All posts by cK-bot

■■□□□ Smuggling an (Un)exploitable XSS permalink. https://www.rcesecurity.com/2020/11/Smuggling-an-un-exploitable-xss/ https://t.me/cKure/6000

■■□□□ ICYMI: TV hack. https://www.komando.com/security-privacy/smart-tv-security-flaw/764122/ https://t.me/cKure/5999

■■■□□ #DataLeak: Image stock site 123RF hacked; 8.3M user database leaked. https://www.hackread.com/123rf-hacked-user-databas#DataLeak: Image stock site 123RF hacked; 8.3M user database leaked. https://www.hackread.com/123rf-hacked-user-database-leaked/ https://t.me/cKure/5998

■■■■□ Unique XXE to AWS Keys journey. https://medium.com/@estebancano/unique-xxe-to-aws-keys-journey-afe678989b2b https://t.me/cKure/5997

■■■□□ Evernote: Universal-XSS, theft of all cookies from all sites, and more. https://blog.oversecured.com/Evernote-Universal-XSS-theft-of-all-cookies-from-all-sites-and-more/ https://t.me/cKure/5996

■■■□□ Facebook Messenger leaking Access-Token of users. https://medium.com/@guhanraja/how-i-found-the-facebook-messenger-leaking-access-token-of-million-users-8ee4b3f1e5e3 https://t.me/cKure/5995

■■■□□ Multiple vulnerabilities in Pixar OpenUSD affects some versions of macOS. https://blog.talosintelligence.com/2020/11/vuln-spotlight-pixar-open-usd-nov-2020.html https://t.me/cKure/5994

■■■□□ #CyberAttack: The North Face resets passwords after a successful credential stuffing attack. | #DataLeak https://www.bleepingcomputer.com/news/security/the-north-face-resets-passwords-after-credential-stuf#CyberAttack: The North Face resets passwords after a successful credential stuffing attack. | #DataLeak https://www.bleepingcomputer.com/news/security/the-north-face-resets-passwords-after-credential-stuffing-attack/ https://t.me/cKure/5993

■■■■■ CVE-2020-17051: #Zeroday Remote kernel heap overflow in NFSv3 Windows Server | #0day. https://www.mcafee.com/blogs/other-blogs/mcafee-labs/cve-2020-17051-remote-kernel-heap-overflow-in-nfsv3-windows#Zeroday Remote kernel heap overflow in NFSv3 Windows Server | #0day. https://www.mcafee.com/blogs/other-blogs/mcafee-labs/cve-2020-17051-remote-kernel-heap-overflow-in-nfsv3-windows-se#0day. https://www.mcafee.com/blogs/other-blogs/mcafee-labs/cve-2020-17051-remote-kernel-heap-overflow-in-nfsv3-windows-se#0day. https://www.mcafee.com/blogs/other-blogs/mcafee-labs/cve-2020-17051-remote-kernel-heap-overflow-in-nfsv3-windows-server/ https://t.me/cKure/5992

■■□□□ New ModPipe malware targets hospitality, hotel point of sale systems. https://www.zdnet.com/google-amp/article/new-modpipe-malware-targets-hospitality-hotel-point-of-sale-systems/ https://t.me/cKure/5991