{ "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247513636&idx=1&sn=66bc5f0cac446268cb859e38faa2b841": "四个关键漏洞使 HPE Aruba 设备面临 RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486384&idx=1&sn=6cded6c301c425146633b7c8e92b9ae2": "用友crm客户关系管理pub∕downloadfile.php接口存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490163&idx=1&sn=0af69d90d567c84ea23336cde986f7a8": "代码审计-某产品高清智能录播系统漏洞分析附未公开POC", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494519&idx=1&sn=cd24e7e546ec5cd027e8ca018f499bf4": "漏洞挖掘之众测厂商 第三方登录RedirectUrl劫持漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488062&idx=1&sn=5e3f1e901718ee760c9271676d075758": "【漏洞预警】Apache ActiveMQ Jolokia 和 REST API 未授权访问漏洞CVE-2024-32114", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458553432&idx=1&sn=93377c71147ef00b8e58571093d5ab55": "CVE-2023-4427：ReduceJSLoadPropertyWithEnumeratedKey 中的越界访问", "https://mp.weixin.qq.com/s?__biz=Mzg4OTkwMDc1Mg==&mid=2247484729&idx=1&sn=b2920455891f256e016b74122977490b": "YzmCMS pay_callback.html RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247485256&idx=2&sn=44579672e179f0268bd6daac499832e2": "【漏洞复现】CVE-2024-1512", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247485256&idx=1&sn=5a1e8635a4c0a68a5c58662d47a08f36": "【漏洞复现】CVE-2024-1698", "https://mp.weixin.qq.com/s?__biz=Mzg2OTYzNTExNQ==&mid=2247484965&idx=1&sn=396cceb9cd98393868c20c1876aa8957": "[漏洞复现] CVE-2024-33786 中城科信票务管理平台 任意文件上传", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649791059&idx=1&sn=82bf570f4c7002b524bb4eacc1f7fb0d": "俄罗斯 APT28 利用 Microsoft Outlook 漏洞攻击捷克、德国实体", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494519&idx=1&sn=cd24e7e546ec5cd027e8ca018f499bf4&chksm=e8a5e114dfd268025b28a508644eff19bd5ccf522b270bc7a6e545a340e65e4eb88e83aef43e&scene=58&subscene=0": "漏洞挖掘之众测厂商 第三方登录RedirectUrl劫持漏洞", "https://mp.weixin.qq.com/s?__biz=MzUxMjc0MTE3Mw==&mid=2247494678&idx=1&sn=4cdffd80c296f3df40b773da5943d796": "两个Google Vertex AI平台漏洞曝光：可能导致权限提升与敏感数据外泄", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247492614&idx=1&sn=40f082284e0b14fd77c82d95bbeb9185": "用友漏洞一键探测利用", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487497&idx=1&sn=4a47b98c0b29cd4d3e7c4f30685e1247": "【漏洞预警】 用友BIP 数据库配置信息泄露", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487497&idx=2&sn=adb385b0fccd4af9d9ad9d439bce5640": "【漏洞预警】D-Link-DNS 多款产品未公开接口∕sc_mgr.cgi 存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487497&idx=3&sn=1cdbe6f7a8137e5e2626d4e358c1ef93": "【漏洞预警】 易宝OA-GetProductInv SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487497&idx=4&sn=e2d16220eb00621420899460b1a95941": "【漏洞预警】易思智能物流无人值守系统SQL注入", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247496792&idx=1&sn=561979247dfc36401fe9815413c3f88a": "CVE-2024-25600：WordPress Bricks Builder RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065974&idx=1&sn=d6789e893634a0f2fb9c34b2bfb0a8f9": "【安全圈】打补丁要快！0Day漏洞正在被黑客广泛利用", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664229682&idx=1&sn=06d6932fae0b8e2e54feda32c9c169ab": "2024年网络安全漏洞研究人才培养交流活动成功举办", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664229682&idx=4&sn=4f4906e3ee86b96a4d323bf891efdae0": "CNNVD ∣ 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzU0NDI5NTY4OQ==&mid=2247486145&idx=1&sn=06229e2205d5dd9e99716999b4f1aa2e": "LLM大模型安全（4）- 供应链漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzI2NzIyMw==&mid=2247488304&idx=1&sn=c0db143fcd6865fdd3482b955dd94abd": "BlockSec和OKX Explorer达成合作，携手提升链上数据安全与合规等级", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484677&idx=1&sn=bb89036b82c59a0e1e8b06227a9e9768": "【漏洞分享】edu通杀 新中小学智慧校园信息管理系统 Upload 任意文件上传", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485712&idx=1&sn=e15d7dda1a02527db2c340f56df4f3ea": "【漏洞复现】某平台-testdb-info-leak信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133388&idx=2&sn=8fe7297f29148fa035db128b29e8dc99": "远程代码执行风险威胁用户安全，Zoom紧急修复多个安全漏洞；颠覆传统安全架构，Zscaler创新发布新型零信任分段方案 ∣ 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133388&idx=2&sn=8fe7297f29148fa035db128b29e8dc99&chksm=bd15a51f8a622c096ef4441d0b5acb3ee39ef865e5650f4df483a8648b528a3509fe57972cd1&scene=58&subscene=0": "远程代码执行风险威胁用户安全，Zoom紧急修复多个安全漏洞；颠覆传统安全架构，Zscaler创新发布新型零信任分段方案 ∣ 牛览", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502432&idx=1&sn=d3405bf69adda60e3be13962d038b6aa&chksm=fe79eef8c90e67eead814333282edff4d7e247d6ba9e9ba1895fff6354e808e4fa84048a0cd1&scene=58&subscene=0": "【已复现】Fortinet FortiManager 身份认证绕过漏洞(CVE-2024-47575)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664229682&idx=1&sn=06d6932fae0b8e2e54feda32c9c169ab&chksm=8b59e9cbbc2e60dd8d6dc37797f6608494298f22b5250c7326cf864063e039f776f4d7dc0847&scene=58&subscene=0": "2024年网络安全漏洞研究人才培养交流活动成功举办", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664229682&idx=4&sn=4f4906e3ee86b96a4d323bf891efdae0&chksm=8b59e9cbbc2e60dda8a2633578ff2e76d88a3a00e52dba1a54ee0b2b9f554066431871d24cd8&scene=58&subscene=0": "CNNVD ∣ 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247485595&idx=1&sn=b4c87d04e1659f11fad8f2f125985751&chksm=cfa49360f8d31a76e5d3880e51cd8f9b0ab1df47e86729adf04ea6d1f1202fac72fae5903fbe&scene=58&subscene=0": "大语言语言模型安全攻击以及AI供应链漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521498&idx=1&sn=f0af27f6b0e814c92846ea129bcee155&chksm=ea94a5b0dde32ca62dddf91f42a9fa2b36402ffb856469973f83a6a88e24d6910dcc53072ef4&scene=58&subscene=0": "PostgreSQL 高危漏洞可导致环境变量被利用", "https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651388483&idx=1&sn=070fb6976ee52108d263858115ea9bfd&chksm=8d398bcbba4e02ddbe0183f79c2682bbf1cab54e4ba6bb0697fdc56e297e7303aa9eb938b9e6&scene=58&subscene=0": "2024年网络安全漏洞研究人才培养交流活动成功举办", "https://mp.weixin.qq.com/s/O2Ohp_ceYrTo8hppX09fkw": "(0day)微信公众号商家收银台小程序系统存在前台任意文件上传漏洞", "https://mp.weixin.qq.com/s/tbEXIAPT-Vumch-WyoGZHQ": "代码审计-某oa任意文件读取(1day)", "https://mp.weixin.qq.com/s/73CXvF4ejvgS40OetzXr8A": "(0day)全新优客API接口管理系统代码审计", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487335&idx=1&sn=c2800f225873a4a1b38711bacba10316": "AI代码审计和POC编写", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712071&idx=1&sn=98356c1f6829546d47af1e4d43f89ace": "Fckeditor编辑器漏洞汇集", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517203&idx=2&sn=3074826837ddd653a7d1ae03a600a0b4": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487499&idx=1&sn=4ad7e59489c09ab80bee906e929b311a": "【漏洞预警】 用友BIP 数据库配置信息泄露", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487499&idx=3&sn=b3cf1540ab72404aab438e963c5e761d": "【漏洞预警】 易宝OA-GetProductInv SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492449&idx=2&sn=ded00a05c99093340d9c413be00b1a5a": "PostgreSQL数据库存在高危漏洞CVE-2024-10979（8.8）", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247523915&idx=1&sn=0522e35aa0afa2167e0dfd9d5a6954d7": "CVE-2024-28888：福昕阅读器中使用释放后导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486133&idx=1&sn=a795a853e80c985de5fceca4309365ce": "(0day)某全新UI自助打印微信小程序系统SQL+RCE漏洞代码审计", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545126&idx=1&sn=b2f2e3d1dba89c587651768a66070b2d": "攻防演练 | 一次近源渗透", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492730&idx=1&sn=4830f7a0e4dfa7e50b8fb0ccc7e0e0b9": "一款java漏洞集合工具", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307299&idx=1&sn=467809755fdcc647cdde9f67ad9a27a2": "打补丁要快！0Day漏洞正在被黑客广泛利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307299&idx=4&sn=faa8ef20c4f618771d92d2e34863625b": "Velociraptor：一款终端节点可视化与数据收集工具", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793147&idx=3&sn=c17de8d66d7e37e8209eab45ef7f5654": "Palo Alto Networks 确认存在新的防火墙0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603612&idx=4&sn=1ca7d7d27c71f41ef3992ddac7cda038": "Vcenter图形化漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247488171&idx=1&sn=dbbce680730d50271fcb4e886e029f36": "VulToolsKit一把梭漏洞Exploit合集", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491421&idx=1&sn=653b49f157760ea962f45f3e9471858c": "漏洞预警 | Apache ZooKeeper身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491421&idx=2&sn=89f3fc90da6871059bb0ea398e1ffb26": "漏洞预警 | XStream栈溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491421&idx=3&sn=eabce5e15b6befff94c2407acd4a5aa9": "漏洞预警 | HPE Aruba Networking Access Points命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488371&idx=2&sn=3ad1f97fe2651cfd09c4aa8767ee6a6d": "【漏洞复现】用友YonBIP高级版存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486789&idx=1&sn=9e271a3346eed986ecc5b7a4aece7f88": "compiler explorer 轻松从汇编角度理解代码", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486789&idx=2&sn=f8617e893d02f1eaca70fb0f9661a3e3": "网太CMS漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497601&idx=1&sn=1b31fff83d5276667f7ead2ae5de2a6b": "微软2024年11月份于周二补丁日针对90漏洞发布安全补丁", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497601&idx=2&sn=413b3330c9fde967c520582aefbd4bd6": "2023年最易被利用的漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247657&idx=1&sn=b0600f03ef9bbffbcaa4fbf1fe0d87f7": "CVE-2024-25600：WordPress Bricks Builder RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0MzI2NzQ5MA==&mid=2247486636&idx=1&sn=5d9cfbe6b8393b15c60b04ca9c2c9588": "phpstudy_2016-2018_rce 漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487499&idx=4&sn=69d6613ba3812956a0388203252d7a8f": "【漏洞预警】易思智能物流无人值守系统SQL注入", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247484847&idx=1&sn=ab525f7b54b1842379879fcb44279dfe": "记录日常挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066024&idx=4&sn=46592438737abae8701b9ba1b7160d86": "【安全圈】俄罗斯黑客利用文件拖放、删除操作触发 Windows 0day 漏洞攻击乌克兰目标", "https://mp.weixin.qq.com/s?__biz=Mzk0MzI2NzQ5MA==&mid=2247486684&idx=1&sn=b88c209774a7a72edb5ffd3d8185da12": "VSFTPD 2.3.4 笑脸漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603615&idx=3&sn=445a8a9089db3200dfb6c7fcbbe83e1b": "某系统因属性污染导致的RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486126&idx=1&sn=f95aeac1e9863e39388748be5f93f44f": "ViewState反序列化复现踩坑记录", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486146&idx=1&sn=66ebbdd861f6fdcee3f8928dc63a85be": "某全新H5购物商城系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486054&idx=1&sn=29c2f89072a7f181739354113076ea74": "「漏洞复现」金华迪加 现场大屏互动系统 mobile.do.php 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307300&idx=3&sn=c4876146dad8da82db2e3decbfc57648": "国家密码管理局发布《关键信息基础设施商用密码使用管理规定（征求意见稿）》", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247502886&idx=1&sn=17c6c12516bf55bc03a700f8a47dee89": "应用程序系统中的 SQL 注入 （CVE-2024-50766）", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488389&idx=2&sn=2bea1165ad80d38c1329593ca08c6e55": "【漏洞复现】九思OA dl存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066024&idx=4&sn=46592438737abae8701b9ba1b7160d86&chksm=f36e7ca8c419f5be0b5de8218474b566a05a2871e02c5f1b86f0a13769a0651d6087bd35a84d&scene=58&subscene=0": "【安全圈】俄罗斯黑客利用文件拖放、删除操作触发 Windows 0day 漏洞攻击乌克兰目标", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517100&idx=1&sn=f63f4fb28dd9f98701307759287886e3": "原创 | 一文看懂服务器请求伪造漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492480&idx=2&sn=35313ec934a5220db4c34962af10b1b4": "Apache Airflow 漏洞暴露日志中的敏感数据CVE-2024-45784（7.5）", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247485439&idx=1&sn=3fd7e4cef57edca8e73104f8af38fc05": "分享SRC中后台登录处站点的漏洞挖掘技巧", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524319&idx=2&sn=7e837ef59037b7c182b95ffc6089cb20": "CVE-2024-45784：Apache Airflow 漏洞暴露日志中的敏感数据", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524319&idx=4&sn=f564c214e9b878af89b788239034bd2e": "BrazenBamboo APT利用 FortiClient 漏洞通过 DEEPDATA 窃取 VPN 凭证", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066040&idx=2&sn=cf11d094cb7fc2770df2100227dc34db": "【安全圈】安全公司曝光黑客利用 Office 已知漏洞散播 Remcos RAT 木马程序", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524319&idx=3&sn=44ca66db05ada0b23d2a24e112e09e93": "Mozilla Firefox 0-day：URL 协议处理程序泄漏 [CVE-2024-9398、CVE-2024-5690]", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492733&idx=1&sn=d41a5ddfe26f0a9dfaa02fedafee911a": "JavaSecLab 一款综合Java漏洞平台", "https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651147826&idx=1&sn=82db846319ddae363d8ac74312d12f8b": "【资料】美军对我军合成作战旅的认知总结", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066040&idx=3&sn=628c0be39463e5a5db076252eae42974": "【安全圈】物联网云平台 OvrC 曝一系列漏洞，黑客可远程执行恶意代码", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260164&idx=1&sn=dee2d2d3315798ae2ee404f11f452d9f": "如何将低危的 SSRF 盲注升级为严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489038&idx=1&sn=38d1bc56bfc8d56f1a6522b3081164f1": "记一次某SRC的漏洞挖掘过程|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247504511&idx=2&sn=02a617bd236ecf22b9f4b7d6b25c7f9a": "严重的身份验证绕过漏洞影响 400 万个网站", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492738&idx=1&sn=e1471dab8f567dbf0f4e83c999b1527b": "masscan全端口扫描==>httpx探测WEB服务==>nuclei&xray漏洞扫描 | 解放双手", "https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247509142&idx=1&sn=7a9bf881915c113f53359c76b2c10c49": "密码破解的尽头是 “哥 ，来根……”", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491444&idx=1&sn=14608727477b5a267d3f75284547dcc7": "漏洞预警 | RabbitMQ权限验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491444&idx=2&sn=871000243b3a84ba1157944f0f8fdbee": "漏洞预警 | 宏景HCM任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491444&idx=3&sn=2d1c03adab2dcae92301e0c62550c2c9": "漏洞预警 | 蓝凌OA SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247509326&idx=1&sn=570638ea0ce6a3b289d77d2247e5d57c": "BrazenBamboo APT 利用 FortiClient 零日漏洞窃取用户凭证 |China APT", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247489498&idx=1&sn=49ceb0446f31d62653ef7dd2505388c0": "[渗透工具]XXL-JOB漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247489498&idx=2&sn=433215d4f66547bb871b6d516c154124": "【必刷靶场】JavaSecLab-Java漏洞平台", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488410&idx=1&sn=00d2155ead01651c376774f463157bf3": "【未公开】某公司SRM智联云采系统inquiry存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066040&idx=2&sn=cf11d094cb7fc2770df2100227dc34db&chksm=f36e7cb8c419f5ae9268e1d2eb9675ef94bccbcfe66627cb209b0883944215f205a8d17b7028&scene=58&subscene=0": "【安全圈】安全公司曝光黑客利用 Office 已知漏洞散播 Remcos RAT 木马程序", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066040&idx=3&sn=628c0be39463e5a5db076252eae42974&chksm=f36e7cb8c419f5ae9694e18d60dde2a26e6a3cdec1633acf1fe266e96be9e59868eaad6f37a5&scene=58&subscene=0": "【安全圈】物联网云平台 OvrC 曝一系列漏洞，黑客可远程执行恶意代码", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486157&idx=1&sn=0eb5b289e5d313ff2f2ad3df252a5d5f": "某全新H5购物商城系统存在前台任意文件上传漏洞(RCE)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492765&idx=1&sn=e18518b6eba34c7864e6d957cd37ff5f": "僵尸网络利用GeoVision零日漏洞入侵已停产设备", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492765&idx=2&sn=e224f07a4c556302ed2013bcdf25a5f1": "Palo Alto Networks确认近期披露的零日漏洞正在被积极利用", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492765&idx=3&sn=01d577e47672144123dfd3940c1da101": "NSO 集团在 Meta 所有公司起诉后仍然使用 WhatsApp 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519321&idx=2&sn=dc8716f9fcab81c2277f69ca05988f6b": "工具 | 集成高危漏洞exp的实用性渗透工具", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499683&idx=1&sn=23b5001cd5e4272d908cf85c0d71263d": "一键检测 17 个蓝凌 OA 历史漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489220&idx=1&sn=e2a2c434a0097ee0fb4fb89b17b1fc15": "ArcGIS 地理信息系统 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247485612&idx=1&sn=b87343f522578525738b25e651a30307": "CVE-2016-2183 windows漏洞修复指南", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247490413&idx=1&sn=6ca7f49ea787ea876726f5c8f4be6c46": "ViewState反序列化复现踩坑记录", "https://mp.weixin.qq.com/s?__biz=Mzk0MDQzNzY5NQ==&mid=2247493031&idx=1&sn=21ad65e6ba6fa690057bf1b717d89cab": "【OSCP-Medium】adria", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484315&idx=1&sn=f4aa02a7e95ecbc0b1052e97591654d0": "【漏洞复现】英飞达医学影像存档与通信系统webservices接口存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517121&idx=1&sn=d93187139204f6dd92101f34c4cb0981": "aiohttp路径遍历漏洞分析(XCE-2024-1472)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507405&idx=1&sn=724c4f04b89e17186e10643a70168151": "速修！宝兰德BES中间件远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247534105&idx=2&sn=b8ad0236e78d31c7e936fa98d5b2f0db": "打补丁要快！0Day漏洞正在被黑客广泛利用", "https://mp.weixin.qq.com/s?__biz=MzkyNDUxNTQ2Mw==&mid=2247485556&idx=1&sn=eaa0ff13c10fad4d5418731121ca9ca2": "安全公司曝光黑客利用 Office 已知漏洞散播 Remcos RAT 木马程序", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484440&idx=1&sn=f7f42cf480466e7eb9a5349ff68579a9": "大华智慧园区综合管理平台hasSubsystem接口处存在文件上传漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s/-BgJHt-dDT-u28TM90Mz8w": "Linux 反弹shell", "https://mp.weixin.qq.com/s/1CKfcUXNkkVjEPiXFxSqHw": "vulnhub之Escalate的实践", "https://mp.weixin.qq.com/s/vzUt1EO-EnR5ywMz2PjQuQ": "通达OA前台任意用户登录漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495506&idx=1&sn=368d74c4f6e7a4f2639d84ec46bf77c7": "CNVD漏洞周报2024年第46期", "https://mp.weixin.qq.com/s?__biz=MzIwOTc4MTE4Nw==&mid=2247500623&idx=1&sn=8ed503a44a8900cf66d4714383856900": "鼎信安全 | 网络安全一周资讯", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485533&idx=1&sn=38dacc8d7d5dbb5e91a43eaccbd37140": "【漏洞预警】东胜物流软件-certupload-任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486063&idx=1&sn=87764d2ed6eef32705e262f8515eda5b": "「漏洞复现」九思OA dl.jsp 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545196&idx=1&sn=e5148186ab9f420c71d23cdca8da92f7": "Edusrc | 某证书站漏洞挖掘-绕过验证机制", "https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjU4NA==&mid=2247485564&idx=1&sn=f6351c3df7a5ddd3f073a0a0e52ff363": "2024年20 大网络钓鱼工具", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603664&idx=4&sn=ad840681e2c7bc6414397ec84b0c5741": "一款集成高危漏洞exp的实用性工具", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485716&idx=1&sn=e8a0ad47c5069485e9f60071d1e43025": "【漏洞复现】某平台-down-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MzI2NzQ5MA==&mid=2247486685&idx=1&sn=d196cb28fb4aaa74c58a8614abf54875": "通达OA前台任意用户登录漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247591507&idx=1&sn=4613e1c63793b9eee694aa3d5296ab43": "中国信通院胡坚波：以链式转型加快推进中小企业数字化赋能", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307356&idx=1&sn=42438d895a7baec5b6656688cca7431d": "Palo Alto Networks确认0Day漏洞正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247540683&idx=1&sn=986bdc0a543ecda7828e984aa6189af2": "物联网云平台 OvrC 曝一系列漏洞，黑客可远程执行恶意代码", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291855&idx=1&sn=2416adb9a530214ddc5b1cf128c156f8": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502439&idx=1&sn=89c13a88c1429733d4d3372418dda64d": "安全热点周报：俄罗斯黑客利用 Windows 零日漏洞乌克兰实体进行持续攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583194&idx=1&sn=f14c98ad2f40cba90ed7a487cb12384e": "“看雪漏洞小组”集结！组团挖洞，一起冲击华为漏洞更高奖励", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583194&idx=3&sn=045ec214a07d23eaaaf909f9ee0f186f": "WordPress安全插件“Really Simple Security”惊现严重漏洞，数百万网站面临风险", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487501&idx=1&sn=39d247b0248d6134a3936531fc0ee647": "【漏洞预警】东胜物流软件-certupload-任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521513&idx=1&sn=b60ee79ea2fbcfeaae560373faa7a2cf": "12年来最严重的 WordPress 漏洞，可大规模接管管理员权限", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521513&idx=2&sn=667b6f9c61b6f2d2077659cd4d4cdc70": "僵尸网络利用 GeoVision 0day 安装 Mirai 恶意软件", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247567418&idx=2&sn=19577506ffdc9228b4214d195638595a": "有关漏洞挖掘的一些总结", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500244&idx=2&sn=2c043ef6f5f2a73220f5442c0a23ba95": "【漏洞通告】Apache OFBiz远程代码执行漏洞（CVE-2024-47208）", "https://mp.weixin.qq.com/s?__biz=MjM5MTAwNzUzNQ==&mid=2650510921&idx=1&sn=e4934351ec2c8cb6dbc0aeca15104b40": "倒计时2天！“智效融合，安全护航”·深圳站 第七期「度安讲」 技术沙龙开放报名", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492528&idx=2&sn=12ed7293c2d58a8ff8af2eee52151e30": "【poc】Fortinet FortiManager 中0day CVE-2024-47575 的 PoC 发布", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492528&idx=3&sn=ca32f8d2a6f6e69a0d8f6cb1c3cc86ed": "【poc】TP-Link 中的 DHCP 漏洞可让攻击者远程接管路由器 - PoC 发布", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495506&idx=2&sn=4f47a0a0b8cf7c2347c48af444867c9c": "上周关注度较高的产品安全漏洞(20241111-20241117)", "https://mp.weixin.qq.com/s?__biz=Mzg4MzU3MTcwNg==&mid=2247486025&idx=1&sn=57b3564d52b3979909e7c4ce558cb424": "简单逻辑漏洞学习", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489173&idx=1&sn=38cddcc7195393081437dda1b20e81f5": "【漏洞预警】Apache OFBiz远程代码执行漏洞CVE-2024-47208", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489173&idx=2&sn=8b54bc7f5eac3e68aa9c1b50d0bfe0f0": "【漏洞预警】Apache HertzBeat < 1.6.1 消息通知模版注入漏洞CVE-2024-41151", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247632327&idx=4&sn=48bfb50af682460d968c919e508846b6": "Palo Alto Networks确认0Day漏洞正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=Mzg4MDY1MzUzNw==&mid=2247497926&idx=1&sn=26eb4132f92f9aed012a93735a6b3879": "fastjson < 1.2.66 正则表达式拒绝服务漏洞REDOS", "https://mp.weixin.qq.com/s?__biz=MzkxNTc1MzQyNw==&mid=2247488223&idx=1&sn=179f23ace36083dd36a1f5052b4c6018": "红日靶场（七）WHOAMI Penetration（一）", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524352&idx=2&sn=840f79721a30962446402beb9e179f45": "Redis CVE-2024-31449：如何重现和缓解漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNTYwOTU1Mw==&mid=2650092449&idx=1&sn=ccafc6e2e300c5176b01f01455f66820": "远程代码执行风险威胁用户安全，Zoom紧急修复多个安全漏洞；颠覆传统安全架构，Zscaler创新发布新型零信任分段方案 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517127&idx=1&sn=61549ef4ef11bf847690be40502fd256": "紧急：关键 WordPress 插件漏洞暴露了超过 400 万个网站", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787425&idx=1&sn=6f9cdcc47fe2971c8f27491559a54cb3": "WordPress安全警报：400万网站面临严重认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502147&idx=1&sn=6d2c1227899943ee29dc7f1a17b1cf53": "12年来最严重的 WordPress 漏洞，可大规模接管管理员权限", "https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247487438&idx=1&sn=57b059b3e23609293878846b57fd3d2d": "网络安全认知科普（五）：业务本身也可能就是漏洞，就是风险", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247485505&idx=1&sn=13147a3d93fed1ed458e589239c7dc56": "EDUSRC漏洞挖掘技巧汇总+信息收集各种姿势", "https://mp.weixin.qq.com/s?__biz=Mzg4MDYwNDc5Nw==&mid=2247486363&idx=1&sn=85f3185c117796238c0285ce1443bbea": "Water Barghest组织利用IoT设备漏洞迅速变现的策略", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491445&idx=1&sn=3b3bf547593b9c83bd8067fa2f85da0b": "漏洞预警 | Laravel环境变量注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491445&idx=2&sn=ba14df01b2e491cc6546173a72e6c2dc": "漏洞预警 | D-Link NAS设备远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491445&idx=3&sn=9a49aa4947b71d328766002dc7f115d0": "漏洞预警 | 海信智能公交企业管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247485900&idx=1&sn=4a1c0f14751627a29534c3c7f13a1354": "【未公开】百择唯供应链存在RankingGoodsList2 SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488426&idx=1&sn=8ca95cf35ca24bc8ba0c40172f5dacb5": "【0day 漏洞预警】某统一通信平台存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499683&idx=1&sn=23b5001cd5e4272d908cf85c0d71263d&chksm=ec1dcf8bdb6a469da30be3bb9de87a5e11415411c58b37eb85060e943ea7b097ccecc2f9f16e&scene=58&subscene=0": "一键检测 17 个蓝凌 OA 历史漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495506&idx=1&sn=368d74c4f6e7a4f2639d84ec46bf77c7&chksm=fd74df9bca03568d70f915369a15335bfc87733f37f2443259f039b6d3f497061fb698fe7a2b&scene=58&subscene=0": "CNVD漏洞周报2024年第46期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495506&idx=2&sn=4f47a0a0b8cf7c2347c48af444867c9c&chksm=fd74df9bca03568d4907affed4138435656b4dbb7b298e4dea297fd24796880708c0ffec6763&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241111-20241117)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521513&idx=1&sn=b60ee79ea2fbcfeaae560373faa7a2cf&chksm=ea94a583dde32c95779d3ac2afec31953b99e514551aec14bfc515de9ced953efb77c5563092&scene=58&subscene=0": "12年来最严重的 WordPress 漏洞，可大规模接管管理员权限", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521513&idx=2&sn=667b6f9c61b6f2d2077659cd4d4cdc70&chksm=ea94a583dde32c95f18dabad1da69d1c1444aebf79a867a8ada6e4d24e51a03b28c8eb27076a&scene=58&subscene=0": "僵尸网络利用 GeoVision 0day 安装 Mirai 恶意软件", "https://mp.weixin.qq.com/s?__biz=MzA5OTI3MTE5MQ==&mid=2247485409&idx=1&sn=17c225d46e6c41ea0b6cf9459af70bee": "【Exp】- CVE-2024-10924 WordPress插件Really Simple Security认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502450&idx=1&sn=a1fc8665dfbb9c1703fef3c40ff25310": "【在野利用】Palo Alto Networks PAN-OS 身份认证绕过漏洞(CVE-2024-0012)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492559&idx=3&sn=bd55e8894a88011691ba63e3f45929e2": "Apache Kafka 漏洞将用户数据暴露给潜在攻击者", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492559&idx=4&sn=fc31cfbd66ffb7b1e4867fca91821f2e": "VMware 漏洞（CVE-2024-38812 和 CVE-2024-38813）被广泛利用", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5NzkwNw==&mid=2247485563&idx=1&sn=6403f9b8b5403d8a7a696a8e0e17a046": "CVE-2024-45216 Authentication bypass in Apache Solr", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247502473&idx=3&sn=fc0115150597e30c84b5c8ecb1d968ba": "Palo Alto警告，防火墙管理界面RCE漏洞被攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489264&idx=1&sn=2375259ae986fae83ca35293b7b7dc21": "易思智能物流无人值守系统 PhoneLogin SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485720&idx=1&sn=3bd82b6a8f0001ce306efba3c499f6bf": "【漏洞复现】某平台-Sc-TaskMonitoring-search-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496762&idx=1&sn=835c3bf727a87fe1aad3ea5806d22f61": "【漏洞通告】Apache OFBiz多个远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655348005&idx=1&sn=4c930728fafc77e04d44557a763f493e": "Palo Alto警告，防火墙管理界面RCE漏洞被攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491091&idx=1&sn=d0c7ebe7f059cc62b3719c8bfb99d69d": "记录日常挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247492453&idx=1&sn=4edaf9b04b271a1782f16bcf085d3e2c": "黑盒乱锤某专属SRC到0day代码分析", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484473&idx=1&sn=6a7b9607e939dfc9b833e01adfc8571f": "灵当CRM系统multipleUpload.php接口处存在文件上传漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507405&idx=1&sn=724c4f04b89e17186e10643a70168151&chksm=cfcabed9f8bd37cf08699147911e05b802a7367ecb0fd5122c5c60647403f1c7ad261c992be5&scene=58&subscene=0": "速修！宝兰德BES中间件远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxODI4NDg3Nw==&mid=2247484718&idx=1&sn=8502b1cb852caa8ce0e23e3847b944b6": "Cuppa CMS-任意文件读取CVE-2022-25401", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY5Nzc1OA==&mid=2247484111&idx=1&sn=1d68bc0bb4221a6de04c1b1dc818eafa": "一文读懂SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500250&idx=2&sn=23d9e2dfb43ea4293d20489c3cbccb9e": "【漏洞通告】Palo Alto Networks PAN-OS身份验证绕过漏洞（CVE-2024-0012）", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499470&idx=2&sn=d9bbe418f8309153c86b2c38bdb82f17": "上周关注度较高的产品安全漏洞(20241111-20241117)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486183&idx=1&sn=b38113b15e2fada33cf26c95c9c07714": "【0day】某微信万能门店小程序系统存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MzE1MTQzNw==&mid=2247491024&idx=1&sn=00be4948643b40e24a2b0cca5c99edfc": "专题解读 | 图基础模型最新研究进展", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614168&idx=1&sn=ca9f354a96fac70ba3dfb1e6840380db": "Bypass Cloudflare实现账户接管：密码重置投毒漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793181&idx=1&sn=bcfe157d05c93fa6fc18591227dae4da": "DeepData 恶意软件框架被发现利用尚未修补的 Windows 0day漏洞、Fortinet VPN 客户端", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247488361&idx=1&sn=e560e27ced52b442b1d41ac709a876ff": "黑盒乱锤某专属SRC到0day代码分析", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489988&idx=1&sn=86427522d5972cadf175076db1b99d71": "防火墙管理界面RCE漏洞被攻击者利用，Palo Alto发出警告", "https://mp.weixin.qq.com/s?__biz=MzkxMzczNTA4MQ==&mid=2247483895&idx=1&sn=3da0b8ac30f8d6f1da127c9216651fe0": "一个很强的漏洞库", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307419&idx=1&sn=99e73003e60b59000267419ee4068108": "美国饮用水系统存在300多个漏洞，影响1.1亿人", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307419&idx=2&sn=1ccab95bd62ccdb6da0bf494f77e858d": "VMware vCenter Server远程代码执行漏洞正被黑客广泛利用", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524360&idx=2&sn=b5804cee2025c7d7c53030217988d02b": "Java（Script）Drive-By，无需0day攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066082&idx=3&sn=45c8dff3a066a1615c872523d972e645": "【安全圈】美国饮用水系统存在300多个漏洞，影响1.1亿人", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066082&idx=4&sn=c7244d3c2cda936e8c968cf0a2ade6d0": "【安全圈】VMware vCenter Server远程代码执行漏洞正被黑客广泛利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521523&idx=1&sn=286f99df03f25ebd1cb1fb497f991b21": "补丁不给力，VMware vCenter 严重RCE漏洞遭利用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583218&idx=1&sn=f5b184e32e1592dc41e78b9934e7c670": "SDC2024 议题回顾 | ExpAttack:大语言模型越狱风险持续追踪框架", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513105&idx=1&sn=db4c2c400bfc1b8ac9c2e39ffcc2d0f8": "美全国水务系统存在大量漏洞，可致使上亿人供水中断", "https://mp.weixin.qq.com/s?__biz=MzU3OTAyODk4MQ==&mid=2247490987&idx=1&sn=aa4712f028a5b83328bf471fc49512b2": "顺丰安全漏洞评分规则更新公告", "https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247515427&idx=1&sn=fb8b05f7d8f4fef283c82153244d0dca": "【漏洞复现】D-Link NAS设备 sc_mgr.cgi 未授权RCE漏洞复现", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650619819&idx=2&sn=e0594a7fbc40c3e7038dfb867b72a41b": "高危！Laravel参数注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495150&idx=1&sn=7dbdf94f68382feb66892595971d54dc": "【论文速读】| 通过良性数据镜像对大语言模型进行隐蔽越狱攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523853&idx=1&sn=09a7e2c49e4d18c988053c13b775aa17": "【漏洞通告】Palo Alto Networks PAN-OS 身份验证绕过漏洞(CVE-2024-0012)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523853&idx=2&sn=44f939a81178afad27dca90a02dfbfc6": "【漏洞通告】Apache OFBiz远程代码执行漏洞(CVE-2024-47208)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523853&idx=3&sn=fab3ee466334a0022b2df23ab6a23217": "上周关注度较高的产品安全漏洞(20241111-20241117)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490175&idx=1&sn=8a88f13080b38ee937638a6ab1a1a319": "【风险通告】Palo Alto Networks PAN-OS存在身份验证绕过漏洞（CVE-2024-0012）", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507416&idx=1&sn=6eb8217321fbe1a5361675058bc55882": "已知漏洞！宝兰德最新漏洞绕过补丁黑名单，速修", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498607&idx=2&sn=2e4002dc2db4869990ee4fa3d38f1f43": "渗透测试 -- 漏洞百解", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247632338&idx=3&sn=287c0b4f0cfbdbc1d11e7f8b67787249": "美国饮用水系统存在300多个漏洞，影响1.1亿人", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247508728&idx=1&sn=50e200ae59cd278b496fa675d916a377": "微软2024年11月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489184&idx=1&sn=04ec9cf838fb1a5cf5cc4c8c93a8bf30": "【漏洞预警】Apache Kafka Clients权限管理不当漏洞可致信息泄露", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489184&idx=2&sn=6674f470ab506ed8239b4103f4d11218": "【漏洞预警】Palo Alto Networks PAN-OS Web管理界面身份验证缺陷漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489184&idx=3&sn=22ce05bbdff66ec1bf477e37c429c327": "【漏洞预警】Apache Tomcat资源控制不当漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247488403&idx=3&sn=9914510e560c5eec5ad6282278ab6577": "「人脑替代计划-6」LLM是什么？", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517233&idx=1&sn=af475bf0f3de0493fd24dcdc37463e5a": "漏洞挖掘|电子商城类漏洞挖掘案例灵感复现", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486072&idx=1&sn=7558c8a2becda935fa6b7237363f864e": "「漏洞复现」D-Link NAS设备 sc_mgr.cgi 未授权漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247515356&idx=1&sn=202c8573e3a77824edf45e865b30e051": "漏洞预警｜Apache OFBiz远程代码执行漏洞(CVE-2024-47208)", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247515356&idx=2&sn=d677b50ea4f958d207cd6a3c772fe0b8": "漏洞预警｜Palo Alto Networks PAN-OSS身份验证绕过等多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMzI1MDg2Mg==&mid=2649945063&idx=1&sn=e933d8e9d2243641c8f007c652caad48": "YAK 亮相2024年世界互联网大会！携手中国联通共塑网络安全新生态", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307419&idx=3&sn=9f3e2546a68551118a2b2bc765b70ab3": "关键的WordPress插件漏洞导致超400万网站暴露", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484334&idx=1&sn=bfd4f94e969ee9f8e7ec653c0feae32a": "【漏洞复现】D-Link NAS 远程命令执行漏洞(CVE-2024-3273)", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484641&idx=1&sn=b4b8e81e772df11b17f49e37240bea65": "【漏洞复现】CVE-2024-0012 Palo Alto Networks PAN-OS 身份验证绕过漏洞可RCE", "https://mp.weixin.qq.com/s?__biz=MzkyODYwODkyMA==&mid=2247484615&idx=1&sn=5f905a5474a575224e1695ec62eaa221": "从CVE 到 PoC：Windows提权漏洞全景地图", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489063&idx=1&sn=d9af33b3a2502288bbb423a8844b6fee": "一款越权漏洞检测的 Burp 插件 内置AI模块辅助分析大幅降低误报率效|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247514847&idx=2&sn=048d05a026fb7fb199b8242894eea7b9": "渗透测试 -- Python3编写常见exp", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247485914&idx=1&sn=f8cec8e3728f84d34ca028e8af00bb3b": "【未公开】百择唯供应链存在SearchOrderByParams SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491464&idx=2&sn=0d4045776a636e09c6c243c1be42ec18": "漏洞预警 | 金蝶EAS任意文件写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491464&idx=3&sn=ac7cc21a14507ada677b925d8c2f9060": "漏洞预警 | 顺景ERP管理系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492775&idx=1&sn=93a3a6836cb68f8168e9655508828d18": "漏洞利用、shell反弹 | 一键利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486175&idx=1&sn=fa6fd7a401164cbcb62a25a9ecc5f8ac": "SpringSecurity权限绕过漏洞-好玩", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513105&idx=1&sn=db4c2c400bfc1b8ac9c2e39ffcc2d0f8&chksm=ebfaf331dc8d7a273b6268ba76b25e4bbec7d9c0e5d64cf4fdb0a7c8cb0ac781e6c8671e1848&scene=58&subscene=0": "美全国水务系统存在大量漏洞，可致使上亿人供水中断", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507416&idx=1&sn=6eb8217321fbe1a5361675058bc55882&chksm=cfcabeccf8bd37dabd939a20bc64440bf305ffe94e1ee391c8b758d1eba8cec1ca2099880c09&scene=58&subscene=0": "已知漏洞！宝兰德最新漏洞绕过补丁黑名单，速修", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066082&idx=3&sn=45c8dff3a066a1615c872523d972e645&chksm=f36e7d62c419f474a8053972dd9c71ee6170c6482642d86218c62a4788ba6c3240875f3d16fb&scene=58&subscene=0": "【安全圈】美国饮用水系统存在300多个漏洞，影响1.1亿人", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066082&idx=4&sn=c7244d3c2cda936e8c968cf0a2ade6d0&chksm=f36e7d62c419f474201413fc6e1edcc5c024cfb6fa12a9adf16b49526e98689324bb9aa57fd0&scene=58&subscene=0": "【安全圈】VMware vCenter Server远程代码执行漏洞正被黑客广泛利用", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523853&idx=1&sn=09a7e2c49e4d18c988053c13b775aa17&chksm=ce46151df9319c0b5e3101ae19289c72f2bde1df88b14593ff9d674aef5cea0434014a7f2615&scene=58&subscene=0": "【漏洞通告】Palo Alto Networks PAN-OS 身份验证绕过漏洞(CVE-2024-0012)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523853&idx=2&sn=44f939a81178afad27dca90a02dfbfc6&chksm=ce46151df9319c0b1559eee9e9bf40c82367612f10de3b61f2f666f2558bea2f5f10938518ef&scene=58&subscene=0": "【漏洞通告】Apache OFBiz远程代码执行漏洞(CVE-2024-47208)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499470&idx=1&sn=122371c064b4a5b04d3f673d1a172d6e&chksm=973acdaca04d44ba3d0421968e02c6666f2064e33000519c729c6423ce5c41367a1ccdcf4833&scene=58&subscene=0": "CNVD漏洞周报2024年第46期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499470&idx=2&sn=d9bbe418f8309153c86b2c38bdb82f17&chksm=973acdaca04d44bab50e7dd62b73186be71557b6394c3c63dc18ec7ef4c20bae0c517a0aa368&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241111-20241117)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247485415&idx=1&sn=541476a2be6c2a7837e6dd6b2b173171": "国家级黑客利用三大 Ivanti CSA 零日漏洞展开攻击，企业需警惕！", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247509929&idx=1&sn=8e56d271814d4694e976b6fdf261784e": "24年10月必修安全漏洞清单｜腾讯安全威胁情报中心", "https://mp.weixin.qq.com/s?__biz=MzU5NTEwMTMxMw==&mid=2247485379&idx=1&sn=b13eaf7a0ae232fd4ec54d414aa2f506": "【渗透工具】Swagger API 信息泄露漏洞 工具篇", "https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjU4NA==&mid=2247485578&idx=1&sn=01f25a92b61057e789d1dc89c9d0cf58": "Apache Tomcat最新高版本身份验证绕过漏洞，POC价格接近3000", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489282&idx=1&sn=db4d0926ef072190c0b575b85b7f53a2": "易思智能物流无人值守系统 ExportReport SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507413&idx=1&sn=a43f7ec33d899e45aa9b77f5005fd056": "X漏洞奖励计划收录扩大！提供本地环境再享额外20%奖金加成！", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496771&idx=1&sn=1841c42f1b7592fc316ee23a3dae8be0": "【漏洞通告】Palo Alto Networks PAN-OS多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485007&idx=1&sn=f43a33dcb7b9278a231606867d08db8e": "腾讯安全威胁情报中心推出2024年10月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487503&idx=1&sn=142cc21e2bc7576e1660e7eafa64b96d": "【漏洞预警 】SRM智联云采系统存在多处SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487503&idx=2&sn=818021e6e5c7bbfef6a642e2f7f8fd75": "【漏洞预警】东胜物流软件-certupload-任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485045&idx=1&sn=e2aef89feda4402f8f5baa7ea01684ed": "400万网站受影响！WordPress Really Simple Security 插件漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485045&idx=2&sn=a92234b4814af7a59f703f23bbed96c3": "深入解析 CVE-2024-51567：CyberPanel 命令注入漏洞及 PoC 复现", "https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247509168&idx=1&sn=f2df0d7acfbf06066aa1fb37a3da6f2b": "Linux网络流量监控工具", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793188&idx=2&sn=4a4f1209a4a33af5ff2cb6681e83d52e": "Apple 确认 macOS 系统遭受0day漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793188&idx=3&sn=985eaa11c8319087deda24624c9bda68": "VMware vCenter 和 Kemp LoadMaster 漏洞正受到积极利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491464&idx=1&sn=dddb959fc1bb2fdc915c3c0b79b376cc": "漏洞预警 | 全程云OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488439&idx=1&sn=3f053aa65cd1e0edc84e4e7baf0d87be": "【0day】资产管理运营系统（资管云）存在前台文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502450&idx=1&sn=a1fc8665dfbb9c1703fef3c40ff25310&chksm=fe79eeeac90e67fcbf34eede7835db3aa9916a7a50c559be8c34d0446433f0f4d41189eb8b1a&scene=58&subscene=0": "【在野利用】Palo Alto Networks PAN-OS 身份认证绕过漏洞(CVE-2024-0012)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523853&idx=3&sn=fab3ee466334a0022b2df23ab6a23217&chksm=ce46151df9319c0b47c29456be191ccb1e9aa5c9d308c5e785ba7c175b75b7a3f6afe84ca4d6&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241111-20241117)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521523&idx=1&sn=286f99df03f25ebd1cb1fb497f991b21&chksm=ea94a599dde32c8fb84c9a7247de810f5f23bf5c0c99f55a79ff59780dc42aa54f886a151327&scene=58&subscene=0": "补丁不给力，VMware vCenter 严重RCE漏洞遭利用", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489994&idx=1&sn=7814bfad57686190c7bac0bc2903102f": "Apple 发布紧急更新以修补被积极利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166849&idx=3&sn=7d17b619580e9f94e8465b600d569241": "苹果确认针对 macOS 系统的零日漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307561&idx=4&sn=4bfa46d48f4a7ec2bcdeb281d95354f8": "vulnhuntr：基于大语言模型和静态代码分析的漏洞扫描与分析工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247487940&idx=1&sn=77723ded4c817fa7df978074334ee981": "紫光档案管理系统 mergeFile SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066097&idx=3&sn=0e0cc754f2cdc596b5f8419a8fa6f7a5": "【安全圈】苹果发布紧急安全更新修复WebKit引擎中的漏洞 黑客已经利用漏洞展开攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY5Nzc1OA==&mid=2247484133&idx=1&sn=52effc09cdcd03efa6380224aa30ad9c": "一文读懂SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247488664&idx=2&sn=3e7b7e7edab1dffabf0816e27d18da3b": "DataCon晚自习 | 浅谈大模型辅助漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524380&idx=3&sn=f9182149d88336b1242adda5aef422d1": "CVE-2024-20767 和 CVE-2024-21216 的补救措施：保护自己免受最近两个可在野外利用的严重漏洞的侵害", "https://mp.weixin.qq.com/s?__biz=Mzg4MDY1MzUzNw==&mid=2247497938&idx=2&sn=8d13015033c4c8514aac0c0c5375b9df": "命令执行漏洞基础", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502616&idx=1&sn=58bb44c2b1e5b68a5db14bccb1baca21": "【成功复现】D-Link NAS远程命令执行漏洞（Cookie）", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664230091&idx=4&sn=263ea32ebfc468c8a503fd8a7d847988": "CNNVD | 关于Palo Alto Networks PAN-OS安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664230091&idx=5&sn=9950f25047c9a9cdb95f448751bcd9de": "CNNVD | 关于Apache OFBiz安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247522987&idx=1&sn=563d193cf4b9a511831b8769974d8266": "中间件常见漏洞总结", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583542&idx=2&sn=5be0221a6d9dac5a2b8d75ede77e159b": "苹果紧急发布安全更新，修复影响英特尔Mac的两个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247622153&idx=1&sn=bdaf7d21183b302a2b5c4dcc98808c26": "奇安信集团获2024年世界互联网大会杰出贡献奖", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484351&idx=1&sn=f9ffabcc9b25602a911778f2121e66fa": "第十三期 · 安钥®「漏洞处置标准作业程序（SOP）」征文启示", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247631812&idx=1&sn=cb58ca9f66ae638242515b34d3fee572": "一名优秀CISO的自述：是什么成就了我?", "https://mp.weixin.qq.com/s?__biz=MzkzODUzMjA1MQ==&mid=2247484575&idx=1&sn=abd69fc656d121c2d04f7988fa8a2bee": "几个常见的越权漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492658&idx=1&sn=57ec9a56c1b1cde21b51a26712d252a8": "【已复现】宝兰德BES应用服务器反序列化致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651461349&idx=1&sn=c2d1b09182648cd2ba67f4f305a63865": "CNNVD关于Palo Alto Networks PAN-OS 安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651461349&idx=2&sn=28601f77d7e3146b42cd9e063a788509": "CNNVD关于Apache OFBiz安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651461349&idx=3&sn=dd3fcba72938894feeccabe050dc7c05": "信息安全漏洞周报（2024年第47期）", "https://mp.weixin.qq.com/s?__biz=MzA3NTIyNzgwNA==&mid=2650259511&idx=1&sn=209eedf6288443cf581e203cfc45284c": "Palo Alto Networks零日防火墙漏洞是由开发人员的基本错误导致的", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500258&idx=2&sn=45c5ee1cc7cae505fcdfb13d0c6b1050": "【漏洞通告】Oracle Agile PLM Framework文件泄露漏洞（CVE-2024-21287）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500258&idx=3&sn=2a266e4509b9d0fb089ce92749c6f7ca": "【漏洞通告】Wget服务器端请求伪造漏洞（CVE-2024-10524）", "https://mp.weixin.qq.com/s?__biz=MzkxODI4NDg3Nw==&mid=2247484726&idx=1&sn=591227dcdebf57686a3a4c2f953505eb": "taocms 3.0.1 本地文件泄露漏洞（CVE-2021-44983）", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492578&idx=2&sn=fa464eb54666d60dabd0a65ccbaeac63": "平板锅(Palo Alto)防火墙0day 漏洞分析及Exp", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603759&idx=2&sn=986d8ed76f6fd390e46b43c2cec2df92": "美国饮用水系统存在300多个漏洞，影响1.1亿人", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650989812&idx=1&sn=fd1211672ea7e1d7357c9909c7600faa": "【知道创宇404实验室】警惕Palo Alto PAN-OS漏洞（CVE-2024-0012 和 CVE-2024-9474）", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486083&idx=1&sn=eb8dc60a736b80cc2bcd90bc76f825b3": "一次黑盒转变白盒前台漏洞审计过程", "https://mp.weixin.qq.com/s?__biz=MzA3ODE0NDA4MA==&mid=2649400795&idx=1&sn=99b65e43e266182fd962e758b293c138": "全球数据跨境流动合作倡议", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133464&idx=2&sn=16e48bc09bde1b9e2e0b383257d60d2a": "美国国会图书馆邮件系统遭攻击，近9个月通信内容或泄露；ChatGPT沙箱环境存多个严重安全隐患，仅20%漏洞被修复 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489192&idx=1&sn=663db3924b11641b7c1e483016b43aa4": "【漏洞预警】Oracle Agile PLM框架未授权 可致敏感信息泄露CVE-2024-21287", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489192&idx=2&sn=dbb1fec7e9b1b1be32e557c7e7e93fa4": "【漏洞预警】Wget服务器端请求伪造漏洞（CVE-2024-10524）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517235&idx=1&sn=15beae174630b436d0b4b755c3b8f7df": "第105篇：方程式工具包图形界面版V0.42，更新永恒浪漫exp对Vista、Win7系统的利用", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247512533&idx=1&sn=508123790f0103c1e0b80a86546ebbd6": "网安瞭望台第 2期：零日漏洞密集爆发、2024年常见网络安全漏洞类型及分析", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247576922&idx=1&sn=936ee428e8066709dbf21f8ca640454e": "周鸿祎世界互联网大会谈中国大模型发展：应扬长避短 选择自己的道路", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486082&idx=1&sn=eb2064a0626c65f33ab73a11a0d5ae30": "「漏洞复现」ArcGIS 地理信息系统 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521533&idx=1&sn=1ab7c5da3e583e48ee67d6f50fd4d97e": "苹果紧急修复已遭利用的两个0day", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492578&idx=3&sn=a13cb4917d5870bf3ac1e32ce46bc962": "wget 存在SSRF 0day漏洞 CVE-2024-10524", "https://mp.weixin.qq.com/s?__biz=MzkxMjYxODcyNA==&mid=2247485131&idx=1&sn=9eaffa9133ef0eff7875ac3fe1fd4fc1": "事关个人，5G基带存在重大安全漏洞！黑客可直接监控手机。", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489065&idx=1&sn=a1eea859e97da404d223f838ee2c8bea": "最新Invicti-Professional-V24.11 WEB漏洞扫描器更新|近期漏洞合集更新", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498627&idx=1&sn=96c957b13032e647fdbb2e2a2db89a94": "oss存储桶遍历漏洞利用脚本（11月18日更新）", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484489&idx=1&sn=5cafab2af07393b94237c5aea17cc224": "用友畅捷通-TPlus系统FileUploadHandler.ashx接口处存在文件上传漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247485938&idx=1&sn=5f75f6c29311eff2fcba5158a4bfc5db": "【未公开】百择唯供应链存在ReadAfterSaleList SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491472&idx=1&sn=68e3d9143979d6909f6c3be8e0147446": "漏洞预警 | GitLab未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491472&idx=2&sn=e842b5299786254b299991d8fabf4824": "漏洞预警 | JeecgBoot表达式注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491472&idx=3&sn=eea1d851655a59d5074eb716aebdf4e3": "漏洞预警 | 用友YonBIP R5旗舰版任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247509402&idx=1&sn=fd513ef1bfe094d6bfc52a0238d8efe2": "Palo Alto 防火墙0day漏洞 CVE-2024-0012 和 CVE-2024-9474 检测POC&EXP", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488456&idx=2&sn=6e22a329b754d049d04588b03129884b": "【吃瓜】入门即巅峰", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507413&idx=1&sn=a43f7ec33d899e45aa9b77f5005fd056&chksm=cfcabec1f8bd37d76f04ee59ebadde132d049c4f729c1023d5a64b026d0f975f1dd3cc2e8fa9&scene=58&subscene=0": "X漏洞奖励计划收录扩大！提供本地环境再享额外20%奖金加成！", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583542&idx=2&sn=5be0221a6d9dac5a2b8d75ede77e159b&chksm=b18c317c86fbb86a4f217c32fd5ad1f8bc8a5c2b53963d8962766c3e8cee07c5d83251cfeb87&scene=58&subscene=0": "苹果紧急发布安全更新，修复影响英特尔Mac的两个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247509929&idx=1&sn=8e56d271814d4694e976b6fdf261784e&chksm=ec9f7edadbe8f7cc832cc505d146955131c30af0abb345247fcd170fff37f98c73fcc2174938&scene=58&subscene=0": "24年10月必修安全漏洞清单｜腾讯安全威胁情报中心", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502473&idx=1&sn=996d4946cf07c672aed821bfd621c228&chksm=fe79ee11c90e67073edd9159e6dc7a11bb693970335a9bdd2815ae0532da91d5bb7c8a534df9&scene=58&subscene=0": "【已复现】Palo Alto Networks PAN-OS身份认证绕过漏洞(CVE-2024-0012)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502473&idx=2&sn=e5d76f1cef13f032535065aae0924b0a&chksm=fe79ee11c90e67077b61dd29c7571b5fa2c8d1a5ac9c4dc5629276ded403c4e0495fdeba1feb&scene=58&subscene=0": "【在野利用】Apple 多个在野高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521533&idx=1&sn=1ab7c5da3e583e48ee67d6f50fd4d97e&chksm=ea94a597dde32c81770e878aff36d9ad42bc41cce9cf029d893185f50ed1e403b8d3fe8a808f&scene=58&subscene=0": "苹果紧急修复已遭利用的两个0day", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664230091&idx=5&sn=9950f25047c9a9cdb95f448751bcd9de&chksm=8b59ee32bc2e6724148267ee2381f2c8eb7cbce86d470cd00dc98942c246dde4f28c288844ba&scene=58&subscene=0": "CNNVD | 关于Apache OFBiz安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492658&idx=1&sn=57ec9a56c1b1cde21b51a26712d252a8&chksm=96f7fb5fa180724999fcc536896ea9b1741b01baafc636da1f215426e10ae028780e9a9e2fd6&scene=58&subscene=0": "【已复现】宝兰德BES应用服务器反序列化致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066097&idx=3&sn=0e0cc754f2cdc596b5f8419a8fa6f7a5&chksm=f36e7d71c419f467daf3ea8cddb360e80ba1bf2d4166d38a18b9e3f18237b4be22f6661fe72a&scene=58&subscene=0": "【安全圈】苹果发布紧急安全更新修复WebKit引擎中的漏洞 黑客已经利用漏洞展开攻击", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650989812&idx=1&sn=fd1211672ea7e1d7357c9909c7600faa&chksm=8079a6c6b70e2fd045b21a2f00871280e36fbd5f01e9f15770861ea0ae01f84753f29689e2eb&scene=58&subscene=0": "【知道创宇404实验室】警惕Palo Alto PAN-OS漏洞（CVE-2024-0012 和 CVE-2024-9474）", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485007&idx=1&sn=f43a33dcb7b9278a231606867d08db8e&chksm=c2b10439f5c68d2f9f2b0ad51534e1ed75af9471e716e49d263560a16ccb61d298cc34fc5e41&scene=58&subscene=0": "腾讯安全威胁情报中心推出2024年10月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzkwMjQyMDA5Nw==&mid=2247485897&idx=1&sn=0cc6ed1d8063057b53534e97ba7e7991": "玄穹——开源漏洞库平台", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486423&idx=1&sn=36562677738a2067cef9d5e659179311": "【漏洞通告】Palo Alto Networks PAN-OS 身份验证绕过漏洞(CVE-2024-0012)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486423&idx=2&sn=5363ab83755be11e1d17be94fc80db88": "【漏洞通告】Ivanti Endpoint Manager SQL注入漏洞(CVE-2024-50330)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486423&idx=3&sn=03b3193f3f3978b89e47a38c66bf3bbe": "【漏洞通告】Apache OFBiz远程代码执行漏洞(CVE-2024-47208)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486423&idx=4&sn=526b9ddff455eae074c42cb543c916b3": "【漏洞通告】Windows 任务计划程序特权提升漏洞 （CVE-2024-49039）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486423&idx=5&sn=da19e19671d3a290f1abbf650f06f6ef": "【漏洞通告】Google Chrome Serial释放重引用漏洞(CVE-2024-10827)", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499693&idx=1&sn=9c2f1ead8fecc4980715053945851041": "金蝶软件旗下产品历史漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487823&idx=1&sn=b199f8958061b41143c57569ecbb7973": "宏景HCM uploadLogo.do接口存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513122&idx=1&sn=2328bb653dc07fdeeef3cf0c73e59668": "苹果官方警告：零日漏洞攻击瞄准Mac电脑用户", "https://mp.weixin.qq.com/s?__biz=MzUxNTQxMzUxMw==&mid=2247524305&idx=1&sn=715d043e0e1a4aa038e9217fee6f6b3b": "安全通告丨网络安全漏洞通告（2024年11月）", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485728&idx=1&sn=ae7b0efb76dde69f1e883bf552e939aa": "【漏洞复现】某平台-Download-GetFile-readfile任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502647&idx=1&sn=4ea2ed367e87b0fb0578b4bc559214cc": "【成功复现】英雄联盟手游狼人被动超级加速漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496794&idx=1&sn=98d1e09af421f9b48733bef20e034c70": "【漏洞通告】Apple多个在野高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496794&idx=2&sn=2f75e539f5d1214305f1b20815000390": "【漏洞通告】Oracle Agile PLM Framework文件泄露漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486127&idx=1&sn=a9a554e0836be4997bbae01428c35ea7": "某次代码审计从0day变Nday的路程（漏洞分析）", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503207&idx=1&sn=6497f0f064f7e89a8020f5e647a74b9c": "雷神众测漏洞周报2024.11.11-2024.11.17", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492779&idx=1&sn=38e8978c0c2582e26755b6f45716289f": "苹果公司解决了两个正在被活跃利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484368&idx=1&sn=49f5c63e530ff4a5360f1bde3b2f324f": "【漏洞复现】数字通云平台智慧政务cookie登录绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211159&idx=1&sn=eaa9344e08031742daa733646b4c96b4": "【深度复现】D-Link NAS设备 sc_mgr.cgi 未授权RCE漏洞(CVE-2024-10914)", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793202&idx=1&sn=6442286840d79041b5d59c24cea27af5": "Ubuntu Needrestart 软件包中发现存在十年之久的安全漏洞，可以获得Root权限", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247503892&idx=2&sn=f96cf857db7e67591108af162474c402": "网安趋势？谷歌宣布AI首次发现内存安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664230091&idx=4&sn=263ea32ebfc468c8a503fd8a7d847988&chksm=8b59ee32bc2e6724be3ab1971189ed723ff0bd517816391938514eab40b4d64e00bfeb630a69&scene=58&subscene=0": "CNNVD | 关于Palo Alto Networks PAN-OS安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247529561&idx=1&sn=21097e9ac986115991718b87150558bb": "安全巨头惊爆0day漏洞危机：2023年最频繁攻击源揭秘！", "https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870121&idx=1&sn=61e16fb282d8d940147e14b24462c3f1": "TOP 1！知道创宇再获CNVD漏洞平台14星最高荣誉", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579721&idx=1&sn=971afc08efdeab4cd0d06a7f9e64bfc3": "Helldown 勒索软件利用 Zyxel 漏洞破坏企业网络", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492420&idx=1&sn=983ff5f33ddc1bf11baeca0a42b1516d": "关键的 Windows漏洞使数百万台服务器面临攻击", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486091&idx=1&sn=91833410d26dea9ad568703fcb83c398": "「漏洞复现」Altenergy电力系统控制软件 status_zigbee SQL注入漏洞复现(CVE-2024-11305)", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496794&idx=3&sn=0529c7467c6aa61ad31786c53e0b140d": "【漏洞通告】Wget服务器端请求伪造漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMjg0MjM5OQ==&mid=2247487863&idx=1&sn=a856bb4a7707eac0bcafb0d7450947c6": "几个常见的越权漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507450&idx=1&sn=baba096592ba4c2ce7f2849d12b10277": "Palo Alto Networks PAN-OS身份认证绕过+远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490002&idx=1&sn=fcfb62255fd7a622d4d4d49929ce9a97": "Ubuntu系统软件中的5个漏洞潜藏了10年才被发现", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307635&idx=2&sn=87c3bf9433bce52470c6600460f833ed": "Ubuntu系统软件中的5个漏洞潜藏了10年才被发现", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066112&idx=1&sn=00fc32fb2126236a289beba3ec9b7b29": "【安全圈】Ubuntu系统软件中的5个漏洞潜藏了10年才被发现", "https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247486093&idx=1&sn=f875b24e5431597f8279e5526d265f8d": "第105篇：方程式工具包图形界面版V0.42，更新永恒浪漫exp对Vista、Win7系统的利用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583634&idx=1&sn=c8830e31a595e1d7bc0c7c16de61a754": "惊喜开班！系统0day安全-IOT设备漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583634&idx=3&sn=53aa35b505b9bfdfb18d41e18d667703": "竟长达10年未发现？Ubuntu系统“needrestart”工具曝5个本地提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492586&idx=1&sn=f45bee7349e1db3147eb26c8843c7adf": "PoC,AnyDesk 漏洞暴露用户 IP 地址，CVE-2024-52940", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521546&idx=1&sn=deaef16f3522dccfad4051c26652ad09": "这个 root 漏洞已存在10+年之久，影响Ubuntu Linux", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247489903&idx=1&sn=15bf8bcba0aaf185a4c968af8fcd06a4": "创宇安全智脑 | D-Link ShareCenter sc_mgr.cgi 远程命令执行等81个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzAxNTYwOTU1Mw==&mid=2650092516&idx=1&sn=2f6258182135b9ae40a75b504ef2e7ee": "跨国抓捕：俄罗斯勒索软件头目被引渡至美国", "https://mp.weixin.qq.com/s?__biz=MzkyODYwODkyMA==&mid=2247484628&idx=1&sn=7adaa47dc8dce500ba919e958221bc7a": "Ubuntu 默认工具 needrestart 曝出五个严重提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247487727&idx=1&sn=ce66fae6488e73be86204199cd8fc8fa": "模糊测试：发现软件隐患和漏洞的秘密武器", "https://mp.weixin.qq.com/s?__biz=MzU1OTc2MzE2Mg==&mid=2247489131&idx=1&sn=0b8639eded86673aa72ca1f9916befad": "零时科技 || BTB 攻击事件分析", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500266&idx=2&sn=a7cda971e34b7f49ac887ba14aa975d6": "【漏洞通告】Ubuntu needrestart权限提升漏洞（CVE-2024-48990）", "https://mp.weixin.qq.com/s?__biz=MzkxODY0NjE5MA==&mid=2247484990&idx=1&sn=1608484b01b1e75343a7e04c80323eb2": "明天，咱们直播间不见不散！学习SRC业务逻辑漏洞的你，怎么能错过！！！", "https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247484025&idx=1&sn=6b51b64fa3cc038bef66def279a3d37e": "知识 | 网安圈常说的暗网是什么？", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247632372&idx=4&sn=4065e4a51577c5e4f66942495ea2535c": "苹果官方警告：零日漏洞攻击瞄准Mac电脑用户", "https://mp.weixin.qq.com/s?__biz=MzkzNzU5MDMxOA==&mid=2247484152&idx=1&sn=66b4340b9ba29175e40f1a6f00cf288c": "实战分享：对某个985大学证书站的越权漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502149&idx=1&sn=ee01e77e7d3727aaeb827ef5d41f4467": "几个常见的越权漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489201&idx=1&sn=6578dcd1cc22537528eb840b065e2d00": "【漏洞预警】Ubuntu needrestart权限提升漏洞CVE-2024-48990", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727839224&idx=1&sn=aa590911abd0b582370a5b2a7706520e": "【活动】双十一回血活动开启，单个漏洞奖励可达4万+！", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521546&idx=2&sn=c7f1dbf820ea6f896c4235e2f649c13e": "Oracle 修复已遭利用的 Agile PLM 0day", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650619867&idx=1&sn=ac69c9870bae8e64b7c510f2e9422924": "获国家权威机构认可！亚信安全荣获CNVD技术组支撑单位认证", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497653&idx=1&sn=886fb9df563d731ad0b28c309d97a698": "迫切需要优先考虑移动安全", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247514876&idx=1&sn=dc8a114bf1be8a2ada9a420acfb15894": "漏洞管理工具 -- miscan（11月22日更新）", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491554&idx=1&sn=dc6a072d64b137434c5be22d725e9452": "Ollama AI 框架中的严重漏洞可能导致 DoS、模型盗窃和模型中毒", "https://mp.weixin.qq.com/s?__biz=MzkzMjQ0MTk1OQ==&mid=2247484041&idx=1&sn=300cec84cfc3ed1db1d2a894eb37f925": "manOS核弹级漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484532&idx=1&sn=ed5e450b30304a3352ada6fd71b5e32d": "唯徳知识产权管理系统WSFM.asmx接口处存在任意文件上传漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496835&idx=3&sn=fa9a0186121dfa64695dfa00b19d5c63": "46套.NET系统漏洞威胁情报(11.22更新)", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247485477&idx=1&sn=74afe3ed5ffcf53ac41c650caca11a8c": "渗透测试案例 | 证书站学校漏洞挖掘（二）", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491493&idx=1&sn=56900827d378769e852f6e8156d11723": "漏洞预警 | 用友U8CRM SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491493&idx=2&sn=eec065507b8e7d33941479b5993c6549": "漏洞预警 | 东胜物流软件SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492777&idx=1&sn=ef4ff5dc13310669908290adea738af0": "oss存储桶遍历漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655259678&idx=1&sn=ea20f839d02e7018fcce1cce35a79cbf": "2023年最常被利用的漏洞（文末附下载）", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486827&idx=2&sn=d13fe2d0facfb9fb05228edda6e07f55": "几个常见的越权漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488468&idx=1&sn=1d5a120fbf79f5f20c40c15928afde6b": "【未公开】安科瑞企业用电监控预警系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493600&idx=2&sn=ae16e555ab943ff32aba1b355d5b1204": "【漏洞扫描】Spring框架的漏洞扫描​", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503207&idx=1&sn=6497f0f064f7e89a8020f5e647a74b9c&chksm=f2585f14c52fd6021bdf5f22b41936aad6b5effd57bb959dec7fd2d15b24bcb07748fa1e68b5&scene=58&subscene=0": "雷神众测漏洞周报2024.11.11-2024.11.17", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507450&idx=1&sn=baba096592ba4c2ce7f2849d12b10277&chksm=cfcabeeef8bd37f89467ead114de2ac0cf01ef8fcabc14a2993ad364fd7dbb510b9ab01a82b5&scene=58&subscene=0": "Palo Alto Networks PAN-OS身份认证绕过+远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513122&idx=1&sn=2328bb653dc07fdeeef3cf0c73e59668&chksm=ebfaf302dc8d7a14e755064d7f2b337f6b7ef7a3cb78656a85c0593e14ef07032b3e1dfe7757&scene=58&subscene=0": "苹果官方警告：零日漏洞攻击瞄准Mac电脑用户", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521546&idx=1&sn=deaef16f3522dccfad4051c26652ad09&chksm=ea94a460dde32d76e798dae949a23f4b13024861b106b442b888ab5bd8453b2bb70146379673&scene=58&subscene=0": "这个 root 漏洞已存在10+年之久，影响Ubuntu Linux", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521546&idx=2&sn=c7f1dbf820ea6f896c4235e2f649c13e&chksm=ea94a460dde32d763ef2289b00707d46b02a3ffe5816f4bc782e01b00eee02ceee26ca614b09&scene=58&subscene=0": "Oracle 修复已遭利用的 Agile PLM 0day", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583634&idx=1&sn=c8830e31a595e1d7bc0c7c16de61a754&chksm=b18c32d886fbbbce924459608b5b0d0264fbc63ab75170ac5be406d2a83685632e819f8c4466&scene=58&subscene=0": "惊喜开班！系统0day安全-IOT设备漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583634&idx=3&sn=53aa35b505b9bfdfb18d41e18d667703&chksm=b18c32d886fbbbcec2d582409e43ce8f26477a7d97ca397baab16e65b2b303e18496e0e72982&scene=58&subscene=0": "竟长达10年未发现？Ubuntu系统“needrestart”工具曝5个本地提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247529561&idx=1&sn=21097e9ac986115991718b87150558bb&chksm=c14406e4f6338ff244058573e27f16743b6bd43e1a6b57b38f6562338048e20fd086bcf79693&scene=58&subscene=0": "安全巨头惊爆0day漏洞危机：2023年最频繁攻击源揭秘！", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579721&idx=1&sn=971afc08efdeab4cd0d06a7f9e64bfc3&chksm=e9146873de63e165a30c8430200b8a313541ca00ca678b55d91b9e43a6280c5d142be91a12ed&scene=58&subscene=0": "Helldown 勒索软件利用 Zyxel 漏洞破坏企业网络", "https://mp.weixin.qq.com/s?__biz=MzAwMTg3MDQzOA==&mid=2247510755&idx=1&sn=14cf462f720d108293d240449c17235c": "Windows Kerberos严重漏洞，数百万台服务器遭攻击", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486226&idx=1&sn=5a897675064a978552c301075803bafb": "某微信万能门店小程序系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247514240&idx=1&sn=4b7f5438cd7c4199916b3120df33bb8d": "从 OSWE 视角看 Web 安全：超越常规，直击代码核心漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486144&idx=1&sn=166219654da105c33fce42c96b6bd656": "某CMS权限绕过漏洞（0Day）", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485732&idx=1&sn=611f82127aceffbb7bcf356e47631a5f": "【漏洞复现】某平台-AdjustWorkHours-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247490422&idx=1&sn=242137d8101352a7fe3a2e724a79e4e1": "【成功复现】英雄联盟手游狼人被动超级加速漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247501504&idx=2&sn=741da5d8dcc2e08936f21c432a3b1f0e": "MITRE公布最危险软件漏洞TOP25榜单", "https://mp.weixin.qq.com/s?__biz=Mzg3NTY0MjIwNg==&mid=2247484932&idx=1&sn=6ddda5c745c0669df5de46b2f6090778": "谷歌 AI Fuzz 工具 OSS-Fuzz 发现 26 个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDY3MzQyNQ==&mid=2247484674&idx=1&sn=c7061b7925b3a04237b9bcb4ec86a05f": "SD-WebUI未公开的0Day漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247531402&idx=3&sn=4c9e525c1e8f6faa6231f6fbb165f96e": "上周关注度较高的产品安全漏洞(20241111-20241117)", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484387&idx=1&sn=f887c236bdc1cfcc3e1bc2e90e4ff8e8": "【漏洞复现】九思OA dl任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655348017&idx=1&sn=ed23e17b16da97060a91c526f6607af2": "Windows Kerberos严重漏洞，数百万台服务器遭攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793215&idx=1&sn=6db9a7f8f3c64ba37acdf0c6b6d0b0ba": "与俄罗斯有关的 TAG-110 组织利用 HATVIBE 和 CHERRYSPY 瞄准亚洲和欧洲", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793215&idx=2&sn=2a8dfb1cbf0b19d2714915b126ddfeff": "谷歌人工智能模糊测试工具AI OSS-Fuzz在开源项目中发现 26 个漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NzE5MzkzNA==&mid=2650366781&idx=1&sn=c92a382681b96823fd363f0d56f48609": "兰州财经大学携手迪普科技，重塑高校Web应用安全管理体系", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247534532&idx=2&sn=a261f488c8598728930e0597a67f9231": "关键的 Windows漏洞使数百万台服务器面临攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247534532&idx=3&sn=dba8388dc8479ac9e8dd44d1d4b25f79": "苹果官方警告：零日漏洞攻击瞄准Mac电脑用户", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247534532&idx=4&sn=b4e11427bfc55900266ecb28c1dc4a23": "安全巨头惊爆0day漏洞危机：2023年最频繁攻击源揭秘！", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491493&idx=3&sn=3907edfc3af9175a4bb7dbb1c2f3cd1f": "漏洞预警 | 电信网关配置管理系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066112&idx=1&sn=00fc32fb2126236a289beba3ec9b7b29&chksm=f36e7d00c419f41616a3b529fd231f5c9cb584fc1c962df2286ebe434d3081d23b39cd91ade2&scene=58&subscene=0": "【安全圈】Ubuntu系统软件中的5个漏洞潜藏了10年才被发现", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579734&idx=2&sn=08bec6e590889361f84b38ec45c91f6c": "苹果修复了在英特尔 Mac 攻击中使用的两个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxODIzNzgwMw==&mid=2654070649&idx=1&sn=7374a071aef6011b09c9d30955d225ff": "漏洞盒子特供服务：组建“白帽全明星红队”，企业攻防演练定向“星”选择", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492792&idx=1&sn=37ced8b16b6ca6eb7b9ba0f4c520478d": "十年前的本地提权漏洞影响Ubuntu的needrestart软件", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485055&idx=2&sn=e02f20581acf9d97fc394cada0cf09f0": "CVE-2024-47575 Fortinet FortiManager RCE exp(FortiJump)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496396&idx=1&sn=a2ebb375c7eea2c903770171d6399018": "一个挖掘权限类漏洞的神器", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502156&idx=1&sn=cc30c475e09a2575e9491af256657f77": "通达OA前台任意用户登录漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489210&idx=1&sn=e6a9c64d5086c776516c1156211848f8": "【漏洞预警】Spring Security大小写敏感校验鉴权绕过风险CVE-2024-38827", "https://mp.weixin.qq.com/s?__biz=MzkzNTQwNjQ4OA==&mid=2247484002&idx=1&sn=ba34798eb0896654775ddedeaae0b242": "一次JS接口到通用信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307839&idx=1&sn=df6784db9ec499ec160ae27590b75fb2": "漏洞盒子特供服务：组建“白帽全明星红队”，企业攻防演练定向“星”选择", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307839&idx=2&sn=f3ba82a2116d70290ed846695c0fd3d0": "AI自动挖洞不是梦，谷歌AI工具OSS-FASZ发现26个开源漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307839&idx=3&sn=1ac2e988e3cf81193aa1fae2f956a1d0": "麻省理工发布2024年最危险的漏洞TOP 25", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066127&idx=1&sn=54cc25bc1157b1fcde3352264a6e6737": "【安全圈】AI自动挖洞不是梦，谷歌AI工具OSS-FASZ又发现26个开源漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247521681&idx=1&sn=51efa515b14c56d1eaaf8c64eeaa48b8": "网安周讯 | 间谍利用监控系统漏洞，试图窃取我国国家秘密（十一月第4期）", "https://mp.weixin.qq.com/s?__biz=MzkwNjY1Mzc0Nw==&mid=2247486468&idx=1&sn=86051d4ce2ed3ebd7b3e40c346699628": "漏洞就是黄金", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247487950&idx=1&sn=32c9207fd0007458094dc29cbb18b191": "九思OA dl.jsp 任意文件读取漏洞复现及POC", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489336&idx=1&sn=751a6198afda40267aabb99699f930d2": "宏景eHR uploadLogo.do 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498660&idx=1&sn=2ae1b79058ee95e417df3e8431156bfb": "Nacos Derby命令执行漏洞利用脚本（11月22日更新）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066127&idx=4&sn=1c50f0f483942910d6d8ae2633bccc0b": "【安全圈】麻省理工发布2024年最危险的漏洞TOP 25", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247523053&idx=1&sn=dd5d54765d1a5481c3116c6d66a97fed": "命令执行漏洞绕过方法总结", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247551673&idx=1&sn=8abf20688cefbe86bf1f6b3c7174d82e": "“赏金猎人”自述，漏洞挖掘错误示范", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517238&idx=1&sn=fae22190772c451f5618b4e3c8d0ca5a": "Src漏洞挖掘-拼出来的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500272&idx=2&sn=ea13352d874cc569065c249b3d247830": "【漏洞通告】NVIDIA Base Command Manager身份验证缺失漏洞（CVE-2024-0138）", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247487737&idx=1&sn=4f638de3392347a0fcee5155e547abab": "躺平预告！漏洞挖掘的赚钱姿势", "https://mp.weixin.qq.com/s?__biz=MzI4ODQzMzk3MA==&mid=2247489331&idx=1&sn=300968c94c2ac2b251996282239a53c8": "美国陆军网络司令部采取措施提高网络部队战备水平", "https://mp.weixin.qq.com/s?__biz=MzU4NjY3OTAzMg==&mid=2247513955&idx=1&sn=923da021debec235889db519f754c173": "真正的高情商，是懂得换位思考", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491510&idx=2&sn=0f84fae523fa2e5f79aee11f50aae80c": "漏洞预警 | PostgreSQL代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491510&idx=3&sn=c9e45826a8f893b0ce9b8e8076a791d7": "漏洞预警 | D-Link NAS设备远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247495915&idx=1&sn=020b2f604f3c234afc5e660021041671": "ATK&CK红日靶场二，Weblogic漏洞利用，域渗透攻略", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488491&idx=1&sn=6a3cb2f9ea810a751d4367d0156e0c71": "【未公开】HertzBeat(赫兹跳动) 开源实时监控系统存在默认口令漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NTA3MTk5Ng==&mid=2247489645&idx=1&sn=dc385caabf6e354e8b3f586013cfed8e&chksm=fe76defec90157e835ae85c463b0ae6e799306276e550ac85a8dd802a1a61e56d88d976294ee&scene=58&subscene=0": "7zip 远程代码执行漏洞预警，需手动更新", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496835&idx=3&sn=fa9a0186121dfa64695dfa00b19d5c63&chksm=fa595a6ecd2ed378686b50cd0be5ad9e5ba403bf2be74e926f03ad72cc6d7b6821aced2b44ee&scene=58&subscene=0": "46套.NET系统漏洞威胁情报(11.22更新)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066127&idx=1&sn=54cc25bc1157b1fcde3352264a6e6737&chksm=f36e7d0fc419f419eba06e5a96d15df8e4c6984457ffe2caa95bdb960aa38174100f2f438f01&scene=58&subscene=0": "【安全圈】AI自动挖洞不是梦，谷歌AI工具OSS-FASZ又发现26个开源漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066127&idx=4&sn=1c50f0f483942910d6d8ae2633bccc0b&chksm=f36e7d0fc419f41947fb8dfdbb8302260500102916778a3058e716cddad6866b03c80673964d&scene=58&subscene=0": "【安全圈】麻省理工发布2024年最危险的漏洞TOP 25", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579734&idx=2&sn=08bec6e590889361f84b38ec45c91f6c&chksm=e914686cde63e17a3e9d0fe369c64911ea3359b0b369da29c48c61b965559c58d45770f9318a&scene=58&subscene=0": "苹果修复了在英特尔 Mac 攻击中使用的两个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496396&idx=1&sn=a2ebb375c7eea2c903770171d6399018&chksm=e8a5f8afdfd271b9e72e65707f45a371988542d91fcd771ee4c4a9b669ceb49a7ffae1b358f8&scene=58&subscene=0": "一个挖掘权限类漏洞的神器", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489348&idx=1&sn=57152c749e1fa98e23c06d16f56b0aca": "D-Link NAS设备 account_mgr.cgi 未授权RCE漏洞(CVE-2024-10914)", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487350&idx=1&sn=5f3311767fe864aef3c68c094f461aa3": "国外黑五安全系列证书折扣信息情报", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247485312&idx=1&sn=f3b84766e32e10f553afbde753d0b3de": "理解 Kubernetes 初始访问向量的意义 第 1 部分 – 控制平面", "https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485711&idx=2&sn=61cb6de4818db882ccd7eeb25f2e8699": "网络安全顶刊——TIFS 2024 论文清单与摘要（2）", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307976&idx=2&sn=8e3bbfdc4054ea7b03a154d585876797": "FreeBuf周报 | 越来越多的国家正为黑客“松绑”；WordPress插件漏洞暴露数百万网站", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307976&idx=4&sn=9362fa49f92401856aa73558f94629a0": "msiscan：一款针对msi文件的漏洞检测与识别工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjU2NjY5MQ==&mid=2247507863&idx=1&sn=1b1c0e424abdccbd8e79df82c9cc585c": "2024科创西安·SSC网络安全大会全议程公布", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247505413&idx=3&sn=4eba1176824ef0e726e217c9b3836c8c": "5th域安全微讯早报【20241123】282期", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603953&idx=1&sn=1c59068543e3af0da779dc17e1d431de": "Ubuntu发行版修复5个本地提权漏洞，已潜伏10年；AI自动挖洞不是梦，谷歌AI工具OSS-FASZ又发现26个开源漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603953&idx=3&sn=660716c4fb5acb0699dc9973bab536a5": "比较有意思的几个漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793228&idx=2&sn=e53354ae3aa95065b3653b45faa3f9e8": "AnyDesk 存在严重漏洞，攻击者可获知用户 IP 地址", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491510&idx=1&sn=8889365d909baddbf466c1382f618cae": "漏洞预警 | Palo Alto Networks Expedition命令注入、SQL注入和明文存储漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492627&idx=2&sn=b1c52bcb9dfa346416b2c2d7097795ac": "winzip、7z 压缩软件存在漏洞需警惕以及一条不可信的 Linux 0day 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247506234&idx=1&sn=35d8397e1d12dd97caafd000e386e08e": "全新发布！通用2.0漏洞奖励计划及第五期活动", "https://mp.weixin.qq.com/s?__biz=MzkxMTIyMjg0NQ==&mid=2247495369&idx=1&sn=2f4dca5df80b47c58fa0364fd6167d50": "发现Web API漏洞居然能赚到400w刀，看懂这本书你也可以！", "https://mp.weixin.qq.com/s?__biz=Mzg2NDg2MDIxNQ==&mid=2247485168&idx=1&sn=e2f04e624add36a9d609048e6db7267c": "某CMS权限绕过漏洞（0Day）", "https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485711&idx=4&sn=13a141bc92101e550c51705ac5abc93a": "网络安全顶刊——TIFS 2024 论文清单与摘要（4）", "https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650557639&idx=1&sn=69f571bf32068c46aa71a5ab4226af8f": "秘密监视：步行跟踪策略战术", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486829&idx=2&sn=7cf00cc43f75e4a7074ebbb9e74ff118": "中间件常见漏洞总结", "https://mp.weixin.qq.com/s?__biz=MzkzNjQwOTc4MQ==&mid=2247489857&idx=1&sn=397e54275d6e4ef14b7af11b370c9b6c": "SBSCAN Spring框架渗透，这一个工具就够了|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066187&idx=4&sn=c4be9926d771d2293619bbe2dcc12b29": "【安全圈】D-Link忽视旧款VPN路由器补丁更新，关键漏洞未修复", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517184&idx=1&sn=15c853eb8c0706dd914700d4f9767b34": "某一cms后台代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485696&idx=1&sn=d90cc63a8343e76984f47b6e6bbdda53": "CVE-2024-0012｜Palo Alto Networks PAN-OS身份验证绕过漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485696&idx=2&sn=8e325ace3beff8fb6bb77abdf6aef414": "CVE-2024-52301｜Laravel注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NzUyNzMzMQ==&mid=2247485420&idx=1&sn=6ced63536d257eb9a51206fdf47729f2": "MQ有什么作用？三大主流MQ产品简介", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496402&idx=1&sn=422c6ca4f7b1746667036bd4bf365772": "如何将低危的 SSRF 盲注升级为严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517242&idx=2&sn=d73884228963ae7309105e3271efd5bc": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485967&idx=1&sn=5db816f99e67288e249ffd001c782213": "Java漏洞平台 - JavaSecLab", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497668&idx=2&sn=5d070cb9d29875dc8b46f874c089b1cc": "2024年最危险的25个软件漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517193&idx=1&sn=dc920188162b0391540fa94f4df48e1f": "JeecgBoot小于3.6.0版本存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247504672&idx=3&sn=ed9021232258b0b0f82fe649895293c9": "7-Zip 文件压缩工具中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603968&idx=1&sn=f3fb57764ff573556885d19380bb807f": "2024年10月涉国内数据泄露事件汇总", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603968&idx=4&sn=b16df9e7b17203b94b8d4bb276ef6a31": "masscan全端口扫描==>httpx探测WEB服务==>nuclei&xray漏洞扫描 | 解放双手", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486831&idx=2&sn=dfa1ce1292893eeb735c75b1616a0d00": "蓝队研判技巧（一）-- 基础篇&WireShark篇", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488502&idx=1&sn=49a37de4ad390d82ad780bff943a670f": "【漏洞复现】通达OA submenu存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247506234&idx=1&sn=35d8397e1d12dd97caafd000e386e08e&chksm=eaf99176dd8e1860091a84caca1efee71b5e8045d02839778d7ffedf0c3aaa73f4cafba1c0ef&scene=58&subscene=0": "全新发布！通用2.0漏洞奖励计划及第五期活动", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066187&idx=4&sn=c4be9926d771d2293619bbe2dcc12b29&chksm=f36e7dcbc419f4ddb491db67e4fc6ec1515f6d7f688561be3515419ed7095a39ba6fc3b91bf9&scene=58&subscene=0": "【安全圈】D-Link忽视旧款VPN路由器补丁更新，关键漏洞未修复", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486119&idx=1&sn=f27289aad01150f8ee6f13c36a077d40": "「漏洞复现」爱数 AnyShare智能内容管理平台 Usrm_GetAllUsers 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486235&idx=1&sn=cc005d242a63cc3483b2e12fb4951f2a": "某短视频系统视频知识付费系统存在前台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650619094&idx=1&sn=8fb0a01132a587bf37499a93e34978b1": "安恒信息CTO刘博：三大措施护航数据跨境流动", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524448&idx=1&sn=522dbb27a7195dd88f717fdcdc6412df": "CVE-2024-8811：WinZip 缺陷允许恶意代码执行", "https://mp.weixin.qq.com/s?__biz=MzkxNTY3MTE5MA==&mid=2247485530&idx=1&sn=b84e14ab32e6680977a4cf8306e0387e": "使用未知技术发现多个 XSS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614242&idx=1&sn=e30b1710946dd50ec45296d7c2a8ecff": "通过 API 配置错误和逻辑漏洞实现账户接管", "https://mp.weixin.qq.com/s?__biz=MzU2MDE2MjU1Mw==&mid=2247485970&idx=1&sn=8448a8df8be78c94494b298d878c2e8a": "团队首个系列课程开班！系统0day安全-IOT设备漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzUyMTE0MDQ0OA==&mid=2247493842&idx=1&sn=56b5e7020601e1445bf2b6b280657435": "发现Web API漏洞居然能赚到400w刀，看懂这本书你也可以！", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247495953&idx=1&sn=ea2dfd3fc4c7933ad3e1aa98c2c541e9": "Goby2024红队版工具分享，附2024年漏洞POC下载", "https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247491674&idx=1&sn=62545629199e7669f3555330c6303e65": "威胁情报的尴尬：是个好能力，但不是个好生意！", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247490042&idx=1&sn=04e5e7e89b24ef9eb1888ccf83229af0": "2024年wordpress、d-link等相关的多个cve漏洞poc", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484717&idx=1&sn=e1d048f5109ecfba86cb97c5063b24dc": "【漏洞复现】CVE-2024-24809", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066203&idx=3&sn=98b7c0046c725ff8299a89a706c8ee43": "【安全圈】苹果解决了两个被积极利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247516991&idx=1&sn=caeac624646b0fcb5fb20a73d33bc685": "师傅们，一个超稳的程序员私活渠道！", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491521&idx=2&sn=aefd1e87e73cf6bb535e2f91d40b296f": "漏洞预警 | 安克医疗急救办公管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486833&idx=1&sn=74a9507725011aa5968303d7c1fd8d66": "SpringSecurity权限绕过漏洞-好玩", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247502670&idx=2&sn=bdbc685d6f5bb170dfe02972cd4c253b": "Windows Kerberos严重漏洞，数百万台服务器遭攻击", "https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247487727&idx=1&sn=7156e54f2ac19f75b82ed23dda677f5d": "【文末送书】发现Web API漏洞居然能赚到400w刀，看懂这本书你也可以！", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485736&idx=1&sn=114a83c2221cd4da61acf679026002b8": "【漏洞复现】某平台-cwsfiledown-DownFileBytes-任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484388&idx=1&sn=ef6fed2e7d12fc7b14b6f661f7a3390e": "【漏洞复现】明源云ERP报表 GetErpConfig.aspx存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNjY1NjI2Mg==&mid=2247487351&idx=1&sn=8e73398873f8ff68deb9f1569edbc0ba": "漏洞挖掘-小白编写人生中第一个漏洞利用脚本", "https://mp.weixin.qq.com/s?__biz=MzIzMzE2OTQyNA==&mid=2648958230&idx=1&sn=437f3c5bb26667570286aa98bf84e96f": "静水深流 | 第2届BUGPWN TSCM黑盒挑战赛 • 顺利闭幕", "https://mp.weixin.qq.com/s?__biz=MzA4NzU1Mjk4Mw==&mid=2247492091&idx=1&sn=5f68436b2b04ad659f177f8cc67ddb87": "某FE平台一键漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488519&idx=1&sn=9089dcb5fc0277a2d59afdaa0b75e81c": "【0Day】《黄药师》药业管理软件SetMedia_Picture_info存在SQL注入漏洞导致RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066203&idx=3&sn=98b7c0046c725ff8299a89a706c8ee43&chksm=f36e7ddbc419f4cdfd1a5b1325eeaa6a76fad3e86c3a04d39a3c93255a412bb3e8ee77745d9d&scene=58&subscene=0": "【安全圈】苹果解决了两个被积极利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787467&idx=1&sn=a415a569eadfb841c7db9ab18a3b9dee": "致命漏洞与暴露API：财富1000强企业面临的30000个暴露API和10万漏洞挑战", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503214&idx=1&sn=419458f95fb9a47435385dd26d072abf": "雷神众测漏洞周报2024.11.18-2024.11.24", "https://mp.weixin.qq.com/s?__biz=MzkyMTY1NDc2OA==&mid=2247487197&idx=1&sn=7d93cc6c308fb83bd7d7013fa924e5b6": "【SQL注入】用友NC process SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247488369&idx=1&sn=6cd730f5c98d9fdf6cdb6a9073c0370e": "API攻防 | Web API 安全漏洞挖掘指南！", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY5Nzc1OA==&mid=2247484135&idx=1&sn=cbb43d16d8b8a261b1b7a85fc0ebdcc8": "一文读懂CSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133534&idx=1&sn=4d8595e4bea300bb4866eb3150c9415e": "违反《网络安全法》相关规定，快手被依法处罚；警惕基于已知漏洞的链式攻击，超2000台Palo Alto防火墙或被攻陷 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524518&idx=3&sn=2fd0a6c6bfc0e72a2a2a26b4c44bc48c": "CVE-2024-11612 7z 24.07 中的无限循环拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545415&idx=1&sn=3263c9c7028760229121597d480ea8de": "某大学图书管理系统刷积分逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614256&idx=1&sn=08a44a39bc09b3418b09f2b8d5b58ce4": "研究217篇子域接管漏洞报告后的总结", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492807&idx=2&sn=3512827d10788f7e4f010e0049490225": "超过2000台Palo Alto Networks防火墙遭到黑客攻击，攻击者利用了最近才修补的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484559&idx=1&sn=cd577a9a506f9849a954661ecb56bb8b": "科荣AIO系统UtilServlet接口处存在代码执行漏【漏洞复现|附nuclei-POC】洞", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247487937&idx=1&sn=163591ce7da4e37e1e72bd1e0038cdf9": "破解命令注入漏洞：详解原理、绕过技巧与防护策略", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486128&idx=1&sn=ac548c4ae7d280103751b6bf9942e20b": "「漏洞复现」万能门店小程序管理系统 doPageGetFormList SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247517446&idx=1&sn=18ecc069c3990680cc3255f3b5a23c23": "MiSRC 年末漏洞冲刺活动来啦~", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489358&idx=1&sn=7231e758676223aad81806ee8dcf9166": "海信智能公交企业管理系统 OrgInfoMng.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNzc3OTMzNw==&mid=2247485585&idx=1&sn=f41a6231836188c432550043679f719a": "文件解析常见漏洞总结", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg1MTA5MQ==&mid=2247484499&idx=1&sn=a28feef48d1c9886d8ddce271345ab85": "Redis未授权主从复制RCE复现", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486155&idx=1&sn=1b1603ee917c845b68ffba4b8eb781ab": "2024年wordpress、d-link等相关的多个cve漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491521&idx=1&sn=368be5edbb0ac65b9c3b5406ab701311": "漏洞预警 | 九思OA任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491521&idx=3&sn=24b3cda574e362b3dbbc7af3c9b155ae": "漏洞预警 | 点企来客服系统硬编码未授权漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664230517&idx=2&sn=103a03cb82a9041a72826663501442ca": "行业 | 360发布全球首份《大模型安全漏洞报告》，曝光近40个大模型相关安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyODYwODkyMA==&mid=2247484671&idx=1&sn=cd35e6350147a8c6d15120f17e7b92b9": "漏洞赏金技巧：初学者指南（2024）#1", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308150&idx=1&sn=25041361b6aca54e30775e0d66a4fa73": "第一次听说漏洞复现也能赚钱", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485133&idx=1&sn=013e17107262c7137b40f35a47048274": "漏洞推送|智互联(深圳)科技有限公司SRM智联云采系统receiptDetail存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247577005&idx=1&sn=45569d8a6f70fa7ab394d043381adb81": "360发布全球首份《大模型安全漏洞报告》，曝光近40个大模型相关安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5MDI5Mg==&mid=2247508083&idx=1&sn=48f1c664f56d8eb5ef2212804aad2556": "360发布《大模型安全漏洞报告》，曝光近40个大模型相关安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247523110&idx=1&sn=5b2e35f317b48b868138162c94b3bdd7": "Funbox 2靶场复现", "https://mp.weixin.qq.com/s?__biz=MzkxMDU5MzY0NQ==&mid=2247484372&idx=1&sn=374fa600bcd042cb385cec46878818c0": "发现Web API漏洞居然能赚到400w刀，看懂这本书你也可以！", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583804&idx=1&sn=318890b03d7a568f25f59d831941f5c2": "【即将开课】系统0day安全-二进制漏洞攻防（第4期）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521578&idx=1&sn=0f7082c24d8e05dca215004ae796d61e": "Fuzzing 升级：谷歌通过AI找到更多漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247551685&idx=2&sn=77d41a70b217346e4762a74c23babafb": "【免费领】网安从业必备：Web漏洞检测及修复方案大全", "https://mp.weixin.qq.com/s?__biz=MzkyMDY5OTg5OA==&mid=2247490891&idx=1&sn=f7433f293512678a138b61f93c55fdae": "发现Web API漏洞居然能赚到400w刀，看懂这本书你也可以！", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486250&idx=1&sn=8b305d21f87a1e736024abb557ee63ed": "【工具分享】Goby最新红队专版下载(1400+POC)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502478&idx=1&sn=d1a9a4086615e34a4a8201b45e7437ab": "安全热点周报：黑客利用两个零日漏洞攻破 Palo Alto Networks 的数千个防火墙", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495521&idx=1&sn=6649ccb65cd3e433867839f03da0a51a": "CNVD漏洞周报2024年第47期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495521&idx=2&sn=4069536b30f554d918f90e57ea5cc152": "上周关注度较高的产品安全漏洞(20241118-20241124)", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247486373&idx=1&sn=442fc8ebf2bf840b6ec293d62c61d6c4": "发现Web API漏洞居然能赚到400w刀，看懂这本书你也可以！", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500278&idx=2&sn=f1125d68609aab5df300a355bc040f5e": "【漏洞通告】7-Zip代码执行漏洞（CVE-2024-11477）", "https://mp.weixin.qq.com/s?__biz=MjM5MTAzNjYyMA==&mid=2650594538&idx=1&sn=3586252dfce4cb97f754b3330c526052": "深信服科技与深城交达成战略合作，共绘智慧交通新蓝图", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyMDE4OA==&mid=2247483918&idx=1&sn=f8c05c481a43f7a6f237fef034ec65cb": "国有企业采购效率提升策略与实践探索", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492648&idx=2&sn=d03f904c8980359f172c2444b3c3426d": "财富 1000 强企业中发现3万个API 暴露 和 10 万个 API 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484683&idx=1&sn=f9b5725f7b10c518772104c7027a91d9": "【漏洞分享】泛微OA漏洞 任意文件读取 OA E-Cology ln.FileDownload 任意文件读取", "https://mp.weixin.qq.com/s?__biz=MzkxODUxMzE1Ng==&mid=2247484040&idx=1&sn=f773f544e7432083f3e181e671a5a0e9": "NDSS 2025新作 | 靠谱的第三方库？VULTURE破解1-Day漏洞难题！", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489215&idx=1&sn=2751e48cc12fef96b1ec3c01e4b5231d": "【漏洞预警】7-Zip代码执行漏洞CVE-2024-11477", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517314&idx=1&sn=fc0ab6144bd8ce810365c8ba8257f554": "比较有意思的几个漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247518395&idx=1&sn=6c2bed06566ca93bc1536d78e19029a0": "漏洞挖掘｜遇到APP数据加密如何解密测试", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247496018&idx=1&sn=956febb67d5ca7bf7a5fcfc7081882fc": "HTB-Chemistry靶机渗透，CVE-2024-23334系统目录遍历，导致权限提升", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490016&idx=1&sn=06f0f108f0e7392bcfc6fe22c487fc23": "IaC 和 PaC 工具中的网络安全缺陷使云平台面临新的攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308150&idx=4&sn=aa3e8e9a372353b8edcbdd2ebc74f5e3": "EmbedPayloadInPng：一款图片文件Payload嵌入工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247487959&idx=1&sn=981fb1ea9387be08c67c81aaa2c81503": "SRM智联云采系统receiptDetail SQL注入漏洞复现及POC", "https://mp.weixin.qq.com/s?__biz=MzkxODUxMzE1Ng==&mid=2247484045&idx=1&sn=824549aef0519d9de2e444832a901154": "NDSS 2025新作 | 靠谱的第三方库？VULTURE破解1-Day漏洞难题！", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517265&idx=1&sn=12f3ccf4ea4997016ef704f9c957f4c6": "JAVA代码审计-悟空crm客户管理系统fastjson漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498679&idx=1&sn=8ba88739d244d4773cd4ad10d7aa2c5f": "Spring Cloud Data Flow高危漏洞（CVE-2024-37084）", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491522&idx=1&sn=753a850a133fa83a1764a999a4f9e9d0": "漏洞预警 | Apache Ofbiz表达式注入和模板注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491522&idx=3&sn=48ccdcd946e23b1b3570ee45a58afa87": "漏洞预警 | 赛普EAP企业适配管理平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655260023&idx=2&sn=47fb2b5e1ab8fd68800dc6142c1a1b0e": "大模型安全漏洞报告（2024）", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488553&idx=2&sn=c69ecd36534694ac5dc71eccfbce4476": "【1Day】北京亚控科技发展有限公司KingH5Stream系统存在逻辑缺陷漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247514932&idx=1&sn=e430e5f4c10c0abdc15e9b3a88d5bcda": "远程未授权访问漏洞（CVE-2024-23692）", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291892&idx=1&sn=16232968dc31a684908bfce05cb873a9": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521578&idx=1&sn=0f7082c24d8e05dca215004ae796d61e&chksm=ea94a440dde32d56ec3122aaba3a62cee4ca60aa29749436b95da39412ef8c8c80b43a0fc000&scene=58&subscene=0": "Fuzzing 升级：谷歌通过AI找到更多漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583804&idx=1&sn=318890b03d7a568f25f59d831941f5c2&chksm=b18c327686fbbb60e21ce64ca42b1fc691b7ac609b8f2b2de36b06547fc0b2bc58a1014e0449&scene=58&subscene=0": "【即将开课】系统0day安全-二进制漏洞攻防（第4期）", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503214&idx=1&sn=419458f95fb9a47435385dd26d072abf&chksm=f2585f1dc52fd60bfa726ed2b9c2ffce6536e21abfdad69a34aea5eca4347e8ba90ddec3f595&scene=58&subscene=0": "雷神众测漏洞周报2024.11.18-2024.11.24", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664230517&idx=2&sn=103a03cb82a9041a72826663501442ca&chksm=8b59ec8cbc2e659a3b99b5bf2b64c1a7d5055f8168d08a4416dd330d7996fac026c27f63becf&scene=58&subscene=0": "行业 | 360发布全球首份《大模型安全漏洞报告》，曝光近40个大模型相关安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502478&idx=1&sn=d1a9a4086615e34a4a8201b45e7437ab&chksm=fe79ee16c90e6700e34fd8339084f26d1309f53c4329210e4a2357249459e4a6bc5889c2201e&scene=58&subscene=0": "安全热点周报：黑客利用两个零日漏洞攻破 Palo Alto Networks 的数千个防火墙", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247517446&idx=1&sn=18ecc069c3990680cc3255f3b5a23c23&chksm=ea83a393ddf42a85de6009bcd55d708d0343a534015d3991cf6e61f907adeed1fdd31902b7ec&scene=58&subscene=0": "MiSRC 年末漏洞冲刺活动来啦~", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495521&idx=1&sn=6649ccb65cd3e433867839f03da0a51a&chksm=fd74dfa8ca0356bef0e7c826f36a22f140a18ec4cfd87ac4b086e70dc1628f916421e0b5a073&scene=58&subscene=0": "CNVD漏洞周报2024年第47期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495521&idx=2&sn=4069536b30f554d918f90e57ea5cc152&chksm=fd74dfa8ca0356bed98817494ed18b727fe3235c8b8ff77f0cab76eac3e5308c9b48f05e150a&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241118-20241124)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496424&idx=1&sn=9edd1b8c5ee4cd0f5995cccd9e27ed60": "如何通过发现 API漏洞赚到百万美刀", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485740&idx=1&sn=70d618368ff0c6d944851ff490e15f2c": "【漏洞复现】某平台-quickReceiptDetail-mysql-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489386&idx=1&sn=3c24e2c2b38b5df8b3e850eb205aead7": "企望制造ERP系统 drawGrid.action SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650604116&idx=1&sn=136a27f092c3f30997dcb2076cd82772": "千万别点！微信群里的这种通知或为木马病毒；|苹果手机Apple ID出现异常将被锁定 当心有诈", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650604116&idx=4&sn=ceb9ab3ac68656923acac319802e4014": "oss存储桶遍历漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzUzMDQ1MTY0MQ==&mid=2247506274&idx=1&sn=ccd7afe62e4048dec6c81ca274ada35a": "某乔ERP系统存在RCE漏洞，附POC脚本！", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247485526&idx=1&sn=83c86c7622aa056c3fb05b3350da67c1": "第一次听说漏洞复现也能赚钱", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260178&idx=1&sn=098908c02bb95ced851c66a9c0c40ed6": "通过 PDF 打印功能利用SSRF访问内部数据", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247486457&idx=1&sn=0b986375dbe83c422290a4c996b1f89e": "【漏洞复现】致翔OA接口open_juese.aspx存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484389&idx=1&sn=e3cac6c2d8f4b76f14984ceda7aba4a9": "【漏洞复现】ArcGIS地理空间平台manager任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496912&idx=3&sn=d99b8b1741aab3fe4bd98179f0eebe8d": "47套.NET系统漏洞威胁情报(11.26更新)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493634&idx=1&sn=91faff1eb1edaa51d5d24af57bc275f5": "【神兵利器】Spring-Boot漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787467&idx=1&sn=a415a569eadfb841c7db9ab18a3b9dee&chksm=8893bc24bfe43532392925113583d6bbcea38b01befd64f366890a21434cf7ffee6ad2e10535&scene=58&subscene=0": "致命漏洞与暴露API：财富1000强企业面临的30000个暴露API和10万漏洞挑战", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247577005&idx=1&sn=45569d8a6f70fa7ab394d043381adb81&chksm=9f8d3da5a8fab4b330598d784f6807b7a95c24777142828bee09e616609e718c2da49868b04a&scene=58&subscene=0": "360发布全球首份《大模型安全漏洞报告》，曝光近40个大模型相关安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0OTIwMjE2NA==&mid=2247485878&idx=1&sn=41c526462222e613d6b8a46a258fc7b1": "媒资安全×漏洞马拉松，多重福利等你来！", "https://mp.weixin.qq.com/s?__biz=MzA3MTUxNzQxMQ==&mid=2453885640&idx=1&sn=3e1ceccffe2678ec0472652487d4ac43": "文件暗码，外发文件溯源的绝佳手段", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247490096&idx=2&sn=d925e859b0508219fd163edb4e9ef899": "著名压缩工具7-Zip 存在远程代码执行漏洞——CVE-2024-11477", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614283&idx=1&sn=43cf42404e86e428a63f065ac7c7d18c": "漏洞挖掘 | 绕过 Mozilla 的邮箱验证", "https://mp.weixin.qq.com/s?__biz=Mzg5NTY3NTMxMQ==&mid=2247484513&idx=1&sn=6620bd18c90e154db5afbba6371d9f05": "突破clade-3.5的AI 限制，实现POC利用", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484560&idx=1&sn=690e025ba9f4b065f60beac01efbced1": "Nacos未授权下载配置信息【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486281&idx=1&sn=e5c9ba6462797f393b09d5cf7ed0ec40": "记一次小程序渗透测试到通杀RCE(0day)", "https://mp.weixin.qq.com/s?__biz=Mzk0MzY1NDc2MA==&mid=2247484196&idx=2&sn=7908876fe839978c7098227a1c40ccf2": "如何识别注入漏洞？", "https://mp.weixin.qq.com/s?__biz=Mzg2NDc0MjUxMw==&mid=2247485999&idx=1&sn=b66589de46fcaf731909c886a644b92a": "Microsoft 11 月 CVE 漏洞预警", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492819&idx=2&sn=57c085aa5c2d43f592f7a4fd79265fcf": "恶意软件campaign利用Avast Anti-Rootkit驱动程序的漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649766163&idx=1&sn=c4a6fc892c0cda56d40ffe8e86afb2e3": "2024漏洞马拉松启动 | 白帽群雄角逐下一个冠军！", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247551698&idx=1&sn=86a6698544ff900cd850608cfa23afd8": "kernel heap exploit（三）", "https://mp.weixin.qq.com/s?__biz=MzkyODYwODkyMA==&mid=2247484677&idx=1&sn=f9c76215185fdf633008ba959541c780": "2024 漏洞赏金猎人手记：100条建议", "https://mp.weixin.qq.com/s?__biz=Mzk0ODU4MjIyNQ==&mid=2247484028&idx=1&sn=9856b8e5c7979e3376ee7dcf2e8bc56f": "【逻辑漏洞】并发漏洞——经典案例", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211186&idx=1&sn=cfd66bc5142c59bc6a545bfde59d87a3": "圣乔ERP系统 login.action Struts2远程代码执行漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486138&idx=1&sn=b6054453c30e7c173804294105f13c55": "「漏洞复现」海信智能公交企业管理系统 AdjustWorkHours.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650209204&idx=1&sn=be4c88610fe1af349e023660bf415d25": "从一条威胁告警发现隐蔽的“毒蛇”", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247529673&idx=2&sn=4be9b199d8cdefa9826eccfe333fb5fc": "360发布《大模型安全漏洞报告》，曝光近40个大模型相关安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY5Nzc1OA==&mid=2247484146&idx=1&sn=f23706c715c5c04c0c6b1426a7652919": "log4j2漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499503&idx=2&sn=2dd6b3cf1b47ac7226dad142622fa875": "CNVD漏洞周报2024年第47期", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489223&idx=1&sn=205f609c84baae1ebb2d95de24b1d1d6": "【漏洞预警】ProjectSend身份认证绕过漏洞(CVE-2024-11680)", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247513144&idx=1&sn=6a175e131cf78cf6c45b6124b96693e1": "网安瞭望台第5期 ：7zip出现严重漏洞、识别网络钓鱼诈骗的方法分享", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247622787&idx=3&sn=3013db7374fa46c5082b496c870e7e7a": "网安巨头Palo Alto全球数千防火墙被攻陷：因开发低级错误造成零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487845&idx=1&sn=74f2e12a7ee52cc1c5b172b92996f7de": "用友NC process接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzU3OTAyODk4MQ==&mid=2247491032&idx=1&sn=3278fce857c70113b46fabacea552745": "2024漏洞马拉松-顺丰站", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247484817&idx=1&sn=25d5bcb234940ebd9375f2b0e4c6b875": "Sitecore 8.x - 10.x存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094118&idx=2&sn=10e10c3cc36bd2eff3732e38beb4eb93": "网安巨头Palo Alto全球数千防火墙被攻陷：因开发低级错误造成零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664230673&idx=2&sn=6b7f7b55158483f87608d00cc4d2ea5d": "360发布大模型安全警报：近40个漏洞易被利用，60美元即可投毒", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308240&idx=2&sn=e6acef1171ac52d2e1162e1539b675bf": "低成本就能给大模型投毒？360发布全球首份大模型漏洞报告", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247514955&idx=1&sn=a3cbc42a77d14a37a48849100d56e651": "漏洞及指纹库图形化工具 -- James_synthesis_tooL（11月25日更新）", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652112824&idx=2&sn=ba8da830bfc3dd407d24615dc877f83e": "IBM 修补数据虚拟化管理器、安全 SOAR 中的 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498696&idx=1&sn=9c603a5712d1a1ba5d3bde85205229f7": "远程代码执行（RCE）漏洞（CVE-2024-21534）", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485743&idx=1&sn=9652ab072c993e40c94de41663922053": "CVE-2024-52940 AnyDesk信息泄露漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502158&idx=1&sn=b7dea73e6af39dee17845a15008c708c": "【SRC】未授权访问漏洞引发的惨案.......", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490022&idx=1&sn=37f02ae85e0d9bd765b907537eb5f3ba": "RomCom 利用零日漏洞进行复杂的网络攻击 Firefox 和 Windows", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066233&idx=2&sn=778f80b7b5c35162dd41acacfbd17148": "【安全圈】慎用，知名压缩工具7-Zip存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308240&idx=1&sn=96d32c8e6fa90561c84164ed75f4dca0": "慎用，知名压缩工具7-Zip存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521595&idx=1&sn=d9644a20742d498ecf898b968d561b3f": "QNAP修复NAS、路由器软件中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458584063&idx=3&sn=5bf1818d9d0e1dff3711c115252597a1": "惊喜开班！系统0day安全-IOT设备漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNzU5MDMxOA==&mid=2247484175&idx=1&sn=429aa490070bfae233ef01e059063fc5": "Feroxbuster-高效发现隐藏路径和漏洞（详细教程）", "https://mp.weixin.qq.com/s?__biz=MzkxODI4NDg3Nw==&mid=2247484737&idx=1&sn=7f597cca81f70fbe397aa00b2c746432": "BoidCMSv.2.0.0 后台文件上传漏洞（CVE-2023-38836）", "https://mp.weixin.qq.com/s?__biz=MzIzMjg0MjM5OQ==&mid=2247487888&idx=1&sn=8f0a8c385bc396bff3cd45c9fabe601b": "semcms存在多处漏洞(水一篇文章)", "https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247486315&idx=1&sn=ad071ba60323b8d34da7086295e30a18": "国家安全部：警惕深度伪造技术带来的安全风险", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513156&idx=1&sn=4ff7c148a1693c0de1be122e65851155": "网安巨头Palo Alto全球数千防火墙被攻陷：因开发低级错误造成零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499503&idx=3&sn=6528a919840c2d4021fa17a6d8572c60": "上周关注度较高的产品安全漏洞(20241118-20241124)", "https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247490834&idx=1&sn=eb50a16630b057d2df3d95a093a1641c": "某众测记录｜细心 = or ≠ 漏洞 ？", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521595&idx=1&sn=d9644a20742d498ecf898b968d561b3f&chksm=ea94a451dde32d47c4907aed77bba2cbf43c39f0253c14d24cc227b451f2489e1c88d3ba779a&scene=58&subscene=0": "QNAP修复NAS、路由器软件中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458584063&idx=3&sn=5bf1818d9d0e1dff3711c115252597a1&chksm=b18c337586fbba630100a046b4198faa50cc2da258b8f6dc2574578343be3bd62a44663a82d9&scene=58&subscene=0": "惊喜开班！系统0day安全-IOT设备漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513156&idx=1&sn=4ff7c148a1693c0de1be122e65851155&chksm=ebfaf364dc8d7a72e4199fef7d1a048e052562562dd75a8711db2223934a3508ee05a939365b&scene=58&subscene=0": "网安巨头Palo Alto全球数千防火墙被攻陷：因开发低级错误造成零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651129272&idx=2&sn=55ee9db36adfa0de3888d657ac768e87&chksm=80e71f08b790961eca60cedb47205df6b547a3447a094e4c3d257d73c0efd3dd917861183254&scene=58&subscene=0": "重点防范！官方最新通报一批恶意网址和高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247529673&idx=2&sn=4be9b199d8cdefa9826eccfe333fb5fc&chksm=c1440674f6338f624cbb9a346ec458c87850f89924b736be06e1c3b8abe23a78cdbe3673bc77&scene=58&subscene=0": "360发布《大模型安全漏洞报告》，曝光近40个大模型相关安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066233&idx=2&sn=778f80b7b5c35162dd41acacfbd17148&chksm=f36e7df9c419f4ef78b0e4c4c5239cf58d221196e79aed7de570774b6e0864cb19c061984fca&scene=58&subscene=0": "【安全圈】慎用，知名压缩工具7-Zip存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496912&idx=3&sn=d99b8b1741aab3fe4bd98179f0eebe8d&chksm=fa595a3dcd2ed32b501f82a6b0f30c4deb8936ceee44ea708009fefea4f0357746e91bc9c4b3&scene=58&subscene=0": "47套.NET系统漏洞威胁情报(11.26更新)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664230673&idx=2&sn=6b7f7b55158483f87608d00cc4d2ea5d&chksm=8b59ede8bc2e64fe7beb33b985b55b643633ced83b057b63edb6a882dc9c69bc256d70364877&scene=58&subscene=0": "360发布大模型安全警报：近40个漏洞易被利用，60美元即可投毒", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499503&idx=2&sn=2dd6b3cf1b47ac7226dad142622fa875&chksm=973acd8da04d449b2f515b675ac7c0e030eb1ded893ae2e95669aa0d4f1905626fd05b61322f&scene=58&subscene=0": "CNVD漏洞周报2024年第47期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499503&idx=3&sn=6528a919840c2d4021fa17a6d8572c60&chksm=973acd8da04d449bc6abed7f799a0e407df2db60c6ae96f7d4de508087fc78f88cf1bced3566&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241118-20241124)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496424&idx=1&sn=9edd1b8c5ee4cd0f5995cccd9e27ed60&chksm=e8a5f88bdfd2719d344867eb15fe930b7a378a539366eb7e9b8f557407c80bd31c77ef93e70c&scene=58&subscene=0": "如何通过发现 API漏洞赚到百万美刀", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517331&idx=1&sn=67b0bb66494eddc76b7c8c5f4a9a0a68": "几个常见的越权漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492698&idx=4&sn=67c0713461563b2da2c6432c360df08c": "无需用户交互即可利用 Firefox CVE-2024-9680 和 Windows CVE-2024-49039中的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793276&idx=1&sn=6f49f00a02c2093806a4281bbed7bcff": "俄罗斯黑客组织Romcom利用0day漏洞攻击 Firefox、Tor 用户", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247509479&idx=1&sn=fcd10e1e25906677825041d94c01d6e6": "Shiro漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491681&idx=1&sn=b6ec04cc6969427872d1425cb42e0dab": "超过 2,000 个 Palo Alto 防火墙遭到最近修补的零日漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247536753&idx=1&sn=b3ae96aa4bb51470b962b0f96714cc95": "网安众生相【四十七】网络安全一本及以上学历就业路线推荐，适用毕业一两年甲方就业的同学....", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487869&idx=1&sn=c6eec65d79d82285101ba7a80848077c": "顺景ERP GetFile接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499276&idx=1&sn=fa57cd3c739d2a56024d1a6a6da003c7": "G.O.S.S.I.P 阅读推荐 2024-11-27 又一个内核内存安全漏洞猎手", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492698&idx=2&sn=50144deca9bef5a52a097e941775f37a": "macOS 漏洞 (CVE-2023-32428)本地提权，有poc", "https://mp.weixin.qq.com/s?__biz=MzIyNzc3OTMzNw==&mid=2247485594&idx=1&sn=f07916b48ea1a7d4826a562a9f983b1b": "【工具分享】某 FE 平台一键漏洞探测工具", "https://mp.weixin.qq.com/s?__biz=MzI3NzI4OTkyNw==&mid=2247489519&idx=1&sn=b939e5dc74d7454cca83e688b2f45a4d": "【漏洞情报】快排查！开源分享功能域名遭灰黑产抢注，用作黑帽SEO", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484561&idx=1&sn=8cb121fd6b70d997bb2172fba8850978": "多款AC集中管理平台未授权漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492810&idx=1&sn=389a83e0263bfc916ef686658d7b17e3": "James_synthesis_tooL | 日常渗透测试或攻防演练中对于漏洞及指纹的积累工具", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491570&idx=2&sn=1353e926154547a4132feb4a8afb1bd0": "漏洞预警 | 懂微百择唯·供应链SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247505583&idx=1&sn=3005e31a4684af8891cef2abef768833": "美国Verizon、AT&T电信网络攻击案疑似内鬼kiberphant0m？此人声称获取了特朗普和哈里斯的通话记录", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247505583&idx=2&sn=6ea0b2ec70e958d252246bd0abf6be4e": "小米电动滑板车漏洞或致电子木马攻击：电池供电嵌入式系统上的勒索软件、跟踪、DoS和数据泄露问题研究", "https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247522279&idx=1&sn=9ffc60ebfdd7792c6353624adbf4b0ec": "2024年软件供应链安全挑战迈入新阶段！", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493697&idx=1&sn=5e927967f0126a4b20bcf610135bf63c": "【神兵利器】JAVA JMX漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488646&idx=2&sn=c2dfaf5ba31c7d478865e3dddd31b72a": "【大量存在】用友U8C ajaxgetborrowdata存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247534800&idx=3&sn=cc02fd4232b68f295133224584d8cd6f": "MITRE公布最危险软件漏洞TOP25榜单", "https://mp.weixin.qq.com/s?__biz=Mzg5NjU3NzE3OQ==&mid=2247490236&idx=1&sn=2467e77baf0e3b560ef57a7725560439": "【漏洞情报】快排查！开源分享功能域名遭灰黑产抢注，用作黑帽SEO", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502491&idx=1&sn=6bfeace574bf3ea581fbbb82cf005900&chksm=fe79ee03c90e67153a7cdca590eff3bbebfc9d7026e656bebc14779be100a7bee9b71f13927a&scene=58&subscene=0": "GitLab LFS Token 权限提升漏洞(CVE-2024-8114)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458584116&idx=2&sn=efa0909856edd8923c4e025510b5cb8f&chksm=b18c34be86fbbda8264e38c310b407ecce383c96d111d66c164454920f3f1c4ef7203e68370e&scene=58&subscene=0": "“看雪漏洞小组”集结！组团挖洞，一起冲击华为漏洞更高奖励", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521617&idx=1&sn=cc6372f588d0fbc52027797f7d23ae53&chksm=ea94a43bdde32d2d7788140cbef334c7440a1777d309ce9d91bac48e50624f4f067938c35f6f&scene=58&subscene=0": "俄黑客组织 RomCom 被指利用火狐和Windows 0day攻击用户", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521617&idx=2&sn=0e9ac32a3223e727cd6cd99460e0387e&chksm=ea94a43bdde32d2d156961ca2f3e3020fe479986f24f7b566a4252db8e0cf759e9e2b35cea13&scene=58&subscene=0": "Palo Alto 防火墙 0day 由低级开发错误引发", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499276&idx=1&sn=fa57cd3c739d2a56024d1a6a6da003c7&chksm=c063d0d5f71459c32ce5dd3a25361caba4f9a8c7af58670973bb6750a59feddcc2e6e823f0a2&scene=58&subscene=0": "G.O.S.S.I.P 阅读推荐 2024-11-27 又一个内核内存安全漏洞猎手", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066249&idx=3&sn=c16dd8113efa3f879e94a0128384f7be&chksm=f36e7d89c419f49fb3a2915184568b4a51c1bcf58da2b60b496d622047008b653b429485ab28&scene=58&subscene=0": "【安全圈】Firefox和Tor浏览器遭遇神秘0Day漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066249&idx=4&sn=df7d811b5e62d6af63575344f1f21cad&chksm=f36e7d89c419f49f075967dfff39374d77a07eeef0a4b0df50211a4fb3226a276a3c467fe120&scene=58&subscene=0": "【安全圈】CVE-2024-8114：GitLab 漏洞允许权限升级", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513163&idx=1&sn=6e7bc3db9029e161c258fba47004aa43&chksm=ebfaf36bdc8d7a7d15a39a39e960ffa596396ccd943a500db69cc2d7b085ba62612c3080ba6b&scene=58&subscene=0": "网站漏洞致用户信息长期被爬，两家保险商被罚超8100万元", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523860&idx=1&sn=6bd78d3240bebaa8b0b3669897db617d&chksm=ce461504f9319c127636bae094b3e7d3ca4eaef1b9b95e44ad7980154e6d827f30cd082466e3&scene=58&subscene=0": "【漏洞通告】GitLab 权限提升漏洞(CVE-2024-8114)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523860&idx=2&sn=60dee21e95737f07ed9a68c90e5bf180&chksm=ce461504f9319c12192c0cb88cbb3db2a8b37756b91e892f421828c33472b2a30f55d5be871d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241118-20241124)", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485748&idx=1&sn=8a6f72ab5197ccbf53c8f82555e3d192": "【漏洞复现】某平台-receiptDetail-mysql-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651461677&idx=1&sn=62fa971338a579f75e9efa7bdad3e5d7": "信息安全漏洞周报（2024年第48期）", "https://mp.weixin.qq.com/s?__biz=MzkyNjczNzgzMA==&mid=2247484294&idx=1&sn=945aa5d3f04bd25e27bf79f75bab0812": "漏洞挖掘—越权更改、删除信息", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579846&idx=1&sn=0bb37a38ab5998f595038709b86b4063": "RomCom 黑客利用 Firefox 和 Windows 零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzczNTA4MQ==&mid=2247483957&idx=1&sn=0bcd9ad9035581a34f8db5bacc018c41": "疑似0day window全版本RCE", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486164&idx=1&sn=82f20754d12c6098cffb4d09c43a3de4": "「漏洞复现」安科瑞环保用电监管云平台 GetEnterpriseInfoById SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MzU3MTcwNg==&mid=2247486141&idx=1&sn=3524ce4aeed67e0037b31c4589d2fe8f": "记一次逻辑漏洞(2)", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545492&idx=1&sn=46f8045ffe716fe86aa708ba2a0105fa": "较为丝滑的一次证书站漏洞打包", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614324&idx=1&sn=80bc2f0431733718278f14f920fb8d38": "漏洞挖掘 | 通过一个简单的注册漏洞获取任意账户访问权限", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502502&idx=1&sn=874d1d96ffd31643476939deced0fd4f": "【在野利用】ProjectSend 身份认证绕过漏洞(CVE-2024-11680)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486295&idx=1&sn=abfa87852e2e7dc8d2b0d2c9c1760f95": "某微信万能门店小程序系统存在前台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247488006&idx=1&sn=69194b9ea7c038bace29df89d53fa101": "工具分享 | nuclei管理工具＋9w poc不想要嘛？", "https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651206699&idx=1&sn=b850cf1e858f00b90a717efd504988dc&chksm=bd2cd18d8a5b589baf4bc2e8229f0eef51a96cf1ffe79bcd9214278becd3684f3fa040892043&scene=58&subscene=0": "大模型应用实践（一）：AI助力Code Review安全漏洞发现", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247487694&idx=2&sn=4cbf3f73698e15a3d4134fe9c293a674": "漏洞预警 | 7-Zip代码执行漏洞CVE-2024-11477", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513175&idx=1&sn=aad9a2b08d9d8d9699a7496e63f316e8": "史上最高漏洞赏金计划出炉：单个漏洞最多奖励1.1亿元", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247489930&idx=1&sn=766e34a9f96662ab6f3afea35dc2e1be": "创宇安全智脑 | 用友 NC process SQL注入等73个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870256&idx=1&sn=25f2861475ff891be653aa284cb49e32": "新书来了！《Web漏洞分析与防范实战（卷1）》正式发售", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500309&idx=3&sn=3cf382f546d45d798a5eafd69bbfc3e0": "【漏洞通告】Zabbix SQL注入漏洞（CVE-2024-42327）", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247494942&idx=2&sn=1126c4b20f4c21941b695f0588b1c62c": "Firefox和Tor浏览器遭遇神秘0Day漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651134615&idx=1&sn=dcb76588fcf20926def837cfcffaa086": "构建电子政务全渠道安全防御体系 梆梆安全亮相2024网络安全创新发展大会", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247529850&idx=1&sn=4a1addfc83108525d6cf92ddb002a8f8": "Intruder推出Intel：一个免费的漏洞情报平台", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485141&idx=1&sn=0d2c58af3cb50194f0f70f2525b1beee": "漏洞推送|万能门店小程序管理系统 requestPost存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489436&idx=1&sn=7df9869adacb2d84a3cc11a313adf700": "Altenergy电力系统控制软件 status_zigbee SQL注入漏洞(CVE-2024-11305)", "https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649766179&idx=1&sn=19bc392d7501331260a85660f1d427d8": "漏洞盒子 x 汽车之家SRC | 漏洞盒子「企业SRC」新住客", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521625&idx=2&sn=8a7741ed8a419b06a972294416323328": "黑客利用 ProjectSend 严重漏洞攻击服务器", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500309&idx=2&sn=96fcae50d9147bd55ad96ab4aef729f1": "【漏洞通告】ProjectSend身份验证绕过漏洞（CVE-2024-11680）", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517346&idx=1&sn=994ffeec2fa01bbf52616e57faceed19": "Nacos2.4.3新版漏洞利用方式总结", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487882&idx=1&sn=538ceedb7a3754102f139f196c13d046": "万能门店小程序管理系统_requestPost接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506224&idx=1&sn=e83970b0c4d3942d269e688628784f1c": "必应主站www.bing.com惊现蠕虫XSS漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517394&idx=1&sn=21abc79bebba33a518c9b526fa6e2aa5": "【工具推荐】springboot打点工具，内置目前springboot所有漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMDQ4MDU2MA==&mid=2247484417&idx=1&sn=6f4cc0766411a4efe0a5ba648a80f51f": "利用gitRepo卷在Node上RCE(CVE-2024-10220)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489233&idx=1&sn=813b669371f32694d48087f9e54af5f8": "【漏洞预警】Zabbix SQL注入漏洞（CVE-2024-42327）", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650989985&idx=1&sn=a710028cf7838a01f6146e554247fd78": "新书发售抢先看：《Web漏洞分析与防范实战（卷1）》", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247622843&idx=2&sn=e58b5c466505cf5ae07a26a4eef66e53": "知名压缩软件被曝严重漏洞，谁会成为受害者？", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458584139&idx=3&sn=2da9c8566535b151f08abba973c4cbda": "惊喜开班！系统0day安全-IOT设备漏洞挖掘（第6期）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523865&idx=1&sn=a85f1659ccbd217fd246c088babf8a97": "【漏洞通告】Zabbix 服务器SQL注入漏洞(CVE-2024-42327)", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247490220&idx=2&sn=d1d013adb3a9540504c23b2930e6f846": "开源文件共享软件存在严重漏洞CVE-2024-11680，已有公开的PoC", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486870&idx=2&sn=1948479dc1ffdf886bd89765c51dcfb3": "记一次SRC利用github搜索拿下中危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247503484&idx=1&sn=e3eb5a40d0988c77c33d974008df4c8d": "构建 Spectre：用于 XSS 漏洞利用的红队工具（第 1 部分）", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493702&idx=1&sn=2186fab30eaee576dbca5c54e3bf00e6": "【神兵利器】高危漏洞EXP实用性工具", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488650&idx=1&sn=3c2a69aef2c8bd73e875b717bca41cf0": "【0Day】圣乔ERP系统name*存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524738&idx=4&sn=b31c451cdd0b6f7219abff8f78b19210": "macOS 磁盘仲裁中的 TOCTOU 漏洞可通过利用符号链接进行沙箱逃逸和权限升级攻击", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502502&idx=1&sn=874d1d96ffd31643476939deced0fd4f&chksm=fe79ee3ec90e6728cb38cbc7cf03b5ac32273e1cc74442e830866650cc7551ccda12fd8ab98b&scene=58&subscene=0": "【在野利用】ProjectSend 身份认证绕过漏洞(CVE-2024-11680)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458584139&idx=3&sn=2da9c8566535b151f08abba973c4cbda&chksm=b18c34c186fbbdd73b144f7819cfe609f804980362e2d8d65188bf5b244531a5f7848cc104f6&scene=58&subscene=0": "惊喜开班！系统0day安全-IOT设备漏洞挖掘（第6期）", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513175&idx=1&sn=aad9a2b08d9d8d9699a7496e63f316e8&chksm=ebfaf377dc8d7a6171bdefc5530053ed3687222b6955f98bd96205bbe5608bed5807bf8c2223&scene=58&subscene=0": "史上最高漏洞赏金计划出炉：单个漏洞最多奖励1.1亿元", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521625&idx=2&sn=8a7741ed8a419b06a972294416323328&chksm=ea94a433dde32d256ddf003492c63581ae6e4ca796a7b7d06dfae15b7c1db0eaf3864e15b031&scene=58&subscene=0": "黑客利用 ProjectSend 严重漏洞攻击服务器", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247529850&idx=1&sn=4a1addfc83108525d6cf92ddb002a8f8&chksm=c14407c7f6338ed116afe6056c52bb6911a17d0b2be1ca25e1f374efa7d03d5732ed7eff8e79&scene=58&subscene=0": "Intruder推出Intel：一个免费的漏洞情报平台", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523865&idx=1&sn=a85f1659ccbd217fd246c088babf8a97&chksm=ce461509f9319c1f4441af7449295d3562c27b0cf5dcae9304e5fde4a4d849357bd239935320&scene=58&subscene=0": "【漏洞通告】Zabbix 服务器SQL注入漏洞(CVE-2024-42327)", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485752&idx=1&sn=e28d9413e0a5ef65c14fa149dc727d7c": "【漏洞复现】某平台-statusList-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247502795&idx=2&sn=93d58992c4190f544fae0e8b5d4b8c7f": "RomCom 黑客利用 Firefox 和 Windows 零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247488190&idx=1&sn=e8350d40fdb0826b878493ba1901cbe5": "【企业数据泄露】IP欺骗攻防实战指南，打造铜墙铁壁级安全防线！", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247074&idx=1&sn=71265ed700c3e74e33cefa7595424766": "安全e刻 | 全球最大盗版IPTV网络被清剿，月入2.63亿美元", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493727&idx=1&sn=52aabdb46b51bc552492cba49750ce09": "GitLab漏洞汇总", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247485787&idx=1&sn=1f202987e42634743b29aeea66916628": "Java反序列化漏洞之JNDI注入原理及利用IDEA漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkxMTY1MTIzOA==&mid=2247484433&idx=1&sn=14e3f8fdb875a41434afc1cef578dc42": "【技术分享】关于C-Lodop打印服务文件读取漏洞修复方式", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793307&idx=3&sn=6fd4460f0136999cf427b64b71ce498a": "微软修补四个漏洞，其中一些漏洞非常严重且已被广泛利用", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247535199&idx=2&sn=d31d171442f078518d645d320b381482": "全球 | 近40个【大模型】相关安全【漏洞】曝光", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247488833&idx=1&sn=a92313f93aa23824eadb8be499d6b166": "渗透测试高频面试题分享", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484577&idx=1&sn=2cc88f0347850a9a6f074438afe107e5": "资产管理运营系统mobilefront2接口处存在前台文件上传漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579846&idx=1&sn=0bb37a38ab5998f595038709b86b4063&chksm=e91468fcde63e1ea605e3adce9da5489720e2d21a69c61eb7e63479b335a52d44bd7c62bbffe&scene=58&subscene=0": "RomCom 黑客利用 Firefox 和 Windows 零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496830&idx=1&sn=4550017de10cbb9463e78d91a1472b71": "【漏洞通告】ProjectSend身份验证绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496830&idx=2&sn=32feb8d3794ac11cdf54df8999ee1ce1": "【漏洞通告】Zabbix SQL注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4MjYxNTYwNA==&mid=2247487556&idx=1&sn=a2ba74fa4542943c3f58fff8acd6ca6e": "Nuclei报告图形化", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502512&idx=1&sn=6f8aba628a7b2bfe2bcf2403541b375e": "【已复现】Mozilla Firefox 释放后重用漏洞(CVE-2024-9680)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650604261&idx=4&sn=89ded4cfd4566918dd520488c54f250e": "Shiro漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg2ODE5OTM5Nw==&mid=2247486516&idx=1&sn=e9fddb6f26423f7d6a50d7d34be6dc4c": "WPS最新0day漏洞？电脑被控仅仅是一个PDF（含视频）", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507478&idx=1&sn=3427d3a5f23b7973076ac0219e3c2073": "0day速修 | H3C SecCenter SMP 安全管理平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486304&idx=1&sn=8f7f768fcd81251b6ece478f82fb5172": "edusrc 某中学Swagger接口泄露未授权漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkxOTUyOTc0NQ==&mid=2247492639&idx=1&sn=443bb480a80ca6b2fa33ab02f3161461": "仍未出补丁,Windows新的PE漏洞及完整利用代码", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486173&idx=1&sn=859b8110fe566e760fc432622c66d100": "「漏洞复现」《黄药师》药业管理软件 XSDService.asmx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484429&idx=1&sn=68a1517617279baad8d107745f42fc21": "【漏洞复现】同享TXEHR V15人力管理管理平台信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247485886&idx=1&sn=9e399e37895b283dec4804d27dfb675b": "安卓app抓包总结", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492826&idx=1&sn=75938c84eb56cc7f82beb164b02c29fa": "Burpsuite存储桶配置不当漏洞检测插件", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491585&idx=1&sn=b4006957cc14a541db72088caecfbd9c": "漏洞预警 | 辰信景云终端安全管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491585&idx=2&sn=70273e2ec824ce2e0ec8669552d2534f": "漏洞预警 | 任我行协同CRM普及版SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491585&idx=3&sn=3febf83e42ab74481bebf264334e9eca": "漏洞预警 | TamronOS IPTV系统任意用户创建漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066334&idx=4&sn=11465e70e7b110f53a2339d3dae91a21": "【安全圈】俄罗斯黑客组织 Romcom 利用 0day 漏洞攻击 Firefox、Tor 用户", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787484&idx=1&sn=9c4fcdaa3a27548374d027af4bcfc38d": "POC公布：Windows驱动程序暴整数溢出漏洞可致权限提升", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489455&idx=1&sn=119190d29be2f70b8be45a609e8b45ef": "懂微百择唯·供应链 RankingGoodsList2 SQL注入致RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3NTIyNzgwNA==&mid=2650259619&idx=2&sn=e338a58a66c60964bac54483ff1b0f85": "VPN漏洞和弱凭证助长勒索软件攻击", "https://mp.weixin.qq.com/s?__biz=MzkzNTUwNzIxNA==&mid=2247484491&idx=1&sn=5b3201c62060ef45a4d7fdd941051766": "【实战小技巧系列】前端 JS 解密：一次简单高危漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500317&idx=2&sn=16fcd5426c0b54439754a9c7ddaffefa": "【漏洞通告】Zyxel ZLD防火墙路径遍历漏洞（CVE-2024-11667）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500317&idx=3&sn=0a51e2ea3a8e46f34ce745e930bc79b8": "【漏洞通告】Apache Arrow R package反序列化漏洞（CVE-2024-52338）", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484291&idx=1&sn=2c88236e3448e8b5dfa525803f1f70fa": "【0day漏洞复现】广州和晖科技有限公司本草纲目首营资料审核中台系统存在认证绕过", "https://mp.weixin.qq.com/s?__biz=MjM5Njk1MDY5Ng==&mid=2247491131&idx=1&sn=e0d2e24b268d735ec0bc5039a5d98645": "Android Native内存型漏洞实例", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489445&idx=1&sn=0ff8623a90af54b023cbf870a1b7abd1": "D-Link NAS设备 sc_mgr.cgi 未授权RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491118&idx=1&sn=2a8cd53472ffeabe46dd0aa8ddcb820f": "记一次小程序渗透测试到通杀RCE(0day)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489245&idx=1&sn=3f922cee40f94bcc5d8936ebb8bd1259": "【漏洞预警】H3C SecCenter SMP未授权输入验证不当漏洞可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489245&idx=2&sn=9ba5ffd1d4f95444d590dd16f0b59623": "【漏洞预警】Apache Arrow R package反序列化漏洞（CVE-2024-52338）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489245&idx=3&sn=08443a5512e58139bc61e318ba68fd64": "【漏洞预警】Zyxel ZLD防火墙路径遍历漏洞（CVE-2024-11667）", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485150&idx=1&sn=8bcafff0d5d7cde84c06c97d2f2e1566": "漏洞推送|某信公交apply存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490040&idx=1&sn=b912e9429b195dedefa1fbfff148f631": "Microsoft 修复 AI、云和 ERP 安全漏洞；一个在主动攻击中被利用", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485971&idx=1&sn=8b767002024a7edacf192d5f42041df6": "广联达OA系统漏洞批量检测工具 - GlodonScan", "https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247515538&idx=1&sn=4a2477128ee6e1c0a01b279ecc8a5195": "【漏洞复现】安科瑞环保用电监管云平台 HomenewLogin SQL注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247523427&idx=1&sn=dd1123e0af7c000e04f67383a2af0d82": "funbox5复现", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493936&idx=1&sn=aa7e8c1beea46d10a356a837a611bf8d": "【2024漏洞马拉松】OPPO赛程正式启动，1.5倍奖励，新人额外奖励……超多奖金拿到手软！还有手机大奖等你来拿！", "https://mp.weixin.qq.com/s?__biz=MzU1MzEzMzAxMA==&mid=2247492696&idx=1&sn=de59abdfd55672b0046505484485ff41": "网络安全动态 一周速览 2024.11.23 - 2024.11.29", "https://mp.weixin.qq.com/s?__biz=Mzg4MzU3MTcwNg==&mid=2247486156&idx=1&sn=5305da7ce5dfe5dcb3b78d365016550e": "记一次逻辑漏洞（3）", "https://mp.weixin.qq.com/s?__biz=MzkzMDY1Nzc5MQ==&mid=2247483785&idx=1&sn=2a0f73e089f60fd9570e9d25f7b8d66c": "记一次20000美元的漏洞挖掘报告(HackOne)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491684&idx=1&sn=a4cd67263f4e366037fdcace8843b6c2": "Ubuntu Linux 受到“需要重启”漏洞的影响，该漏洞会导致本地提权到 root", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247514984&idx=1&sn=c57940df55bdbd6e53cb457f4b060964": "Shiro漏洞利用工具 -- ShiroEXP（11月26日更新）", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521633&idx=1&sn=479bf08551e7f1c208c83e877ab89f34": "速修复！Advantech 工业WiFi 访问点中存在20个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDYwNDc5Nw==&mid=2247486425&idx=1&sn=0551e4fecc2912049578b9c78a1868c4": "俄罗斯关联RomCom组织利用零日漏洞攻击Mozilla和Windows系统", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488666&idx=1&sn=1ef6c1da4033ecf956961f030d0f643c": "【漏洞复现】九思OA getUserStatusByRole存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491603&idx=1&sn=c1efcecbe162862e28c3fe13e8e0f85d": "漏洞预警 | 东胜物流软件任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491603&idx=2&sn=ad336b228ccca5f55ebc26514bfca10b": "漏洞预警 | 任子行网络安全审计系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491603&idx=3&sn=677995c6d32ab004efcf3e5216b28147": "漏洞预警 | 西迪特Wi-Fi Web管理系统远程命令执行和登录绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502523&idx=1&sn=a831935fa92e1ff34b2ffa0bc192aeb7": "【已复现】7-Zip 代码执行漏洞(CVE-2024-11477)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787484&idx=1&sn=9c4fcdaa3a27548374d027af4bcfc38d&chksm=8893bc33bfe4352539871ef424161e89f3c548991f974353b109d29e5fa176fbbe8cd06c1c55&scene=58&subscene=0": "POC公布：Windows驱动程序暴整数溢出漏洞可致权限提升", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521633&idx=1&sn=479bf08551e7f1c208c83e877ab89f34&chksm=ea94a40bdde32d1dc2416c640578e2c28536a8d53f4823815adc4ea55ee71c00617606ac3885&scene=58&subscene=0": "速修复！Advantech 工业WiFi 访问点中存在20个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507478&idx=1&sn=3427d3a5f23b7973076ac0219e3c2073&chksm=cfcabd02f8bd341450c49c57e2944986992da9eb9a85e28e0cfe030a99e5f5ff31e48b65fd77&scene=58&subscene=0": "0day速修 | H3C SecCenter SMP 安全管理平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066334&idx=4&sn=11465e70e7b110f53a2339d3dae91a21&chksm=f36e7e5ec419f74854a25fa61ed147efd22e98ef5b6de5c23de7bd687f6e2459303cbc314c3a&scene=58&subscene=0": "【安全圈】俄罗斯黑客组织 Romcom 利用 0day 漏洞攻击 Firefox、Tor 用户", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502512&idx=1&sn=6f8aba628a7b2bfe2bcf2403541b375e&chksm=fe79ee28c90e673ed4c87de21345a91cd57d6bd9b3dd5350d1c89cdf28fb5f82edbbfeb0846a&scene=58&subscene=0": "【已复现】Mozilla Firefox 释放后重用漏洞(CVE-2024-9680)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493936&idx=1&sn=aa7e8c1beea46d10a356a837a611bf8d&chksm=fa78e87ccd0f616ae40f81749ef755aacee837416e4bb8b70e07079b3ade1573f0e4f4365120&scene=58&subscene=0": "【2024漏洞马拉松】OPPO赛程正式启动，1.5倍奖励，新人额外奖励……超多奖金拿到手软！还有手机大奖等你来拿！", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247485469&idx=1&sn=3326a0c63e8b77dd3bbc660026f9d8ee": "俄国黑客组织 RomCom 利用 Firefox 和 Tor 浏览器零日漏洞，攻击欧洲和北美用户", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308588&idx=2&sn=7329e9b2eb8d07ede48fd64e561a1ec4": "FreeBuf周报 | VPN正成为企业入侵的关键路径；知名压缩工具7-Zip存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308588&idx=3&sn=507f9cfa85259269aad5b20cdc369747": "知名工业WiFi接入点被曝存在20多个漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655260600&idx=2&sn=d45fcadd0c225f99fa9553f8b67beeb0": "Windows驱动程序暴整数溢出漏洞可致权限提升", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491120&idx=1&sn=8db3b58d4bf3b995f085d9bb757a355f": "某众测记录｜细心 = or ≠ 漏洞 ？", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793322&idx=3&sn=4dd79dc082182372b968a8d6151913e6": "施耐德电气、mySCADA 和 Automated Logic 产品中发现严重 ICS 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MTg2NzI5OA==&mid=2247484746&idx=1&sn=fc5e8cfb4ee4912ca505e0adde2012ea": "Docker Registry 未授权访问漏洞利用(工具+利用思路)", "https://mp.weixin.qq.com/s?__biz=Mzg3NTk4MDQ1NA==&mid=2247484786&idx=1&sn=799ffb07449f2d2ce73067e9c4f38a50": "天清汉马vpn任意文件读取【漏洞复现】", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524888&idx=1&sn=bf44332ba1a09b699dc30663a366aeb4": "地穴传说：微软 Unicode 排序规则异常导致软件漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485712&idx=1&sn=34d09311081e1ccdcc96464b3824f719": "CVE-2024-48307｜JeecgBoot SQL 注入漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485712&idx=2&sn=f6b75b7ecbb1169fce7fbd70bbfbe1bb": "CVE-2024-46938｜Sitecore CMS未经身份验证任意文件读取漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650604301&idx=3&sn=6203d901cebb019b098eb79083364ff8": "漏洞挖掘｜遇到APP数据加密如何解密测试", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486182&idx=1&sn=cc3a52c0256ec17f34f9539fa82760b2": "「漏洞复现」昂捷CRM cwsfiledown.asmx 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247487758&idx=1&sn=982ca71dd0242d09a5ed9effb713cb7b": "cby围观同学求婚", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247485494&idx=1&sn=c9d6028a35da67abc3c0a4ae39c4383d": "CVE-2024-11477: 7Zip 中的“代码执行”漏洞 Writeup", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652112887&idx=2&sn=21e400e8cf4e6303d98403cc2af294c3": "攻击者利用Windows 11整数溢出漏洞提升权限", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491685&idx=1&sn=a907897b572d0e992a941751e26cc227": "德国起草法律保护发现安全漏洞的研究人员", "https://mp.weixin.qq.com/s?__biz=MzkyODY5ODAyOA==&mid=2247488568&idx=1&sn=b92c8b624e62d32b2387377ae2b89808": "打造高效运营引擎：揭秘IBM企业流程框架方法论的实战应用（附PPT下载）", "https://mp.weixin.qq.com/s?__biz=MzUxMjc0MTE3Mw==&mid=2247494775&idx=1&sn=663d228539b8c7d0207554d994968758": "Advantech工业级Wi-Fi接入点多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545552&idx=1&sn=b685a20e7273ec1ae2e5a2282c2e475d": "记一次接口fuzz+逻辑漏洞拿下证书站高危", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655260631&idx=1&sn=6979dd317fb046882d4563bf57e3907a": "CVE-2024-52338：Apache Arrow 存在严重安全漏洞，允许未授权任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247490911&idx=1&sn=9f1a6c7c0eae8c0864b4ad6818ed3e4d": "选择一个细分领域，成为专家，或许能发现漏洞甚至 0day 漏洞或逆向 n-day 漏洞，并撰写博客。", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485713&idx=1&sn=de263c85dbef17756b944853870cf207": "CVE-2024-42327｜Zabbix SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485713&idx=2&sn=6b514f8a63ef9950e23b2b6671d555c2": "CVE-2024-11477｜7-Zip代码执行漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650604309&idx=2&sn=da7af306259f84bf1d1eb30c34fe1963": "知名工业WiFi接入点被曝存在20多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247484100&idx=1&sn=bd1389cc16246729ae15e078bee53d54": "经验贴收稿分享3 | 一次XSS漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzAwOTQzMjMwOQ==&mid=2247483890&idx=1&sn=a691603b482681117b33c8e20dcc55db": "什么CNVD证书批量化挖掘 ？", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517444&idx=1&sn=0ee06e80236b7ffc5cd64df21a05d827": "CNVD通用型漏洞挖掘-cnvd证书的刷洞技巧", "https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650475531&idx=1&sn=87249b7f85681a8a8861489ecf32eabc": "秦安：刘纪鹏教授披露的这个股市不公平规则，亿万股民需怒吼叫停", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652112892&idx=2&sn=da534908bbc1b0b00bc9bae0a8fde09f": "AD证书服务漏洞使攻击者能够提权", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489204&idx=1&sn=8bf569f2824beddb053d74868d67d981": "记一次从0到1的漏洞挖掘过程 发现Accesssecret泄露实现权限接管 越权等漏洞|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247488022&idx=1&sn=67aaed483092d9231c0a1c1744d53f6e": "某通用系统0day审计过程", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486203&idx=1&sn=bb91174473f1d41934a85073804fec49": "「漏洞复现」九思OA workflowSync.getUserStatusByRole.dwr SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492888&idx=1&sn=e82e6cc24fad3f50641261e79572cc04": "一个半自动化springboot打点工具，内置目前springboot所有漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247509558&idx=1&sn=4ed77b8fbe43290b3fb889465673e9a3": "利用js挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491620&idx=1&sn=bc353ebff4eec5172710bb052bc2c31b": "漏洞预警 | PAN-OS Web管理界面身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491620&idx=2&sn=abf6ad1b88c4d7efe8ee9966fc2568de": "漏洞预警 | 海信智能公交企业管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491620&idx=3&sn=7b494bfcaffc088fe6b99d84309de032": "漏洞预警 | SRM智联云采系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488700&idx=1&sn=097193ece2c4ee45d744ff19b5883d77": "【0day】电子图书阅读平台downFile存在SQL注入漏洞", "https://mp.weixin.qq.com/s/sqwUvwdoK66SpY8CIdCxIg": "Windows 自动登录配置指南", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489464&idx=1&sn=5e9d75fc459499bee5931b854a9e6b22": "任子行网络安全审计系统 log_fw_ips_scan_jsondata SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDg2MDIxNQ==&mid=2247485181&idx=1&sn=19d894e589badfb040423b5f9dc66b0b": "一次0Day漏洞Rce审计流程", "https://mp.weixin.qq.com/s?__biz=Mzg2NjUzNzg4Ng==&mid=2247484687&idx=1&sn=6b3aebc2aa377f1ec8d89d07168de4c3": "发货100cms存在SSRF漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484430&idx=1&sn=ce83f5232dd760583f858e6ddccf7aa7": "【漏洞复现】OfficeWeb365 SaveDraw 任意文件上传getshell漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486155&idx=1&sn=853814e2de56863228049b5207d23e70": "一次0Day漏洞Rce审计流程", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY2ODE1NA==&mid=2247484884&idx=1&sn=c3d38f9f57d4e2b96d95aea5b15ddaa6": "【漏洞复现】Apache OFBiz远程代码执行漏洞(CVE-2024-45195)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493715&idx=2&sn=1babb7a848d1598f0a83a7e5df2fe4f3": "Active Directory Enumeration:RPCClient", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247487711&idx=1&sn=a4170ba803e835de42597805b12fbb0e": "又一款 all in one 综合漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg5MzMzNTUzMA==&mid=2247485567&idx=1&sn=66d20525cf0f69be1f3c6915c52fa48c": "SSP-高效 Spring 框架漏洞扫描与利用工具", "https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247487572&idx=1&sn=c515afe3ded2d5f5d763a2f8611aa1d7": "当信息安全成为廉价商品的时候，崩盘是迟早的！", "https://mp.weixin.qq.com/s?__biz=MzA3NTIyNzgwNA==&mid=2650259629&idx=1&sn=11894f840270c36fd578f81d2964d4e9": "漏洞管理挑战与自动化解决方案探讨", "https://mp.weixin.qq.com/s?__biz=Mzg3NTk4MDQ1NA==&mid=2247484811&idx=1&sn=c0e058c0906d579d8d6dd967b92666cb": "泛微E-Mobile-client_do-rce【漏洞复现】20241202", "https://mp.weixin.qq.com/s?__biz=MzkzNjM5NDU0OA==&mid=2247486203&idx=1&sn=195421b509dcbf7ba6eca59d16085fab": "一次0Day漏洞Rce审计流程", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133722&idx=1&sn=c3ac7d76f7b002486115949f7551d7b0": "Linux安全警报：首个UEFI bootkit恶意软件现身；ThinkPad笔记本曝硬件级漏洞，黑客可偷偷控制摄像头 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247490053&idx=1&sn=5f930cb292a1df708f877af3800eba4d": "从0到1掌握设备漏洞挖掘核心技术", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545580&idx=1&sn=b177bb6f876e6363c7633e53a8157dc2": "记一次网上阅卷系统漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485756&idx=1&sn=d0973175772b2f5f39a5557ff4d8e2f0": "【漏洞复现】某平台-TMScmQuote-GetFile-readfile任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3ODk3ODE2OA==&mid=2247484389&idx=1&sn=3614d5031272831703e808971f003bbc": "【福利抽奖】用网空测绘ZoomEye主动发现被黑的网站", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291900&idx=1&sn=52fb27c14d392ae7db10750c2810342f": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247505266&idx=1&sn=6ba5102dc93110ef70185d6e456fc083": "每周网安资讯 （11.26-12.2）|Containers等厂商的多款产品存在链接跟随漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521645&idx=1&sn=6b419fc6a9985c4a220c5fd4596e4d3e": "微软修复已遭活跃利用的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521645&idx=2&sn=3a85491541969226b45d2bca18f4373b": "VMware 修复 Aria Operations 中的多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247523491&idx=1&sn=4ea12a053dc17deb84ecceedaa7abd91": "API测试思路及crAPI漏洞靶场复现", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495539&idx=1&sn=b497e7a41bd73cd28d81ad392c17c499": "CNVD漏洞周报2024年第48期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495539&idx=2&sn=51a7cb6561725d8d239ea7796d4c87d0": "上周关注度较高的产品安全漏洞(20241125-20241201)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502546&idx=1&sn=e301f3d4f389baa4e9e448b7cdefb1e8": "【已复现】Zabbix SQL注入漏洞(CVE-2024-42327) 安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502546&idx=2&sn=6e953166ad2f865e994cf4dae7787b9d": "安全热点周报：黑客利用 ProjectSend 漏洞攻击暴露后门的服务器", "https://mp.weixin.qq.com/s?__biz=MzAwNDUzNDExMQ==&mid=2247485166&idx=1&sn=fc6827c1156d35634432440dd02e68b9": "Patchwork(白象)APT组织Protego远控木马攻击场景复现", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650620029&idx=2&sn=9fcc1074fb8178d2f8ac88ecafa3ad0e": "非管理员就可访问！Zabbix SQL注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNjM4ODc3OQ==&mid=2247485518&idx=1&sn=8329a25397b75dc609b57b9a8fb31448": "网络安全态势周报（11月18日-11月24日）2024年第46期", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211215&idx=1&sn=4221144f225e260ea54da682b21083d1": "时空WMS-仓储精细化管理系统两处文件上传致RCE漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247506222&idx=1&sn=9f7508db88f8d909e35a3b08038c26fa": "聚铭网络上榜安全牛《网络安全企业100强》", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486533&idx=1&sn=8d46b544b1fdddb5cbc38b18ab0f13b7": "【工具分享】I-Wanna-Get-All 主流OA漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489485&idx=1&sn=3d132022d60a074ede75bdaab2c79f6f": "海信智能公交企业管理系统 apply.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489476&idx=1&sn=fe81181a05d394083a3fca2f8405d4ca": "Palo Alto Networks PAN-OS身份认证绕过导致RCE漏洞(CVE-2024-0012)", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247518527&idx=1&sn=5b925c3749b3c132148947805f8e350e": "送！一本书带你速通YaKit", "https://mp.weixin.qq.com/s?__biz=MzkwMzQyMTg5OA==&mid=2247485262&idx=1&sn=3979397ea2306771cb63291e43514ecb": "Java 安全 | 从 Shiro 底层源码看 Shiro 漏洞 (上)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489253&idx=1&sn=94cbfc91e7da2499acfad5272df15561": "【漏洞情报】任我行管家婆订货易在线商城 UploadImgNoCheck未授权文件上传限制不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489253&idx=2&sn=5f79f460785757251736a4635fbe639a": "【漏洞情报】九思协同办公系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517473&idx=1&sn=1b1243aeb8410ce2b661e1d2b892abbe": "0day 挖到手软，403 到 getshell", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485159&idx=1&sn=abb74fde1a013ec53abb6d7c9018b01d": "漏洞推送|EnjoyRMIS_cwsfiledown存在文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484742&idx=1&sn=95c54287f548e5f8ec29e9252cf822b4": "【漏洞复现】CVE-2024-11680", "https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247503995&idx=1&sn=9ded651555248b55f70a4e36ad2b1d89": "文末抽奖福利！发现Web API漏洞居然能赚到400w刀，看懂这本书你也可以！", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651129390&idx=1&sn=81a9a6bbaa7c79665824a969c6c5535b": "微软超高危漏洞“狂躁许可”：从无回显漏洞看传统漏扫局限性", "https://mp.weixin.qq.com/s?__biz=MzkxNjU2NjY5MQ==&mid=2247508149&idx=3&sn=58f5ae285624269d9247f4248ba55ded": "苹果官方警告：零日漏洞攻击瞄准Mac电脑用户", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247489301&idx=1&sn=50d654dc3d2fb82eda35e3b17d3a63a4": "全球首份《大模型安全漏洞报告》", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133722&idx=1&sn=c3ac7d76f7b002486115949f7551d7b0&chksm=bd15a7c98a622edfc0eced4f184a4d959fa1ff4e5354018393a27f00466fffaf7211ee585683&scene=58&subscene=0": "Linux安全警报：首个UEFI bootkit恶意软件现身；ThinkPad笔记本曝硬件级漏洞，黑客可偷偷控制摄像头 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502546&idx=1&sn=e301f3d4f389baa4e9e448b7cdefb1e8&chksm=fe79ee4ac90e675c46b21b6755d924988a848e52f13af242be79c9b65a4dd174aafb5a1cdd6d&scene=58&subscene=0": "【已复现】Zabbix SQL注入漏洞(CVE-2024-42327) 安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502546&idx=2&sn=6e953166ad2f865e994cf4dae7787b9d&chksm=fe79ee4ac90e675c2e13a316d23a4206e33721cfea9d557383cb4da90247163672fb76e03866&scene=58&subscene=0": "安全热点周报：黑客利用 ProjectSend 漏洞攻击暴露后门的服务器", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521645&idx=1&sn=6b419fc6a9985c4a220c5fd4596e4d3e&chksm=ea94a407dde32d117f4af2c69d432603462a5c5f07564a4197cbec9f18e001180b3fde0d2377&scene=58&subscene=0": "微软修复已遭活跃利用的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521645&idx=2&sn=3a85491541969226b45d2bca18f4373b&chksm=ea94a407dde32d111019da790bc26a832e84ea5c251237f49761f7d5bea8d8509b8ab7d648c7&scene=58&subscene=0": "VMware 修复 Aria Operations 中的多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MTg2NzI5OA==&mid=2247484752&idx=1&sn=11f717a42e8b1e332a6e68aa76a479fd": "Burpsuite存储桶配置不当漏洞检测插件", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492812&idx=1&sn=9735ed97824b65fb886b0a07fe30720f": "Windows 任务计划程序漏洞 (CVE-2024-49039) 零日漏洞利用代码发布", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247485927&idx=1&sn=3a2f360161032c9065e88f6a619341e8": "游戏漏洞挖掘思路分享", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489494&idx=1&sn=270503f5a73bb72a19c28aa50be37baa": "智联云采 SRM2.0 quickReceiptDetail SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NDgxMzgxNA==&mid=2247496442&idx=1&sn=978d98c1582027cc0ee73be7f459259d": "CNVD漏洞周报2024年第48期", "https://mp.weixin.qq.com/s?__biz=Mzg3NTk4MDQ1NA==&mid=2247484813&idx=1&sn=7e2432f14450d4de504f6b13876bb8f3": "泛微E-Mobile-client_common-error命令执行【漏洞复现】", "https://mp.weixin.qq.com/s?__biz=MzA3NDE0NDUyNA==&mid=2650801813&idx=1&sn=f52a5453c3112fafbcc1027879181c32": "美创蝉联国家信息安全漏洞库（CNNVD）二级技术支撑单位！", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499505&idx=1&sn=f889cf5b6519afeef6e1e158a49ab584": "CNVD漏洞周报2024年第48期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499505&idx=2&sn=ef3fadc3bc76fc795be2bb777d46dcb3": "上周关注度较高的产品安全漏洞(20241125-20241201)", "https://mp.weixin.qq.com/s?__biz=MzkyNzQxMjQ4Ng==&mid=2247484213&idx=1&sn=5f02c5c4bdbb4522880b81fdcf4c4aba": "11w漏洞poc", "https://mp.weixin.qq.com/s?__biz=MzU5ODE2NDA3NA==&mid=2247496618&idx=1&sn=cf02fc742b1c64e4d18e54e3bdca8004": "VMware发布更新,修复墨云科技报告的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485760&idx=1&sn=fdc697067990411601ee803c76aa8e14": "【漏洞复现】某平台-Sc-Clue-count-search-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTQzNTI4Nw==&mid=2247488921&idx=1&sn=796d00590260af7c745e20f4cb082c0b": "两个影响WPS Office的任意代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308739&idx=1&sn=d35a77c0fb47a68f87a8f37d91f4bb5e": "知名开源监控系统Zabbix存在SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308739&idx=2&sn=9f511acdd37389f627c4dd8e2667b338": "新型恶意软件能利用LogoFAIL漏洞感染Linux系统", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066393&idx=1&sn=ac63bf158d1e3e33b69fbab49a5ae214": "【安全圈】知名开源监控系统Zabbix存在SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066393&idx=4&sn=b1e7b15689fa221569f9a1cad7eff071": "【安全圈】新型恶意软件能利用LogoFAIL漏洞感染Linux系统", "https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651729625&idx=1&sn=88a46004f6807392ed040391e769be25": "数据使用控制｜面向五类可信数据空间建设的数据安全沙箱", "https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493372&idx=1&sn=f8ed6cc9dc514805d164f9d47277e8f5": "年末冲刺！2024漏洞马拉松『美团站』正式启动", "https://mp.weixin.qq.com/s?__biz=MzI0MTY5NDQyMw==&mid=2247525335&idx=1&sn=3c4d387336e0c4ad6298568a52661dec": "docker历史上的第一个漏洞：关于shocker的一切", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489531&idx=1&sn=b8aa79a6bb356af80069827d5d8a0075": "从零开始：K8s安全测试与漏洞挖掘全攻略 开胃K8S LAN PARTY CTF", "https://mp.weixin.qq.com/s?__biz=MzU5Mjg0NzA5Mw==&mid=2247493593&idx=1&sn=56add9a2f2a097757cc4601ea46e1c10": "国家平台认可｜众智维科技获中国CNVD年度星级认定", "https://mp.weixin.qq.com/s?__biz=MzA5NDQzODQ3MQ==&mid=2648194328&idx=1&sn=a59c0ff9c783306d55f7139b98401b63": "泰晓社区推出口袋AI盘，普通PC即插即跑", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484709&idx=1&sn=b9e726441e7c55aa51751d27d441bcd3": "【复现】泛微 e-cology前台SQL注入漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485166&idx=1&sn=cf85ddc0f463107ad7165d7fd89bbed6": "漏洞推送|某空WMS-仓储精细化管理系统 SaveCrash.ashx存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585295&idx=3&sn=e84b92c130bef5ae24d71d72283bd86e": "CTF训练营-Web篇 更新： 反序列化漏洞-Phar反序列化和字符串逃逸", "https://mp.weixin.qq.com/s?__biz=MzkxMDc0MTc5Mw==&mid=2247483778&idx=1&sn=617673eea861e0f39c1b0c1f5e976558": "【免杀+钓鱼】钓鱼页面搭建+免杀捆绑拿shell", "https://mp.weixin.qq.com/s?__biz=Mzg2MDU5NjI0Mw==&mid=2247490281&idx=1&sn=d685ffad16184b8e941bb837dcc4caa2": "【12月Huo力全开】LLSRC全线漏洞2倍积分奖励！", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506250&idx=1&sn=65c3600e701ae88d87981315807f4d12": "CVE-2024-42327 Zabbix 严重漏洞POC已公开！", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515040&idx=1&sn=9a0c97b9ff7c9ac20e790864231ba0f7": "单兵漏洞测试工具 -- Yakit", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498804&idx=1&sn=7b4841d81ea301d1b204b069ffc9250b": "sign加密小程序漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489258&idx=1&sn=37b588ec3a46cd041f49cdc24390fdd6": "【漏洞预警】Dell NetWorker权限提升漏洞(CVE-2024-42422)", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712099&idx=1&sn=61a72f188755066a11d2bbfb63a06708": "searchsploit漏洞辅助利用工具", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247632675&idx=2&sn=9836ac0b7ae06ac3f5be960a95f43789": "自助彩票机成“提款机”？3人利用系统漏洞窃取220余万元", "https://mp.weixin.qq.com/s?__biz=MzAwNTg2NjYxOA==&mid=2650741919&idx=1&sn=3772fbe77afe8d68f005323e2f90c803": "荣获最佳实践案例，网易易盾发力央国企合规内控数字化", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247567953&idx=2&sn=47f141df1d0d634de4d06cf53e6c7b61": "【珍藏版】渗透测试手册，简直太赞了！", "https://mp.weixin.qq.com/s?__biz=MzkyOTUxMzk2NQ==&mid=2247485627&idx=1&sn=22b7126319128dc90cd1fb3659a2c5c8": "Windows漏洞：MS08-067远程代码执行漏洞复现及深度防御", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491636&idx=1&sn=5ae3f182c579e9eb6bcbb0cf1d1b36db": "漏洞预警 | 7-Zip整数下溢漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491636&idx=2&sn=2d7f1f2bbdc233543e7c316a9a7d4297": "漏洞预警 | 致翔OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzODMyMzQxNQ==&mid=2247484290&idx=1&sn=360be325d8ceb57a683f4156ebdd2520": "黑客武器库 | AMSI.fail完美bypass AMSI", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493740&idx=1&sn=0ca4e44056c922c451e534424089df72": "【神兵利器】Jeecg综合漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492864&idx=1&sn=c1ba496faf888e4050d43d6963f2d1d5": "发现利用LogoFAIL漏洞的BootKitty Linux UEFI启动工具包", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491122&idx=1&sn=bb9371663020caf90ea8432d73756f63": "GitLab漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502178&idx=1&sn=bd49402624ad97e1d5aac52790c107fe": "网安牛马碰见WAF如何凑出漏洞数量？（逻辑漏洞篇）", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787552&idx=1&sn=28ab5c68562d4aeadd078125fc90c915": "安全KER|作家招募火热进行中", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525251&idx=3&sn=abbd8e7be86d11ab9ebf4a932d72cff9": "Windows Server 2012 用户注意：0day 漏洞可绕过 Web 安全标志", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651129390&idx=1&sn=81a9a6bbaa7c79665824a969c6c5535b&chksm=80e71c9eb790958862c09deb7147a65e9781d729aa3e4e14f46a847da9d800bb3b57a0da1a7e&scene=58&subscene=0": "微软超高危漏洞“狂躁许可”：从无回显漏洞看传统漏扫局限性", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585295&idx=3&sn=e84b92c130bef5ae24d71d72283bd86e&chksm=b18c384586fbb1535735f8496a6b6ebeb503113ebdd67b9eb348c7d67ff6866c613783cf385f&scene=58&subscene=0": "CTF训练营-Web篇 更新： 反序列化漏洞-Phar反序列化和字符串逃逸", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521662&idx=1&sn=f6345622bb66821f5bf5fcb0e222aa43&chksm=ea94a414dde32d028c675ddcd14b0de88fa05b1d2e477b937d155ee4040b22bf2be4dd0c664b&scene=58&subscene=0": "Zabbix 修复开源企业网络监控工具中严重的SQLi漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066393&idx=1&sn=ac63bf158d1e3e33b69fbab49a5ae214&chksm=f36e7e19c419f70fbbf339ed9443f3c6144f86fd4c2767b6093fa54e3cdac6dd1a3c287d74d2&scene=58&subscene=0": "【安全圈】知名开源监控系统Zabbix存在SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066393&idx=4&sn=b1e7b15689fa221569f9a1cad7eff071&chksm=f36e7e19c419f70f532549488e0e8d0f8aae4d951c7530354d032c143effdb2584400674cfa0&scene=58&subscene=0": "【安全圈】新型恶意软件能利用LogoFAIL漏洞感染Linux系统", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499505&idx=1&sn=f889cf5b6519afeef6e1e158a49ab584&chksm=973acd93a04d4485db65e1d8fc09b175d15713ab3c8127734762a2cec42e917b61543533bdd2&scene=58&subscene=0": "CNVD漏洞周报2024年第48期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499505&idx=2&sn=ef3fadc3bc76fc795be2bb777d46dcb3&chksm=973acd93a04d4485d13fc8007fa42d7ab73fb65f43d5cf792bb58ef2889b145fa6a5d1e7eea6&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241125-20241201)", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489531&idx=1&sn=b8aa79a6bb356af80069827d5d8a0075&chksm=fb029aa3cc7513b53bf86447e392a74900ffe3ae568fe7882ce569427a18e8b004883290e12a&scene=58&subscene=0": "从零开始：K8s安全测试与漏洞挖掘全攻略 开胃K8S LAN PARTY CTF", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY5Nzc1OA==&mid=2247484160&idx=1&sn=768fc0310477001e491b83ee2ccdbd59": "一文学会fastjson漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247502895&idx=1&sn=f0ef4dda50f565a3c0001a2d868173ce": "知名开源监控系统Zabbix存在SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489512&idx=1&sn=2e745e5c6a4f4db81676b988999d69eb": "智联云采 SRM2.0 receiptDetail SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg1MTA5MQ==&mid=2247484544&idx=1&sn=edccc83fdc6c490a2e6fea3dca97653f": "CVE-2017-7504 JBOSS反序列化漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU1Mjk3MDY1OA==&mid=2247518877&idx=1&sn=a11ed90f8e0e77753a6ce81928e563cb": "网安牛马碰见WAF如何凑出漏洞数量？（逻辑漏洞篇）", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793364&idx=2&sn=d12bfd3862e0cd52b8c857595203e4d5": "Veeam 警告服务提供商控制台中存在严重 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491124&idx=1&sn=a0b37e5980727d2306c23e85b77a4db1": "【实战小技巧系列】前端 JS 解密：一次简单高危漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247489624&idx=1&sn=d79b623b062721f4270af7e991894bf1": "银狐黑产最新加载器利用破解版VPN为诱饵进行传播", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491636&idx=3&sn=b01fdd9d4755ed5068d97d6a493c81fb": "漏洞预警 | Eking管理易任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjU2NjY5MQ==&mid=2247508195&idx=1&sn=fb8f74f3b180a105172e67d7ff88fc52": "关保联盟2025 年团体标准预研征集通知", "https://mp.weixin.qq.com/s?__biz=MzkxNjU2NjY5MQ==&mid=2247508195&idx=3&sn=b3b1239facd94841bd2ff0bccf05da41": "VMware发布更新,修复墨云科技报告的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493372&idx=1&sn=f8ed6cc9dc514805d164f9d47277e8f5&chksm=ec18072fdb6f8e39c609c95ac1b0aba49aa2e9f70246d4c7af7ce82ca6d40ee9caa7fef0e362&scene=58&subscene=0": "年末冲刺！2024漏洞马拉松『美团站』正式启动", "https://mp.weixin.qq.com/s?__biz=MzI5MDcyODIzNg==&mid=2247484735&idx=1&sn=772fd5e4e3080538ee286b09acd0d073": "占省师傅：从零基础到单个漏洞1.5万元，8个月他用努力书写了自己的“封神之路”", "https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649463312&idx=1&sn=92057a4f693945a955aa89e48af8c678": "推荐 10 个漏洞管理工具，漏洞猎手必备！", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580067&idx=2&sn=d10b2e801f0d756e658e21558ddff8d7": "新型漏洞攻击利用服务器进行恶意更新", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247490461&idx=2&sn=08cc776019baf385a479ee02ed9635ae": "Zabbix SQL 注入 CVE-2024-42327 POC已公开", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133796&idx=1&sn=006e621bf25cb8e231717afc6980c998": "四大行业协会同日发布安全提示声明：审慎采购美国芯片；Safari浏览器零日漏洞或已遭利用，多个Apple应用平台被波及 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502675&idx=1&sn=9da987c093db694ef04ea7eeb72e4bd8": "【成功复现】JeecgBoot SQL注入漏洞(CVE-2024-48307)", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485764&idx=1&sn=ed5c5f388466a3044d490276e0d4e911": "【漏洞复现】某平台-tag-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247632689&idx=3&sn=3c9e08e5af95f26a73913ce6e7ded2bc": "微软驱动程序关键漏洞已被APT组织利用", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486221&idx=1&sn=8ed854d241c149fe530ee0e4f313d861": "「漏洞复现」同享人力资源管理系统-TXEHR V15 ActiveXConnector 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490059&idx=1&sn=815a095a3f15acb7fa90d072628c460e": "Veeam 针对服务提供商控制台中的严重 RCE 漏洞发布补丁", "https://mp.weixin.qq.com/s?__biz=MzU1NDU1NTI5Nw==&mid=2247488156&idx=1&sn=1d8d9f43ad59603307d7e916df2ae109": "提价配活动！“严重漏洞”单价万元以上，“中低危”1.5倍起步", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651461963&idx=1&sn=203cd41e8d0df5d658325df01da13a8a": "信息安全漏洞月报（2024年11月）", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651461963&idx=2&sn=477e8872c1f04b2e609013941a980248": "信息安全漏洞周报(2024年第49期)", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494202&idx=1&sn=07df2e9165411c51b79242aa35a06423": "提价配活动！“严重漏洞”单价万元以上，“中低危”1.5倍起步", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650277174&idx=1&sn=1c09acfc7f34b77405224cca88db209c": "盛邦安全获CNVD满星评价，专业实力再获权威认可", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308802&idx=1&sn=ed99bbd47f1003dc1db38fa05309efca": "微软驱动程序关键漏洞已被APT组织利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308802&idx=3&sn=b5b1c2eefdb347a23f0346c009022f75": "思科安全设备ASA十年老漏洞正在被利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066407&idx=3&sn=26ea707878614e9c3a2395f4334a3b4c": "【安全圈】思科安全设备ASA十年老漏洞正在被利用", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247513696&idx=1&sn=7c88b6b634b4ac1e28b987f2a9615627": "网安瞭望台第9期：0day 情报，OAuth 2.0授权流程学习", "https://mp.weixin.qq.com/s?__biz=MzUzNjg1OTY3Mg==&mid=2247491707&idx=1&sn=469de37341e0040e4e66b452207e3211": "华顺信安获评NVDB漏洞库“技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521684&idx=1&sn=b5ba5835dc8937327b3ded698979f0f2": "Veeam 提醒注意VSPC中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521684&idx=2&sn=d7717056b8823ba4a6de5202613f9d39": "思科证实已存在10年的ASA产品漏洞正遭利用", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247577400&idx=1&sn=87074d2775537d441ac7810f9fe11967": "最高级！360获评NVDB通用网络产品安全漏洞专业库“三星级技术支撑单位”称号", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489536&idx=1&sn=44605bb9e4f29ccc3c9ffa22b1b13513": "从零开始：K8s安全测试与漏洞挖掘全攻略二", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247623073&idx=1&sn=3f349e63c358eb0d851df2697940fb8d": "奇安信获评工信部NVDB漏洞治理合作“三星级技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484361&idx=1&sn=2fddbed9dcf2ab77c9e5f6c846dce7b6": "第十五期 · 安钥®「漏洞处置标准作业程序（SOP）」征文启示", "https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247513490&idx=1&sn=6b47c5db8eec9cc0454514032835df17": "开源网安受邀出席2024四川网信企业家发展年会，展示网信安全领域优秀解决方案", "https://mp.weixin.qq.com/s?__biz=Mzk0MTUxNzAxMg==&mid=2247484141&idx=1&sn=ab52db7afb078dc0594ae666b550a7e6": "用友NC workflowService SQL注入1day代码分析", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500336&idx=2&sn=af8ed86d64b88dd9cf96ca2ee1644938": "【漏洞通告】Progress WhatsUp Gold远程代码执行漏洞（CVE-2024-8785）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500336&idx=3&sn=ed879b95117db59435069bc0690d8367": "【漏洞通告】Veeam Service Provider Console远程代码执行漏洞（CVE-2024-42448）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489265&idx=1&sn=bfa7c936f79c9a65dfda98c9b44c5c6c": "【漏洞预警】ProFTPD权限管理不当漏洞可导致权限提升", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247501960&idx=1&sn=b1a874b5cd7e3c9c5fa8df96481612cc": "360漏洞云情报月度合集-2024年11月期", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247487830&idx=1&sn=c73070283e1b24b768e04165b08c1289": "Java 反序列化之 XStream 反序列化", "https://mp.weixin.qq.com/s?__biz=Mzg4MTA2MTc4MA==&mid=2247493550&idx=1&sn=c510562442bf86723a5b2ac1107e4be5": "CSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NDYzNjY0Mg==&mid=2247500706&idx=1&sn=29b5e12ad6a0d9d037b53d2fda911c25": "实力攀升丨云天安全荣登第十二版《网络安全企业100强》第37名", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515057&idx=1&sn=3438bafbf1ea31482cff9d6f0be0619a": "WordPress Query Console漏洞EXP（CVE-2024-50498）", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487930&idx=1&sn=589b3837a2dc8ff72e861b99f6947f5d": "Zabbix api_jsonrpc.php接口存在SQL注入漏洞CVE-2024-42327 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486207&idx=1&sn=0a038edf2f8010249ccb82461ef389dd": "你名下关联了多少账号？速查！", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247520783&idx=1&sn=e6d18857c2b21d1bc8b80636051ff403": "钓鱼网页散播银狐木马，远控后门威胁终端安全", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484756&idx=1&sn=752d76f74d42ba7f8a4a10a54383a15d": "【漏洞复现】CVE-2024-9935", "https://mp.weixin.qq.com/s?__biz=Mzg3NzE4NzgzMA==&mid=2247484964&idx=1&sn=0e8a1331b6b922f07501f66fd83c91af": "大模型的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899701&idx=1&sn=656efce49817921565c19e3107237f5a": "微软修复 AI、云计算和 ERP 安全漏洞，其中一个已被用于攻击", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491639&idx=1&sn=39e40ca6d804352e6d20235db2217c6f": "漏洞预警 | GitLab权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491639&idx=2&sn=ef0f15d92963fe62bd06df07429f9bce": "漏洞预警 | 用友NC SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247509613&idx=1&sn=3d46d512c0ea527fdba9869e770416e8": "移动安全框架 (MobSF) 存在存储型XSS漏洞 | CVE-2024-53999", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486893&idx=1&sn=4910174c4a8925e18aae62644f0d7dec": "API安全漏洞靶场crapi漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486893&idx=2&sn=191f261307362506181be108372096f1": "网安牛马碰见WAF如何凑出漏洞数量？（逻辑漏洞篇）", "https://mp.weixin.qq.com/s?__biz=MzkyODY5ODAyOA==&mid=2247488732&idx=1&sn=1cb8ad2c108f085ca1907e59c5d42bb1": "大模型安全漏洞：AI时代的“隐形炸弹”（附下载）", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247505811&idx=3&sn=4427c170e490db198897f9762069430b": "5th域安全微讯早报【20241205】292期", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492872&idx=1&sn=63eff1dd884f77fb706066595cc12e75": "思科ASA漏洞CVE-2014-2120当前正在被利用攻击", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488753&idx=1&sn=bfd5495957e2ee2a2129a1c2f5a66d85": "【漏洞复现】Wordpress ElementorPageBuilder插件存在文件读取漏洞(CVE-2024-9935)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521684&idx=1&sn=b5ba5835dc8937327b3ded698979f0f2&chksm=ea94a4fedde32de81ba198d63194acfd35654a0fb756fa23333f2f5a4738769841bd5d1834e2&scene=58&subscene=0": "Veeam 提醒注意VSPC中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521684&idx=2&sn=d7717056b8823ba4a6de5202613f9d39&chksm=ea94a4fedde32de8a7cb8b62b8be9a979c6a959069b85ae3d1afdde8ea26be3e36187d94c087&scene=58&subscene=0": "思科证实已存在10年的ASA产品漏洞正遭利用", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502561&idx=1&sn=6b0222e9c2cb7f15486d885d1137313b&chksm=fe79ee79c90e676fc7cb50bebe31bafe77c5a1ee4af702a39234ee5555741d09674e90ac0d6b&scene=58&subscene=0": "ProFTPD 权限提升漏洞(CVE-2024-48651)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066407&idx=3&sn=26ea707878614e9c3a2395f4334a3b4c&chksm=f36e7e27c419f731e6dac2fb2ce42e4931eb3dd86c6fa19bbeb2be2bb63870488d6f36224aed&scene=58&subscene=0": "【安全圈】思科安全设备ASA十年老漏洞正在被利用", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503221&idx=1&sn=d9fadb7bf0f6c6c6a20cedd0746be700&chksm=f2585f06c52fd61017d9efc986d383f93a607def83f0413aa7393d8ee84c3d98ed977910f806&scene=58&subscene=0": "雷神众测漏洞周报2024.11.25-2024.12.01", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489536&idx=1&sn=44605bb9e4f29ccc3c9ffa22b1b13513&chksm=fb029558cc751c4edbe0de110e6107a1d44b65f04eb68a89bc7963093524c23cd0884c47c7c4&scene=58&subscene=0": "从零开始：K8s安全测试与漏洞挖掘全攻略二", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133796&idx=1&sn=006e621bf25cb8e231717afc6980c998&chksm=bd15a7b78a622ea1b1dd6f2818bc9258b3b9fa995e19e3fb80adad2a1138833ad438dee16016&scene=58&subscene=0": "四大行业协会同日发布安全提示声明：审慎采购美国芯片；Safari浏览器零日漏洞或已遭利用，多个Apple应用平台被波及 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580067&idx=2&sn=d10b2e801f0d756e658e21558ddff8d7&chksm=e9146999de63e08ff17ab052e0ec7992afceda9bfabcd1b260cc2e0f3b313eb07cc84736bef4&scene=58&subscene=0": "新型漏洞攻击利用服务器进行恶意更新", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247577400&idx=1&sn=87074d2775537d441ac7810f9fe11967&chksm=9f8d3f30a8fab626c9792a1daa553e54a499270797b3ea41fcb1aaa200a0328ba95f9939d5e7&scene=58&subscene=0": "最高级！360获评NVDB通用网络产品安全漏洞专业库“三星级技术支撑单位”称号", "https://mp.weixin.qq.com/s?__biz=MzIxMDYyNTk3Nw==&mid=2247515004&idx=1&sn=49ef9432fd64ba81064c5af61066efee": "CVE-2024-31317 复现", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492849&idx=1&sn=b99b718c887d1d4b4b491a4e01253dc0": "Lorex 2K 安全摄像头存在五个漏洞 可让黑客完全控制，已有可用 PoC", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492849&idx=3&sn=a1317c6f0ad8fd60b6511f297c6cde4a": "Lineaje 报告显示开源软件漏洞增多", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492849&idx=4&sn=a3441c1ca8c3aba877ceebd7454b594c": "Zabbix 漏洞CVE-2024-42327 (CVSS 9.9)的 PoC 发布", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492849&idx=5&sn=9246d119bb38bf9a5a65e7c6332589f6": "暗网犯罪份子常用通讯软件 uTox 被曝 0day", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485768&idx=1&sn=c2428c06ecb9465e92c2e2479df88bbf": "【漏洞复现】某平台-webservice-GetUDEFStreamID-delay-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247506571&idx=1&sn=f68e2a8f5a1ffa13ad6b1ba4d476e0a6": "通知 | 事件型漏洞收录范围调整", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484468&idx=1&sn=034d450a0362a5ea3ced5e18dd1f68eb": "【漏洞复现】金华迪加现场大屏系统存在任意文件上传getshell漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491689&idx=1&sn=7fc67fbf122f113cf401c2a5fc38dcd8": "Oracle 警告 Agile PLM 文件泄露漏洞可能被积极利用", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655348118&idx=1&sn=75c1156ae2e457423eda64f3d7fba120": "思科10年老漏洞，影响ASA软件WebVPN登录页面", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793379&idx=3&sn=62ee6dd06f47c5b1777c48cd0a47a9fa": "CISA 警告 Zyxel 防火墙漏洞可能被利用进行攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247501960&idx=1&sn=b1a874b5cd7e3c9c5fa8df96481612cc&chksm=cfc56fd7f8b2e6c121f2c3e4596d13e63743c4782201dd9f51e82486fda1fe83495b8b7a8d41&scene=58&subscene=0": "360漏洞云情报月度合集-2024年11月期", "https://mp.weixin.qq.com/s?__biz=MzI4ODQzMzk3MA==&mid=2247489408&idx=1&sn=6883413f41c3e0c125dc9096a281e90a": "美英加澳新在堪培拉联合开展“网络哨兵”战术演习", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484700&idx=1&sn=142480b37f5b1b6ccc6e05ab5f9eb651": "【漏洞分享】通达 OA getdata RCE 通达OA 命令执行漏洞 通杀漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580078&idx=1&sn=9a9522c0b349583b66c4c0d1f21b1978": "网络钓鱼电子邮件越来越多地使用 SVG 附件来逃避检测", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247487695&idx=1&sn=65d7e7419f8d11a5cd05a191525939d6": "9个超级实用BurpSuite插件，SRC漏洞挖掘利器打包推荐", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492849&idx=8&sn=9dca4a8bd9aee191eb10cc4a313771b5": "Veeam 备份和复制漏洞曝光：高危漏洞使数据面临风险", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491639&idx=3&sn=49bb61d194288d81af219d52581e49eb": "漏洞预警 | 安科瑞环保用电监管云平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4Njg3MDk5Ng==&mid=2247486764&idx=1&sn=a55fcbfb3164c8aba676e4571543cab6": "来抖音！小瘦带你集齐库里南碎片！", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308892&idx=1&sn=5a199edd9b8c9141ea0f237cee8292b8": "单洞奖金1万刀，我挖海外漏洞的第3年", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308892&idx=3&sn=a61ff7db311ac4f64fb8eb5cdc6bbd66": "谷歌浏览器类型混淆漏洞让攻击者能够执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066421&idx=1&sn=8b5178681a68125be7487364041e0e92": "【安全圈】Crypto.com 与 HackerOne 一起推出 200 万美元的漏洞赏金计划", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066421&idx=2&sn=c856137ec845bc74a8a86abc23c1eb69": "【安全圈】立即修复，微软驱动程序关键漏洞已被APT组织利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066421&idx=3&sn=28c802936604146904c583d74c14846f": "【安全圈】谷歌浏览器类型混淆漏洞让攻击者能够执行远程代码", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247489958&idx=1&sn=c2ffa969e3dc9c3e2498efa58fbae82a": "单洞奖金1万刀，我挖海外漏洞的第3年", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650849758&idx=1&sn=553ea868757eb4e5d8a904185df91d80": "渤海证券基于互联网环境的漏洞主动防护方案探索与实践", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489539&idx=1&sn=69e2563458072584247038ace3c47897": "大模型的反序列化导致的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525328&idx=2&sn=9359464472ac9ce0e09e7e04e80d874f": "CVE-2024-42448 (CVSS 9.9)：Veeam VSPC 中的严重 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490005&idx=1&sn=7ccc648116b083bdab6dc782be6d1c61": "创宇安全智脑 | 大华 DSS 数字监控系统 adminOperate 信息泄露等79个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521692&idx=2&sn=adb3ff5ba3ff65807012edd28d90be20": "日本CERT提醒：IO-Data 路由器中的多个0day已遭利用", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247526919&idx=1&sn=0386721ba5a1ddad7d8d307ba4c159f5": "渗透测试高级技巧（三）：被前端加密后的漏洞测试", "https://mp.weixin.qq.com/s?__biz=MzU0MDI1MjUxMg==&mid=2247531454&idx=1&sn=8ba14eeeb53bc24ea03b2b5c6ca7ec45": "对攻击者保持视野领先：从漏洞情报到「扩展漏洞情报」", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182725&idx=1&sn=03eb43e4f2d51b44e5e608a0b0c57ffc": "微步获评工信部NVDB通用漏洞库“三星级技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=MjM5MTI2NDQzNg==&mid=2654552132&idx=1&sn=c15183e828e83707f18a206bd3473d0f": "四叶草安全获评NVDB漏洞库“二星级技术支撑单位”称号", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500344&idx=2&sn=0178ec0447d8480a855cf590c0cdc849": "【漏洞通告】SailPoint IdentityIQ访问控制不当漏洞（CVE-2024-10905）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500344&idx=3&sn=0e3c5d14ebd792146b390a8f4033252e": "【漏洞通告】Django Oracle SQL注入漏洞（CVE-2024-53908）", "https://mp.weixin.qq.com/s?__biz=MzA3NjU5MTIxMg==&mid=2650575005&idx=1&sn=2945cdfb719cbcd96448d6e9e31be7a9": "再度登榜 | 国舜股份上榜2024中国网络安全企业100强", "https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247591715&idx=1&sn=099ecce590bb4a3e0a57257e97568e66": "中国信通院高琦受聘中关村工业互联网产业园专家委员会，助力园区高质量发展", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133823&idx=2&sn=1980e42c963033b69f13a1db90d7a5ef": "Zscaler CEO抨击虚假SASE方案严重误导用户；思科发布紧急预警：10年前的ASA系统漏洞正遭黑客积极利用 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489270&idx=1&sn=4b59e7c59879b2db9ad770253cc7b265": "【漏洞预警】Django Oracle SQL注入漏洞（CVE-2024-53908）", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489552&idx=1&sn=4af132ea745c3855bca33b85780a7f6b": "万能门店小程序管理系统 doPageGetFormList SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490066&idx=1&sn=19f10acfb4432ac39d26b9c846eece40": "立即修复，微软驱动程序关键漏洞已被APT组织利用", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247545671&idx=1&sn=6d387b3b1feabae2ace40e9ad806f1e0": "安全419《9问CEO》系列之：深蓝互联王得金", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517492&idx=1&sn=f586d9016d9592f6f6dffa36d64a2eda": "CVE-2024-22399 - SwingLazyValue利用链构造分析", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY3MTM4Nw==&mid=2247484054&idx=1&sn=8a23efc97b5ae0c014ad74d391dd5717": "Jolokia logback JNDI RCE漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497278&idx=1&sn=169a546ae3fc49b099dc54f68b7b5818": "漏洞分析 | 挖掘 .NET SqlSugar 框架SQL注入", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497278&idx=3&sn=9a007c17825bbe39189acd9ede4b5f18": "48套.NET系统漏洞威胁情报(12.05更新)", "https://mp.weixin.qq.com/s?__biz=Mzg4MDYwNDc5Nw==&mid=2247486445&idx=1&sn=6f3691c776441bd69449c6aaf6f6a6ae": "Earth Minotaur组织利用MOONSHINE漏洞工具包和DarkNimbus后门进行跨平台攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492910&idx=1&sn=09a010c00e7b570a4044e87718fd1ea4": "POC集合，框架nday漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247509663&idx=1&sn=36790b3290209381053ccbb1036f3b23": "某订货系统文件上传漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491646&idx=1&sn=e2735658a6d4f6f895d5a79139c28b03": "漏洞预警 | WordPress Elementor PDF生成器任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491646&idx=2&sn=146ed161d1ca3fb154097be23b43a507": "漏洞预警 | 用友U8CRM SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491646&idx=3&sn=c46fce8ecd1a9f93c4787c5b907a8bc2": "漏洞预警 | 海信智能公交企业管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488767&idx=1&sn=2ee26bcf0b0ee5ec015000cf0fb9bf28": "【0day】圣乔ERP系统uploadFile存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521692&idx=2&sn=adb3ff5ba3ff65807012edd28d90be20&chksm=ea94a4f6dde32de0aa4388ab79e16c2747401cfbe56fea1c1445d852c6c6e6561fc639e183a1&scene=58&subscene=0": "日本CERT提醒：IO-Data 路由器中的多个0day已遭利用", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247506571&idx=1&sn=f68e2a8f5a1ffa13ad6b1ba4d476e0a6&chksm=eaf992c7dd8e1bd104d6d6a7d38a6d09db8fdb722402bc892dc35e6b990e59b902d860a7ac21&scene=58&subscene=0": "通知 | 事件型漏洞收录范围调整", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182725&idx=1&sn=03eb43e4f2d51b44e5e608a0b0c57ffc&chksm=f4486ff9c33fe6ef0d47ef8026c8a71354bb9545522b763f142745db7d12b2323b6e22951901&scene=58&subscene=0": "微步获评工信部NVDB通用漏洞库“三星级技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489539&idx=1&sn=69e2563458072584247038ace3c47897&chksm=fb02955bcc751c4dec3afdef0f6425ec619901675928a3ded7cfbdd682e2fe9592a5ede95d5d&scene=58&subscene=0": "大模型的反序列化导致的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066421&idx=1&sn=8b5178681a68125be7487364041e0e92&chksm=f36e7e35c419f723248ced5990c93fa03b324de16147f2582fee595b39037591c7812287abf4&scene=58&subscene=0": "【安全圈】Crypto.com 与 HackerOne 一起推出 200 万美元的漏洞赏金计划", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066421&idx=2&sn=c856137ec845bc74a8a86abc23c1eb69&chksm=f36e7e35c419f723beffbdca1db705d69cd6c43e9da167f5a9d1b2905a34a6e32ae2740c3743&scene=58&subscene=0": "【安全圈】立即修复，微软驱动程序关键漏洞已被APT组织利用", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247526919&idx=1&sn=0386721ba5a1ddad7d8d307ba4c159f5&chksm=c2d116a3f5a69fb57e216f9bbdb4727a8e48f48f9929a0f77b192702c0c6d59a71b08a0ae5a8&scene=58&subscene=0": "渗透测试高级技巧（三）：被前端加密后的漏洞测试", "https://mp.weixin.qq.com/s?__biz=Mzg2NzkxOTQ0OA==&mid=2247484486&idx=1&sn=7a15fc7f6dc988da668fea8f1e56ab43": "zabbix SQL注入漏洞(CVE-2024-42327)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492886&idx=1&sn=d756b32f8abfbcd1e8cb11906dd81ec4": "数百台思科交换机受启动加载程序漏洞影响", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492886&idx=2&sn=cc627c845e5d461b974822fe037e5623": "Veeam修复了关键的服务提供商控制台 (VSPC) 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484296&idx=1&sn=890c5d7d84b5feecb5a0ef7741a8f57c": "【漏洞复现】彩讯邮件系统5.0.0版本存在逻辑缺陷修改用户密码", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247489190&idx=2&sn=34b2b8fd8d97ed3410b550c61468f779": ".NET 安全攻防知识交流社区", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485773&idx=1&sn=d02bae22b16a74565cccdbca9d3aec85": "【漏洞复现】某平台-taillog-readfile任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487533&idx=1&sn=4eb64d6b9826505165054511c71288e2": "赛克安全本周漏洞推送（12.2-12.6）", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485592&idx=1&sn=a6d4635e8349bc57169d61d88bd9088b": "赛克安全本周漏洞推送（12.2-12.6）", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652250973&idx=1&sn=58660cc9fd124290dbef70e8f000d867": "思科发布紧急预警：10年前的ASA系统漏洞正遭黑客积极利用", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484475&idx=1&sn=abb1e90b0a7bf06630254cbceb7a4db6": "【漏洞复现】赛普EAP企业适配管理平台Upload任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793394&idx=2&sn=06277be44ef38c9683d24a9ef2472d1c": "黑客利用 MOONSHINE 漏洞和 DarkNimbus 后门攻击", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247485821&idx=1&sn=b98633172a515bdd2cbbfed5efdc3e30": "渗透测试人员的 Nmap：漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247490923&idx=1&sn=f17dfe44ab6378a7f8dd918d7e89e309": "一个声音克隆工具：clone-voice", "https://mp.weixin.qq.com/s?__biz=MzIxMDYyNTk3Nw==&mid=2247515004&idx=1&sn=49ef9432fd64ba81064c5af61066efee&chksm=97634faaa014c6bc8d271434890da9fa1423f4cffa5b6eea0f706cd10222c62508d323f30267&scene=58&subscene=0": "CVE-2024-31317 复现", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650849758&idx=1&sn=553ea868757eb4e5d8a904185df91d80&chksm=80dba27bb7ac2b6db6d3036bcd5e0755a1ae6e0af5a030435033d1e750ca2e4cb0097c273209&scene=58&subscene=0": "渤海证券基于互联网环境的漏洞主动防护方案探索与实践", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066421&idx=3&sn=28c802936604146904c583d74c14846f&chksm=f36e7e35c419f723e1439d92f0683c879d36f2c8fbb1924b0e56cf622579af6653c835a4f408&scene=58&subscene=0": "【安全圈】谷歌浏览器类型混淆漏洞让攻击者能够执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502571&idx=1&sn=c30e1d47ae1059542d59b52c7c4ddfd5": "SonicWall SMA100 SSLVPN 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA3OTMxNTcxNA==&mid=2650955393&idx=1&sn=e2b764b3fbac3a173c1080cad44da575": "收藏！银行业数据安全工作备忘录，随时自查超适用~", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247491936&idx=1&sn=012e625f885581be435e1e76a5f715ea": "漏洞预警 灵当 CRM uploadxx.php 文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484585&idx=1&sn=5454bc75cdf44fafbb3e5e8027140664": "Apache-HertzBeat开源实时监控系统存在默认口令漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133870&idx=1&sn=bbdb0d6ade319897ba8d80e124901b49": "英国电信巨头BT集团遭遇勒索攻击，500GB敏感数据恐遭窃取；流行移动安全测试工具曝XSS漏洞，文件名成为攻击新途径 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzA5MTM1MjMzNA==&mid=2653425589&idx=1&sn=61fa9b1c408e4fd0b661e6750c6e4417": "北信源携手中外文化交流中心用“爱传(AITran)”助力文化出海", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309094&idx=4&sn=a4310a5d090519e47811b92239c23f69": "CABED：一款针对Chrome应用程序绑定数据的加密解密工具", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486248&idx=1&sn=c5db4ce371a7d76a113ec5be58c6a312": "「漏洞复现」易宝OA GetUDEFStreamID SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247495970&idx=1&sn=ff9a5f04745abfade7cb4ca85fc55840": "CVE-2024-42327 Zabbix SQL注入 POC", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066435&idx=3&sn=bbca90f744a9f08fd2d2e9d95bb190e2": "【安全圈】I-O Data路由器0Day漏洞被利用，无修复补丁", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247488033&idx=1&sn=596233b0055d9fdc24b51f7fbaa5ea3e": "用友NC-Cloud process SQL注入漏洞复现及POC", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247632570&idx=3&sn=f622ece0c8d345a542cbc143d224a5a9": "诸子云｜甲方 ：不同供应商的漏洞评级不同怎么办？Windows固定网址访问怎么做？", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523938&idx=1&sn=6c81b44f4c94f68c790de69ec5748741": "【漏洞通告】Django Oracle数据库SQL注入漏洞(CVE-2024-53908)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231514&idx=5&sn=a1b9fdf907d919a928c462945660f655": "CNNVD | 关于SonicWall SMA100安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525341&idx=1&sn=ea86ae1bed2b137932a11ba97f44f21c": "[漏洞] CVE-2024-44308：Apple Safari JavaScriptCore 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247486098&idx=1&sn=ae6ad47bd22e1e3125d2fe45a58ae8b8": "渗透测试高级技巧（三）：被前端加密后的漏洞测试", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521713&idx=1&sn=7bdde63b35fa4a28908581f18c38883e": "引导加载程序存在高危漏洞，影响思科100多个交换机机型", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651461968&idx=1&sn=0a6663b04895b46371bd12da4468b547": "CNNVD 关于SonicWall SMA100 安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507515&idx=1&sn=83bcc14122f1b7fd67fed7d5868d21fc": "微步协助统信修复提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500352&idx=2&sn=235a9462be5bc3a03d48bbfb6ab01bd6": "【漏洞通告】Mitel MiCollab身份验证绕过漏洞（CVE-2024-41713）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500352&idx=3&sn=8418c366f125a72454f0879f77e27f18": "【漏洞通告】SonicWall SMA100 SSL-VPN缓冲区溢出漏洞（CVE-2024-45318）", "https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247517561&idx=1&sn=54d4c087458711183eef2d5373e7dc33": "Spring漏洞测试与利用", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484772&idx=1&sn=8e593a28c598c058805d54e0cfef6028": "【漏洞复现】CVE-2024-41713", "https://mp.weixin.qq.com/s?__biz=MzkwMzQyMTg5OA==&mid=2247486322&idx=1&sn=fbd61172d2e9bb94ebd76a78608b2ced": "Java 安全 | 从 Shiro 底层源码看 Shiro 漏洞 (下)", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498845&idx=2&sn=25201142c51e9dbeacbaf956dbf30b41": "渗透测试 -- Web漏洞介绍和Sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489275&idx=1&sn=31722ca4a5e3edc74c5e218e4bfedbdf": "【漏洞预警】SonicWall SMA100 SSL-VPN缓冲区溢出漏洞CVE-2024-45318", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491663&idx=1&sn=13f8337d2c5b035b77d6655b19c9fc53": "漏洞预警 | Zabbix SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491663&idx=2&sn=15daefd39c0e30d1382305c7482cf614": "漏洞预警 | 九思OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491663&idx=3&sn=6b2aa26c1481def636af9c318e3ce674": "漏洞预警 | 昂捷ERP SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513246&idx=1&sn=a4a663b3a67c336106c8f2c644048dbf": "严重损害数据安全，湖南一IT公司被罚20万元", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652113041&idx=2&sn=ce9243791a081b087a014d89f2b9f468": "2024年最危险的25个软件漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488779&idx=1&sn=9a633d7bc6504c05e173fe7110716099": "【漏洞复现】EasyCVR视频管理平台taillog存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDkyMTE4OQ==&mid=2247486180&idx=1&sn=258dd29d0a97c72092bd6b722048e94d": "代码审计 ｜ Jump Server堡垒机历史漏洞审计", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133870&idx=1&sn=bbdb0d6ade319897ba8d80e124901b49&chksm=bd15a77d8a622e6b8a009b9c77717ac002be4c6326296ad17b7e71b54840a5e6c8dea4bdee76&scene=58&subscene=0": "英国电信巨头BT集团遭遇勒索攻击，500GB敏感数据恐遭窃取；流行移动安全测试工具曝XSS漏洞，文件名成为攻击新途径 | 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507515&idx=1&sn=83bcc14122f1b7fd67fed7d5868d21fc&chksm=cfcabd2ff8bd34390927ec4b3e4474acd0ef2b7d036e886b03a6e6ad21da3852f9a9df801fc3&scene=58&subscene=0": "微步协助统信修复提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497278&idx=1&sn=169a546ae3fc49b099dc54f68b7b5818&chksm=fa5958d3cd2ed1c510f4fb849cc2d2c03a8dc61d0d509b6550405b9e20962197f50ae3809fbc&scene=58&subscene=0": "漏洞分析 | 挖掘 .NET SqlSugar 框架SQL注入", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497278&idx=3&sn=9a007c17825bbe39189acd9ede4b5f18&chksm=fa5958d3cd2ed1c5d28b06748f185c62bdcea1ba991e083dff02e650181c89c7e74602d0fb24&scene=58&subscene=0": "48套.NET系统漏洞威胁情报(12.05更新)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521713&idx=1&sn=7bdde63b35fa4a28908581f18c38883e&chksm=ea94a4dbdde32dcd5e8fb217c09d01c5c1de3a63fcb86fe3d69baffeb27cb89f965d42210193&scene=58&subscene=0": "引导加载程序存在高危漏洞，影响思科100多个交换机机型", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502571&idx=1&sn=c30e1d47ae1059542d59b52c7c4ddfd5&chksm=fe79ee73c90e67653d869887a830bf2a25190cbd667ff181b5e7f6535ba46c4cfb73f220d44f&scene=58&subscene=0": "SonicWall SMA100 SSLVPN 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066435&idx=3&sn=bbca90f744a9f08fd2d2e9d95bb190e2&chksm=f36e7ec3c419f7d5cf01456a6710a86aa0232fb64cceceecabeed12a0e2bcb562d4935577983&scene=58&subscene=0": "【安全圈】I-O Data路由器0Day漏洞被利用，无修复补丁", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231514&idx=5&sn=a1b9fdf907d919a928c462945660f655&chksm=8b59f0a3bc2e79b50b247cd840b93ebd4c5907171fe3ec15d7fc1fd6b4795be7d7ad42d5eb82&scene=58&subscene=0": "CNNVD | 关于SonicWall SMA100安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247525108&idx=1&sn=6e27512b02e4148cf87e701c0a56e75c": "SRC漏洞挖掘之道", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727840329&idx=1&sn=8e4b7109f4601396270ae0922058dd61": "【活动】2024漏洞马拉松活动来袭，史无前例反爬专项单个奖励最高5w！", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650604682&idx=3&sn=66e331213aaa69ebd6e06ba539c6cbae": "移动安全框架 (MobSF) 存在存储型XSS漏洞 | CVE-2024-53999", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309095&idx=1&sn=c6dd464702642072510bbb85c37cb402": "无补丁，I-O Data路由器0Day漏洞被利用", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497324&idx=3&sn=726aa5ada489a6cc591b1f36e419bb9b": "漏洞分析 | 挖掘 .NET SqlSugar 框架SQL注入", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793408&idx=3&sn=07c14519c7e26f4483bd662559941c89": "新的Windows 0day漏洞：攻击者几乎无需用户交互即可窃取 NTLM 凭据", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523938&idx=1&sn=6c81b44f4c94f68c790de69ec5748741&chksm=ce461572f9319c64441dbb9b9fec89017ec3a569bc74e97b707ce386a4284f8ad97b521bacdb&scene=58&subscene=0": "【漏洞通告】Django Oracle数据库SQL注入漏洞(CVE-2024-53908)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492906&idx=1&sn=bcccbff213bc1e74461cb25625f86307": "Windows 中存在严重0day，可导致用户凭据泄露", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247487942&idx=1&sn=15aa489d022ced042139dc1381fcafd4": "高质量企业+eduSRC漏洞挖掘实战资料分享", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525456&idx=2&sn=36ccd1ade2da7b7093c538a25b09dc4a": "新的 Windows 零日漏洞暴露 NTLM 凭据，已获得非官方补丁", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247485990&idx=1&sn=303f4ff26e9de1a67b30a91e4094d384": "支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247517561&idx=1&sn=54d4c087458711183eef2d5373e7dc33&chksm=ce5da718f92a2e0e8f53cf92d03de7e78076267af9cfe8e6a0fc7d509811666fb6cb92d62ebe&scene=58&subscene=0": "Spring漏洞测试与利用", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487535&idx=1&sn=8de530d3ddedd7217a57c2e53b7b6be5": "赛克安全本周漏洞推送（12.2-12.6）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485721&idx=1&sn=aa1125a603acdb5b911e5e35ea92b93c": "CVE-2024-45318｜SonicWall SMA100 SSL-VPN缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485721&idx=2&sn=33b93268432cff8257daa4d1e5239492": "CVE-2024-53908｜Django Oracle SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585581&idx=2&sn=93d80a7ee158f6ced9cf81c118db2390": "12月31日截止 | “看雪漏洞小组”集结！组团冲击华为漏洞更高奖励", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486259&idx=1&sn=dd51ca8df3aa1533144b975b9bec3086": "「漏洞复现」EasyCVR-视频管理平台 taillog 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY0MzE2NQ==&mid=2247483958&idx=1&sn=bd8d4407a74e628e6eb222ab3b30070a": "Docker0day，影响近4000台主机", "https://mp.weixin.qq.com/s?__biz=MzkyOTUxMzk2NQ==&mid=2247485642&idx=1&sn=afcc7c4a8330cefeed2195326b87685f": "记一次简单的代码审计项目案例", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247485906&idx=1&sn=85d283dcf4ac6ef6ea62b49c1db8f492": "AI不到3分钟生成了一份29页的《漏洞扫描原理及常用工具》PPT材料", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247514051&idx=2&sn=e39a03d52f1e51705a6d98d33c0d2c99": "网安瞭望台第10期：开源机器学习框架存在漏洞、GammaDrop 恶意软件", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247504999&idx=3&sn=860de968b5da5269ea0ec755cd3e8392": "Windows 7 至 Windows 11 中存在新的 0 Day NTLM 哈希泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505049&idx=3&sn=3d5ddf0d99cec9a595d1f68d4a705cb8": "SD Express 卡漏洞导致笔记本电脑和游戏机遭受内存攻击", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488796&idx=1&sn=6d6053b4caec0a1edb3e9de18b68d64d": "【大量存在】用友NC yerfile_down_bill存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585581&idx=2&sn=93d80a7ee158f6ced9cf81c118db2390&chksm=b18c396786fbb071705f7f8b884a96dcf374e55a263d7e2ddff73bc1c46dfcc27d8933809a91&scene=58&subscene=0": "12月31日截止 | “看雪漏洞小组”集结！组团冲击华为漏洞更高奖励", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497324&idx=3&sn=726aa5ada489a6cc591b1f36e419bb9b&chksm=fa595881cd2ed197da53a8f8a689200cddc5e420f03195716fffc04190c050059eafd0e665bc&scene=58&subscene=0": "漏洞分析 | 挖掘 .NET SqlSugar 框架SQL注入", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727840329&idx=1&sn=8e4b7109f4601396270ae0922058dd61&chksm=80505dc1b727d4d7f11a0db75283d0a13c1e9887756a1a2d702a3646b7be19b286333c0c9298&scene=58&subscene=0": "【活动】2024漏洞马拉松活动来袭，史无前例反爬专项单个奖励最高5w！", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309096&idx=1&sn=4e32dd93c350ea357aa0013d017d03d8": "关键的联发科芯片组漏洞影响15亿手机用户", "https://mp.weixin.qq.com/s?__biz=Mzg3NTU3NTY0Nw==&mid=2247489413&idx=1&sn=fcde34dfbd9e6aa9333ff082c3d3c056": "第一届数证杯团体赛---服务器取证", "https://mp.weixin.qq.com/s?__biz=MzU0NDI5NTY4OQ==&mid=2247486237&idx=1&sn=61373f8016157b66e2c28307cdd3de53": "一文看懂安卓JSB风险漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066522&idx=2&sn=e68dc56710af72cb8e044123396dd41a": "【安全圈】关键的联发科芯片组漏洞影响15亿手机用户", "https://mp.weixin.qq.com/s?__biz=MzkxNzY0MzE2NQ==&mid=2247483971&idx=1&sn=81a4379fe0e4ceb11fcf5148189668bf": "【1day报送】安徽生命港湾信息技术有限公司采集服务管理工具存在未授权访问&弱口令漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496542&idx=1&sn=786c2ef243463b972253ad6ccf7dc2eb": "挖洞荒？工作两年半的渗透测试实习生如何挖到第一个高危sql注入漏洞？慎用！", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486271&idx=1&sn=8dc5deae4121a38158edf57e71dcf089": "「漏洞复现」圣乔ERP系统 DwrUtil SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492928&idx=1&sn=84b4e3fc0b92ae1f566a69902aa4184e": "Windows 权限提升漏洞检测工具集", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491681&idx=1&sn=6eabf10b247a0dcb0e6ff57570a23d7b": "漏洞预警 | Zyxel ZLD防火墙路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491681&idx=3&sn=aafb0b02aa119154c0ed4bb77faded81": "漏洞预警 | 思普企业运营管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066522&idx=2&sn=e68dc56710af72cb8e044123396dd41a&chksm=f36e7e9ac419f78c42203655a869ed106f01a948d8e7de64cf75fca1cf5bee3eed25ec14b8af&scene=58&subscene=0": "【安全圈】关键的联发科芯片组漏洞影响15亿手机用户", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496542&idx=1&sn=786c2ef243463b972253ad6ccf7dc2eb&chksm=e8a5f93ddfd2702ba5c86f55216742d9780d1504c5cf7b55d57e37f741241abc0f83e72d204d&scene=58&subscene=0": "挖洞荒？工作两年半的渗透测试实习生如何挖到第一个高危sql注入漏洞？慎用！", "https://mp.weixin.qq.com/s?__biz=Mzg2NDg2MDIxNQ==&mid=2247485198&idx=1&sn=665ecbc787b32963eea5d0b320ca174e": "网安牛马碰见WAF如何凑出渗透报告漏洞数量？", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497755&idx=1&sn=e0b32483908e2f420efedf2dfa784bcd": "2024年10月份恶意软件之“十恶不赦”排行榜", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503011&idx=2&sn=86f3757c8d1f10c57e921039e6650e10": "无补丁，I-O Data路由器0Day漏洞被利用", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486037&idx=1&sn=fe4e70919205522d0e229d662246dd37": "重生之我在推特逛漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485777&idx=1&sn=e59434cc1cbea489951c59499d4e9b80": "【漏洞复现】某平台-Sc-Interview-search-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484301&idx=1&sn=5d9659c031f61d53a920fd44234a8536": "【漏洞复现】英飞达医学影像存档与通信系统WebUserLogin.asmx存在信息泄露", "https://mp.weixin.qq.com/s?__biz=Mzg3NTY0MjIwNg==&mid=2247484982&idx=1&sn=f38d3f91cde8ae393d8fa111b6fc69a7": "2024年OWASP LLM安全漏洞年度报告", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650604707&idx=3&sn=c9de054d4fda0db26998079e2dad84c4": "某订货系统文件上传漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484485&idx=1&sn=0f5b3d6588ad00afd34fe51811a012a4": "【漏洞复现】Palo Alto PAN-OS身份认证绕过CVE-2024-0012及命令执行漏洞CVE-2024-9474", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486227&idx=1&sn=a70bbbb6e66a54b7a6765ab23f927f9f": "CVE-2023-6553 WordPress存在的远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTIyMjg0NQ==&mid=2247495682&idx=1&sn=05d00ffc6e8884f1917fecc62d760e0f": "X漏洞奖励计划收录扩大！高价收洞！（文末抽奖）", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899704&idx=1&sn=f4bb23c0bd779a13500ae6b75d213b39": "Array Networks SSL VPN 产品曝严重漏洞，已被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491681&idx=2&sn=6e023ccd4d0d3fa65654c5c2d88ff938": "漏洞预警 | Apache Arrow R package反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247530686&idx=2&sn=a0087e732b60c3c448073aa749ca8d2d": "全面防护：AI驱动持续安全验证，灵活应对万变攻击", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525485&idx=1&sn=a5aeff09df0da8ba8baa5a35ae43b833": "Windows 零日漏洞 CVE-2024-38193 在野外被利用：PoC 发布", "https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247487368&idx=1&sn=e37ec534c44ac5981864d0853b870a29": "太棒辣 | 感谢大哥带我学习关于验证码逻辑漏洞这些事", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489562&idx=1&sn=6d639cb1b3d931b066f554c5d797b99a": "海信智能公交企业管理系统 AdjustWorkHours.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NDE4MzE5MA==&mid=2247487187&idx=1&sn=83cd510202e9273c772ef3f606c6afe6": "【活动】2024漏洞马拉松活动来袭，史无前例反爬专项单个奖励最高5w！", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492986&idx=1&sn=09e54f7bf277f6cbca0f1c957c7e12cd": "有PoC，Windows 0day漏洞CVE-2024-38193在野外被利用", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580114&idx=1&sn=fa181017da36db2d6d5598cb97f6ec10": "黑客利用 ProjectSend 漏洞对暴露的服务器进行后门处理", "https://mp.weixin.qq.com/s?__biz=Mzk0MDY2NTY5Mw==&mid=2247485555&idx=1&sn=ce73bb7765466995a3745ab23db7e56f": "[含POC]CyberPanel upgrademysqlstatus 远程命令执行漏洞(CVE-2024-51567)", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133887&idx=2&sn=5e64b53a72121f42601f459acb55f305": "劫持其他APT组织基础设施实施攻击，APT组织新战术曝光；罗克韦尔自动化软件曝多个严重漏洞，可被利用执行远程代码 | 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY1NzM3NQ==&mid=2247484770&idx=1&sn=40040159b0f73448fa9dfc51dde8baf8": "助力企业实战化安全运营 | 灰度安全首次亮相2024年电信和互联网行业网络安全年会", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247487956&idx=1&sn=cc514f441b4a92ba7909f0674bfe82cf": "DockerUI存在默认口令漏洞，可导致拉取镜像，管理等操作", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066537&idx=4&sn=6f910eee1c20ed718fdf7c754fd840e1": "【安全圈】需要采取紧急行动：ABB ASPECT 漏洞使建筑物面临网络攻击", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495571&idx=1&sn=0c222901aba75215f7b034c9a02775e8": "CNVD漏洞周报2024年第49期", "https://mp.weixin.qq.com/s?__biz=MzI3NjA4MjMyMw==&mid=2647789831&idx=1&sn=012815bf3c53ef1a6060c1dc35d847b9": "X情报社区漏洞奖励计划收录扩大！提供本地环境再享额外20%奖金加成！", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247488563&idx=1&sn=a550cfd3444cdc1a232119a08e1539e9": "建议收藏！这15个命令让你的效率提升3倍", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519358&idx=2&sn=053fe593848492102cf308e4ce93de7f": "\"多引擎\"的资产识别、信息收集 | 干货", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260229&idx=1&sn=f6a11bf294dc8f32a86b9a5cafa66554": "【 CVE-2024-38193 】Windows 0day漏洞已在野利用，PoC已发布", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247492752&idx=3&sn=a61b3440c0226297a23f67abe9933266": "上周关注度较高的产品安全漏洞(20241125-20241201)", "https://mp.weixin.qq.com/s?__biz=MzU1NDU1NTI5Nw==&mid=2247488158&idx=1&sn=98acc9ee5fb73ae5ba6267e0eed963a3": "【活动】2024漏洞马拉松活动来袭，史无前例反爬专项单个奖励最高5w！", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247498096&idx=1&sn=60b0f557103ef67e7cf9159778b928d8": "全球云上数据泄露风险分析简报 （第三期）：云盘误配置与API漏洞致高校信息泄露，影响7亿账户", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491216&idx=1&sn=390db568593214c3e21c608f9aac4946": "CVE-2024-48307｜JeecgBoot SQL 注入漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489351&idx=1&sn=aa6577fd6d005684fd089d08b094a531": "一个好用的Nuclei POC模版管理工具支持一键漏洞探测|渗透测试", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515106&idx=2&sn=b625c72739d7c62b246efccace7fbb18": "渗透测试 -- Web漏洞介绍和Sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491694&idx=1&sn=3fb11feee2a30c6a980a0af26aa8ffcb": "MITRE 分享了 2024 年最危险的 25 个软件漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489283&idx=1&sn=29b9004e3fdc168434fc378d44504590": "【漏洞预警】SoftLab Integrate Google Drive身份认证绕过漏洞(CVE-2023-32117)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489283&idx=2&sn=5c93a143e811b95e8b77abdcb97f6599": "【漏洞情报】海信智能公交企业管理系统AdjustWorkHours.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486288&idx=1&sn=1bb852514919b1b26bddd263e28d5501": "「漏洞复现」Mitel MiCollab 企业协作平台 任意文件读取漏洞(CVE-2024-41713)", "https://mp.weixin.qq.com/s?__biz=Mzk0NzM4NzI1MA==&mid=2247486212&idx=1&sn=a25394ea5d523773aa1771aebc8872fc": "Zabbix SQL 注入漏洞（CVE-2024-42327）", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525557&idx=2&sn=780285b5a5a94ef626071a57bc2412e1": "CVE-2024-55563：交易中继干扰漏洞对比特币闪电网络构成威胁", "https://mp.weixin.qq.com/s?__biz=MzIxODIzNzgwMw==&mid=2654070792&idx=1&sn=12d743d033becec5fcc0920e17922d86": "漏洞马拉松2024 | 积分赛阶段冲刺ing，半区见真章！", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247505295&idx=1&sn=c7dccc68315c50474f6e877a45a1b391": "每周网安资讯（12.3-12.9）|Oracle等厂商的多款产品存在漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495571&idx=2&sn=464e8fb82cad6f465f8242e841ab2260": "上周关注度较高的产品安全漏洞(20241202-20241208)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521726&idx=2&sn=4020dbda138c28b7da91666b33eb120a": "SonicWall 修复Secure Access Gateway 中的6个漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502580&idx=1&sn=6c73b0ed8291424bf945a368d40498c1": "安全热点周报：新的 Windows 零日漏洞暴露 NTLM 凭据，已获得非官方补丁", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247496891&idx=1&sn=9c8fd99b9ddc86cb7f57bee467702ab5": "TimelineSec助力2024漏洞马拉松活动，史无前例反爬专项单个奖励最高5w！", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247551853&idx=1&sn=ed4347c2164a771f0ba762ebd7940c96": "Spring漏洞测试与利用", "https://mp.weixin.qq.com/s?__biz=Mzk0MTQ5NjI2Ng==&mid=2247486366&idx=1&sn=41dcf0e70589bd41d82cb1b369b42865": "数据安全新动态（2024年11月）", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497381&idx=3&sn=8636f9e208f208c153d7ab0957f3d4ff": "49套.NET系统漏洞威胁情报(12.10更新)", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247488511&idx=1&sn=7a651145360443820b3f940e3734193e": "Nuclei AI - 让漏洞发现更加智能化与高效", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491682&idx=2&sn=976fbe42f73cc5380687be1c5227d1bc": "漏洞预警 | 安科瑞环保用电监管云平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491682&idx=4&sn=a0dc4444764ab2ef9ba32da241a71790": "工具 | FastjsonExploit", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493826&idx=2&sn=2f70d68dfd020f5c120e5f7d596b9b81": "CVE-2018-15664:Docker CP任意读写主机文件", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488835&idx=1&sn=383eabd7e635fe856fbc2899b7f119b8": "【0day】安徽生命港湾信息技术有限公司服务配置工具存在任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291910&idx=1&sn=cce3441e3c4e73b5d7381cac3619dd88": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133887&idx=2&sn=5e64b53a72121f42601f459acb55f305&chksm=bd15a76c8a622e7a7bbfa541d6ae401b0d481ab229de33253da125d2bbfd20dada28b8730503&scene=58&subscene=0": "劫持其他APT组织基础设施实施攻击，APT组织新战术曝光；罗克韦尔自动化软件曝多个严重漏洞，可被利用执行远程代码 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521726&idx=2&sn=4020dbda138c28b7da91666b33eb120a&chksm=ea94a4d4dde32dc25a0dcbe4bb417dad621e9d9ab1c701a92e4cccf1dda90fcc8f7fc0d1eea9&scene=58&subscene=0": "SonicWall 修复Secure Access Gateway 中的6个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580114&idx=1&sn=fa181017da36db2d6d5598cb97f6ec10&chksm=e91469e8de63e0fe2c1a9542280afc7bb19ad4f3b5fb1026fcfc02ef039eebb5daa59df0e88e&scene=58&subscene=0": "黑客利用 ProjectSend 漏洞对暴露的服务器进行后门处理", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066537&idx=4&sn=6f910eee1c20ed718fdf7c754fd840e1&chksm=f36e7ea9c419f7bff05e335235f5475598b068e6dabeebb56b12bd1c608f6af50d94bb06833e&scene=58&subscene=0": "【安全圈】需要采取紧急行动：ABB ASPECT 漏洞使建筑物面临网络攻击", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247498096&idx=1&sn=60b0f557103ef67e7cf9159778b928d8&chksm=e84c5fafdf3bd6b900c1a3366bb5bf4596df0f45680ccc8b16e4d250e452104e9c80d3e53b3c&scene=58&subscene=0": "全球云上数据泄露风险分析简报 （第三期）：云盘误配置与API漏洞致高校信息泄露，影响7亿账户", "https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247501076&idx=1&sn=ea61326375112eb6b7486937c1ca2278": "[漏洞挖掘与防护] 05.CVE-2018-12613：phpMyAdmin 4.8.1后台文件包含缺陷复现及防御措施", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499522&idx=1&sn=d5908340cc5cb33839f6ae973dbb7103": "CNVD漏洞周报2024年第49期", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247536203&idx=3&sn=f8288da3046f8571a22e5ba05788fba0": "网络安全知多少【科普】5：找业务本身也可能就是漏洞，就是风险", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486968&idx=1&sn=7ee147a6efd7c1a074d8acd00e67fe4a": "Burpsuite存储桶配置不当漏洞检测插件", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485781&idx=1&sn=abe472af31e677010d02b7b3450afdf7": "【漏洞复现】某平台-Upload-file-upload-aspx任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247616783&idx=1&sn=c757bff28e0b57427ff74433f1db3b8f": "扩展 SAE J1939 的攻击场景：传输协议中已建立和新的漏洞的综合分析", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454063716&idx=1&sn=dee9adde502f466cd9c9b73fa7cb94f1": "信息安全漏洞周报【第001期】", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503036&idx=1&sn=826c19c1c6963eedc5d85957a93b8f72": "黑客利用 ProjectSend 漏洞对暴露的服务器进行后门处理", "https://mp.weixin.qq.com/s?__biz=Mzg2MDY0MjQwMw==&mid=2247494229&idx=1&sn=00ba639704a1a21def406229988dd7a3": "从勒索软件到APT：揭开制造业面临的8大网络安全威胁", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614638&idx=1&sn=23b8076cd1077afa63bfcef17858af9f": "安全学院24期开班福利！大咖嘉宾课、poc知识星球免费送", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545940&idx=1&sn=4961694b69a4880b3558ec8068e83e19": "安全学院24期开班福利！大咖嘉宾课、poc知识星球免费送", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489611&idx=1&sn=870491e1594390da4dc881600491a28d": "用友U8 CRM ajaxgetborrowdata.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247487863&idx=1&sn=2b5ec8568da6bc4cdc7a12ca5f3e300b": "用Python实现自动化漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU5NzQ3NzIwMA==&mid=2247486297&idx=2&sn=00c9f509418128a39f1339e08e4c57ff": "羽绒服vs冲锋衣，谁才是冬季保暖的最佳选择？", "https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649248462&idx=1&sn=1fef839e04c52388ba93c9b94a45b20c": "新鲜出炉！GaussDB在HyBench基准测试中表现优异", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309321&idx=2&sn=d90a45affb4d7a3b267b7dcb64922161": "防火墙服务配置漏洞波及多家全球财富100强公司", "https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247493926&idx=1&sn=66f71ef679da29fecf866e7df2eefbe5": "绿盟科技勇夺“强网杯”高阶技术专项赛一等奖，多赛道实现奖项全面突破", "https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247513624&idx=1&sn=8f1943d31e319d66200c5a6849f3346f": "500强上市车企通过模糊测试降低未知风险，构筑汽车行业领先的品质基石", "https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247560864&idx=1&sn=21c3af15a2b0dff6b8c0835853e9809d": "喜报！炼石中标某大型商业银行金融数据与个人信息保护项目", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488850&idx=1&sn=2f906a07fd040ed4b4a04171950e3383": "【未公开1day】某科网威anysec安全网关arping存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502726&idx=1&sn=f74cad3a1971f2f2530634d3b57b676f": "【失败复现】Zabbix SQL注入漏洞(CVE-2024-42327)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489368&idx=1&sn=84a64bc6c014dd11c44cc14f3d2df027": "一款能够自动化过滤扫描结果的目录扫描工具|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487960&idx=1&sn=201e394851f63027036f862d8a36895d": "Palo Alto Networks PAN-OS存在远程命令执行漏洞CVE-2024-9474 附POC", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487157&idx=1&sn=8091c0a81829f3cb58d776c8f6dd38e0": "(未公开)灵当CRM某接口存在文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486302&idx=1&sn=ad62aba60f4f3a333c289d186c92afaf": "「漏洞复现」三汇SMG网关管理软件 SMGSuperAdmin 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492164&idx=2&sn=c240cfffa57ae70caf5f080c969ab408": "【活动预告】ISC2华南分会线下活动欢迎您：平安专场，AI的安全探索与实践", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521736&idx=1&sn=f656ad45da506b8f778e68ff0243d0be&chksm=ea94a4a2dde32db4651e878de8188d4f6cae7312a721ec5b3a69201300cc4b8990af592861cc&scene=58&subscene=0": "研究员在DeepSeek 和 Claude AI 中发现多个提示注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521736&idx=2&sn=37cc8cc02d4dc7c59168f8bb841938a9&chksm=ea94a4a2dde32db4fcf8d9da57d0da38ee6f89a7cfeee9b469e91b0bc2d89db95227a50943f1&scene=58&subscene=0": "QNAP修复Pwn2Own大赛利用的多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497381&idx=3&sn=8636f9e208f208c153d7ab0957f3d4ff&chksm=fa595848cd2ed15e45f17000e815e8d47db26a14f732e2555d047d9e0d01a3dd44285fee839f&scene=58&subscene=0": "49套.NET系统漏洞威胁情报(12.10更新)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499522&idx=2&sn=fa8b9737d4181e218c2ee200ec329bc0&chksm=973acc60a04d4576fb683cae96f216d3a733a43601e8b23e71f8f54b8c9a2dc0f953385dfbec&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241202-20241208)", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182736&idx=1&sn=114de58c87950ec9eac7ccc24b290958&chksm=f4486fecc33fe6fac35edaffc7f8afa6f84e8393ef84627fa778957bef4d8e46a747d4d05dea&scene=58&subscene=0": "美国顶级红队演练，只用了个Nday？", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066552&idx=4&sn=1e612f3b3ba252c5b5578d381d2737ee&chksm=f36e7eb8c419f7aead22e1ec719f6b8294d8e61b27774e7355bdc6c949f9b0b03c8d7351e4e0&scene=58&subscene=0": "【安全圈】防火墙服务配置漏洞波及多家全球财富100强公司", "https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247501076&idx=1&sn=ea61326375112eb6b7486937c1ca2278&chksm=cfcf75d9f8b8fccfa24221b6515a0ead04eaec7fa5124a46bd9f8e5250525f22c0c234e7dedb&scene=58&subscene=0": "[漏洞挖掘与防护] 05.CVE-2018-12613：phpMyAdmin 4.8.1后台文件包含缺陷复现及防御措施", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247486314&idx=1&sn=6ca1faf4185516060554cb5767910675": "edu小程序挖掘严重支付逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260244&idx=1&sn=77a2cf6fca1132ac57455e3e98394dd3": "发现关键漏洞获得 $4,000 赏金奖励", "https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247504189&idx=1&sn=203a7a0abd62c42363032ddf93a633a4": "零基础学习如何挖掘第一个SRC漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491220&idx=1&sn=33447580838d346357e11ff01107377f": "某通用系统0day审计过程", "https://mp.weixin.qq.com/s?__biz=Mzg4NTUwMzM1Ng==&mid=2247512787&idx=1&sn=1c6cd54a524329190ebb2a2f336a843e": "好用的Nuclei GUI POC管理工具", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506001&idx=2&sn=643c526ae97cfc56fb5d56832b4275ea": "美国与菲律宾成功举行海上网络安全和化学品安全演习", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499522&idx=1&sn=d5908340cc5cb33839f6ae973dbb7103&chksm=973acc60a04d45766360f1774e46a8e71fa55b69f7f12db9451d67e7dfbfc2dd0e92afe05c9a&scene=58&subscene=0": "CNVD漏洞周报2024年第49期", "https://mp.weixin.qq.com/s?__biz=MzkzMzczODA0OQ==&mid=2247483997&idx=1&sn=7ab4b5b9d865dae859a2b7b4077c6c1f": "CVE-2019-13288复现笔记及其国产化pdf生成挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503054&idx=2&sn=61c49201691eec638bda1a2b5a90d85e": "防火墙服务配置漏洞波及多家全球财富100强公司", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502600&idx=1&sn=2b1a45b44e8988e6121af578a0aece0a": "微软12月补丁日多个产品安全漏洞风险通告：1个在野利用、17个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247494539&idx=1&sn=c9e951a6295df1f1f94a2f3793cc7ff2": "【攻击手法分析】勒索病毒如何轻松绕过安全设备防线：第一篇-驱动漏洞一击致命", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486103&idx=1&sn=d3ccd2ca78da5d7c49416e47a24f83d1": "分享最近攻防演练HVV漏洞复盘", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793447&idx=3&sn=74a8fd5532aebfa95540119d6c2c34a2": "Ivanti 警告最高严重程度的 CSA 身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899710&idx=1&sn=542451000c5f6f3109a6fa80c8cbbb9c": "WordPress插件WPForms惊现高危漏洞，数百万网站面临退款风险！", "https://mp.weixin.qq.com/s?__biz=Mzg5MjgxNTQ1MA==&mid=2247488111&idx=1&sn=94afaf884447ae0b2f77400c0ee18bd2": "大模型安全的漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497409&idx=1&sn=a82b09186c21bf8d98ac1c656bbdac06": ".NET 一款内网渗透中清理日志服务的工具", "https://mp.weixin.qq.com/s?__biz=MzkyOTQyOTk3Mg==&mid=2247484928&idx=1&sn=0d5f72ae7989e53bcc477d6e0f275680": "Nuclei|图形化|轻量化刷漏洞神器|11000+poc", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503228&idx=1&sn=8158cbc5e01aec5972035af661193b6d": "雷神众测漏洞周报2024.12.02-2024.12.08", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787591&idx=1&sn=e8b66114e6f98d415269d5b8d9f96a37": "银狐团伙再出新招，Web漏洞成切入点", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247693&idx=1&sn=3851764e6b990474556fa86b1a6a0365": "Spring漏洞测试与利用", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500373&idx=2&sn=de1d1f63dc8bc0f867a230507640bdc2": "【漏洞通告】微软12月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500373&idx=3&sn=098e9ed670b71cb63665f4e81802d13e": "【漏洞通告】Ivanti Cloud Services Application身份验证绕过漏洞（CVE-2024-11639）", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496850&idx=1&sn=21c9286190406da9b6d1eaf566c9289d": "2024年12月微软补丁日多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211287&idx=1&sn=648b0bcf5231aa3c73bd8820bc05666c": "【工具分享】Nuclei GUI 管理工具(附12W+poc)", "https://mp.weixin.qq.com/s?__biz=MzIwNzE2MDc5Mg==&mid=2649267037&idx=1&sn=2c0d099c30c393817dbc77e1fb623e18": "国产信创 | 经纬信安拳头产品携手麒麟完成产品兼容性互认证", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931228&idx=2&sn=3ebb24d1b78d2a0d8b3caf676ac9b252": "农信银完成7个重要信息系统容灾切换运行工作，强化数据安全管理与业务连续性保障能力", "https://mp.weixin.qq.com/s?__biz=MzI1NDQxMDE0NQ==&mid=2247485083&idx=1&sn=b0001d31a1da90591366a8795080ae1b": "【漏洞通告】微软2024年12月安全更新通告", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650620145&idx=2&sn=d4e72021c21b8c572ae4541eaa30fe99": "涉及72个漏洞！微软发布12月补丁日安全通告", "https://mp.weixin.qq.com/s?__biz=MzA5OTk2OTY5MA==&mid=2247485642&idx=1&sn=da42b6283d1ceef4780bef8f5a7cf5be": "Microsoft 12月 CVE 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247520891&idx=2&sn=fbe68b0ed739b4477459f1f9d95cea6f": "诚邀渠道合作伙伴共启新征程", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545977&idx=2&sn=cab2fea2d92a1bdd20e088c916587f46": "安全学院24期开班福利！大咖嘉宾课、poc知识星球免费送", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614651&idx=2&sn=5b9bf023f7b5cf87e84bd07bb9b0f73d": "安全学院24期开班福利！大咖嘉宾课、poc知识星球免费送", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247179&idx=2&sn=0f629a416f42e4eb4195b95c624df07e": "安全工具 | Windows 权限提升漏洞检测工具集", "https://mp.weixin.qq.com/s?__biz=MzkxOTUyNTg2MA==&mid=2247483968&idx=1&sn=3974d5a946237beacb754ffe0e2fdf68": "poc管理工具|精准漏扫|附10w+poc|Wavely|有他就够了", "https://mp.weixin.qq.com/s?__biz=MzI5NTQwMjYxNg==&mid=2247483809&idx=1&sn=37e28e355bfced41d98b9f2197d5022d": "ZASRC漏洞接收资产范围更新", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486468&idx=1&sn=da5c6be67fefc6804c0cd02238523a1e": "【漏洞通告】Django Oracle数据库SQL注入漏洞(CVE-2024-53908)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486468&idx=2&sn=a820a5fbc1f6c805244208bae4735e58": "【漏洞通告】ProFTPD 权限提升漏洞(CVE-2024-48651)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486468&idx=4&sn=ebd6c9aa71c0b9af4de51bf0a0e08604": "【漏洞通告】ProjectSend 身份认证绕过漏洞(CVE-2024-11680)", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493731&idx=1&sn=9c7f57a06c7845b2562623c29f591d50": "最近打点用的一些java漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650621658&idx=1&sn=27b85f13c888cf79969dd35429df0ba5": "最高级！安恒信息获评工信部NVDB漏洞治理合作“三星级技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247486316&idx=1&sn=99516f099d6a519939789425766585b8": "记一次接口fuzz+逻辑漏洞拿下证书站高危", "https://mp.weixin.qq.com/s?__biz=Mzg4NDY4Mzk3Mw==&mid=2247485450&idx=1&sn=9e273181e277230b4fd971bdbf600709": "解锁 JVM 性能调优奥秘：让你的 Java 应用飞速驰骋", "https://mp.weixin.qq.com/s?__biz=MzkyMDY1NzA2Mw==&mid=2247483820&idx=1&sn=a23aeb71510508774f10b307c7147e14": "DMC Airin Blog Plugin 反序列化 CVE-2024-52413分析", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182768&idx=1&sn=26452c69a1346cdb53381e524ab2425e": "漏洞发现，除了漏扫还能靠啥？", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ5MDM3NA==&mid=2247487448&idx=1&sn=7ee29c06eeab215458a3c97c371e9d36": "探索开源 C2 框架中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491701&idx=2&sn=986dca366576ab77940040ab4b163181": "漏洞预警 | Veeam Service Provider Console远程代码执行和信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491701&idx=3&sn=a5686e3902d307406a535d6aff1858a3": "漏洞预警 | Progress WhatsUp Gold远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491701&idx=4&sn=44471582ba985789485e32d4f0c3966f": "工具 | ShiroEXP", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899727&idx=1&sn=ab9d08bee30a638793178500d65bdc02": "Cleo文件传输软件爆严重漏洞，黑客组织Termite或已发动大规模勒索攻击！", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488883&idx=1&sn=0cbfef21b2574f37a5e53563e0150749": "【edu 0day预警】某公司教育教学监测与保障系统存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515150&idx=1&sn=cdde4c00dd188d786d3e826d01dcb79a": "XXE漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505136&idx=3&sn=3b8e04d0266d9db89d08cd23faefb52b": "Windows 11 12 月补丁星期二修复了 72 个漏洞和一个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652113172&idx=1&sn=cc65dbbe46b9dba55b33562e14441b09": "微软2024年12月份于周二补丁日针对72漏洞发布安全补丁", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309577&idx=2&sn=6fd24a945862bf834c191ed6f0cfec7b": "Ivanti最严重的 CSA 认证绕过漏洞曝光", "https://mp.weixin.qq.com/s?__biz=MzI4NzA1Nzg5OA==&mid=2247485612&idx=2&sn=2a1158f7b17eb1ee8b19889b6f5ffcfd": "渗透测试小练习（1）尝试一个图形验证码绕过的复现", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486335&idx=1&sn=168f466d99da132b903604afc13a3a35": "「漏洞复现」电子图书阅读平台 downFile.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486633&idx=1&sn=ce9d691bace642433060f9e374fae37d": "【漏洞预警】Apache Struts 文件上传漏洞(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496582&idx=1&sn=e36e6d50967d7b97dcd7cec8a6b930e1": "发现关键漏洞获得 $4,000 赏金奖励", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309661&idx=1&sn=cfdd79332e829413af2d16cb841ac66b": "单洞赏金1万美刀的漏洞思路分享| 玲珑安全帮会直播", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521773&idx=1&sn=3e980835ea6ecc3e1562c951bb038730": "微软 MFA 中存在AuthQuake 漏洞，可导致无限次暴力攻击", "https://mp.weixin.qq.com/s?__biz=MzUzNDg0NTc1NA==&mid=2247510479&idx=1&sn=d578238889ffed2b12bf3c600b6d1e4c": "中国网数中心和国家邮政局领导赴启明星辰集团调研交流", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585913&idx=1&sn=9b3e3bf33a7c7827dc567f6c4588e586": "即将开班！​“系统0day安全”系列课程：掌握漏洞挖掘重要技能", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664232034&idx=4&sn=d4c255d0547183fe574225341573d4cc": "CNNVD | 关于Apache Struts安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496866&idx=1&sn=bbb30a60616ec1cf4ea6804a05eac048": "【漏洞通告】Apache Struts 2远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523950&idx=1&sn=c7f7b9fa14789faf8a6c75b897452a46": "【漏洞通告】Apache Struts 2 任意文件上传漏洞(S2-067)(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500381&idx=1&sn=bf0c2ee1284d729c2b7443e54dc2d93a": "安全简讯（2024.12.12）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500381&idx=2&sn=bdeddcb5ace7d2ee19d04851329b6f15": "【漏洞通告】Apache Struts 2远程代码执行漏洞（CVE-2024-53677）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500381&idx=3&sn=083d549b2dcf727a31f4e9b61a647018": "【漏洞通告】GitLab Kubernetes Proxy Response NEL头注入漏洞（CVE-2024-11274）", "https://mp.weixin.qq.com/s?__biz=Mzg3MDk0OTc1Nw==&mid=2247487889&idx=1&sn=d63e39882d747cd1ed7c3c59635dd669": "Cleo 0day漏洞 CVE-2024-50623 poc 公开", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462062&idx=1&sn=6d04ce844444272812e3be3b061bf062": "CNNVD关于Apache Struts安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462062&idx=2&sn=51b3e8ee84acc08434a2309ef838b85d": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487166&idx=1&sn=4761c7215606df90787c654d6ceb8411": "(0day)杜特网上订单管理系统getUserImage存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486362&idx=1&sn=7817b14339852f25f402164121d84609": "Apache Struts FileUploadInterceptor 目录遍历与文件上传漏洞（CVE-2024-53677）", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507539&idx=1&sn=988e5b92e2c247e3b172cd0170b42c9f": "漏洞通告 | Apache Struts2文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488718&idx=1&sn=a1dc37b8103bff225bac31cc7d4623a6": "【安全更新】微软12月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247551275&idx=2&sn=6b84b6daf3d7d3e6a6137ca9a7253946": "广联达OA系统漏洞批量检测工具 - GlodonScan", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652113189&idx=1&sn=554d13bbf4170011c45f1040aed5d2ae": "Palo零日漏洞凸显面向互联网的接口风险不断上升", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247486347&idx=1&sn=85137a0acb6c87cbba9b0be502bbad60": "记一次网上阅卷系统漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247485958&idx=1&sn=5b9296ea0c9d303950e55b2e9f337108": "Burp Suite for Pentester：软件漏洞扫描程序和 Retire.js", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066578&idx=4&sn=fb9fe492092fe4a3088d8bcf368835be": "【安全圈】Windows 远程桌面服务漏洞允许攻击者执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521773&idx=2&sn=9334dce8b280dba2dd408a1b5854e232": "施耐德电气提醒注意 Modicon 控制器中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664232034&idx=3&sn=ccdb518e321ac9c3d701cf06978bc39e": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650620155&idx=2&sn=25816eda1386048700d085e49807bf55": "高危！Apache Struts文件上传漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490057&idx=1&sn=898cb42cbed7532cef5ba97f53508c92": "创宇安全智脑 | Mitel MiCollab 企业协作平台任意文件读取（CVE-2024-41713）等80个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247568491&idx=1&sn=636c74804b027a06692725d2766cf513": "Shiro框架漏洞看了你就会了（含靶场复现）", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490197&idx=1&sn=9ffaa9babf02fbd7ab419b9c4a23da71": "【风险通告】Apache Struts存在文件上传漏洞（CVE-2024-53677）", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490197&idx=2&sn=f905ddb46575c4bbf932f4af33a4738a": "【风险通告】GitLab存在敏感信息泄露漏洞（CVE-2024-11274）", "https://mp.weixin.qq.com/s?__biz=MzA5Nzc4Njg1NA==&mid=2247489168&idx=1&sn=2b4448d1d4b839029d38cabe1e4cf5ee": "关于防范Zabbix软件SQL注入超危漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=Mzg4MDY1MzUzNw==&mid=2247497998&idx=2&sn=076c87adb99ee8206cebc88e147c57e9": "漏洞扫描产品介绍", "https://mp.weixin.qq.com/s?__biz=Mzg3MDk0OTc1Nw==&mid=2247487889&idx=2&sn=0912f0715b90ec7999f942aa0df0a5f3": "Zabbix SQL 注入 CVE-2024-42327 POC已公开", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247489342&idx=1&sn=88c2ad15c90e205a1b6fd6a2cb7cea59": "推荐一款功能强悍的渗透脚本", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497453&idx=3&sn=96ddb90221002fcab8ab6365b5b71c3a": "50套.NET系统漏洞威胁情报(12.13更新)", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502754&idx=1&sn=8d5198f970edcdce2109d001969ce60f": "【成功复现】Wordpress Elementor Page Builder路径遍历漏洞(CVE-2024-9935)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491705&idx=1&sn=c6d00db2d1d2da8d4eccb0541ede19a2": "漏洞预警 | Django拒绝服务和SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491705&idx=2&sn=a828acfbefc73997aa7725a8076ddc41": "漏洞预警 | 圣乔ERP系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491705&idx=3&sn=cfbfa8d0e7f3f0cf0bb12bfdb1f55e15": "漏洞预警 | 小米路由器任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492955&idx=1&sn=394994faf4a919f7d1520e437498c6ea": "XXE 漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487028&idx=1&sn=59fd71a1f2ba11ab7b07247934d24721": "闭源系统半自动漏洞挖掘工具 SinkFinder", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506067&idx=1&sn=51b6e4654476511318badae0e17e231c": "“芝麻开门”无线攻击：针对中国锐捷网络的物联网设备漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzODMyMzQxNQ==&mid=2247484344&idx=1&sn=23bea36464fb1ec449f66047871fdf87": "【MalDev-10】免杀-3", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492939&idx=1&sn=0f0d3ee31741d751f496b8dc075f28dd": "Ivanti修复了其客户成功平台 (CSA) 中一个最高严重级别的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247489420&idx=1&sn=bffac0e9e6364b249bd4b3fc96147516": "《电力监控系统安全防护规定》2024年第27号令", "https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247560967&idx=1&sn=edc2b9e31ed1952c94e297433fb3e27b": "附下载！炼石参编工业数据安全脱敏标准发布", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488897&idx=1&sn=f860e7c647eebbb00c843ec6048fef38": "【0day】深圳国威电子有限公司HB1910数字IP程控交换机存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505156&idx=1&sn=8b9e9979adb64197311a0dbe6ec5ff74": "大众和斯柯达汽车存在漏洞，导致发动机故障和车主数据被盗", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066578&idx=3&sn=55d3538cbf8999a9aa8be86d3ea965e6": "【安全圈】知名企业级文件传输产品存在漏洞，正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505156&idx=3&sn=c456598d99353e763fbdc160fe0f3444": "苹果通过 iOS 18.2 更新修复了密码应用程序中的加密漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585913&idx=1&sn=9b3e3bf33a7c7827dc567f6c4588e586&chksm=b18c3bb386fbb2a5383619e665650a2d6d199860eac365f85e9601b7bcb7778018b92491f6fe&scene=58&subscene=0": "即将开班！​“系统0day安全”系列课程：掌握漏洞挖掘重要技能", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502622&idx=1&sn=b09b74ae58ce913511ebc0fee0ec7fef&chksm=fe79ef86c90e669039b61b9b5924eb24b667153b9a47d4a40f3e2738878d49b38d48f228edfe&scene=58&subscene=0": "Apache Struts 文件上传漏洞(CVE-2024-53677)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507539&idx=1&sn=988e5b92e2c247e3b172cd0170b42c9f&chksm=cfcabd47f8bd34511cdbcc6f262493f7fc994ef267f8e470ce48d96fd90a0bf4915359136e5e&scene=58&subscene=0": "漏洞通告 | Apache Struts2文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066578&idx=3&sn=55d3538cbf8999a9aa8be86d3ea965e6&chksm=f36e7f52c419f644374ed6e38ec284d9cbd66833b16d2dffbf74a282c791e1a17709b3b7902b&scene=58&subscene=0": "【安全圈】知名企业级文件传输产品存在漏洞，正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066578&idx=4&sn=fb9fe492092fe4a3088d8bcf368835be&chksm=f36e7f52c419f644b0505dba59eba684542159abcbc55918cca05917e2f5bc8c4fe45089a051&scene=58&subscene=0": "【安全圈】Windows 远程桌面服务漏洞允许攻击者执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486362&idx=1&sn=7817b14339852f25f402164121d84609&chksm=ec6fec9adb18658c00af20b701aa0cfab384228b89da7f43edcd79781b968ff408dad6b309d3&scene=58&subscene=0": "Apache Struts FileUploadInterceptor 目录遍历与文件上传漏洞（CVE-2024-53677）", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182768&idx=1&sn=26452c69a1346cdb53381e524ab2425e&chksm=f4486fccc33fe6da43a706a6ab100eb7ace61244a4b0fa4808d8aede74562173c25b76324ed0&scene=58&subscene=0": "漏洞发现，除了漏扫还能靠啥？", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664232034&idx=3&sn=ccdb518e321ac9c3d701cf06978bc39e&chksm=8b59f69bbc2e7f8de070955d46613cb4e4a06cebb6220e99e3458836ea4503df3cf4e501b9d3&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521773&idx=1&sn=3e980835ea6ecc3e1562c951bb038730&chksm=ea94a487dde32d91d33e375aa8b72490a1daf1a3640f08c77409be3a66062af25a407b909384&scene=58&subscene=0": "微软 MFA 中存在AuthQuake 漏洞，可导致无限次暴力攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521773&idx=2&sn=9334dce8b280dba2dd408a1b5854e232&chksm=ea94a487dde32d9163abde86ace9b63ba55a88d022c03411d8072763533dd6664a1afb906710&scene=58&subscene=0": "施耐德电气提醒注意 Modicon 控制器中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523950&idx=1&sn=c7f7b9fa14789faf8a6c75b897452a46&chksm=ce46157ef9319c681325f638276f630c4c9fc73296dfb4e767f246a4d0eeef167b15f9317dab&scene=58&subscene=0": "【漏洞通告】Apache Struts 2 任意文件上传漏洞(S2-067)(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496582&idx=1&sn=e36e6d50967d7b97dcd7cec8a6b930e1&chksm=e8a5f9e5dfd270f3a6ca60c604d0791cdb92f81c3601ba143e0d67d933957b527a6987441e42&scene=58&subscene=0": "发现关键漏洞获得 $4,000 赏金奖励", "https://mp.weixin.qq.com/s?__biz=Mzg4OTU4MjQ4Mg==&mid=2247488118&idx=1&sn=5c5cb1fcf0548be2a9f031db07a60af4": "活动预告|“AI+Security”系列第4期之“洞”见未来：AI驱动的漏洞挖掘新范式", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484729&idx=1&sn=c4e43f6027f2caeeca0e8ac1610504d6": "【复现】 Apache Struts 文件上传漏洞（CVE-2024-53677）风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NDg2MDIxNQ==&mid=2247485250&idx=1&sn=e67f0d77c54f42ab5461bd67ed71007f": "黑盒乱锤某专属SRC到0day代码分析", "https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247488781&idx=1&sn=9cf9a3173e478a3407e42537063219d0": "活动预告|“AI+Security”系列第4期之“洞”见未来：AI驱动的漏洞挖掘新范式", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493039&idx=2&sn=b15c23be7d87bcb5ea5d7df1af1fb382": "超过 30 万台 Prometheus 服务器和 Exporter 暴露于拒绝服务（DoS）攻击中", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493039&idx=3&sn=6825a1e1963fd82c3dbe8d1f6d4ffaed": "【OleView.NET】Windows COM 攻击面漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489687&idx=1&sn=b9022acae500cb9ca86712332ef5edef": "思普企业运营管理平台 apilogin SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485795&idx=1&sn=f06ce780a90a36fa3c47b18e951a679f": "【漏洞复现】某平台-cwsuploadpicture-GetPicture-file-read-任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTYwMzc5OQ==&mid=2247499343&idx=1&sn=77513dfe7863e99207212700e29e7055": "玲珑安全直播：单洞赏金1万美刀的漏洞思路分享", "https://mp.weixin.qq.com/s?__biz=Mzg3Mjg4NTcyNg==&mid=2247489970&idx=1&sn=0f31c205d76351382a0490b5f765a806": "活动预告|“AI+Security”系列第4期之“洞”见未来：AI驱动的漏洞挖掘新范式", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489677&idx=1&sn=a93b17ebac75bad9add1bc68528a2eec": "安科瑞环保用电监管云平台 GetEnterpriseInfoById SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503097&idx=2&sn=dbb8082751d5715551c096f63d4bb2a8": "知名企业级文件传输产品存在漏洞，正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487537&idx=1&sn=fb94ab90c088e2be3d41f9d8d9b2fea2": "赛克安全本周漏洞推送（12.9-12.13）涉及孚盟云、用友时空、蓝凌OA、月子会所、时空VMS等产品相关漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650621697&idx=1&sn=cda70429226d0540d8d9cc385d78bb03": "遇到漏洞怎么办？美妆思路试试看", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655348206&idx=1&sn=ea85cb93ee6383222f1cc27eb30063e8": "Ivanti云服务严重漏洞：CVE-2024-11639（CVSS 10）建议立即修补", "https://mp.weixin.qq.com/s?__biz=MzI0NTI4NjEwOQ==&mid=2247484957&idx=1&sn=37059c25f43518ac486bd4d37596e732": "Mitre_Att&ck框架T1622（调试器规避）技术的简单实现", "https://mp.weixin.qq.com/s?__biz=MzA4NzU1Mjk4Mw==&mid=2247492196&idx=1&sn=9a17a69290ef6d3f0970fde1eb354811": "网络资产收集与漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzkyMDY1NzA2Mw==&mid=2247483831&idx=1&sn=317637ef6617e99f0ba2575c705aaca6": "SeaCMS admin_files.php CVE-2024-42599分析", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487028&idx=2&sn=4668ad2932afd679ad10d8dcb4628d3f": "最近打点用的一些java漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787610&idx=1&sn=95a8903a00d204b2f0a97e8c4b9362d9": "斯柯达汽车漏洞披露：超过140万辆汽车面临远程控制与追踪风险", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525742&idx=2&sn=38f0f752f0a2a20ce08741f4dc7e8cef": "MyQ 打印服务器未经身份验证的 RCE (CVE-2024-28059)", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247185&idx=2&sn=c6276f9079857176ffbd0642427bfa0e": "安全工具 | Windows 权限提升漏洞检测工具集", "https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652316231&idx=1&sn=b3423c6bb4904ec61f6226b60f05da50": "【活动预告】“AI+Security”系列第4期之“洞”见未来：AI驱动的漏洞挖掘新范式", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488061&idx=1&sn=0c1b5efe856733122cc099e6199dfff3": "用友U8-CRM系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546009&idx=2&sn=8ff0c02ef8d437280d40107620596a67": "安全学院24期开班福利！大咖嘉宾课、poc知识星球免费送", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605007&idx=3&sn=36d026706ffc889660ce97c269b91909": "Spring漏洞测试与利用", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485605&idx=1&sn=0972cd05c82a2042a8e7ccd90c8f93a6": "赛克安全本周漏洞推送（12.9-12.13）涉及孚盟云、用友时空、蓝凌OA、月子会所、时空VMS等产品相关漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664232034&idx=4&sn=d4c255d0547183fe574225341573d4cc&chksm=8b59f69bbc2e7f8d6052c1c608f41cb088c5bf0eb9cbae630fdc6a8d5f7d0a014f6f554430fc&scene=58&subscene=0": "CNNVD | 关于Apache Struts安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247488068&idx=1&sn=80c09e5283881fc86ac6235e1c6d96f3": "用友NC yerfiledown SQL注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzAwNTI1NDI3MQ==&mid=2649619760&idx=1&sn=941fa5fb1aeba9276998379a942c2a88": "Unix通用打印系统cups-browsed远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309849&idx=3&sn=d3d596e08cc54e08b3e20a458a7ac9e7": "Windows远程桌面服务漏洞允许攻击者执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066594&idx=2&sn=b944b25addf57bec5231e17520c14d2c": "【安全圈】大众和斯柯达曝12个组合漏洞，攻击者可在10米内无接触入侵", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066594&idx=3&sn=fb1485e3b4a0ed439c616f967bfc2543": "【安全圈】关键的Windows UI自动化框架漏洞允许黑客绕过EDR", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066594&idx=4&sn=b010357e9e80003c07a80b440507c355": "【安全圈】Ivanti最严重的 CSA 认证绕过漏洞曝光", "https://mp.weixin.qq.com/s?__biz=MzkxMTA3MDk3NA==&mid=2247486901&idx=1&sn=2b82a1c35d19c81b176e5237e5729b7d": "【新发布】2025年美《国防授权法案》涉中内容", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585919&idx=2&sn=3bb34e0901a29e5afc2fe734b34df7e0": "斯柯达和大众汽车信息娱乐系统漏洞：攻击者可在10米内无接触入侵", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247547339&idx=1&sn=57a0ac75c29a76c3c8320bf2d4aae8ef": "斯柯达汽车漏洞披露：超过140万辆汽车面临远程控制与追踪风险", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247488175&idx=1&sn=1c921a987a68886965f42dd89bd995bd": "黑盒乱锤某专属SRC到0day代码分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521787&idx=2&sn=6bccdb74a809a4f90b14cdd90c9c2985": "Cleo修复严重的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247531758&idx=3&sn=fc121931d90c3bd57de3013a2513e4f0": "上周关注度较高的产品安全漏洞(20241202-20241208)", "https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247488069&idx=1&sn=48196bd07b78302298ba270e7ffa5e27": "安全设备漏洞 Checklist", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493957&idx=1&sn=e321390a222acdb9054677bb1645e4a5": "【众测挑战赛最终场】漏洞马拉松赛程二正式开启！超多业务等你来测！", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493957&idx=2&sn=25f373967d5cfff03e611ac6924fcec4": "【2024漏洞马拉松】OPPO赛程正式启动，1.5倍奖励，新人额外奖励……超多奖金拿到手软！还有手机大奖等你来拿！", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495011&idx=1&sn=256dd54d6fc4d062660d7c4c1cba4f91": "对攻击者保持视野领先：从漏洞情报到「扩展漏洞情报」", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247487889&idx=1&sn=3cc6ea970109136c7522b2c5ff73bdf0": "一个0day的开端：失败的man与nday", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500387&idx=2&sn=fe3998c2402e46104f04d64e18e62c50": "【漏洞通告】Cleo 远程代码执行漏洞 ( CVE-2024-50623 )", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247490507&idx=1&sn=72c3fc1663b1a5a1b7b64b2a8b1fafb0": "反面教材+1 切勿把个人信息放公网", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515188&idx=2&sn=57cd6e0b04194a02d28788957d533559": "渗透测试 -- Web服务程序解析漏洞和文件包含漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496596&idx=1&sn=5af17ad8fcf461b401780dfe33b5ff27": "利用开放式重定向、2FA 绕过等漏洞获取$1600赏金奖励", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489541&idx=1&sn=0a586e636598ce0f0cf438b4e3a00d47": "【云原生攻防研究】Istio访问授权再曝高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489308&idx=1&sn=5c47de34e923278823c34ea94e60cbb6": "【漏洞预警】Cleo远程代码执行漏洞CVE-2024-50623", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309849&idx=1&sn=6849f94f691ae8bacd9489f813864299": "大众和斯柯达曝12个组合漏洞，攻击者可在10米内无接触入侵", "https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247513670&idx=1&sn=191a30556fd27585c0e3eda82e42883b": "DevSecOps面面观 | 聊聊DevSecOps度量实践中的那些误区", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521787&idx=1&sn=aa7443d590ca0182f0cbd4386c81152a": "Apache修复 Struts 2 中的严重 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498989&idx=2&sn=165316bf3bca3a70f0c334ba2c86dc44": "渗透测试 -- CSRF漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497792&idx=1&sn=38bf4f291266c0a62fb6758c56b04d46": "2024年十大最佳漏洞管理工具", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247488515&idx=1&sn=3ec0060c8eb88e788077895e9929ced8": "apt-t00ls 漏洞检测", "https://mp.weixin.qq.com/s?__biz=MzkyOTUxMzk2NQ==&mid=2247485822&idx=1&sn=7121f15cad1c3aaf8a54ff5735789067": "PHP 常见漏洞威胁函数 | 全面总结", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491726&idx=1&sn=3cc974eaf3fee6d1baa7741b52b96b0b": "漏洞预警 | I Doc View SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491726&idx=2&sn=e1d9019f697e2b42d4d8fee135c26031": "漏洞预警 | 顺景ERP管理系统任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491726&idx=3&sn=295c736ddffb607c469f96a60e45993d": "漏洞预警 | YourPHPCMS SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487539&idx=1&sn=8e7a1acdc9dccb02671b789348622ea4": "赛克安全本周漏洞推送（12.9-12.13）涉及孚盟云、用友时空、蓝凌OA、月子会所、时空VMS等产品相关漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488910&idx=1&sn=214f24e9f57f5edee007028c576f7f68": "【0day】圣乔ERP系统downloadFile存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585919&idx=2&sn=3bb34e0901a29e5afc2fe734b34df7e0&chksm=b18c3bb586fbb2a39743e902afa63e0412fad850f82e65fd105f799ab9fe3edfad907cfc518a&scene=58&subscene=0": "斯柯达和大众汽车信息娱乐系统漏洞：攻击者可在10米内无接触入侵", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521787&idx=1&sn=aa7443d590ca0182f0cbd4386c81152a&chksm=ea94a491dde32d87b3060602978c36b5e8d18e86a58054c857fc9c0ef0807f81f3a326687c1d&scene=58&subscene=0": "Apache修复 Struts 2 中的严重 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521787&idx=2&sn=6bccdb74a809a4f90b14cdd90c9c2985&chksm=ea94a491dde32d878d12b484356d74f82ce50e72b41607967c69d46af23089404ac6bc4d5de1&scene=58&subscene=0": "Cleo修复严重的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497453&idx=3&sn=96ddb90221002fcab8ab6365b5b71c3a&chksm=fa595800cd2ed116ed9d8d8b7038f3bbb9e8ebd1b0ff985e83be86ff69664ca1aeb38a128f8e&scene=58&subscene=0": "50套.NET系统漏洞威胁情报(12.13更新)", "https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247488781&idx=1&sn=9cf9a3173e478a3407e42537063219d0&chksm=fe5d0d8dc92a849b892909c973424fd948dde4500c1d6066dcd61b86c462c418ecd7d7e672d2&scene=58&subscene=0": "活动预告|“AI+Security”系列第4期之“洞”见未来：AI驱动的漏洞挖掘新范式", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066594&idx=2&sn=b944b25addf57bec5231e17520c14d2c&chksm=f36e7f62c419f674c25c2731e00045529a26d413856ffe1f83e7f550bf4adade4c9edc817539&scene=58&subscene=0": "【安全圈】大众和斯柯达曝12个组合漏洞，攻击者可在10米内无接触入侵", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066594&idx=3&sn=fb1485e3b4a0ed439c616f967bfc2543&chksm=f36e7f62c419f674925c4fd86653e81123e3e05d411e575edd5ffcf7b8c21e0c38337de1b810&scene=58&subscene=0": "【安全圈】关键的Windows UI自动化框架漏洞允许黑客绕过EDR", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066594&idx=4&sn=b010357e9e80003c07a80b440507c355&chksm=f36e7f62c419f674bf2fcde34f7aed14f464143ef5283e001b7ce427b24ed44858953afd2a85&scene=58&subscene=0": "【安全圈】Ivanti最严重的 CSA 认证绕过漏洞曝光", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493957&idx=1&sn=e321390a222acdb9054677bb1645e4a5&chksm=fa78e809cd0f611fbf317ac9c52626f6e6d208ba17c2d8d09a1a1384a2f4a830edec42e5ac5b&scene=58&subscene=0": "【众测挑战赛最终场】漏洞马拉松赛程二正式开启！超多业务等你来测！", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493957&idx=2&sn=25f373967d5cfff03e611ac6924fcec4&chksm=fa78e809cd0f611f693b712f382403221c59b63b720d6d5fa857115e47d3d8ad899c2c8ca3ff&scene=58&subscene=0": "【2024漏洞马拉松】OPPO赛程正式启动，1.5倍奖励，新人额外奖励……超多奖金拿到手软！还有手机大奖等你来拿！", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496596&idx=1&sn=5af17ad8fcf461b401780dfe33b5ff27&chksm=e8a5f9f7dfd270e136ea467a560e89982864ff0210c71fa6a13dc9f6b88f6ceed7afb9f22a01&scene=58&subscene=0": "利用开放式重定向、2FA 绕过等漏洞获取$1600赏金奖励", "https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652316231&idx=1&sn=b3423c6bb4904ec61f6226b60f05da50&chksm=8bc4bfc9bcb336dfae863c4548718d74af6325bebc0f5161c725b1b1b2f96ee5fb4ecdcaa2ed&scene=58&subscene=0": "【活动预告】“AI+Security”系列第4期之“洞”见未来：AI驱动的漏洞挖掘新范式", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495011&idx=1&sn=256dd54d6fc4d062660d7c4c1cba4f91&chksm=96d8e6b9a1af6faf27ffa548af4be5c572cf13427e9675fde58dbcd839a169a45e6e7072012f&scene=58&subscene=0": "对攻击者保持视野领先：从漏洞情报到「扩展漏洞情报」", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493068&idx=5&sn=6cbbaac9e6c56d21ac09c0bb63b45aea": "OpenWrt 严重漏洞致设备遭受恶意固件注入", "https://mp.weixin.qq.com/s?__biz=Mzk0MzY3MDE5Mg==&mid=2247483870&idx=1&sn=f2d83df755a6168806722398cf014828": "北京时空智友科技有限公司企业流程化管控系统存在SQL注入漏洞（2024-新）", "https://mp.weixin.qq.com/s?__biz=MzkyODY3NjkyNQ==&mid=2247484369&idx=1&sn=6bf8e1fb3de630777ecce9568e186adf": "AI安全漏洞之VLLM反序列化漏洞分析与保姆级复现（附批量利用）", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309860&idx=1&sn=faca11b08d12852dd40f9633cec1dfbf": "大量用户吐槽，Microsoft 365 又大面积宕机", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309860&idx=3&sn=cf5a31b4089c8f38b66010ac56f5528a": "知名企业级文件传输产品存在漏洞，正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605043&idx=1&sn=aa0ce5d1e96b5a03e2cb55586120ebf3": "考研还有VIP？人财两空要注意！|大众和斯柯达曝12个组合漏洞，攻击者可在10米内无接触入侵", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793494&idx=1&sn=f15254b38aa27158bd9f2161dd2d8b1f": "锐捷Reyee云管理平台发现严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793494&idx=2&sn=a4ae56bd580ed692bbcdfbca69751e99": "CISA 确认勒索软件攻击利用了关键的 Cleo 漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787610&idx=1&sn=95a8903a00d204b2f0a97e8c4b9362d9&chksm=8893bcb5bfe435a394e1aea971bb0426b06390f8efb65f97a5811b81e2a1b8630d40c794fd55&scene=58&subscene=0": "斯柯达汽车漏洞披露：超过140万辆汽车面临远程控制与追踪风险", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486360&idx=1&sn=0d5a93471d5f0175a53d8867f0cb5a6d": "「漏洞复现」YourPHPCMS checkEmail SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488091&idx=1&sn=e6260f524d404ed289aa878c061f01f4": "Zabbix 存在SQL注入漏洞 (CVE-2024-42327)", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506296&idx=1&sn=d78be69680656e7f679dc04367806179": "价值1.4 W人民币漏洞！骚！缓存配置错误造成鉴权绕过", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546029&idx=1&sn=66caa413669a7c737555534c7e8eb0e6": "某阅读器支付逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546029&idx=2&sn=74867a57d82d0db91f08d5319d6253cf": "安全学院24期开班福利！大咖嘉宾课、poc知识星球免费送", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247633148&idx=2&sn=938e5457a6bef8ee0dc499916fa72b25": "在看 | 周报：央视起底倒卖游戏账号犯罪链；“招商银行崩了”冲上热搜；广西网安部门因未尽网络安全义务对某公司进行警告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458586874&idx=2&sn=def87ccd0e65d4f49f3448c619afac16": "“看雪漏洞小组”集结！组团挖洞，一起冲击华为漏洞更高奖励", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486275&idx=1&sn=18c0bd580c1f76ce1aface83320fe3c2": "cve-2024-26229 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505179&idx=1&sn=e91007c51b6a26874b220b9ab8fd50b7": "OpenWrt 中的严重漏洞：路由器和物联网的恶意固件风险", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506199&idx=1&sn=a2e9317ad8423244888fd94381b1b797": "每周网安态势概览【20241215】050期", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486375&idx=1&sn=2f51033c1bdcd86c554acfed2a3152e9": "大华DSS数字监控系统 attachment_downloadAtt.action 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487051&idx=2&sn=9461ae572b0f2b2e73a6011d9d0f7428": "某阅读器支付逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458586874&idx=2&sn=def87ccd0e65d4f49f3448c619afac16&chksm=b18c3e7086fbb766a3c750cc6cec9f42d84bc0e3dc4ca25925934c1bfd0e2c80daaf2a5068f2&scene=58&subscene=0": "“看雪漏洞小组”集结！组团挖洞，一起冲击华为漏洞更高奖励", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493073&idx=1&sn=9f159c0c70774c9a96763486cb049c58": "CVE-2024-11053 (CVSS 9.1)：Curl 漏洞在重定向中暴露用户凭证", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309861&idx=3&sn=a55f0f1a630bff09a296cb60f7f7f5fd": "关键的Windows UI自动化框架漏洞允许黑客绕过EDR", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605056&idx=4&sn=cd7efed4feb6063d619c80cb9b327b5b": "网络资产收集与漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247495194&idx=3&sn=f9db1bf04962c337658793212dfa3d7e": "大众和斯柯达曝12个组合漏洞，攻击者可在10米内无接触入侵", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486218&idx=1&sn=1186b18e7409147510a68966666070f9": "实战 | 记一次双排渗透测试漏洞复盘", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505209&idx=2&sn=e3d879187e4870549404ef7580568b4f": "数据泄露：预防和应对", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505209&idx=4&sn=cb5748e0f25f778619769252e7da6d6d": "通过更智能的开发策略解决软件漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247488080&idx=1&sn=079ba007618c1361f56bb95581f4630a": "aiohttp存在目录遍历漏洞(CVE-2024-23334)", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247485065&idx=1&sn=5e280ee6cbdb82feb3f6c18fc3a0d168": "泛微云桥e-Bridge SQL注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517683&idx=1&sn=dc0041bac00ff3ac944686a1bdc2c8d8": "浅析渗透实战中url跳转漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486340&idx=1&sn=f9621c441ecc8206dacbd038cc589a87": "Atlassian Confluence 模板注入代码执行漏洞（CVE-2023-22527）", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492987&idx=1&sn=06a5d1a121c335bda422a0164efdee31": "Nuclei 分布式漏洞扫描平台可联动 AssetsDetectAPI 资产搜集", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491734&idx=1&sn=8aad76fd2d17f86a7a23aaa215e8888c": "漏洞预警 | 大华DSS数字监控系统任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491734&idx=2&sn=6a75b0253bfade7be3bbc07cadf69ca0": "漏洞预警 | 用友NC SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491734&idx=3&sn=5814fffd970fed63f305991d99e3b362": "漏洞预警 | 中成科信票务管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899756&idx=1&sn=85ef00825aef53524d39f428a5c0de41": "微软 MFA 现 AuthQuake 漏洞， 允许无限次暴力破解！", "https://mp.weixin.qq.com/s?__biz=Mzg4NDc0Njk1MQ==&mid=2247486365&idx=1&sn=f6cf2499ec26220023398ce584fe36a1": "如何有效防范勒索软件攻击？最新漏洞与防御策略", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488944&idx=1&sn=766ae78023280906e2595e294bfa06da": "【0day】《黄药师》药业管理软件UploadFile存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247485932&idx=1&sn=ce5622d60a21d9b99e971546249d4360": "OpenCVE：一款自动收集NVD、MITRE等多源知名漏洞库的开源工具，累计收录CVE 27万+", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614686&idx=1&sn=5c2a183a959901cde0a0ce6f4dc52164": "【$25000】利用Zendesk Nday获取漏洞赏金", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489710&idx=1&sn=3da0a42c282713d932adcdd522c15dbc": "九思OA workflowSync.getUserStatusByRole.dwr SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485799&idx=1&sn=69a6489bc4850684bb6ba3d0815adb22": "【漏洞复现】某平台-Template-readfile-任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499702&idx=1&sn=50c4df738f4d9978c8aaff35f8ead247": "玩儿转网站备份泄漏漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485613&idx=1&sn=39d1f5801b29c06477abe0faa7e361eb": "【漏洞预警】Cloudlog 电台日志系统 SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247196&idx=6&sn=3956b599b3963d2a61b9cebefdf74863": "安全工具 | Windows 权限提升漏洞检测工具集", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489696&idx=1&sn=39930a2658d350b0f35807a65b724c2b": "昂捷CRM cwsfiledown.asmx 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605077&idx=4&sn=0f193d2b669247efaa2e79766bf4a968": "XXE 漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211300&idx=1&sn=bb5c277c3bcd4785d0600c971e15c282": "【十步\"杀\"一车】大众和斯柯达曝12个组合漏洞，攻击者可在10米内无接触入侵", "https://mp.weixin.qq.com/s?__biz=MzIzODMyMzQxNQ==&mid=2247484350&idx=1&sn=338f274cec383fd947de6beaa15f07ee": "【MalDev红队开发】笔记阶段汇总", "https://mp.weixin.qq.com/s?__biz=MzAxMzkzNDA1Mg==&mid=2247513511&idx=1&sn=b00ab171426c41029b3c99e3d470a76e": "平台权限已开放！“大狗Unlock”活动正式开启，豪华大奖等你来拿！", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655348234&idx=1&sn=e3bdf86725133b7439aeb030e494ef87": "利用GitLab漏洞，美国比特币ATM巨头Byte Federal数据泄露", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247484505&idx=1&sn=dbc7552b94faf5a4568e046ae01c3e44": "SRC漏洞挖掘思路手法（非常详细）", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793508&idx=2&sn=a73c2601eb9d9c522e68b9641c3a8ccd": "Clop 勒索软件组织对利用Cleo 0day窃取数据负责", "https://mp.weixin.qq.com/s?__biz=Mzg5MzMzNTUzMA==&mid=2247485668&idx=1&sn=513caba8f1d1116baf305d9e62e4c9eb": "实战渗透-某金融众测价值3k的漏洞（附SRC报告合集免费下载）", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486390&idx=1&sn=685818611c6aa820c730dde74580540f": "「漏洞复现」PbootCMS entrance.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487054&idx=2&sn=723ac096a1c539a39b6fd167b6a933b2": "记一次验证码绕过修改邮箱地址", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652113226&idx=1&sn=a9ca874583cfab7091716f44d589afb2": "网络钓鱼是数据泄露的无声前兆", "https://mp.weixin.qq.com/s?__biz=MzkyOTQyOTk3Mg==&mid=2247484933&idx=1&sn=620e7c286ce724019856a285ec016318": "Exp-Tools:一款集成高危漏洞EXP的实用工具", "https://mp.weixin.qq.com/s?__biz=MzkyMTY1NDc2OA==&mid=2247487236&idx=1&sn=acedfe7140658fa3d8b8e6bf994b390e": "【漏洞文章】JeecgBoot 任意用户密码重置", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526007&idx=1&sn=30b50a7e68c6ea8b1d791c25af3ebb6c": "CVE-2024-38819：Spring 框架路径遍历 PoC 漏洞已发布", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526007&idx=2&sn=4e7def1076ab4e88d21b868da6b21abf": "知名开源生物医学工具（InVesalius 3.1）存在远程代码执行漏洞 CVE-2024-42845", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526007&idx=4&sn=9db2d1040e02b05a2060512a24b1251c": "CVE-2024-45337：Golang 加密库存在缺陷，存在授权绕过风险", "https://mp.weixin.qq.com/s?__biz=MzA5OTI3MTE5MQ==&mid=2247485438&idx=1&sn=8d03a526fda42f52f94b334d0a290708": "【Poc】-Spring Framework路径遍历漏洞(CVE-2024-38819)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488155&idx=1&sn=22465acb48eb452307c7f4bc4940b2a0": "【0day】某州数码DCME-320存在前台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503123&idx=2&sn=5dd8d8ef12e293191bd286b255519a79": "利用GitLab漏洞，美国比特币ATM巨头Byte Federal数据泄露", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247505335&idx=1&sn=b644498e28b671bb36e14c80f9eb495f": "每周网安资讯 （12.10-12.16）|7-zip存在整数下溢或超界折返漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787627&idx=1&sn=4aca62c5aa480dccf358e90b043f3dcc": "警惕！微软Azure MFA漏洞曝光：数百万用户面临安全风险", "https://mp.weixin.qq.com/s?__biz=MzU1NTYxMjA5MA==&mid=2247504527&idx=1&sn=0ffd69e5c3aeba9398a43593b146f6d9": "米好信安成功助力第十七届山东省职业院校技能大赛（高职组）司法技术赛项！", "https://mp.weixin.qq.com/s?__biz=Mzg5NjY4NDg1Nw==&mid=2247483861&idx=1&sn=5c201134f7e14bd55bdd5d4923f0a60c": "fscan存在命令注入漏洞[doge][doge]", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490204&idx=1&sn=badaacd6921113d2a4a11f94f32db2fa": "【已复现】Apache Struts存在文件上传漏洞（CVE-2024-53677）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502627&idx=1&sn=97347a777e7bcfbcd672a0f5efc781c6": "安全热点周报：新的 Cleo 零日 RCE 漏洞被利用于数据盗窃攻击", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247568602&idx=2&sn=7cf70e0de693e7ca55e723467fec2b45": "一款简单好用的漏洞管理工具-miscan", "https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247488161&idx=1&sn=c186d4c63a938b5e71058467fcfb72ae": "74cms v4.2.1 v4.2.129 后台getshell漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247531062&idx=1&sn=ca1b73c32eb7b7655cd51fc61c3254e7": "研究显示：平均每个软件容器中发现600多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDUzMzY1MA==&mid=2247499380&idx=1&sn=8b4d272d36267ca85173f2320771ac61": "《东京将启动上四休三工作制》", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487188&idx=1&sn=593d4161d86b6af216a9a786bd23268a": "(0day)月子会所ERP某接口存在文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493078&idx=1&sn=01910d118c0de482cc69af2970614341": "CVE-2024-38819：Spring Framework 路径遍历漏洞 PoC 发布", "https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjkxMg==&mid=2247483987&idx=1&sn=8c3fb49d4ddbac681c27dfc0908c1175": "某科云连erp存在sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMjU5MzgzMQ==&mid=2247485084&idx=1&sn=94e7a98aa90e1b72155ab44a8fa77e4c": "CORS漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309955&idx=3&sn=df35fe54116cbd577e1f9b43f4eccb8a": "iOS和macOS系统曝关键漏洞，可破坏TCC框架", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066638&idx=4&sn=34b67f730621eac29fece525a015ab35": "【安全圈】iOS和macOS系统曝关键漏洞，可破坏TCC框架", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495600&idx=1&sn=dc6800fba8615ff029253a77d6e5b8d5": "CNVD漏洞周报2024年第50期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495600&idx=2&sn=e5180e3d367866b22424a2c460e81b51": "上周关注度较高的产品安全漏洞(20241209-20241215)", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494243&idx=1&sn=615b86970a35613e4ee903ac6cab66d7": "3倍积分奖励！抖音电商情报专测上线", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488989&idx=1&sn=a98ecf1b0a0e0f054a18360b1d9e05ca": "【未公开】泛微e-cology 9 x.FileDownloadLocation接口存在SQL注入漏洞导致Getshell", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489739&idx=1&sn=6a2b3b35ac1d6254b2485512a3e059ed": "电子资料管理系统 ImageUpload.ashx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502638&idx=1&sn=98d3602c7f4df70ae3d72d1809a70dc3": "【已复现】Apache Struts 文件上传漏洞(CVE-2024-53677)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515209&idx=2&sn=155d31d384080db10d6e707621eeb8cd": "渗透测试 -- SSRF和XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517716&idx=1&sn=ef1b5ef09d2003aadce7cd0867da175b": "Eyoucms的sql注入复现", "https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490059&idx=1&sn=ccf765a173dfd31c4d49e2533124a10d": "未来五年网络安全最具潜力的十大方向", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499000&idx=1&sn=ee4aa3d20e3f82a903e5f51a028a9102": "某数AnyShare信息泄露漏洞检测脚本（12月16日更新）", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486341&idx=1&sn=b8e402631af06e5440f9c93a80d0c0ce": "支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491773&idx=1&sn=528008b81a8cb80cc311e0cbe1425822": "新的 Cleo 零日 RCE 漏洞被利用于数据盗窃攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247515548&idx=1&sn=2d8c70c61bc7d779572eb88723f3ca54": "漏洞通告｜Cleo 任意文件读写漏洞(CVE-2024-50623)", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291918&idx=1&sn=2d9ffa6d537500e9ed7afcdf5ed01864": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486028&idx=1&sn=f153f8205b6f71c0daa4982536c1b5d0": "主动安全策略的 3 个组成部分", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497542&idx=1&sn=07d3f26e280c58604e0a757832204762": ".NET LINQPad 最新反序列化漏洞分析与利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491735&idx=1&sn=9ed2301b5331410d288c485d63ab7d33": "漏洞预警 | SonicWall SMA100 SSL-VPN缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491735&idx=2&sn=22ef31ba9057034fcae3fad4e1271e57": "漏洞预警 | Mitel MiCollab身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491735&idx=3&sn=bad2193b293b2463565dec1b321aa323": "漏洞预警 | WordPress Query Console远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247517246&idx=1&sn=a49a3d11a9fc2316f920b2f105cf0ef2": "HOST碰撞漏洞挖掘技巧，可以解决日常99%的问题！", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493923&idx=1&sn=3e3ff8d146bb1ccd0458cb151c5b6d36": "【神兵利器】飞企互联FE漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506241&idx=1&sn=dcc78dc007d6b22432c44e330d0d984e": "解锁+监控！最新安卓间谍软件NoviSpy植入疑利用了高通零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650475787&idx=1&sn=7ba275857c900c208be6d95a1190b0d6": "秦安：澳大利亚高达325瓶致命病毒至今下落不明，这四点不要放过", "https://mp.weixin.qq.com/s?__biz=Mzg3NTUzOTg3NA==&mid=2247514817&idx=1&sn=49238c059dfd55dac0f5b32c714cc812": "你了解VPC、子网、namespace之间的区别吗", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499000&idx=2&sn=ab9c01fe2209bcaa4c6faa8b14c51f0f": "渗透测试 -- 命令执行漏洞和反序列化漏洞学习课程（免费下载）", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489313&idx=1&sn=a73bb22f29dcc1bfa6f4383454599255": "【漏洞预警】Menlo Security Menlo On-Premise Appliance安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502627&idx=1&sn=97347a777e7bcfbcd672a0f5efc781c6&chksm=fe79efbbc90e66ad8c8ac4b0c36d014bfe44291e1bcd47586e5c1be7b26415b22c3f854efdab&scene=58&subscene=0": "安全热点周报：新的 Cleo 零日 RCE 漏洞被利用于数据盗窃攻击", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499702&idx=1&sn=50c4df738f4d9978c8aaff35f8ead247&chksm=ec1dcf9edb6a4688f8e401d3171a0a1b5d3ed78e8cb9ce098586a0d1c9375f049792a3b8f6ff&scene=58&subscene=0": "玩儿转网站备份泄漏漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247531062&idx=1&sn=ca1b73c32eb7b7655cd51fc61c3254e7&chksm=c144088bf633819d4df022e6663bc59ed8b42dd21cc0b7b2873f7a264baac40a56c6f305e45a&scene=58&subscene=0": "研究显示：平均每个软件容器中发现600多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066638&idx=4&sn=34b67f730621eac29fece525a015ab35&chksm=f36e7f0ec419f618bf50a593773d4d2d4b959a327145ed7417a53af1c019d9bf5dd1598e609c&scene=58&subscene=0": "【安全圈】iOS和macOS系统曝关键漏洞，可破坏TCC框架", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488827&idx=1&sn=f3086118f07d69c4ba6746464f993e16": "Apache Solr 身份验证绕过漏洞分析（CVE-2024-45216）", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247490516&idx=1&sn=d28a93cc259ba3199e08cafaededba89": "沈阳深蓝2024年HW项目结算完毕", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247509952&idx=1&sn=a439169394b57c514f886bebb419777e": "24年11月必修安全漏洞清单｜腾讯安全威胁情报中心", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485011&idx=1&sn=bda119ff87c4ce0aaef9439a4a1fb834": "腾讯云安全情报中心推出2024年11月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485803&idx=1&sn=540aa7d7066b69c8203a44a3ff99464a": "【漏洞复现】某平台-TUploadImgNoCheck-fileupload任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247514930&idx=3&sn=97eb14a55274c0237c298fe50fdf03f0": "学员分享 | CISP-PTS—渗透测试进阶的不二之选", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg0MjMzNQ==&mid=2247484101&idx=1&sn=229c59119c2a8177eba5b4c31c4c9d18": "DFA攻击白盒AES复现——某新能源车企", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503145&idx=1&sn=d055df27ce64c457cf92890ea9161a7d": "iOS和macOS系统曝关键漏洞，可破坏TCC框架", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503145&idx=2&sn=cc39acbf2eae9f5bcc28c9401e6615e6": "文件传输平台Cleo零日漏洞，Clop团伙声称对数据盗窃攻击负责", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486268&idx=2&sn=43f748ec703b4423d0217f58c8f54f33": "SpringSecurity权限绕过漏洞-好玩", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247501831&idx=2&sn=d46f09ca7bcd0bbb103e627313a165fb": "CVSS漏洞评分系统曝出严重缺陷", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247206&idx=6&sn=4a7573044a9419233d4717f67e8bac7d": "安全工具 | Windows 权限提升漏洞检测工具集", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605174&idx=1&sn=790e260cd929b46aaf819d4ca6f70c9e": "组织人员“刷单炒信”？严厉打击！|苹果 HomeKit 漏洞曝光，间谍软件入侵的新途径", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499533&idx=1&sn=547f274f9419278e747ee7fd6838edef": "CNVD漏洞周报2024年第50期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499533&idx=2&sn=334108850bd6b05f25907f6be5d4f166": "上周关注度较高的产品安全漏洞(20241209-20241215)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493125&idx=1&sn=c9ddfebf5517803b98cfb33475b9bbef": "CVE-2024-53677:严重的Apache Struts RCE漏洞 PoC 已发布", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493125&idx=3&sn=21cdfe1e3bd3da8d3455c249663a4978": "Windows 内核漏洞现被利用来获取系统权限", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251047&idx=1&sn=05349d5fcf4d21b805f74653b54cd0e4": "利用GitLab漏洞，美国比特币ATM巨头Byte Federal数据泄露", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485619&idx=1&sn=11f2d983b3f0dfceeac651b93b4de3ad": "【漏洞预警】蓝凌OA-thirdimsyncforkkwebservice-文件读取", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655348248&idx=1&sn=0e1754b0f166fa0b1fc24324e09e5f01": "文件传输平台Cleo零日漏洞，Clop团伙声称对数据盗窃攻击负责", "https://mp.weixin.qq.com/s?__biz=MzUzMDQ1MTY0MQ==&mid=2247506425&idx=1&sn=fcc3f82ea04ea9729651367ad210fd98": "1Day-某优先锋-流量管理系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDY1NzA2Mw==&mid=2247483845&idx=1&sn=d6a5712b5cfd90a1aede3097b897218c": "DTStack Taier 1.4.0 listNames sql注入分析(CVE-2024-41579)", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499709&idx=1&sn=37ae556f51a5d91da71ea04b2afee842": "写了一个自动测试弱口令漏洞的脚本", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793528&idx=3&sn=f3f3747dd5697ed2b3a379c507782412": "大众汽车信息娱乐系统存在多个缺陷，可能导致车辆被实时追踪", "https://mp.weixin.qq.com/s?__biz=MzAwNzQ1NTE1OQ==&mid=2247485937&idx=1&sn=c364c75ba642030a3e554e2d2a2d739c": "启明星辰集团2025校园招聘火热进行中！", "https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247527862&idx=2&sn=8861777e01ccd9fd2378cc3b7ee68d9c": "研究显示：平均每个软件容器中发现600多个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247515552&idx=1&sn=c60ac9a0a7631d7c6b2752e7ebb68964": "漏洞通告｜Apache Struts 2远程代码执行漏洞（S2-067）(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=Mzg2NDg2MDIxNQ==&mid=2247485252&idx=1&sn=3b54011114b049cff1b78391ebafa5f4": "某科云连ERP系统存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MzcxNzg1Ng==&mid=2247485628&idx=1&sn=acde82258512cb49764da882fae372ad": "某科云连ERP系统存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526078&idx=2&sn=d8a722a5736e7e1a03a9878e36e11b9a": "通过 CVE-2024-52875 攻击 Kerio Control：从 CRLF 注入到一键 RCE", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247490793&idx=1&sn=6c634e841e3747293b0d85100b58cad5": "Apache Struts RCE (CVE-2024-53677) POC公开", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793528&idx=1&sn=26f1950857db2d8b248303e56b7af199": "以色列公司 Cellebrite 利用安卓 0day漏洞进行间谍软件攻击", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489319&idx=1&sn=713bc94c930a2f885aa69e6f2435dd60": "【已复现】Apache Struts文件上传漏洞（CVE-2024-53677）", "https://mp.weixin.qq.com/s?__biz=MzU3ODI3NDc4NA==&mid=2247484608&idx=1&sn=4b85151deec033d57451111c949e829c": "网安人体检报告：漏洞最多的人竟是我自己？！", "https://mp.weixin.qq.com/s?__biz=MzkzMDY2MDA2Ng==&mid=2247485815&idx=1&sn=f79057bf044c6febf9c06deea18e44ba": "【安全漏洞】Apache Struts任意文件上传漏洞S2-067【CVE-2024-53677】 POC 已发布", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247485655&idx=1&sn=0598b4c4ba4ae8f0d3fa999818df5c7e": "一次完整的Jwt伪造漏洞实战案例", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899772&idx=1&sn=87345af2e1739c5c24e80cb26e331d66": "iOS 和 macOS 惊现 TCC 绕过漏洞！ TCC符号链接攻击手法深度解析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310049&idx=3&sn=e826857cbaba996b54f223f056a5154b": "最新的Windows内核漏洞，可获system权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066655&idx=1&sn=57e7dca07986a799143fbca48a88cb03": "【安全圈】苹果HomeKit出现安全漏洞被间谍机构利用 目前具体漏洞细节尚未公布", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066655&idx=4&sn=c56864b01e3e298b37ea2863eea40424": "【安全圈】最新的Windows内核漏洞，可获system权限", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488765&idx=1&sn=cb38f34e16235b415098e0a348c004ab": "【处置手册】Apache Struts任意文件上传漏洞S2-067(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521826&idx=1&sn=8401d12768469de690ea3a216e63c875": "Windows 内核漏洞已被用于获取系统权限", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521826&idx=2&sn=2e115cf641ac90636ca05cde8df5fa09": "安卓间谍软件 NoviSpy 利用高通6个0day感染设备", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587285&idx=3&sn=fe9ca791431e72d184fc3fca2470e155": "探秘移动端漏洞世界 | 零基础入门Android漏洞挖掘-入门篇", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484790&idx=1&sn=5552cbc8206e5552aefc265060c3bae1": "【漏洞复现】CVE-2024-8963、CVE-2024-8190", "https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247526130&idx=1&sn=c8e2d37ea184a3b62de81eecae6654fe": "直播预约 | 攻防常态化，企业如何提高自身实战能力？", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247547498&idx=1&sn=6a693d280a3781051b63c6bd9946069f": "神漏洞！任意修改车牌号码，让其他车主支付过路费和罚单", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486791&idx=1&sn=b6b5c31b8ace0a9aeec45c44ad2f5e53": "PbootCMS V3.2.9前台SQL注入漏洞（上）", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247488890&idx=1&sn=f1cac1b4bd5f878ba8ee4c5cb9afb63a": "漏洞预警|CVE-2024-49112 Windows 轻量级目录访问协议 （LDAP） 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487189&idx=1&sn=9d00a65196166346a91d7f6069740844": "(0day)秒优科技供应链管理系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493131&idx=1&sn=53054222a61d0f4f5bb380d9a1332acb": "古河大佬发现的最新漏洞：Windows LDAP RCE漏洞（9.8）", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513296&idx=1&sn=6e551ba031ad27466e2160d34f16b5ae": "神漏洞！任意修改车牌号码，让其他车主支付过路费和罚单", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247492794&idx=1&sn=dff86fd90195db40c0ceb1864c9396be": "上周关注度较高的产品安全漏洞(20241209-20241215)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489761&idx=1&sn=dff5f6a3183ce82bb042e8e510ba7c38": "PbootCMS entrance.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489750&idx=1&sn=cc8d9f80e65e4c98f0695aa7a49ead84": "万能门店小程序管理系统 onepic_uploade 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517720&idx=1&sn=dbbbdc3cbf014d0ba6d68a6b2882bd61": "XXL-JOB默认accessToken身份绕过RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488173&idx=1&sn=1a1b64eedff4ec862f6186b6d500ddbe": "【0day】99bitbet双语言交易所存在前台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094328&idx=1&sn=c158e0da11cdb3ad962815dd29cdf861": "iOS和macOS系统曝关键漏洞，可破坏TCC框架", "https://mp.weixin.qq.com/s?__biz=Mzg4MTg0MjQ5OA==&mid=2247487478&idx=1&sn=763e6261bb82678d8ff964b97ef5c41b": "项目管理去考PMP，还是去考CSPM？", "https://mp.weixin.qq.com/s?__biz=Mzg2NDU3Mzc5OA==&mid=2247489728&idx=1&sn=c72ffd32c1866180b7ffbc454f5d0502": "品牌焕新升级！“WaBug漏洞响应平台”正式起航，开启崭新篇章", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497562&idx=3&sn=95e20ae2b522c3b6fad7bf80b1c3cf6e": ".NET LINQPad 最新反序列化漏洞分析与利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491752&idx=1&sn=ac93a2e38067d03269d9e264b73bd524": "漏洞预警 | 用友U8CRM SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491752&idx=2&sn=dfb0ef6d0f30c63772cacf7c8524dbb4": "漏洞预警 | 圣乔ERP系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491752&idx=3&sn=758d0e61e39f07b88b2102f6f3281010": "漏洞预警 | 金和OA任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487085&idx=2&sn=3a1a4c5b93874a0f93689f06386c8972": "CVE-2024-48307：JeecgBoot SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506278&idx=1&sn=358d4453178e40281bc60e817e5ae313": "Dirty DAG：微软Azure数据工厂的Apache Airflow集成中的新漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493955&idx=1&sn=aeb1f353ae9f70b0fc315196774e71e2": "【神兵利器】帆软BI反序列漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492975&idx=1&sn=57e419207530fa3496e3372624655a3b": "大众汽车集团的信息娱乐系统存在多个漏洞，可能导致车辆被攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247489467&idx=1&sn=5c6dfa3003de97d19e34c9cc46d1c2ff": "本周六举行2024年度密评从业人员考核", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488995&idx=1&sn=9617efc19dde578fb08c62fa156334e5": "【大量存在】飞鱼星-路由器存在敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1Mzk0MjU1OQ==&mid=2247493289&idx=1&sn=97dff30b3420519894ae5911d450f9a7": "【漏洞预警】热门摄像头曝零日漏洞，黑客借此入侵政府部门", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488765&idx=1&sn=cb38f34e16235b415098e0a348c004ab&chksm=c2c643f6f5b1cae02308b33981c82c888a78c82ffa6bb440cf4a875790265a20d5b003c9cd86&scene=58&subscene=0": "【处置手册】Apache Struts任意文件上传漏洞S2-067(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513296&idx=1&sn=6e551ba031ad27466e2160d34f16b5ae&chksm=ebfaf3f0dc8d7ae6008b0cf16bdb9f21c80afb57f577b1098d593922f6fcbf78098b09013922&scene=58&subscene=0": "神漏洞！任意修改车牌号码，让其他车主支付过路费和罚单", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521826&idx=1&sn=8401d12768469de690ea3a216e63c875&chksm=ea94a748dde32e5eb85a2d43633878de31150537893c6123c6c7bc739f26c1c85c3ee69ed8ed&scene=58&subscene=0": "Windows 内核漏洞已被用于获取系统权限", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521826&idx=2&sn=2e115cf641ac90636ca05cde8df5fa09&chksm=ea94a748dde32e5e240c297499b4a7753baff26f7b887420df59da0631b3b45cc44b73026012&scene=58&subscene=0": "安卓间谍软件 NoviSpy 利用高通6个0day感染设备", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587285&idx=3&sn=fe9ca791431e72d184fc3fca2470e155&chksm=b18c201f86fba9099c21103bad9f8346ba517b54f6819e51f9a57c43940d3f6102085c1a891b&scene=58&subscene=0": "探秘移动端漏洞世界 | 零基础入门Android漏洞挖掘-入门篇", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507565&idx=1&sn=f1eb832586d6ef20bbd6b579dff4956f&chksm=cfcabd79f8bd346f18fe53c9b16c9b7029e5124dffe6fd10d7027af46c8fab5d4f12807425d8&scene=58&subscene=0": "【更新】Apache Struts2文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499709&idx=1&sn=37ae556f51a5d91da71ea04b2afee842&chksm=ec1dcf95db6a468326ec10ef4a3feee1fde64e01d6454e055bc92c16c698b4190e0ad6517892&scene=58&subscene=0": "写了一个自动测试弱口令漏洞的脚本", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499533&idx=1&sn=547f274f9419278e747ee7fd6838edef&chksm=973acc6fa04d4579d163a4bbc1c67cde754c96f464c1ac3ebfb6ba9ecb00dbddb2ce7757788e&scene=58&subscene=0": "CNVD漏洞周报2024年第50期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499533&idx=2&sn=334108850bd6b05f25907f6be5d4f166&chksm=973acc6fa04d4579e97bd240396c787995261ad2ef7ef643fd5612ac419cd9b2b0ba9d0b0c6d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241209-20241215)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066655&idx=1&sn=57e7dca07986a799143fbca48a88cb03&chksm=f36e7f1fc419f6091c648425f65f481ee023841a152bedbc9367f9587bf95d18a3d075b3a013&scene=58&subscene=0": "【安全圈】苹果HomeKit出现安全漏洞被间谍机构利用 目前具体漏洞细节尚未公布", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066655&idx=4&sn=c56864b01e3e298b37ea2863eea40424&chksm=f36e7f1fc419f609a1fbb13ab7b6034ae28df0252abc5dbb47ba057c00c636754fcd86e2efcc&scene=58&subscene=0": "【安全圈】最新的Windows内核漏洞，可获system权限", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486791&idx=1&sn=b6b5c31b8ace0a9aeec45c44ad2f5e53&chksm=c22295bef5551ca8792a4995840335057e593dac6cedff9883e4df8636af25be9d78a176ab3f&scene=58&subscene=0": "PbootCMS V3.2.9前台SQL注入漏洞（上）", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247509952&idx=1&sn=a439169394b57c514f886bebb419777e&chksm=ec9f7eb3dbe8f7a51c824c37ba5711a4cfac107170d9bfceaad5b275a4560925300aaba7fcf8&scene=58&subscene=0": "24年11月必修安全漏洞清单｜腾讯安全威胁情报中心", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485011&idx=1&sn=bda119ff87c4ce0aaef9439a4a1fb834&chksm=c2b10425f5c68d33d062e09ef5181fdacf9286075ae13d64ab7298749df91f3e643cd8588239&scene=58&subscene=0": "腾讯云安全情报中心推出2024年11月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546080&idx=1&sn=25c1d7d63492dabf32381937df0d6dfb": "区块链安全 | 智能合约重入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492666&idx=1&sn=a650f29da3e91b115518248dd903d28c": "【已复现】Apache Tomcat条件竞争致远程代码执行漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=MzA3OTMxNTcxNA==&mid=2650956216&idx=1&sn=4ae52e54a6cbc81e9830e7ef8bf0a3e3": "知名企业深陷漏洞“迷局”，网络安全专家组队“破局”！", "https://mp.weixin.qq.com/s?__biz=MzkxNzIzNDExMA==&mid=2247486657&idx=1&sn=9f0234ffb306e760ae29f81a6c6df980": "【最新Struts2高危漏洞】Apache Struts CVE-2024-53677", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493733&idx=1&sn=3a4d58e897ccecbb382cfe9ed4645ae7": "CVE-2024-50379|条件竞争Tomcat RCE POC（首发）", "https://mp.weixin.qq.com/s?__biz=Mzk0NDU5NTc4OA==&mid=2247484286&idx=1&sn=22775600d7b7d06b6e9d816ea4ee3b38": "渗透测试——曲折的文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDc0MjUxMw==&mid=2247486030&idx=1&sn=49476b5e6cff4f67c66f9d23c63f9323": "打印机也有“隐形”威胁？这些安全漏洞请注意！", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ2NzQ0Ng==&mid=2247484906&idx=1&sn=bfa5e6d913bdfe338b72726ba0e38830": "记一次CNVD事件漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5Mzk2OQ==&mid=2247486318&idx=1&sn=93c203e68a7de391e374b0a3cfb18297": "CVE-2024-50379|条件竞争Tomcat RCE POC（首发）", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485807&idx=1&sn=d0fbcedf0a441bb7f7b4b8fa166ce0d1": "【漏洞复现】某平台-getTotalData-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247487464&idx=1&sn=d299e081cf73a1f046b0b0b6c706aa4d": "极致经典 | 一次客户系统渗透，多种经典漏洞集合于一身", "https://mp.weixin.qq.com/s?__biz=Mzg3MDk0OTc1Nw==&mid=2247488016&idx=2&sn=c33e7785242fdaf63efd18f32f38cabf": "Apache Struts RCE (CVE-2024-53677) POC公开", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503165&idx=2&sn=fae09af9640fbd5683d7ff03f72b98ca": "最新的Windows内核漏洞，可获system权限", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605232&idx=1&sn=a616a1590e3a342cb0c9610c68865fd7": "充值499元成为VIP，开通权限后随时可约！|神漏洞！任意修改车牌号码，让其他车主支付过路费和罚单；", "https://mp.weixin.qq.com/s?__biz=MzAwMTg3MDQzOA==&mid=2247510958&idx=1&sn=a260090535e30de0a2c233c3787b963a": "苹果HomeKit出现安全漏洞被间谍机构利用 目前具体漏洞细节尚未公布", "https://mp.weixin.qq.com/s?__biz=Mzg3NTUzOTg3NA==&mid=2247514818&idx=1&sn=0d2f983bfde8f4fd789a80d29d0a8736": "安全大数据平台的上游、下游系统有什么", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247537024&idx=2&sn=1abdfffc1ecf4bc0f1051caad49e9731": "神【漏洞！】任意修改车牌号码，让其他车主支付过路费和罚单", "https://mp.weixin.qq.com/s?__biz=MzA4NzU1Mjk4Mw==&mid=2247492223&idx=1&sn=44c088b639e364ad470e0c2462ad18b8": "SQL注入漏洞批量检查工具", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497542&idx=1&sn=07d3f26e280c58604e0a757832204762&chksm=fa5959abcd2ed0bd8e338a2cba31a9fec4f25fcf577395619ea1c3f2910fac2eb73376b05e19&scene=58&subscene=0": ".NET LINQPad 最新反序列化漏洞分析与利用", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496875&idx=1&sn=c5cdc97e1bdf31dd8a9d1a81e9c68d06": "【漏洞通告】Apache Tomcat远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUxNTQxMzUxMw==&mid=2247524710&idx=1&sn=b994ca870206d2cf58d1ea0aa87fec12": "安全通告丨网络安全漏洞通告（2024年12月）", "https://mp.weixin.qq.com/s?__biz=MzkyNzYxMDQ2MQ==&mid=2247484977&idx=2&sn=62df25a36acfb864e1cd34f92d669c1f": "泛微ecology9 1day分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526094&idx=2&sn=b381eedcae7c75c5af5d8b7ae48d7bb7": "自动化漏洞利用工程：从理论到实践的旅程", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486366&idx=1&sn=ccc57cb3f6086c4fc9b47ac935f996d7": "Apache Tomcat 条件竞争文件上传漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=Mzg5MjY2NTU4Mw==&mid=2247486500&idx=1&sn=6b6ce9bf66721fd7f5823e3eadc950c1": "Apache Tomcat CVE-2024-50379", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500298&idx=1&sn=05c72ef1db47fe87704a5732066cd8fa": "【高危 含POC】Tomcat 远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502648&idx=1&sn=efadd668e22cb6151e0765d0937e3343": "【已复现】Apache Tomcat 远程代码执行漏洞(CVE-2024-50379)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247491149&idx=1&sn=c88b61c414d7d9fcef48e9f185499dc7": "cve-2024-53376：CyberPanel RCE 已发布PoC", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489324&idx=1&sn=df351d8075e19c7590b08dcd023cfb94": "【漏洞预警】 Apache Tomcat default servlet条件竞争文件上传漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484736&idx=1&sn=174f2fddd9500e3b10c1bd5141227669": "【复现】Tomcat DefaultServlet远程代码执行漏洞(CVE-2024-50379)风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247633354&idx=2&sn=97c545e273d442a6684a5cb8be44dbee": "黑客通过漏洞赏金赚取了80万美元", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247488084&idx=1&sn=d751a3b846f4f8b5c90e6df02fd57f14": "蓝凌OA thirdimsyncforkkwebservice 任意文件读取漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484375&idx=1&sn=e7eb4755e4f7b6c3f7538961222d5772": "第十七期 · 安钥®「漏洞处置标准作业程序（SOP）」征文启示", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521836&idx=1&sn=1ac593b2544b8e1e86da611a669fe6f3": "超2.5万SonicaWall VPN 防火墙易受严重漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521836&idx=2&sn=31f9af20432d3d2a6003ea8c1a92fe5a": "大众信息娱乐单元存在多个漏洞，可用于实时追踪车辆位置", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247552053&idx=2&sn=49717316acd55d82b72512d983e064cd": "【免费领】挖洞宝典：全网搜罗的漏洞挖掘实战技巧大全", "https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247520280&idx=1&sn=b8b711192227797e246af9e1ea6902a6": "知名企业深陷漏洞“迷局”，网络安全专家组队“破局”！", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500402&idx=2&sn=670455c374a3c6bff14b495943c0d1c4": "【漏洞通告】Apache Tomcat 竞争条件远程代码执行漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=MzI3MzExMTk5Mw==&mid=2247484533&idx=1&sn=1ae93875862de8a96cf077f3aeee9a0a": "Tomcat CVE-2024-50379 条件竞争漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwNzk0NTkxNw==&mid=2247487025&idx=1&sn=a5c8cfe64de615946d67f91ff2853f04": "漏洞风险提示 | Tomcat 条件竞争漏洞导致远程RCE（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523957&idx=1&sn=969b80d781110862122c8003edbc7023": "【漏洞通告】Tomcat 远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495445&idx=1&sn=4ddda7a5db910393e22c6f97f0689b2e": "【论文速读】| 利用人工智能修复 OSS-Fuzz 中的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513306&idx=1&sn=1f55c8207eaf709ec57b190fb4fdd06e": "产品漏洞被利用致大量用户数据泄露，这家巨头被罚超19亿元", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462113&idx=1&sn=93c8155dfc2d56ca35448e14cca8ac6a": "信息安全漏洞周报（2024年第51期）", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488777&idx=1&sn=2e8d82ca372a1f191c3e46d818a39475": "【漏洞通告】Apache Tomcat条件竞争代码执行漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490212&idx=1&sn=16ffe5eaf17ed711dbfcc0a9f203e3a4": "【已复现】Apache Tomcat存在远程代码执行漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507571&idx=1&sn=2ee4ea1d3100d5ff50536b0d61bec91d": "漏洞通告 | Apache Tomcat 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787651&idx=1&sn=3ec2660ca7270d7114baa4c06baf3c9e": "瞄准安全研究人员！攻击者在GitHub上使用伪造PoC窃取39万WordPress凭证", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247531866&idx=1&sn=6f39682cbc5c8f1e3e0d2d15020fcf16": "研究发现：CVSS 漏洞评分系统存在严重缺陷", "https://mp.weixin.qq.com/s?__biz=MzkwMjQyNjAxMA==&mid=2247484768&idx=1&sn=312d27be01812f1c01852048d99ce2a2": "教你用python读取csv文件，调用企业微信API发送邮件", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247220&idx=6&sn=401fbb41c7961877e30847322da4da10": "安全工具 | Windows 权限提升漏洞检测工具集", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247488895&idx=1&sn=39e2d95db349cae397597868a345661e": "通杀漏洞|CVE-2024-50379 Apache Tomcat条件竞争RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY3MTM4Nw==&mid=2247484056&idx=1&sn=6b388eef926a79e484f3d3be1e0d17b3": "CVE-2024-50379|条件竞争Tomcat RCE POC（首发）", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247617580&idx=2&sn=ce08ac01fa6014eab9112d9d30ac8683": "扩展 SAE J1939 的攻击场景：传输协议中已建立和新的漏洞的综合分析", "https://mp.weixin.qq.com/s?__biz=MzAwNDUyMjk4MQ==&mid=2454828910&idx=1&sn=34a18dd889f688ac490b7a5764d9ae6f": "霄壤实验室获Apache社区致谢，永信至诚「数字风洞」测评中心提醒：Apache Tomcat 存在远程执行漏洞请尽快修复", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496629&idx=1&sn=39a9eef5154441c9a42979a74ba9a774": "【高危 含POC】Tomcat 远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzIxODIzNzgwMw==&mid=2654070871&idx=1&sn=3bd5b22989dd3cfbc5968127ac2776ca": "漏洞马拉松2024 | 团体对抗，锋芒毕现！", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486635&idx=1&sn=7ac8d259c95b99e721ec7343479f7f00": "【漏洞预警】Apache Tomcat 条件竞争漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489547&idx=1&sn=3f8b0e53b8842f04f2498d88310da4b9": "从零开始：K8s安全测试与漏洞挖掘-8", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489792&idx=1&sn=03b59f0b3700284eb4565b0a37a92118": "海康威视运行管理中心 applyST 远程代码执行漏洞(XVE-2024-33936)", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515252&idx=2&sn=aa9a9358b4941b26a8602d0511794999": "渗透测试 -- 目录越权和旁注和CDN绕过越权漏洞和登录页面漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486343&idx=1&sn=0509e8974bf768fb57e8b7f7929f4f9f": "【SRC】记录一次从小程序静态分析+动态调试获取到严重漏洞的过程", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633159&idx=4&sn=e6bff7477cbc41d023fcb0d19a2e202e": "产品漏洞被利用致大量用户数据泄露，这家巨头被罚超19亿元", "https://mp.weixin.qq.com/s?__biz=MzA3ODE0NDA4MA==&mid=2649401063&idx=1&sn=d1b0f04a913a540a4eccee9ef1c07b6e": "网络产品安全能力提升计划漏洞线下检测（第一期）活动成功举办", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491768&idx=1&sn=434935e3e87e391acbfdac4d795baca9": "漏洞预警 | Ivanti Cloud Services Application身份验证绕过、命令注入和SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491768&idx=2&sn=b419456e71a8697d34f4fee2ab6007bf": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491768&idx=3&sn=cde190167226801bbe33165c54038bff": "漏洞预警 | 智邦国际ERP SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493956&idx=1&sn=7d3c35588ef20be40738ace28accb0d9": "【神兵利器】高危漏洞EXP实用性工具", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247485381&idx=1&sn=79215a9a9657a0915aa63ef5fa6fd754": "常见的API漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247489470&idx=1&sn=4c7366c85823353766c469550d0b3652": "如何开展漏洞扫描工作", "https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247561055&idx=1&sn=2aacb4c8d81aee0dd9b2fd4c4d7059b2": "喜报！炼石中标海尔集团数据安全项目", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488999&idx=1&sn=51229f0d00309669fc68d0a72b7b5981": "【漏洞复现】泛微云桥e-Bridge checkMobile存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787651&idx=1&sn=3ec2660ca7270d7114baa4c06baf3c9e&chksm=8893bd6cbfe4347a5e48d1a57e69027c5452067dacbc253484e6a486edbace5e98c70fca1756&scene=58&subscene=0": "瞄准安全研究人员！攻击者在GitHub上使用伪造PoC窃取39万WordPress凭证", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492666&idx=1&sn=a650f29da3e91b115518248dd903d28c&chksm=96f7fb57a18072410e958679b3ef73487cd3d6846810b88bc0a0ff67d742354b887785790b04&scene=58&subscene=0": "【已复现】Apache Tomcat条件竞争致远程代码执行漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502648&idx=1&sn=efadd668e22cb6151e0765d0937e3343&chksm=fe79efa0c90e66b6a2308ddc3180a09a343e928d2d28e56f213e6edb932476f8a43137341ef9&scene=58&subscene=0": "【已复现】Apache Tomcat 远程代码执行漏洞(CVE-2024-50379)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486366&idx=1&sn=ccc57cb3f6086c4fc9b47ac935f996d7&chksm=ec6fec9edb186588db72f71f31c28f3f0f825bad0e21ab28967620de5b833f562f959fb24a70&scene=58&subscene=0": "Apache Tomcat 条件竞争文件上传漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507571&idx=1&sn=2ee4ea1d3100d5ff50536b0d61bec91d&chksm=cfcabd67f8bd34712f0110942c80bedd686614f7735dc66618734680a8d403b6643099ed3467&scene=58&subscene=0": "漏洞通告 | Apache Tomcat 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497562&idx=3&sn=95e20ae2b522c3b6fad7bf80b1c3cf6e&chksm=fa5959b7cd2ed0a1411e8388beebdcf3e7a2b73a48db2a907bce388f08e5f8704dcc707a299e&scene=58&subscene=0": ".NET LINQPad 最新反序列化漏洞分析与利用", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513306&idx=1&sn=1f55c8207eaf709ec57b190fb4fdd06e&chksm=ebfaf3fadc8d7aeca02d01580537f8e231c977eb84f4bcfcf112a362aead50a335513778dc80&scene=58&subscene=0": "产品漏洞被利用致大量用户数据泄露，这家巨头被罚超19亿元", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521836&idx=1&sn=1ac593b2544b8e1e86da611a669fe6f3&chksm=ea94a746dde32e50b2831f33c867b085c923bded2776a57fc1af502e5fcb6668d1e8b4dfbb44&scene=58&subscene=0": "超2.5万SonicaWall VPN 防火墙易受严重漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521836&idx=2&sn=31f9af20432d3d2a6003ea8c1a92fe5a&chksm=ea94a746dde32e50d8efd5c8569ffb992f5b27aec0d014fb508bf96576064f7ca7f1096b5b68&scene=58&subscene=0": "大众信息娱乐单元存在多个漏洞，可用于实时追踪车辆位置", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488777&idx=1&sn=2e8d82ca372a1f191c3e46d818a39475&chksm=c2c64202f5b1cb1426c3499f3a4ff104f9e1e2c03e14f917aebab394e9f1243aeb8bc6bf6550&scene=58&subscene=0": "【漏洞通告】Apache Tomcat条件竞争代码执行漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523957&idx=1&sn=969b80d781110862122c8003edbc7023&chksm=ce461565f9319c73f3629b83feef2ae14d385bfc28cc9c72f02522877e0c439de28d45ce6719&scene=58&subscene=0": "【漏洞通告】Tomcat 远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247531866&idx=1&sn=6f39682cbc5c8f1e3e0d2d15020fcf16&chksm=c1440fe7f63386f17015807f15f31bd5c35bc96b1095d5c3cd51c6be49eef9751b71da5c80b7&scene=58&subscene=0": "研究发现：CVSS 漏洞评分系统存在严重缺陷", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496629&idx=1&sn=39a9eef5154441c9a42979a74ba9a774&chksm=e8a5f9d6dfd270c02eef37e0d5c306aa966fe24942e2c649d87b2c45781bd2d3eea7d34f5c93&scene=58&subscene=0": "【高危 含POC】Tomcat 远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489547&idx=1&sn=3f8b0e53b8842f04f2498d88310da4b9&chksm=fb029553cc751c4592bab7a4b5f6c78cfe67db71a67a46b96c9f11568c34e23982b65559baa1&scene=58&subscene=0": "从零开始：K8s安全测试与漏洞挖掘-8", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491781&idx=1&sn=cd905e6813d77910c07ec8a2d271b234": "补丁警报：严重 Apache Struts 漏洞被攻击者积极利用", "https://mp.weixin.qq.com/s?__biz=Mzg5MjY2NTU4Mw==&mid=2247486515&idx=1&sn=519f6f8f6b6913d1ad0394f7ea6f9f61": "Apache Tomcat CVE-2024-50379", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247495233&idx=2&sn=117791f0a46cb4234c11d39ada84abe2": "美国数字车牌被曝存在漏洞，车牌号码可任意修改", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247495233&idx=3&sn=380a579d683bd3b712e6a479ea3cdb0a": "产品漏洞被利用致大量用户数据泄露，Meta被罚超19亿元", "https://mp.weixin.qq.com/s?__biz=MzIyNzc3OTMzNw==&mid=2247485624&idx=1&sn=3e15ce8db03128a8a48343186209f11c": "【工具分享】一款基于Java框架的综合漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493735&idx=1&sn=1bddb619955a1bd046d9d339ac759299": "某源码前台RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493196&idx=4&sn=fce9b7ba151b7167f5542611499fff83": "威胁行为者正利用最近披露的 Apache Struts 漏洞 CVE-2024-53677。", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247235&idx=6&sn=cfe0c9a4cf9ec353c32e9fcf9b32c221": "安全工具 | Windows 权限提升漏洞检测工具集", "https://mp.weixin.qq.com/s?__biz=MzU2NjgzMDM3Mg==&mid=2247493867&idx=1&sn=23e869acb0c12d949a39b98e5555946c": "Apache Tomcat远程代码执行漏洞(CVE-2024-50379)复现+修复方案.", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247484945&idx=1&sn=292914d90842ea641d9baccfb114f32a": "记一次牛逼克拉斯的漏洞挖掘过程", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497583&idx=3&sn=a257313ae94cf7a802e4006aba4ab91e": "50套.NET系统漏洞威胁情报(12.13更新)", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247510007&idx=1&sn=6fc90ec81b2c25fd0b615bd24433abac": "黑客泄露了思科 4.5TB 数据", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486333&idx=1&sn=349981824f44648bd9432a1c1bdc7870": "实战-关于KEY泄露API接口利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310195&idx=3&sn=d9e83e129b0a14950e2d04cd8ad9576c": "Apache Tomcat新漏洞允许攻击者执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066717&idx=4&sn=b641682a1ea1ea39882cd929b37a230e": "【安全圈】Apache Tomcat新漏洞允许攻击者执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541073&idx=1&sn=66d200edcdbbb26a0c8618ca749bcfbe": "Apache Struts重大漏洞被黑客利用，远程代码执行风险加剧", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664232585&idx=5&sn=b82810b82d6eb59c2598075d87f09b53": "关注 | 第一期漏洞挖掘与利用中高级培训班招生", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247487434&idx=1&sn=52ed8d0b21e6701c0e4503999d9dfeaa": "Apache Tomcat 最新RCE 稳定复现+分析 保姆级！附复现视频+POC", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587465&idx=2&sn=e5d0f25746dce13de80ec7ed9907263f": "​Apache Tomcat高危漏洞曝光，远程代码执行风险需警惕", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490111&idx=1&sn=0c1158934db85f02099fd8f3d919c930": "创宇安全智脑 | 灵当 CRM uploadify.php 任意文件上传等70个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MjM5NzgzMjMwNw==&mid=2650662503&idx=1&sn=34de5fb811a2d054325b638bf4046a1a": "已结束意见征集！《关键信息基础设施商用密码使用管理规定（征求意见稿）》有哪些说明值得关注（附下载）", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500408&idx=2&sn=3445af6ce0d2a1f047ac681fac4d2c4e": "【漏洞通告】BeyondTrust RS & PRA命令注入漏洞（CVE-2024-12356）", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247568707&idx=2&sn=6d994592bb54a5d5a6bce372dcf38907": "支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=MzkzNTY1MTg4Mg==&mid=2247484202&idx=1&sn=0e1298d761bd7888caf1c2f8f6dee4f1": "Apache Tomcat 最新RCE 稳定复现+分析 保姆级！附复现视频+POC", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492478&idx=1&sn=8cf4e1f8b4b3378e053529a9505884c3": "黑客利用Linux eBPF传播恶意软件展开攻击活动", "https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247484183&idx=1&sn=54a360747cca4c12f38b8325bbe8230a": "新高危漏洞 （附在野POC）| Struts2任意文件上传漏洞（CVE-2024-53677）", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247531931&idx=1&sn=5668beb83a342334cd0c5e435601230c": "避免漏洞管理中的陷阱：关键见解和最佳实践", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495461&idx=1&sn=dc63c0a29d46b90e275110fbfdf9c5f0": "附原文 |《2024年漏洞与威胁趋势报告》深度解读", "https://mp.weixin.qq.com/s?__biz=MzkyODY3NjkyNQ==&mid=2247484396&idx=1&sn=73b8f9b54a54eb1b5412bfc84a7662fc": "Apache Tomcat 最新RCE 稳定复现+分析 保姆级！附复现视频+POC", "https://mp.weixin.qq.com/s?__biz=MzA4NjMwMzI3Mg==&mid=2247500501&idx=1&sn=0b2c3d4cdb4a3205d1ec94183b5108b1": "【漏洞通告】Apache Tomcat远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507585&idx=1&sn=5ece95159551948b0ffa7cd719aefdf7": "近期活跃利用高危漏洞自查！含文档管理、Exchange、Apache多个产品", "https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247487499&idx=1&sn=54c62641c62f93cdf13a14f22231801f": "Tomcat RCE | CVE-2024-50379条件竞争RCE复现，带视频教程及POC", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485811&idx=1&sn=e64daf3659180b8b3ccfa808c5a56017": "【漏洞复现】某平台-getPicServlet-readfile任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488266&idx=1&sn=801e77220b48b586c1f056f13b2add69": "【1day】某家政上门预约小程序系统存在前台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487197&idx=1&sn=f0e9f21b1644944d1229df83969d9cc0": "(0day)安科瑞环保用电监管云平台存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTEzMjc4OA==&mid=2247488982&idx=1&sn=94a03c5d2886be42631e3fc9eef6db7f": "Struts2漏洞深度解析 ：CVE-2024-53677任意文件上传逻辑绕过及修复建议", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247484949&idx=1&sn=a085c39db61dc1de6a41747466c1fa26": "工具集：TomcatScanPro【tomcat自动化漏洞扫描利用工具】", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614726&idx=1&sn=78a89e1680495198a24d2c662e557ea0": "漏洞挖掘 | Swagger UI 目录枚举小总结", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486412&idx=1&sn=712f6ea6d9343dfea4389136b50008d4": "「漏洞复现」方正畅享全媒体新闻采编系统 screen.do SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486475&idx=1&sn=a6abc6678bce010ef732dfc02c5de936": "【漏洞通告】GitLab Kubernetes Proxy Response NEL 头注入漏洞（CVE-2024-11274）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486475&idx=3&sn=9f3590ac9d85d305b380de81489941af": "【漏洞通告】Ivanti Cloud Services Application 身份验证绕过漏洞（CVE-2024-11639）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486475&idx=5&sn=4d662930a1561be456356a31827c5a92": "【漏洞通告】Cleo 远程代码执行漏洞 ( CVE-2024-50623 )", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496635&idx=1&sn=34c31d16785a1db6359cc507f1312498": "深入浅出API测试｜搜集分析与漏洞挖掘实战", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490119&idx=1&sn=b4ee325a5b5ff4787c6b6b1290e0f9e8": "Fortinet 警告可能导致管理员访问漏洞的关键 FortiWLM 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587465&idx=3&sn=f606b36568e16830f7ccb8d80bdd6cea": "欢迎报名！​“系统0day安全”系列课程：掌握漏洞挖掘重要技能", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489811&idx=1&sn=d672db7d9c8cfc80ee8a56623d137ecf": "时空WMS-仓储精细化管理系统 ImageAdd.ashx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493003&idx=1&sn=a66dc3c7877fa2f4288ba75e6e950847": "Fortinet 警告称其无线局域网管理器 FortiWLM 存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515271&idx=2&sn=c418da4780646d43c1d688f964809dc3": "渗透测试 -- 逻辑漏洞和挂马和钓鱼", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499048&idx=1&sn=8b4ebcd450f2bf1c19eef0d34f7ae4a8": "Apache Struts2 文件上传逻辑绕过(CVE-2024-53677)(S2-067)", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499048&idx=2&sn=7859c9f96e59a019564b5d235b56faeb": "渗透测试 -- Web漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485285&idx=1&sn=45a780c7b3b660fa186c85863e85cb3c": "从技术抗衡走向体系化国家力量比拼——2024全球网络战呈现五大特点", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489333&idx=1&sn=dff7d934b42679e01f662c8f10e27f33": "【漏洞复现】Apache Tomcat竞争条件远程代码执行漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486475&idx=4&sn=943a72a40bc01ee1401d16c5b6db3f11": "【漏洞通告】OpenWrt Attended SysUpgrade 命令注入漏洞（CVE-2024-54143）", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247488587&idx=1&sn=36947cca7b136734d9f974ecba1910b9": "从漏洞数据库搜索漏洞的工具go-exploitdb", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491780&idx=1&sn=9ad859958ef94c4b28503b45631a5cce": "漏洞预警 | Apache Struts2文件上传限制不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491780&idx=2&sn=c706c7bf32eb530317c380573930ef57": "漏洞预警 | 杜特网上订单管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491780&idx=3&sn=93fa1f3e603467757cccc4f78afa7774": "漏洞预警 | GitLab Kubernetes Proxy Response NEL头注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247494055&idx=1&sn=e6d8fa033cd944548086c716ac0004fb": "【神兵利器】XXL-JOB漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247561231&idx=1&sn=d395619d9c7e37fee040540992546806": "喜报！炼石中标某大型国有综合性保险金融集团数据加密项目", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497894&idx=2&sn=a3d6383d0a7c182a96101ad4591734e1": "Apache Struts RCE 漏洞被公开 PoC 积极利用", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486475&idx=2&sn=d72f0a05e1e612fa56354ae1a878a765": "【漏洞通告】Apache Struts 2 远程代码执行漏洞（CVE-2024-53677）", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507585&idx=1&sn=5ece95159551948b0ffa7cd719aefdf7&chksm=cfcabd95f8bd34838fd5ab4044866d81a0b443ffbc5e66f89c4407b9b866ee891f036097b191&scene=58&subscene=0": "近期活跃利用高危漏洞自查！含文档管理、Exchange、Apache多个产品", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587465&idx=3&sn=f606b36568e16830f7ccb8d80bdd6cea&chksm=b18c21c386fba8d5127a6d2b07a92ceadd369622ffa057dc032148779ab0e72a399dff415028&scene=58&subscene=0": "欢迎报名！​“系统0day安全”系列课程：掌握漏洞挖掘重要技能", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664232585&idx=5&sn=b82810b82d6eb59c2598075d87f09b53&chksm=8b59f470bc2e7d66737bd7baf256c0cc37b4d7d892b7d5137bc15af66a345b6c97940301bb28&scene=58&subscene=0": "关注 | 第一期漏洞挖掘与利用中高级培训班招生", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066717&idx=4&sn=b641682a1ea1ea39882cd929b37a230e&chksm=f36e7fddc419f6cba24202816ce961aac15b183ff97a27fbb019b434f5d7e60a6fdfa32e0d2d&scene=58&subscene=0": "【安全圈】Apache Tomcat新漏洞允许攻击者执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247531931&idx=1&sn=5668beb83a342334cd0c5e435601230c&chksm=c1440f26f63386307f6312e5f22d00cd7121b204ca332d6c38f460179ec350ba3c892fd97acd&scene=58&subscene=0": "避免漏洞管理中的陷阱：关键见解和最佳实践", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496635&idx=1&sn=34c31d16785a1db6359cc507f1312498&chksm=e8a5f9d8dfd270ce98244fefaaff483cbbfc2b1a94710d1eb30fdc1b35c8f91dcb606f71c6f6&scene=58&subscene=0": "深入浅出API测试｜搜集分析与漏洞挖掘实战", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497583&idx=3&sn=a257313ae94cf7a802e4006aba4ab91e&chksm=fa595982cd2ed0943cb357c385cae45d9142c9e02bc2fa241049bb8d545bec7993170a4903a9&scene=58&subscene=0": "50套.NET系统漏洞威胁情报(12.13更新)", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484499&idx=1&sn=5e4e9c892b49d69df1a5ebc34b3ee227": "CVE-2024-11477：7-Zip 中的严重缺陷可让黑客控制", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486361&idx=1&sn=38c35d7dfeeb4f23bb79b134d105a9f0": "分享OAuth2.0原理及漏洞挖掘技巧案例分析", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491251&idx=1&sn=e1519a3103033cf6a50d9d229f99003c": "记一次溯源真实案例", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489068&idx=2&sn=6e38841cf254c1c670f47a40ee15bd3c": "【漏洞复现】方正畅享全媒体新闻采编系统reportCenter存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587465&idx=2&sn=e5d0f25746dce13de80ec7ed9907263f&chksm=b18c21c386fba8d5143def50c0fea96255f636311a6494c19b1e2f693f34d65cd53557264f87&scene=58&subscene=0": "​Apache Tomcat高危漏洞曝光，远程代码执行风险需警惕", "https://mp.weixin.qq.com/s?__biz=Mzg3NTk4MzY0MA==&mid=2247487895&idx=1&sn=f6a8e98c8bbd2f91264c648e106570e5": "Zabbix从环境搭建到漏洞利用，附批量漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247495012&idx=1&sn=1296119e4a5d81cc17c8c894eb81c9ec": "【工具分享】全网首发！袭扰国内top1家族Mallox家族恢复工具", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487541&idx=1&sn=e4a29fa7e3d8982823df494f4d681f54": "赛克安全本周漏洞推送（12.15-12.20）涉及Cloudlog、bmcm、汉明科技-无线控制器、迈普无线系统等产品相关漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485633&idx=1&sn=250856a0c5df8005e7e4ccafa8fc5e53": "赛克安全本周漏洞推送（12.15-12.20）涉及Cloudlog、bmcm、汉明科技-无线控制器、迈普无线系统等产品相关漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546115&idx=1&sn=a2d3f19e56af1f2a02b2d6e5ff9f69bc": "CVE-2024-21762漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546115&idx=2&sn=375c6493f91e8c36e4d450c4c849e2da": "区块链安全 | 智能合约重入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454063729&idx=1&sn=589720470530ff0346b0da4e297f010f": "信息安全漏洞周报【第002期】", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605364&idx=4&sn=aee1cb28e83f2b6dd706be24fe33bf22": "SQL注入漏洞批量检查工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247488095&idx=1&sn=9e6234bfb837864874b7823c72a5a398": "飞鱼星路由器 账户密码泄露漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094354&idx=2&sn=3a60c2337e04ee15140b801c8002914f": "Apache Tomcat新漏洞允许攻击者执行远程代码", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488851&idx=1&sn=efb4d5fe76d020e05760236c16b33ac5": "Apache Struts2 文件上传漏洞分析（CVE-2024-53677）", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247699&idx=1&sn=8cfa9f1b17a853ce8e42a0c99bc8acae": "CVE-2024-53677：Apache Struts2文件上传逻辑漏洞S2-067", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513326&idx=2&sn=b46e1ade4f9e30f4f08fbf4bbca1bd20": "外媒：马斯克因涉密安全问题受美军方审查", "https://mp.weixin.qq.com/s?__biz=MzI0NDgxMzgxNA==&mid=2247496499&idx=1&sn=3ad526afdadb1d41245df21bd6cfbd64": "每周安全速递³²³|Cl0p勒索组织利用Cleo漏洞攻击全球企业", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247496974&idx=1&sn=32969894b2db845f027d58c9c704ba42": "CVE-2024-53677：Apache Struts2文件上传逻辑漏洞S2-067", "https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247512487&idx=1&sn=2084969d835f481f70244a795d40aa77": "NDSS 2025｜ 抖音集团安全研究团队提出机密沙箱内存管理方案WAVEN", "https://mp.weixin.qq.com/s?__biz=MzAxODg1MDMwOQ==&mid=2247506869&idx=1&sn=5eff5ed4d2afa5ff3a6c0a8bfff9ccdf": "再获漏洞治理能力认可，谋乐科技获颁工信部NVDB通用漏洞库“技术支撑单位”荣誉称号", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521859&idx=1&sn=6aade83438190800942638166b046757": "Fortinet：注意FortiWLM漏洞，黑客可获得管理员权限", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521859&idx=2&sn=342840d67c1fbf01af15a41ea7621df8": "Chrome 131 更新修复高危内存安全漏洞，其中1个获奖5.5万美元", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931270&idx=1&sn=cb11c508d1c42ef2b727375e2695dba9": "第十一届“金松奖”已开始申报，包含合规科技发展奖、AI科技进步奖等", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247552089&idx=1&sn=e58b77c5f8083efd50bde11cf5bb2896": "解放双手，批量刷漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498611&idx=1&sn=5451b3f155e7c67d51aadd3e816a5898": "《中医医院信息与数字化建设规范（2024版）》解读", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500414&idx=2&sn=40647e4e4d3af58a8c692e400df5ba6e": "【漏洞通告】Sophos Firewall SQL注入漏洞（CVE-2024-12727）", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247531975&idx=1&sn=56c499e1153e0c4f6356185ac1ded5a1": "思科物联网无线AP遭遇严重命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489338&idx=1&sn=d7f3b1f635c785d818ad3b8e32e9d83c": "【漏洞预警】moaluko Store Locator代码执行漏洞(CVE-2024-12571)", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486034&idx=1&sn=e1071dd8c3acaa34494bfc2255a23817": "Play 勒索软件声称 Krispy Kreme 遭入侵，威胁泄露数据", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499454&idx=1&sn=96a579525a54f7e4000867bcfb7643f3": "G.O.S.S.I.P 阅读推荐 2024-12-20 Android芯片组相关漏洞总结报告2025版", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493219&idx=1&sn=dc76c163b7149d91b59b32c45efda63a": "[PoC] Databricks 远程代码执行漏洞 CVE-2024-49194", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587582&idx=2&sn=4b21c27b28faa9c50e657aba34ad4be4": "FortiWLM重大安全漏洞曝光，远程攻击者可夺管理员权限", "https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247503614&idx=1&sn=6411afe7e813f28c7e5dc04f06eafa28": "观安信息获评“2024上海软件核心竞争力企业（规模型）”", "https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247515061&idx=2&sn=221fe9e7df5487a65ac6c27d27bb64a3": "CCSK试题等你来答，参与抽奖赢取首期班福利！", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486354&idx=1&sn=ed60c9249844adc217d6dc144178754c": "Src挖掘之比较有意思的几个漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486353&idx=1&sn=652419703f4d5311dac369eb1a1a6014": "记一次磕磕绊绊的sql注入漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0NDQwMDY1Nw==&mid=2247485413&idx=1&sn=47451afa77e27bca85b16eb8c9c125ea": "隆重登场：Google 最新推理模型，Gemini 2.0 Flash - Thinking-exp-1219", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489822&idx=1&sn=c2122703daa803e3edfa9adc122a6c16": "时空WMS-仓储精细化管理系统 SaveCrash.ashx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899798&idx=1&sn=a5f4eb2aa8955f5fe679cd627968dadb": "Apache Struts 严重漏洞恐再现“噩梦”， 攻击者已展开行动！", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491804&idx=2&sn=1b58756b842eabe75c03da17279606b8": "漏洞预警 | NextChat SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491804&idx=3&sn=7d2c640fda5f60bb78dd1511bd64f853": "漏洞预警 | 网神SecGate3600防火墙任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487125&idx=1&sn=2dcb68ae48973292ce0e41ebe7b6d41a": "Zabbix从环境搭建到漏洞利用，附批量漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487125&idx=2&sn=ec3d00ecc8c4f8f61c72585c57ffb1d1": "CVE-2024-50379|条件竞争Tomcat RCE POC（首发）", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489098&idx=1&sn=241319fc05874fab20fe11fc31e569a5": "【0day】中科商软云连ERP getAllUserListData存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247494056&idx=1&sn=745c6db09be2022a37d4366370e6fa3d": "【神兵利器】Redis漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515286&idx=1&sn=f7ad70d62fef2564f484020c5716f9a2": "Apache Tomcat（CVE-2024-50379）条件竞争致远程代码执行漏洞批量检测脚本", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587582&idx=2&sn=4b21c27b28faa9c50e657aba34ad4be4&chksm=b18c213486fba822d37b6a318f39f151c9f35da5a51cc4151917ac1fcfc6b817bd873da639d9&scene=58&subscene=0": "FortiWLM重大安全漏洞曝光，远程攻击者可夺管理员权限", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521859&idx=1&sn=6aade83438190800942638166b046757&chksm=ea94a729dde32e3fff2298ee3a0ab33be5cf7cc9bbfebb1e65bcf4b1a355e4369a3ae43bb957&scene=58&subscene=0": "Fortinet：注意FortiWLM漏洞，黑客可获得管理员权限", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521859&idx=2&sn=342840d67c1fbf01af15a41ea7621df8&chksm=ea94a729dde32e3fa2f20b8187093ff135d86d86f18361c7a4cae398bc831b6f9e04d5a21ca9&scene=58&subscene=0": "Chrome 131 更新修复高危内存安全漏洞，其中1个获奖5.5万美元", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499454&idx=1&sn=96a579525a54f7e4000867bcfb7643f3&chksm=c063d067f71459710b20f7f42f409e6a44da03f245ec80005326c7b8b022ed3119efbb022ea8&scene=58&subscene=0": "G.O.S.S.I.P 阅读推荐 2024-12-20 Android芯片组相关漏洞总结报告2025版", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247531975&idx=1&sn=56c499e1153e0c4f6356185ac1ded5a1&chksm=c1440f7af633866c05c42df55d11bf04d3c958aa61ec6c19861393ad6e599687d4011abedd73&scene=58&subscene=0": "思科物联网无线AP遭遇严重命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MzE4MjAxMw==&mid=2247484369&idx=1&sn=478b83aaba8f2dc1fbc47bd52655654b": "CVE-2024-56337", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486442&idx=1&sn=56c0d4d924372cdf6e0685a3cccbc483": "「漏洞复现」Cloudlog 电台日志系统 request_form SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491782&idx=1&sn=0ec56be3f4aff171268e9834d45e974d": "安娜雅克医院勒索软件漏洞导致 30 万名患者数据泄露", "https://mp.weixin.qq.com/s?__biz=Mzg5MjkwODc4MA==&mid=2247485776&idx=1&sn=6d011e84e820eb2995031d6355a2ed87": "【自研工具】collect-cloud-native-security-vuln: 云原生安全漏洞收集工具", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310351&idx=1&sn=431965e436402476cf84910b092c1628": "FortiWLM 曝关键漏洞，攻击者可获得管理员权限", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247484966&idx=1&sn=c9077bd3b588953184cf7d6d94ce6e41": "Google日历网络钓鱼骗局", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793589&idx=2&sn=1f3dfc23261c4f764df5452f3ae77a05": "研究人员警告称，Apache Struts 2 关键漏洞可能遭利用", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793589&idx=3&sn=091ad734f1363feff0581eebe726992b": "Rockwell PowerMonitor 漏洞允许远程黑客攻击工业系统", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491804&idx=1&sn=9ca9d6fe52223ae2d42a4e122bbad7d6": "漏洞预警 | Cleo Harmony任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526269&idx=1&sn=9e773282c8039d1a8f836fb8e90e8aac": "8,000 美元漏洞赏金亮点：Opera 浏览器中的 XSS 到 RCE", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526269&idx=2&sn=be4f2144eee49c7ab4153c1c05760a33": "新的Windows权限提升漏洞！ SSD 咨询 – cldflt 基于堆的溢出 (PE)", "https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485929&idx=2&sn=85652ae4ff67dac73e8c8c8e0fcd320b": "网络安全顶会——CCS 2024 论文清单与摘要（2）", "https://mp.weixin.qq.com/s?__biz=Mzg3NTUzOTg3NA==&mid=2247514855&idx=1&sn=c31bfc54cc6875e32ec73a225f057a36": "你可能了解Ebpf，但是你了解Cbpf技术吗？", "https://mp.weixin.qq.com/s?__biz=MzU4NTY4MDEzMw==&mid=2247494030&idx=1&sn=330c20307561a3c8c3b1ad2dd17be0b0": "EKUwu-CVE-2024-49019", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247485930&idx=1&sn=b212c0f73f12ef7a741f99bb4b8fd2e1": "OtterRoot Netfilter 通用型 Linux 本地提权 1-day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502658&idx=1&sn=e1de6decc572e58a32c667c1ecd2ec0b": "【已复现】Apache Tomcat 远程代码执行漏洞(CVE-2024-56337)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485358&idx=1&sn=c180edecfc5c80fefafb15baea7e06d5": "【翻译】身份验证失效：利用高级身份验证漏洞的完整指南", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546135&idx=1&sn=cbfb468158bc82d35028d522eaa3ab4d": "新手小白如何挖掘cnvd通用漏洞之存储xss漏洞（利用xss钓鱼）", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066803&idx=3&sn=dca3ffae63a4a135b0aaae997fee9b6d": "【安全圈】大众车载系统暴出12个安全漏洞，黑客可轻松接管车内信息！", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485730&idx=2&sn=ee2e3210c82a61b26acfc5ba94b512ca": "CVE-2024-50379｜Apache Tomcat竞争条件远程代码执行漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587593&idx=1&sn=f01974c27a3a04371655e7ea6eace814": "欢迎报名！​“系统0day安全”系列课程：掌握漏洞挖掘重要技能", "https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247487610&idx=1&sn=d3773f95c08472577d4c5dca4d24dc10": "最终章 | Tomcat条件竞争RCE的最终利用篇，带视频教学及POC", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500418&idx=1&sn=dbe755575c1cc8ea303921c5c7ee9317": "【漏洞通告】Apache Tomcat远程代码执行漏洞（CVE-2024-56337）", "https://mp.weixin.qq.com/s?__biz=MzkxOTYwMDI2OA==&mid=2247484301&idx=1&sn=cc09d0ed73141c9df1190979180a4bb6": "[靶场复现计划]春秋云境 CloudNet", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247485993&idx=1&sn=a04b3a29e74391e6948c0ef6dc41969a": "搭建Web安全入门漏洞靶场DVWA其实只要10分钟！（附30个免费docker镜像加速源）", "https://mp.weixin.qq.com/s?__biz=Mzg5MzcxNzg1Ng==&mid=2247485630&idx=1&sn=3d1301d407df653985532869ae3acfe1": "网安人体检报告：漏洞最多的人竟是我自己？！", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493261&idx=1&sn=519cd25d6df0692babe00f4c41ffdee9": "CVE-2024-56337 Apache Tomcat - 通过启用写入功能的默认 servlet 进行 RCE", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247487494&idx=1&sn=de643d61ba91eb9452c98cebeb61a56a": "【新day】CVE-2024-56145（Craft CMS 模板注入导致 RCE）", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485730&idx=1&sn=4a11c334dc821e3cebf6e8642e236341": "CVE-2024-53677｜Apache Struts 2（S2-067）远程代码执行漏洞（POC）", "https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490108&idx=1&sn=44caf097ec471143db38533b39921e7e": "一文解读hashdump工具", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247486364&idx=1&sn=6376e5a20c87ec8e5f291c09a4e13f16": "新手小白如何挖掘cnvd通用漏洞之存储xss漏洞（利用xss钓鱼）", "https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247486136&idx=1&sn=181b8c04c06163724b7307a30645a2ef": "[靶场复现计划]春秋云境 CloudNet", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485745&idx=1&sn=d1090b68df39020f6ad17405afe7f029": "CVE-2024-12727｜Sophos Firewall SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485745&idx=2&sn=5b11dd987b70d63bd327eea23f305e74": "CVE-2024-49112｜Windows 轻量级目录访问协议（LDAP）远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487133&idx=1&sn=1a65a357b5fb4ed4bd2928654519d005": "新手小白如何挖掘cnvd通用漏洞之存储xss漏洞（利用xss钓鱼）", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487133&idx=2&sn=e85f9ffecb8fa68f9544dbae2722aad0": "漏洞挖掘 | 某平台存储型XSS", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517788&idx=1&sn=5bf26f6dbafbcb94f439e8a8f6a0cf3f": "PE文件代码注入", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587593&idx=1&sn=f01974c27a3a04371655e7ea6eace814&chksm=b18c214386fba855c7d8837a605a2a87e7bb9c53b5ade3206e3b7a4379bddcd8ef5efb693457&scene=58&subscene=0": "欢迎报名！​“系统0day安全”系列课程：掌握漏洞挖掘重要技能", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066803&idx=3&sn=dca3ffae63a4a135b0aaae997fee9b6d&chksm=f36e7fb3c419f6a501dfeb9d60cff3b477a4ac64b70fdd353bed9f6ab86f24ba62907b4475ae&scene=58&subscene=0": "【安全圈】大众车载系统暴出12个安全漏洞，黑客可轻松接管车内信息！", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502658&idx=1&sn=e1de6decc572e58a32c667c1ecd2ec0b&chksm=fe79efdac90e66cc313e0e0816a80c07931f5719df659f74aba6bb8efcfae9347460cd26c232&scene=58&subscene=0": "【已复现】Apache Tomcat 远程代码执行漏洞(CVE-2024-56337)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493290&idx=1&sn=87dbe8e4fb12dd7dc0b236623fe5f4be": "CVE-2024-56145：Craft CMS 漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899799&idx=1&sn=bf5134fc99d34ec1f16199c151fa25ef": "Fortinet 无线管理器惊现严重漏洞，黑客可轻松获取管理员权限！", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633268&idx=3&sn=98f0293cc6251ab7304f147afa79483c": "FortiWLM 曝关键漏洞，攻击者可获得管理员权限", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526407&idx=2&sn=c861b76793e01721eca83cd6cd50d901": "一个不起眼的 PHP 漏洞如何导致 Craft CMS 出现 RCE", "https://mp.weixin.qq.com/s?__biz=MzkzNTQwNjQ4OA==&mid=2247484039&idx=1&sn=84848557aee5ef51ec87d5cd74607656": "记一次逻辑漏洞修改任意用户密码", "https://mp.weixin.qq.com/s?__biz=MzkzNTY1MTg4Mg==&mid=2247484206&idx=1&sn=c6c8bc748d9cd6b3305a188a37b8c6b9": "【首发1day详情】CVE-2024-51479 全网首发漏洞复现分析+POC (Next.js权限绕过)", "https://mp.weixin.qq.com/s?__biz=MzkyODY3NjkyNQ==&mid=2247484401&idx=1&sn=71dcfb268f5852a19c75d24153bb827e": "【首发1day详情】CVE-2024-51479 全网首发漏洞复现分析+POC (Next.js权限绕过)", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247487524&idx=1&sn=0ba60c7c544d38db55c6cc9723985528": "【首发1day详情】CVE-2024-51479 全网首发漏洞复现分析+POC (Next.js权限绕过)", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484851&idx=1&sn=52c5df6c1e8f7e240e5d705a9adb8fbc": "【漏洞复现】CVE-2024-50623", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066819&idx=2&sn=d36a351bfabba8d719c29fa871c22b3c": "【安全圈】FortiWLM 曝关键漏洞，攻击者可获得管理员权限", "https://mp.weixin.qq.com/s?__biz=MzkwMDc5NDQ4OA==&mid=2247494604&idx=1&sn=e708788215b2043d657d20c4aab45fde": "2024年湖北省网络与数据安全实践能力竞赛——天权信安WriteUp", "https://mp.weixin.qq.com/s?__biz=MzAwNTc5MTMyNg==&mid=2247500072&idx=1&sn=2b761dedd7c1caedbe68c644c1292ec6": "关于AWD的小结", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486453&idx=1&sn=c80d52031a23f7939f932cb30817a4d7": "「漏洞复现」云连POS-ERP管理系统 download.action 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491784&idx=1&sn=bc289d1572bd1db0c695ab15af7ab441": "CISA 将 Progress Kemp LoadMaster 漏洞标记为易被攻击利用漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496658&idx=1&sn=a962d7f0a95d295e95082d39881b8d9a": "任意账户绑定微信逻辑缺陷案例", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491824&idx=1&sn=1e180df542cc81f8ccd126fa3a1a793a": "漏洞预警 | Apache Tomcat条件竞争漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491824&idx=2&sn=00d3f008f7a8e6862f85e636c1729047": "漏洞预警 | 蓝凌OA SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247509920&idx=1&sn=4edcca4471e6daccf241f1af05ac1900": "Caddy能取代Nginx吗？", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655262466&idx=1&sn=cba108d6018be686d89bca36a5fe24ae": "2025年我国网络安全发展形势展望", "https://mp.weixin.qq.com/s?__biz=MzA4MzMzOTQ4Mw==&mid=2453672473&idx=1&sn=b1f42abfb69489f1d38f2bf96dcc303b": "补丁警报：发现关键的Apache Struts漏洞（CVE-2024-53677）", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493022&idx=1&sn=ef5134da8ef54faf7fc94a7213224e62": "Sophos修复了其防火墙产品中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489127&idx=1&sn=572846e45ecb431c0b52259247eb3ddb": "【0day】北京用友审计软件有限公司友数聚科技CPAS审计管理系统V4 存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066819&idx=2&sn=d36a351bfabba8d719c29fa871c22b3c&chksm=f36e7843c419f15552cf2929e13f6e9b8e3fa19750a3413a503d97ed18773b49e2b9626f057d&scene=58&subscene=0": "【安全圈】FortiWLM 曝关键漏洞，攻击者可获得管理员权限", "https://mp.weixin.qq.com/s?__biz=MzkyOTMxNDM3Ng==&mid=2247488752&idx=1&sn=f5d1b413360eaaa586e8547d31c4dbce": "IIS中间件漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247487630&idx=1&sn=6cf205a3fab2e22c6d42abce80395724": "Tomcat RCE | CVE-2024-56337远程代码执行，带复现视频及POC", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503217&idx=2&sn=0c8f76b82c16c05a9f732ba0e5bde0e6": "FortiWLM 曝关键漏洞，攻击者可获得管理员权限", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487205&idx=1&sn=33cd765343a53aeb0cb95c7e05719160": "(1day)金华迪加现场大屏互动系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517797&idx=1&sn=efa6756c0e64b9c89c49f021251b789d": "【CVE-2025-50379】利用cursor解读tomcat 条件竞争导致RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDc1NzU1Ng==&mid=2247484143&idx=1&sn=0909bc6a1e1608db5396bd53d3516603": "【POC开发系列01】Pocsuite3框架的使用与poc的编写", "https://mp.weixin.qq.com/s?__biz=Mzg3Mzg3OTU4OQ==&mid=2247493123&idx=1&sn=e978677722b36e1d7a8b163fe104c1c9": "庆尘SRC漏洞挖掘第二期来袭", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485075&idx=1&sn=68db2f838cf34395ab94bbc562be7cf5": "深度剖析 CVE-2024-56145：Craft CMS 高危漏洞的利用与防御", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485075&idx=2&sn=b8aebda4d9773c722dd15d51bc6b357b": "Apache Tomcat 高危远程代码执行漏洞（CVE-2024-56337）", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491824&idx=3&sn=182280414c04ee47c247bae26a93c39e": "漏洞预警 | 国威数字程控交换机远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Mzk0MDE2Ng==&mid=2649608656&idx=1&sn=0de2056bef0fcc1cb20ec49cd4a73751": "重磅｜天地和兴董事长王小东荣获第九届“管理科学奖-个人奖”", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485815&idx=1&sn=48d1b8666f2a180250f25790a487e940": "【漏洞复现】某平台-thirdImSyncForKKWebService-read-file任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247520334&idx=2&sn=5ec75125a7aba0d5b3c983dfae3ae073": "CCSK试题等你来答，参与抽奖赢取首期班福利！", "https://mp.weixin.qq.com/s?__biz=MzkwMjU5MzgzMQ==&mid=2247485143&idx=1&sn=ca184c882a6f45a7b1160c5e65116d61": "文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495634&idx=1&sn=7ad3a2cfe0a427fe348fb02c0405f8e2": "CNVD漏洞周报2024年第51期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495634&idx=2&sn=e5f4d98d6400cfec5f6954869c58c5ca": "上周关注度较高的产品安全漏洞(20241216-20241222)", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486464&idx=1&sn=647dde52226377e5282adb190d4c5dfb": "「漏洞复现」灵当CRM getMyAmbassador SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNjg1OTY3Mg==&mid=2247491737&idx=1&sn=c64f3af144a46bf369b4071fcb9521cb": "华顺信安获评攻击面管理领域十大代表性厂商", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291940&idx=2&sn=017c601f071172c54e31467605898ee7": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494252&idx=1&sn=c73d258b557537455c7fdc4af249ae56": "NDSS 2025｜Prompt泄露风险：抖音集团安全研究团队揭露多租户KV缓存共享漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247512517&idx=1&sn=5eeba37b918c35be1eb6209fed0aa9fc": "NDSS 2025｜Prompt泄露风险：抖音集团安全研究团队揭露多租户KV缓存共享漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490225&idx=1&sn=afd97fcef9e2132344f804a84347ba7f": "【已复现】Apache Tomcat存在远程代码执行漏洞（CVE-2024-56337）", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490225&idx=2&sn=885da3c3fa05d39949c5718797a96226": "【已复现】Apache Tomcat存在远程代码执行漏洞（CVE-2024-50379）", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502670&idx=1&sn=479d015990e5c63cf38d46824cc7a6d5": "安全热点周报：Windows 内核漏洞现被利用来获取系统权限", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247547783&idx=1&sn=f16e44bb0f27672bde6ffc2def95890e": "九年磨砺，再启新程！谈思AutoSec 9周年年会报名正式启动~~", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247623763&idx=2&sn=a09d131d7c26fb44de15e653371e639f": "警惕！高危漏洞利用成为美国对中国企业网络攻击突破口", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247568797&idx=1&sn=0b1ea74516af141a6361daa62ee22c80": "Java之SpringBoot漏洞利用姿势合集总结详细版", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503241&idx=1&sn=46f1e55ddd334e1241a4f2a5cc61150a": "雷神众测漏洞周报2024.12.16-2024.12.22", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxNTMzNw==&mid=2247484048&idx=1&sn=75765ca273ebe45ec635d0c1d6037b66": "路径遍历漏洞技巧手法", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489841&idx=1&sn=e9b36f27caee5e069eb26b0f8eb5decb": "同享人力资源管理系统-TXEHR V15 ActiveXConnector 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487973&idx=1&sn=ae1887a94edc58e3f4368af534ceafa6": "YourPHPCMS checkEmail接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499471&idx=1&sn=6b9864c7e3748af4d5599a55b0b6014f": "G.O.S.S.I.P 阅读推荐 2024-12-23 那些挖漏洞的团队（伙）", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496663&idx=1&sn=7ed86171cd982ef9bada19590988c53b": "价值1.4 W人民币漏洞！", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484732&idx=1&sn=85b562f93dd4a61946496a4d4c1e4f26": "【工具分享】Tomcat CVE-2024-50379 条件竞争文件上传 exp RCE", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247505377&idx=1&sn=8775c6c4e8a60dde7049562e2aeec313": "每周网安资讯 （12.17-12.23）|Apple多款产品存在漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517803&idx=1&sn=bbf1338350e2628431ec7659eb014097": "蓝凌EKP V16 未授权SQL注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499057&idx=1&sn=a4a5cfad638b65d4c903edb3115ea230": "远程代码执行漏洞检测利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517735&idx=1&sn=7d8c311aaec65b40784ae780af73519b": "漏洞公开——从弱口令到通杀", "https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247561298&idx=1&sn=3cc8bfff2eeb748094f92f4be51ae12a": "附下载！炼石参编《多方数据共享服务数据安全技术框架》标准发布", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489149&idx=1&sn=39f2e5f02dee35d38a179723aa7aed1a": "【EDU】勤云科技期刊采编CMS存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515310&idx=1&sn=0d5a90a6415efced680b61d90b5d0c8c": "Bazaar v1.4.3 任意文件读取漏洞(CVE-2024-40348)", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515310&idx=2&sn=56e4be8036c18c800185e9bb1a7dc78c": "渗透测试 -- 系统漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489345&idx=1&sn=91726b817300dc5b41e7c6a25ef449d4": "【漏洞预警】Poppler越界读取漏洞(CVE-2024-56378)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523969&idx=1&sn=b096f169d52f79ead83a7f4899282a8f": "【漏洞通告】Craft CMS 远程代码执行漏洞(CVE-2024-56145)", "https://mp.weixin.qq.com/s/7cV7xUD5XoElvax20i0fzg": "内网远程桌面密码获取", "https://mp.weixin.qq.com/s/FlUrJBbv-uD6fZn_rTIXQg": "文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521868&idx=1&sn=62d6c6882cbe7ca4516d3b679eea7dfa&chksm=ea94a726dde32e301b12f414868b0e6781c25f64fd9abbfe3612bcf308592daf167e1efbf01e&scene=58&subscene=0": "速更新！Sophos 热修复严重的防火墙漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499471&idx=1&sn=6b9864c7e3748af4d5599a55b0b6014f&chksm=c063d016f7145900a49ddbaa4bcb1884049b8265f5cfa44eaffefb88d4af6a19080043ba5a8a&scene=58&subscene=0": "G.O.S.S.I.P 阅读推荐 2024-12-23 那些挖漏洞的团队（伙）", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503241&idx=1&sn=46f1e55ddd334e1241a4f2a5cc61150a&chksm=f2585f7ac52fd66c9fbaef9af81bcf89af0acc29f39cbc52f5e76f147c863688e0dda944ee43&scene=58&subscene=0": "雷神众测漏洞周报2024.12.16-2024.12.22", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523969&idx=1&sn=b096f169d52f79ead83a7f4899282a8f&chksm=ce461591f9319c87263fd82778e07d456f46f9766a855d4c240764614e96d53e893ccb619460&scene=58&subscene=0": "【漏洞通告】Craft CMS 远程代码执行漏洞(CVE-2024-56145)", "https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247512517&idx=1&sn=5eeba37b918c35be1eb6209fed0aa9fc&chksm=e9d37a27dea4f3314f6b15c21cdad97ce21e9891d0e1ba2fb756e5fdd1ad4240630266dee1a2&scene=58&subscene=0": "NDSS 2025｜Prompt泄露风险：抖音集团安全研究团队揭露多租户KV缓存共享漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496663&idx=1&sn=7ed86171cd982ef9bada19590988c53b&chksm=e8a5f9b4dfd270a2cafb8005565dd0a67f4b38c79f38674a43411e3d52530d764d132ab4c1ea&scene=58&subscene=0": "价值1.4 W人民币漏洞！", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499550&idx=1&sn=622098dcd766068e4c23662a34d39664": "CNVD漏洞周报2024年第51期", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485819&idx=1&sn=9878fa5b05719c5c70082d09e2371eb1": "【漏洞复现】某平台-getPaperLayoutList-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605533&idx=1&sn=63d68320f681744a2c81f0f813169cad": "警惕！“银狐”木马病毒再次出现新变种并更新传播手法；|00后大学生盗取数万个社交平台账号 非法牟利7万余元", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486906&idx=1&sn=f30579afd864dc32a4b8d966b5fbe1e1": "PbootCMS前台SQL注入漏洞（下）", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506316&idx=1&sn=b59c502ca9ac40e07ee62a970b0a39aa": "书店停业：10万册好书【买2本送5本】清仓处理", "https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247487679&idx=1&sn=9aada25fb8260f17942f0d8726a6cb7a": "满足你 | Tomcat条件竞争RCE利用脚本：CVE-2024-50379、CVE-2024-56337", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486527&idx=1&sn=0e5b1a7c579ad31c1583a45c71bd41c2": "Java反序列化漏洞 | log4j2远程代码执行漏洞原理+漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497683&idx=3&sn=d7780a5d9d05f1a65998a1855fc4a1bb": "52套.NET系统漏洞威胁情报(12.24更新)", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487212&idx=1&sn=88b716175ea813484124aed2140e2e31": "(1day)全媒体采编平台存在未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491825&idx=1&sn=3f17b8321f3d7a18c621a9631b58033f": "漏洞预警 | CyberPanel命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491825&idx=2&sn=10017681ee52f6f356351fc448cb1d45": "漏洞预警 | SitecoreCMS任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491825&idx=3&sn=2ea9dc185f5490c84245d06a73f4e9fe": "漏洞预警 | 中科网威anysec安全网关远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247509941&idx=1&sn=2fc68474fecf59e0faacac6a6a7c79c8": "在NAS中部署Jellyfin 拥有自己的影院", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502670&idx=1&sn=479d015990e5c63cf38d46824cc7a6d5&chksm=fe79efd6c90e66c0316c6f9d4122e6c35359545aa816b07ec0b92c866870421e8eda95754a0d&scene=58&subscene=0": "安全热点周报：Windows 内核漏洞现被利用来获取系统权限", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxNTMzNw==&mid=2247484054&idx=1&sn=fe0f59eddecc373a8c0f4f6e0f530973": "dedecms织梦任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493396&idx=4&sn=cb28d670614d1ebf375025ab2f3a0c36": "【漏洞预警】CVE-2024-45387", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493396&idx=5&sn=cf01d14f914941546541b6a0a2f5abec": "Adobe 警告 ColdFusion 存在严重漏洞，并且 PoC 已流出", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486477&idx=1&sn=b867e1f057d49e2a34b8de245f66d834": "「漏洞复现」方正畅享全媒体新闻采编系统 reportCenter.do SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526417&idx=1&sn=5d19b7fd81e7e92ff3cca973a60ccd22": "CVE-2024-56337：Apache Tomcat 修补关键 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3Njc0NTgwMg==&mid=2247502001&idx=1&sn=9ee9dbe3b289e181b228325a53fb8cfe": "B站自研动画视频生成模型全链路技术报告", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614788&idx=1&sn=103b63a5b448cad699cc6cf32f1cdb5a": "一文理解条件竞争漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488285&idx=1&sn=97653bb5fd6a2d661776be1026799921": "【首发 1day】WordPress File Upload 插件存在前台任意文件读取漏洞(CVE-2024-9047)" }