Sani

😈CVE-2023-50386 : Apache Solr <= 6.0.0 , < 8.11.3 & <= 9.0.0 ,  < 9.4.1'Backup/Restore APIs' - Remote Code Execution 🍒POC N/A : https://github.com/vvmdx/Apache-Solr-RCE_CVE-2023-50386_POC 📱@APTANALYSIS

🌐👈😂

😈АПТИРАН & АПТАНАЛЫСИС Цханнел 🔥Link : t.me/APTIRAN 😈Link : t.me/APTANALYSIS

🔥CVE-2024-1709 : ConnectWise SecureConnect <= 23.9.7  - Authentication Bypass & Unauthenticated Remote Code Execution module (Updated) 🟢POC : https://github.com/horizon3ai/SecureConnect-Auth-Bypass [2] , [3] 📺Blog : https://www.horizon3.ai/attack-research/red-team/connectwise-screenconnect-auth-bypass-deep-dive/ ☠️Analysis (CVE-2024-1709 & CVE-2024-1708) :  https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass 🔥Module RCE : https://github.com/rapid7/metasploit-framework/pull/18870 📱@APTIRAN

🩸Extortion from extortionists 💰Some time ago, one of the users of the underground forums sent a message to LockBit support through Tox and threatened that if good money is not deposited into our account, we will gradually open the gates of hell to your group. Information such as IPs will be prepared. We send to the reward program for global justice. ❗️Apparently the IP they were talking about belonged to Selectel - Saint Petersburg, Russia 📱@APTIRAN

😈LockBit Ransomware Disrupted by Global Law Enforcement ✅Link : https://www.bleepingcomputer.com/news/security/lockbit-ransomware-disrupted-by-global-police-operation/ 📱@APTIRAN

Funny Self-XSS By Node Team In multiple Iran CTF programs 😢

#Ads #تبلیغات 💰میخوای تو یک مسابقه 15 ساعته شرکت کنی و برای تیم ما امتیاز جمع کنی ؟ چه سودی برات داره ؟ تو از 100 دلار تا 1500 دلار میتونی از ما جایزه بگیری فقط کافیه امتیاز تیم رو بالا ببری و poc خودت رو برای آیدی من ارسال کنی اگر باگ بحرانی باشه 1500 دلار جایزه میگیری . میخوای شرکت کنی به آیدی زیر پیام بده از الان شروع شده آیدی : @Hanger_ir اراتمند شما محمد شمسی 🙏❤️

❤️Red Team Hacking Course https://mega.nz/folder/BekCkaZJ#RePyQycvjlYUv0V2gF9OdA

🫁BypassAV

🔥CVE-2024-22024 : Ivanti Connect Secure 9.x, 22.x & Ivanti Policy Secure 9.x, 22.x & ZTA Gateways 22.6R1.3 'SAML Component' - Unauthenticated XML External Entity (XXE) 🟢POC N/A : https://github.com/0dteam/CVE-2024-22024 🔥CVE-2023-46805 : Ivanti Connect Secure 9.x, 22.x & Ivanti Policy Secure 9.x, 22.x 'Web Component' - Authentication Bypass 🟢SCAN : https://github.com/Chocapikk/CVE-2023-46805 🔥CVE-2024-21887 : Ivanti Connect Secure 9.x, 22.x & Ivanti Policy Secure 9.x, 22.x 'Web Component' - (Authenticated Administrator) Arbitrary Command Execution 🟢POC N/A : https://github.com/imhunterand/CVE-2024-21887 🤩High Signal Detection and Exploitation of Ivanti's Pulse Connect Secure Auth Bypass & RCE ➡️Blog : https://www.assetnote.io/resources/research/high-signal-detection-and-exploitation-of-ivantis-pulse-connect-secure-auth-bypass-rce 📱@APTIRAN

🔥CVE-2024-22024 : Ivanti Connect Secure 9.x, 22.x & Ivanti Policy Secure 9.x, 22.x & ZTA Gateways 22.6R1.3 'SAML Component' - Unauthenticated XML External Entity (XXE) 🟢POC N/A : https://github.com/0dteam/CVE-2024-22024 🔥CVE-2023-46805 : Ivanti Connect Secure 9.x, 22.x & Ivanti Policy Secure 9.x, 22.x 'Web Component' - Authentication Bypass 🟢SCAN : https://github.com/w2xim3/CVE-2023-46805 🔥CVE-2024-21887 : Ivanti Connect Secure 9.x, 22.x & Ivanti Policy Secure 9.x, 22.x 'Web Component' - (Authenticated Administrator) Arbitrary Command Execution 🟢POC N/A : https://github.com/imhunterand/CVE-2024-21887 🤩High Signal Detection and Exploitation of Ivanti's Pulse Connect Secure Auth Bypass & RCE ➡️Blog : https://www.assetnote.io/resources/research/high-signal-detection-and-exploitation-of-ivantis-pulse-connect-secure-auth-bypass-rce 📱@APTIRAN