ANNOT occur when using python.exe from a standard (non-embedded) Python installation on Windows.
https://nvd.nist.gov/vuln/detail/CVE-2020-15523
6.9 MEDIUM
xineramaproto 1.2.1
xcb-render 1.14
libpcre2-32 10.34
libbsd-ctor 0.10.0
libbsd 0.10.0
nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).
https://nvd.nist.gov/vuln/detail/CVE-2019-20367
6.4 MEDIUM
xft 2.3.3

Tested in Ubuntu Linux, Fedora Linux and FreeBSD.

The purpose of this tool is to use in local pentest, take attention if you have a proper authorization before to use that. I do not have responsibility for your actions. You can use a hammer to construct a house or destroy it, choose the law path, don’t be a bad guy, remember. Download

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
TryHackMe: Kenobi

https://cdn-images-1.medium.com/max/600/1*_RwlH99OQZGZtCpRQsd0CA.jpeg
Task 1: Deploy the vulnerable machine

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
IDOR (Insecure Direct Object Reference) leads to listing all valid Users and edit their Profiles

https://cdn-images-1.medium.com/max/1335/1*txwAxko-DnEO37W3t8Z4FQ.png
Hello friends :) 
I am happy to write a blog again after finding an Insecure Direct Object Reference Vulnerability in Drexel University…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Resources & Learning Paths collections (Part-2)

https://cdn-images-1.medium.com/max/1280/0*W3Z5B9Xsg9QGaJuJ
This is Part 2 where we talk about Github Repositories which helps you to know about the Cybersecurity and other stuffs.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Build a SOC LAB
https://www.reddit.com/r/Pentesting/comments/u1x0bs/build_a_soc_lab/

Hey guys! I have a project where i need to build a LAB for a SOC (security operation center) with infra as code (vagrant) and then launch some attacks on it and investigate their behavior's with Splunk. So i would like from peoples that already worked or have expérience in this, if you Can recommand some good ressources that will help me see some examples of SOC architectures that i Can deploy and some interesting attacks to investigate. Cheers submitted by /u/Adel_Maestro (https://www.reddit.com/user/Adel_Maestro)
[link] (https://www.reddit.com/r/Pentesting/comments/u1x0bs/build_a_soc_lab/) [comments] (https://www.reddit.com/r/Pentesting/comments/u1x0bs/build_a_soc_lab/)

___________________________
@hacking_Attack
@Hacking_Video

XSS - The LocalStorage Robbery
https://shahjerry33.medium.com/xss-the-localstorage-robbery-d5fbf353c6b0?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Summary :Continue reading on Medium » (https://shahjerry33.medium.com/xss-the-localstorage-robbery-d5fbf353c6b0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Immunefi Matching Bug Bounty Program: Renewal and Expansion
https://medium.com/nexus-mutual/immunefi-matching-bug-bounty-program-renewal-and-expansion-61f820a4275e?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Nexus Mutants recently approved the renewal and expansion of the Immunefi matching bug bounty program by a unanimous vote. Funding for the…Continue reading on Nexus Mutual » (https://medium.com/nexus-mutual/immunefi-matching-bug-bounty-program-renewal-and-expansion-61f820a4275e?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Nexus Mutual Community Renews Bounty Matching Program With $600k War Chest
https://medium.com/immunefi/nexus-mutual-community-renews-bounty-matching-program-with-600k-war-chest-1f4f4a5751d2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

The Nexus Mutual community has just voted to continue its bug bounty matching program with Immunefi and increase the size of the war chest…Continue reading on Immunefi » (https://medium.com/immunefi/nexus-mutual-community-renews-bounty-matching-program-with-600k-war-chest-1f4f4a5751d2?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

AlbusSec:- Penetration-List 05 Cross-Site-Scripting (XSS) — Part 3
https://as745591.medium.com/albussec-penetration-list-05-cross-site-scripting-xss-part-3-ca2b8e79b918?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hello Medium folk, I hope you enjoyed our previous articles, so now on this article You’ll learn about Types of Cross-Site-Scripting…Continue reading on Medium » (https://as745591.medium.com/albussec-penetration-list-05-cross-site-scripting-xss-part-3-ca2b8e79b918?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

CVE-2021–4034
https://medium.com/@reconshell.com/cve-2021-4034-bd72d4aecfa2?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

CVE-2021–4034 Local privilege escalationContinue reading on Medium » (https://medium.com/@reconshell.com/cve-2021-4034-bd72d4aecfa2?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Understanding the difference

Can anyone explain to me the difference between auxiliary modules and exploits ? They both seem to do the same for me. I can't understand the difference.

submitted by /u/JeppNeb
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video