Loading video...

Video Failed to Load

Go Home

Today's exploit is again for the latest Ubuntu 26.04, a UAF in SCTP: CVE-2026-68162. It was introduced in Jan 2025 and fixed upstream in Jul 2026. Discovered and exploited by the NebuSec security pipeline. Exp source code:

nebusecurity's profile picture

NebuSec

7,218 subscribers

17,263 views • 1 month ago •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

Today's exploit is for the latest Fedora 44, a UAF in netfilter, CVE-2026-52912. It was introduced in Mar 2016 and fixed upstream in May 2026. Discovered and exploited by the NebuSec security pipeline. (RANDOM_KMALLOC_CACHES + SELinux) Exp source code:
0:13

Today's exploit is for the latest Fedora 44, a UAF in netfilter, CVE-2026-52912. It was introduced in Mar 2016 and fixed upstream in May 2026. Discovered and exploited by the NebuSec security pipeline. (RANDOM_KMALLOC_CACHES + SELinux) Exp source code:

NebuSec

12,030 views • 1 month ago

Today’s exploit is from a ipv6 UAF, introduced in Nov 2021, fixed on upstream in Aug 2026. Discovered and exploit by NebuSec security pipeline. Exploit in our GitHub:
0:13

Today’s exploit is from a ipv6 UAF, introduced in Nov 2021, fixed on upstream in Aug 2026. Discovered and exploit by NebuSec security pipeline. Exploit in our GitHub:

NebuSec

15,667 views • 1 month ago

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04
0:10

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04

V4bel

15,887 views • 1 year ago

☀️ Comet C/2026 A1, discovered in Jan. 2026, was engulfed by the Sun Man, it was just discovered...
0:10

☀️ Comet C/2026 A1, discovered in Jan. 2026, was engulfed by the Sun Man, it was just discovered...

Lord Bebo

14,209 views • 5 months ago

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ, exploiting the vm:// protocol to achieve Remote Code Execution
0:11

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ, exploiting the vm:// protocol to achieve Remote Code Execution

pyn3rd

21,018 views • 5 months ago

📞 Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk bronzebee Read the write-up:
0:10

📞 Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk bronzebee Read the write-up:

PT SWARM

34,626 views • 8 months ago

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm
0:14

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm

Carlos Vieira (lynx)

81,336 views • 1 year ago

reported a chrome fullchain (web -> shell) on pixel 10 to google. got a 9.6 cve (cve-2026-87464) and a fix in chrome. now they bend the rules and refuse to pay the fullchain bonus bc one of the vulns in the chain was an unpatched nday. total payout: $2.5k. despite cve + shell :|
0:19

reported a chrome fullchain (web -> shell) on pixel 10 to google. got a 9.6 cve (cve-2026-87464) and a fix in chrome. now they bend the rules and refuse to pay the fullchain bonus bc one of the vulns in the chain was an unpatched nday. total payout: $2.5k. despite cve + shell :|

lexi <img src=x onerror=alert(1)>

263,399 views • 6 days ago

Scarborough Reef has seen a sharp spike in China Coast Guard activity throughout 2026, surpassing the record levels set in 2025. In just the first half of 2026, 933 patrol days were observed — nearly matching the full 2025 total of 1,099, which was double the presence logged in 2024. Visit and drag through the timeline to compare the month‑by‑month escalation in 2025 and 2026.
0:18

Scarborough Reef has seen a sharp spike in China Coast Guard activity throughout 2026, surpassing the record levels set in 2025. In just the first half of 2026, 933 patrol days were observed — nearly matching the full 2025 total of 1,099, which was double the presence logged in 2024. Visit and drag through the timeline to compare the month‑by‑month escalation in 2025 and 2026.

Indo-Pacific Defense FORUM

2,564,192 views • 1 month ago

For those keeping score in the home game, the Trump administration, when asked "when will the economy start booming" has gone from: -End of April 2025! -End of Q3 (in government terms because this was Bessent, July 2025) -By EOY (which in government terms is October 2025) -By the end of Q2, 2026 (which is March this year) -By the summer of 2026! -Shortly after the midterm elections! -Now "next year" (which in Trump terms is 2027) Don't worry, MAGA, you totally aren't in a fell for it again trap and you won't be hearing "whomever replaces me in 2029 will reap the boom that's coming!"
0:11

For those keeping score in the home game, the Trump administration, when asked "when will the economy start booming" has gone from: -End of April 2025! -End of Q3 (in government terms because this was Bessent, July 2025) -By EOY (which in government terms is October 2025) -By the end of Q2, 2026 (which is March this year) -By the summer of 2026! -Shortly after the midterm elections! -Now "next year" (which in Trump terms is 2027) Don't worry, MAGA, you totally aren't in a fell for it again trap and you won't be hearing "whomever replaces me in 2029 will reap the boom that's coming!"

BonkDaCarnivore

134,259 views • 7 months ago

Quick and nostalgic look of our work in 2025. See you all in 2026: the year of open-source reasoning.
0:13

Quick and nostalgic look of our work in 2025. See you all in 2026: the year of open-source reasoning.

Sentient

87,019 views • 9 months ago

Mike Johnson: "2025 was setting the table. 2026 is gonna be the feast and the banquet in the economy."
0:19

Mike Johnson: "2025 was setting the table. 2026 is gonna be the feast and the banquet in the economy."

Aaron Rupar

49,515 views • 7 months ago

Found a heap overflow vulnerability in Windows SMB that leads to RCE and reported it to MSRC in June. The vulnerability has now been addressed with CVE-2026-62800 in the August Patch Tuesday updates.
0:19

Found a heap overflow vulnerability in Windows SMB that leads to RCE and reported it to MSRC in June. The vulnerability has now been addressed with CVE-2026-62800 in the August Patch Tuesday updates.

nafiez

31,458 views • 1 month ago

GIANT PIPELINE FIRE: A pipeline in the Houston area is burning next to homes and stores, prompting evacuations. Here is the latest info:
0:17

GIANT PIPELINE FIRE: A pipeline in the Houston area is burning next to homes and stores, prompting evacuations. Here is the latest info:

WFAA

26,356 views • 2 years ago

Exim 4.99.3 is out, patching CVE-2026-45185, a critical RCE found by XBOW! Check out our post linked in the reply; I'll summarize some details in this thread.
0:14

Exim 4.99.3 is out, patching CVE-2026-45185, a critical RCE found by XBOW! Check out our post linked in the reply; I'll summarize some details in this thread.

Brendan Dolan-Gavitt

33,705 views • 4 months ago

GhostLock (CVE-2026-43499) is a 15yr old kernel 0-day we used in IonStack full chain exploit. Everything around you, as long as it runs Linux, from IoT to mobile to desktop, is affected. Read how we won $92,337 bug bounty with GhostLock and see our exploit on Github. Link below
0:16

GhostLock (CVE-2026-43499) is a 15yr old kernel 0-day we used in IonStack full chain exploit. Everything around you, as long as it runs Linux, from IoT to mobile to desktop, is affected. Read how we won $92,337 bug bounty with GhostLock and see our exploit on Github. Link below

NebuSec

149,831 views • 2 months ago

DO NOT SELL UNLESS YOU HAVE SOMETHING VERY IMMEDIATE TO DO WITH THE FUNDS 😭 Regret in an "everything is going up" market stings a little 📈 2022 ONE PIECE P-001 MONKEY D. LUFFY PROMOTION PACK PSA 10 Pre-Errata Only TWO listed right now for $1500 and $2200 😳 Picked up at Comic Con NYC in 2022 for participating in a tutorial game session on the show floor. I can attest to the line being EXTRMELY long and supply did NOT last. This was when the game wasn't anywhere near peak attention. Rarity + exclusivity... 💯 Artwork... I'm on the fence (ICONIC, but I just can't get into the oversized head portion of the hat style) BUT... 205 PSA graded (screenshot) Here are the 13 historical eBay sales: Jul 12, 2026: $1,499.00 Jul 11, 2026: $900.00 Jul 11, 2026: $699.00 Jul 11, 2026: $702.31 Jul 9, 2026: $750.00 Jul 6, 2026: $489.00 Jul 6, 2026: $479.00 Jul 5, 2026: $400.00 Jun 4, 2026: $167.50 Jun 3, 2026: $399.00 May 14, 2026: $250.00 (This was actually me) Apr 21, 2026: $150.00 Apr 16, 2026: $169.99 I let one go for $250 while I was ramping up some funds for theCardWall. Honestly, if there were more copies out there... they would be flooding the eBay floor at this price appreciation / velocity. Something to keep an eye on for sure... 🫡
0:19

DO NOT SELL UNLESS YOU HAVE SOMETHING VERY IMMEDIATE TO DO WITH THE FUNDS 😭 Regret in an "everything is going up" market stings a little 📈 2022 ONE PIECE P-001 MONKEY D. LUFFY PROMOTION PACK PSA 10 Pre-Errata Only TWO listed right now for $1500 and $2200 😳 Picked up at Comic Con NYC in 2022 for participating in a tutorial game session on the show floor. I can attest to the line being EXTRMELY long and supply did NOT last. This was when the game wasn't anywhere near peak attention. Rarity + exclusivity... 💯 Artwork... I'm on the fence (ICONIC, but I just can't get into the oversized head portion of the hat style) BUT... 205 PSA graded (screenshot) Here are the 13 historical eBay sales: Jul 12, 2026: $1,499.00 Jul 11, 2026: $900.00 Jul 11, 2026: $699.00 Jul 11, 2026: $702.31 Jul 9, 2026: $750.00 Jul 6, 2026: $489.00 Jul 6, 2026: $479.00 Jul 5, 2026: $400.00 Jun 4, 2026: $167.50 Jun 3, 2026: $399.00 May 14, 2026: $250.00 (This was actually me) Apr 21, 2026: $150.00 Apr 16, 2026: $169.99 I let one go for $250 while I was ramping up some funds for theCardWall. Honestly, if there were more copies out there... they would be flooding the eBay floor at this price appreciation / velocity. Something to keep an eye on for sure... 🫡

Point📍

50,700 views • 2 months ago

Despite being released in 2025, Do It EP by Stray Kids is the 5th Best selling K-Pop album in the US in 2026 so far.
0:19

Despite being released in 2025, Do It EP by Stray Kids is the 5th Best selling K-Pop album in the US in 2026 so far.

SKZ Crave 🏁

39,047 views • 4 months ago