Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

Since V8 had heap sandbox, Chrome renderer RCE usually means chaining 2 bugs Today we bring the Spear of Longinus 1 bug, 100% success, no heap spray, found in 40+ major versions, arbitrary renderer read/write + V8 sandbox escape Our CVE-2026-6307 writeup

nebusecurity's profile picture

Nebula Security

4,407 subscribers

37,032 Aufrufe • vor 4 Tagen •via X (Twitter)

BildungNachrichten & PolitikWissenschaft & Technologie
LIVE

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

CVE-2023-20593 — Exploiting Zenbleed from Chrome This repository contains a proof-of-concept for exploiting Zenbleed from Chrome using a V8 vulnerability which enbles arbitrary code execution in the renderer process. Details: #cybersecurity #pentesting #redteam #bugbounty
0:14

CVE-2023-20593 — Exploiting Zenbleed from Chrome This repository contains a proof-of-concept for exploiting Zenbleed from Chrome using a V8 vulnerability which enbles arbitrary code execution in the renderer process. Details: #cybersecurity #pentesting #redteam #bugbounty

HackGit

26,398 Aufrufe • vor 2 Jahren

We've had a renderer RCE -> UXSS exploit on Samsung phones since last November, in collaboration with Crusaders of Rust. Full writeup coming next week.
0:19

We've had a renderer RCE -> UXSS exploit on Samsung phones since last November, in collaboration with Crusaders of Rust. Full writeup coming next week.

OtterSec

21,574 Aufrufe • vor 3 Monaten

📞 Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk bronzebee Read the write-up:
0:10

📞 Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk bronzebee Read the write-up:

PT SWARM

34,481 Aufrufe • vor 5 Monaten

Messing with a sandbox bug I found on iOS 26.3
0:11

Messing with a sandbox bug I found on iOS 26.3

johnny

78,532 Aufrufe • vor 4 Monaten

An analysis of CVE-2026-21236 - A heap based buffer overflow in the Microsoft Windows Kernel afd.sys - was just published by Emily L a recent secondment with my team EDG! Nice work for her first triage of a kernel memory corruption bug!
0:13

An analysis of CVE-2026-21236 - A heap based buffer overflow in the Microsoft Windows Kernel afd.sys - was just published by Emily L a recent secondment with my team EDG! Nice work for her first triage of a kernel memory corruption bug!

Alex Plaskett

16,778 Aufrufe • vor 3 Monaten

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in replies
0:18

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in replies

chebuya

89,150 Aufrufe • vor 1 Jahr

Arbitrary code execution in objdump -g We have a thing for finding bugs in bug finding tools. IDA Pro, Ghidra, Binja Sidekick, or radare2. You name it we hacked it. Our friends were saying we should try objdump. So here we go. Blog post: AI-generated PoC and writeup:
0:17

Arbitrary code execution in objdump -g We have a thing for finding bugs in bug finding tools. IDA Pro, Ghidra, Binja Sidekick, or radare2. You name it we hacked it. Our friends were saying we should try objdump. So here we go. Blog post: AI-generated PoC and writeup:

Calif

29,610 Aufrufe • vor 25 Tagen

Custom Grass Renderer Recently, I had a chance to create a custom grass renderer for Dinolords Here`s how it works #indiegames #strategygame
0:18

Custom Grass Renderer Recently, I had a chance to create a custom grass renderer for Dinolords Here`s how it works #indiegames #strategygame

Kacper Szwajka

44,184 Aufrufe • vor 1 Jahr

V8 DKG Launches Now: A New Dawn for AI in 2025🌟 As 2024 draws to a close, we're excited to announce the immediate launch of V8 Decentralized Knowledge Graph (DKG)! This monumental release is set to redefine AI's capabilities as we step into 2025. What Does V8 Bring to the Table? 🧠Decentralized AI: AI agents can now leverage a 'collective memory' at internet scale, drawing from a shared, yet sovereign, knowledge base. This means AI can provide more contextual, coherent, and accurate interactions without compromising data integrity or privacy. 🚀Unmatched Scalability: With the capability to handle billions of Knowledge Assets, V8 DKG sets the stage for AI to grow and learn in ways we've only imagined, supporting everything from decentralized science to industry 4.0. 🔐Trust and Integrity: With integrated decentralized Retrieval Augmented Generation (dRAG), V8 DKG promotes AI that's more accurate, less biased, and inherently trustworthy. How to V8👇 To update your node from V6 to V8, delegate your TRAC utility tokens, and learn more about creating, connecting and owning your Knowledge Assets, make sure to thoroughly read the following documentation: 👉 With V8 DKG launch, you may now access the new: V8 Explorer👉 AND Staking Dashboard 👉 You may now also participate in V8 Staking Security Bounty by delegating new TRAC stake and report your findings. Read more: 👉 The V8 Staking Security Bounty will importantly contribute to the so-called tuning phase of V8 DKG launch (V8.0 to V8.1). Let's break records, as we usher in a new era of Internet Scale OriginTrail!
0:15

V8 DKG Launches Now: A New Dawn for AI in 2025🌟 As 2024 draws to a close, we're excited to announce the immediate launch of V8 Decentralized Knowledge Graph (DKG)! This monumental release is set to redefine AI's capabilities as we step into 2025. What Does V8 Bring to the Table? 🧠Decentralized AI: AI agents can now leverage a 'collective memory' at internet scale, drawing from a shared, yet sovereign, knowledge base. This means AI can provide more contextual, coherent, and accurate interactions without compromising data integrity or privacy. 🚀Unmatched Scalability: With the capability to handle billions of Knowledge Assets, V8 DKG sets the stage for AI to grow and learn in ways we've only imagined, supporting everything from decentralized science to industry 4.0. 🔐Trust and Integrity: With integrated decentralized Retrieval Augmented Generation (dRAG), V8 DKG promotes AI that's more accurate, less biased, and inherently trustworthy. How to V8👇 To update your node from V6 to V8, delegate your TRAC utility tokens, and learn more about creating, connecting and owning your Knowledge Assets, make sure to thoroughly read the following documentation: 👉 With V8 DKG launch, you may now access the new: V8 Explorer👉 AND Staking Dashboard 👉 You may now also participate in V8 Staking Security Bounty by delegating new TRAC stake and report your findings. Read more: 👉 The V8 Staking Security Bounty will importantly contribute to the so-called tuning phase of V8 DKG launch (V8.0 to V8.1). Let's break records, as we usher in a new era of Internet Scale OriginTrail!

OriginTrail

561,176 Aufrufe • vor 1 Jahr

scoups got picked by v8 among svt members who had a lot of fight episodes 😂 1. seungkwan 2. hoshi 3. scoups but v8 said scoups used to nag a lot but he also had a lot of fight episodes as well 😁
0:18

scoups got picked by v8 among svt members who had a lot of fight episodes 😂 1. seungkwan 2. hoshi 3. scoups but v8 said scoups used to nag a lot but he also had a lot of fight episodes as well 😁

✩

29,989 Aufrufe • vor 10 Tagen

vernon at the v8 listening party! #VERNON #버논 #V8
0:15

vernon at the v8 listening party! #VERNON #버논 #V8

🎧

180,614 Aufrufe • vor 5 Tagen

Happy Holidays from The Sandbox 🎁 Thanks for being part of the journey and helping shape The Sandbox 💛
0:10

Happy Holidays from The Sandbox 🎁 Thanks for being part of the journey and helping shape The Sandbox 💛

The Sandbox

10,205 Aufrufe • vor 6 Monaten

🌐 Enter Lens Legacy in The Sandbox, an NFT gallery designed by and Metatheory. Step into a world of rare NFTs and explore the metaverse like never before! 🎨✨ seed.photo The Sandbox Metatheory Studio @cashclickapp #SeedPhoto #Sandbox #Metatheory #NFT #Metaverse
0:18

🌐 Enter Lens Legacy in The Sandbox, an NFT gallery designed by and Metatheory. Step into a world of rare NFTs and explore the metaverse like never before! 🎨✨ seed.photo The Sandbox Metatheory Studio @cashclickapp #SeedPhoto #Sandbox #Metatheory #NFT #Metaverse

seed.photo

41,166 Aufrufe • vor 1 Jahr

⚙️ Playgrounds Mode is LIVE! Build Brookhollow Park your way with our returning sandbox feature in Grounded 2.
0:10

⚙️ Playgrounds Mode is LIVE! Build Brookhollow Park your way with our returning sandbox feature in Grounded 2.

Grounded

17,858 Aufrufe • vor 3 Monaten

Few new features for terrain renderer
0:16

Few new features for terrain renderer

Highland Keep

38,691 Aufrufe • vor 1 Jahr

Microsoft has addressed a one-click NTLM leak vulnerability affecting Windows Snipping Tool (CVE-2026-33829), discovered by our researcher Marcos Díaz (Marcos Díaz). ➡️ Read the write-up: ➡️ Microsoft bulletin:
0:18

Microsoft has addressed a one-click NTLM leak vulnerability affecting Windows Snipping Tool (CVE-2026-33829), discovered by our researcher Marcos Díaz (Marcos Díaz). ➡️ Read the write-up: ➡️ Microsoft bulletin:

BlackArrow

113,353 Aufrufe • vor 2 Monaten

2 horns, 8 cylinders. The HEMI® V8 engine is back in Ram Trucks.
0:17

2 horns, 8 cylinders. The HEMI® V8 engine is back in Ram Trucks.

Ram Trucks

46,008 Aufrufe • vor 1 Jahr

Set sail and explore a refreshed pirate sandbox in Sea of Thieves. New Smuggler's Tide season is live today:
0:10

Set sail and explore a refreshed pirate sandbox in Sea of Thieves. New Smuggler's Tide season is live today:

PlayStation

206,476 Aufrufe • vor 10 Monaten