All posts in Uncategorized

● Yet another website: wordlists.assetnote.io https://t.me/cKure/6044

■■□□□ The EVMs. https://mobile.twitter.com/realDonaldTrump/status/1327732691979137041 https://t.me/cKure/6043

■■■□□ #DataLeak, #CyberAttack: Renowned Japanese video gaming firm Capcom has acknowledged that the gaming giant lost sensitive data, including sales reports, employee personal details, and financial information in a ransomware attack carried out by Ragnar Locker Gang. The data was leaked online after ransome was not paid. ● What was leaked? 》https://mobile.twitter.com/stardustsummons/status/1328164220488224768 https://t.me/cKure/6042

■■■■□ Many Drupal sites are vulnerable to the following: Endpoint: /node/1?_format=hal_json https://www.ambionics.io/blog/drupal8-rce https://t.me/cKure/6040

■■■■□ RCE via Server-Side Template Injection. https://cyc10n3.medium.com/rce-via-server-side-template-injection-ad46f8e0c2ae https://t.me/cKure/6039

■■■■□ Interesting thread wrt. Fuzzing: https://mobile.twitter.com/Bl1nnnk/status/1328720903975309313 https://t.me/cKure/6038

■■■□□ #DataLeak: A #UnitedStates based electronics retailer, TronicsXchange has exposed over 2.6 million files, including ID cards and biometric images, after a misconfigured AWS S3 bucket was discovered. https://www.infosecurity-magazine.com:443/news/80000-id-cards-fingerprint-exposed/ https://t.me/cKure/6037

■■□□□ OceanLotus continues with its cyber espionage operations. https://cybleinc.com/2020/11/17/oceanlotus-continues-with-its-cyber-espionage-operations/ https://t.me/cKure/6035

■■■□□ 2FA Bypass On Instagram Through A Vulnerable Endpoint. https://medium.com/@aryalsamipofficial59/2fa-bypass-on-instagram-through-a-vulnerable-endpoint-b092498af178 https://t.me/cKure/6033

■■□□□ Stealing User’s PII info by visiting API endpoint directly. https://medium.com/@kunal94/stealing-users-pii-info-by-visiting-api-endpoint-directly-5062e0147f67 https://t.me/cKure/6032