正在加载视频...

视频加载失败

返回首页

XML External Entity (XXE) vulnerability in 2026 with a practical Proof of Concept (PoC) Follow us: #BugBounty #CyberSecurity

NullSecurityX's profile picture

NullSecurityX

9,859 subscribers

11,524 次观看 • 4 个月前 •via X (Twitter)

科学技术#BugBounty#CyberSecurity
LIVE

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

DarkForums has been hacked by NullSecurityX :) Jokes aside, we showcased the vulnerability found on Darkforums in the video. Happy hacking, everyone! 😊 Dark Web Informer #BugBounty #CyberSecurity #darkforum
0:37

DarkForums has been hacked by NullSecurityX :) Jokes aside, we showcased the vulnerability found on Darkforums in the video. Happy hacking, everyone! 😊 Dark Web Informer #BugBounty #CyberSecurity #darkforum

NullSecurityX

51,990 次观看 • 11 个月前

Bypass Facebook SSL Version (latest version) Frida JS Script #Bugbounty #CyberSecurity
1:38

Bypass Facebook SSL Version (latest version) Frida JS Script #Bugbounty #CyberSecurity

NullSecurityX

50,386 次观看 • 3 个月前

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)
0:31

Exploit PoC Telegram Web app XSS / Session Hijacking 1-click The XSS vulnerability is triggered using the event type web_app_open_link via postMessage. (CVE-2024–33905)

NullSecurityX

94,139 次观看 • 3 个月前

🚨CVE-2022-40684: Proof of Concept of how an attacker can exploit a Fortinet device with public HTTPS management. PoC released by Horizon3AI. Video Credit:
1:59

🚨CVE-2022-40684: Proof of Concept of how an attacker can exploit a Fortinet device with public HTTPS management. PoC released by Horizon3AI. Video Credit:

Dark Web Informer

32,787 次观看 • 1 年前

Exploiting llama.cpp’s RPC Server - From Null Buffer to RCE Against PIE + Full RELRO + NX | CVE-2026-34159: The vulnerability is a one-line logic bug in the RPC server’s tensor deserialization pipeline. Youtube: Blog:
0:37

Exploiting llama.cpp’s RPC Server - From Null Buffer to RCE Against PIE + Full RELRO + NX | CVE-2026-34159: The vulnerability is a one-line logic bug in the RPC server’s tensor deserialization pipeline. Youtube: Blog:

NullSecurityX

19,539 次观看 • 2 个月前

Delete highlight cover IDOR bug in Instagram $3000 Bug Bounty PoC Write-up:
2:17

Delete highlight cover IDOR bug in Instagram $3000 Bug Bounty PoC Write-up:

NullSecurityX

22,320 次观看 • 3 个月前

Alibaba Cloud & iFIT are reshaping connected fitness with AI. We integrated iFIT’s global CRM with China’s digital ecosystem and used our Qwen model to transform fitness content, personalizing workouts. A POC was delivered in just 2 days. Follow Us for more practical cases!
1:58

Alibaba Cloud & iFIT are reshaping connected fitness with AI. We integrated iFIT’s global CRM with China’s digital ecosystem and used our Qwen model to transform fitness content, personalizing workouts. A POC was delivered in just 2 days. Follow Us for more practical cases!

Alibaba Cloud

11,293,734 次观看 • 7 个月前

big shot in 7/4?? a proof of concept
0:49

big shot in 7/4?? a proof of concept

LucasPucas

44,726 次观看 • 1 年前

little proof of concept for a nightmare prayer change overlay with base runelite
0:33

little proof of concept for a nightmare prayer change overlay with base runelite

6guy Online 💻 Top 0.7% Gaming

57,757 次观看 • 1 年前

Proof of concept for a parametric BIM in browser by WebAssembly🦀 #bevyengine #rustlang
0:47

Proof of concept for a parametric BIM in browser by WebAssembly🦀 #bevyengine #rustlang

Masatatsu Nakamura

30,084 次观看 • 3 年前

Excited to share my new research: a POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local/remote processes. An accompanying blog post with more details:
0:41

Excited to share my new research: a POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local/remote processes. An accompanying blog post with more details:

Mor Davidovich

47,630 次观看 • 2 年前

proof-of-concept spotlight-style search done in wpf. AND THEY SAY ITS A DEAD FRAMEWORK
0:25

proof-of-concept spotlight-style search done in wpf. AND THEY SAY ITS A DEAD FRAMEWORK

nullptr 🐱🍩

78,021 次观看 • 1 年前

In October 2025, a critical server-side flaw in Instagram made it possible for unauthenticated attackers to view private photos and captions without needing to log in or to follow the account. Instagram silently patched the vulnerability. Here’s how the PoC worked…
7:02

In October 2025, a critical server-side flaw in Instagram made it possible for unauthenticated attackers to view private photos and captions without needing to log in or to follow the account. Instagram silently patched the vulnerability. Here’s how the PoC worked…

Dark Web Informer

31,114 次观看 • 5 个月前

If you are tired of googling for #BugBounty writeups, I made a little tool that lets you search writeups easily. You can also pull the search data in JSON format if you need it.⚙️⚔️ #cybersecurity #bugbountytips #infosec #offensivesec
0:29

If you are tired of googling for #BugBounty writeups, I made a little tool that lets you search writeups easily. You can also pull the search data in JSON format if you need it.⚙️⚔️ #cybersecurity #bugbountytips #infosec #offensivesec

Md Ismail Šojal 🕷️

70,772 次观看 • 3 年前

👻 100% Proof of the Paranormal! A thermal camera captures a mysterious entity lurking in the shadows… are you brave enough to watch? 🔥👀
1:05

👻 100% Proof of the Paranormal! A thermal camera captures a mysterious entity lurking in the shadows… are you brave enough to watch? 🔥👀

OANASA

45,425 次观看 • 11 个月前

Can Trump jump-start American manufacturing with tariffs? American Giant CEO Bayard Winthrop gave us proof of concept in a $12 t-shirt COMPLETELY made in America: "Walmart stood up and said, 'we're going to commit to you for a long period of time, and at a high volume.'"
3:13

Can Trump jump-start American manufacturing with tariffs? American Giant CEO Bayard Winthrop gave us proof of concept in a $12 t-shirt COMPLETELY made in America: "Walmart stood up and said, 'we're going to commit to you for a long period of time, and at a high volume.'"

Glenn Beck

72,708 次观看 • 1 年前

You gotta admit when you were wrong. Almost 2 years ago, I was unveiling NativePHP at Laracon US with a working proof of concept for mobile in my pocket - doubting that it'll ever be approved in an app store. But guess what? Today, NativePHP mobile 1.0 got released, and I couldn't be more excited about this. Simon Hamp 🍣 🍜 put in a ton of work on the iOS side, taking this proof of concept to a whole new level - while Shane Rosenthal made it work on Android in no time. I'm so proud with what we achieved with NativePHP 🚀
0:43

You gotta admit when you were wrong. Almost 2 years ago, I was unveiling NativePHP at Laracon US with a working proof of concept for mobile in my pocket - doubting that it'll ever be approved in an app store. But guess what? Today, NativePHP mobile 1.0 got released, and I couldn't be more excited about this. Simon Hamp 🍣 🍜 put in a ton of work on the iOS side, taking this proof of concept to a whole new level - while Shane Rosenthal made it work on Android in no time. I'm so proud with what we achieved with NativePHP 🚀

Marcel Pociot 🧪

21,896 次观看 • 1 年前

Proof of concept, entirely new .PCK, calling a custom id and is available in the menus. PC is 👑 #WWE2K24
0:37

Proof of concept, entirely new .PCK, calling a custom id and is available in the menus. PC is 👑 #WWE2K24

Grix

323,377 次观看 • 2 年前

Proof of Concept: Thot Shit Thought of trying a new aspect ratio for my edits coupled with some Goon Style. Lemme know your thoughts!
1:36

Proof of Concept: Thot Shit Thought of trying a new aspect ratio for my edits coupled with some Goon Style. Lemme know your thoughts!

Retrograde_Renegade

31,671 次观看 • 1 年前

The CertiK Skyfall team identified and collaborated with Apple to fix a vulnerability (CVE-2024-27801) in the low-level implementation of NSXPC, affecting all Apple platforms. This vulnerability could have potentially allowed malicious apps to gain unauthorized access to system services or steal user data from certain third-party applications, particularly those with architectures similar to Telegram. Our proof-of-concept attack demonstrated how a malicious app could steal chat history (such as pictures) from Telegram and transfer it to a remote server. Upgrade all your Apple devices and stay safe! Source:
1:09

The CertiK Skyfall team identified and collaborated with Apple to fix a vulnerability (CVE-2024-27801) in the low-level implementation of NSXPC, affecting all Apple platforms. This vulnerability could have potentially allowed malicious apps to gain unauthorized access to system services or steal user data from certain third-party applications, particularly those with architectures similar to Telegram. Our proof-of-concept attack demonstrated how a malicious app could steal chat history (such as pictures) from Telegram and transfer it to a remote server. Upgrade all your Apple devices and stay safe! Source:

CertiK

341,505 次观看 • 2 年前