{"uuid": "742d5769-dc7a-490f-86d7-38ef248bedc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-2825", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3066", "content": "Cybersecurity News - Hackers Factory\n\n\u200aSamsung ASLR Bypass Flaw Is Actively Exploited \u2013 Warns CISA\n\nhttps://latesthackingnews.com/2023/05/25/samsung-aslr-bypass-flaw-is-actively-exploited-warns-cisa/\n\n\u200aZyxel warns of critical vulnerabilities in firewall and VPN devices\n\nhttps://www.bleepingcomputer.com/news/security/zyxel-warns-of-critical-vulnerabilities-in-firewall-and-vpn-devices/\n\n\u200aWhat\u2019s a Double-Blind Password Strategy and When Should It Be Used\n\nhttps://www.bleepingcomputer.com/news/security/whats-a-double-blind-password-strategy-and-when-should-it-be-used/\n\n\u200aHow to improve sandbox effectiveness | Kaspersky official blog\n\nhttps://www.kaspersky.com/blog/sandbox-working-environment/48272/\n\n\u200aGoogle Introduces Mobile VRP For Its Android Apps\n\nhttps://latesthackingnews.com/2023/05/25/google-introduces-mobile-vrp-for-its-android-apps/\n\n\u200aNew Russian-linked CosmicEnergy malware targets industrial systems\n\nhttps://www.bleepingcomputer.com/news/security/new-russian-linked-cosmicenergy-malware-targets-industrial-systems/\n\n\u200aMicrosoft urges lawmakers to adopt new guidelines for responsible AI\n\nhttps://cyberscoop.com/microsoft-urges-lawmakers-to-adopt-new-guidelines-for-responsible-ai/\n\n\u200aExploiting the Sonos One Speaker Three Different Ways: A Pwn2Own Toronto Highlight\n\nhttps://www.thezdi.com/blog/2023/5/24/exploiting-the-sonos-one-speaker-three-different-ways-a-pwn2own-toronto-highlight\n\n\u200aD-Link fixes auth bypass and RCE flaws in D-View 8 software\n\nhttps://www.bleepingcomputer.com/news/security/d-link-fixes-auth-bypass-and-rce-flaws-in-d-view-8-software/\n\n\u200aMicrosoft 365 phishing attacks use encrypted RPMSG messages\n\nhttps://www.bleepingcomputer.com/news/security/microsoft-365-phishing-attacks-use-encrypted-rpmsg-messages/\n\n\u200aFrom Espionage to Theft: The Multi-Faceted APT Attacks on SMBs\n\nhttps://securityonline.info/from-espionage-to-theft-the-multi-faceted-apt-attacks-on-smbs/\n\n\u200aIZ1H9: The New Face of Mirai Botnet Threatening Linux Servers\n\nhttps://securityonline.info/iz1h9-the-new-face-of-mirai-botnet-threatening-linux-servers/\n\n\u200agoblob: fast enumeration tool for publicly exposed Azure Storage blobs\n\nhttps://securityonline.info/goblob-fast-enumeration-tool-for-publicly-exposed-azure-storage-blobs/\n\n\u200aPoC Exploit Released for GitLab CVE-2023-2825 Vulnerability\n\nhttps://securityonline.info/poc-exploit-released-for-gitlab-cve-2023-2825-vulnerability/\n\n\u200aPredator: Looking under the hood of Intellexa\u2019s Android spyware\n\nhttps://www.bleepingcomputer.com/news/security/predator-looking-under-the-hood-of-intellexas-android-spyware/\n\n\u200aTransatlantic Cable podcast episode 300 kicks off with Meta\u2019s record fine, ChatGPT and Neeva closure. | Kaspersky official blog\n\nhttps://www.kaspersky.com/blog/transatlantic-cable-podcast-300/48276/\n\n\u200aWindows 11 finally gets a 'never combine taskbar buttons' mode\n\nhttps://www.bleepingcomputer.com/news/microsoft/windows-11-finally-gets-a-never-combine-taskbar-buttons-mode/\n\n\u200aChina-linked APT Volt Typhoon targets critical infrastructure organizations\n\nhttps://securityaffairs.com/146649/hacking/china-linked-apt-volt-typhoon.html\n\n\u200aGoogle Trust Services ACME API available to all users at no cost\n\nhttp://security.googleblog.com/2023/05/google-trust-services-acme-api_0503894189.html\n\n\u200aRooting with root cause: finding a variant of a Project Zero bug\n\nhttps://github.blog/2023-05-25-rooting-with-root-cause-finding-a-variant-of-a-project-zero-bug/\n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "creation_timestamp": "2023-05-27T16:18:43.000000Z"}