Aggregator

Currently trending CVE - Hype Score: 8 - In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act() computes the COW range for skb_ensure_writable() once before the key loop using tcfp_off_max_hint, but the hint does not ...

Currently trending CVE - Hype Score: 2 - Cacti is an open source performance and fault management framework. In versions 1.2.30 and prior, the rfilter request parameter is retrieved via the raw accessor grv() (rather than gfrv() with FILTER_VALIDATE_IS_REGEX validation) and concatenated directly into RLIKE SQL clauses ...

Currently trending CVE - Hype Score: 1 - Cacti is an open source performance and fault management framework. In versions 1.2.30 and prior, the rfilter request variable was concatenated into a RLIKE SQL clause without sanitization. The endpoint does not require authentication (graph viewing supports guest access via the ...

Currently trending CVE - Hype Score: 1 - Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have unauthenticated LFI through graph_theme and rrdtool IPC serialization hardening. This issue has been resolved in version 1.2.31.

Currently trending CVE - Hype Score: 1 - Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have pre-authentication SQL Injection via unanchored FILTER_VALIDATE_REGEXP in graph_view.php. This issue has been fixed in version 1.2.31.

Currently trending CVE - Hype Score: 7 - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Currently trending CVE - Hype Score: 1 - Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.

Currently trending CVE - Hype Score: 8 - In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail to propagate the SKBFL_SHARED_FRAG bit in skb_shinfo()->flags ...

Currently trending CVE - Hype Score: 1 - In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Currently trending CVE - Hype Score: 1 - A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček ...

VulnHuntr 深度拆解,从源码切入分析工具优缺点及改进方案

阿里云先知- AI攻防安全专家（P6/P7）

本文以学习记录为主，参考网上文章，针对fscan二开流程：利用AI去除fscan敏感特征---->使用garble混淆编译----->利用加载器落地，进行了较为完整的AI闭环。 记录在利用AI实现过程中遇到的一些问题，以及解决思路。 创新点：利用对AI的执行闭环，让Ai自动化fscan二开、不止对fscan进行二开，对加载器也进行二开和规避特征，达到了一定的免杀效果 项目地址：https://gi

仿冒公安网站（https://110gongan.com/、https://207.56.30.194/）、投递SpyNote RAT木马

本篇文章围绕基础知识和CTF中常见的ECDSA的攻击手法展开

FortiBleed credential-harvesting campaign, which has compromised more than 430,000 FortiGate firewalls worldwide, is directly feeding two active ransomware-as-a-service operations, INC Ransom and Lynx. SOCRadar’s Threat Research Unit identified an operator with access to FortiBleed infrastructure actively logged into negotiation panels for both ransomware brands, marking the first confirmed connection between mass FortiGate credential theft and […]

The post FortiBleed Password Stealing Attack Linked to INC and Lynx Ransomware Operations appeared first on Cyber Security News.

autho2.0 结合未授权注册拿下管理员权限

AutoCVE - 一键挖掘 CVE，筛项目、审源码、验漏洞、出报告，全流程自动化

SSRF 这个"老漏洞"非但没有消失，反而在大模型时代迎来了它的"第二春"。区别在于：过去是攻击者直接构造请求参数，现在是攻击者用自然语言"PUA"AI 替自己发请求。攻击的发起者，从一行 HTTP 参数，变成了一段藏在网页里的提示词。 文章主要描述：传统 SSRF 的底层机理、为什么大模型把它的攻击面放大了一个数量级、真实的利用链长什么样、如何亲手搭一套可复现的漏洞环境、如何防御等进行阐述

结合jadx进行二进制逆向分析