🖥 https://system32.ink/mediatek-wi-fi-chipsets-cve-2024-20017-exploit/

🖥 MediaTek Wi-Fi Chipsets CVE-2024-20017 Exploit 💻

⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰
🎮 Zero Click Exploit 😎
⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰

ℹ️ The vulnerability is a buffer overflow caused by a copy operation that uses a length value taken directly from attacker-controlled packet data without bounds checking. Overall it’s a pretty simple bug to understand as it’s just a run-of-the-mill stack buffer overflow, so I thought I’d use this bug as a case study to explore multiple exploit strategies that can be taken using for this one bug, applying different exploit mitigations and conditions along the way. I think this is interesting as it provides an opportunity to focus on the more creative parts of exploit development: once you know there’s a bug, and you understand the constraints, coming up with all of the different ways you can influence the logic of the application and the effects of the bug to get code execution and pop a shell.➡️

🖥 https://system32.ink/web-help-desk-hardcoded-credential-cve-2024-28987-exploit/

🖥 Web Help Desk Hardcoded Credential CVE-2024-28987 Exploit #️⃣

ℹ️ The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data. ➡️

🚩 गणेशोत्सव की आप सभी को हार्दिक शुभकामनाएं।

🚩-------------------- गणनायकाय गणदैवताय गणाध्यक्षाय धीमहि । गुणशरीराय गुणमण्डिताय गुणेशानाय धीमहि…🚩

🔠 🔣 https://system32.ink/litespeed-unauthorized-account-takeover-cve-2024-44000-exploit/ 🖥

🖥 LiteSpeed Unauthorized Account Takeover CVE-2024-44000 Exploit 🎮

⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰⏰

ℹ️ CVE-2024-44000 is a vulnerability in the LiteSpeed Cache plugin, a popular WordPress plugin.📡 This vulnerability affects session management in LiteSpeed Cache, allowing attackers to gain unauthorized access to sensitive data. ➡️

🖥➡️ https://system32.ink/onimai-rat-v1-7-1-leaked-by-onimai-fuckers/

🫡 Onimai Rat v1.7.1 Leaked By ONIMAI FUCKERS 🎮

✏️Features

➡️Real-Time Desktop Monitoring
➡️Secure File Transfer
➡️Hidden VNC (HVNC)
➡️Encrypted Communication
➡️UAC Bypass
➡️Remote Webcam Access
➡️Multi-IP Host Support
➡️Crypto Clipper
➡️Password Recovery
➡️Anti-Debug & Anti-Sandbox
➡️Anti-Virtualization & Anti-Tamper
➡️Anti-Screenshare
➡️Ring 3 Rootkit
➡️In-Memory Execution
#️⃣Fully Undetected Scantime
#️⃣Undetected Runtime
#️⃣Remote Shell Access
#️⃣Encrypted TCP Connections
#️⃣Reverse Proxy Support
#️⃣Fileless Execution
#️⃣Persistent Access
#️⃣.Net & VB Code Execution
#️⃣System Watcher
#️⃣Startup Manager
#️⃣Registry Editor
#️⃣Remote Desktop (with Mouse Graphics Support)
#️⃣Any.Run Bypass
#️⃣FUD on Tria.ge
#️⃣NetLimiter & Wireshark Bypass
#️⃣System Watcher

🖥 🔣 https://system32.ink/vicidial-unauthenticated-sqli-to-rce-cve-2024-8503-and-cve-2024-8504-exploit/

📞VICIdial Unauthenticated SQLi to RCE (CVE-2024-8503 and CVE-2024-8504) Exploit 🎮

ℹ️These vulnerabilities allow an attacker to retrieve administrative credentials through SQLi and ultimately execute arbitrary code on the target server via an RCE attack.➡️

🚨An attacker with Unauthenticated access to VICIdial as an "agent" can execute arbitrary shell commands as the "root" user. This attack can be chained with CVE-2024-8503 to execute arbitrary shell commands starting from an unauthenticated perspective.🎚

⏰⏰⏰⏰⏰⏰⏰⏰⏰

🖥 ➡️ https://system32.ink/google-chromium-v8-engine-unauthorized-access-or-execution-of-malicious-code-exploit/

🖥 Google Chromium V8 Engine Unauthorized Access or Execution Of Malicious Code Exploit 💻

ℹ️ CVE-2024-7965 affects Chrome’s V8 JavaScript engine, allowing attackers to exploit heap corruption through specially crafted HTML pages. Its high CVSS score of 8.8 indicates a severe threat to system confidentiality and integrity.

📢Google has acknowledged that CVE-2024-7965 is actively being exploited. A critical patch has been released in Chrome versions 128.0.6613.84 for Linux and 128.0.6613.84/.85 for Windows and Mac.

🛡 Due to the active exploitation of this vulnerability, it is crucial for all users to update their browsers immediately to the latest version to protect against potential data breaches and security risks.

🖥 🔣 https://system32.ink/nanocore-rat-malware/

🤡 NanoCore Rat Malware 🎮

💻 NanoCore is an example of a RAT, which is a type of malware designed to provide an attacker with access to and control over an infected machine. Like most RATs, NanoCore provides a wide range of capabilities, including:

#️⃣Screen capture
#️⃣Remote access
#️⃣Keylogging
#️⃣Password stealing
✏️Screen locking
#️⃣Data exfiltration
#️⃣Run backdoor commands
#️⃣Webcam session theft
#️⃣Cryptocurrency mining

ℹ️ NanoCore is one of the leading malware variants currently in operation. In fact, it was number ten in Check Point Research’s list of the top malware families. ➡️