All posts in Uncategorized

■■■□□ Unconfirmed | Data-Leak: An actor claims to have data of 70+ private, government, and academic databasess. https://t.me/cKure/8861

■■■□□ InQL Scanner v4.0.5 releases: Burp Extension for GraphQL Security Testing. https://securityonline.info/inql-scanner/ https://t.me/cKure/8860

■■■□□ Go-Shellcode – A Repository Of Windows Shellcode Runners And Supporting Utilities. https://github.com/Ne0nd0g/go-shellcode https://t.me/cKure/8859

■■□□□ CVE-2021-20090 actively exploited to target millions of IoT devices worldwide. https://hackademicus.nl/cve-2021-20090-actively-exploited-to-target-millions-of-iot-devices-worldwide/ https://t.me/cKure/8858

■■■□□ CVE-2021-1585: A remote code execution (RCE) vulnerability in the Cisco Adaptive Security Device Manager (ADSM) Launcher disclosed in July has yet to be addressed. https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asdm-rce-gqjShXW https://t.me/cKure/8857

■■■□□ Hacking RFID Attendance Systems with a Time Turner. https://www.infosecurity-magazine.com/news/defcon-hacking-rfid-attendance/ https://t.me/cKure/8855

■■□□□ RansomEXX ransomware hit computer manufacturer and distributor GIGABYTE. RansomEXX ransomware hit computer manufacturer and distributor GIGABYTE https://t.me/cKure/8854

■■□□□ Data-Leak / United States as national provider identifier (NPI) is being shared online in an 800 MB compressed (8 GB uncompressed) file. NPI is an identifier for medical services’ providers in the country. https://t.me/cKure/8853

■■□□□ Spawn: spawns a sacrificial process, injects it with shellcode, and executes payload. https://github.com/boku7/spawn https://t.me/cKure/8852

■■■□□ cThreadHijack – Beacon Object File (BOF) For Remote Process Injection Via Thread Hijacking. https://github.com/connormcgarr/cThreadHijack https://t.me/cKure/8851