正在加载视频...

视频加载失败

加载此视频时出现问题。这可能是由于临时网络问题，或视频可能不可用。

⚠️ Update for CVE-2024-21413 💣 Managed & confirmed Microsoft Outlook Remote Code Execution (RCE) but won't publish details (yet).

Alex

3,183 subscribers

175,891 次观看 • 2 年前 •via X (Twitter)

新闻政治教育科学技术

Anya Rossi• Live Now

Private livecam show

10 条评论

Alex 的头像

Alex2 年前

Given that I don't see myself as particularly intelligent and yet managed to achieve this, it stands to reason that more skilled individuals are surely on the brink of similar discoveries. This suggests that Microsoft may need to revise their security advisories shortly.

John Hammond 的头像

John Hammond2 年前

NICE!!!

Dex604 的头像

Dex6042 年前

🤔 I don't it... Didn't you already published a PoC on Github ?

Alex 的头像

Alex2 年前

Without the RCE, yes.

Kristiyan Boykov 的头像

Kristiyan Boykov2 年前

I can only imagine the impact... q.q

︎ ︎ 的头像

︎ ︎2 年前

@HaifeiLi

vT15” 的头像

vT15”2 年前

Congrats 🎉

Pj 的头像

Pj2 年前

Single click takeover?

Alex 的头像

Alex2 年前

NTLM Leak can be 0-click (thx @johntroony) - will update the repo tonight.

H4cker 的头像

H4cker2 年前

W0W congratulations 🎊

相关视频

🚨CVE-2024-21413 - Microsoft Outlook Remote Code Execution Vulnerability PoC (no audio) Credit:

🚨CVE-2024-21413 - Microsoft Outlook Remote Code Execution Vulnerability PoC (no audio) Credit:

Dark Web Informer

69,145 次观看 • 1 年前

CVE-2024-29269: Remote Code Execution PoC Credit:

CVE-2024-29269: Remote Code Execution PoC Credit:

Dark Web Informer

69,755 次观看 • 1 年前

CVE-2023-23397 Exploiting CVE-2023-23397: Microsoft Outlook Elevation of Privilege Vulnerability. Details: #infosec #CyberSecurity #Pentesting #redteam

CVE-2023-23397 Exploiting CVE-2023-23397: Microsoft Outlook Elevation of Privilege Vulnerability. Details: #infosec #CyberSecurity #Pentesting #redteam

HackGit

39,726 次观看 • 3 年前

🚨CVE-2025-26666: Windows Media Remote Code Execution Vulnerability Credit:

🚨CVE-2025-26666: Windows Media Remote Code Execution Vulnerability Credit:

Dark Web Informer

13,379 次观看 • 1 年前

💥 Remote Code Execution in GitHub Copilot (CVE-2025-53773) 👉 Prompt injection exploit writes to Copilot config file and puts it into YOLO mode, then we get immediate RCE 🔥 Bypasses all user approvals 🛡️ Patch is out today. Update before someone else does it for you

💥 Remote Code Execution in GitHub Copilot (CVE-2025-53773) 👉 Prompt injection exploit writes to Copilot config file and puts it into YOLO mode, then we get immediate RCE 🔥 Bypasses all user approvals 🛡️ Patch is out today. Update before someone else does it for you

Johann Rehberger

117,494 次观看 • 10 个月前

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:

🚨CVE-2023-20198: Remote Code Execution via File Upload Vulnerability | $15,000 Bounty | PoC Credit:

Dark Web Informer

22,486 次观看 • 1 年前

POC for CVE-2024-38063 (RCE in Windows TCP/IP) :

POC for CVE-2024-38063 (RCE in Windows TCP/IP) :

Binni Shah

39,456 次观看 • 1 年前

🚨PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE

🚨PoC for CVE-2024-46538 PfSense Stored XSS lead to RCE

Dark Web Informer

64,295 次观看 • 1 年前

CVE-2026-20841-POC REMOTE CODE EXECUTION VULNERABILITY IN NOTEPAD VERSION 11 Mr Phil Ghana 🇬🇭 Nana Sei Anyemedu

CVE-2026-20841-POC REMOTE CODE EXECUTION VULNERABILITY IN NOTEPAD VERSION 11 Mr Phil Ghana 🇬🇭 Nana Sei Anyemedu

H4RUK7 KIRA 🇯🇵🇨🇵

20,829 次观看 • 3 个月前

🚨PoC for SysAid PreAuth RCE Chain (CVE-2025-2775, CVE-2025-2776, CVE-2025-2777, CVE-2025-2778) GitHub: Write-up:

🚨PoC for SysAid PreAuth RCE Chain (CVE-2025-2775, CVE-2025-2776, CVE-2025-2777, CVE-2025-2778) GitHub: Write-up:

Dark Web Informer

18,120 次观看 • 7 个月前

🚨 CVE-2025-6389: WordPress Sneeit Framework plugin vulnerability currently under active exploitation PoC: ▪️Vulnerability Type: Remote Code Execution (RCE) ▪️CVSS: 9.8 ▪️Published: 11/24/2025 Impact: ▪️Full site compromise ▪️Create admin accounts ▪️Install backdoors/malicious files ▪️Redirect visitors or inject malware Credit:

🚨 CVE-2025-6389: WordPress Sneeit Framework plugin vulnerability currently under active exploitation PoC: ▪️Vulnerability Type: Remote Code Execution (RCE) ▪️CVSS: 9.8 ▪️Published: 11/24/2025 Impact: ▪️Full site compromise ▪️Create admin accounts ▪️Install backdoors/malicious files ▪️Redirect visitors or inject malware Credit:

Dark Web Informer

16,001 次观看 • 5 个月前

🤬CVE-2025-49113: Post‑Auth Remote Code Execution in Roundcube via PHP Object Deserialization FOFA Link: FOFA Query: app="roundcube" Results: 51,584,735 Advisory: CVSS: 9.9

🤬CVE-2025-49113: Post‑Auth Remote Code Execution in Roundcube via PHP Object Deserialization FOFA Link: FOFA Query: app="roundcube" Results: 51,584,735 Advisory: CVSS: 9.9

X

14,948 次观看 • 11 个月前

⚠️ We've confirmed critical CVE-2024-45519 in Zimbra! SMTP-based vulnerability in postjournal service allows unauthenticated attackers to inject commands under zimbra user. ✅ Update your software ASAP to avoid exploitation!

⚠️ We've confirmed critical CVE-2024-45519 in Zimbra! SMTP-based vulnerability in postjournal service allows unauthenticated attackers to inject commands under zimbra user. ✅ Update your software ASAP to avoid exploitation!

PT SWARM

84,265 次观看 • 1 年前

RCEliteLLM - Chaining an Environment Variable Leak with Jinja2 SSTI for Remote Code Execution

RCEliteLLM - Chaining an Environment Variable Leak with Jinja2 SSTI for Remote Code Execution

McCaulay

11,844 次观看 • 29 天前

CVE 2020-14882: WebLogic Server Unauthenticated RCE via GET request Credit:

CVE 2020-14882: WebLogic Server Unauthenticated RCE via GET request Credit:

Dark Web Informer - Cyber Threat Intelligence

13,926 次观看 • 1 年前

🚨POC RELEASED🚨PoC for SQL Injection leads to RCE in Wordpress released (CVE-2024-27956). #Clearnet #DarkWebInformer #DarkWeb #Exploit #Cyberattack #Cybercrime #Wordpress #Infosec #CTI #CVE202427956 #Vulnerability

🚨POC RELEASED🚨PoC for SQL Injection leads to RCE in Wordpress released (CVE-2024-27956). #Clearnet #DarkWebInformer #DarkWeb #Exploit #Cyberattack #Cybercrime #Wordpress #Infosec #CTI #CVE202427956 #Vulnerability

Dark Web Informer

51,329 次观看 • 2 年前

🚨CVE-2025-3776: Full WordPress Takeover Without Login (Critical RCE Exploit) Credit:

🚨CVE-2025-3776: Full WordPress Takeover Without Login (Critical RCE Exploit) Credit:

Dark Web Informer

79,747 次观看 • 1 年前

CVE-2023-23397 Simple and dirty PoC of the CVE-2023-23397 vulnerability impacting the Outlook thick client. #CVE #cybersecurity #infosec

CVE-2023-23397 Simple and dirty PoC of the CVE-2023-23397 vulnerability impacting the Outlook thick client. #CVE #cybersecurity #infosec

HackGit

76,809 次观看 • 3 年前

🚨PoC CVE-2025-32433: Critical Erlang/OTP SSH RCE Vulnerability Credit:

🚨PoC CVE-2025-32433: Critical Erlang/OTP SSH RCE Vulnerability Credit:

Dark Web Informer - Cyber Threat Intelligence

10,660 次观看 • 1 年前