NEW BOT Телеграм, страница - 392960207

HackerOne

11K subscribers

644 photos

31 videos

79 files

2.74K links

Community : @Sec0x01
@Bug0x

Download Telegram

About

Blog

Apps

Platform

11K subscribers

Forwarded from Security Analysis

This media is not supported in your browser

VIEW IN TELEGRAM

CVE-2020-2551 Weblogic Remote Code Execute RCE With IIOP
#RCE #Weblogic
@securation

274 viewsپدرخوانده, 18:54

Saudi Dismisses Link to Hack of Amazon Owner Bezos
http://feedproxy.google.com/~r/Securityweek/~3/bJTp5wvRaXc/saudi-dismisses-link-hack-amazon-owner-bezos

The Saudi embassy in Washington on Tuesday dismissed suggestions the kingdom hacked the phone of Washington Post owner Jeff Bezos (https://www.securityweek.com/investigator-says-amazon-chiefs-phone-hacked-saudis), as media reports linked the security breach to a WhatsApp message from an account of Crown Prince Mohammed bin Salman.
read more (https://www.securityweek.com/saudi-dismisses-link-hack-amazon-owner-bezos)

Saudi Dismisses Link to Hack of Amazon Owner Bezos | SecurityWeek.Com

The Saudi embassy in Washington dismissed suggestions the kingdom hacked the phone of Washington Post owner Jeff Bezos, as media reports linked the security breach to a WhatsApp message from an account of Crown Prince Mohammed bin Salman.

1.91K viewsپدرخوانده, 10:46

Unofficial Patch Released for Recently Disclosed Internet Explorer Zero-Day
https://ift.tt/2GcrOgj

Unofficial Patch Released for Recently Disclosed Internet Explorer Zero-Day | SecurityWeek.Com

0patch has released a micropatch for the recently disclosed Internet Explorer zero-day vulnerability. The micropatch is free for consumers

1.9K viewsپدرخوانده, 16:17

https://medium.com/bugbountywriteup/devoops-an-xml-external-entity-xxe-hackthebox-walkthrough-fb5ba03aaaa2

DevOops — An XML External Entity (XXE) HackTheBox Walkthrough

2.08K viewsAmir Kiani, 17:25

Sec in your DevOps: Adding the OWASP Dependency Check to your Jenkins pipeline

https://ift.tt/30XyWGZ

2.71K viewsپدرخوانده, 14:12

https://twitter.com/thezdi/status/1220422432177246210

Zero Day Initiative

Success! The team of @ScepticCtf, @brymko, and @bl4ckic3 needed little time to demo their RCE against the Triangle Microworks SCADA Data Gateway in the DNP3 category. They're off to the disclosure room with all the details. #P2OMiami #S4x20

2.49K viewsپدرخوانده, 19:09

Spotify DRM Bypass + PoC

https://ift.tt/2TRpuU0

2.5K viewsپدرخوانده, 17:48

https://medium.com/@arbazhussain/race-condition-bypassing-team-limit-b162e777ca3b

Race Condition bypassing team limit

Severity: Medium

2.13K viewsAmir Kiani, 20:05

2.15K viewsAmir Kiani, 20:41

https://medium.com/walmartlabs/reverse-engineering-an-obfuscated-malicious-macro-3fd4d4f9c439

Reverse Engineering an Obfuscated Malicious Macro

Malicious Microsoft Office documents have been a staple of commercial cybersecurity threat actors for some time. The ubiquity of Office in…

2.49K viewsAdel, 21:03

Google introduces OpenSk, an Open Source security key implementation

https://ift.tt/2OudAMn

Say hello to OpenSK: a fully open-source security key implementation

Posted by Elie Bursztein, Security & Anti-abuse Research Lead, and Jean-Michel Picod, Software Engineer, Google Today, FIDO security...

2.73K viewsAdel, 17:57

PHP 7.0-7.4 disable_functions bypass 0day PoC

https://github.com/mm0r1/exploits/tree/master/php7-backtrace-bypass

exploits/php7-backtrace-bypass at master · mm0r1/exploits

Pwn stuff. Contribute to mm0r1/exploits development by creating an account on GitHub.

2.63K viewsAdel, 09:03

Yet Another Sudo Vulnerability!

When 'pwfeedback' is enabled, a new Sudo bug could let low privileged Linux & macOS users (or malicious programs) execute arbitrary commands with 'root' privileges.

Details for CVE-2019-18634 ➤ https://thehackernews.com/2020/02/sudo-linux-vulnerability.html

3.68K viewsAdel, 00:20

3.01K viewsAmir Kiani, 19:55

https://0xatul.github.io/posts/2020/02/external-xml-entity-via-file-upload-noscript/

2.72K viewsAmir Kiani, 15:23

Massive DDoS attack brought down 25% Iranian Internet connectivity

https://ift.tt/2SyIPXt

Security Affairs

Massive DDoS attack brought down 25% Iranian Internet connectivity

Iran comes under cyber-attack again, a massive offensive brought down a large portion of the Iranian access to the Internet.

2.99K viewsAdel, 19:47

https://hailstorm1422.com/linkedin-blind-idor/

2.95K viewsAmir Kiani, 17:59

https://medium.com/@osamaavvan/exploiting-websocket-application-wide-xss-csrf-66e9e2ac8dfa

Exploiting WebSocket [Application Wide XSS / CSRF]

Assalam u Alikum, it’s been a while I haven’t contributed to this wonderful community so I am back with a new write up about WebSocket…

3.59K viewsAmir Kiani, 17:59

3.7K viewsAmir Kiani, 19:58

https://www.bbc.com/news/av/stories-51660982/criminals-on-cctv-scammers-caught-red-handed

Criminals on CCTV: Scammers caught red-handed

The man who hacked into a criminal call centre to expose scammers at work.

2.69K viewsAmir Kiani, 18:51

protonmail #Down

2.34K viewsAmir Kiani, 09:58