All posts in Uncategorized

■■□□□ Interesting thread. https://twitter.com/therceman/status/1428460546660175875 https://t.me/cKure/8937

■■□□□ Stored XSS to RCE Chain as SYSTEM in ManageEngine ServiceDesk Plus. https://medium.com/tenable-techblog/stored-xss-to-rce-chain-as-system-in-manageengine-servicedesk-plus-493c10f3e444 https://t.me/cKure/8936

■■□□□ SourcePoint v1.2 releases: polymorphic C2 profile generator for Cobalt Strike C2s. https://github.com/Tylous/SourcePoint https://t.me/cKure/8935

■■■■■ https://www.rapid7.com/blog/post/2021/08/17/fortinet-fortiweb-os-command-injection/ https://t.me/cKure/8934

■■■□□ Cyber Warfare’s Impact On Airpower. https://www.thedrive.com/the-war-zone/42006/the-reality-of-how-cyber-warfare-will-impact-aerial-combat https://t.me/cKure/8933

■□□□□ Data-Leak / UAE https://t.me/cKure/8931 https://t.me/cKure/8932

■■■□□ The once-dominant handset maker BlackBerry is busy squashing BadAlloc bugs in its QNX real-time operating system used in cars in medical devices. https://threatpost.com/blackberrys-qnx-devices-attacks/168772/ https://t.me/cKure/8930

■□□□□ In July, researchers from Fortinet reported that a new ransomware family, tracked as Diavol, might have been developed by Wizard Spider, the cybercrime gang behind the TrickBot botnet. https://t.me/cKure/8929

■■■■■ Jsleak – A Go Code To Detect Leaks In JS Files Via Regex Patterns. https://github.com/0xTeles/jsleak https://t.me/cKure/8928

■■■■□ OK, so you stole $600m-plus from us, how about you be our Chief Security Advisor, Poly Network asks thief. https://t.me/cKure/8927