All posts by cK-bot

■■■■□ Joomla! CVE-2023-23752 to Code Execution. https://vulncheck.com/blog/joomla-for-rce https://developer.joomla.org/security-centre/894-20230201-core-improper-access-check-in-webservice-endpoints.html https://t.me/cKure/12249

■□□□□ Privacy: Government of India issues circular citing criticism and usage of social media by government employees in Kashmir. https://jkgad.nic.in/common/showOrder.aspx?actCode=C42387 https://t.me/cKure/12248

■■■□□ Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation. https://github.com/XaFF-XaFF/Cronos-Rootkit https://t.me/cKure/12247

■■■■■ Turbo intruder for brute forcing via HTTP Pipelining. https://portswigger.net/research/turbo-intruder-embracing-the-billion-request-attack https://t.me/cKure/12244

■■■□□ Acropalypse” Android screenshot bug turns into a Zero-day Windows vulnerability. https://arstechnica.com/information-technology/2023/03/windows-10-and-11-get-their-own-version-of-the-acropalypse-screenshot-bug/ https://t.me/cKure/12243

■■□□□ 2022 Zero-Day Exploitation. https://www.mandiant.com/resources/blog/zero-days-exploited-2022 https://t.me/cKure/12242

■■■□□ Framework for Automating Fuzzable Target Discovery with Static Analysis. Featured at Black Hat Arsenal USA 2022. https://github.com/ex0dus-0x/fuzzable https://t.me/cKure/12241

■■□□□ VM Escape for Parallels Desktop

■■■■□ APT37 ‘s GitHub repository overview. https://www.zscaler.com/blogs/security-research/unintentional-leak-glimpse-attack-vectors-apt37 https://t.me/cKure/12239

■■■□□ Data-Leak from India as LockBit ransomware group announced “ksrsac.karnataka.gov.in” on the victim list. https://t.me/cKure/12237