All posts in Uncategorized

■■■■□ A Reference-Counting Bug in the Linux Kernel io_uring Subsystem (PoC for CVE-2021-20226) https://www.zerodayinitiative.com/blog/2021/4/22/cve-2021-20226-a-reference-counting-bug-in-the-linux-kernel-iouring-subsystem https://t.me/cKure/7733

■■■■□ The FLARE team’s open-source tool to identify capabilities in executable files. https://github.com/fireeye/capa https://t.me/cKure/7731

■■■■□ The FLARE team’s open-source tool to identify capabilities in executable files. https://github.com/fireeye/capa https://t.me/cKure/7731

■■■■□ Vulnerablecode – A Free And Open Vulnerabilities Database And The Packages They Impact And The Tools To Aggregate And Correlate These Vulnerabilities. https://github.com/nexB/vulnerablecode https://t.me/cKure/7730

■□□□□ QNAP has urged its customers to install and run its latest firmware and malware removal tools on their NAS boxes amid a surge in ransomware infections. https://go.theregister.com/feed/www.theregister.com/2021/04/22/qnap_nas_ransomware_qlocker_ech0raix/ https://t.me/cKure/7729

■■□□□ CVE-2021-22893: Advice on Pulse Connect Secure RCE Vulnerability. https://www.ncsc.gov.uk/news/advice-on-pulse-connect-secure-rce-vulnerability https://t.me/cKure/7728

■■■■■ Signal CEO hacks Cellebrite cellphone hacking, cracking tool. https://www.hackread.com/signal-ceo-hacks-cellebrite-cellphone-hacking-tool/ https://t.me/cKure/7727

■□□□□ Data-Leak: Actor claims to have hacked http://php2.twinner.com.tw and dumped the db. The actor is selling it online. https://t.me/cKure/7726

■■□□□ Attackers can hide ‘external sender’ email warnings with HTML and CSS. https://www.bleepingcomputer.com/news/security/attackers-can-hide-external-sender-email-warnings-with-html-and-css/ https://t.me/cKure/7725

■■□□□ Cook: customizable wordlist and password generator. https://github.com/giteshnxtlvl/cook https://t.me/cKure/7724