正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

reported a chrome fullchain (web -> shell) on pixel 10 to google. got a 9.6 cve (cve-2026-87464) and a fix in chrome. now they bend the rules and refuse to pay the fullchain bonus bc one of the vulns in the chain was an unpatched nday. total payout: $2.5k.... show more

lexi <img src=x onerror=alert(1)>

1,959 subscribers

263,399 次观看 • 6 天前 •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ, exploiting the vm:// protocol to achieve Remote Code Execution

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ, exploiting the vm:// protocol to achieve Remote Code Execution

pyn3rd

21,018 次观看 • 5 个月前

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm

Carlos Vieira (lynx)

81,336 次观看 • 1 年前

October 1944 footage from the Battle of Leyte Gulf shows Wildcats finding a landing spot after their carrier was bombed, only to discover the hard way that the airstrip wasn't yet operational. (The carriers CVL-23, CVE-73, and CVE-63 were all lost in that battle.)🫡

October 1944 footage from the Battle of Leyte Gulf shows Wildcats finding a landing spot after their carrier was bombed, only to discover the hard way that the airstrip wasn't yet operational. (The carriers CVL-23, CVE-73, and CVE-63 were all lost in that battle.)🫡

Aviation Archive - Tim Farmer

182,504 次观看 • 7 个月前

99 DR backlink from Google: 1. Go to the Chrome Web Store. 2. Sign up as a developer. 3. Pay a one-time $5 registration fee. 4. Build a Chrome extension. 5. Publish it on the store. Now, you will get a FREE backlink. And, referral traffic, too...

99 DR backlink from Google: 1. Go to the Chrome Web Store. 2. Sign up as a developer. 3. Pay a one-time $5 registration fee. 4. Build a Chrome extension. 5. Publish it on the store. Now, you will get a FREE backlink. And, referral traffic, too...

Hridoy Reh

22,335 次观看 • 3 个月前

Today's exploit is again for the latest Ubuntu 26.04, a UAF in SCTP: CVE-2026-68162. It was introduced in Jan 2025 and fixed upstream in Jul 2026. Discovered and exploited by the NebuSec security pipeline. Exp source code:

Today's exploit is again for the latest Ubuntu 26.04, a UAF in SCTP: CVE-2026-68162. It was introduced in Jan 2025 and fixed upstream in Jul 2026. Discovered and exploited by the NebuSec security pipeline. Exp source code:

NebuSec

17,263 次观看 • 1 个月前

Today's exploit is for the latest Fedora 44, a UAF in netfilter, CVE-2026-52912. It was introduced in Mar 2016 and fixed upstream in May 2026. Discovered and exploited by the NebuSec security pipeline. (RANDOM_KMALLOC_CACHES + SELinux) Exp source code:

Today's exploit is for the latest Fedora 44, a UAF in netfilter, CVE-2026-52912. It was introduced in Mar 2016 and fixed upstream in May 2026. Discovered and exploited by the NebuSec security pipeline. (RANDOM_KMALLOC_CACHES + SELinux) Exp source code:

NebuSec

12,030 次观看 • 1 个月前

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in replies

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in replies

chebuya

89,449 次观看 • 1 年前

An analysis of CVE-2026-21236 - A heap based buffer overflow in the Microsoft Windows Kernel afd.sys - was just published by Emily L a recent secondment with my team EDG! Nice work for her first triage of a kernel memory corruption bug!

An analysis of CVE-2026-21236 - A heap based buffer overflow in the Microsoft Windows Kernel afd.sys - was just published by Emily L a recent secondment with my team EDG! Nice work for her first triage of a kernel memory corruption bug!

Alex Plaskett

17,109 次观看 • 6 个月前

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04

qwerty and I exploited a VSock 1-day in Google kernelCTF back in February, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04

V4bel

15,887 次观看 • 1 年前

💥 Introducing "Zapscape" (CVE-2026-64561) A Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU's recursive "ZAP" path. Can escape to the host on x86 public clouds that expose nested virtualization. A separate vulnerability from Januscape. If you match the vulnerable conditions, apply the patch immediately. Details:

💥 Introducing "Zapscape" (CVE-2026-64561) A Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU's recursive "ZAP" path. Can escape to the host on x86 public clouds that expose nested virtualization. A separate vulnerability from Januscape. If you match the vulnerable conditions, apply the patch immediately. Details:

V4bel

31,068 次观看 • 1 个月前

A liberal TikToker is selling a t-shirt that glorifies the recent assassination of UnitedHealthcare CEO Brian Thompson in NYC. “deny , defend, depose” was reported to have been on the shell casings.

A liberal TikToker is selling a t-shirt that glorifies the recent assassination of UnitedHealthcare CEO Brian Thompson in NYC. “deny , defend, depose” was reported to have been on the shell casings.

SSant66 🇺🇸

24,084 次观看 • 1 年前

$Is it better to crack an egg on a flat surface or on the edge of something? Cracking an egg on a countertop or cutting board tends to make a cleaner fracture and pushes the shell inward less aggressively, so you’re less likely to get little shell fragments in the egg. Cracking it on the edge of a bowl or pan can drive shards inward and occasionally puncture the yolk. I'm a flat egg cracker.$

Is it better to crack an egg on a flat surface or on the edge of something? Cracking an egg on a countertop or cutting board tends to make a cleaner fracture and pushes the shell inward less aggressively, so you’re less likely to get little shell fragments in the egg. Cracking it on the edge of a bowl or pan can drive shards inward and occasionally puncture the yolk. I'm a flat egg cracker.

Cary Kelly

12,595 次观看 • 1 个月前

A few people asked if we show videos. No, we do not! It’s all realtime animation, created with code, running in the browser. We run CHROME to check if 1 pixel in the software is *exactly* 1 pixel on the hardware and if we get the right framerate.

A few people asked if we show videos. No, we do not! It’s all realtime animation, created with code, running in the browser. We run CHROME to check if 1 pixel in the software is exactly 1 pixel on the hardware and if we get the right framerate.

Leander Herzog

41,723 次观看 • 2 年前

I put Breakout (aka Brick Breaker) inside Google Calendar and taught it to decline meetings. It's called BreakTime and it's live NOW in the Chrome Webstore! Never go to a meeting again 😈 🧵

I put Breakout (aka Brick Breaker) inside Google Calendar and taught it to decline meetings. It's called BreakTime and it's live NOW in the Chrome Webstore! Never go to a meeting again 😈 🧵

nolen

33,813 次观看 • 2 年前

As of Chrome 131 you have more options to style `<details>` and `<summary>`. You can now use of the `display` property on these elements, and also use a `::details-content` pseudo-element to style the part that expands and collapses.

As of Chrome 131 you have more options to style `<details>` and `<summary>`. You can now use of the `display` property on these elements, and also use a `::details-content` pseudo-element to style the part that expands and collapses.

Bramus

42,335 次观看 • 1 年前

Introducing: Gemini in Chrome, your personal AI browsing assistant. Click the Gemini icon in your Chrome window and type or talk to get a quick summary, clarify concepts, and find answers—without switching tabs. Rolling out first to Gemini subscribers on desktop in the U.S. #GoogleIO

Introducing: Gemini in Chrome, your personal AI browsing assistant. Click the Gemini icon in your Chrome window and type or talk to get a quick summary, clarify concepts, and find answers—without switching tabs. Rolling out first to Gemini subscribers on desktop in the U.S. #GoogleIO

Google Gemini

144,878 次观看 • 1 年前

Confirmed (with style!) - Interrupt Labs combined a path traversal and an untrusted search path bug to exploit the Lexmark CX532adwe. They got a reverse shell and loaded Doom on the LCD. We couldn't play it though :-[ Still awesome to see. #Pwn2Own

Confirmed (with style!) - Interrupt Labs combined a path traversal and an untrusted search path bug to exploit the Lexmark CX532adwe. They got a reverse shell and loaded Doom on the LCD. We couldn't play it though :-[ Still awesome to see. #Pwn2Own

TrendAI Zero Day Initiative

13,649 次观看 • 11 个月前

A Look Back at the Iconic "Nike Chrome Scorpion" Ball of 2002 🦂 In 2002, Nike revolutionised sports marketing with its "Secret Tournament" campaign, a dazzling blend of football artistry and cinematic storytelling. Central to this campaign was the Nike Chrome Scorpion ball, an eye-catching design that became synonymous with the high-energy, knockout-style competition featured in the advertisement. ✍🏼 (Cred Mania.91)

A Look Back at the Iconic "Nike Chrome Scorpion" Ball of 2002 🦂 In 2002, Nike revolutionised sports marketing with its "Secret Tournament" campaign, a dazzling blend of football artistry and cinematic storytelling. Central to this campaign was the Nike Chrome Scorpion ball, an eye-catching design that became synonymous with the high-energy, knockout-style competition featured in the advertisement. ✍🏼 (Cred Mania.91)

Rigouts Clothing & Footwear Deals

762,674 次观看 • 1 年前

The Chernobyl "tomb" — officially called the Sarcophagus - was a giant steel and concrete shell built in just 206 days after the 1986 disaster to contain the radioactive remains of Reactor 4.

The Chernobyl "tomb" — officially called the Sarcophagus - was a giant steel and concrete shell built in just 206 days after the 1986 disaster to contain the radioactive remains of Reactor 4.

Historic Vids

577,831 次观看 • 1 年前