Aggregator

某红队免杀钓鱼样本分析

2025年5月13日，东北大学“谛听”团队参加了国家电网有限公司总部科技项目“智能网联场景高等级威胁协同分析与灵活处置响应技术研究”项目自验收会。

Currently trending CVE - Hype Score: 13 - When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated attacker with administrator role privileges to execute arbitrary system commands. A successful exploit ...

Currently trending CVE - Hype Score: 1 - Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. By using ../ sequences in parameters, attackers could access sensitive files outside the intended directory, potentially leading to configuration leakage or ...

Currently trending CVE - Hype Score: 1 - The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" ...

Tarian Protect your applications running on Kubernetes from malicious attacks by pre-registering your trusted processes and trusted file signatures. Tarian will detect unknown processes and changes to the registered files, then it will send...

The post Tarian: Protect your applications running on Kubernetes from malicious attacks appeared first on Penetration Testing Tools.

Pinkerton Pinkerton is a Python tool created to crawl JavaScript files and search for secrets. Features Works with ProxyChains Fast scan Low RAM and CPU usage Open-Source Add more secrets regex pattern Improve the...

The post Pinkerton: JavaScript file crawler and secret finder appeared first on Penetration Testing Tools.

2025年5月10日，北京——作为中国CTF竞赛领域标杆性团队的蓝莲花战队（Blue-Lotus）在京举办成立十五周年主题论坛。

A vulnerability was found in Oracle SD-WAN Edge 7.3/8.0/8.1/8.2 and classified as problematic. Affected by this issue is some unknown functionality of the component OS. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2019-1010238. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in GNOME pango 1.42. It has been rated as critical. Affected by this issue is the function pango_log2vis_get_embedding_levels. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2019-1010238. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in MIT Kerberos 5 up to 1.18.3/1.19.1. Affected is the function ec_verify of the file kdc/kdc_preauth_ec.c of the component Key Distribution Center Handler. The manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2021-36222. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Oracle MySQL Server up to 8.0.26. Affected is an unknown function of the component Kerberos. The manipulation leads to denial of service. This vulnerability is traded as CVE-2021-36222. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Oracle Blockchain Platform. Affected by this issue is some unknown functionality of the component BCS Console. The manipulation leads to off-by-one. This vulnerability is handled as CVE-2021-23017. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in Oracle Blockchain Platform and classified as very critical. This issue affects some unknown processing of the component Backend. The manipulation leads to off-by-one. The identification of this vulnerability is CVE-2021-23017. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Enterprise Session Border Controller 8.4/9.0. It has been rated as critical. This issue affects some unknown processing of the component Routing. The manipulation leads to off-by-one. The identification of this vulnerability is CVE-2021-23017. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Enterprise Communications Broker 3.3. It has been declared as critical. This vulnerability affects unknown code of the component Routing. The manipulation leads to off-by-one. This vulnerability was named CVE-2021-23017. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Enterprise Telephony Fraud Monitor 3.4/4.2/4.3/4.4. It has been declared as very critical. Affected by this vulnerability is an unknown functionality of the component nginx. The manipulation leads to off-by-one. This vulnerability is known as CVE-2021-23017. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Two critical Ivanti zero-days (CVE-2025-4427 and CVE-2025-4428) are now being actively exploited after a surge in scanning activity last month. When chained together, these vulnerabilities enable unauthenticated remote code execution on Ivanti Endpoint Manager Mobile systems.

为遥感测绘领域提供高效、安全、可靠的数据存储服务。