Загрузка видео...

Не удалось загрузить видео

На главную

Since V8 had heap sandbox, Chrome renderer RCE usually means chaining 2 bugs Today we bring the Spear of Longinus 1 bug, 100% success, no heap spray, found in 40+ major versions, arbitrary renderer read/write + V8 sandbox escape Our CVE-2026-6307 writeup

nebusecurity's profile picture

NebuSec

6,894 subscribers

50,855 просмотров • 2 месяцев назад •via X (Twitter)

ОбразованиеНовости и политикаНаука и технологии
LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 0

Нет доступных комментариев

Здесь появятся комментарии из оригинального поста

Похожие видео

CVE-2023-20593 — Exploiting Zenbleed from Chrome This repository contains a proof-of-concept for exploiting Zenbleed from Chrome using a V8 vulnerability which enbles arbitrary code execution in the renderer process. Details: #cybersecurity #pentesting #redteam #bugbounty
0:14

CVE-2023-20593 — Exploiting Zenbleed from Chrome This repository contains a proof-of-concept for exploiting Zenbleed from Chrome using a V8 vulnerability which enbles arbitrary code execution in the renderer process. Details: #cybersecurity #pentesting #redteam #bugbounty

HackGit

27,096 просмотров • 2 лет назад

We've had a renderer RCE -> UXSS exploit on Samsung phones since last November, in collaboration with Crusaders of Rust. Full writeup coming next week.
0:19

We've had a renderer RCE -> UXSS exploit on Samsung phones since last November, in collaboration with Crusaders of Rust. Full writeup coming next week.

OtterSec

21,777 просмотров • 5 месяцев назад

Found a heap overflow vulnerability in Windows SMB that leads to RCE and reported it to MSRC in June. The vulnerability has now been addressed with CVE-2026-62800 in the August Patch Tuesday updates.
0:19

Found a heap overflow vulnerability in Windows SMB that leads to RCE and reported it to MSRC in June. The vulnerability has now been addressed with CVE-2026-62800 in the August Patch Tuesday updates.

nafiez

31,194 просмотров • 20 дней назад

📞 Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk bronzebee Read the write-up:
0:10

📞 Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk bronzebee Read the write-up:

PT SWARM

34,612 просмотров • 7 месяцев назад

Messing with a sandbox bug I found on iOS 26.3
0:11

Messing with a sandbox bug I found on iOS 26.3

johnny

79,238 просмотров • 6 месяцев назад

An analysis of CVE-2026-21236 - A heap based buffer overflow in the Microsoft Windows Kernel afd.sys - was just published by Emily L a recent secondment with my team EDG! Nice work for her first triage of a kernel memory corruption bug!
0:13

An analysis of CVE-2026-21236 - A heap based buffer overflow in the Microsoft Windows Kernel afd.sys - was just published by Emily L a recent secondment with my team EDG! Nice work for her first triage of a kernel memory corruption bug!

Alex Plaskett

17,065 просмотров • 5 месяцев назад

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in replies
0:18

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in replies

chebuya

89,290 просмотров • 1 год назад

Arbitrary code execution in objdump -g We have a thing for finding bugs in bug finding tools. IDA Pro, Ghidra, Binja Sidekick, or radare2. You name it we hacked it. Our friends were saying we should try objdump. So here we go. Blog post: AI-generated PoC and writeup:
0:17

Arbitrary code execution in objdump -g We have a thing for finding bugs in bug finding tools. IDA Pro, Ghidra, Binja Sidekick, or radare2. You name it we hacked it. Our friends were saying we should try objdump. So here we go. Blog post: AI-generated PoC and writeup:

Calif

30,525 просмотров • 2 месяцев назад

Custom Grass Renderer Recently, I had a chance to create a custom grass renderer for Dinolords Here`s how it works #indiegames #strategygame
0:18

Custom Grass Renderer Recently, I had a chance to create a custom grass renderer for Dinolords Here`s how it works #indiegames #strategygame

Kacper Szwajka

44,239 просмотров • 2 лет назад

V8 DKG Launches Now: A New Dawn for AI in 2025🌟 As 2024 draws to a close, we're excited to announce the immediate launch of V8 Decentralized Knowledge Graph (DKG)! This monumental release is set to redefine AI's capabilities as we step into 2025. What Does V8 Bring to the Table? 🧠Decentralized AI: AI agents can now leverage a 'collective memory' at internet scale, drawing from a shared, yet sovereign, knowledge base. This means AI can provide more contextual, coherent, and accurate interactions without compromising data integrity or privacy. 🚀Unmatched Scalability: With the capability to handle billions of Knowledge Assets, V8 DKG sets the stage for AI to grow and learn in ways we've only imagined, supporting everything from decentralized science to industry 4.0. 🔐Trust and Integrity: With integrated decentralized Retrieval Augmented Generation (dRAG), V8 DKG promotes AI that's more accurate, less biased, and inherently trustworthy. How to V8👇 To update your node from V6 to V8, delegate your TRAC utility tokens, and learn more about creating, connecting and owning your Knowledge Assets, make sure to thoroughly read the following documentation: 👉 With V8 DKG launch, you may now access the new: V8 Explorer👉 AND Staking Dashboard 👉 You may now also participate in V8 Staking Security Bounty by delegating new TRAC stake and report your findings. Read more: 👉 The V8 Staking Security Bounty will importantly contribute to the so-called tuning phase of V8 DKG launch (V8.0 to V8.1). Let's break records, as we usher in a new era of Internet Scale OriginTrail!
0:15

V8 DKG Launches Now: A New Dawn for AI in 2025🌟 As 2024 draws to a close, we're excited to announce the immediate launch of V8 Decentralized Knowledge Graph (DKG)! This monumental release is set to redefine AI's capabilities as we step into 2025. What Does V8 Bring to the Table? 🧠Decentralized AI: AI agents can now leverage a 'collective memory' at internet scale, drawing from a shared, yet sovereign, knowledge base. This means AI can provide more contextual, coherent, and accurate interactions without compromising data integrity or privacy. 🚀Unmatched Scalability: With the capability to handle billions of Knowledge Assets, V8 DKG sets the stage for AI to grow and learn in ways we've only imagined, supporting everything from decentralized science to industry 4.0. 🔐Trust and Integrity: With integrated decentralized Retrieval Augmented Generation (dRAG), V8 DKG promotes AI that's more accurate, less biased, and inherently trustworthy. How to V8👇 To update your node from V6 to V8, delegate your TRAC utility tokens, and learn more about creating, connecting and owning your Knowledge Assets, make sure to thoroughly read the following documentation: 👉 With V8 DKG launch, you may now access the new: V8 Explorer👉 AND Staking Dashboard 👉 You may now also participate in V8 Staking Security Bounty by delegating new TRAC stake and report your findings. Read more: 👉 The V8 Staking Security Bounty will importantly contribute to the so-called tuning phase of V8 DKG launch (V8.0 to V8.1). Let's break records, as we usher in a new era of Internet Scale OriginTrail!

OriginTrail

561,243 просмотров • 1 год назад

V8 today 🤍
0:17

V8 today 🤍

쿱정원

58,663 просмотров • 1 месяц назад

scoups got picked by v8 among svt members who had a lot of fight episodes 😂 1. seungkwan 2. hoshi 3. scoups but v8 said scoups used to nag a lot but he also had a lot of fight episodes as well 😁
0:18

scoups got picked by v8 among svt members who had a lot of fight episodes 😂 1. seungkwan 2. hoshi 3. scoups but v8 said scoups used to nag a lot but he also had a lot of fight episodes as well 😁

✩

30,556 просмотров • 2 месяцев назад

Happy Holidays from The Sandbox 🎁 Thanks for being part of the journey and helping shape The Sandbox 💛
0:10

Happy Holidays from The Sandbox 🎁 Thanks for being part of the journey and helping shape The Sandbox 💛

The Sandbox

10,213 просмотров • 8 месяцев назад

vernon at the v8 listening party! #VERNON #버논 #V8
0:15

vernon at the v8 listening party! #VERNON #버논 #V8

🎧

186,780 просмотров • 2 месяцев назад

almost a year ago since the members joined howoo on stage and now on V8 too 🥹🤍 hxw warning in seoul (july 13 ’25) v8 live in goyang (july 12 ’26)
0:18

almost a year ago since the members joined howoo on stage and now on V8 too 🥹🤍 hxw warning in seoul (july 13 ’25) v8 live in goyang (july 12 ’26)

⚔︎

51,481 просмотров • 1 месяц назад

🌐 Enter Lens Legacy in The Sandbox, an NFT gallery designed by and Metatheory. Step into a world of rare NFTs and explore the metaverse like never before! 🎨✨ seed.photo The Sandbox Metatheory Studio @cashclickapp #SeedPhoto #Sandbox #Metatheory #NFT #Metaverse
0:18

🌐 Enter Lens Legacy in The Sandbox, an NFT gallery designed by and Metatheory. Step into a world of rare NFTs and explore the metaverse like never before! 🎨✨ seed.photo The Sandbox Metatheory Studio @cashclickapp #SeedPhoto #Sandbox #Metatheory #NFT #Metaverse

seed.photo

41,260 просмотров • 1 год назад

Signal's Contact Discovery automatically sends your contact list information to an SGX enclave in the cloud. V12 broke into that enclave and leaked the key, allowing the server host to decrypt everything. Two separate critical bugs: arbitrary read and RCE. Here's how. 🧵
0:17

Signal's Contact Discovery automatically sends your contact list information to an SGX enclave in the cloud. V12 broke into that enclave and leaked the key, allowing the server host to decrypt everything. Two separate critical bugs: arbitrary read and RCE. Here's how. 🧵

V12

128,899 просмотров • 5 дней назад

wonwoo, dk, and dino at v8’s concert in goyang today!
0:14

wonwoo, dk, and dino at v8’s concert in goyang today!

🎮

26,030 просмотров • 1 месяц назад