Cybersecurity Flow

CAN网络不是一个封闭的内部网络，可直接通过车内的OBD诊断接口接入CAN总线，也可通过智能手机、云服务器等与T-Box建立连接间接接入CA...

Docker images of the Exegol project

A proof of concept email spoofing tool built on Docker.

A DMARC scanning and parsing tool.

DLL Exports Extraction BOF with optional NTFS transactions.

Headless Chrome .NET API

By February 7th 2022, I hadn’t yet started jogging on my treadmill, but walking, biking, and improved diet got me down about 15 pounds from my peak. A year later, I’ve stabilized around forty pounds below that.

OpenAssistant is a chat-based assistant that understands tasks, can interact with third-party systems, and retrieve information dynamically to do so.

[GitHub]CVE-2022-44268 PoC

PoC exploits I wrote. They're as is and I will not offer support

介绍▸
最近刷推特看到了一个洞，PHP<=7.4.21时通过php

Article Link: Investigating NullMixer Network Traffic: Utilizing Suricata and Evebox (Part 3) - YouTube
1 post - 1 participant
Read full topic

Stakeholder-Specific Vulnerability Categorization

With the hope that someone finds the data useful, we periodically publish an archive of almost all of the non-sensitive vulnerability information i…

开源软件供应链攻击回顾 https://mp.weixin.qq.com/s/pAVrIQ0b66Y_YoSH3DLoIA
美国NSA安全运营关键原则 https://mp.weixin.qq.com/s/uTjXfgYTP5ZHZpwPuFXNwA
25美元破解Starlink 星链终端路由器 https://mp.weixin.qq.com/s/X-Fvs9TUPO1UT7BZsIOtnw
C2服务器隐藏与Linux上线 https://xz.aliyun.com/t/12094
分享Jar包分析工具：jar-analyzer https://mp.weixin.qq.com/s/Rrx6x5M_28YRcQQCdxuEeQ

有新的漏洞组件被发现啦,组件ID:IBM WebSphere
IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on the system with a specially crafted sequence of serialized objects. IBM X-Force ID: 245513.

有新的漏洞组件被发现啦,组件ID:Docker
CKAN is an open-source DMS (data management system) for powering data hubs and data portals. When creating a new container based on one of the Docker images listed below, the same secret key was being used by default. If the users didn't set a custom value via environment variables in the `.env` file, that key was shared across different CKAN instances, making it easy to forge authentication requests. Users overriding the default secret key in their own `.env` file are not affected by this issue. Note that the legacy images (ckan/ckan) located in the main CKAN repo are not affected by this issue. The affected images are ckan/ckan-docker, (ckan/ckan-base images), okfn/docker-ckan (openknowledge/ckan-base and openknowledge/ckan-dev images) keitaroinc/docker-ckan (keitaro/ckan images).

有新的漏洞组件被发现啦,组件ID:F5
Buffer overflow vulnerability in function json_parse_string in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges.

有新的漏洞组件被发现啦,组件ID:F5
Buffer overflow vulnerability in function json_parse_key in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges.

有新的漏洞组件被发现啦,组件ID:F5
Buffer overflow vulnerability in function json_parse_number in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges.

有新的漏洞组件被发现啦,组件ID:F5
Buffer overflow vulnerability in function json_parse_value in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November 14, 2022) allows attackers to code arbitrary code and gain escalated privileges.

有新的漏洞组件被发现啦,组件ID:F5
Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5tools_str_sprint in /hdf5/tools/lib/h5tools_str.c.

作者:Maxwell Garrett (@TheGrandPew),Shubham Shah (@infosec_au) 程序:IBM 漏洞类型:RCE,Security code review,Missing authentication,Insecure deserialization 赏金:-

作者:Nicolas Krassas (@Dinosn) 程序:- 漏洞类型:RCE 赏金:-

作者:Jean Calvin Mugabo 程序:CrushFTP 漏洞类型:Application-level DoS 赏金:-

作者:Michael Rand 程序:Gladinet (CentreStack) 漏洞类型:Authentication bypass,Password reset,Unrestricted file upload,RCE 赏金:-

作者:Dylan Pindur 程序:Avaya 漏洞类型:RCE,Security code review,XSS,WebDAV 赏金:-

作者:Ron Bowes (@iagox86) 程序:F5 漏洞类型:Format string vulnerability,Memory corruption 赏金:-