Video wird geladen...

Video konnte nicht geladen werden

Beim Laden dieses Videos ist ein Problem aufgetreten. Dies könnte an einem vorübergehenden Netzwerkproblem liegen oder das Video ist möglicherweise nicht verfügbar.

Someone found this vulnerability in tiktok TikTok Security Vulnerability Report - Username Change Exploit by Sj Almayahi

./Mr-Dark

5,172 subscribers

357,970 Aufrufe • vor 2 Jahren •via X (Twitter)

Nachrichten & Politik Wissenschaft & Technologie

Anya Rossi• Live Now

Private livecam show

10 Kommentare

Profilbild von iLLu

iLLuvor 2 Jahren

man, actually you discovered api, congrats

Profilbild von ./Mr-Dark

./Mr-Darkvor 2 Jahren

Thank you ☺️❤🤝🏻

Profilbild von Borz

Borzvor 2 Jahren

Mate, you're just using the session ID to rename your profile username.

Profilbild von ./Mr-Dark

./Mr-Darkvor 2 Jahren

What if someone else obtains the session ID, is it classified as IDOR?

Profilbild von Idan Masas

Idan Masasvor 2 Jahren

thanks for wasting one minute of my life.

Profilbild von ./Mr-Dark

./Mr-Darkvor 2 Jahren

Thanks for your comment ☺️

Profilbild von Ibrahim Auwal

Ibrahim Auwalvor 2 Jahren

This is not a vulnerability I believe

Profilbild von ./Mr-Dark

./Mr-Darkvor 2 Jahren

He is just manipulating the account through the session ID

Profilbild von エリク

エリクvor 2 Jahren

Unless you can show how to steal the session ID with zero user interaction from the victim, I strongly believe this is not a vulnerability. But thanks for sharing though. Keep it up champ!~

Profilbild von ./Mr-Dark

./Mr-Darkvor 2 Jahren

It's just an idea ☺️♥

Ähnliche Videos

🚨CVE-2025-31161: Authentication Bypass Vulnerability in CrushFTP Credit: Exploit:

🚨CVE-2025-31161: Authentication Bypass Vulnerability in CrushFTP Credit: Exploit:

Dark Web Informer

36,563 Aufrufe • vor 1 Jahr

[🎬] HONGJOONG TikTok Radio Interview . "I can’t get ENOuGH of this song 🎶" "HONGJOONG’s vulnerability is admirable 😭🫂" #ATEEZ #에이티즈 #HONGJOONG ATEEZ(에이티즈)

[🎬] HONGJOONG TikTok Radio Interview . "I can’t get ENOuGH of this song 🎶" "HONGJOONG’s vulnerability is admirable 😭🫂" #ATEEZ #에이티즈 #HONGJOONG ATEEZ(에이티즈)

ATEEZ(에이티즈) Updates

11,392 Aufrufe • vor 7 Tagen

Twitter : Piiaxxar TikTok username in video #tiktok #tiktoklive

Twitter : Piiaxxar TikTok username in video #tiktok #tiktoklive

cockstreamers ( 41.2k )

26,144 Aufrufe • vor 1 Monat

Remember the vulnerability in CryptoAPI which could result in an attacker masquerading as a legitimate entity? Akamai researchers analyzed it and have found a way to exploit it. See the write-up here:

Remember the vulnerability in CryptoAPI which could result in an attacker masquerading as a legitimate entity? Akamai researchers analyzed it and have found a way to exploit it. See the write-up here:

Akamai Security Intelligence Group

88,442 Aufrufe • vor 3 Jahren

Here is ENLBufferPwn (CVE ID pending), a severe vulnerability in many first party 3DS, Wii U and Switch games. It allows remote code execution in a victim console by just having an online game session with an attacker. Vulnerability report: 🧵(1/7)

Here is ENLBufferPwn (CVE ID pending), a severe vulnerability in many first party 3DS, Wii U and Switch games. It allows remote code execution in a victim console by just having an online game session with an attacker. Vulnerability report: 🧵(1/7)

PabloMK7

591,174 Aufrufe • vor 3 Jahren

found this by scrolling on tiktok

Sensitive content

found this by scrolling on tiktok

Jim🆗

184,046 Aufrufe • vor 1 Monat

Found this in tiktok

Sensitive content

Found this in tiktok

G_Thinkers

45,361 Aufrufe • vor 2 Monaten

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability Check out the new security vulnerability I discovered in Windows, which I believe is potentially being sold in the wild. (fixed patch tuesday) Blog post: PoC:

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability Check out the new security vulnerability I discovered in Windows, which I believe is potentially being sold in the wild. (fixed patch tuesday) Blog post: PoC:

0x6rss

45,855 Aufrufe • vor 1 Jahr

Demo of using #BlueDucky to exploit 0-click Bluetooth vulnerability of targeted Android smartphone (CVE-2023-45866) Executed by Raspberry Pi 4 and Android running #NetHunter

Demo of using #BlueDucky to exploit 0-click Bluetooth vulnerability of targeted Android smartphone (CVE-2023-45866) Executed by Raspberry Pi 4 and Android running #NetHunter

Mobile Hacker

129,830 Aufrufe • vor 2 Jahren

I had a lot of fun working on this research! * Unauthenticated RCE? ✅ * Overlooked attack vector in Kubernetes? ✅ * Nginx quirks? ✅ * Stable & reliable exploit? ✅ Check out the thread for details about the vulnerability we found in Ingress Nginx Controller 👇

I had a lot of fun working on this research! * Unauthenticated RCE? ✅ * Overlooked attack vector in Kubernetes? ✅ * Nginx quirks? ✅ * Stable & reliable exploit? ✅ Check out the thread for details about the vulnerability we found in Ingress Nginx Controller 👇

sagitz

14,595 Aufrufe • vor 1 Jahr

Coldcard users please be warned about this serious security vulnerability - quick video explainer with a practical mitigation step

Coldcard users please be warned about this serious security vulnerability - quick video explainer with a practical mitigation step

Stephan Livera

27,378 Aufrufe • vor 2 Monaten

Introducing a new way to control how vulnerability scanning tasks are done in the Hacktron CLI. When you give a security audit task to Hacktron in an interactive session, it enters deep vulnerability research mode. Hacktron automatically identifies and utilises the most suitable agents to perform the task. You can now customise this vulnerability scanning plan by editing both known patterns and AI-suggested ones. Happy holidays, and have fun hacking!

Introducing a new way to control how vulnerability scanning tasks are done in the Hacktron CLI. When you give a security audit task to Hacktron in an interactive session, it enters deep vulnerability research mode. Hacktron automatically identifies and utilises the most suitable agents to perform the task. You can now customise this vulnerability scanning plan by editing both known patterns and AI-suggested ones. Happy holidays, and have fun hacking!

Hacktron AI

16,464 Aufrufe • vor 9 Monaten

i also love their intimacy in this scene. kou’s honesty and vulnerability, and futaba’s concern of what happened to him that made him change.

i also love their intimacy in this scene. kou’s honesty and vulnerability, and futaba’s concern of what happened to him that made him change.

chels 🪻

22,320 Aufrufe • vor 10 Monaten

"Security by obscurity is going to zero rapidly." James O'Beirne and other researchers independently reproduced the COLDCARD vulnerability by pointing an AI model at the firmware history. This is the new reality for open-source security.

"Security by obscurity is going to zero rapidly." James O'Beirne and other researchers independently reproduced the COLDCARD vulnerability by pointing an AI model at the firmware history. This is the new reality for open-source security.

TFTC

13,879 Aufrufe • vor 2 Monaten

The vulnerability in this scene is what makes it unforgettable 🏳️‍🌈

The vulnerability in this scene is what makes it unforgettable 🏳️‍🌈

Debbie

39,287 Aufrufe • vor 4 Monaten

CVE-2023-22518 - Improper Authorization Vulnerability In Confluence Data Center and Server Don’t use and never use this vulnerability lightly,because it is a master of data cleaning

CVE-2023-22518 - Improper Authorization Vulnerability In Confluence Data Center and Server Don’t use and never use this vulnerability lightly,because it is a master of data cleaning

ShimizuKawasaki

97,753 Aufrufe • vor 2 Jahren

Early this week, we had a meeting at Apple Park in Cupertino. While there, we also shared with Apple our latest vulnerability research report: the first public macOS kernel memory corruption exploit on M5 silicon, surviving MIE. It was laser printed, in honor of our hacker friends. Full story:

Early this week, we had a meeting at Apple Park in Cupertino. While there, we also shared with Apple our latest vulnerability research report: the first public macOS kernel memory corruption exploit on M5 silicon, surviving MIE. It was laser printed, in honor of our hacker friends. Full story:

Calif

126,406 Aufrufe • vor 4 Monaten