Aggregator

用友NCCloudGatewayServlet 反射调用命令执行漏洞

从初学者的角度来进行代码审计

随着Rust语言在系统编程和安全关键应用中的广泛采用，针对Rust项目的安全测试需求日益增长。传统的AFL、libFuzzer和honggfuzz主要支持C/C++语言开发的项目，无法直接应用于Rust生态。基于传统模糊测试思想，Rust社区逐步构建了专用的模糊测试工具链。 本文系统介绍三种主流Rust模糊测试工具的完整使用方法：cargo-fuzz作为官方推荐的libFuzzer封装工具，提供

这篇文章开始给师傅们演示了下资产收集的过程，从对一个目标站点的信息收集再到对该资产站点的渗透测试，给师傅们分享了几个RCE漏洞的过程，还有之前一个前台SQL注入的案例，包括后面利用JS接口文档，找到对应的阿里云AK/SK泄露，再利用CF进行root权限接管，还有就是JWT爆破相关导致未授权的漏洞，最后面给师傅们分享下隐私合约的漏洞。

本研究围绕智能问答系统与代码开发助手的安全威胁展开，深入分析攻击者在真实环境中采用的各类攻击手法。通过解析间接提示词注入、存储型XSS攻击、命令注入与恶意脚本执行等核心攻击模式，系统性揭示攻击者如何通过认知欺骗、社会工程学伪装、编码绕过等技术手段，绕过AI安全护栏的限制，实现对智能系统的攻击和利用。

Cloudflare outage causes slow sites, login trouble and dashboard errors as users report problems even after the company says service is restored.

Как машина увидела то, что синоптики пропускали десятилетиями?

Microsoft announced today that it will integrate Sysmon natively into Windows 11 and Windows Server 2025 next year, making it unnecessary to deploy the standalone Sysinternals tools. [...]

Free the logs! Behind the scenes at InfluxData, which turned to its own in-house security monitoring platform, DiSCO, to protect its supply chain after its third-party tool was breached.

Microsoft says that Teams users will be able to report false-positive threat alerts triggered by messages incorrectly flagged as malicious. [...]

A vulnerability has been found in Linux Kernel up to 6.15.2 and classified as critical. The impacted element is the function mt7996_set_monitor of the component wifi. Performing manipulation results in null pointer dereference. This vulnerability is reported as CVE-2025-38316. The attacker must have access to the local network to execute the attack. No exploit exists. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 6.6.94/6.12.34/6.15.3/6.16-rc2 and classified as problematic. This vulnerability affects the function close_all_cached_dirs of the component smb. Such manipulation leads to allocation of resources. This vulnerability is documented as CVE-2025-38321. The attack requires being on the local network. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability marked as critical has been reported in Linux Kernel up to 6.15.3/6.16-rc2. The impacted element is an unknown function of the file /sys/kernel/tracing/options/funcgraph-args of the component fgraph. This manipulation causes buffer overflow. The identification of this vulnerability is CVE-2025-38327. The attack needs to be done within the local network. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.15.3. Affected by this issue is the function cs_dsp_mock_wmfw_add_info. The manipulation results in allocation of resources. This vulnerability is cataloged as CVE-2025-38329. The attack must originate from the local network. There is no exploit available. You should upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.15.3 and classified as critical. This affects the function cs_dsp_ctl_cache_init_multiple_offsets of the component firmware. This manipulation causes allocation of resources. This vulnerability is registered as CVE-2025-38330. The attack requires access to the local network. No exploit is available. The affected component should be upgraded.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.12.33/6.15.2. Affected by this vulnerability is an unknown functionality of the component wifi. Executing manipulation can lead to buffer overflow. This vulnerability appears as CVE-2025-38317. The attacker needs to be present on the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.12.33/6.15.2. It has been declared as problematic. Affected is the function platform_set_drvdata of the component perf. The manipulation results in privilege escalation. This vulnerability is known as CVE-2025-38318. Access to the local network is required for this attack. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.12.34/6.15.3/6.16-rc2/e59796fc80603bcd8569d4d2e10b213c1918edb4. It has been classified as problematic. This issue affects the function free_transport of the component ksmbd. Performing manipulation results in privilege escalation. This vulnerability is reported as CVE-2025-38325. The attacker must have access to the local network to execute the attack. No exploit exists. Upgrading the affected component is recommended.

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.12.34/6.15.3. This issue affects the function get_new_segment of the file fs/f2fs/segment.c of the component f2fs. Such manipulation leads to allocation of resources. This vulnerability is listed as CVE-2025-38333. The attack must be carried out from within the local network. There is no available exploit. You should upgrade the affected component.