All posts by cK-bot

Zero-Day: A team of researchers from IBM and the VU Amsterdam university in the Netherlands on Tuesday disclosed the details of a new type of data leakage attack impacting all major CPU makers, as well as some widely used software. https://download.vusec.net/papers/ghostrace_sec24.pdf https://www.securityweek.com/major-cpu-software-vendors-impacted-by-new-ghostrace-attack https://t.me/cKure/13652

■□□□□ A curated list of movies every hacker & cyberpunk must watch. https://github.com/k4m4/movies-for-hackers https://t.me/cKure/13651

■■□□□ Proof-of-concept exploit for CVE-2024-25153. https://github.com/nettitude/CVE-2024-25153 https://t.me/cKure/13650

■■□□□ Kubernetes Vulnerability Allows Remote Code Execution on Windows Endpoints. A high-severity Kubernetes vulnerability tracked as CVE-2023-5528 can be exploited to execute arbitrary code on Windows endpoints. https://www.securityweek.com/kubernetes-vulnerability-allows-remote-code-execution-on-windows-endpoints/ https://t.me/cKure/13649

■■■□□ An EXIF Analysis on Conti Ransomware Gang’s Publicly Accessible Internally Leaked Marketing and Advertising Creative – An Analysis. https://ddanchev.blogspot.com/2024/03/an-exif-analysis-on-conti-ransomware.html https://t.me/cKure/13648

■■■■□ HTTP/2 and HTTP/3 explained. https://alexandrehtrb.github.io/posts/2024/03/http2-and-http3-explained/ https://t.me/cKure/13647

■■■■■ [Tool] Ip2region (2.0 – xdb): Offline IP address manager framework and locator, support billions of data segments, 10 ms searching performance. https://github.com/lionsoul2014/ip2region https://t.me/cKure/13646

■■■■□ Security Flaws within ChatGPT Allowed Access to Accounts On Third-Party Websites and Sensitive Data. https://salt.security/blog/security-flaws-within-chatgpt-extensions-allowed-access-to-accounts-on-third-party-websites-and-sensitive-data https://t.me/cKure/13645

■□□□□ Google paid $10 million in bug bounty rewards last year. https://www.bleepingcomputer.com/news/google/google-paid-10-million-in-bug-bounty-rewards-last-year/ https://t.me/cKure/13644

■■■□□ Proof of Concept for Path Traversal in Apache Struts “CVE-2023-50164”. https://github.com/dwisiswant0/cve-2023-50164-poc https://t.me/cKure/13643