Aggregator

内核攻防-(1)高权限继承

信息收集实战，进入某校内网

AES加密解密理论到源码-逆向强网拟态2024babyre和2024网鼎杯re2

移动端安全 windows笔记本操作iphone探索

Anti-virtualization（附CVE-2024-37081漏洞解析）

记某app使用autodecoder插件绕过加密数据包+重放防护

深度学习后门攻击演进趋势与先进技术分析

tcache bin中mp_结构体利用

2024强网杯WP（部分）

Pointer Overflow CTF - 2024 RE全WP

2024 强网杯 Crypto wp

2024 强网杯 谍影重重5.0 超详解

2024GCTF PWN全题超详解

蓝凌EKP V16 未授权SQL注入漏洞分析

2024 网鼎杯玄武组部分wp

A vulnerability classified as problematic has been found in bdthemes Prime Slider Plugin up to 3.15.18 on WordPress. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-8442. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in OpenWRT 18.06/19.07/21.02/22.03. It has been classified as problematic. Affected is an unknown function of the component TCP Handler. The manipulation leads to denial of service. This vulnerability is traded as CVE-2023-30312. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical was found in Zoho ManageEngine EndPoint Central up to 11.3.2416.21/11.3.2428.9. Affected by this vulnerability is an unknown functionality of the component Agent. The manipulation leads to improper privilege management. This vulnerability is known as CVE-2024-10203. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.6.58/6.11.5. This affects the function task_tick_mm_cid of the component sched. The manipulation leads to allocation of resources. This vulnerability is uniquely identified as CVE-2024-50140. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 5.15.169/6.1.114/6.6.58/6.11.5 and classified as problematic. This vulnerability affects unknown code of the component xfrm. The manipulation leads to state issue. This vulnerability was named CVE-2024-50142. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.