漏洞 Vulnerability PHP SplDoublyLinkedList UAF沙箱转义 https://ssd-disclosure.com/ssd-advisory-php-spldoublylinkedlist-uaf-sandbox-escape/ Zoho ManageEngine Applications Manager SQL注入 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15394 CVE-2020-25130 Observium SQL注入漏洞 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25130 思科修复了IOS和IOS XE软件中的34个高严重性漏洞 https://securityaffairs.co/wordpress/108746/security/cisco-ios-ios-xe-flaws.html 面部识别设备中存在可利用的漏洞 https://www.trendmicro.com/en_us/research/20/i/exploitable-flaws-found-in-facial-recognition-devices.html 安全资讯 Security Information 马里兰男子因黑客入侵前雇主而入狱12个月 https://www.securityweek.com/maryland-man-gets-12-months-prison-hacking-former-employer 安全报告 Security Report 行动中的幽灵：幽灵僵尸网络 https://blog.netlab.360.com/ghost-in-action-the-specter-botnet/ 专项行动的意外收获—— 2020 年 9 月墨子（Mozi）僵尸网络分析报告 https://paper.seebug.org/1347/ 具有默认证书的Fortinet VPN使200,000家企业遭受黑客攻击 https://securityaffairs.co/wordpress/108737/hacking/fortigate-vpn-attacks.html 安全研究 Security Research Springboot 内存shell https://mp.weixin.qq.com/s/sopTMSFfSAv87KSGsdLrTA