All posts in Uncategorized

■■■□□ CVE-2020-16009: v8 #0day https://chromium.googlesource.com/v8/v8.git/+/3ba21a17ce2f26b015cc29adc473812247472776%5E%21/#F3 | #Ze#0day https://chromium.googlesource.com/v8/v8.git/+/3ba21a17ce2f26b015cc29adc473812247472776%5E%21/#F3 | #Zeroday https://t.me/cKure/5914

■■■■□ https://exploitbox.io/vuln/Git-Git-LFS-RCE-Exploit-CVE-2020-27955.html https://t.me/cKure/5913

■■■■□ Automated Struct Identification with Ghidra. https://blog.grimm-co.com/2020/11/automated-struct-identification-with.html #RE https://t.me/cKure/5912

■■■■□ PoC for iOS kernel bug reachable from within the sandbox. This is not an exploit. https://gist.github.com/0x36/ebb6af89f8dae65e4a1b9bc9dc6c2884 https://t.me/cKure/5911

■□□□□ https://datadome.co/bot-detection/how-facebook-was-used-as-a-proxy-by-web-scraping-bots/ https://t.me/cKure/5910

■■■■□ Cisco's #zeroday in AnyConnect Secure Mobility client remains unpatched. https://threatpost.com/cisco-zero-day-anyconnect-secure-patch/160988/#zeroday in AnyConnect Secure Mobility client remains unpatched. https://threatpost.com/cisco-zero-day-anyconnect-secure-patch/160988/ | #0day https://t.me/cKure/5909

■■□□□ #DataLeak: Another alcohol company; Campari targeted via ransomware with 2TB encrypted files and a demand of 15 million USD. https://www.bleepingcomputer.com/news/security/campari-hit-by-ragnar-locker-ransomware-15-million-#DataLeak: Another alcohol company; Campari targeted via ransomware with 2TB encrypted files and a demand of 15 million USD. https://www.bleepingcomputer.com/news/security/campari-hit-by-ragnar-locker-ransomware-15-million-demanded/ https://t.me/cKure/5908

■■■■□ Apple fixes 3 #zeroday vulnerabilities exploited in the wild. https://www.zdnet.com/google-amp/article/apple-fixes-three-ios-zero-days-exploited-in-t#zeroday vulnerabilities exploited in the wild. https://www.zdnet.com/google-amp/article/apple-fixes-three-ios-zero-days-exploited-in-the-wild/ https://t.me/cKure/5906

■■■□□ New: Feds seized nearly $1 billion in bitcoin from a wallet linked to Silk Road. Access to the wallet came via a hacker called Individual X in court documents. https://t.me/cKure/5905

■□□□□ #DataLeak: Deloitte's 'Test your Hacker IQ' site fails itself after exposing database user name, password in config file. https://go.theregister.com/feed/www.theregister.com/2020/11/05/deloitte_hac#DataLeak: Deloitte's 'Test your Hacker IQ' site fails itself after exposing database user name, password in config file.Test your Hacker IQ' site fails itself after exposing database user name, password in config file. https://go.theregister.com/feed/www.theregister.com/2020/11/05/deloitte_hacker_test/ https://t.me/cKure/5904