Aggregator

前言在进行.Net源码审计时，往往会遇到拿到源码DLL文件，然后需要逐一使用反编译工具进行手动审计的情况。这种手动审计方法不仅费时费力，而且效率低下。虽然可以使用findstr /msi /c命令简单

Snaffler Snaffler is a tool for pentesters to help find delicious candy needles (creds mostly, but it’s flexible) in a bunch of horrible boring haystacks (a massive Windows/AD environment). It might also be useful for other...

The post Snaffler: tool for pentesters to help find delicious candy needles appeared first on Penetration Testing Tools.

A vulnerability was found in Todd Miller sudo 1.8.14 and classified as critical. Affected by this issue is some unknown functionality of the file /etc/sudoers of the component sudoedit. The manipulation leads to improper access controls. This vulnerability is handled as CVE-2015-5602. It is possible to launch the attack on the local host. Furthermore, there is an exploit available.

杀熟是动态定价的一种表现形式

A simple, yet effective real-time Bitcoin (BTC) balance checker.

一丁回家看了看

小米智能家电工厂奠基开工，一期项目聚焦空调品类 传三星电子最快本周进行大规模人事调整，已通知部分高管离职 尊界 S800 开启预订：意向金 2 万元，预计售价 100-150 万元

Two men have been arrested for allegedly stealing data from and extorting dozens of companies that used the cloud data storage company Snowflake, but a third suspect -- a prolific hacker known as Kiberphant0m -- remains at large and continues to publicly extort victims. However, this person's identity may not remain a secret for long: A careful review of Kiberphant0m's daily chats across multiple cybercrime personas suggests they are a U.S. Army soldier who is or was recently stationed in South Korea.

Two men have been arrested for allegedly stealing data from and extorting dozens of companies that used the cloud data storage company Snowflake, but a third suspect -- a prolific hacker known as Kiberphant0m -- remains at large and continues to publicly extort victims. However, this person's identity may not remain a secret for long: A careful review of Kiberphant0m's daily chats across multiple cybercrime personas suggests they are a U.S. Army soldier who is or was recently stationed in South Korea.

A vulnerability was found in Mozilla Firefox up to 132. It has been rated as problematic. This issue affects the function loadManifestFromFile of the component Add-On Signature Handler. The manipulation leads to improper verification of cryptographic signature. The identification of this vulnerability is CVE-2024-11696. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Microsoft Windows Media Player 11.0.5721.5260 and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to numeric error. This vulnerability is handled as CVE-2009-1331. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in FreeWebshop 2.2.9. It has been declared as critical. This vulnerability affects unknown code. The manipulation of the argument lang_file leads to path traversal. This vulnerability was named CVE-2009-2338. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability has been found in Aqua CMS 1.1 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username leads to sql injection. This vulnerability is known as CVE-2009-1317. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in GuestCal Guest Cal 2.1. It has been classified as critical. This affects an unknown part. The manipulation of the argument lang leads to path traversal. This vulnerability is uniquely identified as CVE-2009-1319. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability has been found in Sergey Lyubka Mongoose 2.4 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to path traversal. This vulnerability was named CVE-2009-1354. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in Mini-stream Shadow Stream Recorder 3.0.1.7. It has been declared as very critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to memory corruption. This vulnerability is known as CVE-2009-1329. The attack can be launched remotely. Furthermore, there is an exploit available.

Palo Alto Networksは、PAN-OSの管理Webインタフェースにおける複数の脆弱性（CVE-2024-0012、CVE-2024-9474）を悪用する攻撃活動に関する情報を公開しました。同社は本脆弱性を修正したバージョンへのアップグレードを推奨しています。詳細は、開発者が提供する情報を参照してください。