HackerOne – Telegram
HackerOne
11K subscribers
644 photos
31 videos
79 files
2.74K links
Community : @Sec0x01
@Bug0x
Download Telegram
SANS Holiday Hack Challenge holidayhackchallenge.com
PoC exploits for CVE-2020-17143 and CVE-2020-17141 which demonstrate the XXE bugs against Exchange Server.

- Low privileged authentication only
- CVE-2020-17141 is interesting because its in the EWS API

https://srcincite.io/pocs/cve-2020-17143.py.txt
https://srcincite.io/pocs/cve-2020-17141.py.txt
😐
Israel based hacking company Celebite claims to have cracked the encryption of Signal messenger.

https://www.cellebrite.com/en/blog/cellebrites-new-solution-for-decrypting-the-signal-app/

Response from the creator of Signal:
https://mobile.twitter.com/moxie/status/1337434126186553345

Reference:
https://www.bbc.com/news/amp/technology-55412230
Google hackers disclose exploit for an UNPATCHED Windows vulnerability (CVE-2020-0986) that was exploited as 0-day in the wild, for which Microsoft issued an incomplete patch and then failed to patch it again under the 90-day deadline.

Read — https://thehackernews.com/2020/12/google-discloses-poorly-patched-now.html