AI动态
AI基础
AI大模型
AI智能体
AI应用
AI编程
AI安全
AI学院
网安动态
安全运维
网站防护
软件安全
渗透测试
拒绝服务
漏洞挖掘
安全学院
区块动态
区块基础
智能合约
DeFi金融
区块开发
区块安全
区块学院
最新发表
最新回复
我的帖子
资讯
电脑
手机
运维
编程
教程
导读
设计中心
2018-3-30 13:00 |来自: 互联网 390 0
Xuanwu Lab Security Daily News
"大家春节快乐,假期期间的安全动态会分两次推送,今天是【合辑(上)】,明天会有【合辑(下)】 "
Nicolas Krassas @Dinosn
[Android]Android: RKP EL1 Code Loading Bypasshttps://t.co/TjMSkfEBiC
"三星 Android RKP 相关的三个漏洞:https://bugs.chromium.org/p/project-zero/issues/detail?id=980https://bugs.chromium.org/p/project-zero/issues/detail?id=981https://bugs.chromium.org/p/project-zero/issues/detail?id=982"
Project Zero Bugs @ProjectZeroBugs
[Android]Android: RKP Memory Corruption via "rkp_set_init_page_ro"https://t.co/GNjYcLFazY
" Samsung: RKP Memory Corruption via "rkp_set_init_page_ro":http://t.cn/RJPtktf"
[Android]Samsung: Stack buffer overflow in OTP TrustZone trustlethttps://t.co/Oi717EcJXA
"Samsung: Stack buffer overflow in OTP TrustZone trustlet:http://t.cn/RIUnsLh"
[Android]Unlocking The Screen Of An LG Android Smartphone With AT Modem Commandshttps://t.co/kHeXvdAbCF
" 通过发送 AT 调制解调器命令,解锁 LG Android 手机屏幕:http://t.cn/RJPtkc5"
Darien Huss @darienhuss
[Attack]Just published research on a CN APT targeting RU using LSB Stego to embed stage 2s in bitmaps:…https://t.co/42dgz8gLMM
" ProofPoint 前天发布的一篇关于中国攻击俄罗斯和白俄罗斯的 APT 报告:https://t.co/42dgz8gLMM"
x0rz @x0rz
[Attack]Large-Scale Phishing Campaign Targeting Egyptian Civil Societyhttps://t.co/zawwOin2MW#phishing #APT #**shiphttps://t.co/2BXGJWV6CG
"Nile Phish - 针对埃及公民团体的大规模钓鱼行动:http://t.cn/RJPtkfghttps://t.co/2BXGJWV6CG"
b33f @FuzzySec
[Attack]Exposing EITest campaign: Following a Malware distribution campaign -https://t.co/jrUfIRbjgN
"揭露 EITest 攻击行动:http://t.cn/RJPtkIJ"
[Attack]Russian APT 29 group launched cyber attacks against Norwegian authoritieshttps://t.co/TObUtVzMgs
"俄罗斯 APT 29 组织发起针对挪威当局的网络攻击:http://t.cn/RJPtkM4"
[Attack]Dark web’s largest host ‘Freedom Hosting II’ hacked by Anonymoushttps://t.co/TNAprLkMpn
"暗网最大的主机 'Freedom Hosting II' 被黑:http://t.cn/RJPtkMp"
Securityblog @Securityblog
[Browser]Metasploit module for Cisco WebEx Chrome Extension Remote Command Executionhttps://t.co/h3OaKP8yux
" 用于攻击思科 WebEx Chrome 扩展的 Metasploit 模块,可实现远程命令执行:http://t.cn/RJPtkMg"
[Browser]Apple WebKit: Type confusion in RenderBox with accessibility enabledhttps://t.co/R3J3jFvXd1
" WebCore::AXObjectCache::gAccessibilityEnabed 启用时,WebKit RenderBox 存在一个类型混淆漏洞(CVE-2017-2373):http://t.cn/RJPtkx6"
[Browser]Apple WebKit: Type confusion in HTMLKeygenElementhttps://t.co/KwI7aCz5Da
" Apple WebKit: Type confusion in HTMLKeygenElement(CVE-2017-2369):http://t.cn/RJPtkx1"
Ivan Fratric @ifsecure
[Browser]Also derestricted some other bugs:https://t.co/ERxPwwO29I, 999 (userAgentShadowRoot fun, affecting both Blink and WebKit) and 1038.
" Google Chrome: Type confusion in HTMLKeygenElement::shadowSelect(),Chrome 55 版本已经修复该漏洞http://t.cn/RJPtkJS"
(((JaysonEStreet))) @jaysonstreet
[Browser]How to change Firefox’s Sandbox security levelhttps://t.co/rbvsnl7igK
"如何修改 Firefox 沙箱的 Security Level:http://t.cn/RJPtkiG"
Francisco Alonso @revskills
[Browser]Open-sourcing Chrome on iOS!https://t.co/FM6jnquzlJ
"iOS 版本的 Chrome 开源了:http://t.cn/RxE0ojQ"
[Browser]Chromium Internals - Lifetime of a navigationhttps://t.co/f62F0w7aCc
" Chromium 浏览器导航的生命周期:http://t.cn/RJPtki8"
Virus Bulletin @virusbtn
[Browser]New **: The journey and evolution of God Mode in 2016: CVE-2016-0189https://t.co/GWtAEgoGeHhttps://t.co/2YR5NUxUdY
" 2016 年 'God Mode' 的演化历程 IE VBScript CVE-2016-0189:http://t.cn/RJPtk6whttp://t.cn/RJPtk6i"
Quan @Quanbto
[Bug Bounty]Annual Google VRP Blog is out!https://t.co/UWCtwen3PE
" Google VRP(漏洞奖励项目) 2016 年总结:http://t.cn/Rxemu3Q"
[Detect]Detecting In-Memory Mimikatzhttps://t.co/ara4U7IRb5
"检测内存中的 Mimikatz:http://t.cn/RJPtk1a"
jibar0 @jibar0back
[Exploit]Publicado el exploit del hackeo a Cellebrite Cellexploits01.tar.gzhttps://t.co/xCeV2fcx18
" Cellebrite Cellexploits01.tar.gz 下载链接:http://t.cn/RJPtk13"
[Fuzzing]Fuzzing results for various interpreters.https://t.co/iJFWSC27Do
" 研究员 Andrzej Dyjak 对 PHP/Python 等解释器的 Fuzz 结果:http://t.cn/RJPtkBL"
Robert Swiecki @robertswiecki
[Fuzzing]Fuzzing OpenSSL1.1.0 and Apache2.4 with hongfuzz: step-by-step examples powerful corpora:https://t.co/bTwb1ObiH9https://t.co/TbLM408sES
"Fuzzing OpenSSL1.1.0 and Apache2.4 with hongfuzzhttp://t.cn/RJPtkBkhttp://t.cn/RJPtkrq"
Daniel Bilar @daniel_bilar
[Hardware]Printer security testing cheat sheet
黑名单|存档|手机版|网站地图|免责条款|法律声明|隐私保护|HACKBASE
GMT+8, 2026-6-15 16:38
Powered by Discuz!