🔵Joomla! Cross-site scripting vulnerability :

https://dailycve.com/joomla-cross-site-scripting-vulnerability

🔵Unpatched Awbs Advanced Webhost Billing System cross-site request forgery vulnerability:

https://dailycve.com/unpatched-awbs-advanced-webhost-billing-system-cross-site-request-forgery-vulnerability

German privacy agency reported that an online laptop and electronics store was fined EUR 10.4 million for staff control in breach of GDPR.
#International

Without its ultra-fast Optane memory, Intel would leave users without.
#Technologies

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑🖧 Configuring proxy settings in CentOS 8/7 | RHEL 8/7 and Fedora:

1) Configure system-wide proxy settings in the desktop interface
For users using a desktop environment on Fedora / CentOS and RHEL Linux, changes can be made in the system control panel.

Go to Settings > Network > Network Proxy

2) Select “Manual” to enter proxy settings.

3) Fill in the proxy values ​​for http, https and ftp.
If you have a SOCKS proxy, also set it accordingly.
After saving the changes, the system will automatically apply the new parameters.

4) Proxy in Firefox browser
If you have a Firefox browser, you need to update your proxy settings under Settings> Network Settings> Manual Proxy Settings.

5) Configure system-wide proxy settings in CLI
We will add a shell script file to /etc/profile.d/proxy.sh.

This will ensure that the settings are applied to all registered users.

sudo vi /etc/profile
Add proxy settings.

# set proxy config via profie.d - should apply for all users
#
PROXY_URL="http://10.10.1.10:8080/"

export http_proxy="$PROXY_URL"
export https_proxy="$PROXY_URL"
export ftp_proxy="$PROXY_URL"
export no_proxy="127.0.0.1,localhost"

# For curl
export HTTP_PROXY="$PROXY_URL"
export HTTPS_PROXY="$PROXY_URL"
export FTP_PROXY="$PROXY_URL"
export NO_PROXY="127.0.0.1,localhost"
Where:

10.10.1.10 - proxy server ip, can be replaced with hostname
8080 - proxy server port
If authentication is required, the syntax is:

http: // username: password @ proxyserver: proxyport /

then run:

$ source /etc/profile
Confirm :

$ env | grep -i proxy

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🔵Eclipse Hawkbit access control error vulnerability:

https://dailycve.com/eclipse-hawkbit-access-control-error-vulnerability

🔵DELL EMC Avamar Server SQL injection vulnerability(DC: 217-2021):

https://dailycve.com/dell-emc-avamar-server-sql-injection-vulnerability

Google has found third-party browser developers misusing access to their cloud resources built on the open source Chromium project.
#Updates

Tongxin UOS General Manager: The desktop ecosystem has the potential to replace Windows 7.
#Updates

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑 brute force directories and files in webservers :

Fast
Easy and simple to use
Multithreading
Wildcard responses filtering (invalid webpages)
Keep alive connections
Support for multiple extensions
Support for every HTTP method
Support for HTTP request data
Support for raw request
Extensions excluding
Reporting (Plain text, JSON, XML, Markdown, CSV)
Recursive brute forcing
Target enumeration from an IP range
Sub-directories brute forcing
Force extensions
HTTP and SOCKS proxy support
HTTP cookies and headers support
HTTP headers from file
User agent randomization
Proxy host randomization
Batch processing
Request delaying
429 response code detecting
Multiple wordlist formats (lowercase, uppercase, capitalization)
Default configuration from file
Option to force requests by hostname
Option to add custom suffixes and prefixes
Option to whitelist response codes, support ranges (-i 200,300-399)
Option to blacklist response codes, support ranges (-x 404,500-599)
Option to exclude responses by sizes
Option to exclude responses by texts
Option to exclude responses by regexp(s)
Option to exclude responses by redirects
Options to display only items with response length from range
Option to remove all extensions from every wordlist entry
Quiet mode
Debug mode
🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

1) git clone https://github.com/maurosoria/dirsearch.git

2) cd dirsearch

3) python3 dirsearch.py -u <URL> -e <EXTENSIONS>

4) To can use SOCKS proxy or work with ../ in the wordlist, you need to install pips with requirements.txt: pip3 install -r requirements.txt

If you are using Windows and don't have git, you can install the ZIP file here. Dirsearch also supports Docker

Dirsearch requires python 3 or greater

5) dirsearch.py [-u|--url] target [-e|--extensions] extensions [options]

Example:

root/
index.%EXT%
Passing the extensions "asp" and "aspx" (-e asp,aspx) will generate the following dictionary:

root/
index
index.asp
index.aspx
For wordlists without %EXT% (like SecLists), you need to use the -f | --force-extensions switch to append extensions to every word in the wordlists, as well as the "/". And for entries in the wordlist that you do not want to force, you can add %NOFORCE% at the end of them so dirsearch won't append any extension.
Example:

admin
home.%EXT%
api%NOFORCE%

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🔵Unpatched Maxthon browser (Windows client) has dll hijacking vulnerability:

https://dailycve.com/unpatched-maxthon-browser-windows-client-has-dll-hijacking-vulnerability

🔵McAfee Agent authorization issue vulnerability (DC: 219-2021)

https://dailycve.com/mcafee-agent-authorization-issue-vulnerability

Phantom Green of the Galaxy S21 can become the next exclusive color of Samsung.
#Technologies

Microsoft's application to support the SpaceX Starlink Internet satellite group in an FCC lawsuit failed.
#bugs

Hack mobile with rats

Meitar has announced the addition of nine new partners.
#International

Trump's supporter's favorite SNS to resume service, three facts found in AWS suit.
#International

🔵Information leakage vulnerability due to improper implementation of Java API in Apache Tomcat (DC: 220-2021)

https://dailycve.com/information-leakage-vulnerability-due-improper-implementation-java-api-apache-tomcat