CVE-2022-22583 CVE-2022-22616 CVE-2022-22639 CVE-2022-26690 CVE-2022-26712 CVE-2022-26728 CVE-2022-32786 CVE-2022-32800

https://github.com/jhftss/POC

CVE-2023-25135
vBulletin - RCE + exploit

Link:- https://system32.ink/news-feed/p/217/

Want to learn about OSINT (Open Source Threat Intelligence and Threat Intelligence Tools?

Check our new blog on:

What is OSINT? | OSINT Framework | Tools for OSINT | Best OSINT Techniques

Here is the link to his blog.
  https://techofide.com/blogs/what-is-osint-osint-framework-tools-for-osint-best-osint-techniques/

CVE-2021-21974 | Ransomware targeting VMware ESXi

These attacks are detected globally and especially in Europe. According to experts from the ecosystem as well as autorities, they might be related to Nevada ransomware and are using CVE-2021-21974 (OpenSLP as used in ESXi has a heap-overflow vulnerability) as compromission vector. Investigation are still ongoing to confirm those assumptions.

Exploit:- https://system32.ink/news-feed/p/219/

📡Space Jam: Exploring Radio Frequency Attacks in Outer Space

Download:- https://system32.ink/news-feed/p/220/

Microsoft Exchange: OWASSRF + TabShell
(CVE-*2022-41076)*

The TabShell vulnerability its a form of Privilege Escalation which allows breaking out of the restricted Powershell Sandbox after you have successfully gained access through OWASSRF.

For a detailed write see research:
https://blog.viettelcybersecurity.com/tabshell-owassrf/

*PoC:
*
https://gist.github.com/testanull/518871a2e2057caa2bc9c6ae6634103e

#owa #ssrf #tabshell #poc

@virus303

@NetEditors

SCRIPT HTTP-SQL-INJECTION (NMAP)
download

Hi, all a new blog on Smurf attack is now here

Learn the technique to perform this Ddos attack.

Here is the link to the blog

https://techofide.com/blogs/what-is-smurf-attack-what-is-the-denial-of-service-attack-practical-ddos-attack-step-by-step-guide/

All Common Ports

Enumerations and Exploitations

https://pentestbook.six2dez.com/enumeration/ports

SSH key injection in Google Cloud Compute Engine [Google VRP]

https://blog.stazot.com/ssh-key-injection-google-cloud/

Command Injection Cheat Sheet

#bugbounty #infosec #hacking #cybersecurity

A new post for those who want to learn Metasploit and Meterpreter.

Hi Cyber learners

Check my new post + Video on Metasploit and Meterpreter.

How to Use Metasploit | Meterpreter | Reverse shell | Metasploit Tutorial


https://techofide.com/blogs/how-to-use-metasploit-meterpreter-reverse-shell-metasploit-tutorial/

Apache SCXML RCE (PoC included) + Article

Link:- https://system32.ink/news-feed/p/225/

exploit for an actively exploited zero-day vulnerability affecting the GoAnywhere MFT administration consoles.

Exploit: https://system32.ink/news-feed/p/227/