cve-2024-0012_9474-panos_authbypass_reproduction

CVE-2024-0012 / CVE-2024-9474 — Bypass de autenticación en PAN-OS → Cadena de escalada de privilegios CVE| Descripción| CVSS ---|---|--- CVE-2024-0012| Bypass de autenticación de la interfaz de gestión de PAN-OS| 9.3 CVE-2024-9474| Escalada de privilegios en PAN-OS| 6.9 Cuando se encadenan, estas...

drupalhunter

drupalhunter CVE-2018-7600 Exploit 0-Day cyber-warrior.org...

CVE-2023-23397

CVE-2023-23397 Detalles de la Vulnerabilidad 🚨💻 Microsoft ha solucionado recientemente un conjunto de vulnerabilidades de seguridad críticas, incluyendo este exploit de día cero: CVE-2023-23397. El Sistema de Puntuación de Vulnerabilidades Comunes CVSS asignó una puntuación de 9.8 a este exploit...

CVE-2021-1675

CVE-2021-1675 CVE-2021-1675: VULNERABILIDAD DE DÍA CERO EN EL SERVICIO DE IMPRESIÓN DE WINDOWS CON UN EXPLOIT DISPONIBLE EN TODAS LAS VERSIONES DEL SISTEMA OPERATIVO Permítanme proporcionar uno de los métodos que encontré para mitigar esto mientras esperamos que Microsoft publique parches...

malware-samples

malware-samples Una colección de muestras de malware e información de análisis relevante, muy probablemente referenciada desde http://blog.inquest.net o https://twitter.com/inquest. Asegúrate de revisar también la sección de Deep File Inspection DFI de https://labs.inquest.net para una interfaz...

FalconFlank

FalconFlank Crowdstrike Falcon 0day Privilege Escalation Vulnerability FalconFlank is a 0day privilege escalation that abuses the office malicious macros remediation in Crowdstrike Falcon Sensor, obviously by the time I drop this Crowdstrike would already have detections for it so if you want to...

ConPresentations

ConPresentations Diapositivas, recursos y grabaciones variadas de algunas de mis presentaciones en conferencias. Presentaciones en Conferencias Keynote de BSidesCanberra 2023: "Cuando los exploits no son binarios" Diapositivas OffensiveCon 2023: "El bug de Print Spooler que no fue" con James...

sonos

sonos/amlogic haxx aquí encontrarás algunos códigos de exploit y herramientas que fueron parte de mi presentación sobre el Sonos One @ Hack in the Box amsterdam 2023. el exploit de EL3 se puede utilizar para volcar tus datos OTP/eFUSE. sonostool se puede utilizar para obtener claves de descifrado...

A week in security (September 7 – September 13)

Here's what we've covered in the last seven days on Malwarebytes Labs: Crypto customers targeted by scammers after email marketing provider breach Android malware creates a hidden copy of your banking app BlueMoon exploit kit turns Chrome and Windows flaws into attacks Will AI kill us all within...

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains together multiple vulnerabilities in Microsoft Windows and Google Chrome. The first in-the-wild use of BlueMoon has been attributed to the China-aligne...

Microsoft fixes record 964 flaws, including 2 exploited zero-days

Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs, including 104 rated Critical and 860 rated Important, making it the company’s largest Patch Tuesday release on record. Microsoft lists 974 CVEs in its full September security release. However, 10 of those affect cloud services or involv...

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabilities spanning its software portfolio, including two flaws that it said have been actively exploited in the wild. These include 723 flaws in Windows, 111 in Office and Office 2016, 62 in SQL, and 22 i...

CVE-2026-83950

creationtimestamp| type| source ---|---|--- 2026-09-08 22:09:29+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:08:34+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review...

CVE-2026-69598

creationtimestamp| type| source ---|---|--- 2026-09-08 22:09:17+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:08:12+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:18:12+00:00|...

CVE-2026-69573

creationtimestamp| type| source ---|---|--- 2026-09-08 22:09:00+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:07:49+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:20:53+00:00|...

CVE-2026-72952

creationtimestamp| type| source ---|---|--- 2026-09-08 22:08:41+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:07:25+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:19:29+00:00|...

CVE-2026-77899

creationtimestamp| type| source ---|---|--- 2026-09-08 22:08:26+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:07:11+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:24:41+00:00|...

CVE-2026-77503

creationtimestamp| type| source ---|---|--- 2026-09-08 22:07:09+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:06:24+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:25:21+00:00|...

CVE-2026-69396

creationtimestamp| type| source ---|---|--- 2026-09-08 22:06:59+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:06:18+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:20:10+00:00|...

CVE-2026-69428

creationtimestamp| type| source ---|---|--- 2026-09-08 22:06:48+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:06:05+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:17:55+00:00|...