■■■■■ CVE-2020-1350 [DNS RCE]'s exploit code with demo video. https://mp.weixin.qq.com/s?__biz=MzUyMDEyNTkwNA==&mid=2247484522&idx=1&sn=502839af26daa450f644488d75f42cc7&chksm=f9ee68d5ce99e1c37960b7909b5e5cc40f38c9b71711309ee679f0819c10218c1f411976ad6c&scene=126&sessionid=1598960570&key=7adf10a6617c6315506261e47c83d49da426185a83a97372680c51010cd9f8a9b7d827f8ce99f66a6a037a0e51e31792a56cebcaeb5dc0397f92e90c443832a945cc89d1d4fc750e1cd43c30783fc7f9e08c7694e22d7f0dc1bff61b42ff65d359c70b50ecbe5031962b57b47eda33f6e7a61941d4c2016c630eeeddbfe5840a&ascene=1&uin=MTE1NDEwMjc3NA%3D%3D&devicetype=Windows+10+x64&version=62090514&lang=en&exportkey=A9HOqRA5mpcUuAp59geFMeQ%3D&pass_ticket=C6B3Q%2FKQ1%2FUbGev7ZeEeTKkGew3nmNhXz3pU3Wex0luSd%2FRuu%2BJ716bUqCZs4JbG https://t.me/cKure/5393
All posts tagged telegram
September 2, 2020 at 01:39PM
■■□□□ Russian engineer raised $5 million for Tamagotchi for hackers. https://www.ehackingnews.com/2020/09/russian-engineer-raised-5-million-for.html #Russia https://t.me/cKure/5392
September 2, 2020 at 12:48AM
■■□□□ #Zeroday: Magento Sites Vulnerable to RCE Stemming From Magmi Plugin Flaws. https://threatpost.com/magento-sites-vulnerable-to-rce-stemming-from-magmi-plugin-flaws#Zeroday: Magento Sites Vulnerable to RCE Stemming From Magmi Plugin Flaws. https://threatpost.com/magento-sites-vulnerable-to-rce-stemming-from-magmi-plugin-flaws/158864/ https://t.me/cKure/5391
September 2, 2020 at 12:40AM
■■■■□ Exploit code. CVE-2020-5412 POC hostname/proxy.stream?origin=http://169.254.169.254/latest/metadata/ https://t.me/cKure/5390
September 1, 2020 at 03:16PM
■■■□□ Sensitive Information exposed in javascript using expired JWT. https://medium.com/@manikandannarayanaswamy/sensitive-information-exposed-in-javascript-using-expired-jwt-3e5b86cb920f https://t.me/cKure/5389
September 1, 2020 at 12:55PM
■■□□□ https://www.hackread.com/vulnerability-lets-hackers-use-credit-card-without-pin-code/ https://t.me/cKure/5386
September 1, 2020 at 07:42AM
■■■□□ Interesting thread: https://mobile.twitter.com/CNMF_CyberAlert/status/1300495752637157377 https://t.me/cKure/5385
September 1, 2020 at 07:37AM
■■■□□ jwt-hack, a JWT testing utility. https://github.com/hahwul/jwt-hack https://t.me/cKure/5384
August 31, 2020 at 04:27PM
■■■□□ $6,5k + $5k HTTP Request Smuggling mass account takeover – Slack + Zomato. https://www.youtube.com/watch?v=gzM4wWA7RFo https://t.me/cKure/5382
August 31, 2020 at 12:52AM
■■□□□ US DoJ wants the funds stored by North Korea in 280 BTC and ETH. https://securityaffairs.co/wordpress/107716/digital-id/doj-vs-north-korea.html https://t.me/cKure/5381
