Loading video...

Video Failed to Load

Go Home

While reproducing the iOS ITW CVE-2025-43300 ( we accidentally triggered another old DNG image parsing vulnerability. The analysis is still ongoing.

DarkNavyOrg's profile picture

DARKNAVY

4,888 subscribers

23,619 views • 10 months ago •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

We triggered WhatsApp 0-click on iOS/macOS/iPadOS. CVE-2025-55177 arises from missing validation that the [Redacted] message originates from a linked device, enabling specially crafted DNG parsing that triggers CVE-2025-43300. Analysis of Samsung CVE-2025-21043 is also ongoing.
0:41

We triggered WhatsApp 0-click on iOS/macOS/iPadOS. CVE-2025-55177 arises from missing validation that the [Redacted] message originates from a linked device, enabling specially crafted DNG parsing that triggers CVE-2025-43300. Analysis of Samsung CVE-2025-21043 is also ongoing.

DARKNAVY

279,126 views • 9 months ago

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)
0:31

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)

NullSecurityX

94,139 views • 3 months ago

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability Check out the new security vulnerability I discovered in Windows, which I believe is potentially being sold in the wild. (fixed patch tuesday) Blog post: PoC:
0:46

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability Check out the new security vulnerability I discovered in Windows, which I believe is potentially being sold in the wild. (fixed patch tuesday) Blog post: PoC:

0x6rss

45,809 views • 1 year ago

🚨𝗡𝗲𝘄 𝗛𝗶𝗴𝗵-𝗦𝗲𝘃𝗲𝗿𝗶𝘁𝘆 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝘆 𝗶𝗻 𝗔𝗠𝗜-𝗕𝗮𝘀𝗲𝗱 𝗗𝗲𝘃𝗶𝗰𝗲𝘀 Our Deep Vulnerability Analysis (DVA) technology has automatically uncovered a high-impact vulnerability (CVE-2025-33043) in the AMI MicrocodeUpdate module that's impacting the entire ecosystem. 𝗪𝗵𝗼'𝘀 𝗔𝗳𝗳𝗲𝗰𝘁𝗲𝗱: Major device manufacturers including HP, Lenovo, Samsung, and Adlinktech. The vulnerability was actually silently fixed upstream ages ago, but not all downstream OEM vendors distributed the patch.
1:28

🚨𝗡𝗲𝘄 𝗛𝗶𝗴𝗵-𝗦𝗲𝘃𝗲𝗿𝗶𝘁𝘆 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝘆 𝗶𝗻 𝗔𝗠𝗜-𝗕𝗮𝘀𝗲𝗱 𝗗𝗲𝘃𝗶𝗰𝗲𝘀 Our Deep Vulnerability Analysis (DVA) technology has automatically uncovered a high-impact vulnerability (CVE-2025-33043) in the AMI MicrocodeUpdate module that's impacting the entire ecosystem. 𝗪𝗵𝗼'𝘀 𝗔𝗳𝗳𝗲𝗰𝘁𝗲𝗱: Major device manufacturers including HP, Lenovo, Samsung, and Adlinktech. The vulnerability was actually silently fixed upstream ages ago, but not all downstream OEM vendors distributed the patch.

BINARLY🔬

12,005 views • 1 year ago

By now, many of you have likely seen the image being circulated by BHB, which is reportedly a still image that is the result of enhancing surveillance footage. We have completed our further analysis of this image and now present our findings in the attached video.
0:49

By now, many of you have likely seen the image being circulated by BHB, which is reportedly a still image that is the result of enhancing surveillance footage. We have completed our further analysis of this image and now present our findings in the attached video.

SF INVESTIGATES • STEVE FISCHER

30,310 views • 1 year ago

We implemented an exploit for RediShell (CVE-2025-49844). While doing so, we discovered that the publicly available PoC incorrectly uses loadstring to trigger the Redis UAF. Kudos to Wiz for the interesting findings!
0:27

We implemented an exploit for RediShell (CVE-2025-49844). While doing so, we discovered that the publicly available PoC incorrectly uses loadstring to trigger the Redis UAF. Kudos to Wiz for the interesting findings!

DARKNAVY

41,489 views • 9 months ago

While the truth may be bitter, this analysis could indeed represent the stark reality we face today: that the current surge in insecurity is the direct, volatile friction triggered by the government's aggressive disruption of entrenched, fraudulent financial networks.
4:13

While the truth may be bitter, this analysis could indeed represent the stark reality we face today: that the current surge in insecurity is the direct, volatile friction triggered by the government's aggressive disruption of entrenched, fraudulent financial networks.

TallJohn🌍

10,891 views • 1 month ago

Chicago cops were attacked by bystanders while trying to make an arrest, and the investigation is still ongoing.
1:32

Chicago cops were attacked by bystanders while trying to make an arrest, and the investigation is still ongoing.

Daily Loud

105,527 views • 4 months ago

Vulnerability is the new cool. Most of us still don’t know how to do it. And without it—we stay stuck. Dr Brené Brown
0:56

Vulnerability is the new cool. Most of us still don’t know how to do it. And without it—we stay stuck. Dr Brené Brown

Dr. Bob Beare

14,639 views • 5 months ago

Iran claims President Trump deceived the American public. They believe disunity is America’s vulnerability. They’ll certainly exploit any division to sow chaos here. Remember the old words: Divided, We Fall.
0:35

Iran claims President Trump deceived the American public. They believe disunity is America’s vulnerability. They’ll certainly exploit any division to sow chaos here. Remember the old words: Divided, We Fall.

Legend

11,413 views • 1 year ago

I would just like to remind you that every feature of the new iOS "Games" app—literally every single one—was available in iOS 5's "Game Center." What's old is new again—and still bad.
0:39

I would just like to remind you that every feature of the new iOS "Games" app—literally every single one—was available in iOS 5's "Game Center." What's old is new again—and still bad.

Quinn Nelson

102,449 views • 1 year ago

Inflation is still with us, it’s still painful, and we all hope it keeps easing. But hope isn’t analysis, and skepticism isn’t evidence. Right now, the best read is that the numbers are real.⁣ ⁣
0:56

Inflation is still with us, it’s still painful, and we all hope it keeps easing. But hope isn’t analysis, and skepticism isn’t evidence. Right now, the best read is that the numbers are real.⁣ ⁣

Justin Wolfers

16,825 views • 2 days ago

Ekiti Election: Weaponisation Of Poverty In Nigeria Is Still Ongoing And Very Sad — Obi Throwing of bread and distributing of rice to the people is still ongoing and very sad. We know that there is poverty and that is because of the irresponsibility of the political class. Ene Obi Former Convener of Situation Room
4:40

Ekiti Election: Weaponisation Of Poverty In Nigeria Is Still Ongoing And Very Sad — Obi Throwing of bread and distributing of rice to the people is still ongoing and very sad. We know that there is poverty and that is because of the irresponsibility of the political class. Ene Obi Former Convener of Situation Room

ARISE NEWS

29,244 views • 25 days ago

🚨🚨Another devastating morning: The occupation army stormed Masafer Yatta about two hours ago. They have demolished four houses so far, and the destruction is still ongoing. #StopEthnicCleansing
0:31

🚨🚨Another devastating morning: The occupation army stormed Masafer Yatta about two hours ago. They have demolished four houses so far, and the destruction is still ongoing. #StopEthnicCleansing

Basel Adra

238,532 views • 1 year ago