All posts in Uncategorized

■■■□□ Data-Leak of Vietnam government records / documents amounting to around ~700 MB. The actor claims to have the data valid for next few years and was acquired via physical means a few years back via USB. https://t.me/cKure/8704

■□□□□ XOS Shop 1.0.9 – ‘Multiple’ Arbitrary File Deletion (Authenticated). https://www.exploit-db.com/exploits/50155 https://t.me/cKure/8703

■■■■■ Massive Data-Leak probably the biggest EA data leak ever as hackers put data online for free. The file size of the shared zip file is 750 GB. https://t.me/cKure/8700

■■■□□ Exploit: Elasticsearch ECE 7.13.3 – Anonymous Database Dump / Web App. https://www.exploit-db.com/exploits/50152 https://t.me/cKure/8698

■■□□□ Microsoft publishes mitigations for the PetitPotam attack. https://securityaffairs.co/wordpress/120550/security/petitpotam-attack-mitigations.html https://t.me/cKure/8696

■■■■□ Beaconator is an aggressor script for Cobalt Strike used to generate a raw stageless shellcode and packing the generated shellcode using PEzor. https://github.com/capt-meelo/Beaconator https://t.me/cKure/8695

■■□□□ Threat actor offers Clubhouse secret database containing 3.8B phone numbers. https://securityaffairs.co/wordpress/120553/hacking/threat-actor-offers-clubhouse-secret-database-containing-3-8b-phone-numbers.html https://t.me/cKure/8694

■■□□□ LightMe: HTTP Server serving obfuscated Powershell Scripts/Payloads. https://github.com/WazeHell/LightMe https://t.me/cKure/8693

■□□□□ DEF CON offers beginner-level Spot the Fed this year: He’ll be on stage giving a keynote. https://go.theregister.com/feed/www.theregister.com/2021/07/26/in_brief_security/ https://t.me/cKure/8692

■■□□□ As per the researchers, the number of reported Discord malware detections has increased significantly since last year. Even users who have never interacted with Discord are at risk, even though the network is mostly utilized by gamers as Discord has a malware problem. https://t.me/cKure/8691