Aggregator

王化回应小米汽车销量内容：无视周期的主观臆断；特朗普：希望苹果停止将 iPhone 产业转移到印度

APT组织Lazarus 在Rootkit（获取内核权限）攻击中使用了微软的0day漏洞;APT组织Kimsuky利用软件公司产品安装程序进行伪装展开攻击;NoName057(16)组织DDoSia项目持续更新;

01.NET内网安全攻防报刊小报童电子报刊【.NET内网安全攻防】也正式上线了，引入小报童也是为了弥补知识星球

某红队免杀钓鱼样本分析

2025年5月13日，东北大学“谛听”团队参加了国家电网有限公司总部科技项目“智能网联场景高等级威胁协同分析与灵活处置响应技术研究”项目自验收会。

Currently trending CVE - Hype Score: 13 - When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated attacker with administrator role privileges to execute arbitrary system commands. A successful exploit ...

Currently trending CVE - Hype Score: 1 - Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. By using ../ sequences in parameters, attackers could access sensitive files outside the intended directory, potentially leading to configuration leakage or ...

Currently trending CVE - Hype Score: 1 - The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" ...

Tarian Protect your applications running on Kubernetes from malicious attacks by pre-registering your trusted processes and trusted file signatures. Tarian will detect unknown processes and changes to the registered files, then it will send...

The post Tarian: Protect your applications running on Kubernetes from malicious attacks appeared first on Penetration Testing Tools.

Pinkerton Pinkerton is a Python tool created to crawl JavaScript files and search for secrets. Features Works with ProxyChains Fast scan Low RAM and CPU usage Open-Source Add more secrets regex pattern Improve the...

The post Pinkerton: JavaScript file crawler and secret finder appeared first on Penetration Testing Tools.

2025年5月10日，北京——作为中国CTF竞赛领域标杆性团队的蓝莲花战队（Blue-Lotus）在京举办成立十五周年主题论坛。

A vulnerability was found in Oracle SD-WAN Edge 7.3/8.0/8.1/8.2 and classified as problematic. Affected by this issue is some unknown functionality of the component OS. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2019-1010238. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in GNOME pango 1.42. It has been rated as critical. Affected by this issue is the function pango_log2vis_get_embedding_levels. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2019-1010238. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in MIT Kerberos 5 up to 1.18.3/1.19.1. Affected is the function ec_verify of the file kdc/kdc_preauth_ec.c of the component Key Distribution Center Handler. The manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2021-36222. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Oracle MySQL Server up to 8.0.26. Affected is an unknown function of the component Kerberos. The manipulation leads to denial of service. This vulnerability is traded as CVE-2021-36222. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Oracle Blockchain Platform. Affected by this issue is some unknown functionality of the component BCS Console. The manipulation leads to off-by-one. This vulnerability is handled as CVE-2021-23017. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in Oracle Blockchain Platform and classified as very critical. This issue affects some unknown processing of the component Backend. The manipulation leads to off-by-one. The identification of this vulnerability is CVE-2021-23017. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.