Загрузка видео...

Не удалось загрузить видео

На главную

Published my technical write-up on a vulnerability I discovered in Windows usbprint.sys. The issue was reported to MSRC, but Microsoft decided not to issue a fix. I’ve documented the technical details and PoC in the blog. Blog writeup:

zeifan's profile picture

nafiez

2,432 subscribers

25,164 просмотров • 2 месяцев назад •via X (Twitter)

Наука и технологии
LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 7

Фото профиля Herb Page
Herb Page2 месяцев назад

which model did you use to find this?

Фото профиля nafiez
nafiez2 месяцев назад

Initially found via manual audit and then I throw the rest of analysis to Opus 4.6. It does the job from verifying the bug to PoC.

Фото профиля Mark
Mark2 месяцев назад

Why won't they fix? Don't they know how?

Фото профиля nafiez
nafiez2 месяцев назад

I have no idea 😅

Фото профиля Dirt Jordan
Dirt Jordan2 месяцев назад

I'd call this more than moderate. A deterministic kernel crash over TCP from a Linux box gets moderate severity, no CVE, no bounty. The servicing bar only moves for RCE.

Фото профиля nafiez
nafiez2 месяцев назад

Its their decision. We can’t do much from our side 😅

Фото профиля Dirt Jordan
Dirt Jordan2 месяцев назад

I'd still call a remote kernel crash over TCP more than moderate. MSRC's bar is RCE-or-bust now. Your writeup proves the real impact.

Похожие видео

A quick writeup on potential security issue of Windows LNK that I reported to MSRC last month. They decided to not fix due to relying on MOTW. In the blog I included the proof of concept. All you have to do is to Right-Click and get Info Disclosure :)
0:28

A quick writeup on potential security issue of Windows LNK that I reported to MSRC last month. They decided to not fix due to relying on MOTW. In the blog I included the proof of concept. All you have to do is to Right-Click and get Info Disclosure :)

nafiez

25,347 просмотров • 1 год назад

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability Check out the new security vulnerability I discovered in Windows, which I believe is potentially being sold in the wild. (fixed patch tuesday) Blog post: PoC:
0:46

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability Check out the new security vulnerability I discovered in Windows, which I believe is potentially being sold in the wild. (fixed patch tuesday) Blog post: PoC:

0x6rss

45,855 просмотров • 1 год назад

'It was a technical issue.. it was not a cyber security incident' Transport Secretary Mark Harper spoke to #BBCBreakfast about the disruption to air travel in and out of the UK
2:02

'It was a technical issue.. it was not a cyber security incident' Transport Secretary Mark Harper spoke to #BBCBreakfast about the disruption to air travel in and out of the UK

BBC Breakfast

116,558 просмотров • 3 лет назад

PS5 (latest firmware) PoC for mast1c0re vulnerabilities. Arbitrary PS2 code execution and native PS5 ROP chain execution. Technical details on CTurt's blog post:
2:15

PS5 (latest firmware) PoC for mast1c0re vulnerabilities. Arbitrary PS2 code execution and native PS5 ROP chain execution. Technical details on CTurt's blog post:

McCaulay

292,756 просмотров • 3 лет назад

Here's a video PoC for Azure Entra ID SignIn Log Bypass in action. I had to make it to help MSRC replicate it (lol). You'll see how simple this bypass was. No worries admins, Microsoft says that it was only a "Moderate" issue.
8:23

Here's a video PoC for Azure Entra ID SignIn Log Bypass in action. I had to make it to help MSRC replicate it (lol). You'll see how simple this bypass was. No worries admins, Microsoft says that it was only a "Moderate" issue.

nyxgeek

41,729 просмотров • 9 месяцев назад

When I posted my blog post on the misaligned behavior of AI agents, I invited people to ask me technical questions. Watch the full Q&A here: [
1:05

When I posted my blog post on the misaligned behavior of AI agents, I invited people to ask me technical questions. Watch the full Q&A here: [

Yoshua Bengio

15,508 просмотров • 1 месяц назад

Due to a technical issue, Joe has to do the show from his phone and arrived in the middle of the first segment!
0:47

Due to a technical issue, Joe has to do the show from his phone and arrived in the middle of the first segment!

93.7 The Fan

20,297 просмотров • 4 месяцев назад

Today, we’re thrilled to unveil the Arcee.ai Foundation Models, a new family of GenAI models designed from the ground up for enterprise reality. The first release—AFM-4.5B—is a 4.5-billion-parameter frontier model that delivers excellent accuracy, strict compliance, and very high cost efficiency. In short: enterprise-grade intelligence that can run anywhere—on a smartphone, at the edge, or in the cloud. For a quick taste, you can test AFM-4.5B in our playground and on For a deeper dive into the model’s training pipeline and benchmarks, details are available in our technical blog post. ➡️ Arcee AI playground: ➡️ Together AI playground: ➡️ Launch blog post: ➡️ Technical blog post: PS: As we’ll now focus on our AFM foundation models, and because we love open-source, we're opening up access to our previously closed-source language models. Details in the tech blog post!
1:05

Today, we’re thrilled to unveil the Arcee.ai Foundation Models, a new family of GenAI models designed from the ground up for enterprise reality. The first release—AFM-4.5B—is a 4.5-billion-parameter frontier model that delivers excellent accuracy, strict compliance, and very high cost efficiency. In short: enterprise-grade intelligence that can run anywhere—on a smartphone, at the edge, or in the cloud. For a quick taste, you can test AFM-4.5B in our playground and on For a deeper dive into the model’s training pipeline and benchmarks, details are available in our technical blog post. ➡️ Arcee AI playground: ➡️ Together AI playground: ➡️ Launch blog post: ➡️ Technical blog post: PS: As we’ll now focus on our AFM foundation models, and because we love open-source, we're opening up access to our previously closed-source language models. Details in the tech blog post!

Arcee.ai

21,934 просмотров • 1 год назад

The largest advancement of the CUDA platform since its creation in 2006 is here 👀 Introducing CUDA Tile, a tile-based programming model that provides the ability to write algorithms at a higher level and abstract away the details of specialized hardware, such as tensor cores. Read the technical blog 👉
2:34

The largest advancement of the CUDA platform since its creation in 2006 is here 👀 Introducing CUDA Tile, a tile-based programming model that provides the ability to write algorithms at a higher level and abstract away the details of specialized hardware, such as tensor cores. Read the technical blog 👉

NVIDIA AI Developer

244,885 просмотров • 11 месяцев назад

I just published a blog post on how I build the Notra braille loader ^^ First blog post I have done in a while where I poured almost a whole day into tiny details Give it a read!
0:20

I just published a blog post on how I build the Notra braille loader ^^ First blog post I have done in a while where I poured almost a whole day into tiny details Give it a read!

Dominik Koch

17,125 просмотров • 5 месяцев назад

Had a technical issue before the start of the race, started in…. 26th 24 overtakes and 35mins later, I finished the race in 2nd!
0:21

Had a technical issue before the start of the race, started in…. 26th 24 overtakes and 35mins later, I finished the race in 2nd!

OpTic Crimsix

525,877 просмотров • 2 лет назад

Google is now claiming their maps hiding the destruction from the Palisades Fire is just a “technical issue” Anyone else find it funny that every time there’s a glitch, or technical issue it seems to always be in favor of the left🤔
0:42

Google is now claiming their maps hiding the destruction from the Palisades Fire is just a “technical issue” Anyone else find it funny that every time there’s a glitch, or technical issue it seems to always be in favor of the left🤔

Derrick Evans

71,980 просмотров • 5 месяцев назад

A bizarre technical “glitch” just hit CNN — right as Stephen Miller was getting to the heart of a district judge ruling on National Guard deployment. Miller was cut off mid-sentence, unable to finish his explanation. The host, Boris Sanchez, eventually cut in: “Stephen, Stephen, can you hear me?” “Stephen, I apologize. It seems like we’re having a technical issue. We’ll try to fix that and get back to you after a quick break.”
0:56

A bizarre technical “glitch” just hit CNN — right as Stephen Miller was getting to the heart of a district judge ruling on National Guard deployment. Miller was cut off mid-sentence, unable to finish his explanation. The host, Boris Sanchez, eventually cut in: “Stephen, Stephen, can you hear me?” “Stephen, I apologize. It seems like we’re having a technical issue. We’ll try to fix that and get back to you after a quick break.”

Overton

298,258 просмотров • 1 год назад

BREAKING: HMS Dragon has made port in the Mediterranean due to a technical issue, says the Ministry of Defence. 📺 Sky 501 and YouTube
1:14

BREAKING: HMS Dragon has made port in the Mediterranean due to a technical issue, says the Ministry of Defence. 📺 Sky 501 and YouTube

Sky News

318,017 просмотров • 6 месяцев назад

I’ve had the most fun I’ve found in a while noodling over all the little details on my site. Wild how much pent up creativity was stuck behind minor technical limitations in things like app architecture and deployment. AI is a force multiplier for designers, not a death sentence
0:51

I’ve had the most fun I’ve found in a while noodling over all the little details on my site. Wild how much pent up creativity was stuck behind minor technical limitations in things like app architecture and deployment. AI is a force multiplier for designers, not a death sentence

Emily Campbell ✿

34,946 просмотров • 6 месяцев назад

I went to Paris for the weekend to write a blog for the BBC Sport on Luis Enrique I decided to tour the stadium and even caught up with Lucas Digne after Le Mans win An espresso #CoffeewithGuillem ☕️⚽️
6:35

I went to Paris for the weekend to write a blog for the BBC Sport on Luis Enrique I decided to tour the stadium and even caught up with Lucas Digne after Le Mans win An espresso #CoffeewithGuillem ☕️⚽️

Guillem Balague

28,979 просмотров • 19 дней назад