Amazon begs the court not to order the resumption of social network web hosting facilities by Parler.
#International

🔵An unpatched SQL injection vulnerability exists in the website of Wuxi Huyi Technology:

https://dailycve.com/unpatched-sql-injection-vulnerability-exists-website-wuxi-huyi-technology

🔵Changzhou Manhao Information Technology Co., Ltd. website has SQL injection vulnerability:

https://dailycve.com/changzhou-manhao-information-technology-co-ltd-website-has-sql-injection-vulnerability

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Top scams :

1) Text messaging scam
Be careful with phone messages.

SMS Text Messages From Microsoft - Genuine or Phishing?

Some, claiming that you have won a huge amount of money, etc., are trying to cheat you.

You can also receive these messages, such as from a bank, PayPal or Apple or any well-known brand.

This could be a different type of phishing.

Tips: Don't click on the link, even if it looks like a link from a bank or PayPal, etc.

Do not call the numbers listed. Contact your bank and let them know about the incident.

2) Scammers in technical support
These are the biggest consumer scams at the moment.

This mainly applies to the elderly.

You may receive an unsolicited call from a person who claims to be from Microsoft technical support or any other technical support provider, asking for permission to access your computer and saying that your computer may be infected with viruses or other malware.

Tips: just hang up and don't trust them.

Neither Microsoft nor any technical support team will call you that way.

3) Income tax fraud
You may receive a call / email from a person allegedly owned by the tax authority stating that you have some unpaid taxes and threaten that if you do not pay the full amount due immediately by bank transfer, they will file a lawsuit and etc.

Tips: Don't call that person. Do not transfer money or make payments in a panic.

Call the tax hotline and tell them about the problem.

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🔵Patch for Adobe Experience Manager cross-site scripting vulnerability:

https://dailycve.com/patch-adobe-experience-manager-cross-site-scripting-vulnerability

🔵Adobe Experience Manager blind server-side request forgery vulnerability patch:

https://dailycve.com/adobe-experience-manager-blind-server-side-request-forgery-vulnerability-patch

AMD CEO: Apple’s M1 chip leads creativity, GPU collaboration between the two sides will continue.
#International #Technologies

A T-shirt sold on Amazon was titled “Trump was titled”
#International

Enjoy, Support & Share :

T.me/UndercodeUpdates

T.me/UndercodeTesting

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑 How to quickly check if your Linux server is under DoS attack from a single IP address ?

A) What do you need
The only thing you need to do this is a Linux server and a user with sudo privileges.

I will be demonstrating on Ubuntu Server 20.04.

We are going to use the netstat tool to find out what IPs are currently connected to your server.

To install netstat on Ubuntu, you actually install net-tools, for example:

> sudo apt-get install net-tools -y
If you are using CentOS or a Red Hat based installation, netstat should already be installed.

B) How to check your server load
The first thing we're going to do is check the load on our server.

The command we will use for this will return the number of logical processors (threads).

On the server, this number should be pretty low, but it depends on what you are running.

If you know everything is in order, make sure your number is off the charts and record the number.

If you suspect something is happening, run the flow check again and compare the results.

To check the number of logical processors, enter the command:

grep processor / proc / cpuinfo | wc -l

> If this number is significantly higher than your baseline, you may be in trouble.

For example, on my Pop! _OS I have 16 threads, but on a Nextcloud hosted Ubuntu server I only have two.

If any of these numbers doubled, I could be exposed to a DDoS attack.

C) How to check the load on your network
Next, we will check the load on our network.

It can be done with a number of tools, but I choose nload.

To install nload, enter the command:

sudo apt-get install nload -y
On CentOS, this command would be:
sudo dnf install nload -y
To run the tool, just enter the command:
nload


If this load is significantly higher than you think, you may be attacked.

How to find out which IP addresses are connected to your server
The next thing you need to do is find out which IPs are connected to your server.

For this we will use netstat like this:

netstat -ntu | awk '{print $ 5}' | cut -d: -f1 -s | sort | uniq -c | sort -nk1 -r
The output from the above command will list each IP address connected to the server and the number of instances of each.
Be sure to review this list carefully. If you see an IP address with a large number of instances (over 100), the chances of the address being the culprit for the load are pretty high.
Once you are sure of culpability, you can block the IP address with the command:

> sudo route add ADDRESS reject

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🔵Patch for Dell Wyse ThinOS authorization issue vulnerability:

https://dailycve.com/patch-dell-wyse-thinos-authorization-issue-vulnerability

🔵Fix for the weakness of Adobe Photoshop heap buffer overflow:

https://dailycve.com/fix-weakness-adobe-photoshop-heap-buffer-overflow

Zoom plans to collect US$ 1.5 billion through a second equity sale.
#International

Apple CEO Cook: Big news, but not new items, will be revealed tomorrow.
#International

Enjoy, Support & Share :

T.me/UndercodeUpdates

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Python network worm that spreads on the local network and gives the attacker control of these machines:
You can bruteforce ssh servers, spread with USBs, etc..

🄸🄽🅂🅃🄰🄻🄻🄸🅂🄰🅃🄸🄾🄽 & 🅁🅄🄽 :

1) git clone https://github.com/pylyf/NetWorm.git

2) cd NetWorm

3) python worm.py

You can bruteforce ssh servers, spread with USBs, etc..

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🔵Microsoft Windows Multipoint security vulnerability:

https://dailycve.com/microsoft-windows-multipoint-security-vulnerability

🔵Microsoft Walletservice access control error vulnerability:

https://dailycve.com/microsoft-walletservice-access-control-error-vulnerability

GPS data reveals that some consumers of Parler engaged in protests at the American Chamber of Commerce.
#International