棱角社区 – Telegram

棱角社区

83 subscribers

12 photos

444 links

网络安全事件推送.

Download Telegram

About

Blog

Apps

Platform

#漏洞 Hyper-V 远程代码执行漏洞（CVE-2021-28476）
https://github.com/0vercl0k/CVE-2021-28476

GitHub - 0vercl0k/CVE-2021-28476: PoC for CVE-2021-28476 a guest-to-host "Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys.

PoC for CVE-2021-28476 a guest-to-host "Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys. - 0vercl0k/CVE-2021-28476

63 views01:38

#漏洞 \QNAP Music Station/Malware Remover未授权远程代码执行漏洞（CVE-2020-36197 CVE-2020-36198）
https://www.shielder.it/advisories/qnap-musicstation-malwareremover-pre-auth-remote-code-execution/

Shielder - QNAP MusicStation/MalwareRemover Pre-Auth Remote Code Execution

QNAP MusicStation and MalwareRemover pre-installed official apps are affected by an arbitrary file upload and a command injection, leading to pre-auth remote root command execution.

62 views06:19

#漏洞 Overwolf 1-Click Remote Code Execution - CVE-2021-33501
https://swordbytes.com/blog/security-advisory-overwolf-1-click-remote-code-execution-cve-2021-33501/

Overwolf 1-Click Remote Code Execution - CVE-2021-33501 | SwordBytes Security

SwordBytes researchers have identified an Unauthenticated Remote Code Execution (RCE) vulnerability in Overwolf’s Client Application by abusing a Reflected Cross-Site Scripting (XSS) issue present in the “overwolfstore://” URL handler. This vulnerability…

70 views06:24

#漏洞深信服日志中心与行为感知系统 c.php 远程命令执行漏洞
https://poc.shuziguanxing.com/#/publicIssueInfo#issueId=4086

POC++奖励平台

poc收录,poc悬赏,漏洞收录,poc,漏洞

64 views15:02

#漏洞 Vcenter Server CVE-2021-21985 RCE PAYLOAD
https://www.iswin.org/2021/06/02/Vcenter-Server-CVE-2021-21985-RCE-PAYLOAD/

Vcenter Server CVE-2021-21985 RCE PAYLOAD

废话不多讲，老外对补丁的分析，具体补丁的分析和漏洞点可以看这篇文章 https://attackerkb.com/topics/X85GKjaVER/cve-2021-21985 这个漏洞主要是对Spring 管理的bean进行相关的方法对象操作，但是这里不同的是，操作的bean在内存中基本上都是一个对象，这样就可以通过多次方法调用来实现伪链式调用。 Vcenter 开启Debug端口，可以直

63 views04:58

#漏洞 JavaWeb网页截图中的ssrf
https://www.sec-in.com/article/1080

SecIN是启明星辰云众可信旗下的信息安全技术社区。社区理念：共享·链接，与每一个志同道合的人；纯粹·安全，听自己愿意听见的声音；协作·发展，是信息安全生态的力量。

56 views11:52

#漏洞 Apache Solr 8.8.1 SSRF to Arbitrary File Write Vulnerability
http://noahblog.360.cn/apache-solr-8-8-1-ssrf-to-file-write/

root@cyberworld:~# Noah Lab

Apache Solr 8.8.1 SSRF to Arbitrary File Write Vulnerability

0x01. TL; DR事情要从 Skay 的 SSRF 漏洞（CVE-2021-27905）说起。正巧后续的工作中遇到了 Solr，我就接着这个漏洞进行了进一步的分析。漏洞原因是在于 Solr 主从复制（Replication）时，可以传入任意 URL，而 Solr 会针对此 URL 进行请求。说起主从复制，那么对于 Redis 主从复制漏洞比较熟悉的人会知道，可以利用主从复制的功能实现任意文件写入，那么 Solr 是否会存在这个问题呢？通过进一步的分析，我发现这个漏洞岂止于 SSRF，简直就是 Redis…

56 views11:53

#漏洞 EasyGBS 未授权敏感信息泄露漏洞
https://blog.csdn.net/qq_41832837/article/details/117476973

EasyGBS未授权访问漏洞_jammny-CSDN博客

一、漏洞详情EasyGBS是由TSINGSEE开发一款国标视频云平台。EasyGBS<=1.4.9版本的平台存在未授权访问漏洞，攻击者可以直接访问平台的API接口文档，从而获取系统的API接口造成信息泄露。二、影响版本EasyGBS <= 1.4.9三、漏洞利用1、默认口令：easygbs/easygbs # 管理员权限guest2020/guest2014&2020 # 游客权限2、API接口文档：/apidoc/#api-device3

55 views12:00

#漏洞 Vulnerability Spotlight: A deep dive into macOS SMB server
https://blog.talosintelligence.com/2021/06/vuln-spotlight-smb-mac-deep-dive.html

Cisco Talos Blog

Vulnerability Spotlight: A deep dive into macOS SMB server

By Aleksandar Nikolich.

Executive summary

Cisco Talos recently discovered multiple vulnerabilities in macOS’s implementation of SMB server. An adversary could exploit these vulnerabilities to carry out a variety of malicious actions, including revealing…

60 views14:19

#漏洞 CVE-2021-31181: MICROSOFT SHAREPOINT WEBPART INTERPRETATION CONFLICT REMOTE CODE EXECUTION VULNERABILITY
https://www.zerodayinitiative.com/blog/2021/6/1/cve-2021-31181-microsoft-sharepoint-webpart-interpretation-conflict-remote-code-execution-vulnerability

Zero Day Initiative

Zero Day Initiative — CVE-2021-31181: Microsoft SharePoint WebPart Interpretation Conflict Remote Code Execution Vulnerability

In May of 2021, Microsoft released a patch to correct CVE-2021-31181 – a remote code execution bug in the supported versions of Microsoft SharePoint Server. This bug was reported to the ZDI program by an anonymous researcher and is also known as ZDI-21…

57 views01:40

#漏洞利用 Apple Safari 中的 0Day WebAssembly 漏洞 (CVE-2021-30734)
https://blog.ret2.io/2021/06/02/pwn2own-2021-jsc-exploit/

RET2 Systems Blog

32 bits, 32 gigs, 1 click...

In this post we will examine a vulnerability in the WebAssembly subsystem of JavaScriptCore, the JavaScript engine used in WebKit and Apple Safari. The issue...

60 views03:36

#漏洞 Persistant Arbitrary code execution in mattermost android
https://hackerone.com/reports/1115864

Mattermost disclosed on HackerOne: Persistant Arbitrary code...

## Summary:
Activity `com.mattermost.share.ShareActivity` is is exported and is designed to allow file sharing from third party application to mattermost android app.
```
<activity...

58 views15:51

#漏洞 CVE-2021–22201：在 Gitlab 上读取任意文件
https://tradahacking.vn/cve-2021-22201-arbitrary-file-read-on-gitlab-d84d77cd83e3

62 views16:04

#漏洞 XSS in the AWS Console
https://frichetten.com/blog/xss_in_aws_console/

XSS in the AWS Console

Writeup for a cross-site scripting bug I found in the AWS Console.

68 views02:21

#漏洞 vCenter Server CVE-2021-21985 RCE分析
https://www.anquanke.com/post/id/243098

vCenter Server CVE-2021-21985 RCE分析 - 安全客，安全资讯平台

VMware官方发布了VMware vCenter Server远程代码执行漏洞的风险通告，该漏洞是由360 Noah Lab的安全研究员Ricter Z发现的。

69 views06:41

#漏洞 Huawei无线上网卡权限提升漏洞
https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/huawei-lte-usb-stick-e3372-file-overwrite-to-code-execution/

62 views13:27

#漏洞 CVE-2020-27301 - CVE-2020-27302: Realtek Critical Wi-Fi Vulnerabilities, elevated privileges and hijack wireless communications
https://www.vdoo.com/blog/realtek-wifi-vulnerabilities-zero-day

63 views13:39

#漏洞 VCSA 6.5-7.0 远程代码执行 CVE-2021-21985 漏洞分析
http://noahblog.360.cn/vcenter-cve-2021-2021-21985/

VCSA 6.5-7.0 远程代码执行 CVE-2021-21985 漏洞分析

vSphere vCenter Server 的 vsphere-ui 基于 OSGi 框架，包含上百个 bundle。前几日爆出的任意文件写入漏洞即为 vrops 相关的 bundle 出现的问题。在针对其他 bundle 审计的过程中，发现 h5-vsan 相关的 bundle 提供了一些 API 端点，并且未经过授权即可访问。通过进一步的利用，发现其中某个端点存在安全问题，可以执行任意 Spring Bean 的方法，从而导致命令执行。漏洞时间线： 2021/04/13 - 发现漏洞并实现 RCE；2021/04/16…

66 views02:49

#漏洞 POC Exploit from a CVE: Apache Airflow 1.10.10. RCE
https://infosecwriteups.com/poc-exploit-from-a-cve-apache-airflow-1-10-10-rce-e2c764f2a6f0

POC Exploit from a CVE: Apache Airflow 1.10.10. RCE

A quick overview how to write an poc exploit from a CVE in Apache Airflow 1.10.10

66 views12:53

#漏洞 Lucee Server 未授权RCE漏洞（CVE-2021-21307）
https://github.com/httpvoid/writeups/blob/main/Apple-RCE.md

writeups/Apple-RCE.md at main · httpvoid/writeups

Contribute to httpvoid/writeups development by creating an account on GitHub.

66 views05:06

#漏洞 CVE-2021-30724：macOS 和 iOS 中的 CVMServer 漏洞
https://www.trendmicro.com/en_us/research/21/f/CVE-2021-30724_CVMServer_Vulnerability_in_macOS_and_iOS.html

CVE-2021-30724: CVMServer Vulnerability in macOS and iOS

We analyze the patched CVE-2021-30724 vulnerability, affecting macOS, iOS, and iPadOS. If exploited, this flaw can allow privilege escalation.

63 views01:21