安全研究 Safety research
Electron被曝远程代码执行漏洞,Discord、Notion、Teams受影响https://www.51cto.com/article/716358.html 利用macOS端Zoom安装器漏洞 黑客可以接管你的Machttps://www.cnbeta.com/articles/tech/1304009.htm  Palo Alto 漏洞用于DDoS攻击,目前还没有修复https://www.theregister.com/2022/08/12/palo_alto_bug/ Google Android 安全漏洞 CVE-2022-20347https://redqueen.tj-un.com/IntelDetails.html?id=7957b8c76e2a4430b2ec6efbba5c2b3c Redis未授权漏洞蜜罐模拟与捕获分析https://www.freebuf.com/vuls/341309.html
发布时间: 2022 - 08 - 15
CISA警告Windows和UnRAR漏洞在野被利用https://www.freebuf.com/articles/341495.html TAC-040利用Confluence中漏洞安装Ljl Backdoorhttps://redqueen.tj-un.com/InfoDetails.html?id=86a12b2502f849a8a568dd0b8b5a2c8a UnRAR中路径遍历漏洞CVE-2022-30333已被积极利用https://redqueen.tj-un.com/InfoDetails.html?id=19f90afc615944cdb0ed11836b770fb4 Moodle其他漏洞CVE-2020-1754https://redqueen.tj-un.com/IntelDetails.html?id=e531bfa88a4544d0b16b702ec38cdf01 Artica Pandora FMS跨站脚本漏洞CVE-2021-46679https://redqueen.tj-un.com/IntelDetails.html?id=67fd9c30a52c4159bb698a83e1f03288
发布时间: 2022 - 08 - 11
推特承认,零日漏洞致540万用户数据被盗https://www.freebuf.com/news/341258.html DrayTek爆出RCE漏洞,影响旗下29个型号的路由器https://www.freebuf.com/news/341124.html CVE-2022-22980 Spring Data MongoDB SpEL表达式注入漏洞分析https://www.freebuf.com/vuls/338941.html 缓冲区溢出漏洞那些事:C -gets函数https://www.freebuf.com/news/340045.html Slack称已修复可泄露密码的漏洞并为部分用户重置密码https://redqueen.tj-un.com/InfoDetails.html?id=5e5b0d26dc23474587698b084e9736a1
发布时间: 2022 - 08 - 08
思科修复了VPN路由器中关键远程代码执行漏洞https://www.freebuf.com/news/341009.html VMware敦促管理员立即修补关键的身份验证绕过漏洞https://www.bleepingcomputer.com/news/security/vmware-urges-admins-to-patch-critical-auth-bypass-bug-immediately/ 谷歌在 8 月安全公告中修补了关键的 Android 蓝牙漏洞https://www.infosecurity-magazine.com/news/google-patches-critical-android/ Google Chromium资源管理错误漏洞CVE-2022-1477https://redqueen.tj-un.com/IntelDetails.html?id=a4d2b353951442eb8c0643c1196b60f5 WordPress plugin WP Video Lightbox 跨站脚本漏洞 CVE-2022-2189https://redqueen.tj-un.com/IntelDetails.html?id=f9e6a2945e3943158ebcc966c71781e3
发布时间: 2022 - 08 - 04
Android蓝牙协议栈漏洞剖析https://www.freebuf.com/vuls/339754.html 大华摄像头曝严重漏洞,黑客可无限制访问设备https://www.freebuf.com/news/340694.html CVE-2022-33980 Apache Commons Configuration远程命令执行https://www.freebuf.com/vuls/339633.html Cesanta MJS缓冲区错误漏洞CVE-2021-33438https://redqueen.tj-un.com/IntelDetails.html?id=270e1123af474e29a419669faae5be23 漏洞分析:HEVD-0x7.UninitializedHeapVariable[win7x86]https://www.freebuf.com/vuls/339725.html
发布时间: 2022 - 08 - 01
漏洞披露15分钟内,黑客即可完成漏洞扫描https://www.freebuf.com/news/340287.html 微软:IIS扩展正越来越多地用作Exchange后门https://www.freebuf.com/news/340245.html FileWave MDM漏洞可能允许威胁行为者入侵上千家企业https://www.freebuf.com/news/340147.html 黑客利用PrestaShop零日漏洞入侵网店https://www.freebuf.com/news/340135.html Nuki修复其智能锁产品中存在的11个安全漏洞https://redqueen.tj-un.com/InfoDetails.html?id=9698d3620622488585e410d78e592cae
发布时间: 2022 - 07 - 28
Chrome V8命令执行漏洞(CVE-2022-1310)分析https://www.freebuf.com/vuls/339684.html Atlassian修复了一个关键的Confluence漏洞https://www.freebuf.com/articles/339843.html SonicWal发布SQL注入漏洞CVE-2022-22280的安全公告https://redqueen.tj-un.com/InfoDetails.html?id=38b07ea7259448b4a2e7b7c2b6f9f735 WordPress和WordPress plugin代码注入漏洞 CVE-2022-2099https://redqueen.tj-un.com/IntelDetails.html?id=290e097e99ba4425a6cecab478a1a668 Pexip Infinity其他漏洞 CVE-2022-25357https://redqueen.tj-un.com/IntelDetails.html?id=ad7ace49ad1d43dc9d1d7b97a850294b
发布时间: 2022 - 07 - 25
知名GPS出现漏洞,可使黑客获得管理权限https://www.freebuf.com/articles/339641.html 针对WordPress插件漏洞的攻击数量激增https://www.freebuf.com/news/339522.html 新型恶意软件CloudMensis正对Mac设备部署后门https://netsecurity.51cto.com/article/714437.html 多款Siemens SIMATIC产品命令注入漏洞CVE-2022-34820https://redqueen.tj-un.com/IntelDetails.html?id=6cfb98a824ae4e3c95ba603e1d33bb88 HUAWEI EMUI授权问题漏洞CVE-2021-40013https://redqueen.tj-un.com/IntelDetails.html?id=e3bdaca9a51146e1ae518cad604d5ac6
发布时间: 2022 - 07 - 21
Digium软件存在漏洞,威胁行为者利用其攻击VoIP服务器https://www.freebuf.com/news/339440.html 微软曝光了苹果系统沙盒逃逸漏洞的细节https://www.freebuf.com/news/339305.html 赶紧自查,AMD和Intel CPU又曝新漏洞https://www.freebuf.com/articles/339154.html Netwrix Auditor中存在可用来执行任意代码的漏洞https://redqueen.tj-un.com/InfoDetails.html?id=1441d5cfc065429984ec0ddcef539d93 Google Chromium后置链接漏洞 CVE-2021-21117https://redqueen.tj-un.com/IntelDetails.html?id=24aacef2acd9434f90a1e9fc3632a3b2
发布时间: 2022 - 07 - 18
联想超70款笔记本电脑被曝新型UEFI固件漏洞https://www.freebuf.com/news/339109.html VMware修补了11月披露的vCenter Server漏洞https://www.bleepingcomputer.com/news/security/vmware-patches-vcenter-server-flaw-disclosed-in-november/ GitHub Actions和Azure虚拟机正在被用于云挖矿https://www.freebuf.com/news/338920.html Vim输入验证错误漏洞CVE-2022-2285https://redqueen.tj-un.com/IntelDetails.html?id=95ce5eb62d634baf935abb3b27cfbdd0 GitLab授权问题漏洞CVE-2022-1983https://redqueen.tj-un.com/IntelDetails.html?id=f68c4e6c1ae84d33bd79f7c9247a7b80
发布时间: 2022 - 07 - 14
多款本田车型存在漏洞,车辆可被远程控制https://www.freebuf.com/news/338789.html MITRE漏洞公告意外展示易受攻击资产https://www.anquanke.com/post/id/276096 Cisco发布安全更新,修复多个产品中的10个漏洞https://redqueen.tj-un.com/InfoDetails.html?id=8e45cef2edd64631afabf708a872b0bd Microweber 输入验证错误漏洞 CVE-2022-2252https://redqueen.tj-un.com/IntelDetails.html?id=61f1a236a95a485287d50acb7db017f1 CVE-2022-32532认证绕过漏洞分析https://www.freebuf.com/vuls/338499.html
发布时间: 2022 - 07 - 11
Chrome被爆严重零日漏洞,谷歌督促用户尽快更新https://www.freebuf.com/news/338299.html CISA命令美国联邦机构在7月22日前为CVE-2022-26925打补丁https://www.freebuf.com/news/338298.html Dradis竞争条件问题漏洞CVE-2022-30028https://redqueen.tj-un.com/IntelDetails.html?id=03e02fba0a8d46c8b8dc67ae2bfa8dfd 微软悄悄修复 ShadowCoerce Windows NTLM Relay 漏洞https://www.bleepingcomputer.com/news/microsoft/microsoft-quietly-fixes-shadowcoerce-windows-ntlm-relay-bug/ 快升级!流行的Django网络框架的一个SQL注入漏洞已被修复https://securityaffairs.co/wordpress/132853/security/django-framework-sql-injection.html
发布时间: 2022 - 07 - 07
HackerOne员工出售漏洞报告牟利https://www.freebuf.com/news/338142.html Jenkins安全团队披露了29个受0Day漏洞影响的插件https://www.freebuf.com/news/338090.html CVE-2022-22954 VMware Workspace ONE Access SSTI RCE漏洞分析https://www.freebuf.com/vuls/337233.html 企业SaaS软件Zoho某个工具的关键漏洞遭在野利用https://www.bleepingcomputer.com/news/security/zoho-manageengine-adaudit-plus-bug-gets-public-rce-exploit/ Trend Micro Apex One安全漏洞CVE-2021-25228https://redqueen.tj-un.com/IntelDetails.html?id=65cd5ec877e048a68e0825cc5df2e21c
发布时间: 2022 - 07 - 04
被曝高危漏洞,威胁行为者可获取Amazon Photos文件访问权限https://www.freebuf.com/news/337760.html MITRE组织公布了2022年CWE最危险的25个软件弱点https://www.freebuf.com/news/337766.html Knot Resolver其他漏洞CVE-2022-32983https://redqueen.tj-un.com/IntelDetails.html?id=f36d7ee18a8f4c16a9b7876767f4eeb8 Vim其他漏洞 CVE-2022-2125https://redqueen.tj-un.com/IntelDetails.html?id=773d273bcb9e4eb4bd930af0ccf060be WUZHI CMS SQL注入漏洞 CVE-2021-41654https://redqueen.tj-un.com/IntelDetails.html?id=89555dadec734bc9b5214a99a1cd398f
发布时间: 2022 - 07 - 01
QNAP发出警告,关键PHP漏洞可导致远程代码执行https://www.freebuf.com/articles/337218.html CISA:威胁行为者利用Log4Shell漏洞入侵VMware服务器https://www.freebuf.com/news/337187.html CrowdStrike披露滥用Mitel VOIP漏洞的攻击的详情https://redqueen.tj-un.com/InfoDetails.html?id=092c282ed9354dd5818de1b4829fdd54 Google Android 权限许可和访问控制问题漏洞 CVE-2022-20124https://redqueen.tj-un.com/IntelDetails.html?id=1137b1d1d7be4508976c1bb6f1ea687b MEGA修复了允许解密用户数据的关键漏洞https://www.freebuf.com/news/337040.html
发布时间: 2022 - 06 - 28
工控安全遭严峻挑战,56个严重漏洞席卷OT设备https://www.freebuf.com/news/336969.html Google披露Apple Safari漏洞CVE-2022-22620的细节https://redqueen.tj-un.com/InfoDetails.html?id=eeecba743708475999cf36c5605e2ee7 开源代码存在安全隐患:一个项目平均有49个漏洞https://www.cnbeta.com/articles/tech/1283559.htm 威胁行为者利用RIG漏洞传播Dridex银行木马https://securityaffairs.co/wordpress/132498/malware/rig-exploit-kit-dridex.html 俄罗斯APT28滥用Follina漏洞分发恶意软件CredoMaphttps://redqueen.tj-un.com/InfoDetails.html?id=f5f5079ae1e44cf29872cea123cb74e4
发布时间: 2022 - 06 - 23
使用西门子工控系统的注意了,已经暴露了15个安全漏洞https://www.freebuf.com/news/336659.html 上百万WordPress网站的插件Ninja Forms被强制更新https://redqueen.tj-un.com/InfoDetails.html?id=781882f2a2f145ba947bf24c46523cde Blue Mockingbird团伙滥用Telerik UI中的漏洞挖矿https://redqueen.tj-un.com/InfoDetails.html?id=dec0e6cc4b084b5e9b54cd6c64c7bfaf CMS Made Simple SQL注入漏洞 CVE-2021-40961https://redqueen.tj-un.com/IntelDetails.html?id=14b69e64d5ae4551aeb01955dcbca1ba Apache Dubbo 代码问题漏洞 CVE-2022-24969https://redqueen.tj-un.com/IntelDetails.html?id=0257f9d9136544d3ab9f032d0d46e5e4
发布时间: 2022 - 06 - 20
邮件巨头Zimbra曝严重漏洞,黑客无需密码即可登录https://netsecurity.51cto.com/article/711775.html x86 CPU,危!最新漏洞引发热议,英特尔“全部处理器”受影响https://netsecurity.51cto.com/article/711671.html 思科电子邮件存在安全漏洞,攻击者可利用漏洞登录其Web管理界面https://www.freebuf.com/news/336376.html 攻击者利用三年前的Telerik漏洞部署Cobalt Strikehttps://www.freebuf.com/news/336370.html 俄沙虫组织利用Follina漏洞,入侵乌克兰重点机构https://www.freebuf.com/news/336151.html
发布时间: 2022 - 06 - 16
小心!Atlassian Confluence服务器中的RCE漏洞正被积极利用https://www.freebuf.com/news/336037.html HID Mercury曝严重漏洞,可解锁访问控制系统https://www.freebuf.com/news/336005.html Windows域提权漏洞CVE-2022-26923分析与复现https://www.freebuf.com/vuls/335471.html MIT发现苹果M1中新型硬件漏洞:可不留痕迹攻破安全机制https://netsecurity.51cto.com/article/711407.html Bandisoft ARK library缓冲区错误漏洞 CVE-2021-26635https://redqueen.tj-un.com/IntelDetails.html?id=4be3123fc40141ebb3f2eedc4dafe29a
发布时间: 2022 - 06 - 13
0day漏洞:Chromium v8引擎最新UAF代码执行漏洞分析https://www.freebuf.com/articles/web/334818.html Checkpoint披露摩托罗拉用的Unisoc芯片中漏洞的详情https://redqueen.tj-un.com/InfoDetails.html?id=d7296d10691c49f3b7a08812553e1c42 Cisco Common Services Platform Collector 跨站脚本漏洞 CVE-2022-20667https://redqueen.tj-un.com/IntelDetails.html?id=0b125616fbcc43a8b79db180d5d5981b 10个最常见的Android银行木马的下载量超过10亿次https://redqueen.tj-un.com/InfoDetails.html?id=bab454854699486b8f3002e71187c8c9 radare2 缓冲区错误漏洞 CVE-2022-1899https://redqueen.tj-un.com/IntelDetails.html?id=18cfc1d987394e99a48c9252565b8121
发布时间: 2022 - 06 - 09
友情连接:
免费服务热线 ree service hotline 400-613-1868 手机端
法律声明 Copyright  西安交大捷普网络科技有限公司  陕ICP备18022218号-1

陕公网安备 61019002000857号

犀牛云提供云计算服务