Chinese-linked actors are targeting edge devices across Southeast Asia, leveraging DoH for C2 communications and large-scale DNS hijacking via iptables.
See details:
EN: qiita.com/Y4er/items/0b60717…
CN: qiita.com/Y4er/items/549cfca…
This is friend’s analysis of the SolarWinds SEM RCE I discovered.
My detailed analysis report of SolarWinds Security Event Manager AMF Deserialization RCE (CVE-2024-0692), with two methods to achieve RCE
exp10it.io/2024/03/solarwind…
xz.aliyun.com/t/14044
公开了一些文章
VMware vROPS RCE of java bean y4er.com/posts/vmware-vrops-…
VMware vROPS 文件读取到反序列化RCE y4er.com/posts/vmware-vrops-…
Apache Geode/VMware GemFire Deserialize RCE y4er.com/posts/apache-geode-…
Trend Micro Mobile Security 认证绕过/文件上传/文件包含 RCE y4er.com/posts/trend-micro-m…
SysAid On-Prem Software CVE-2023-47246
Reproduced
We've recreated a proof-of-concept for the SysAid CVE-2023-47246 remote code execution and compromise -- blog post coming ASAP😜
Big thanks to @gleeda @HuskyHacksMK @DaveKleinatland @calebjstewart and the whole @HuntressLabs crew helping dig into this one!
CVE-2023-39476 Inductive Automation Ignition JavaSerializationCodec Deserialization RCE
xz.aliyun.com/t/12813
After two days, I finally reproduced the CVE-2023-39476 Inductive Automation Ignition JavaSerializationCodec Deserialization RCE vulnerability submitted to ZDI by @steventseeley
Y4er retweeted
Cookieless DuoDrop: IIS Auth Bypass & App Pool Privesc in ASP .NET Framework (CVE-2023-36899)
soroush.me/blog/2023/08/cook…
#Appsec #bugbountytips
Actually, I can still use the `init` attack vector like this
Reproducing CVE-2023-38646: Metabase Pre-auth RCE
blog.calif.io/p/reproducing-…
CC @peterjson @testanull
Great article! But I think you are missing a very critical part, CVE-2023-20887 is actually a patch bypass for CVE-2022-31702.
This is an analysis article I wrote, please read it and correct me.
xz.aliyun.com/t/12608
🚨 Here is the #Exploit and technical detail for the CVE-2023-20887 Pre-Authenticated Remote Code Execution in #VMWare vRealize Network Insight.
summoning.team/blog/vmware-v…
Finally released the patch, patch it immediately!
Today we released a new Critical Severity VMware Security Advisory. Check out vmware.com/security/advisori…. #VMware
Nacos Hessian RCE
y4er.com/posts/nacos-hessian…
MXsecurity Command Injection and Hardcoded Credential Vulnerabilities
y4er.com/posts/mxsecurity-co…
Y4er retweeted
It's TGIF and we have a new blog post by our team member, @testanull
Microsoft Exchange Powershell Remoting Deserialization leading to RCE (CVE-2023-21707)
Thanks to all the other team members for reviewing it as well.
starlabs.sg/blog/2023/04-mic…
CVE-2023-28432 Minio information leakage leads to RCE
y4er.com/posts/minio-cve-202…