All posts in Uncategorized

Swagger-UI DOM XSS via DOMPurify library. example.tld/swagger/ index.html?configUrl=https://xss.smarpo.com/test.json https://blog.vidocsecurity.com/blog/hacking-swagger-ui-from-xss-to-account-takeovers/ https://t.me/cKure/15027

■■■■□ Israeli cyber-scum: NoviSpy Spyware Installed on Journalist’s Phone After Unlocking It With Cellebrite Tool. https://thehackernews.com/2024/12/novispy-spyware-installed-on.html https://t.me/cKure/15026

■■□□□ Russia Attacks Ukraine With Malware Using Other Hackers’ Backdoors. https://www.yahoo.com/tech/russia-attacks-ukraine-malware-using-213005792.html https://t.me/cKure/15025

■■■□□ Lesser-known XSS payloads that work with Next.js Source: Twitter | TheYasinSpace – Dynamic CSS injection XSS – CSS Variable injection XSS – Object Literal injection XSS – CSS Flexbox injection XSS – Unicode Character injection XSS – Dynamic Font injection XSS – CSS Animation injection XSS – Web Font injection XSS – CSS Grid…

■■■■□ New stealthy Pumakit Linux rootkit malware spotted in the wild. https://www.bleepingcomputer.com/news/security/new-stealthy-pumakit-linux-rootkit-malware-spotted-in-the-wild/ https://t.me/cKure/15023

■■■□□ Russian cyberspies target Android users with new spyware. https://www.bleepingcomputer.com/news/security/russian-cyberspies-target-android-users-with-new-spyware/ https://t.me/cKure/15022

■■■□□ UAE ‘Dubai Police’ Lures Anchor Wave of UAE Mobile Attacks. https://www.darkreading.com/cyberattacks-data-breaches/dubai-police-lures-uae-mobile-attacks https://t.me/cKure/15021

■■■■■ Iran crew used ‘cyberweapon’ against United States’ critical infra. https://www.theregister.com/2024/12/13/iran_cyberweapon_us_attacks/ https://t.me/cKure/15020

■■□□□ The Funksec ransomware gang claims on their darkweb site are selling admin access to the Pakistan’s Ministry of Foreign Affairs web portal. https://t.me/cKure/15017

■■■□□ Top vodka brand Stoli files for bankruptcy following ransomware attack. https://www.techradar.com/pro/security/top-vodka-brand-stoli-files-for-bankruptcy-following-ransomware-attack https://t.me/cKure/15016