■■■■□ Executing Arbitrary Code & Executables in Read-Only FileSystems. https://labs.withsecure.com/publications/executing-arbitrary-code-executables-in-read-only-filesystems https://t.me/cKure/12564
All posts by cK-bot
June 24 2023 at 11:58PM
■■■□□ Tool ‘jsluice’ is a Go package and command-line tool for extracting URLs, paths, secrets, and other interesting data from JavaScript source code. https://github.com/BishopFox/jsluice https://t.me/cKure/12563
June 24 2023 at 11:56PM
■■■■■ A very good XXS writeup for CTF set by ‘intigriti’ team. https://infosecwriteups.com/xss-intigriti-challenge-dae2dba1cb4c https://t.me/cKure/12562
June 24 2023 at 08:07PM
Exploiting CVE-2023-33476 for remote code execution. https://blog.coffinsec.com/0day/2023/06/19/minidlna-cve-2023-33476-exploits.html https://t.me/cKure/12560
June 24 2023 at 06:10PM
■■■■■ CVE-2022-31696: An Analysis Of A Vmware Esxi Tcp Socket Keepalive Type Confusion LPE. https://www.zerodayinitiative.com/blog/2023/6/21/cve-2022-31696-an-analysis-of-a-vmware-esxi-tcp-socket-keepalive-type-confusion-lpe https://t.me/cKure/12559
June 24 2023 at 06:10PM
■□□□□ United States’ spring capabilities. https://www.middleeasteye.net/news/hajj-cia-used-pilgrims-showcase-surveillance-ai-capabilities https://t.me/cKure/12558
June 24 2023 at 11:21AM
■■□□□ United States releases declassified report on COVID origins. https://www.dni.gov/files/ODNI/documents/assessments/Report-on-Potential-Links-Between-the-Wuhan-Institute-of-Virology-and-the-Origins-of-COVID-19-20230623.pdf https://t.me/cKure/12557
June 23 2023 at 01:04AM
■■■□□ Cyber-Fraud (repudiation): JPMorgan “mistakenly deleted” 47 million records. SEC says deleted records were requested in several probes — Bloomberg https://t.me/cKure/12556
June 22 2023 at 10:26PM
■■■□□ Microsoft OneNote (Version 2305 Build 16.0.16501.20074) 64-bit – Spoofing. https://www.exploit-db.com/exploits/51538 https://t.me/cKure/12555
June 22 2023 at 07:22PM
■■■□□ Interesting thread | Android What if app developers forget to remove internal testing functionality before release? 🤔 How about using hardcoded strings for access control? 😬 Let's take a look at two cases that could be exploited by an attacker 🧵👇 pic.twitter.com/XZVagicKR3 — INTIGRITI (@intigriti) June 22, 2023 https://t.me/cKure/12554