Aggregator

安卓逆向入门全面解析入口点定位,资源文件,四大组件,native,java层逆向(带实战例题)

JAVA安全之Java Agent打内存马

【免杀技术】WinApi规避 - 字符串HASH与动态调用 （完美的IAT隐藏技术）

浅谈密码相关原理及代码实现

AWS云之EFS 挂载安全

初探webshell免杀的艺术

JAVA代码审计-jfinal

【免杀技术】致盲组件 - AMSI内存修复 （修改一个字节就能绕过AMSI？）

记一次渗透测试实战之Sea

柏林工业大学于 2009 年使用印度火箭发射了一颗立方体卫星 Beesat-1，其轨道高度超过 700 公里，它主要用于演示为微型卫星开发的新技术。2011 年 Beesat-1 开始传输无效的遥测数据，操作人员随后切换到了冗余计算机。2013 年第二台计算机也发生了故障，柏林工业大学因此停止了卫星运作，只是每隔几年检查下卫星是否响应命令。由于其高轨道，Beesat-1 没有像 Beesat 系列立方体卫星一样重返大气层燃烧。学生黑客 PistonMiner 对这颗在太空中运行了 15 年的卫星产生了兴趣。他研究了卫星的错误信息、二进制文件和源代码，发现 Beesat-1 的问题不是因为太空辐射造成的硬件损坏，而是软件问题。今年 9 月他更新了卫星软件，恢复到了出厂状态，激活了卫星搭载的相机，复活了这颗死亡卫星。他在上周举行的混沌计算机俱乐部 38C3 会议上讲述了这一经历。

A vulnerability was found in BulletProof Security Plugin up to 5.1 on WordPress. It has been classified as problematic. This affects an unknown part of the file ~/db_backup_log.txt of the component Database Backup Handler. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2021-39327. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical was found in Parallels Plesk Panel 9.0. This vulnerability affects unknown code of the component Default Configuration. The manipulation leads to improper access controls. This vulnerability was named CVE-2013-4878. The attack can be initiated remotely. Furthermore, there is an exploit available.

2024年中国网络安全大事件网络投票正式开启，2024年国内网络安全领域究竟发生了哪些大事？扫描下方二维码，选择您认为最重要的十件大事吧！投票规则2024年12月31日至2025年1月12日活动期间可

新年前夕，国家主席习近平通过中央广播电视总台和互联网，发表二〇二五年新年贺词。新华社记者 鞠鹏 摄新年前夕，国家主席习近平通过中央广播电视总台和互联网，发表了二〇二五年新年贺词。全文如下：大家好！时间

31 Dec 2024 RSA key generation is both

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority alert on a critical vulnerability in Palo Alto Networks PAN-OS. Tracked as CVE-2024-3393, this flaw has been observed in active exploitation, putting systems at risk of remote disruption. CVE-2024-3393: Malformed DNS Packet Vulnerability This vulnerability stems from improper parsing and logging of malformed DNS […]

The post CISA Warns of Palo Alto Networks PAN-OS Vulnerability Exploited in Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability was found in phpMyAdmin up to 4.0.0. It has been classified as critical. This affects the function preg_replace of the file libraries/mult_submits.inc.php of the component Replace table prefix. The manipulation leads to improper privilege management. This vulnerability is uniquely identified as CVE-2013-3238. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.