WebDAV Windows 10 – Remote Code Execution (RCE)

Exploit Title: WebDAV Windows 10 – Remote Code Execution (RCE) Date: June 2025 Author: Dev Bui Hieu Tested on: Windows 10, Windows 11 Platform: Windows Type: Remote CVE: CVE-2025-33053 Description: This exploit leverages the behavior of Windows .URL files to execute a remote binary over a UNC path. When a victim opens or previews…

Read More

Loose pigeons cause havoc on plane before take-off

A Delta flight travelling from Minneapolis to Madison, Wisconsin was delayed after two pigeons ended up onboard the aircraft, baffling both passengers and crew. Video shows one of birds flying through the cabin as a passenger attempts to catch it with a jacket. According to local media, baggage handlers were called on board and safely…

Read More

More Steganography! – SANS Internet Storm Center

I spotted another interesting file that uses, once again, steganography. It seems to be a trend (see one of my previous diaries[1]). The file is an malicious Excel sheet called blcopy.xls. Office documents are rare these days because Microsoft improved the rules to allow automatic macro execution[2]. But it does not mean that Office documents…

Read More