Live Every Tuesday, Saturday and Sunday on Twitch: https://twitch.tv/nahamsec Signup for HackerOne: https://nahamsec.stream/HackerOne Signup for Hacker101: h...

Miku Fan and Program Abalysis

Win32k Exploit by Grant Willcox. Contribute to exodusintel/CVE-2019-0808 development by creating an account on GitHub.

Nowadays, cybercriminals have a thousand and one ways of creating and spreading ransomware. However, those fighting ransomware are not standing still either. In fact, we have two pieces of good news to share with you.

Nmap NSE Script to Detect vBulletin pre-auth 5.x RCE CVE-2019-16759 - r00tpgp/http-vuln-CVE-2019-16759

changes to this registry entry are very rare, make sure to add it to your watchlist (seen it used as one item part of an RDP tunnling automation payload, main objective is to reduce sysadmins suspicion) #dfir

We reported an overflow vulnerability in the base64 decode function of Exim on 5 February, 2018, identified as CVE-2018-6789. This bug exists since the first commit of exim, hence ALL versions are affected. According to our research, it can be leveraged to…

Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment - DanMcInerney/icebreaker

Win32k Exploit by Grant Willcox. Contribute to exodusintel/CVE-2019-0808 development by creating an account on GitHub.

by Florian Bogner The case was originally published at: https://bogner.sh/2018/11/0-day-in-elba5s-network-installation-overtaking-your-companys-bank-account/ This blog post is about a previously unknown critical vulnerability in …

Vulnerability disclosure & how NOT to handle it, featuring LG electronics.

Click to view Frederik's blog post