Latest Infosec News and Articles
- Weblogic Remote Code Execution Exploiting CVE-2019-2725 https://blog.cybercastle.io/weblogic-remote-code-execution-exploiting-cve-2019-2725/
- Microsoft Teams and Skype Logging Privacy Issue https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/microsoft-teams-and-skype-logging-privacy-issue/
- Bypassing and exploiting Bucket Upload Policies and Signed URLs https://labs.detectify.com/2018/08/02/bypassing-exploiting-bucket-upload-policies-signed-urls/
- Pentesting the ELK Stack https://insinuator.net/2021/01/pentesting-the-elk-stack/
- Arbitrium is a cross-platform, fully undetectable remote access trojan, to control Android, Windows and Linux and doesn’t require any firewall exceptions or port forwarding rules https://github.com/BenChaliah/Arbitrium-RAT
- Python module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can also be used with IDA Pro and Rekall to dump in-memory PE files and reconstruct imports https://github.com/blackberry/pe_tree
- Finding 0day to hack Apple https://github.com/httpvoid/writeups/blob/main/Apple-RCE.md
- Malspam with Word docs uses macro to run Powershell script and steal system data https://github.com/httpvoid/writeups/blob/main/Apple-RCE.md
- Unauthenticated XSS to Remote Code Execution Chain in Mautic < 3.2.4 https://www.horizon3.ai/disclosures/mautic-unauth-xss-to-rce.html
- Shellcode Injection using Nim and Syscalls https://ajpc500.github.io/nim/Shellcode-Injection-using-Nim-and-Syscalls/
Latest Vulnerabilities, POCs, and Exploit
- WordPress Plugin Simple Job Board 2.9.3 – Authenticated File Read (Metasploit) https://www.exploit-db.com/exploits/49450
- Voting System 1.0 – File Upload RCE (Authenticated Remote Code Execution) https://www.exploit-db.com/exploits/49445
- ChurchRota 2.6.4 – RCE (Authenticated) https://www.exploit-db.com/exploits/49443
- Inteno IOPSYS 3.16.4 – root filesystem access via sambashare (Authenticated) https://www.exploit-db.com/exploits/49438
- Cisco UCS Manager 2.2(1d) – Remote Command Execution https://www.exploit-db.com/exploits/49436
