CVE-2020-1300: Remote Code Execution Through Microsoft Windows CAB Files https://www.zerodayinitiative.com/blog/2020/7/8/cve-2020-1300-remote-code-execution-through-microsoft-windows-cab-files
Zero Day Initiative
Zero Day Initiative — CVE-2020-1300: Remote Code Execution Through Microsoft Windows CAB Files
In this excerpt of a Trend Micro Vulnerability Research Service vulnerability report, Pengsu Cheng and Yazhi Wang of the Trend Micro Research Team detail a recent code execution vulnerability in Microsoft Windows. The bug was originally discovered and reported…
Breaking HTTPS in the IoT: Practical Attacks For Reverse Engineers https://labs.bishopfox.com/tech-blog/breaking-https-in-the-iot
Bishop Fox
Breaking HTTPS in the IoT: Practical Attacks For Reverse Engineers
Bishop Fox's Nathan Elendt discusses three attack techniques for performing Man-in-the Middle attacks against production-grade, HTTPS-protected Things.
CVE-2020-14947 The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947 https://github.com/mhaskar/CVE-2020-14947
GitHub
GitHub - mhaskar/CVE-2020-14947: The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947
The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947 - mhaskar/CVE-2020-14947
US Local Government Services Targeted by New Magecart Credit Card Skimming Attack https://blog.trendmicro.com/trendlabs-security-intelligence/us-local-government-services-targeted-by-new-magecart-credit-card-skimming-attack
.net core evasion detection https://pentestlaboratories.com/2020/07/02/net-core-evasion-detection/
Pentest Laboratories
.NET Core Evasion Detection
Environments that have installed the .NET Core (version 3.11) are affected by a directory traversal vulnerability since the environment variable doesn’t sanitize user input and therefore cust…
Securing Critical Infrastructure: 4 Steps for Reducing Cyber Risk https://www.tenable.com/blog/securing-critical-infrastructure-four-steps-for-reducing-cyber-risk
Tenable®
Securing Critical Infrastructure: 4 Steps for Reducing Cyber Risk
For critical infrastructure organizations, the gains of automation and IoT technology have also meant heightened threats.
Would you like some RCE with your Guacamole? https://research.checkpoint.com/2020/apache-guacamole-rce/
Check Point Research
Would you like some RCE with your Guacamole? - Check Point Research
Research by: Eyal Itkin Overview In many companies, the daily routine involves coming to the office each day to work on your company computer, safely inside the corporate network. Once in a while, a worker may need special offsite access and will connect…
Remote Code Execution Vulnerability in Zoom Client for Windows (0day) https://blog.0patch.com/2020/07/remote-code-execution-vulnerability-in.html
0Patch
Remote Code Execution Vulnerability in Zoom Client for Windows (0day)
by Mitja Kolsek, the 0patch Team [Update 7/13/2020: Zoom only took one (!) day to issue a new version of Client for Windows that fixes this...
PhishINvite with Malicious ICS Files https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/phishinvite-with-malicious-ics-files/
Trustwave
PhishINvite with Malicious ICS Files | Trustwave
Employing a popular type of file as an attachment to malicious emails is a common trick by cybercriminals to boost the success rate of their cyber-attacks. As iCalendars files are not included in the list of automatically blocked attachments by email clients…
Hardware breakpoints and exceptions on Windows https://ling.re/hardware-breakpoints/
LingSec
Hardware breakpoints and exceptions on Windows
Hardware breakpoints on Windows and common detection vectors
Combinig LUAFV PostLuafvPostReadWrite Race Condition PE with DiagHub collector exploit -> from standard user to SYSTEM https://decoder.cloud/2019/04/29/combinig-luafv-postluafvpostreadwrite-race-condition-pe-with-diaghub-collector-exploit-from-standard-user-to-system/
Decoder's Blog
Combinig LUAFV PostLuafvPostReadWrite Race Condition PE with DiagHub collector exploit -> from standard user to SYSTEM
In this short post I will show you how to combine Forshaw’s Microsoft Windows 10 1809 – LUAFV PostLuafvPostReadWrite SECTION_OBJECT_POINTERS Race Condition Privilege Escalation with F…
Great contribution --> Introducing Kernel Data Protection, a new platform security technology for preventing data corruption https://www.microsoft.com/security/blog/2020/07/08/introducing-kernel-data-protection-a-new-platform-security-technology-for-preventing-data-corruption/
Microsoft News
Introducing Kernel Data Protection, a new platform security technology for preventing data corruption
Kernel Data Protection (KDP) is a set of APIs that provide the ability to mark some kernel memory as read-only, preventing attackers from ever modifying protected memory.
A Comprehensive Guide to JAVA Serialization Vulnerability https://medium.com/bugbountywriteup/a-comprehensive-guide-to-java-serialization-vulnerability-18fad6e37b64
Medium
A Comprehensive Guide to JAVA Serialization Vulnerability
TLDR
Understanding the root cause of F5 Networks K52145254: TMUI RCE vulnerability CVE-2020-5902
https://research.nccgroup.com/2020/07/12/understanding-the-root-cause-of-f5-networks-k52145254-tmui-rce-vulnerability-cve-2020-5902/
https://research.nccgroup.com/2020/07/12/understanding-the-root-cause-of-f5-networks-k52145254-tmui-rce-vulnerability-cve-2020-5902/
Nccgroup
Cyber Security Research
Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.
Bean Stalking: Growing Java beans into RCE https://securitylab.github.com/research/bean-validation-RCE
GitHub Security Lab
Bean Stalking: Growing Java beans into RCE
In this post I’ll show how input validation which should be used to prevent malformed inputs to enter our applications, open up the doors to Remote Code Execution (RCE).