The Cyber Threat Intelligence Database

sy64

https://github.com/bjrjk/CVE-2022-4262/

sy64

CVE-2023-32315: command execution on OpenFire
CVE-2022-21587: command execution on Oracle Web Applications Desktop Integrator

https://www.trendmicro.com/en_us/research/24/c/earth-krahang.html

sy64

Background on libX11 and the Xpm image format
Analysis of CVE-2023-43786 (DoS vulnerability) including a walkthrough and published PoC

https://jfrog.com/blog/xorg-libx11-vulns-cve-2023-43786-cve-2023-43787-part-two/

sy64

CVE-2024-21338

https://decoded.avast.io/janvojtesek/lazarus-and-the-fudmodule-rootkit-beyond-byovd-with-an-admin-to-kernel-zero-day/

sy64

https://starlabs.sg/blog/2024/route-to-safety-navigating-router-pitfalls/

sy64

CVE-2023-29300: Adobe ColdFusion Vulnerability

https://teamt5.org/en/posts/alerts-of-exploiting-adobe-cold-fusion-cve-2023-29300/

sy64

CVE-2023-7102 and CVE-2023-7101, both linked to the Spreadsheet:😛arseExcel library. These vulnerabilities, stemming from an Arbitrary Code Execution (ACE) flaw in the third-party library Spreadsheet:😛arseExcel,

https://www.mandiant.com/resources/blog/unc4841-post-barracuda-zero-day-remediation

sy64

CVE-2023-20867

https://www.mandiant.com/resources/blog/esxi-hypervisors-malware-persistence

sy64

CVE-2023-48788: Fortinet FortiClient EMS SQL Injection Deep Dive

https://www.horizon3.ai/attack-research/attack-blogs/cve-2023-48788-fortinet-forticlientems-sql-injection-deep-dive/

https://redcanary.com/blog/cve-2023-48788/

sy64

Exploiting GLPI during a Red Team engagement

GLPI CVE-2023-43813 which later led to the identification of an arbitrary object instantiation leading to an SSRF referenced as CVE-2024-27098 as well as an SQL injection referenced as CVE-2024-27096.

https://blog.quarkslab.com/exploiting-glpi-during-a-red-team-engagement.html

sy64

CVE-2024-1212 Command Injection Exploit for Kemp LoadMaster

https://github.com/Chocapikk/CVE-2024-1212

sy64

F5 BIG-IP (CVE-2023-46747) and ScreenConnect

https://www.mandiant.com/resources/blog/initial-access-brokers-exploit-f5-screenconnect

sy64

VM Escape Exploit for Parallels Desktop Hypervisor (Pwn2Own 2021)

https://zerodayengineering.com/research/pwn2own-2021-vm-escape.html

sy64

I added two more post to my three days old blog

1- "ImageIO, the infamous iOS Zero Click Attack Vector."
https://r00tkitsmm.github.io/fuzzing/2024/03/29/iOSImageIO.html

2- "CVE-2016-0040 Story of Uninitialized Pointer in Windows Kernel"

https://r00tkitsmm.github.io/fuzzing/2024/03/29/wmicuninitializedpointer.html

sy64

CVE-2024-21338

Avast discovered an in-the-wild admin-to-kernel exploit for a previously unknown zero-day vulnerability in the appid.sys AppLocker driver.

https://decoded.avast.io/janvojtesek/lazarus-and-the-fudmodule-rootkit-beyond-byovd-with-an-admin-to-kernel-zero-day/

sy64

LPE-CVE-2024-0582

https://blog.exodusintel.com/2024/03/27/mind-the-patch-gap-exploiting-an-io_uring-vulnerability-in-ubuntu/

https://github.com/ysanatomic/io_uring_LPE-CVE-2024-0582

https://anatomic.rip/cve-2023-2598/

sy64

The following firmware versions for the SMA 100 series are affected:

10.2.1.2-24sv and earlier
10.2.0.8-37sv and earlier
9.0.0.11-31sv and earlier

https://attackerkb.com/topics/9szJhq46lw/cve-2021-20039/rapid7-analysis

https://www.truesec.com/hub/blog/web-shell-on-a-sonicwall-sma

https://dfir.ch/posts/microsocks_sonicwall/

sy64

Proton Mail XSS

https://www.sonarsource.com/blog/code-vulnerabilities-leak-emails-in-proton-mail/

sy64

Exciting news! 🚀 Just dropped my blogpost unveiling the universal Linux kernel LPE PoC for CVE-2024-1086 (working on v5.14 - v6.7) used for pwning Debian, Ubuntu, and KernelCTF Mitigation instances, including novel techniques like Dirty Pagedirectory 🧵

https://pwning.tech/nftables/

sy64

Linux kernel: CVE-2023-3865 and CVE-2023-3866

https://pwning.tech/ksmbd/