棱角社区 – Telegram

45 views12:41

#漏洞 ExpressionEngine 6.0.2 PHP代码注入CVE-2021-27230
https://packetstormsecurity.com/files/161805

ExpressionEngine 6.0.2 PHP Code Injection ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

46 views12:41

#漏洞 BIG-IP/ BIG-IQ iControl REST 未经身份验证的RCE (CVE-2021-22986)
https://attackerkb.com/topics/J6pWeg5saG/k03009991-icontrol-rest-unauthenticated-remote-command-execution-vulnerability-cve-2021-22986

AttackerKB

K03009991: iControl REST unauthenticated remote command execution vulnerability CVE-2021-22986 | AttackerKB

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3 amd BIG-IQ 7.1.0.x …

44 views12:03

棱角社区

#bountytip 隐写术-往推特PNG图片内写入3MB数据的方法
https://github.com/DavidBuchanan314/tweetable-polyglot-png

GitHub

GitHub - DavidBuchanan314/tweetable-polyglot-png: Pack up to 3MB of data into a tweetable PNG polyglot file.

Pack up to 3MB of data into a tweetable PNG polyglot file. - DavidBuchanan314/tweetable-polyglot-png

42 views12:03

棱角社区

#bountytip Chrome sandbox escape
https://securitylab.github.com/research/one_day_short_of_a_fullchain_sbx

49 views12:06

棱角社区

#工具

49 views12:20

棱角社区

#工具 go-dork - 用go写的一个Dork扫描工具
https://github.com/dwisiswant0/go-dork

GitHub

GitHub - dwisiswant0/go-dork: The fastest dork scanner written in Go.

The fastest dork scanner written in Go. Contribute to dwisiswant0/go-dork development by creating an account on GitHub.

49 views13:05

棱角社区

#漏洞 Apache Solr 组件安全概览
https://mp.weixin.qq.com/s/3WuWUGO61gM0dBpwqTfenQ

Weixin Official Accounts Platform

Apache Solr 组件安全概览

48 views14:18

棱角社区

#漏洞 TikTok for Android 1-Click RCE
https://medium.com/@dPhoeniixx/tiktok-for-android-1-click-rce-240266e78105

Medium

TikTok for Android 1-Click RCE

Chaining multiple bugs on TikTok for Android to achieving Remote code execution in the application’s context.

50 views04:01

棱角社区

#漏洞 Solr最新版任意文件读取0day
https://mp.weixin.qq.com/s/HMtAz6_unM1PrjfAzfwCUQ

Weixin Official Accounts Platform

公布某Solr最新版任意文件读取0day

0x00 前言skay之前在审计solr的时候发现了一个任意文件读取的漏洞，不过报给官方后官方拒绝修复，认为

53 views04:01

棱角社区

#漏洞 CVE-2021-27076: A REPLAY-STYLE DESERIALIZATION ATTACK AGAINST SHAREPOINT
https://www.thezdi.com/blog/2021/3/17/cve-2021-27076-a-replay-style-deserialization-attack-against-sharepoint

Zero Day Initiative

Zero Day Initiative — CVE-2021-27076: A Replay-Style Deserialization Attack Against SharePoint

An attacker is frequently in the position of having to find a technique to evade some data integrity measure implemented by a target. One instructive example of a data integrity measure is a message authentication check. Generally, message authentication…

51 views04:16

棱角社区

#漏洞 Fuzzing: FastStone Image Viewer & CVE-2021-26236
https://voidsec.com/fuzzing-faststone-image-viewer-cve-2021-26236/

VoidSec

Fuzzing: FastStone Image Viewer & CVE-2021-26236 - VoidSec

Fuzzing FastStone Image Viewer v.7.5; CVE-2021-26236 Arbitrary Code Execution exploit & root cause analysis.

50 views04:17

棱角社区

#bountytip Hunting in the Sysmon Call Trace
https://www.lares.com/blog/hunting-in-the-sysmon-call-trace/

Lares

Hunting in the Sysmon Call Trace

Intro The Sysmon ProcessAccess event has been used in threat hunting and detection efforts in order to alert on techniques such as process injection and credential access. According to the…

52 views05:40

棱角社区

#漏洞 Ability To Delete User(s) Account Without User Interaction
https://hackerone.com/reports/928255

HackerOne

GitLab disclosed on HackerOne: Ability To Delete User(s) Account...

Research Paper: https://hx01.me/Abusing_Data_Protection_Laws_For_D0xing_and_Account_Takeovers.pdf

54 views07:42

棱角社区

#bountytip 在线的文件下载快捷命令生成网站
https://file-downloads.com/

84 views10:34

棱角社区

#漏洞 MyBB Remote Code Execution Chain (CVE-2021-27889, CVE-2021-27890)
https://blog.sonarsource.com/mybb-remote-code-execution-chain

Sonarsource

MyBB Remote Code Execution Chain

Today SonarSource is pleased to share a guest contribution to our Code Security blog series about learnings from a chain of serious vulnerabilities in MyBB.

55 views07:00

棱角社区

#漏洞 F5从认证绕过到远程代码执行漏洞分析
https://blog.riskivy.com/f5%e4%bb%8e%e8%ae%a4%e8%af%81%e7%bb%95%e8%bf%87%e5%88%b0%e8%bf%9c%e7%a8%8b%e4%bb%a3%e7%a0%81%e6%89%a7%e8%a1%8c%e6%bc%8f%e6%b4%9e%e5%88%86%e6%9e%90/

Riskivy

F5从认证绕过到远程代码执行漏洞分析 - 斗象能力中心

斗象智能安全，以IT资产为核心的全息安全监控与分析，为企业建立全新模式的安全服务体系

56 views07:10

棱角社区

#漏洞 Browser logic vulnerabilities
https://github.com/Metnew/uxss-db

GitHub

GitHub - Metnew/uxss-db: 🔪Browser logic vulnerabilities :skull_and_crossbones:

🔪Browser logic vulnerabilities :skull_and_crossbones: - Metnew/uxss-db

57 views07:16

棱角社区

#漏洞 Eclipse Jetty 拒绝服务 (CVE-2020-27223)
https://github.com/motikan2010/CVE-2020-27223

GitHub

GitHub - motikan2010/CVE-2020-27223: CVE-2020-27223 Vulnerability App & PoC

CVE-2020-27223 Vulnerability App & PoC. Contribute to motikan2010/CVE-2020-27223 development by creating an account on GitHub.

56 views07:36

棱角社区

#bountytip 负载均衡下的 WebShell 连接
https://mp.weixin.qq.com/s/4Bmz_fuu0yrLMK1oBKKtRA

Weixin Official Accounts Platform

负载均衡下的 WebShell 连接

负载均衡的场景大家遇到的不是一两回了，很多人遇到能出外网的可以轻松搞定，遇到那种节点机器不出网的就人傻了，今天咱们拿捏一下。

55 views16:12

棱角社区

#漏洞 CVE-2021-1732 msf:
https://github.com/rapid7/metasploit-framework/pull/14907

GitHub

Add exploit for CVE-2021-1732 by zeroSteiner · Pull Request #14907 · rapid7/metasploit-framework

This adds an exploit for CVE-2021-1732 which is a vulnerability in win32k. By calling NtUserConsoleControl in a callback function and passing the window that is currently being created, a field can...

59 views16:15

About

Blog

Apps

Platform