All posts by cK-bot

■■■■□ CVE-2021-40444: Windows MSHTML zero-day exploits shared on hacking forums. https://www.bleepingcomputer.com/news/microsoft/windows-mshtml-zero-day-exploits-shared-on-hacking-forums/ https://t.me/cKure/9297

■■■■■ Zero-Day technical analysis: Remote Code Execution 0-Day (CVE-2021-40444) Hits Windows, Triggered Via Office Docs. https://www.trendmicro.com/en_us/research/21/i/remote-code-execution-zero-day–cve-2021-40444–hits-windows–tr.html https://t.me/cKure/9295

■□□□□ Google implements new Private Compute Services for Android. https://hackademicus.nl/google-implements-new-private-compute-services-for-android/ https://t.me/cKure/9293

■■■□□ Data-Leak from Lebanon a threat actor claims to have access of mehe.gov.lb and its selling data online. https://t.me/cKure/9292

■■□□□ Autoharness – A Tool That Automatically Creates Fuzzing Harnesses Based On A Library. https://github.com/parikhakshat/autoharness https://t.me/cKure/9291

■□□□□ Data-Leak as Google has reportedly complied with data requests from Hong Kong’s government despite an earlier pledge not to offer the city user data without the U.S. Department of Justice’s cooperation. China https://uk.pcmag.com/security/135609/google-complies-with-hong-kong-data-requests-after-vowing-not-to https://t.me/cKure/9290

CVE-2021-39115: Template Injection in Email Templates leads to code execution on Jira Service Management Server. https://github.com/PetrusViet/CVE-2021-39115 https://t.me/cKure/9289

■□□□□ webstor: Fast Identification of Vulnerable Web Technologies in your Organization. https://github.com/RossGeerlings/webstor https://t.me/cKure/9288

■■■■□ CVE-2021-40346 PoC (HAProxy HTTP Smuggling). https://github.com/knqyf263/CVE-2021-40346 https://t.me/cKure/9287

■□□□□ Financial fraud by Google. Revealed: Google illegally underpaid thousands of workers across dozens of countries. https://twitter.com/guardian/status/1436436487441199107 https://t.me/cKure/9286