Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

Someone found this vulnerability in tiktok TikTok Security Vulnerability Report - Username Change Exploit by Sj Almayahi

Mr_Dark55's profile picture

./Mr-Dark

5,210 subscribers

357,800 görüntüleme • 2 yıl önce •via X (Twitter)

Haberler & PolitikaBilim & Teknoloji
LIVE

Anya Rossi• Live Now

Private livecam show

10 Yorum

iLLu profil fotoğrafı
iLLu2 yıl önce

man, actually you discovered api, congrats

./Mr-Dark profil fotoğrafı
./Mr-Dark2 yıl önce

Thank you ☺️❤🤝🏻

Borz profil fotoğrafı
Borz2 yıl önce

Mate, you're just using the session ID to rename your profile username.

./Mr-Dark profil fotoğrafı
./Mr-Dark2 yıl önce

What if someone else obtains the session ID, is it classified as IDOR?

Idan Masas profil fotoğrafı
Idan Masas2 yıl önce

thanks for wasting one minute of my life.

./Mr-Dark profil fotoğrafı
./Mr-Dark2 yıl önce

Thanks for your comment ☺️

Ibrahim Auwal profil fotoğrafı
Ibrahim Auwal2 yıl önce

This is not a vulnerability I believe

./Mr-Dark profil fotoğrafı
./Mr-Dark2 yıl önce

He is just manipulating the account through the session ID

エリク profil fotoğrafı
エリク2 yıl önce

Unless you can show how to steal the session ID with zero user interaction from the victim, I strongly believe this is not a vulnerability. But thanks for sharing though. Keep it up champ!~

./Mr-Dark profil fotoğrafı
./Mr-Dark2 yıl önce

It's just an idea ☺️♥

Benzer Videolar

🚨CVE-2025-31161: Authentication Bypass Vulnerability in CrushFTP Credit: Exploit:
8:14

🚨CVE-2025-31161: Authentication Bypass Vulnerability in CrushFTP Credit: Exploit:

Dark Web Informer

36,563 görüntüleme • 1 yıl önce

someone found this on tiktok lmfao
1:00

someone found this on tiktok lmfao

jos

228,205 görüntüleme • 1 yıl önce

Remember the vulnerability in CryptoAPI which could result in an attacker masquerading as a legitimate entity? Akamai researchers analyzed it and have found a way to exploit it. See the write-up here:
0:27

Remember the vulnerability in CryptoAPI which could result in an attacker masquerading as a legitimate entity? Akamai researchers analyzed it and have found a way to exploit it. See the write-up here:

Akamai Security Intelligence Group

88,432 görüntüleme • 3 yıl önce

Here is ENLBufferPwn (CVE ID pending), a severe vulnerability in many first party 3DS, Wii U and Switch games. It allows remote code execution in a victim console by just having an online game session with an attacker. Vulnerability report: 🧵(1/7)
0:27

Here is ENLBufferPwn (CVE ID pending), a severe vulnerability in many first party 3DS, Wii U and Switch games. It allows remote code execution in a victim console by just having an online game session with an attacker. Vulnerability report: 🧵(1/7)

PabloMK7

590,905 görüntüleme • 3 yıl önce

Found this in tiktok
0:34

Sensitive content

Found this in tiktok

G_Thinkers

45,361 görüntüleme • 17 gün önce

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability Check out the new security vulnerability I discovered in Windows, which I believe is potentially being sold in the wild. (fixed patch tuesday) Blog post: PoC:
0:46

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability Check out the new security vulnerability I discovered in Windows, which I believe is potentially being sold in the wild. (fixed patch tuesday) Blog post: PoC:

0x6rss

45,855 görüntüleme • 1 yıl önce

Demo of using #BlueDucky to exploit 0-click Bluetooth vulnerability of targeted Android smartphone (CVE-2023-45866) Executed by Raspberry Pi 4 and Android running #NetHunter
0:46

Demo of using #BlueDucky to exploit 0-click Bluetooth vulnerability of targeted Android smartphone (CVE-2023-45866) Executed by Raspberry Pi 4 and Android running #NetHunter

Mobile Hacker

129,830 görüntüleme • 2 yıl önce

Coldcard users please be warned about this serious security vulnerability - quick video explainer with a practical mitigation step
1:58

Coldcard users please be warned about this serious security vulnerability - quick video explainer with a practical mitigation step

Stephan Livera

27,231 görüntüleme • 15 gün önce

Introducing a new way to control how vulnerability scanning tasks are done in the Hacktron CLI. When you give a security audit task to Hacktron in an interactive session, it enters deep vulnerability research mode. Hacktron automatically identifies and utilises the most suitable agents to perform the task. You can now customise this vulnerability scanning plan by editing both known patterns and AI-suggested ones. Happy holidays, and have fun hacking!
0:26

Introducing a new way to control how vulnerability scanning tasks are done in the Hacktron CLI. When you give a security audit task to Hacktron in an interactive session, it enters deep vulnerability research mode. Hacktron automatically identifies and utilises the most suitable agents to perform the task. You can now customise this vulnerability scanning plan by editing both known patterns and AI-suggested ones. Happy holidays, and have fun hacking!

Hacktron AI

16,464 görüntüleme • 7 ay önce

If a vulnerability could monologue after they are found by reverse engineer. Watch my full commentary on CVE at
1:19

If a vulnerability could monologue after they are found by reverse engineer. Watch my full commentary on CVE at

Ron Gula

19,334 görüntüleme • 1 yıl önce

i also love their intimacy in this scene. kou’s honesty and vulnerability, and futaba’s concern of what happened to him that made him change.
2:07

i also love their intimacy in this scene. kou’s honesty and vulnerability, and futaba’s concern of what happened to him that made him change.

chels 🪻

22,320 görüntüleme • 8 ay önce

"Security by obscurity is going to zero rapidly." James O'Beirne and other researchers independently reproduced the COLDCARD vulnerability by pointing an AI model at the firmware history. This is the new reality for open-source security.
1:28

"Security by obscurity is going to zero rapidly." James O'Beirne and other researchers independently reproduced the COLDCARD vulnerability by pointing an AI model at the firmware history. This is the new reality for open-source security.

TFTC

13,879 görüntüleme • 15 gün önce

The vulnerability in this scene is what makes it unforgettable 🏳️‍🌈
0:51

The vulnerability in this scene is what makes it unforgettable 🏳️‍🌈

Debbie

39,287 görüntüleme • 2 ay önce

Early this week, we had a meeting at Apple Park in Cupertino. While there, we also shared with Apple our latest vulnerability research report: the first public macOS kernel memory corruption exploit on M5 silicon, surviving MIE. It was laser printed, in honor of our hacker friends. Full story:
0:20

Early this week, we had a meeting at Apple Park in Cupertino. While there, we also shared with Apple our latest vulnerability research report: the first public macOS kernel memory corruption exploit on M5 silicon, surviving MIE. It was laser printed, in honor of our hacker friends. Full story:

Calif

125,263 görüntüleme • 3 ay önce

The vulnerability, the banter. This scene lives in my mind rent free.
1:05

The vulnerability, the banter. This scene lives in my mind rent free.

zosan loops

202,098 görüntüleme • 6 ay önce

CVE-2023-22518 - Improper Authorization Vulnerability In Confluence Data Center and Server Don’t use and never use this vulnerability lightly,because it is a master of data cleaning
1:13

CVE-2023-22518 - Improper Authorization Vulnerability In Confluence Data Center and Server Don’t use and never use this vulnerability lightly,because it is a master of data cleaning

ShimizuKawasaki

97,689 görüntüleme • 2 yıl önce

Libs of TikTok FBI Homeland Security Don’t worry, this bounty hunter found it back in July and It’s in the loony bin in California
0:34

Libs of TikTok FBI Homeland Security Don’t worry, this bounty hunter found it back in July and It’s in the loony bin in California

Nickel Bags of Freedom

43,952 görüntüleme • 10 ay önce

"A Vulnerability to Hack The World" - CVE-2023-4863 The start of a mini series digging into the recent WebP vulnerability. In this first episode, we explore huffman tables!
17:59

"A Vulnerability to Hack The World" - CVE-2023-4863 The start of a mini series digging into the recent WebP vulnerability. In this first episode, we explore huffman tables!

LiveOverflow 🔴

44,787 görüntüleme • 2 yıl önce