Leviathan

Security 🎩

[Professor Larry Densel @luckyhacker43]

Anthropic inadvertently leaks source code for Claude Code CLI tool 💀

🔗 https://t.co/faoBekIyG9
🔗 https://t.co/ogH5oLgJz4
🔗 https://t.co/c4bSzpcQ0B
Join team 👉https://t.co/FeMz53HSN0

[Goiabasx @Goiabasx007]

@IntCyberDigest 99% dos departamentos de TI no Brasil são uma verdadeira porcaria em gestão, já trabalhei em muitos e não adianta vc tentar convencer seu chefe de TI sobre melhores praticas, pois seu chefe sabe menos do que vc pois ele foi colocado lá por ser amigo e não por ser competente

[Paulo Figueiredo (8) @pfigueiredo08]

Trump mudou com o Lula da água para o vinho, como mostramos detalhadamente no último PF Show. Meu palpite informado é de que Trump não tinha pleno conhecimento do que Lula vinha dizendo sobre ele. Lula era tigrão no palanque, mas tchutchuca quando encontrava o presidente dos EUA. Agora, não engana mais ninguém.

[kmkz @kmkz_security]

#fortigate
/api/v2.0/cmdb/system/admin-> 401
/api/v2.0/cmdb/system/admin%3F/../../../../../cgi-bin/fwbcgi-> 200
Maybe not exploitable (why? different code base? 🧐- not tested) but seems weird.
Currently everyone is on #fortiweb but we still have 0 feedback on this
cc @Fortinet

[Leviathan @Leviathan_hell]

@c4ng4c3ir0 Sim
Durante o dia muito quente e a noite frio

[Leviathan @Leviathan_hell]

@grok @JoseHA81 @Brutal_0s @grok
Veja a matéria sobre o ocorrido
https://t.co/l24biHRrth

[Leviathan @Leviathan_hell]

@grok @JoseHA81 @Brutal_0s https://t.co/l24biHQTDJ

[Rishi @rxerium]

🚨 Critical zero-day tagged as CVE-2025-61882 (CVSS 9.8) affecting Oracle E-Business Suite

I've created a vulnerability detection script here:
https://t.co/rllgyT9flR

This vulnerability is remotely exploitable without authentication.

Patches are available as per Oracle's Security Advisory:
https://t.co/1REgFDPx2l

[Leviathan @Leviathan_hell]

@aditi_singghh If you can share how you found the bug..

[Clandestine @akaclandestine]

GitHub - nil0x42/phpsploit: Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor https://t.co/j9aXOJXwYm

[Leviathan @Leviathan_hell]

@xlr8423 @SecurityAura Microsoft Sentinel

[Robel Campbell @RobelCampbell]

Regarding CVE-2024-38063 IPV6 RCE in Windows...

After reading RFCs about optional headers in IPv6 packets, I managed to create POC to cause a crash. The bug check in this case isn't too detailed, but essentially the underflow creates a large value used in a loop which eventually write data out of bounds and causes a crash.

I imagine this can be weaponized using heap massaging techniques and corrupting adjacent objects in the heap.

As many have already stated before, this can easily be mitigated by applying the latest patches or disabling IPv6 (which is enabled by default).

[Phrack Zine @phrack]

The time has come, and with it your reading material for the week.

Phrack #71 is officially released ONLINE! Let us know what you think!

https://t.co/BRnK9lnGjI

[Phrack Zine @phrack]

Some copies of Phrack 71 are currently available near Hall 4 at LVCC :))

[H2HC @h2hconference]

Are you, like us, anxiously waiting for the new @phrack release this week? Cant you wait to read something? Well, meanwhile enjoy a couple of articles from @h2hconference magazine, special online release: https://t.co/ThQWWUZ1L7 @gabrielnb @bsdaemon @wipawel

[vx-underground @vxunderground]

CrowdStrike has performed the largest ransomware attack in history.

Accidentally.

[Leviathan @Leviathan_hell]

@wisconsintwt Em certas situações pode substituir por agilizar. Ex:

Preciso adiantar um trabalho.
Preciso agilizar um trabalho.

[SEKTOR7 Institute @SEKTOR7net]

Detecting scheduled task modifications

#redteam #maldev

https://t.co/PUVTpVnAbY

[𝓔𝓻𝓲𝓴 𝓽𝓱𝓮 𝓿𝓲𝓴𝓲𝓷𝓰 ⚔️ @Erik_Quill]

Immortal - Pure Holocaust (1993) 🇳🇴
#NowPlaying️

I'm giving this old classic an evening spin.

What's everyone's favorite Immortal album?