NEW BOT Телеграм, страница

Iran Calls Natanz Atomic Site Blackout 'Nuclear Terrorism'

https://ift.tt/3mF8sEE

Iran Calls Natanz Atomic Site Blackout ‘Nuclear Terrorism’

Iran on Sunday described a blackout at its underground Natanz atomic facility an act of “nuclear terrorism,” raising regional tensions as world powers and Tehran continue to negotiate over its tattered nuclear deal.

2.53K viewsAdeL, 00:23

HackerOne

Exclusive: #RUMINT Rumor Intelligence from Iran 🇮🇷 via Israel 🇮🇱.

Nuclear facility at Natanz, Iran has suffered major damage by an attack.

Rumor 1: Israel launched a cyber attack at the facility.

Rumor 2: Israel used local assets and used explosives (likely a sabotage) and / or cyber tactics during the attack.

Rumor 3: It was an accident.

However, the facility sustained power damage and no nuclear leak occurred, as per reliable source.

2.81K viewsAdeL, 19:41

HackerOne

2.54K viewsН Е К И Б Е Р Л Е О, 09:22

HackerOne

https://swarm.ptsecurity.com/rce-cockpit-cms/

PT SWARM

From 0 to RCE: Cockpit CMS

Our team searched for bugs in the source code of Cockpit, an open-source content management system. Here is the denoscription of Cockpit from its official site: Cockpit is a headless CMS with an API-first approach that puts content first. It is designed to…

2.6K viewsAmir Kiani, 03:26

HackerOne

https://github.com/r4j0x00/exploits/tree/master/chrome-0day

2.71K viewsAmir Kiani, 05:48

HackerOne

Remote exploitation of a man-in-the-disk vulnerability in WhatsApp (CVE-2021-24027)
Research: https://census-labs.com/news/2021/04/14/whatsapp-mitd-remote-exploitation-CVE-2021-24027/
PoC: https://github.com/CENSUS/whatsapp-mitd-mitm

Census-Labs

CENSUS | Cybersecurity Engineering

In this article we will have a look at how a simple phishing attack through an Android messaging application could result in the direct leakage of data found in unprotected device storage (/sdcard). Then we will show how the two aforementioned WhatsApp vulnerabilities…

3.11K viewsAmir Kiani, 21:15

HackerOne

Forwarded from Security Analysis

1-click RCE in Telegram, Nextcloud, VLC, Libre-/OpenOffice, Bitcoin/Dogecoin Wallets, Wireshark and Mumble

https://ift.tt/3gcdx6d

positive.security

Allow arbitrary URLs, expect arbitrary code execution | Positive Security

Insecure URL handling leading to 1-click code execution vulnerabilities in Telegram, Nextcloud (CVE-2021-22879), VLC, LibreOffice (CVE-2021-25631), OpenOffice (CVE-2021-30245), Bitcoin/Dogecoin Wallets, Wireshark (CVE-2021-22191) and Mumble (CVE-2021-27229).

3.06K viewsAdeL, 15:16

HackerOne

https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/

2.87K viewsAmir Kiani, edited 09:48

HackerOne

Telegram bug bounties: XSS, privacy issues, official bot exploitation and more…

https://davtur19.medium.com/telegram-bug-bounties-xss-privacy-issues-official-bot-exploitation-and-more-5277fa78435

2.97K viewsAdeL, 20:01

HackerOne

An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly logged sensitive suppression deletions, which should not have been visible to users with access to view AbuseFilter log data.

https://cve.reconshell.com/cve/CVE-2021-31546

3.1K viewsAdeL, edited 07:28

HackerOne

https://twitter.com/1rpwn/status/1387082353206599685

Twitter

Adel

Testing SAML integrations? Make sure to check - document/assertion signing - XSW attacks - self-signing document - replay protection - document expiration time - relay state open redirect - originating IP validation - XXE - XSLT Need more input -> docs.oasis…

2.42K viewsAdeL, 16:35

HackerOne

https://www.ironnet.com/blog/iranian-cyber-attack-updates

Ironnet

Analysis of the Iranian cyber attack landscape

Updated to include recent activity by the APT Agrius