棱角社区 – Telegram

#漏洞 VCSA 6.5-7.0 远程代码执行 CVE-2021-21985 漏洞分析
http://noahblog.360.cn/vcenter-cve-2021-2021-21985/

VCSA 6.5-7.0 远程代码执行 CVE-2021-21985 漏洞分析

vSphere vCenter Server 的 vsphere-ui 基于 OSGi 框架，包含上百个 bundle。前几日爆出的任意文件写入漏洞即为 vrops 相关的 bundle 出现的问题。在针对其他 bundle 审计的过程中，发现 h5-vsan 相关的 bundle 提供了一些 API 端点，并且未经过授权即可访问。通过进一步的利用，发现其中某个端点存在安全问题，可以执行任意 Spring Bean 的方法，从而导致命令执行。漏洞时间线： 2021/04/13 - 发现漏洞并实现 RCE；2021/04/16…

66 views02:49

棱角社区

#漏洞 POC Exploit from a CVE: Apache Airflow 1.10.10. RCE
https://infosecwriteups.com/poc-exploit-from-a-cve-apache-airflow-1-10-10-rce-e2c764f2a6f0

Medium

POC Exploit from a CVE: Apache Airflow 1.10.10. RCE

A quick overview how to write an poc exploit from a CVE in Apache Airflow 1.10.10

66 views12:53

棱角社区

#漏洞 Lucee Server 未授权RCE漏洞（CVE-2021-21307）
https://github.com/httpvoid/writeups/blob/main/Apple-RCE.md

GitHub

writeups/Apple-RCE.md at main · httpvoid/writeups

Contribute to httpvoid/writeups development by creating an account on GitHub.

66 views05:06

棱角社区

#漏洞 CVE-2021-30724：macOS 和 iOS 中的 CVMServer 漏洞
https://www.trendmicro.com/en_us/research/21/f/CVE-2021-30724_CVMServer_Vulnerability_in_macOS_and_iOS.html

Trend Micro

CVE-2021-30724: CVMServer Vulnerability in macOS and iOS

We analyze the patched CVE-2021-30724 vulnerability, affecting macOS, iOS, and iPadOS. If exploited, this flaw can allow privilege escalation.

63 views01:21

棱角社区

#漏洞 https://therecord.media/microsoft-patches-six-windows-zero-days-including-a-commercial-exploit/

therecord.media

Microsoft patches six Windows zero-days, including a commercial exploit

Microsoft has released today its monthly batch of security updates, known in the industry as Patch Tuesday.

68 views01:30

棱角社区

#漏洞 https://securelist.com/puzzlemaker-chrome-zero-day-exploit-chain/102771/

71 views01:40

棱角社区

#漏洞安全评估工具整理、分类：
https://forum.ywhack.com/center.php

Ywhack

[~]#棱角 ::Edge.Forum*

70 views06:32

棱角社区

#漏洞 Atlassian Jira 用户名枚举（CVE-2020-36289）
https://twitter.com/ptswarm/status/1402644004781633540

Twitter

PT SWARM

Atlassian Jira Unauth User Enumeration (CVE-2020-36289) discovered by our researcher Mikhail Klyuchnikov. Jira < 8.5.13 8.6.0 ≤ Jira < 8.13.5 8.14.0 ≤ Jira < 8.15.1 PoC: /secure/QueryComponentRendererValue!Default.jspa?assignee=user:admin Advisory: jira.…

62 views13:22

棱角社区

#漏洞 CVE-2021-26868 LPE & CVE-2021-33739 POC：
https://github.com/mavillon1/CVE-2021-33739-POC

68 views13:22

棱角社区

#漏洞用友NC Cloud SQL注入漏洞（CNVD-2021-34249）
https://mp.weixin.qq.com/s/jsfWasjaV_n7vI7_VDA83A

69 views13:22

棱角社区

#漏洞 Jetty 通用 Servlets 组件 ConcatServlet 信息泄露漏洞（CVE-2021-28169）
https://github.com/vulhub/vulhub/blob/master/jetty/CVE-2021-28169/README.zh-cn.md

GitHub

vulhub/jetty/CVE-2021-28169/README.zh-cn.md at master · vulhub/vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose - vulhub/vulhub

73 views13:23

棱角社区

#漏洞聊聊 Synology NAS Audio Station 套件未授权 RCE 调试及 EXP 构造
https://paper.seebug.org/1604/

75 views13:23

棱角社区

#漏洞 About the Unsuccessful Quest for a Deserialization Gadget (or: How I found CVE-2021-21481)
https://codewhitesec.blogspot.com/2021/06/about-unsuccessful-quest-for.html

Blogspot

CODE WHITE | Blog: About the Unsuccessful Quest for a Deserialization Gadget (or: How I found CVE-2021-21481)

This blog post describes the research on SAP J2EE Engine 7.50 I did between October 2020 and January 2021. The first part describes how I se...

73 views07:12

棱角社区

#漏洞 Citrix Application Delivery Controller访问控制错误漏洞（CVE-2020-8300）
https://github.com/stuartcarroll/CitrixADC-CVE-2020-8300

GitHub

GitHub - stuartcarroll/CitrixADC-CVE-2020-8300: Detect Citrix ADC SAML action or SAML iDP Profile config vulnerable to CVE-2020…

Detect Citrix ADC SAML action or SAML iDP Profile config vulnerable to CVE-2020-8300 using Citrix ADC NITRO API - stuartcarroll/CitrixADC-CVE-2020-8300

66 views02:27

棱角社区

#漏洞 Unauthenticated Gitlab SSRF
https://vin01.github.io/piptagole/gitlab/ssrf/security/2021/06/15/gitlab-ssrf.html

65 views02:27

棱角社区

#漏洞 IPFire 2.25 远程代码执行（CVE-2021-33393）
https://packetstormsecurity.com/files/163158/ipfire_pakfire_exec.rb.txt

Packetstormsecurity

IPFire 2.25 Remote Code Execution ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

66 views02:28

棱角社区

#漏洞 PageKit CMS 1.0.18 存储型 XSS（CVE-2021-32245）
https://github.com/pagekit/pagekit/issues/963

GitHub

A stored XSS has been found in PageKit CMS affecting versions 1.0.18. · Issue #963 · pagekit/pagekit

Problem A user can upload SVG files in the file upload portion of the CMS. These SVG files can contain malicious scripts. This file will be uploaded to the system and it will not be stripped or fil...

68 views02:28

棱角社区

#漏洞 Plain Credentials in DIR-2640-US Router
https://github.com/liyansong2018/CVE/tree/main/2021/CVE-2021-34204

GitHub

CVE/2021/CVE-2021-34204 at main · secnotes/CVE

Some Awesome and Simple CVE. Contribute to secnotes/CVE development by creating an account on GitHub.

72 views02:28

棱角社区

#漏洞 CVE-2021-31585: Accellion kiteworks - Web administrator to remote code execution
https://zxsecurity.co.nz/research/accellion-kiteworks-CVE-2021-31585/

ZX Security

CVE-2021-31585: Accellion kiteworks - Web administrator to remote code execution

Introduction ZX Security performed security testing of Accellion’s kiteworks application. The review was performed with a copy of the kiteworks virtual machine (VM), as well as access to a client pre-production instance.

74 views03:17

棱角社区

#漏洞 Quick Analysis for the SSID Format String Bug
https://blog.chichou.me/2021/06/20/quick-analysis-wifid/

66 views13:54

#漏洞 Microsoft SharePoint远程代码执行漏洞（CVE-2021-31181）
https://packetstormsecurity.com/files/163208/sharepoint_unsafe_control.rb.txt

Packetstormsecurity

Microsoft SharePoint Unsafe Control And ViewState Remote Code Execution ≈ Packet Storm

Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers

60 views13:55

About

Blog

Apps

Platform