ago

Better Auth (Better Auth) is a comprehensive authentication framework for TypeScript that helps you roll your own auth from simple flows to enterprise-grade systems directly on your own database, embedded in your backend. Congrats on the launch, + KiNFiSH!
0:42

Better Auth (Better Auth) is a comprehensive authentication framework for TypeScript that helps you roll your own auth from simple flows to enterprise-grade systems directly on your own database, embedded in your backend. Congrats on the launch, + KiNFiSH!

Y Combinator

140,965 views • 1 year ago

Lotta chatter around #ScreenConnect vulnerabilities now as folks are getting spun up. Fellow Huntress researchers and I were up all night to recreate the auth bypass and RCE exploit. I'm not a huge fan of giving a PoC to threat actors, but I do dig snazzy video demos 😜
0:33

Lotta chatter around #ScreenConnect vulnerabilities now as folks are getting spun up. Fellow Huntress researchers and I were up all night to recreate the auth bypass and RCE exploit. I'm not a huge fan of giving a PoC to threat actors, but I do dig snazzy video demos 😜

John Hammond

79,137 views • 2 years ago

Fortinet 0day An auth bypass + path traversal in Fortinet FortiWeb to create new administrative users on exposed devices without requiring authentication. Blog: • • Tweet: Metasploit module: Dork: ZoomEye Dork: app="FortiWeb" HUNTER: Shodan: http.title:FortiWeb Affected versions: • 8.0: <8.0.2 • 7.6: <7.6.5 • 7.4: <7.4.10 • 7.2: <7.2.12 • 7.0: <7.0.12 • 6.4: <= 6.4.3 • 6.3: <= 6.3.23
0:45

Fortinet 0day An auth bypass + path traversal in Fortinet FortiWeb to create new administrative users on exposed devices without requiring authentication. Blog: • • Tweet: Metasploit module: Dork: ZoomEye Dork: app="FortiWeb" HUNTER: Shodan: http.title:FortiWeb Affected versions: • 8.0: <8.0.2 • 7.6: <7.6.5 • 7.4: <7.4.10 • 7.2: <7.2.12 • 7.0: <7.0.12 • 6.4: <= 6.4.3 • 6.3: <= 6.3.23

ӉѦСҠіИԌ ҬЄѦӍ

39,466 views • 9 months ago

Our research team achieved client RCE on Minecraft Bedrock Edition via a heap overflow to bypass ASLR and sidestep CFG. Writeup to come.
0:34

Our research team achieved client RCE on Minecraft Bedrock Edition via a heap overflow to bypass ASLR and sidestep CFG. Writeup to come.

OtterSec

226,936 views • 9 months ago

Neon Auth is here: Authentication for your Neon DBs in a couple of clicks 💥 - Provision from the console - User profiles sync automatically to your database - Transfer your auth anytime to an external Stack Auth account (no lock-in) It took Brian Holt 2 mins to demo it:
2:17

Neon Auth is here: Authentication for your Neon DBs in a couple of clicks 💥 - Provision from the console - User profiles sync automatically to your database - Transfer your auth anytime to an external Stack Auth account (no lock-in) It took Brian Holt 2 mins to demo it:

Neon - Serverless Postgres

15,989 views • 1 year ago

MALWARE DEVELOPMENT WE DEVELOPED AND INFO STEALER BYPASS WINDOW DEFENDER Screen capture File system Access Keystrokes logging Camera access Cookies and authentication collector
2:01

MALWARE DEVELOPMENT WE DEVELOPED AND INFO STEALER BYPASS WINDOW DEFENDER Screen capture File system Access Keystrokes logging Camera access Cookies and authentication collector

H4RUK1 KIRA🇯🇵

30,475 views • 10 months ago

Last year in Feb I was playing around with some hardware. I got this tp-link AC1200 which was the most purchased router at the time IIRC. I was cleaning up my place and I wanted to dust off and complete my old research before throwing it out. Pre-auth RCE, latest firmware 👀
0:23

Last year in Feb I was playing around with some hardware. I got this tp-link AC1200 which was the most purchased router at the time IIRC. I was cleaning up my place and I wanted to dust off and complete my old research before throwing it out. Pre-auth RCE, latest firmware 👀

b33f | 🇺🇦✊

14,930 views • 5 months ago

‼️ OpenClaw, also known by Moltbot and ClawdBot, recently patched a 1-Click RCE via Authentication Token Exfiltration From gatewayUrl CVSS: 8.8 Advisory: Writeup: All versions up to v2026.1.24-1 are vulnerable. Video: Ethiack
0:23

‼️ OpenClaw, also known by Moltbot and ClawdBot, recently patched a 1-Click RCE via Authentication Token Exfiltration From gatewayUrl CVSS: 8.8 Advisory: Writeup: All versions up to v2026.1.24-1 are vulnerable. Video: Ethiack

Dark Web Informer

18,960 views • 7 months ago

🚨 wp2shell : pre-auth RCE in WordPress core, reproduced end-to-end. Nested /batch/v1 "double confusion" · (CVE-2026-63030) → WP_Query SQLi · (CVE-2026-60137) → anonymous shell on a stock install. A couple of prompts later: · Opus 4.8 orchestrating, Sonnet agents executing. Exploit dev has gotten scary easy. Patched in 6.9.5 / 7.0.2 - update now. 👇
0:56

🚨 wp2shell : pre-auth RCE in WordPress core, reproduced end-to-end. Nested /batch/v1 "double confusion" · (CVE-2026-63030) → WP_Query SQLi · (CVE-2026-60137) → anonymous shell on a stock install. A couple of prompts later: · Opus 4.8 orchestrating, Sonnet agents executing. Exploit dev has gotten scary easy. Patched in 6.9.5 / 7.0.2 - update now. 👇

Aseem Shrey

33,761 views • 1 month ago

we got an ~RCE on M365 Copilot by sending an email by ~RCE I mean full remote control over its actions - search for sensitive content (sharepoint, email, calendar, teams), execute plugins and outputs - bypass DLP controls, manipulate references, social engineer its users on our behalf #BHUSA #DEFCON Tamir Ishay Sharbat
1:28

we got an ~RCE on M365 Copilot by sending an email by ~RCE I mean full remote control over its actions - search for sensitive content (sharepoint, email, calendar, teams), execute plugins and outputs - bypass DLP controls, manipulate references, social engineer its users on our behalf #BHUSA #DEFCON Tamir Ishay Sharbat

Michael Bargury

229,562 views • 2 years ago

CVE-2026-0265, the PAN-OS auth bypass (when Cloud Auth Services are enabled) was fun to reproduce and load into the watchTowr Platform. Our friends @ Hacktron AI are publishing their analysis this week, so we won’t be publishing. Looking forward to it 🚀
0:40

CVE-2026-0265, the PAN-OS auth bypass (when Cloud Auth Services are enabled) was fun to reproduce and load into the watchTowr Platform. Our friends @ Hacktron AI are publishing their analysis this week, so we won’t be publishing. Looking forward to it 🚀

watchTowr

60,497 views • 3 months ago