TGViewer
Channel Public Channel
cKure Red

cKure Red

@ckured

The director's cut on critical feeds from InfoSec world 🌎

Main Channel: @cKure

☕️ or queries email us
📨 i@ckure.org
Open in Telegram
Subscribers
2.79K
Photos
73
Videos
71
Links
482

Showing posts older than #223 · Back to latest

Older Posts 20 shown
Post #222 495
🔧 Tool: Femtobrowser. A really basic web browser written in ~500 lines of V using only the integrated vlib library. It was not designed to be fast or efficient, but rather to be a simple example of how to use the vlib library to create a web browser. Made in few hours to mess around with V.

https://github.com/SheatNoisette/femtobrowser
GitHub GitHub - SheatNoisette/femtobrowser: A Q'n'D tiny browser made in V A Q'n'D tiny browser made in V. Contribute to SheatNoisette/femtobrowser development by creating an account on GitHub.
Post #221 1.35K
E-book 📖 / pdf: Top OSINT & Infosec Resources for You and Your Team (2022 Edition): 100+ Blogs, Podcasts, YouTube, Books, and more!

https://www.maltego.com/blog/top-osint-infosec-resources-for-you-and-your-team/
Maltego Top OSINT & Infosec Resources for You and Your Team (2022 Edition): 100+ Blogs, Podcasts, YouTube Channels, Books, and more! More than 100 websites, blogs, podcasts, YouTube channels, books, and other learning resources relevant to OSINT, cybersecurity, cybercrime, and trust & safety investigations.
Post #216
cKure Red pinned «Remote Code Execution in Exchange PowerShell Backend. https://www.zerodayinitiative.com/blog/2022/11/14/control-your-types-or-get-pwned-remote-code-execution-in-exchange-powershell-backend»
Post #215 898
Remote Code Execution in Exchange PowerShell Backend.

https://www.zerodayinitiative.com/blog/2022/11/14/control-your-types-or-get-pwned-remote-code-execution-in-exchange-powershell-backend
Zero Day Initiative Zero Day Initiative — Control Your Types or Get Pwned: Remote Code Execution in Exchange PowerShell Backend By now you have likely already heard about the in-the-wild exploitation of Exchange Server, chaining CVE-2022-41040 and CVE-2022-41082. It was originally submitted to the ZDI program by the researcher known as “DA-0x43-Dx4-DA-Hx2-Tx2-TP-S-Q from GTSC”. After…
Post #214 917
cKure Red 🚨 Researchers from Google's Project Zero security team said that the Samsung S10, A50, and A51 models were affected, and that only devices powered by Samsung's home-made Exynos chip were vulnerable, meaning the targets (as well as the attackers) were located…
This (t.me/ckuRED/212) comes as nation state actors are involved in wild exploitation.
Telegram cKure Red 🚨 Researchers from Google's Project Zero security team said that the Samsung S10, A50, and A51 models were affected, and that only devices powered by Samsung's home-made Exynos chip were vulnerable, meaning the targets (as well as the attackers) were located…
Post #213
cKure Red pinned «🚨 Researchers from Google's Project Zero security team said that the Samsung S10, A50, and A51 models were affected, and that only devices powered by Samsung's home-made Exynos chip were vulnerable, meaning the targets (as well as the attackers) were located…»
Post #212 934
🚨 Researchers from Google's Project Zero security team said that the Samsung S10, A50, and A51 models were affected, and that only devices powered by Samsung's home-made Exynos chip were vulnerable, meaning the targets (as well as the attackers) were located in Europe, the Middle East, or Africa.

CVE-2021-25337, CVE-2021-25369, CVE-2021-25370

https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html

https://www.techradar.com/news/samsung-phones-are-being-targeted-by-some-seriosuly-shady-zero-days
projectzero.google A Very Powerful Clipboard: Analysis of a Samsung in-the-wild exploit chain Posted by Maddie Stone, Project Zero Note: The three vulnerabilities discussed in this blog wer...
Post #210 989
cKure Red Zero-Day writeup: Accidental $70k Google Pixel Lock 🔐 Screen Bypass. https://bugs.xdavidhu.me/google/2022/11/10/accidental-70k-google-pixel-lock-screen-bypass
https://youtu.be/dSgSnYPgzT0
YouTube Pixel 6 Full Lockscreen Bypass POC Accompanying blog post: Accidental $70k Google Pixel Lock Screen Bypass https://bugs.xdavidhu.me/google/2022/11/10/accidental-70k-google-pixel-lock-screen-bypass/ I found a vulnerability affecting seemingly all Google Pixel phones where if you gave me any…
Post #208
cKure Red pinned «● Exclusive - Zero-Day: A medium to high severity vulnerability in SAP portal allows a low privileged authenticated user to escalate privileges within the system abusing certain API end-points. The latest software / CMS is vulnerable and possibly all previous…»
Post #207 1.15K
● Exclusive - Zero-Day: A medium to high severity vulnerability in SAP portal allows a low privileged authenticated user to escalate privileges within the system abusing certain API end-points.

The latest software / CMS is vulnerable and possibly all previous versions as well.
SAP has been informed about the bug who have confirmed it and have planned to roll out the fix by mid-2023 (Seems SAP does not prioritize security).

No CVE was assigned. Researcher: Aamer
Post #205 475
cKure Red Exclusive | Zero-Day: A high severity EoP bug has been identified by a fellow researcher in SolarWinds Orion platform. ● The bug is not patched and latest version of the software is vulnerable. We (ckure) have confirmed the bug with the researcher and will…
Insecure Direct Object Reference Vulnerability: SolarWinds Platform 2022.3 (CVE-2022-36966).

https://www.solarwinds.com/trust-center/security-advisories/cve-2022-36966
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →