All posts in Uncategorized

■■□□□ Defacement: Trump's official campaign website vandalized by hackers who 'had enough of the President's fake news'. https://go.theregister.com/feed/www.theregister.com/2020/10/28/trump_website_hacked/ https://t.me/cKure/5836

■■□□□ https://youtu.be/_4W0WXUatiw https://t.me/cKure/5835

■□□□□ Event Announcement: https://standoff365.com/en https://t.me/cKure/5833

■■□□□ Link Previews: How a Simple Feature Can Have Privacy and Security Risks. https://www.mysk.blog/2020/10/25/link-previews/ https://t.me/cKure/5832

■■□□□ XSS automation identification with Dalfox & Paramspider. https://medium.com/@parasarora06/automating-xss-identification-with-dalfox-paramspider-e14283bb7916 https://t.me/cKure/5831

■■■■□ Unauthenticated RCE in InoERP 0.7.2 https://www.exploit-db.com/exploits/48946 https://t.me/cKure/5830

■■■■□ Security experts spotted a new botnet, tracked as KashmirBlack botnet, that likely infected hundreds of thousands of websites since November 2019 by exploiting CMS vulns. https://securityaffairs.co/wordpress/110014/cyber-crime/kashmirblack-botnet.html https://t.me/cKure/5828

■■■□□ Auth bypass via Brute Force. https://portswigger.net/daily-swig/tikiwiki-authentication-bypass-flaw-gives-attackers-full-control-of-websites-intranets https://t.me/cKure/5827

■□□□□ Vastaamo Breach: Hackers Blackmailing Psychotherapy Patients. https://threatpost.com/vastaamo-hackers-blackmailing-therapy-patients/160536/ https://t.me/cKure/5826

■■■■■ Pass-the-hash WiFi. https://sensepost.com/blog/2020/pass-the-hash-wifi/ | IoT https://t.me/cKure/5825