All posts in Uncategorized

■□□□□ Job opportunity @citizenlab as a sysadmin. It’s a great chance to join a one-of-a-kind group of digital sleuths. https://citizenlab.ca/2024/06/job-opportunity-informatics-security-analyst-and-network-administrator/ https://t.me/cKure/14330

■■■■■ Cyberthreat ‘Boolka’ Deploying BMANAGER Trojan via SQLi Attacks. https://thehackernews.com/2024/06/new-cyberthreat-boolka-deploying.html https://t.me/cKure/14329

HTML entities that create ASCII characters inside a JavaScript URL. https://shazzer.co.uk/vectors/667b4120d631543fa1c420a5 https://t.me/cKure/14327

■■■■□ The forensic investigative ℹ️ unit of ‘Earshot’ unravels the execution of a 6 year old girl (Hind Rajab) from Gaza in her car with her family by the Merkava MK-4 tank’s anti-material gun by Jews (Israel 🇮🇱) in their ongoing genocide. The ambulance 🚨 sent by Red-Cross was blown by the direct hit from…

■■■□□ Cyber-War: Russia launches ‘massive’ overnight attack on Ukraine power grid. https://www.bbc.com/news/articles/czvvj4j4p8ro https://t.me/cKure/14323

■■■■□ Reverse Engineering and Exploiting Augentix System on Chip Unicorn Binary. https://www.somersetrecon.com/blog/2024/6/5/reversing-the-unicorn https://t.me/cKure/14322

■■■■■ wstunnel: Tunnel all your traffic over Websocket or HTTP2 – Bypass firewalls/DPI (Static binary available). https://github.com/erebe/wstunnel https://t.me/cKure/14320

■■■■□ Sansec researchers are warning of a critical CosmicSting vulnerability that affects almost 75% of sites using Adobe Commerce and Magento. Despite the release of emergency fixes, nine days later the situation remains unchanged: millions of sites are at risk of serious XML external entity injection (XXE) and RCE attacks. CosmicSting is also tracked as…

■□□□□ United Kingdom Data-Leak: London hospitals hackers publish stolen blood test data. https://www.bbc.com/news/articles/c9ww90j9dj8o https://t.me/cKure/14317

■■■■□ Execute commands by sending JSON! How unsafe deserialization vulnerabilities work in Ruby projects. https://github.blog/2024-06-20-execute-commands-by-sending-json-learn-how-unsafe-deserialization-vulnerabilities-work-in-ruby-projects/ https://t.me/cKure/14316