Волосатый бублик

An SQL injection cheatsheet like no other Payloads / techniques that cover the 5 most popular database variants and their derivatives (MySQL, PostgreSQL, MSSQL/SQL Server, Oracle, SQLite). https://tib3rius.com/sqli

https://blog.slonser.info/posts/email-attacks/ Очень интересно. Подделка отправителя например Gmail -> Outlook или наоборот.

https://github.com/es3n1n/no-defender Отключение Windows Defender через недокументированное АПИ

Injecting code into PPL processes without vulnerable drivers on Windows 11 https://blog.slowerzs.net/posts/pplsystem/

CVE-2024-21683: Confluence Data Center RCE https://github.com/absholi7ly/-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server

согласен

https://www.zabbix.com/security_advisories [ Time Based SQL Injection in Zabbix Server Audit Log ] CVE-2024-22120 ⛔️ CRITICAL ⛔️

This vulnerability could lead to privilege escalation from user to admin. In some cases, SQL injection leads to RCE.

Affected version/s:
6.0.0-6.0.27
6.4.0-6.4.12
7.0.0alpha1-7.0.0beta1

Новый тулкит от участника нашего чата: BlueToolkit is an extensible Bluetooth Classic vulnerability testing framework that helps uncover new and old vulnerabilities in Bluetooth-enabled devices. It works by executing templated exploits one by one and verifying appropriate properties based on the template logic. The toolkit is extensible and allows new research to be added to the centralized testing toolkit. There are 43 Bluetooth exploits available in the toolkit, from known public exploits and tools to custom-developed ones. The framework works in a Black-box fashion, but it is also possible to operate the toolkit in a Gray-box fashion. For that one needs to extend the framework and connect it to the Operating System of the target so that it would be possible to observe Bluetooth logs and guarantee no false positives. Also, we have already used our framework and were able to find 64 new vulnerabilities in 22 products. https://github.com/sgxgsx/BlueToolkit

Есть такой очень уязвимый Windows драйвер как HEVD Создан для тренировки навыков эксплуатации ядерных багов в Windows. старая штука, иногда обновляющееся. А вот вам статья с примерами.