正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

Proxmox VE 7.x authentication bypass (pre-auth RCE)

NebuSec

7,160 subscribers

222,248 次观看 • 7 天前 •via X (Twitter)

科学技术新闻政治

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

Citrix admins, your weekend plans just changed. CVE-2026-8452 was disclosed as a NetScaler memory overflow / DoS. Now watchTowr has dropped a Pre-Auth RCE PoC. Internet-facing edge appliances. No authentication. RCE. #ReverseEngineering #VulnerabilityResearch #Infosec

Citrix admins, your weekend plans just changed. CVE-2026-8452 was disclosed as a NetScaler memory overflow / DoS. Now watchTowr has dropped a Pre-Auth RCE PoC. Internet-facing edge appliances. No authentication. RCE. #ReverseEngineering #VulnerabilityResearch #Infosec

cr3ghost

17,416 次观看 • 24 天前

🚨CVE-2025-25257: Pre-Auth SQL Injection to RCE - Fortinet FortiWeb Fabric Connector PoC: Write-up:

🚨CVE-2025-25257: Pre-Auth SQL Injection to RCE - Fortinet FortiWeb Fabric Connector PoC: Write-up:

Dark Web Informer

13,749 次观看 • 1 年前

We've reproduced the pre-auth RCE chain in Wordpress (wp2shell). It's real, patch! Shoutout to hashkitten at Assetnote for catching such an awesome bug!

We've reproduced the pre-auth RCE chain in Wordpress (wp2shell). It's real, patch! Shoutout to hashkitten at Assetnote for catching such an awesome bug!

Calif

63,701 次观看 • 1 个月前

Checkout our new blogpost! In this post we talk about SAML and the recent Ruby-SAML Auth bypass. CVE-2024-45409: Ruby-SAML Auth Bypass in GitLab

Checkout our new blogpost! In this post we talk about SAML and the recent Ruby-SAML Auth bypass. CVE-2024-45409: Ruby-SAML Auth Bypass in GitLab

HTTPVoid

40,138 次观看 • 1 年前

GitLab Authentication Bypass (CVE-2024-45409) : credits Harsh Jaiswal Rahul Maini

GitLab Authentication Bypass (CVE-2024-45409) : credits Harsh Jaiswal Rahul Maini

Binni Shah

119,244 次观看 • 1 年前

patch your wordpress. cve-2026-63030 is a pre-auth rce via sql injection. 6.8.5 and below: not affected 6.9.0–6.9.4: affected 7.0.0–7.0.1: affected props to our friends at Assetnote for the crazy find

patch your wordpress. cve-2026-63030 is a pre-auth rce via sql injection. 6.8.5 and below: not affected 6.9.0–6.9.4: affected 7.0.0–7.0.1: affected props to our friends at Assetnote for the crazy find

Hacktron AI

39,547 次观看 • 1 个月前

🚨CVE-2025-31161: Authentication Bypass Vulnerability in CrushFTP Credit: Exploit:

🚨CVE-2025-31161: Authentication Bypass Vulnerability in CrushFTP Credit: Exploit:

Dark Web Informer

36,563 次观看 • 1 年前

The biometric authentication of the #EU #AgeVerification app can be easily bypass too...

The biometric authentication of the #EU #AgeVerification app can be easily bypass too...

Baptiste Robert

31,554 次观看 • 4 个月前

This video shows my PoC for libssh CVE-2023-2283 (authentication bypass vuln). The attacker logs in with ED25519 authentication, despite not knowing the private key.

This video shows my PoC for libssh CVE-2023-2283 (authentication bypass vuln). The attacker logs in with ED25519 authentication, despite not knowing the private key.

Kev

173,816 次观看 • 3 年前

Better Auth (Better Auth) is a comprehensive authentication framework for TypeScript that helps you roll your own auth from simple flows to enterprise-grade systems directly on your own database, embedded in your backend. Congrats on the launch, + KiNFiSH!

Better Auth (Better Auth) is a comprehensive authentication framework for TypeScript that helps you roll your own auth from simple flows to enterprise-grade systems directly on your own database, embedded in your backend. Congrats on the launch, + KiNFiSH!

Y Combinator

140,965 次观看 • 1 年前

Lotta chatter around #ScreenConnect vulnerabilities now as folks are getting spun up. Fellow Huntress researchers and I were up all night to recreate the auth bypass and RCE exploit. I'm not a huge fan of giving a PoC to threat actors, but I do dig snazzy video demos 😜

Lotta chatter around #ScreenConnect vulnerabilities now as folks are getting spun up. Fellow Huntress researchers and I were up all night to recreate the auth bypass and RCE exploit. I'm not a huge fan of giving a PoC to threat actors, but I do dig snazzy video demos 😜

John Hammond

79,137 次观看 • 2 年前

Fortinet 0day An auth bypass + path traversal in Fortinet FortiWeb to create new administrative users on exposed devices without requiring authentication. Blog: • • Tweet: Metasploit module: Dork: ZoomEye Dork: app="FortiWeb" HUNTER: Shodan: http.title:FortiWeb Affected versions: • 8.0: <8.0.2 • 7.6: <7.6.5 • 7.4: <7.4.10 • 7.2: <7.2.12 • 7.0: <7.0.12 • 6.4: <= 6.4.3 • 6.3: <= 6.3.23

Fortinet 0day An auth bypass + path traversal in Fortinet FortiWeb to create new administrative users on exposed devices without requiring authentication. Blog: • • Tweet: Metasploit module: Dork: ZoomEye Dork: app="FortiWeb" HUNTER: Shodan: http.title:FortiWeb Affected versions: • 8.0: <8.0.2 • 7.6: <7.6.5 • 7.4: <7.4.10 • 7.2: <7.2.12 • 7.0: <7.0.12 • 6.4: <= 6.4.3 • 6.3: <= 6.3.23

ӉѦСҠіИԌ ҬЄѦӍ

39,466 次观看 • 9 个月前

Our research team achieved client RCE on Minecraft Bedrock Edition via a heap overflow to bypass ASLR and sidestep CFG. Writeup to come.

Our research team achieved client RCE on Minecraft Bedrock Edition via a heap overflow to bypass ASLR and sidestep CFG. Writeup to come.

OtterSec

226,936 次观看 • 9 个月前

Neon Auth is here: Authentication for your Neon DBs in a couple of clicks 💥 - Provision from the console - User profiles sync automatically to your database - Transfer your auth anytime to an external Stack Auth account (no lock-in) It took Brian Holt 2 mins to demo it:

Neon Auth is here: Authentication for your Neon DBs in a couple of clicks 💥 - Provision from the console - User profiles sync automatically to your database - Transfer your auth anytime to an external Stack Auth account (no lock-in) It took Brian Holt 2 mins to demo it:

Neon - Serverless Postgres

15,989 次观看 • 1 年前

MALWARE DEVELOPMENT WE DEVELOPED AND INFO STEALER BYPASS WINDOW DEFENDER Screen capture File system Access Keystrokes logging Camera access Cookies and authentication collector

MALWARE DEVELOPMENT WE DEVELOPED AND INFO STEALER BYPASS WINDOW DEFENDER Screen capture File system Access Keystrokes logging Camera access Cookies and authentication collector

H4RUK1 KIRA🇯🇵

30,475 次观看 • 10 个月前

Last year in Feb I was playing around with some hardware. I got this tp-link AC1200 which was the most purchased router at the time IIRC. I was cleaning up my place and I wanted to dust off and complete my old research before throwing it out. Pre-auth RCE, latest firmware 👀

Last year in Feb I was playing around with some hardware. I got this tp-link AC1200 which was the most purchased router at the time IIRC. I was cleaning up my place and I wanted to dust off and complete my old research before throwing it out. Pre-auth RCE, latest firmware 👀

b33f | 🇺🇦✊

14,930 次观看 • 5 个月前

‼️ OpenClaw, also known by Moltbot and ClawdBot, recently patched a 1-Click RCE via Authentication Token Exfiltration From gatewayUrl CVSS: 8.8 Advisory: Writeup: All versions up to v2026.1.24-1 are vulnerable. Video: Ethiack

‼️ OpenClaw, also known by Moltbot and ClawdBot, recently patched a 1-Click RCE via Authentication Token Exfiltration From gatewayUrl CVSS: 8.8 Advisory: Writeup: All versions up to v2026.1.24-1 are vulnerable. Video: Ethiack

Dark Web Informer

18,960 次观看 • 7 个月前

🚨 wp2shell : pre-auth RCE in WordPress core, reproduced end-to-end. Nested /batch/v1 "double confusion" · (CVE-2026-63030) → WP_Query SQLi · (CVE-2026-60137) → anonymous shell on a stock install. A couple of prompts later: · Opus 4.8 orchestrating, Sonnet agents executing. Exploit dev has gotten scary easy. Patched in 6.9.5 / 7.0.2 - update now. 👇

🚨 wp2shell : pre-auth RCE in WordPress core, reproduced end-to-end. Nested /batch/v1 "double confusion" · (CVE-2026-63030) → WP_Query SQLi · (CVE-2026-60137) → anonymous shell on a stock install. A couple of prompts later: · Opus 4.8 orchestrating, Sonnet agents executing. Exploit dev has gotten scary easy. Patched in 6.9.5 / 7.0.2 - update now. 👇

Aseem Shrey

33,761 次观看 • 1 个月前

we got an ~RCE on M365 Copilot by sending an email by ~RCE I mean full remote control over its actions - search for sensitive content (sharepoint, email, calendar, teams), execute plugins and outputs - bypass DLP controls, manipulate references, social engineer its users on our behalf #BHUSA #DEFCON Tamir Ishay Sharbat

we got an ~RCE on M365 Copilot by sending an email by ~RCE I mean full remote control over its actions - search for sensitive content (sharepoint, email, calendar, teams), execute plugins and outputs - bypass DLP controls, manipulate references, social engineer its users on our behalf #BHUSA #DEFCON Tamir Ishay Sharbat

Michael Bargury

229,562 次观看 • 2 年前

CVE-2026-0265, the PAN-OS auth bypass (when Cloud Auth Services are enabled) was fun to reproduce and load into the watchTowr Platform. Our friends @ Hacktron AI are publishing their analysis this week, so we won’t be publishing. Looking forward to it 🚀

CVE-2026-0265, the PAN-OS auth bypass (when Cloud Auth Services are enabled) was fun to reproduce and load into the watchTowr Platform. Our friends @ Hacktron AI are publishing their analysis this week, so we won’t be publishing. Looking forward to it 🚀

watchTowr

60,497 次观看 • 3 个月前