Aggregator

How to become a ghost? Not literally ghost but like someone nobody knows about. Totally under the radar. To me I think pros are way heavier than cons about becoming ghost.

英伟达被立案调查；数据删除取代加密，新型勒索软件攻击或让企业面临更大风险 | 牛览

Researchers found that the broad accessibility of streams of Scottish Parliamentary proceedings make them highly susceptible to deepfake attacks

《API安全技术应用指南（2024版）》报告发布

A vulnerability, which was classified as critical, was found in e107 CMS 0.7.24. Affected is an unknown function of the file install_.php of the component Installation. The manipulation leads to os command injection. This vulnerability is traded as CVE-2011-1513. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

Attackers are exploiting a vulnerability (CVE-2024-50623) in file transfer software by Cleo – LexiCo, VLTransfer, and Harmony – to gain access to organizations’ systems, Huntress researchers warned on Monday. “We’ve discovered at least 10 businesses whose Cleo servers were compromised with a notable uptick in exploitation observed on December 8 around 07:00 UTC. After some initial analysis, however, we have found evidence of exploitation as early as December 3,” they shared, and noted that there … More →

The post Attackers actively exploiting flaw(s) in Cleo file transfer software (CVE-2024-50623) appeared first on Help Net Security.

GeoTag – 从地图选点，为照片添加地理位置[macOS]

自动化工具收集网络数据（数据抓取）标准制定需求汇报

Gen Z VCs CEO & Founder Speaks on Revolutionizing Venture Capital for the Next Generation

A vulnerability was found in Linux Kernel up to 4.16. It has been declared as problematic. Affected by this vulnerability is the function mmap. The manipulation as part of Command Line Argument leads to memory corruption. This vulnerability is known as CVE-2018-1120. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

黑白通吃：Glutton木马潜伏主流PHP框架，隐秘侵袭长达1年

A vulnerability classified as critical has been found in Neubivljiv DotA OpenStats up to 1.2.2. Affected is an unknown function of the file index.php. The manipulation of the argument id leads to sql injection. This vulnerability is traded as CVE-2011-5218. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

数据备份的重要性：欧洲云公司Hetzner无警告删除某客户的所有服务器和数据

November 2024 in Software Supply Chain Security

记一道CC6-TemplatesImpl链和Jackson原链打Spring内存马的利用

分析探究Java原生链反序列化绕过高版本fastjson打Spring马

2024国城杯初赛 re部分wp

如何HOST碰撞挖掘隐蔽资产

2024 国城杯取证 Just_F0r3n51Cs

2024 国城杯 WriteUp