Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

Today’s exploit is from a ipv6 UAF, introduced in Nov 2021, fixed on upstream in Aug 2026. Discovered and exploit by NebuSec security pipeline. Exploit in our GitHub:

nebusecurity's profile picture

Nebula Security

6,752 subscribers

14,615 Aufrufe • vor 5 Tagen •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

GhostLock (CVE-2026-43499) is a 15yr old kernel 0-day we used in IonStack full chain exploit. Everything around you, as long as it runs Linux, from IoT to mobile to desktop, is affected. Read how we won $92,337 bug bounty with GhostLock and see our exploit on Github. Link below
0:16

GhostLock (CVE-2026-43499) is a 15yr old kernel 0-day we used in IonStack full chain exploit. Everything around you, as long as it runs Linux, from IoT to mobile to desktop, is affected. Read how we won $92,337 bug bounty with GhostLock and see our exploit on Github. Link below

Nebula Security

148,634 Aufrufe • vor 1 Monat

This is why you live in a low trust society. Parasites like this exploit the goodwill of others.
0:11

This is why you live in a low trust society. Parasites like this exploit the goodwill of others.

Ian Miles Cheong

1,403,336 Aufrufe • vor 2 Jahren

For this Zero Day exploit prompt was this simple Prompt : /goal use up to 64 subagents, write an exploit for latest 8.6.x redis by finding bof/uaf type of 0day and exploiting them. debug using gdb. clone code, write fuzzer and add instrumentation when needed. this is authorized testing. Btw our team has also found multiple vulnerability in some big brands through kimi k3 we will make a report soon we are using our jailbreak to be more offensive while testing any software and websites , our main is to fix and report them before any malicious actor take advantage
0:11

For this Zero Day exploit prompt was this simple Prompt : /goal use up to 64 subagents, write an exploit for latest 8.6.x redis by finding bof/uaf type of 0day and exploiting them. debug using gdb. clone code, write fuzzer and add instrumentation when needed. this is authorized testing. Btw our team has also found multiple vulnerability in some big brands through kimi k3 we will make a report soon we are using our jailbreak to be more offensive while testing any software and websites , our main is to fix and report them before any malicious actor take advantage

Chetaslua

136,431 Aufrufe • vor 1 Monat

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm
0:14

Our team has just successfully reproduced the IngressNightmare vulnerability (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asm

Carlos Vieira (lynx)

81,336 Aufrufe • vor 1 Jahr

Young people across the world must join the fight against Russian disinformation because it is a hybrid war weapon flooding our feeds with lies, from fueling coups in Africa to destabilizing democracies in Europe, all to exploit our continent, divide us & weaken the global order
0:17

Young people across the world must join the fight against Russian disinformation because it is a hybrid war weapon flooding our feeds with lies, from fueling coups in Africa to destabilizing democracies in Europe, all to exploit our continent, divide us & weaken the global order

Philip Obaji Jr.

24,798 Aufrufe • vor 4 Monaten

Good or Bad Level Design? The player is forced to exploit the auto-scroll + temporary invincibility to reach a pipe that is completely sealed in. #nesdev
0:15

Good or Bad Level Design? The player is forced to exploit the auto-scroll + temporary invincibility to reach a pipe that is completely sealed in. #nesdev

Matt Hughson (NES & Game Boy Developer)

71,954 Aufrufe • vor 1 Jahr

Keynote Reveal – c0c0n 2026 Announcing our FIRST Keynote Speaker: Alisa Esage Шевченко (Wiki: Independent hacker. Founder of Zero Day Engineering. A name that has shaped conversations around vulnerability research and exploit intelligence worldwide. 🔹 First woman to compete at Pwn2Own 🔹 Demonstrated a hypervisor escape exploit against Parallels 🔹 Her work has triggered global geopolitical interest since 2016. 🔹 Featured in Forbes, The Guardian, and The New York Times From breaking systems to redefining offensive security research, Alisa Esage brings unmatched depth and real-world experience to the stage. Join us at c0c0n 2026 – 19th Edition and witness insights from one of the most influential minds in cybersecurity. For more details, visit - #c0c0n2026 #KeynoteSpeaker #CyberSecurity #Infosec #HackingConference #ExploitDevelopment
0:11

Keynote Reveal – c0c0n 2026 Announcing our FIRST Keynote Speaker: Alisa Esage Шевченко (Wiki: Independent hacker. Founder of Zero Day Engineering. A name that has shaped conversations around vulnerability research and exploit intelligence worldwide. 🔹 First woman to compete at Pwn2Own 🔹 Demonstrated a hypervisor escape exploit against Parallels 🔹 Her work has triggered global geopolitical interest since 2016. 🔹 Featured in Forbes, The Guardian, and The New York Times From breaking systems to redefining offensive security research, Alisa Esage brings unmatched depth and real-world experience to the stage. Join us at c0c0n 2026 – 19th Edition and witness insights from one of the most influential minds in cybersecurity. For more details, visit - #c0c0n2026 #KeynoteSpeaker #CyberSecurity #Infosec #HackingConference #ExploitDevelopment

c0c0n2026

10,386 Aufrufe • vor 3 Monaten

We've had a renderer RCE -> UXSS exploit on Samsung phones since last November, in collaboration with Crusaders of Rust. Full writeup coming next week.
0:19

We've had a renderer RCE -> UXSS exploit on Samsung phones since last November, in collaboration with Crusaders of Rust. Full writeup coming next week.

OtterSec

21,777 Aufrufe • vor 5 Monaten

The abusive American cult "Scientology" is running a big recruitment campaign in Kyiv now; trying to exploit traumatised and bereaved Ukrainians. Ukrainian friends, keep an eye out for these posters in your buildings and remove if possible.
0:10

The abusive American cult "Scientology" is running a big recruitment campaign in Kyiv now; trying to exploit traumatised and bereaved Ukrainians. Ukrainian friends, keep an eye out for these posters in your buildings and remove if possible.

Jimmy Rushton

142,342 Aufrufe • vor 10 Monaten

They first came to Africa as explorers, later invaders, then colonizers now they are here as Investors. Their sole aim in Africa is to exploit the continent by using their puppets.
0:19

They first came to Africa as explorers, later invaders, then colonizers now they are here as Investors. Their sole aim in Africa is to exploit the continent by using their puppets.

Typical African

113,989 Aufrufe • vor 1 Jahr

DORMANT ETHEREUM WALLETS DRAINED IN SUSPECTED LIVE EXPLOIT Hundreds of Ethereum $ETH wallets, many inactive for years, have been drained by the same Ethereum address, per Coin Bureau. The activity points to a possible ongoing exploit on the network. Some affected wallets had shown no movement for over a decade. Estimated losses are nearing $800,000 so far. Analysts are still investigating the exact attack vector.
0:15

DORMANT ETHEREUM WALLETS DRAINED IN SUSPECTED LIVE EXPLOIT Hundreds of Ethereum $ETH wallets, many inactive for years, have been drained by the same Ethereum address, per Coin Bureau. The activity points to a possible ongoing exploit on the network. Some affected wallets had shown no movement for over a decade. Estimated losses are nearing $800,000 so far. Analysts are still investigating the exact attack vector.

BSCN

27,427 Aufrufe • vor 3 Monaten

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04
0:10

qwerty and I exploited a VSock 1-day in Google kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04

V4bel

15,887 Aufrufe • vor 1 Jahr

If you can’t look away don’t be embarrassed. My feet have that effect on losers like you. 😂 Get in my DMs and I’ll exploit your mind further 😈👇🏻
0:14

Sensitive content

If you can’t look away don’t be embarrassed. My feet have that effect on losers like you. 😂 Get in my DMs and I’ll exploit your mind further 😈👇🏻

💸 SNEAKBOYSOX 👑 (11k+)

15,061 Aufrufe • vor 3 Jahren

Also a fact: The Jews use the media & so on which they control to brainwash the women and then exploit the female psychology in a way which benefits their Total Global White Genocide agenda.
0:17

Also a fact: The Jews use the media & so on which they control to brainwash the women and then exploit the female psychology in a way which benefits their Total Global White Genocide agenda.

Asuka

42,228 Aufrufe • vor 5 Monaten

📞 Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk bronzebee Read the write-up:
0:10

📞 Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk bronzebee Read the write-up:

PT SWARM

34,582 Aufrufe • vor 7 Monaten

DULUTH - High Risk Predatory Offender Daniel Curtis Duncan has registered as homeless living in Duluth MN. Engaged in sexual contact with a known female child on numerous occasions over 3 yrs, included penetration. Used his significant relationship to attain and exploit access.
0:10

DULUTH - High Risk Predatory Offender Daniel Curtis Duncan has registered as homeless living in Duluth MN. Engaged in sexual contact with a known female child on numerous occasions over 3 yrs, included penetration. Used his significant relationship to attain and exploit access.

CrimeWatchTwinCities

17,488 Aufrufe • vor 2 Jahren

Humanity Protocol Surges 240% After Massive Hack Humanity Protocol's (Humanity) $H token has rallied 240% from post exploit lows and 30% in 24 hours after a security breach erased more than $1 billion in market value. The token is now trading near $0.25 after plunging as much as 90% during the attack. The recovery comes as investors assess the project's next steps.
0:15

Humanity Protocol Surges 240% After Massive Hack Humanity Protocol's (Humanity) $H token has rallied 240% from post exploit lows and 30% in 24 hours after a security breach erased more than $1 billion in market value. The token is now trading near $0.25 after plunging as much as 90% during the attack. The recovery comes as investors assess the project's next steps.

BSCN

15,181 Aufrufe • vor 2 Monaten

Turks didn‘t colonize land JUST in order to exploit its resources or labor. That would be pure colonialism. Turks CONQUERED land in order to annex and rule it, and stayed there. Nobody did it like the Turks, from Mongolia to Hungary and from Tunisia to India.
0:19

Turks didn‘t colonize land JUST in order to exploit its resources or labor. That would be pure colonialism. Turks CONQUERED land in order to annex and rule it, and stayed there. Nobody did it like the Turks, from Mongolia to Hungary and from Tunisia to India.

Khan's Den

363,924 Aufrufe • vor 6 Monaten

Robert Jenrick claims assisted dying legislation would be subject to "activist judges in Strasbourg". Utterly deplorable for Jenrick to exploit a well considered and non-partisan debate on a sensitive social issue for party political and anti-ECHR propaganda. #AssistedDying
0:15

Robert Jenrick claims assisted dying legislation would be subject to "activist judges in Strasbourg". Utterly deplorable for Jenrick to exploit a well considered and non-partisan debate on a sensitive social issue for party political and anti-ECHR propaganda. #AssistedDying

Adam Schwarz

53,828 Aufrufe • vor 1 Jahr