9085 matches found
How to lock out your ex-partner from your smart home
Stalkers can use all kinds of apps, gadgets, devices, and phones to spy on their targets, which are often their ex-partners. Unfortunately, while they no doubt have many positive uses, smart home devices give stalkers an array of tools to keep an eye on their targets. If you are the partner that...
SalesKing < 1.6.30 - Unauthenticated Privilege Escalation
Description The plugin is vulnerable to privilege escalation. This allows unauthenticated attackers to create arbitrary malicious administrator accounts...
CVE-2024-22204
creationtimestamp| type| source ---|---|--- 2024-01-23 19:26:46+00:00| seen| https://t.me/ctinow/172247 2024-02-02 08:16:30+00:00| seen| https://t.me/ctinow/177963...
Microsoft got hacked by state sponsored group it was investigating
In a spy-vs-spy type of scenario, Microsoft has acknowledged that a group called Midnight Blizzard also known as APT29 or Cozy Bear, gained access to a Microsoft legacy non-production test tenant account. According to Microsoft, the group managed to access the account in November after subjecting...
CVE-2024-23217
creationtimestamp| type| source ---|---|--- 2024-01-23 02:31:59+00:00| seen| https://t.me/ctinow/171640 2024-02-16 18:16:53+00:00| seen| https://t.me/ctinow/186549 2024-02-16 18:16:55+00:00| seen| https://t.me/ctinow/186551...
The vulnerability of the software for managing and controlling access to corporate resources and IBM Security Verify Governance applications lies in the use of pre-installed user accounts, which allows attackers to expose sensitive information that should be protected.
The vulnerability of the software for managing and controlling access to corporate resources and applications of IBM Security Verify Governance is related to the use of pre-installed user accounts. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
Apple iOS 17.3: How to Turn on iPhone's New Stolen Device Protection
Apple’s iOS 17.3 introduces Stolen Device Protection to iPhones, which could stop phone thieves from taking over your accounts. Here’s how to enable it right now...
ADCSync - Use ESC1 To Perform A Makeshift DCSync And Dump Hashes
This is a tool I whipped up together quickly to DCSync utilizing ESC1. It is quite slow but otherwise an effective means of performing a makeshift DCSync attack without utilizing DRSUAPI or Volume Shadow Copy. This is the first version of the tool and essentially just automates the process of...
CVE-2023-5041
creationtimestamp| type| source ---|---|--- 2024-01-17 16:26:29+00:00| seen| https://t.me/ctinow/169329 2024-01-24 23:16:24+00:00| seen| https://t.me/ctinow/173153...
CVE-2023-39691
An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request...
Cross site request forgery (csrf)
An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request...
CVE-2023-51810
creationtimestamp| type| source ---|---|--- 2024-01-16 02:26:42+00:00| seen| https://t.me/ctinow/168594 2024-01-23 01:16:36+00:00| seen| https://t.me/ctinow/171588 2024-02-03 15:46:46+00:00| seen| https://t.me/ctinow/178588 2025-06-20 17:46:41+00:00| published-proof-of-concept|...
CVE-2023-39691
An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request...
PT-2024-12820 · Kodbox · Kodbox
Name of the Vulnerable Software and Affected Versions: kodbox versions 1.43 and earlier Description: An issue in kodbox allows attackers to arbitrarily add Administrator accounts via crafted GET requests. Recommendations: For versions 1.43 and earlier, update to a version that contains a fix for...
kodbox security breach
kodbox is a network file manager. A security vulnerability exists in kodbox version v1.43, which stems from a vulnerability that allows an attacker to arbitrarily add administrator accounts via a crafted GET request...
CVE-2023-39691
An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request...
CVE-2023-6941
creationtimestamp| type| source ---|---|--- 2024-01-15 17:27:40+00:00| seen| https://t.me/ctinow/168476 2024-01-19 23:17:05+00:00| seen| https://t.me/ctinow/170449 2024-02-03 14:21:16+00:00| seen| https://t.me/ctinow/178553...
CVE-2019-19368
creationtimestamp| type| source ---|---|--- 2024-01-15 12:05:34+00:00| seen| https://t.me/arpsyndicate/2781 2024-03-12 14:41:35+00:00| seen| https://t.me/ctinow/205705...