CVE Vulnerabilities - Defense.One

CVE Vulnerabilities

sy64

https://www.welivesecurity.com/en/eset-research/evasive-panda-leverages-monlam-festival-target-tibetans/

sy64

https://blog-en.itochuci.co.jp/entry/2024/05/23/090000

sy64

https://blog.securelayer7.net/arbitrary-file-read-in-jenkins/

CVE-2024-23897 – Jenkins 中的任意文件读取

sy64

https://blog.securelayer7.net/analysis-of-papercut-rce/

CVE-2023-39143 – PaperCut RCE 分析

https://cdn.papercut.com/web/products/ng-mf/installers/ng/20.x/pcng-setup-20.1.8.66706.exe 未修复

https://cdn.papercut.com/web/products/ng-mf/installers/ng/22.x/pcng-setup-22.1.4.67135.exe 修复版本

sy64

https://devco.re/blog/2024/05/24/pwn2own-toronto-2022-a-9-year-old-bug-in-mikrotik-routeros-en/

CVE-2023-32154

sy64

https://teamt5.org/en/posts/vulnerability-mikrotik-cve-2021-41987/

Mikrotik (CVE-2021-41987)

sy64

https://ssd-disclosure.com/ssd-advisory-nvms9000-information-disclosure/

TVT NMVS9000

sy64

https://security.opensuse.org/2023/10/27/open-vm-tools-fd-hijack.html

sy64

| CVE No. | Advisory Name and Link, URL |
|----------------|----------------------------------------------------------------------------------------|
| CVE-2021-22681 | CISA | Rockwell Automation Logix Controllers (Update A) |
| CVE-2022-1159 | CISA | Rockwell Automation Studio 5000 Logix Designer |
| CVE-2023-3595 | CISA | Rockwell Automation Select Communication Modules |
| CVE-2023-46290 | CISA | Rockwell Automation FactoryTalk Services Platform |
| CVE-2024-21914 | CISA | Rockwell Automation FactoryTalk View ME |
| CVE-2024-21915 | CISA | Rockwell Automation FactoryTalk Service Platform |
| CVE-2024-21917 | CISA | Rockwell Automation FactoryTalk Service Platform |

https://claroty.com/blog/rockwell-automation-users-urged-to-disconnect-ics-from-internet-immediately

sy64

ntro to heap exploitation

https://infosecwriteups.com/the-toddlers-introduction-to-heap-exploitation-part-1-515b3621e0e8
https://infosecwriteups.com/the-toddlers-introduction-to-heap-exploitation-part-2-d1f325b74286
https://infosecwriteups.com/the-toddlers-introduction-to-heap-exploitation-overflows-part-3-d3d1aa042d1e
https://infosecwriteups.com/use-after-free-13544be5a921
https://infosecwriteups.com/the-toddlers-introduction-to-heap-exploitation-fastbin-dup-to-stack-part-4-1-425592a2870b
https://infosecwriteups.com/the-toddlers-introduction-to-heap-exploitation-fastbin-dup-consolidate-part-4-2-ce6d68136aa8
https://infosecwriteups.com/the-toddlers-introduction-to-heap-exploitation-unsafe-unlink-part-4-3-75e00e1b0c68
https://infosecwriteups.com/the-toddlers-introduction-to-heap-exploitation-house-of-spirit-part-4-4-252cd8928f84
https://infosecwriteups.com/the-toddlers-introduction-to-heap-exploitation-house-of-lore-part-4-5-1b5865297057

sy64

https://0xdf.gitlab.io/2024/05/25/htb-bizness.html

Apache OFBiz server. I'll exploit CVE-2023-49070

sy64

https://www.ambionics.io/blog/php-fpm-local-root

https://bugs.php.net/bug.php?id=81026#1635245656

sy64

Statement on glibc/iconv Vulnerability

Recently, a bug in glibc version 2.39 and older (CVE-2024-2961) was uncovered where a buffer overflow in character set conversions to the ISO-2022-CN-EXT character set affects PHP.

Read our full statement at https://php.net/archive/2024.php#2024-04-24-1

https://www.ambionics.io/blog/iconv-cve-2024-2961-p1

sy64

https://seclists.org/oss-sec/2022/q1/80
https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034

https://github.com/arthepsy/CVE-2021-4034

https://github.com/Pixailz/CVE-2021-4034

sy64

https://github.com/deepinstinct/Dirty-Vanity

sy64

https://lyra.horse/blog/2024/05/exploiting-v8-at-openecsc/

sy64

https://www.anupamas0x1.com/posts/Exploring-CI-CD-Vulnerabilities-in-github-actions

sy64

https://0reg.dev/blog/electron-math

sy64

https://claroty.com/team82/research/practical-and-theoretical-attacks-in-the-industrial-landscape-part-2

sy64

https://yanglingxi1993.github.io/dirty_pagetable/dirty_pagetable.html

我们在最新的 Google Pixel 7（谷歌迄今为止最安全、最私密的手机）上实现了特权提升。我们利用最近发现的 0-day 漏洞（CVE-2023-21400）完成了漏洞利用，并成功绕过了 Google Pixel 7 上部署的所有缓解技术。