yaracroft @venom@nanao.cybtex.fr

Earlier this week the Jenkins infrastructure team identified a successful attack against our deprecated Confluence service #vuln #informatique

https://www.jenkins.io/blog/2021/09/04/wiki-attacked/

Poisoned proxy PACs - The #NPM package with a network-wide security hole #vuln

https://nakedsecurity.sophos.com/2021/09/06/poisoned-proxy-pacs-the-npm-package-with-a-network-wide-security-hole/

(CVE-2021-26084) X-Confluence-Request-Time #vuln #informatique

https://censys.io/blog/cve-2021-26084-confluenza/

Burp Suite RCE #vuln #informatique

http://noahblog.360.cn/burp-suite-rce/

This PoC in #Python generates payload when exploited for a 0-day of GhostScript 9.50. This exploit affect to ImageMagick with the default settings from #Linux Ubuntu repository #vuln #informatique #

https://github.com/duc-nt/RCE-0-day-for-GhostScript-9.50

JetBrains Datalore - An attacker could take over a user's JWT token & gain access to its Datalore account. #vuln

https://infosecwriteups.com/eye-for-an-eye-unusual-single-click-jwt-token-takeover-2e58f88cf44d

(CVE-2021-38408) A stack-based buffer overflow vulnerability in Advantech WebAccess caused by a lack of proper validation of the length of user-supplied data may allow RCE. #vuln

https://us-cert.cisa.gov/ics/advisories/icsa-21-245-03

💥 (CVE-2021-26084) was recently detected in exploits ITW (in the wild), a mass exploitation of Atlassian Confluence is ongoing & expected to accelerate #vuln

PST, Want a Shell? ProxyShell Exploiting #Microsoft Exchange Servers

https://www.fireeye.com/blog/threat-research/2021/09/proxyshell-exploiting-microsoft-exchange-servers.html #vuln

0-day RCE backdoor in Teradek IP video device firmwares - This is a report of a 0-day backdoor giving root shell (root:upsetdac). #vuln

https://an0n-r0.medium.com/full-disclosure-0-day-rce-backdoor-in-teradek-ip-video-device-firmwares-85a16f346e15

TP-Link AC1200 Archer C50 (v6) #vuln

https://cybernews.com/security/amazon-tp-link-router-ships-with-vulnerable-firmware/

(CVE-2021-26084) (PoC) - An OGNL injection vulnerability exists that would allow an authenticated user, and in some instances unauthenticated user, to execute arbitrary code on a Confluence Server or Data Center instance. #vuln

https://github.com/alt3kx/CVE-2021-26084_PoC

Technical information about the SolarWinds Serv-U SSH vulnerability (CVE-2021-35211) #vuln

https://www.microsoft.com/security/blog/2021/09/02/a-deep-dive-into-the-solarwinds-serv-u-ssh-vulnerability/

iOS 14.0 remote jailbreak using RCE + LPE exploit. « Don't stay on versions on or below iOS 14.3. If you click a malicious link, bad guys would steal everything on your #Apple #iPhone » #vuln

https:/twitter.com/pattern_F_/status/1432599008757760000

Unauthenticated PetitPotam everywhere:

• petitpotam to DC, target it to attacker host
• ntlmrelay (using socks) to target
• petitpotam again to target through socks (without supplying any passwords) using the relayed DC creds. #microsoft #windows #vuln #informatique

https://streamable.com/dzdmfb

CVE-2021-33766 (ProxyToken) An authentication bypass in #Microsoft Exchange server. Exchange Server continues to be an amazingly fertile area for vulnerability research. #vuln

https://www.zerodayinitiative.com/blog/2021/8/30/proxytoken-an-authentication-bypass-in-microsoft-exchange-server

« Worst cloud vulnerability you can imagine » discovered in #Microsoft #Azure. Microsoft only emailed 30% or so of its Cosmos DB customers about the vulnerability #vuln

https://arstechnica.com/information-technology/2021/08/worst-cloud-vulnerability-you-can-imagine-discovered-in-microsoft-azure/

#Microsoft warned thousands of its #cloud computing customers, including some of the world's largest companies, that intruders could have the ability to read, change or even delete their main databases. The vulnerability is in Microsoft Azure's flagship Cosmos DB database. #vuln #windows #informatique

https://www.reuters.com/technology/exclusive-microsoft-warns-thousands-cloud-customers-exposed-databases-emails-2021-08-26/

Multiple threat actors, including a ransomware gang, exploiting #Exchange ProxyShell vulnerabilities - #Microsoft #Russia has a more comprehensive writeup of ProxyShell than #Microsoft #Security ?! #vuln #threats

https://doublepulsar.com/multiple-threat-actors-including-a-ransomware-gang-exploiting-exchange-proxyshell-vulnerabilities-c457b1655e9c

Timing Attack on MariaDB Through « Lobste.rs » Password Reset #crypto #vuln #informatique

https://soatok.blog/2021/08/20/lobste-rs-password-reset-vulnerability/