Sani

🔍Analysis of cyber attack on Iran fuel stations (Part I) Blog : https://medium.com/@aryanchehreghani/analysis-of-cyber-attack-on-iran-fuel-stations-part-i-afd01a1b4876 🗼@APTIRAN

⛽️😂

🔍Attractive & Hot vulnerabilities : CVE-2023-49070 : Apache Ofbiz < 18.12.10 - Remote Code Execution POC : https://github.com/abdoghazy2015/ofbiz-CVE-2023-49070-RCE-POC CVE-2023-46604 : Apache ActiveMQ $Versions - Unauthenticated Remote Code Execution POC : https://github.com/X1r0z/ActiveMQ-RCE CVE-2023-22518 : Confluence Data Center and Server - Improper Authorization POC : https://github.com/C1ph3rX13/CVE-2023-22518 ◾️@APTANALYSIS

🔍CVE-2023-4473 & CVE-2023-4474 - Authentication bypass and multiple blind OS command injection vulnerabilities in Zyxel’s NAS326 devices Blog : https://bugprove.com/knowledge-hub/cve-2023-4473-and-cve-2023-4474-authentication-bypass-and-multiple-blind-os-command-injection-vulnerabilities-in-zyxel-s-nas-326-devices/ ◾️@APTANALYSIS

🔍Cerber Ransomware Exploits Atlassian Confluence Vulnerability CVE-2023-22518 Blog : https://www.trendmicro.com/en_us/research/23/k/cerber-ransomware-exploits-cve-2023-22518.html POC : https://github.com/ForceFledgling/CVE-2023-22518 ◾️@APTANALYSIS

🔍CVE-2023-46214 : Splunk Enterprise <= 9.0.7 & 9.1.2 - Remote Code Execution POC : https://github.com/nathan31337/Splunk-RCE-poc ◾️@APTANALYSIS

🔍CVE-2023-46214 : Splunk Enterprise <= 9.0.7 & 9.1.2 - Remote Code Execution POC : https://github.com/nathan31337/Splunk-RCE-poc ◾️@APTANALYSIS

🔍Conquering the memory through io_uring - Analysis of CVE-2023-2598 Write-Up : https://anatomic.rip/cve-2023-2598/ ◾️@APTANALYSIS

🔥A method for reducing internet traffic by a third and connecting to free internet Blog : https://telegra.ph/A-method-for-reducing-internet-traffic-by-a-third-and-connecting-to-free-internet-by-iSegaro-11-17 🗼@APTIRAN

🔍CRITICAL EXPLOITS FOR SALE ON THE DARK WEB ⚙️Link : https://www.cyfirma.com/outofband/critical-exploits-for-sale-on-the-dark-web/ ◾️@APTANALYSIS

🛡CVE-2023-47444 : OpenCart - Static Code Injections POC : https://0xbro.red/disclosures/disclosed-vulnerabilities/opencart-cve-2023-47444/#vulnerabilities-details-and-root-causeshttps://github.com/tandasat/CVE-2023-36427 💥CVE-2023-36427 : Microsoft Windows Hyper-V - Elevation of Privilege POC : https://github.com/tandasat/CVE-2023-36427 @APTANALYSIS

However, it has not been tested yet🍸

🐾CVE-2023-4966 : Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server. ➡️POC 2 : https://github.com/Chocapikk/CVE-2023-4966 📱@APTANALYSIS

🐾CVE-2023-4966 : Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server. ➡️POC 2 : https://github.com/Chocapikk/CVE-2023-4966 📱@APTANALYSIS

🔥CVE-2023-4966 : Citrix NetScaler ADC & NetScaler Gateway Buffer Overflow (Leaking Session Tokens) 🔸POC : https://github.com/assetnote/exploits/tree/main/citrix/CVE-2023-4966 🔹Blog : https://www.assetnote.io/resources/research/citrix-bleed-leaking-session-tokens-with-cve-2023-4966 📱@APTIRAN

🌟CVE-2022-46722 : PWN macOS Kernel Via OTA Update 🧐POC : https://github.com/jhftss/POC/blob/main/CVE-2022-46722/exploit.m ⭐️ Video : https://youtu.be/m_gGHVWLQ0Y?si=LgZ7hQVtbe1ZNBgS 📔PDF :  https://github.com/jhftss/jhftss.github.io/blob/main/res/slides/OBTS_v6_The%20Nightmare%20of%20Apple%20OTA%20Update_Mickey%20Jin.pdf 📱@APTANALYSIS

🌟PWN macOS Kernel Via OTA Update 🧐POC : https://github.com/jhftss/POC/blob/main/CVE-2022-46722/exploit.m ⭐️ Video : https://youtu.be/m_gGHVWLQ0Y?si=LgZ7hQVtbe1ZNBgS 📔PDF :  https://github.com/jhftss/jhftss.github.io/blob/main/res/slides/OBTS_v6_The%20Nightmare%20of%20Apple%20OTA%20Update_Mickey%20Jin.pdf 📱@APTANALYSIS