All posts by cK-bot

■■□□□ How to Mitigate Microsoft Windows 10, 11 SeriousSAM Vulnerability. https://thehackernews.com/2021/07/how-to-mitigate-microsoft-windows-10-11.html https://t.me/cKure/8709

■□□□□ Signal fixes bug that sent random images to wrong contacts. https://www.bleepingcomputer.com/news/security/signal-fixes-bug-that-sent-random-images-to-wrong-contacts/ https://t.me/cKure/8708

■■■□□ Data-Leak of Vietnam government records / documents amounting to around ~700 MB. The actor claims to have the data valid for next few years and was acquired via physical means a few years back via USB. https://t.me/cKure/8704

■□□□□ XOS Shop 1.0.9 – ‘Multiple’ Arbitrary File Deletion (Authenticated). https://www.exploit-db.com/exploits/50155 https://t.me/cKure/8703

■■■■■ Massive Data-Leak probably the biggest EA data leak ever as hackers put data online for free. The file size of the shared zip file is 750 GB. https://t.me/cKure/8700

■■■□□ Exploit: Elasticsearch ECE 7.13.3 – Anonymous Database Dump / Web App. https://www.exploit-db.com/exploits/50152 https://t.me/cKure/8698

■■□□□ Microsoft publishes mitigations for the PetitPotam attack. https://securityaffairs.co/wordpress/120550/security/petitpotam-attack-mitigations.html https://t.me/cKure/8696

■■■■□ Beaconator is an aggressor script for Cobalt Strike used to generate a raw stageless shellcode and packing the generated shellcode using PEzor. https://github.com/capt-meelo/Beaconator https://t.me/cKure/8695

■■□□□ Threat actor offers Clubhouse secret database containing 3.8B phone numbers. https://securityaffairs.co/wordpress/120553/hacking/threat-actor-offers-clubhouse-secret-database-containing-3-8b-phone-numbers.html https://t.me/cKure/8694

■■□□□ LightMe: HTTP Server serving obfuscated Powershell Scripts/Payloads. https://github.com/WazeHell/LightMe https://t.me/cKure/8693