Dark Reading: Attacks/Breaches
Better Together: Why It's Time for Ops and Security to Converge

Threat actors are becoming only more sophisticated and determined.

Dark Reading: Attacks/Breaches
A Third of Global Organizations Were Breached Over Seven Times in the Past Year

Cyber Risk Index report highlights elevated risk as organizations struggle with visibility.

___________________________
@hacking_Attack
@Hacking_Video

Pass the Hash Attack
https://infosecwriteups.com/pass-the-hash-attack-ddf956cf9551?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

We hear about breaches on a daily basis, and sometimes even about system compromises, so what stages does the attacker take and how does…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/pass-the-hash-attack-ddf956cf9551?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Fastly Subdomain Takeover $2000
https://medium.com/@valluvarsploit/fastly-subdomain-takeover-2000-217bb180730f?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

WHOAMI
My name is Alexandar Thangavel AKA ValluvarSploit, a full-time bug hunter and trainer. I love recon. I am the founder and CEO of…Continue reading on Medium » (https://medium.com/@valluvarsploit/fastly-subdomain-takeover-2000-217bb180730f?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Roxy Fileman 1.4.6 Remote Shell Upload

https://4.bp.blogspot.com/-mkcU-A73eZ4/WWlu7eKaHEI/AAAAAAAAIJY/m_4841aOwNcKGKR9ykgWprFWjwy04TKNACLcBGAs/s1600/h11.png Roxy Fileman versions 1.4.6 and below remote shell upload proof of concept exploit.

SHA-256 | 16a9c59173c82b869a340397a5e68377531e0e0f9be9781793142e4f47786e1bDownload # Exploit Title: Roxy Fileman <=
# Date: 11/12/2022
# Exploit Author: Hadi Mene Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
ZTE ZXHN-H108NS Stack Buffer Overflow / Denial Of Service

https://4.bp.blogspot.com/-42b-8Yu8ql4/WWlvfoDuyhI/AAAAAAAAIQE/GMGQD7Uo7DMncRccI_LNcWgfvYRkd0zwQCLcBGAs/s1600/h86.png
ZTE ZXHN-H108NS router with firmware version H108NSV1.0.7u_ZRD_GR2_A68 remote stack buffer overflow exploit that causes a denial of service condition.

SHA-256 | 7a558d9353686c1fadfc2913a8a5f9de3a9bd0334db283f12ce28be10cb28926

Download
# Exploit Title: Router ZTE-H108NS - Stack Buffer Overflow (DoS)
# Date: 19-11-2022
# Exploit Author: George Tsimpidas # Vendor: https://www.zte.com.cn/global/
# Firmware: H108NSV1.0.7u_ZRD_GR2_A68
# Usage: python zte-exploit.py
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Microsoft Outlook 2019 16.0.12624.20424 Remote Code Execution

https://2.bp.blogspot.com/-LETyKySuDgQ/WWlvb4o-z5I/AAAAAAAAIPU/5gCHtKhwhLoet_fHEL-XnPuLlDk7q9atQCLcBGAs/s1600/h76.png
This is a whitepaper discussing CVE-2020-1349 where a remote code execution vulnerability exists in Microsoft Outlook 2019 version 16.0.12624.20424 when it fails to properly handle objects in memory.

SHA-256 | 0cbeab94a42718d9dc0fbddcb25e670799fb9171ff9f4aa0d640945941711759

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
F5 BIG-IP iControl Cross Site Request Forgery

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Microsoft Outlook 2019 16.0.12624.20424 Out-Of-Bounds Read

https://2.bp.blogspot.com/-swqN45HZtSI/WWlvXv0Z4fI/AAAAAAAAIOY/czRV0nNAPTIk5N0xfOCTXuQJzRjI48a4wCLcBGAs/s1600/h53.png
This is a whitepaper along with a proof of concept eml file that demonstrates an out-of-bounds read on Outlook 2019 version 16.0.12624.20424. NIST references this issue as simply an information disclosure.

SHA-256 | d7cbdf78b8d88b5ef4f17ae322717c6adec1d335f3eddae9fc75f883c66bbc76

Download
Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video