All posts in Uncategorized

■■■■□ SolarWinds Patches High-Severity Vulnerability Reported by NATO Pentester. https://www.securityweek.com/solarwinds-patches-high-severity-vulnerability-reported-by-nato-pentester/ https://t.me/cKure/14227

■■■■■ An Introduction to Chrome Exploitation – Maglev Edition. The post includes CVE-2023-4069. https://www.matteomalvica.com/blog/2024/06/05/intro-v8-exploitation-maglev/ https://t.me/cKure/14225

■■□□□ Bypass Windows Defender 2024. https://youtu.be/NmB2MPAafTo https://t.me/cKure/14224

■■■■■ Becoming any Android app via Zygote command injection. https://rtx.meta.security/exploitation/2024/06/03/Android-Zygote-injection.html https://t.me/cKure/14222

■■■■□ SSD Advisory – Linux Kernel Nft_validate_register_store Integer Overflow Privilege Escalation. https://ssd-disclosure.com/ssd-advisory-linux-kernel-nft_validate_register_store-integer-overflow-privilege-escalation/ https://t.me/cKure/14221

■■■■□ Amazon WAF bypass. https://t.me/cKure/14220

PHP just fixed RCE vulnerabilities, which affects XAMPP by default. CVE-2024-4577: Make PHP-CGI Argument Injection Great Again! https://blog.orange.tw/2024/06/cve-2024-4577-yet-another-php-rce.html https://t.me/cKure/14218

■■■□□ PoC Exploit Released for Linux Kernel Privilege Escalation Vulnerability. https://cybersecuritynews.com/linux-kernel-privilege-escalation-flaw/ https://t.me/cKure/14216

■■■■□ Stealthy Persistence with “Directory Synchronization Accounts” Role in Entra ID. https://medium.com/tenable-techblog/stealthy-persistence-with-directory-synchronization-accounts-role-in-entra-id-63e56ce5871b https://t.me/cKure/14215

■■■■□ Analysis of Kimsuky APT attack using HWP & MSC malware. https://www.genians.co.kr/blog/threat_intelligence/interview https://t.me/cKure/14214