All posts in Uncategorized

● Received email from Revil Ransomware team. __.onion https://t.me/cKure/6081

■■□□□ KL-001-2020-009 : Barco wePresent Insecure Firmware Image. https://seclists.org/fulldisclosure/2020/Nov/40 https://t.me/cKure/6078

■■□□□ Turning blind error based SQLi into exploitable Boolean one. https://medium.com/@ozguralp/turning-blind-error-based-sql-injection-into-an-exploitable-boolean-one-85d6be3ca23b https://t.me/cKure/6077

■■■■■ #Zeroday: CVE-2020-13671; Drupal core – Critical – Remote code execution – SA-CORE-2020-012. This is a double extension vulnerability. https://www.drupal.org/sa-core-2020-012 https://t.me/cKure/6075

■■■□□ CVE-2020-13671 / Double extention vulnerability: Drupal sites vulnerable to double-extension attacks. https://www.zdnet.com/article/drupal-sites-vulnerable-to-double-extension-attacks https://t.me/cKure/6074

■■■□□ Two critical bugs in Apache Unomi allowed attackers to run OS commands on vulnerable servers. https://portswigger.net/daily-swig/two-critical-bugs-in-apache-unomi-allowed-attackers-to-run-os-commands-on-vulnerable-servers https://t.me/cKure/6072

■■■■□ VMware reveals critical hypervisor bugs found at Chinese white hat hacking comp. One lets guests run code on hosts. https://go.theregister.com/feed/www.theregister.com/2020/11/20/vmware_esxi_flaws/ https://t.me/cKure/6071

■■■■□ Top 200 most common passwords of 2020. https://nordpass.com/most-common-passwords-list/ https://t.me/cKure/6070

■■■■□ Facebook Messenger Bug Lets Hackers Listen to You Before You Pick Up the Call. https://thehackernews.com/2020/11/facebook-messenger-bug-lets-hackers.html https://t.me/cKure/6069

■■■■□ The malware that usually installs ransomware and you need to remove right away. https://www.zdnet.com/article/the-malware-that-usually-installs-ransomware-and-you-need-to-remove-right-away/ https://t.me/cKure/6068