All posts in Uncategorized

■■■■■ Chaining N-days to Compromise All Part 1 — Chrome Renderer RCE. https://blog.theori.io/chaining-n-days-to-compromise-all-part-1-chrome-renderer-rce-1afccf56721b Part 2 — Windows Kernel LPE (a.k.a Chrome Sandbox Escape). https://blog.theori.io/chaining-n-days-to-compromise-all-part-2-windows-kernel-lpe-a-k-a-chrome-sandbox-escape-44cb49d7a4f8 Part 3 — Windows Driver LPE: Medium to System. https://blog.theori.io/chaining-n-days-to-compromise-all-part-3-windows-driver-lpe-medium-to-system-12f7821d97bb Part 4 — VMware Workstation Information leakage. https://blog.theori.io/chaining-n-days-to-compromise-all-part-4-vmware-workstation-information-leakage-44476b05d410 Part 5 — VMware Workstation Guest-to-Host Escape. https://blog.theori.io/chaining-n-days-to-compromise-all-part-5-vmware-workstation-host-to-guest-escape-5a1297e431b5 https://t.me/cKure/14173

■■■■□ Exploiting Windows Kernel Wild Copy With User Fault Handling (CVE-2023–28218). https://blog.theori.io/exploiting-windows-kernel-wild-copy-with-user-fault-handling-cve-2023-28218-89f5189d0926 https://t.me/cKure/14172

■■■■□ Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible with two lines of code — inside the Copilot+ Recall disaster. https://doublepulsar.com/recall-stealing-everything-youve-ever-typed-or-viewed-on-your-own-windows-pc-is-now-possible-da3e12e9465e https://t.me/cKure/14171

■■□□□ Cyber-Crime: Head of Israeli intelligence Mossad threatened ICC prosecutor and her family for investigating war crimes committed by Israel. The phones were hacked, and other cyber tools were used by the eternal jew https://youtube.com/shorts/PE6kts0VcwY #Genocide #WarCrime https://t.me/cKure/14170

■■■■□ SMB Enumeration Cheatsheet. https://0xdf.gitlab.io/2024/03/21/smb-cheat-sheet.html https://t.me/cKure/14169

■■□□□ ‘Godmode’ GPT-4o jailbreak released by hacker — powerful exploit was quickly banned. https://www.tomshardware.com/tech-industry/artificial-intelligence/godmode-gpt-4o-jailbreak-released-by-hacker-powerful-exploit-was-quickly-banned https://t.me/cKure/14168

■■■■■ Hacking NASA : Critical SSRF + Subdomain Takeover + XSS. https://nickguitar.medium.com/hacking-nasa-critical-ssrf-subdomain-takeover-xss-699be0ce3c06 https://t.me/cKure/14167

■■■■□ DLL Side Loading through IObit against Colombia. https://lab52.io/blog/dll-side-loading-through-iobit-against-colombia/ https://t.me/cKure/14166

■■■□□ SIM-swap attacks. https://t.me/cKure/14164 https://t.me/cKure/14165

■■■■□ Canonical Announces Availability of Real-Time Kernel for Ubuntu 24.04 LTS. https://9to5linux.com/canonical-announces-availability-of-real-time-kernel-for-ubuntu-24-04-lts https://t.me/cKure/14163