棱角社区 – Telegram

棱角社区

#漏洞 Afterlogic Aurora & WebMail Pro 文件上传漏洞（CVE-2021-26293）
https://github.com/E3SEC/AfterLogic/blob/main/CVE-2021-26293-rce-via-public-unrestricted-file-upload-vulnerability.md

GitHub

AfterLogic/CVE-2021-26293-rce-via-public-unrestricted-file-upload-vulnerability.md at main · E3SEC/AfterLogic

AfterLogic Products Vulnerabilities. Contribute to E3SEC/AfterLogic development by creating an account on GitHub.

50 views05:54

棱角社区

#漏洞 Afterlogic Aurora & WebMail Pro 任意文件读取（CVE-2021-26294）
https://github.com/E3SEC/AfterLogic/blob/main/CVE-2021-26294-exposure-of-sensitive-information-vulnerability.md

GitHub

AfterLogic/CVE-2021-26294-exposure-of-sensitive-information-vulnerability.md at main · E3SEC/AfterLogic

AfterLogic Products Vulnerabilities. Contribute to E3SEC/AfterLogic development by creating an account on GitHub.

50 views05:57

棱角社区

#bountytip 一些网络空间搜索引擎相关的资料
https://github.com/EXHades/CyberSpaceSearchEngine-Research

GitHub

GitHub - EXHades/CyberSpaceSearchEngine-Research: 网络空间测绘/搜索引擎相关的资料

51 views06:13

棱角社区

#漏洞 Universal “netmask” npm package, used by 270,000+ projects, vulnerable to octal input data: server-side request forgery, remote file inclusion, local file inclusion, and more (CVE-2021-28918)
https://sick.codes/universal-netmask-npm-package-used-by-270000-projects-vulnerable-to-octal-input-data-server-side-request-forgery-remote-file-inclusion-local-file-inclusion-and-more-cve-2021-28918/

Sick Codes - Security Research, Hardware & Software Hacking, Consulting, Linux, IoT, Cloud, Embedded, Arch, Tweaks & Tips!

Universal "netmask" npm package, used by 270,000+ projects, vulnerable to octal input data: server-side request forgery, remote…

The following research outlines a vulnerability discovered in netmask npm package that is currently used by 278,722+ other projects. The vulnerability has been present for 9 years. Since this package is so incredibly widespread, I would suggest every nodejs…

53 views06:27

棱角社区

#情报 PHP的Git服务器被黑客入侵以向PHP源代码添加后门
https://www.bleepingcomputer.com/news/security/phps-git-server-hacked-to-add-backdoors-to-php-source-code/

BleepingComputer

PHP's Git server hacked to add backdoors to PHP source code

In the latest software supply chain attack, the official PHP Git repository was hacked and tampered with. Yesterday, two malicious commits were pushed to the php-src Git repository maintained by the PHP team on their git.php.net server. The threat actors…

56 views08:21

棱角社区

#漏洞 WordPress WP Super Cache静态缓存插件RCE
https://www.exploit-db.com/exploits/49718

Exploit Database

WordPress Plugin WP Super Cache 1.7.1 - Remote Code Execution (Authenticated)

WordPress Plugin WP Super Cache 1.7.1 - Remote Code Execution (Authenticated).. webapps exploit for PHP platform

57 views10:11

棱角社区

#情报腾讯推出了一款名为“微小号”的小程序。官方介绍称，它支持办理及使用无需依托SIM卡的虚拟手机号（简称小号）。小号可以用于接听/拨打电话、接收/发送短信，支持国内语音和点对点短信功能，暂不支持办理增值业务。
资费为每月10元

57 views10:38

棱角社区

#漏洞 JD-FreeFuck 后台命令执行漏洞
https://mp.weixin.qq.com/s/MEcuSnroUh6z3wp9Mi_OkA

Weixin Official Accounts Platform

JD-FreeFuck 后台命令执行漏洞

59 views13:30

棱角社区

#漏洞 Redmine 4.1.x XSS (CVE-2021-29274)

https://www.redmine.org/issues/33846

59 views13:38

棱角社区

#漏洞 Analyzing And Micropatching With Tetrane REVEN (Part 1, CVE-2021-26897)
https://blog.0patch.com/2021/03/analyzing-and-micropatching-with.html

0Patch

Analyzing And Micropatching With Tetrane REVEN (Part 1, CVE-2021-26897)

by Mitja Kolsek, the 0patch Team March 2021 Windows Updates included fixes for seven vulnerabilities in Windows DNS Server, two of which w...

61 views15:53

棱角社区

#工具 Girsh 自动生成适用于Linux或Windows的交互反向shell
https://github.com/nodauf/Girsh

GitHub

GitHub - nodauf/Girsh: Automatically spawn a reverse shell fully interactive for Linux or Windows victim

Automatically spawn a reverse shell fully interactive for Linux or Windows victim - nodauf/Girsh

62 views01:12

棱角社区

#bountytip SAML XML Injection
https://research.nccgroup.com/2021/03/29/saml-xml-injection/

Nccgroup

Cyber Security Research

Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.

61 views02:32

棱角社区

#漏洞 POC for CVE-2021-1656, an information disclosure in tpm.sys.
https://github.com/waleedassar/CVE-2021-1656

GitHub

GitHub - waleedassar/CVE-2021-1656

Contribute to waleedassar/CVE-2021-1656 development by creating an account on GitHub.

62 views06:59

棱角社区

#漏洞 D-Link DCS系列监控账号密码信息泄露漏洞 CVE-2020-25078 复现
https://www.o2oxy.cn/3282.html

www.o2oxy.cn

D-Link DCS系列监控账号密码信息泄露漏洞 CVE-2020-25078 复现 - print("")

FOFA： app=

61 views06:59

棱角社区

#漏洞 DD-WRT 缓冲区溢出漏洞（CVE-2021-27137）
https://ssd-disclosure.com/ssd-advisory-dd-wrt-upnp-buffer-overflow/

SSD Secure Disclosure

SSD Advisory – DD-WRT UPNP Buffer Overflow - SSD Secure Disclosure

TL;DR Find out how a vulnerability in DD-WRT allows an unauthenticated attacker to overflow an internal buffer used by UPNP and trigger a code execution vulnerability. Vulnerability Summary DD-WRT is “is Linux-based firmware for wireless routers and access…

56 views11:00

棱角社区

#漏洞 Jenkins插件中的多个漏洞

https://seclists.org/oss-sec/2021/q1/275
https://groups.google.com/g/jenkinsci-advisories?pli=1

seclists.org

oss-sec: Multiple vulnerabilities in Jenkins plugins

56 views11:09

棱角社区

#漏洞 Wifi迷你间谍1080P高清安全IP摄像机多个漏洞
https://xn--sb-lka.org/cve/INSMA.txt

53 views15:57

棱角社区

#漏洞北京致远G6政务协同系统V6.1SP1 反射性xss漏洞 CVE-2020-20545

https://note.youdao.com/ynoteshare1/index.html?id=29f908204968a79233c1c0c80a59f8ff&type=note

54 views15:59

棱角社区

#工具文件下载命令快捷生成器,单文件版
https://github.com/r0eXpeR/File-Download-Generator

GitHub

r0eXpeR/File-Download-Generator

文件下载命令快捷生成器,单文件版. Contribute to r0eXpeR/File-Download-Generator development by creating an account on GitHub.

59 views16:01

棱角社区

#漏洞漏洞分析 | WP Super Cache远程代码执行漏洞分析
https://mp.weixin.qq.com/s/5hu4QiVAi8vLX31SyZ8AxQ

Weixin Official Accounts Platform

漏洞分析 | WP Super Cache远程代码执行漏洞分析

笔者发现管理后台再向缓存配置文件写入数据时过滤不严谨导致可以植入恶意代码，进而导致远程代码执行。

59 views16:04

棱角社区

#漏洞 VMware vRealize Operations Manager API SSRF漏洞 (CVE-2021-21975)
https://github.com/projectdiscovery/nuclei-templates/blob/master/cves/2021/CVE-2021-21975.yaml

GitHub

projectdiscovery/nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities. - projectdiscovery/nuclei-templates

61 views08:53

About

Blog

Apps

Platform