西瓜🍉接得有点晚了，估计就那个大的能收获。苹果还好没被冰雹砸光，估计到时候还能吃上几个。

#Pocsuite3##漏洞演示# 使用 Pocsuite3 验证 Apache Spark RCE漏洞(CVE-2022-33891)网页链接 Seebug漏洞平台的微博视频

转发微博

CVE-2022-36804: Bitbucket Server and Data Center command injection vulnerability

Tool Release – JWT-Reauth

SharpSCCM: post-exploitation tool designed to leverage SCCM for lateral movement

Sometimes times the best hack is no hack at all — $2900 Shopify Bug Bounty

Re @S0ufi4n3 What a twist

Twilio hackers hit over 130 orgs in massive Okta phishing attack

Twilio Hackers Scarf 10K Okta Credentials in Sprawling Supply Chain Attack

Hackers abuse Genshin Impact anti-cheat system to disable antivirus

Stored XSS using SVG file

SolarWinds Hackers Using New Post-Exploitation Backdoor ‘MagicWeb’

Binance chief says a “sophisticated hacking team” turned him into a deepfake hologram

Hackers attacks LastPass and steals source code

How 'Kimsuky' hackers ensure their malware only reach valid targets

Plex Breach – Streaming Giant Issues Mass Password Reset to Millions

Re (And I do think global warming is a major risk)

Re Mark these words

Population collapse due to low birth rates is a much bigger risk to civilization than global warming

Re @SciGuySpace Good summary

RT Tavis Ormandy: I've been using the .stabs directives in GNU as to put the symbols back into stripped binaries, I think it's a neat trick! I wrote a...

CVE-2022-24304 Schema in lib/schema.js in Mongoose before 6.4.6 is vulnerable to prototype pollution.

转发微博

据我观察，艺术家们最喜欢元宇宙，最怕 AI。

十几年没聊过的一高中校友让我帮他查下我当年的高考成绩排名。因为他想知道他的排名，他比我高一分，但他身份证号改过没法查自己的。当年我和他高考没考好，理综考试都看错了最后一题。但他志愿填得不错去了大连理工，我一本志愿撞车去了二本。再次提起往事，我不按套路出牌，失之东隅收之188.88元

#科比妻子捐出1600万赔偿金#国外有钱人捐钱都喜欢捐给自己的基金会，这样不太好。要不我提个主意，科比妻子捐钱给盖茨基金会，盖茨妻子捐钱给曼巴基金会，这样咋样

当然 也有莫名其妙被@Walsea哇塞 这种脑瘫垃圾mcn消费的 查看图片

有没有一种可能 我是个atm奴//@有猫病的Skye:有的，比如@redrain_QAQ //@_EvilMoon:有的，比如@redrain_QAQ//@Nek0m1m1:有的，比如@redrain_QAQ

最近行政拘留了几天？

Register now for Black Hat Europe! Join us in-person in London or virtually online to experience high-quality content and networking opportunities. Cl...

Re @MELLON_____ Thanks, really glad you like it !

Re @rez0__ @stokfredrik @p4fg @hacksplained

In honor of #ThrowbackThursdays we're throwing it back a week or so to the badge talk from #DEFCON30. Learn the magical mysteries of the musical badge...

CVE-2022-38533 In GNU Binutils before 2.4.0, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function...

CVE-2022-36226 SiteServerCMS 5.X has a Remote-download-Getshell-vulnerability via /SiteServer/Ajax/ajaxOtherService.aspx.

CVE-2022-36168 A directory traversal vulnerability was discovered in Wuzhicms 4.1.0. via /coreframe/app/attachment/admin/index.php:

CVE-2022-35192 D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of S...

CVE-2022-30984 A buffer overflow vulnerability in the Rubrik Backup Service (RBS) Agent for Linux or Unix-based systems in Rubrik CDM 7.0.1, 7.0.1-p1,...

CVE-2022-29850 Various Lexmark products through 2022-04-27 allow External Control of a System or Configuration Setting because of Improper Input Valid...

CVE-2021-32570 In Ericsson Network Manager (ENM) releases before 21.2, users belonging to the same AMOS authorization group can retrieve the data from...

CVE-2021-3020 An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. It ships the binary hawk_invoke (built from tools/haw...

KCon 2022 倒计时一天！还不知道怎么参加的小伙伴戳👇链接：（404特准备了一些福利为本次KCon福利加码！）看这篇，不迷路！KCon 2022 参会攻略来咯，404助力福利持续加码中...本次KCon黑客大会全程免费参与哦~~精彩即将启幕，+1 进阶，护航未来，KCon 2022 等你来

KCon 倒计时1天｜10年风雨，更进1步 KCon 2022明天见 大家记得早起啊 这对我是个很大的挑战[发呆] KCon 倒计时1天｜10年风雨，更进1步

增加呼吸阻力，就是增加负荷。戴口罩运动，和在高海拔地区运动是类似的。并不是不能增加负荷。拉萨也有马拉松比赛。如果平时进行过高原地区的训练，然后去参加拉萨马拉松，这是合理的。但如果平时都在低海拔地区活动，临时送到拉萨去跑，结果是显而易见的。

有个疑问，在北京一卡通APP里开通"NFC手机一卡通"，为什么需要先登录小米账号？不登录小米账号，就用北京一卡通本身的注册、登录信息是哪里行不通？不懂手机方面的技术，它这个限制是技术原因还是营销原因？

不敢。//@tombkeeper: 但是，女排是有队医的。队医知道什么叫什么叫呼吸性酸中毒，什么叫机体代偿失调。这是简单的医学常识，是不需要现场实验才能得出结论的。如果队医认为可以戴口罩上场，就应该应该撤职。如果队医不敢反对戴口罩上场，我可以理解。

虾皮之前猎头还约过我，竟然这样了呀！

那个剃刀自己以前不懂讲网络安全也差不了多少。//@加菲众:数学的好处就是无法假装下去。//@Metaverse:你得知道，有些人无法理解复杂一点的数学概念，脑子不好很可能是生理问题//@奥卡姆剃刀:糊涂成这样的人不少，硬撅到这种地步的罕见，人才啊