All posts in May 2021

■■□□□ Bypassing Twitter’s t.co url shortner. https://hackerone.com/reports/1148548 https://t.me/cKure/8048

■■□□□ Data-Leak from India as a water / air purifier company’s data is leaked on Russian having platform. Over 1 million records leaked in cvs format. Source: https://mobile.twitter.com/SecurChronicle/status/1394687978589483008 https://t.me/cKure/8047

■■■□□ Authenticated XXE. https://hackerone.com/reports/1095645 https://t.me/cKure/8043

■■■■■ Nvidia reduces the “hash rate” of upcoming graphics cards so they’re less desirable to miners of cryptocurrencies like BitCoin. https://t.me/cKure/8042

■■■■■ CVE-2021-26855: Microsoft Exchange 2019 – Unauthenticated Email Download. https://www.exploit-db.com/exploits/49879 https://t.me/cKure/8041

■□□□□ Ireland’s national health service offers sitrep after ransomware attack knocked systems offline. https://portswigger.net/daily-swig/irelands-national-health-service-offers-sitrep-after-ransomware-attack-knocked-systems-offline https://t.me/cKure/8040

■■■■□ Privacy: How Apple Gave Chinese Government Access to iCloud Data and Censored Apps. In July 2018, when Guizhou-Cloud Big Data (GCBD) agreed to a deal with state-owned telco China Telecom to move users’ iCloud data belonging to Apple’s China-based users to the latter’s servers, the shift raised concerns that it could make user data vulnerable to…

■■■■■ PageBuster: gather dumps of all executable pages of packed processes. https://github.com/revng/pagebuster https://t.me/cKure/8038

■■□□□ Data-Leak from Lebanon Data of educational website https://www.esa.edu.lb/ is being sold online. https://t.me/cKure/8035

■■□□□ Data-Leak: Codecov hackers gained access to Monday.com source code. https://www.bleepingcomputer.com/news/security/codecov-hackers-gained-access-to-mondaycom-source-code/ https://t.me/cKure/8034