All posts in Uncategorized

■■■■■ Fortinet has released patches to address a critical security flaw in its FortiGate firewalls that could be abused by a threat actor to achieve remote code execution. CVE-2023-27997, is reachable pre-authentication, on every SSL VPN appliance. https://thehackernews.com/2023/06/critical-rce-flaw-discovered-in.html https://olympecyberdefense.fr/1193-2/ https://t.me/cKure/12488

■■■■□ Proof of Concept Code for CVE-2023-32353: Local privilege escalation via iTunes in Windows. https://github.com/86x/CVE-2023-32353-PoC https://t.me/cKure/12487

■■■□□ Cyber-War: Ukrainian hackers take down service provider for Russian banks in a Cyber-Attack. https://www.bleepingcomputer.com/news/security/ukrainian-hackers-take-down-service-provider-for-russian-banks/ https://t.me/cKure/12486

■■■■□ SaaS Ransomware Attack Hit Sharepoint Online Without Using a Compromised Endpoint. https://www.securityweek.com/saas-ransomware-attack-hit-sharepoint-online-without-using-a-compromised-endpoint/ https://t.me/cKure/12485

■■■□□ Arts Of Get System This directory is for PoCs to help learning how to get SYSTEM privilege. https://github.com/daem0nc0re/PrivFu/tree/main/ArtsOfGetSystem https://t.me/cKure/12484

■□□□□ Amazing PowerShell One-Liners for System Administrators. https://www.turbogeek.co.uk/powershell-server-management/ https://t.me/cKure/12483

CVE-2023-29336 exploit demo video. https://youtu.be/fDgq8FyXVvU https://t.me/cKure/12482

CVE-2023-29336 (Win32k Elevation of Privilege Vulnerability). PoC released for the bug exploited in attacks. https://blog.avast.com/avast-patches-microsoft-vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29336 https://www.bleepingcomputer.com/news/security/poc-released-for-windows-win32k-bug-exploited-in-attacks/ https://t.me/cKure/12480

■□□□□ Hack by HTML. https://medium.com/@alfalahum/b71d007b8257 https://t.me/cKure/12479

■■■□□□ VMware fixes critical vulnerabilities in vRealize network analytics tool. https://www.bleepingcomputer.com/news/security/vmware-fixes-critical-vulnerabilities-in-vrealize-network-analytics-tool/ https://t.me/cKure/12478