Aggregator

水一下，嫖了西湖论剑的一个展位，讲解什么的，Mr6是主力，我打打杂。本来想做一批贴纸的，月亮师傅加班加点都设计出来了，可惜时间太紧了，没印，所以提前发出来让大伙瞅瞅。以后有机会再着手印一批周边。

该文被密码保护。

Summary Cisco has published five Security Advisories, all of which apply to Cisco's SD-WAN vManage software. The advisories are rated as Medium. Threat Type Vulnerability Overview Cisco has published five Security Advisories, all of which apply to Cisco's SD-WAN vManage software. The advisories are rated as Medium. For all advisories listed below, it is noted that Cisco's Product Security Incident Response Team (PSIRT) is "not aware of any public announcements or malicious use of the vulnerabilities" that a

Summary The ICS-CERT has published seven advisories that affect Hitachi ABB Power Grids Ellipse APM, Rockwell Automation Stratix Switches, Delta Industrial Automation COMMGR, Delta Electronics CNCSoft ScreenEditor and CNCSoft-B, Eaton Intelligent Power Manager, and Siemens Mendix. Threat Type Vulnerability Overview The ICS-CERT has published seven advisories that affect Hitachi ABB Power Grids Ellipse APM, Rockwell Automation Stratix Switches, Delta Industrial Automation COMMGR, Delta Electronics CNCSoft Sc

0x00 前言

CVE-2020-0796(Windows SMBv3 Client/Server Remote

永不言弃，不忘初心！

助力公益！VIPKID SRC邀您以安全之名，为草原孩子的梦想撑腰！

加密为何代替了锁屏？历史上最大的赎金是多少？AIDS艾滋病与这一切有什么关系？

How cybercriminals use credential stuffing attack tools OpenBullet and MailRanger to bypass CAPTCHA, compromise mailboxes, and reset passwords.

Moving everything closer to the edge is the key to delivering better, faster experiences to people through billions of devices around the world.

There are 4.66 billion (yes, with a B) internet users. Rough math will tell us that's three in every five people around the world -- talk about lessening the six degrees. I see head nods and shoulder shrugs. 4.66 billion people?

转载记录

Summary Trend Micro spotted an enhanced SysUpdate Malware package that now uses five files in its infection routine instead of the usual three. While conducting an incident response investigation involving a Philippine-based gambling company, Trend Micro that the Iron Tiger threat actor had been targeting he same company for 18 months and it was in December 2020 that they discovered the SysUpdate malware sample. Threat Type Malware, APT, Backdoor Overview Continued targeting of gambling companies and an inc

ProxyLogon 利用链复现~~~~~

Documenting my journey from ground 0 to (hopefully) more modern browser exploitation.

Summary A software company specializing in auditing tools suffered an attack over the course of the the past four months and disclosed this month. Several news outlets have reported on the attack and the vulnerability used to exploit a zero-day vulnerability. Threat Type Vulnerability, Breach Overview An investigation by Codecov led to the discovery of a supply-chain attack that has been occurring since January 2021. The maker of auditing tools stated a threat actor had modified Bash Uploader script and exp

【一】有日媒报道称，与中国军方相关的一个黑客组织对日本发动了近200次网络袭击。对此，外交部发言人汪文斌20

吕某做过两个月快递员，知道如何在快递公司系统内查询个人信息，现在有了这样一个销售渠道，吕某就动员了几个同样无所事事的年轻人，以刷单或者跟踪邮件动态的名义，以每天租金500元的高价，先后租来五个快递公司员工的登录账号，从快递公司系统内窃取公民个人信息，吕某把窃取来的公民信息打包卖给他的上线，再由上线直接卖给境外诈骗团伙。

前言 今天在landgrey师傅的博客上看到一篇将Spring Boot FatJar任意写目录漏洞如何来GetShell的方法，因为在Spring Boot中处理逻辑的控制层Controller是通过注解等方式来添加进Spring容器中，已经摒弃了JSP的方式。这样的方式导致JSP就算上传在网站目