🔵OFCMS has XSS vulnerability:

https://dailycve.com/ofcms-has-xss-vulnerability

Unilever CEO: "Employees will never return to the office five days a week"
#International

The date of criticism was explained by WhatsApp, which declared an ultimatum.
#Updates

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🦑Bug Bounty references :

>>Amazon Web Services(mailto:aws-security@amazon.com)
>>Amazon.com(mailto:security@amazon.com)
>>ANCILE Solutions Inc.(https://bugcrowd.com/ancile)
>>Anghami(https://hackerone.com/anghami)
>>ANXBTC(https://cobalt.io/anxbtc)
>>Apache httpd(https://hackerone.com/ibb-apache)
>>Appcelerator(mailto:Infosec@appcelerator.com)
>>Apple(mailto:product-security@apple.com)
>>Apptentive(https://www.apptentive.com/contact)
>>Aptible(mailto:security@aptible.com)
>>Ardour(http://tracker.ardour.org/my_view_page.php)
>>Arkane(https://go.intigriti.com/arkanenetwork)
>>ARM mbed(mailto:whitehat@polarssl.org)
>>Asana(mailto:security@asana.com)
>>ASP4all(mailto:support@asp4all.nl)
>>AT&T(https://bugbounty.att.com/bugform.php)
>>Atlassian(https://securitysd.atlassian.net/servicedesk/customer/portal/2)
>>Attack-Secure(mailto:admin@attack-secure.com)
>>Authy(mailto:security@authy.com)
>>Automattic(https://hackerone.com/automattic)
>>Avast!(mailto:bugs@avast.com)
>>Avira(mailto:vulnerabilities@avira.com)
>>AwardWallet(https://cobalt.io/awardwallet)
>>Badoo(https://corp.badoo.com/en/security/#send_bid)
>>Barracuda(https://bugcrowd.com/barracuda)
>>Base(https://go.intigriti.com/base)
>>Basecamp(mailto:security@basecamp.com)
>>Beanstalk(https://wildbit.wufoo.com/forms/wildbit-security-response)
>>BillGuard(https://cobalt.io/billguard)
>>Billys Billing(https://cobalt.io/billys-billing)
>>Binary.com(https://hackerone.com/binary)

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

Tool for free Applescript-based malware detection launched.
#Malwares

:)

🔵Espressif ESP-IDF buffer error vulnerability:

https://dailycve.com/espressif-esp-idf-buffer-error-vulnerability

🔵SaferVPN security vulnerabilities:

https://dailycve.com/safervpn-security-vulnerabilities

Google, "Through four zero-day vulnerabilities, someone attacks Windows and Android"
#Vulnerabilities

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

WELL DONE !!!

This program provides further decompiling and decoding of a disassembled run-only AppleScript.

For input, use a text file that is the output of https://github.com/Jinmo/applescript-disassembler

Running this program will create a new file from the input file annotated with:

1) AEVT codes and their human-readable descriptions;

2) Decoded hard-coded strings;

3) Decimal conversions of hard-coded hex numbers;
Names of targeted applications.
Usage: aevt_decompile <file>

4) where <file> is a text file output from the AppleScript-Disassembler.

aevt_decompile writes its output to ~/Desktop/<file>.out. aevt_decompile is non-destructive (i.e., it does not modify the input file).

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

🔵A dll hijacking vulnerability exists in Odd Games Accelerator (Windows client):

https://dailycve.com/dll-hijacking-vulnerability-exists-odd-games-accelerator-windows-client

🔵Zhejiang Lande Network Technology Co., Ltd. O2OA system has logic flaws and vulnerabilities:

https://dailycve.com/zhejiang-lande-network-technology-co-ltd-o2oa-system-has-logic-flaws-and-vulnerabilities

Sberbank created the Zoom "killer"
#International

A new and near-final version of Windows 10X has been leaked.
#Updates

Too much hacking tutorials on:

https://github.com/carpedm20/awesome-hacking

The CEO of Parler says its service may never be online again.
#International

CEO of Twitter: Trump's ban is the right decision, but it sets a troubling precedent.
#International

🔵File upload vulnerability exists in CatfishCMS:

https://dailycve.com/file-upload-vulnerability-exists-catfishcms

🔵Mblog open source Java blog system has logic flaws:

https://dailycve.com/mblog-open-source-java-blog-system-has-logic-flaws