Proxy Bar
前往频道在 Telegram
Exploits, Hacking and Leaks Чат группы - https://t.me/ Связь с администрацией и реклама: @NULL_vm Поддержать проект: BTC bc1qmrt229eghjyj9wqa7nmr9j8zuq6khz6km2pker
显示更多📈 Telegram 频道 Proxy Bar 的分析概览
频道 Proxy Bar (@proxy_bar) 俄语 语言赛道中的 是活跃参与者。目前社区聚集了 20 990 名订阅者，在 技术与应用 类别中位列第 6 299，并在 俄罗斯 地区排名第 31 733 位。
📊 受众指标与增长动态
自 невідомо 创建以来，项目保持高速增长，吸引了 20 990 名订阅者。
根据 25 七月, 2026 的最新数据，频道保持稳定运转。过去 30 天订阅人数变化为 256，过去 24 小时变化为 5，整体触达仍然可观。
- 认证状态： 未认证
- 互动率 (ER)： 平均受众互动率为 22.06%。内容发布后 24 小时内通常能获得 11.96% 的反应，占订阅者总量。
- 帖子覆盖： 每篇帖子平均可获得 4 631 次浏览，首日通常累积 2 510 次浏览。
- 互动与反馈： 受众积极参与，单帖平均反应数为 12。
- 主题关注点： 内容集中在 cve-2025, exploit, linux, birth, define 等核心主题上。
📝 描述与内容策略
作者将该频道定位为表达主观观点的平台：
“Exploits, Hacking and Leaks
Чат группы - https://t.me/
Связь с администрацией и реклама:
@NULL_vm
Поддержать проект:
BTC bc1qmrt229eghjyj9wqa7nmr9j8zuq6khz6km2pker”
凭借高频更新（最新数据采集于 26 七月, 2026），频道始终保持新鲜度与高覆盖。分析显示受众积极互动，使其成为 技术与应用 类别中的关键影响点。
20 990
订阅者
+524 小时
+157 天
+25630 天
数据加载中...
吸引订阅者
七月 '26
七月 '26
+262
在7个频道中
六月 '26
+296
在10个频道中
Get PRO
五月 '26
+309
在4个频道中
Get PRO
四月 '26
+349
在14个频道中
Get PRO
三月 '26
+392
在13个频道中
Get PRO
二月 '26
+362
在11个频道中
Get PRO
一月 '26
+310
在12个频道中
Get PRO
十二月 '25
+262
在8个频道中
Get PRO
十一月 '25
+332
在8个频道中
Get PRO
十月 '25
+268
在6个频道中
Get PRO
九月 '25
+256
在6个频道中
Get PRO
八月 '25
+275
在9个频道中
Get PRO
七月 '25
+303
在8个频道中
Get PRO
六月 '25
+312
在11个频道中
Get PRO
五月 '25
+299
在9个频道中
Get PRO
四月 '25
+400
在7个频道中
Get PRO
三月 '25
+506
在14个频道中
Get PRO
二月 '25
+403
在9个频道中
Get PRO
一月 '25
+292
在12个频道中
Get PRO
十二月 '24
+229
在8个频道中
Get PRO
十一月 '24
+362
在14个频道中
Get PRO
十月 '24
+368
在8个频道中
Get PRO
九月 '24
+300
在9个频道中
Get PRO
八月 '24
+510
在13个频道中
Get PRO
七月 '24
+484
在10个频道中
Get PRO
六月 '24
+398
在10个频道中
Get PRO
五月 '24
+600
在15个频道中
Get PRO
四月 '24
+411
在11个频道中
Get PRO
三月 '24
+503
在6个频道中
Get PRO
二月 '24
+578
在13个频道中
Get PRO
一月 '24
+211
在3个频道中
Get PRO
十二月 '23
+321
在12个频道中
Get PRO
十一月 '23
+452
在11个频道中
Get PRO
十月 '23
+521
在10个频道中
Get PRO
九月 '23
+325
在0个频道中
Get PRO
八月 '23
+417
在0个频道中
Get PRO
七月 '23
+508
在0个频道中
Get PRO
六月 '23
+402
在0个频道中
Get PRO
五月 '23
+623
在0个频道中
Get PRO
四月 '23
+293
在0个频道中
Get PRO
三月 '23
+890
在0个频道中
Get PRO
二月 '23
+336
在0个频道中
Get PRO
一月 '23
+680
在0个频道中
Get PRO
十二月 '22
+371
在0个频道中
Get PRO
十一月 '22
+403
在0个频道中
Get PRO
十月 '22
+862
在0个频道中
Get PRO
九月 '22
+461
在0个频道中
Get PRO
八月 '22
+264
在0个频道中
Get PRO
七月 '22
+228
在0个频道中
Get PRO
六月 '22
+395
在0个频道中
Get PRO
五月 '22
+664
在0个频道中
Get PRO
四月 '22
+1 013
在0个频道中
Get PRO
三月 '22
+2 137
在0个频道中
Get PRO
二月 '22
+1 158
在0个频道中
Get PRO
一月 '22
+646
在0个频道中
Get PRO
十二月 '21
+622
在0个频道中
| 日期 | 订阅者增长 | 提及 | 频道 | |
| 25 七月 | +6 | |||
| 24 七月 | +5 | |||
| 23 七月 | +12 | |||
| 22 七月 | +2 | |||
| 21 七月 | +8 | |||
| 20 七月 | +7 | |||
| 19 七月 | +1 | |||
| 18 七月 | +12 | |||
| 17 七月 | +21 | |||
| 16 七月 | +10 | |||
| 15 七月 | +15 | |||
| 14 七月 | +19 | |||
| 13 七月 | +33 | |||
| 12 七月 | +7 | |||
| 11 七月 | +6 | |||
| 10 七月 | +7 | |||
| 09 七月 | +6 | |||
| 08 七月 | +10 | |||
| 07 七月 | +6 | |||
| 06 七月 | +6 | |||
| 05 七月 | +4 | |||
| 04 七月 | +5 | |||
| 03 七月 | +12 | |||
| 02 七月 | +28 | |||
| 01 七月 | +14 |
频道帖子
| 2 |  Dnsmasq DNS Remote Heap Buffer Overflow (CVE-2026-2291)
Original text: “Dnsmasq DNS Remote Heap Buffer Overflow” — David Barksdale, Exodus Intelligence (July 20, 2026). Code snippets, DNS responses, and exploitation details are reproduced verbatim with attribution.
Executive Summary
CVE-2026-2291 is a critical remote code execution vulnerability in dnsmasq, a widely deployed lightweight DNS and DHCP server used in embedded systems, routers, and Linux…
https://core-jmp.org/2026/07/dnsmasq-dns-remote-heap-buffer-overflow-cve-2026-2291/ | 3 329 |
| 3 |  Escalating All The Privileges With Foxit PDF Reader (CVE-2026-57239)
Original text: “Escalating All The Privileges With Foxit PDF Reader (CVE-2026–57239)” — Luke Paris, Paradoxis (July 15, 2026). Code snippets, technical analysis, and detection/mitigation guidance are reproduced verbatim with attribution.
Executive Summary
CVE-2026-57239 is a local privilege escalation vulnerability discovered in Foxit PDF Reader that allows an unprivileged user to escalate privileges to NT AUTHORITYSYSTEM…
https://core-jmp.org/2026/07/escalating-privileges-foxit-pdf-reader-cve-2026-57239/ | 3 107 |
| 4 |  KernelCallbackTable Process Injection
Original text: “KernelCallbackTable Process Injection” — S12, Medium (2026). Code blocks and technical implementation details are reproduced verbatim with attribution.
Executive Summary
Windows message handling is everywhere. Every GUI application sits in a message loop waiting for user input and window events. But what happens when an attacker corrupts the callback table that decides which…
https://core-jmp.org/2026/07/kernelcallbacktable-process-injection/ | 2 860 |
| 5 |  Breaking ONLYOFFICE in 3 steps: OnlyShells vulnerability chain
Original text: “Breaking ONLYOFFICE in 3 steps: OnlyShells vulnerability chain” — BI.ZONE Vulnerability Research team, BI.ZONE (July 21, 2026). Code, CVE metadata, figures and the demonstration video below are reproduced with attribution captions.
Executive Summary
OnlyShells is a chain of five vulnerabilities discovered in ONLYOFFICE Desktop Editors during a fall 2025 security assessment. Chained together,…
https://core-jmp.org/2026/07/onlyoffice-onlyshells-vulnerability-chain/ | 2 600 |
| 6 |  GDID: The Windows Global Device Identifier
Original text: “GDID: The Windows Global Device Identifier” — Smukx, ZeroTrace Lab (July 18, 2026). Code blocks, commands, tables, and technical specifications reproduced verbatim with attribution.
Executive Summary
Every Windows installation receives a unique 64-bit Global Device Identifier (GDID) that serves as Microsoft’s canonical device-level tracking mechanism. The GDID originates as a plaintext registry value…
https://core-jmp.org/2026/07/gdid-windows-global-device-identifier/ | 2 495 |
| 7 |  CVE-2026-49176 Exploit Development: WalletService to SYSTEM
Original text: “CVE-2026-49176 Exploit Development: WalletService to SYSTEM” — David Carliez, 17 July 2026. Code blocks, tables, and technical diagrams are reproduced verbatim with attribution.
Executive Summary
CVE-2026-49176 represents a critical local privilege-escalation vulnerability affecting Windows WalletService, a LocalSystem-hosted service that manages wallet operations through the public Windows.ApplicationModel.Wallet WinRT API. The vulnerability emerges from a…
https://core-jmp.org/2026/07/cve-2026-49176-walletservice-to-system/ | 2 585 |
| 8 | ![[QuickNote] SolidPDFCreator – Mustang Panda Stage-1 Backdoor (Target India) Original text: “[QuickNote] SolidPDFCreator – Mus](data:image/jpeg;base64,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){kind=small} [QuickNote] SolidPDFCreator – Mustang Panda Stage-1 Backdoor (Target India)
Original text: “[QuickNote] SolidPDFCreator – Mustang Panda Stage-1 Backdoor (Target India)” — AI, 0day in {REA_TEAM} (July 13, 2026). Code blocks, tables, diagrams, and technical artefacts are reproduced verbatim with attribution captions.
Executive Summary
SolidPDFCreator.dll is a sophisticated stage-1 backdoor loader disguised as a legitimate SolidPDF product, attributed to Mustang Panda and targeting India. The…
https://core-jmp.org/2026/07/solidpdfcreator-mustang-panda-stage-1-backdoor-india/ | 3 034 |
| 9 | ![CVE-2026-58629: A Double-Free in dxgkrnl’s CreateAllocation Rollback Original text: “July 2026 Patch Tuesday [CVE-2026-58629]](data:image/jpeg;base64,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){kind=small} CVE-2026-58629: A Double-Free in dxgkrnl’s CreateAllocation Rollback
Original text: “July 2026 Patch Tuesday [CVE-2026-58629] Freeing the Wrong Allocation: a double-free in dxgkrnl’s CreateAllocation rollback” — gengstah, gengstah (personal blog), July 14, 2026. Disassembly, crash dumps and code below are reproduced verbatim with attribution captions.
Executive Summary
CVE-2026-58629 is a local elevation-of-privilege bug in dxgkrnl, the Windows Display Driver Model (WDDM) kernel component…
https://core-jmp.org/2026/07/cve-2026-58629-dxgkrnl-createallocation-double-free/ | 3 284 |
| 10 |  GRAND FINAL !!!
Присылайте ваши ставки ! BTC bc1qmrt229eghjyj9wqa7nmr9j8zuq6khz6km2pker | 1 802 |
| 11 | CVE-2026-63030 WordPress
*
wp2shell | 5 672 |
| 12 |  CVE-2026-58532: An Integer Overflow in Windows tcpip.sys
Original text: “How I found an integer overflow in tcpip.sys (CVE-2026-58532)” — April Ivy (aprilpet), April Ivy’s Writing (aprl.pet), 17 July 2026. The prose below is a paraphrase; the call stack, code snippets and proof-of-concept are reproduced verbatim with attribution.
Executive Summary
Security researcher April Ivy discovered an unsigned 64-bit integer overflow in tcpip.sys, the…
https://core-jmp.org/2026/07/cve-2026-58532-tcpip-sys-integer-overflow/ | 5 196 |
| 13 |  +1Верное мнение из СССР
#onlyGNU | 4 558 |
| 14 | CVE-2026-58613: Use-After-Free in the Windows Cloud Files Mini Filter Driver (cldflt.sys)
Original text: “Microsoft Windows Cloud Files Mini Filter Driver CldiStreamCompleteRequest use-after-free vulnerability” — Marcin ‘Icewall’ Noga, Cisco Talos (July 17, 2026). Register dumps, decompiled listings and crash logs below are reproduced verbatim with attribution.
Executive Summary
Cisco Talos researcher Marcin ‘Icewall’ Noga disclosed CVE-2026-58613, a kernel-mode use-after-free in cldflt.sys — the Windows Cloud Files Mini…
https://core-jmp.org/2026/07/cve-2026-58613-cldflt-cloud-files-use-after-free/ | 4 154 |
| 15 |  Direct $MFT Parsing: Reading NTFS Below the Monitored API Layer
Original text: “Direct $MFT Parsing” — S12 — 0x12Dark Development, on Medium. This article summarises the technique in our own words for readers of core-jmp.org; the ASCII pipeline diagram and the short C++ excerpts below are reproduced with attribution to illustrate the discussion. For the complete C++17 header, main runner, and YARA rule, follow the…
https://core-jmp.org/2026/07/direct-mft-parsing-ntfs-raw-enumeration/ | 3 669 |
| 16 |  CVE-2026-58635: How the Windows Narrator Braille Bug Escalates a Standard User to SYSTEM
Original text: "CVE-2026-58635: Windows Narrator Braille Local Privilege Escalation" (proof-of-concept) — DavidCarliez, GitHub (July 2026), released under the MIT License. Source code, scripts, tables and terminal output below are reproduced verbatim with attribution.
Executive Summary
CVE-2026-58635 is a local privilege-escalation vulnerability in an unlikely place: the Braille accessibility component that ships with Windows Narrator. Microsoft…
https://core-jmp.org/2026/07/cve-2026-58635-windows-narrator-braille-privilege-escalation/ | 3 860 |
| 17 |  Reverse Engineering CVE-2026-2796: How Claude Built a Firefox WebAssembly Exploit
Original text: "Reverse engineering Claude’s CVE-2026-2796 exploit" — Evyatar Ben Asher, Keane Lucas, Nicholas Carlini, Newton Cheng, and Daniel Freeman, Anthropic Frontier Red Team (6 March 2026). The prose below is an independent technical summary; the code listings are reproduced verbatim from the source with attribution.
Executive Summary
In March 2026 Anthropic’s Frontier Red Team…
https://core-jmp.org/2026/07/cve-2026-2796-claude-firefox-webassembly-exploit/ | 3 597 |
| 18 |  CVE-2026-50343
InstallService StaticPluginMap EoP (Standard User to SYSTEM)
*
Exploit + WriteUP | 3 873 |
| 19 |  LegacyHive: The Windows User Profile Service Bug That Loads Another User’s Registry Hive
Original text: "LegacyHive — Windows user profile service arbitrary hive load elevation of privileges vulnerability" — Nightmare-Eclipse (GitHub handle MSNightmare), Project NightCrawler, July 14 2026. The proof-of-concept is published under the MIT License; all code below is reproduced verbatim with attribution.
Executive Summary
On 14 July 2026 — hours after Microsoft’s July Patch Tuesday —…
https://core-jmp.org/2026/07/legacyhive-windows-user-profile-service-hive-load-eop/ | 4 067 |
| 20 |  The QNAP Pattern: Four Bugs and the Architecture That Keeps Producing Them
Original text: “The QNAP Pattern” — Runic Labs (May 17, 2026). Code and architecture diagrams below are reproduced with attribution.
Executive Summary
Runic Labs disassembled a full disclosure cycle against QNAP’s QTS operating system—four bugs across three App Center plugins (Notes Station 3, QmailAgent, QVPN) spanning two firmware releases—and found that the individual vulnerabilities matter…
https://core-jmp.org/2026/07/qnap-pattern-architecture-vulnerabilities/ | 3 694 |
