This commit is contained in:
ubuntu-master 2025-11-01 15:00:02 +08:00
parent 791beb9915
commit cfd9270aa8

View File

@ -3,7 +3,7 @@
> 本文由AI自动生成基于对安全相关仓库、CVE和最新安全研究成果的自动化分析。
>
> 更新时间2025-11-01 11:50:41
> 更新时间2025-11-01 14:03:38
<!-- more -->
@ -19,6 +19,10 @@
* [真实复现Redis Lua脚本 UAF 漏洞可导致远程代码执行CVE-2025-49844](https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247495146&idx=1&sn=96d740a86e8d9aae0437d4882834ef5d)
* [实战攻防OA 与通用系统配置文件后利用路径与解密技巧](https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247493035&idx=1&sn=951abe7eca15e88f629fa1dcaf86f073)
* [连载红蓝对抗-攻防演练-WEB安全渗透测试SQL注入漏洞深度解析](https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484830&idx=1&sn=07b8a85f89d2816332a98968035cecd8)
* [案例HubSpot 账户接管漏洞:参数暴力破解](https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247486665&idx=1&sn=5a7ebd057dd281cbd1e2d0aa4388fecf)
* [国外软件漏洞预警!!!拒绝服务通杀全平台](https://mp.weixin.qq.com/s?__biz=Mzg4MzY3MTgyMw==&mid=2247484169&idx=1&sn=16d3899502f30a6f9a756535e463fb22)
* [Nacos nodes接口存在敏感信息泄露漏洞 附POC](https://mp.weixin.qq.com/s?__biz=Mzk2NDkwMDg3Nw==&mid=2247483774&idx=1&sn=3e0e4d3fa507babbabeaa787c176e564)
* [JAVA安全研究 鉴权绕过 Spring与Shiro对于\"/\"和\";\"的处理差异导致绕过 CVE-2020-1957](https://mp.weixin.qq.com/s?__biz=Mzk3NTE3MjU4Mg==&mid=2247484406&idx=1&sn=6378de6f0b6c01f8ca614e22a4c92e79)
### 🔬 安全研究
@ -27,6 +31,7 @@
* [网安技术入门:从漏洞原理到实战防御的 3 个核心维度(附工具包 + 视频课)](https://mp.weixin.qq.com/s?__biz=MzkzNzk5MjEyNg==&mid=2247486366&idx=1&sn=c09c172ea6a4dd0a4144a5832fd00c15)
* [Magisk Root隐藏方案Shamiko模块原理解析](https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247498983&idx=1&sn=2f10965288fba5e84b5672624460d85b)
* [全球反无人机C-UAS作战经典战例研究及对我启示](https://mp.weixin.qq.com/s?__biz=MzkyMjY1MTg1MQ==&mid=2247497128&idx=1&sn=8cb05d690992a63b101da713fd6d5bf3)
* [AI Agent安全框架A2AS](https://mp.weixin.qq.com/s?__biz=MzkzMTY0MDgzNg==&mid=2247485129&idx=1&sn=1a8a26acb806ad3687c0c580d1b909cf)
### 🎯 威胁情报
@ -38,6 +43,7 @@
* [安天AVL SDK反病毒引擎升级通告20251101](https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650212939&idx=1&sn=5238140e6d4fed5997191d77061af3f4)
* [安全月报| 10 月加密货币攻击与诈骗损失合计超 7.4 亿美元](https://mp.weixin.qq.com/s?__biz=MzU1OTc2MzE2Mg==&mid=2247489975&idx=1&sn=6d8cb2968bdb7d638f1870916e28a36b)
* [俄罗斯黑客针对乌克兰政府组织发起攻击|全球 Android 用户面临 NFC 恶意软件威胁支付交易或被克隆](https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650613020&idx=1&sn=49369df66e29b10eb42d5c65b12bead7)
* [伊朗APT组织 MuddyWater的新武器用“星链”当诱饵的安卓间谍行动](https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247487054&idx=1&sn=df703f4021942d789a81c6f306a81fe6)
### 🛠️ 安全工具
@ -46,12 +52,14 @@
* [带你解锁编码新世界!-随波逐流CTF编码工具使用教程121 -费娜姆密码Fenham Cipher](https://mp.weixin.qq.com/s?__biz=MzU2NzIzNzU4Mg==&mid=2247491227&idx=1&sn=260f21419a63ffba1956b0cae9868e33)
* [Slack 安全服务集成化工具平台](https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247489093&idx=1&sn=cdbd84211273dea2718022ca4d3b7dd6)
* [手把手教会你白加黑无敌免杀(附工具和源码)](https://mp.weixin.qq.com/s?__biz=MzkzNTgzOTg4Mg==&mid=2247486298&idx=2&sn=368933088cb386e12f231ff32fa14706)
* [ActiveMQ漏洞检测工具发布一键检测守护企业安全](https://mp.weixin.qq.com/s?__biz=Mzk3NTQ2MjAxMQ==&mid=2247483870&idx=1&sn=d91957783a27107f1fe818e7c7763843)
### 📚 最佳实践
* [《网络数据安全防护体系运营能力评价指南》团体标准发布](https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247499424&idx=6&sn=240fd326e08d6f506836cfe4222bac4f)
* [网络工程师的“白嫖”指南手把手教你用免费IPv6搭建企业级ADVPN专网](https://mp.weixin.qq.com/s?__biz=MzI4NjAzMTk3MA==&mid=2458862164&idx=1&sn=150c470fac05dec44abe7fa8c666fc53)
* [一图读懂《国家网络安全事件报告管理办法》11月1日施行](https://mp.weixin.qq.com/s?__biz=MzkxMzQwNDcxNg==&mid=2247487252&idx=1&sn=8d4d03935e52086a70a5201c87d65fa5)
* [《国家网络安全事件报告管理办法》今起实施!](https://mp.weixin.qq.com/s?__biz=MzI4MDQ1MzQ0NA==&mid=2247494397&idx=2&sn=b88f3796ebb961a81fe507ea3671025f)
### 🍉 吃瓜新闻
@ -98,6 +106,12 @@
* [密码赋能 信智未来丨三未信安亮相2025商用密码论坛](https://mp.weixin.qq.com/s?__biz=MzA5ODk0ODM5Nw==&mid=2650332561&idx=1&sn=92d298dd07dc44e16a9f22b743ce543c)
* [赛欧思一周资讯分类汇总2025-10-27 ~ 2025-11-01](https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247490220&idx=1&sn=39bce75f0830250a650f4ec0a5cb5520)
* [OpenAI推出Aardvark自动查找和修复代码缺陷的GPT-5代理](https://mp.weixin.qq.com/s?__biz=MzA4MzMzOTQ4Mw==&mid=2453672727&idx=1&sn=d09106f38bdcbfb2aaf19ed0113f4402)
* [Less-7 GET-Dump into outfile-String](https://mp.weixin.qq.com/s?__biz=MzA3NDE0NTY0OQ==&mid=2247488664&idx=1&sn=0203ef0ed3f719e06ce0f9855205f666)
* [一款全自动解密解码神器 - Ciphey](https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247514458&idx=1&sn=bfbf6c4289118ca914676ce4ad9ee99f)
* [cyberstrikelabPT-7,PT-13](https://mp.weixin.qq.com/s?__biz=MzkzNzg4MTI0NQ==&mid=2247488416&idx=1&sn=a5df782402a8a36df21105054fc4f9e9)
* [秦安:玉门关外有新疆!突破四千点,中国股市的自信从哪里来?](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650481841&idx=1&sn=a2175d71a9b78c75e694a70bf45f302c)
* [秦安:统一进行时,三篇《新时代告台湾同胞书》,入情入理,势不可挡!](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650481841&idx=2&sn=e8140c4af60e48205fb0a7b0f29c60a0)
* [工业网络安全周报-2025年第41期](https://mp.weixin.qq.com/s?__biz=MzU3ODQ4NjA3Mg==&mid=2247567747&idx=1&sn=fe4d7535d5099edadfcc69c31f52e1a8)
## 安全分析
(2025-11-01)