All posts in Uncategorized

■■■■■ Exploit Development: Browser Exploitation on Windows – CVE-2019-0567, A Microsoft Edge Type Confusion. Part 3: https://connormcgarr.github.io/type-confusion-part-3/ https://t.me/cKure/14200

■■■■■ Windows Internals: Part 1 – Dissecting Secure Image Objects. https://connormcgarr.github.io/secure-images/ https://t.me/cKure/14199

Hacking Millions of Modems (owned by an ISP). A story by Sam Curry. https://samcurry.net/hacking-millions-of-modems https://t.me/cKure/14197

■■■□□ Data-Leak (#unclassified): Google accidentally published internal ‘Search’ documentation to GitHub. https://arstechnica.com/gadgets/2024/06/google-accidentally-published-internal-search-documentation-to-github/ https://t.me/cKure/14196

■■■■□ [Linux Kernel Exploitation 0x1] Smashing Stack Overflows in the Kernel. https://blog.k3170makan.com/2020/11/linux-kernel-exploitation-0x1-smashing.html?m=1 https://t.me/cKure/14195

■■■□□ Telegram Combolists and 361M Email Addresses. https://www.troyhunt.com/telegram-combolists-and-361m-email-addresses/ https://t.me/cKure/14194

Air-Gap Bypass: Various Methods for Extracting Information from Isolated Systems. https://github.com/seyedhojjathosseini/Advanced-Methods-for-Extracting-Information-from-Isolated-Systems https://t.me/cKure/14192

■■■■■ Exploit-code | Zero-Day: CVE-2024-27348 (RCE) – Unauth users can execute commands via Groovy injection in Apache HugeGraph-Server. Fix: Upgrade to version 1.3.0 Python Scanner: https://github.com/Zeyad-Azima/CVE-2024-27348 https://t.me/cKure/14189

■■■■□ Hunting for Network Share Discovery. https://www.splunk.com/en_us/blog/security/sharing-is-not-caring-hunting-for-file-share-discovery.html https://t.me/cKure/14188

State-sponsored terrorism by Israel caught by OpenAI. OpenAI bans accounts of the mercenaries. Facebook (Meta) follows suit. Disrupting deceptive uses of AI by covert influence operations. We have terminated accounts linked to covert influence operations; no significant audience increase due to our services. -OpenAI Official statement: https://openai.com/index/disrupting-deceptive-uses-of-AI-by-covert-influence-operations/ Supporting article by journalists in Israel: https://www.timesofisrael.com/openai-says-it-disrupted-covert-influence-operation-by-israeli-firm-stoic/ Stoic…