Aggregator

前几日在学校水群里看到有群友给随身wifi刷了ubuntu，感觉很有意思，于是便去闲鱼上看看什么情况，发现猿莱氏骁龙410的SoC做的随身wifi，于是随便找了个店家直接下单购入，刷机玩玩。到货之后进行一个雷霆大拆解，如图：很显然啊，这个板子的型号是FY_UZ801_V2.1，网上找了找，似乎可以刷 OpenStick ，于是直接启动，刷机过程在https://www.cnblogs.com/la

Go语言C2框架打造实录

A vulnerability was found in DataEase up to 2.10.22. It has been declared as problematic. Affected is the function SqlparserUtils.transFilter of the component DataEase dashboard. Executing a manipulation of the argument deptId can lead to injection. This vulnerability appears as CVE-2026-45320. The attack may be performed from remote. There is no available exploit.

本文讨论了Thymeleaf在Ruoyi特定版本下的攻击方式与绕过方法，给出了直接注入内存马的方法

PEB-动态解析API

A vulnerability was found in DataEase up to 2.10.22. It has been classified as critical. This impacts the function connect of the file rsjdbc.ini of the component Redshift Datasource Connection Handler. Performing a manipulation results in deserialization. This vulnerability is reported as CVE-2026-45534. The attack is possible to be carried out remotely. No exploit exists.

732 字节 Python 脚本利用 Linux 内核页缓存污染漏洞，不碰磁盘直接拿 root。

A vulnerability was found in DataEase up to 2.10.22 and classified as critical. This affects the function checkStatus of the file CalciteProvider of the component Datasource Connection Status Check. Such manipulation leads to sql injection. This vulnerability is documented as CVE-2026-45417. The attack can be executed remotely. There is not any exploit available.

The Gold Eagle program will allowe industry, critical infrastructure operators and the government to use artificial intelligence to rapidly detect, prioritize and patch cybersecurity vulnerabilities, officials said.

SSRF 这个"老漏洞"非但没有消失，反而在大模型时代迎来了它的"第二春"。区别在于：过去是攻击者直接构造请求参数，现在是攻击者用自然语言"PUA"AI 替自己发请求。攻击的发起者，从一行 HTTP 参数，变成了一段藏在网页里的提示词。 文章主要描述：传统 SSRF 的底层机理、为什么大模型把它的攻击面放大了一个数量级、真实的利用链长什么样、如何亲手搭一套可复现的漏洞环境、如何防御等进行阐述

Nerd Sniping 从 XKCD 漫画的概念演变为 AI Agent 安全攻击向量——攻击者通过构造"看似可解、实则无底"的问题，诱导 Agent 陷入递归思考和无限推理，消耗 token、泄露系统指令、触发工具滥用。防御的核心是让 Agent 学会"思考更少"——给它的思考能力装上刹车。

深入分析dll劫持技术：利用系统 DLL 搜索顺序缺陷，通过路径优先级实现恶意代码持久化加载。包括共有dll和私有dll的劫持

通过接口未授权获取管理员权限 利用管理员权限登陆后台 通过接口进行任意文件读取和sql注入

A vulnerability has been found in taosdata TDengine up to 3.4.1.14 and classified as problematic. The impacted element is the function mndProcessKillSsMigrateReq of the component Shared-Storage Migration. This manipulation causes improper authentication. This vulnerability is registered as CVE-2026-62348. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability, which was classified as very critical, was found in taosdata TDengine up to 3.4.1.14. The affected element is an unknown function of the component UDF Management. The manipulation results in permission issues. This vulnerability is cataloged as CVE-2026-62355. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in taosdata TDengine 3.4.1.5/3.4.1.6/3.4.1.14. Impacted is the function transDecompressMsg of the file source/libs/transport/src/transComm.c of the component Transport. The manipulation of the argument comp leads to out-of-bounds read. This vulnerability is listed as CVE-2026-62351. The attack may be initiated remotely. There is no available exploit.

A vulnerability classified as critical was found in cap-js cap-js and cds-dbs 2.2.2/2.2.2/2.10.1. This issue affects some unknown processing of the component Database Service. Executing a manipulation can lead to sql injection. This vulnerability is tracked as CVE-2026-46421. The attack can be launched remotely. No exploit exists.

A vulnerability classified as critical has been found in taosdata TDengine up to 3.4.1.14. This vulnerability affects the function eval. Performing a manipulation results in unrestricted upload. This vulnerability is identified as CVE-2026-62350. The attack can be initiated remotely. There is not any exploit available.

主要包含一些 Linux权限的方法

A vulnerability described as critical has been identified in taosdata TDengine up to 3.4.1.13. This affects the function tGetToken of the file source/libs/parser/src/parTokenizer.c of the component SQL Parser. Such manipulation leads to out-of-bounds read. This vulnerability is referenced as CVE-2026-62353. It is possible to launch the attack remotely. No exploit is available.