All posts tagged news

■■■■■ Test payload for CVE-2021-3156. sudoedit -s ‘\’ `perl -e ‘print “A” x 65536’ https://t.me/cKure/6762

■■■■□ AWS statement on CVE-2021-3156. https://aws.amazon.com/security/security-bulletins/AWS-2021-001/ https://t.me/cKure/6760

■■■■■ #Zeroday in sudo command. #0day. Technical details. https://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit https://t.me/cKure/6759

■■■■■ CVE-2021-3156 | Buffer overflow in command line unescaping. https://www.sudo.ws/alerts/unescape_overflow.html https://t.me/cKure/6757

■■■■□ VisualDoor: SonicWall SSL-VPN Exploit https://darrenmartyn.ie/2021/01/24/visualdoor-sonicwall-ssl-vpn-exploit/ https://t.me/cKure/6756

■■■■■ Duf – Disk Usage/Free Utility (Linux, BSD, macOS & Windows). https://github.com/muesli/duf https://www.kitploit.com/2021/01/duf-disk-usagefree-utility-linux-bsd.html https://t.me/cKure/6755

■■□□□ Google: North Korean hackers have targeted security researchers via social media. https://www.zdnet.com/article/google-north-korean-hackers-have-targeted-security-researchers-via-social-media | # NorthKorea https://t.me/cKure/6754

■■■■□ A new wormable Android malware spreading via WhatsApp. https://thehackernews.com/2021/01/beware-new-wormable-android-malware.html https://t.me/cKure/6753

■□□□□ Pcaps and the Tools That Love Them Part 2. https://securityboulevard.com/2021/01/pcaps-and-the-tools-that-love-them-part-2-of/ https://t.me/cKure/6752

■■□□□ ffuf v1.2.0 released! New features: – Rate limiting – Config file support Improvements: – HTML report URLs clickable – input-shell now configurable (for input-cmd) – Comma separated wordlists for -w – Bunch of bug fixes github.com/ffuf/ffuf https://t.me/cKure/6751