/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 bohops.com
CVE-2019-1378: Exploiting an Access Control Privilege Escalation Vulnerability in Windows 10 Update Assistant (WUA) - bohops
| | www.welivesecurity.com
PDF sample malicious and very powerful when vulnerabilities combined
4.0 parsecs away

Travel
| | ESET researchers identified a malicious PDF sample that revealed that the sample exploited two unknown vulnerabilities, a remote-code execution vulnerability in Adobe Reader and a privilege escalation vulnerability in Microsoft Windows, that when combined became extremely powerful.
| | blog.acrossecurity.com
ACROS Security Blog: Bridging the "Security Update Gap" With 0patch
4.4 parsecs away

Travel
| | Vulnerability Patches Can be Really Small and Easy to Apply Yesterday we tweeted a proof-of-concept actual micropatch for the "Winshock" v...
| | www.syntaxbearror.io
Disable Print Spooler on Domain Controllers (If You Can) | Syntax Bearror
4.8 parsecs away

Travel
| | Disable print spooling on your Domain Controllers to avoid a privilege escalation and remote code execution vulnerability with active PoC's in the wild.
| | blog.fox-it.com
Approximately 2000 Citrix NetScalers backdoored in mass-exploitation campaign - Fox-IT International blog
12.1 parsecs away

Travel
| Fox-IT (part of NCC Group) has uncovered a large-scale exploitation campaign of Citrix NetScalers in a joint effort with the Dutch Institute of Vulnerability Disclosure (DIVD). An adversary appears to have exploited CVE-2023-3519 in an automated fashion, placing webshells on vulnerable NetScalers to gain persistent access. The adversary can execute arbitrary commands with this webshell,...