All posts in Uncategorized

■■■■□ Dutch journalist Daniel Verlaan of RTL Nieuws gatecrashes and joined the meeting after the Dutch defence minister accidentally posted some of the login details on Twitter. https://www.bbc.com/news/amp/world-europe-55027641 https://t.me/cKure/6088

■■■■□ ImageMagick – Shell injection via PDF password. https://insert-script.blogspot.com/2020/11/imagemagick-shell-injection-via-pdf.html https://t.me/cKure/6087

■■■□□ Funny #DataLeak: https://mobile.twitter.com/_IntelligenceX/status/1330093822513192961 https://t.me/cKure/6086

■■□□□ #DataLeak; #Japan : Actor claiming to sell access to a huge Japanese company with $9,000,000,000 in revenue. Based on the description, the company is Olympus Corporation – manufacturer of optics (TYO:7733) Asking price: $3,000 Source: Alon https://t.me/cKure/6085

● Received email from Revil Ransomware team. __.onion https://t.me/cKure/6081

■■□□□ KL-001-2020-009 : Barco wePresent Insecure Firmware Image. https://seclists.org/fulldisclosure/2020/Nov/40 https://t.me/cKure/6078

■■□□□ Turning blind error based SQLi into exploitable Boolean one. https://medium.com/@ozguralp/turning-blind-error-based-sql-injection-into-an-exploitable-boolean-one-85d6be3ca23b https://t.me/cKure/6077

■■■■■ #Zeroday: CVE-2020-13671; Drupal core – Critical – Remote code execution – SA-CORE-2020-012. This is a double extension vulnerability. https://www.drupal.org/sa-core-2020-012 https://t.me/cKure/6075

■■■□□ CVE-2020-13671 / Double extention vulnerability: Drupal sites vulnerable to double-extension attacks. https://www.zdnet.com/article/drupal-sites-vulnerable-to-double-extension-attacks https://t.me/cKure/6074

■■■□□ Two critical bugs in Apache Unomi allowed attackers to run OS commands on vulnerable servers. https://portswigger.net/daily-swig/two-critical-bugs-in-apache-unomi-allowed-attackers-to-run-os-commands-on-vulnerable-servers https://t.me/cKure/6072