每日安全动态推送(12-06)

渗透技巧 2年前 (2021) admin
788 0 0
Tencent Security Xuanwu Lab Daily News


• [Blockchain] GitHub – slowmist/Knowledge-Base: Knowledge Base 慢雾安全团队知识库:
https://github.com/slowmist/Knowledge-Base

   ・ 慢雾安全团队整理的区块链安全知识库 – Jett


• [Virtualization] Cloud Service Provider security mistakes:
https://github.com/SummitRoute/csp_security_mistakes

   ・ 云服务提供商(AWS,GCP,Azure)的历史安全漏洞整理 – Jett


• [Linux] [CVE-2021-42008] Exploiting A 16-Year-Old Vulnerability In The Linux 6pack Driver:
https://syst3mfailure.io/sixpack-slab-out-of-bounds

   ・ Linux 6pack 驱动 Slab 越界写漏洞分析(CVE-2021-42008) – Jett


• Pandas Tutor visualizes how your Python code transforms dataframes:
https://pandastutor.com/

   ・ Pandas Tutor visualizes how your Python code transforms dataframes. – lanying37


• Hackers take $196 million from crypto exchange Bitmart, security firm says:
https://www.cnbc.com/2021/12/05/hackers-take-196-million-from-crypto-exchange-bitmart-in-large-breach.html

   ・ 加密货币交易平台 Bitmart 被黑,被盗 1.96 亿美元 – Jett


• GitHub – kellyjonbrazil/jc: This tool serializes the output of popular gnu linux command line tools and file types to structured JSON output. This allows piping of output to tools like jq.:
https://github.com/kellyjonbrazil/jc

   ・ 一款将日常使用的命令行工具输出 JSON 化的工具 – Jett


• SSRF vulnerability in AppSheet – Google VRP:
https://nechudav.blogspot.com/2021/12/ssrf-vulnerability-in-appsheet-google.html

   ・ SSRF vulnerability in AppSheet – Google VRP – Jett


• This Microsoft Windows RCE Vulnerability Gives an Attacker Complete Control – Synack:
https://www.synack.com/blog/this-microsoft-windows-rce-vulnerability-gives-an-attacker-complete-control/

   ・ Windows Remote Desktop Client RCE 漏洞分析(CVE-2021-34535) – Jett


• PewSWITCH:
https://github.com/0xInfection/PewSWITCH

   ・ 开源交换机 FreeSWITCH 的扫描和漏洞利用工具 – Jett


* 查看或搜索历史推送内容请访问:
https://sec.today

* 新浪微博账号:腾讯玄武实验室
https://weibo.com/xuanwulab


原文始发于微信公众号(腾讯玄武实验室):每日安全动态推送(12-06)

版权声明:admin 发表于 2021年12月6日 上午4:36。
转载请注明:每日安全动态推送(12-06) | CTF导航

相关文章

暂无评论

您必须登录才能参与评论!
立即登录
暂无评论...