Internet search engine for security researchers Contact Us: [email protected]
Joined August 2022
- Tweets1.7K
- Following182
- Followers26.1K
- Likes984
Hunter retweeted
⚠️ Over 7,100 #WordPress sites have been hit by the 'Balada Injector' #malware, which exploits sites using a vulnerable version of the Popup Builder plugin.
Read More ➡️ thehackernews.com/2024/01/ba…
#cybersecurity #hacking
Hunter retweeted
curl/libcurl HIGH CVE-2023-38545 seemed to have a patch diff out early?
gitlab.com/redhat/centos-str…
Hunter retweeted
🚨 Hundreds of Citrix VPN instances exploited via CVE-2023-3519 are harvesting corporate credentials in cleartext.
At this time, Shodan shows 406 compromised instances with malicious JavaScript code injected into the login page: shorturl.at/qQVX4 (URL shortener because Twitter didn't like my direct links).
Also, I noticed that there is a relatively new and active domain, which is not mentioned in the X-Force report on this campaign (securityintelligence.com/x-f…).
C2/Exfil domain: cloud-js[.]cloud
Hunter retweeted
Today McDonalds Point-of-Sale system setup and executables were leaked online. An unidentified Threat Actor claims to have stolen the executables, installation scripts, etc. by pivoting off of McDonalds Free Wifi
Hunter retweeted
PoC released for Chrome zero-day CVE-2023-4863 vulnerability securityonline.info/poc-rele…
Hunter retweeted
🧵 Let's take a quick dive into the dark world of #cryptomining: Our researchers have uncovered 7 real-world cases, each revealing interesting tools & techniques.
But today, we focus on the benefits attackers gain when abusing #PRoot 🧰⬇️
Hunter retweeted
The 2.1.1 release of #Apache #Superset fixes vulnerabilities we reported for admin RCE, LFI, and cred harvesting.
These are exploitable in conjunction with the auth bypass issue we previously reported CVE-2023-27524. We’re seeing 2K+ Internet-facing servers still affected by CVE-2023-27524.
horizon3.ai/apache-superset-…
Hunter retweeted
How I Escalated a Time-Based SQL Injection to RCE
SQL to RCE :
- infosecwriteups.com/how-i-es…
#infosec #cybersec #bugbountytips
Hunter retweeted
CVE-2020-19909 is everything that is wrong with CVEs
Another 9.8 CRITICAL curl problem. All made up.
daniel.haxx.se/blog/2023/08/…
Hunter retweeted
#Cloud_Security
A Pain in the NAS: Exploiting Cloud Connectivity to PWN your NAS: Synology DS920+ Edition (CVE-2022-45188)
claroty.com/team82/research/…
Hunter retweeted
CVE-2023-20562 PoC, By triggering an arbitrary write on the EPROCESS token, privilege escalation to SYSTEM level is achieved. github.com/zeze-zeze/HITCON-…
Hunter retweeted
Here is a little analysis of @masthoon's CVE-2023-29360, a beautiful LPE he used during last Pwn2own: big5-sec.github.io/posts/CVE…
Hunter retweeted
#exploit
1. WPS Office RCE
github.com/ba0gu0/wps-rce
2. CVE-2023-33242:
Lindell17 ECDSA Private Key information disclosure
github.com/d0rb/CVE-2023-332…
Hunter retweeted
Hunter
Hunter is an internet search engine for internet researchers. It is capable of performing fingerprint retrieval of internet-connected devices and services.
hunter.how/
#cybersecurity #infosec
Hunter retweeted
Researchers have uncovered security gaps in #Microsoft's PowerShell Gallery that could enable typosquatting attacks and metadata spoofing.
Fake malicious packages deceive users and can lead to supply chain attacks.
Read details: thehackernews.com/2023/08/ex…
#cybersecurity #hacking
Hunter retweeted
⚠️ Urgent Security Alert!
Critical vulnerabilities discovered in Ivanti Avalanche, an enterprise mobile device management solution. Hackers could exploit these flaws for code execution and more.
Read: thehackernews.com/2023/08/cr…
Update your software ASAP!
#cybersecurity #hacking
Hunter retweeted
My recreation of the ITW exploit for CVE-2023-3079. Has a bit of a explanation of the vuln in the comments. Uses the same hole technique as CVE-2023-2033. #V8 github.com/mistymntncop/CVE-…
