Month: May 2024

CISA

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

May 9, 2024

CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based...

CISA

CISA: CISA and FBI Release Secure by Design Alert to Urge Manufacturers to Eliminate Directory Traversal Vulnerabilities

May 9, 2024

CISA and FBI Release Secure by Design Alert to Urge Manufacturers to Eliminate Directory Traversal Vulnerabilities Today, CISA and the...

CISA

CISA: CISA Releases Two Industrial Control Systems Advisories

May 9, 2024

CISA Releases Two Industrial Control Systems Advisories CISA released two Industrial Control Systems (ICS) advisories on May 07, 2024. These...

d3dbd5723d64481cef0060e478a0ca2593580d5b65f502af0a19b2224ef4eed1

Ioctlance – A Tool That Is Used To Hunt Vulnerabilities In X64 WDM Drivers

May 8, 2024

Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint...

3db6189c8405df361bdf297233304fdd8c9d4da9c5ad8390f135e6056134c07c

NTLM Relay Gat – Powerful Tool Designed To Automate The Exploitation Of NTLM Relays

May 8, 2024

NTLM Relay Gat is a powerful tool designed to automate the exploitation of NTLM relays using ntlmrelayx.py from the Impacket...

GoPhish Login Page Detected – 34[.]133[.]186[.]252:4444

May 8, 2024

The Information provided at the time of posting was detected as "GoPhish Login Page". Depending on when you are viewing...

GoPhish Login Page Detected – 195[.]133[.]13[.]135:4444

May 8, 2024

The Information provided at the time of posting was detected as "GoPhish Login Page". Depending on when you are viewing...

GoPhish Login Page Detected – 64[.]227[.]178[.]226:3333

May 8, 2024

The Information provided at the time of posting was detected as "GoPhish Login Page". Depending on when you are viewing...

GoPhish Login Page Detected – 51[.]159[.]6[.]180:3333

May 8, 2024

The Information provided at the time of posting was detected as "GoPhish Login Page". Depending on when you are viewing...

HackerOne Bug Bounty Disclosure: member-role-which-doesn-t-have-permission-to-send-message-can-send-by-executing-channel-commands-ramsakal

May 8, 2024

Company Name: Mattermost Company HackerOne URL: https://hackerone.com/mattermost Submitted By:ramsakal7582Link to Submitters Profile:https://hackerone.com/ramsakal7582 Report Title:Member role which doesn't have permission to...

HackerOne Bug Bounty Disclosure: incorrect-type-conversion-in-interpreting-ipv-mapped-ipv-addresses-and-below-curl-results-in-indeterminate-ssrf-vulnerabilities-z-r-yu

May 8, 2024

Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:z3r0yuLink to Submitters Profile:https://hackerone.com/z3r0yu Report Title:Incorrect Type Conversion in interpreting IPv4-mapped IPv6...

HackerOne Bug Bounty Disclosure: improper-access-control-financial-fraud-allows-attacker-to-disclose-add-arbitrary-products-to-another-s-user-s-order-doomerhunter

May 8, 2024

Company Name: Shipt Company HackerOne URL: https://hackerone.com/shipt Submitted By:doomerhunterLink to Submitters Profile:https://hackerone.com/doomerhunter Report Title:Improper Access Control + Financial fraud allows...

HackerOne Bug Bounty Disclosure: a-member-with-editor-permissions-can-create-an-access-list-that-cannot-be-modified-viewed-or-deleted-mr-asg

May 8, 2024

Company Name: Teleport Company HackerOne URL: https://hackerone.com/teleport Submitted By:mr_asgLink to Submitters Profile:https://hackerone.com/mr_asg Report Title:A member with editor permissions can create...

Sliver C2 Detected – 168[.]138[.]179[.]33:31337

May 8, 2024

The Information provided at the time of posting was detected as "Sliver C2". Depending on when you are viewing this...

Sliver C2 Detected – 170[.]64[.]249[.]50:31337

May 8, 2024

The Information provided at the time of posting was detected as "Sliver C2". Depending on when you are viewing this...

Critical Vulnerability in Tinyproxy Instances

May 8, 2024

Tinyproxy has released security fixes addressing a critical vulnerability (CVE-2023-49606) in their internet-exposed instances. The vulnerability has a Common Vulnerability...