漏洞 Vulnerability
CVE-2020-0601 Windows CryptoAPI验证绕过漏洞通告
https://mp.weixin.qq.com/s/k3fnMO_FjdGxUs0VRn_TVw
CVE-2020-2546 Weblogic T3协议风险通告
https://mp.weixin.qq.com/s/7h6FG8XBznO73ySJPcAo3g
CVE-2020-2551 Weblogic WLS组件IIOP协议风险通告
https://mp.weixin.qq.com/s/9LqYDYErUiqNFgIgfUmtbA
Intel修复多个高危漏洞通告
https://mp.weixin.qq.com/s/NP01PyI8Nm-CYOgbpi9qbg
Jenkins Plugins 多个安全漏洞
http://weixin.shuziguanxing.com/selectDetailsTempateId/333
两个流行 WordPress 插件认证绕过漏洞分析
https://www.webarxsecurity.com/vulnerability-infinitewp-client-wp-time-capsule/
希捷 NAS 产品远程代码执行漏洞分析
https://pentest.blog/advisory-seagate-central-storage-remote-code-execution/
安全工具 Security Tools
dSploit:一款移动安全渗透审计工具
https://www.darknet.org.uk/2020/01/dsploit-apk-download-hacking-security-toolkit-for-android/?utm_source=feedly&utm_medium=webfeeds
恶意软件 Malware
AppleJeus行动分析
https://www.freebuf.com/articles/network/225140.html
安全事件 Security Incident
Emotet:针对600名联合国员工的网络钓鱼攻击
https://threatpost.com/un-weathers-emotet-trickbot-malware/151894/
安全资讯 Security Information
Windows 7时代正式终结!停服过渡期安全问题已然逼近
https://www.anquanke.com/post/id/197340
安全研究 Security Research
CSS-T | Mysql Client 任意文件读取攻击链拓展
https://paper.seebug.org/1112/
远程iPhone Exploitation Part 2: 远程绕过ASLR
https://www.anquanke.com/post/id/197079
Android漏洞挖掘之Fuzz初探
https://www.anquanke.com/post/id/197083
浅谈位置无关代码
https://www.anquanke.com/post/id/197214
ThinkPHP6.0任意文件创建分析
https://www.anquanke.com/post/id/197261
从0到1掌握某Json-TemplatesImpl链与ysoserial-jdk7u21的前因后果
https://xz.aliyun.com/t/7096
阿里白帽大会-红队的踩”坑”之路总结
https://xz.aliyun.com/t/7103
版权声明
本站原创文章转载请注明文章出处及链接,谢谢合作!
评论