All posts in Uncategorized

■□□□□ #DataLeak: Deloitte's 'Test your Hacker IQ' site fails itself after exposing database user name, password in config file. https://go.theregister.com/feed/www.theregister.com/2020/11/05/deloitte_hac#DataLeak: Deloitte's 'Test your Hacker IQ' site fails itself after exposing database user name, password in config file.Test your Hacker IQ' site fails itself after exposing database user name, password in config file. https://go.theregister.com/feed/www.theregister.com/2020/11/05/deloitte_hacker_test/ https://t.me/cKure/5904

■■■■□ U.S. officials seize 'more than $1 billion in bitcoin' tied to Silk Road. ● Sometimes I wonder who owns the crypto. https://www.theblockcrypto.com/amp/linked/83695/us-seizure-silk-road-bitcoins-report https://t.me/cKure/5903

■■■■■ Massive #DataLeak: https://www.zdnet.com/google-amp/article/23600-hacked-databases-have-leaked-from-a-defunct-data-breach-in#DataLeak: https://www.zdnet.com/google-amp/article/23600-hacked-databases-have-leaked-from-a-defunct-data-breach-index-site/ https://t.me/cKure/5902

■■■■□ Revamped DLL side-load attack hits Myanmar. https://www.theregister.com/AMP/2020/11/05/killsomeone_dll_attack/ https://t.me/cKure/5901

■■■□□ TOR vulnerability in Brave Browser, reported, watched getting patched, got a CVE (CVE-2020-8276) and bounty, all in one working day. https://community.disclose.io/t/how-i-found-a-tor-vulnerability-in-brave-browser-reported-it-watched-it-get-patched-got-a-cve-cve-2020-8276-and-a-small-bounty-all-in-one-working-day/65 https://t.me/cKure/5900

■■■■□ #Zeroday in Chrome patched. https://www.zdnet.com/google-amp/article/after-two-zero-days-in-chrome-desktop-google-patches-a-third-zero-day-in-the-android-version/#Zeroday in Chrome patched. https://www.zdnet.com/google-amp/article/after-two-zero-days-in-chrome-desktop-google-patches-a-third-zero-day-in-the-android-version/ | #0day https://t.me/cKure/5899

■■□□□ 1000 USD for open-redirect via unknown technique. https://ruvlol.medium.com/1000-for-open-redirect-via-unknown-technique-675f5815e38a https://t.me/cKure/5898

■■■□□ https://www.bleepingcomputer.com/news/security/someone-just-emptied-out-a-1-billion-bitcoin-wallet/ https://t.me/cKure/5895

■□□□□ XSS on a JIRA Subdomain. https://medium.com/@kartikayparmar85/xss-on-a-jira-subdomain-ee9bd0fe46f https://t.me/cKure/5894

■■□□□ Public and secret api key leaked in JavaScript source. https://duckoverflow.medium.com/public-and-secret-api-key-leaked-in-javascript-source-fbe45b6bc617 https://t.me/cKure/5893