Updates On Hackbyte Forum:-

📌Retbleed: Arbitrary Speculative Code Execution with Return Instructions
📌Executing Arbitrary Code Over a Phone Line Thanks to the XBAND Video Game Modem
📌Rolling PWN Attack Affecting Honda Vehicles
📌CVE-2022-32223 Discovery: DLL Hijacking via npm CLI
📌From Prototype Pollution to Remote Code Execution in Blitz.js
📌Attacking Active Directory: 0 to 0.9
📌CVE-2022-29885 – Apache Tomcat Cluster Service DoS
📌CVE-2022-29593
📌North South University / Bangladesh / email login
📌deeppaste Leak
📌Livejournalfull Leak
📌Gemotest Crm Leak
📌Splunk Attack
📌Nzyme - WiFi Defense System
📌Project-Whis - Advanced HTTP Botnet
📌Code Signing Certificate Cloning Attack
📌Retbleed - Arbitrary Speculative Code Execution with Return Instruction.
📌Confluence Pre-Auth RCE.
📌microsoft-rpc-fuzzing-tools
📌CVE-2022-26135
📌XSS Payload List
📌headers for hackers | PHP #ssrf | #cve-2020-7066 Video

👉🏻👉🏻 Updates:- https://bit.ly/3yRyah3 👈🏻👈🏻

Microsoft Exchange: OWASSRF + TabShell
(CVE-*2022-41076)*

The TabShell vulnerability its a form of Privilege Escalation which allows breaking out of the restricted Powershell Sandbox after you have successfully gained access through OWASSRF.

For a detailed write see research:
https://blog.viettelcybersecurity.com/tabshell-owassrf/

*PoC:
*
https://gist.github.com/testanull/518871a2e2057caa2bc9c6ae6634103e

#owa #ssrf #tabshell #poc

@virus303

@NetEditors