Aggregator

本文复现了长城杯 2026 决赛 Shop 题目的解题过程，重点分析了 GLIBC 2.43 版本下堆结构体的逆向还原方法。文章详细阐述了通过伪造 Unsortedbin 泄露基址、利用 Tcache Perthread Struct 偏移缺陷劫持堆块指针以及栈迁移执行 ORW 的技术细节。该案例展

【漏洞复现】cPanel&WHM认证绕过漏洞（CVE-2026-41940）分析

先知技术社区

3 days 4 hours ago

本文详细分析了 cPanel & WHM 认证绕过漏洞（CVE-2026-41940）的原理与复现过程，该漏洞源于系统会话机制未严格过滤换行符（CRLF），未授权攻击者可利用此缺陷，在预认证阶段将伪造的 root 权限标识注入至底层 Session 文件中。随后通过触发缓存提升机制使恶意数据生效，从而直接绕过登录校验，获取WHM 管理员权限。

Path traversal flaw in AI dev platform Langflow exploited in attacks

Bleeping Computer.

3 days 4 hours ago

Attackers are actively exploiting CVE-2026-5027, a high-severity path traversal vulnerability in the AI development platform Langflow, to write arbitrary files on exposed servers. [...]

Bill Toulas

CISA Rewrites Federal Patching Requirements for AI Threat Era

darkreading

3 days 4 hours ago

The new directive gives federal agencies three days to fix the most dangerous flaws, while less severe issues can be deferred.

Jai Vijayan

The Gentleman

Dark Feed IO

3 days 4 hours ago

You must login to view this content

cohenido

The Gentleman

Dark Feed IO

3 days 4 hours ago

You must login to view this content

cohenido

The Gentleman

Dark Feed IO

3 days 4 hours ago

You must login to view this content

cohenido

ISCC2026 web WP

先知技术社区

3 days 4 hours ago

iscc2026web方向wp

FBI Seizes China-Linked Fake Consulting Sites Targeting US Clearance Holders

Hack Read

3 days 4 hours ago

The Justice Department and FBI seized 13 fake consulting websites that officials say targeted US clearance holders with paid research work designed to obtain sensitive government information.

Waqas

The ‘Miasma’ worm source code briefly leaked on GitHub

Bleeping Computer.

3 days 5 hours ago

The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks, was briefly open-sourced on GitHub. [...]

Bill Toulas