- Популярные видео
- Авто
- Видео-блоги
- ДТП, аварии
- Для маленьких
- Еда, напитки
- Животные
- Закон и право
- Знаменитости
- Игры
- Искусство
- Комедии
- Красота, мода
- Кулинария, рецепты
- Люди
- Мото
- Музыка
- Мультфильмы
- Наука, технологии
- Новости
- Образование
- Политика
- Праздники
- Приколы
- Природа
- Происшествия
- Путешествия
- Развлечения
- Ржач
- Семья
- Сериалы
- Спорт
- Стиль жизни
- ТВ передачи
- Танцы
- Технологии
- Товары
- Ужасы
- Фильмы
- Шоу-бизнес
- Юмор
Research Review #-2: RCE in Google's AI code editor Antigravity (sudi)
In this research review episode, we dive into sudi's very well written description of the process of discovering how Antigravity's integrated browser functionality behaves, how to debug it, and how an oversight in its implementation allows for a malicious site opened in it to perform an arbitrary file write on its behalf to the local system to achieve RCE.
Read the research post for yourself and follow sudi on X.
https://www.hacktron.ai/blog/hacking-google-antigravity
https://x.com/sudhanshur705
Видео Research Review #-2: RCE in Google's AI code editor Antigravity (sudi) канала 7urb0
Read the research post for yourself and follow sudi on X.
https://www.hacktron.ai/blog/hacking-google-antigravity
https://x.com/sudhanshur705
Видео Research Review #-2: RCE in Google's AI code editor Antigravity (sudi) канала 7urb0
Комментарии отсутствуют
Информация о видео
10 февраля 2026 г. 1:36:50
00:34:01
Другие видео канала
Research Review #4: mXSS in a Mail App via DOMPurify Misconfig + CKEditor CDATA Parsing Bug (sudi)
Research Review #11: Re:CACHE - Reflection, type confusion, and 0-click SXSS on Next.js (zhero)
Research Review #6: Deterministic Prompt Injection Via Client-Side Feedback Loops (xssdoctor)
Research Review #0: Arbitrary File Read via TOCTOU leads to 0-Click ATO in n8n (SharkazFR)
Research Review #3: Stored XSS in FreeScout through SVG file upload with filter bypass (J0R1AN)
Research Review #7: Figma Desktop RCE: A Prototype Pollution Chain Plugin Sandbox Escape (davensec)
Research Review #-1: PhoneLeak: Data Exfiltration in Gemini via Phone Call (Starstrike)
Research Review #1: VolumeLeak: Classifier-based Data Exfiltration via Volume Settings (Starstrike)
Research Review #10: RCE in Google Cloud with Single Directory Deletion (RyotaK)
Research Review #2: Client-Side Path Traversal Across Every Major Frontend Framework (xssdoctor)
Research Review #5: Multiple XSS Vulnerabilities in Mailcow (J0R1AN via Aikido)
Research Review #8: SynLapse - Details for Critical Azure Synapse Vulnerability (Orca Security)
Research Review #9: StubZero: $148,337 RCE in Google Cloud Production (brutecat)
