Aggregator

BinaryAI升级二进制函数匹配模型BAI-3.0，助力二进制软件成分分析的算法表现显著提升；此外，交互式分析底层引擎完成升级，新增支持MIPS架构，并在GitHub社区发布全新SDK。

How organisations can map their supply chain dependencies, so that risks in the supply chain can be better understood and managed.

前言OctoPrint是一个开源的3D打印机控制器应用程序，它为连接的打印机提供Web 界面。它可以显示打印

项目组管理功能真是太好用辣

本文以中央企业中制造、电力、建筑三个行业为代表，详细介绍了面临诸多安全挑战情况下，中央企业数字化安全建设思路及解决方案。

A quick overview of the recently discovered vulnerability. Learn how you can practice exploiting (and defending against) the local privilege escalation attack on the HTB platform!

10月11日，绿盟科技CERT监测到微软发布10月安全更新补丁，修复了104个安全问题，本月微软月度更新修复的漏洞中，严重程度为关键（Critical）的漏洞有12个，重要（Important）漏洞有92个。其中包括3个存在在野利用的漏洞。

近日，绿盟科技监测到curl官方发布安全公告，修复了SOCKS5堆缓冲区溢出漏洞（CVE-2023-38545）和cookie注入漏洞（CVE-2023-38546）。漏洞细节已公开，请受影响用户尽快升级版本进行防护。

2023年10月11日，阿里云应急响应中心监测到 curl SOCKS5 堆溢出漏洞(CVE-2023-38545)。

关于星阑星阑科技基于大数据分析及AI智能化技术体系，助力企业应对数字世界的安全风险。

欢迎来到RC2深圳实验室~

Summary curl version 8.4.0 has been released. According to the developers of curl, this version mitigates a vulnerability that has been present in curl for over 10 years and has not, to this point, been exploited. This vulnerability has been disclosed as a SOCKS5 heap buffer overflow and is currently rated HIGH. Threat Type Vulnerability Overview The developers of curl have released version 8.4.0 of the software. This update was designed to mitigate at least two previously undisclosed vulnerabilities, one o

Why macros are a threat, and the approaches you can take to protect your systems.

清华大学网络与信息安全实验室学术论文分享活动

On October 11th, 2023, a heap-based buffer overflow in curl was disclosed under the identifier CVE-2023-38545. The vulnerability affects libcurl 7.69.0 to and including 8.3.0. Vulnerable versions of libcurl may be embedded in existing applications. However, to reach the vulnerable code path, the application must be configured to utilize one of the SOCKS5 proxy modes and attempt to resolve a hostname with extraneous length.

做人嘛，最重要的是开心，我在尖沙咀等你，不见不散~