Exploiting CVE-2023-33476 for remote code execution
second part in a two-part series going over heap overflow in MiniDLNA (CVE-2023-33476). this post provides a walkthrough of steps taken to write an exploit for this vulnerability in order to achieve remote code execution and pop a shell.
![chonked pt.2: exploiting cve-2023-33476 for remote code execution](https://discuss.tchncs.de/pictrs/image/ea475fc6-f9b0-4594-bd67-463f8a0f707c.png?format=webp&thumbnail=256)
FortiNAC is a zero-trust access solution that oversees and protects all digital assets connected to the enterprise network, covering devices from IT, IoT, OT/ICS to IoMT. – https://www.fortinet.com/products/network-access-control
This report by Stairwell on ChamelDoH is the first in a series detailing the capabilities and detection of various tools used by ChamelGang.
![ChamelGang and ChamelDoH: A DNS-over-HTTPS implant - Stairwell](https://discuss.tchncs.de/pictrs/image/69004aed-fdba-4065-8728-c94069f931b5.png?format=webp&thumbnail=256)
Microsoft has released an optional fix to address a Kernel information disclosure vulnerability affecting systems running multiple Windows versions, including the latest Windows 10, Windows Server, and Windows 11 releases.
![Microsoft: Windows Kernel CVE-2023-32019 fix is disabled by default](https://discuss.tchncs.de/pictrs/image/e62079ae-6e24-4b1d-958e-6aec24f42334.jpeg?format=webp&thumbnail=256)
Today is Microsoft's June 2023 Patch Tuesday, with security updates for 78 flaws, including 38 remote code execution vulnerabilities.
![Microsoft June 2023 Patch Tuesday fixes 78 flaws, 38 RCE bugs](https://discuss.tchncs.de/pictrs/image/ea3fce77-799d-4477-aeb6-ed8decc50421.jpeg?format=webp&thumbnail=256)