Video yükleniyor...

Video Yüklenemedi

Ana Sayfaya Dön

While reproducing the iOS ITW CVE-2025-43300 ( we accidentally triggered another old DNG image parsing vulnerability. The analysis is still ongoing.

DarkNavyOrg's profile picture

DARKNAVY

4,888 subscribers

23,619 görüntüleme • 1 yıl önce •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Yorum

Yorum bulunmuyor

Orijinal gönderinin yorumları burada görünecek

Benzer Videolar

We triggered WhatsApp 0-click on iOS/macOS/iPadOS. CVE-2025-55177 arises from missing validation that the [Redacted] message originates from a linked device, enabling specially crafted DNG parsing that triggers CVE-2025-43300. Analysis of Samsung CVE-2025-21043 is also ongoing.
0:41

We triggered WhatsApp 0-click on iOS/macOS/iPadOS. CVE-2025-55177 arises from missing validation that the [Redacted] message originates from a linked device, enabling specially crafted DNG parsing that triggers CVE-2025-43300. Analysis of Samsung CVE-2025-21043 is also ongoing.

DARKNAVY

279,770 görüntüleme • 11 ay önce

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)
0:31

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)

NullSecurityX

94,835 görüntüleme • 4 ay önce

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability Check out the new security vulnerability I discovered in Windows, which I believe is potentially being sold in the wild. (fixed patch tuesday) Blog post: PoC:
0:46

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability Check out the new security vulnerability I discovered in Windows, which I believe is potentially being sold in the wild. (fixed patch tuesday) Blog post: PoC:

0x6rss

45,855 görüntüleme • 1 yıl önce

🚨𝗡𝗲𝘄 𝗛𝗶𝗴𝗵-𝗦𝗲𝘃𝗲𝗿𝗶𝘁𝘆 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝘆 𝗶𝗻 𝗔𝗠𝗜-𝗕𝗮𝘀𝗲𝗱 𝗗𝗲𝘃𝗶𝗰𝗲𝘀 Our Deep Vulnerability Analysis (DVA) technology has automatically uncovered a high-impact vulnerability (CVE-2025-33043) in the AMI MicrocodeUpdate module that's impacting the entire ecosystem. 𝗪𝗵𝗼'𝘀 𝗔𝗳𝗳𝗲𝗰𝘁𝗲𝗱: Major device manufacturers including HP, Lenovo, Samsung, and Adlinktech. The vulnerability was actually silently fixed upstream ages ago, but not all downstream OEM vendors distributed the patch.
1:28

🚨𝗡𝗲𝘄 𝗛𝗶𝗴𝗵-𝗦𝗲𝘃𝗲𝗿𝗶𝘁𝘆 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝘆 𝗶𝗻 𝗔𝗠𝗜-𝗕𝗮𝘀𝗲𝗱 𝗗𝗲𝘃𝗶𝗰𝗲𝘀 Our Deep Vulnerability Analysis (DVA) technology has automatically uncovered a high-impact vulnerability (CVE-2025-33043) in the AMI MicrocodeUpdate module that's impacting the entire ecosystem. 𝗪𝗵𝗼'𝘀 𝗔𝗳𝗳𝗲𝗰𝘁𝗲𝗱: Major device manufacturers including HP, Lenovo, Samsung, and Adlinktech. The vulnerability was actually silently fixed upstream ages ago, but not all downstream OEM vendors distributed the patch.

BINARLY🔬

12,005 görüntüleme • 1 yıl önce

By now, many of you have likely seen the image being circulated by BHB, which is reportedly a still image that is the result of enhancing surveillance footage. We have completed our further analysis of this image and now present our findings in the attached video.
0:49

By now, many of you have likely seen the image being circulated by BHB, which is reportedly a still image that is the result of enhancing surveillance footage. We have completed our further analysis of this image and now present our findings in the attached video.

SF INVESTIGATES • STEVE FISCHER

30,317 görüntüleme • 1 yıl önce

In our latest analysis, we dive into CVE-2026-4802, a high-severity vulnerability discovered by our team in Cockpit that allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). Read the full analysis on our blog:
0:47

In our latest analysis, we dive into CVE-2026-4802, a high-severity vulnerability discovered by our team in Cockpit that allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). Read the full analysis on our blog:

Hakai Offsec

11,409 görüntüleme • 3 ay önce

We implemented an exploit for RediShell (CVE-2025-49844). While doing so, we discovered that the publicly available PoC incorrectly uses loadstring to trigger the Redis UAF. Kudos to Wiz for the interesting findings!
0:27

We implemented an exploit for RediShell (CVE-2025-49844). While doing so, we discovered that the publicly available PoC incorrectly uses loadstring to trigger the Redis UAF. Kudos to Wiz for the interesting findings!

DARKNAVY

41,577 görüntüleme • 10 ay önce

While the truth may be bitter, this analysis could indeed represent the stark reality we face today: that the current surge in insecurity is the direct, volatile friction triggered by the government's aggressive disruption of entrenched, fraudulent financial networks.
4:13

While the truth may be bitter, this analysis could indeed represent the stark reality we face today: that the current surge in insecurity is the direct, volatile friction triggered by the government's aggressive disruption of entrenched, fraudulent financial networks.

TallJohn🌍

10,971 görüntüleme • 3 ay önce

Chicago cops were attacked by bystanders while trying to make an arrest, and the investigation is still ongoing.
1:32

Chicago cops were attacked by bystanders while trying to make an arrest, and the investigation is still ongoing.

Daily Loud

105,720 görüntüleme • 6 ay önce

Vulnerability is the new cool. Most of us still don’t know how to do it. And without it—we stay stuck. Dr Brené Brown
0:56

Vulnerability is the new cool. Most of us still don’t know how to do it. And without it—we stay stuck. Dr Brené Brown

Dr. Bob Beare

14,643 görüntüleme • 7 ay önce

Inflation is still with us, it’s still painful, and we all hope it keeps easing. But hope isn’t analysis, and skepticism isn’t evidence. Right now, the best read is that the numbers are real.⁣ ⁣
0:56

Inflation is still with us, it’s still painful, and we all hope it keeps easing. But hope isn’t analysis, and skepticism isn’t evidence. Right now, the best read is that the numbers are real.⁣ ⁣

Justin Wolfers

16,936 görüntüleme • 1 ay önce

Ekiti Election: Weaponisation Of Poverty In Nigeria Is Still Ongoing And Very Sad — Obi Throwing of bread and distributing of rice to the people is still ongoing and very sad. We know that there is poverty and that is because of the irresponsibility of the political class. Ene Obi Former Convener of Situation Room
4:40

Ekiti Election: Weaponisation Of Poverty In Nigeria Is Still Ongoing And Very Sad — Obi Throwing of bread and distributing of rice to the people is still ongoing and very sad. We know that there is poverty and that is because of the irresponsibility of the political class. Ene Obi Former Convener of Situation Room

ARISE NEWS

29,244 görüntüleme • 2 ay önce