棱角社区 – Telegram

棱角社区

83 subscribers

12 photos

444 links

网络安全事件推送.

Download Telegram

About

Blog

Apps

Platform

#漏洞对打印机服务漏洞cve-2021-1675代码执行的验证过程
http://noahblog.360.cn/untitled-3/

对打印机服务漏洞cve-2021-1675代码执行的验证过程

背景本月的微软更新包含一个spool的打印机服务本地提权漏洞，自从去年cve-2020-1048被公开以来，似乎许多人开始关注到这一模块的漏洞。鉴于此这个漏洞刚公布出来时，并没有太仔细关注。直到后面关注到绿盟的微信公众号的演示视频，显示这个漏洞可能在域环境特定情况下执行任意代码。所以认为有必要对其原理以及适用范围情况进行分析。补丁分析通过补丁对比，可以确定该漏洞触发原理应该是一个在添加打印机驱动的过程中RpcAddPrinterDriverEx()绕过某些检查的漏洞。根据API文档，RpcAddPrinterDriverEx…

93 views07:53

#漏洞 MybatisPuls分页插件中的SQL注入
https://www.sec-in.com/article/1088

SecIN是启明星辰云众可信旗下的信息安全技术社区。社区理念：共享·链接，与每一个志同道合的人；纯粹·安全，听自己愿意听见的声音；协作·发展，是信息安全生态的力量。

105 views07:58

#漏洞用友NC历史漏洞(含POC)
https://mp.weixin.qq.com/s/xVKuJb3DbKH0em0HoMZ4ZQ

113 views07:58

#漏洞 Local Privilege Escalation Edition for CVE-2021-1675

https://github.com/hlldz/CVE-2021-1675-LPE

GitHub - hlldz/CVE-2021-1675-LPE: Local Privilege Escalation Edition for CVE-2021-1675/CVE-2021-34527

Local Privilege Escalation Edition for CVE-2021-1675/CVE-2021-34527 - hlldz/CVE-2021-1675-LPE

114 views11:53

#漏洞米拓建站系统1day审计与利用
https://www.secpulse.com/archives/161903.html

米拓建站系统1day审计与利用 - SecPulse.COM | 安全脉搏

2.关键词：在/app/system/entrance.php看到了配置文件的定义，全局搜索这’PATH_CONFIG‘参数。

117 views05:21

#漏洞 KASEYA VSA 中的身份验证绕过
https://www.securify.nl/advisory/authentication-bypass-in-kaseya-vsa

Securify - We provide reality checks

Authentication bypass in Kaseya VSA

Securify provides reality checks to lower security risks and build up resilience against threats. Agile Security, Pentesting (scenario-based) and Red Teaming.

111 views06:18

#漏洞 Exploiting the Sudo Baron Samedit vulnerability (CVE-2021-3156) on VMWare vCenter Server 7.0
https://research.nccgroup.com/2021/07/06/exploiting-the-sudo-baron-samedit-vulnerability-cve-2021-3156-on-vmware-vcenter-server-7-0/

121 views11:29

#漏洞 Technical Advisory – Arbitrary File Read in Dell Wyse Management Suite (CVE-2021-21586, CVE-2021-21587)
https://research.nccgroup.com/2021/07/06/technical-advisory-arbitrary-file-read-in-dell-wyse-management-suite-cve-2021-21586-cve-2021-21587/

NCC Group Research Blog

Technical Advisory – Arbitrary File Read in Dell Wyse Management Suite (CVE-2021-21586, CVE-2021-21587)

Vendor: Dell Vendor URL: Versions affected: Prior to version 3.3 Systems Affected: Any Author: Stephen Tomkinson stephen.tomkinson@nccgroup.com Advisory URL / CVE Identifier: CVE-2021-21586, CVE-20…

133 views01:59

#漏洞 PoC for SSRF in IBM QRadar SIEM (CVE-2020-4786)
https://twitter.com/ptswarm/status/1412775355530764291

✨PoC for SSRF in IBM QRadar SIEM (CVE-2020-4786)✨ GET /console/chartServer?output=image&data=http://127.0.0.1:8080

141 views15:20

#漏洞 SmarterMail XSS漏洞（CVE-2021-35519）
https://ssd-disclosure.com/ssd-advisory-smartermail-xss/

SSD Secure Disclosure

SSD Advisory – SmarterMail XSS - SSD Secure Disclosure

Find out how a cross site scripting vulnerability in SmarterMail allows remote attackers to obtain the JWT token used to authenticate the user.

179 views15:21

#漏洞代码审计-熊海CMS任意文件下载 0day?
https://mp.weixin.qq.com/s/M8kD_J1Pxhjt2w7l6x7Rcg

207 views15:52

#漏洞 CVE-2021-31800 impacket smbserver 目录遍历漏洞
https://www.checkmarx.com/blog/cve-2021-31800-how-we-used-impacket-to-hack-itself/

CVE-2021-31800: How We Used Impacket to Hack Itself

After investigating Impacket, the Checkmarx Security Research Team discovered a Path Traversal vulnerability, which could allow an attacker to write malicious files to any path on the target and achieve Remote Code Execution (RCE).

248 views06:54

#漏洞 ThinkPHP3.2.x RCE漏洞通报
https://mp.weixin.qq.com/s/_4IZe-aZ_3O2PmdQrVbpdQ

Weixin Official Accounts Platform

【漏洞通报】ThinkPHP3.2.x RCE漏洞通报

近日，默安玄甲实验室发现网络上出现针对ThinkPHP3.2的远程代码执行漏洞。随即做出了分析和协助客户响应漏洞，防止在野利用的漏洞造成威胁。

290 views05:31

#漏洞 NETGEAR WAC104身份验证绕过漏洞(CVE-2021-35973)
https://gynvael.coldwind.pl/?id=736

gynvael.coldwind.pl

Gears of Chaos vulnerability chain (NETGEAR WAC104 access point)

339 views06:15

#漏洞 Windows Print Spooler服务最新漏洞CVE-2021-34527详细分析
https://mp.weixin.qq.com/s/8qDQUu6FNpNjX1tY1KrAoQ

Weixin Official Accounts Platform

Windows Print Spooler服务最新漏洞CVE-2021-34527详细分析

近日，有安全研究员在github上公开了\x26quot;CVE-2021-1675\x26quot;的exp，后经验证公开的exp是一个与CVE-2021-1675不同的漏洞，微软为其分配了新的编号CVE-2021-34527。

418 views06:59

#漏洞 Solarwinds Serv-U 15.2.3 XSS漏洞（CVE-2021-32604）
https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/solarwinds-serv-u-1523-share-url-xss-cve-2021-32604/

Solarwinds Serv-U 15.2.3 Share URL XSS (CVE-2021-32604)

Sometimes when pen-testing a large network you come across a few exposed web hosts running out-of-the-box software.

473 views13:04

攻防日报(Daily safety) 每日推送地址变更为：https://forum.ywhack.com/forum-59-1.html

[~]#棱角 ::Edge.Forum*

409 views02:15

#redteam 红队在线工具集新增：

资产分拣：https://forum.ywhack.com/url.php
Windows进程识别：https://forum.ywhack.com/bountytips.php?process
反弹shell优化：https://forum.ywhack.com/shell.php
资产搜索：https://forum.ywhack.com/bountytips.php?gip
在线网盘工具：https://oss.ywhack.com/

[~]#棱角 ::Edge.Forum*

244 views01:54

Channel name was changed to «棱角社区»

01:55

棱角社区攻防日报推送
2022-7-11 10:0:0 星期一

标题：滥用本机 Windows 函数执行 shellcode
地址：http://ropgadget.com/posts/abusing_win_functions.html
标签：技术
-----------------------
标题：强制 Windows 机器向攻击者控制的机器进行身份验证的方法列表
地址：https://github.com/p0dalirius/windows-coerced-authentication-methods
标签：技术
-----------------------
标题：170万个澳大利亚域名存在162万个SPF和DMARC电子邮件的安全问题
地址：https://caniphish.com/phishing-resources/blog/australian-spf-scan
标签：漏洞
-----------------------
标题：从一文中了解SSRF的各种绕过姿势及攻击思路
地址：https://tttang.com/archive/1648/
标签：技术
-----------------------
标题：CVE-2022-26377: Apache HTTPd AJP Request Smuggling
地址：http://noahblog.360.cn/apache-httpd-ajp-request-smuggling/
标签：漏洞
-----------------------

GitHub - p0dalirius/windows-coerced-authentication-methods: A list of methods to coerce a windows machine to authenticate to an…

A list of methods to coerce a windows machine to authenticate to an attacker-controlled machine through a Remote Procedure Call (RPC) with various protocols. - p0dalirius/windows-coerced-authentic...

346 views06:36

📢 棱角社区攻防日报推送
🔗 棱角社区: https://forum.ywhack.com
🕙 2023/10/12 16:05:28 · 星期四

🎈 [漏洞] cURL 漏洞 CVE-2023-38545 分析：并非世界末日的威胁

🎉 [漏洞] 微软内核流媒体服务漏洞：临界接近 0day 的深度分析与利用

💡 [漏洞] Squid Caching Proxy 安全审计：揭露 55 个漏洞及 35 个 0day

🍀 [漏洞] Ghostscript 安全概览：攻击者视角下的漏洞与利用

🔧 [漏洞] Cosmos SDK 中的远程代码执行漏洞分析

149 views08:05