Aggregator

We’ll invite 1 million people from our waitlist over the coming weeks. Users can create with DALL·E using free credits that refill every month, and buy additional credits in 115-generation increments for $15.

我认为网络安全工具的未来：资产篇

赵武的自留地

4 years 2 months ago

昨天的开篇一发，看到大家的讨论，我第一反应是“完了调子起高了”。与其说我在告诉大家我们做了什么，不如说我在告

CVE-2022-33891 Apache Spark shell 命令注入漏洞

且听安全

4 years 2 months ago

Apache Spark 支持启动 ACL 来为 Web UI 访问提供身份验证，当 ACL 启动时可以通过构造特殊请求用户名导致 RCE 。

Blitz.js RCE Through Prototype Pollution

X-Force Exchange - Collection Feed

4 years 2 months ago

Summary A prototype pollution vulnerability in Blitz.js can allow attacker to remotely execute code on Node.js servers, according to a report from researchers at Sonar. Threat Type Vulnerability Overview A prototype pollution vulnerability (CVE-2022-23631) in Blitz.js could allow for remote code execution in an unauthenticated state. Should the Blitz.js-based application implement at least one RPC call makes the application vulnerable. Prototype pollution occurs when an attack can gain control over a proto

CVE-2022-33891 Apache Spark shell 命令注入漏洞

且听安全

4 years 2 months ago

Apache Spark 支持启动 ACL 来为 Web UI 访问提供身份验证，当 ACL 启动时可以通过构造特殊请求用户名导致 RCE 。

[转]python执行系统命令，怎么就卡死了？ - sevck

博客园_Sevck's Blog

4 years 2 months ago

最近很忙，术后恢复也很久没有去更新博客了。来自陌陌安全团队的文章，但是python 执行系统命令popen方法设置了stdout或者stderr，创建子进程把pipe size填满之前没有具体了解，终于知道原因了，也顺手记录一下。 title： python执行系统命令，怎么就卡死了？发生背景本

sevck

我认为网络安全工具的未来：开篇

赵武的自留地

4 years 2 months ago

Reducing bias and improving safety in DALL·E 2

OpenAI News

4 years 2 months ago

Today, we are implementing a new technique so that DALL·E generates images of people that more accurately reflect the diversity of the world’s population.