Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

Published my technical write-up on a vulnerability I discovered in Windows usbprint.sys. The issue was reported to MSRC, but Microsoft decided not to issue a fix. I’ve documented the technical details and PoC in the blog. Blog writeup:

zeifan's profile picture

nafiez

2,432 subscribers

25,164 görüntüleme • 2 ay önce •via X (Twitter)

Bilim & Teknoloji
LIVE

Anya Rossi• Live Now

Private livecam show

7 Yorum

Herb Page profil fotoğrafı
Herb Page2 ay önce

which model did you use to find this?

nafiez profil fotoğrafı
nafiez2 ay önce

Initially found via manual audit and then I throw the rest of analysis to Opus 4.6. It does the job from verifying the bug to PoC.

Mark profil fotoğrafı
Mark2 ay önce

Why won't they fix? Don't they know how?

nafiez profil fotoğrafı
nafiez2 ay önce

I have no idea 😅

Dirt Jordan profil fotoğrafı
Dirt Jordan2 ay önce

I'd call this more than moderate. A deterministic kernel crash over TCP from a Linux box gets moderate severity, no CVE, no bounty. The servicing bar only moves for RCE.

nafiez profil fotoğrafı
nafiez2 ay önce

Its their decision. We can’t do much from our side 😅

Dirt Jordan profil fotoğrafı
Dirt Jordan2 ay önce

I'd still call a remote kernel crash over TCP more than moderate. MSRC's bar is RCE-or-bust now. Your writeup proves the real impact.

Benzer Videolar

A quick writeup on potential security issue of Windows LNK that I reported to MSRC last month. They decided to not fix due to relying on MOTW. In the blog I included the proof of concept. All you have to do is to Right-Click and get Info Disclosure :)
0:28

A quick writeup on potential security issue of Windows LNK that I reported to MSRC last month. They decided to not fix due to relying on MOTW. In the blog I included the proof of concept. All you have to do is to Right-Click and get Info Disclosure :)

nafiez

25,347 görüntüleme • 1 yıl önce

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability Check out the new security vulnerability I discovered in Windows, which I believe is potentially being sold in the wild. (fixed patch tuesday) Blog post: PoC:
0:46

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability Check out the new security vulnerability I discovered in Windows, which I believe is potentially being sold in the wild. (fixed patch tuesday) Blog post: PoC:

0x6rss

45,855 görüntüleme • 1 yıl önce

'It was a technical issue.. it was not a cyber security incident' Transport Secretary Mark Harper spoke to #BBCBreakfast about the disruption to air travel in and out of the UK
2:02

'It was a technical issue.. it was not a cyber security incident' Transport Secretary Mark Harper spoke to #BBCBreakfast about the disruption to air travel in and out of the UK

BBC Breakfast

116,558 görüntüleme • 3 yıl önce

PS5 (latest firmware) PoC for mast1c0re vulnerabilities. Arbitrary PS2 code execution and native PS5 ROP chain execution. Technical details on CTurt's blog post:
2:15

PS5 (latest firmware) PoC for mast1c0re vulnerabilities. Arbitrary PS2 code execution and native PS5 ROP chain execution. Technical details on CTurt's blog post:

McCaulay

292,756 görüntüleme • 3 yıl önce

Here's a video PoC for Azure Entra ID SignIn Log Bypass in action. I had to make it to help MSRC replicate it (lol). You'll see how simple this bypass was. No worries admins, Microsoft says that it was only a "Moderate" issue.
8:23

Here's a video PoC for Azure Entra ID SignIn Log Bypass in action. I had to make it to help MSRC replicate it (lol). You'll see how simple this bypass was. No worries admins, Microsoft says that it was only a "Moderate" issue.

nyxgeek

41,729 görüntüleme • 9 ay önce

When I posted my blog post on the misaligned behavior of AI agents, I invited people to ask me technical questions. Watch the full Q&A here: [
1:05

When I posted my blog post on the misaligned behavior of AI agents, I invited people to ask me technical questions. Watch the full Q&A here: [

Yoshua Bengio

15,508 görüntüleme • 1 ay önce

Due to a technical issue, Joe has to do the show from his phone and arrived in the middle of the first segment!
0:47

Due to a technical issue, Joe has to do the show from his phone and arrived in the middle of the first segment!

93.7 The Fan

20,297 görüntüleme • 4 ay önce

Today, we’re thrilled to unveil the Arcee.ai Foundation Models, a new family of GenAI models designed from the ground up for enterprise reality. The first release—AFM-4.5B—is a 4.5-billion-parameter frontier model that delivers excellent accuracy, strict compliance, and very high cost efficiency. In short: enterprise-grade intelligence that can run anywhere—on a smartphone, at the edge, or in the cloud. For a quick taste, you can test AFM-4.5B in our playground and on For a deeper dive into the model’s training pipeline and benchmarks, details are available in our technical blog post. ➡️ Arcee AI playground: ➡️ Together AI playground: ➡️ Launch blog post: ➡️ Technical blog post: PS: As we’ll now focus on our AFM foundation models, and because we love open-source, we're opening up access to our previously closed-source language models. Details in the tech blog post!
1:05

Today, we’re thrilled to unveil the Arcee.ai Foundation Models, a new family of GenAI models designed from the ground up for enterprise reality. The first release—AFM-4.5B—is a 4.5-billion-parameter frontier model that delivers excellent accuracy, strict compliance, and very high cost efficiency. In short: enterprise-grade intelligence that can run anywhere—on a smartphone, at the edge, or in the cloud. For a quick taste, you can test AFM-4.5B in our playground and on For a deeper dive into the model’s training pipeline and benchmarks, details are available in our technical blog post. ➡️ Arcee AI playground: ➡️ Together AI playground: ➡️ Launch blog post: ➡️ Technical blog post: PS: As we’ll now focus on our AFM foundation models, and because we love open-source, we're opening up access to our previously closed-source language models. Details in the tech blog post!

Arcee.ai

21,934 görüntüleme • 1 yıl önce

The largest advancement of the CUDA platform since its creation in 2006 is here 👀 Introducing CUDA Tile, a tile-based programming model that provides the ability to write algorithms at a higher level and abstract away the details of specialized hardware, such as tensor cores. Read the technical blog 👉
2:34

The largest advancement of the CUDA platform since its creation in 2006 is here 👀 Introducing CUDA Tile, a tile-based programming model that provides the ability to write algorithms at a higher level and abstract away the details of specialized hardware, such as tensor cores. Read the technical blog 👉

NVIDIA AI Developer

244,885 görüntüleme • 11 ay önce

I just published a blog post on how I build the Notra braille loader ^^ First blog post I have done in a while where I poured almost a whole day into tiny details Give it a read!
0:20

I just published a blog post on how I build the Notra braille loader ^^ First blog post I have done in a while where I poured almost a whole day into tiny details Give it a read!

Dominik Koch

17,125 görüntüleme • 5 ay önce

Had a technical issue before the start of the race, started in…. 26th 24 overtakes and 35mins later, I finished the race in 2nd!
0:21

Had a technical issue before the start of the race, started in…. 26th 24 overtakes and 35mins later, I finished the race in 2nd!

OpTic Crimsix

525,877 görüntüleme • 2 yıl önce

Google is now claiming their maps hiding the destruction from the Palisades Fire is just a “technical issue” Anyone else find it funny that every time there’s a glitch, or technical issue it seems to always be in favor of the left🤔
0:42

Google is now claiming their maps hiding the destruction from the Palisades Fire is just a “technical issue” Anyone else find it funny that every time there’s a glitch, or technical issue it seems to always be in favor of the left🤔

Derrick Evans

71,980 görüntüleme • 5 ay önce

A bizarre technical “glitch” just hit CNN — right as Stephen Miller was getting to the heart of a district judge ruling on National Guard deployment. Miller was cut off mid-sentence, unable to finish his explanation. The host, Boris Sanchez, eventually cut in: “Stephen, Stephen, can you hear me?” “Stephen, I apologize. It seems like we’re having a technical issue. We’ll try to fix that and get back to you after a quick break.”
0:56

A bizarre technical “glitch” just hit CNN — right as Stephen Miller was getting to the heart of a district judge ruling on National Guard deployment. Miller was cut off mid-sentence, unable to finish his explanation. The host, Boris Sanchez, eventually cut in: “Stephen, Stephen, can you hear me?” “Stephen, I apologize. It seems like we’re having a technical issue. We’ll try to fix that and get back to you after a quick break.”

Overton

298,258 görüntüleme • 1 yıl önce

I’ve had the most fun I’ve found in a while noodling over all the little details on my site. Wild how much pent up creativity was stuck behind minor technical limitations in things like app architecture and deployment. AI is a force multiplier for designers, not a death sentence
0:51

I’ve had the most fun I’ve found in a while noodling over all the little details on my site. Wild how much pent up creativity was stuck behind minor technical limitations in things like app architecture and deployment. AI is a force multiplier for designers, not a death sentence

Emily Campbell ✿

34,946 görüntüleme • 6 ay önce

BREAKING: HMS Dragon has made port in the Mediterranean due to a technical issue, says the Ministry of Defence. 📺 Sky 501 and YouTube
1:14

BREAKING: HMS Dragon has made port in the Mediterranean due to a technical issue, says the Ministry of Defence. 📺 Sky 501 and YouTube

Sky News

317,831 görüntüleme • 6 ay önce

I went to Paris for the weekend to write a blog for the BBC Sport on Luis Enrique I decided to tour the stadium and even caught up with Lucas Digne after Le Mans win An espresso #CoffeewithGuillem ☕️⚽️
6:35

I went to Paris for the weekend to write a blog for the BBC Sport on Luis Enrique I decided to tour the stadium and even caught up with Lucas Digne after Le Mans win An espresso #CoffeewithGuillem ☕️⚽️

Guillem Balague

28,979 görüntüleme • 19 gün önce