Pulses - Sec.Today

Snooping on Android 12’s Privacy Dashboard

thebinaryhick.blog • Android

Snooping on Android 12’s Privacy Dashboard. – lanying37 • 8 hours ago

0

AFLTeam: Towards Systematic and Dynamic Task Allocation for Collaborative Parallel Fuzzing

github.com

AFLTeam - AFLTeam: Towards Systematic and Dynamic Task Allocation for Collaborative Parallel Fuzzing – Jett • 18 hours ago

0

Checking your browser before accessing www.forensicfocus.com.

www.forensicfocus.com • IoT

Contiki OS 系统 IoT 设备取证分析之数据还原 – Jett • 18 hours ago

0

CVE-2021-45467: CWP CentOS Web Panel – preauth RCE

octagon.net • Web

CVE-2021-45467: CWP CentOS Web Panel – preauth RCE – Jett • 18 hours ago

0

Security advisory for the standard library (CVE-2022-21658)

blog.rust-lang.org

Rust 发布安全公告，std::fs::remove_dir_all 标准库函数存在条件竞争漏洞 (CVE-2022-21658) – Jett • 18 hours ago

0

2232 - XNU kernel use-after-free in mach_msg - project-zero

bugs.chromium.org • iOS

2232 - XNU kernel use-after-free in mach_msg - project-zero – Jett • 18 hours ago

0

McAfee Bug Can Be Exploited to Gain Windows SYSTEM Privileges

Threatpost

McAfee Agent 被发现 Windows SYSTEM 本地提权漏洞 – Jett • 18 hours ago

0

ZohOwned :: A Critical Authentication Bypass on Zoho ManageEngine Desktop Central

Source Incite

桌面终端安全管理软件 Zoho ManageEngine 被发现高危认证绕过漏洞（CVE-2021-44515） – Jett • 18 hours ago

0

MoonBounce: the dark side of UEFI firmware

Securelist • Firmware

MoonBounce: the dark side of UEFI firmware – Jett • 18 hours ago

0

浅析分组加密模式攻击手段

跳跳糖 - 安全与分享社区

浅析分组加密模式攻击手段 – lanying37 • 2 days ago

0

假旗 or 升级？疑似海莲花利用Glitch平台的攻击样本再现

mp-weixin-qq-com.translate.goog • Attack

假旗 or 升级？疑似海莲花利用Glitch平台的攻击样本再现 – lanying37 • 3 days ago

0

[PDF] https://arxiv.org/pdf/2112.15561.pdf

arxiv.org • Browser Web

SOK: On the Analysis of Web Browser Security – Jett • 3 days ago

0

Fuzzware

github.com

Fuzzware: Using Precise MMIO Modeling for Effective Firmware Fuzzing – Jett • 3 days ago

0

GitHub - modzero/MZ-21-02-Trendmicro: Critical Vulnerabilities in Trend Micro Deep Security Agent for Linux

github.com

趋势科技 Deep Security Agent Linux 版本 root 提权漏洞 PoC – Jett • 3 days ago

0

?? The ace(r) up your sleeve!

aptw.tf

宏基电脑在 Windows 系统安装的 Acer Care Center 被发现本地提权漏洞 – Jett • 3 days ago

0

CryptoLyzer: A comprehensive cryptographic settings analyzer

pfeifferszilard.hu • Tools

CryptoLyzer - 自动化分析 SSL/TLS, SSH 协议相关加密配置属性的工具 – Jett • 3 days ago

0

Zloader Installs Remote Access Backdoors and Delivers Cobalt Strike

news.sophos.com

Zloader 木马近期功能更新，运行时会安装 VNC 以及 Cobalt Strike – Jett • 3 days ago

0

C your data structures with rellic-headergen

Trail of Bits Blog

rellic-headergen - Trail of Bits 开源了一个用于分析字节码，还原 C 数据结构关联的工具 – Jett • 3 days ago

1

CVE-2021-22204 GitLab RCE之exiftool代码执行漏洞深入分析（二）

天融信阿尔法实验室

CVE-2021-22204 GitLab RCE之exiftool代码执行漏洞深入分析（二） – lanying37 • 4 days ago

0

CVE-2021-31956

bbs.pediy.com • Windows

CVE-2021-31956漏洞分析与利用. – lanying37 • 4 days ago

0