JournoThinker Blog

Security researcher Ramazan (r0hack) discovered a Bind (time-based) SQL injection in https://city-mobil.ru website due to the unsafe usage of the GET parameter for which he was awarded $15000 So far, this is the largest awarded vulnerability disclosed in Mail.ru and the second biggest bounty awarded on the bug bounty platform Hackerone after just one bug bounty award of $20000 Time-based SQL Injection is an SQL Injection technique that relies on sending an SQL query to the database which forces the database to wait for a specified amount of time (in seconds) before responding. The response time will indicate to the attacker whether the result of the query is TRUE or FALSE which will allow the attacker to figure out if the payload used true or false Full details of the vulnerability have not been yet polished by the researcher and more information can be found at https://hackerone.com/reports/868436 Mail.Ru is a major Russian internet company whose sites reach approxima...

Slack’s snippet feature allows users to quickly and easily share pieces of code, configuration files, or log files within their workspace. Researcher Kevin McSheehan discovered the bug in the snippet feature and reported it in the Slack’s bug bounty program. "They need to click on the file, so let's trick Slack into making it look benign. CSV should work" he said. Slack will also show the user that a .CSV file is being downloaded when it is actually a .BAT executable. The issue, present in both the mobile and desktop versions of the app, allowed a malicious actor to disguise dangerous files as benign, due to a flaw in the create snippet feature. The researcher discovered that by including a long file name and certain ASCII characters in the snipped content, an attacker could trick Slack into showing that a .CSV file was being downloaded when it was actually a .BAT executable. Full details of the vulnerability can be found here - https://hack...

Peter Wagenaar, a real estate agent, and his wife have been cooking for the homeless people in Sea Point during the lockdown which has stirred up tension in the affluent suburb of Mouille Point. Peter had been using his car to distribute food to homeless people in Sea Point, which caused anger among some residents. In the early hours of 6th May, his car was set ablaze and nothing but charred metal was left after the fire. Picture by  @MarvinCharles17 Wagenaar has had confrontations with police officers since he started feeding the homeless. A video went viral in which a police officer threatened to arrest him for feeding the homeless despite Wagenaar having a permit. Wagenaar wakes up every day at 4am to start cooking. Breakfast is given to the homeless people from 7am to 9am on Beach Road and Fritz Sonnenberg Road. Wagenaar feeds breakfast and dinner to around 80 to 100 homeless people get which he buys from his own pocket. Alt...

UN Deputy Secretary-General Amina J. Mohammed provided his remarks, at the virtual ministerial round table conference on “Transformative approaches:  State support to promote women’s participation in peacebuilding”, in New York on 27th May, 2020 along with Government of Sweden and the International Peace Institute. He said that 2020 was set to be a milestone year for gender equality and the empowerment of women and to commemorate and reflect critically on progress made in the 20 years, however the world's attention has shifted to fighting the COVID-19 pandemic which has given shape to inequalities in all forms in which the pandemic is affecting individuals and communities — and hampering the capacity for effective recovery. With the topic of gender equality, the crisis is threatening the gain that have been made in recently. Women constitute more than 70 per cent of health workers globally and bear the weight of unpaid care work at home.  The increasing number of women’...

German Chancellor Angela Merkel warned that countries should not resort to renationalization and protectionism in response to the recession caused by the coronavirus crisis. She said that multilateralism faces a major challenge even after the pandemic ends. Merkel, has put forward a Franco-German plan for a €500 billion EU recovery fund. Merkel had an video conference earlier with the five heads of the International Labour Organization, the International Monetary Fund, the Organization for Economic Cooperation and Development, the World Bank and the World Trade Organization at which they exchanged ideas about the economic response to the crisis. “The answer to the pandemic can certainly not be to renationalize all international supply chains now; then everyone would pay a very high price,” Merkel said. “We are now in the phase of waiting for the proposal from the Commission,” Merkel said. The European Commission will present its proposal on May 27th. Twitte...

In an publication titled, ‘ Cleaning and disinfection of environmental surfaces in the context of COVID-19 ,’ and released on May 16, 2020, the WHO said this is because “disinfectant is inactivated by dirt and debris and it is not feasible to manually clean and remove all organic matter from such spaces.” The WHO also advised against spraying porous surfaces, such as sidewalks and unpaved walkways, would be even less effective. “Even in the absence of organic matter, chemical spraying is unlikely to adequately cover all surfaces for the duration of the required contact time needed to inactivate pathogens. “Furthermore, streets and sidewalks are not considered to be reservoirs of infection for COVID-19,” it said. The WHO also warned that spraying disinfectants, even outdoors, can be harmful for human health. “Spraying individuals with disinfectants (such as in a tunnel, cabinet, or chamber) is not recommended under any circumstances. “This could be physically and...