All posts in Uncategorized

■■■■■ ATO | How I exploited security issue to take over admin account. https://ar1fshaikh.medium.com/1st-ato-how-i-exploited-security-issue-to-take-over-admin-account-e0ae309dc356 https://t.me/cKure/12779

■■□□□ How Secrets Leak in CI/CD Pipelines. https://trufflesecurity.com/blog/secrets-leak-in-ci-cd/ https://t.me/cKure/12778

■■■■□ Researchers discovered a massive campaign that delivered a proxy server application to at least 400,000 Windows systems. AT&T Alien Labs researchers uncovered a massive campaign that delivered a proxy server application to at least 400,000 Windows systems. https://securityaffairs.com/149592/cyber-crime/rise-proxy-server-application.html https://t.me/cKure/12777

■■■■□ Ivanti warns of new actively exploited MobileIron zero-day bug. CVE-2023-38035 – API Authentication Bypass on Sentry Administrator Interface https://forums.ivanti.com/s/article/CVE-2023-38035-API-Authentication-Bypass-on-Sentry-Administrator-Interface https://www.bleepingcomputer.com/news/security/ivanti-warns-of-new-actively-exploited-mobileiron-zero-day-bug/ https://t.me/cKure/12776

■■■■□ PoC exploit for zero-day Windows Error Reporting Service bug (CVE-2023-36874) releases. https://securityonline.info/poc-exploit-for-0-day-windows-error-reporting-service-bug-cve-2023-36874-releases/ https://t.me/cKure/12775

■□□□□ [ Tool ] FaceChain: A deep-learning toolchain for generating your Digital-Twin. https://github.com/modelscope/facechain https://t.me/cKure/12774

■■■■□ Asset inventory of over 800 public bug bounty programs. https://github.com/trickest/inventory https://t.me/cKure/12773

■■□□□ Interesting thread. https://twitter.com/vxunderground/status/1693742275145150927 https://t.me/cKure/12772

■■■□□ Windows Error Reporting Service Privilege Enhancement Vulnerability (CVE-2023-36874). #untested https://github.com/d0rb/CVE-2023-36874 https://t.me/cKure/12771

■■■■□ Zero-Day: Thousands of Android malware apps use stealthy APKs to bypass security, study finds. Zimperium report. https://www.tomsguide.com/news/thousands-of-android-malware-apps-use-stealthy-apks-to-bypass-security-study-finds https://t.me/cKure/12770