Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

Published my technical write-up on a vulnerability I discovered in Windows usbprint.sys. The issue was reported to MSRC, but Microsoft decided not to issue a fix. I’ve documented the technical details and PoC in the blog. Blog writeup:

zeifan's profile picture

nafiez

2,432 subscribers

25,164 Aufrufe • vor 2 Monaten •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

7 Kommentare

Profilbild von Herb Page
Herb Pagevor 2 Monaten

which model did you use to find this?

Profilbild von nafiez
nafiezvor 2 Monaten

Initially found via manual audit and then I throw the rest of analysis to Opus 4.6. It does the job from verifying the bug to PoC.

Profilbild von Mark
Markvor 2 Monaten

Why won't they fix? Don't they know how?

Profilbild von nafiez
nafiezvor 2 Monaten

I have no idea 😅

Profilbild von Dirt Jordan
Dirt Jordanvor 2 Monaten

I'd call this more than moderate. A deterministic kernel crash over TCP from a Linux box gets moderate severity, no CVE, no bounty. The servicing bar only moves for RCE.

Profilbild von nafiez
nafiezvor 2 Monaten

Its their decision. We can’t do much from our side 😅

Profilbild von Dirt Jordan
Dirt Jordanvor 2 Monaten

I'd still call a remote kernel crash over TCP more than moderate. MSRC's bar is RCE-or-bust now. Your writeup proves the real impact.

Ähnliche Videos

A quick writeup on potential security issue of Windows LNK that I reported to MSRC last month. They decided to not fix due to relying on MOTW. In the blog I included the proof of concept. All you have to do is to Right-Click and get Info Disclosure :)
0:28

A quick writeup on potential security issue of Windows LNK that I reported to MSRC last month. They decided to not fix due to relying on MOTW. In the blog I included the proof of concept. All you have to do is to Right-Click and get Info Disclosure :)

nafiez

25,347 Aufrufe • vor 1 Jahr

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability Check out the new security vulnerability I discovered in Windows, which I believe is potentially being sold in the wild. (fixed patch tuesday) Blog post: PoC:
0:46

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability Check out the new security vulnerability I discovered in Windows, which I believe is potentially being sold in the wild. (fixed patch tuesday) Blog post: PoC:

0x6rss

45,855 Aufrufe • vor 1 Jahr

'It was a technical issue.. it was not a cyber security incident' Transport Secretary Mark Harper spoke to #BBCBreakfast about the disruption to air travel in and out of the UK
2:02

'It was a technical issue.. it was not a cyber security incident' Transport Secretary Mark Harper spoke to #BBCBreakfast about the disruption to air travel in and out of the UK

BBC Breakfast

116,558 Aufrufe • vor 3 Jahren

PS5 (latest firmware) PoC for mast1c0re vulnerabilities. Arbitrary PS2 code execution and native PS5 ROP chain execution. Technical details on CTurt's blog post:
2:15

PS5 (latest firmware) PoC for mast1c0re vulnerabilities. Arbitrary PS2 code execution and native PS5 ROP chain execution. Technical details on CTurt's blog post:

McCaulay

292,756 Aufrufe • vor 3 Jahren

Here's a video PoC for Azure Entra ID SignIn Log Bypass in action. I had to make it to help MSRC replicate it (lol). You'll see how simple this bypass was. No worries admins, Microsoft says that it was only a "Moderate" issue.
8:23

Here's a video PoC for Azure Entra ID SignIn Log Bypass in action. I had to make it to help MSRC replicate it (lol). You'll see how simple this bypass was. No worries admins, Microsoft says that it was only a "Moderate" issue.

nyxgeek

41,729 Aufrufe • vor 9 Monaten

When I posted my blog post on the misaligned behavior of AI agents, I invited people to ask me technical questions. Watch the full Q&A here: [
1:05

When I posted my blog post on the misaligned behavior of AI agents, I invited people to ask me technical questions. Watch the full Q&A here: [

Yoshua Bengio

15,508 Aufrufe • vor 1 Monat

Due to a technical issue, Joe has to do the show from his phone and arrived in the middle of the first segment!
0:47

Due to a technical issue, Joe has to do the show from his phone and arrived in the middle of the first segment!

93.7 The Fan

20,297 Aufrufe • vor 4 Monaten

Today, we’re thrilled to unveil the Arcee.ai Foundation Models, a new family of GenAI models designed from the ground up for enterprise reality. The first release—AFM-4.5B—is a 4.5-billion-parameter frontier model that delivers excellent accuracy, strict compliance, and very high cost efficiency. In short: enterprise-grade intelligence that can run anywhere—on a smartphone, at the edge, or in the cloud. For a quick taste, you can test AFM-4.5B in our playground and on For a deeper dive into the model’s training pipeline and benchmarks, details are available in our technical blog post. ➡️ Arcee AI playground: ➡️ Together AI playground: ➡️ Launch blog post: ➡️ Technical blog post: PS: As we’ll now focus on our AFM foundation models, and because we love open-source, we're opening up access to our previously closed-source language models. Details in the tech blog post!
1:05

Today, we’re thrilled to unveil the Arcee.ai Foundation Models, a new family of GenAI models designed from the ground up for enterprise reality. The first release—AFM-4.5B—is a 4.5-billion-parameter frontier model that delivers excellent accuracy, strict compliance, and very high cost efficiency. In short: enterprise-grade intelligence that can run anywhere—on a smartphone, at the edge, or in the cloud. For a quick taste, you can test AFM-4.5B in our playground and on For a deeper dive into the model’s training pipeline and benchmarks, details are available in our technical blog post. ➡️ Arcee AI playground: ➡️ Together AI playground: ➡️ Launch blog post: ➡️ Technical blog post: PS: As we’ll now focus on our AFM foundation models, and because we love open-source, we're opening up access to our previously closed-source language models. Details in the tech blog post!

Arcee.ai

21,934 Aufrufe • vor 1 Jahr

The largest advancement of the CUDA platform since its creation in 2006 is here 👀 Introducing CUDA Tile, a tile-based programming model that provides the ability to write algorithms at a higher level and abstract away the details of specialized hardware, such as tensor cores. Read the technical blog 👉
2:34

The largest advancement of the CUDA platform since its creation in 2006 is here 👀 Introducing CUDA Tile, a tile-based programming model that provides the ability to write algorithms at a higher level and abstract away the details of specialized hardware, such as tensor cores. Read the technical blog 👉

NVIDIA AI Developer

244,885 Aufrufe • vor 10 Monaten

I just published a blog post on how I build the Notra braille loader ^^ First blog post I have done in a while where I poured almost a whole day into tiny details Give it a read!
0:20

I just published a blog post on how I build the Notra braille loader ^^ First blog post I have done in a while where I poured almost a whole day into tiny details Give it a read!

Dominik Koch

16,417 Aufrufe • vor 4 Monaten

Had a technical issue before the start of the race, started in…. 26th 24 overtakes and 35mins later, I finished the race in 2nd!
0:21

Had a technical issue before the start of the race, started in…. 26th 24 overtakes and 35mins later, I finished the race in 2nd!

OpTic Crimsix

525,877 Aufrufe • vor 2 Jahren

Google is now claiming their maps hiding the destruction from the Palisades Fire is just a “technical issue” Anyone else find it funny that every time there’s a glitch, or technical issue it seems to always be in favor of the left🤔
0:42

Google is now claiming their maps hiding the destruction from the Palisades Fire is just a “technical issue” Anyone else find it funny that every time there’s a glitch, or technical issue it seems to always be in favor of the left🤔

Derrick Evans

71,980 Aufrufe • vor 5 Monaten

A bizarre technical “glitch” just hit CNN — right as Stephen Miller was getting to the heart of a district judge ruling on National Guard deployment. Miller was cut off mid-sentence, unable to finish his explanation. The host, Boris Sanchez, eventually cut in: “Stephen, Stephen, can you hear me?” “Stephen, I apologize. It seems like we’re having a technical issue. We’ll try to fix that and get back to you after a quick break.”
0:56

A bizarre technical “glitch” just hit CNN — right as Stephen Miller was getting to the heart of a district judge ruling on National Guard deployment. Miller was cut off mid-sentence, unable to finish his explanation. The host, Boris Sanchez, eventually cut in: “Stephen, Stephen, can you hear me?” “Stephen, I apologize. It seems like we’re having a technical issue. We’ll try to fix that and get back to you after a quick break.”

Overton

298,258 Aufrufe • vor 1 Jahr

I’ve had the most fun I’ve found in a while noodling over all the little details on my site. Wild how much pent up creativity was stuck behind minor technical limitations in things like app architecture and deployment. AI is a force multiplier for designers, not a death sentence
0:51

I’ve had the most fun I’ve found in a while noodling over all the little details on my site. Wild how much pent up creativity was stuck behind minor technical limitations in things like app architecture and deployment. AI is a force multiplier for designers, not a death sentence

Emily Campbell ✿

34,946 Aufrufe • vor 5 Monaten

BREAKING: HMS Dragon has made port in the Mediterranean due to a technical issue, says the Ministry of Defence. 📺 Sky 501 and YouTube
1:14

BREAKING: HMS Dragon has made port in the Mediterranean due to a technical issue, says the Ministry of Defence. 📺 Sky 501 and YouTube

Sky News

317,831 Aufrufe • vor 6 Monaten

I went to Paris for the weekend to write a blog for the BBC Sport on Luis Enrique I decided to tour the stadium and even caught up with Lucas Digne after Le Mans win An espresso #CoffeewithGuillem ☕️⚽️
6:35

I went to Paris for the weekend to write a blog for the BBC Sport on Luis Enrique I decided to tour the stadium and even caught up with Lucas Digne after Le Mans win An espresso #CoffeewithGuillem ☕️⚽️

Guillem Balague

28,979 Aufrufe • vor 17 Tagen