All posts in Uncategorized

■■■□□ PoC Exploit Released for HTTP File Server Remote Code Execution Vulnerability. https://cybersecuritynews.com/poc-exploit-http-file-server/ https://t.me/cKure/14368

■■■■□ Active Directory Certificate Services (AD CS) – A Beautifully Vulnerable and Mis-configurable Mess. https://logan-goins.com/2024-05-04-ADCS/ https://t.me/cKure/14367

■■■■□ RockYou2024: 10 billion passwords leaked in the largest compilation of all time. https://cybernews.com/security/rockyou2024-largest-password-compilation-leak/ https://t.me/cKure/14366

■■■■■ Signal Messaging App security concern | Privacy An interesting thread: https://x.com/mysk_co/status/1809287118235070662 https://t.me/cKure/14364

Rockyou-2024 has been released on July 4, 2024, in a 45 GB zip file. Previous Rockyou-2021 had 8.4 billion passwords, and the new version has 1.5 billion (added by hacker ‘ObamaCare’), making it a 10 billion word-list. https://t.me/cKure/14362

■■■■□ CVE-2024-37726 MSI Center Local Privilege Escalation – Arbitrary File Overwrite Vulnerability. https://github.com/carsonchan12345/CVE-2024-37726-MSI-Center-Local-Privilege-Escalation https://t.me/cKure/14361

■■■■■ Zero-Day: Breaking BitLocker via MitM between CPU and TPM chip. https://t.me/cKure/14358 https://t.me/cKure/14360

■■■■■ GHSL-2024-071: Memory corruption in Chromium – CVE-2024-3832. https://securitylab.github.com/advisories/GHSL-2024-071_Chromium/ https://t.me/cKure/14357

■■□□□ Operation “Morpheus” – Law enforcement agencies team up to take down 593 Cobalt Strike servers. https://www.europol.europa.eu/media-press/newsroom/news/europol-coordinates-global-action-against-criminal-abuse-of-cobalt-strike https://t.me/cKure/14356

■■■■■ Wi-Fi Exploitation Framework. https://github.com/D3Ext/WEF https://t.me/cKure/14355