All posts by cK-bot

■■■□□ PoC for CVE-2021-3129 (Laravel). https://github.com/knqyf263/CVE-2021-3129 https://t.me/cKure/9598

■■■□□ China : Chinese speaking Hackers Used a New Rootkit to Spy on Targeted Windows 10 Users. https://thehackernews.com/2021/10/chinese-hackers-used-new-rootkit-to-spy.html https://t.me/cKure/9597

■■■□□ GriftHorse Android malware hit 10 million devices in 70 countries. https://www.hackread.com/grifthorse-android-malware-70-countries/ https://t.me/cKure/9596

■□□□□ Privacy: IKEA has removed hidden security cameras from its warehouse in Peterborough, England, after an employee spotted one in the ceiling void while using the toilet. https://t.me/cKure/9595

■■□□□ Apple Pay Can be Abused to Make Contactless Payments From Locked iPhones. https://thehackernews.com/2021/10/apple-pay-can-be-abused-to-make.html https://t.me/cKure/9594

■■■■□ Data-Leak: Crypto exchange Coinbase disclosed that a threat actor stole cryptocurrency from 6,000 customers after using a vulnerability to bypass the company’s SMS multi-factor authentication security feature. https://www.bleepingcomputer.com/news/security/hackers-rob-thousands-of-coinbase-customers-using-mfa-flaw/ https://t.me/cKure/9593

■■■■□ XSS to RCE https://whynotsecurity.com/blog/xss-to-rce/ https://t.me/cKure/9592

■■□□□ Kernel Vmalloc Use-After-Free in the ION Allocator. https://labs.taszk.io/blog/post/61_android_ion_uaf/ https://t.me/cKure/9591

■□□□□ https://medium.com/@0xnaeem/how-i-get-my-first-p1-bug-from-bugcrowd-vdp-program-with-my-phone-e1eb1444146c https://t.me/cKure/9590

■■■■□ CVE-2015-1642: SPRAYING THE HEAP IN SECONDS USING ACTIVEX CONTROLS IN MICROSOFT OFFICE https://www.greyhathacker.net/?p=911 https://t.me/cKure/9589