Загрузка видео...

Не удалось загрузить видео

На главную

reported a chrome fullchain (web -> shell) on pixel 10 to google. got a 9.6 cve (cve-2026-87464) and a fix in chrome. now they bend the rules and refuse to pay the fullchain bonus bc one of the vulns in the chain was an unpatched nday. total payout: $2.5k....

1lexxi's profile picture

lexi <img src=x onerror=alert(1)>

1,959 subscribers

263,399 просмотров • 6 дней назад •via X (Twitter)

Наука и технологии
LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 0

Нет доступных комментариев

Здесь появятся комментарии из оригинального поста

Похожие видео

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ, exploiting the vm:// protocol to achieve Remote Code Execution
0:11

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ, exploiting the vm:// protocol to achieve Remote Code Execution

pyn3rd

21,018 просмотров • 5 месяцев назад

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm
0:14

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm

Carlos Vieira (lynx)

81,336 просмотров • 1 год назад

October 1944 footage from the Battle of Leyte Gulf shows Wildcats finding a landing spot after their carrier was bombed, only to discover the hard way that the airstrip wasn't yet operational. (The carriers CVL-23, CVE-73, and CVE-63 were all lost in that battle.)🫡
0:11

October 1944 footage from the Battle of Leyte Gulf shows Wildcats finding a landing spot after their carrier was bombed, only to discover the hard way that the airstrip wasn't yet operational. (The carriers CVL-23, CVE-73, and CVE-63 were all lost in that battle.)🫡

Aviation Archive - Tim Farmer

182,504 просмотров • 7 месяцев назад

99 DR backlink from Google: 1. Go to the Chrome Web Store. 2. Sign up as a developer. 3. Pay a one-time $5 registration fee. 4. Build a Chrome extension. 5. Publish it on the store. Now, you will get a FREE backlink. And, referral traffic, too...
0:16

99 DR backlink from Google: 1. Go to the Chrome Web Store. 2. Sign up as a developer. 3. Pay a one-time $5 registration fee. 4. Build a Chrome extension. 5. Publish it on the store. Now, you will get a FREE backlink. And, referral traffic, too...

Hridoy Reh

22,335 просмотров • 3 месяцев назад

Today's exploit is again for the latest Ubuntu 26.04, a UAF in SCTP: CVE-2026-68162. It was introduced in Jan 2025 and fixed upstream in Jul 2026. Discovered and exploited by the NebuSec security pipeline. Exp source code:
0:15

Today's exploit is again for the latest Ubuntu 26.04, a UAF in SCTP: CVE-2026-68162. It was introduced in Jan 2025 and fixed upstream in Jul 2026. Discovered and exploited by the NebuSec security pipeline. Exp source code:

NebuSec

17,263 просмотров • 1 месяц назад

Today's exploit is for the latest Fedora 44, a UAF in netfilter, CVE-2026-52912. It was introduced in Mar 2016 and fixed upstream in May 2026. Discovered and exploited by the NebuSec security pipeline. (RANDOM_KMALLOC_CACHES + SELinux) Exp source code:
0:13

Today's exploit is for the latest Fedora 44, a UAF in netfilter, CVE-2026-52912. It was introduced in Mar 2016 and fixed upstream in May 2026. Discovered and exploited by the NebuSec security pipeline. (RANDOM_KMALLOC_CACHES + SELinux) Exp source code:

NebuSec

12,030 просмотров • 1 месяц назад

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in replies
0:18

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in replies

chebuya

89,449 просмотров • 1 год назад

An analysis of CVE-2026-21236 - A heap based buffer overflow in the Microsoft Windows Kernel afd.sys - was just published by Emily L a recent secondment with my team EDG! Nice work for her first triage of a kernel memory corruption bug!
0:13

An analysis of CVE-2026-21236 - A heap based buffer overflow in the Microsoft Windows Kernel afd.sys - was just published by Emily L a recent secondment with my team EDG! Nice work for her first triage of a kernel memory corruption bug!

Alex Plaskett

17,115 просмотров • 6 месяцев назад

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04
0:10

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04

V4bel

15,887 просмотров • 1 год назад

💥 Introducing "Zapscape" (CVE-2026-64561) A Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU's recursive "ZAP" path. Can escape to the host on x86 public clouds that expose nested virtualization. A separate vulnerability from Januscape. If you match the vulnerable conditions, apply the patch immediately. Details:
0:17

💥 Introducing "Zapscape" (CVE-2026-64561) A Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU's recursive "ZAP" path. Can escape to the host on x86 public clouds that expose nested virtualization. A separate vulnerability from Januscape. If you match the vulnerable conditions, apply the patch immediately. Details:

V4bel

31,068 просмотров • 1 месяц назад

A liberal TikToker is selling a t-shirt that glorifies the recent assassination of UnitedHealthcare CEO Brian Thompson in NYC. “deny , defend, depose” was reported to have been on the shell casings.
0:10

A liberal TikToker is selling a t-shirt that glorifies the recent assassination of UnitedHealthcare CEO Brian Thompson in NYC. “deny , defend, depose” was reported to have been on the shell casings.

SSant66 🇺🇸

24,084 просмотров • 1 год назад

Is it better to crack an egg on a flat surface or on the edge of something? Cracking an egg on a countertop or cutting board tends to make a cleaner fracture and pushes the shell inward less aggressively, so you’re less likely to get little shell fragments in the egg. Cracking it on the edge of a bowl or pan can drive shards inward and occasionally puncture the yolk. I'm a flat egg cracker.
0:14

Is it better to crack an egg on a flat surface or on the edge of something? Cracking an egg on a countertop or cutting board tends to make a cleaner fracture and pushes the shell inward less aggressively, so you’re less likely to get little shell fragments in the egg. Cracking it on the edge of a bowl or pan can drive shards inward and occasionally puncture the yolk. I'm a flat egg cracker.

Cary Kelly

12,595 просмотров • 1 месяц назад

A few people asked if we show videos. No, we do not! It’s all realtime animation, created with code, running in the browser. We run CHROME to check if 1 pixel in the software is *exactly* 1 pixel on the hardware and if we get the right framerate.
0:17

A few people asked if we show videos. No, we do not! It’s all realtime animation, created with code, running in the browser. We run CHROME to check if 1 pixel in the software is *exactly* 1 pixel on the hardware and if we get the right framerate.

Leander Herzog

41,723 просмотров • 2 лет назад

I put Breakout (aka Brick Breaker) inside Google Calendar and taught it to decline meetings. It's called BreakTime and it's live NOW in the Chrome Webstore! Never go to a meeting again 😈 🧵
0:17

I put Breakout (aka Brick Breaker) inside Google Calendar and taught it to decline meetings. It's called BreakTime and it's live NOW in the Chrome Webstore! Never go to a meeting again 😈 🧵

nolen

33,813 просмотров • 2 лет назад

As of Chrome 131 you have more options to style `<details>` and `<summary>`. You can now use of the `display` property on these elements, and also use a `::details-content` pseudo-element to style the part that expands and collapses.
0:12

As of Chrome 131 you have more options to style `<details>` and `<summary>`. You can now use of the `display` property on these elements, and also use a `::details-content` pseudo-element to style the part that expands and collapses.

Bramus

42,335 просмотров • 1 год назад

Introducing: Gemini in Chrome, your personal AI browsing assistant. Click the Gemini icon in your Chrome window and type or talk to get a quick summary, clarify concepts, and find answers—without switching tabs. Rolling out first to Gemini subscribers on desktop in the U.S. #GoogleIO
0:17

Introducing: Gemini in Chrome, your personal AI browsing assistant. Click the Gemini icon in your Chrome window and type or talk to get a quick summary, clarify concepts, and find answers—without switching tabs. Rolling out first to Gemini subscribers on desktop in the U.S. #GoogleIO

Google Gemini

144,878 просмотров • 1 год назад

Confirmed (with style!) - Interrupt Labs combined a path traversal and an untrusted search path bug to exploit the Lexmark CX532adwe. They got a reverse shell and loaded Doom on the LCD. We couldn't play it though :-[ Still awesome to see. #Pwn2Own
0:12

Confirmed (with style!) - Interrupt Labs combined a path traversal and an untrusted search path bug to exploit the Lexmark CX532adwe. They got a reverse shell and loaded Doom on the LCD. We couldn't play it though :-[ Still awesome to see. #Pwn2Own

TrendAI Zero Day Initiative

13,649 просмотров • 11 месяцев назад

A Look Back at the Iconic "Nike Chrome Scorpion" Ball of 2002 🦂 In 2002, Nike revolutionised sports marketing with its "Secret Tournament" campaign, a dazzling blend of football artistry and cinematic storytelling. Central to this campaign was the Nike Chrome Scorpion ball, an eye-catching design that became synonymous with the high-energy, knockout-style competition featured in the advertisement. ✍🏼 (Cred Mania.91)
0:13

A Look Back at the Iconic "Nike Chrome Scorpion" Ball of 2002 🦂 In 2002, Nike revolutionised sports marketing with its "Secret Tournament" campaign, a dazzling blend of football artistry and cinematic storytelling. Central to this campaign was the Nike Chrome Scorpion ball, an eye-catching design that became synonymous with the high-energy, knockout-style competition featured in the advertisement. ✍🏼 (Cred Mania.91)

Rigouts Clothing & Footwear Deals

762,674 просмотров • 1 год назад

The Chernobyl "tomb" — officially called the Sarcophagus - was a giant steel and concrete shell built in just 206 days after the 1986 disaster to contain the radioactive remains of Reactor 4.
0:16

The Chernobyl "tomb" — officially called the Sarcophagus - was a giant steel and concrete shell built in just 206 days after the 1986 disaster to contain the radioactive remains of Reactor 4.

Historic Vids

577,831 просмотров • 1 год назад