{ "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247513636&idx=1&sn=66bc5f0cac446268cb859e38faa2b841": "四个关键漏洞使 HPE Aruba 设备面临 RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486384&idx=1&sn=6cded6c301c425146633b7c8e92b9ae2": "用友crm客户关系管理pub∕downloadfile.php接口存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490163&idx=1&sn=0af69d90d567c84ea23336cde986f7a8": "代码审计-某产品高清智能录播系统漏洞分析附未公开POC", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494519&idx=1&sn=cd24e7e546ec5cd027e8ca018f499bf4": "漏洞挖掘之众测厂商 第三方登录RedirectUrl劫持漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488062&idx=1&sn=5e3f1e901718ee760c9271676d075758": "【漏洞预警】Apache ActiveMQ Jolokia 和 REST API 未授权访问漏洞CVE-2024-32114", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458553432&idx=1&sn=93377c71147ef00b8e58571093d5ab55": "CVE-2023-4427:ReduceJSLoadPropertyWithEnumeratedKey 中的越界访问", "https://mp.weixin.qq.com/s?__biz=Mzg4OTkwMDc1Mg==&mid=2247484729&idx=1&sn=b2920455891f256e016b74122977490b": "YzmCMS pay_callback.html RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247485256&idx=2&sn=44579672e179f0268bd6daac499832e2": "【漏洞复现】CVE-2024-1512", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247485256&idx=1&sn=5a1e8635a4c0a68a5c58662d47a08f36": "【漏洞复现】CVE-2024-1698", "https://mp.weixin.qq.com/s?__biz=Mzg2OTYzNTExNQ==&mid=2247484965&idx=1&sn=396cceb9cd98393868c20c1876aa8957": "[漏洞复现] CVE-2024-33786 中城科信票务管理平台 任意文件上传", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649791059&idx=1&sn=82bf570f4c7002b524bb4eacc1f7fb0d": "俄罗斯 APT28 利用 Microsoft Outlook 漏洞攻击捷克、德国实体", "https://mp.weixin.qq.com/s?__biz=MzUxMjc0MTE3Mw==&mid=2247494678&idx=1&sn=4cdffd80c296f3df40b773da5943d796": "两个Google Vertex AI平台漏洞曝光:可能导致权限提升与敏感数据外泄", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247492614&idx=1&sn=40f082284e0b14fd77c82d95bbeb9185": "用友漏洞一键探测利用", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487497&idx=1&sn=4a47b98c0b29cd4d3e7c4f30685e1247": "【漏洞预警】 用友BIP 数据库配置信息泄露", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487497&idx=2&sn=adb385b0fccd4af9d9ad9d439bce5640": "【漏洞预警】D-Link-DNS 多款产品未公开接口∕sc_mgr.cgi 存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487497&idx=3&sn=1cdbe6f7a8137e5e2626d4e358c1ef93": "【漏洞预警】 易宝OA-GetProductInv SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487497&idx=4&sn=e2d16220eb00621420899460b1a95941": "【漏洞预警】易思智能物流无人值守系统SQL注入", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247496792&idx=1&sn=561979247dfc36401fe9815413c3f88a": "CVE-2024-25600:WordPress Bricks Builder RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065974&idx=1&sn=d6789e893634a0f2fb9c34b2bfb0a8f9": "【安全圈】打补丁要快!0Day漏洞正在被黑客广泛利用", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664229682&idx=1&sn=06d6932fae0b8e2e54feda32c9c169ab": "2024年网络安全漏洞研究人才培养交流活动成功举办", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664229682&idx=4&sn=4f4906e3ee86b96a4d323bf891efdae0": "CNNVD ∣ 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzU0NDI5NTY4OQ==&mid=2247486145&idx=1&sn=06229e2205d5dd9e99716999b4f1aa2e": "LLM大模型安全(4)- 供应链漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzI2NzIyMw==&mid=2247488304&idx=1&sn=c0db143fcd6865fdd3482b955dd94abd": "BlockSec和OKX Explorer达成合作,携手提升链上数据安全与合规等级", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484677&idx=1&sn=bb89036b82c59a0e1e8b06227a9e9768": "【漏洞分享】edu通杀 新中小学智慧校园信息管理系统 Upload 任意文件上传", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485712&idx=1&sn=e15d7dda1a02527db2c340f56df4f3ea": "【漏洞复现】某平台-testdb-info-leak信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133388&idx=2&sn=8fe7297f29148fa035db128b29e8dc99": "远程代码执行风险威胁用户安全,Zoom紧急修复多个安全漏洞;颠覆传统安全架构,Zscaler创新发布新型零信任分段方案 ∣ 牛览", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502432&idx=1&sn=d3405bf69adda60e3be13962d038b6aa&chksm=fe79eef8c90e67eead814333282edff4d7e247d6ba9e9ba1895fff6354e808e4fa84048a0cd1&scene=58&subscene=0": "【已复现】Fortinet FortiManager 身份认证绕过漏洞(CVE-2024-47575)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247485595&idx=1&sn=b4c87d04e1659f11fad8f2f125985751&chksm=cfa49360f8d31a76e5d3880e51cd8f9b0ab1df47e86729adf04ea6d1f1202fac72fae5903fbe&scene=58&subscene=0": "大语言语言模型安全攻击以及AI供应链漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521498&idx=1&sn=f0af27f6b0e814c92846ea129bcee155&chksm=ea94a5b0dde32ca62dddf91f42a9fa2b36402ffb856469973f83a6a88e24d6910dcc53072ef4&scene=58&subscene=0": "PostgreSQL 高危漏洞可导致环境变量被利用", "https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651388483&idx=1&sn=070fb6976ee52108d263858115ea9bfd&chksm=8d398bcbba4e02ddbe0183f79c2682bbf1cab54e4ba6bb0697fdc56e297e7303aa9eb938b9e6&scene=58&subscene=0": "2024年网络安全漏洞研究人才培养交流活动成功举办", "https://mp.weixin.qq.com/s/O2Ohp_ceYrTo8hppX09fkw": "(0day)微信公众号商家收银台小程序系统存在前台任意文件上传漏洞", "https://mp.weixin.qq.com/s/tbEXIAPT-Vumch-WyoGZHQ": "代码审计-某oa任意文件读取(1day)", "https://mp.weixin.qq.com/s/73CXvF4ejvgS40OetzXr8A": "(0day)全新优客API接口管理系统代码审计", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487335&idx=1&sn=c2800f225873a4a1b38711bacba10316": "AI代码审计和POC编写", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712071&idx=1&sn=98356c1f6829546d47af1e4d43f89ace": "Fckeditor编辑器漏洞汇集", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517203&idx=2&sn=3074826837ddd653a7d1ae03a600a0b4": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487499&idx=1&sn=4ad7e59489c09ab80bee906e929b311a": "【漏洞预警】 用友BIP 数据库配置信息泄露", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487499&idx=3&sn=b3cf1540ab72404aab438e963c5e761d": "【漏洞预警】 易宝OA-GetProductInv SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492449&idx=2&sn=ded00a05c99093340d9c413be00b1a5a": "PostgreSQL数据库存在高危漏洞CVE-2024-10979(8.8)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247523915&idx=1&sn=0522e35aa0afa2167e0dfd9d5a6954d7": "CVE-2024-28888:福昕阅读器中使用释放后导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486133&idx=1&sn=a795a853e80c985de5fceca4309365ce": "(0day)某全新UI自助打印微信小程序系统SQL+RCE漏洞代码审计", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545126&idx=1&sn=b2f2e3d1dba89c587651768a66070b2d": "攻防演练 | 一次近源渗透", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492730&idx=1&sn=4830f7a0e4dfa7e50b8fb0ccc7e0e0b9": "一款java漏洞集合工具", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307299&idx=1&sn=467809755fdcc647cdde9f67ad9a27a2": "打补丁要快!0Day漏洞正在被黑客广泛利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307299&idx=4&sn=faa8ef20c4f618771d92d2e34863625b": "Velociraptor:一款终端节点可视化与数据收集工具", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793147&idx=3&sn=c17de8d66d7e37e8209eab45ef7f5654": "Palo Alto Networks 确认存在新的防火墙0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603612&idx=4&sn=1ca7d7d27c71f41ef3992ddac7cda038": "Vcenter图形化漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247488171&idx=1&sn=dbbce680730d50271fcb4e886e029f36": "VulToolsKit一把梭漏洞Exploit合集", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491421&idx=1&sn=653b49f157760ea962f45f3e9471858c": "漏洞预警 | Apache ZooKeeper身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491421&idx=2&sn=89f3fc90da6871059bb0ea398e1ffb26": "漏洞预警 | XStream栈溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491421&idx=3&sn=eabce5e15b6befff94c2407acd4a5aa9": "漏洞预警 | HPE Aruba Networking Access Points命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488371&idx=2&sn=3ad1f97fe2651cfd09c4aa8767ee6a6d": "【漏洞复现】用友YonBIP高级版存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486789&idx=1&sn=9e271a3346eed986ecc5b7a4aece7f88": "compiler explorer 轻松从汇编角度理解代码", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486789&idx=2&sn=f8617e893d02f1eaca70fb0f9661a3e3": "网太CMS漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497601&idx=1&sn=1b31fff83d5276667f7ead2ae5de2a6b": "微软2024年11月份于周二补丁日针对90漏洞发布安全补丁", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497601&idx=2&sn=413b3330c9fde967c520582aefbd4bd6": "2023年最易被利用的漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247657&idx=1&sn=b0600f03ef9bbffbcaa4fbf1fe0d87f7": "CVE-2024-25600:WordPress Bricks Builder RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0MzI2NzQ5MA==&mid=2247486636&idx=1&sn=5d9cfbe6b8393b15c60b04ca9c2c9588": "phpstudy_2016-2018_rce 漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487499&idx=4&sn=69d6613ba3812956a0388203252d7a8f": "【漏洞预警】易思智能物流无人值守系统SQL注入", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247484847&idx=1&sn=ab525f7b54b1842379879fcb44279dfe": "记录日常挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066024&idx=4&sn=46592438737abae8701b9ba1b7160d86": "【安全圈】俄罗斯黑客利用文件拖放、删除操作触发 Windows 0day 漏洞攻击乌克兰目标", "https://mp.weixin.qq.com/s?__biz=Mzk0MzI2NzQ5MA==&mid=2247486684&idx=1&sn=b88c209774a7a72edb5ffd3d8185da12": "VSFTPD 2.3.4 笑脸漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603615&idx=3&sn=445a8a9089db3200dfb6c7fcbbe83e1b": "某系统因属性污染导致的RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486126&idx=1&sn=f95aeac1e9863e39388748be5f93f44f": "ViewState反序列化复现踩坑记录", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486146&idx=1&sn=66ebbdd861f6fdcee3f8928dc63a85be": "某全新H5购物商城系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486054&idx=1&sn=29c2f89072a7f181739354113076ea74": "「漏洞复现」金华迪加 现场大屏互动系统 mobile.do.php 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307300&idx=3&sn=c4876146dad8da82db2e3decbfc57648": "国家密码管理局发布《关键信息基础设施商用密码使用管理规定(征求意见稿)》", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247502886&idx=1&sn=17c6c12516bf55bc03a700f8a47dee89": "应用程序系统中的 SQL 注入 (CVE-2024-50766)", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488389&idx=2&sn=2bea1165ad80d38c1329593ca08c6e55": "【漏洞复现】九思OA dl存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517100&idx=1&sn=f63f4fb28dd9f98701307759287886e3": "原创 | 一文看懂服务器请求伪造漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492480&idx=2&sn=35313ec934a5220db4c34962af10b1b4": "Apache Airflow 漏洞暴露日志中的敏感数据CVE-2024-45784(7.5)", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247485439&idx=1&sn=3fd7e4cef57edca8e73104f8af38fc05": "分享SRC中后台登录处站点的漏洞挖掘技巧", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524319&idx=2&sn=7e837ef59037b7c182b95ffc6089cb20": "CVE-2024-45784:Apache Airflow 漏洞暴露日志中的敏感数据", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524319&idx=4&sn=f564c214e9b878af89b788239034bd2e": "BrazenBamboo APT利用 FortiClient 漏洞通过 DEEPDATA 窃取 VPN 凭证", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066040&idx=2&sn=cf11d094cb7fc2770df2100227dc34db": "【安全圈】安全公司曝光黑客利用 Office 已知漏洞散播 Remcos RAT 木马程序", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524319&idx=3&sn=44ca66db05ada0b23d2a24e112e09e93": "Mozilla Firefox 0-day:URL 协议处理程序泄漏 [CVE-2024-9398、CVE-2024-5690]", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492733&idx=1&sn=d41a5ddfe26f0a9dfaa02fedafee911a": "JavaSecLab 一款综合Java漏洞平台", "https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651147826&idx=1&sn=82db846319ddae363d8ac74312d12f8b": "【资料】美军对我军合成作战旅的认知总结", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066040&idx=3&sn=628c0be39463e5a5db076252eae42974": "【安全圈】物联网云平台 OvrC 曝一系列漏洞,黑客可远程执行恶意代码", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260164&idx=1&sn=dee2d2d3315798ae2ee404f11f452d9f": "如何将低危的 SSRF 盲注升级为严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489038&idx=1&sn=38d1bc56bfc8d56f1a6522b3081164f1": "记一次某SRC的漏洞挖掘过程|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247504511&idx=2&sn=02a617bd236ecf22b9f4b7d6b25c7f9a": "严重的身份验证绕过漏洞影响 400 万个网站", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492738&idx=1&sn=e1471dab8f567dbf0f4e83c999b1527b": "masscan全端口扫描==>httpx探测WEB服务==>nuclei&xray漏洞扫描 | 解放双手", "https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247509142&idx=1&sn=7a9bf881915c113f53359c76b2c10c49": "密码破解的尽头是 “哥 ,来根……”", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491444&idx=1&sn=14608727477b5a267d3f75284547dcc7": "漏洞预警 | RabbitMQ权限验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491444&idx=2&sn=871000243b3a84ba1157944f0f8fdbee": "漏洞预警 | 宏景HCM任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491444&idx=3&sn=2d1c03adab2dcae92301e0c62550c2c9": "漏洞预警 | 蓝凌OA SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247509326&idx=1&sn=570638ea0ce6a3b289d77d2247e5d57c": "BrazenBamboo APT 利用 FortiClient 零日漏洞窃取用户凭证 |China APT", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247489498&idx=1&sn=49ceb0446f31d62653ef7dd2505388c0": "[渗透工具]XXL-JOB漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247489498&idx=2&sn=433215d4f66547bb871b6d516c154124": "【必刷靶场】JavaSecLab-Java漏洞平台", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488410&idx=1&sn=00d2155ead01651c376774f463157bf3": "【未公开】某公司SRM智联云采系统inquiry存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486157&idx=1&sn=0eb5b289e5d313ff2f2ad3df252a5d5f": "某全新H5购物商城系统存在前台任意文件上传漏洞(RCE)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492765&idx=1&sn=e18518b6eba34c7864e6d957cd37ff5f": "僵尸网络利用GeoVision零日漏洞入侵已停产设备", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492765&idx=2&sn=e224f07a4c556302ed2013bcdf25a5f1": "Palo Alto Networks确认近期披露的零日漏洞正在被积极利用", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492765&idx=3&sn=01d577e47672144123dfd3940c1da101": "NSO 集团在 Meta 所有公司起诉后仍然使用 WhatsApp 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519321&idx=2&sn=dc8716f9fcab81c2277f69ca05988f6b": "工具 | 集成高危漏洞exp的实用性渗透工具", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499683&idx=1&sn=23b5001cd5e4272d908cf85c0d71263d": "一键检测 17 个蓝凌 OA 历史漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489220&idx=1&sn=e2a2c434a0097ee0fb4fb89b17b1fc15": "ArcGIS 地理信息系统 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247485612&idx=1&sn=b87343f522578525738b25e651a30307": "CVE-2016-2183 windows漏洞修复指南", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247490413&idx=1&sn=6ca7f49ea787ea876726f5c8f4be6c46": "ViewState反序列化复现踩坑记录", "https://mp.weixin.qq.com/s?__biz=Mzk0MDQzNzY5NQ==&mid=2247493031&idx=1&sn=21ad65e6ba6fa690057bf1b717d89cab": "【OSCP-Medium】adria", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484315&idx=1&sn=f4aa02a7e95ecbc0b1052e97591654d0": "【漏洞复现】英飞达医学影像存档与通信系统webservices接口存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517121&idx=1&sn=d93187139204f6dd92101f34c4cb0981": "aiohttp路径遍历漏洞分析(XCE-2024-1472)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507405&idx=1&sn=724c4f04b89e17186e10643a70168151": "速修!宝兰德BES中间件远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247534105&idx=2&sn=b8ad0236e78d31c7e936fa98d5b2f0db": "打补丁要快!0Day漏洞正在被黑客广泛利用", "https://mp.weixin.qq.com/s?__biz=MzkyNDUxNTQ2Mw==&mid=2247485556&idx=1&sn=eaa0ff13c10fad4d5418731121ca9ca2": "安全公司曝光黑客利用 Office 已知漏洞散播 Remcos RAT 木马程序", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484440&idx=1&sn=f7f42cf480466e7eb9a5349ff68579a9": "大华智慧园区综合管理平台hasSubsystem接口处存在文件上传漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s/-BgJHt-dDT-u28TM90Mz8w": "Linux 反弹shell", "https://mp.weixin.qq.com/s/1CKfcUXNkkVjEPiXFxSqHw": "vulnhub之Escalate的实践", "https://mp.weixin.qq.com/s/vzUt1EO-EnR5ywMz2PjQuQ": "通达OA前台任意用户登录漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495506&idx=1&sn=368d74c4f6e7a4f2639d84ec46bf77c7": "CNVD漏洞周报2024年第46期", "https://mp.weixin.qq.com/s?__biz=MzIwOTc4MTE4Nw==&mid=2247500623&idx=1&sn=8ed503a44a8900cf66d4714383856900": "鼎信安全 | 网络安全一周资讯", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485533&idx=1&sn=38dacc8d7d5dbb5e91a43eaccbd37140": "【漏洞预警】东胜物流软件-certupload-任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486063&idx=1&sn=87764d2ed6eef32705e262f8515eda5b": "「漏洞复现」九思OA dl.jsp 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545196&idx=1&sn=e5148186ab9f420c71d23cdca8da92f7": "Edusrc | 某证书站漏洞挖掘-绕过验证机制", "https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjU4NA==&mid=2247485564&idx=1&sn=f6351c3df7a5ddd3f073a0a0e52ff363": "2024年20 大网络钓鱼工具", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603664&idx=4&sn=ad840681e2c7bc6414397ec84b0c5741": "一款集成高危漏洞exp的实用性工具", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485716&idx=1&sn=e8a0ad47c5069485e9f60071d1e43025": "【漏洞复现】某平台-down-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MzI2NzQ5MA==&mid=2247486685&idx=1&sn=d196cb28fb4aaa74c58a8614abf54875": "通达OA前台任意用户登录漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247591507&idx=1&sn=4613e1c63793b9eee694aa3d5296ab43": "中国信通院胡坚波:以链式转型加快推进中小企业数字化赋能", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307356&idx=1&sn=42438d895a7baec5b6656688cca7431d": "Palo Alto Networks确认0Day漏洞正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247540683&idx=1&sn=986bdc0a543ecda7828e984aa6189af2": "物联网云平台 OvrC 曝一系列漏洞,黑客可远程执行恶意代码", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291855&idx=1&sn=2416adb9a530214ddc5b1cf128c156f8": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502439&idx=1&sn=89c13a88c1429733d4d3372418dda64d": "安全热点周报:俄罗斯黑客利用 Windows 零日漏洞乌克兰实体进行持续攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583194&idx=1&sn=f14c98ad2f40cba90ed7a487cb12384e": "“看雪漏洞小组”集结!组团挖洞,一起冲击华为漏洞更高奖励", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583194&idx=3&sn=045ec214a07d23eaaaf909f9ee0f186f": "WordPress安全插件“Really Simple Security”惊现严重漏洞,数百万网站面临风险", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487501&idx=1&sn=39d247b0248d6134a3936531fc0ee647": "【漏洞预警】东胜物流软件-certupload-任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521513&idx=1&sn=b60ee79ea2fbcfeaae560373faa7a2cf": "12年来最严重的 WordPress 漏洞,可大规模接管管理员权限", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521513&idx=2&sn=667b6f9c61b6f2d2077659cd4d4cdc70": "僵尸网络利用 GeoVision 0day 安装 Mirai 恶意软件", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247567418&idx=2&sn=19577506ffdc9228b4214d195638595a": "有关漏洞挖掘的一些总结", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500244&idx=2&sn=2c043ef6f5f2a73220f5442c0a23ba95": "【漏洞通告】Apache OFBiz远程代码执行漏洞(CVE-2024-47208)", "https://mp.weixin.qq.com/s?__biz=MjM5MTAwNzUzNQ==&mid=2650510921&idx=1&sn=e4934351ec2c8cb6dbc0aeca15104b40": "倒计时2天!“智效融合,安全护航”·深圳站 第七期「度安讲」 技术沙龙开放报名", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492528&idx=2&sn=12ed7293c2d58a8ff8af2eee52151e30": "【poc】Fortinet FortiManager 中0day CVE-2024-47575 的 PoC 发布", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492528&idx=3&sn=ca32f8d2a6f6e69a0d8f6cb1c3cc86ed": "【poc】TP-Link 中的 DHCP 漏洞可让攻击者远程接管路由器 - PoC 发布", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495506&idx=2&sn=4f47a0a0b8cf7c2347c48af444867c9c": "上周关注度较高的产品安全漏洞(20241111-20241117)", "https://mp.weixin.qq.com/s?__biz=Mzg4MzU3MTcwNg==&mid=2247486025&idx=1&sn=57b3564d52b3979909e7c4ce558cb424": "简单逻辑漏洞学习", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489173&idx=1&sn=38cddcc7195393081437dda1b20e81f5": "【漏洞预警】Apache OFBiz远程代码执行漏洞CVE-2024-47208", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489173&idx=2&sn=8b54bc7f5eac3e68aa9c1b50d0bfe0f0": "【漏洞预警】Apache HertzBeat < 1.6.1 消息通知模版注入漏洞CVE-2024-41151", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247632327&idx=4&sn=48bfb50af682460d968c919e508846b6": "Palo Alto Networks确认0Day漏洞正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=Mzg4MDY1MzUzNw==&mid=2247497926&idx=1&sn=26eb4132f92f9aed012a93735a6b3879": "fastjson < 1.2.66 正则表达式拒绝服务漏洞REDOS", "https://mp.weixin.qq.com/s?__biz=MzkxNTc1MzQyNw==&mid=2247488223&idx=1&sn=179f23ace36083dd36a1f5052b4c6018": "红日靶场(七)WHOAMI Penetration(一)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524352&idx=2&sn=840f79721a30962446402beb9e179f45": "Redis CVE-2024-31449:如何重现和缓解漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNTYwOTU1Mw==&mid=2650092449&idx=1&sn=ccafc6e2e300c5176b01f01455f66820": "远程代码执行风险威胁用户安全,Zoom紧急修复多个安全漏洞;颠覆传统安全架构,Zscaler创新发布新型零信任分段方案 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517127&idx=1&sn=61549ef4ef11bf847690be40502fd256": "紧急:关键 WordPress 插件漏洞暴露了超过 400 万个网站", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787425&idx=1&sn=6f9cdcc47fe2971c8f27491559a54cb3": "WordPress安全警报:400万网站面临严重认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502147&idx=1&sn=6d2c1227899943ee29dc7f1a17b1cf53": "12年来最严重的 WordPress 漏洞,可大规模接管管理员权限", "https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247487438&idx=1&sn=57b059b3e23609293878846b57fd3d2d": "网络安全认知科普(五):业务本身也可能就是漏洞,就是风险", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247485505&idx=1&sn=13147a3d93fed1ed458e589239c7dc56": "EDUSRC漏洞挖掘技巧汇总+信息收集各种姿势", "https://mp.weixin.qq.com/s?__biz=Mzg4MDYwNDc5Nw==&mid=2247486363&idx=1&sn=85f3185c117796238c0285ce1443bbea": "Water Barghest组织利用IoT设备漏洞迅速变现的策略", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491445&idx=1&sn=3b3bf547593b9c83bd8067fa2f85da0b": "漏洞预警 | Laravel环境变量注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491445&idx=2&sn=ba14df01b2e491cc6546173a72e6c2dc": "漏洞预警 | D-Link NAS设备远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491445&idx=3&sn=9a49aa4947b71d328766002dc7f115d0": "漏洞预警 | 海信智能公交企业管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247485900&idx=1&sn=4a1c0f14751627a29534c3c7f13a1354": "【未公开】百择唯供应链存在RankingGoodsList2 SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488426&idx=1&sn=8ca95cf35ca24bc8ba0c40172f5dacb5": "【0day 漏洞预警】某统一通信平台存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5OTI3MTE5MQ==&mid=2247485409&idx=1&sn=17c225d46e6c41ea0b6cf9459af70bee": "【Exp】- CVE-2024-10924 WordPress插件Really Simple Security认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502450&idx=1&sn=a1fc8665dfbb9c1703fef3c40ff25310": "【在野利用】Palo Alto Networks PAN-OS 身份认证绕过漏洞(CVE-2024-0012)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492559&idx=3&sn=bd55e8894a88011691ba63e3f45929e2": "Apache Kafka 漏洞将用户数据暴露给潜在攻击者", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492559&idx=4&sn=fc31cfbd66ffb7b1e4867fca91821f2e": "VMware 漏洞(CVE-2024-38812 和 CVE-2024-38813)被广泛利用", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5NzkwNw==&mid=2247485563&idx=1&sn=6403f9b8b5403d8a7a696a8e0e17a046": "CVE-2024-45216 Authentication bypass in Apache Solr", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247502473&idx=3&sn=fc0115150597e30c84b5c8ecb1d968ba": "Palo Alto警告,防火墙管理界面RCE漏洞被攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489264&idx=1&sn=2375259ae986fae83ca35293b7b7dc21": "易思智能物流无人值守系统 PhoneLogin SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485720&idx=1&sn=3bd82b6a8f0001ce306efba3c499f6bf": "【漏洞复现】某平台-Sc-TaskMonitoring-search-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496762&idx=1&sn=835c3bf727a87fe1aad3ea5806d22f61": "【漏洞通告】Apache OFBiz多个远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655348005&idx=1&sn=4c930728fafc77e04d44557a763f493e": "Palo Alto警告,防火墙管理界面RCE漏洞被攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491091&idx=1&sn=d0c7ebe7f059cc62b3719c8bfb99d69d": "记录日常挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247492453&idx=1&sn=4edaf9b04b271a1782f16bcf085d3e2c": "黑盒乱锤某专属SRC到0day代码分析", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484473&idx=1&sn=6a7b9607e939dfc9b833e01adfc8571f": "灵当CRM系统multipleUpload.php接口处存在文件上传漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=MzkxODI4NDg3Nw==&mid=2247484718&idx=1&sn=8502b1cb852caa8ce0e23e3847b944b6": "Cuppa CMS-任意文件读取CVE-2022-25401", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY5Nzc1OA==&mid=2247484111&idx=1&sn=1d68bc0bb4221a6de04c1b1dc818eafa": "一文读懂SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500250&idx=2&sn=23d9e2dfb43ea4293d20489c3cbccb9e": "【漏洞通告】Palo Alto Networks PAN-OS身份验证绕过漏洞(CVE-2024-0012)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499470&idx=2&sn=d9bbe418f8309153c86b2c38bdb82f17": "上周关注度较高的产品安全漏洞(20241111-20241117)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486183&idx=1&sn=b38113b15e2fada33cf26c95c9c07714": "【0day】某微信万能门店小程序系统存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MzE1MTQzNw==&mid=2247491024&idx=1&sn=00be4948643b40e24a2b0cca5c99edfc": "专题解读 | 图基础模型最新研究进展", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614168&idx=1&sn=ca9f354a96fac70ba3dfb1e6840380db": "Bypass Cloudflare实现账户接管:密码重置投毒漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793181&idx=1&sn=bcfe157d05c93fa6fc18591227dae4da": "DeepData 恶意软件框架被发现利用尚未修补的 Windows 0day漏洞、Fortinet VPN 客户端", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247488361&idx=1&sn=e560e27ced52b442b1d41ac709a876ff": "黑盒乱锤某专属SRC到0day代码分析", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489988&idx=1&sn=86427522d5972cadf175076db1b99d71": "防火墙管理界面RCE漏洞被攻击者利用,Palo Alto发出警告", "https://mp.weixin.qq.com/s?__biz=MzkxMzczNTA4MQ==&mid=2247483895&idx=1&sn=3da0b8ac30f8d6f1da127c9216651fe0": "一个很强的漏洞库", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307419&idx=1&sn=99e73003e60b59000267419ee4068108": "美国饮用水系统存在300多个漏洞,影响1.1亿人", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307419&idx=2&sn=1ccab95bd62ccdb6da0bf494f77e858d": "VMware vCenter Server远程代码执行漏洞正被黑客广泛利用", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524360&idx=2&sn=b5804cee2025c7d7c53030217988d02b": "Java(Script)Drive-By,无需0day攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066082&idx=3&sn=45c8dff3a066a1615c872523d972e645": "【安全圈】美国饮用水系统存在300多个漏洞,影响1.1亿人", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066082&idx=4&sn=c7244d3c2cda936e8c968cf0a2ade6d0": "【安全圈】VMware vCenter Server远程代码执行漏洞正被黑客广泛利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521523&idx=1&sn=286f99df03f25ebd1cb1fb497f991b21": "补丁不给力,VMware vCenter 严重RCE漏洞遭利用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583218&idx=1&sn=f5b184e32e1592dc41e78b9934e7c670": "SDC2024 议题回顾 | ExpAttack:大语言模型越狱风险持续追踪框架", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513105&idx=1&sn=db4c2c400bfc1b8ac9c2e39ffcc2d0f8": "美全国水务系统存在大量漏洞,可致使上亿人供水中断", "https://mp.weixin.qq.com/s?__biz=MzU3OTAyODk4MQ==&mid=2247490987&idx=1&sn=aa4712f028a5b83328bf471fc49512b2": "顺丰安全漏洞评分规则更新公告", "https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247515427&idx=1&sn=fb8b05f7d8f4fef283c82153244d0dca": "【漏洞复现】D-Link NAS设备 sc_mgr.cgi 未授权RCE漏洞复现", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650619819&idx=2&sn=e0594a7fbc40c3e7038dfb867b72a41b": "高危!Laravel参数注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495150&idx=1&sn=7dbdf94f68382feb66892595971d54dc": "【论文速读】| 通过良性数据镜像对大语言模型进行隐蔽越狱攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523853&idx=1&sn=09a7e2c49e4d18c988053c13b775aa17": "【漏洞通告】Palo Alto Networks PAN-OS 身份验证绕过漏洞(CVE-2024-0012)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523853&idx=2&sn=44f939a81178afad27dca90a02dfbfc6": "【漏洞通告】Apache OFBiz远程代码执行漏洞(CVE-2024-47208)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523853&idx=3&sn=fab3ee466334a0022b2df23ab6a23217": "上周关注度较高的产品安全漏洞(20241111-20241117)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490175&idx=1&sn=8a88f13080b38ee937638a6ab1a1a319": "【风险通告】Palo Alto Networks PAN-OS存在身份验证绕过漏洞(CVE-2024-0012)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507416&idx=1&sn=6eb8217321fbe1a5361675058bc55882": "已知漏洞!宝兰德最新漏洞绕过补丁黑名单,速修", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498607&idx=2&sn=2e4002dc2db4869990ee4fa3d38f1f43": "渗透测试 -- 漏洞百解", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247632338&idx=3&sn=287c0b4f0cfbdbc1d11e7f8b67787249": "美国饮用水系统存在300多个漏洞,影响1.1亿人", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247508728&idx=1&sn=50e200ae59cd278b496fa675d916a377": "微软2024年11月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489184&idx=1&sn=04ec9cf838fb1a5cf5cc4c8c93a8bf30": "【漏洞预警】Apache Kafka Clients权限管理不当漏洞可致信息泄露", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489184&idx=2&sn=6674f470ab506ed8239b4103f4d11218": "【漏洞预警】Palo Alto Networks PAN-OS Web管理界面身份验证缺陷漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489184&idx=3&sn=22ce05bbdff66ec1bf477e37c429c327": "【漏洞预警】Apache Tomcat资源控制不当漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247488403&idx=3&sn=9914510e560c5eec5ad6282278ab6577": "「人脑替代计划-6」LLM是什么?", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517233&idx=1&sn=af475bf0f3de0493fd24dcdc37463e5a": "漏洞挖掘|电子商城类漏洞挖掘案例灵感复现", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486072&idx=1&sn=7558c8a2becda935fa6b7237363f864e": "「漏洞复现」D-Link NAS设备 sc_mgr.cgi 未授权漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247515356&idx=1&sn=202c8573e3a77824edf45e865b30e051": "漏洞预警|Apache OFBiz远程代码执行漏洞(CVE-2024-47208)", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247515356&idx=2&sn=d677b50ea4f958d207cd6a3c772fe0b8": "漏洞预警|Palo Alto Networks PAN-OSS身份验证绕过等多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMzI1MDg2Mg==&mid=2649945063&idx=1&sn=e933d8e9d2243641c8f007c652caad48": "YAK 亮相2024年世界互联网大会!携手中国联通共塑网络安全新生态", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307419&idx=3&sn=9f3e2546a68551118a2b2bc765b70ab3": "关键的WordPress插件漏洞导致超400万网站暴露", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484334&idx=1&sn=bfd4f94e969ee9f8e7ec653c0feae32a": "【漏洞复现】D-Link NAS 远程命令执行漏洞(CVE-2024-3273)", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484641&idx=1&sn=b4b8e81e772df11b17f49e37240bea65": "【漏洞复现】CVE-2024-0012 Palo Alto Networks PAN-OS 身份验证绕过漏洞可RCE", "https://mp.weixin.qq.com/s?__biz=MzkyODYwODkyMA==&mid=2247484615&idx=1&sn=5f905a5474a575224e1695ec62eaa221": "从CVE 到 PoC:Windows提权漏洞全景地图", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489063&idx=1&sn=d9af33b3a2502288bbb423a8844b6fee": "一款越权漏洞检测的 Burp 插件 内置AI模块辅助分析大幅降低误报率效|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247514847&idx=2&sn=048d05a026fb7fb199b8242894eea7b9": "渗透测试 -- Python3编写常见exp", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247485914&idx=1&sn=f8cec8e3728f84d34ca028e8af00bb3b": "【未公开】百择唯供应链存在SearchOrderByParams SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491464&idx=2&sn=0d4045776a636e09c6c243c1be42ec18": "漏洞预警 | 金蝶EAS任意文件写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491464&idx=3&sn=ac7cc21a14507ada677b925d8c2f9060": "漏洞预警 | 顺景ERP管理系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492775&idx=1&sn=93a3a6836cb68f8168e9655508828d18": "漏洞利用、shell反弹 | 一键利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486175&idx=1&sn=fa6fd7a401164cbcb62a25a9ecc5f8ac": "SpringSecurity权限绕过漏洞-好玩", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499470&idx=1&sn=122371c064b4a5b04d3f673d1a172d6e&chksm=973acdaca04d44ba3d0421968e02c6666f2064e33000519c729c6423ce5c41367a1ccdcf4833&scene=58&subscene=0": "CNVD漏洞周报2024年第46期", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247485415&idx=1&sn=541476a2be6c2a7837e6dd6b2b173171": "国家级黑客利用三大 Ivanti CSA 零日漏洞展开攻击,企业需警惕!", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247509929&idx=1&sn=8e56d271814d4694e976b6fdf261784e": "24年10月必修安全漏洞清单|腾讯安全威胁情报中心", "https://mp.weixin.qq.com/s?__biz=MzU5NTEwMTMxMw==&mid=2247485379&idx=1&sn=b13eaf7a0ae232fd4ec54d414aa2f506": "【渗透工具】Swagger API 信息泄露漏洞 工具篇", "https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjU4NA==&mid=2247485578&idx=1&sn=01f25a92b61057e789d1dc89c9d0cf58": "Apache Tomcat最新高版本身份验证绕过漏洞,POC价格接近3000", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489282&idx=1&sn=db4d0926ef072190c0b575b85b7f53a2": "易思智能物流无人值守系统 ExportReport SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507413&idx=1&sn=a43f7ec33d899e45aa9b77f5005fd056": "X漏洞奖励计划收录扩大!提供本地环境再享额外20%奖金加成!", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496771&idx=1&sn=1841c42f1b7592fc316ee23a3dae8be0": "【漏洞通告】Palo Alto Networks PAN-OS多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485007&idx=1&sn=f43a33dcb7b9278a231606867d08db8e": "腾讯安全威胁情报中心推出2024年10月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487503&idx=1&sn=142cc21e2bc7576e1660e7eafa64b96d": "【漏洞预警 】SRM智联云采系统存在多处SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487503&idx=2&sn=818021e6e5c7bbfef6a642e2f7f8fd75": "【漏洞预警】东胜物流软件-certupload-任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485045&idx=1&sn=e2aef89feda4402f8f5baa7ea01684ed": "400万网站受影响!WordPress Really Simple Security 插件漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485045&idx=2&sn=a92234b4814af7a59f703f23bbed96c3": "深入解析 CVE-2024-51567:CyberPanel 命令注入漏洞及 PoC 复现", "https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247509168&idx=1&sn=f2df0d7acfbf06066aa1fb37a3da6f2b": "Linux网络流量监控工具", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793188&idx=2&sn=4a4f1209a4a33af5ff2cb6681e83d52e": "Apple 确认 macOS 系统遭受0day漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793188&idx=3&sn=985eaa11c8319087deda24624c9bda68": "VMware vCenter 和 Kemp LoadMaster 漏洞正受到积极利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491464&idx=1&sn=dddb959fc1bb2fdc915c3c0b79b376cc": "漏洞预警 | 全程云OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488439&idx=1&sn=3f053aa65cd1e0edc84e4e7baf0d87be": "【0day】资产管理运营系统(资管云)存在前台文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489994&idx=1&sn=7814bfad57686190c7bac0bc2903102f": "Apple 发布紧急更新以修补被积极利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166849&idx=3&sn=7d17b619580e9f94e8465b600d569241": "苹果确认针对 macOS 系统的零日漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307561&idx=4&sn=4bfa46d48f4a7ec2bcdeb281d95354f8": "vulnhuntr:基于大语言模型和静态代码分析的漏洞扫描与分析工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247487940&idx=1&sn=77723ded4c817fa7df978074334ee981": "紫光档案管理系统 mergeFile SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066097&idx=3&sn=0e0cc754f2cdc596b5f8419a8fa6f7a5": "【安全圈】苹果发布紧急安全更新修复WebKit引擎中的漏洞 黑客已经利用漏洞展开攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY5Nzc1OA==&mid=2247484133&idx=1&sn=52effc09cdcd03efa6380224aa30ad9c": "一文读懂SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247488664&idx=2&sn=3e7b7e7edab1dffabf0816e27d18da3b": "DataCon晚自习 | 浅谈大模型辅助漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524380&idx=3&sn=f9182149d88336b1242adda5aef422d1": "CVE-2024-20767 和 CVE-2024-21216 的补救措施:保护自己免受最近两个可在野外利用的严重漏洞的侵害", "https://mp.weixin.qq.com/s?__biz=Mzg4MDY1MzUzNw==&mid=2247497938&idx=2&sn=8d13015033c4c8514aac0c0c5375b9df": "命令执行漏洞基础", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502616&idx=1&sn=58bb44c2b1e5b68a5db14bccb1baca21": "【成功复现】D-Link NAS远程命令执行漏洞(Cookie)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664230091&idx=4&sn=263ea32ebfc468c8a503fd8a7d847988": "CNNVD | 关于Palo Alto Networks PAN-OS安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664230091&idx=5&sn=9950f25047c9a9cdb95f448751bcd9de": "CNNVD | 关于Apache OFBiz安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247522987&idx=1&sn=563d193cf4b9a511831b8769974d8266": "中间件常见漏洞总结", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583542&idx=2&sn=5be0221a6d9dac5a2b8d75ede77e159b": "苹果紧急发布安全更新,修复影响英特尔Mac的两个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247622153&idx=1&sn=bdaf7d21183b302a2b5c4dcc98808c26": "奇安信集团获2024年世界互联网大会杰出贡献奖", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484351&idx=1&sn=f9ffabcc9b25602a911778f2121e66fa": "第十三期 · 安钥®「漏洞处置标准作业程序(SOP)」征文启示", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247631812&idx=1&sn=cb58ca9f66ae638242515b34d3fee572": "一名优秀CISO的自述:是什么成就了我?", "https://mp.weixin.qq.com/s?__biz=MzkzODUzMjA1MQ==&mid=2247484575&idx=1&sn=abd69fc656d121c2d04f7988fa8a2bee": "几个常见的越权漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492658&idx=1&sn=57ec9a56c1b1cde21b51a26712d252a8": "【已复现】宝兰德BES应用服务器反序列化致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651461349&idx=1&sn=c2d1b09182648cd2ba67f4f305a63865": "CNNVD关于Palo Alto Networks PAN-OS 安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651461349&idx=2&sn=28601f77d7e3146b42cd9e063a788509": "CNNVD关于Apache OFBiz安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651461349&idx=3&sn=dd3fcba72938894feeccabe050dc7c05": "信息安全漏洞周报(2024年第47期)", "https://mp.weixin.qq.com/s?__biz=MzA3NTIyNzgwNA==&mid=2650259511&idx=1&sn=209eedf6288443cf581e203cfc45284c": "Palo Alto Networks零日防火墙漏洞是由开发人员的基本错误导致的", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500258&idx=2&sn=45c5ee1cc7cae505fcdfb13d0c6b1050": "【漏洞通告】Oracle Agile PLM Framework文件泄露漏洞(CVE-2024-21287)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500258&idx=3&sn=2a266e4509b9d0fb089ce92749c6f7ca": "【漏洞通告】Wget服务器端请求伪造漏洞(CVE-2024-10524)", "https://mp.weixin.qq.com/s?__biz=MzkxODI4NDg3Nw==&mid=2247484726&idx=1&sn=591227dcdebf57686a3a4c2f953505eb": "taocms 3.0.1 本地文件泄露漏洞(CVE-2021-44983)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492578&idx=2&sn=fa464eb54666d60dabd0a65ccbaeac63": "平板锅(Palo Alto)防火墙0day 漏洞分析及Exp", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603759&idx=2&sn=986d8ed76f6fd390e46b43c2cec2df92": "美国饮用水系统存在300多个漏洞,影响1.1亿人", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650989812&idx=1&sn=fd1211672ea7e1d7357c9909c7600faa": "【知道创宇404实验室】警惕Palo Alto PAN-OS漏洞(CVE-2024-0012 和 CVE-2024-9474)", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486083&idx=1&sn=eb8dc60a736b80cc2bcd90bc76f825b3": "一次黑盒转变白盒前台漏洞审计过程", "https://mp.weixin.qq.com/s?__biz=MzA3ODE0NDA4MA==&mid=2649400795&idx=1&sn=99b65e43e266182fd962e758b293c138": "全球数据跨境流动合作倡议", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133464&idx=2&sn=16e48bc09bde1b9e2e0b383257d60d2a": "美国国会图书馆邮件系统遭攻击,近9个月通信内容或泄露;ChatGPT沙箱环境存多个严重安全隐患,仅20%漏洞被修复 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489192&idx=1&sn=663db3924b11641b7c1e483016b43aa4": "【漏洞预警】Oracle Agile PLM框架未授权 可致敏感信息泄露CVE-2024-21287", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489192&idx=2&sn=dbb1fec7e9b1b1be32e557c7e7e93fa4": "【漏洞预警】Wget服务器端请求伪造漏洞(CVE-2024-10524)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517235&idx=1&sn=15beae174630b436d0b4b755c3b8f7df": "第105篇:方程式工具包图形界面版V0.42,更新永恒浪漫exp对Vista、Win7系统的利用", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247512533&idx=1&sn=508123790f0103c1e0b80a86546ebbd6": "网安瞭望台第 2期:零日漏洞密集爆发、2024年常见网络安全漏洞类型及分析", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247576922&idx=1&sn=936ee428e8066709dbf21f8ca640454e": "周鸿祎世界互联网大会谈中国大模型发展:应扬长避短 选择自己的道路", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486082&idx=1&sn=eb2064a0626c65f33ab73a11a0d5ae30": "「漏洞复现」ArcGIS 地理信息系统 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521533&idx=1&sn=1ab7c5da3e583e48ee67d6f50fd4d97e": "苹果紧急修复已遭利用的两个0day", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492578&idx=3&sn=a13cb4917d5870bf3ac1e32ce46bc962": "wget 存在SSRF 0day漏洞 CVE-2024-10524", "https://mp.weixin.qq.com/s?__biz=MzkxMjYxODcyNA==&mid=2247485131&idx=1&sn=9eaffa9133ef0eff7875ac3fe1fd4fc1": "事关个人,5G基带存在重大安全漏洞!黑客可直接监控手机。", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489065&idx=1&sn=a1eea859e97da404d223f838ee2c8bea": "最新Invicti-Professional-V24.11 WEB漏洞扫描器更新|近期漏洞合集更新", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498627&idx=1&sn=96c957b13032e647fdbb2e2a2db89a94": "oss存储桶遍历漏洞利用脚本(11月18日更新)", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484489&idx=1&sn=5cafab2af07393b94237c5aea17cc224": "用友畅捷通-TPlus系统FileUploadHandler.ashx接口处存在文件上传漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247485938&idx=1&sn=5f75f6c29311eff2fcba5158a4bfc5db": "【未公开】百择唯供应链存在ReadAfterSaleList SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491472&idx=1&sn=68e3d9143979d6909f6c3be8e0147446": "漏洞预警 | GitLab未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491472&idx=2&sn=e842b5299786254b299991d8fabf4824": "漏洞预警 | JeecgBoot表达式注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491472&idx=3&sn=eea1d851655a59d5074eb716aebdf4e3": "漏洞预警 | 用友YonBIP R5旗舰版任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247509402&idx=1&sn=fd513ef1bfe094d6bfc52a0238d8efe2": "Palo Alto 防火墙0day漏洞 CVE-2024-0012 和 CVE-2024-9474 检测POC&EXP", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488456&idx=2&sn=6e22a329b754d049d04588b03129884b": "【吃瓜】入门即巅峰", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502473&idx=1&sn=996d4946cf07c672aed821bfd621c228&chksm=fe79ee11c90e67073edd9159e6dc7a11bb693970335a9bdd2815ae0532da91d5bb7c8a534df9&scene=58&subscene=0": "【已复现】Palo Alto Networks PAN-OS身份认证绕过漏洞(CVE-2024-0012)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502473&idx=2&sn=e5d76f1cef13f032535065aae0924b0a&chksm=fe79ee11c90e67077b61dd29c7571b5fa2c8d1a5ac9c4dc5629276ded403c4e0495fdeba1feb&scene=58&subscene=0": "【在野利用】Apple 多个在野高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkwMjQyMDA5Nw==&mid=2247485897&idx=1&sn=0cc6ed1d8063057b53534e97ba7e7991": "玄穹——开源漏洞库平台", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486423&idx=1&sn=36562677738a2067cef9d5e659179311": "【漏洞通告】Palo Alto Networks PAN-OS 身份验证绕过漏洞(CVE-2024-0012)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486423&idx=2&sn=5363ab83755be11e1d17be94fc80db88": "【漏洞通告】Ivanti Endpoint Manager SQL注入漏洞(CVE-2024-50330)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486423&idx=3&sn=03b3193f3f3978b89e47a38c66bf3bbe": "【漏洞通告】Apache OFBiz远程代码执行漏洞(CVE-2024-47208)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486423&idx=4&sn=526b9ddff455eae074c42cb543c916b3": "【漏洞通告】Windows 任务计划程序特权提升漏洞 (CVE-2024-49039)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486423&idx=5&sn=da19e19671d3a290f1abbf650f06f6ef": "【漏洞通告】Google Chrome Serial释放重引用漏洞(CVE-2024-10827)", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499693&idx=1&sn=9c2f1ead8fecc4980715053945851041": "金蝶软件旗下产品历史漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487823&idx=1&sn=b199f8958061b41143c57569ecbb7973": "宏景HCM uploadLogo.do接口存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513122&idx=1&sn=2328bb653dc07fdeeef3cf0c73e59668": "苹果官方警告:零日漏洞攻击瞄准Mac电脑用户", "https://mp.weixin.qq.com/s?__biz=MzUxNTQxMzUxMw==&mid=2247524305&idx=1&sn=715d043e0e1a4aa038e9217fee6f6b3b": "安全通告丨网络安全漏洞通告(2024年11月)", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485728&idx=1&sn=ae7b0efb76dde69f1e883bf552e939aa": "【漏洞复现】某平台-Download-GetFile-readfile任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502647&idx=1&sn=4ea2ed367e87b0fb0578b4bc559214cc": "【成功复现】英雄联盟手游狼人被动超级加速漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496794&idx=1&sn=98d1e09af421f9b48733bef20e034c70": "【漏洞通告】Apple多个在野高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496794&idx=2&sn=2f75e539f5d1214305f1b20815000390": "【漏洞通告】Oracle Agile PLM Framework文件泄露漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486127&idx=1&sn=a9a554e0836be4997bbae01428c35ea7": "某次代码审计从0day变Nday的路程(漏洞分析)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503207&idx=1&sn=6497f0f064f7e89a8020f5e647a74b9c": "雷神众测漏洞周报2024.11.11-2024.11.17", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492779&idx=1&sn=38e8978c0c2582e26755b6f45716289f": "苹果公司解决了两个正在被活跃利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484368&idx=1&sn=49f5c63e530ff4a5360f1bde3b2f324f": "【漏洞复现】数字通云平台智慧政务cookie登录绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211159&idx=1&sn=eaa9344e08031742daa733646b4c96b4": "【深度复现】D-Link NAS设备 sc_mgr.cgi 未授权RCE漏洞(CVE-2024-10914)", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793202&idx=1&sn=6442286840d79041b5d59c24cea27af5": "Ubuntu Needrestart 软件包中发现存在十年之久的安全漏洞,可以获得Root权限", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247503892&idx=2&sn=f96cf857db7e67591108af162474c402": "网安趋势?谷歌宣布AI首次发现内存安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247529561&idx=1&sn=21097e9ac986115991718b87150558bb": "安全巨头惊爆0day漏洞危机:2023年最频繁攻击源揭秘!", "https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870121&idx=1&sn=61e16fb282d8d940147e14b24462c3f1": "TOP 1!知道创宇再获CNVD漏洞平台14星最高荣誉", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579721&idx=1&sn=971afc08efdeab4cd0d06a7f9e64bfc3": "Helldown 勒索软件利用 Zyxel 漏洞破坏企业网络", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492420&idx=1&sn=983ff5f33ddc1bf11baeca0a42b1516d": "关键的 Windows漏洞使数百万台服务器面临攻击", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486091&idx=1&sn=91833410d26dea9ad568703fcb83c398": "「漏洞复现」Altenergy电力系统控制软件 status_zigbee SQL注入漏洞复现(CVE-2024-11305)", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496794&idx=3&sn=0529c7467c6aa61ad31786c53e0b140d": "【漏洞通告】Wget服务器端请求伪造漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMjg0MjM5OQ==&mid=2247487863&idx=1&sn=a856bb4a7707eac0bcafb0d7450947c6": "几个常见的越权漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507450&idx=1&sn=baba096592ba4c2ce7f2849d12b10277": "Palo Alto Networks PAN-OS身份认证绕过+远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490002&idx=1&sn=fcfb62255fd7a622d4d4d49929ce9a97": "Ubuntu系统软件中的5个漏洞潜藏了10年才被发现", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307635&idx=2&sn=87c3bf9433bce52470c6600460f833ed": "Ubuntu系统软件中的5个漏洞潜藏了10年才被发现", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066112&idx=1&sn=00fc32fb2126236a289beba3ec9b7b29": "【安全圈】Ubuntu系统软件中的5个漏洞潜藏了10年才被发现", "https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247486093&idx=1&sn=f875b24e5431597f8279e5526d265f8d": "第105篇:方程式工具包图形界面版V0.42,更新永恒浪漫exp对Vista、Win7系统的利用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583634&idx=1&sn=c8830e31a595e1d7bc0c7c16de61a754": "惊喜开班!系统0day安全-IOT设备漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583634&idx=3&sn=53aa35b505b9bfdfb18d41e18d667703": "竟长达10年未发现?Ubuntu系统“needrestart”工具曝5个本地提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492586&idx=1&sn=f45bee7349e1db3147eb26c8843c7adf": "PoC,AnyDesk 漏洞暴露用户 IP 地址,CVE-2024-52940", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521546&idx=1&sn=deaef16f3522dccfad4051c26652ad09": "这个 root 漏洞已存在10+年之久,影响Ubuntu Linux", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247489903&idx=1&sn=15bf8bcba0aaf185a4c968af8fcd06a4": "创宇安全智脑 | D-Link ShareCenter sc_mgr.cgi 远程命令执行等81个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzAxNTYwOTU1Mw==&mid=2650092516&idx=1&sn=2f6258182135b9ae40a75b504ef2e7ee": "跨国抓捕:俄罗斯勒索软件头目被引渡至美国", "https://mp.weixin.qq.com/s?__biz=MzkyODYwODkyMA==&mid=2247484628&idx=1&sn=7adaa47dc8dce500ba919e958221bc7a": "Ubuntu 默认工具 needrestart 曝出五个严重提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247487727&idx=1&sn=ce66fae6488e73be86204199cd8fc8fa": "模糊测试:发现软件隐患和漏洞的秘密武器", "https://mp.weixin.qq.com/s?__biz=MzU1OTc2MzE2Mg==&mid=2247489131&idx=1&sn=0b8639eded86673aa72ca1f9916befad": "零时科技 || BTB 攻击事件分析", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500266&idx=2&sn=a7cda971e34b7f49ac887ba14aa975d6": "【漏洞通告】Ubuntu needrestart权限提升漏洞(CVE-2024-48990)", "https://mp.weixin.qq.com/s?__biz=MzkxODY0NjE5MA==&mid=2247484990&idx=1&sn=1608484b01b1e75343a7e04c80323eb2": "明天,咱们直播间不见不散!学习SRC业务逻辑漏洞的你,怎么能错过!!!", "https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247484025&idx=1&sn=6b51b64fa3cc038bef66def279a3d37e": "知识 | 网安圈常说的暗网是什么?", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247632372&idx=4&sn=4065e4a51577c5e4f66942495ea2535c": "苹果官方警告:零日漏洞攻击瞄准Mac电脑用户", "https://mp.weixin.qq.com/s?__biz=MzkzNzU5MDMxOA==&mid=2247484152&idx=1&sn=66b4340b9ba29175e40f1a6f00cf288c": "实战分享:对某个985大学证书站的越权漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502149&idx=1&sn=ee01e77e7d3727aaeb827ef5d41f4467": "几个常见的越权漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489201&idx=1&sn=6578dcd1cc22537528eb840b065e2d00": "【漏洞预警】Ubuntu needrestart权限提升漏洞CVE-2024-48990", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727839224&idx=1&sn=aa590911abd0b582370a5b2a7706520e": "【活动】双十一回血活动开启,单个漏洞奖励可达4万+!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521546&idx=2&sn=c7f1dbf820ea6f896c4235e2f649c13e": "Oracle 修复已遭利用的 Agile PLM 0day", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650619867&idx=1&sn=ac69c9870bae8e64b7c510f2e9422924": "获国家权威机构认可!亚信安全荣获CNVD技术组支撑单位认证", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497653&idx=1&sn=886fb9df563d731ad0b28c309d97a698": "迫切需要优先考虑移动安全", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247514876&idx=1&sn=dc8a114bf1be8a2ada9a420acfb15894": "漏洞管理工具 -- miscan(11月22日更新)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491554&idx=1&sn=dc6a072d64b137434c5be22d725e9452": "Ollama AI 框架中的严重漏洞可能导致 DoS、模型盗窃和模型中毒", "https://mp.weixin.qq.com/s?__biz=MzkzMjQ0MTk1OQ==&mid=2247484041&idx=1&sn=300cec84cfc3ed1db1d2a894eb37f925": "manOS核弹级漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484532&idx=1&sn=ed5e450b30304a3352ada6fd71b5e32d": "唯徳知识产权管理系统WSFM.asmx接口处存在任意文件上传漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496835&idx=3&sn=fa9a0186121dfa64695dfa00b19d5c63": "46套.NET系统漏洞威胁情报(11.22更新)", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247485477&idx=1&sn=74afe3ed5ffcf53ac41c650caca11a8c": "渗透测试案例 | 证书站学校漏洞挖掘(二)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491493&idx=1&sn=56900827d378769e852f6e8156d11723": "漏洞预警 | 用友U8CRM SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491493&idx=2&sn=eec065507b8e7d33941479b5993c6549": "漏洞预警 | 东胜物流软件SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492777&idx=1&sn=ef4ff5dc13310669908290adea738af0": "oss存储桶遍历漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655259678&idx=1&sn=ea20f839d02e7018fcce1cce35a79cbf": "2023年最常被利用的漏洞(文末附下载)", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486827&idx=2&sn=d13fe2d0facfb9fb05228edda6e07f55": "几个常见的越权漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488468&idx=1&sn=1d5a120fbf79f5f20c40c15928afde6b": "【未公开】安科瑞企业用电监控预警系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493600&idx=2&sn=ae16e555ab943ff32aba1b355d5b1204": "【漏洞扫描】Spring框架的漏洞扫描​", "https://mp.weixin.qq.com/s?__biz=MzAwMTg3MDQzOA==&mid=2247510755&idx=1&sn=14cf462f720d108293d240449c17235c": "Windows Kerberos严重漏洞,数百万台服务器遭攻击", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486226&idx=1&sn=5a897675064a978552c301075803bafb": "某微信万能门店小程序系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247514240&idx=1&sn=4b7f5438cd7c4199916b3120df33bb8d": "从 OSWE 视角看 Web 安全:超越常规,直击代码核心漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486144&idx=1&sn=166219654da105c33fce42c96b6bd656": "某CMS权限绕过漏洞(0Day)", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485732&idx=1&sn=611f82127aceffbb7bcf356e47631a5f": "【漏洞复现】某平台-AdjustWorkHours-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247490422&idx=1&sn=242137d8101352a7fe3a2e724a79e4e1": "【成功复现】英雄联盟手游狼人被动超级加速漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247501504&idx=2&sn=741da5d8dcc2e08936f21c432a3b1f0e": "MITRE公布最危险软件漏洞TOP25榜单", "https://mp.weixin.qq.com/s?__biz=Mzg3NTY0MjIwNg==&mid=2247484932&idx=1&sn=6ddda5c745c0669df5de46b2f6090778": "谷歌 AI Fuzz 工具 OSS-Fuzz 发现 26 个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDY3MzQyNQ==&mid=2247484674&idx=1&sn=c7061b7925b3a04237b9bcb4ec86a05f": "SD-WebUI未公开的0Day漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247531402&idx=3&sn=4c9e525c1e8f6faa6231f6fbb165f96e": "上周关注度较高的产品安全漏洞(20241111-20241117)", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484387&idx=1&sn=f887c236bdc1cfcc3e1bc2e90e4ff8e8": "【漏洞复现】九思OA dl任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655348017&idx=1&sn=ed23e17b16da97060a91c526f6607af2": "Windows Kerberos严重漏洞,数百万台服务器遭攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793215&idx=1&sn=6db9a7f8f3c64ba37acdf0c6b6d0b0ba": "与俄罗斯有关的 TAG-110 组织利用 HATVIBE 和 CHERRYSPY 瞄准亚洲和欧洲", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793215&idx=2&sn=2a8dfb1cbf0b19d2714915b126ddfeff": "谷歌人工智能模糊测试工具AI OSS-Fuzz在开源项目中发现 26 个漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NzE5MzkzNA==&mid=2650366781&idx=1&sn=c92a382681b96823fd363f0d56f48609": "兰州财经大学携手迪普科技,重塑高校Web应用安全管理体系", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247534532&idx=2&sn=a261f488c8598728930e0597a67f9231": "关键的 Windows漏洞使数百万台服务器面临攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247534532&idx=3&sn=dba8388dc8479ac9e8dd44d1d4b25f79": "苹果官方警告:零日漏洞攻击瞄准Mac电脑用户", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247534532&idx=4&sn=b4e11427bfc55900266ecb28c1dc4a23": "安全巨头惊爆0day漏洞危机:2023年最频繁攻击源揭秘!", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491493&idx=3&sn=3907edfc3af9175a4bb7dbb1c2f3cd1f": "漏洞预警 | 电信网关配置管理系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579734&idx=2&sn=08bec6e590889361f84b38ec45c91f6c": "苹果修复了在英特尔 Mac 攻击中使用的两个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxODIzNzgwMw==&mid=2654070649&idx=1&sn=7374a071aef6011b09c9d30955d225ff": "漏洞盒子特供服务:组建“白帽全明星红队”,企业攻防演练定向“星”选择", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492792&idx=1&sn=37ced8b16b6ca6eb7b9ba0f4c520478d": "十年前的本地提权漏洞影响Ubuntu的needrestart软件", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485055&idx=2&sn=e02f20581acf9d97fc394cada0cf09f0": "CVE-2024-47575 Fortinet FortiManager RCE exp(FortiJump)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496396&idx=1&sn=a2ebb375c7eea2c903770171d6399018": "一个挖掘权限类漏洞的神器", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502156&idx=1&sn=cc30c475e09a2575e9491af256657f77": "通达OA前台任意用户登录漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489210&idx=1&sn=e6a9c64d5086c776516c1156211848f8": "【漏洞预警】Spring Security大小写敏感校验鉴权绕过风险CVE-2024-38827", "https://mp.weixin.qq.com/s?__biz=MzkzNTQwNjQ4OA==&mid=2247484002&idx=1&sn=ba34798eb0896654775ddedeaae0b242": "一次JS接口到通用信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307839&idx=1&sn=df6784db9ec499ec160ae27590b75fb2": "漏洞盒子特供服务:组建“白帽全明星红队”,企业攻防演练定向“星”选择", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307839&idx=2&sn=f3ba82a2116d70290ed846695c0fd3d0": "AI自动挖洞不是梦,谷歌AI工具OSS-FASZ发现26个开源漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307839&idx=3&sn=1ac2e988e3cf81193aa1fae2f956a1d0": "麻省理工发布2024年最危险的漏洞TOP 25", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066127&idx=1&sn=54cc25bc1157b1fcde3352264a6e6737": "【安全圈】AI自动挖洞不是梦,谷歌AI工具OSS-FASZ又发现26个开源漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247521681&idx=1&sn=51efa515b14c56d1eaaf8c64eeaa48b8": "网安周讯 | 间谍利用监控系统漏洞,试图窃取我国国家秘密(十一月第4期)", "https://mp.weixin.qq.com/s?__biz=MzkwNjY1Mzc0Nw==&mid=2247486468&idx=1&sn=86051d4ce2ed3ebd7b3e40c346699628": "漏洞就是黄金", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247487950&idx=1&sn=32c9207fd0007458094dc29cbb18b191": "九思OA dl.jsp 任意文件读取漏洞复现及POC", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489336&idx=1&sn=751a6198afda40267aabb99699f930d2": "宏景eHR uploadLogo.do 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498660&idx=1&sn=2ae1b79058ee95e417df3e8431156bfb": "Nacos Derby命令执行漏洞利用脚本(11月22日更新)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066127&idx=4&sn=1c50f0f483942910d6d8ae2633bccc0b": "【安全圈】麻省理工发布2024年最危险的漏洞TOP 25", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247523053&idx=1&sn=dd5d54765d1a5481c3116c6d66a97fed": "命令执行漏洞绕过方法总结", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247551673&idx=1&sn=8abf20688cefbe86bf1f6b3c7174d82e": "“赏金猎人”自述,漏洞挖掘错误示范", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517238&idx=1&sn=fae22190772c451f5618b4e3c8d0ca5a": "Src漏洞挖掘-拼出来的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500272&idx=2&sn=ea13352d874cc569065c249b3d247830": "【漏洞通告】NVIDIA Base Command Manager身份验证缺失漏洞(CVE-2024-0138)", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247487737&idx=1&sn=4f638de3392347a0fcee5155e547abab": "躺平预告!漏洞挖掘的赚钱姿势", "https://mp.weixin.qq.com/s?__biz=MzI4ODQzMzk3MA==&mid=2247489331&idx=1&sn=300968c94c2ac2b251996282239a53c8": "美国陆军网络司令部采取措施提高网络部队战备水平", "https://mp.weixin.qq.com/s?__biz=MzU4NjY3OTAzMg==&mid=2247513955&idx=1&sn=923da021debec235889db519f754c173": "真正的高情商,是懂得换位思考", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491510&idx=2&sn=0f84fae523fa2e5f79aee11f50aae80c": "漏洞预警 | PostgreSQL代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491510&idx=3&sn=c9e45826a8f893b0ce9b8e8076a791d7": "漏洞预警 | D-Link NAS设备远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247495915&idx=1&sn=020b2f604f3c234afc5e660021041671": "ATK&CK红日靶场二,Weblogic漏洞利用,域渗透攻略", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488491&idx=1&sn=6a3cb2f9ea810a751d4367d0156e0c71": "【未公开】HertzBeat(赫兹跳动) 开源实时监控系统存在默认口令漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NTA3MTk5Ng==&mid=2247489645&idx=1&sn=dc385caabf6e354e8b3f586013cfed8e&chksm=fe76defec90157e835ae85c463b0ae6e799306276e550ac85a8dd802a1a61e56d88d976294ee&scene=58&subscene=0": "7zip 远程代码执行漏洞预警,需手动更新", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489348&idx=1&sn=57152c749e1fa98e23c06d16f56b0aca": "D-Link NAS设备 account_mgr.cgi 未授权RCE漏洞(CVE-2024-10914)", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487350&idx=1&sn=5f3311767fe864aef3c68c094f461aa3": "国外黑五安全系列证书折扣信息情报", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247485312&idx=1&sn=f3b84766e32e10f553afbde753d0b3de": "理解 Kubernetes 初始访问向量的意义 第 1 部分 – 控制平面", "https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485711&idx=2&sn=61cb6de4818db882ccd7eeb25f2e8699": "网络安全顶刊——TIFS 2024 论文清单与摘要(2)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307976&idx=2&sn=8e3bbfdc4054ea7b03a154d585876797": "FreeBuf周报 | 越来越多的国家正为黑客“松绑”;WordPress插件漏洞暴露数百万网站", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651307976&idx=4&sn=9362fa49f92401856aa73558f94629a0": "msiscan:一款针对msi文件的漏洞检测与识别工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjU2NjY5MQ==&mid=2247507863&idx=1&sn=1b1c0e424abdccbd8e79df82c9cc585c": "2024科创西安·SSC网络安全大会全议程公布", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247505413&idx=3&sn=4eba1176824ef0e726e217c9b3836c8c": "5th域安全微讯早报【20241123】282期", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603953&idx=1&sn=1c59068543e3af0da779dc17e1d431de": "Ubuntu发行版修复5个本地提权漏洞,已潜伏10年;AI自动挖洞不是梦,谷歌AI工具OSS-FASZ又发现26个开源漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603953&idx=3&sn=660716c4fb5acb0699dc9973bab536a5": "比较有意思的几个漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793228&idx=2&sn=e53354ae3aa95065b3653b45faa3f9e8": "AnyDesk 存在严重漏洞,攻击者可获知用户 IP 地址", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491510&idx=1&sn=8889365d909baddbf466c1382f618cae": "漏洞预警 | Palo Alto Networks Expedition命令注入、SQL注入和明文存储漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492627&idx=2&sn=b1c52bcb9dfa346416b2c2d7097795ac": "winzip、7z 压缩软件存在漏洞需警惕以及一条不可信的 Linux 0day 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247506234&idx=1&sn=35d8397e1d12dd97caafd000e386e08e": "全新发布!通用2.0漏洞奖励计划及第五期活动", "https://mp.weixin.qq.com/s?__biz=MzkxMTIyMjg0NQ==&mid=2247495369&idx=1&sn=2f4dca5df80b47c58fa0364fd6167d50": "发现Web API漏洞居然能赚到400w刀,看懂这本书你也可以!", "https://mp.weixin.qq.com/s?__biz=Mzg2NDg2MDIxNQ==&mid=2247485168&idx=1&sn=e2f04e624add36a9d609048e6db7267c": "某CMS权限绕过漏洞(0Day)", "https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485711&idx=4&sn=13a141bc92101e550c51705ac5abc93a": "网络安全顶刊——TIFS 2024 论文清单与摘要(4)", "https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650557639&idx=1&sn=69f571bf32068c46aa71a5ab4226af8f": "秘密监视:步行跟踪策略战术", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486829&idx=2&sn=7cf00cc43f75e4a7074ebbb9e74ff118": "中间件常见漏洞总结", "https://mp.weixin.qq.com/s?__biz=MzkzNjQwOTc4MQ==&mid=2247489857&idx=1&sn=397e54275d6e4ef14b7af11b370c9b6c": "SBSCAN Spring框架渗透,这一个工具就够了|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066187&idx=4&sn=c4be9926d771d2293619bbe2dcc12b29": "【安全圈】D-Link忽视旧款VPN路由器补丁更新,关键漏洞未修复", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517184&idx=1&sn=15c853eb8c0706dd914700d4f9767b34": "某一cms后台代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485696&idx=1&sn=d90cc63a8343e76984f47b6e6bbdda53": "CVE-2024-0012|Palo Alto Networks PAN-OS身份验证绕过漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485696&idx=2&sn=8e325ace3beff8fb6bb77abdf6aef414": "CVE-2024-52301|Laravel注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NzUyNzMzMQ==&mid=2247485420&idx=1&sn=6ced63536d257eb9a51206fdf47729f2": "MQ有什么作用?三大主流MQ产品简介", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496402&idx=1&sn=422c6ca4f7b1746667036bd4bf365772": "如何将低危的 SSRF 盲注升级为严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517242&idx=2&sn=d73884228963ae7309105e3271efd5bc": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485967&idx=1&sn=5db816f99e67288e249ffd001c782213": "Java漏洞平台 - JavaSecLab", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497668&idx=2&sn=5d070cb9d29875dc8b46f874c089b1cc": "2024年最危险的25个软件漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517193&idx=1&sn=dc920188162b0391540fa94f4df48e1f": "JeecgBoot小于3.6.0版本存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247504672&idx=3&sn=ed9021232258b0b0f82fe649895293c9": "7-Zip 文件压缩工具中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603968&idx=1&sn=f3fb57764ff573556885d19380bb807f": "2024年10月涉国内数据泄露事件汇总", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603968&idx=4&sn=b16df9e7b17203b94b8d4bb276ef6a31": "masscan全端口扫描==>httpx探测WEB服务==>nuclei&xray漏洞扫描 | 解放双手", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486831&idx=2&sn=dfa1ce1292893eeb735c75b1616a0d00": "蓝队研判技巧(一)-- 基础篇&WireShark篇", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488502&idx=1&sn=49a37de4ad390d82ad780bff943a670f": "【漏洞复现】通达OA submenu存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486119&idx=1&sn=f27289aad01150f8ee6f13c36a077d40": "「漏洞复现」爱数 AnyShare智能内容管理平台 Usrm_GetAllUsers 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486235&idx=1&sn=cc005d242a63cc3483b2e12fb4951f2a": "某短视频系统视频知识付费系统存在前台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650619094&idx=1&sn=8fb0a01132a587bf37499a93e34978b1": "安恒信息CTO刘博:三大措施护航数据跨境流动", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524448&idx=1&sn=522dbb27a7195dd88f717fdcdc6412df": "CVE-2024-8811:WinZip 缺陷允许恶意代码执行", "https://mp.weixin.qq.com/s?__biz=MzkxNTY3MTE5MA==&mid=2247485530&idx=1&sn=b84e14ab32e6680977a4cf8306e0387e": "使用未知技术发现多个 XSS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614242&idx=1&sn=e30b1710946dd50ec45296d7c2a8ecff": "通过 API 配置错误和逻辑漏洞实现账户接管", "https://mp.weixin.qq.com/s?__biz=MzU2MDE2MjU1Mw==&mid=2247485970&idx=1&sn=8448a8df8be78c94494b298d878c2e8a": "团队首个系列课程开班!系统0day安全-IOT设备漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzUyMTE0MDQ0OA==&mid=2247493842&idx=1&sn=56b5e7020601e1445bf2b6b280657435": "发现Web API漏洞居然能赚到400w刀,看懂这本书你也可以!", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247495953&idx=1&sn=ea2dfd3fc4c7933ad3e1aa98c2c541e9": "Goby2024红队版工具分享,附2024年漏洞POC下载", "https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247491674&idx=1&sn=62545629199e7669f3555330c6303e65": "威胁情报的尴尬:是个好能力,但不是个好生意!", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247490042&idx=1&sn=04e5e7e89b24ef9eb1888ccf83229af0": "2024年wordpress、d-link等相关的多个cve漏洞poc", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484717&idx=1&sn=e1d048f5109ecfba86cb97c5063b24dc": "【漏洞复现】CVE-2024-24809", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066203&idx=3&sn=98b7c0046c725ff8299a89a706c8ee43": "【安全圈】苹果解决了两个被积极利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247516991&idx=1&sn=caeac624646b0fcb5fb20a73d33bc685": "师傅们,一个超稳的程序员私活渠道!", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491521&idx=2&sn=aefd1e87e73cf6bb535e2f91d40b296f": "漏洞预警 | 安克医疗急救办公管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486833&idx=1&sn=74a9507725011aa5968303d7c1fd8d66": "SpringSecurity权限绕过漏洞-好玩", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247502670&idx=2&sn=bdbc685d6f5bb170dfe02972cd4c253b": "Windows Kerberos严重漏洞,数百万台服务器遭攻击", "https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247487727&idx=1&sn=7156e54f2ac19f75b82ed23dda677f5d": "【文末送书】发现Web API漏洞居然能赚到400w刀,看懂这本书你也可以!", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485736&idx=1&sn=114a83c2221cd4da61acf679026002b8": "【漏洞复现】某平台-cwsfiledown-DownFileBytes-任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484388&idx=1&sn=ef6fed2e7d12fc7b14b6f661f7a3390e": "【漏洞复现】明源云ERP报表 GetErpConfig.aspx存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNjY1NjI2Mg==&mid=2247487351&idx=1&sn=8e73398873f8ff68deb9f1569edbc0ba": "漏洞挖掘-小白编写人生中第一个漏洞利用脚本", "https://mp.weixin.qq.com/s?__biz=MzIzMzE2OTQyNA==&mid=2648958230&idx=1&sn=437f3c5bb26667570286aa98bf84e96f": "静水深流 | 第2届BUGPWN TSCM黑盒挑战赛 • 顺利闭幕", "https://mp.weixin.qq.com/s?__biz=MzA4NzU1Mjk4Mw==&mid=2247492091&idx=1&sn=5f68436b2b04ad659f177f8cc67ddb87": "某FE平台一键漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488519&idx=1&sn=9089dcb5fc0277a2d59afdaa0b75e81c": "【0Day】《黄药师》药业管理软件SetMedia_Picture_info存在SQL注入漏洞导致RCE", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787467&idx=1&sn=a415a569eadfb841c7db9ab18a3b9dee": "致命漏洞与暴露API:财富1000强企业面临的30000个暴露API和10万漏洞挑战", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503214&idx=1&sn=419458f95fb9a47435385dd26d072abf": "雷神众测漏洞周报2024.11.18-2024.11.24", "https://mp.weixin.qq.com/s?__biz=MzkyMTY1NDc2OA==&mid=2247487197&idx=1&sn=7d93cc6c308fb83bd7d7013fa924e5b6": "【SQL注入】用友NC process SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247488369&idx=1&sn=6cd730f5c98d9fdf6cdb6a9073c0370e": "API攻防 | Web API 安全漏洞挖掘指南!", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY5Nzc1OA==&mid=2247484135&idx=1&sn=cbb43d16d8b8a261b1b7a85fc0ebdcc8": "一文读懂CSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133534&idx=1&sn=4d8595e4bea300bb4866eb3150c9415e": "违反《网络安全法》相关规定,快手被依法处罚;警惕基于已知漏洞的链式攻击,超2000台Palo Alto防火墙或被攻陷 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524518&idx=3&sn=2fd0a6c6bfc0e72a2a2a26b4c44bc48c": "CVE-2024-11612 7z 24.07 中的无限循环拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545415&idx=1&sn=3263c9c7028760229121597d480ea8de": "某大学图书管理系统刷积分逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614256&idx=1&sn=08a44a39bc09b3418b09f2b8d5b58ce4": "研究217篇子域接管漏洞报告后的总结", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492807&idx=2&sn=3512827d10788f7e4f010e0049490225": "超过2000台Palo Alto Networks防火墙遭到黑客攻击,攻击者利用了最近才修补的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484559&idx=1&sn=cd577a9a506f9849a954661ecb56bb8b": "科荣AIO系统UtilServlet接口处存在代码执行漏【漏洞复现|附nuclei-POC】洞", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247487937&idx=1&sn=163591ce7da4e37e1e72bd1e0038cdf9": "破解命令注入漏洞:详解原理、绕过技巧与防护策略", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486128&idx=1&sn=ac548c4ae7d280103751b6bf9942e20b": "「漏洞复现」万能门店小程序管理系统 doPageGetFormList SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247517446&idx=1&sn=18ecc069c3990680cc3255f3b5a23c23": "MiSRC 年末漏洞冲刺活动来啦~", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489358&idx=1&sn=7231e758676223aad81806ee8dcf9166": "海信智能公交企业管理系统 OrgInfoMng.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNzc3OTMzNw==&mid=2247485585&idx=1&sn=f41a6231836188c432550043679f719a": "文件解析常见漏洞总结", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg1MTA5MQ==&mid=2247484499&idx=1&sn=a28feef48d1c9886d8ddce271345ab85": "Redis未授权主从复制RCE复现", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486155&idx=1&sn=1b1603ee917c845b68ffba4b8eb781ab": "2024年wordpress、d-link等相关的多个cve漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491521&idx=1&sn=368be5edbb0ac65b9c3b5406ab701311": "漏洞预警 | 九思OA任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491521&idx=3&sn=24b3cda574e362b3dbbc7af3c9b155ae": "漏洞预警 | 点企来客服系统硬编码未授权漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664230517&idx=2&sn=103a03cb82a9041a72826663501442ca": "行业 | 360发布全球首份《大模型安全漏洞报告》,曝光近40个大模型相关安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyODYwODkyMA==&mid=2247484671&idx=1&sn=cd35e6350147a8c6d15120f17e7b92b9": "漏洞赏金技巧:初学者指南(2024)#1", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308150&idx=1&sn=25041361b6aca54e30775e0d66a4fa73": "第一次听说漏洞复现也能赚钱", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485133&idx=1&sn=013e17107262c7137b40f35a47048274": "漏洞推送|智互联(深圳)科技有限公司SRM智联云采系统receiptDetail存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247577005&idx=1&sn=45569d8a6f70fa7ab394d043381adb81": "360发布全球首份《大模型安全漏洞报告》,曝光近40个大模型相关安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5MDI5Mg==&mid=2247508083&idx=1&sn=48f1c664f56d8eb5ef2212804aad2556": "360发布《大模型安全漏洞报告》,曝光近40个大模型相关安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247523110&idx=1&sn=5b2e35f317b48b868138162c94b3bdd7": "Funbox 2靶场复现", "https://mp.weixin.qq.com/s?__biz=MzkxMDU5MzY0NQ==&mid=2247484372&idx=1&sn=374fa600bcd042cb385cec46878818c0": "发现Web API漏洞居然能赚到400w刀,看懂这本书你也可以!", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458583804&idx=1&sn=318890b03d7a568f25f59d831941f5c2": "【即将开课】系统0day安全-二进制漏洞攻防(第4期)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521578&idx=1&sn=0f7082c24d8e05dca215004ae796d61e": "Fuzzing 升级:谷歌通过AI找到更多漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247551685&idx=2&sn=77d41a70b217346e4762a74c23babafb": "【免费领】网安从业必备:Web漏洞检测及修复方案大全", "https://mp.weixin.qq.com/s?__biz=MzkyMDY5OTg5OA==&mid=2247490891&idx=1&sn=f7433f293512678a138b61f93c55fdae": "发现Web API漏洞居然能赚到400w刀,看懂这本书你也可以!", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486250&idx=1&sn=8b305d21f87a1e736024abb557ee63ed": "【工具分享】Goby最新红队专版下载(1400+POC)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502478&idx=1&sn=d1a9a4086615e34a4a8201b45e7437ab": "安全热点周报:黑客利用两个零日漏洞攻破 Palo Alto Networks 的数千个防火墙", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495521&idx=1&sn=6649ccb65cd3e433867839f03da0a51a": "CNVD漏洞周报2024年第47期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495521&idx=2&sn=4069536b30f554d918f90e57ea5cc152": "上周关注度较高的产品安全漏洞(20241118-20241124)", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247486373&idx=1&sn=442fc8ebf2bf840b6ec293d62c61d6c4": "发现Web API漏洞居然能赚到400w刀,看懂这本书你也可以!", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500278&idx=2&sn=f1125d68609aab5df300a355bc040f5e": "【漏洞通告】7-Zip代码执行漏洞(CVE-2024-11477)", "https://mp.weixin.qq.com/s?__biz=MjM5MTAzNjYyMA==&mid=2650594538&idx=1&sn=3586252dfce4cb97f754b3330c526052": "深信服科技与深城交达成战略合作,共绘智慧交通新蓝图", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyMDE4OA==&mid=2247483918&idx=1&sn=f8c05c481a43f7a6f237fef034ec65cb": "国有企业采购效率提升策略与实践探索", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492648&idx=2&sn=d03f904c8980359f172c2444b3c3426d": "财富 1000 强企业中发现3万个API 暴露 和 10 万个 API 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484683&idx=1&sn=f9b5725f7b10c518772104c7027a91d9": "【漏洞分享】泛微OA漏洞 任意文件读取 OA E-Cology ln.FileDownload 任意文件读取", "https://mp.weixin.qq.com/s?__biz=MzkxODUxMzE1Ng==&mid=2247484040&idx=1&sn=f773f544e7432083f3e181e671a5a0e9": "NDSS 2025新作 | 靠谱的第三方库?VULTURE破解1-Day漏洞难题!", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489215&idx=1&sn=2751e48cc12fef96b1ec3c01e4b5231d": "【漏洞预警】7-Zip代码执行漏洞CVE-2024-11477", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517314&idx=1&sn=fc0ab6144bd8ce810365c8ba8257f554": "比较有意思的几个漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247518395&idx=1&sn=6c2bed06566ca93bc1536d78e19029a0": "漏洞挖掘|遇到APP数据加密如何解密测试", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247496018&idx=1&sn=956febb67d5ca7bf7a5fcfc7081882fc": "HTB-Chemistry靶机渗透,CVE-2024-23334系统目录遍历,导致权限提升", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490016&idx=1&sn=06f0f108f0e7392bcfc6fe22c487fc23": "IaC 和 PaC 工具中的网络安全缺陷使云平台面临新的攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308150&idx=4&sn=aa3e8e9a372353b8edcbdd2ebc74f5e3": "EmbedPayloadInPng:一款图片文件Payload嵌入工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247487959&idx=1&sn=981fb1ea9387be08c67c81aaa2c81503": "SRM智联云采系统receiptDetail SQL注入漏洞复现及POC", "https://mp.weixin.qq.com/s?__biz=MzkxODUxMzE1Ng==&mid=2247484045&idx=1&sn=824549aef0519d9de2e444832a901154": "NDSS 2025新作 | 靠谱的第三方库?VULTURE破解1-Day漏洞难题!", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517265&idx=1&sn=12f3ccf4ea4997016ef704f9c957f4c6": "JAVA代码审计-悟空crm客户管理系统fastjson漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498679&idx=1&sn=8ba88739d244d4773cd4ad10d7aa2c5f": "Spring Cloud Data Flow高危漏洞(CVE-2024-37084)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491522&idx=1&sn=753a850a133fa83a1764a999a4f9e9d0": "漏洞预警 | Apache Ofbiz表达式注入和模板注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491522&idx=3&sn=48ccdcd946e23b1b3570ee45a58afa87": "漏洞预警 | 赛普EAP企业适配管理平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655260023&idx=2&sn=47fb2b5e1ab8fd68800dc6142c1a1b0e": "大模型安全漏洞报告(2024)", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488553&idx=2&sn=c69ecd36534694ac5dc71eccfbce4476": "【1Day】北京亚控科技发展有限公司KingH5Stream系统存在逻辑缺陷漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247514932&idx=1&sn=e430e5f4c10c0abdc15e9b3a88d5bcda": "远程未授权访问漏洞(CVE-2024-23692)", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291892&idx=1&sn=16232968dc31a684908bfce05cb873a9": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496424&idx=1&sn=9edd1b8c5ee4cd0f5995cccd9e27ed60": "如何通过发现 API漏洞赚到百万美刀", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485740&idx=1&sn=70d618368ff0c6d944851ff490e15f2c": "【漏洞复现】某平台-quickReceiptDetail-mysql-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489386&idx=1&sn=3c24e2c2b38b5df8b3e850eb205aead7": "企望制造ERP系统 drawGrid.action SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650604116&idx=1&sn=136a27f092c3f30997dcb2076cd82772": "千万别点!微信群里的这种通知或为木马病毒;|苹果手机Apple ID出现异常将被锁定 当心有诈", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650604116&idx=4&sn=ceb9ab3ac68656923acac319802e4014": "oss存储桶遍历漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzUzMDQ1MTY0MQ==&mid=2247506274&idx=1&sn=ccd7afe62e4048dec6c81ca274ada35a": "某乔ERP系统存在RCE漏洞,附POC脚本!", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247485526&idx=1&sn=83c86c7622aa056c3fb05b3350da67c1": "第一次听说漏洞复现也能赚钱", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260178&idx=1&sn=098908c02bb95ced851c66a9c0c40ed6": "通过 PDF 打印功能利用SSRF访问内部数据", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247486457&idx=1&sn=0b986375dbe83c422290a4c996b1f89e": "【漏洞复现】致翔OA接口open_juese.aspx存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484389&idx=1&sn=e3cac6c2d8f4b76f14984ceda7aba4a9": "【漏洞复现】ArcGIS地理空间平台manager任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496912&idx=3&sn=d99b8b1741aab3fe4bd98179f0eebe8d": "47套.NET系统漏洞威胁情报(11.26更新)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493634&idx=1&sn=91faff1eb1edaa51d5d24af57bc275f5": "【神兵利器】Spring-Boot漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzI0OTIwMjE2NA==&mid=2247485878&idx=1&sn=41c526462222e613d6b8a46a258fc7b1": "媒资安全×漏洞马拉松,多重福利等你来!", "https://mp.weixin.qq.com/s?__biz=MzA3MTUxNzQxMQ==&mid=2453885640&idx=1&sn=3e1ceccffe2678ec0472652487d4ac43": "文件暗码,外发文件溯源的绝佳手段", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247490096&idx=2&sn=d925e859b0508219fd163edb4e9ef899": "著名压缩工具7-Zip 存在远程代码执行漏洞——CVE-2024-11477", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614283&idx=1&sn=43cf42404e86e428a63f065ac7c7d18c": "漏洞挖掘 | 绕过 Mozilla 的邮箱验证", "https://mp.weixin.qq.com/s?__biz=Mzg5NTY3NTMxMQ==&mid=2247484513&idx=1&sn=6620bd18c90e154db5afbba6371d9f05": "突破clade-3.5的AI 限制,实现POC利用", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484560&idx=1&sn=690e025ba9f4b065f60beac01efbced1": "Nacos未授权下载配置信息【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486281&idx=1&sn=e5c9ba6462797f393b09d5cf7ed0ec40": "记一次小程序渗透测试到通杀RCE(0day)", "https://mp.weixin.qq.com/s?__biz=Mzk0MzY1NDc2MA==&mid=2247484196&idx=2&sn=7908876fe839978c7098227a1c40ccf2": "如何识别注入漏洞?", "https://mp.weixin.qq.com/s?__biz=Mzg2NDc0MjUxMw==&mid=2247485999&idx=1&sn=b66589de46fcaf731909c886a644b92a": "Microsoft 11 月 CVE 漏洞预警", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492819&idx=2&sn=57c085aa5c2d43f592f7a4fd79265fcf": "恶意软件campaign利用Avast Anti-Rootkit驱动程序的漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649766163&idx=1&sn=c4a6fc892c0cda56d40ffe8e86afb2e3": "2024漏洞马拉松启动 | 白帽群雄角逐下一个冠军!", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247551698&idx=1&sn=86a6698544ff900cd850608cfa23afd8": "kernel heap exploit(三)", "https://mp.weixin.qq.com/s?__biz=MzkyODYwODkyMA==&mid=2247484677&idx=1&sn=f9c76215185fdf633008ba959541c780": "2024 漏洞赏金猎人手记:100条建议", "https://mp.weixin.qq.com/s?__biz=Mzk0ODU4MjIyNQ==&mid=2247484028&idx=1&sn=9856b8e5c7979e3376ee7dcf2e8bc56f": "【逻辑漏洞】并发漏洞——经典案例", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211186&idx=1&sn=cfd66bc5142c59bc6a545bfde59d87a3": "圣乔ERP系统 login.action Struts2远程代码执行漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486138&idx=1&sn=b6054453c30e7c173804294105f13c55": "「漏洞复现」海信智能公交企业管理系统 AdjustWorkHours.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650209204&idx=1&sn=be4c88610fe1af349e023660bf415d25": "从一条威胁告警发现隐蔽的“毒蛇”", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247529673&idx=2&sn=4be9b199d8cdefa9826eccfe333fb5fc": "360发布《大模型安全漏洞报告》,曝光近40个大模型相关安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY5Nzc1OA==&mid=2247484146&idx=1&sn=f23706c715c5c04c0c6b1426a7652919": "log4j2漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499503&idx=2&sn=2dd6b3cf1b47ac7226dad142622fa875": "CNVD漏洞周报2024年第47期", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489223&idx=1&sn=205f609c84baae1ebb2d95de24b1d1d6": "【漏洞预警】ProjectSend身份认证绕过漏洞(CVE-2024-11680)", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247513144&idx=1&sn=6a175e131cf78cf6c45b6124b96693e1": "网安瞭望台第5期 :7zip出现严重漏洞、识别网络钓鱼诈骗的方法分享", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247622787&idx=3&sn=3013db7374fa46c5082b496c870e7e7a": "网安巨头Palo Alto全球数千防火墙被攻陷:因开发低级错误造成零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487845&idx=1&sn=74f2e12a7ee52cc1c5b172b92996f7de": "用友NC process接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzU3OTAyODk4MQ==&mid=2247491032&idx=1&sn=3278fce857c70113b46fabacea552745": "2024漏洞马拉松-顺丰站", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247484817&idx=1&sn=25d5bcb234940ebd9375f2b0e4c6b875": "Sitecore 8.x - 10.x存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094118&idx=2&sn=10e10c3cc36bd2eff3732e38beb4eb93": "网安巨头Palo Alto全球数千防火墙被攻陷:因开发低级错误造成零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664230673&idx=2&sn=6b7f7b55158483f87608d00cc4d2ea5d": "360发布大模型安全警报:近40个漏洞易被利用,60美元即可投毒", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308240&idx=2&sn=e6acef1171ac52d2e1162e1539b675bf": "低成本就能给大模型投毒?360发布全球首份大模型漏洞报告", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247514955&idx=1&sn=a3cbc42a77d14a37a48849100d56e651": "漏洞及指纹库图形化工具 -- James_synthesis_tooL(11月25日更新)", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652112824&idx=2&sn=ba8da830bfc3dd407d24615dc877f83e": "IBM 修补数据虚拟化管理器、安全 SOAR 中的 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498696&idx=1&sn=9c603a5712d1a1ba5d3bde85205229f7": "远程代码执行(RCE)漏洞(CVE-2024-21534)", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485743&idx=1&sn=9652ab072c993e40c94de41663922053": "CVE-2024-52940 AnyDesk信息泄露漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502158&idx=1&sn=b7dea73e6af39dee17845a15008c708c": "【SRC】未授权访问漏洞引发的惨案.......", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490022&idx=1&sn=37f02ae85e0d9bd765b907537eb5f3ba": "RomCom 利用零日漏洞进行复杂的网络攻击 Firefox 和 Windows", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066233&idx=2&sn=778f80b7b5c35162dd41acacfbd17148": "【安全圈】慎用,知名压缩工具7-Zip存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308240&idx=1&sn=96d32c8e6fa90561c84164ed75f4dca0": "慎用,知名压缩工具7-Zip存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521595&idx=1&sn=d9644a20742d498ecf898b968d561b3f": "QNAP修复NAS、路由器软件中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458584063&idx=3&sn=5bf1818d9d0e1dff3711c115252597a1": "惊喜开班!系统0day安全-IOT设备漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNzU5MDMxOA==&mid=2247484175&idx=1&sn=429aa490070bfae233ef01e059063fc5": "Feroxbuster-高效发现隐藏路径和漏洞(详细教程)", "https://mp.weixin.qq.com/s?__biz=MzkxODI4NDg3Nw==&mid=2247484737&idx=1&sn=7f597cca81f70fbe397aa00b2c746432": "BoidCMSv.2.0.0 后台文件上传漏洞(CVE-2023-38836)", "https://mp.weixin.qq.com/s?__biz=MzIzMjg0MjM5OQ==&mid=2247487888&idx=1&sn=8f0a8c385bc396bff3cd45c9fabe601b": "semcms存在多处漏洞(水一篇文章)", "https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247486315&idx=1&sn=ad071ba60323b8d34da7086295e30a18": "国家安全部:警惕深度伪造技术带来的安全风险", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513156&idx=1&sn=4ff7c148a1693c0de1be122e65851155": "网安巨头Palo Alto全球数千防火墙被攻陷:因开发低级错误造成零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499503&idx=3&sn=6528a919840c2d4021fa17a6d8572c60": "上周关注度较高的产品安全漏洞(20241118-20241124)", "https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247490834&idx=1&sn=eb50a16630b057d2df3d95a093a1641c": "某众测记录|细心 = or ≠ 漏洞 ?", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651129272&idx=2&sn=55ee9db36adfa0de3888d657ac768e87&chksm=80e71f08b790961eca60cedb47205df6b547a3447a094e4c3d257d73c0efd3dd917861183254&scene=58&subscene=0": "重点防范!官方最新通报一批恶意网址和高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517331&idx=1&sn=67b0bb66494eddc76b7c8c5f4a9a0a68": "几个常见的越权漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492698&idx=4&sn=67c0713461563b2da2c6432c360df08c": "无需用户交互即可利用 Firefox CVE-2024-9680 和 Windows CVE-2024-49039中的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793276&idx=1&sn=6f49f00a02c2093806a4281bbed7bcff": "俄罗斯黑客组织Romcom利用0day漏洞攻击 Firefox、Tor 用户", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247509479&idx=1&sn=fcd10e1e25906677825041d94c01d6e6": "Shiro漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491681&idx=1&sn=b6ec04cc6969427872d1425cb42e0dab": "超过 2,000 个 Palo Alto 防火墙遭到最近修补的零日漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247536753&idx=1&sn=b3ae96aa4bb51470b962b0f96714cc95": "网安众生相【四十七】网络安全一本及以上学历就业路线推荐,适用毕业一两年甲方就业的同学....", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487869&idx=1&sn=c6eec65d79d82285101ba7a80848077c": "顺景ERP GetFile接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499276&idx=1&sn=fa57cd3c739d2a56024d1a6a6da003c7": "G.O.S.S.I.P 阅读推荐 2024-11-27 又一个内核内存安全漏洞猎手", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492698&idx=2&sn=50144deca9bef5a52a097e941775f37a": "macOS 漏洞 (CVE-2023-32428)本地提权,有poc", "https://mp.weixin.qq.com/s?__biz=MzIyNzc3OTMzNw==&mid=2247485594&idx=1&sn=f07916b48ea1a7d4826a562a9f983b1b": "【工具分享】某 FE 平台一键漏洞探测工具", "https://mp.weixin.qq.com/s?__biz=MzI3NzI4OTkyNw==&mid=2247489519&idx=1&sn=b939e5dc74d7454cca83e688b2f45a4d": "【漏洞情报】快排查!开源分享功能域名遭灰黑产抢注,用作黑帽SEO", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484561&idx=1&sn=8cb121fd6b70d997bb2172fba8850978": "多款AC集中管理平台未授权漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492810&idx=1&sn=389a83e0263bfc916ef686658d7b17e3": "James_synthesis_tooL | 日常渗透测试或攻防演练中对于漏洞及指纹的积累工具", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491570&idx=2&sn=1353e926154547a4132feb4a8afb1bd0": "漏洞预警 | 懂微百择唯·供应链SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247505583&idx=1&sn=3005e31a4684af8891cef2abef768833": "美国Verizon、AT&T电信网络攻击案疑似内鬼kiberphant0m?此人声称获取了特朗普和哈里斯的通话记录", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247505583&idx=2&sn=6ea0b2ec70e958d252246bd0abf6be4e": "小米电动滑板车漏洞或致电子木马攻击:电池供电嵌入式系统上的勒索软件、跟踪、DoS和数据泄露问题研究", "https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247522279&idx=1&sn=9ffc60ebfdd7792c6353624adbf4b0ec": "2024年软件供应链安全挑战迈入新阶段!", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493697&idx=1&sn=5e927967f0126a4b20bcf610135bf63c": "【神兵利器】JAVA JMX漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488646&idx=2&sn=c2dfaf5ba31c7d478865e3dddd31b72a": "【大量存在】用友U8C ajaxgetborrowdata存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247534800&idx=3&sn=cc02fd4232b68f295133224584d8cd6f": "MITRE公布最危险软件漏洞TOP25榜单", "https://mp.weixin.qq.com/s?__biz=Mzg5NjU3NzE3OQ==&mid=2247490236&idx=1&sn=2467e77baf0e3b560ef57a7725560439": "【漏洞情报】快排查!开源分享功能域名遭灰黑产抢注,用作黑帽SEO", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502491&idx=1&sn=6bfeace574bf3ea581fbbb82cf005900&chksm=fe79ee03c90e67153a7cdca590eff3bbebfc9d7026e656bebc14779be100a7bee9b71f13927a&scene=58&subscene=0": "GitLab LFS Token 权限提升漏洞(CVE-2024-8114)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458584116&idx=2&sn=efa0909856edd8923c4e025510b5cb8f&chksm=b18c34be86fbbda8264e38c310b407ecce383c96d111d66c164454920f3f1c4ef7203e68370e&scene=58&subscene=0": "“看雪漏洞小组”集结!组团挖洞,一起冲击华为漏洞更高奖励", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521617&idx=1&sn=cc6372f588d0fbc52027797f7d23ae53&chksm=ea94a43bdde32d2d7788140cbef334c7440a1777d309ce9d91bac48e50624f4f067938c35f6f&scene=58&subscene=0": "俄黑客组织 RomCom 被指利用火狐和Windows 0day攻击用户", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521617&idx=2&sn=0e9ac32a3223e727cd6cd99460e0387e&chksm=ea94a43bdde32d2d156961ca2f3e3020fe479986f24f7b566a4252db8e0cf759e9e2b35cea13&scene=58&subscene=0": "Palo Alto 防火墙 0day 由低级开发错误引发", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066249&idx=3&sn=c16dd8113efa3f879e94a0128384f7be&chksm=f36e7d89c419f49fb3a2915184568b4a51c1bcf58da2b60b496d622047008b653b429485ab28&scene=58&subscene=0": "【安全圈】Firefox和Tor浏览器遭遇神秘0Day漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066249&idx=4&sn=df7d811b5e62d6af63575344f1f21cad&chksm=f36e7d89c419f49f075967dfff39374d77a07eeef0a4b0df50211a4fb3226a276a3c467fe120&scene=58&subscene=0": "【安全圈】CVE-2024-8114:GitLab 漏洞允许权限升级", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513163&idx=1&sn=6e7bc3db9029e161c258fba47004aa43&chksm=ebfaf36bdc8d7a7d15a39a39e960ffa596396ccd943a500db69cc2d7b085ba62612c3080ba6b&scene=58&subscene=0": "网站漏洞致用户信息长期被爬,两家保险商被罚超8100万元", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523860&idx=1&sn=6bd78d3240bebaa8b0b3669897db617d&chksm=ce461504f9319c127636bae094b3e7d3ca4eaef1b9b95e44ad7980154e6d827f30cd082466e3&scene=58&subscene=0": "【漏洞通告】GitLab 权限提升漏洞(CVE-2024-8114)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523860&idx=2&sn=60dee21e95737f07ed9a68c90e5bf180&chksm=ce461504f9319c12192c0cb88cbb3db2a8b37756b91e892f421828c33472b2a30f55d5be871d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241118-20241124)", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485748&idx=1&sn=8a6f72ab5197ccbf53c8f82555e3d192": "【漏洞复现】某平台-receiptDetail-mysql-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651461677&idx=1&sn=62fa971338a579f75e9efa7bdad3e5d7": "信息安全漏洞周报(2024年第48期)", "https://mp.weixin.qq.com/s?__biz=MzkyNjczNzgzMA==&mid=2247484294&idx=1&sn=945aa5d3f04bd25e27bf79f75bab0812": "漏洞挖掘—越权更改、删除信息", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579846&idx=1&sn=0bb37a38ab5998f595038709b86b4063": "RomCom 黑客利用 Firefox 和 Windows 零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzczNTA4MQ==&mid=2247483957&idx=1&sn=0bcd9ad9035581a34f8db5bacc018c41": "疑似0day window全版本RCE", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486164&idx=1&sn=82f20754d12c6098cffb4d09c43a3de4": "「漏洞复现」安科瑞环保用电监管云平台 GetEnterpriseInfoById SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MzU3MTcwNg==&mid=2247486141&idx=1&sn=3524ce4aeed67e0037b31c4589d2fe8f": "记一次逻辑漏洞(2)", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545492&idx=1&sn=46f8045ffe716fe86aa708ba2a0105fa": "较为丝滑的一次证书站漏洞打包", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614324&idx=1&sn=80bc2f0431733718278f14f920fb8d38": "漏洞挖掘 | 通过一个简单的注册漏洞获取任意账户访问权限", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502502&idx=1&sn=874d1d96ffd31643476939deced0fd4f": "【在野利用】ProjectSend 身份认证绕过漏洞(CVE-2024-11680)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486295&idx=1&sn=abfa87852e2e7dc8d2b0d2c9c1760f95": "某微信万能门店小程序系统存在前台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247488006&idx=1&sn=69194b9ea7c038bace29df89d53fa101": "工具分享 | nuclei管理工具+9w poc不想要嘛?", "https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651206699&idx=1&sn=b850cf1e858f00b90a717efd504988dc&chksm=bd2cd18d8a5b589baf4bc2e8229f0eef51a96cf1ffe79bcd9214278becd3684f3fa040892043&scene=58&subscene=0": "大模型应用实践(一):AI助力Code Review安全漏洞发现", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247487694&idx=2&sn=4cbf3f73698e15a3d4134fe9c293a674": "漏洞预警 | 7-Zip代码执行漏洞CVE-2024-11477", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513175&idx=1&sn=aad9a2b08d9d8d9699a7496e63f316e8": "史上最高漏洞赏金计划出炉:单个漏洞最多奖励1.1亿元", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247489930&idx=1&sn=766e34a9f96662ab6f3afea35dc2e1be": "创宇安全智脑 | 用友 NC process SQL注入等73个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870256&idx=1&sn=25f2861475ff891be653aa284cb49e32": "新书来了!《Web漏洞分析与防范实战(卷1)》正式发售", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500309&idx=3&sn=3cf382f546d45d798a5eafd69bbfc3e0": "【漏洞通告】Zabbix SQL注入漏洞(CVE-2024-42327)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247494942&idx=2&sn=1126c4b20f4c21941b695f0588b1c62c": "Firefox和Tor浏览器遭遇神秘0Day漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651134615&idx=1&sn=dcb76588fcf20926def837cfcffaa086": "构建电子政务全渠道安全防御体系 梆梆安全亮相2024网络安全创新发展大会", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247529850&idx=1&sn=4a1addfc83108525d6cf92ddb002a8f8": "Intruder推出Intel:一个免费的漏洞情报平台", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485141&idx=1&sn=0d2c58af3cb50194f0f70f2525b1beee": "漏洞推送|万能门店小程序管理系统 requestPost存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489436&idx=1&sn=7df9869adacb2d84a3cc11a313adf700": "Altenergy电力系统控制软件 status_zigbee SQL注入漏洞(CVE-2024-11305)", "https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649766179&idx=1&sn=19bc392d7501331260a85660f1d427d8": "漏洞盒子 x 汽车之家SRC | 漏洞盒子「企业SRC」新住客", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521625&idx=2&sn=8a7741ed8a419b06a972294416323328": "黑客利用 ProjectSend 严重漏洞攻击服务器", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500309&idx=2&sn=96fcae50d9147bd55ad96ab4aef729f1": "【漏洞通告】ProjectSend身份验证绕过漏洞(CVE-2024-11680)", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517346&idx=1&sn=994ffeec2fa01bbf52616e57faceed19": "Nacos2.4.3新版漏洞利用方式总结", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487882&idx=1&sn=538ceedb7a3754102f139f196c13d046": "万能门店小程序管理系统_requestPost接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506224&idx=1&sn=e83970b0c4d3942d269e688628784f1c": "必应主站www.bing.com惊现蠕虫XSS漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517394&idx=1&sn=21abc79bebba33a518c9b526fa6e2aa5": "【工具推荐】springboot打点工具,内置目前springboot所有漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMDQ4MDU2MA==&mid=2247484417&idx=1&sn=6f4cc0766411a4efe0a5ba648a80f51f": "利用gitRepo卷在Node上RCE(CVE-2024-10220)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489233&idx=1&sn=813b669371f32694d48087f9e54af5f8": "【漏洞预警】Zabbix SQL注入漏洞(CVE-2024-42327)", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650989985&idx=1&sn=a710028cf7838a01f6146e554247fd78": "新书发售抢先看:《Web漏洞分析与防范实战(卷1)》", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247622843&idx=2&sn=e58b5c466505cf5ae07a26a4eef66e53": "知名压缩软件被曝严重漏洞,谁会成为受害者?", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458584139&idx=3&sn=2da9c8566535b151f08abba973c4cbda": "惊喜开班!系统0day安全-IOT设备漏洞挖掘(第6期)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523865&idx=1&sn=a85f1659ccbd217fd246c088babf8a97": "【漏洞通告】Zabbix 服务器SQL注入漏洞(CVE-2024-42327)", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247490220&idx=2&sn=d1d013adb3a9540504c23b2930e6f846": "开源文件共享软件存在严重漏洞CVE-2024-11680,已有公开的PoC", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486870&idx=2&sn=1948479dc1ffdf886bd89765c51dcfb3": "记一次SRC利用github搜索拿下中危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247503484&idx=1&sn=e3eb5a40d0988c77c33d974008df4c8d": "构建 Spectre:用于 XSS 漏洞利用的红队工具(第 1 部分)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493702&idx=1&sn=2186fab30eaee576dbca5c54e3bf00e6": "【神兵利器】高危漏洞EXP实用性工具", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488650&idx=1&sn=3c2a69aef2c8bd73e875b717bca41cf0": "【0Day】圣乔ERP系统name*存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524738&idx=4&sn=b31c451cdd0b6f7219abff8f78b19210": "macOS 磁盘仲裁中的 TOCTOU 漏洞可通过利用符号链接进行沙箱逃逸和权限升级攻击", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485752&idx=1&sn=e28d9413e0a5ef65c14fa149dc727d7c": "【漏洞复现】某平台-statusList-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247502795&idx=2&sn=93d58992c4190f544fae0e8b5d4b8c7f": "RomCom 黑客利用 Firefox 和 Windows 零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247488190&idx=1&sn=e8350d40fdb0826b878493ba1901cbe5": "【企业数据泄露】IP欺骗攻防实战指南,打造铜墙铁壁级安全防线!", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247074&idx=1&sn=71265ed700c3e74e33cefa7595424766": "安全e刻 | 全球最大盗版IPTV网络被清剿,月入2.63亿美元", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493727&idx=1&sn=52aabdb46b51bc552492cba49750ce09": "GitLab漏洞汇总", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247485787&idx=1&sn=1f202987e42634743b29aeea66916628": "Java反序列化漏洞之JNDI注入原理及利用IDEA漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkxMTY1MTIzOA==&mid=2247484433&idx=1&sn=14e3f8fdb875a41434afc1cef578dc42": "【技术分享】关于C-Lodop打印服务文件读取漏洞修复方式", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793307&idx=3&sn=6fd4460f0136999cf427b64b71ce498a": "微软修补四个漏洞,其中一些漏洞非常严重且已被广泛利用", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247535199&idx=2&sn=d31d171442f078518d645d320b381482": "全球 | 近40个【大模型】相关安全【漏洞】曝光", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247488833&idx=1&sn=a92313f93aa23824eadb8be499d6b166": "渗透测试高频面试题分享", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484577&idx=1&sn=2cc88f0347850a9a6f074438afe107e5": "资产管理运营系统mobilefront2接口处存在前台文件上传漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496830&idx=1&sn=4550017de10cbb9463e78d91a1472b71": "【漏洞通告】ProjectSend身份验证绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496830&idx=2&sn=32feb8d3794ac11cdf54df8999ee1ce1": "【漏洞通告】Zabbix SQL注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4MjYxNTYwNA==&mid=2247487556&idx=1&sn=a2ba74fa4542943c3f58fff8acd6ca6e": "Nuclei报告图形化", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502512&idx=1&sn=6f8aba628a7b2bfe2bcf2403541b375e": "【已复现】Mozilla Firefox 释放后重用漏洞(CVE-2024-9680)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650604261&idx=4&sn=89ded4cfd4566918dd520488c54f250e": "Shiro漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg2ODE5OTM5Nw==&mid=2247486516&idx=1&sn=e9fddb6f26423f7d6a50d7d34be6dc4c": "WPS最新0day漏洞?电脑被控仅仅是一个PDF(含视频)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507478&idx=1&sn=3427d3a5f23b7973076ac0219e3c2073": "0day速修 | H3C SecCenter SMP 安全管理平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486304&idx=1&sn=8f7f768fcd81251b6ece478f82fb5172": "edusrc 某中学Swagger接口泄露未授权漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkxOTUyOTc0NQ==&mid=2247492639&idx=1&sn=443bb480a80ca6b2fa33ab02f3161461": "仍未出补丁,Windows新的PE漏洞及完整利用代码", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486173&idx=1&sn=859b8110fe566e760fc432622c66d100": "「漏洞复现」《黄药师》药业管理软件 XSDService.asmx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484429&idx=1&sn=68a1517617279baad8d107745f42fc21": "【漏洞复现】同享TXEHR V15人力管理管理平台信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247485886&idx=1&sn=9e399e37895b283dec4804d27dfb675b": "安卓app抓包总结", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492826&idx=1&sn=75938c84eb56cc7f82beb164b02c29fa": "Burpsuite存储桶配置不当漏洞检测插件", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491585&idx=1&sn=b4006957cc14a541db72088caecfbd9c": "漏洞预警 | 辰信景云终端安全管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491585&idx=2&sn=70273e2ec824ce2e0ec8669552d2534f": "漏洞预警 | 任我行协同CRM普及版SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491585&idx=3&sn=3febf83e42ab74481bebf264334e9eca": "漏洞预警 | TamronOS IPTV系统任意用户创建漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066334&idx=4&sn=11465e70e7b110f53a2339d3dae91a21": "【安全圈】俄罗斯黑客组织 Romcom 利用 0day 漏洞攻击 Firefox、Tor 用户", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787484&idx=1&sn=9c4fcdaa3a27548374d027af4bcfc38d": "POC公布:Windows驱动程序暴整数溢出漏洞可致权限提升", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489455&idx=1&sn=119190d29be2f70b8be45a609e8b45ef": "懂微百择唯·供应链 RankingGoodsList2 SQL注入致RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3NTIyNzgwNA==&mid=2650259619&idx=2&sn=e338a58a66c60964bac54483ff1b0f85": "VPN漏洞和弱凭证助长勒索软件攻击", "https://mp.weixin.qq.com/s?__biz=MzkzNTUwNzIxNA==&mid=2247484491&idx=1&sn=5b3201c62060ef45a4d7fdd941051766": "【实战小技巧系列】前端 JS 解密:一次简单高危漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500317&idx=2&sn=16fcd5426c0b54439754a9c7ddaffefa": "【漏洞通告】Zyxel ZLD防火墙路径遍历漏洞(CVE-2024-11667)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500317&idx=3&sn=0a51e2ea3a8e46f34ce745e930bc79b8": "【漏洞通告】Apache Arrow R package反序列化漏洞(CVE-2024-52338)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484291&idx=1&sn=2c88236e3448e8b5dfa525803f1f70fa": "【0day漏洞复现】广州和晖科技有限公司本草纲目首营资料审核中台系统存在认证绕过", "https://mp.weixin.qq.com/s?__biz=MjM5Njk1MDY5Ng==&mid=2247491131&idx=1&sn=e0d2e24b268d735ec0bc5039a5d98645": "Android Native内存型漏洞实例", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489445&idx=1&sn=0ff8623a90af54b023cbf870a1b7abd1": "D-Link NAS设备 sc_mgr.cgi 未授权RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491118&idx=1&sn=2a8cd53472ffeabe46dd0aa8ddcb820f": "记一次小程序渗透测试到通杀RCE(0day)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489245&idx=1&sn=3f922cee40f94bcc5d8936ebb8bd1259": "【漏洞预警】H3C SecCenter SMP未授权输入验证不当漏洞可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489245&idx=2&sn=9ba5ffd1d4f95444d590dd16f0b59623": "【漏洞预警】Apache Arrow R package反序列化漏洞(CVE-2024-52338)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489245&idx=3&sn=08443a5512e58139bc61e318ba68fd64": "【漏洞预警】Zyxel ZLD防火墙路径遍历漏洞(CVE-2024-11667)", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485150&idx=1&sn=8bcafff0d5d7cde84c06c97d2f2e1566": "漏洞推送|某信公交apply存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490040&idx=1&sn=b912e9429b195dedefa1fbfff148f631": "Microsoft 修复 AI、云和 ERP 安全漏洞;一个在主动攻击中被利用", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485971&idx=1&sn=8b767002024a7edacf192d5f42041df6": "广联达OA系统漏洞批量检测工具 - GlodonScan", "https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247515538&idx=1&sn=4a2477128ee6e1c0a01b279ecc8a5195": "【漏洞复现】安科瑞环保用电监管云平台 HomenewLogin SQL注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247523427&idx=1&sn=dd1123e0af7c000e04f67383a2af0d82": "funbox5复现", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493936&idx=1&sn=aa7e8c1beea46d10a356a837a611bf8d": "【2024漏洞马拉松】OPPO赛程正式启动,1.5倍奖励,新人额外奖励……超多奖金拿到手软!还有手机大奖等你来拿!", "https://mp.weixin.qq.com/s?__biz=MzU1MzEzMzAxMA==&mid=2247492696&idx=1&sn=de59abdfd55672b0046505484485ff41": "网络安全动态 一周速览 2024.11.23 - 2024.11.29", "https://mp.weixin.qq.com/s?__biz=Mzg4MzU3MTcwNg==&mid=2247486156&idx=1&sn=5305da7ce5dfe5dcb3b78d365016550e": "记一次逻辑漏洞(3)", "https://mp.weixin.qq.com/s?__biz=MzkzMDY1Nzc5MQ==&mid=2247483785&idx=1&sn=2a0f73e089f60fd9570e9d25f7b8d66c": "记一次20000美元的漏洞挖掘报告(HackOne)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491684&idx=1&sn=a4cd67263f4e366037fdcace8843b6c2": "Ubuntu Linux 受到“需要重启”漏洞的影响,该漏洞会导致本地提权到 root", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247514984&idx=1&sn=c57940df55bdbd6e53cb457f4b060964": "Shiro漏洞利用工具 -- ShiroEXP(11月26日更新)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521633&idx=1&sn=479bf08551e7f1c208c83e877ab89f34": "速修复!Advantech 工业WiFi 访问点中存在20个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDYwNDc5Nw==&mid=2247486425&idx=1&sn=0551e4fecc2912049578b9c78a1868c4": "俄罗斯关联RomCom组织利用零日漏洞攻击Mozilla和Windows系统", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488666&idx=1&sn=1ef6c1da4033ecf956961f030d0f643c": "【漏洞复现】九思OA getUserStatusByRole存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491603&idx=1&sn=c1efcecbe162862e28c3fe13e8e0f85d": "漏洞预警 | 东胜物流软件任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491603&idx=2&sn=ad336b228ccca5f55ebc26514bfca10b": "漏洞预警 | 任子行网络安全审计系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491603&idx=3&sn=677995c6d32ab004efcf3e5216b28147": "漏洞预警 | 西迪特Wi-Fi Web管理系统远程命令执行和登录绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502523&idx=1&sn=a831935fa92e1ff34b2ffa0bc192aeb7": "【已复现】7-Zip 代码执行漏洞(CVE-2024-11477)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247485469&idx=1&sn=3326a0c63e8b77dd3bbc660026f9d8ee": "俄国黑客组织 RomCom 利用 Firefox 和 Tor 浏览器零日漏洞,攻击欧洲和北美用户", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308588&idx=2&sn=7329e9b2eb8d07ede48fd64e561a1ec4": "FreeBuf周报 | VPN正成为企业入侵的关键路径;知名压缩工具7-Zip存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308588&idx=3&sn=507f9cfa85259269aad5b20cdc369747": "知名工业WiFi接入点被曝存在20多个漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655260600&idx=2&sn=d45fcadd0c225f99fa9553f8b67beeb0": "Windows驱动程序暴整数溢出漏洞可致权限提升", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491120&idx=1&sn=8db3b58d4bf3b995f085d9bb757a355f": "某众测记录|细心 = or ≠ 漏洞 ?", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793322&idx=3&sn=4dd79dc082182372b968a8d6151913e6": "施耐德电气、mySCADA 和 Automated Logic 产品中发现严重 ICS 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MTg2NzI5OA==&mid=2247484746&idx=1&sn=fc5e8cfb4ee4912ca505e0adde2012ea": "Docker Registry 未授权访问漏洞利用(工具+利用思路)", "https://mp.weixin.qq.com/s?__biz=Mzg3NTk4MDQ1NA==&mid=2247484786&idx=1&sn=799ffb07449f2d2ce73067e9c4f38a50": "天清汉马vpn任意文件读取【漏洞复现】", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524888&idx=1&sn=bf44332ba1a09b699dc30663a366aeb4": "地穴传说:微软 Unicode 排序规则异常导致软件漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485712&idx=1&sn=34d09311081e1ccdcc96464b3824f719": "CVE-2024-48307|JeecgBoot SQL 注入漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485712&idx=2&sn=f6b75b7ecbb1169fce7fbd70bbfbe1bb": "CVE-2024-46938|Sitecore CMS未经身份验证任意文件读取漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650604301&idx=3&sn=6203d901cebb019b098eb79083364ff8": "漏洞挖掘|遇到APP数据加密如何解密测试", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486182&idx=1&sn=cc3a52c0256ec17f34f9539fa82760b2": "「漏洞复现」昂捷CRM cwsfiledown.asmx 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247487758&idx=1&sn=982ca71dd0242d09a5ed9effb713cb7b": "cby围观同学求婚", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247485494&idx=1&sn=c9d6028a35da67abc3c0a4ae39c4383d": "CVE-2024-11477: 7Zip 中的“代码执行”漏洞 Writeup", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652112887&idx=2&sn=21e400e8cf4e6303d98403cc2af294c3": "攻击者利用Windows 11整数溢出漏洞提升权限", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491685&idx=1&sn=a907897b572d0e992a941751e26cc227": "德国起草法律保护发现安全漏洞的研究人员", "https://mp.weixin.qq.com/s?__biz=MzkyODY5ODAyOA==&mid=2247488568&idx=1&sn=b92c8b624e62d32b2387377ae2b89808": "打造高效运营引擎:揭秘IBM企业流程框架方法论的实战应用(附PPT下载)", "https://mp.weixin.qq.com/s?__biz=MzUxMjc0MTE3Mw==&mid=2247494775&idx=1&sn=663d228539b8c7d0207554d994968758": "Advantech工业级Wi-Fi接入点多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545552&idx=1&sn=b685a20e7273ec1ae2e5a2282c2e475d": "记一次接口fuzz+逻辑漏洞拿下证书站高危", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655260631&idx=1&sn=6979dd317fb046882d4563bf57e3907a": "CVE-2024-52338:Apache Arrow 存在严重安全漏洞,允许未授权任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247490911&idx=1&sn=9f1a6c7c0eae8c0864b4ad6818ed3e4d": "选择一个细分领域,成为专家,或许能发现漏洞甚至 0day 漏洞或逆向 n-day 漏洞,并撰写博客。", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485713&idx=1&sn=de263c85dbef17756b944853870cf207": "CVE-2024-42327|Zabbix SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485713&idx=2&sn=6b514f8a63ef9950e23b2b6671d555c2": "CVE-2024-11477|7-Zip代码执行漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650604309&idx=2&sn=da7af306259f84bf1d1eb30c34fe1963": "知名工业WiFi接入点被曝存在20多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247484100&idx=1&sn=bd1389cc16246729ae15e078bee53d54": "经验贴收稿分享3 | 一次XSS漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzAwOTQzMjMwOQ==&mid=2247483890&idx=1&sn=a691603b482681117b33c8e20dcc55db": "什么CNVD证书批量化挖掘 ?", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517444&idx=1&sn=0ee06e80236b7ffc5cd64df21a05d827": "CNVD通用型漏洞挖掘-cnvd证书的刷洞技巧", "https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650475531&idx=1&sn=87249b7f85681a8a8861489ecf32eabc": "秦安:刘纪鹏教授披露的这个股市不公平规则,亿万股民需怒吼叫停", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652112892&idx=2&sn=da534908bbc1b0b00bc9bae0a8fde09f": "AD证书服务漏洞使攻击者能够提权", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489204&idx=1&sn=8bf569f2824beddb053d74868d67d981": "记一次从0到1的漏洞挖掘过程 发现Accesssecret泄露实现权限接管 越权等漏洞|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247488022&idx=1&sn=67aaed483092d9231c0a1c1744d53f6e": "某通用系统0day审计过程", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486203&idx=1&sn=bb91174473f1d41934a85073804fec49": "「漏洞复现」九思OA workflowSync.getUserStatusByRole.dwr SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492888&idx=1&sn=e82e6cc24fad3f50641261e79572cc04": "一个半自动化springboot打点工具,内置目前springboot所有漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247509558&idx=1&sn=4ed77b8fbe43290b3fb889465673e9a3": "利用js挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491620&idx=1&sn=bc353ebff4eec5172710bb052bc2c31b": "漏洞预警 | PAN-OS Web管理界面身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491620&idx=2&sn=abf6ad1b88c4d7efe8ee9966fc2568de": "漏洞预警 | 海信智能公交企业管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491620&idx=3&sn=7b494bfcaffc088fe6b99d84309de032": "漏洞预警 | SRM智联云采系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488700&idx=1&sn=097193ece2c4ee45d744ff19b5883d77": "【0day】电子图书阅读平台downFile存在SQL注入漏洞", "https://mp.weixin.qq.com/s/sqwUvwdoK66SpY8CIdCxIg": "Windows 自动登录配置指南", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489464&idx=1&sn=5e9d75fc459499bee5931b854a9e6b22": "任子行网络安全审计系统 log_fw_ips_scan_jsondata SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDg2MDIxNQ==&mid=2247485181&idx=1&sn=19d894e589badfb040423b5f9dc66b0b": "一次0Day漏洞Rce审计流程", "https://mp.weixin.qq.com/s?__biz=Mzg2NjUzNzg4Ng==&mid=2247484687&idx=1&sn=6b3aebc2aa377f1ec8d89d07168de4c3": "发货100cms存在SSRF漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484430&idx=1&sn=ce83f5232dd760583f858e6ddccf7aa7": "【漏洞复现】OfficeWeb365 SaveDraw 任意文件上传getshell漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486155&idx=1&sn=853814e2de56863228049b5207d23e70": "一次0Day漏洞Rce审计流程", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY2ODE1NA==&mid=2247484884&idx=1&sn=c3d38f9f57d4e2b96d95aea5b15ddaa6": "【漏洞复现】Apache OFBiz远程代码执行漏洞(CVE-2024-45195)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493715&idx=2&sn=1babb7a848d1598f0a83a7e5df2fe4f3": "Active Directory Enumeration:RPCClient", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247487711&idx=1&sn=a4170ba803e835de42597805b12fbb0e": "又一款 all in one 综合漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg5MzMzNTUzMA==&mid=2247485567&idx=1&sn=66d20525cf0f69be1f3c6915c52fa48c": "SSP-高效 Spring 框架漏洞扫描与利用工具", "https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247487572&idx=1&sn=c515afe3ded2d5f5d763a2f8611aa1d7": "当信息安全成为廉价商品的时候,崩盘是迟早的!", "https://mp.weixin.qq.com/s?__biz=MzA3NTIyNzgwNA==&mid=2650259629&idx=1&sn=11894f840270c36fd578f81d2964d4e9": "漏洞管理挑战与自动化解决方案探讨", "https://mp.weixin.qq.com/s?__biz=Mzg3NTk4MDQ1NA==&mid=2247484811&idx=1&sn=c0e058c0906d579d8d6dd967b92666cb": "泛微E-Mobile-client_do-rce【漏洞复现】20241202", "https://mp.weixin.qq.com/s?__biz=MzkzNjM5NDU0OA==&mid=2247486203&idx=1&sn=195421b509dcbf7ba6eca59d16085fab": "一次0Day漏洞Rce审计流程", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133722&idx=1&sn=c3ac7d76f7b002486115949f7551d7b0": "Linux安全警报:首个UEFI bootkit恶意软件现身;ThinkPad笔记本曝硬件级漏洞,黑客可偷偷控制摄像头 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247490053&idx=1&sn=5f930cb292a1df708f877af3800eba4d": "从0到1掌握设备漏洞挖掘核心技术", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545580&idx=1&sn=b177bb6f876e6363c7633e53a8157dc2": "记一次网上阅卷系统漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485756&idx=1&sn=d0973175772b2f5f39a5557ff4d8e2f0": "【漏洞复现】某平台-TMScmQuote-GetFile-readfile任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3ODk3ODE2OA==&mid=2247484389&idx=1&sn=3614d5031272831703e808971f003bbc": "【福利抽奖】用网空测绘ZoomEye主动发现被黑的网站", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291900&idx=1&sn=52fb27c14d392ae7db10750c2810342f": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247505266&idx=1&sn=6ba5102dc93110ef70185d6e456fc083": "每周网安资讯 (11.26-12.2)|Containers等厂商的多款产品存在链接跟随漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521645&idx=1&sn=6b419fc6a9985c4a220c5fd4596e4d3e": "微软修复已遭活跃利用的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521645&idx=2&sn=3a85491541969226b45d2bca18f4373b": "VMware 修复 Aria Operations 中的多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247523491&idx=1&sn=4ea12a053dc17deb84ecceedaa7abd91": "API测试思路及crAPI漏洞靶场复现", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495539&idx=1&sn=b497e7a41bd73cd28d81ad392c17c499": "CNVD漏洞周报2024年第48期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495539&idx=2&sn=51a7cb6561725d8d239ea7796d4c87d0": "上周关注度较高的产品安全漏洞(20241125-20241201)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502546&idx=1&sn=e301f3d4f389baa4e9e448b7cdefb1e8": "【已复现】Zabbix SQL注入漏洞(CVE-2024-42327) 安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502546&idx=2&sn=6e953166ad2f865e994cf4dae7787b9d": "安全热点周报:黑客利用 ProjectSend 漏洞攻击暴露后门的服务器", "https://mp.weixin.qq.com/s?__biz=MzAwNDUzNDExMQ==&mid=2247485166&idx=1&sn=fc6827c1156d35634432440dd02e68b9": "Patchwork(白象)APT组织Protego远控木马攻击场景复现", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650620029&idx=2&sn=9fcc1074fb8178d2f8ac88ecafa3ad0e": "非管理员就可访问!Zabbix SQL注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNjM4ODc3OQ==&mid=2247485518&idx=1&sn=8329a25397b75dc609b57b9a8fb31448": "网络安全态势周报(11月18日-11月24日)2024年第46期", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211215&idx=1&sn=4221144f225e260ea54da682b21083d1": "时空WMS-仓储精细化管理系统两处文件上传致RCE漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247506222&idx=1&sn=9f7508db88f8d909e35a3b08038c26fa": "聚铭网络上榜安全牛《网络安全企业100强》", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486533&idx=1&sn=8d46b544b1fdddb5cbc38b18ab0f13b7": "【工具分享】I-Wanna-Get-All 主流OA漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489485&idx=1&sn=3d132022d60a074ede75bdaab2c79f6f": "海信智能公交企业管理系统 apply.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489476&idx=1&sn=fe81181a05d394083a3fca2f8405d4ca": "Palo Alto Networks PAN-OS身份认证绕过导致RCE漏洞(CVE-2024-0012)", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247518527&idx=1&sn=5b925c3749b3c132148947805f8e350e": "送!一本书带你速通YaKit", "https://mp.weixin.qq.com/s?__biz=MzkwMzQyMTg5OA==&mid=2247485262&idx=1&sn=3979397ea2306771cb63291e43514ecb": "Java 安全 | 从 Shiro 底层源码看 Shiro 漏洞 (上)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489253&idx=1&sn=94cbfc91e7da2499acfad5272df15561": "【漏洞情报】任我行管家婆订货易在线商城 UploadImgNoCheck未授权文件上传限制不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489253&idx=2&sn=5f79f460785757251736a4635fbe639a": "【漏洞情报】九思协同办公系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517473&idx=1&sn=1b1243aeb8410ce2b661e1d2b892abbe": "0day 挖到手软,403 到 getshell", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485159&idx=1&sn=abb74fde1a013ec53abb6d7c9018b01d": "漏洞推送|EnjoyRMIS_cwsfiledown存在文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484742&idx=1&sn=95c54287f548e5f8ec29e9252cf822b4": "【漏洞复现】CVE-2024-11680", "https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247503995&idx=1&sn=9ded651555248b55f70a4e36ad2b1d89": "文末抽奖福利!发现Web API漏洞居然能赚到400w刀,看懂这本书你也可以!", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651129390&idx=1&sn=81a9a6bbaa7c79665824a969c6c5535b": "微软超高危漏洞“狂躁许可”:从无回显漏洞看传统漏扫局限性", "https://mp.weixin.qq.com/s?__biz=MzkxNjU2NjY5MQ==&mid=2247508149&idx=3&sn=58f5ae285624269d9247f4248ba55ded": "苹果官方警告:零日漏洞攻击瞄准Mac电脑用户", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247489301&idx=1&sn=50d654dc3d2fb82eda35e3b17d3a63a4": "全球首份《大模型安全漏洞报告》", "https://mp.weixin.qq.com/s?__biz=Mzg2MTg2NzI5OA==&mid=2247484752&idx=1&sn=11f717a42e8b1e332a6e68aa76a479fd": "Burpsuite存储桶配置不当漏洞检测插件", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492812&idx=1&sn=9735ed97824b65fb886b0a07fe30720f": "Windows 任务计划程序漏洞 (CVE-2024-49039) 零日漏洞利用代码发布", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247485927&idx=1&sn=3a2f360161032c9065e88f6a619341e8": "游戏漏洞挖掘思路分享", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489494&idx=1&sn=270503f5a73bb72a19c28aa50be37baa": "智联云采 SRM2.0 quickReceiptDetail SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NDgxMzgxNA==&mid=2247496442&idx=1&sn=978d98c1582027cc0ee73be7f459259d": "CNVD漏洞周报2024年第48期", "https://mp.weixin.qq.com/s?__biz=Mzg3NTk4MDQ1NA==&mid=2247484813&idx=1&sn=7e2432f14450d4de504f6b13876bb8f3": "泛微E-Mobile-client_common-error命令执行【漏洞复现】", "https://mp.weixin.qq.com/s?__biz=MzA3NDE0NDUyNA==&mid=2650801813&idx=1&sn=f52a5453c3112fafbcc1027879181c32": "美创蝉联国家信息安全漏洞库(CNNVD)二级技术支撑单位!", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499505&idx=1&sn=f889cf5b6519afeef6e1e158a49ab584": "CNVD漏洞周报2024年第48期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499505&idx=2&sn=ef3fadc3bc76fc795be2bb777d46dcb3": "上周关注度较高的产品安全漏洞(20241125-20241201)", "https://mp.weixin.qq.com/s?__biz=MzkyNzQxMjQ4Ng==&mid=2247484213&idx=1&sn=5f02c5c4bdbb4522880b81fdcf4c4aba": "11w漏洞poc", "https://mp.weixin.qq.com/s?__biz=MzU5ODE2NDA3NA==&mid=2247496618&idx=1&sn=cf02fc742b1c64e4d18e54e3bdca8004": "VMware发布更新,修复墨云科技报告的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485760&idx=1&sn=fdc697067990411601ee803c76aa8e14": "【漏洞复现】某平台-Sc-Clue-count-search-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTQzNTI4Nw==&mid=2247488921&idx=1&sn=796d00590260af7c745e20f4cb082c0b": "两个影响WPS Office的任意代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308739&idx=1&sn=d35a77c0fb47a68f87a8f37d91f4bb5e": "知名开源监控系统Zabbix存在SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308739&idx=2&sn=9f511acdd37389f627c4dd8e2667b338": "新型恶意软件能利用LogoFAIL漏洞感染Linux系统", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066393&idx=1&sn=ac63bf158d1e3e33b69fbab49a5ae214": "【安全圈】知名开源监控系统Zabbix存在SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066393&idx=4&sn=b1e7b15689fa221569f9a1cad7eff071": "【安全圈】新型恶意软件能利用LogoFAIL漏洞感染Linux系统", "https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651729625&idx=1&sn=88a46004f6807392ed040391e769be25": "数据使用控制|面向五类可信数据空间建设的数据安全沙箱", "https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493372&idx=1&sn=f8ed6cc9dc514805d164f9d47277e8f5": "年末冲刺!2024漏洞马拉松『美团站』正式启动", "https://mp.weixin.qq.com/s?__biz=MzI0MTY5NDQyMw==&mid=2247525335&idx=1&sn=3c4d387336e0c4ad6298568a52661dec": "docker历史上的第一个漏洞:关于shocker的一切", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489531&idx=1&sn=b8aa79a6bb356af80069827d5d8a0075": "从零开始:K8s安全测试与漏洞挖掘全攻略 开胃K8S LAN PARTY CTF", "https://mp.weixin.qq.com/s?__biz=MzU5Mjg0NzA5Mw==&mid=2247493593&idx=1&sn=56add9a2f2a097757cc4601ea46e1c10": "国家平台认可|众智维科技获中国CNVD年度星级认定", "https://mp.weixin.qq.com/s?__biz=MzA5NDQzODQ3MQ==&mid=2648194328&idx=1&sn=a59c0ff9c783306d55f7139b98401b63": "泰晓社区推出口袋AI盘,普通PC即插即跑", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484709&idx=1&sn=b9e726441e7c55aa51751d27d441bcd3": "【复现】泛微 e-cology前台SQL注入漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485166&idx=1&sn=cf85ddc0f463107ad7165d7fd89bbed6": "漏洞推送|某空WMS-仓储精细化管理系统 SaveCrash.ashx存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585295&idx=3&sn=e84b92c130bef5ae24d71d72283bd86e": "CTF训练营-Web篇 更新: 反序列化漏洞-Phar反序列化和字符串逃逸", "https://mp.weixin.qq.com/s?__biz=MzkxMDc0MTc5Mw==&mid=2247483778&idx=1&sn=617673eea861e0f39c1b0c1f5e976558": "【免杀+钓鱼】钓鱼页面搭建+免杀捆绑拿shell", "https://mp.weixin.qq.com/s?__biz=Mzg2MDU5NjI0Mw==&mid=2247490281&idx=1&sn=d685ffad16184b8e941bb837dcc4caa2": "【12月Huo力全开】LLSRC全线漏洞2倍积分奖励!", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506250&idx=1&sn=65c3600e701ae88d87981315807f4d12": "CVE-2024-42327 Zabbix 严重漏洞POC已公开!", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515040&idx=1&sn=9a0c97b9ff7c9ac20e790864231ba0f7": "单兵漏洞测试工具 -- Yakit", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498804&idx=1&sn=7b4841d81ea301d1b204b069ffc9250b": "sign加密小程序漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489258&idx=1&sn=37b588ec3a46cd041f49cdc24390fdd6": "【漏洞预警】Dell NetWorker权限提升漏洞(CVE-2024-42422)", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712099&idx=1&sn=61a72f188755066a11d2bbfb63a06708": "searchsploit漏洞辅助利用工具", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247632675&idx=2&sn=9836ac0b7ae06ac3f5be960a95f43789": "自助彩票机成“提款机”?3人利用系统漏洞窃取220余万元", "https://mp.weixin.qq.com/s?__biz=MzAwNTg2NjYxOA==&mid=2650741919&idx=1&sn=3772fbe77afe8d68f005323e2f90c803": "荣获最佳实践案例,网易易盾发力央国企合规内控数字化", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247567953&idx=2&sn=47f141df1d0d634de4d06cf53e6c7b61": "【珍藏版】渗透测试手册,简直太赞了!", "https://mp.weixin.qq.com/s?__biz=MzkyOTUxMzk2NQ==&mid=2247485627&idx=1&sn=22b7126319128dc90cd1fb3659a2c5c8": "Windows漏洞:MS08-067远程代码执行漏洞复现及深度防御", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491636&idx=1&sn=5ae3f182c579e9eb6bcbb0cf1d1b36db": "漏洞预警 | 7-Zip整数下溢漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491636&idx=2&sn=2d7f1f2bbdc233543e7c316a9a7d4297": "漏洞预警 | 致翔OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzODMyMzQxNQ==&mid=2247484290&idx=1&sn=360be325d8ceb57a683f4156ebdd2520": "黑客武器库 | AMSI.fail完美bypass AMSI", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493740&idx=1&sn=0ca4e44056c922c451e534424089df72": "【神兵利器】Jeecg综合漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492864&idx=1&sn=c1ba496faf888e4050d43d6963f2d1d5": "发现利用LogoFAIL漏洞的BootKitty Linux UEFI启动工具包", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491122&idx=1&sn=bb9371663020caf90ea8432d73756f63": "GitLab漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502178&idx=1&sn=bd49402624ad97e1d5aac52790c107fe": "网安牛马碰见WAF如何凑出漏洞数量?(逻辑漏洞篇)", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787552&idx=1&sn=28ab5c68562d4aeadd078125fc90c915": "安全KER|作家招募火热进行中", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525251&idx=3&sn=abbd8e7be86d11ab9ebf4a932d72cff9": "Windows Server 2012 用户注意:0day 漏洞可绕过 Web 安全标志", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521662&idx=1&sn=f6345622bb66821f5bf5fcb0e222aa43&chksm=ea94a414dde32d028c675ddcd14b0de88fa05b1d2e477b937d155ee4040b22bf2be4dd0c664b&scene=58&subscene=0": "Zabbix 修复开源企业网络监控工具中严重的SQLi漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY5Nzc1OA==&mid=2247484160&idx=1&sn=768fc0310477001e491b83ee2ccdbd59": "一文学会fastjson漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247502895&idx=1&sn=f0ef4dda50f565a3c0001a2d868173ce": "知名开源监控系统Zabbix存在SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489512&idx=1&sn=2e745e5c6a4f4db81676b988999d69eb": "智联云采 SRM2.0 receiptDetail SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg1MTA5MQ==&mid=2247484544&idx=1&sn=edccc83fdc6c490a2e6fea3dca97653f": "CVE-2017-7504 JBOSS反序列化漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU1Mjk3MDY1OA==&mid=2247518877&idx=1&sn=a11ed90f8e0e77753a6ce81928e563cb": "网安牛马碰见WAF如何凑出漏洞数量?(逻辑漏洞篇)", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793364&idx=2&sn=d12bfd3862e0cd52b8c857595203e4d5": "Veeam 警告服务提供商控制台中存在严重 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491124&idx=1&sn=a0b37e5980727d2306c23e85b77a4db1": "【实战小技巧系列】前端 JS 解密:一次简单高危漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247489624&idx=1&sn=d79b623b062721f4270af7e991894bf1": "银狐黑产最新加载器利用破解版VPN为诱饵进行传播", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491636&idx=3&sn=b01fdd9d4755ed5068d97d6a493c81fb": "漏洞预警 | Eking管理易任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjU2NjY5MQ==&mid=2247508195&idx=1&sn=fb8f74f3b180a105172e67d7ff88fc52": "关保联盟2025 年团体标准预研征集通知", "https://mp.weixin.qq.com/s?__biz=MzkxNjU2NjY5MQ==&mid=2247508195&idx=3&sn=b3b1239facd94841bd2ff0bccf05da41": "VMware发布更新,修复墨云科技报告的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDcyODIzNg==&mid=2247484735&idx=1&sn=772fd5e4e3080538ee286b09acd0d073": "占省师傅:从零基础到单个漏洞1.5万元,8个月他用努力书写了自己的“封神之路”", "https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649463312&idx=1&sn=92057a4f693945a955aa89e48af8c678": "推荐 10 个漏洞管理工具,漏洞猎手必备!", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580067&idx=2&sn=d10b2e801f0d756e658e21558ddff8d7": "新型漏洞攻击利用服务器进行恶意更新", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247490461&idx=2&sn=08cc776019baf385a479ee02ed9635ae": "Zabbix SQL 注入 CVE-2024-42327 POC已公开", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133796&idx=1&sn=006e621bf25cb8e231717afc6980c998": "四大行业协会同日发布安全提示声明:审慎采购美国芯片;Safari浏览器零日漏洞或已遭利用,多个Apple应用平台被波及 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502675&idx=1&sn=9da987c093db694ef04ea7eeb72e4bd8": "【成功复现】JeecgBoot SQL注入漏洞(CVE-2024-48307)", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485764&idx=1&sn=ed5c5f388466a3044d490276e0d4e911": "【漏洞复现】某平台-tag-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247632689&idx=3&sn=3c9e08e5af95f26a73913ce6e7ded2bc": "微软驱动程序关键漏洞已被APT组织利用", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486221&idx=1&sn=8ed854d241c149fe530ee0e4f313d861": "「漏洞复现」同享人力资源管理系统-TXEHR V15 ActiveXConnector 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490059&idx=1&sn=815a095a3f15acb7fa90d072628c460e": "Veeam 针对服务提供商控制台中的严重 RCE 漏洞发布补丁", "https://mp.weixin.qq.com/s?__biz=MzU1NDU1NTI5Nw==&mid=2247488156&idx=1&sn=1d8d9f43ad59603307d7e916df2ae109": "提价配活动!“严重漏洞”单价万元以上,“中低危”1.5倍起步", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651461963&idx=1&sn=203cd41e8d0df5d658325df01da13a8a": "信息安全漏洞月报(2024年11月)", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651461963&idx=2&sn=477e8872c1f04b2e609013941a980248": "信息安全漏洞周报(2024年第49期)", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494202&idx=1&sn=07df2e9165411c51b79242aa35a06423": "提价配活动!“严重漏洞”单价万元以上,“中低危”1.5倍起步", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650277174&idx=1&sn=1c09acfc7f34b77405224cca88db209c": "盛邦安全获CNVD满星评价,专业实力再获权威认可", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308802&idx=1&sn=ed99bbd47f1003dc1db38fa05309efca": "微软驱动程序关键漏洞已被APT组织利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308802&idx=3&sn=b5b1c2eefdb347a23f0346c009022f75": "思科安全设备ASA十年老漏洞正在被利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066407&idx=3&sn=26ea707878614e9c3a2395f4334a3b4c": "【安全圈】思科安全设备ASA十年老漏洞正在被利用", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247513696&idx=1&sn=7c88b6b634b4ac1e28b987f2a9615627": "网安瞭望台第9期:0day 情报,OAuth 2.0授权流程学习", "https://mp.weixin.qq.com/s?__biz=MzUzNjg1OTY3Mg==&mid=2247491707&idx=1&sn=469de37341e0040e4e66b452207e3211": "华顺信安获评NVDB漏洞库“技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521684&idx=1&sn=b5ba5835dc8937327b3ded698979f0f2": "Veeam 提醒注意VSPC中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521684&idx=2&sn=d7717056b8823ba4a6de5202613f9d39": "思科证实已存在10年的ASA产品漏洞正遭利用", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247577400&idx=1&sn=87074d2775537d441ac7810f9fe11967": "最高级!360获评NVDB通用网络产品安全漏洞专业库“三星级技术支撑单位”称号", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489536&idx=1&sn=44605bb9e4f29ccc3c9ffa22b1b13513": "从零开始:K8s安全测试与漏洞挖掘全攻略二", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247623073&idx=1&sn=3f349e63c358eb0d851df2697940fb8d": "奇安信获评工信部NVDB漏洞治理合作“三星级技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484361&idx=1&sn=2fddbed9dcf2ab77c9e5f6c846dce7b6": "第十五期 · 安钥®「漏洞处置标准作业程序(SOP)」征文启示", "https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247513490&idx=1&sn=6b47c5db8eec9cc0454514032835df17": "开源网安受邀出席2024四川网信企业家发展年会,展示网信安全领域优秀解决方案", "https://mp.weixin.qq.com/s?__biz=Mzk0MTUxNzAxMg==&mid=2247484141&idx=1&sn=ab52db7afb078dc0594ae666b550a7e6": "用友NC workflowService SQL注入1day代码分析", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500336&idx=2&sn=af8ed86d64b88dd9cf96ca2ee1644938": "【漏洞通告】Progress WhatsUp Gold远程代码执行漏洞(CVE-2024-8785)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500336&idx=3&sn=ed879b95117db59435069bc0690d8367": "【漏洞通告】Veeam Service Provider Console远程代码执行漏洞(CVE-2024-42448)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489265&idx=1&sn=bfa7c936f79c9a65dfda98c9b44c5c6c": "【漏洞预警】ProFTPD权限管理不当漏洞可导致权限提升", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247501960&idx=1&sn=b1a874b5cd7e3c9c5fa8df96481612cc": "360漏洞云情报月度合集-2024年11月期", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247487830&idx=1&sn=c73070283e1b24b768e04165b08c1289": "Java 反序列化之 XStream 反序列化", "https://mp.weixin.qq.com/s?__biz=Mzg4MTA2MTc4MA==&mid=2247493550&idx=1&sn=c510562442bf86723a5b2ac1107e4be5": "CSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NDYzNjY0Mg==&mid=2247500706&idx=1&sn=29b5e12ad6a0d9d037b53d2fda911c25": "实力攀升丨云天安全荣登第十二版《网络安全企业100强》第37名", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515057&idx=1&sn=3438bafbf1ea31482cff9d6f0be0619a": "WordPress Query Console漏洞EXP(CVE-2024-50498)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487930&idx=1&sn=589b3837a2dc8ff72e861b99f6947f5d": "Zabbix api_jsonrpc.php接口存在SQL注入漏洞CVE-2024-42327 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486207&idx=1&sn=0a038edf2f8010249ccb82461ef389dd": "你名下关联了多少账号?速查!", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247520783&idx=1&sn=e6d18857c2b21d1bc8b80636051ff403": "钓鱼网页散播银狐木马,远控后门威胁终端安全", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484756&idx=1&sn=752d76f74d42ba7f8a4a10a54383a15d": "【漏洞复现】CVE-2024-9935", "https://mp.weixin.qq.com/s?__biz=Mzg3NzE4NzgzMA==&mid=2247484964&idx=1&sn=0e8a1331b6b922f07501f66fd83c91af": "大模型的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899701&idx=1&sn=656efce49817921565c19e3107237f5a": "微软修复 AI、云计算和 ERP 安全漏洞,其中一个已被用于攻击", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491639&idx=1&sn=39e40ca6d804352e6d20235db2217c6f": "漏洞预警 | GitLab权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491639&idx=2&sn=ef0f15d92963fe62bd06df07429f9bce": "漏洞预警 | 用友NC SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247509613&idx=1&sn=3d46d512c0ea527fdba9869e770416e8": "移动安全框架 (MobSF) 存在存储型XSS漏洞 | CVE-2024-53999", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486893&idx=1&sn=4910174c4a8925e18aae62644f0d7dec": "API安全漏洞靶场crapi漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486893&idx=2&sn=191f261307362506181be108372096f1": "网安牛马碰见WAF如何凑出漏洞数量?(逻辑漏洞篇)", "https://mp.weixin.qq.com/s?__biz=MzkyODY5ODAyOA==&mid=2247488732&idx=1&sn=1cb8ad2c108f085ca1907e59c5d42bb1": "大模型安全漏洞:AI时代的“隐形炸弹”(附下载)", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247505811&idx=3&sn=4427c170e490db198897f9762069430b": "5th域安全微讯早报【20241205】292期", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492872&idx=1&sn=63eff1dd884f77fb706066595cc12e75": "思科ASA漏洞CVE-2014-2120当前正在被利用攻击", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488753&idx=1&sn=bfd5495957e2ee2a2129a1c2f5a66d85": "【漏洞复现】Wordpress ElementorPageBuilder插件存在文件读取漏洞(CVE-2024-9935)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502561&idx=1&sn=6b0222e9c2cb7f15486d885d1137313b&chksm=fe79ee79c90e676fc7cb50bebe31bafe77c5a1ee4af702a39234ee5555741d09674e90ac0d6b&scene=58&subscene=0": "ProFTPD 权限提升漏洞(CVE-2024-48651)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503221&idx=1&sn=d9fadb7bf0f6c6c6a20cedd0746be700&chksm=f2585f06c52fd61017d9efc986d383f93a607def83f0413aa7393d8ee84c3d98ed977910f806&scene=58&subscene=0": "雷神众测漏洞周报2024.11.25-2024.12.01", "https://mp.weixin.qq.com/s?__biz=MzIxMDYyNTk3Nw==&mid=2247515004&idx=1&sn=49ef9432fd64ba81064c5af61066efee": "CVE-2024-31317 复现", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492849&idx=1&sn=b99b718c887d1d4b4b491a4e01253dc0": "Lorex 2K 安全摄像头存在五个漏洞 可让黑客完全控制,已有可用 PoC", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492849&idx=3&sn=a1317c6f0ad8fd60b6511f297c6cde4a": "Lineaje 报告显示开源软件漏洞增多", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492849&idx=4&sn=a3441c1ca8c3aba877ceebd7454b594c": "Zabbix 漏洞CVE-2024-42327 (CVSS 9.9)的 PoC 发布", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492849&idx=5&sn=9246d119bb38bf9a5a65e7c6332589f6": "暗网犯罪份子常用通讯软件 uTox 被曝 0day", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485768&idx=1&sn=c2428c06ecb9465e92c2e2479df88bbf": "【漏洞复现】某平台-webservice-GetUDEFStreamID-delay-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247506571&idx=1&sn=f68e2a8f5a1ffa13ad6b1ba4d476e0a6": "通知 | 事件型漏洞收录范围调整", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484468&idx=1&sn=034d450a0362a5ea3ced5e18dd1f68eb": "【漏洞复现】金华迪加现场大屏系统存在任意文件上传getshell漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491689&idx=1&sn=7fc67fbf122f113cf401c2a5fc38dcd8": "Oracle 警告 Agile PLM 文件泄露漏洞可能被积极利用", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655348118&idx=1&sn=75c1156ae2e457423eda64f3d7fba120": "思科10年老漏洞,影响ASA软件WebVPN登录页面", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793379&idx=3&sn=62ee6dd06f47c5b1777c48cd0a47a9fa": "CISA 警告 Zyxel 防火墙漏洞可能被利用进行攻击", "https://mp.weixin.qq.com/s?__biz=MzI4ODQzMzk3MA==&mid=2247489408&idx=1&sn=6883413f41c3e0c125dc9096a281e90a": "美英加澳新在堪培拉联合开展“网络哨兵”战术演习", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484700&idx=1&sn=142480b37f5b1b6ccc6e05ab5f9eb651": "【漏洞分享】通达 OA getdata RCE 通达OA 命令执行漏洞 通杀漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580078&idx=1&sn=9a9522c0b349583b66c4c0d1f21b1978": "网络钓鱼电子邮件越来越多地使用 SVG 附件来逃避检测", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247487695&idx=1&sn=65d7e7419f8d11a5cd05a191525939d6": "9个超级实用BurpSuite插件,SRC漏洞挖掘利器打包推荐", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492849&idx=8&sn=9dca4a8bd9aee191eb10cc4a313771b5": "Veeam 备份和复制漏洞曝光:高危漏洞使数据面临风险", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491639&idx=3&sn=49bb61d194288d81af219d52581e49eb": "漏洞预警 | 安科瑞环保用电监管云平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4Njg3MDk5Ng==&mid=2247486764&idx=1&sn=a55fcbfb3164c8aba676e4571543cab6": "来抖音!小瘦带你集齐库里南碎片!", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308892&idx=1&sn=5a199edd9b8c9141ea0f237cee8292b8": "单洞奖金1万刀,我挖海外漏洞的第3年", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651308892&idx=3&sn=a61ff7db311ac4f64fb8eb5cdc6bbd66": "谷歌浏览器类型混淆漏洞让攻击者能够执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066421&idx=1&sn=8b5178681a68125be7487364041e0e92": "【安全圈】Crypto.com 与 HackerOne 一起推出 200 万美元的漏洞赏金计划", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066421&idx=2&sn=c856137ec845bc74a8a86abc23c1eb69": "【安全圈】立即修复,微软驱动程序关键漏洞已被APT组织利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066421&idx=3&sn=28c802936604146904c583d74c14846f": "【安全圈】谷歌浏览器类型混淆漏洞让攻击者能够执行远程代码", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247489958&idx=1&sn=c2ffa969e3dc9c3e2498efa58fbae82a": "单洞奖金1万刀,我挖海外漏洞的第3年", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650849758&idx=1&sn=553ea868757eb4e5d8a904185df91d80": "渤海证券基于互联网环境的漏洞主动防护方案探索与实践", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489539&idx=1&sn=69e2563458072584247038ace3c47897": "大模型的反序列化导致的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525328&idx=2&sn=9359464472ac9ce0e09e7e04e80d874f": "CVE-2024-42448 (CVSS 9.9):Veeam VSPC 中的严重 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490005&idx=1&sn=7ccc648116b083bdab6dc782be6d1c61": "创宇安全智脑 | 大华 DSS 数字监控系统 adminOperate 信息泄露等79个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521692&idx=2&sn=adb3ff5ba3ff65807012edd28d90be20": "日本CERT提醒:IO-Data 路由器中的多个0day已遭利用", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247526919&idx=1&sn=0386721ba5a1ddad7d8d307ba4c159f5": "渗透测试高级技巧(三):被前端加密后的漏洞测试", "https://mp.weixin.qq.com/s?__biz=MzU0MDI1MjUxMg==&mid=2247531454&idx=1&sn=8ba14eeeb53bc24ea03b2b5c6ca7ec45": "对攻击者保持视野领先:从漏洞情报到「扩展漏洞情报」", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182725&idx=1&sn=03eb43e4f2d51b44e5e608a0b0c57ffc": "微步获评工信部NVDB通用漏洞库“三星级技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=MjM5MTI2NDQzNg==&mid=2654552132&idx=1&sn=c15183e828e83707f18a206bd3473d0f": "四叶草安全获评NVDB漏洞库“二星级技术支撑单位”称号", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500344&idx=2&sn=0178ec0447d8480a855cf590c0cdc849": "【漏洞通告】SailPoint IdentityIQ访问控制不当漏洞(CVE-2024-10905)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500344&idx=3&sn=0e3c5d14ebd792146b390a8f4033252e": "【漏洞通告】Django Oracle SQL注入漏洞(CVE-2024-53908)", "https://mp.weixin.qq.com/s?__biz=MzA3NjU5MTIxMg==&mid=2650575005&idx=1&sn=2945cdfb719cbcd96448d6e9e31be7a9": "再度登榜 | 国舜股份上榜2024中国网络安全企业100强", "https://mp.weixin.qq.com/s?__biz=MzU1OTUxNTI1NA==&mid=2247591715&idx=1&sn=099ecce590bb4a3e0a57257e97568e66": "中国信通院高琦受聘中关村工业互联网产业园专家委员会,助力园区高质量发展", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133823&idx=2&sn=1980e42c963033b69f13a1db90d7a5ef": "Zscaler CEO抨击虚假SASE方案严重误导用户;思科发布紧急预警:10年前的ASA系统漏洞正遭黑客积极利用 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489270&idx=1&sn=4b59e7c59879b2db9ad770253cc7b265": "【漏洞预警】Django Oracle SQL注入漏洞(CVE-2024-53908)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489552&idx=1&sn=4af132ea745c3855bca33b85780a7f6b": "万能门店小程序管理系统 doPageGetFormList SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490066&idx=1&sn=19f10acfb4432ac39d26b9c846eece40": "立即修复,微软驱动程序关键漏洞已被APT组织利用", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247545671&idx=1&sn=6d387b3b1feabae2ace40e9ad806f1e0": "安全419《9问CEO》系列之:深蓝互联王得金", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517492&idx=1&sn=f586d9016d9592f6f6dffa36d64a2eda": "CVE-2024-22399 - SwingLazyValue利用链构造分析", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY3MTM4Nw==&mid=2247484054&idx=1&sn=8a23efc97b5ae0c014ad74d391dd5717": "Jolokia logback JNDI RCE漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497278&idx=1&sn=169a546ae3fc49b099dc54f68b7b5818": "漏洞分析 | 挖掘 .NET SqlSugar 框架SQL注入", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497278&idx=3&sn=9a007c17825bbe39189acd9ede4b5f18": "48套.NET系统漏洞威胁情报(12.05更新)", "https://mp.weixin.qq.com/s?__biz=Mzg4MDYwNDc5Nw==&mid=2247486445&idx=1&sn=6f3691c776441bd69449c6aaf6f6a6ae": "Earth Minotaur组织利用MOONSHINE漏洞工具包和DarkNimbus后门进行跨平台攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492910&idx=1&sn=09a010c00e7b570a4044e87718fd1ea4": "POC集合,框架nday漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247509663&idx=1&sn=36790b3290209381053ccbb1036f3b23": "某订货系统文件上传漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491646&idx=1&sn=e2735658a6d4f6f895d5a79139c28b03": "漏洞预警 | WordPress Elementor PDF生成器任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491646&idx=2&sn=146ed161d1ca3fb154097be23b43a507": "漏洞预警 | 用友U8CRM SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491646&idx=3&sn=c46fce8ecd1a9f93c4787c5b907a8bc2": "漏洞预警 | 海信智能公交企业管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488767&idx=1&sn=2ee26bcf0b0ee5ec015000cf0fb9bf28": "【0day】圣乔ERP系统uploadFile存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NzkxOTQ0OA==&mid=2247484486&idx=1&sn=7a15fc7f6dc988da668fea8f1e56ab43": "zabbix SQL注入漏洞(CVE-2024-42327)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492886&idx=1&sn=d756b32f8abfbcd1e8cb11906dd81ec4": "数百台思科交换机受启动加载程序漏洞影响", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492886&idx=2&sn=cc627c845e5d461b974822fe037e5623": "Veeam修复了关键的服务提供商控制台 (VSPC) 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484296&idx=1&sn=890c5d7d84b5feecb5a0ef7741a8f57c": "【漏洞复现】彩讯邮件系统5.0.0版本存在逻辑缺陷修改用户密码", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247489190&idx=2&sn=34b2b8fd8d97ed3410b550c61468f779": ".NET 安全攻防知识交流社区", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485773&idx=1&sn=d02bae22b16a74565cccdbca9d3aec85": "【漏洞复现】某平台-taillog-readfile任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487533&idx=1&sn=4eb64d6b9826505165054511c71288e2": "赛克安全本周漏洞推送(12.2-12.6)", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485592&idx=1&sn=a6d4635e8349bc57169d61d88bd9088b": "赛克安全本周漏洞推送(12.2-12.6)", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652250973&idx=1&sn=58660cc9fd124290dbef70e8f000d867": "思科发布紧急预警:10年前的ASA系统漏洞正遭黑客积极利用", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484475&idx=1&sn=abb1e90b0a7bf06630254cbceb7a4db6": "【漏洞复现】赛普EAP企业适配管理平台Upload任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793394&idx=2&sn=06277be44ef38c9683d24a9ef2472d1c": "黑客利用 MOONSHINE 漏洞和 DarkNimbus 后门攻击", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247485821&idx=1&sn=b98633172a515bdd2cbbfed5efdc3e30": "渗透测试人员的 Nmap:漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247490923&idx=1&sn=f17dfe44ab6378a7f8dd918d7e89e309": "一个声音克隆工具:clone-voice", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502571&idx=1&sn=c30e1d47ae1059542d59b52c7c4ddfd5": "SonicWall SMA100 SSLVPN 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA3OTMxNTcxNA==&mid=2650955393&idx=1&sn=e2b764b3fbac3a173c1080cad44da575": "收藏!银行业数据安全工作备忘录,随时自查超适用~", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247491936&idx=1&sn=012e625f885581be435e1e76a5f715ea": "漏洞预警 灵当 CRM uploadxx.php 文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484585&idx=1&sn=5454bc75cdf44fafbb3e5e8027140664": "Apache-HertzBeat开源实时监控系统存在默认口令漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133870&idx=1&sn=bbdb0d6ade319897ba8d80e124901b49": "英国电信巨头BT集团遭遇勒索攻击,500GB敏感数据恐遭窃取;流行移动安全测试工具曝XSS漏洞,文件名成为攻击新途径 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzA5MTM1MjMzNA==&mid=2653425589&idx=1&sn=61fa9b1c408e4fd0b661e6750c6e4417": "北信源携手中外文化交流中心用“爱传(AITran)”助力文化出海", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309094&idx=4&sn=a4310a5d090519e47811b92239c23f69": "CABED:一款针对Chrome应用程序绑定数据的加密解密工具", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486248&idx=1&sn=c5db4ce371a7d76a113ec5be58c6a312": "「漏洞复现」易宝OA GetUDEFStreamID SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247495970&idx=1&sn=ff9a5f04745abfade7cb4ca85fc55840": "CVE-2024-42327 Zabbix SQL注入 POC", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066435&idx=3&sn=bbca90f744a9f08fd2d2e9d95bb190e2": "【安全圈】I-O Data路由器0Day漏洞被利用,无修复补丁", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247488033&idx=1&sn=596233b0055d9fdc24b51f7fbaa5ea3e": "用友NC-Cloud process SQL注入漏洞复现及POC", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247632570&idx=3&sn=f622ece0c8d345a542cbc143d224a5a9": "诸子云|甲方 :不同供应商的漏洞评级不同怎么办?Windows固定网址访问怎么做?", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523938&idx=1&sn=6c81b44f4c94f68c790de69ec5748741": "【漏洞通告】Django Oracle数据库SQL注入漏洞(CVE-2024-53908)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664231514&idx=5&sn=a1b9fdf907d919a928c462945660f655": "CNNVD | 关于SonicWall SMA100安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525341&idx=1&sn=ea86ae1bed2b137932a11ba97f44f21c": "[漏洞] CVE-2024-44308:Apple Safari JavaScriptCore 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247486098&idx=1&sn=ae6ad47bd22e1e3125d2fe45a58ae8b8": "渗透测试高级技巧(三):被前端加密后的漏洞测试", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521713&idx=1&sn=7bdde63b35fa4a28908581f18c38883e": "引导加载程序存在高危漏洞,影响思科100多个交换机机型", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651461968&idx=1&sn=0a6663b04895b46371bd12da4468b547": "CNNVD 关于SonicWall SMA100 安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507515&idx=1&sn=83bcc14122f1b7fd67fed7d5868d21fc": "微步协助统信修复提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500352&idx=2&sn=235a9462be5bc3a03d48bbfb6ab01bd6": "【漏洞通告】Mitel MiCollab身份验证绕过漏洞(CVE-2024-41713)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500352&idx=3&sn=8418c366f125a72454f0879f77e27f18": "【漏洞通告】SonicWall SMA100 SSL-VPN缓冲区溢出漏洞(CVE-2024-45318)", "https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247517561&idx=1&sn=54d4c087458711183eef2d5373e7dc33": "Spring漏洞测试与利用", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484772&idx=1&sn=8e593a28c598c058805d54e0cfef6028": "【漏洞复现】CVE-2024-41713", "https://mp.weixin.qq.com/s?__biz=MzkwMzQyMTg5OA==&mid=2247486322&idx=1&sn=fbd61172d2e9bb94ebd76a78608b2ced": "Java 安全 | 从 Shiro 底层源码看 Shiro 漏洞 (下)", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498845&idx=2&sn=25201142c51e9dbeacbaf956dbf30b41": "渗透测试 -- Web漏洞介绍和Sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489275&idx=1&sn=31722ca4a5e3edc74c5e218e4bfedbdf": "【漏洞预警】SonicWall SMA100 SSL-VPN缓冲区溢出漏洞CVE-2024-45318", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491663&idx=1&sn=13f8337d2c5b035b77d6655b19c9fc53": "漏洞预警 | Zabbix SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491663&idx=2&sn=15daefd39c0e30d1382305c7482cf614": "漏洞预警 | 九思OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491663&idx=3&sn=6b2aa26c1481def636af9c318e3ce674": "漏洞预警 | 昂捷ERP SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513246&idx=1&sn=a4a663b3a67c336106c8f2c644048dbf": "严重损害数据安全,湖南一IT公司被罚20万元", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652113041&idx=2&sn=ce9243791a081b087a014d89f2b9f468": "2024年最危险的25个软件漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488779&idx=1&sn=9a633d7bc6504c05e173fe7110716099": "【漏洞复现】EasyCVR视频管理平台taillog存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDkyMTE4OQ==&mid=2247486180&idx=1&sn=258dd29d0a97c72092bd6b722048e94d": "代码审计 | Jump Server堡垒机历史漏洞审计", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247525108&idx=1&sn=6e27512b02e4148cf87e701c0a56e75c": "SRC漏洞挖掘之道", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727840329&idx=1&sn=8e4b7109f4601396270ae0922058dd61": "【活动】2024漏洞马拉松活动来袭,史无前例反爬专项单个奖励最高5w!", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650604682&idx=3&sn=66e331213aaa69ebd6e06ba539c6cbae": "移动安全框架 (MobSF) 存在存储型XSS漏洞 | CVE-2024-53999", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309095&idx=1&sn=c6dd464702642072510bbb85c37cb402": "无补丁,I-O Data路由器0Day漏洞被利用", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497324&idx=3&sn=726aa5ada489a6cc591b1f36e419bb9b": "漏洞分析 | 挖掘 .NET SqlSugar 框架SQL注入", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793408&idx=3&sn=07c14519c7e26f4483bd662559941c89": "新的Windows 0day漏洞:攻击者几乎无需用户交互即可窃取 NTLM 凭据", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492906&idx=1&sn=bcccbff213bc1e74461cb25625f86307": "Windows 中存在严重0day,可导致用户凭据泄露", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247487942&idx=1&sn=15aa489d022ced042139dc1381fcafd4": "高质量企业+eduSRC漏洞挖掘实战资料分享", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525456&idx=2&sn=36ccd1ade2da7b7093c538a25b09dc4a": "新的 Windows 零日漏洞暴露 NTLM 凭据,已获得非官方补丁", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247485990&idx=1&sn=303f4ff26e9de1a67b30a91e4094d384": "支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487535&idx=1&sn=8de530d3ddedd7217a57c2e53b7b6be5": "赛克安全本周漏洞推送(12.2-12.6)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485721&idx=1&sn=aa1125a603acdb5b911e5e35ea92b93c": "CVE-2024-45318|SonicWall SMA100 SSL-VPN缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485721&idx=2&sn=33b93268432cff8257daa4d1e5239492": "CVE-2024-53908|Django Oracle SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585581&idx=2&sn=93d80a7ee158f6ced9cf81c118db2390": "12月31日截止 | “看雪漏洞小组”集结!组团冲击华为漏洞更高奖励", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486259&idx=1&sn=dd51ca8df3aa1533144b975b9bec3086": "「漏洞复现」EasyCVR-视频管理平台 taillog 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY0MzE2NQ==&mid=2247483958&idx=1&sn=bd8d4407a74e628e6eb222ab3b30070a": "Docker0day,影响近4000台主机", "https://mp.weixin.qq.com/s?__biz=MzkyOTUxMzk2NQ==&mid=2247485642&idx=1&sn=afcc7c4a8330cefeed2195326b87685f": "记一次简单的代码审计项目案例", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247485906&idx=1&sn=85d283dcf4ac6ef6ea62b49c1db8f492": "AI不到3分钟生成了一份29页的《漏洞扫描原理及常用工具》PPT材料", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247514051&idx=2&sn=e39a03d52f1e51705a6d98d33c0d2c99": "网安瞭望台第10期:开源机器学习框架存在漏洞、GammaDrop 恶意软件", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247504999&idx=3&sn=860de968b5da5269ea0ec755cd3e8392": "Windows 7 至 Windows 11 中存在新的 0 Day NTLM 哈希泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505049&idx=3&sn=3d5ddf0d99cec9a595d1f68d4a705cb8": "SD Express 卡漏洞导致笔记本电脑和游戏机遭受内存攻击", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488796&idx=1&sn=6d6053b4caec0a1edb3e9de18b68d64d": "【大量存在】用友NC yerfile_down_bill存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309096&idx=1&sn=4e32dd93c350ea357aa0013d017d03d8": "关键的联发科芯片组漏洞影响15亿手机用户", "https://mp.weixin.qq.com/s?__biz=Mzg3NTU3NTY0Nw==&mid=2247489413&idx=1&sn=fcde34dfbd9e6aa9333ff082c3d3c056": "第一届数证杯团体赛---服务器取证", "https://mp.weixin.qq.com/s?__biz=MzU0NDI5NTY4OQ==&mid=2247486237&idx=1&sn=61373f8016157b66e2c28307cdd3de53": "一文看懂安卓JSB风险漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066522&idx=2&sn=e68dc56710af72cb8e044123396dd41a": "【安全圈】关键的联发科芯片组漏洞影响15亿手机用户", "https://mp.weixin.qq.com/s?__biz=MzkxNzY0MzE2NQ==&mid=2247483971&idx=1&sn=81a4379fe0e4ceb11fcf5148189668bf": "【1day报送】安徽生命港湾信息技术有限公司采集服务管理工具存在未授权访问&弱口令漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496542&idx=1&sn=786c2ef243463b972253ad6ccf7dc2eb": "挖洞荒?工作两年半的渗透测试实习生如何挖到第一个高危sql注入漏洞?慎用!", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486271&idx=1&sn=8dc5deae4121a38158edf57e71dcf089": "「漏洞复现」圣乔ERP系统 DwrUtil SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492928&idx=1&sn=84b4e3fc0b92ae1f566a69902aa4184e": "Windows 权限提升漏洞检测工具集", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491681&idx=1&sn=6eabf10b247a0dcb0e6ff57570a23d7b": "漏洞预警 | Zyxel ZLD防火墙路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491681&idx=3&sn=aafb0b02aa119154c0ed4bb77faded81": "漏洞预警 | 思普企业运营管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDg2MDIxNQ==&mid=2247485198&idx=1&sn=665ecbc787b32963eea5d0b320ca174e": "网安牛马碰见WAF如何凑出渗透报告漏洞数量?", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497755&idx=1&sn=e0b32483908e2f420efedf2dfa784bcd": "2024年10月份恶意软件之“十恶不赦”排行榜", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503011&idx=2&sn=86f3757c8d1f10c57e921039e6650e10": "无补丁,I-O Data路由器0Day漏洞被利用", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486037&idx=1&sn=fe4e70919205522d0e229d662246dd37": "重生之我在推特逛漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485777&idx=1&sn=e59434cc1cbea489951c59499d4e9b80": "【漏洞复现】某平台-Sc-Interview-search-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484301&idx=1&sn=5d9659c031f61d53a920fd44234a8536": "【漏洞复现】英飞达医学影像存档与通信系统WebUserLogin.asmx存在信息泄露", "https://mp.weixin.qq.com/s?__biz=Mzg3NTY0MjIwNg==&mid=2247484982&idx=1&sn=f38d3f91cde8ae393d8fa111b6fc69a7": "2024年OWASP LLM安全漏洞年度报告", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650604707&idx=3&sn=c9de054d4fda0db26998079e2dad84c4": "某订货系统文件上传漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484485&idx=1&sn=0f5b3d6588ad00afd34fe51811a012a4": "【漏洞复现】Palo Alto PAN-OS身份认证绕过CVE-2024-0012及命令执行漏洞CVE-2024-9474", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486227&idx=1&sn=a70bbbb6e66a54b7a6765ab23f927f9f": "CVE-2023-6553 WordPress存在的远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTIyMjg0NQ==&mid=2247495682&idx=1&sn=05d00ffc6e8884f1917fecc62d760e0f": "X漏洞奖励计划收录扩大!高价收洞!(文末抽奖)", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899704&idx=1&sn=f4bb23c0bd779a13500ae6b75d213b39": "Array Networks SSL VPN 产品曝严重漏洞,已被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491681&idx=2&sn=6e023ccd4d0d3fa65654c5c2d88ff938": "漏洞预警 | Apache Arrow R package反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247530686&idx=2&sn=a0087e732b60c3c448073aa749ca8d2d": "全面防护:AI驱动持续安全验证,灵活应对万变攻击", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525485&idx=1&sn=a5aeff09df0da8ba8baa5a35ae43b833": "Windows 零日漏洞 CVE-2024-38193 在野外被利用:PoC 发布", "https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247487368&idx=1&sn=e37ec534c44ac5981864d0853b870a29": "太棒辣 | 感谢大哥带我学习关于验证码逻辑漏洞这些事", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489562&idx=1&sn=6d639cb1b3d931b066f554c5d797b99a": "海信智能公交企业管理系统 AdjustWorkHours.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NDE4MzE5MA==&mid=2247487187&idx=1&sn=83cd510202e9273c772ef3f606c6afe6": "【活动】2024漏洞马拉松活动来袭,史无前例反爬专项单个奖励最高5w!", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492986&idx=1&sn=09e54f7bf277f6cbca0f1c957c7e12cd": "有PoC,Windows 0day漏洞CVE-2024-38193在野外被利用", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580114&idx=1&sn=fa181017da36db2d6d5598cb97f6ec10": "黑客利用 ProjectSend 漏洞对暴露的服务器进行后门处理", "https://mp.weixin.qq.com/s?__biz=Mzk0MDY2NTY5Mw==&mid=2247485555&idx=1&sn=ce73bb7765466995a3745ab23db7e56f": "[含POC]CyberPanel upgrademysqlstatus 远程命令执行漏洞(CVE-2024-51567)", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133887&idx=2&sn=5e64b53a72121f42601f459acb55f305": "劫持其他APT组织基础设施实施攻击,APT组织新战术曝光;罗克韦尔自动化软件曝多个严重漏洞,可被利用执行远程代码 | 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY1NzM3NQ==&mid=2247484770&idx=1&sn=40040159b0f73448fa9dfc51dde8baf8": "助力企业实战化安全运营 | 灰度安全首次亮相2024年电信和互联网行业网络安全年会", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247487956&idx=1&sn=cc514f441b4a92ba7909f0674bfe82cf": "DockerUI存在默认口令漏洞,可导致拉取镜像,管理等操作", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066537&idx=4&sn=6f910eee1c20ed718fdf7c754fd840e1": "【安全圈】需要采取紧急行动:ABB ASPECT 漏洞使建筑物面临网络攻击", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495571&idx=1&sn=0c222901aba75215f7b034c9a02775e8": "CNVD漏洞周报2024年第49期", "https://mp.weixin.qq.com/s?__biz=MzI3NjA4MjMyMw==&mid=2647789831&idx=1&sn=012815bf3c53ef1a6060c1dc35d847b9": "X情报社区漏洞奖励计划收录扩大!提供本地环境再享额外20%奖金加成!", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247488563&idx=1&sn=a550cfd3444cdc1a232119a08e1539e9": "建议收藏!这15个命令让你的效率提升3倍", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519358&idx=2&sn=053fe593848492102cf308e4ce93de7f": "\"多引擎\"的资产识别、信息收集 | 干货", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260229&idx=1&sn=f6a11bf294dc8f32a86b9a5cafa66554": "【 CVE-2024-38193 】Windows 0day漏洞已在野利用,PoC已发布", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247492752&idx=3&sn=a61b3440c0226297a23f67abe9933266": "上周关注度较高的产品安全漏洞(20241125-20241201)", "https://mp.weixin.qq.com/s?__biz=MzU1NDU1NTI5Nw==&mid=2247488158&idx=1&sn=98acc9ee5fb73ae5ba6267e0eed963a3": "【活动】2024漏洞马拉松活动来袭,史无前例反爬专项单个奖励最高5w!", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247498096&idx=1&sn=60b0f557103ef67e7cf9159778b928d8": "全球云上数据泄露风险分析简报 (第三期):云盘误配置与API漏洞致高校信息泄露,影响7亿账户", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491216&idx=1&sn=390db568593214c3e21c608f9aac4946": "CVE-2024-48307|JeecgBoot SQL 注入漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489351&idx=1&sn=aa6577fd6d005684fd089d08b094a531": "一个好用的Nuclei POC模版管理工具支持一键漏洞探测|渗透测试", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515106&idx=2&sn=b625c72739d7c62b246efccace7fbb18": "渗透测试 -- Web漏洞介绍和Sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491694&idx=1&sn=3fb11feee2a30c6a980a0af26aa8ffcb": "MITRE 分享了 2024 年最危险的 25 个软件漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489283&idx=1&sn=29b9004e3fdc168434fc378d44504590": "【漏洞预警】SoftLab Integrate Google Drive身份认证绕过漏洞(CVE-2023-32117)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489283&idx=2&sn=5c93a143e811b95e8b77abdcb97f6599": "【漏洞情报】海信智能公交企业管理系统AdjustWorkHours.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486288&idx=1&sn=1bb852514919b1b26bddd263e28d5501": "「漏洞复现」Mitel MiCollab 企业协作平台 任意文件读取漏洞(CVE-2024-41713)", "https://mp.weixin.qq.com/s?__biz=Mzk0NzM4NzI1MA==&mid=2247486212&idx=1&sn=a25394ea5d523773aa1771aebc8872fc": "Zabbix SQL 注入漏洞(CVE-2024-42327)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525557&idx=2&sn=780285b5a5a94ef626071a57bc2412e1": "CVE-2024-55563:交易中继干扰漏洞对比特币闪电网络构成威胁", "https://mp.weixin.qq.com/s?__biz=MzIxODIzNzgwMw==&mid=2654070792&idx=1&sn=12d743d033becec5fcc0920e17922d86": "漏洞马拉松2024 | 积分赛阶段冲刺ing,半区见真章!", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247505295&idx=1&sn=c7dccc68315c50474f6e877a45a1b391": "每周网安资讯(12.3-12.9)|Oracle等厂商的多款产品存在漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495571&idx=2&sn=464e8fb82cad6f465f8242e841ab2260": "上周关注度较高的产品安全漏洞(20241202-20241208)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521726&idx=2&sn=4020dbda138c28b7da91666b33eb120a": "SonicWall 修复Secure Access Gateway 中的6个漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502580&idx=1&sn=6c73b0ed8291424bf945a368d40498c1": "安全热点周报:新的 Windows 零日漏洞暴露 NTLM 凭据,已获得非官方补丁", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247496891&idx=1&sn=9c8fd99b9ddc86cb7f57bee467702ab5": "TimelineSec助力2024漏洞马拉松活动,史无前例反爬专项单个奖励最高5w!", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247551853&idx=1&sn=ed4347c2164a771f0ba762ebd7940c96": "Spring漏洞测试与利用", "https://mp.weixin.qq.com/s?__biz=Mzk0MTQ5NjI2Ng==&mid=2247486366&idx=1&sn=41dcf0e70589bd41d82cb1b369b42865": "数据安全新动态(2024年11月)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497381&idx=3&sn=8636f9e208f208c153d7ab0957f3d4ff": "49套.NET系统漏洞威胁情报(12.10更新)", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247488511&idx=1&sn=7a651145360443820b3f940e3734193e": "Nuclei AI - 让漏洞发现更加智能化与高效", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491682&idx=2&sn=976fbe42f73cc5380687be1c5227d1bc": "漏洞预警 | 安科瑞环保用电监管云平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491682&idx=4&sn=a0dc4444764ab2ef9ba32da241a71790": "工具 | FastjsonExploit", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493826&idx=2&sn=2f70d68dfd020f5c120e5f7d596b9b81": "CVE-2018-15664:Docker CP任意读写主机文件", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488835&idx=1&sn=383eabd7e635fe856fbc2899b7f119b8": "【0day】安徽生命港湾信息技术有限公司服务配置工具存在任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291910&idx=1&sn=cce3441e3c4e73b5d7381cac3619dd88": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247501076&idx=1&sn=ea61326375112eb6b7486937c1ca2278": "[漏洞挖掘与防护] 05.CVE-2018-12613:phpMyAdmin 4.8.1后台文件包含缺陷复现及防御措施", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499522&idx=1&sn=d5908340cc5cb33839f6ae973dbb7103": "CNVD漏洞周报2024年第49期", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247536203&idx=3&sn=f8288da3046f8571a22e5ba05788fba0": "网络安全知多少【科普】5:找业务本身也可能就是漏洞,就是风险", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486968&idx=1&sn=7ee147a6efd7c1a074d8acd00e67fe4a": "Burpsuite存储桶配置不当漏洞检测插件", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485781&idx=1&sn=abe472af31e677010d02b7b3450afdf7": "【漏洞复现】某平台-Upload-file-upload-aspx任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247616783&idx=1&sn=c757bff28e0b57427ff74433f1db3b8f": "扩展 SAE J1939 的攻击场景:传输协议中已建立和新的漏洞的综合分析", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454063716&idx=1&sn=dee9adde502f466cd9c9b73fa7cb94f1": "信息安全漏洞周报【第001期】", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503036&idx=1&sn=826c19c1c6963eedc5d85957a93b8f72": "黑客利用 ProjectSend 漏洞对暴露的服务器进行后门处理", "https://mp.weixin.qq.com/s?__biz=Mzg2MDY0MjQwMw==&mid=2247494229&idx=1&sn=00ba639704a1a21def406229988dd7a3": "从勒索软件到APT:揭开制造业面临的8大网络安全威胁", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614638&idx=1&sn=23b8076cd1077afa63bfcef17858af9f": "安全学院24期开班福利!大咖嘉宾课、poc知识星球免费送", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545940&idx=1&sn=4961694b69a4880b3558ec8068e83e19": "安全学院24期开班福利!大咖嘉宾课、poc知识星球免费送", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489611&idx=1&sn=870491e1594390da4dc881600491a28d": "用友U8 CRM ajaxgetborrowdata.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247487863&idx=1&sn=2b5ec8568da6bc4cdc7a12ca5f3e300b": "用Python实现自动化漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU5NzQ3NzIwMA==&mid=2247486297&idx=2&sn=00c9f509418128a39f1339e08e4c57ff": "羽绒服vs冲锋衣,谁才是冬季保暖的最佳选择?", "https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649248462&idx=1&sn=1fef839e04c52388ba93c9b94a45b20c": "新鲜出炉!GaussDB在HyBench基准测试中表现优异", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309321&idx=2&sn=d90a45affb4d7a3b267b7dcb64922161": "防火墙服务配置漏洞波及多家全球财富100强公司", "https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247493926&idx=1&sn=66f71ef679da29fecf866e7df2eefbe5": "绿盟科技勇夺“强网杯”高阶技术专项赛一等奖,多赛道实现奖项全面突破", "https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247513624&idx=1&sn=8f1943d31e319d66200c5a6849f3346f": "500强上市车企通过模糊测试降低未知风险,构筑汽车行业领先的品质基石", "https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247560864&idx=1&sn=21c3af15a2b0dff6b8c0835853e9809d": "喜报!炼石中标某大型商业银行金融数据与个人信息保护项目", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488850&idx=1&sn=2f906a07fd040ed4b4a04171950e3383": "【未公开1day】某科网威anysec安全网关arping存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502726&idx=1&sn=f74cad3a1971f2f2530634d3b57b676f": "【失败复现】Zabbix SQL注入漏洞(CVE-2024-42327)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489368&idx=1&sn=84a64bc6c014dd11c44cc14f3d2df027": "一款能够自动化过滤扫描结果的目录扫描工具|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487960&idx=1&sn=201e394851f63027036f862d8a36895d": "Palo Alto Networks PAN-OS存在远程命令执行漏洞CVE-2024-9474 附POC", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487157&idx=1&sn=8091c0a81829f3cb58d776c8f6dd38e0": "(未公开)灵当CRM某接口存在文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486302&idx=1&sn=ad62aba60f4f3a333c289d186c92afaf": "「漏洞复现」三汇SMG网关管理软件 SMGSuperAdmin 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492164&idx=2&sn=c240cfffa57ae70caf5f080c969ab408": "【活动预告】ISC2华南分会线下活动欢迎您:平安专场,AI的安全探索与实践", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521736&idx=1&sn=f656ad45da506b8f778e68ff0243d0be&chksm=ea94a4a2dde32db4651e878de8188d4f6cae7312a721ec5b3a69201300cc4b8990af592861cc&scene=58&subscene=0": "研究员在DeepSeek 和 Claude AI 中发现多个提示注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521736&idx=2&sn=37cc8cc02d4dc7c59168f8bb841938a9&chksm=ea94a4a2dde32db4fcf8d9da57d0da38ee6f89a7cfeee9b469e91b0bc2d89db95227a50943f1&scene=58&subscene=0": "QNAP修复Pwn2Own大赛利用的多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499522&idx=2&sn=fa8b9737d4181e218c2ee200ec329bc0&chksm=973acc60a04d4576fb683cae96f216d3a733a43601e8b23e71f8f54b8c9a2dc0f953385dfbec&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241202-20241208)", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182736&idx=1&sn=114de58c87950ec9eac7ccc24b290958&chksm=f4486fecc33fe6fac35edaffc7f8afa6f84e8393ef84627fa778957bef4d8e46a747d4d05dea&scene=58&subscene=0": "美国顶级红队演练,只用了个Nday?", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066552&idx=4&sn=1e612f3b3ba252c5b5578d381d2737ee&chksm=f36e7eb8c419f7aead22e1ec719f6b8294d8e61b27774e7355bdc6c949f9b0b03c8d7351e4e0&scene=58&subscene=0": "【安全圈】防火墙服务配置漏洞波及多家全球财富100强公司", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247486314&idx=1&sn=6ca1faf4185516060554cb5767910675": "edu小程序挖掘严重支付逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260244&idx=1&sn=77a2cf6fca1132ac57455e3e98394dd3": "发现关键漏洞获得 $4,000 赏金奖励", "https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247504189&idx=1&sn=203a7a0abd62c42363032ddf93a633a4": "零基础学习如何挖掘第一个SRC漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491220&idx=1&sn=33447580838d346357e11ff01107377f": "某通用系统0day审计过程", "https://mp.weixin.qq.com/s?__biz=Mzg4NTUwMzM1Ng==&mid=2247512787&idx=1&sn=1c6cd54a524329190ebb2a2f336a843e": "好用的Nuclei GUI POC管理工具", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506001&idx=2&sn=643c526ae97cfc56fb5d56832b4275ea": "美国与菲律宾成功举行海上网络安全和化学品安全演习", "https://mp.weixin.qq.com/s?__biz=MzkzMzczODA0OQ==&mid=2247483997&idx=1&sn=7ab4b5b9d865dae859a2b7b4077c6c1f": "CVE-2019-13288复现笔记及其国产化pdf生成挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503054&idx=2&sn=61c49201691eec638bda1a2b5a90d85e": "防火墙服务配置漏洞波及多家全球财富100强公司", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502600&idx=1&sn=2b1a45b44e8988e6121af578a0aece0a": "微软12月补丁日多个产品安全漏洞风险通告:1个在野利用、17个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247494539&idx=1&sn=c9e951a6295df1f1f94a2f3793cc7ff2": "【攻击手法分析】勒索病毒如何轻松绕过安全设备防线:第一篇-驱动漏洞一击致命", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486103&idx=1&sn=d3ccd2ca78da5d7c49416e47a24f83d1": "分享最近攻防演练HVV漏洞复盘", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793447&idx=3&sn=74a8fd5532aebfa95540119d6c2c34a2": "Ivanti 警告最高严重程度的 CSA 身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899710&idx=1&sn=542451000c5f6f3109a6fa80c8cbbb9c": "WordPress插件WPForms惊现高危漏洞,数百万网站面临退款风险!", "https://mp.weixin.qq.com/s?__biz=Mzg5MjgxNTQ1MA==&mid=2247488111&idx=1&sn=94afaf884447ae0b2f77400c0ee18bd2": "大模型安全的漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497409&idx=1&sn=a82b09186c21bf8d98ac1c656bbdac06": ".NET 一款内网渗透中清理日志服务的工具", "https://mp.weixin.qq.com/s?__biz=MzkyOTQyOTk3Mg==&mid=2247484928&idx=1&sn=0d5f72ae7989e53bcc477d6e0f275680": "Nuclei|图形化|轻量化刷漏洞神器|11000+poc", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503228&idx=1&sn=8158cbc5e01aec5972035af661193b6d": "雷神众测漏洞周报2024.12.02-2024.12.08", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787591&idx=1&sn=e8b66114e6f98d415269d5b8d9f96a37": "银狐团伙再出新招,Web漏洞成切入点", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247693&idx=1&sn=3851764e6b990474556fa86b1a6a0365": "Spring漏洞测试与利用", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500373&idx=2&sn=de1d1f63dc8bc0f867a230507640bdc2": "【漏洞通告】微软12月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500373&idx=3&sn=098e9ed670b71cb63665f4e81802d13e": "【漏洞通告】Ivanti Cloud Services Application身份验证绕过漏洞(CVE-2024-11639)", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496850&idx=1&sn=21c9286190406da9b6d1eaf566c9289d": "2024年12月微软补丁日多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211287&idx=1&sn=648b0bcf5231aa3c73bd8820bc05666c": "【工具分享】Nuclei GUI 管理工具(附12W+poc)", "https://mp.weixin.qq.com/s?__biz=MzIwNzE2MDc5Mg==&mid=2649267037&idx=1&sn=2c0d099c30c393817dbc77e1fb623e18": "国产信创 | 经纬信安拳头产品携手麒麟完成产品兼容性互认证", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931228&idx=2&sn=3ebb24d1b78d2a0d8b3caf676ac9b252": "农信银完成7个重要信息系统容灾切换运行工作,强化数据安全管理与业务连续性保障能力", "https://mp.weixin.qq.com/s?__biz=MzI1NDQxMDE0NQ==&mid=2247485083&idx=1&sn=b0001d31a1da90591366a8795080ae1b": "【漏洞通告】微软2024年12月安全更新通告", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650620145&idx=2&sn=d4e72021c21b8c572ae4541eaa30fe99": "涉及72个漏洞!微软发布12月补丁日安全通告", "https://mp.weixin.qq.com/s?__biz=MzA5OTk2OTY5MA==&mid=2247485642&idx=1&sn=da42b6283d1ceef4780bef8f5a7cf5be": "Microsoft 12月 CVE 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247520891&idx=2&sn=fbe68b0ed739b4477459f1f9d95cea6f": "诚邀渠道合作伙伴共启新征程", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247545977&idx=2&sn=cab2fea2d92a1bdd20e088c916587f46": "安全学院24期开班福利!大咖嘉宾课、poc知识星球免费送", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614651&idx=2&sn=5b9bf023f7b5cf87e84bd07bb9b0f73d": "安全学院24期开班福利!大咖嘉宾课、poc知识星球免费送", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247179&idx=2&sn=0f629a416f42e4eb4195b95c624df07e": "安全工具 | Windows 权限提升漏洞检测工具集", "https://mp.weixin.qq.com/s?__biz=MzkxOTUyNTg2MA==&mid=2247483968&idx=1&sn=3974d5a946237beacb754ffe0e2fdf68": "poc管理工具|精准漏扫|附10w+poc|Wavely|有他就够了", "https://mp.weixin.qq.com/s?__biz=MzI5NTQwMjYxNg==&mid=2247483809&idx=1&sn=37e28e355bfced41d98b9f2197d5022d": "ZASRC漏洞接收资产范围更新", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486468&idx=1&sn=da5c6be67fefc6804c0cd02238523a1e": "【漏洞通告】Django Oracle数据库SQL注入漏洞(CVE-2024-53908)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486468&idx=2&sn=a820a5fbc1f6c805244208bae4735e58": "【漏洞通告】ProFTPD 权限提升漏洞(CVE-2024-48651)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486468&idx=4&sn=ebd6c9aa71c0b9af4de51bf0a0e08604": "【漏洞通告】ProjectSend 身份认证绕过漏洞(CVE-2024-11680)", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493731&idx=1&sn=9c7f57a06c7845b2562623c29f591d50": "最近打点用的一些java漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650621658&idx=1&sn=27b85f13c888cf79969dd35429df0ba5": "最高级!安恒信息获评工信部NVDB漏洞治理合作“三星级技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247486316&idx=1&sn=99516f099d6a519939789425766585b8": "记一次接口fuzz+逻辑漏洞拿下证书站高危", "https://mp.weixin.qq.com/s?__biz=Mzg4NDY4Mzk3Mw==&mid=2247485450&idx=1&sn=9e273181e277230b4fd971bdbf600709": "解锁 JVM 性能调优奥秘:让你的 Java 应用飞速驰骋", "https://mp.weixin.qq.com/s?__biz=MzkyMDY1NzA2Mw==&mid=2247483820&idx=1&sn=a23aeb71510508774f10b307c7147e14": "DMC Airin Blog Plugin 反序列化 CVE-2024-52413分析", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182768&idx=1&sn=26452c69a1346cdb53381e524ab2425e": "漏洞发现,除了漏扫还能靠啥?", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ5MDM3NA==&mid=2247487448&idx=1&sn=7ee29c06eeab215458a3c97c371e9d36": "探索开源 C2 框架中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491701&idx=2&sn=986dca366576ab77940040ab4b163181": "漏洞预警 | Veeam Service Provider Console远程代码执行和信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491701&idx=3&sn=a5686e3902d307406a535d6aff1858a3": "漏洞预警 | Progress WhatsUp Gold远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491701&idx=4&sn=44471582ba985789485e32d4f0c3966f": "工具 | ShiroEXP", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899727&idx=1&sn=ab9d08bee30a638793178500d65bdc02": "Cleo文件传输软件爆严重漏洞,黑客组织Termite或已发动大规模勒索攻击!", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488883&idx=1&sn=0cbfef21b2574f37a5e53563e0150749": "【edu 0day预警】某公司教育教学监测与保障系统存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515150&idx=1&sn=cdde4c00dd188d786d3e826d01dcb79a": "XXE漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505136&idx=3&sn=3b8e04d0266d9db89d08cd23faefb52b": "Windows 11 12 月补丁星期二修复了 72 个漏洞和一个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652113172&idx=1&sn=cc65dbbe46b9dba55b33562e14441b09": "微软2024年12月份于周二补丁日针对72漏洞发布安全补丁", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309577&idx=2&sn=6fd24a945862bf834c191ed6f0cfec7b": "Ivanti最严重的 CSA 认证绕过漏洞曝光", "https://mp.weixin.qq.com/s?__biz=MzI4NzA1Nzg5OA==&mid=2247485612&idx=2&sn=2a1158f7b17eb1ee8b19889b6f5ffcfd": "渗透测试小练习(1)尝试一个图形验证码绕过的复现", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486335&idx=1&sn=168f466d99da132b903604afc13a3a35": "「漏洞复现」电子图书阅读平台 downFile.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486633&idx=1&sn=ce9d691bace642433060f9e374fae37d": "【漏洞预警】Apache Struts 文件上传漏洞(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496582&idx=1&sn=e36e6d50967d7b97dcd7cec8a6b930e1": "发现关键漏洞获得 $4,000 赏金奖励", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309661&idx=1&sn=cfdd79332e829413af2d16cb841ac66b": "单洞赏金1万美刀的漏洞思路分享| 玲珑安全帮会直播", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521773&idx=1&sn=3e980835ea6ecc3e1562c951bb038730": "微软 MFA 中存在AuthQuake 漏洞,可导致无限次暴力攻击", "https://mp.weixin.qq.com/s?__biz=MzUzNDg0NTc1NA==&mid=2247510479&idx=1&sn=d578238889ffed2b12bf3c600b6d1e4c": "中国网数中心和国家邮政局领导赴启明星辰集团调研交流", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585913&idx=1&sn=9b3e3bf33a7c7827dc567f6c4588e586": "即将开班!​“系统0day安全”系列课程:掌握漏洞挖掘重要技能", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664232034&idx=4&sn=d4c255d0547183fe574225341573d4cc": "CNNVD | 关于Apache Struts安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496866&idx=1&sn=bbb30a60616ec1cf4ea6804a05eac048": "【漏洞通告】Apache Struts 2远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523950&idx=1&sn=c7f7b9fa14789faf8a6c75b897452a46": "【漏洞通告】Apache Struts 2 任意文件上传漏洞(S2-067)(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500381&idx=1&sn=bf0c2ee1284d729c2b7443e54dc2d93a": "安全简讯(2024.12.12)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500381&idx=2&sn=bdeddcb5ace7d2ee19d04851329b6f15": "【漏洞通告】Apache Struts 2远程代码执行漏洞(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500381&idx=3&sn=083d549b2dcf727a31f4e9b61a647018": "【漏洞通告】GitLab Kubernetes Proxy Response NEL头注入漏洞(CVE-2024-11274)", "https://mp.weixin.qq.com/s?__biz=Mzg3MDk0OTc1Nw==&mid=2247487889&idx=1&sn=d63e39882d747cd1ed7c3c59635dd669": "Cleo 0day漏洞 CVE-2024-50623 poc 公开", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462062&idx=1&sn=6d04ce844444272812e3be3b061bf062": "CNNVD关于Apache Struts安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462062&idx=2&sn=51b3e8ee84acc08434a2309ef838b85d": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487166&idx=1&sn=4761c7215606df90787c654d6ceb8411": "(0day)杜特网上订单管理系统getUserImage存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486362&idx=1&sn=7817b14339852f25f402164121d84609": "Apache Struts FileUploadInterceptor 目录遍历与文件上传漏洞(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507539&idx=1&sn=988e5b92e2c247e3b172cd0170b42c9f": "漏洞通告 | Apache Struts2文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488718&idx=1&sn=a1dc37b8103bff225bac31cc7d4623a6": "【安全更新】微软12月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247551275&idx=2&sn=6b84b6daf3d7d3e6a6137ca9a7253946": "广联达OA系统漏洞批量检测工具 - GlodonScan", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652113189&idx=1&sn=554d13bbf4170011c45f1040aed5d2ae": "Palo零日漏洞凸显面向互联网的接口风险不断上升", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247486347&idx=1&sn=85137a0acb6c87cbba9b0be502bbad60": "记一次网上阅卷系统漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247485958&idx=1&sn=5b9296ea0c9d303950e55b2e9f337108": "Burp Suite for Pentester:软件漏洞扫描程序和 Retire.js", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066578&idx=4&sn=fb9fe492092fe4a3088d8bcf368835be": "【安全圈】Windows 远程桌面服务漏洞允许攻击者执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521773&idx=2&sn=9334dce8b280dba2dd408a1b5854e232": "施耐德电气提醒注意 Modicon 控制器中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664232034&idx=3&sn=ccdb518e321ac9c3d701cf06978bc39e": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650620155&idx=2&sn=25816eda1386048700d085e49807bf55": "高危!Apache Struts文件上传漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490057&idx=1&sn=898cb42cbed7532cef5ba97f53508c92": "创宇安全智脑 | Mitel MiCollab 企业协作平台任意文件读取(CVE-2024-41713)等80个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247568491&idx=1&sn=636c74804b027a06692725d2766cf513": "Shiro框架漏洞看了你就会了(含靶场复现)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490197&idx=1&sn=9ffaa9babf02fbd7ab419b9c4a23da71": "【风险通告】Apache Struts存在文件上传漏洞(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490197&idx=2&sn=f905ddb46575c4bbf932f4af33a4738a": "【风险通告】GitLab存在敏感信息泄露漏洞(CVE-2024-11274)", "https://mp.weixin.qq.com/s?__biz=MzA5Nzc4Njg1NA==&mid=2247489168&idx=1&sn=2b4448d1d4b839029d38cabe1e4cf5ee": "关于防范Zabbix软件SQL注入超危漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=Mzg4MDY1MzUzNw==&mid=2247497998&idx=2&sn=076c87adb99ee8206cebc88e147c57e9": "漏洞扫描产品介绍", "https://mp.weixin.qq.com/s?__biz=Mzg3MDk0OTc1Nw==&mid=2247487889&idx=2&sn=0912f0715b90ec7999f942aa0df0a5f3": "Zabbix SQL 注入 CVE-2024-42327 POC已公开", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247489342&idx=1&sn=88c2ad15c90e205a1b6fd6a2cb7cea59": "推荐一款功能强悍的渗透脚本", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497453&idx=3&sn=96ddb90221002fcab8ab6365b5b71c3a": "50套.NET系统漏洞威胁情报(12.13更新)", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502754&idx=1&sn=8d5198f970edcdce2109d001969ce60f": "【成功复现】Wordpress Elementor Page Builder路径遍历漏洞(CVE-2024-9935)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491705&idx=1&sn=c6d00db2d1d2da8d4eccb0541ede19a2": "漏洞预警 | Django拒绝服务和SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491705&idx=2&sn=a828acfbefc73997aa7725a8076ddc41": "漏洞预警 | 圣乔ERP系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491705&idx=3&sn=cfbfa8d0e7f3f0cf0bb12bfdb1f55e15": "漏洞预警 | 小米路由器任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492955&idx=1&sn=394994faf4a919f7d1520e437498c6ea": "XXE 漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487028&idx=1&sn=59fd71a1f2ba11ab7b07247934d24721": "闭源系统半自动漏洞挖掘工具 SinkFinder", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506067&idx=1&sn=51b6e4654476511318badae0e17e231c": "“芝麻开门”无线攻击:针对中国锐捷网络的物联网设备漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzODMyMzQxNQ==&mid=2247484344&idx=1&sn=23bea36464fb1ec449f66047871fdf87": "【MalDev-10】免杀-3", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492939&idx=1&sn=0f0d3ee31741d751f496b8dc075f28dd": "Ivanti修复了其客户成功平台 (CSA) 中一个最高严重级别的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247489420&idx=1&sn=bffac0e9e6364b249bd4b3fc96147516": "《电力监控系统安全防护规定》2024年第27号令", "https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247560967&idx=1&sn=edc2b9e31ed1952c94e297433fb3e27b": "附下载!炼石参编工业数据安全脱敏标准发布", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488897&idx=1&sn=f860e7c647eebbb00c843ec6048fef38": "【0day】深圳国威电子有限公司HB1910数字IP程控交换机存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505156&idx=1&sn=8b9e9979adb64197311a0dbe6ec5ff74": "大众和斯柯达汽车存在漏洞,导致发动机故障和车主数据被盗", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066578&idx=3&sn=55d3538cbf8999a9aa8be86d3ea965e6": "【安全圈】知名企业级文件传输产品存在漏洞,正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505156&idx=3&sn=c456598d99353e763fbdc160fe0f3444": "苹果通过 iOS 18.2 更新修复了密码应用程序中的加密漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502622&idx=1&sn=b09b74ae58ce913511ebc0fee0ec7fef&chksm=fe79ef86c90e669039b61b9b5924eb24b667153b9a47d4a40f3e2738878d49b38d48f228edfe&scene=58&subscene=0": "Apache Struts 文件上传漏洞(CVE-2024-53677)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg4OTU4MjQ4Mg==&mid=2247488118&idx=1&sn=5c5cb1fcf0548be2a9f031db07a60af4": "活动预告|“AI+Security”系列第4期之“洞”见未来:AI驱动的漏洞挖掘新范式", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484729&idx=1&sn=c4e43f6027f2caeeca0e8ac1610504d6": "【复现】 Apache Struts 文件上传漏洞(CVE-2024-53677)风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NDg2MDIxNQ==&mid=2247485250&idx=1&sn=e67f0d77c54f42ab5461bd67ed71007f": "黑盒乱锤某专属SRC到0day代码分析", "https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247488781&idx=1&sn=9cf9a3173e478a3407e42537063219d0": "活动预告|“AI+Security”系列第4期之“洞”见未来:AI驱动的漏洞挖掘新范式", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493039&idx=2&sn=b15c23be7d87bcb5ea5d7df1af1fb382": "超过 30 万台 Prometheus 服务器和 Exporter 暴露于拒绝服务(DoS)攻击中", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493039&idx=3&sn=6825a1e1963fd82c3dbe8d1f6d4ffaed": "【OleView.NET】Windows COM 攻击面漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489687&idx=1&sn=b9022acae500cb9ca86712332ef5edef": "思普企业运营管理平台 apilogin SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485795&idx=1&sn=f06ce780a90a36fa3c47b18e951a679f": "【漏洞复现】某平台-cwsuploadpicture-GetPicture-file-read-任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTYwMzc5OQ==&mid=2247499343&idx=1&sn=77513dfe7863e99207212700e29e7055": "玲珑安全直播:单洞赏金1万美刀的漏洞思路分享", "https://mp.weixin.qq.com/s?__biz=Mzg3Mjg4NTcyNg==&mid=2247489970&idx=1&sn=0f31c205d76351382a0490b5f765a806": "活动预告|“AI+Security”系列第4期之“洞”见未来:AI驱动的漏洞挖掘新范式", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489677&idx=1&sn=a93b17ebac75bad9add1bc68528a2eec": "安科瑞环保用电监管云平台 GetEnterpriseInfoById SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503097&idx=2&sn=dbb8082751d5715551c096f63d4bb2a8": "知名企业级文件传输产品存在漏洞,正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487537&idx=1&sn=fb94ab90c088e2be3d41f9d8d9b2fea2": "赛克安全本周漏洞推送(12.9-12.13)涉及孚盟云、用友时空、蓝凌OA、月子会所、时空VMS等产品相关漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650621697&idx=1&sn=cda70429226d0540d8d9cc385d78bb03": "遇到漏洞怎么办?美妆思路试试看", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655348206&idx=1&sn=ea85cb93ee6383222f1cc27eb30063e8": "Ivanti云服务严重漏洞:CVE-2024-11639(CVSS 10)建议立即修补", "https://mp.weixin.qq.com/s?__biz=MzI0NTI4NjEwOQ==&mid=2247484957&idx=1&sn=37059c25f43518ac486bd4d37596e732": "Mitre_Att&ck框架T1622(调试器规避)技术的简单实现", "https://mp.weixin.qq.com/s?__biz=MzA4NzU1Mjk4Mw==&mid=2247492196&idx=1&sn=9a17a69290ef6d3f0970fde1eb354811": "网络资产收集与漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzkyMDY1NzA2Mw==&mid=2247483831&idx=1&sn=317637ef6617e99f0ba2575c705aaca6": "SeaCMS admin_files.php CVE-2024-42599分析", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487028&idx=2&sn=4668ad2932afd679ad10d8dcb4628d3f": "最近打点用的一些java漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787610&idx=1&sn=95a8903a00d204b2f0a97e8c4b9362d9": "斯柯达汽车漏洞披露:超过140万辆汽车面临远程控制与追踪风险", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247525742&idx=2&sn=38f0f752f0a2a20ce08741f4dc7e8cef": "MyQ 打印服务器未经身份验证的 RCE (CVE-2024-28059)", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247185&idx=2&sn=c6276f9079857176ffbd0642427bfa0e": "安全工具 | Windows 权限提升漏洞检测工具集", "https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652316231&idx=1&sn=b3423c6bb4904ec61f6226b60f05da50": "【活动预告】“AI+Security”系列第4期之“洞”见未来:AI驱动的漏洞挖掘新范式", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488061&idx=1&sn=0c1b5efe856733122cc099e6199dfff3": "用友U8-CRM系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546009&idx=2&sn=8ff0c02ef8d437280d40107620596a67": "安全学院24期开班福利!大咖嘉宾课、poc知识星球免费送", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605007&idx=3&sn=36d026706ffc889660ce97c269b91909": "Spring漏洞测试与利用", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485605&idx=1&sn=0972cd05c82a2042a8e7ccd90c8f93a6": "赛克安全本周漏洞推送(12.9-12.13)涉及孚盟云、用友时空、蓝凌OA、月子会所、时空VMS等产品相关漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247488068&idx=1&sn=80c09e5283881fc86ac6235e1c6d96f3": "用友NC yerfiledown SQL注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzAwNTI1NDI3MQ==&mid=2649619760&idx=1&sn=941fa5fb1aeba9276998379a942c2a88": "Unix通用打印系统cups-browsed远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309849&idx=3&sn=d3d596e08cc54e08b3e20a458a7ac9e7": "Windows远程桌面服务漏洞允许攻击者执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066594&idx=2&sn=b944b25addf57bec5231e17520c14d2c": "【安全圈】大众和斯柯达曝12个组合漏洞,攻击者可在10米内无接触入侵", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066594&idx=3&sn=fb1485e3b4a0ed439c616f967bfc2543": "【安全圈】关键的Windows UI自动化框架漏洞允许黑客绕过EDR", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066594&idx=4&sn=b010357e9e80003c07a80b440507c355": "【安全圈】Ivanti最严重的 CSA 认证绕过漏洞曝光", "https://mp.weixin.qq.com/s?__biz=MzkxMTA3MDk3NA==&mid=2247486901&idx=1&sn=2b82a1c35d19c81b176e5237e5729b7d": "【新发布】2025年美《国防授权法案》涉中内容", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458585919&idx=2&sn=3bb34e0901a29e5afc2fe734b34df7e0": "斯柯达和大众汽车信息娱乐系统漏洞:攻击者可在10米内无接触入侵", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247547339&idx=1&sn=57a0ac75c29a76c3c8320bf2d4aae8ef": "斯柯达汽车漏洞披露:超过140万辆汽车面临远程控制与追踪风险", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247488175&idx=1&sn=1c921a987a68886965f42dd89bd995bd": "黑盒乱锤某专属SRC到0day代码分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521787&idx=2&sn=6bccdb74a809a4f90b14cdd90c9c2985": "Cleo修复严重的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247531758&idx=3&sn=fc121931d90c3bd57de3013a2513e4f0": "上周关注度较高的产品安全漏洞(20241202-20241208)", "https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247488069&idx=1&sn=48196bd07b78302298ba270e7ffa5e27": "安全设备漏洞 Checklist", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493957&idx=1&sn=e321390a222acdb9054677bb1645e4a5": "【众测挑战赛最终场】漏洞马拉松赛程二正式开启!超多业务等你来测!", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493957&idx=2&sn=25f373967d5cfff03e611ac6924fcec4": "【2024漏洞马拉松】OPPO赛程正式启动,1.5倍奖励,新人额外奖励……超多奖金拿到手软!还有手机大奖等你来拿!", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495011&idx=1&sn=256dd54d6fc4d062660d7c4c1cba4f91": "对攻击者保持视野领先:从漏洞情报到「扩展漏洞情报」", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247487889&idx=1&sn=3cc6ea970109136c7522b2c5ff73bdf0": "一个0day的开端:失败的man与nday", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500387&idx=2&sn=fe3998c2402e46104f04d64e18e62c50": "【漏洞通告】Cleo 远程代码执行漏洞 ( CVE-2024-50623 )", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247490507&idx=1&sn=72c3fc1663b1a5a1b7b64b2a8b1fafb0": "反面教材+1 切勿把个人信息放公网", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515188&idx=2&sn=57cd6e0b04194a02d28788957d533559": "渗透测试 -- Web服务程序解析漏洞和文件包含漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496596&idx=1&sn=5af17ad8fcf461b401780dfe33b5ff27": "利用开放式重定向、2FA 绕过等漏洞获取$1600赏金奖励", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489541&idx=1&sn=0a586e636598ce0f0cf438b4e3a00d47": "【云原生攻防研究】Istio访问授权再曝高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489308&idx=1&sn=5c47de34e923278823c34ea94e60cbb6": "【漏洞预警】Cleo远程代码执行漏洞CVE-2024-50623", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309849&idx=1&sn=6849f94f691ae8bacd9489f813864299": "大众和斯柯达曝12个组合漏洞,攻击者可在10米内无接触入侵", "https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247513670&idx=1&sn=191a30556fd27585c0e3eda82e42883b": "DevSecOps面面观 | 聊聊DevSecOps度量实践中的那些误区", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521787&idx=1&sn=aa7443d590ca0182f0cbd4386c81152a": "Apache修复 Struts 2 中的严重 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247498989&idx=2&sn=165316bf3bca3a70f0c334ba2c86dc44": "渗透测试 -- CSRF漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497792&idx=1&sn=38bf4f291266c0a62fb6758c56b04d46": "2024年十大最佳漏洞管理工具", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247488515&idx=1&sn=3ec0060c8eb88e788077895e9929ced8": "apt-t00ls 漏洞检测", "https://mp.weixin.qq.com/s?__biz=MzkyOTUxMzk2NQ==&mid=2247485822&idx=1&sn=7121f15cad1c3aaf8a54ff5735789067": "PHP 常见漏洞威胁函数 | 全面总结", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491726&idx=1&sn=3cc974eaf3fee6d1baa7741b52b96b0b": "漏洞预警 | I Doc View SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491726&idx=2&sn=e1d9019f697e2b42d4d8fee135c26031": "漏洞预警 | 顺景ERP管理系统任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491726&idx=3&sn=295c736ddffb607c469f96a60e45993d": "漏洞预警 | YourPHPCMS SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487539&idx=1&sn=8e7a1acdc9dccb02671b789348622ea4": "赛克安全本周漏洞推送(12.9-12.13)涉及孚盟云、用友时空、蓝凌OA、月子会所、时空VMS等产品相关漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488910&idx=1&sn=214f24e9f57f5edee007028c576f7f68": "【0day】圣乔ERP系统downloadFile存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493068&idx=5&sn=6cbbaac9e6c56d21ac09c0bb63b45aea": "OpenWrt 严重漏洞致设备遭受恶意固件注入", "https://mp.weixin.qq.com/s?__biz=Mzk0MzY3MDE5Mg==&mid=2247483870&idx=1&sn=f2d83df755a6168806722398cf014828": "北京时空智友科技有限公司企业流程化管控系统存在SQL注入漏洞(2024-新)", "https://mp.weixin.qq.com/s?__biz=MzkyODY3NjkyNQ==&mid=2247484369&idx=1&sn=6bf8e1fb3de630777ecce9568e186adf": "AI安全漏洞之VLLM反序列化漏洞分析与保姆级复现(附批量利用)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309860&idx=1&sn=faca11b08d12852dd40f9633cec1dfbf": "大量用户吐槽,Microsoft 365 又大面积宕机", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309860&idx=3&sn=cf5a31b4089c8f38b66010ac56f5528a": "知名企业级文件传输产品存在漏洞,正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605043&idx=1&sn=aa0ce5d1e96b5a03e2cb55586120ebf3": "考研还有VIP?人财两空要注意!|大众和斯柯达曝12个组合漏洞,攻击者可在10米内无接触入侵", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793494&idx=1&sn=f15254b38aa27158bd9f2161dd2d8b1f": "锐捷Reyee云管理平台发现严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793494&idx=2&sn=a4ae56bd580ed692bbcdfbca69751e99": "CISA 确认勒索软件攻击利用了关键的 Cleo 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486360&idx=1&sn=0d5a93471d5f0175a53d8867f0cb5a6d": "「漏洞复现」YourPHPCMS checkEmail SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488091&idx=1&sn=e6260f524d404ed289aa878c061f01f4": "Zabbix 存在SQL注入漏洞 (CVE-2024-42327)", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506296&idx=1&sn=d78be69680656e7f679dc04367806179": "价值1.4 W人民币漏洞!骚!缓存配置错误造成鉴权绕过", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546029&idx=1&sn=66caa413669a7c737555534c7e8eb0e6": "某阅读器支付逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546029&idx=2&sn=74867a57d82d0db91f08d5319d6253cf": "安全学院24期开班福利!大咖嘉宾课、poc知识星球免费送", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247633148&idx=2&sn=938e5457a6bef8ee0dc499916fa72b25": "在看 | 周报:央视起底倒卖游戏账号犯罪链;“招商银行崩了”冲上热搜;广西网安部门因未尽网络安全义务对某公司进行警告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458586874&idx=2&sn=def87ccd0e65d4f49f3448c619afac16": "“看雪漏洞小组”集结!组团挖洞,一起冲击华为漏洞更高奖励", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486275&idx=1&sn=18c0bd580c1f76ce1aface83320fe3c2": "cve-2024-26229 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505179&idx=1&sn=e91007c51b6a26874b220b9ab8fd50b7": "OpenWrt 中的严重漏洞:路由器和物联网的恶意固件风险", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506199&idx=1&sn=a2e9317ad8423244888fd94381b1b797": "每周网安态势概览【20241215】050期", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486375&idx=1&sn=2f51033c1bdcd86c554acfed2a3152e9": "大华DSS数字监控系统 attachment_downloadAtt.action 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487051&idx=2&sn=9461ae572b0f2b2e73a6011d9d0f7428": "某阅读器支付逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493073&idx=1&sn=9f159c0c70774c9a96763486cb049c58": "CVE-2024-11053 (CVSS 9.1):Curl 漏洞在重定向中暴露用户凭证", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309861&idx=3&sn=a55f0f1a630bff09a296cb60f7f7f5fd": "关键的Windows UI自动化框架漏洞允许黑客绕过EDR", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605056&idx=4&sn=cd7efed4feb6063d619c80cb9b327b5b": "网络资产收集与漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247495194&idx=3&sn=f9db1bf04962c337658793212dfa3d7e": "大众和斯柯达曝12个组合漏洞,攻击者可在10米内无接触入侵", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486218&idx=1&sn=1186b18e7409147510a68966666070f9": "实战 | 记一次双排渗透测试漏洞复盘", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505209&idx=2&sn=e3d879187e4870549404ef7580568b4f": "数据泄露:预防和应对", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505209&idx=4&sn=cb5748e0f25f778619769252e7da6d6d": "通过更智能的开发策略解决软件漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247488080&idx=1&sn=079ba007618c1361f56bb95581f4630a": "aiohttp存在目录遍历漏洞(CVE-2024-23334)", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247485065&idx=1&sn=5e280ee6cbdb82feb3f6c18fc3a0d168": "泛微云桥e-Bridge SQL注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517683&idx=1&sn=dc0041bac00ff3ac944686a1bdc2c8d8": "浅析渗透实战中url跳转漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486340&idx=1&sn=f9621c441ecc8206dacbd038cc589a87": "Atlassian Confluence 模板注入代码执行漏洞(CVE-2023-22527)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492987&idx=1&sn=06a5d1a121c335bda422a0164efdee31": "Nuclei 分布式漏洞扫描平台可联动 AssetsDetectAPI 资产搜集", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491734&idx=1&sn=8aad76fd2d17f86a7a23aaa215e8888c": "漏洞预警 | 大华DSS数字监控系统任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491734&idx=2&sn=6a75b0253bfade7be3bbc07cadf69ca0": "漏洞预警 | 用友NC SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491734&idx=3&sn=5814fffd970fed63f305991d99e3b362": "漏洞预警 | 中成科信票务管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899756&idx=1&sn=85ef00825aef53524d39f428a5c0de41": "微软 MFA 现 AuthQuake 漏洞, 允许无限次暴力破解!", "https://mp.weixin.qq.com/s?__biz=Mzg4NDc0Njk1MQ==&mid=2247486365&idx=1&sn=f6cf2499ec26220023398ce584fe36a1": "如何有效防范勒索软件攻击?最新漏洞与防御策略", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488944&idx=1&sn=766ae78023280906e2595e294bfa06da": "【0day】《黄药师》药业管理软件UploadFile存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247485932&idx=1&sn=ce5622d60a21d9b99e971546249d4360": "OpenCVE:一款自动收集NVD、MITRE等多源知名漏洞库的开源工具,累计收录CVE 27万+", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614686&idx=1&sn=5c2a183a959901cde0a0ce6f4dc52164": "【$25000】利用Zendesk Nday获取漏洞赏金", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489710&idx=1&sn=3da0a42c282713d932adcdd522c15dbc": "九思OA workflowSync.getUserStatusByRole.dwr SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485799&idx=1&sn=69a6489bc4850684bb6ba3d0815adb22": "【漏洞复现】某平台-Template-readfile-任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499702&idx=1&sn=50c4df738f4d9978c8aaff35f8ead247": "玩儿转网站备份泄漏漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485613&idx=1&sn=39d1f5801b29c06477abe0faa7e361eb": "【漏洞预警】Cloudlog 电台日志系统 SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247196&idx=6&sn=3956b599b3963d2a61b9cebefdf74863": "安全工具 | Windows 权限提升漏洞检测工具集", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489696&idx=1&sn=39930a2658d350b0f35807a65b724c2b": "昂捷CRM cwsfiledown.asmx 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605077&idx=4&sn=0f193d2b669247efaa2e79766bf4a968": "XXE 漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211300&idx=1&sn=bb5c277c3bcd4785d0600c971e15c282": "【十步\"杀\"一车】大众和斯柯达曝12个组合漏洞,攻击者可在10米内无接触入侵", "https://mp.weixin.qq.com/s?__biz=MzIzODMyMzQxNQ==&mid=2247484350&idx=1&sn=338f274cec383fd947de6beaa15f07ee": "【MalDev红队开发】笔记阶段汇总", "https://mp.weixin.qq.com/s?__biz=MzAxMzkzNDA1Mg==&mid=2247513511&idx=1&sn=b00ab171426c41029b3c99e3d470a76e": "平台权限已开放!“大狗Unlock”活动正式开启,豪华大奖等你来拿!", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655348234&idx=1&sn=e3bdf86725133b7439aeb030e494ef87": "利用GitLab漏洞,美国比特币ATM巨头Byte Federal数据泄露", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247484505&idx=1&sn=dbc7552b94faf5a4568e046ae01c3e44": "SRC漏洞挖掘思路手法(非常详细)", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793508&idx=2&sn=a73c2601eb9d9c522e68b9641c3a8ccd": "Clop 勒索软件组织对利用Cleo 0day窃取数据负责", "https://mp.weixin.qq.com/s?__biz=Mzg5MzMzNTUzMA==&mid=2247485668&idx=1&sn=513caba8f1d1116baf305d9e62e4c9eb": "实战渗透-某金融众测价值3k的漏洞(附SRC报告合集免费下载)", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486390&idx=1&sn=685818611c6aa820c730dde74580540f": "「漏洞复现」PbootCMS entrance.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487054&idx=2&sn=723ac096a1c539a39b6fd167b6a933b2": "记一次验证码绕过修改邮箱地址", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652113226&idx=1&sn=a9ca874583cfab7091716f44d589afb2": "网络钓鱼是数据泄露的无声前兆", "https://mp.weixin.qq.com/s?__biz=MzkyOTQyOTk3Mg==&mid=2247484933&idx=1&sn=620e7c286ce724019856a285ec016318": "Exp-Tools:一款集成高危漏洞EXP的实用工具", "https://mp.weixin.qq.com/s?__biz=MzkyMTY1NDc2OA==&mid=2247487236&idx=1&sn=acedfe7140658fa3d8b8e6bf994b390e": "【漏洞文章】JeecgBoot 任意用户密码重置", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526007&idx=1&sn=30b50a7e68c6ea8b1d791c25af3ebb6c": "CVE-2024-38819:Spring 框架路径遍历 PoC 漏洞已发布", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526007&idx=2&sn=4e7def1076ab4e88d21b868da6b21abf": "知名开源生物医学工具(InVesalius 3.1)存在远程代码执行漏洞 CVE-2024-42845", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526007&idx=4&sn=9db2d1040e02b05a2060512a24b1251c": "CVE-2024-45337:Golang 加密库存在缺陷,存在授权绕过风险", "https://mp.weixin.qq.com/s?__biz=MzA5OTI3MTE5MQ==&mid=2247485438&idx=1&sn=8d03a526fda42f52f94b334d0a290708": "【Poc】-Spring Framework路径遍历漏洞(CVE-2024-38819)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488155&idx=1&sn=22465acb48eb452307c7f4bc4940b2a0": "【0day】某州数码DCME-320存在前台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503123&idx=2&sn=5dd8d8ef12e293191bd286b255519a79": "利用GitLab漏洞,美国比特币ATM巨头Byte Federal数据泄露", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247505335&idx=1&sn=b644498e28b671bb36e14c80f9eb495f": "每周网安资讯 (12.10-12.16)|7-zip存在整数下溢或超界折返漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787627&idx=1&sn=4aca62c5aa480dccf358e90b043f3dcc": "警惕!微软Azure MFA漏洞曝光:数百万用户面临安全风险", "https://mp.weixin.qq.com/s?__biz=MzU1NTYxMjA5MA==&mid=2247504527&idx=1&sn=0ffd69e5c3aeba9398a43593b146f6d9": "米好信安成功助力第十七届山东省职业院校技能大赛(高职组)司法技术赛项!", "https://mp.weixin.qq.com/s?__biz=Mzg5NjY4NDg1Nw==&mid=2247483861&idx=1&sn=5c201134f7e14bd55bdd5d4923f0a60c": "fscan存在命令注入漏洞[doge][doge]", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490204&idx=1&sn=badaacd6921113d2a4a11f94f32db2fa": "【已复现】Apache Struts存在文件上传漏洞(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502627&idx=1&sn=97347a777e7bcfbcd672a0f5efc781c6": "安全热点周报:新的 Cleo 零日 RCE 漏洞被利用于数据盗窃攻击", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247568602&idx=2&sn=7cf70e0de693e7ca55e723467fec2b45": "一款简单好用的漏洞管理工具-miscan", "https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247488161&idx=1&sn=c186d4c63a938b5e71058467fcfb72ae": "74cms v4.2.1 v4.2.129 后台getshell漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247531062&idx=1&sn=ca1b73c32eb7b7655cd51fc61c3254e7": "研究显示:平均每个软件容器中发现600多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDUzMzY1MA==&mid=2247499380&idx=1&sn=8b4d272d36267ca85173f2320771ac61": "《东京将启动上四休三工作制》", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487188&idx=1&sn=593d4161d86b6af216a9a786bd23268a": "(0day)月子会所ERP某接口存在文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493078&idx=1&sn=01910d118c0de482cc69af2970614341": "CVE-2024-38819:Spring Framework 路径遍历漏洞 PoC 发布", "https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjkxMg==&mid=2247483987&idx=1&sn=8c3fb49d4ddbac681c27dfc0908c1175": "某科云连erp存在sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMjU5MzgzMQ==&mid=2247485084&idx=1&sn=94e7a98aa90e1b72155ab44a8fa77e4c": "CORS漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651309955&idx=3&sn=df35fe54116cbd577e1f9b43f4eccb8a": "iOS和macOS系统曝关键漏洞,可破坏TCC框架", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066638&idx=4&sn=34b67f730621eac29fece525a015ab35": "【安全圈】iOS和macOS系统曝关键漏洞,可破坏TCC框架", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495600&idx=1&sn=dc6800fba8615ff029253a77d6e5b8d5": "CNVD漏洞周报2024年第50期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495600&idx=2&sn=e5180e3d367866b22424a2c460e81b51": "上周关注度较高的产品安全漏洞(20241209-20241215)", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494243&idx=1&sn=615b86970a35613e4ee903ac6cab66d7": "3倍积分奖励!抖音电商情报专测上线", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488989&idx=1&sn=a98ecf1b0a0e0f054a18360b1d9e05ca": "【未公开】泛微e-cology 9 x.FileDownloadLocation接口存在SQL注入漏洞导致Getshell", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489739&idx=1&sn=6a2b3b35ac1d6254b2485512a3e059ed": "电子资料管理系统 ImageUpload.ashx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502638&idx=1&sn=98d3602c7f4df70ae3d72d1809a70dc3": "【已复现】Apache Struts 文件上传漏洞(CVE-2024-53677)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515209&idx=2&sn=155d31d384080db10d6e707621eeb8cd": "渗透测试 -- SSRF和XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517716&idx=1&sn=ef1b5ef09d2003aadce7cd0867da175b": "Eyoucms的sql注入复现", "https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490059&idx=1&sn=ccf765a173dfd31c4d49e2533124a10d": "未来五年网络安全最具潜力的十大方向", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499000&idx=1&sn=ee4aa3d20e3f82a903e5f51a028a9102": "某数AnyShare信息泄露漏洞检测脚本(12月16日更新)", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486341&idx=1&sn=b8e402631af06e5440f9c93a80d0c0ce": "支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491773&idx=1&sn=528008b81a8cb80cc311e0cbe1425822": "新的 Cleo 零日 RCE 漏洞被利用于数据盗窃攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247515548&idx=1&sn=2d8c70c61bc7d779572eb88723f3ca54": "漏洞通告|Cleo 任意文件读写漏洞(CVE-2024-50623)", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291918&idx=1&sn=2d9ffa6d537500e9ed7afcdf5ed01864": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486028&idx=1&sn=f153f8205b6f71c0daa4982536c1b5d0": "主动安全策略的 3 个组成部分", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497542&idx=1&sn=07d3f26e280c58604e0a757832204762": ".NET LINQPad 最新反序列化漏洞分析与利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491735&idx=1&sn=9ed2301b5331410d288c485d63ab7d33": "漏洞预警 | SonicWall SMA100 SSL-VPN缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491735&idx=2&sn=22ef31ba9057034fcae3fad4e1271e57": "漏洞预警 | Mitel MiCollab身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491735&idx=3&sn=bad2193b293b2463565dec1b321aa323": "漏洞预警 | WordPress Query Console远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247517246&idx=1&sn=a49a3d11a9fc2316f920b2f105cf0ef2": "HOST碰撞漏洞挖掘技巧,可以解决日常99%的问题!", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493923&idx=1&sn=3e3ff8d146bb1ccd0458cb151c5b6d36": "【神兵利器】飞企互联FE漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506241&idx=1&sn=dcc78dc007d6b22432c44e330d0d984e": "解锁+监控!最新安卓间谍软件NoviSpy植入疑利用了高通零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650475787&idx=1&sn=7ba275857c900c208be6d95a1190b0d6": "秦安:澳大利亚高达325瓶致命病毒至今下落不明,这四点不要放过", "https://mp.weixin.qq.com/s?__biz=Mzg3NTUzOTg3NA==&mid=2247514817&idx=1&sn=49238c059dfd55dac0f5b32c714cc812": "你了解VPC、子网、namespace之间的区别吗", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499000&idx=2&sn=ab9c01fe2209bcaa4c6faa8b14c51f0f": "渗透测试 -- 命令执行漏洞和反序列化漏洞学习课程(免费下载)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489313&idx=1&sn=a73bb22f29dcc1bfa6f4383454599255": "【漏洞预警】Menlo Security Menlo On-Premise Appliance安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488827&idx=1&sn=f3086118f07d69c4ba6746464f993e16": "Apache Solr 身份验证绕过漏洞分析(CVE-2024-45216)", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247490516&idx=1&sn=d28a93cc259ba3199e08cafaededba89": "沈阳深蓝2024年HW项目结算完毕", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247509952&idx=1&sn=a439169394b57c514f886bebb419777e": "24年11月必修安全漏洞清单|腾讯安全威胁情报中心", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485011&idx=1&sn=bda119ff87c4ce0aaef9439a4a1fb834": "腾讯云安全情报中心推出2024年11月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485803&idx=1&sn=540aa7d7066b69c8203a44a3ff99464a": "【漏洞复现】某平台-TUploadImgNoCheck-fileupload任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247514930&idx=3&sn=97eb14a55274c0237c298fe50fdf03f0": "学员分享 | CISP-PTS—渗透测试进阶的不二之选", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg0MjMzNQ==&mid=2247484101&idx=1&sn=229c59119c2a8177eba5b4c31c4c9d18": "DFA攻击白盒AES复现——某新能源车企", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503145&idx=1&sn=d055df27ce64c457cf92890ea9161a7d": "iOS和macOS系统曝关键漏洞,可破坏TCC框架", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503145&idx=2&sn=cc39acbf2eae9f5bcc28c9401e6615e6": "文件传输平台Cleo零日漏洞,Clop团伙声称对数据盗窃攻击负责", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486268&idx=2&sn=43f748ec703b4423d0217f58c8f54f33": "SpringSecurity权限绕过漏洞-好玩", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247501831&idx=2&sn=d46f09ca7bcd0bbb103e627313a165fb": "CVSS漏洞评分系统曝出严重缺陷", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247206&idx=6&sn=4a7573044a9419233d4717f67e8bac7d": "安全工具 | Windows 权限提升漏洞检测工具集", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605174&idx=1&sn=790e260cd929b46aaf819d4ca6f70c9e": "组织人员“刷单炒信”?严厉打击!|苹果 HomeKit 漏洞曝光,间谍软件入侵的新途径", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499533&idx=1&sn=547f274f9419278e747ee7fd6838edef": "CNVD漏洞周报2024年第50期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499533&idx=2&sn=334108850bd6b05f25907f6be5d4f166": "上周关注度较高的产品安全漏洞(20241209-20241215)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493125&idx=1&sn=c9ddfebf5517803b98cfb33475b9bbef": "CVE-2024-53677:严重的Apache Struts RCE漏洞 PoC 已发布", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493125&idx=3&sn=21cdfe1e3bd3da8d3455c249663a4978": "Windows 内核漏洞现被利用来获取系统权限", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251047&idx=1&sn=05349d5fcf4d21b805f74653b54cd0e4": "利用GitLab漏洞,美国比特币ATM巨头Byte Federal数据泄露", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485619&idx=1&sn=11f2d983b3f0dfceeac651b93b4de3ad": "【漏洞预警】蓝凌OA-thirdimsyncforkkwebservice-文件读取", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655348248&idx=1&sn=0e1754b0f166fa0b1fc24324e09e5f01": "文件传输平台Cleo零日漏洞,Clop团伙声称对数据盗窃攻击负责", "https://mp.weixin.qq.com/s?__biz=MzUzMDQ1MTY0MQ==&mid=2247506425&idx=1&sn=fcc3f82ea04ea9729651367ad210fd98": "1Day-某优先锋-流量管理系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDY1NzA2Mw==&mid=2247483845&idx=1&sn=d6a5712b5cfd90a1aede3097b897218c": "DTStack Taier 1.4.0 listNames sql注入分析(CVE-2024-41579)", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499709&idx=1&sn=37ae556f51a5d91da71ea04b2afee842": "写了一个自动测试弱口令漏洞的脚本", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793528&idx=3&sn=f3f3747dd5697ed2b3a379c507782412": "大众汽车信息娱乐系统存在多个缺陷,可能导致车辆被实时追踪", "https://mp.weixin.qq.com/s?__biz=MzAwNzQ1NTE1OQ==&mid=2247485937&idx=1&sn=c364c75ba642030a3e554e2d2a2d739c": "启明星辰集团2025校园招聘火热进行中!", "https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247527862&idx=2&sn=8861777e01ccd9fd2378cc3b7ee68d9c": "研究显示:平均每个软件容器中发现600多个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247515552&idx=1&sn=c60ac9a0a7631d7c6b2752e7ebb68964": "漏洞通告|Apache Struts 2远程代码执行漏洞(S2-067)(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=Mzg2NDg2MDIxNQ==&mid=2247485252&idx=1&sn=3b54011114b049cff1b78391ebafa5f4": "某科云连ERP系统存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MzcxNzg1Ng==&mid=2247485628&idx=1&sn=acde82258512cb49764da882fae372ad": "某科云连ERP系统存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526078&idx=2&sn=d8a722a5736e7e1a03a9878e36e11b9a": "通过 CVE-2024-52875 攻击 Kerio Control:从 CRLF 注入到一键 RCE", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247490793&idx=1&sn=6c634e841e3747293b0d85100b58cad5": "Apache Struts RCE (CVE-2024-53677) POC公开", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793528&idx=1&sn=26f1950857db2d8b248303e56b7af199": "以色列公司 Cellebrite 利用安卓 0day漏洞进行间谍软件攻击", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489319&idx=1&sn=713bc94c930a2f885aa69e6f2435dd60": "【已复现】Apache Struts文件上传漏洞(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=MzU3ODI3NDc4NA==&mid=2247484608&idx=1&sn=4b85151deec033d57451111c949e829c": "网安人体检报告:漏洞最多的人竟是我自己?!", "https://mp.weixin.qq.com/s?__biz=MzkzMDY2MDA2Ng==&mid=2247485815&idx=1&sn=f79057bf044c6febf9c06deea18e44ba": "【安全漏洞】Apache Struts任意文件上传漏洞S2-067【CVE-2024-53677】 POC 已发布", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247485655&idx=1&sn=0598b4c4ba4ae8f0d3fa999818df5c7e": "一次完整的Jwt伪造漏洞实战案例", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899772&idx=1&sn=87345af2e1739c5c24e80cb26e331d66": "iOS 和 macOS 惊现 TCC 绕过漏洞! TCC符号链接攻击手法深度解析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310049&idx=3&sn=e826857cbaba996b54f223f056a5154b": "最新的Windows内核漏洞,可获system权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066655&idx=1&sn=57e7dca07986a799143fbca48a88cb03": "【安全圈】苹果HomeKit出现安全漏洞被间谍机构利用 目前具体漏洞细节尚未公布", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066655&idx=4&sn=c56864b01e3e298b37ea2863eea40424": "【安全圈】最新的Windows内核漏洞,可获system权限", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488765&idx=1&sn=cb38f34e16235b415098e0a348c004ab": "【处置手册】Apache Struts任意文件上传漏洞S2-067(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521826&idx=1&sn=8401d12768469de690ea3a216e63c875": "Windows 内核漏洞已被用于获取系统权限", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521826&idx=2&sn=2e115cf641ac90636ca05cde8df5fa09": "安卓间谍软件 NoviSpy 利用高通6个0day感染设备", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587285&idx=3&sn=fe9ca791431e72d184fc3fca2470e155": "探秘移动端漏洞世界 | 零基础入门Android漏洞挖掘-入门篇", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484790&idx=1&sn=5552cbc8206e5552aefc265060c3bae1": "【漏洞复现】CVE-2024-8963、CVE-2024-8190", "https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247526130&idx=1&sn=c8e2d37ea184a3b62de81eecae6654fe": "直播预约 | 攻防常态化,企业如何提高自身实战能力?", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247547498&idx=1&sn=6a693d280a3781051b63c6bd9946069f": "神漏洞!任意修改车牌号码,让其他车主支付过路费和罚单", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486791&idx=1&sn=b6b5c31b8ace0a9aeec45c44ad2f5e53": "PbootCMS V3.2.9前台SQL注入漏洞(上)", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247488890&idx=1&sn=f1cac1b4bd5f878ba8ee4c5cb9afb63a": "漏洞预警|CVE-2024-49112 Windows 轻量级目录访问协议 (LDAP) 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487189&idx=1&sn=9d00a65196166346a91d7f6069740844": "(0day)秒优科技供应链管理系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493131&idx=1&sn=53054222a61d0f4f5bb380d9a1332acb": "古河大佬发现的最新漏洞:Windows LDAP RCE漏洞(9.8)", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513296&idx=1&sn=6e551ba031ad27466e2160d34f16b5ae": "神漏洞!任意修改车牌号码,让其他车主支付过路费和罚单", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247492794&idx=1&sn=dff86fd90195db40c0ceb1864c9396be": "上周关注度较高的产品安全漏洞(20241209-20241215)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489761&idx=1&sn=dff5f6a3183ce82bb042e8e510ba7c38": "PbootCMS entrance.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489750&idx=1&sn=cc8d9f80e65e4c98f0695aa7a49ead84": "万能门店小程序管理系统 onepic_uploade 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517720&idx=1&sn=dbbbdc3cbf014d0ba6d68a6b2882bd61": "XXL-JOB默认accessToken身份绕过RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488173&idx=1&sn=1a1b64eedff4ec862f6186b6d500ddbe": "【0day】99bitbet双语言交易所存在前台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094328&idx=1&sn=c158e0da11cdb3ad962815dd29cdf861": "iOS和macOS系统曝关键漏洞,可破坏TCC框架", "https://mp.weixin.qq.com/s?__biz=Mzg4MTg0MjQ5OA==&mid=2247487478&idx=1&sn=763e6261bb82678d8ff964b97ef5c41b": "项目管理去考PMP,还是去考CSPM?", "https://mp.weixin.qq.com/s?__biz=Mzg2NDU3Mzc5OA==&mid=2247489728&idx=1&sn=c72ffd32c1866180b7ffbc454f5d0502": "品牌焕新升级!“WaBug漏洞响应平台”正式起航,开启崭新篇章", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497562&idx=3&sn=95e20ae2b522c3b6fad7bf80b1c3cf6e": ".NET LINQPad 最新反序列化漏洞分析与利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491752&idx=1&sn=ac93a2e38067d03269d9e264b73bd524": "漏洞预警 | 用友U8CRM SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491752&idx=2&sn=dfb0ef6d0f30c63772cacf7c8524dbb4": "漏洞预警 | 圣乔ERP系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491752&idx=3&sn=758d0e61e39f07b88b2102f6f3281010": "漏洞预警 | 金和OA任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487085&idx=2&sn=3a1a4c5b93874a0f93689f06386c8972": "CVE-2024-48307:JeecgBoot SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506278&idx=1&sn=358d4453178e40281bc60e817e5ae313": "Dirty DAG:微软Azure数据工厂的Apache Airflow集成中的新漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493955&idx=1&sn=aeb1f353ae9f70b0fc315196774e71e2": "【神兵利器】帆软BI反序列漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492975&idx=1&sn=57e419207530fa3496e3372624655a3b": "大众汽车集团的信息娱乐系统存在多个漏洞,可能导致车辆被攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247489467&idx=1&sn=5c6dfa3003de97d19e34c9cc46d1c2ff": "本周六举行2024年度密评从业人员考核", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488995&idx=1&sn=9617efc19dde578fb08c62fa156334e5": "【大量存在】飞鱼星-路由器存在敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1Mzk0MjU1OQ==&mid=2247493289&idx=1&sn=97dff30b3420519894ae5911d450f9a7": "【漏洞预警】热门摄像头曝零日漏洞,黑客借此入侵政府部门", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507565&idx=1&sn=f1eb832586d6ef20bbd6b579dff4956f&chksm=cfcabd79f8bd346f18fe53c9b16c9b7029e5124dffe6fd10d7027af46c8fab5d4f12807425d8&scene=58&subscene=0": "【更新】Apache Struts2文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546080&idx=1&sn=25c1d7d63492dabf32381937df0d6dfb": "区块链安全 | 智能合约重入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492666&idx=1&sn=a650f29da3e91b115518248dd903d28c": "【已复现】Apache Tomcat条件竞争致远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzA3OTMxNTcxNA==&mid=2650956216&idx=1&sn=4ae52e54a6cbc81e9830e7ef8bf0a3e3": "知名企业深陷漏洞“迷局”,网络安全专家组队“破局”!", "https://mp.weixin.qq.com/s?__biz=MzkxNzIzNDExMA==&mid=2247486657&idx=1&sn=9f0234ffb306e760ae29f81a6c6df980": "【最新Struts2高危漏洞】Apache Struts CVE-2024-53677", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493733&idx=1&sn=3a4d58e897ccecbb382cfe9ed4645ae7": "CVE-2024-50379|条件竞争Tomcat RCE POC(首发)", "https://mp.weixin.qq.com/s?__biz=Mzk0NDU5NTc4OA==&mid=2247484286&idx=1&sn=22775600d7b7d06b6e9d816ea4ee3b38": "渗透测试——曲折的文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDc0MjUxMw==&mid=2247486030&idx=1&sn=49476b5e6cff4f67c66f9d23c63f9323": "打印机也有“隐形”威胁?这些安全漏洞请注意!", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ2NzQ0Ng==&mid=2247484906&idx=1&sn=bfa5e6d913bdfe338b72726ba0e38830": "记一次CNVD事件漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5Mzk2OQ==&mid=2247486318&idx=1&sn=93c203e68a7de391e374b0a3cfb18297": "CVE-2024-50379|条件竞争Tomcat RCE POC(首发)", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485807&idx=1&sn=d0fbcedf0a441bb7f7b4b8fa166ce0d1": "【漏洞复现】某平台-getTotalData-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247487464&idx=1&sn=d299e081cf73a1f046b0b0b6c706aa4d": "极致经典 | 一次客户系统渗透,多种经典漏洞集合于一身", "https://mp.weixin.qq.com/s?__biz=Mzg3MDk0OTc1Nw==&mid=2247488016&idx=2&sn=c33e7785242fdaf63efd18f32f38cabf": "Apache Struts RCE (CVE-2024-53677) POC公开", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503165&idx=2&sn=fae09af9640fbd5683d7ff03f72b98ca": "最新的Windows内核漏洞,可获system权限", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605232&idx=1&sn=a616a1590e3a342cb0c9610c68865fd7": "充值499元成为VIP,开通权限后随时可约!|神漏洞!任意修改车牌号码,让其他车主支付过路费和罚单;", "https://mp.weixin.qq.com/s?__biz=MzAwMTg3MDQzOA==&mid=2247510958&idx=1&sn=a260090535e30de0a2c233c3787b963a": "苹果HomeKit出现安全漏洞被间谍机构利用 目前具体漏洞细节尚未公布", "https://mp.weixin.qq.com/s?__biz=Mzg3NTUzOTg3NA==&mid=2247514818&idx=1&sn=0d2f983bfde8f4fd789a80d29d0a8736": "安全大数据平台的上游、下游系统有什么", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247537024&idx=2&sn=1abdfffc1ecf4bc0f1051caad49e9731": "神【漏洞!】任意修改车牌号码,让其他车主支付过路费和罚单", "https://mp.weixin.qq.com/s?__biz=MzA4NzU1Mjk4Mw==&mid=2247492223&idx=1&sn=44c088b639e364ad470e0c2462ad18b8": "SQL注入漏洞批量检查工具", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496875&idx=1&sn=c5cdc97e1bdf31dd8a9d1a81e9c68d06": "【漏洞通告】Apache Tomcat远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUxNTQxMzUxMw==&mid=2247524710&idx=1&sn=b994ca870206d2cf58d1ea0aa87fec12": "安全通告丨网络安全漏洞通告(2024年12月)", "https://mp.weixin.qq.com/s?__biz=MzkyNzYxMDQ2MQ==&mid=2247484977&idx=2&sn=62df25a36acfb864e1cd34f92d669c1f": "泛微ecology9 1day分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526094&idx=2&sn=b381eedcae7c75c5af5d8b7ae48d7bb7": "自动化漏洞利用工程:从理论到实践的旅程", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486366&idx=1&sn=ccc57cb3f6086c4fc9b47ac935f996d7": "Apache Tomcat 条件竞争文件上传漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=Mzg5MjY2NTU4Mw==&mid=2247486500&idx=1&sn=6b6ce9bf66721fd7f5823e3eadc950c1": "Apache Tomcat CVE-2024-50379", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500298&idx=1&sn=05c72ef1db47fe87704a5732066cd8fa": "【高危 含POC】Tomcat 远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502648&idx=1&sn=efadd668e22cb6151e0765d0937e3343": "【已复现】Apache Tomcat 远程代码执行漏洞(CVE-2024-50379)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247491149&idx=1&sn=c88b61c414d7d9fcef48e9f185499dc7": "cve-2024-53376:CyberPanel RCE 已发布PoC", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489324&idx=1&sn=df351d8075e19c7590b08dcd023cfb94": "【漏洞预警】 Apache Tomcat default servlet条件竞争文件上传漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484736&idx=1&sn=174f2fddd9500e3b10c1bd5141227669": "【复现】Tomcat DefaultServlet远程代码执行漏洞(CVE-2024-50379)风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247633354&idx=2&sn=97c545e273d442a6684a5cb8be44dbee": "黑客通过漏洞赏金赚取了80万美元", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247488084&idx=1&sn=d751a3b846f4f8b5c90e6df02fd57f14": "蓝凌OA thirdimsyncforkkwebservice 任意文件读取漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484375&idx=1&sn=e7eb4755e4f7b6c3f7538961222d5772": "第十七期 · 安钥®「漏洞处置标准作业程序(SOP)」征文启示", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521836&idx=1&sn=1ac593b2544b8e1e86da611a669fe6f3": "超2.5万SonicaWall VPN 防火墙易受严重漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521836&idx=2&sn=31f9af20432d3d2a6003ea8c1a92fe5a": "大众信息娱乐单元存在多个漏洞,可用于实时追踪车辆位置", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247552053&idx=2&sn=49717316acd55d82b72512d983e064cd": "【免费领】挖洞宝典:全网搜罗的漏洞挖掘实战技巧大全", "https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247520280&idx=1&sn=b8b711192227797e246af9e1ea6902a6": "知名企业深陷漏洞“迷局”,网络安全专家组队“破局”!", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500402&idx=2&sn=670455c374a3c6bff14b495943c0d1c4": "【漏洞通告】Apache Tomcat 竞争条件远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzI3MzExMTk5Mw==&mid=2247484533&idx=1&sn=1ae93875862de8a96cf077f3aeee9a0a": "Tomcat CVE-2024-50379 条件竞争漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwNzk0NTkxNw==&mid=2247487025&idx=1&sn=a5c8cfe64de615946d67f91ff2853f04": "漏洞风险提示 | Tomcat 条件竞争漏洞导致远程RCE(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523957&idx=1&sn=969b80d781110862122c8003edbc7023": "【漏洞通告】Tomcat 远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495445&idx=1&sn=4ddda7a5db910393e22c6f97f0689b2e": "【论文速读】| 利用人工智能修复 OSS-Fuzz 中的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513306&idx=1&sn=1f55c8207eaf709ec57b190fb4fdd06e": "产品漏洞被利用致大量用户数据泄露,这家巨头被罚超19亿元", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462113&idx=1&sn=93c8155dfc2d56ca35448e14cca8ac6a": "信息安全漏洞周报(2024年第51期)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488777&idx=1&sn=2e8d82ca372a1f191c3e46d818a39475": "【漏洞通告】Apache Tomcat条件竞争代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490212&idx=1&sn=16ffe5eaf17ed711dbfcc0a9f203e3a4": "【已复现】Apache Tomcat存在远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507571&idx=1&sn=2ee4ea1d3100d5ff50536b0d61bec91d": "漏洞通告 | Apache Tomcat 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787651&idx=1&sn=3ec2660ca7270d7114baa4c06baf3c9e": "瞄准安全研究人员!攻击者在GitHub上使用伪造PoC窃取39万WordPress凭证", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247531866&idx=1&sn=6f39682cbc5c8f1e3e0d2d15020fcf16": "研究发现:CVSS 漏洞评分系统存在严重缺陷", "https://mp.weixin.qq.com/s?__biz=MzkwMjQyNjAxMA==&mid=2247484768&idx=1&sn=312d27be01812f1c01852048d99ce2a2": "教你用python读取csv文件,调用企业微信API发送邮件", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247220&idx=6&sn=401fbb41c7961877e30847322da4da10": "安全工具 | Windows 权限提升漏洞检测工具集", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247488895&idx=1&sn=39e2d95db349cae397597868a345661e": "通杀漏洞|CVE-2024-50379 Apache Tomcat条件竞争RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY3MTM4Nw==&mid=2247484056&idx=1&sn=6b388eef926a79e484f3d3be1e0d17b3": "CVE-2024-50379|条件竞争Tomcat RCE POC(首发)", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247617580&idx=2&sn=ce08ac01fa6014eab9112d9d30ac8683": "扩展 SAE J1939 的攻击场景:传输协议中已建立和新的漏洞的综合分析", "https://mp.weixin.qq.com/s?__biz=MzAwNDUyMjk4MQ==&mid=2454828910&idx=1&sn=34a18dd889f688ac490b7a5764d9ae6f": "霄壤实验室获Apache社区致谢,永信至诚「数字风洞」测评中心提醒:Apache Tomcat 存在远程执行漏洞请尽快修复", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496629&idx=1&sn=39a9eef5154441c9a42979a74ba9a774": "【高危 含POC】Tomcat 远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzIxODIzNzgwMw==&mid=2654070871&idx=1&sn=3bd5b22989dd3cfbc5968127ac2776ca": "漏洞马拉松2024 | 团体对抗,锋芒毕现!", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486635&idx=1&sn=7ac8d259c95b99e721ec7343479f7f00": "【漏洞预警】Apache Tomcat 条件竞争漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489547&idx=1&sn=3f8b0e53b8842f04f2498d88310da4b9": "从零开始:K8s安全测试与漏洞挖掘-8", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489792&idx=1&sn=03b59f0b3700284eb4565b0a37a92118": "海康威视运行管理中心 applyST 远程代码执行漏洞(XVE-2024-33936)", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515252&idx=2&sn=aa9a9358b4941b26a8602d0511794999": "渗透测试 -- 目录越权和旁注和CDN绕过越权漏洞和登录页面漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486343&idx=1&sn=0509e8974bf768fb57e8b7f7929f4f9f": "【SRC】记录一次从小程序静态分析+动态调试获取到严重漏洞的过程", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633159&idx=4&sn=e6bff7477cbc41d023fcb0d19a2e202e": "产品漏洞被利用致大量用户数据泄露,这家巨头被罚超19亿元", "https://mp.weixin.qq.com/s?__biz=MzA3ODE0NDA4MA==&mid=2649401063&idx=1&sn=d1b0f04a913a540a4eccee9ef1c07b6e": "网络产品安全能力提升计划漏洞线下检测(第一期)活动成功举办", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491768&idx=1&sn=434935e3e87e391acbfdac4d795baca9": "漏洞预警 | Ivanti Cloud Services Application身份验证绕过、命令注入和SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491768&idx=2&sn=b419456e71a8697d34f4fee2ab6007bf": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491768&idx=3&sn=cde190167226801bbe33165c54038bff": "漏洞预警 | 智邦国际ERP SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247493956&idx=1&sn=7d3c35588ef20be40738ace28accb0d9": "【神兵利器】高危漏洞EXP实用性工具", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247485381&idx=1&sn=79215a9a9657a0915aa63ef5fa6fd754": "常见的API漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247489470&idx=1&sn=4c7366c85823353766c469550d0b3652": "如何开展漏洞扫描工作", "https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247561055&idx=1&sn=2aacb4c8d81aee0dd9b2fd4c4d7059b2": "喜报!炼石中标海尔集团数据安全项目", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247488999&idx=1&sn=51229f0d00309669fc68d0a72b7b5981": "【漏洞复现】泛微云桥e-Bridge checkMobile存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491781&idx=1&sn=cd905e6813d77910c07ec8a2d271b234": "补丁警报:严重 Apache Struts 漏洞被攻击者积极利用", "https://mp.weixin.qq.com/s?__biz=Mzg5MjY2NTU4Mw==&mid=2247486515&idx=1&sn=519f6f8f6b6913d1ad0394f7ea6f9f61": "Apache Tomcat CVE-2024-50379", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247495233&idx=2&sn=117791f0a46cb4234c11d39ada84abe2": "美国数字车牌被曝存在漏洞,车牌号码可任意修改", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247495233&idx=3&sn=380a579d683bd3b712e6a479ea3cdb0a": "产品漏洞被利用致大量用户数据泄露,Meta被罚超19亿元", "https://mp.weixin.qq.com/s?__biz=MzIyNzc3OTMzNw==&mid=2247485624&idx=1&sn=3e15ce8db03128a8a48343186209f11c": "【工具分享】一款基于Java框架的综合漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493735&idx=1&sn=1bddb619955a1bd046d9d339ac759299": "某源码前台RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493196&idx=4&sn=fce9b7ba151b7167f5542611499fff83": "威胁行为者正利用最近披露的 Apache Struts 漏洞 CVE-2024-53677。", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247235&idx=6&sn=cfe0c9a4cf9ec353c32e9fcf9b32c221": "安全工具 | Windows 权限提升漏洞检测工具集", "https://mp.weixin.qq.com/s?__biz=MzU2NjgzMDM3Mg==&mid=2247493867&idx=1&sn=23e869acb0c12d949a39b98e5555946c": "Apache Tomcat远程代码执行漏洞(CVE-2024-50379)复现+修复方案.", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247484945&idx=1&sn=292914d90842ea641d9baccfb114f32a": "记一次牛逼克拉斯的漏洞挖掘过程", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497583&idx=3&sn=a257313ae94cf7a802e4006aba4ab91e": "50套.NET系统漏洞威胁情报(12.13更新)", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247510007&idx=1&sn=6fc90ec81b2c25fd0b615bd24433abac": "黑客泄露了思科 4.5TB 数据", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486333&idx=1&sn=349981824f44648bd9432a1c1bdc7870": "实战-关于KEY泄露API接口利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310195&idx=3&sn=d9e83e129b0a14950e2d04cd8ad9576c": "Apache Tomcat新漏洞允许攻击者执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066717&idx=4&sn=b641682a1ea1ea39882cd929b37a230e": "【安全圈】Apache Tomcat新漏洞允许攻击者执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541073&idx=1&sn=66d200edcdbbb26a0c8618ca749bcfbe": "Apache Struts重大漏洞被黑客利用,远程代码执行风险加剧", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664232585&idx=5&sn=b82810b82d6eb59c2598075d87f09b53": "关注 | 第一期漏洞挖掘与利用中高级培训班招生", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247487434&idx=1&sn=52ed8d0b21e6701c0e4503999d9dfeaa": "Apache Tomcat 最新RCE 稳定复现+分析 保姆级!附复现视频+POC", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587465&idx=2&sn=e5d0f25746dce13de80ec7ed9907263f": "​Apache Tomcat高危漏洞曝光,远程代码执行风险需警惕", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490111&idx=1&sn=0c1158934db85f02099fd8f3d919c930": "创宇安全智脑 | 灵当 CRM uploadify.php 任意文件上传等70个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MjM5NzgzMjMwNw==&mid=2650662503&idx=1&sn=34de5fb811a2d054325b638bf4046a1a": "已结束意见征集!《关键信息基础设施商用密码使用管理规定(征求意见稿)》有哪些说明值得关注(附下载)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500408&idx=2&sn=3445af6ce0d2a1f047ac681fac4d2c4e": "【漏洞通告】BeyondTrust RS & PRA命令注入漏洞(CVE-2024-12356)", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247568707&idx=2&sn=6d994592bb54a5d5a6bce372dcf38907": "支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=MzkzNTY1MTg4Mg==&mid=2247484202&idx=1&sn=0e1298d761bd7888caf1c2f8f6dee4f1": "Apache Tomcat 最新RCE 稳定复现+分析 保姆级!附复现视频+POC", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492478&idx=1&sn=8cf4e1f8b4b3378e053529a9505884c3": "黑客利用Linux eBPF传播恶意软件展开攻击活动", "https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247484183&idx=1&sn=54a360747cca4c12f38b8325bbe8230a": "新高危漏洞 (附在野POC)| Struts2任意文件上传漏洞(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247531931&idx=1&sn=5668beb83a342334cd0c5e435601230c": "避免漏洞管理中的陷阱:关键见解和最佳实践", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495461&idx=1&sn=dc63c0a29d46b90e275110fbfdf9c5f0": "附原文 |《2024年漏洞与威胁趋势报告》深度解读", "https://mp.weixin.qq.com/s?__biz=MzkyODY3NjkyNQ==&mid=2247484396&idx=1&sn=73b8f9b54a54eb1b5412bfc84a7662fc": "Apache Tomcat 最新RCE 稳定复现+分析 保姆级!附复现视频+POC", "https://mp.weixin.qq.com/s?__biz=MzA4NjMwMzI3Mg==&mid=2247500501&idx=1&sn=0b2c3d4cdb4a3205d1ec94183b5108b1": "【漏洞通告】Apache Tomcat远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507585&idx=1&sn=5ece95159551948b0ffa7cd719aefdf7": "近期活跃利用高危漏洞自查!含文档管理、Exchange、Apache多个产品", "https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247487499&idx=1&sn=54c62641c62f93cdf13a14f22231801f": "Tomcat RCE | CVE-2024-50379条件竞争RCE复现,带视频教程及POC", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485811&idx=1&sn=e64daf3659180b8b3ccfa808c5a56017": "【漏洞复现】某平台-getPicServlet-readfile任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488266&idx=1&sn=801e77220b48b586c1f056f13b2add69": "【1day】某家政上门预约小程序系统存在前台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487197&idx=1&sn=f0e9f21b1644944d1229df83969d9cc0": "(0day)安科瑞环保用电监管云平台存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTEzMjc4OA==&mid=2247488982&idx=1&sn=94a03c5d2886be42631e3fc9eef6db7f": "Struts2漏洞深度解析 :CVE-2024-53677任意文件上传逻辑绕过及修复建议", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247484949&idx=1&sn=a085c39db61dc1de6a41747466c1fa26": "工具集:TomcatScanPro【tomcat自动化漏洞扫描利用工具】", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614726&idx=1&sn=78a89e1680495198a24d2c662e557ea0": "漏洞挖掘 | Swagger UI 目录枚举小总结", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486412&idx=1&sn=712f6ea6d9343dfea4389136b50008d4": "「漏洞复现」方正畅享全媒体新闻采编系统 screen.do SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486475&idx=1&sn=a6abc6678bce010ef732dfc02c5de936": "【漏洞通告】GitLab Kubernetes Proxy Response NEL 头注入漏洞(CVE-2024-11274)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486475&idx=3&sn=9f3590ac9d85d305b380de81489941af": "【漏洞通告】Ivanti Cloud Services Application 身份验证绕过漏洞(CVE-2024-11639)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486475&idx=5&sn=4d662930a1561be456356a31827c5a92": "【漏洞通告】Cleo 远程代码执行漏洞 ( CVE-2024-50623 )", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496635&idx=1&sn=34c31d16785a1db6359cc507f1312498": "深入浅出API测试|搜集分析与漏洞挖掘实战", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490119&idx=1&sn=b4ee325a5b5ff4787c6b6b1290e0f9e8": "Fortinet 警告可能导致管理员访问漏洞的关键 FortiWLM 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587465&idx=3&sn=f606b36568e16830f7ccb8d80bdd6cea": "欢迎报名!​“系统0day安全”系列课程:掌握漏洞挖掘重要技能", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489811&idx=1&sn=d672db7d9c8cfc80ee8a56623d137ecf": "时空WMS-仓储精细化管理系统 ImageAdd.ashx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493003&idx=1&sn=a66dc3c7877fa2f4288ba75e6e950847": "Fortinet 警告称其无线局域网管理器 FortiWLM 存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515271&idx=2&sn=c418da4780646d43c1d688f964809dc3": "渗透测试 -- 逻辑漏洞和挂马和钓鱼", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499048&idx=1&sn=8b4ebcd450f2bf1c19eef0d34f7ae4a8": "Apache Struts2 文件上传逻辑绕过(CVE-2024-53677)(S2-067)", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499048&idx=2&sn=7859c9f96e59a019564b5d235b56faeb": "渗透测试 -- Web漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485285&idx=1&sn=45a780c7b3b660fa186c85863e85cb3c": "从技术抗衡走向体系化国家力量比拼——2024全球网络战呈现五大特点", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489333&idx=1&sn=dff7d934b42679e01f662c8f10e27f33": "【漏洞复现】Apache Tomcat竞争条件远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486475&idx=4&sn=943a72a40bc01ee1401d16c5b6db3f11": "【漏洞通告】OpenWrt Attended SysUpgrade 命令注入漏洞(CVE-2024-54143)", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247488587&idx=1&sn=36947cca7b136734d9f974ecba1910b9": "从漏洞数据库搜索漏洞的工具go-exploitdb", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491780&idx=1&sn=9ad859958ef94c4b28503b45631a5cce": "漏洞预警 | Apache Struts2文件上传限制不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491780&idx=2&sn=c706c7bf32eb530317c380573930ef57": "漏洞预警 | 杜特网上订单管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491780&idx=3&sn=93fa1f3e603467757cccc4f78afa7774": "漏洞预警 | GitLab Kubernetes Proxy Response NEL头注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247494055&idx=1&sn=e6d8fa033cd944548086c716ac0004fb": "【神兵利器】XXL-JOB漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247561231&idx=1&sn=d395619d9c7e37fee040540992546806": "喜报!炼石中标某大型国有综合性保险金融集团数据加密项目", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497894&idx=2&sn=a3d6383d0a7c182a96101ad4591734e1": "Apache Struts RCE 漏洞被公开 PoC 积极利用", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486475&idx=2&sn=d72f0a05e1e612fa56354ae1a878a765": "【漏洞通告】Apache Struts 2 远程代码执行漏洞(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484499&idx=1&sn=5e4e9c892b49d69df1a5ebc34b3ee227": "CVE-2024-11477:7-Zip 中的严重缺陷可让黑客控制", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486361&idx=1&sn=38c35d7dfeeb4f23bb79b134d105a9f0": "分享OAuth2.0原理及漏洞挖掘技巧案例分析", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491251&idx=1&sn=e1519a3103033cf6a50d9d229f99003c": "记一次溯源真实案例", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489068&idx=2&sn=6e38841cf254c1c670f47a40ee15bd3c": "【漏洞复现】方正畅享全媒体新闻采编系统reportCenter存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NTk4MzY0MA==&mid=2247487895&idx=1&sn=f6a8e98c8bbd2f91264c648e106570e5": "Zabbix从环境搭建到漏洞利用,附批量漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247495012&idx=1&sn=1296119e4a5d81cc17c8c894eb81c9ec": "【工具分享】全网首发!袭扰国内top1家族Mallox家族恢复工具", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487541&idx=1&sn=e4a29fa7e3d8982823df494f4d681f54": "赛克安全本周漏洞推送(12.15-12.20)涉及Cloudlog、bmcm、汉明科技-无线控制器、迈普无线系统等产品相关漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485633&idx=1&sn=250856a0c5df8005e7e4ccafa8fc5e53": "赛克安全本周漏洞推送(12.15-12.20)涉及Cloudlog、bmcm、汉明科技-无线控制器、迈普无线系统等产品相关漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546115&idx=1&sn=a2d3f19e56af1f2a02b2d6e5ff9f69bc": "CVE-2024-21762漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546115&idx=2&sn=375c6493f91e8c36e4d450c4c849e2da": "区块链安全 | 智能合约重入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454063729&idx=1&sn=589720470530ff0346b0da4e297f010f": "信息安全漏洞周报【第002期】", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605364&idx=4&sn=aee1cb28e83f2b6dd706be24fe33bf22": "SQL注入漏洞批量检查工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247488095&idx=1&sn=9e6234bfb837864874b7823c72a5a398": "飞鱼星路由器 账户密码泄露漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094354&idx=2&sn=3a60c2337e04ee15140b801c8002914f": "Apache Tomcat新漏洞允许攻击者执行远程代码", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488851&idx=1&sn=efb4d5fe76d020e05760236c16b33ac5": "Apache Struts2 文件上传漏洞分析(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247699&idx=1&sn=8cfa9f1b17a853ce8e42a0c99bc8acae": "CVE-2024-53677:Apache Struts2文件上传逻辑漏洞S2-067", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513326&idx=2&sn=b46e1ade4f9e30f4f08fbf4bbca1bd20": "外媒:马斯克因涉密安全问题受美军方审查", "https://mp.weixin.qq.com/s?__biz=MzI0NDgxMzgxNA==&mid=2247496499&idx=1&sn=3ad526afdadb1d41245df21bd6cfbd64": "每周安全速递³²³|Cl0p勒索组织利用Cleo漏洞攻击全球企业", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247496974&idx=1&sn=32969894b2db845f027d58c9c704ba42": "CVE-2024-53677:Apache Struts2文件上传逻辑漏洞S2-067", "https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247512487&idx=1&sn=2084969d835f481f70244a795d40aa77": "NDSS 2025| 抖音集团安全研究团队提出机密沙箱内存管理方案WAVEN", "https://mp.weixin.qq.com/s?__biz=MzAxODg1MDMwOQ==&mid=2247506869&idx=1&sn=5eff5ed4d2afa5ff3a6c0a8bfff9ccdf": "再获漏洞治理能力认可,谋乐科技获颁工信部NVDB通用漏洞库“技术支撑单位”荣誉称号", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521859&idx=1&sn=6aade83438190800942638166b046757": "Fortinet:注意FortiWLM漏洞,黑客可获得管理员权限", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521859&idx=2&sn=342840d67c1fbf01af15a41ea7621df8": "Chrome 131 更新修复高危内存安全漏洞,其中1个获奖5.5万美元", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931270&idx=1&sn=cb11c508d1c42ef2b727375e2695dba9": "第十一届“金松奖”已开始申报,包含合规科技发展奖、AI科技进步奖等", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247552089&idx=1&sn=e58b77c5f8083efd50bde11cf5bb2896": "解放双手,批量刷漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498611&idx=1&sn=5451b3f155e7c67d51aadd3e816a5898": "《中医医院信息与数字化建设规范(2024版)》解读", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500414&idx=2&sn=40647e4e4d3af58a8c692e400df5ba6e": "【漏洞通告】Sophos Firewall SQL注入漏洞(CVE-2024-12727)", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247531975&idx=1&sn=56c499e1153e0c4f6356185ac1ded5a1": "思科物联网无线AP遭遇严重命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489338&idx=1&sn=d7f3b1f635c785d818ad3b8e32e9d83c": "【漏洞预警】moaluko Store Locator代码执行漏洞(CVE-2024-12571)", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486034&idx=1&sn=e1071dd8c3acaa34494bfc2255a23817": "Play 勒索软件声称 Krispy Kreme 遭入侵,威胁泄露数据", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499454&idx=1&sn=96a579525a54f7e4000867bcfb7643f3": "G.O.S.S.I.P 阅读推荐 2024-12-20 Android芯片组相关漏洞总结报告2025版", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493219&idx=1&sn=dc76c163b7149d91b59b32c45efda63a": "[PoC] Databricks 远程代码执行漏洞 CVE-2024-49194", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587582&idx=2&sn=4b21c27b28faa9c50e657aba34ad4be4": "FortiWLM重大安全漏洞曝光,远程攻击者可夺管理员权限", "https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247503614&idx=1&sn=6411afe7e813f28c7e5dc04f06eafa28": "观安信息获评“2024上海软件核心竞争力企业(规模型)”", "https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247515061&idx=2&sn=221fe9e7df5487a65ac6c27d27bb64a3": "CCSK试题等你来答,参与抽奖赢取首期班福利!", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486354&idx=1&sn=ed60c9249844adc217d6dc144178754c": "Src挖掘之比较有意思的几个漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486353&idx=1&sn=652419703f4d5311dac369eb1a1a6014": "记一次磕磕绊绊的sql注入漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0NDQwMDY1Nw==&mid=2247485413&idx=1&sn=47451afa77e27bca85b16eb8c9c125ea": "隆重登场:Google 最新推理模型,Gemini 2.0 Flash - Thinking-exp-1219", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489822&idx=1&sn=c2122703daa803e3edfa9adc122a6c16": "时空WMS-仓储精细化管理系统 SaveCrash.ashx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899798&idx=1&sn=a5f4eb2aa8955f5fe679cd627968dadb": "Apache Struts 严重漏洞恐再现“噩梦”, 攻击者已展开行动!", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491804&idx=2&sn=1b58756b842eabe75c03da17279606b8": "漏洞预警 | NextChat SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491804&idx=3&sn=7d2c640fda5f60bb78dd1511bd64f853": "漏洞预警 | 网神SecGate3600防火墙任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487125&idx=1&sn=2dcb68ae48973292ce0e41ebe7b6d41a": "Zabbix从环境搭建到漏洞利用,附批量漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487125&idx=2&sn=ec3d00ecc8c4f8f61c72585c57ffb1d1": "CVE-2024-50379|条件竞争Tomcat RCE POC(首发)", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489098&idx=1&sn=241319fc05874fab20fe11fc31e569a5": "【0day】中科商软云连ERP getAllUserListData存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247494056&idx=1&sn=745c6db09be2022a37d4366370e6fa3d": "【神兵利器】Redis漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515286&idx=1&sn=f7ad70d62fef2564f484020c5716f9a2": "Apache Tomcat(CVE-2024-50379)条件竞争致远程代码执行漏洞批量检测脚本", "https://mp.weixin.qq.com/s?__biz=Mzg5MzE4MjAxMw==&mid=2247484369&idx=1&sn=478b83aaba8f2dc1fbc47bd52655654b": "CVE-2024-56337", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486442&idx=1&sn=56c0d4d924372cdf6e0685a3cccbc483": "「漏洞复现」Cloudlog 电台日志系统 request_form SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491782&idx=1&sn=0ec56be3f4aff171268e9834d45e974d": "安娜雅克医院勒索软件漏洞导致 30 万名患者数据泄露", "https://mp.weixin.qq.com/s?__biz=Mzg5MjkwODc4MA==&mid=2247485776&idx=1&sn=6d011e84e820eb2995031d6355a2ed87": "【自研工具】collect-cloud-native-security-vuln: 云原生安全漏洞收集工具", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310351&idx=1&sn=431965e436402476cf84910b092c1628": "FortiWLM 曝关键漏洞,攻击者可获得管理员权限", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247484966&idx=1&sn=c9077bd3b588953184cf7d6d94ce6e41": "Google日历网络钓鱼骗局", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793589&idx=2&sn=1f3dfc23261c4f764df5452f3ae77a05": "研究人员警告称,Apache Struts 2 关键漏洞可能遭利用", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793589&idx=3&sn=091ad734f1363feff0581eebe726992b": "Rockwell PowerMonitor 漏洞允许远程黑客攻击工业系统", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491804&idx=1&sn=9ca9d6fe52223ae2d42a4e122bbad7d6": "漏洞预警 | Cleo Harmony任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526269&idx=1&sn=9e773282c8039d1a8f836fb8e90e8aac": "8,000 美元漏洞赏金亮点:Opera 浏览器中的 XSS 到 RCE", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526269&idx=2&sn=be4f2144eee49c7ab4153c1c05760a33": "新的Windows权限提升漏洞! SSD 咨询 – cldflt 基于堆的溢出 (PE)", "https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485929&idx=2&sn=85652ae4ff67dac73e8c8c8e0fcd320b": "网络安全顶会——CCS 2024 论文清单与摘要(2)", "https://mp.weixin.qq.com/s?__biz=Mzg3NTUzOTg3NA==&mid=2247514855&idx=1&sn=c31bfc54cc6875e32ec73a225f057a36": "你可能了解Ebpf,但是你了解Cbpf技术吗?", "https://mp.weixin.qq.com/s?__biz=MzU4NTY4MDEzMw==&mid=2247494030&idx=1&sn=330c20307561a3c8c3b1ad2dd17be0b0": "EKUwu-CVE-2024-49019", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247485930&idx=1&sn=b212c0f73f12ef7a741f99bb4b8fd2e1": "OtterRoot Netfilter 通用型 Linux 本地提权 1-day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502658&idx=1&sn=e1de6decc572e58a32c667c1ecd2ec0b": "【已复现】Apache Tomcat 远程代码执行漏洞(CVE-2024-56337)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485358&idx=1&sn=c180edecfc5c80fefafb15baea7e06d5": "【翻译】身份验证失效:利用高级身份验证漏洞的完整指南", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546135&idx=1&sn=cbfb468158bc82d35028d522eaa3ab4d": "新手小白如何挖掘cnvd通用漏洞之存储xss漏洞(利用xss钓鱼)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066803&idx=3&sn=dca3ffae63a4a135b0aaae997fee9b6d": "【安全圈】大众车载系统暴出12个安全漏洞,黑客可轻松接管车内信息!", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485730&idx=2&sn=ee2e3210c82a61b26acfc5ba94b512ca": "CVE-2024-50379|Apache Tomcat竞争条件远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587593&idx=1&sn=f01974c27a3a04371655e7ea6eace814": "欢迎报名!​“系统0day安全”系列课程:掌握漏洞挖掘重要技能", "https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247487610&idx=1&sn=d3773f95c08472577d4c5dca4d24dc10": "最终章 | Tomcat条件竞争RCE的最终利用篇,带视频教学及POC", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500418&idx=1&sn=dbe755575c1cc8ea303921c5c7ee9317": "【漏洞通告】Apache Tomcat远程代码执行漏洞(CVE-2024-56337)", "https://mp.weixin.qq.com/s?__biz=MzkxOTYwMDI2OA==&mid=2247484301&idx=1&sn=cc09d0ed73141c9df1190979180a4bb6": "[靶场复现计划]春秋云境 CloudNet", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247485993&idx=1&sn=a04b3a29e74391e6948c0ef6dc41969a": "搭建Web安全入门漏洞靶场DVWA其实只要10分钟!(附30个免费docker镜像加速源)", "https://mp.weixin.qq.com/s?__biz=Mzg5MzcxNzg1Ng==&mid=2247485630&idx=1&sn=3d1301d407df653985532869ae3acfe1": "网安人体检报告:漏洞最多的人竟是我自己?!", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493261&idx=1&sn=519cd25d6df0692babe00f4c41ffdee9": "CVE-2024-56337 Apache Tomcat - 通过启用写入功能的默认 servlet 进行 RCE", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247487494&idx=1&sn=de643d61ba91eb9452c98cebeb61a56a": "【新day】CVE-2024-56145(Craft CMS 模板注入导致 RCE)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485730&idx=1&sn=4a11c334dc821e3cebf6e8642e236341": "CVE-2024-53677|Apache Struts 2(S2-067)远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490108&idx=1&sn=44caf097ec471143db38533b39921e7e": "一文解读hashdump工具", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247486364&idx=1&sn=6376e5a20c87ec8e5f291c09a4e13f16": "新手小白如何挖掘cnvd通用漏洞之存储xss漏洞(利用xss钓鱼)", "https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247486136&idx=1&sn=181b8c04c06163724b7307a30645a2ef": "[靶场复现计划]春秋云境 CloudNet", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485745&idx=1&sn=d1090b68df39020f6ad17405afe7f029": "CVE-2024-12727|Sophos Firewall SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485745&idx=2&sn=5b11dd987b70d63bd327eea23f305e74": "CVE-2024-49112|Windows 轻量级目录访问协议(LDAP)远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487133&idx=1&sn=1a65a357b5fb4ed4bd2928654519d005": "新手小白如何挖掘cnvd通用漏洞之存储xss漏洞(利用xss钓鱼)", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487133&idx=2&sn=e85f9ffecb8fa68f9544dbae2722aad0": "漏洞挖掘 | 某平台存储型XSS", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517788&idx=1&sn=5bf26f6dbafbcb94f439e8a8f6a0cf3f": "PE文件代码注入", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493290&idx=1&sn=87dbe8e4fb12dd7dc0b236623fe5f4be": "CVE-2024-56145:Craft CMS 漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899799&idx=1&sn=bf5134fc99d34ec1f16199c151fa25ef": "Fortinet 无线管理器惊现严重漏洞,黑客可轻松获取管理员权限!", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633268&idx=3&sn=98f0293cc6251ab7304f147afa79483c": "FortiWLM 曝关键漏洞,攻击者可获得管理员权限", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526407&idx=2&sn=c861b76793e01721eca83cd6cd50d901": "一个不起眼的 PHP 漏洞如何导致 Craft CMS 出现 RCE", "https://mp.weixin.qq.com/s?__biz=MzkzNTQwNjQ4OA==&mid=2247484039&idx=1&sn=84848557aee5ef51ec87d5cd74607656": "记一次逻辑漏洞修改任意用户密码", "https://mp.weixin.qq.com/s?__biz=MzkzNTY1MTg4Mg==&mid=2247484206&idx=1&sn=c6c8bc748d9cd6b3305a188a37b8c6b9": "【首发1day详情】CVE-2024-51479 全网首发漏洞复现分析+POC (Next.js权限绕过)", "https://mp.weixin.qq.com/s?__biz=MzkyODY3NjkyNQ==&mid=2247484401&idx=1&sn=71dcfb268f5852a19c75d24153bb827e": "【首发1day详情】CVE-2024-51479 全网首发漏洞复现分析+POC (Next.js权限绕过)", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247487524&idx=1&sn=0ba60c7c544d38db55c6cc9723985528": "【首发1day详情】CVE-2024-51479 全网首发漏洞复现分析+POC (Next.js权限绕过)", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484851&idx=1&sn=52c5df6c1e8f7e240e5d705a9adb8fbc": "【漏洞复现】CVE-2024-50623", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066819&idx=2&sn=d36a351bfabba8d719c29fa871c22b3c": "【安全圈】FortiWLM 曝关键漏洞,攻击者可获得管理员权限", "https://mp.weixin.qq.com/s?__biz=MzkwMDc5NDQ4OA==&mid=2247494604&idx=1&sn=e708788215b2043d657d20c4aab45fde": "2024年湖北省网络与数据安全实践能力竞赛——天权信安WriteUp", "https://mp.weixin.qq.com/s?__biz=MzAwNTc5MTMyNg==&mid=2247500072&idx=1&sn=2b761dedd7c1caedbe68c644c1292ec6": "关于AWD的小结", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486453&idx=1&sn=c80d52031a23f7939f932cb30817a4d7": "「漏洞复现」云连POS-ERP管理系统 download.action 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491784&idx=1&sn=bc289d1572bd1db0c695ab15af7ab441": "CISA 将 Progress Kemp LoadMaster 漏洞标记为易被攻击利用漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496658&idx=1&sn=a962d7f0a95d295e95082d39881b8d9a": "任意账户绑定微信逻辑缺陷案例", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491824&idx=1&sn=1e180df542cc81f8ccd126fa3a1a793a": "漏洞预警 | Apache Tomcat条件竞争漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491824&idx=2&sn=00d3f008f7a8e6862f85e636c1729047": "漏洞预警 | 蓝凌OA SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247509920&idx=1&sn=4edcca4471e6daccf241f1af05ac1900": "Caddy能取代Nginx吗?", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655262466&idx=1&sn=cba108d6018be686d89bca36a5fe24ae": "2025年我国网络安全发展形势展望", "https://mp.weixin.qq.com/s?__biz=MzA4MzMzOTQ4Mw==&mid=2453672473&idx=1&sn=b1f42abfb69489f1d38f2bf96dcc303b": "补丁警报:发现关键的Apache Struts漏洞(CVE-2024-53677)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493022&idx=1&sn=ef5134da8ef54faf7fc94a7213224e62": "Sophos修复了其防火墙产品中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489127&idx=1&sn=572846e45ecb431c0b52259247eb3ddb": "【0day】北京用友审计软件有限公司友数聚科技CPAS审计管理系统V4 存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTMxNDM3Ng==&mid=2247488752&idx=1&sn=f5d1b413360eaaa586e8547d31c4dbce": "IIS中间件漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247487630&idx=1&sn=6cf205a3fab2e22c6d42abce80395724": "Tomcat RCE | CVE-2024-56337远程代码执行,带复现视频及POC", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503217&idx=2&sn=0c8f76b82c16c05a9f732ba0e5bde0e6": "FortiWLM 曝关键漏洞,攻击者可获得管理员权限", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487205&idx=1&sn=33cd765343a53aeb0cb95c7e05719160": "(1day)金华迪加现场大屏互动系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517797&idx=1&sn=efa6756c0e64b9c89c49f021251b789d": "【CVE-2025-50379】利用cursor解读tomcat 条件竞争导致RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDc1NzU1Ng==&mid=2247484143&idx=1&sn=0909bc6a1e1608db5396bd53d3516603": "【POC开发系列01】Pocsuite3框架的使用与poc的编写", "https://mp.weixin.qq.com/s?__biz=Mzg3Mzg3OTU4OQ==&mid=2247493123&idx=1&sn=e978677722b36e1d7a8b163fe104c1c9": "庆尘SRC漏洞挖掘第二期来袭", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485075&idx=1&sn=68db2f838cf34395ab94bbc562be7cf5": "深度剖析 CVE-2024-56145:Craft CMS 高危漏洞的利用与防御", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485075&idx=2&sn=b8aebda4d9773c722dd15d51bc6b357b": "Apache Tomcat 高危远程代码执行漏洞(CVE-2024-56337)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491824&idx=3&sn=182280414c04ee47c247bae26a93c39e": "漏洞预警 | 国威数字程控交换机远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Mzk0MDE2Ng==&mid=2649608656&idx=1&sn=0de2056bef0fcc1cb20ec49cd4a73751": "重磅|天地和兴董事长王小东荣获第九届“管理科学奖-个人奖”", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485815&idx=1&sn=48d1b8666f2a180250f25790a487e940": "【漏洞复现】某平台-thirdImSyncForKKWebService-read-file任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247520334&idx=2&sn=5ec75125a7aba0d5b3c983dfae3ae073": "CCSK试题等你来答,参与抽奖赢取首期班福利!", "https://mp.weixin.qq.com/s?__biz=MzkwMjU5MzgzMQ==&mid=2247485143&idx=1&sn=ca184c882a6f45a7b1160c5e65116d61": "文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495634&idx=1&sn=7ad3a2cfe0a427fe348fb02c0405f8e2": "CNVD漏洞周报2024年第51期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495634&idx=2&sn=e5f4d98d6400cfec5f6954869c58c5ca": "上周关注度较高的产品安全漏洞(20241216-20241222)", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486464&idx=1&sn=647dde52226377e5282adb190d4c5dfb": "「漏洞复现」灵当CRM getMyAmbassador SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNjg1OTY3Mg==&mid=2247491737&idx=1&sn=c64f3af144a46bf369b4071fcb9521cb": "华顺信安获评攻击面管理领域十大代表性厂商", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291940&idx=2&sn=017c601f071172c54e31467605898ee7": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494252&idx=1&sn=c73d258b557537455c7fdc4af249ae56": "NDSS 2025|Prompt泄露风险:抖音集团安全研究团队揭露多租户KV缓存共享漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247512517&idx=1&sn=5eeba37b918c35be1eb6209fed0aa9fc": "NDSS 2025|Prompt泄露风险:抖音集团安全研究团队揭露多租户KV缓存共享漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490225&idx=1&sn=afd97fcef9e2132344f804a84347ba7f": "【已复现】Apache Tomcat存在远程代码执行漏洞(CVE-2024-56337)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490225&idx=2&sn=885da3c3fa05d39949c5718797a96226": "【已复现】Apache Tomcat存在远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502670&idx=1&sn=479d015990e5c63cf38d46824cc7a6d5": "安全热点周报:Windows 内核漏洞现被利用来获取系统权限", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247547783&idx=1&sn=f16e44bb0f27672bde6ffc2def95890e": "九年磨砺,再启新程!谈思AutoSec 9周年年会报名正式启动~~", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247623763&idx=2&sn=a09d131d7c26fb44de15e653371e639f": "警惕!高危漏洞利用成为美国对中国企业网络攻击突破口", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247568797&idx=1&sn=0b1ea74516af141a6361daa62ee22c80": "Java之SpringBoot漏洞利用姿势合集总结详细版", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503241&idx=1&sn=46f1e55ddd334e1241a4f2a5cc61150a": "雷神众测漏洞周报2024.12.16-2024.12.22", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxNTMzNw==&mid=2247484048&idx=1&sn=75765ca273ebe45ec635d0c1d6037b66": "路径遍历漏洞技巧手法", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489841&idx=1&sn=e9b36f27caee5e069eb26b0f8eb5decb": "同享人力资源管理系统-TXEHR V15 ActiveXConnector 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487973&idx=1&sn=ae1887a94edc58e3f4368af534ceafa6": "YourPHPCMS checkEmail接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499471&idx=1&sn=6b9864c7e3748af4d5599a55b0b6014f": "G.O.S.S.I.P 阅读推荐 2024-12-23 那些挖漏洞的团队(伙)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496663&idx=1&sn=7ed86171cd982ef9bada19590988c53b": "价值1.4 W人民币漏洞!", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484732&idx=1&sn=85b562f93dd4a61946496a4d4c1e4f26": "【工具分享】Tomcat CVE-2024-50379 条件竞争文件上传 exp RCE", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247505377&idx=1&sn=8775c6c4e8a60dde7049562e2aeec313": "每周网安资讯 (12.17-12.23)|Apple多款产品存在漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517803&idx=1&sn=bbf1338350e2628431ec7659eb014097": "蓝凌EKP V16 未授权SQL注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499057&idx=1&sn=a4a5cfad638b65d4c903edb3115ea230": "远程代码执行漏洞检测利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517735&idx=1&sn=7d8c311aaec65b40784ae780af73519b": "漏洞公开——从弱口令到通杀", "https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247561298&idx=1&sn=3cc8bfff2eeb748094f92f4be51ae12a": "附下载!炼石参编《多方数据共享服务数据安全技术框架》标准发布", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489149&idx=1&sn=39f2e5f02dee35d38a179723aa7aed1a": "【EDU】勤云科技期刊采编CMS存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515310&idx=1&sn=0d5a90a6415efced680b61d90b5d0c8c": "Bazaar v1.4.3 任意文件读取漏洞(CVE-2024-40348)", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515310&idx=2&sn=56e4be8036c18c800185e9bb1a7dc78c": "渗透测试 -- 系统漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489345&idx=1&sn=91726b817300dc5b41e7c6a25ef449d4": "【漏洞预警】Poppler越界读取漏洞(CVE-2024-56378)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523969&idx=1&sn=b096f169d52f79ead83a7f4899282a8f": "【漏洞通告】Craft CMS 远程代码执行漏洞(CVE-2024-56145)", "https://mp.weixin.qq.com/s/7cV7xUD5XoElvax20i0fzg": "内网远程桌面密码获取", "https://mp.weixin.qq.com/s/FlUrJBbv-uD6fZn_rTIXQg": "文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521868&idx=1&sn=62d6c6882cbe7ca4516d3b679eea7dfa&chksm=ea94a726dde32e301b12f414868b0e6781c25f64fd9abbfe3612bcf308592daf167e1efbf01e&scene=58&subscene=0": "速更新!Sophos 热修复严重的防火墙漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499550&idx=1&sn=622098dcd766068e4c23662a34d39664": "CNVD漏洞周报2024年第51期", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485819&idx=1&sn=9878fa5b05719c5c70082d09e2371eb1": "【漏洞复现】某平台-getPaperLayoutList-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605533&idx=1&sn=63d68320f681744a2c81f0f813169cad": "警惕!“银狐”木马病毒再次出现新变种并更新传播手法;|00后大学生盗取数万个社交平台账号 非法牟利7万余元", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486906&idx=1&sn=f30579afd864dc32a4b8d966b5fbe1e1": "PbootCMS前台SQL注入漏洞(下)", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506316&idx=1&sn=b59c502ca9ac40e07ee62a970b0a39aa": "书店停业:10万册好书【买2本送5本】清仓处理", "https://mp.weixin.qq.com/s?__biz=Mzk0NzQxNzY2OQ==&mid=2247487679&idx=1&sn=9aada25fb8260f17942f0d8726a6cb7a": "满足你 | Tomcat条件竞争RCE利用脚本:CVE-2024-50379、CVE-2024-56337", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486527&idx=1&sn=0e5b1a7c579ad31c1583a45c71bd41c2": "Java反序列化漏洞 | log4j2远程代码执行漏洞原理+漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497683&idx=3&sn=d7780a5d9d05f1a65998a1855fc4a1bb": "52套.NET系统漏洞威胁情报(12.24更新)", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487212&idx=1&sn=88b716175ea813484124aed2140e2e31": "(1day)全媒体采编平台存在未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491825&idx=1&sn=3f17b8321f3d7a18c621a9631b58033f": "漏洞预警 | CyberPanel命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491825&idx=2&sn=10017681ee52f6f356351fc448cb1d45": "漏洞预警 | SitecoreCMS任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491825&idx=3&sn=2ea9dc185f5490c84245d06a73f4e9fe": "漏洞预警 | 中科网威anysec安全网关远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247509941&idx=1&sn=2fc68474fecf59e0faacac6a6a7c79c8": "在NAS中部署Jellyfin 拥有自己的影院", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxNTMzNw==&mid=2247484054&idx=1&sn=fe0f59eddecc373a8c0f4f6e0f530973": "dedecms织梦任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493396&idx=4&sn=cb28d670614d1ebf375025ab2f3a0c36": "【漏洞预警】CVE-2024-45387", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493396&idx=5&sn=cf01d14f914941546541b6a0a2f5abec": "Adobe 警告 ColdFusion 存在严重漏洞,并且 PoC 已流出", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486477&idx=1&sn=b867e1f057d49e2a34b8de245f66d834": "「漏洞复现」方正畅享全媒体新闻采编系统 reportCenter.do SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526417&idx=1&sn=5d19b7fd81e7e92ff3cca973a60ccd22": "CVE-2024-56337:Apache Tomcat 修补关键 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3Njc0NTgwMg==&mid=2247502001&idx=1&sn=9ee9dbe3b289e181b228325a53fb8cfe": "B站自研动画视频生成模型全链路技术报告", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614788&idx=1&sn=103b63a5b448cad699cc6cf32f1cdb5a": "一文理解条件竞争漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488285&idx=1&sn=97653bb5fd6a2d661776be1026799921": "【首发 1day】WordPress File Upload 插件存在前台任意文件读取漏洞(CVE-2024-9047)", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490137&idx=1&sn=78576f52ebabdecdd02f55dabd2c8688": "Apache Tomcat 漏洞 CVE-2024-56337 导致服务器遭受 RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502682&idx=1&sn=83e2cebbdeddd336724d291651d2bc51": "Adobe ColdFusion 路径遍历漏洞(CVE-2024-53961)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489351&idx=1&sn=01778ca696e485c04d2862adb19bfa8c": "【漏洞预警】Apache Hive&Spark信息泄露漏洞(CVE-2024-23945)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500430&idx=2&sn=51e64cf96ac475e77bba565a6f15c133": "【漏洞通告】Adobe ColdFusion路径遍历漏洞(CVE-2024-53961)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500430&idx=3&sn=27e75fa3a6f951dd60a96f3f4b20cdc9": "【漏洞通告】Apache Hive & Spark信息泄露漏洞(CVE-2024-23945)", "https://mp.weixin.qq.com/s?__biz=MzUxMjc0MTE3Mw==&mid=2247494824&idx=1&sn=b03003ad6787b8b285ca4e469940cf87": "Apache Tomcat远程代码执行漏洞(CVE-2024-56337)", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486291&idx=2&sn=e7d12cbe52353178dcc3270259a41f7b": "SpringSecurity权限绕过漏洞-好玩", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485993&idx=1&sn=dd9e46b807f5bd2742162658819f983c": "Burpsuite存储桶配置不当漏洞检测插件 - BucketVulTools", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487986&idx=1&sn=a88b5191db732c85f0b1e8f66e36f6da": "大华DSS 系统attachment_downloadAtt.action存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166901&idx=1&sn=d6ba83a2fbc5306817e6e67072c261dc": "揭秘最为知名的黑客工具之一:Exploit-DB(开源的漏洞数据库)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310503&idx=2&sn=1ebf51f286f2b68c54b3628d8f84a6d4": "Adobe最新漏洞被披露,已有PoC代码流出", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495498&idx=1&sn=9283e907b59aeac0ee59de44d0038e89": "“AI+Security”系列第4期(一)之“洞” 见未来:AI 驱动的漏洞挖掘新范式", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523973&idx=1&sn=328a8278946c6ddc659d707dda812940": "【漏洞通告】Adobe ColdFusion任意文件读取漏洞(CVE-2024-53961)", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247487964&idx=1&sn=ddd91046b72e8c7335e0fb5ee0768853": "小皮 Windows web 面板漏洞详解", "https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488008&idx=1&sn=983f22455f1e1149fbb51982dc4afa30": "直播倒计时2天:网安人做好职业规划之「如何持续保持职业竞争力」", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515334&idx=1&sn=58be31ef4e6037ed3af431dd20747bdd": "Nuclei分布式漏洞扫描平台 -- NucleiPlatform", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491786&idx=1&sn=5029b14a5a8d187655a8e3ab2cd98c06": "Helldown 勒索软件利用 Zyxel 防火墙的 VPN 漏洞入侵公司网络", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310503&idx=4&sn=ffab5b5454473a0107b9d59f5283dac5": "Clair:一款针对应用程序容器的安全漏洞静态分析工具", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587741&idx=2&sn=69f46c917601d0c81a95befbfe959dc3": "0.01美元吃麦当劳?印度麦当劳外卖App存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247485729&idx=1&sn=e4974c15092b047d347c8c11399b645f": "命令注入漏洞使数百万Node.js系统面临攻击", "https://mp.weixin.qq.com/s?__biz=MzA4NzU1Mjk4Mw==&mid=2247492248&idx=1&sn=dc70cc34275484780dddad5435859b02": "5.1k Star!好用的开源漏洞管理平台", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899833&idx=1&sn=63e0f2134e7437b5d424f1accb41c473": "Sophos 防火墙爆严重漏洞,速查!你的网络安全吗?", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491829&idx=1&sn=506b1de865ee34ffe069adf00d0792d0": "漏洞预警 | 泛微云桥SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491829&idx=3&sn=6931b6b0b3bc693cc6827a674a08af13": "漏洞预警 | 协众OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655262542&idx=1&sn=ddc6db2cb0bedf70ae49af20abcc7089": "2024年人工智能全景报告", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493039&idx=1&sn=aa602c3642fde6a6dcb6a5767587847a": "Apache基金会修复了一个严重的Tomcat漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499069&idx=1&sn=e7ac0601926895e20f9d1da09c0f5cd0": "灵当CRM系统接口wechatSession文件上传漏洞检测利用工具", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633325&idx=5&sn=5a916bebd7eb13b5351ec1c3f11ff717": "Adobe最新漏洞被披露,已有PoC代码流出", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521882&idx=1&sn=1a457064eddc19fcc7a712086557d5cb&chksm=ea94a730dde32e267f2aef8e7cac134060cd8861b682e2aac8af75f6d38f506106b86532bb75&scene=58&subscene=0": "Adobe紧急修复严重的ColdFusion 路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499550&idx=2&sn=ad48a11257a083ed0783d7c9f95fe243&chksm=973acc7ca04d456a195d6f1cc7e15f66f8e20cbc1f811736933f78a8e856ecb806c3865e3067&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241216-20241222)", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493993&idx=2&sn=7d42674213454d55fa2a054c16e57da2&chksm=fa78e825cd0f6133f0e4b4850ec32278d8d2115134718425c6079ae9d175a6929e90ab5ec4a3&scene=58&subscene=0": "【CVE-2024-1610】OPPO 商城APP远程账户TOKEN劫持、敏感信息泄露致谢公告", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493993&idx=4&sn=3ab09d03d077bf455158186920fb8573&chksm=fa78e825cd0f6133ec2f9b89171d95e57bac5c0450f980602cafe5c64b0a84f902c67317680d&scene=58&subscene=0": "【2024漏洞马拉松】OPPO赛程正式启动,1.5倍奖励,新人额外奖励……超多奖金拿到手软!还有手机大奖等你来拿!", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546189&idx=1&sn=b8d940c4ba773d4c64e9702b1bc2c588": "记一次某企业管理系统SQL注入拿下CNVD", "https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247502625&idx=1&sn=32863b4c03fc77bda2535640aef5aafe": "“炼金术”:英国军事小组的秘密行动计划曝光", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489888&idx=1&sn=c6b86984d8215a950e7f77f0e417b760": "电子图书阅读平台 downFile.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493438&idx=2&sn=2bf63573c04f4cd2a2cb822334c8d039": "【漏洞预警】开源图形数据库系统 Apache HugeGraph-Server 存在安全漏洞 CVE-2024-43441", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493438&idx=3&sn=7c6d3ad3049f44965fe8082752ee6dcf": "【漏洞预警】CVE-2024-23945:Apache Hive 和 Spark 中存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247488262&idx=1&sn=725078f1d42de941b5caf4c3894bcd0c": "新的僵尸网络能利用 NVR、TP-Link 路由器中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503274&idx=1&sn=eedb40242f561ac4e1a6fdbe1ab26061": "立即更新!Adobe警告ColdFusion严重漏洞PoC", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489878&idx=1&sn=1359fe4b6b4dfe04c408e9693c7315a3": "圣乔ERP系统 queryForString.dwr SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247485764&idx=1&sn=4c2c0c267e91a8ef660adf0aa532036a": "利用防火墙修复Oracle数据库漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485823&idx=1&sn=71cc8384af6f9ac0ff97bf9e18689c1c": "【漏洞复现】某平台-reportCenter-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496897&idx=1&sn=5c8bba976404cced861b965c6bcfd950": "【漏洞通告】Adobe ColdFusion路径遍历漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496897&idx=2&sn=0d8efe9e9a42601832812cd7e83ce830": "【漏洞通告】Apache Hive & Spark信息泄露漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487220&idx=1&sn=21cf49089d55901c71a6bb550588ff8e": "(0day)当虹科技-Arcvideo-Live存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655348345&idx=1&sn=02f5839a880a5e2191b58ca3dc6b324d": "立即更新!Adobe警告ColdFusion严重漏洞PoC", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793628&idx=2&sn=42bf5f5cc56312df950aa58ac749beb7": "新的僵尸网络利用 NVR、TP-Link 路由器中的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTUwMzM1Ng==&mid=2247512945&idx=1&sn=fdaef5aeff7aea57cbec186d8b8651c1": "PostExpKit插件使用常见问题11-18", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491829&idx=2&sn=8e7ff0c4d22c2821e3205f5e074754a1": "漏洞预警 | Jeecg-Boot任意用户密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MjkzMTcxMg==&mid=2449046600&idx=1&sn=6d7cdf0fc376922daa4203105d77cf5c": "Planka:可在NAS上部署的看板工具,让工作安排如鱼得水!", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247494211&idx=1&sn=54fe4985b6b0543d1f779aae119f366d": "【神兵利器】最新Nacos综合漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787672&idx=1&sn=414101ef66f3ee973ac7054187675a01": "2024年零日漏洞利用七大趋势", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492485&idx=1&sn=34cb96ae174f9f538a189541e923423a": "以色列NSO Group公司利用WhatsApp漏洞部署间谍软件展开APT网络攻击", "https://mp.weixin.qq.com/s?__biz=MzU1Mzk0MjU1OQ==&mid=2247493347&idx=1&sn=72c5c67dd43713c95512eb9be536a236": "漏洞预警| TP-LINK Archer C7存在安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462241&idx=1&sn=2da0ba5a4ed15e8beafe9786cefddc9a": "信息安全漏洞周报(2024年第52期)", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899845&idx=1&sn=14730a5021ad3597b64582f0452ae380": "警惕!热门 npm 包 Rspack 和 Vant 遭投毒,你的电脑可能已被挖矿!", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484506&idx=1&sn=4e8642ae5fb5ac56155c85575660f234": "Oracle WebLogic Server反序列化漏洞(CVE-2024-21216)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580423&idx=1&sn=4a44563ed7ec0aafc5aaa48302756b22": "勒索软件攻击中利用了关键的 Cleo 漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652113391&idx=1&sn=f783ade6d7910acd71c8cd82c69a1c59": "红队如何暴露人工智能模型中的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NTY0MjIwNg==&mid=2247485277&idx=1&sn=d9ca6d53bc55584c08aa60bc0c805df1": "Node.js 严重漏洞使数百万系统面临 RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094434&idx=2&sn=61f063fdf6d46e3c1b85a02e8785785f": "Adobe最新漏洞被披露,已有PoC代码流出", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066932&idx=4&sn=90071983b67d793ccd950d077faa76c0": "【安全圈】僵尸网络利用漏洞攻击网络录像机及TP-Link路由器", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513353&idx=1&sn=cc572d3391797a15aa66590d70d0ac96": "警惕!2024年全球零日漏洞利用呈现七大趋势", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513353&idx=2&sn=2e9b4bf47922e34e7c38f4143394ae0d": "代运维电子政务数据库存在漏洞,浙江某软件厂商被罚款", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521893&idx=1&sn=867f98595849107577a98fcaf043a177": "Apache Tomcat 漏洞导致服务器易受RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526433&idx=2&sn=9734352beed4645fcdc599733e607e22": "探索 NASA CryptoLib 的 SDLS 实现中的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484383&idx=1&sn=aac763c4a87da3c56823e7cf08d71ac9": "第十八期 · 安钥®「漏洞处置标准作业程序(SOP)」征文启示", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484383&idx=2&sn=da1c094281f3ad7ef7bedbcde6056425": "入选作品公布|安钥®「漏洞处置标准作业程序(SOP)」征文第十五期", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587767&idx=3&sn=8d01b37f88555c9fb0dc004f40145942": "欢迎报名!系统0day安全-二进制漏洞攻防(第4期)", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247552595&idx=2&sn=9a57fa4c2a8631ff49dc9aa2b6ce822c": "【免费领】社会工程之解密安全体系中的人性漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247488110&idx=1&sn=67048c20f7a099f13195d19e8a086c93": "协众OA checkLoginQrCode接口 SQL注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkyMTY1NDc2OA==&mid=2247487244&idx=1&sn=5011bd862eae6337a04f9e1673c7a184": "【漏洞文字】博斯外贸管理软件 SQL注入", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488801&idx=1&sn=60be4d8cff8f2bbedf73bf54fe8bf3e0": "【漏洞通告】Adobe ColdFusion任意文件读取漏洞(CVE-2024-53961)", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484865&idx=1&sn=4c2f9b81123b4f38c3b17528a64f250d": "【漏洞复现】CVE-2024-10400", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506323&idx=1&sn=51d7b829c95d2414fab4e9beab5686c8": "Discord爆\"幽灵\"漏洞存在隐私泄漏风险", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496677&idx=1&sn=3606ef03556ff457f835eecc77c528fe": "获取$1600赏金的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MTE0NTg4OQ==&mid=2247484051&idx=2&sn=8439fbc0ab813be475d7d9d211e7ae16": "2024 年七大零日漏洞利用趋势", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247617922&idx=3&sn=d76ead41998a71a89c38e9dab64a185d": "扩展 SAE J1939 的攻击场景:传输协议中已建立和新的漏洞的综合分析", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489359&idx=1&sn=7d1d4163125cfb41ce639e41c93b675a": "【漏洞预警】Apache MINA反序列化远程代码执行漏洞(CVE-2024-52046)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489359&idx=2&sn=539ab9151135b08415e5c6bd4fbe0887": "【漏洞预警】Adob​​e ColdFusion路径遍历漏洞(CVE-2024-53961)", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486490&idx=1&sn=7e07e6196a70d8da4e77b7d08acf255a": "「漏洞复现」WordPress File Upload 插件 任意文件读取漏洞(CVE-2024-9047)", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247514556&idx=1&sn=a10e80238c91658489ebe6cc8657315c": "网安瞭望台第18期:警惕新型攻击利用Windows Defender绕过终端检测、CVE-2024-50379 漏洞利用工具分享", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633341&idx=4&sn=e0b56625be7870c3dc28ab530dc4f4a7": "代运维电子政务数据库存在漏洞,浙江某软件厂商被罚款", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247488673&idx=1&sn=7e062376c9801c6926c6dffad21b6147": "工具 | xxl-jobExploitGUI", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500463&idx=2&sn=8797a9788659c15836d029b770e07bb5": "【漏洞通告】Apache MINA反序列化远程代码执行漏洞(CVE-2024-52046)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489612&idx=1&sn=c5e9cbdadaf86d1494d0ad0e20de258a": "Nuclei-Scan分布式漏洞扫描平台-可联动 AssetsDetectAPI 资产搜集|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247489857&idx=2&sn=ed8c38d03e42795ab2bf82d63f8ca7e4": "重磅!国内最专业的 [ .NET 代码审计 ] 体系化学习互动社区,强势来袭!", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491868&idx=1&sn=ff32a5597211eb29e21480d42428f07f": "漏洞预警 | 神州数码DCME-320出口网关任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491868&idx=2&sn=5bcc90ec07c14145945c4f6cb5bc3729": "漏洞预警 | 杜特网上订单管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491868&idx=3&sn=9007d38e1a237febff727153fc5317f1": "漏洞预警 | 云连POS-ERP管理系统SQL注入和任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247510085&idx=1&sn=e031cb6652036ccd37641e5fc30ba651": "NB!一款基于java开发的漏洞检测工具,集合了泛微、用友、大华、海康、致远、红帆、万户、帆软等漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493022&idx=1&sn=a8fc343234a413c73ebe445d74266a28": "【1day】Z-Blog 后台文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489213&idx=1&sn=a2b72f9f7907995420072d5743d646ef": "【edu 未公开】某科技有限公司数字化智能中台系统存在sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NDc0Njk1MQ==&mid=2247486580&idx=1&sn=210d7e25300d83a0415f8bf3ae55e315": "网络安全中的零日漏洞:如何快速响应突发威胁?", "https://mp.weixin.qq.com/s?__biz=Mzg4Njg3MDk5Ng==&mid=2247486837&idx=1&sn=3692b6f92d2bf8049525a4dd7e7e7dae": "通过源码文件差异对比审计未公开1day,让你1day拿到手软!", "https://mp.weixin.qq.com/s?__biz=MzkxNTczMjA1Ng==&mid=2247483959&idx=1&sn=b70e3b60f8da82f799be4c55107479d0": "NB!一款基于java开发的漏洞检测工具,集合了泛微、用友、大华、海康、致远、红帆、万户、帆软等漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247501914&idx=2&sn=1c6de3ff616e3417b47a78f7ba17bed3": "锐捷网络云管理平台爆出严重漏洞,可从云端劫持WiFi热点", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485827&idx=1&sn=e20622b692299473a55c582b189fb074": "【漏洞复现】某平台-article-abstract-delay-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486498&idx=1&sn=22e1e713ea716f4adf819e6bc9bd3070": "【漏洞通告】Adobe ColdFusion 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486498&idx=2&sn=22e2086e51e6faabadb5fa8c76197627": "【漏洞通告】Craft CMS 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486498&idx=3&sn=3d49766352ea0f65584e85afcac09318": "【漏洞通告】IBM Cognos Analytics Mobile for Android 加密算法过弱", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486498&idx=4&sn=100800439f273ba82390026cc0ac85d5": "【漏洞通告】Operations Bridge Manager 外部实体注入", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493467&idx=2&sn=47f7f42e77eb03f0ca00882cb29f581f": "DigiEver DS-2105 中的 0day 漏洞将 DVR 变成僵尸网络", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493467&idx=3&sn=3e24bde738adebbe044cc3391b3f56b7": "某捷网络云平台漏洞可能使 50,000 台设备遭受远程攻击", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493467&idx=4&sn=430ab66ab5a6127dcff2d0f3613420bc": "CVE-2024-40896 (CVSS 9.1):libxml2 中发现严重 XXE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503304&idx=1&sn=1dd30945905ce0d903b977a91818797a": "僵尸网络利用漏洞攻击网络录像机及TP-Link路由器", "https://mp.weixin.qq.com/s?__biz=MzkzMjE5MTY5NQ==&mid=2247503304&idx=2&sn=52667ad1ad6f9678951fb47d6572b6e3": "勒索软件攻击中利用了关键的 Cleo 漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899851&idx=1&sn=dfcc184b0aa19c3abd7880317af392fe": "紧急预警!Apache Traffic Control 曝严重 SQL 注入漏洞,CVSS 评分 9.9,请立即更新!", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485104&idx=1&sn=9e7b6d338076a9825ea6b10473fb6f27": "CVE-2024-49112 Windows 轻量级目录访问协议(LDAP)的远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485104&idx=2&sn=2a74138bd2377792232546e6efd12f3f": "Apache Struts 文件上传漏洞分析与复现指南", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793640&idx=3&sn=4c01c7f9ccadb39363f8239a828df037": "Apache Traffic Control 中的严重 SQL 注入漏洞 CVSS 评分为 9.9", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486637&idx=1&sn=368de1984a108e85cc78222c85b3918f": "分享最近攻防演练HVV漏洞复盘", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486374&idx=1&sn=011d3e9ddd9452107935b0384ba90d78": "CVE-2024-50379|条件竞争Tomcat RCE POC(首发)", "https://mp.weixin.qq.com/s?__biz=MzkxNjU2NjY5MQ==&mid=2247508963&idx=1&sn=fbb166b6457c9337fde785adf0fbad39": "网络勒索:技术之外,“人”为漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495023&idx=1&sn=ca560627e8512fc6acbf827258d5d238": "4F级民航机场如何完善实战能力建设?", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485020&idx=1&sn=8c8ad3015e570c916b4cbfb180a22303": "工具集:EZ【多功能跨平台综合漏洞扫描器】", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488354&idx=1&sn=f324f79a395aabaf1272bcd76b686fe3": "【工具分享】超好用Nuclei 图形化GUI管理工具+14w poc", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247537880&idx=2&sn=e5d4a9c8e07347812e6399622132ef42": "Node.js 严重漏洞使数百万系统面临 RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310663&idx=1&sn=7076305ec46f30810b825ea61d11d978": "9.9分的SQL注入漏洞,可获admin权限", "https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870474&idx=1&sn=60782d890bdceb6bf3712c5474329e54": "知道创宇与《中国企业报》集团深入交流,共谋数字安全合作新篇章", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541162&idx=1&sn=427b98d0b2a5f7dbf683f15d22824546": "大众车机系统现漏洞:黑客能获取GPS等隐私,已修复", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495540&idx=1&sn=26e1bae6e77332b60b973385539b9d8e": "“AI+Security”系列第4期(三):基于大模型的漏洞挖掘技术与实践", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500510&idx=2&sn=a567741e50ded3bcaa476cd8205e0e51": "【漏洞通告】libxml2 XML外部实体注入漏洞(CVE-2024-40896)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587787&idx=1&sn=41d2b407676f2bc7e7673d21eaf675a4": "PWN入门:三打竞态条件漏洞-TOCTOU", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587787&idx=3&sn=21252886bea96ee3843d9aaf18ecb293": "系统0day安全-Windows平台漏洞挖掘(第5期)", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490138&idx=1&sn=244e20d29e696d95b79ea4f5883e507e": "创宇安全智脑 | 泛微e-cology 9 FileDownloadLocation SQL 注入等69个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247624078&idx=1&sn=70b1f90254305872efacca1d5f7eb2ac": "奇安信两方案荣膺中国信通院“磐安”优秀案例", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyOTk0NA==&mid=2247488497&idx=1&sn=5ae709cbefe82d4985910480bac356ff": "操作系统主机安全测试:脆弱点与漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493479&idx=1&sn=2383f9b4d9ba05bd1cbb2eddd77265a6": "【PoC】CVE-2024-50379 (9.8)Tomcat竞态条件漏洞深度分析及 PoC", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513360&idx=2&sn=d8aff409483c58eb180c3a8fbbc1b6b6": "锐捷云管理平台曝严重漏洞:可从云端劫持WiFi热点", "https://mp.weixin.qq.com/s?__biz=MzkzOTYzMzY3MQ==&mid=2247483951&idx=1&sn=52e79cafd89081ca2eb5029d5f800d09": "从SRC漏洞挖掘到红队综合利用的思路转变", "https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247597059&idx=1&sn=8d38e690abab254d31724f5b79e651e5": "基于UEBA的零信任安全体系架构设计与实现", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489908&idx=1&sn=6230cac64468fc70cd66f2e69819825a": "易宝OA GetUDEFStreamID SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499080&idx=1&sn=a05030e04b4a455ec33fa46b339296c2": "WordPress File Upload插件任意文件读取漏洞(CVE-2024-9047)批量检测脚本", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499080&idx=2&sn=a05e54e238c5cc7a609810fbdb5e2379": "渗透测试 -- Waf绕过补充和其他漏洞和代码审计", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712138&idx=1&sn=b9cca457700cad5e6c2058b54a51f37b": "Jenkins漏洞利用精华总结", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487999&idx=1&sn=818f160852ba140400b2b152252b7d9d": "蓝凌EKP系统thirdImSyncForKKWebService接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489364&idx=1&sn=08c738c76121f332d16238129157fa32": "【漏洞预警】libxml2 XML外部实体注入漏洞(CVE-2024-40896)", "https://mp.weixin.qq.com/s?__biz=MzU2MDE2MjU1Mw==&mid=2247486119&idx=1&sn=55695ba688dc3608b64cb12ead2b3353": "D-LINK DIR-815多次溢出漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517892&idx=1&sn=25d86eb632264e257c289a39ce50518b": "cnvd通用型漏洞挖掘思路-从逻辑漏洞到拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247489232&idx=1&sn=d7896892a6a288a20cf56f017ac79774": "一个Nmap命令扫出企业漏洞?资深黑客总结的4大扫描神器", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521906&idx=1&sn=9cb8ea9b9dbfb2a32eec80f9973d8cf1": "Apache Traffic Control存在严重的SQL注入漏洞,可在数据库中执行任意命令", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486504&idx=1&sn=11a0c71bf994213bb40cd178a40c36a7": "「漏洞复现」赛诸葛数字化智能中台系统 login SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491878&idx=1&sn=91ecf220e0a03407099c83ab6137f11b": "漏洞预警 | BeyondTrust RS & PRA命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491878&idx=2&sn=e30356365be934c0fdb7bb3f94109abb": "漏洞预警 | 昂捷ERP任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491878&idx=3&sn=061c9046b9bb714b65ec8dc6e130c8c6": "漏洞预警 | 云供应链管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247525366&idx=1&sn=5d8748115f03862342d067e1236bbbe8": "9.9分的SQL注入漏洞,可获admin权限!", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526461&idx=2&sn=1db82b48c4a02c7ddf4e72990b74903b": "CVE-2024-50379 Tomcat 漏洞深度分析及 POC(严重性 9.8)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493057&idx=1&sn=1edb464ca8f33943031448334225d5f4": "Apache修复了Apache Traffic Control中的一个严重SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493057&idx=5&sn=b77285035bf6da7476846d148614e237": "Adobe已经知晓ColdFusion漏洞CVE-2024-53961存在已知的概念验证(PoC)利用代码", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489621&idx=1&sn=24fc522d7b044da1b0a0d1cb7ca5781d": "最新Nacos 综合漏洞利用检测工具12月更新|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485831&idx=1&sn=a6c3e7120741dec5871f3f4fafbdffea": "【漏洞复现】某平台-sysNotifyTodoWebService-read-file任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651206813&idx=1&sn=d845643474a7eef20e59162ac0682def": "AI猎手:我们用大模型挖到了0day漏洞!【大模型应用实践系列三】", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487543&idx=1&sn=550da69acba8a4672ebcc2a90d75d2d2": "赛克安全本周漏洞推送(12.22-12.27)涉及国威IP数字语音系统、黄药师、企企通、快云服务器、一卡通系统漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605854&idx=2&sn=eb680a4ee019a2f0bf800db359783b85": "文末送书!!!发现Web API漏洞居然能赚到400w刀,看懂这本书你也可以!", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247488913&idx=1&sn=2fecce60b88e4c398a692dece12447a7": "Vcenter漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg3NTY0MjIwNg==&mid=2247485287&idx=1&sn=dbe25435ade82a813000e9e81a9c5e80": "锐捷网络云平台漏洞使大量设备面临远程攻击风险", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485651&idx=1&sn=85b9a1d6ec04ec7ea97378ca85641a5e": "赛克安全本周漏洞推送(12.22-12.27)涉及国威IP数字语音系统、黄药师、企企通、快云服务器、一卡通系统漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247487227&idx=1&sn=743cf64b05de25765b2d0fc52bfec350": "(未公开)深睿医疗系统存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454063782&idx=1&sn=ea2cc37585883ec374eb05c428edde52": "信息安全漏洞周报【第003期】", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484514&idx=1&sn=d4b86b9f70beb745e30ac3f215a67872": "【漏洞复现】高校人力资源管理服务平台系统ReportServer存在敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655348370&idx=1&sn=5a808e8b817cddf7dbf6849bf65404ec": "Apache MINA严重漏洞 :CVE-2024-52046 (CVSS 10),可能允许远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247520558&idx=1&sn=8f593fbfd4e37a8db8e32bb6b940a43e": "定了!2025年CISSP这些城市考试安排", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247537926&idx=3&sn=93bf79533d50d1bc792dbbabe585f307": "网络勒索:技术之外,“人”为漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzOTY1MzcyOQ==&mid=2247490109&idx=1&sn=1890263fc634753221aec948afed386f": "SRC中的重置密码漏洞及案例", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489246&idx=2&sn=29544ba6a271ea8eaa475df34f2d1b45": "【0day】深圳市虹安信息技术有限公司数据泄露防护平台存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489917&idx=1&sn=86ff249ad44b2e137fc75f4563f6ba43": "EasyCVR-视频管理平台 taillog 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4OTU4MjQ4Mg==&mid=2247488275&idx=1&sn=e30cc4806783ac1463178c2aadac6656": "“AI+Security”系列第4期(三):基于大模型的漏洞挖掘技术与实践", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521918&idx=1&sn=acf8324d4a36ec4e8d37b16375da9e75": "Apache MINA 存在严重的满分漏洞,可导致RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485029&idx=1&sn=e57ec5ab92e13cc84e916d7b47c8f2f9": "工具集:TsojanScan【BurpSuite漏洞探测插件】", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247492807&idx=1&sn=762b111a5affb906d9d9037185f3daf2": "Adobe最新漏洞被披露,已有PoC代码流出", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486516&idx=1&sn=df2522520c1edd07b9c74c22088e3d91": "「漏洞复现」时空WMS-仓储精细化管理系统 SaveCrash.ashx 文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488369&idx=1&sn=822c9f77cbfe6f3b6da9d6c84fb874ef": "【1day】WordPress Elementor Page Builder 插件任意文件读取漏洞(CVE-2024-9935)", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650623055&idx=1&sn=d45d2b3945c54d902f46c2a270eb2fd6": "且看安恒零信任如何携手钉钉,成为客户最佳拍档", "https://mp.weixin.qq.com/s?__biz=MzIyMjU3MDg3Mw==&mid=2247489039&idx=1&sn=0551c5431032844d56b7cef7764aa2d5": "等级保护 | 等保要求及产品清单", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094453&idx=2&sn=717941fdf30b9ec5c0105e34f7d39995": "锐捷云管理平台曝严重漏洞:可从云端劫持WiFi热点", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652066971&idx=2&sn=f33a68d33d05344d8693a65a70f992ef": "【安全圈】Apache Traffic Control 中的严重 SQL 注入漏洞 CVSS 评级为 9.9 — 立即修补", "https://mp.weixin.qq.com/s?__biz=MzI0MTY5NDQyMw==&mid=2247525362&idx=1&sn=c4deb862cf6c20288271d0e0f5720331": "Qemu重入漏洞梳理 & CVE-2024-3446分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587796&idx=2&sn=206238f85596e153d2d6f3c8f6c40ced": "曝9.9分高危SQL注入漏洞!Apache Traffic Control项目遭遇严重安全危机", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587796&idx=3&sn=df30dee10bc9d3568d5c5d215558f7b2": "惊喜开班!系统0day安全-IOT设备漏洞挖掘(第6期)", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247494002&idx=1&sn=c0c252a716bcd167e7afd6500d3ad00c": "【CVE-2024-1609】OPPO商城APP存在Webview组件权限提升漏洞致谢公告", "https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492235&idx=1&sn=77d3d93dbca1231d18edeb1486dacaaa": "回看往期ISC2网络研讨会,提升网络安全技能并获取CPE学分", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247569190&idx=2&sn=f190848ca57c17c1a886af519fc3af4e": "网络安全专家爱用的逆向工具 TOP 9", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489926&idx=1&sn=9366de1ec2a50af9183770037ca1cc41": "Mitel MiCollab 企业协作平台 任意文件读取漏洞(CVE-2024-41713)", "https://mp.weixin.qq.com/s?__biz=Mzg4NjY3OTQ3NA==&mid=2247486460&idx=1&sn=612a1415f505da29609e45c087825d0c": "价值$3000的Google Slides IDOR漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489632&idx=1&sn=ef621ff598c100339f2b04e8cc9fe31f": "EDU-Kesion科汛开发的在线教育建站系统存在SQL注入漏洞 (大量存在含POC新接口) | 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzI4NTYwMzc5OQ==&mid=2247500618&idx=1&sn=4c4a94d321a4f44795de9c7ec943e774": "价值$3000的Google Slides IDOR漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489370&idx=1&sn=df60557c17a6e43934ed815009cc3408": "【漏洞预警】Apache HugeGraph-Server JWT 权限绕过漏洞(CVE-2024-43441)", "https://mp.weixin.qq.com/s?__biz=MjM5NDQ5NjM5NQ==&mid=2651626407&idx=1&sn=03d7a2320607f02314315d191da7b1a4": "网安未死,不慌烧纸", "https://mp.weixin.qq.com/s?__biz=MzU1ODk1MzI1NQ==&mid=2247491382&idx=1&sn=aaabee5428c20d4501fe9e8a126d35c0": "利用AI辅助测试WEB漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491905&idx=2&sn=29d6474005e9f8c36a129a215602547f": "漏洞预警 | 圣乔ERP系统任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491905&idx=3&sn=ef711aefb5488a75da75a83a07fb4332": "漏洞预警 | 用友U8Cloud SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247495662&idx=1&sn=fddfa588f4eae694507d64d261b1b6ea": "国家金融监督管理总局印发《银行保险机构数据安全管理办法》", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493068&idx=1&sn=b13552bac6690f5968cc9e0a6eb6c345": "Palo Alto Networks修复了一个高危PAN-OS漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487545&idx=1&sn=82701065b0b2e49d07c8800023b95016": "赛克安全本周漏洞推送(12.22-12.27)涉及国威IP数字语音系统、黄药师、企企通、快云服务器、一卡通系统漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310927&idx=2&sn=5649fe7d87c68c5f55b3586571a75803": "FreeBuf周报 | AI平台1.29T数据库裸奔;9.9分SQL注入漏洞可获admin权限", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310927&idx=3&sn=f5d4155be6237b0c3a66ac895c0755ae": "Palo Alto防火墙存在高危漏洞,触发无需交互和权限", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486705&idx=1&sn=860b4533ad361eafd6ebae77dafdbc7e": "分享Fastjson反序列化漏洞原理+漏洞复现+实战案例+POC收集", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793667&idx=3&sn=b07eadcd820da3a03e300e93d797e389": "Apache MINA CVE-2024-52046:满分漏洞可通过不安全的序列化实现 RCE", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491905&idx=1&sn=666f023e62a2a068803988c773b19572": "漏洞预警 | SeaCMS海洋影视管理系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489257&idx=1&sn=0525d98e188d10ddf89b58d84381d1f0": "【漏洞复现】卓软计量业务管理平台image存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526497&idx=1&sn=0635c9355f7941678e7717b787f1a91b": "Delinea 协议处理程序 - 通过更新进程执行远程代码(CVE-2024-12908)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526497&idx=3&sn=caf31731e63d13bd33e4fc65aa232bf0": "通过 X-Forwarded-Host 泄露密码重置令牌", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605884&idx=2&sn=8f48fa60078b08ca19464103b73f1abf": "2024年零日漏洞利用七大趋势", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485759&idx=1&sn=366d391e8a5a07d0b0ac03f6640bc881": "CVE-2024-53961|Adobe ColdFusion路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485759&idx=2&sn=96f564df935b660642e688cdd6f747c1": "CVE-2024-56145|Craft CMS远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485759&idx=3&sn=35fb3858f8e435c78c6ca1bfdf176f42": "CVE-2024-55461|SeaCMS海洋影视管理系统远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247494700&idx=1&sn=e6450fbdecaf5a1c5ea3c50dbce5503c": "自学漏洞技术90%的人都错了!", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517903&idx=1&sn=b01118a06012af45a1e6ada882679324": "CVE-2024-9047 (WordPress File Upload 插件漏洞分析)", "https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247538192&idx=1&sn=31e87854346e28f0f99ef937777485eb": "如何利用AI(人工智能)进行自动化SRC漏洞挖掘【附代码】", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517945&idx=1&sn=2858490faf771353da39f28b59279e4c": "我的评价是全是干货", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486384&idx=1&sn=88eac745c7c780c5a7fa63bc413835e3": "PostExpKit插件使用常见问题11-18", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899862&idx=1&sn=6c3c42a1d72ccb4d5cf15f10bcf41b42": "紧急预警!热门 WordPress 教育主题 WPLMS 曝严重漏洞,可被黑客完全控制!", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247495683&idx=2&sn=73ef00f9272e063053438370d10c7731": "车机存安全漏洞 约80万辆大众电动车位置信息公开暴露数月", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546358&idx=1&sn=3f3e9add8cba1512f713580dabdbfa82": "简易短信轰炸漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247491222&idx=1&sn=e39e5a74e9431480b1582b2b79c317f7": "交流群新增github poc监控机器人", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310928&idx=3&sn=9a8303fc9977645e52699be6835d36d2": "曹县黑客2024年“营收”超13亿美元,单笔最高3亿美元", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655262876&idx=6&sn=8ce86f15dcd67549b95d2e50fd389ba8": "YD∕T 4996-2024 电信和互联网行业网络运营者漏洞管理平台技术要求", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486182&idx=1&sn=6b898e3622ec2befa8069e033a2f01b9": "通过代码审计用友获取CNVD高危证书", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650605913&idx=4&sn=2dbe7cfc615526cf17dfa0514711d389": "NB!一款基于java开发的漏洞检测工具,集合了泛微、用友、大华、海康、致远、红帆、万户、帆软等漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493098&idx=1&sn=daf17eea39dbbe868a10945583414150": "网络信息系统WF2409E路由器进行了一次完整的硬件安全分析研究 | 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493642&idx=1&sn=148bc2127ec92f4853e3d25ce1e7c686": "像职业黑客一样思考,在漏洞挖掘中可以多赚30000美元(真的吗?)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493642&idx=2&sn=e56539ff84e21a74e6dba51ec10c2eab": "【SRC】SQL 注入(SQLi)漏洞检测指南", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486540&idx=1&sn=63406d0b7e232811e72af958854598b1": "「漏洞复现」科汛新职教网校系统KesionEDU CheckOrder SQL注入漏洞(XVE-2024-1476)", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487547&idx=1&sn=208ed8027238c77ddd5a967fb895a024": "赛克安全本周漏洞推送(12.22-12.27)涉及国威IP数字语音系统、黄药师、企企通、快云服务器、一卡通系统漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506335&idx=1&sn=7c0ecf4f62abd40aec0f31829276017e": "当黑客那些年之帐户接管系列漏洞-案例一斩获1000$", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517950&idx=1&sn=bef8c9d5541206c2256a5de3b375398a": "比较有意思的几个漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247488307&idx=1&sn=bf64b07108abe531018ffec416ddf48a": "要好好的看完喔,不然会被暴力的X哟,cjson&json 二进制漏洞利用总结", "https://mp.weixin.qq.com/s?__biz=MzkyODMyODMyOA==&mid=2247487645&idx=1&sn=6ca606bda2f7ca498eea6874a2c3d2ce": "PostgreSQL-CVE-2020-25695 提权漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247486094&idx=1&sn=b01f94c0609b2e5bda727bcd1f142cff": "2024年全栈安全公众号总结,启程一周年,不忘初心,继续前行!", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489276&idx=1&sn=5ca1fedb935d5888e56c47434bd1e887": "【0day】朗速ERP UEditorAjaxApi存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899863&idx=1&sn=4edaf85372fe606cb8ded78b4f972a46": "警惕!新型 Mirai 僵尸网络来袭,利用未公开漏洞攻击 NVR 和路由器!", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491933&idx=1&sn=b451fb7c26eff80fc80a791f35b0f699": "漏洞预警 | 灵当CRM任意文件上传和SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491933&idx=2&sn=9a6a334bae03fa826ec5f695d14eef82": "漏洞预警 | 泛微e-cology9 SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491933&idx=3&sn=762b8a222c97692a8e610f36963bbaff": "漏洞预警 | 用友NC-Cloud SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485835&idx=1&sn=a4006b0abf897b676ebfb3f3c77e395a": "【漏洞复现】某平台-Upload-login-bypass登录绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5Njg5ODM0OQ==&mid=2247485970&idx=1&sn=9b76a2caa9f387177dd7ead1489c5aad": "漏洞分析 | Apache SkyWalking SQL注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247504597&idx=1&sn=49f9f1550dbc1059ae35e9c00a5feacd": "一款卓越防护Web漏洞的神器", "https://mp.weixin.qq.com/s?__biz=Mzg3NTY0MjIwNg==&mid=2247485293&idx=1&sn=1138242da1a830b127c4b00f230940f8": "急需升级,D-Link 路由器漏洞被僵尸网络广泛用于 DDoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzA4NjMwMzI3Mg==&mid=2247500509&idx=1&sn=d879aed5a495860040dfb717434d7ee2": "【漏洞通告】某凌OA fsscCommonPortle 未授权SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247510019&idx=1&sn=ef7658d9567ef58481a322510125580f": "AJ-Report 可视化大屏漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247538057&idx=2&sn=6fdb5d26fcbcf36bb8aef6816e78a238": "警惕!2024年全球零日漏洞利用呈现七大趋势", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247485325&idx=1&sn=d766f23653897e9076fc8958bb75263c": "轻量级,免费,百万POC", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247491944&idx=1&sn=bf7c78e7275f3dc7a07f208965dc9e6e": "漏洞预警 福建科立讯通信有限公司指挥调度 命令执行 sendxxx.php", "https://mp.weixin.qq.com/s?__biz=Mzg2MTg3NzQ5OQ==&mid=2247485587&idx=1&sn=87e4947393d4c58c206c4d9961a29ca0": "如何利用开源情报(osint)识别飞机和无人机", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485035&idx=1&sn=585e3f18d100677efc727f86ce54d095": "工具集:Faraday【开源漏洞管理工具】", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546360&idx=1&sn=7178f037b525d958d7c20d08db5f1d44": "区块链安全 | 智能合约重入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517931&idx=1&sn=a31e2b38e5b404f06e701c835c8aa98a": "Guns后台任意文件上传漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg4NDc0Njk1MQ==&mid=2247486746&idx=1&sn=4a17fec7d591a59540a57f189ad9b362": "如何在复杂环境下快速定位并应对网络攻击?", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727842132&idx=1&sn=c0026260d20abcf884049d6b743e30b9": "ExpAttack:大语言模型越狱风险持续追踪框架", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291998&idx=1&sn=36120636ca1c352ce916cebd14212209": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521932&idx=1&sn=518332fa38f3263ee23df7a70c1187d3": "Palo Alto 修复已遭利用的严重PAN-OS DoS 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491820&idx=1&sn=fcc726b15045495ac1fbb41aa96315da": "锐捷网络云平台漏洞可能使 50,000 台设备遭受远程攻击", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495652&idx=1&sn=cef4406becdd51d1e33a90e86006eb68": "CNVD漏洞周报2024年第52期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495652&idx=2&sn=2f11d6d88700365343f0e1cbddb894b8": "上周关注度较高的产品安全漏洞(20241223-20241229)", "https://mp.weixin.qq.com/s?__biz=Mzg2MTc1MjY5OQ==&mid=2247486193&idx=1&sn=bc78153415de7d82ff16381fc081d515": "sd*夏还我血汗钱!", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247552839&idx=2&sn=942a986e8043298bd33af66f58fa1b62": "【免费领】智能设备安全技术干货:路由器0day漏洞挖掘指南", "https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650463818&idx=1&sn=c4a9f9fec1ad1e8d9141b2ef5cb3b8f3": "全球云上数据泄露风险分析简报 (第四期):供应链攻击致39万账户凭证泄露,MFA漏洞致多个云服务被未授权访问", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502696&idx=1&sn=6f6eb5c064c0d4da065fa080d6b0e4c0": "安全热点周报:黑客利用 DoS 漏洞禁用 Palo Alto Networks 防火墙", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486551&idx=1&sn=0d27e7daa1e9f260dd0308faa12ee9aa": "「漏洞复现」友数聚 CPAS审计管理系统V4 downPlugs 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247498196&idx=1&sn=1fb82a841009e926aecd957f4606117c": "全球云上数据泄露风险分析简报 (第四期):供应链攻击致39万账户凭证泄露,MFA漏洞致多个云服务被未授权访问", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500542&idx=2&sn=3fb1b5f1c2d3aeceb976ac1a854a7356": "【漏洞通告】Apache Traffic Control SQL注入漏洞(CVE-2024-45387)", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247488005&idx=1&sn=62d81de1aeddc3b12a7c5e00acfa04cb": "某小型CMS漏洞复现审计", "https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247527681&idx=1&sn=e77aaa7db384e40d9e8ba48f6dbe15eb": "路由器运行一段时间变慢了,有定时重启路由吗?", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485407&idx=1&sn=a1c9e810b243555ad112f189a4ba18ad": "【最新】推特蓝V公布 7zip 0day", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496709&idx=1&sn=4459d412d70bafeeb2be8cead320a6a7": "Springboot未授权之httptrace和logfile的实战利用", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526526&idx=1&sn=b40e4e0b3bfdf287bdb7d6d93a01a914": "CVE-2024-21182 - Oracle Weblogic Server 漏洞利用 PoC 发布", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526526&idx=2&sn=cef20dd8649aac66ad56c7106ed00265": "Krueger 是一种概念验证 (PoC) .NET 后利用工具", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486138&idx=1&sn=ea815812a6b145f0e3cff283fef7d86e": "近期 Apache Struts 2 严重漏洞开始被利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651310972&idx=4&sn=eeb554ed9dff33696a967625fde4879e": "Brakeman:针对Ruby on Rails应用的静态分析安全漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491006&idx=1&sn=ae1eb85988018523b6fede2de404e828": "复测 Apache Tomcat 远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067016&idx=3&sn=8a2de7555b1f2f62a08ba91e461c72ba": "【安全圈】WPA3协议存在安全漏洞,黑客可获取WiFi密码", "https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247498696&idx=1&sn=fcef68c5f6b8fbcdcdedc41c75753116": "国家金融监督管理总局发布 《银行保险机构数据安全管理办法》", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247517945&idx=1&sn=866df104f09aad13fccf1e26c6c78bc8": "CVE-2024-42327:Zabbix SQL注入漏洞分析漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzUxMjc0MTE3Mw==&mid=2247494831&idx=1&sn=5aaadb7d61edb505bc39101bbd83d4b9": "Four-Faith 路由器pre-auth 命令注入漏洞(CVE-2024-12856)", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247514568&idx=1&sn=e1ee1440e4e46b8e578d912fea737838": "网安瞭望台第19期:D-Link 路由器网页管理界面漏洞,攻击者可获取设备访问权限", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489376&idx=1&sn=c143a56e17c582e5f043c8486dacb182": "【漏洞预警】Craft CMS register_argc_argv 致模板注入代码执行漏洞(CVE-2024-56145)", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931337&idx=1&sn=b3e41a0f78748e4805b7646fb2333b05": "浙江某软件科技公司被处罚,因数据库存在安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493117&idx=1&sn=5cbf11851c6bc22bb2af1ea69009af0a": "Burp Suite 插件 BurpGPT,可执行额外的被动扫描,以发现高度定制的漏洞,并可以运行任何类型的基于流量的分析。", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485838&idx=1&sn=e1160fabd8a74bcd4a53a46d1d47febb": "【漏洞复现】某平台-Process-login-bypass登录绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5Mjk3MDA5Ng==&mid=2247486451&idx=1&sn=43461931f69b85bb08cf0fae59ed2ac6": "Telegram小小0day-查询任意手机号码", "https://mp.weixin.qq.com/s?__biz=MzU3MDM2NzkwNg==&mid=2247486508&idx=1&sn=11cabc35a30ecce290f73a5197b78e4c": "美国财政部“史诗级”黑客事件:祸起网安公司产品漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjYxMDM4MA==&mid=2247484049&idx=1&sn=e4764b4de7309a9bc49a8ba4c9161b7c": "CVE漏洞监控", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484329&idx=1&sn=42e67564df2d85fc84e59e458b373fec": "【0Day漏洞预警】锐捷RG-EW1200G存在逻辑缺陷", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499560&idx=1&sn=61decaa2b4ce8bc86d2180e0b3cd0b78": "CNVD漏洞周报2024年第52期", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506448&idx=1&sn=90369432d33604a72d7b5f17b2eeadfb": "美国财政部“史诗级”黑客事件:祸起网安公司产品漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496908&idx=1&sn=352ac8e21fec342905ad73d02a58e740": "【漏洞通告】Apache Traffic Control SQL注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793690&idx=3&sn=6545990d8d094c2f6b2efa2c79bf0e8a": "攻击者正在利用 Four-Faith 工业路由器中的命令注入漏洞来部署反向 shell", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247497847&idx=3&sn=8278fcaa911c46e45152af778abaf748": "53套.NET系统漏洞威胁情报(12.31更新)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491934&idx=2&sn=6758c92161888dc02cd88c72fc8d6559": "漏洞预警 | 方正全媒体采编系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491934&idx=3&sn=d94a3dfc31a0ad8f9e870fdff248dc44": "漏洞预警 | Sophos Firewall SQL注入、弱凭证和代码注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899889&idx=1&sn=6060673f25972e58339a5a40ae67e4be": "警惕!锐捷网络云平台曝严重漏洞,全球约 5 万台设备或遭远程控制!", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489326&idx=2&sn=f5d4e80d03e37a0b0a8ef61195765e7e": "【大量存在】成都和力九垠科技有限公司Common存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500548&idx=2&sn=8708d95f052191d0c9e4322802d02016": "【漏洞通告】Palo Alto Networks PAN-OS拒绝服务漏洞(CVE-2024-3393)", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651134870&idx=1&sn=24b9e69f07ded3afd191f616b0f09d54": "踏浪逐新 峥嵘满途丨梆梆安全2024年度回顾", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493750&idx=1&sn=322743019a204e55a45f57cb47685ea7": "通过代码审计用友获取CNVD高危证书", "https://mp.weixin.qq.com/s?__biz=MjM5NDA3ODY4Ng==&mid=2247488839&idx=1&sn=a4ca0c28b1dc0c3e07a648e754121b0b": "国家密码管理局公告(第50号)丨19项密码行业标准发布", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503248&idx=1&sn=2f516189c6b2daf10372243ffba51d08": "雷神众测漏洞周报2024.12.23-2024.12.29", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526560&idx=3&sn=54b09d4b30d2a8b749aebb0ddbeb8e05": "CVE-2024-54819 - I Librarian 服务器端请求伪造", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526560&idx=4&sn=f3a9bdb2740228cbc942151a6713f073": "Linux 内核漏洞 CVE-2023-4147:针对权限提升缺陷的 PoC 漏洞已发布", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493699&idx=1&sn=49d9cfc1d5844ef6529f5b46a1e1cc19": "【吃瓜】价值 3000 元的 telegram 手机号查询'0day'", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493699&idx=2&sn=cf417466e1897dc482e7e9d6c4dedc3f": "x网友使用大模型生成 7-zip的0day漏洞,7-zip 原作者辟谣0day是假的", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488496&idx=1&sn=d57be6b7475b11e878558ef1ee711237": "WordPress Wux-Blog-Editor 插件存在前台越权漏洞(直接成为管理员) CVE-2024-9932", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496388&idx=1&sn=694eb0f7fcaf672c7a5be5fe99587188": "价值1.8k人民币漏洞:Telegram小小0day-查询任意手机号码", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485113&idx=1&sn=50df90ad4a66b95ba4c48d29d449b8b0": "CVE-2024-52046 Apache MINA反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485113&idx=2&sn=45c7416f428ce01ae543c22d001b2eaa": "CVE-2024-12856 四信Four-Faith路由器存在命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499560&idx=2&sn=7b4058c8e11cfa595e24c0fce3754f55": "上周关注度较高的产品安全漏洞(20241223-20241229)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491934&idx=1&sn=c056c4384930ffec5352c63b06b11434": "漏洞预警 | GeoServer远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067033&idx=2&sn=6bf70d067d0bebdf78e4045b13df4439": "【安全圈】Linux 系统岌岌可危:GStreamer 漏洞威胁数百万用户", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067033&idx=3&sn=852cf568ead351f59557241b2af12032": "【安全圈】严重漏洞使大量Four-Faith路由器面临远程利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311106&idx=2&sn=4d17c81f07075c05217f769b5f513263": "利用 DoS 漏洞可瘫痪 Palo Alto 防火墙", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311106&idx=4&sn=c480deb733ce9cca529cc6125ab93315": "pwnobd:一款针对OBD-II设备的漏洞分析与渗透测试工具", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247505498&idx=2&sn=ff5beeae494e24f372210a8fa9ee150d": "每周网安资讯 (12.24-12.31)|Microsoft多款产品存在保护机制失效漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247486532&idx=1&sn=37417bf0416d10945d0de4e450392e6a": "你手上的漏洞poc,真能帮你解决问题吗?", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513393&idx=1&sn=1a9e508382839d999a5a0058560e6b35": "警惕!国产工业路由器零日漏洞疑遭攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649766425&idx=1&sn=8dd98072573d2f284b8012e96ac6082f": "蛙!请查收你的2024漏洞盒子年度报告!", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931349&idx=1&sn=cb8ce5b3ebacbb16c2b2789891fd6ac8": "银行数据安全管理新规发布:信息科技部是技术保护主责部门", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486570&idx=1&sn=3c7b1c39f72c96f3f957db2512bc4e68": "「漏洞复现」用友U8 Cloud ReleaseRepMngAction SQL注入漏洞复现(CNVD-2024-33023)", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247494127&idx=1&sn=66b3069772e4469f6d59fe463049c089": "OSRC 2024年度颁奖典礼在深圳完美落幕", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247488012&idx=1&sn=03cd5f595007f6e1342a05b1a4342891": "SRC挖掘之Access验证校验的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486154&idx=1&sn=f07ce16c527fab05e35d43f5cd4daa4a": "FICORA、CAPSAICIN 僵尸网络利用旧 D-Link 路由器漏洞发起 DDoS 攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0ODMwNjQzMA==&mid=2247485755&idx=1&sn=2424459bff9c2f58c6001e3ab850dbd0": "瑞斯康达智能网关命令执行漏洞简单分析", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247577744&idx=1&sn=e99a3ea2349f0319f23eab9eb52cb772": "2024年度盘点之漏洞威胁:AI技术降低漏洞利用门槛,网络边缘设备成重灾区", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNTU2NA==&mid=2247486264&idx=1&sn=d66a1443fa5d075f4be3fefff1faf36e": "通过代码审计用友获取CNVD高危证书", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489384&idx=1&sn=985ccff71c2ce2fbab9504240e929608": "【漏洞预警】Apache Traffic Control SQL注入漏洞(CVE-2024-45387)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496715&idx=1&sn=5df17524d1be3680c48f6168438b7a70": "深入浅出API测试|搜集分析与漏洞挖掘实战", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633465&idx=3&sn=ef758b05548bc18a71aefb5a10e8d08f": "警惕!国产工业路由器零日漏洞疑遭攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462489&idx=1&sn=629f138fdea3ab34840c961ad3d4d350": "信息安全漏洞周报(2024年第53期)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247484687&idx=1&sn=08ebc682562eef9246ca314ab4af2548": "HTB靶场通关-1", "https://mp.weixin.qq.com/s?__biz=MzAwNTc5MTMyNg==&mid=2247500090&idx=1&sn=3fc186c31fd4b21d7c6d5c98c4644bdc": "元旦节快乐师傅们,祝各位师傅手握0day打天下!", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515415&idx=1&sn=0302b4a3ffa8ce6ea4ef4b342f977b64": "Cleo 远程代码执行漏洞复现(CVE-2024-50623)(附脚本)", "https://mp.weixin.qq.com/s?__biz=MzI5MjEyOTE4MA==&mid=2648520045&idx=1&sn=81b836983e9975eb61323771fdaa3883": "愿新年,胜旧年", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260358&idx=1&sn=985920a3606cd74312bd080b14bffcca": "意外发现谷歌Slides越权漏洞,获得赏金$3133.70的故事", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491956&idx=1&sn=ed3a1c1888a52f13e7a3d3d1f1ae9add": "漏洞预警 | Apache Hive & Spark信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491956&idx=2&sn=f417021e873e2e489ceaec238fb37c25": "漏洞预警 | 易思智能物流无人值守系统 SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491956&idx=3&sn=ceaee3325e00f83e7428839355d46a1d": "漏洞预警 | WordPress Plugin KiviCare SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493759&idx=3&sn=1aef5e4aec4152afbab4748ebf403dfc": "网络文件系统 (NFS) 协议中经常被忽视的漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311100&idx=1&sn=cf7157892b59ec697b011bdb4e852326": "WPA3协议存在安全漏洞,黑客可获取WiFi密码", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486709&idx=1&sn=70603444fa226522eb7fc334ead763d0": "分享应急响应排查——windows应急响应详细解析", "https://mp.weixin.qq.com/s?__biz=MzkxMTY1MTIzOA==&mid=2247484482&idx=1&sn=6ebfcd11af1fdd86f306e7c16c822820": "【技术分享】Shiro框架下文件读取漏洞快速利用思路", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526597&idx=1&sn=4eae4d01a0fec23270567af51fae332f": "7-Zip 零日漏洞据称已在网上泄露", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486159&idx=1&sn=d99f4a028b1730d6366ecf0b0d342527": "46.5 万起搏器存在漏洞;用户必须就医进行修复", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067069&idx=2&sn=516425f9b9c6da18a71ed20d3b724b4b": "【安全圈】捷某网络云平台漏洞曝光:50000 台设备面临远程攻击风险", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587913&idx=1&sn=59937f7938afd40d184cb3fed087a347": "欢迎报名!​“系统0day安全”系列课程:掌握漏洞挖掘重要技能", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587913&idx=2&sn=98c0e76217bf3df9659f9e697ec2775d": "PWN入门:三打竞态条件漏洞-DirtyCOW", "https://mp.weixin.qq.com/s?__biz=MzI1NTE2NzQ3NQ==&mid=2247485474&idx=1&sn=62812c0cc77f99961af3de503e4c732d": "【漏洞复现】北京友数 CPAS 审计管理系统存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjY0NDM3OA==&mid=2247484167&idx=1&sn=b3d525b35dd2e4849cdb43db78477e55": "第二十课-系统学习代码审计:Java反序列化基础-fastjson反序列化漏洞原理分析fastjson利用条件分析", "https://mp.weixin.qq.com/s?__biz=Mzg5MDQyMzg3NQ==&mid=2247484020&idx=1&sn=f6e84e9f2be4cd908bfa4574c0ac5ea6": "还在手撸 POC?这个 AI 脚本让你直接起飞!", "https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485358&idx=1&sn=7ed90d0cac8a364bf8ff3a27f8f3cc10": "专题丨低空经济网络和数据安全风险分析研究", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486595&idx=1&sn=1c92740e47085729280d2b01d344e047": "「漏洞复现」郑州时空-TMS运输管理系统 GetDataBase 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633484&idx=4&sn=f462715f44bf9fac23924a3c3a12feed": "WPA3协议存在安全漏洞,黑客可获取WiFi密码", "https://mp.weixin.qq.com/s?__biz=MzkxMTY1MTIzOA==&mid=2247484520&idx=1&sn=f5521e504c8b6e019aad5f78b8fdcf54": "【技术分享】文件上传XSS漏洞的利用方式", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493133&idx=1&sn=58da466e03801a32a4977feb65c2ac71": "ysoSimple:简易的Java漏洞利用工具,集成Java、Hessian、XStream、Shiro550反序列化等", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491966&idx=1&sn=9d4a99a10bebb5b5b5779656bb33a368": "漏洞预警 | 汉塔科技上网行为管理系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491966&idx=2&sn=0109569e3097888c035be7756d35dae4": "漏洞预警 | 蓝凌OA SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491966&idx=3&sn=9d8938cb9e5e52e23bd52f350b6a80a2": "漏洞预警 | 泛微E-Bridge SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899899&idx=1&sn=2f85cb1a3466fd4c8372b3207ce3c810": "紧急!Palo Alto Networks 防火墙遭 DoS 攻击,黑客利用 CVE-2024-3393 漏洞致其瘫痪!", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489357&idx=1&sn=be87478fd82d55b1ae053e5378b40c94": "【0day】W&Jsoft-D-Security数据仿泄露系统(DLP)存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247359&idx=1&sn=f31ecbd205f72292f49cf6cab4e276a6": "警惕!国产工业路由器零日漏洞疑遭攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485842&idx=1&sn=1362c91fa8813a6719e9bdd0b7f1bb7b": "【漏洞复现】某平台-checkLoginQrCode-delay-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NjA0ODAyNg==&mid=2247485931&idx=1&sn=664afa8dc20695b2d86fddda2830538f": "面向JS漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650606042&idx=2&sn=a643b8dd73810f509abdbb3f1c935808": "警惕!国产工业路由器零日漏洞疑遭攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247517632&idx=1&sn=f55b79811a6f8dd1ff8a1190f37f5ef3": "实战利器 50个渗透攻防命令速查!", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247490028&idx=2&sn=d61adfa8595d04cf1e03072c2aac9214": "重磅!国内最专业的 [ .NET 代码审计 ] 体系化学习互动社区,强势来袭!", "https://mp.weixin.qq.com/s?__biz=MzkzMzI3OTczNA==&mid=2247487963&idx=1&sn=f152d932bd0d1e3b3513328ced8cf98f": "面向JS漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg5NjY4NDg1Nw==&mid=2247483907&idx=1&sn=e64a7eb7fb8ecb4ffba0df92f7de2cb0": "[武器库]-WExploit漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247492816&idx=2&sn=d8dd338afd2442c7ceafb08c288b7a9f": "上周关注度较高的产品安全漏洞(20241216-20241222)", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247491951&idx=1&sn=f552959dc1ebe4e8e7b692cc6f60060c": "漏洞预警 unibox checkxxxx.php 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526666&idx=1&sn=51464a34472921949f23f7dfe3591e96": "LdapNightmare 一个 PoC 工具,用于针对 CVE-2024-49112 易受攻击 Windows Server", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486500&idx=1&sn=a79b34d5cfc1b82f145f7c7a9ca3a725": "【漏洞通告】Oracle iStore 未授权访问", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486500&idx=3&sn=bf82a52a74af24fb0803fbd8da0cd4aa": "【漏洞通告】华为产品 不充分的完整性漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486500&idx=4&sn=c1dfdfbb6c0be7000b980f0f91e37902": "【漏洞通告】Perl 安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488504&idx=1&sn=10012a6a34abcf028e17645af7561ee3": "【工具分享】开源,图形化Jeecg框架漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247493807&idx=1&sn=242601ce36b3839e1068a3ef8f1d28fb": "【Exp】古河大佬发现的 Ldap(CVE-2024-49112) 漏洞出现 Exp了,0-click", "https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661297669&idx=2&sn=8f3cd59e279c25009c4e77429b9dc163": "山石说AI|突破模糊测试极限:大模型驱动的软件漏洞深度挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484399&idx=1&sn=e28404c91dc74d96bef39bff1dce0608": "安钥®「漏洞防治标准作业程序(SOP)」征文启示 [2025年第1期,总第19期]", "https://mp.weixin.qq.com/s?__biz=MzI3NjA4MjMyMw==&mid=2647789866&idx=1&sn=ede8219d518f395dcf49492ebfb5fced": "mac版本微信小程序抓包学习", "https://mp.weixin.qq.com/s?__biz=MzI1NTE2NzQ3NQ==&mid=2247485484&idx=1&sn=105f7b834b3da70b77523462ca24ac4b": "【漏洞复现】SecFox运维安全管理与审计系统FastJson反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4OTI0MDk5MQ==&mid=2247493226&idx=1&sn=13da22c29bc367231583674efc8db0f9": "【AE插件】23000款AE插件合集,全套插件一键安装包", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650606042&idx=1&sn=115a6a68aa8b721157034b562e9492f0": "网络安全公司“内鬼”监守自盗 当黑客窃取个人信息2.08亿条;|WPA3协议存在安全漏洞,黑客可获取WiFi密码", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247538451&idx=3&sn=e0d5da8061b899effd86f8e54c066daa": "【风险提示】国产工业路由器零日漏洞疑遭攻击者利用", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727843649&idx=1&sn=31bc387f68e47f9a8dd9561a46e7d95c": "【活动】你没看错,通用漏洞全年3倍奖励!", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311189&idx=3&sn=77582a207799b2a8f44c90a6eed4a26b": "新的“DoubleClickjacking”漏洞可绕过网站的劫持保护", "https://mp.weixin.qq.com/s?__biz=Mzg5NTEwNTE1Mw==&mid=2247485171&idx=1&sn=0058b76345fc8ac04545cbf80cdc99e0": "防范XXE漏洞:XXE攻击详解与应对策略", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067095&idx=3&sn=6a10a23e41cc2e64a94951ad4f2b52a7": "【安全圈】新的“DoubleClickjacking”漏洞可绕过网站的劫持保护", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502196&idx=1&sn=7192bdc239556ce50cef819e31df6ea7": "Web漏洞分析与防范实战丨从\"脚本小子\"迈向\"研究员\"的第一步", "https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492248&idx=2&sn=3a4a075f85c8ab68001ce6a4fd5cecae": "【5.5CPE】ISC2焦点会议——治理、风险与合规,欢迎参会", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500562&idx=2&sn=a2bffedfb62b6f2678072c0b494338a1": "【漏洞通告】Windows LDAP远程代码执行漏洞(CVE-2024-49112)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458587938&idx=1&sn=501d4121b0437af290d817483a675882": "Hyper-V拒绝服务漏洞CVE-2024-43633分析", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490165&idx=1&sn=9256f940e9aafb6f123a2482d73d397b": "创宇安全智脑 | 灵当 CRM getMyAmbassador SQL注入等72个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521960&idx=2&sn=46eb22e98ed9cbd715a95b5188b6eac6": "黑客泄露更多数据,思科证实属实", "https://mp.weixin.qq.com/s?__biz=MzkyMDY5OTg5OA==&mid=2247492654&idx=1&sn=ae8da90daad9dd88b57bbc05ac6bde5c": "Web漏洞分析与防范实战丨从\"脚本小子\"迈向\"研究员\"的第一步", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247486461&idx=1&sn=e218c28bdbe2f61ee5dae5e253d5ee21": "【漏洞复现】大华智能物联综合管理平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDU5MzY0NQ==&mid=2247484400&idx=1&sn=3acd310a40e16ec8877629020df10ba9": "Web漏洞分析与防范实战丨从\"脚本小子\"迈向\"研究员\"的第一步", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247486536&idx=1&sn=612a80610f1a6ca6bdb08300f7c8a1d5": "Web漏洞分析与防范实战丨从\"脚本小子\"迈向\"研究员\"的第一步", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486619&idx=1&sn=fee8f7896e0a1157ce2632edf3de6d7c": "「漏洞复现」方正畅享全媒体新闻采编系统 imageProxy.do 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1OTc2MzE2Mg==&mid=2247489261&idx=1&sn=afa979eb1a44159426df3575203dc5b6": "【安全月报】| 12月份因漏洞、黑客攻击等损失为2860万美元,为全年黑客攻击最少月份", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515426&idx=1&sn=b76928086d14cd6ffce6164dbf7a5823": "新书推荐《Web漏洞分析与防范实战》", "https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247488371&idx=1&sn=4e527a3e132f3e02514cb331fa92b763": "Web漏洞分析与防范实战丨从\"脚本小子\"迈向\"研究员\"的第一步", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247492515&idx=1&sn=88978addef776d8110dd641655634b00": "研究漏洞方法指南 | Web漏洞分析与防范实战", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247490620&idx=1&sn=905c800b330ae42fa306dc9018746e04": "你手上的漏洞poc,真能帮你解决问题吗?", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486500&idx=2&sn=95436cdc9aa3a3b756999d41bd092e9c": "【漏洞通告】Apache Hive & Spark 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496729&idx=1&sn=0a735adcd78402855c254e71221dff90": "赏金$3133的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489395&idx=1&sn=256650cb87713ff212758abde0e2facc": "【漏洞预警】Apache Arrow代码执行漏洞(CVE-2024-52338)", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY2ODE1NA==&mid=2247484948&idx=1&sn=480a76ee02ac812d7b8f4f5635fff7b4": "SSTI模板注入漏洞详解(附一键getshell工具)", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247519026&idx=1&sn=1199efa3c2e527406ee3ae0ae85e550d": "记一次JS中的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI5Mzg5MDM3NQ==&mid=2247498213&idx=1&sn=42949367265a2dbc23de207739cc03d9": "你乘上的是列车还是彗星?", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc0Mjc3NQ==&mid=2247486620&idx=1&sn=a3c9f75946a17f69bb762ac9e19442ee": "开源代码漏洞扫描器 OSV-Scanner 新增修复和离线功能", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247498035&idx=2&sn=ae95efa731c1ad0bfb4f3907942bbcf7": "7-Zip 零日漏洞据称已在网上泄露", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651130106&idx=1&sn=a8a6ceb0bf11ca5eb70a3e6c42c9a141": "2024年我国全行业数字化及网络安全政策标准汇总下载", "https://mp.weixin.qq.com/s?__biz=MzI1NTE2NzQ3NQ==&mid=2247485496&idx=1&sn=30378454837adf12cd6f54952ac84eee": "【渗透书籍推荐】《Web漏洞分析与防范实战》丨文末参与抽奖免费赠书!!", "https://mp.weixin.qq.com/s?__biz=MzI1NTE2NzQ3NQ==&mid=2247485496&idx=2&sn=f883374d1a9a9eab5602921437412041": "【漏洞复现】朗速ERP后台管理系统FileUploadApi接口文件存在文件上传漏洞||附POC", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491967&idx=1&sn=f272d94e20068861012bfdc0fb0343c4": "漏洞预警 | Adobe ColdFusion反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491967&idx=2&sn=835396913c02e3d69338f769abed1682": "漏洞预警 | 用友NC XML实体注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491967&idx=3&sn=ae28506ae28775537a4e202b2f314308": "漏洞预警 | 用友BIP信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506527&idx=1&sn=4f478afe2ddb7c0d9505a4575c6baaa6": "超300万台未加密邮件服务器暴露,用户数据面临严重威胁!", "https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247567927&idx=1&sn=86d6ea511f81433eb47444a7d9427df2": "一家网安劳模企业的2024全年创作合辑", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489371&idx=1&sn=7bf3786a43261b9f5d4ca11a1815e449": "【1day edu 大量存在】大华智能物联综合管理平台(ICC) 存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247518041&idx=1&sn=07f9f7aae2aead67b9b4558d64c61cef": "代码审计 - MCMS v5.4.1 0day挖掘", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633511&idx=3&sn=a3006d2615237b392a55971d9ec8ecb5": "WPA3协议存在安全漏洞,黑客可获取WiFi密码", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247486122&idx=1&sn=fe8e6f4bc0f3516c35c83887e341c6a7": "文件读取漏洞实战利用", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485846&idx=1&sn=8821684901650fb3340200122965fecd": "【漏洞复现】某平台-taillog-mediaserverlogs-readfile任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486632&idx=1&sn=79a5e1493e56ee8fa3a591cb2ab60964": "「漏洞复现」互慧-急诊综合管理平台 ServicePage.aspx 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247525435&idx=2&sn=4140af372cc6b9d211f6fc455ada62f3": "WPA3协议存在安全漏洞,黑客可获取WiFi密码", "https://mp.weixin.qq.com/s?__biz=MzkyMTY1NDc2OA==&mid=2247487254&idx=1&sn=01268baaacf70df064ef36219af22e7c": "【漏洞文章】大华智能物联综合管理平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MjkwMDY3OA==&mid=2247485497&idx=1&sn=aa791ceb660da7539769e68f0ec483b7": "【漏洞复现】万能门店小程序系统存在任意文件读取", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650606113&idx=4&sn=3a58d4a332d17dd134f29e1888743162": "Burp Suite 插件 BurpGPT,可执行额外的被动扫描,以发现高度定制的漏洞,并可以运行任何类型的基于流量的分析。", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652113608&idx=1&sn=f79caed7d42805c756667e5f6216476f": "一省政务信息化项目建设办法印发:风评、密评结果不合格不得申请竣工验收", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247486465&idx=1&sn=1138d31bfd05c8c6efd96bfce126e10e": "【漏洞复现】急诊急救快速联动平台存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487549&idx=1&sn=9a6dcd1989da0543295006e8a93e3fc7": "赛克安全本周漏洞推送(12.28-1.3)涉及致翔 OA、校盈家财务管理平台、明源云-售楼管理系统v5.0、平升水库系统漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650623299&idx=1&sn=9a0edc99a2f75633bf1845d51b1bf96a": "《2024年度漏洞态势分析报告》重磅出炉!文末扫码下载", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485667&idx=1&sn=83c752dd7559eb7db583e4792aac6c83": "赛克安全本周漏洞推送(12.28-1.3)涉及致翔 OA、校盈家财务管理平台、明源云-售楼管理系统v5.0、平升水库系统漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NDQyNzg1OA==&mid=2247493791&idx=1&sn=5db4f1eab8076ccd384a942642fdc147": "Web漏洞分析与防范实战丨从\"脚本小子\"迈向\"研究员\"的第一步", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793722&idx=2&sn=0164b2813dcf92be4bc01f7397f6da75": "新的“DoubleClickjacking”漏洞攻击可绕过主要网站的点击劫持保护措施", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793722&idx=3&sn=5967bc25cd58dbddd6903bdc12c80132": "针对Windows LDAP 零点击 RCE 漏洞的 PoC 利用工具发布", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486783&idx=1&sn=9e091d4265c105fdb69748dd2719e582": "记一次某OA渗透测试有意思的文件上传漏洞挖掘经历以及分析", "https://mp.weixin.qq.com/s?__biz=MzUzMDQ1MTY0MQ==&mid=2247506520&idx=1&sn=34e28b190e59f2ddf4e3ed081340efd1": "0Day-OURPHP建站系统存在未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247488398&idx=1&sn=21afa7d56109b232ecfd8857479dadb3": "指导手册 | Web漏洞分析与防范实战", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247538586&idx=2&sn=4fa87eedfb67b928e4df328ad6fbc89e": "【漏洞通告】Windows LDAP远程代码执行漏洞(CVE-2024-49112)", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247538586&idx=3&sn=0f21db352d546b8e521103fc73e21313": "急需升级,D-Link 路由器漏洞被僵尸网络广泛用于 DDoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247492825&idx=2&sn=bee7a2cc307a6c4b7272cb74bcc5188f": "上周关注度较高的产品安全漏洞(20241223-20241229)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489951&idx=1&sn=a0ac658e34aaa8913ddcdf8cfaf58749": "圣乔ERP系统 DwrUtil SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489945&idx=1&sn=a477e7aa3188a44655347cf7b1c3f64b": "圣乔ERP系统 ResultSetConvertor SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502201&idx=1&sn=f9dbc0640e326e3c63591c0ae5c533b0": "文件读取漏洞实战利用", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNTU2NA==&mid=2247486273&idx=1&sn=25043aaddb4c641195e99dbfd8312447": "记一次某OA渗透测试有意思的文件上传漏洞挖掘经历以及分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526722&idx=1&sn=c459e062a45c8e0fdb86bda7a9adad2d": "伪造的 7-Zip 漏洞代码被追溯到人工智能产生的误解", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526722&idx=2&sn=4e99985c4a7e6bb4da0031be24483dbb": "LDAPNightmare:SafeBreach Labs 发布了 CVE-2024-49113 的第一个概念验证漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526722&idx=3&sn=d639417738fd4aa1f00df58ecab69d19": "已修补但仍然存在漏洞:Windows BitLocker 加密再次被绕过", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489936&idx=1&sn=b378d029b84650cdd266b98ff895940e": "圣乔ERP系统 SingleRowQueryConvertor SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454063799&idx=1&sn=6adf30edb8fb730c3fcb98d5e6caccde": "信息安全漏洞周报【第004期】", "https://mp.weixin.qq.com/s?__biz=MzU5OTU3NDEzOQ==&mid=2247492707&idx=1&sn=701686fdf382df31406c42beed964ac9": "Cyber Apocalypse 2023 硬件 CTF 题解", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485072&idx=1&sn=cd5c7085fac45bf2a9d30a905608af8c": "工具集:NacosExploit【Nacos漏洞综合利用工具2.0】", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488533&idx=1&sn=3bd41daca34f543f26361bb54f403b16": "【首发 1day】WordPress Crypto 插件存在前台任意用户登录漏洞(CVE-2024-9989)", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247495858&idx=1&sn=76fdf27c27f11d69e3effa68ce25f8e6": "【漏洞工具】小米路由器任意文件读取漏洞python命令行利用工具", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067112&idx=3&sn=7e0c3ed063040f28dd8bb8c3ead818df": "【安全圈】伪造的 7-Zip 漏洞代码被追溯到人工智能产生的误解", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247533331&idx=2&sn=751643f262d2972ec452a721c9f8ebf6": "网络安全行业的黄埔军校正奇学苑5期招生,穿越周期,成就梦想", "https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247515719&idx=1&sn=01c1fdb783a2a11f73b6961114c9435b": "大量 Four-Faith 路由器因严重漏洞面临远程攻击风险", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588040&idx=3&sn=c54a81adfa6bf7c53845b3652106407a": "第一章课时12已更新!系统0day安全-IOT设备漏洞挖掘(第6期)", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650620552&idx=1&sn=f9f9673a4f304eab117055481a005b46": "红色护航者 | 亚信安全主题党日暨爱心捐赠活动圆满举办", "https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247485991&idx=1&sn=7e2497e7d5b5eed3611a44240e8f635c": "2024年度网络安全热点事件盘点", "https://mp.weixin.qq.com/s?__biz=MzA5Nzc4Njg1NA==&mid=2247489176&idx=1&sn=ffb725e520b5f1e0362b480c6148b21d": "关于防范Apache Struts2任意文件上传超危漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MzkzMDcxNzg4MA==&mid=2247484491&idx=1&sn=ac035ef8a3a9ae982812f3dc87657a60": "[漏洞复现]大*智能物联平台GetClassValue命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247519035&idx=1&sn=6c4593ec850320bb3a2babf74b848e0c": "Web安全进阶:漏洞分析与防范实战技巧", "https://mp.weixin.qq.com/s?__biz=MzkyOTI4NTY4MQ==&mid=2247491104&idx=1&sn=e4d202e11acf2a0c3123a79f7d250d9a": "【文末抽奖】看完这篇《Web漏洞分析与防范实战》成为Web大神!", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496735&idx=1&sn=05050cc8b07c9a49333af1d0dbd6d2e2": "当黑客那些年之帐户接管系列漏洞-案例一斩获1000$", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489400&idx=1&sn=c983947941f4637d6fade0c80b18ea2c": "【高危漏洞预警】Windows LDAP远程代码执行漏洞(CVE-2024-49112)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502708&idx=1&sn=30ee0bf007924eb359c6c609b3ba1cb7": "【已复现】Windows 轻量级目录访问协议 (LDAP) 拒绝服务漏洞(CVE-2024-49113)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502820&idx=1&sn=5ebcb4158f712c89ddc3f0c5b1ee0bed": "【成功复现】大华智能物联综合管理平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247552887&idx=1&sn=9fe7fc306ecf8525a4089f0857ccfd64": "Web漏洞分析与防范实战丨从\"脚本小子\"迈向\"研究员\"的第一步", "https://mp.weixin.qq.com/s?__biz=MzkwODY2MzMyMA==&mid=2247484481&idx=1&sn=98e543ae16027d7d521fd5389f6dfce3": "【全球首发】【6w$赏金】微软身份漏洞-未授权强制解绑任意微软账户邮箱(全球微软账户邮箱或受影响)", "https://mp.weixin.qq.com/s?__biz=MzI0NjA3Mzk2NQ==&mid=2247495429&idx=1&sn=38b21b3d0a81ed449647cb0de481cac6": "攻防靶场(31):日志投毒与文件包含漏洞 Solstice", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247489375&idx=1&sn=3d401297a02bc6e0f6eb3ef1368dfbad": "【漏洞复现】方正畅享全媒体新闻采编系统imageProxy存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE1MDY0NA==&mid=2247508683&idx=1&sn=2d8afad815b3a090caa695a9c69731f8": "中孚安全荣获“山东省大数据企业50强”称号", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491972&idx=1&sn=307a01116d071dca48ffee093d16aaab": "漏洞预警 | Apache MINA反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491972&idx=2&sn=881630209ae33b7efb60ddafb7892458": "漏洞预警 | 博斯外贸管理软件SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491972&idx=3&sn=ff471839b4b2ae7ac321141a08593a64": "漏洞预警 | 卓软计量业务管理平台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496418&idx=1&sn=8ba7f14c84d7089429b1828b786203d7": "即刻预约!长亭“WAF+AI”再度跃迁,1月7日语义3.0发布会邀您共启新篇", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489721&idx=1&sn=b03f73d9fdf6f1e1d219e73362c793e5": "大华智能物联综合管理平台RCE远程代码执行漏洞-影响资产8000+| 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzkyMTQwNjA4NA==&mid=2247485131&idx=1&sn=5b3ff5eae1d2bb87ab5c38034e1d2261": "WeChatMsg:生成你的 2024 微信年报", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655263253&idx=1&sn=20cdf534e83d3983f4168fd98f57357a": "2024年度漏洞态势分析报告", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247497565&idx=1&sn=0495a32e8e257d65c7ad14810a22fa74": "【oscp】Tr0ll 靶机全系列(1-3),FTP被玩坏了", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247486538&idx=1&sn=77ec7c2278372d78a1d4ac16c97af6fc": "【全球首发】【6w$赏金】微软身份漏洞-未授权强制解绑任意微软账户邮箱(全球微软账户邮箱或受影响)", "https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247487950&idx=1&sn=8ef08d9a0d19a6b3e0836af79fac258b": "遗憾!某漏洞挖掘者错失$60000微软奖金!", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311342&idx=2&sn=77ebd12d4c8d0c5e3eea44fb7726b249": "FreeBuf周报 | 超过300万台未加密的邮件服务器暴露;WPA3协议存在安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067148&idx=2&sn=b5d58580bfec4388018946e5f03f2ce6&chksm=f36e790cc419f01a2cb74d348b4855f80c5f279e8ebab8a25cf5c2f3beffb0d66622c0567162&scene=58&subscene=0": "【安全圈】开源终端工具曝重大安全漏洞,输入信息可能被窃取!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067148&idx=3&sn=d0e8225dafa1c2fb13ad0e7f22376327&chksm=f36e790cc419f01a20528cc722e7f75d6c77ce8bb1bb4ac0f0503c3e9f9a6357c34f2172a526&scene=58&subscene=0": "【安全圈】微软 Win11 BitLocker 存在物理接触即可绕过的重大漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247509347&idx=1&sn=d8886a100e78c54f98c7172e8f3c555a&chksm=fa5270ddcd25f9cbbe87cac2d57c45350c26df28891b05bf9671c4a13d19270f167c120225c5&scene=58&subscene=0": "山石安研院2024年度代表性原创0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489981&idx=1&sn=d2a18a6d7f33b0238c87a7091e2eeb06": "杜特网上订单管理系统 Login.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489971&idx=1&sn=a69991f940624d3f9afd5836d1940ec4": "生命港湾 服务配置工具平台 Download 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500344&idx=1&sn=5a7278e5bfdaf2f714b74aec9dc6084b": "大华DSS城市安防监控平台login_init.action远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247495870&idx=1&sn=4ed4226b873ada078ba36fccf2108607": "【漏洞工具】小米路由器任意文件读取漏洞python图形化框架利用工具", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094525&idx=1&sn=65e2d2894d932d82b3b385c1fecdb76b": "Windows LDAP远程代码执行漏洞(CVE-2024-49112)", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633558&idx=3&sn=52cfdbc169143c290a49fffc945d77d6": "Windows 曝9.8分漏洞,已有PoC及利用情况", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067165&idx=3&sn=d144262f4db66660f995538078a1b911": "【安全圈】已打补丁但仍有漏洞 Windows BitLocker 加密再次被绕过", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067165&idx=4&sn=c029416c7a5c7547cdb5718ab041f434": "【安全圈】CVE-2024-21182: 针对严重 WebLogic 漏洞发布 PoC 漏洞利用代码", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247495864&idx=1&sn=deb2517a2a592c545416b6713def7f3f": "【漏洞工具】小米路由器任意文件读取漏洞python图形化单一利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491876&idx=1&sn=1ffb723d73f1a24290998ff19c4f929e": "黑客利用 DoS 漏洞禁用 Palo Alto Networks 防火墙", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491992&idx=3&sn=f5877b3b5c43f92dac5db26d73ef9cc2": "漏洞预警 | 安科瑞环保用电监管云平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505530&idx=4&sn=d74d0d52adbd4477bc0279d88f92f1e3": "研究人员发布针对 Windows LDAP 漏洞的 PoC 漏洞利用程序", "https://mp.weixin.qq.com/s?__biz=MzkyMjE1NzQ2MA==&mid=2247489543&idx=1&sn=5520e054baf84c6b15efb1dcba86f33f": "漏洞盒子批量提交脚本5.1.26", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518078&idx=1&sn=d18a3a9d61850a5161557e81902b3edc": "SRC中的重置密码漏洞及案例", "https://mp.weixin.qq.com/s?__biz=MzI1NTE2NzQ3NQ==&mid=2247485511&idx=1&sn=24c216754ea9f84396bd3159a2ec4b0f": "【漏洞复现】内训宝 SCORM 模块存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506388&idx=1&sn=7849c2c58b1c52c42576c29212f5793f": "DataEase 严重级别任意登录漏洞 POC 已公开", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491534&idx=1&sn=6b91592832e349d474acaf9011cc85bf": "爱丁堡大学&剑桥大学|漏洞赏金生态系统中的团队与合作", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247490119&idx=2&sn=2b09712ebaff4912cb6d4949f5d5b65c": ".NET内网实战:通过winlogon进程提升至SYSTEM权限", "https://mp.weixin.qq.com/s?__biz=Mzg2NzkxOTQ0OA==&mid=2247484493&idx=1&sn=7545164959c161a63433f8be5dd61481": "海康威视iSecure Center综合安防管理平台center任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507635&idx=1&sn=3ed64fc475689a3cd2c08cc3a146a471": "漏洞通告 | Windows 轻量级目录访问协议 (LDAP) 拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485850&idx=1&sn=6bb2f5fca96567a9626e11f65c2e4bd5": "【漏洞复现】某平台-LicManage-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247488964&idx=1&sn=bd0fe693fa0fadd466193ae87b6cfe97": "Jeecg框架漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg3NTY0MjIwNg==&mid=2247485320&idx=1&sn=412bcd1b8866a2a56fdc4bcf28c57157": "严重漏洞,数十万大众电动车主数据可能遭到泄漏", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650606244&idx=1&sn=8000e773da8fb2b362bc7283a912db76": "刷脸登录银行 App 现他人信息,银行回应称“网络抖动带来的极小概率事件”|Windows 曝9.8分漏洞,已有PoC及利用情况", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650606244&idx=4&sn=cac307949d0726a89c8a1fecf76f71d5": "ysoSimple:简易的Java漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247486471&idx=1&sn=9238e79bbaa2bbde625cd95c19aaa1f8": "【漏洞复现】MasterSAM存在任意文件下载漏洞(CVE-2024-55457)", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247486471&idx=2&sn=31aa24c1406c4a36c74845528852505e": "【漏洞复现】DataEase数据可视化分析平台JWT硬编码身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTY1NDc2OA==&mid=2247487256&idx=1&sn=5f02d951d459a7c2ef37977afc806005": "【漏洞文章】大华智能物联综合管理平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1NTE2NzQ3NQ==&mid=2247485521&idx=2&sn=21fccb1beac3a0dcc9a565a36fcfa9a7": "【漏洞复现】快云服务器助手GetDetail接口文件任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247486903&idx=1&sn=0a066aff4189674338d0ffe68e405275": "【Nday漏洞分析】ProjectSend 身份认证绕过漏洞(CVE-2024-11680)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491992&idx=1&sn=fbd0590c31f7e295b5743345888e231c": "漏洞预警 | WordPress Plugin Tutor SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486408&idx=1&sn=ac34350ed2c25084cb78cec5ff40275e": "CVE-2024-50379|条件竞争Tomcat RCE POC(首发)", "https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661297849&idx=2&sn=a308a4ae4e30195959399c63a47f2d45": "山石说AI|精准探测 智慧守护:大模型重塑漏洞检测新标杆", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526837&idx=1&sn=bdc1792b20bbc0e3485123421c3c240c": "CVE-2024-43452:针对 Windows 特权提升漏洞的 PoC 漏洞发布", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526827&idx=3&sn=d436ecb47df01da7840466672e818830": "CVE-2024-56513:Karmada 漏洞使攻击者能够控制 Kubernetes 系统", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502853&idx=1&sn=6116493ef276d07ee2f6c5105fb25d62": "【成功复现】爱数AnyShare SMTP_GetConfig 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247614973&idx=1&sn=0cb7f44aa7d6b3d7f0b82a6e1490a6cc": "从js到高危垂直越权漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247492762&idx=1&sn=0bc624892380a7706ceb595f6e0a5381": "漏洞盒子批量提交脚本5.1.26", "https://mp.weixin.qq.com/s?__biz=Mzg2NzkxOTQ0OA==&mid=2247484492&idx=1&sn=7da5690238bdb790765079470195bd8e": "W&Jsoft-D-Security数据仿泄露系统(DLP)存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491992&idx=2&sn=1e67ec9b7cddeda507a7d80598525961": "漏洞预警 | 友数聚CPAS审计管理系统SQL注入和任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495665&idx=2&sn=12f9e3cc2b5d3e22e02af2d000cf0588": "上周关注度较高的产品安全漏洞(20241230-20250105)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526827&idx=1&sn=02106475443306b2005d8031e320d35f": "CVE-2024-47575:FortiManager FortiManager Cloud 缺少身份验证允许执行任意代码或命令", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489990&idx=1&sn=3bbe2aaccd2b7d99ff183f18e3509de7": "协众OA checkLoginQrCode SQL注入漏洞(XVE-2024-34879)", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655263381&idx=1&sn=899ccf90b6a54fb98818c2c375e2fe91": "2025年人工智能产业发展趋势", "https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247530812&idx=2&sn=80bce7fb3e712bd40ba29b66f8b49d68": "快讯丨工信部:关于防范Apache Struts2任意文件上传超危漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488816&idx=1&sn=40e56b606871ab82673a8eb5107edcb4": "【漏洞通告】Windows LDAP拒绝服务漏洞(CVE-2024-49113)", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247548436&idx=1&sn=baec9456357a098350c006c6186d0d2e": "日系三大车企纷纷投靠华为", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651134506&idx=2&sn=9a67c145a1539839b820660b74a1ee6e": "三部委联合印发《国家数据基础设施建设指引》;PoC漏洞利用工具LDAPNightmare或导致Windows服务器崩溃", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489999&idx=1&sn=483eb2d814c97345bcfadb2755a0fc9b": "大华智能物联综合管理平台 GetClassValue.jsp 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260378&idx=1&sn=8a397791da177ade1828327c43faa20b": "如何在M芯片的Mac上流畅游玩Windows游戏", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518105&idx=1&sn=0ee740b5265c89d5769a9d72c63546e5": "如何将低危的 SSRF 盲注升级为严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489406&idx=1&sn=54cef714873b5f9d9ffca2150ee957b3": "【漏洞预警】Windows LDAP拒绝服务漏洞(CVE-2024-49113)", "https://mp.weixin.qq.com/s?__biz=Mzg4NjY3OTQ3NA==&mid=2247486468&idx=1&sn=42f66efd85076e48ece76d7e8711f8bd": "某教学平台支付逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTYwMzc5OQ==&mid=2247500670&idx=1&sn=12cd707e76414099093fc21cf65e7a9e": "某教学平台支付逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzOTIyMzYyMg==&mid=2247494699&idx=1&sn=5359d9bd1ac4044079ed06a503a44c85": "360SRC&360漏洞云丨洞力拉满,泰国出发!", "https://mp.weixin.qq.com/s?__biz=MzkyODUzMjEzOA==&mid=2247483839&idx=1&sn=191cc600e45bc1c15207cee93794e1f0": "CVE-2024-25600 WordPress Bricks Builder远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247495877&idx=1&sn=6e0705560c0d368671c89ae43f6439b9": "【漏洞工具】小米路由器任意文件读取漏洞python图形化框架利用工具(poc|exp)", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094538&idx=1&sn=05dcbb09f205fa96a19b7a50cbbb52ec": "ASUS 路由器漏洞允许执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094538&idx=2&sn=3684eb5a5603b04f77d47066b15a50fa": "针对 Windows 注册表权限提升漏洞发布的 PoC 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247505572&idx=2&sn=5ea3a759ef146c95cce6966628d3e02e": "每周网安资讯 (12.31-1.6)|HP多款产品存在漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492674&idx=1&sn=e33ed0bd30aa7b5dd0ebce7fab0ae54f": "【已复现】Windows 轻量级目录访问协议 (LDAP) 信息泄漏漏洞(CVE-2024-49113)", "https://mp.weixin.qq.com/s?__biz=MzAxODg1MDMwOQ==&mid=2247506905&idx=1&sn=41f6c85975d441705ce630e3b05992df": "优秀案例|谋乐科技入围“2024年度数据安全优秀案例评选”政务场景", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651134940&idx=1&sn=9d1fe08b8959e5098f587a666230b4a4": "【梆品推荐】梆梆安全移动应用合规平台 快速识别违规风险", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490009&idx=1&sn=29a640c65606ac3b71a0eccf8cf01537": "蓝凌OA WebService sysTagWebService 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247494715&idx=1&sn=bf26df8257d19255a8f2d86ad69b7e49": "【神兵利器】内网全方位漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493088&idx=1&sn=04f75d2cce65b0ea93a8576f38355a24": "Nuclei 漏洞允许绕过签名并执行代码", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247502144&idx=1&sn=a9ca57845adb8a3cee52b994bb6dd9ed": "360漏洞云&360SRC丨洞力拉满,泰国出发!", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490158&idx=1&sn=e538e6e053ca4c9fa711c39b2c7530b1": "已打补丁但仍有漏洞 Windows BitLocker 加密再次被绕过", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489577&idx=1&sn=e5b5f2ca0ca54cfad72ee3061f19209e": "【已复现】Windows 轻量级目录访问协议 (LDAP) 信息泄漏漏洞(CVE-2024-49113)", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462544&idx=1&sn=8ef4f6d5ce9ce4a58b596bbbad1a0aa3": "2024年度(第二期)CNNVD漏洞奖励评选结果公告", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247519062&idx=1&sn=3f7b5a21dfbaf02d2294efec6c27e29b": "记一次某OA渗透测试有意思的文件上传漏洞挖掘经历以及分析", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503267&idx=1&sn=47e29ccabd62c421ba1c885bb208e109&chksm=f2585f50c52fd6463212a9fd5aecd87a4312f82d5052052717ab05ab56d27ffc80ea48ae57c5&scene=58&subscene=0": "雷神众测漏洞周报2024.12.30-2025.1.5", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495665&idx=1&sn=a84870c57ea8a9900f3d9c8fbc890d0c&chksm=fd74df38ca03562e9c63d183c47b2855ecebcc1ac30cdcbfcc0463c4a83637f0971607570404&scene=58&subscene=0": "CNVD漏洞周报2025年第1期", "https://mp.weixin.qq.com/s?__biz=MzI3NjUzOTQ0NQ==&mid=2247516929&idx=1&sn=a715db45df94a45c7c28e803faee7416": "2025 OWASP 大语言模型应用程序10大风险", "https://mp.weixin.qq.com/s?__biz=MzUyMDEyNTkwNA==&mid=2247497075&idx=1&sn=1d041504e40dfbb400c230c0dcbb1bd0": "《2024年度漏洞态势分析报告》重磅出炉!文末扫码下载", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484549&idx=1&sn=a88bf7fad8fe67e1040afaefb128bffe": "【漏洞复现】急诊急救快速联动平台ServicePage.aspx任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491415&idx=1&sn=d4d4fe16a360f1ea8a4ef40228053f8b": "【全球首发】【6w$赏金】微软身份漏洞-未授权强制解绑任意微软账户邮箱(全球微软账户邮箱或受影响)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498056&idx=3&sn=213fffbf1af5721831386a359b2a979f": "漏洞的尽头竟然是玄学,随机触发学会了!", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652113760&idx=1&sn=567513461a25da6871c790aeadb56353": "AWS在4年内出现3次重复同一个严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247491993&idx=2&sn=dc36d96c8a03d2594b7d75c14af249c7": "漏洞预警 | 科汛网校KesionEDU SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506599&idx=1&sn=1af5738b55e3fad98549d5c4ec287791": "暗网情报5则:涉国外赌场、金融企业、国内化工上市企业、VPN漏洞等", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499585&idx=1&sn=07dab065b4c75233ca46e6ddbce24b33": "CNVD漏洞周报2025年第1期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499585&idx=2&sn=89a27d818040b2144ba2a3da68e1d44a": "上周关注度较高的产品安全漏洞(20241230-20250105)", "https://mp.weixin.qq.com/s?__biz=MzUzNjkxODE5MA==&mid=2247487988&idx=1&sn=c73c46f0346c71cadcdf295b658710cd": "注意!安全漏洞不能随意发布!", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500352&idx=1&sn=188c9a99437ff8a2db179048b7546bf1": "【突发】某博主因分享漏洞POC被抓", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247485708&idx=1&sn=42524032a2389e079ddd6bc610e512c5": "华天动力OA Service漏洞分析两则", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247490629&idx=1&sn=fc902e170fcd1fb1fa6b5e316b61c625": "突发!更新漏洞poc的公众号主被抓!", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488549&idx=1&sn=cad8f136819b7db090de021063bf308c": "【吃瓜】震惊,某漏洞文库公众号作者被请喝茶", "https://mp.weixin.qq.com/s?__biz=MzkxODM5MzYzNg==&mid=2247485492&idx=1&sn=f718e7f890281495ec610054e8fe9962": "某漏洞文库公众号作者去喝茶了", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247491331&idx=1&sn=ea9fbccb883075b62ac83b400fe69b91": "突发!更新漏洞poc的公众号主被抓!", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502872&idx=1&sn=26244a6372821124c553eb1dcff46815": "【成功复现】Cleo产品远程命令执行漏洞(CVE-2024-50623)", "https://mp.weixin.qq.com/s?__biz=Mzg4MjcxMTAwMQ==&mid=2247488649&idx=1&sn=2f0d1aa7eb7720838be405dc583e691c": "吃瓜-国内最快漏洞文库已注销", "https://mp.weixin.qq.com/s?__biz=MzkxNTczMjA1Ng==&mid=2247483963&idx=1&sn=246277137aaa787579ba54062af6cbb3": "漏洞文库强行退出安全圈,并上所", "https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247512706&idx=1&sn=8c10b0c6ac86a5c91fa4e64497371b65": "ICLR 2025 Workshop 征稿:推动基础模型的开源、开放、可复现", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521996&idx=2&sn=dbafe74fa2a73a7ecd72c5ca600d8614": "Moxa 设备严重漏洞将工业网络暴露在攻击中", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNzc3OQ==&mid=2247484325&idx=1&sn=d13c33978ec30d0a38052bba6c6ab437": "Nuclei 被曝高危漏洞!允许攻击者进行签名绕过和代码执行,谨慎使用陌生的YAML模板", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484304&idx=1&sn=83efb53eb231adb8b58b258bb481d547": "【漏洞预警】用友 U8cloud CTExecDraftAction SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247525456&idx=1&sn=9adbaee1f78b980d00fe5586bf04e796": "Windows 曝9.8分漏洞,已有PoC及利用情况", "https://mp.weixin.qq.com/s?__biz=Mzg5NDczNDc4NA==&mid=2247495439&idx=1&sn=4b64e083c51bf2ab52aa684915c41cd0": "第八届网络空间安全西湖论坛在浙江大学成功举办", "https://mp.weixin.qq.com/s?__biz=Mzg2MjkwMDY3OA==&mid=2247485504&idx=1&sn=4e308c22e892ba7903ac17cd10ca98da": "【漏洞复现】EasyCVR视频管理平台存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247496300&idx=1&sn=6a4b98953e18f9b7389819dfae63d82c": "Burp Suite插件 SQL Injection Scout,检测SQL注入漏洞而生", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490164&idx=1&sn=76ce8521d56046c9be42f0e7e4a9ac5f": "Moxa 提醒用户注意蜂窝和安全路由器中的高严重性漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247516802&idx=1&sn=55aac04f8e0d96649f8c08142a4255f7": "漏洞预警|Redis代码执行漏洞(CVE-2024-46981)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311528&idx=1&sn=3491451dbb5738352f29c97dc37aa221": "Redis服务器曝2个严重的RCE漏洞,数百万系统面临风险", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311528&idx=2&sn=3c6c85bc8d3fa2ea029e88506d563efd": "4年内重复出现3次,AWS屡曝严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489411&idx=1&sn=24e2689a0859703412b2e6d0e5e237cf": "【漏洞预警】Redis代码执行漏洞(CVE-2024-46981)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526927&idx=2&sn=ddf256ebc16b6cac294434e36d71f0d4": "CVE-2024-43096 及更多:Android 安全更新中修复的关键 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247488592&idx=1&sn=fc646cf9f3bafe2141ec9fc2a186dd0d": "渗透测试速查表", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588181&idx=3&sn=ed0557407f95454c25c98501fe8cac6e": "更新:第3章-AFL原理!系统0day安全-二进制漏洞攻防(第4期)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500582&idx=2&sn=026e0c07bdb2acfdb3773dc0cfa906e3": "【漏洞通告】Redis代码执行漏洞(CVE-2024-46981)", "https://mp.weixin.qq.com/s?__biz=MzkxMDYzODQxNA==&mid=2247483853&idx=1&sn=bf46a58ec18d74abdc86c483d03ec6a8": "Gayfemboy:一个利用四信工业路由0DAY传播的僵尸网络", "https://mp.weixin.qq.com/s?__biz=MzU5MTExMjYwMA==&mid=2247485701&idx=1&sn=668e8f8056e8407ee9d22479bddeba41": "帆软Finebi_V5.1.10_channel反序列化漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899958&idx=1&sn=f4f1a9debde61c9fff15b9e825658880": "Nuclei漏洞CVE-2024-43405曝光:攻击者可绕过签名验证执行恶意代码", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490028&idx=1&sn=0fe8e60a6363b5c36c11baf7a66fc49d": "蓝凌OA WebService sysNotifyTodoWebService 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486682&idx=1&sn=814bc66c684aab336ebe82fb0a00e77f": "「漏洞复现」深科特 LEAN MES系统 SMTLoadingMaterial.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484885&idx=1&sn=76d3670fefa33234544d26edae8cb63b": "【漏洞复现】CVE-2025-22214", "https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247490202&idx=1&sn=7c720e0270ddcb56fc28f38bfd88491a": "某公众号作者擅自发布安全漏洞被处罚", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247487698&idx=1&sn=f277fd2202cdf84e622dca83d0aa70a7": "Linux的常用持久化手段", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247495889&idx=1&sn=98de8ca8d70849d91b142cf839c268d5": "【漏洞工具】某路由器任意文件读取漏洞go命令行跨平台利用工具", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526927&idx=1&sn=d79b7d33ed9e4462609d073a835901ed": "CVE-2024-8474:OpenVPN Connect 漏洞泄露私钥", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518111&idx=1&sn=6d7d5b677886d7ff20013f0c1e283b18": "Web安全进阶|Web漏洞分析与防范实战", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647690583&idx=1&sn=f195e275b6f21632c7ca1c97078d404e": "0023. 账户接管漏洞的有趣故事【转载】", "https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649789520&idx=1&sn=1906605a6e8ff81f4787cc6ed1a613de": "0day漏洞无处遁形:大模型安全挖洞实践", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793776&idx=1&sn=fca2d82169541edfb78f63cf8739f5b7": "新的 Mirai 僵尸网络利用0day漏洞攻击工业路由器", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447899973&idx=1&sn=54109cede9abe5c1031b597a220a9e3d": "Moxa设备曝高危漏洞,工业网络安全面临严峻挑战", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247491339&idx=1&sn=6c19b5c3f5eb209bbbcd21f6c2a093d9": "外网露出:新版 CobaltStrike 顶级免杀套件Arsenal kit", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793776&idx=3&sn=2cb4c92e2f9c3295552faf4c47c54659": "戴尔、HPE、联发科修补其产品中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490681&idx=1&sn=eb9b2c51f02148abbb4e263610c51c3b": "能信安:漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkyMTY1NDc2OA==&mid=2247487262&idx=1&sn=e3208de78c52368f4ac8f297f85968d4": "【漏洞预警】蓝凌EIS智慧协同平台SQL注入", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247495867&idx=2&sn=de1537c35a09c164a8ede6a8b7cdfeff": "5人利用充电桩App漏洞“有偿代充”逃单2700余笔盗窃10余万元", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489840&idx=1&sn=100088d66cd525e0a0b6f140110bd57a": "一款免费的APP IOS抓包工具 支持Flutter应用抓包|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490064&idx=1&sn=b034bad1ec5afcdc66b3f2d1819b34f0": "蓝凌OA WebService loginWebserviceService 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490055&idx=1&sn=be3aa1020b719a94bf978811d0557ce6": "蓝凌OA WebService kmImeetingResWebService 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489427&idx=3&sn=42aa0def976de0eab48ad239642be1a4": "【漏洞预警】CyberPanel CyberPanel需授权命令注入漏洞 (CVE-2024-53376)", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490170&idx=1&sn=72623117b065630cd91f1d0a51dd2e9b": "Mirai 僵尸网络变体利用四信路由器漏洞进行 DDoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649766471&idx=1&sn=4625418c160702e932c94d9967844e74": "热血收官!2024漏洞马拉松冠军诞生!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067220&idx=2&sn=a053c599ab3224a55ad5beec4dc12341": "【安全圈】CISA 警告称,Oracle 和 Mitel 在攻击中被利用了关键漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486695&idx=1&sn=477702ac13b879f52f8409dd3f90ec12": "「漏洞复现」以柔资讯-D-Security终端文件保护系统 logFileName 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyODYwODkyMA==&mid=2247484888&idx=1&sn=7013dedfe9013c53a4d427d05d370b02": "2024年零日漏洞攻击的七大演变趋势", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484370&idx=1&sn=ff7652568d2e3f2aa0449bcab22ff891": "无视加固,无视加解密,无视证书校验,不需要脱壳,半步无敌APP抓包通杀方案YYDS!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522013&idx=1&sn=9f3081df1533336e5c1747667ca72291": "联发科芯片集存在严重的RCE漏洞,影响数百万台设备", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492013&idx=1&sn=a92e52ff8ae22ef1aace5d50b4a5f46a": "漏洞预警 | 东胜物流软件SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492013&idx=2&sn=09a0e1e42fb16edb8974c8a1c4654c61": "漏洞预警 | 数字通云平台智慧政务敏感信息泄露和任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247504441&idx=1&sn=f771b11e87512e682d7b81a9455c9b49": "大多数 Bug Hunter 忽略的简单漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzE5MDUzMw==&mid=2247568200&idx=1&sn=565468f80dec063b08e69e60c9cd9621": "喜报!炼石入选上海市“2024年度数据安全优秀案例”名单", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490046&idx=1&sn=3836e56c102c9357df406be92f1bdf9e": "蓝凌OA WebService kmImeetingBookWebService 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496793&idx=1&sn=8e3f34c066cd604eccf73f6d511b4524": "利用js挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489427&idx=1&sn=e6de3aebbb68abcd75b71caedc884021": "【漏洞预警】Aviatrix Aviatrix Controller 未授权命令注入漏洞 (CVE-2024-50603)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489427&idx=2&sn=a4654292c790b717569913b689dffa98": "【漏洞预警】Gogit Go-Git 未授权表达式注入漏洞 (CVE-2025-21613)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311586&idx=3&sn=bf6a8c41adf32f587f4ad8673e9b94cc": "知名基因测序仪曝BIOS漏洞,可禁用疾病监测和疫苗开发", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311586&idx=4&sn=a440576445d2d6de4200ba600d7a2d68": "Group3r:一款针对活动目录组策略安全的漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzIyMjQwMTQ3Ng==&mid=2247490921&idx=1&sn=98e7a65ec729258c484f301ae0a79ac2": "【国际视野】卡巴斯基:EAGERBEE后门变种瞄准中东", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588408&idx=3&sn=a36534a4e2a7625285916966113f109b": "Apache Struts 2 再曝远程代码执行漏洞 CVE-2024-53677", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588408&idx=4&sn=2f1a6f106c5b4a9c85840b817a044222": "更新第1章!系统0day 安全-企业级网络设备固件漏洞挖掘(第7期)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502727&idx=1&sn=08794a77a389f88e8cac276f31020a10&chksm=fe79ef1fc90e66097ceb4fdbc07c0f6d6fdd6c00bb2e377a1ac87c123d85a03097472392e350&scene=58&subscene=0": "SonicOS SSLVPN 认证绕过漏洞(CVE-2024-53704)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247513695&idx=1&sn=220c123a81824055f5afe508c55ca2a0&chksm=ea664128dd11c83ecc26ba1df583ac7a2126f06644cbde241970c85903839e573a0340893732&scene=58&subscene=0": "ALPC 之殇 - 8月未知 Windows 在野提权 Nday 漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486706&idx=1&sn=8246a382f5e23a2e00275aca58b7efff": "蓝凌EIS智慧协同平台 fi_message_receiver.aspx SQL注入漏洞复现(CVE-2025-22214)", "https://mp.weixin.qq.com/s?__biz=MzAxMzkzNDA1Mg==&mid=2247513737&idx=1&sn=15917977f4110b6f22aaf827286aa2f0": "从计算器到诈骗软件:一款涉案APP的双面人生", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502739&idx=1&sn=dfc7e53a7f1679e3893025a8bbeaaf98": "【已发现在野利用】Ivanti 多款产品缓冲区溢出漏洞(CVE-2025-0282)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486431&idx=1&sn=6e62adecd875b73fe789c0c4988f0b38": "一款免费的APP IOS抓包工具 支持Flutter应用抓包|漏洞探测", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484308&idx=1&sn=f970202fb09230e360070b2bf398b876": "【漏洞预警】Redis Lua 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251176&idx=1&sn=26a9c1f57d3679e8dc491239bba40acb": "黑客利用漏洞入侵美国财政部后,仍有近9000个BeyondTrust系统暴露于互联网", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484405&idx=1&sn=ad5740e3e3f34267ed8156d390a34242": "安钥®「漏洞防治标准作业程序(SOP)」征文启示 [2025年第2期,总第20期]", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491468&idx=1&sn=3b6f59256dcd914bb929198011402e37": "图形化漏洞利用Demo-JavaFX版", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793788&idx=3&sn=ce31b790864ea2642c98889c8a67deba": "教育软件公司PowerSchool 遭黑客攻击,6000万学生、教师个人数据可能泄露", "https://mp.weixin.qq.com/s?__biz=Mzg5NTEwNTE1Mw==&mid=2247485221&idx=1&sn=b8f37193df408e52d9a9bfc5b734bae4": "干货!从零到一: 构建一个可靠的SCA漏洞库", "https://mp.weixin.qq.com/s?__biz=MzkzNjE5NjQ4Mw==&mid=2247543100&idx=1&sn=dc645309d04e7fbef24a13a3aeed0cf5": "外媒|成都:茶馆、火锅、大学和......黑客", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498100&idx=1&sn=ff112648ce0fae2852f5b79963e28f49": "无独有偶,通过.NET反序列化漏洞实现 Visual Studio 钓鱼攻击", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247488856&idx=1&sn=21c2417bed12997ff5c63ec569da9870": "漏洞扫描工具 -- vulcat", "https://mp.weixin.qq.com/s?__biz=MzU2NzIzNzU4Mg==&mid=2247489233&idx=1&sn=99d0b8714b5e6cdc5b57e8b1407b22c6": "带你解锁编码新世界!--随波逐流CTF编码工具使用教程31 --Jsfuck密码", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502729&idx=1&sn=7ef5d7ec018d1cb5555c10fcdd5b2159": "ALPC 之殇 - 8月未知 Windows 在野提权 Nday 漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492013&idx=3&sn=916715c38d9a067335574c8fefc2ee30": "漏洞预警 | 赛诸葛数字化智能中台系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247498114&idx=1&sn=44d0f22b2437c1f62a22c46988447974": "戴尔、HPE、联发科修补其产品中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787711&idx=1&sn=3cd2b76ec096d4383afb18e3ce399839&chksm=8893bd50bfe43446e466c1bc09af7994b9d789df57debae634a246675be581d5c16a8d9e84b7&scene=58&subscene=0": "绕过加密防线!微软已修补的 BitLocker 漏洞仍存在被攻击风险", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247489932&idx=1&sn=8d31298cba1d501c3c6a7d3f33a55d3c": "护网溯源神奇HuntBack,更新啦~", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494072&idx=1&sn=96ffc11e04c3750cb63de4de27d203d0": "小伙利用漏洞盗取51,860个比特币", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615076&idx=1&sn=65013aee5794c316d9be4d24a33845c3": "从低危Blind SSRF到严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486517&idx=1&sn=d8f0dc692de8c3c03a854b8096ff97f2": "【漏洞通告】大华智能物联综合管理平台(ICC) GetClassValue 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486517&idx=2&sn=5350237eaacb408cb4375251aff26aec": "【漏洞通告】Inspur ClusterEngine 安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489432&idx=1&sn=ee6d0c07de1e3e93c55193d9bf7bef7e": "【高危漏洞预警】Ivanti Connect Secure缓冲区溢出漏洞可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486034&idx=1&sn=b5c2764f924dacf40943eec6c1fc3731": "网络攻防战白热化!乌克兰黑客摧毁俄罗斯ISP", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490083&idx=1&sn=6808904e8930808449beab13f87e481b": "蓝凌OA WebService wechatWebserviceService 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247495932&idx=1&sn=c4bc1fa39abaee86b165a6b0b3c77e6d": "【漏洞工具】某路由器任意文件读取漏洞railgun利用工具", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311637&idx=3&sn=3d8a1497d5bd9ac4931bbf2245900ff9": "戴尔系统更新包框架现严重漏洞,可提升攻击者权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067236&idx=3&sn=d7fa7834d01e924cd20217efa4042c0c": "【安全圈】戴尔更新包框架漏洞可让攻击者提升权限", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490263&idx=1&sn=7aa3fe9c411a7f366330a4ff8aeec162": "《2024年度漏洞态势分析报告》重磅出炉!文末扫码下载", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454063823&idx=1&sn=64f118a492d3875cfc0cb56a7d79b2c7": "信息安全漏洞周报【第005期】", "https://mp.weixin.qq.com/s?__biz=MzkyOTQyOTk3Mg==&mid=2247485030&idx=1&sn=d1c94b79a2330434a22d2ebb9a349f3b": "tomcat自动化漏洞扫描利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486517&idx=3&sn=4499f4a577509cf4c43d26aa687203bf": "【漏洞通告】Aviatrix Controller命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489858&idx=1&sn=4041324e9393f936468c722573f07a46": "一款漏洞及指纹库图形化工具-强大的漏洞库及指纹库|漏洞探测", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247489904&idx=1&sn=760b4ed9e6006e819d3c528e7b34ff9c": "2024年零日漏洞攻击的七大演变趋势", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490101&idx=1&sn=c1d06a8a2535993fb70de726e28e8135": "蓝凌OA WebService sysSynchroGetOrgWebService 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247538401&idx=1&sn=616ffc2b38ba907f43bdac2bfbed19a4": "成都:一座黑客之城 “真正的黑客埋头苦干,寻找网络漏洞,编写杀手级程序,靠社保生活。”", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY5Nzc1OA==&mid=2247484253&idx=1&sn=9de27bdbee12945688e83e7e40e96e4e": "src|拿下高危漏洞的秘诀?", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311637&idx=2&sn=5397b27a5532b37b3c425b5a3133097d": "Ivanti VPN 零日漏洞正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067236&idx=4&sn=b0147296a18e71da729ab28bc5c2ff3d": "【安全圈】Redis服务器曝2个严重的RCE漏洞,数百万系统面临风险", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490263&idx=2&sn=acb47b9a3ece0e9ca9c3e65bf11ed68c": "【风险通告】Ivanti多产品存在缓冲区溢出漏洞(CVE-2025-0282)", "https://mp.weixin.qq.com/s?__biz=MzkwODM4NDM5OA==&mid=2247519746&idx=1&sn=9c38811e7583e072346e141cafe6ec2e": "速看!蓝桥杯刷题技巧大公开!卷哭90%备赛人", "https://mp.weixin.qq.com/s?__biz=Mzk1NzIzOTc5MQ==&mid=2247483944&idx=1&sn=937d590a374c24825bd746222f57e338": "安全常用的Linux命令总结", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522025&idx=1&sn=5fd3517667080fa3c953fe0d2afa966b": "SonicWall:立即修复已遭利用的SSLVPN漏洞!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522025&idx=2&sn=f67e98879ae334210339981b77e939e9": "Ivanti提醒注意 Connect Secure 产品中的新0day", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490342&idx=1&sn=b7159516c545f83f15e876a2d287836a": "创宇安全智脑 | 四信通信工业路由器 apply.cgi 远程命令执行(CVE-2024-12856)等90个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247624343&idx=3&sn=1cdf1794ce36ba42e232b7a87398d047": "【已发现在野利用】Ivanti 多款产品缓冲区溢出漏洞(CVE-2025-0282)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5NzA2MjgwNg==&mid=2648115751&idx=1&sn=679d1fea85cf3d737e7e32318658a0f1": "渗透案例:巧用JS挖掘“宝藏”", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247498147&idx=1&sn=065b135a308b96d887f690aa55aa9a3c": "2025年首个Android更新修复严重代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490092&idx=1&sn=0a014816fb7f04c01f475ed53a8643dd": "蓝凌OA WebService sysNotifyTodoWebServiceEkpj 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247486266&idx=2&sn=38421824f3817e1e1eb99afb6060b4f9": "ksmbd 漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247486643&idx=1&sn=307b37d0723f16d80c9525f2236e2992": "年度包揽!长亭科技荣获2024年度(第二期)CNNVD漏洞奖励评选一级贡献奖", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523980&idx=1&sn=00c541e42b5d70c852de427d37e2f096": "【漏洞通告】Ivanti Connect Secure,Policy Secure&ZTA Gateways缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247485452&idx=1&sn=e8e90d2fe130da35a13cdcf3ecd44222": "快来cnvd找工作必备", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462550&idx=1&sn=14197e04f863684b1613f3c69429b623": "信息安全漏洞周报(2025年第1期 )", "https://mp.weixin.qq.com/s?__biz=Mzk1NzMwNTM5NQ==&mid=2247483753&idx=1&sn=72ffd029fa620587c8102e17ec4058f1": "2025最新挖漏洞给报酬的网站汇总,零基础入门到精通,收藏这篇就够了", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793802&idx=1&sn=30cf3033e8ffaf45d47fd6f3b7649198": "Ivanti Connect Secure VPN 成为新0day攻击的目标", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492027&idx=2&sn=d1c82024b3cfaa3f584d0809b4cd1a2d": "漏洞预警 | 亿赛通电子文档安全管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493118&idx=1&sn=1e3059333f8849a83961a304d66c9fb3": "SonicWall 警告存在可利用的 SonicOS 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493118&idx=2&sn=1da6abe8b64254dea9ec4afad005c257": "Gayfemboy 僵尸网络瞄准 Four-Faith 路由器漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492684&idx=1&sn=3b0a607c660f6ba2dfc3db280cbf8e40": "【已复现】大华智能物联综合管理平台 GetClassValue 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NDExNDQwNA==&mid=2247489876&idx=1&sn=b620b4c55efe620eca9ebafa67d5c1b7": "2025年,网络安全意识宣贯该怎么做?", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518149&idx=1&sn=6498c967abc2646198bd742a3d2232e6": "发现Web API漏洞居然能赚到400w刀", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489437&idx=1&sn=86a7c25e1f15115c4f1bfe3bf9529dae": "【漏洞预警】Apache OpenMeetings未授权 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247504442&idx=1&sn=b38e2fd23874bcc57a2cad01406af7aa": "漏洞赏金方法 2025 版", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496924&idx=1&sn=cde3f8dcc5062f5bae2fbcc43db8c4d1": "【漏洞通告】Ivanti 多款产品缓冲区溢出漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496924&idx=2&sn=b5e7145e48fd905325fcdf22665c67cd": "【漏洞通告】SonicOS SSLVPN 认证绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519413&idx=2&sn=2363399bbb13f91288886c2db1c060b9": "实战 | 攻防演练某x医院内网拿下集权", "https://mp.weixin.qq.com/s?__biz=Mzg2NzkxOTQ0OA==&mid=2247484500&idx=1&sn=bc5612c622b398355de7cfab77b9ff4e": "Ignition工控系统反序列化漏洞(CVE-2020-10644)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664234365&idx=1&sn=af17f45f731d0c43256ce450f1d66690": "通知 | 国家网信办就《网络信息内容多渠道分发服务机构相关业务活动管理规定(草案稿)》公开征求意见(附全文)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492027&idx=1&sn=f67e50995c7888b746c492a865ee1569": "漏洞预警 | 北京中科聚网一体化运营平台文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499125&idx=2&sn=ed1a771fa6447002aa2fcf070c71c910": "常见的网站安全漏洞视频课程", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488825&idx=1&sn=5e77e5178823b42679dcaa1914251bf3&chksm=c2c64232f5b1cb24e14a80899dc4fedc64d3489130f642d9a59175803b8acb8d6455c3e2f7d2&scene=58&subscene=0": "【漏洞通告】Ivanti多款产品缓冲区溢出漏洞(CVE-2025-0282)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067255&idx=4&sn=3fd244b5403280e26cbc308f9d938be2&chksm=f36e79f7c419f0e19717a852043341319ec8c0f73e0e9daa2e8a6064deb75c8df3e4e101920a&scene=58&subscene=0": "【安全圈】联合国航空机构确认招聘数据库存在安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247519568&idx=1&sn=a136e2cd3ab3db52ce3b8f15811f0411&chksm=ce5daf31f92a2627e42e6f140583642241a9cce471e1727c960141e4bda457f55374ea16de47&scene=58&subscene=0": "Pwn入门之格式化字符串漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522035&idx=2&sn=71c00b294647fadae4e56ffc500f1300&chksm=ea94a799dde32e8fec367a20f0630181350a5ca556cc26cfaa9fcbefdac76ae3c3831523c87e&scene=58&subscene=0": "Palo Alto Networks 修复退市 Migration Tool中的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486728&idx=1&sn=a2987c4ca400a3a3686e1c8ebff60b66": "「漏洞复现」瑞友天翼应用虚拟化系统 GetPwdPolicy SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247525574&idx=1&sn=71fbd1aa0ae586008514d626ad81cd1e": "大模型安全的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0NDI5NTY4OQ==&mid=2247486253&idx=1&sn=62124571618afa3afa400518ed8a9638": "基于大模型(LLM)的黑盒RCE漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655263668&idx=1&sn=ac8c38d0522ed2d4c979644a09ff179d": "2024年网络空间安全漏洞态势分析研究报告", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793817&idx=3&sn=76e96780b09c070feb5068ffc86b1d38": "Google Project Zero 研究人员发现针对三星设备的零点击漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247495975&idx=1&sn=b05958a60bbf5bbaa0abccc2f249abb9": "【漏洞工具】某路由器任意文件读取漏洞Goby低级模式利用工具", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067274&idx=3&sn=8eb5cc6c0a00bef351ca6ec387133310": "【安全圈】Ivanti VPN 零日漏洞正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506729&idx=1&sn=99faf6c867705475671630c95a81b63a": "疑黑客出售国内某IT企业服务器访问权限,456GB数据遭泄露", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492691&idx=1&sn=e1d64db4b8957907e6417a61d2c40fa4": "【已复现】Ivanti Connect Secure 堆栈溢出致远程代码执行漏洞(CVE-2025-0282)", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546608&idx=1&sn=b4f5a8e22730b23ce5aafde8d28133c7": "区块链 智能合约安全 重入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1NzQwNjQ4Ng==&mid=2247484134&idx=1&sn=723a6d60f099a461d07ed5d08217cc40": "小白必看之漏洞区分", "https://mp.weixin.qq.com/s?__biz=MzkxNjQyODY5MA==&mid=2247486964&idx=1&sn=4363616043656f8c618ace62cfe23e1a": "【实战小技巧系列】前端 JS 解密:一次简单高危漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247496561&idx=2&sn=52a537dedcc49372b07a6f02d4d32dfe": "一款免费的APP IOS抓包工具 支持Flutter应用抓包|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505688&idx=2&sn=477172aee3cdadaaf70998c3cea3b917": "Chrome 扩展程序利用关键字操纵漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498152&idx=3&sn=a45de16edbca5168f73ea7ed4ffeca36&chksm=fa595745cd2ede53cd0f763edff055aeced78d85bdeea1f2be5fd2d80d72a65ed86e0df928f3&scene=58&subscene=0": "无独有偶,通过.NET反序列化漏洞实现 Visual Studio 钓鱼攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487016&idx=1&sn=740c4dccda5bc675cb15d583a7867ad6": "禅道CMS开源版SQL注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492518&idx=1&sn=d4196de8b812e3a2d29209b50328cec0": "网络安全领域研究人员遭遇假PoC专项攻击", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MjAwNQ==&mid=2247486764&idx=1&sn=69cdc86ba9528ef7448abb4bdd976484": "JS中的漏洞信息", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486739&idx=1&sn=6463b2b41421b6514b200a5d9b397ac6": "「漏洞复现」某源地产ERP Service.asmx X-Forwarded-For注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494172&idx=1&sn=8437b6bd83d4cea051dbc558260056d8": "古河大佬发现CVE-2024-49113 被黑客利用,发布恶意 PoC(好害怕发布带毒 poc 啊)", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546664&idx=2&sn=4c18d53fa9dcc5cfebddcb4102d7baaf": "区块链 智能合约安全 重入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615101&idx=1&sn=1c11d3cd73b424e3335a64efba88679c": "通过高效的侦察发现关键漏洞接管整个IT基础设施", "https://mp.weixin.qq.com/s?__biz=MzI5MTIwOTQ5MA==&mid=2247487572&idx=1&sn=598542b01490ec8a8f9825c4a20f54f6": "文件包含漏洞等你来看", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311815&idx=1&sn=40eddfee1242b4b1518db9b0ecb9e786": "大量恶意npm包盯上了开发者", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311815&idx=3&sn=e6c5675db6f0e57973dcd1817459dc10": "2025年需要防范的五大恶意软件", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900022&idx=1&sn=468ab732933d168f76e10f10d930551d": "CISA紧急警告:Oracle与Mitel高危漏洞正被攻击者利用,企业需立即修复!", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491552&idx=1&sn=f1a376f0e49cff2ddca8fd74d0ecb5d9": "2024年度上海网络与信息安全测评工程技术研究中心开放课题申请指南", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247495935&idx=2&sn=00a08f04efcb34f608a0a212fe9f18a0": "中信银行日照分行因“未及时处置数据安全漏洞风险”等被罚54万元", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490110&idx=1&sn=f8eff8b0b09439af303df311d04a6b75": "蓝凌OA WebService sysFormMainDataInsystemWebservice 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247486285&idx=1&sn=8188907190a4d5beb3fed38fd5275049": "我只想要一个 CVE-2024-30085 Exploit 作为圣诞礼物", "https://mp.weixin.qq.com/s?__biz=Mzk0OTUwNTU5Nw==&mid=2247488478&idx=1&sn=0e94195de32c6cc2af2df00db511b92a": "【相关分享】记一次小程序逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247489945&idx=1&sn=16fddd51cbca85affc9474949cbe7245": "Pwn入门之格式化字符串漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyNTUyNTA5OQ==&mid=2247484161&idx=1&sn=4fedc2c070e311189f636deb084deda5": "【安全产品】堡垒机-安全问题分析-漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484899&idx=1&sn=ebdbb1fe5f94622276851862e5a4dbb5": "【漏洞复现】CVE-2024-50603", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489895&idx=1&sn=d395d20867558882eeb0fd816863cd20": "记一次某SRC信息管理系统多个漏洞组合Getshell|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496832&idx=1&sn=5c72712e20772f2279b09ca9a748afc2": "SSRF 漏洞自动化 寻找", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490122&idx=1&sn=53609c160a2964063bb4bc1b113c77b8": "JeecgBoot passwordChange 任意用户密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650962428&idx=1&sn=b6d1444de2a91eaf1aa348721b0ce44f": "【安全工具】一款免费的APP IOS抓包工具 支持Flutter应用抓包|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490141&idx=1&sn=9bdeb4a82982b626048e1a9069b4d1e9": "泛微-云桥e-Bridge addTasteJsonp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485124&idx=1&sn=de4ced0e1f786160e9142f28356cf6df": "章管家前台任意文件上传漏洞(XVE-2024-19042)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492049&idx=1&sn=477ca1693572ddef742c786b293ae30d": "漏洞预警 | 圣乔ERP系统任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492049&idx=2&sn=52de5365cf3ce21c05a7c7f3642a5aca": "漏洞预警 | 快云服务器助手任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492049&idx=3&sn=71a228b16c671fab21ef6cf7b601ecfa": "漏洞预警 | 朗速ERP SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492049&idx=4&sn=99166247f103a1d00bedee0880079409": "工具 | WExploit", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493254&idx=1&sn=df664e419cb1cabf2589f72b88d8570d": "Java漏洞集合工具更新2.0", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651130319&idx=1&sn=345bdcb858d6db350bb617bf16fd1016": "5G+AI+信创,深度揭秘智慧矿山工业控制网络构建之道", "https://mp.weixin.qq.com/s?__biz=Mzg5MDgzOTk2Mg==&mid=2247484579&idx=1&sn=1dcf41285d17a8a40ef114a371a0bb31": "Bp神级插件:二次开发,让API漏洞挖掘,效率倍增!", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247484669&idx=1&sn=909446a8538d5c33d7507c15d7839988": "CVE-2025-22777 (CVSS 9.8):WordPress | GiveWP 插件的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247505731&idx=4&sn=eb4cadc77282c758c13dc8b2f01bb34f": "DNA 测序仪漏洞标志着医疗器械行业固件存在问题", "https://mp.weixin.qq.com/s?__biz=MzI1ODI0MTczNQ==&mid=2247491165&idx=1&sn=25ca0a0520923eeb18c1e1e347e391f0": "【赠书抽奖】发现Web API漏洞居然能赚到400w刀,看懂这本书你也可以!", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615126&idx=2&sn=5bd8af62ab97fbe13a4424ee9e7ce5b6": "通过高效的侦察发现关键漏洞接管整个IT基础设施", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650606485&idx=3&sn=4bdcf90b59f41c99b28e4613268a24c6": "记一次某OA渗透测试有意思的文件上传漏洞挖掘经历以及分析", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489446&idx=1&sn=28468e250cf5d9b29d7a5b263e158c99": "【漏洞预警】Vim缓冲区溢出漏洞可导致拒绝服务", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247489648&idx=1&sn=5b79daec6f19ffd0c170a8b2bc6f32ae": "Nuclei,一键发现99%的漏洞,白帽子都在私藏的扫描神器| |基于YAML模板的新一代漏洞扫描工具,让渗透测试效率提升10倍", "https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649249384&idx=1&sn=0ec25d262d67ca8b1b6ee4c4392ff393": "议题征集 | 关于征集第六期移动互联网APP产品安全漏洞技术沙龙议题的通知", "https://mp.weixin.qq.com/s?__biz=MzA3NjU5MTIxMg==&mid=2650575169&idx=1&sn=cf48f807b0a583ce0d72513c0185627d": "贡献度排名第一!国舜股份积极支撑工信部车联网产品安全漏洞专业库", "https://mp.weixin.qq.com/s?__biz=MzU2MDU5MDE2MA==&mid=2247484178&idx=1&sn=d1b640eaba093986d2a9b2be283ed362": "图形化漏洞利用Demo-JavaFX版", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503014&idx=1&sn=cea00ee2401be5a3b7910e4830df9796": "【挖洞实战】这不是只要有手就能批量挖Dom Xss漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247484250&idx=1&sn=94a79a0c3a5d9b0fd98cd00f3eb6e7c2": "DH POC撤稿之后还有后续......", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493135&idx=2&sn=9299b77eeebc581b8a1e2fbf85997618": "研究人员披露了三星一个现已修复的零点击漏洞的细节", "https://mp.weixin.qq.com/s?__biz=MzkxMjczNzAzMA==&mid=2247485355&idx=1&sn=6ee4688a4eb8374f47a556ee51214fa4": "什么是重保?期间都做些什么?有哪些重要影响?", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522044&idx=1&sn=71bbcad32c9a0753d8385256ee5dad03": "GFI KerioControl 防火墙存在严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247505577&idx=1&sn=f82c60e6b9567f984c4c17d0e98e150a": "每周网安资讯 (1.7-1.13)|Adobe多款产品存在越界读取漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588591&idx=3&sn=b11fa1206f5347a3696b9363851d9aa9": "成为看雪讲师,开启技术分享的高光时刻", "https://mp.weixin.qq.com/s?__biz=Mzg2MjkwMDY3OA==&mid=2247485529&idx=1&sn=5379f2f365b78268422e0aa297eaa61c": "【漏洞复现】科荣AIO系统存在代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484790&idx=1&sn=7c58b5be658c0fb646c28fda9f8aeb33": "【文中抽奖】一杯奶茶钱开挣生活费 SRC漏洞挖掘基础及赏金培训", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247485481&idx=1&sn=1115561690fb800d94b50913f07bd6d2": "一次敏感信息泄露引发的逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793828&idx=2&sn=75c89a73f526a3eef48834b9589071a7": "GitHub 上的虚假 LDAPNightmware 漏洞投放信息窃取恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503275&idx=1&sn=2b10bfb0eb83fdb8f10466f9476b7a57&chksm=f2585f58c52fd64e76b8d6e69b0939688a5ad89e9a654a4eb9345d294e495326b8a5b197a01b&scene=58&subscene=0": "雷神众测漏洞周报2025.1.6-2025.1.12", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247509761&idx=1&sn=a2cbe8ad893d3ab348e298ee016644dc&chksm=fa5272bfcd25fba90c69028243dcc3561afae389ab16a31faf15d757d37a79fd51eea2856d83&scene=58&subscene=0": "2024年度智能网联汽车重点安全漏洞盘点", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495678&idx=1&sn=7e9c30d0d4f9240a45a5e9618ff48fdb&chksm=fd74df37ca03562164a2b3c76c24dc512ef7ad74eb26251804eb0b78b40a3220adf127ca577f&scene=58&subscene=0": "CNVD漏洞周报2025年第2期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495678&idx=2&sn=27fbe9305e2b484bc5effac02d04f64a&chksm=fd74df37ca0356219bbde36812ef8acecf2a9c42679ccda3598d1c426be88c2934c747fbbb77&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20250106-20250112)", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247496006&idx=1&sn=ff0667fdbf667156d8c9d0910b6bf0e3": "【漏洞工具】某路由器任意文件读取漏洞Goby高级模式利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg2MDc0NTIxOQ==&mid=2247484709&idx=1&sn=b238620c27395ab7c78718f7ef256c83": "识别漏洞成了大海捞针?", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502754&idx=1&sn=48a21e24bdfc8908bb32481d68e1cb9b&chksm=fe79ef3ac90e662c847aaac7838231f459a77d12388ca13ee7bb9ae8b12b5e2b051c5fd1d54e&scene=58&subscene=0": "【技术细节公开】Ivanti 多款产品缓冲区溢出漏洞(CVE-2025-0282)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzk0Mjc2MzQ0Ng==&mid=2247484513&idx=1&sn=ce8323e3947ba30d7a9cf7463b3233db": "macos高危漏洞CVE-2024-54498 解析+复现", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247491409&idx=1&sn=6765857872fa1625c539e95acd152fc3": "macos高危漏洞CVE-2024-54498 解析+复现", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553025&idx=1&sn=d33ddf7981da6d85626bbe6362bea3b9": "PWN入门之格式化字符串漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499598&idx=2&sn=3ffda804485324be45ad5358707cb07f": "上周关注度较高的产品安全漏洞(20250106-20250112)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489457&idx=1&sn=56aacbec2792c121e13929fa55c1d15c": "【漏洞预警】科拓全智能停车收费系统Webservice.asmx存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247489687&idx=1&sn=c004c654be6ef71290e6cc23b82a8083": "网站篡改入门,一个SQL注入漏洞就能让整个网站大变样,原理详解|!|从SQL注入到XSS攻击,完整还原黑客是如何篡改网站的", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490196&idx=1&sn=c5f5b38d186df545679f4ea625394a55": "2025年首个满分漏洞,PoC已公布,可部署后门", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311991&idx=3&sn=db90b0dc624faaae95f965931adc5423": "议题征集 | 关于征集第六期移动互联网APP产品安全漏洞技术沙龙议题的通知", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522060&idx=1&sn=562313e7f413152c3399933007b147f5": "微软:macOS 漏洞可导致黑客安装恶意内核驱动", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522060&idx=2&sn=77945a6bc936ca2cbd6fe400e106a420": "严重的 Aviatrix Controller RCE 漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=MzAxMDQxODk4NQ==&mid=2247484070&idx=1&sn=2b629af5319545695cfc98285cba1226": "泛洪攻击模拟复现详解", "https://mp.weixin.qq.com/s?__biz=MzkzNzg3NzQxMQ==&mid=2247485631&idx=1&sn=6351b8459db2459a3c9a7c8b8ab54e7b": "网络渗透“大杀器”:Cobalt Strike实操全揭秘", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462564&idx=1&sn=2257357922013ed3d0647f6ff408ccd4": "信息安全漏洞周报(2025年第2期)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247502656&idx=2&sn=4ec6486366953c7739eb5890a86353cd": "工信部认可!360荣获车联网产品安全漏洞专业库“优秀技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541399&idx=1&sn=c0dd23b96e9a973bc068a2183d8c1ce0": "苹果修复 macOS 高危漏洞,被黑客利用可安装恶意内核驱动", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067342&idx=1&sn=533ba142831a3c994e00cb6ec7d6d36c": "【安全圈】2025年首个满分漏洞,PoC已公布,可部署后门", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067342&idx=4&sn=380dc9803cf52db7c5d1771d404c4279": "【安全圈】为网络安全研究人员定制的虚假漏洞利用攻击利用恶意软件", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579028&idx=1&sn=3d580b0d7ca47a7f72c3197a1199540b": "工信部认可!360荣获车联网产品安全漏洞专业库“优秀技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=MzIzNjE1ODE2OA==&mid=2660190222&idx=1&sn=40a5d814dcb2e57caaef3b3924b335ce": "渊亭科技入选清科「2024 Venture50」,AI+行业能力再获认可!", "https://mp.weixin.qq.com/s?__biz=Mzg5MDc1MjY5Ng==&mid=2247493009&idx=1&sn=75481fb22523e34bd68a1aac960730e4": "CyberStrikelab——重新定义网络安全靶场", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588667&idx=3&sn=af4f2eb4bededa0cea574e3cd7963382": "2025年首个满分漏洞:云攻击者利用Aviatrix Controller漏洞植入恶意软件", "https://mp.weixin.qq.com/s?__biz=Mzk1NzI5MTc0Nw==&mid=2247484589&idx=1&sn=2acfc6592b2fbc5e6f810987742286a3": "VulScanner:一款专业的红队漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166945&idx=2&sn=601af59ba846cb97b729b826c6c06e8c": "微软起诉利用其人工智能平台创建非法内容的服务", "https://mp.weixin.qq.com/s?__biz=MzkzMDQwOTg3OQ==&mid=2247484701&idx=1&sn=c6805ed84a66a821348b1528625e8a45": "DrayTek Vigor3910 CVE-2024-41592分析", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247569683&idx=1&sn=450e5eb00d776c71a52dff655d3bea37": "使用自动化工具寻找sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500613&idx=2&sn=d5c38be468308035c9a6b96cc0e63381": "【漏洞通告】Ivanti多款产品缓冲区溢出漏洞(CVE-2025-0282)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499598&idx=1&sn=d578eee42f5b23ecb425d9237117eec6": "CNVD漏洞周报2025年第2期", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490178&idx=1&sn=e824a1b3f07a5bd2d4c1f0be104264cc": "云连POS-ERP管理系统 download.action 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247488940&idx=1&sn=ed88e703d586aa3766308140d9a5eb49": "Java综合漏洞平台", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247484691&idx=1&sn=95419e2c9d5264ef3cae38b7a8c3b31e": "Tomcat 弱密码检测 与漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492068&idx=1&sn=bb03b038fe74e7465d289991964f9bd3": "漏洞预警 | Aviatrix Controller命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492068&idx=2&sn=772981c8cda216d044abf4d11fd02576": "漏洞预警 | WordPress Plugin Hurrakify SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492068&idx=3&sn=2ea4264d66dca6b6c037f3101d15fb06": "漏洞预警 | go-git参数注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493280&idx=1&sn=0c9de072c4b55977c5623ecbd68293a6": "专注于软件供应链安全,具备专业的软件成分分析(SCA)、漏洞检测、专业漏洞库。", "https://mp.weixin.qq.com/s?__biz=MzI0NjA3Mzk2NQ==&mid=2247495707&idx=1&sn=fb5fa5579021060d10ad9011e147c66f": "攻防靶场(40):破壳漏洞利用 Sumo", "https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247485780&idx=1&sn=fe6bca078339d21ec48c776cb91bf35c": "教育SRC邀请码", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513504&idx=1&sn=838af406a4e2aec5e99b37399b5f1a2e": "警惕!近期Fortinet防火墙频遭攻击,疑似零日漏洞被利用", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247525600&idx=2&sn=23e00124c12854cb6304e7288cb06680": "一次简单的五千赏金漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247431&idx=1&sn=a6081b4026a24d8266ae4134b9d7b0bd": "网络安全不是一场漏洞游戏", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490188&idx=1&sn=32d6ea76d777eab4ef66495f15f2c73b": "杜特网上订单管理系统 getUserImage.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485045&idx=1&sn=5a2c7e17aba8e20ef5e6946f1dca470f": "腾讯云安全中心推出2024年12月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=Mzg2NDc0MjUxMw==&mid=2247486064&idx=1&sn=92fb71427c6a7c2662b4af74ada963fb": "GiveWP 插件发现严重安全漏洞,影响超 100,000 活跃安装", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5OTQyNQ==&mid=2247488262&idx=1&sn=ec9f25c9ffed936584c999474fe4edd8": "漏洞挖掘|还没开始就结束了?行不行啊!毫无体验感", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793859&idx=3&sn=6feb2f42906876e5a265b8ea0c08a1d2": "Google OAuth 漏洞使攻击者可以访问废弃的帐户", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498206&idx=3&sn=a00994d537a5909711eda0e855cf39e6&chksm=fa595733cd2ede25105b711c11316a44649792eaf6c84fe1b800624b877fa63c510961c10820&scene=58&subscene=0": "无独有偶,通过.NET反序列化漏洞实现 Visual Studio 钓鱼攻击", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247546762&idx=1&sn=f6235edee8a9ec9a66cb08012d395141": "某公交管理系统简易逻辑漏洞+SQL注入挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484413&idx=2&sn=44e275abbacd91b885c76cc35ffbbc80": "入选作品公布|安钥®「漏洞处置标准作业程序(SOP)」征文第十八期", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502769&idx=1&sn=7d06f9d258b0145e52d6fa7cef2430ad": "微软1月补丁日多个产品安全漏洞风险通告:3个在野利用、12个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTUxMzk2NQ==&mid=2247486055&idx=1&sn=c3a3856c3515f17a7311649acaec0f82": "震惊!OA 系统漏洞竟让 1400 多名学生敏感信息“裸奔”", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486028&idx=1&sn=63cc8acc3287aeb74b0cce36bc0a9450": "一款java漏洞集合工具 - Hyacinth", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067360&idx=3&sn=dd1e289ee05448049f4a12db1949c772": "【安全圈】Windows 远程桌面网关漏洞导致系统遭受 DoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490281&idx=3&sn=f0e14c938102524a28c241ea4cd11ce7": "【风险通告】FortiOS and FortiProxy存在身份验证绕过漏洞(CVE-2024-55591)", "https://mp.weixin.qq.com/s?__biz=MzA5OTk2OTY5MA==&mid=2247485644&idx=1&sn=88b3cd3828c67e43ba86c0cf353e4c8a": "Microsoft 1 月 CVE 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247497068&idx=1&sn=49fbe931deff728264c4219f91c14f28": "内推 | 上海奇安信渗透测试岗火热招聘中", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488851&idx=2&sn=72adc51b645adaa0690545cb0629a826": "【安全更新】微软1月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787737&idx=1&sn=6725317e45de42aa994fa2977db726ae": "强制报告与禁止支付,英国拟立法打击勒索软件", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523990&idx=3&sn=2fce995dcb779b108d4f3f7a3043c743": "CNVD漏洞周报2025年第2期", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496932&idx=1&sn=9181bae32d56d3f63bef793502f84541": "2025年1月微软补丁日多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900030&idx=1&sn=17d56b9e55e22290f5e4b5db44ddb42c": "Ivanti VPN 零日漏洞遭攻击,敏感信息面临风险!", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507683&idx=1&sn=29566d48b96920586ff08527eba2517a": "微步情报局发现Apache Linkis漏洞,再获Apache官方致谢", "https://mp.weixin.qq.com/s?__biz=Mzg4NzQ4MzA4Ng==&mid=2247485142&idx=1&sn=9248b2bec85645f833189256dc099724": "工信部发布关于加强互联网数据中心客户数据安全保护的通知", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502786&idx=1&sn=9c3ec9f73e5c305b28c6848870adc528": "Ivanti Endpoint Manager 多个信息泄露漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500622&idx=2&sn=2416996e9c00d93ee656f46111cca28d": "【漏洞通告】微软1月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652113945&idx=1&sn=8dea64f5407a935a2d3399a9e5c4700d": "微软2025年1月份于周二补丁日针对161漏洞发布安全补丁", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484413&idx=1&sn=5a913058c41dbc584efcca2e7d0473a4": "安钥®「漏洞防治标准作业程序(SOP)」征文启示 [2025年第3期,总第21期]", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094588&idx=1&sn=22477d94e3cc095b191a3d45b6408d58": "Windows 远程桌面网关漏洞使系统面临 DoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094588&idx=2&sn=d50bc460ab394f7613b6a4a752b5b07d": "Chrome 132 发布,修复了 16 个漏洞,包括远程代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651312048&idx=2&sn=edf59767d3cde5fb51a5c4cedf4f7ca5": "Windows远程桌面网关出现重大漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488851&idx=1&sn=8bbefd6a3b4790e4dbd4a22948abf009": "【漏洞通告】Fortinet FortiOS&FortiProxy身份验证绕过漏洞(CVE-2024-55591)通告", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650620729&idx=2&sn=9ae566c901d483735134cfae8ae373b3": "涉及161个漏洞!微软发布2025年1月补丁日安全通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522078&idx=1&sn=fed0749158dda91f61f1f60a96b5230c": "微软2025年1月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522078&idx=2&sn=a6a418ea6abb9635205b06203e061801": "Fortinet:注意这个认证绕过0day漏洞可用于劫持防火墙", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247521500&idx=1&sn=dbfbda5d6c733a82e7ba8fea37ab095c": "2025-01微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588686&idx=3&sn=ce937ad7e954fd8fd09c398e4390e7e5": "更新4节!系统0day 安全-企业级网络设备固件漏洞挖掘(第7期)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523990&idx=2&sn=25be5b60ca7f2aba3a6a82b4164656f5": "【漏洞通告】FortiOS和FortiProxy身份验证绕过漏洞(CVE-2024-55591)", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484318&idx=1&sn=a38565417660cc105376398c8dfcd649": "【漏洞预警】用友nc 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485139&idx=1&sn=54b2149c95610c6fe3934255ce276b75": "Jeecg存在JNDI代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580791&idx=2&sn=3e0e732784e4fc45d8352e89c2f44690": "Adobe 发布带有 PoC 漏洞代码的严重 ColdFusion 错误提醒", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490281&idx=1&sn=0325c7ec2ff2d46851b13f8bf8b78895": "【风险通告】微软1月安全更新补丁和多个高危漏洞风险提示", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490281&idx=2&sn=091bfbb3502c26c5666cea0aab41c9c7": "【风险通告】Ivanti Endpoint Manager存在路径穿越敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651134691&idx=2&sn=8abe952e69d2d777f3d51b3b941be282": "又一BeyondTrust漏洞遭黑客利用;Fortinet修复已被在野利用零日漏洞,可攻破FortiGate防火墙 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247518316&idx=1&sn=b954fbb2f35fff3cfba2f1951d3c827b": "文件包含漏洞从入门到精通", "https://mp.weixin.qq.com/s?__biz=Mzk0OTUwNTU5Nw==&mid=2247488515&idx=1&sn=305bbcdc6b74a5b775bcad8028dbd7f1": "【相关分享】记一次小程序支付逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489927&idx=1&sn=4585f639e37390f637445498148b70f7": "API漏洞挖掘神器API_kit的二开版本|Burp Suite 插件", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499165&idx=2&sn=1bcea16d2d17f234caf752fcf51a3d66": "CTF赛前指导 -- 文件上传漏洞&一句话木马", "https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247505809&idx=1&sn=c07f5dca2e5dd2b96c314afab7cb5947": "华为通过BSI全球首批漏洞管理体系认证", "https://mp.weixin.qq.com/s?__biz=Mzk1NzQwNjQ4Ng==&mid=2247484231&idx=1&sn=ea5d98ddd1243530833e65653ffbd993": "漏洞精讲之SQL注入", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633819&idx=4&sn=b42f35d0033d76515787da43b6980128": "警惕!近期Fortinet防火墙频遭攻击,疑似零日漏洞被利用", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489470&idx=1&sn=8039e7153319192c8d4d0ed048188aae": "【漏洞预警】Fortinet FortiOS等身份验证缺陷漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247484697&idx=1&sn=41f33dac5bec6ee1a38fe28b75e95977": "哔哩哔哩网页端疑似曝出存储型XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247569765&idx=2&sn=8cdde0bcc80f23fd58938ae6a1b4f361": "实战|拿下了自己学校的大屏幕", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247485723&idx=1&sn=7c957b9f8d1e7a6f0094a12068b8720d": "记某OA系统Ajax旧服务的0day漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496947&idx=1&sn=cfb80fee4820f74fe4d4da502d629282": "【漏洞通告】FortiOS and FortiProxy身份验证绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496947&idx=2&sn=4d5f7bf05f88fe132cade2806d79c596": "【漏洞通告】Ivanti Endpoint Manager多个信息泄露漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247488407&idx=1&sn=9f14c87a5bd0069bcb81779ce3d4c4d2": "美国CISA将Fortinet FortiOS列入已知漏洞目录", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489929&idx=1&sn=5a5cb71d997259c5fd89a14ae79f829f": "2025最新Invicti-Professional-V25.1 WEB漏洞扫描器更新|近期漏洞合集更新", "https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247597488&idx=1&sn=b742395aa377ae841d5658003e035f50": "译文|韩国国家网络安全战略", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588707&idx=2&sn=d8b388917808b4ab77f7526a37a8f228&chksm=b18c26a986fbafbfafefb07442a2524806b1f3c1598ea59eff936f42c6f1d5c9c7346e8eb91e&scene=58&subscene=0": "Palo Alto Networks Expedition 工具曝关键漏洞,明文密码或泄露", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588707&idx=3&sn=e956cfff8deabe1f7326baacac64eef9&chksm=b18c26a986fbafbf0481872368b731450bf7c0dd4efa35180ae1fdcb91d09ff87bfcfda869c7&scene=58&subscene=0": "Windows内核漏洞分析与EXP编写技巧", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513518&idx=2&sn=e3691228661dd921114c81bc336d3c7a&chksm=ebfaf28edc8d7b987cbca67e7facee84ece62bb9db75aeb0b865aafa069342f157193c760e9b&scene=58&subscene=0": "微信支付存漏洞?用户被异地刷脸支付成功,官方回应", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522089&idx=1&sn=a04239b89ce2032e8e28b49d05782135&chksm=ea94a643dde32f55fd65e0ec66115b17b1cfe6c18f35bb55ece3c45dfce09c46bdf368f9009f&scene=58&subscene=0": "Ivanti修复Endpoint Manager中的多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522089&idx=2&sn=46178e7445995e2b3a605d7fd3c37a93&chksm=ea94a643dde32f5500a0b9ba085731e8b6fcd21c96d42f6dbb5597cd5ac92f61c77907616c88&scene=58&subscene=0": "SimpleHelp 多个严重漏洞可导致文件窃取、提权和RCE攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507685&idx=1&sn=f6f13d9e6ca46b986c4c17ce7424d252&chksm=cfcabdf1f8bd34e7a4bb18b1d16702e6a4feb5c65a3c5642728ea446c51edaaba876ffe2c928&scene=58&subscene=0": "Rsync修复数个高危漏洞,两个RCE需要重点关注", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067407&idx=4&sn=0e43cb3c3a8763dcfcbd7b70a9d16464&chksm=f36e7a0fc419f319a7965eec0e32510033e5b2543bbe6ce51c54334af84e58c2c68a4a803549&scene=58&subscene=0": "【安全圈】Fortinet 又被确认存在新的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664234775&idx=3&sn=82b000440fa4c60ceae4b17d4472d670&chksm=8b59fdeebc2e74f8f1e114cc8a17881077bd3708e814560f198b1085ef506d998bb5bd1dec9b&scene=58&subscene=0": "CNNVD | 关于Fortinet FortiOS和FortiProxy安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664234775&idx=4&sn=ec548ccac6f3d80540906533ca87ecf9&chksm=8b59fdeebc2e74f8c64ef4317b09ff932b30314e4bf6a8856a5aa49afbd1509722c124378ab7&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580839&idx=1&sn=9bbf94cef195dc62ef4e9c2767e40736&chksm=e9146c9dde63e58b38dc1102ff184f3f04def7647e879875cf84eea98fd90bd0fb589e54a1ae&scene=58&subscene=0": "Nuclei 漏洞允许恶意模板绕过签名验证", "https://mp.weixin.qq.com/s?__biz=MzU1NTEzODc3MQ==&mid=2247486892&idx=1&sn=a6724b98a3098cb4aafd29db4607bbea&chksm=fbd9a610ccae2f06142212f5bb3152632f1397c33284590d3a060c069821d719e57417138604&scene=58&subscene=0": "Atropos:对Web应用程序服务器端漏洞的模糊测试技术", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793889&idx=2&sn=b498ab3fe02cf49771f55c3772496fac": "新的 UEFI 安全启动漏洞可能允许攻击者加载恶意 Bootkit", "https://mp.weixin.qq.com/s?__biz=MzU4OTg4Nzc4MQ==&mid=2247505535&idx=1&sn=1f991ed49fc06c72e9eb89d151038ee8": "大连中远海运川崎招聘网络安全运行维护", "https://mp.weixin.qq.com/s?__biz=Mzk0OTUwNTU5Nw==&mid=2247488538&idx=1&sn=a97ec9a3e0b0d1426f592ca73c8a0826": "【相关分享】记一次SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492081&idx=1&sn=8f5e671b12dc165c2b101543d51d52b4": "漏洞预警 | Netis Wifi路由器信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493301&idx=1&sn=14d3843029a33e9ea975e81ed20fab0d": "SimpleIAST- 基于污点追踪的灰盒漏洞扫描工具。", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490765&idx=1&sn=409b2bcbd5111df2487a2c68cedced21": "能信安:漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2MDE5MTQxNg==&mid=2649723157&idx=1&sn=aba786ea27b176262df51aaf93816f1b": "14:40到14:45,支付宝20%优惠“Bug”究竟发生了什么?", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247495599&idx=2&sn=f6e97265524b6e0494da95034df04099": "警惕!近期Fortinet防火墙频遭攻击,疑似零日漏洞被利用", "https://mp.weixin.qq.com/s?__biz=Mzg2NzU4MDM0MQ==&mid=2247495653&idx=1&sn=b993cb0bbbcd76d1c022a6d0250dde96": "快手7篇论文入选人工智能领域顶会AAAI 2025", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247502142&idx=2&sn=71658a53c477aae39be23a40f0baa4b7": "立级修补!UEFI安全启动曝出绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNzc3OTMzNw==&mid=2247485740&idx=1&sn=7322bc46dcb2087c3e62a2e5bac53951": "【工具分享】一个综合性比较强的java漏洞集合工具(集成多种实用小工具)", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487114&idx=1&sn=115e5afefe5e9306bda97c094ba1e09d": "某小说vip破解代码分析", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247506848&idx=2&sn=4918f16f2099d34206ad07e0c67b5a25": "情报经纪人出手:惠普企业(HPE)遭黑!", "https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247527885&idx=1&sn=f3acf7878a0bae0b3cf7b7ab894461e3": "光网络时代的两大核心技术:EPON 与 GPON", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247569798&idx=2&sn=b3d932e186079d318198ca4e3fb47d39": "漏洞扫描工具 -- SBScan", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651134752&idx=2&sn=a71898ac89bc6a622d04a05f120c6232": "2025年值得关注的十大漏洞管理工具", "https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247484514&idx=1&sn=34349f1717c6e792960e75913935ee1d": "27.悬于开发者和安全研究人员头顶的剑 | 一类漏洞让Visual Studio项目变得不再可信", "https://mp.weixin.qq.com/s?__biz=MzkyODYwODkyMA==&mid=2247484974&idx=1&sn=d77f9d549b659cac6a5c9c72040b4bb0": "初级漏洞猎手十大必备网站", "https://mp.weixin.qq.com/s?__biz=MzkzNzg4MTI0NQ==&mid=2247485321&idx=1&sn=b3fd33cb785e9affc26dceaeec07c6b4": "2024Goby红队版工具-附2024年poc合集,支持导入自定义poc库", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247487185&idx=1&sn=139315f62af5162df6c20bf93a99917b": "一文解锁网络安全交流群,HW 课提能,漏洞库护航,SXF 内推进阶", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247488192&idx=1&sn=5230537241103a68f2b04683e00e9429": "一款容器镜像漏洞扫描器-Trivy", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522104&idx=2&sn=eb5266f7ac15b9afa33c145e179f4b25": "W3 Total Cache 插件漏洞导致100万WordPress站点遭暴露", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247534414&idx=2&sn=73bf0833c3bb12ee08861ceb729eee8f": "银狐叒进化,溯源不了,清理不掉!", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499191&idx=1&sn=1df42533b3acc04c05ce14167cfb5bc8": "java漏洞集合工具 -- Hyacinth", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491970&idx=1&sn=942362e32fb21fcc10dc1e43eafade1a": "开源漏洞扫描器Nuclei 漏洞可使恶意模板绕过签名验证", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489480&idx=1&sn=94cd72de934fea315c3cda6436f85fd2": "【漏洞预警】NetVision airPASS信息泄露漏洞(CVE-2025-0455)", "https://mp.weixin.qq.com/s?__biz=MzkxNjg3NTQ4NA==&mid=2247485581&idx=1&sn=e6b9fcb1d7395d24b75c2788fe77c394": "pikachu漏洞靶场通关手册(万字图文解析)", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc0Mjc3NQ==&mid=2247486626&idx=1&sn=0b601e90fca3b769a570d7a5576f8cfb": "CVE-2024-3661,又可以考验发行版补丁及时性了", "https://mp.weixin.qq.com/s?__biz=MzUxMjc0MTE3Mw==&mid=2247494902&idx=1&sn=e942a959eb4ef9c69caf9dedbf984b16": "SIP 绕过漏洞允许攻击者在 macOS 上安装 Rootkit(CVE-2024-44243)", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094624&idx=2&sn=7e81f2c4eff7aa2a747ed951a160b652": "针对 Ivanti Connect Secure RCE 漏洞 (CVE-2025-0282) 发布 PoC", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651312407&idx=3&sn=038818ab5651a46363c9fda9f15249d1": "新的UEFI安全启动漏洞可能允许攻击者加载恶意Bootkit", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067425&idx=3&sn=ca5d0f47ca765e96d6aca2175ef92b2a": "【安全圈】新的 UEFI 安全启动绕过漏洞使系统暴露于恶意 Bootkit", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500636&idx=1&sn=689cf133b8d52186aea81c6dc5544f45": "【漏洞通告】Rsync 缓冲区溢出漏洞(CVE-2024-12084)", "https://mp.weixin.qq.com/s?__biz=MzI0MTY5NDQyMw==&mid=2247525402&idx=1&sn=7868570982251b31fc9800aa6e26e17b": "Windows CVE-2023-29360漏洞的研究与分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522104&idx=1&sn=c06ab4d6c64169ea92baf711cd9ca06f": "谷歌OAth 漏洞导致弃用账号遭访问", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553095&idx=1&sn=e139cf48710f64da0487ee89d80064e7": "红队实战之通达OA系统漏洞POC脚本一键编写", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484912&idx=1&sn=a9cf3afb132950a54b3709c905ee9737": "【漏洞通告】疑似CVE-2024-55591POC", "https://mp.weixin.qq.com/s?__biz=Mzg5MDg3OTc0OA==&mid=2247489395&idx=1&sn=6e54d3c664b63cc91f2a731afdd5e39d": "CVE-2023-24860 拒绝服务攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496884&idx=1&sn=d38c05cf3d7a7403c9f249d8ecd87af6": "漏洞挖掘|还没开始就结束了?行不行啊!毫无体验感", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487115&idx=1&sn=338d1d8129bc7b7f75ae6ad22e4cef7e": "渗透测试 | 某系统垂直越权漏洞的挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492093&idx=1&sn=b27485da37f7eef604851eddd114d810": "漏洞预警 | Ivanti Connect Secure栈溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492093&idx=2&sn=d34b7d393afa2629d555d68405f5175b": "漏洞预警 | CraftCMS模板注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492093&idx=3&sn=066c072aeb8c8dca5f78f1c1addfe03a": "漏洞预警 | WordPress Plugin Radio Player SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247504688&idx=1&sn=9e1211dcc443c27b4bfc26fc1fb7639c": "掌握现代红队基础设施第 3 部分 — 使用 DNS 记录和 OPSEC 绕过邮件安全网关保护邮件服务", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485250&idx=1&sn=cc481b4d430eb2516b235f762c1047cb": "Graphql内审查询漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247489123&idx=1&sn=228fa0630cebdc58c6b961b96752dc2f": "DataCon2024解题报告WriteUp—漏洞分析赛道", "https://mp.weixin.qq.com/s?__biz=Mzg4MDYwNDc5Nw==&mid=2247486547&idx=2&sn=a6ca41fa15cd7e03ba221df57d0eb859": "影响多数UEFI系统的CVE-2024-7344漏洞可绕过安全启动", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488622&idx=1&sn=baced76f27759525c3de42cb9abd4668": "【代码审计】WeGIA 存在前台任意文件上传漏洞 (RCE)", "https://mp.weixin.qq.com/s?__biz=MzkzNzg4MTI0NQ==&mid=2247485359&idx=1&sn=fc0b810b0174b166b92e61fedd91fe77": "强力工具助你一臂之力:XXECheck–全面提升XML安全,防护XXE漏洞!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067460&idx=1&sn=7e41cdf5b76e20186089903f7171a588": "【安全圈】高危!rsync被爆出多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjg3NTQ4NA==&mid=2247485767&idx=1&sn=93b546f9ce1febe8901087238dc96ee7": "DVWA漏洞靶场通关手册(万字图文解析)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490256&idx=1&sn=86fcd7775b4baa4c1dfe975633d73730": "方正畅享全媒体新闻采编系统 reportCenter.do SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485778&idx=1&sn=f2bab6ffd22425efb72f8b20eeeab29b": "CVE-2024-53704|SonicOS SSLVPN认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485778&idx=2&sn=691f85f7d7a345f2ed5607454b84333b": "CVE-2024-55591|FortiOS和FortiProxy身份认证绕过漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588749&idx=1&sn=c07163014dddf5e352e4f3683251b0d4": "欢迎报名!​“系统0day安全”系列课程:掌握漏洞挖掘重要技能", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588749&idx=2&sn=6fc809be9ede10a46f7d204c536cd5bf": "PWN入门:误入格式化字符串漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490248&idx=1&sn=1eba3e69ef0279c4fc7796abe9ca32c6": "方正畅享全媒体新闻采编系统 screen.do SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650606788&idx=1&sn=1d92761760abe35316e9dcf0f7bc34f5": "关于利用人工智能技术绕过图形类验证机制新型犯罪手法预警通报;|2025年首个满分漏洞,PoC已公布,可部署后门", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247633889&idx=5&sn=0eaed00ffbd92d4c0652fd3e9340e6f4": "微信支付存漏洞?用户被异地刷脸支付成功,官方回应", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5NzMzMA==&mid=2247484176&idx=1&sn=f4be63e1e0f295963d861967f27eb595": "Nuclei POC 管理工具(附POC地址)", "https://mp.weixin.qq.com/s?__biz=MzkxOTI5NzY4MA==&mid=2247486096&idx=1&sn=dee2f6b912c394e375ccb0dc69bb1de5": "strust2_CVE-2024-53677漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499201&idx=1&sn=d479b7a4fca1420e0d84bc8efa5959af": "1314个自定义goby-poc(1月8日更新)", "https://mp.weixin.qq.com/s?__biz=MzkzNTQwNjQ4OA==&mid=2247484053&idx=1&sn=f2f7d10b6cf4337e7ab2212e103f702a": "一次通用cnvd案例分享", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247510270&idx=1&sn=6e0dfb575d641bc67a2b3f00196df49c&chksm=fa527d40cd25f4569e895e911f8d3e8f3e3bc366ffc8598627f89ba3a175f3b65e348be9866b&scene=58&subscene=0": "2024年度人工智能相关重点安全漏洞盘点", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651312409&idx=1&sn=cb68df3d11a9480a16e2eab801cc662c": "2025年十大最佳漏洞管理工具", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485265&idx=1&sn=cfeefce93d801ab805be4f712eb7925f": "OneThink文件缓存漏洞及日志读取", "https://mp.weixin.qq.com/s?__biz=Mzg4MDYwNDc5Nw==&mid=2247486551&idx=1&sn=ccef527f35f3e3ebe676d7e3916acac0": "ESET发现可绕过UEFI安全启动的严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247489758&idx=1&sn=c26ab657c20bf97835120f44faa38b93": "2025年值得关注的十大漏洞管理工具", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484259&idx=1&sn=888da6c5443cb2f2ae0c03c3c922dd17": "KONE-通力电梯管理系统-app_show_log_lines.php-任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488641&idx=1&sn=af12c4534abac0d07a82bbdb894ba5a7": "【工具分享】Swagger API Exploit 1.2 - 信息泄露利用工具", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067480&idx=4&sn=8dc7094933166fceeb2e467f38e23545": "【安全圈】CL-UNK-0979 利用 Ivanti Connect Secure 中的零日漏洞获取网络访问权限", "https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247527921&idx=1&sn=63a793fb3dda03d616d12f4df6d2bcfc": "网络工程师:如何在职场中越老越吃香?掌握这几点,你也能越老越牛!", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484268&idx=1&sn=9b38caee54f9f1217b1e27269fc22a09": "锐捷-SSL-VPN-越权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247518348&idx=1&sn=c0faf8a6a240edb462faa9205bd3a22a": "CVE-2024-13025-Codezips 大学管理系统 faculty.php sql 注入分析及拓展", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491972&idx=1&sn=bfd5fb18fdc8cbb6d1b4b232bf172ad5": "易受攻击的 Moxa 设备使工业网络面临攻击", "https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650476241&idx=2&sn=f8aa1894f4822ff6449504c5568ac618": "秦安:中美网民会师小红书,TikTok拟周日关停美业务,斗争才会赢", "https://mp.weixin.qq.com/s?__biz=MzkyNDA5NjgyMg==&mid=2247501315&idx=1&sn=d85a30ae678cadbcaa0d69068c18dc6d": "春秋杯WP | 2024春秋杯冬季赛第三天题目部分解析", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490002&idx=2&sn=d5528443216703026dbb5befe50a87c2": "一次通用cnvd案例分享", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247488420&idx=1&sn=08034823ae10fcec92f62940ef7d6e49": "记一次CNNVD通用漏洞证书挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyMDY1MDI3OA==&mid=2247483794&idx=1&sn=31e5bf60bafe8e52c06509a0827328b2": "记一次CNNVD通用漏洞证书挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484324&idx=1&sn=86bc6803db897c208c21fdbf04f469f5": "【漏洞预警】Rsync缓冲区溢出漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454063841&idx=1&sn=d71d882f0aff0331d4d02e32a966d237": "信息安全漏洞周报【第006期】", "https://mp.weixin.qq.com/s?__biz=Mzg2MTc1MjY5OQ==&mid=2247486238&idx=1&sn=0d0e11190ce7cebaf3d1a0e829230713": "中间件安全|Tomcat漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MzkxMDY3MzQyNQ==&mid=2247484792&idx=1&sn=c4cc7279d562c9286b0ab2291a614eeb": "Confluence认证后RCE(CVE-2024-21683)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492105&idx=1&sn=6b3de2fc54f10c818f7f5d69cf9011df": "漏洞预警 | Apache Linkis任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492105&idx=2&sn=819ec9928f504767b95f35183bdd0a6a": "漏洞预警 | 家装ERP管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493309&idx=1&sn=c520f39f9b4ac2af95887b6e3492a9a4": "一个支持被动代理的调用 KIMI AI 进行越权漏洞检测的工具", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484280&idx=1&sn=40cc233e8d31ab8b8f0ce418a1e1f056": "锐捷-云课堂主机-pool-目录遍历漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247488326&idx=1&sn=64bed920635cd5aa06b69d18c24050be": "漏洞挖掘 | 开始既结束?快速挖洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650606873&idx=2&sn=94e58d88c55ad6f451d6a5fdc6fb990e": "2025年十大最佳漏洞管理工具", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650606873&idx=4&sn=73681423b45d2c3ba8f33e5d75587249": "专注于软件供应链安全,具备专业的软件成分分析(SCA)、漏洞检测、专业漏洞库。", "https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247486007&idx=1&sn=754dfb823942baaf0606ffee489adcef": "MS14-068 漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg4MzU3MTcwNg==&mid=2247486183&idx=1&sn=476ee9505122d0e825cd0976774e74f6": "CVE-2023-33440源码分析", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485719&idx=1&sn=594e1286af1bd496465685b0b9d35ff8": "【漏洞分享】万能门店小程序管理系统存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDg0NTc1NA==&mid=2247510554&idx=1&sn=90cf0b08a77a723fb4ccc149e5e8fe1d": "校企共育 锻造双师 | 启明星辰知白学院网络安全方向“双师型”培训圆满结束", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247492856&idx=3&sn=11ddf73e872fe0de21d5222f9d314c79": "上周关注度较高的产品安全漏洞(20241230-20250105)", "https://mp.weixin.qq.com/s?__biz=MzA3NDE0NTY0OQ==&mid=2247484065&idx=1&sn=b7ddcbd7887c00397fa213810942dd33": "漏洞情报收集的方法", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492526&idx=1&sn=247ea35cbbd8abee04db13ecd2a84025": "因WordPress新漏洞,全球数百万网站面临被攻击风险", "https://mp.weixin.qq.com/s?__biz=Mzg5OTEzMjc4OA==&mid=2247489027&idx=1&sn=60e2dc88ec5d060e0324c3d237433b41": "Chrome浏览器的Google账户接管研究", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485278&idx=1&sn=d2763b1dec8419157ee3f7234cb8f4f5": "Log4j CVE-2017-5645反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497009&idx=1&sn=70c58fc6187adfcab699f9a29cd91695": "【漏洞通告】Rsync多个漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494414&idx=1&sn=de499009a87f19b7c41e25f0d6d150ba": "近期暗网 0day 售卖情报预警", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247549173&idx=1&sn=0c7333f70cb52cfe2b8da933eea4de06": "150亿造车新势力,宣布停运破产", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247491972&idx=1&sn=1ca23e5d04a0a77875e0689e1e8c2501": "漏洞预警 NetMizer 日志审计 axx.php sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489950&idx=1&sn=8471a28c7c14a45df7f2091f0c5866cd": "Catcher外网打点指纹识别+Nday漏洞验证工具|指纹识别", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486273&idx=1&sn=9a0ebba7a700f0ae0410be83b4b1df00": "如何mongodb未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490011&idx=3&sn=696b18cad8b2a463ec2185c4ac088e12": "【库迪咖啡|全场饮品任选券|多店可用】现价仅需7.9 低至2.3折", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094653&idx=2&sn=c69dfb1b57a25f58f75e9a9f5422bd0c": "严重远程代码执行漏洞(CVE-2024-53691)在QNAP 系统中被发现", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900082&idx=1&sn=dc3053c2d874f9da5853c72c38c7c519": "SimpleHelp远程访问软件曝高危漏洞,可导致文件窃取、权限提升和远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489485&idx=1&sn=e5ea1e03489d9276fac40db96a823bb7": "【漏洞预警】ZZCMS index.php SQL注入漏洞(CVE-2025-0565)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448682463&idx=1&sn=6b0cf0e4166f632f756e6d7185550a0c": "金盾信安 | 网络和数据领域资讯第44期(2025.1.14-2025.1.20)", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094653&idx=1&sn=0a8f46713971d1eae5f9bc98fe0e3049": "利用 Windows 常见日志文件系统零日漏洞 (CVE-2024-49138)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495715&idx=1&sn=c02f8d40b18ff20468aa338efd776c5d": "CNVD漏洞周报2025年第3期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495715&idx=2&sn=b9b9d870553d36e181ba7d1702fde7da": "上周关注度较高的产品安全漏洞(20250113-20250119)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458588763&idx=2&sn=987fea6e7bc8cce2c77f2e2035072ac4": "开源工具 rsync 曝重大漏洞,黑客可越界写入缓冲区远程执行代码", "https://mp.weixin.qq.com/s?__biz=MzkxMDU5MzY0NQ==&mid=2247484461&idx=1&sn=b866a874c1d918dd649f80acfedc093f": "从国赛到西湖论剑:fenjing进阶通杀jinjia2_SSTI", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490287&idx=1&sn=70c96ed0de707107589c47460e4867aa": "【风险通告】Rsync存在多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1NzQ0NTMxMQ==&mid=2247490064&idx=1&sn=9f929a8b28422c1087a84c56aadbbfa1": "公示", "https://mp.weixin.qq.com/s?__biz=MzI1OTExNDY1NQ==&mid=2651618728&idx=2&sn=904dfe22108a734b8b461c189289de40": "美国候任总统特朗普推出个人加密货币", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490274&idx=1&sn=c5d8baaa4e674daef4881916a48159d0": "泛微-云桥e-Bridge checkMobile SQL注入漏洞(XVE-2024-34435)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518279&idx=1&sn=7d44805e31cccc886d5a926e01ac7338": "意外发现谷歌Slides越权漏洞,获得赏金$3133.70的故事", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522124&idx=1&sn=8b928d650502c3cebc7b2ae0e85282a2": "WGS-804HPT 交换机中存在多个严重漏洞,可导致RCE和网络利用", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502869&idx=1&sn=53f5cfd343a3cd7a4e8a32a6fe638138&chksm=fe79e88dc90e619b8c2c010457c1e44f3ff06dd47f4a8abd602deff354192c4b2842a3c0dfc3&scene=58&subscene=0": "安全热点周报:Fortinet 警告利用身份验证绕过零日漏洞劫持防火墙", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498340&idx=1&sn=f9aecfc3de35b8fac05e7e7d352da9e4&chksm=fa595489cd2edd9f317b3ce1a2e10a23a2a5c3c3fc4a16daa713ac76716cec8ef519e525b37a&scene=58&subscene=0": "举一反三 ,通过 Sharp4SuoPoc 从原理上复现 Visual Studio 投毒事件的来龙去脉", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247534891&idx=1&sn=442f5697287365e019e20cb29c0a8008&chksm=c1443b96f633b280e3859a3441a858dda1412ce36b7957734a73bf3c683102b57bad82ee504a&scene=58&subscene=0": "新西兰跻身云安全漏洞排名前十", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499617&idx=1&sn=2c0ace8ad777eef414c8c2a9bd88f67a": "CNVD漏洞周报2025年第3期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499617&idx=2&sn=9bc261752d64c6b77c44994df9de434b": "上周关注度较高的产品安全漏洞(20250113-20250119)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502937&idx=1&sn=c80cc1036d35183287d46040fa66d3f2": "年度报告 | 2024年应该知道的漏洞都在这了!", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484275&idx=1&sn=09de46038ff584ab2e4f04beb9323471": "锐捷-Smartweb管理系统-密码信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607107&idx=4&sn=259fcba73be50f943c126eb6e146fb91": "一个支持被动代理的调用 KIMI AI 进行越权漏洞检测的工具", "https://mp.weixin.qq.com/s?__biz=MzkzOTY1MzcyOQ==&mid=2247490124&idx=1&sn=fe99bee07e59e88ae95e3ffc9d0d2df4": "一款java漏洞集合工具", "https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649870803&idx=1&sn=51f34e28ce598dbb7bf51792487340d3": "盘点 2024 年备受关注的那些高风险漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1NzI5NzA3NQ==&mid=2247486308&idx=1&sn=601c9ad58c9c5920f7f64cae97900a7b": "靶机复现-pikachu靶场文件包含漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247703&idx=1&sn=8d40046ba2e1a02953c034bae11ae32d": "盘点 2024 年备受关注的那些高风险漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650990290&idx=1&sn=fb9b947f5ea6ca876af9c2159098d8a4": "盘点 2024 年备受关注的那些高风险漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490767&idx=1&sn=4d50d50ddaaa43b64e68433197559709": "能信安:漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490285&idx=1&sn=1844199c9e5bcd33ef6b29e3ab003f1f": "灵当CRM getMyAmbassador SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247492076&idx=1&sn=e6e2b41dcff2ec1afbc33c4208773ee1": "商混ERP系统 SQL注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661298101&idx=3&sn=3a12bf125b82524fb5e14ad1f10f0cea": "山石网科获评“工信部车联网产品安全漏洞专业库支撑单位”", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489492&idx=1&sn=4b8abb9528ef28b6575cae48afa08082": "【漏洞预警】MongoDB Mongoose未授权 代码注入漏洞CVE-2025-2306", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900091&idx=1&sn=caa3319f858b36f09599abe9fb1856e3": "Google Cloud研究人员揭露Rsync文件同步工具中的多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494423&idx=1&sn=c9dbfe5a19a3903f237bfe117646fd8f": "7-Zip高危漏洞预警:关于CVE-2025-0411漏洞的应对指南", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247505&idx=1&sn=86b86c4632ed9f1fb92c4fba01473353": "2025年十大最佳漏洞管理工具", "https://mp.weixin.qq.com/s?__biz=Mzk0MzY3MDE5Mg==&mid=2247483957&idx=1&sn=3feb5e6886dc42f9ee7a4bf5a9f2d088": "SecScan强大的端口扫描与漏洞扫描工具——梭哈!!!", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485258&idx=1&sn=246608a49aed8e510181444e787070c4": "工具集:BucketVulTools 【存储桶配置不当漏洞检测插件】", "https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247488426&idx=1&sn=8f7ccadf3ea0c1d45dee38fe83545f64": "Yubico警告Linux和macOS用户,pam-u2f中存在2FA安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4Njg3MDk5Ng==&mid=2247486845&idx=1&sn=8e113d05132b58312fa363d52d996b1b": "电诈保护伞?虚拟号漏洞发现与利用", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247492868&idx=2&sn=dffeafd5729383586bcb3ea4400a1ac2": "上周关注度较高的产品安全漏洞(20250113-20250119)", "https://mp.weixin.qq.com/s?__biz=Mzg5MDgzOTk2Mg==&mid=2247484650&idx=1&sn=b495f19422c741fe60b7baa982cf5809": "电诈保护伞?虚拟号漏洞发现与利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492106&idx=1&sn=24a16b5a8753b2c225c2b40ba13cc668": "漏洞预警 | Fortinet FortiOS与FortiProxy身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492106&idx=2&sn=b34e8532a2316c79e30ac8b4f056ad4c": "漏洞预警 | 飞企互联FE业务协作平台SQL注入、远程代码执行和任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492106&idx=3&sn=09eac68654025a44625cdc87fced6098": "漏洞预警 | 九思OA任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247484742&idx=1&sn=6d549c467e115dc1e740ed698f4fab70": "XXL-job漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094668&idx=1&sn=162ecc38d487773f0cc1d476a900423c": "OWASP 2025 年 10 大漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094668&idx=2&sn=b4a3efa0f4f65c3bbcf7595b75c318bd": "7-Zip 漏洞允许通过绕过网络标记执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzA5Nzc4Njg1NA==&mid=2247489181&idx=1&sn=7dcb50d0a8af27d1c24feb4eb98aaf44": "关于防范开源文件同步工具rsync多个安全漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247624525&idx=1&sn=7f84b31a4512522433da75e3ef67fcdb": "持续领先!奇安信斩获5个CNNVD漏洞贡献奖", "https://mp.weixin.qq.com/s?__biz=Mzg2MjgwMzIxMA==&mid=2247484807&idx=1&sn=abe41dbf3b287ee6084ee20f4fb0503f": "CTF:Phar反序列化漏洞学习笔记", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579167&idx=3&sn=9adcb35ed05747f7530c83f59de0ea37": "喜讯!360获评2024软件和信息服务业年度领航企业及创新成果两项大奖", "https://mp.weixin.qq.com/s?__biz=MzkyMjM0ODAwNg==&mid=2247488402&idx=1&sn=60dd6d424657d00eb3c9d18f333f261e": "【新年快乐】2024-EXP合集下载链接~随时删", "https://mp.weixin.qq.com/s?__biz=MzUyODQ0MTE2MQ==&mid=2247483749&idx=1&sn=762084442aa00a999fea80eed8b17326": "中小企业及创业公司信息安全建设指南", "https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247506533&idx=1&sn=e0384f942eb95e019890cdd57d901334": "观安信息荣获“铸网2024”暨上海市“铸盾2024”车联网网络安全实战攻防活动优秀支撑单位", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247570185&idx=1&sn=be31eb813a71b58e0f28b8de1d176cb9": "2025年首个满分漏洞,PoC已公布,可部署后门", "https://mp.weixin.qq.com/s?__biz=MzkzNjIyNjM1OA==&mid=2247485035&idx=1&sn=d144d6395901bfcd213ae90752d58504": "蛇年新禧,祥福并济|360漏洞云漏洞众包响应平台放假公告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247502873&idx=3&sn=ab3d8ccd96f17d0a3040c85d24e35be3": "蛇年新禧,祥福并济|360漏洞云平台放假公告", "https://mp.weixin.qq.com/s?__biz=MzU3MTU3NTY2NA==&mid=2247488646&idx=1&sn=55f0e893bbbe3ba7916fcf2c21d94349": "【漏洞速递】PHP 8.1.0-dev RCE &SQLi", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488918&idx=1&sn=158d8df04d4080e7902083a76fd24d26": "【漏洞通告】MongoDB Mongoose搜索注入漏洞(CVE-2025-23061)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490294&idx=1&sn=361afa1ff2c71de2ba6e7340aace060b": "卓软计量业务管理平台 image.ashx 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522133&idx=1&sn=694ac221193eff02711b6e597610546d": "持续领先!奇安信斩获5个CNNVD漏洞贡献奖", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067526&idx=2&sn=35fd8cf175959d2493340598399f5c01": "【安全圈】梅赛德斯—奔驰信息娱乐系统漏洞详细信息披露", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247624522&idx=1&sn=4a81811d316688b70e550dcedd17e234": "持续领先!奇安信斩获5个CNNVD漏洞贡献奖", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513551&idx=2&sn=f50c04a1adb0a92b26906f0e29ecabdb": "B站员工植入恶意代码报复用户,官方:漏洞已修补,员工已处罚", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589041&idx=3&sn=f23e141f9f2559ffdfdd86d3d8f3ef1f": "报名中!即将开班 | 无人机安全攻防入门:从整体架构到漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkzNzU5MDMxOA==&mid=2247484238&idx=1&sn=1212c4ce350e7d19cf41b8dd512655bd": "SRC技巧分享:某高校未授权访问+XML文件上传引发的XSS", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247526949&idx=1&sn=31c547596d860fd22edbb2c5ea3275b5": "Windows 零日漏洞遭利用:CVE-2024-49138 PoC 代码发布", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247502873&idx=2&sn=b244ada36b1a87162f083c5a17af9c04": "《网信自主创新调研报告》表彰大会召开,360漏洞云获多项荣誉", "https://mp.weixin.qq.com/s?__biz=MzkyODY5ODAyOA==&mid=2247489419&idx=1&sn=27d48e4898f7de1f017a5a7bc5bc6a4e": "2024年度漏洞态势大揭秘:你的网络安全防线还稳固吗?(附下载)", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247485410&idx=1&sn=c516da4c5bcf9729e270e70dc0c6e61d": "ViewState反序列化漏洞详解", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114147&idx=2&sn=0ec2b581bd93714c8ff60c69bcc70f8b": "126个Linux内核漏洞可让攻击者利用78个 Linux子系统", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489961&idx=1&sn=f40f050019a99e6f65fa036bc9a7da16": "1Scan一键渗透扫描器|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247492936&idx=1&sn=bb3bb218d18652b9951e26d6cf5f8ab8": "奇安信2024《漏洞态势报告》:新增漏洞再创新高,总体威胁持续加深", "https://mp.weixin.qq.com/s?__biz=MzIzNDIxODkyMg==&mid=2650085835&idx=1&sn=55b9b7d447e31ed5e6a7016fc118aba7": "梅赛德斯—奔驰信息娱乐系统漏洞详细信息披露", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492118&idx=2&sn=0cc8d46b2006a58fe76e0aceeec3f5e3": "漏洞预警 | 叁拾叁OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264326&idx=2&sn=edd9feb6f1f3d5fb7467e5a4a1bc8ea3": "2024年度网络安全漏洞威胁态势研究报告", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247495179&idx=1&sn=0d366655fb6bb139775fc4d4fe333652": "【神兵利器】JAVA JMX漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyMjM4MzY5Ng==&mid=2247486052&idx=1&sn=672267c39bd61c609b8a70aa6fe4dba4": "关于公示2025年工业和信息化部移动互联网APP产品安全漏洞专业库支撑单位的通知", "https://mp.weixin.qq.com/s?__biz=MzkyMjM4MzY5Ng==&mid=2247486052&idx=2&sn=df504e3f60bd71a5f51f6ddfc79ceac2": "支撑单位遴选 | 关于开展2025年工业和信息化部移动互联网APP产品安全漏洞专业库支撑单位遴选工作的通知", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484293&idx=1&sn=cd12f02c20011f8601ff6b85bae5ce45": "奥威亚教育视频云平台VideoCover存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247498303&idx=1&sn=44d1260f2cc91c290e3a07a71e970559": "OWASP 2025年十大漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247493978&idx=1&sn=ef4fa58f2e534bfa7c9db3f5a3f01f9f": "Burpsuite插件 | 快速探测可能存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489507&idx=1&sn=cdbcc7dac604210a7fa351e96c1bbaa9": "【漏洞预警】pearProjectApi存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489507&idx=2&sn=43309d019012fc2d5146638f21cf4cdb": "【漏洞预警】YesWiki 存在经过身份验证的任意文件删除漏洞(CVE-2025-24019)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490015&idx=2&sn=e906ce0834778a54573549a04e207af6": "CTF:Phar反序列化漏洞学习笔记", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067553&idx=4&sn=2c06e2c2a5011eb86894033a1e6c41fc": "【安全圈】7-Zip 漏洞可让远程攻击者绕过保护并执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzIyNTIyMTU1Nw==&mid=2247485220&idx=5&sn=5c373b4d772f9ce5160eed1cb8773743": "【网安前沿】人数超TikTOK!……", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502951&idx=1&sn=09d5b62b3cc3e71fec3a8595f18318a2&chksm=fe79e8ffc90e61e905225d9918798d40f77be91e0a5961c95f1ab8235b4d42623eb0ecca28ad&scene=58&subscene=0": "【已复现】Rsync 堆缓冲区溢出漏洞(CVE-2024-12084)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502951&idx=2&sn=21655dd26fe10def4a6c6546fdf240d4&chksm=fe79e8ffc90e61e9fd1b2697f079954e6002507bd3d9fe45bf9331fc3c21481d0b14887ce263&scene=58&subscene=0": "Oracle 2025年1月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522153&idx=1&sn=b0d2973a6eb87e554fb62b7ddfa10dfb&chksm=ea94a603dde32f1580de59ef6a2b8fb600c6cbb237024a672b5a02660c7fc1f7184f617fce4c&scene=58&subscene=0": "7-Zip 修复高危的 Windows MoTW 安全告警绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498371&idx=1&sn=d7e51b293b5afd36bf501f82d547e678&chksm=fa59546ecd2edd789772877b71ddaf889a171c0baebaed5bc5d84e1dc59ec80a6efff9da250e&scene=58&subscene=0": ".NET 通过代码审计发现 ERP 系统中两个任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498371&idx=3&sn=81f6211052fdbd84bfa5f5b833c14bea&chksm=fa59546ecd2edd78667ab8745d36715a39fb789abb78742e20b611f6645859db72e35cbd719d&scene=58&subscene=0": "通过 Sharp4SuoPoc 从原理上复现 Visual Studio 投毒事件", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488946&idx=1&sn=64c5620996cc0710ef9e2507f0fc0365&chksm=c2c642b9f5b1cbaf3667d5aae3b668b4e34e0cd89d95893a59c258488748706a1a17b3cd727e&scene=58&subscene=0": "【漏洞通告】Oracle WebLogic Server远程代码执行与拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589076&idx=2&sn=d0f764edebe291ce5b96f036fabe1a56&chksm=b18c271e86fbae08b860c61d822fe9c14f3216204f7890876285cf7d58d7086a9d18b2c2002e&scene=58&subscene=0": "7-Zip高危漏洞曝光!攻击者可绕过安全机制远程执行代码,速升级", "https://mp.weixin.qq.com/s?__biz=Mzk0Mjc2MzQ0Ng==&mid=2247484515&idx=1&sn=7626bbc733c1de7e73a860df756a9589": "7-Zip高危漏洞CVE-2025-0411 poc 攻击者可绕过安全机制远程执行代码", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247491493&idx=1&sn=74fc8816c35069edd449608952df076f": "7-Zip高危漏洞CVE-2025-0411 poc 攻击者可绕过安全机制远程执行代码", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589076&idx=3&sn=07bb4636837dcc2fbabded998321ad6e&chksm=b18c271e86fbae086f08a8628ae493c5626bf7b7941dbf05b7856553b1bd2011fe2f5765c6b1&scene=58&subscene=0": "更新5节!系统0day 安全-企业级网络设备固件漏洞挖掘(第7期)", "https://mp.weixin.qq.com/s?__biz=MzU4MjEwNzMzMg==&mid=2247494658&idx=1&sn=8ad56c4e6fcaee8eb7353b3cb84e1ed8": "火线安全春节假期安排", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490773&idx=1&sn=91b80a02103936a79eb2b34f62cc1406": "能信安:漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI4MzA0ODUwNw==&mid=2247487148&idx=1&sn=9a576b6a8e40146970073e74a16cfa51": "2024年12月考试成绩", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462583&idx=1&sn=f496cb38c7bbad55ba627bc0ca6daf7e": "CNNVD关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQ0MTI2MQ==&mid=2247484612&idx=1&sn=9e9a99376f6065f0559ba1bb95a8fa6a": "7-Zip Web标记绕过漏洞[CVE-2025-0411]-POC", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527057&idx=1&sn=dab70d3b1e0f0652b47ff48c1887f826": "7-Zip Mark-of-the-Web 绕过漏洞 [CVE-2025-0411] - POC", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527057&idx=2&sn=47312669754a595392d5a74d28fd6b22": "发现 ClamAV DoS 缺陷的概念验证:CVE-2025-20128", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486493&idx=1&sn=279f1220881fc761c7ad242bc83325f9": "CVE-2024-9593 WordPress 远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615263&idx=1&sn=a2791470e497439c96cb4a7d2578aaca": "记一次IDOR 和访问控制缺失漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523137&idx=2&sn=32609b0942e7e3b115ff393691ac35d3": "Cisco 会议管理漏洞让攻击者能够将权限提升为管理员", "https://mp.weixin.qq.com/s?__biz=MzI3NjUzOTQ0NQ==&mid=2247517210&idx=1&sn=8c132df913168e9d296ce0321f0904bc": "2024年度网络安全漏洞态势分析与研究报告", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485343&idx=1&sn=ea5f519e9a3972aab9b055a494fc61f3": "Confluence OGNL注入漏洞复现(CVE-2022-26134)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494462&idx=1&sn=99f5d1ddf9c4af13eb7957896b54b9f0": "目前2025汽车Pwn2Own大会产生16个0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494462&idx=2&sn=592a4ae480ce82910f5c832ea526c166": "【吃瓜】支付巨头万事达卡DNS错误存在多年,还不承认漏洞危害", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247484759&idx=1&sn=c4caa7986c85201bb1482edc2c398385": "Tomcat 弱密码检测与漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzI5NjA4NjA3OA==&mid=2652102044&idx=1&sn=ae34ae22750ff74049eabda7ec2ef3bb": "喜讯 | 金盾检测入选为2025年工业和信息化部移动互联网APP产品安全漏洞专业库支撑单位", "https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247488435&idx=1&sn=fe347684a39fe042876e6a13dd103054": "Cloudflare CDN漏洞泄露用户位置数据,即使是通过安全聊天应用程序", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247517944&idx=1&sn=c9a035ae82d527f2ebe884518dc3e56e": "工具 | 一款替代Frp完美消除网络特征的内网穿透神器", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900135&idx=1&sn=2675c56bb02cacdcbcb554cf291065ce": "高危预警!思科ClamAV漏洞PoC代码公开,多款终端安全产品告急", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492124&idx=2&sn=ac29f876f9b78d99d35ad00ae9c7351e": "漏洞预警 | 广联达Linkworks信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651312640&idx=2&sn=652ed0300126215df5cdfd30b50e7afb": "关于公示2025年工业和信息化部移动互联网APP产品安全漏洞专业库支撑单位的通知", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651312640&idx=3&sn=9904195ae2cf70bd87a4d4dca9ffdcfe": "Pwn2Own 2025首日,16个零日漏洞和200万奖金", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664235572&idx=3&sn=fdc022660aa90ba5340b382eee49227a": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651135209&idx=1&sn=63393f68bd3cf2051d22136b780192cf": "梆梆安全发布《2024年Q4移动应用安全风险报告》 全国78.37%以上APP存在中高危漏洞风险", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454063847&idx=1&sn=4fe2c06629d11317089a12ef0f79552d": "信息安全漏洞周报【第007期】", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247488629&idx=1&sn=0e40bfd703c383a6954c90bdb7c0325a": "CVE-2024-49113“LDAP 噩梦”:2025 年首个 PoC 漏洞针对关键 Windows 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247485791&idx=1&sn=a856f6c4d684f19e115d59fc9035e3d0": "ChatGPT Crawler漏洞可以通过HTTP请求进行DDoS攻击", "https://mp.weixin.qq.com/s?__biz=Mzg4NTA0MzgxNQ==&mid=2247489862&idx=1&sn=4b83e533ed54cf2bdf044047eff9bdb9": "『漏洞复现』XXL-JOB 默认 accessToken 身份绕过 RCE 漏洞分析及复现", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247495647&idx=3&sn=735cc5a7d53697ce267d9c016405b7df": "7-Zip高危漏洞,攻击者可绕过安全机制远程执行代码", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580942&idx=2&sn=c68b08970aacfb2f3445a422c4e35b40": "新的 Cleo 零日 RCE 漏洞在数据盗窃攻击中被利用", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527057&idx=3&sn=634fffd60e2e7360134637a74720981b": "Windows BitLocker 漏洞暴露了 AES-XTS 加密", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490017&idx=3&sn=dc5d3eba018ab7577e00f5d983516dd0": "SSRF漏洞简单练习", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489513&idx=1&sn=a4053925c18ddf9d81d07fda3c0ceb59": "【漏洞预警】AdForest <= 5.1.8 — 身份验证绕过", "https://mp.weixin.qq.com/s?__biz=MzUxMjc0MTE3Mw==&mid=2247494909&idx=1&sn=4a1e102c06f1136d8a4b19f56adf8d80": "SonicWall SMA 1000 系列设备面临严重漏洞,亟需立即修补(CVE-2025-23006)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518295&idx=1&sn=29dba99e1641c1bec1e6ff2582d7c277": "记一次SRC挖掘实战|签约漏洞的意外之喜", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553170&idx=1&sn=1787de3c0d1bdd3f4f78fef06cf7ea28": "从靶场到实战--双一流高校多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTc0NDY2Nw==&mid=2247484600&idx=1&sn=59cc623040da7fc41c0ec693eae05f01": "使用WindTerm工具针对IT运维人员的定向钓鱼样本分析", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094681&idx=1&sn=18f3ea0a72637260c73cc9fc9f9fb166": "Windows 文件资源管理器权限提升漏洞 (CVE-2024-38100)", "https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148667&idx=1&sn=d180e4864f7fc7caffe5c5bea0629de2": "【资料】理解监控技术:间谍设备的起源与应用", "https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247493984&idx=1&sn=b8e697fe117a8b2dd2c16cadc819bcd6": "工具推荐 | Redis 漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247518461&idx=1&sn=7e89ac9c9a252422d055ca79f0cb9808": "JS中的漏洞信息", "https://mp.weixin.qq.com/s?__biz=MzI0NjA3Mzk2NQ==&mid=2247495919&idx=1&sn=051e4b8bda3559a6193e38d1dbe2fd8a": "攻防靶场(49):EXP不能用怎么办 Lampiao", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522160&idx=1&sn=1b0f6777dc7235311e5c6a6e6f764ee7&chksm=ea94a61adde32f0c9cccf05c3c8859347555a5487387c861b88ed747bec9b8fc951052a6455b&scene=58&subscene=0": "思科提醒注意严重的DoS漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247489972&idx=1&sn=664772c35844a374fcc1a3e5788dad23": "内网扫描工具Fscan免杀版|漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MzAxMDIwNjg2MA==&mid=2247486181&idx=1&sn=e6544c82c26b0dc320e298bbb1fa97b5": "动态红包封面,限时免费领取(第三波)", "https://mp.weixin.qq.com/s?__biz=MzA5MTYyMDQ0OQ==&mid=2247493538&idx=1&sn=c65b7640d0dd63b357e0138fc10213d6": "保护托管服务提供商及其客户免受网络威胁", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486597&idx=1&sn=4adff9311fb5f458ba301e4c5c226598": "【漏洞通告】通过使用特制文件名导致移动端崩溃(CVE-2025-0476)", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247547524&idx=1&sn=7ac5df0b17b1330bca7210825464a7bb": "某系统webpack接口泄露引发的一系列漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NTY0MjIwNg==&mid=2247485575&idx=1&sn=d70e6f03b4c4364b95475edb267f52e3": "黑客在 Pwn2Own Automotive 2025 第一天利用了 16 个0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094694&idx=1&sn=4585dbd6a2385bcc0d9f83cd29f7b622": "phpMyAdmin 触发 XSS 攻击的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067590&idx=1&sn=32ea96086da2a1f7d7b7c25530ca8d55": "【安全圈】斯巴鲁汽车漏洞让黑客利用 Starlink 远程控制数百万辆汽车", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067590&idx=3&sn=7379d9127186d37af92f08f7a9ced06e": "【安全圈】思科曝9.9分关键权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651312790&idx=1&sn=f164fbd58d9d173bbc7eae3626f9ab40": "斯巴鲁曝关键漏洞,凭车牌号可远程入侵汽车", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651312790&idx=3&sn=83ffd20b9fd4d5d2da935ff3246e1ce6": "美国前中央情报局分析师承认泄露国防信息", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489518&idx=1&sn=4af05b6c62e451e4665c358a9b06bb24": "【漏洞预警】Elastic Fleet Server信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ2NzQ0Ng==&mid=2247484992&idx=1&sn=32c786903ab1ff5e499415b69a5dfc4b": "【再发一遍】新春抽奖开启!与奉天安全团队 & 禾信智安共迎新年好运!", "https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494044&idx=1&sn=356681967a014551977e5051389b8f15": "每周蓝军技术推送(2025.1.18-1.24)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589258&idx=3&sn=1ee9c0b4428aba7d94dead806b1d1cb1": "特斯拉汽车被“重点关注”,Pwn2Own Automotive 2024首日曝出24个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513589&idx=1&sn=1b70e6f4b48c39927bb2af1c0178da71": "知名车企漏洞:只需车牌号,就能远程监控劫持数百万辆车", "https://mp.weixin.qq.com/s?__biz=MzIxNTA4OTI5Mg==&mid=2647712815&idx=1&sn=2d3a1abdb2818d828c34a375ffb93e5b": "安全保障不停歇|嘉韦思与您共度安心年", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486597&idx=5&sn=c423e5a5dd67afe6874eb9335352b8a0": "【漏洞通告】字符串定位器 <= 2.6.6 - 未经身份验证的 PHP 对象注入 (CVE-2024-10936)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486597&idx=6&sn=7ac28eba7ee329dd9cef429fd4088c0c": "【漏洞通告】Podman:buildah:竞争条件导致容器突破(CVE-2024-11218)", "https://mp.weixin.qq.com/s?__biz=MzU2MTc4NTEyNw==&mid=2247486441&idx=1&sn=4531aade32e795be54933b9d3a690c03": "7-Zip高危漏洞曝光", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490019&idx=1&sn=8b0ca8a5667607692018751b2e0db53a": "『漏洞复现』XXL-JOB 默认 accessToken 身份绕过 RCE 漏洞分析及复现", "https://mp.weixin.qq.com/s?__biz=Mzk2NDE3NDUwNg==&mid=2247483890&idx=1&sn=00d4c726f5ef79a6a64b08e5c3bf5cca": "黑客攻防演练!!揭秘Sync Breeze缓冲溢出漏洞利用全过程!?", "https://mp.weixin.qq.com/s?__biz=Mzk1NzQwNjQ4Ng==&mid=2247484665&idx=1&sn=55ab331218ce3316953848bc8a134e19": "缓冲区溢出学习及漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247510279&idx=1&sn=06f1e42da19ca8f8da9668d9ed2ee6e4": "山石入选车联网产品安全漏洞专业库CAVD支撑单位", "https://mp.weixin.qq.com/s?__biz=MzkzNzg4MTI0NQ==&mid=2247485426&idx=1&sn=4b2b9a4778352c4a0791090d92cff7cc": "YongYouNcTool-一款高效利用用友NC系列漏洞检测利用工具", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496940&idx=1&sn=a33f04e5fdb7818531eeda42ebf4b6e7": "通用漏洞挖掘技巧", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067590&idx=2&sn=0963e1001cd7415a1987cb9c33807d8c": "【安全圈】GhostGPT – 黑客用来生成恶意软件和漏洞的新型 AI 黑帽工具", "https://mp.weixin.qq.com/s?__biz=MzAwNDUyMjk4MQ==&mid=2454829223&idx=1&sn=f73e544d3d20c83118c0a09feb410ac7": "安全守护,时刻在线丨永信至诚春节放假通知", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247492083&idx=1&sn=32de1c271310b330793fd3aa20af2213": "VulnNodeApp:一款包含大量安全漏洞的Node.js安全练习平台", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553194&idx=2&sn=3f4629f234882e5f46e5adca2331d21e": "【免费领】新手必备!Web安全漏洞实战入门教程", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651134885&idx=1&sn=1a1ed1ea95fed0e6eb76fe4a39386297": "《智能化安全运营中心应用指南(2025年)》报告暨代表性厂商评估调研启动", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651134885&idx=2&sn=b2ed8f09df9e5f6c4850178ee4311397": "ChatGPT又全球大面积宕机,AI助手暂时\"失联\";斯巴鲁系统漏洞曝光,数百万车辆面临远程解锁并启动风险 | 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5ODI2MTg3Mw==&mid=2649818820&idx=1&sn=b69e6f16ae7e3b9d2c9c6180aaf5045d": "新战略、新生态、新篇章,速来回顾ISC.AI的荣耀一年", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523158&idx=1&sn=bbc5f15525a0e008b85e3497338d48c6": "SonicWall 呼吁立即修补可能被利用的严重 CVE-2025-23006 缺陷", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523158&idx=3&sn=a689073727de3e49818a00ed23a4c052": "新的 Cleo 零日 RCE 漏洞在数据盗窃攻击中被利用", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523158&idx=4&sn=e304292fd5c48e2a5dc5d82c6ddd9302": "新的 UEFI 安全启动漏洞使系统暴露于 bootkit", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522169&idx=1&sn=fce75986029eae4069d3b0638d1202bd": "Oracle 2025年1月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580965&idx=2&sn=35ac8cf9ec1bfacb175b8622720863e2&chksm=e9146d1fde63e40910e314cac61af17533c328067d6bd015df8402266ba7692efae9a049c79f&scene=58&subscene=0": "新的 UEFI 安全启动漏洞使系统暴露于 bootkit", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507077&idx=2&sn=a77c8b230188d7463b5a1fbe504403f6": "5th域安全微讯早报【20250125】022期", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793986&idx=2&sn=5bd96b403c792589e06daa0964fd0cf2": "RANsacked:LTE 和 5G 网络实施中发现 100 多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492144&idx=1&sn=d68efac5403df1daa1950b60e73e5dcb": "漏洞预警 | 7-Zip Mark-of-the-Web绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492144&idx=2&sn=040fc67f0e0e387db31ee307eb136e25": "漏洞预警 | 红帆OA SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492144&idx=4&sn=7e5ef4c1ae5a1491c1a278b161e197d1": "工具 | GeoServerExploit", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247495745&idx=3&sn=d62bd25906c870e0c8433a02109f5b5a": "知名车企漏洞:只需车牌号,就能远程监控劫持数百万辆车", "https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247486058&idx=1&sn=94c417bfac0de38346155df588db3dd4": "MS17-010漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651312806&idx=1&sn=5a40997e2166b5b730a46ae577b831a1": "思科曝9.9分关键权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793986&idx=3&sn=b951bb5b8e3502708e251c22f873a652": "超过 2,000 台 SonicWall 设备易受严重0day漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492144&idx=3&sn=3b364eb801a05419d2b65c14ce311eb9": "漏洞预警 | 通达OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyNTUyNTA5OQ==&mid=2247484704&idx=1&sn=410d5b5fae6bf9431286297a0a2c6170": "【云安全】云原生-Docker(五)容器逃逸之漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067606&idx=3&sn=6473d53d9a207bfac9888ca3a543bbf8": "【安全圈】新的 Cleo 零日 RCE 漏洞在数据盗窃攻击中被利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067606&idx=4&sn=e8ae1a9dfb9fb649575b0d8a5414a82d": "【安全圈】新的 UEFI 安全启动漏洞使系统暴露于 bootkit", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527185&idx=1&sn=e316e52a9c3df272305888245af343f8": "CVE-2024-43451 Windows NTLM 漏洞,允许攻击者使用恶意快捷方式强制身份验证并捕获 NTLM 哈希", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527185&idx=2&sn=67cbf97affd8106486d5097a7d773cf7": "CVE-2024-43468 :通过 PoC 代码揭示 Microsoft Configuration Manager 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589259&idx=2&sn=4356dec55931f1257ae44561ca3f0d3e": "别错过!“系统0day安全”课程,带你精通漏洞挖掘技巧", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490322&idx=1&sn=25c1352e1b349a1302486f7e519f7d5d": "友数聚 CPAS审计管理系统V4 downPlugs 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzg4MTI0NQ==&mid=2247485448&idx=1&sn=5888106f1aed20b020b5c7cf2e2d7d53": "xray图形化工具-Super Xray,支持自定义导入poc库", "https://mp.weixin.qq.com/s?__biz=MzU5NjYwNDIyOQ==&mid=2247484826&idx=1&sn=5f81afa2c8c6ec0ad22c685de58a12d2": "对 404 站点的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499233&idx=1&sn=d7f03a7476f997d37ccdf5683d5a3e67": "内网漏洞自动化扫描工具 -- P1soda", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490021&idx=1&sn=028614c59fd8634bc196652737ddd7a3": "缓冲区溢出学习及漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652317459&idx=4&sn=0d016310221e528e230f05da6f3b14de": "【InForSec 2025年会青年学者论坛回顾】刁文瑞:移动生态安全探索:从系统漏洞到大规模测量", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490331&idx=1&sn=d0bc2a23252891fc43749fa31443df71": "友数聚 CPAS审计管理系统V4 getCurserIfAllowLogin SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247502213&idx=2&sn=a1db79032f510dd21aaa70ed18a597b2": "斯巴鲁惊爆高危漏洞:仅凭车牌即可劫持车辆", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900158&idx=1&sn=808feb817c0f2e6e0f1f47b22abbafd4": "UEFI Secure Boot曝高危漏洞,攻击者可加载恶意Bootkit", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487289&idx=1&sn=16adb2a76b5d959090618ddd2b43dd22": "漏洞挖掘 | 渗透测试之批量刷洞技巧", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247504828&idx=1&sn=14cdbec7967d6e5cb772d6a762a5471f": "一款免费的APP IOS抓包工具 支持Flutter应用抓包|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607310&idx=1&sn=fd7cbe9d4363d477ead1d88c79cddbc6": "思科曝9.9分关键权限提升漏洞;|知名车企漏洞:只需车牌号,就能远程监控劫持数百万辆车", "https://mp.weixin.qq.com/s?__biz=MzAwOTczODMxMw==&mid=2651017526&idx=1&sn=e452849723ece70271aac0e8c9bba31e": "携程SRC漏洞贡献值排行榜奖励揭晓", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651134990&idx=2&sn=58403bc9b1f187d4eeb8a0040555e426": "航空防务公司Stark被曝遭遇勒索攻击,4TB机密数据疑被窃取;华硕意外泄露AMD处理器漏洞,补丁被提前公开 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI2NTUyODMwNA==&mid=2247494146&idx=1&sn=f92e0740e89d5b79e20ba17ee33efbcf": "ChatGPT在漏洞管理中的创新应用", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490023&idx=1&sn=846a609d96c5cc54f73d7ed7607539ec": "【云安全】云原生-Docker(五)容器逃逸之漏洞利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313204&idx=3&sn=af9e7adb9e7886cc3ec234d15e060a0d": "Pwn2Own Automotive 2025落幕,累计成功利用49个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652317461&idx=5&sn=7becd6dc617d0acb19f79e2562a68616": "【InForSec 2025年会顶会论文回顾】刘沛宇:探究 ChatGPT 在漏洞管理任务中的能力", "https://mp.weixin.qq.com/s?__biz=MzkzODc4NjE1OQ==&mid=2247483918&idx=1&sn=54c42da49fd35bed728491560deb1a6c": "简单的反调试技术实现", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527239&idx=1&sn=9121f5406d8c67b5a55ce5549891886d": "Spring WebFlux 授权绕过:CVE-2024-38821 详解", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247489833&idx=1&sn=3d00b164b7af585d9c5ea5877e41b19e": "子域名劫持漏洞高阶利用:从发现到利用完整攻略", "https://mp.weixin.qq.com/s?__biz=MzA4MzMzOTQ4Mw==&mid=2453672529&idx=1&sn=cdc7f3d0c6553b9b1c05425ba64820b9": "紧急告警!Meta Llama框架漏洞,AI系统面临远程代码执行风险", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488723&idx=1&sn=b6dcde79af26f7316bf47c73990a2c54": "WordPress CF Link Shortcode 插件存在前台SQL注入漏洞(CVE-2024-12404)", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651134996&idx=2&sn=82356d56bcca2787f9016513ed4f3cbf": "LTE和5G网络实现中存在119个安全漏洞,可导致大规模通信中断;调查显示:仅7%受害者在支付勒索软件赎金后成功恢复数据 |牛览", "https://mp.weixin.qq.com/s?__biz=Mzg4MzY2NjEyMQ==&mid=2247485954&idx=1&sn=4afd6ee87cbe00a5909abfde0103953f": "Oracle MySQL Server 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247485569&idx=1&sn=dcdcc1a80c070b6685ae6bd051bc0450": "一次混合双打出来的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507117&idx=2&sn=2b0142722d4a7ab4ac2d0536274592ce": "5th域安全微讯早报【20250127】023期", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484311&idx=1&sn=009372da290f38f7bc6ff482b95c7429": "锐捷EWEBauth远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794002&idx=3&sn=54c10d70c6a93ada65ccf73b58cd558d": "思科修复 ClamAV 拒绝服务 (DoS) 漏洞,专家警告称概念验证 (PoC) 漏洞代码可用", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495739&idx=1&sn=70bff0dcfddcafcf645feed59f012888": "CNVD漏洞周报2025年第4期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495739&idx=2&sn=c1eb11a7df482ea02fe0bb114eaa29bc": "上周关注度较高的产品安全漏洞(20250120-20250126)", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523229&idx=2&sn=596a96b2b96c941baeb9a5420fc9bbc2": "GitHub漏洞允许恶意仓库泄露用户凭据", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523229&idx=4&sn=fae6c9befec51a70547603cfc08bdd67": "LTE和5G基础设施中的100多个漏洞导致远程核心泄露", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247489846&idx=1&sn=e482f93c982f9f2c47febe82748759f6": "一个URL参数就能黑掉整个网站?这个漏洞价值10万美金", "https://mp.weixin.qq.com/s?__biz=MzkzMDQwOTg3OQ==&mid=2247484703&idx=1&sn=6ceac299607701f6e5dd0becc89a12d2": "DrayTek Vigor3910 CVE-2024-41592分析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313205&idx=4&sn=fd39b2e5339a4dbd516501e208e06b3e": "pwndbg:一款专为安全漏洞分析设计的GDB插件", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484429&idx=1&sn=d365c76773989b993a162b0224f21e0f": "紧盯风险,防治漏洞:七步闭环", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247491776&idx=1&sn=4e17c660387c6776b88e397c64e7ed57": "运维风险管控、数据安全规范普及与漏洞情报处置:技术与管理并重的综合策略探讨。|总第278周", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523229&idx=3&sn=741cf9ea3ae359cfcb2e7cafb292b025": "Kubernetes 集群远程代码执行漏洞致攻击者可接管所有 Windows 节点", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527322&idx=3&sn=e655cc619c0bfa0ab8a7f45ea8a2c268": "Spring WebFlux 授权绕过:CVE-2024-38821 详解", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247635825&idx=1&sn=555c70635c9b65303fc907c0c7427c1b": "人物丨悬镜安全张弛:解密悬镜二进制SCA技术背后的黑客大佬", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620209&idx=1&sn=62fb4f6d697fbc3aeae44911bc309fa8": "车载协议网络安全测试与验证技术", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496957&idx=1&sn=5ef897f46f3bf16bce1a83b45b0611c3": "通过js进行模糊测试所拿到的一次五千漏洞赏金记录", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499246&idx=1&sn=b3c64fa121a3bfdd8b381159735fd815": "某se同综合漏洞利用工具 -- YisaiExploitGUI", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515718&idx=1&sn=b836eef1f80fe69810dabd336bf5c931": "调用 KIMI AI 进行自动化越权漏洞检测的工具 -- PrivHunterAI", "https://mp.weixin.qq.com/s?__biz=MzU0MDc5ODM0Mg==&mid=2247484778&idx=1&sn=9669504997ac29232f840c90dc143100": "企业网络安全文化建设必备(2):Gartner PIPE(实践|影响|平台|使能)框架", "https://mp.weixin.qq.com/s?__biz=MzU4NDc2MzcwNw==&mid=2247498579&idx=1&sn=90378659a5745a0dccd8ea5617989cfe": "信长星看望慰问院士专家", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484318&idx=1&sn=75bde6101010cd8a3e7efe80dd449ef8": "74cmsRCECVE-2024-2561", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485552&idx=1&sn=4f12fa7c096f587688a8f217b3b38267": "fastjson1.2.24 1.2.27漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494549&idx=2&sn=a31765a36a10d95d268b4f4b4c244eee": "多个 Git 漏洞导致凭证泄露", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5Mzk2OQ==&mid=2247486395&idx=1&sn=50dc41dcfced9c9468c1ca4bc8a25dee": "原创工具|Venom-JWT渗透工具 - 针对JWT漏洞和密钥爆破服务渗透测试", "https://mp.weixin.qq.com/s?__biz=MzkzMDg1MzIwNA==&mid=2247487259&idx=1&sn=d2c93ec1be08ddb9cef647f750e66c51": "【burpsuite靶场-服务端2】身份认证漏洞-15个实验(全)", "https://mp.weixin.qq.com/s?__biz=MzIxMDYyNTk3Nw==&mid=2247515161&idx=1&sn=3f2f882686de333d655eeacd52bf2dbc": "白帽一百祝大家除夕快乐 | 文末抽奖", "https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649766494&idx=1&sn=dec3029bc7658feff85b8fde230df8c3": "春节放假通知 | 漏洞盒子祝大家蛇年大吉!", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489191&idx=1&sn=97236ff45aedf7c7abef4a24f63ba8d6": "Nuclei GUI POC管理工具", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485788&idx=2&sn=59c472cfeb94443cf01846cf6bdb45b5": "CVE-2025-21535|Oracle WebLogic Server远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzg0NDkwMw==&mid=2247493212&idx=1&sn=d5ff49e83b16adba13a2b353720f5f6b": "DeepSeek崛起背后的暗流:全球AI技术博弈下的DDoS攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496966&idx=1&sn=c49dbe1213cb5a1afa836901e2c13038": "0day 挖到手软,403 到 getshell", "https://mp.weixin.qq.com/s?__biz=MzU0NDI5NTY4OQ==&mid=2247486261&idx=1&sn=a99fd42137a2c3a4e337746ba8d1c4d7": "新年记", "https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247516969&idx=1&sn=808e750d8993693d7aa298868f1d68f8": "赛博研究院祝您新春快乐!", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494577&idx=2&sn=2a3b9a9481760f2c54d584ed72cf307c": "苹果修补了 2025 年首个被利用的 iOS 0day(CVE-2025-24085)", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247547532&idx=1&sn=a25d3179451f39184a2c2306e222d2f5": "记一次SRC利用github搜索拿下中危漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527357&idx=3&sn=a9547ba6b29ff579585ca08ae6e20652": "零日漏洞正在推动 Fortinet 防火墙攻击(CVE-2024-55591 已确认)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODc1MjYyNA==&mid=2247483866&idx=1&sn=b4a7b1a90b8624e68c8e4106eccd2de9": "原创工具|Venom-JWT渗透工具 - 针对JWT漏洞和密钥爆破服务渗透测试", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499276&idx=1&sn=bae5736b9b7a493bc7f7c7f55d540b39": "跨平台漏洞扫描器 -- EZ(V1.9.2)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492127&idx=1&sn=31c2fc46637844b4f512ae831dc989f1": "W3 Total Cache 插件漏洞导致 100 万个 WordPress 网站遭受攻击", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620239&idx=1&sn=f618950670cfc9c09175456bfcc15191": "扩展 SAE J1939 的攻击场景:传输协议中已建立和新的漏洞的综合分析", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488743&idx=1&sn=6012eb58be312daa5822e88d4cdb7630": "【代码审计】RGCMS 2.0 存在 phar 反序列化RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485440&idx=1&sn=bd01dcfd0a6df81151e8df8c374c6695": "【项目推荐】PDF FUD 漏洞利用", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488775&idx=1&sn=2b8f2e1154eb0de5e1422589ee7b4f95": "DeepSeek 数据库被攻击,国外团队已公开披露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MDY2NTY5Mw==&mid=2247485665&idx=1&sn=ce7d065feabad43d7bd144eb57ba1115": "可能这就是你deepseek无法访问的原因——deepseek 漏洞(已修复)", "https://mp.weixin.qq.com/s?__biz=MzkzNjczNzEyMw==&mid=2247484157&idx=1&sn=597aa22f30bf086e39d157e7ba9082ad": "(吃瓜)刘农TV之渗透中遇到的神人运维", "https://mp.weixin.qq.com/s?__biz=Mzk0NTg3ODYxNg==&mid=2247485094&idx=1&sn=300233e404ea534282f994bd51e38594": "越权漏洞实战漏洞报告", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247547534&idx=1&sn=89f840ad1397911a18d5776cb54ed32c": "代码审计 | 如何获取CVE漏洞编号", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515759&idx=1&sn=e9782fc3eeea1a312412a0e67944247e": "xxl-job漏洞综合利用工具 -- xxl-job-attack", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607338&idx=3&sn=d40fb23bebe952ee4310c3f5c51349a0": "瑞斯康达智能网关命令执行漏洞简单分析", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498569&idx=1&sn=a273094850e815c5dccaf5c9fbb7956f": "收藏 | dotNet安全矩阵 2024 年度目标权限维持阶段文章和工具汇总", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496981&idx=1&sn=1b88708a474086d96cf22a9428c93835": "深入浅出API测试|搜集分析与漏洞挖掘实战", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247489853&idx=1&sn=080eaada0f65b07415f5e8a922bfb1ad": "网络安全不是一场漏洞游戏", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247504783&idx=1&sn=0b286a996a793e420114b78a4ab28260": "如何找到更多漏洞赏金的子域?深入了解 Recon", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500544&idx=1&sn=ebf9f3fcb46a7bcadad135da1b6e8fd8": "DeepSeek 数据库未授权访问漏洞,导致大量数据泄露", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313290&idx=2&sn=44a6a38890bbe1cf23af0cb8162a8362": "新的“双击劫持”漏洞绕过主要网站上的点击劫持保护", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313290&idx=3&sn=c9beec9c5ce5078f2a7e260af8dc140f": "虚假PoC漏洞利用正用来攻击研究人员", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487416&idx=1&sn=3071e9e82d12510b732a50c8e22cd596": "Java反序列化漏洞 | Fastjson反序列化漏洞原理+漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485185&idx=1&sn=b8349c313ac09f29240c61f055433ddd": "CVE-2024-49138 poc windows CLFS.sys提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493840&idx=1&sn=3482149c0823f566085f61a99735ad9e": "哥斯拉二开从0到1-2(免杀)", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484326&idx=1&sn=ec20d154a16e5fff47cb40da8080cff7": "WVP-GB28181摄像头管理平台user信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607360&idx=3&sn=cac10cb8e85c07f523764294668f4fec": "经典华为路由器漏洞复现详细分析(包括整个漏洞链)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODYwNjI1NA==&mid=2247484093&idx=1&sn=368784930a6a478e041b84cfcb1d463a": "【安全预警】明源云ERP报表服务GetErpConfig存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247492552&idx=1&sn=402d5fb57f89d62a333008877fafe951": "告别命令行!DeepSeek本地运行可视化指南:从安装到交互界面实战", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515803&idx=2&sn=0e8d3509ce68e9d3c751586e26ea08c5": "APP渗透测试 -- 支付逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492129&idx=1&sn=a7625b1a910086ee3bbde9544f055382": "新的 UEFI 安全启动严重漏洞,请立即修补", "https://mp.weixin.qq.com/s?__biz=Mzg3Mzk2MzA3Nw==&mid=2247483863&idx=1&sn=3bad3dd3b64d3812fb4640e91bdf52ea": "创新终端主动防护-多种通用0day漏洞检测方案", "https://mp.weixin.qq.com/s?__biz=MzkzMDg1MzIwNA==&mid=2247487295&idx=1&sn=1d68a219fec3a01ea84c598bf48811fe": "【burpsuite靶场-服务端3】目录遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655264930&idx=1&sn=0a275a5bf702dc56d6a9f833e7aeacdf": "数字取证之数据分析‌", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607379&idx=2&sn=1a33bc4a7ac127d883ebe4a69affe12b": "新的“双击劫持”漏洞绕过主要网站上的点击劫持保护", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485618&idx=1&sn=83cfbd2aab32a9e8073abb2cd983f27d": "Log4j CVE-2017-5645反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDY5OTg5OA==&mid=2247493360&idx=1&sn=ac3879690699a5af38b6a86f1cf232a2": "Pwnkit:CVE-2021-4034", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313321&idx=1&sn=0d6cfa7efe94cdf992cd2dcb49139048": "时间强盗漏洞:ChatGPT绕过敏感话题安全防护", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313321&idx=3&sn=2d401e6e743d4029238b04acea892e1b": "OWASP发布2025十大智能合约安全漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313321&idx=4&sn=87670a1665432dda01a0ca651d6f847a": "卡巴斯基公布奔驰汽车十几个漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037464&idx=1&sn=439f05b2a2f5523c148d07a794aff60a": "Android Intent 重定向漏洞分析总结", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527447&idx=2&sn=0ab2f693c54ddb608b553da95edaa698": "CVE-2025-0065:TeamViewer 修补 Windows 客户端中的权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589300&idx=2&sn=e9f874ab1024ce5d7a8a2a424b891a7f": "关于PAN-OS DoS(CVE-2024-3393)的研究", "https://mp.weixin.qq.com/s?__biz=MzkxOTYwMDI2OA==&mid=2247484342&idx=1&sn=fbf99114ba0a7734a34ca35d09047003": "[靶场复现计划]CSLAB Thunder", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247485684&idx=1&sn=ca0044c1a5698a1a8bad3d17b325b3a4": "Zyxel CPE 设备遭遇大规模攻击:关键漏洞(CVE-2024-40891)仍未修复!", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607394&idx=1&sn=387b2dc9dd6ebd7d27288d882c5d9832": "时间强盗漏洞:ChatGPT绕过敏感话题安全防护", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607394&idx=4&sn=d21b7373ba4514475e76fc1e86673954": "Burpsuite存储桶配置不当漏洞检测插件", "https://mp.weixin.qq.com/s?__biz=MzU2MTc4NTEyNw==&mid=2247486459&idx=1&sn=bdb973718eb5b746ffb36010c1126ab7": "【oscp】SickOS系列全教程", "https://mp.weixin.qq.com/s?__biz=MzkxNzY2MjU2Mg==&mid=2247483819&idx=1&sn=f720e0623daf07c7838527d03dce27e1": "FUZZ出来的一系列漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247549670&idx=2&sn=5f3fb6a0f0d849bdcf52c3b088620c0e": "揭示AUTOSAR中隐藏的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515830&idx=1&sn=e5a9baf92665cd050d7e003448c06174": "帆软bi反序列化漏洞利用工具(V3.0)", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247504845&idx=1&sn=8c8fa9f474d370a021e30aa8209268ac": "500 美元的漏洞:Censys 搜索如何引导我获得快速漏洞赏金", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487001&idx=1&sn=eaae88e6f2b15e26732ca6b90fb5ca69": "Active Directory Domain Services 权限提升漏洞 (CVE-2025-21293)", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499318&idx=1&sn=96bfdd5cb231800f2140600f3986e952": "Redis 漏洞利用工具 -- RedisEXP", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527501&idx=2&sn=737f8a4b724e5ff7d00edcdeb03128cb": "dde-api-proxy:Deepin D-Bus 代理服务中的身份验证绕过(CVE-2025-23222)", "https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247488439&idx=1&sn=98793685608a483e27976abf658cb08f": "微软惊现「零点击」核弹级漏洞!打开邮件就中招?", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313430&idx=2&sn=7388f9c978f61ad866c97f57c21abe6f": "2025年AI网络安全预测", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247547538&idx=1&sn=2de25baa764188f0bd83a351248a40c5": "漏洞挖掘 | 基于mssql数据库的sql注入", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615413&idx=1&sn=363d6567bfa41a8f33e272e1185da50a": "通过计算机视觉帮助发现隐藏的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247485686&idx=1&sn=6ad3015e97dc52bd69dc9921b81a5f9c": "AI驱动API漏洞激增1205%,企业安全面临空前挑战!", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313430&idx=4&sn=6e74cf5e7a16522cf7f639a52c3789c7": "微软披露macOS漏洞CVE-2024-44243,允许安装Rootkit", "https://mp.weixin.qq.com/s?__biz=MzkzMDg1MzIwNA==&mid=2247487335&idx=1&sn=c230b1063e5abc07d7a340d33329a10e": "【burpsuite靶场-服务端4】命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494738&idx=1&sn=f776c6f5b2c8fbd315f6a6fbb4e83658": "联发科发布公告CVE-2025-20633可能导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NDM1OTM0Mg==&mid=2651053429&idx=2&sn=52ca024a6e40c3b8bfa8aee1ae304c03": "SecWiki周刊(第569期)", "https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247516498&idx=1&sn=e9790d235440fdc1e5d82fbb21a2ff57": "大年初六 | 辞旧迎新,送穷迎福", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484330&idx=1&sn=8558bf04848af41f0e0f56123fc3ae5d": "日产聆风电动汽车(Leaf-EV)-2018款本地拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494743&idx=1&sn=fd996eb0f9965aed32ada28ebd0e09a3": "网络安全中的人体视角类比图", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498718&idx=1&sn=0bbf3d272f4c72302d21c151106a9275": "最后一天福利 | 2024年度WebShell专题、内存马技术、反序列化漏洞文章和工具汇总", "https://mp.weixin.qq.com/s?__biz=MzkzMTY0MDgzNg==&mid=2247484086&idx=1&sn=cbe0ea15a1e147e99ce09cbc695027cf": "cURL作者怒怼CISA漏洞评级——CVSS已死", "https://mp.weixin.qq.com/s?__biz=Mzg3NTY0MjIwNg==&mid=2247485604&idx=1&sn=7af7078f51ceb95c8c158ffe8245f066": "GitHub Copilot 越狱漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037469&idx=1&sn=aef7ec48f7f73fb2e4636d85c66b59f2": "从SkyWalking历史漏洞学习h2db注入利用", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487542&idx=1&sn=c93b83f06a03d6a97c751abe0a6f99bd": "漏洞挖掘 | 从零开始的路由器漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506086&idx=3&sn=3ef7426560d405d2dd89587e5bb876e1": "【焕新领先】捷普漏洞扫描系统", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527545&idx=1&sn=245f83f5ca6897c7478765b67f6dc5c9": "TRAVERTINE (CVE-2025-24118) macOS 内核中存在绝对疯狂的竞争条件", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487044&idx=1&sn=0c652e63de486d897bafd5a9adfdd016": "Docker API 漏洞利用实战:构建一键式远程代码执行(RCE)链", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247547540&idx=1&sn=7394f6726bf7ce83ddc5e376d3895a7d": "记一次网上阅卷系统漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313472&idx=1&sn=2810e4a377d48e43544c74ac7a2e49e2": "2024年CVE漏洞数据回顾:漏洞等级正在被重塑", "https://mp.weixin.qq.com/s?__biz=Mzk0NzM4NzI1MA==&mid=2247486241&idx=1&sn=42301175cbc8633a71f78d3d218df92b": "无点击钓鱼?微软超高危RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247570696&idx=1&sn=9cc57dc2e85ffaab5367dae31cdb200e": "5款常用的漏洞扫描工具,网安人得会吧~", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499349&idx=1&sn=3656fc6944176d2af4d9b3900b3d897b": "jeecgBoot漏洞利用工具 -- jeecgBootAttack(2月1日更新)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493428&idx=1&sn=47039c762156ca739f4badbe020d9d88": "帆软bi反序列化漏洞利用工具更新V3.0", "https://mp.weixin.qq.com/s?__biz=Mzg4MDYwNDc5Nw==&mid=2247486597&idx=1&sn=883c0b328f0619d96e93697b90252de7": "俄罗斯网络犯罪团伙利用7-Zip零日漏洞攻击乌克兰", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900163&idx=1&sn=e0d9d8eb42685d661a0731fa5c7b89a4": "420万台主机面临安全风险!VPN、路由器等设备因隧道协议漏洞暴露", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507284&idx=2&sn=9b36d26dd2b9fe39250305eb1bc2500d": "五眼联盟发布网络边缘设备安全指导,强调取证可见性", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523273&idx=1&sn=93b3e227d4fa9991192622539f963393": "谷歌修复安卓内核零日漏洞,攻击者已利用该漏洞发起攻击", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523273&idx=3&sn=7f4bba28b5ae9d5b82a1b6fbe59203af": "以色列间谍软件公司Paragon涉嫌利用WhatsApp零点击漏洞发动攻击", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519424&idx=1&sn=fdbc725551179d2861feca5472776053": "基于DeepSeek AI 代码审计漏洞 v1.0上线!可本地ollama调用 | 工具", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260527&idx=1&sn=eb0df8daaf5798cb9fae2b60346a8e8a": "GitHub Dorking 高级利用-更多自动化、更多发现【部分】", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499626&idx=1&sn=05db5599f68bac92168ecdfd9fd60e6e": "CNVD漏洞周报2025年第4期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499626&idx=2&sn=ee9c229cecafd1cfe426dce51fc7d03a": "上周关注度较高的产品安全漏洞(20250120-20250126)", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037473&idx=1&sn=2e6b2a606dfad6754a67fd146cea44c0": "自动化软件漏洞利用技术研究", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247502226&idx=1&sn=b9a3524d17296a87a51d12ae983b2caf": "首款色情应用登录苹果第三方应用商店", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484347&idx=1&sn=828e443845536de2ad0b2be8f4b236c5": "【漏洞复现】锐明技术Crocus系统存在任意文件读取", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484342&idx=1&sn=8fe6f034b3a56ecadd6473c3b09f87dd": "【漏洞预警】招标采购平台存在未授权访问", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607416&idx=4&sn=160178c5674fef2239d1035bb05aacaa": "sqlmap Xplus 基于 sqlmap,对经典的数据库注入漏洞利用工具进行二开!更新V1.6", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484508&idx=1&sn=b705f461a428d8aa34a7aebce836857c": "【漏洞复现】锐明Crocus系统存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794057&idx=1&sn=d2e030673abaffe0a3cbfe291ebcaabb": "7-Zip MotW 绕过漏洞被用于针对乌克兰的0day攻击", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498740&idx=1&sn=16729f4e599a69352876c7c8cc33cbfa": "2025 持续防范 GitHub 投毒,通过 Sharp4SuoExplorer 分析 Visual Studio 隐藏文件", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615426&idx=1&sn=8445d2d2086336110de24023dea94d56": "一次OSS存储桶的任意数据上传挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486115&idx=1&sn=cb43122e33f4dbdf63f15667bda204bb": "7-Zip漏洞遭俄罗斯黑客利用,乌克兰多个政府组织中招!", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484459&idx=1&sn=d14e0510f2c328f0e763085ebef123e6": "安钥®「漏洞防治标准作业程序(SOP)」征文启示 [2025年第5期,总第23期]", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484459&idx=2&sn=19045ae24ac7fcbb4a3334e2855ac1cb": "Apache Commons Fileupload拒绝服务漏洞(CVE-2023-24998)处置标准作业程序(SOP)", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484459&idx=3&sn=ab11543dc260ae956c905b66c6d0309e": "入选作品公布|安钥®「漏洞处置标准作业程序(SOP)」征文第二十期", "https://mp.weixin.qq.com/s?__biz=Mzk0ODYwNjI1NA==&mid=2247484094&idx=1&sn=15ab769c5bdec630c5d45746069bb451": "【安全预警】浪潮HCM-Cloud云端专业人力资源平台存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247485688&idx=1&sn=ad305e3624e600a9b92530845df693e7": "警惕!黑客利用政府网站漏洞发动钓鱼攻击,全球多国受害", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494810&idx=4&sn=d8efe231b9677487c664e9170885c0e6": "7-Zip MotW 绕过漏洞被用于针对乌克兰的零日攻击", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094719&idx=1&sn=7d28abba5e5d0dd7e155f731b46609f1": "NVIDIA GPU 显示驱动程序漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094719&idx=2&sn=fbf9de723d3bf2f725af407784b81600": "Apache Cassandra 漏洞允许攻击者远程访问数据中心", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067643&idx=3&sn=15fafdc5115ba7e7a871e108304d8284": "【安全圈】Pwn2Own Automotive 2025 黑客因破解 49 个零日漏洞获 886,250 美元奖励", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503038&idx=1&sn=d8681f45d398c0b71d0e3f6e2ce77b43": "【水文章】记录漏洞提交半自动化脚本完善日记", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247546844&idx=1&sn=c69142cbb064f731d7da8241c307ebc5": "新岁启新程 携手共奋进", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589307&idx=2&sn=1e8443c86a1b26b4a73e6078462430a8": "紧急提醒!Netgear 路由器高危漏洞来袭,速更新固件!", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247488981&idx=1&sn=d78b34f028d95c7af7b084c6561c79ef": "Git交互式凭证提示和凭据重定向漏洞CVE-2024-50349 CVE-2024-52006", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489186&idx=1&sn=db9532a3b205fcb2f4b41bca0f65c25f": "支付安全堡垒中的隐藏漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067643&idx=4&sn=cee4f0162f4215b03faa784f2a08ca29": "【安全圈】以色列间谍软件公司Paragon涉嫌利用WhatsApp零点击漏洞发动攻击", "https://mp.weixin.qq.com/s?__biz=MzU1OTc2MzE2Mg==&mid=2247489362&idx=1&sn=1c32dc4896be7f5c2357a63ac383bbc8": "【安全月报】| 1月份因漏洞、黑客和诈骗造成的损失约为9800万美元", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492134&idx=1&sn=68d59f072d4a1ef49284ec15f0c3b1df": "全球超过 660,000 个 Rsync 服务器遭受代码执行漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500584&idx=1&sn=4654aab4518633538b330c38c3e6b796": "deepseek官方API太卡?DeepSeek本地部署+代码审计,漏洞都是捡的", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251295&idx=1&sn=911b7c9c3f819ea69b1a9439f65f1d66": "AMD SEV 漏洞允许以管理员身份恶意注入 CPU 微码", "https://mp.weixin.qq.com/s?__biz=Mzg3NDI0MjEwMQ==&mid=2247483769&idx=1&sn=21ca6a1aabb318353828f506e939abb4": "kkFileView漏洞不出网任意文件写入利用", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037474&idx=1&sn=f6d98a8574505e387e426f85daf263af": "DCCE MAC1000 PLC漏洞测试总结二", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487600&idx=1&sn=0a049efc835c9a359c81625e4b8cf46e": "漏洞挖掘之再探某园区系统", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607513&idx=3&sn=e24eb929a25fa3b7151efa46c423cc78": "实战 | 微信小程序EDUSRC渗透漏洞复盘", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607513&idx=4&sn=a731ed25e18ec4af0a94055c31d72dc8": "帆软bi反序列化漏洞利用工具更新V3.0", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486221&idx=1&sn=b75de0fe4053df9c09fac3b2a0213225": "记录某次APP漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247494918&idx=1&sn=03e864f459539fba30b9d52cb597b5b4": "【真0day】Microsoft Sysinternals 工具中存在0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMDMwNDgwNQ==&mid=2247485642&idx=1&sn=317337ad87d8d251fcf5450748bf9ba8": "使用deepseek进行代码审计漏洞挖掘?", "https://mp.weixin.qq.com/s?__biz=Mzk0MTMzMDUyOA==&mid=2247505159&idx=1&sn=d81474c4e593f7aa9911972823f7daec": "塞讯验证:深度融合 DeepSeek 的智能安全验证平台", "https://mp.weixin.qq.com/s?__biz=MzI5MTIwOTQ5MA==&mid=2247487658&idx=1&sn=d11c6a0dad408e036ecea7ec2966cde6": "同学,XXE漏洞了解一下", "https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166964&idx=2&sn=983c68b88d2253701787315bd8a0d7b8": "7-Zip零日漏洞在俄乌战争中被利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313611&idx=1&sn=fbf2b63c67773103862ba5354d21830d": "带挖2分钟即出高危,百万赏金猎人手把手教你「白嫖」漏洞!", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313611&idx=3&sn=763b74488aea13f582afe4569f509ecb": "思科披露两个严重的身份服务引擎漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDY5OTg5OA==&mid=2247493381&idx=1&sn=bacc6fa41203d864fe4f84936591daa1": "HVV实战课程与超值福利", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247490855&idx=1&sn=f8ca3ac2fc8c66964e2e804151edac61": "带挖2分钟即出高危,百万赏金猎人手把手教你「白嫖」漏洞!", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247549887&idx=2&sn=085448ab37990cc08993cdc91a7bc226": "基于DeepSeek AI 代码审计漏洞 v1.0上线!可本地ollama调用", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135004&idx=2&sn=c7edbd6741477e964cbf32f7a36b481c": "Elon Musk团队操作引发美国政府数据安全危机与网络安全漏洞担忧;2024 网安(亏损)TOP 10 | 牛览", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484357&idx=1&sn=f36d725c4e0484477e42c7b751928f06": "CNVD通用证书挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzIzNjU5NDE2MA==&mid=2247490189&idx=1&sn=632f39f8a483a0fe087fb72709ad5dbc": "Grafana 已全面支持 VictoriaMetrics 体系", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247492891&idx=3&sn=74378d5069b53fe871a0f1321d3eb2b5": "上周关注度较高的产品安全漏洞(20250120-20250126)", "https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486128&idx=1&sn=5640e3bb0a6d9bdb06ed46373ae846a4": "DeepSeek用户警觉!恶意软件假冒AI工具入侵存储库", "https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247505379&idx=1&sn=e616f20194786540969e94f4ecefea82": "美政府8000+网页被“抹去”,“信息大清洗”背后有何隐情?", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527578&idx=3&sn=ac7c228a980a068f3b279650215a6152": "CVE-2025-24118:macOS 中的竞争条件漏洞可导致任意凭证获取", "https://mp.weixin.qq.com/s?__biz=Mzk0NzM4NzI1MA==&mid=2247486253&idx=1&sn=a49bda6cf802802fa854206a54ebb938": "Solr 文件上传路径遍历漏洞(CVE-2024-52012)", "https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247492400&idx=1&sn=5c7dc308f10f7c382d3ed8bb0be0ba5f": "没想到,“漏洞”竟然比“脆弱性”小太太太太多!", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489535&idx=1&sn=b3da75dbb9a3a6cd24e4da4308d06cca": "【漏洞预警】libxml2代码执行漏洞(CVE-2022-49043)", "https://mp.weixin.qq.com/s?__biz=MzU5Njc4NjM3NA==&mid=2247496231&idx=1&sn=144e76f1d7add444a1f7e0c82a0ce9a8": "OWASP发布2025十大智能合约安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484341&idx=1&sn=62cf45b5a2524acde5199aca80e542f4": "好视通云会议upLoad2.jsp文件任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515895&idx=2&sn=1e563e94b277c1fa42e577f6bcca38fd": "APP渗透测试 -- janus漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499368&idx=1&sn=a994edf96eccc4c4f6252b01f25668c6": "xss漏洞挖掘插件 -- Jssx(2月6日更新)", "https://mp.weixin.qq.com/s?__biz=Mzk2NDE3NDUwNg==&mid=2247483957&idx=1&sn=2ad699a3f2895d566eab7c2bb52f925e": "实战缓冲区溢出漏洞攻击:从信息收集到成功提权", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490217&idx=1&sn=507f8b70b295803eb96f084dd6f0b379": "思科修补启用 Root CmdExec 和 PrivEsc 的关键 ISE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490342&idx=1&sn=f4533ea13d5504bd9c65988afc062689": "安科瑞环保用电监管云平台 GetEnterpriseInfoY SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487601&idx=1&sn=4b10692d978eebaeddabd829e22c0c60": "实战 | 微信小程序EDUSRC渗透漏洞复盘", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ5MDM3NA==&mid=2247488330&idx=1&sn=df35169ec817642389ae70f8e6bdb924": "小技巧 - 文件读取漏洞原来也这么严重", "https://mp.weixin.qq.com/s?__biz=MzkyNDYwNTcyNA==&mid=2247487402&idx=1&sn=5098a7c4ed62e8c58fb26046ff5b6a41": "【漏洞复现】XXL-JOB-Admin 前台api未授权 hessian2反序列化", "https://mp.weixin.qq.com/s?__biz=Mzg2MTg2NzI5OA==&mid=2247484903&idx=1&sn=b11f2f96c0bedc1b456fc48d98e68188": "实战如何通过Druid提升至高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794086&idx=2&sn=271029c6e35f86eee8224f862ac34c8f": "微软Sysinternals工具中的0day漏洞允许攻击者对Windows 发起 DLL 注入攻击", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247490422&idx=1&sn=9e05b648524bd832b5f1a3e20fb67c77": "codeql 之 SSRF 漏洞自动化 寻找", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486523&idx=1&sn=f0c21970b06ddddfdaea1feb43fdd4e2": "实战如何通过Druid提升至高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDYwNDc5Nw==&mid=2247486601&idx=1&sn=9246562802f2add62594bf3316bd09ef": "如何通过漏洞管理避免被攻击:组织的应对之道", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484468&idx=1&sn=7aef03abb5647fd09257c0c90aa2659a": "01 漏洞从哪里来?——综述", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492179&idx=1&sn=fe28986085d4baab58d0589cb204bfea": "漏洞预警 | Cisco ISE反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492179&idx=3&sn=02795d96b61494f550efb00f94b9931b": "漏洞预警 | 泛微E-Cology信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493505&idx=1&sn=43863913422ebc87a720632851afd46c": "XSS漏洞挖掘插件", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486970&idx=1&sn=3c3508dbc9a2c2a77db16909ac542f54": "Ivanti Connect Secure栈溢出漏洞(CVE-2025-0282)分析与复现", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500683&idx=2&sn=cc194056e905ff1a83543dc27fff20ae": "【漏洞通告】Go Darwin 构建代码执行漏洞(CVE-2025-22867)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500683&idx=3&sn=b8571e991f337df62bddb6152c26b658": "【漏洞通告】Apache James拒绝服务漏洞(CVE-2024-37358)", "https://mp.weixin.qq.com/s?__biz=MzIwMjE2NTM5Mg==&mid=2247485475&idx=1&sn=274fbf94e0436d90e770974fd38f57cd": "实战登录框漏洞测试", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490352&idx=1&sn=1f18084ae697169a41ce41e8164b399b": "赛诸葛数字化智能中台系统 login SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488889&idx=1&sn=32ce7e8b631ad9bdbb746484d4a5ec62": "某渐变头像合成网站系统存在任意文件上传漏洞(RCE)", "https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247532996&idx=3&sn=1d02961a612db601d05420c562deb8f0": "上周关注度较高的产品安全漏洞(20250120-20250126)", "https://mp.weixin.qq.com/s?__biz=Mzk0OTM5MTk0OA==&mid=2247496728&idx=1&sn=01adce867262b6b78f37a6cbc0b3e4a7": "AnyDesk本地提权漏洞:CVE-2024-12754", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492179&idx=2&sn=9ab63e92cd4f8ac91a67fec0698a2e02": "漏洞预警 | 通达OA未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094746&idx=2&sn=317abb4981260b599c7f515e9d3c1e3b": "微软Outlook严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489550&idx=1&sn=ceacf239a0181cc84ea4827f600a1ce6": "【漏洞预警】Apache Struts2代码注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313675&idx=3&sn=f746885f658ca0d1f5c02ae5e71dbed2": "Zyxel多款旧DSL设备存在2个零日漏洞,无修复措施", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313675&idx=4&sn=e34312e7836613491b513d0e8160e100": "CISA将Microsoft Outlook等漏洞列入已知被利用漏洞目录", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067692&idx=4&sn=76887cf1be0295b8075d662f2451e94d": "【安全圈】CISA将Microsoft Outlook、Sophos XG Firewall等漏洞列入已知被利用漏洞目录", "https://mp.weixin.qq.com/s?__biz=MzU2OTcxNjE4Mw==&mid=2247486013&idx=1&sn=92709dc9add6e0b7ad6f9e3283711575": "DeepSeek 相关安全事件分析报告", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527611&idx=2&sn=5e2150104f131c85b1d196c791697ff3": "CVE-2024-6387 OpenSSH 任意代码执行漏洞 PoC 漏洞发布", "https://mp.weixin.qq.com/s?__biz=Mzg3MjE1NjQ0NA==&mid=2247514183&idx=1&sn=e2338623e805f43a817166209014c938": "盘古石取证12款产品再度入围公安部警用取证设备框架协议采购项目", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589336&idx=2&sn=71772d009fe80e5339e6925f517765da": "微软示警 ASP.NET 重大安全漏洞,超3000公开密钥恐致服务器沦陷", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589336&idx=3&sn=6bb091b8297338121511850425838973": "本周更新:虚拟机镜像调试 | 系统0day安全(第7期)", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247496352&idx=1&sn=0a2c89e7fa30bf859d137d0f56375ee0": "sqlmap Xplus 基于 sqlmap,对经典的数据库注入漏洞利用工具进行二开!V1.6版本", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487081&idx=1&sn=c5ac65576e36d6b75ccf5146d8628600": "Google Project Zero 的 Windows 漏洞研究:通过 IDispatch 访问受困 COM 对象的漏洞模式", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523327&idx=3&sn=4e33113f92591aa05af6697be895f856": "CISA将Microsoft Outlook、Sophos XG Firewall等漏洞列入已知被利用漏洞目录", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484354&idx=1&sn=650a15a82bb7b4367ab6c54c21b1a5a4": "宏景eHRDisplayFiles存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MDk4MzkyMA==&mid=2247484537&idx=1&sn=a88144bf56d786c19865fdc9154c54eb": "深入了解宽字节注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjU4NA==&mid=2247485669&idx=1&sn=20e7f986f8347c84be154fd1405464e5": "Microsoft Outlook高危在野漏洞正被积极利用", "https://mp.weixin.qq.com/s?__biz=Mzk0MTI4NTIzNQ==&mid=2247492477&idx=1&sn=16c26ef230f9404e60d06bb5e07f1749": "我问deepseek,程序员会被AI取代吗?", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247488445&idx=1&sn=3da2540bcb060b11a566b3d21f81ab1d": "【2025-02-07】黑客新闻摘要——“Cisco漏洞修复:Java序列化的‘坑’填平了!”", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY2ODE1NA==&mid=2247484984&idx=1&sn=6ac5afdceada749543cbe5edc56b08d8": "来角色互换吧", "https://mp.weixin.qq.com/s?__biz=Mzk0ODY5NjQ0OQ==&mid=2247483727&idx=1&sn=5204b4ac8620c49effc035e503f0611c": "Solr 文件上传路径遍历漏洞(CVE-2024-52012)分析漏洞成因", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499377&idx=1&sn=5a2949aa2988b69b635b859da8c6be21": "网络摄像头漏洞审计 -- ipcsuite(2月6日更新)", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499377&idx=2&sn=6034b6ee7cf6e893c7cc3babf0df2049": "APP渗透测试 -- ZipEntry漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492136&idx=1&sn=a64994323b497dfaf7d398189de8e839": "黑客利用 Aviatrix Controller RCE 关键漏洞发起攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484021&idx=1&sn=d6c8d46d68afea44f3465437139ff4e1&chksm=c006ca85f7714393548eb1eac7158adf7ccbb19b0a2e3e47e6e139da340ddaeb1cab1bef276c&scene=58&subscene=0": "Google 是如何做漏洞管理的?", "https://mp.weixin.qq.com/s?__biz=Mzk0NDU5NTc4OA==&mid=2247484349&idx=1&sn=93befd867b94a6c03f728c1126e52932": "一次JDBC反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzU4ODU2MQ==&mid=2247484079&idx=1&sn=ea9f08d10aba0cb384df26d1f0b16c5b": "每日情报速递20250208", "https://mp.weixin.qq.com/s?__biz=MzkyMDY5OTg5OA==&mid=2247493382&idx=1&sn=d7bb6be408b7dd5ab57ad79176a375db": "春秋云镜靶场Initial_WP", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462592&idx=1&sn=61a62624dc59548febe3df59e9e1169b": "信息安全漏洞周报(2025年第5期)", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462592&idx=2&sn=f3eb9545d622bc8625bf7da4c009b050": "信息安全漏洞周报(2025年第4期)", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607653&idx=4&sn=4418340544e24061ea544fcf4216b586": "XSS漏洞挖掘插件", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247497004&idx=1&sn=29fd94e4fcc55ef35b5a1dadf65317cf": "【吃瓜】码农的钱也敢吞?RNM还钱", "https://mp.weixin.qq.com/s?__biz=MzIwMjE2NTM5Mg==&mid=2247485540&idx=1&sn=a4d30f9b543736e2cbf14c5ba61c0970": "XSS漏洞挖掘上", "https://mp.weixin.qq.com/s?__biz=MzkxOTYwMDI2OA==&mid=2247484365&idx=1&sn=bd389742d0058e6d868964312ee9897f": "[随手分享]Web-Chains在Java赛题中的利用", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488908&idx=1&sn=6be719bc1b836c10eb9b58d27fd8527b": "【0day】码支付系统存在前台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODYwNjI1NA==&mid=2247484104&idx=1&sn=6bf9964b84f0c6ce4adc38891b81233f": "【安全预警】NUUO网络视频录像机upload.php 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247491753&idx=1&sn=2b40bf77bc285505d90081fc9eb64c3e": "国内瓜吃腻了?来吃洋瓜:老外也整F12漏洞交src的骚操作", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247547627&idx=1&sn=c84a1b271075e5536aad39934b371d07": "某系统webpack接口泄露引发的一系列漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MzMzOTQ4Mw==&mid=2453672565&idx=1&sn=b3422707594be2ec229b3c620988435d": "从《哪吒之魔童闹海》看生物特征识别技术在网络安全中的应用", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518417&idx=1&sn=6720a0ca33b0bf77c14d49be25fe7dd2": "DeepSeek+本地知识库 = 离线安全专家", "https://mp.weixin.qq.com/s?__biz=MzkzNTQwNjQ4OA==&mid=2247484080&idx=1&sn=5a16a5264cf25a4c9463bb2777aa44bb": "0到实战案例(CSRF漏洞)", "https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247506611&idx=1&sn=2744457e60f94ce0d02e4941db6f9424": "【一周安全资讯0208】国家数据局《数据领域常用名词解释 (第二批)》公开征求意见;微软 Outlook 被曝高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490371&idx=1&sn=a18a023606ec472f74ddc883d8e02f9d": "西联软件-移动门店管理系统 StreamToFile 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497101&idx=1&sn=ebf99e6acfcac9980d5a9bfcd46d2ae1": "【漏洞通告】Apache James拒绝服务漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484602&idx=1&sn=8fa0aba336e362d60c79adf4636ee3a5": "锐捷系统auth接口处存在远程命令执行漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523351&idx=3&sn=ab59d644aab797f28a1bf4ddb7ec8b21": "黑客利用SimpleHelp RMM漏洞实现持久访问并部署勒索软件", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484866&idx=1&sn=c56e917f9bf1bcb86747367ea420b489": "2025我希望大家的钱包更充实一点 SRC漏洞挖掘培训", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490361&idx=1&sn=e491617f60571ab0acecf33074409214": "网神SecFox运维安全管理与审计系统 FastJson反序列化RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498815&idx=3&sn=9a01cd47406b7a4683da0dae1b3e9b18": ".NET 通过代码审计发现 ERP 系统中两个任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487624&idx=1&sn=52e4ea3ad5d5263e640fe438f917efe1": "渗透测试 | 文件读取漏洞实战利用", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794098&idx=3&sn=18d36461a067e7227ea280973a7b2236": "黑客利用 Cityworks RCE 漏洞入侵 Microsoft IIS 服务器", "https://mp.weixin.qq.com/s?__biz=MzIxODIzNzgwMw==&mid=2654070950&idx=1&sn=0a5a18cb92e7da5843b4ed6c132c9107": "漏洞盒子助力 | 5悔向未来 五家SRC联合众测限时启动!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067706&idx=3&sn=42ec007bcefb5e73b814bbd77c03cb62": "【安全圈】微软示警 ASP.NET 重大安全漏洞,超3000公开密钥恐致服务器沦陷", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527663&idx=1&sn=c61589afbe6298288ec3b55c34a82b09": "CVE-2024-21413 (CVSS 9.8):严重 Outlook 漏洞正受到主动攻击,PoC 可用", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247549979&idx=1&sn=cd757d14820a6ed3eb2630fffa7adcea": "UWB技术在汽车安全中的应用", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236274&idx=1&sn=e91ce8b77df27a2dfb590365ca94976d": "启明星辰全面对接DeepSeek大模型,全场景智能化安全再升级", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589341&idx=1&sn=c57db95a9d3d5f4d3d5993b9e4d2398e": "关于PAN-OS DoS(CVE-2024-3393)的研究", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589341&idx=2&sn=698cf3be8150d9f8778afdf43da1a5ae": "打开邮件即中招!Outlook高危漏洞曝光:黑客可远程执行代码", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247491868&idx=1&sn=108dda7ebeb54263191f1ddc5a0c2ba4": "正在报名中 | “网谷杯”信创应用软件网络安全攻防大赛", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553470&idx=1&sn=9740b45e98425b1696b01c0ce2519656": "Apache Calcite Avatica 远程代码执行 CVE-2022-36364", "https://mp.weixin.qq.com/s?__biz=Mzg4NTA0MzgxNQ==&mid=2247489875&idx=1&sn=01592903da90c10d03164e08b997d14c": "『杂项』SSH公私钥认证原理及相关漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MTExMjYwMA==&mid=2247485714&idx=1&sn=d2721f2a3ceb2471b5a257e93513b64f": "jeecg boot queryFieldBySql RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247535347&idx=1&sn=0808616c79a4ed7ba6480d99bbb327f5": "调查显示:75%的员工被要求为网络安全漏洞“背锅”", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487082&idx=1&sn=4fee65e10e0adea5361defe45d5d66f9": "漏洞赏金实战:AFL++ 挖掘 GNOME libsoup 高危漏洞技术解析", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489556&idx=1&sn=7ffd3a3094b235cf9c4546ebb372eb72": "【漏洞预警】JeecgBoot SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247499332&idx=1&sn=7ab742338c5b85eb391ae3bc5380243d": "【oscp】JOY,ProFTPd拷贝漏洞提权", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589341&idx=3&sn=93b6b8d3c44c60ab4582c45b60e2897c": "招生中!系统0day安全-IOT设备漏洞挖掘(第6期)", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489211&idx=1&sn=361a8df65a6ca8e0b7368eff5178da6c": "Confluence未授权漏洞分析(CVE-2023-22515)", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647690607&idx=1&sn=2db22efb8870c3b8e8277ad8cddea19b": "0026. 管理面板漏洞—访问罗技管理后台", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247498473&idx=2&sn=b6da33081772c4dfa4cc55df265c0b4c": "人工智能和云漏洞并不是当今CISO 面临的唯一威胁", "https://mp.weixin.qq.com/s?__biz=MzkxMTYzMjIwNQ==&mid=2247496904&idx=1&sn=c777a7fc689c87dda03b125280d42a76": "新一代商用密码算法全球征集启动", "https://mp.weixin.qq.com/s?__biz=MzA3NDE0NTY0OQ==&mid=2247484425&idx=3&sn=94a5a80093b8dea9ce8dcc03c82e1f80": "快速上手渗透测试报告写作:从WP到甲方报告的一站式指南", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094759&idx=1&sn=227da65909f44fef215dcd2b6251cf3e": "微软 Edge 存在允许攻击者执行远程代码漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497102&idx=1&sn=874c6c307b4935d0a06c833df9de5362": "【漏洞通告】Go Darwin 构建代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzk0ODYwNjI1NA==&mid=2247484105&idx=1&sn=0385781cc613eaf899e81dd04c04eb4b": "【安全预警】万户ezoffice协同办公平台SignatureEditFrm存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247488458&idx=1&sn=06f5e7c2a2da232dd0e71e5e696e5f6c": "【2025-02-09】黑客新闻摘要——黑客新招数!利用pickle文件漏洞,Hugging Face平台被攻陷?", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492137&idx=1&sn=129692b1cf9a1c276a935851ae6e6600": "英国域名注册局 Nominet 确认遭 Ivanti VPN零日漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491496&idx=1&sn=78b401fef93cacf90def378d04473b80": "实战如何通过Druid提升至高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931508&idx=1&sn=490a2501fdd930ea66587e6f13860220": "中信银行收罚单,因未及时处置数据安全漏洞风险等", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490381&idx=1&sn=668e66e20525eb06027401e4485177cf": "朗速ERP FileUploadApi.ashx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247491543&idx=1&sn=fdd2ab29e1c8feebb02ea202f932be76": "Tabby 2.0 自动化代码静态审计:CVE-2024-53675&53676 HPE IRS XXE&RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518431&idx=1&sn=03e6a3602604449229d1091ca1fcde2a": "漏洞公开——从弱口令到通杀", "https://mp.weixin.qq.com/s?__biz=Mzg5MDQyMzg3NQ==&mid=2247484043&idx=1&sn=96bf6bf50d540b15f8f7b8f412940054": "告别无效训练!Marathons.Tools AI助手定制你的最佳马拉松策略!(限时体验)", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499399&idx=2&sn=b3a8c71712777b57a6602bd52681479b": "APP渗透测试 -- 从代码讲逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490025&idx=2&sn=d48634acbe317177798e82e15744d887": "0到实战案例(CSRF漏洞)", "https://mp.weixin.qq.com/s?__biz=MzA4MzMzOTQ4Mw==&mid=2453672578&idx=1&sn=dcbec0da46783f7e4cdac74f3cdc128f": "DeepSeek 又被攻击,本地化部署是否安全?", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247488364&idx=1&sn=d70484c00688139cf0df3c8c4b83549e": "渗透实战 | 微信小程序EDUSRC渗透漏洞复盘", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490098&idx=1&sn=8c449d31148e731bad71c0711b86ad9a": "记SRC中漏洞挖掘从任意文件读取到Getshell|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247488945&idx=1&sn=667813a0b75646bd895968ada0e04ac5": "【0day】码支付系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMjg0MjM5OQ==&mid=2247487974&idx=1&sn=3cafa9e32c6d953488826d18cbdf7ebe": "一次JDBC反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462599&idx=1&sn=ea2521859b56b81ab63d4ae44709be95": "信息安全漏洞月报(2025年1月)", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487682&idx=1&sn=3632a34aa50199abd9fcdf292778aa4f": "用友NC 漏洞分析--cartabletimeline存在SQL注入", "https://mp.weixin.qq.com/s?__biz=MzkzMDcxNzg4MA==&mid=2247484514&idx=1&sn=4af86ec87a1ce3c14ccfe289ae28f901": "[工具推荐]jeecgBoot漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247485971&idx=1&sn=a32cbb842ad50d26aec1b4da11054d03": "修复 Rsync 漏洞 CVE-2024-12084", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607748&idx=3&sn=d07f78159a157bd8d952dbb04cae6ecb": "『杂项』SSH公私钥认证原理及相关漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247518581&idx=1&sn=b1c53ae68fd4b0ed06d5530be30acae1": "Bombon 方法论:我将如何测试Web缓存漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486987&idx=1&sn=4fb50aefa5785393e944f832b3694a9d": "DayDayPoc-2024十大漏洞盘点", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484366&idx=1&sn=24e25e66ad89c2f14234dd765efcbc22": "宏景eHRview存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490873&idx=1&sn=ead63f2369f52b1dbbf7ba6addd59a5e": "能信安:漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkxODY0NjE5MA==&mid=2247485013&idx=1&sn=284df912da27de8052737eb12ebf3199": "2025《L师傅SRC业务逻辑漏洞课程》全线升级!!!", "https://mp.weixin.qq.com/s?__biz=Mzg5NDY0NTM2Nw==&mid=2247492258&idx=1&sn=f3ba4eed5a1fc4cc0d2e084e4136cff7": "从数据看风险,从趋势寻策略 | 2024年网络安全漏洞趋势", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527698&idx=1&sn=8cdce138dd5361420a2a8fc552205a2f": "滥用 libxml2 特性绕过 GitHub Enterprise 上的 SAML 身份验证 (CVE-2025-23369)", "https://mp.weixin.qq.com/s?__biz=Mzg4MjcxMTAwMQ==&mid=2247488676&idx=1&sn=94458e94fc2dceeea5eb0b33208af2bb": "网络安全人速领!整理了八大方向AI提示词+思维导图", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247501979&idx=1&sn=5fa7a1296da73415206e2d1f485314ae": "【霄享·安全】任意文件读取漏洞简介(第49期月刊)", "https://mp.weixin.qq.com/s?__biz=MzI5MTIwOTQ5MA==&mid=2247487693&idx=1&sn=d914d313721ba2d7800c618fb52051ac": "JWT漏洞初步了解", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067739&idx=4&sn=65fa68bc1e46fca3f10c639f4af8d698": "【安全圈】未修补的漫威游戏RCE漏洞可能会让黑客接管PC和PS5", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493942&idx=1&sn=fea97070c0745023670857e716372e19": "一次JDBC反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247502921&idx=1&sn=1e96fdab98871933e723fecf7991bb8f": "全年披露40000+漏洞,《2024年度网络安全漏洞分析报告》解码漏洞风险", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522190&idx=1&sn=40eea5abf5bc17c52eb2a437e540b55f": "合勤不打算修复已达生命周期路由器中的已遭利用漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NTg3ODYxNg==&mid=2247485103&idx=1&sn=0eb4a61003fbb89975181a92f38f2b13": "web接口漏洞 - 水平越权", "https://mp.weixin.qq.com/s?__biz=Mzg3OTcxMjE2NQ==&mid=2247487196&idx=1&sn=9b2618ff5922a5dc835b1946a9b5ef07": "【漏洞实战研磨】之细说log4j2", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247490931&idx=1&sn=ddb4ffea822ad8ac739b6378318e43e4": "月神漏洞实战分享| 推广系统的“隐秘高危漏洞”", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579500&idx=1&sn=ec7ccd0444ca7b16e149f96a4f892d40": "全年披露40000+漏洞,《2024年度网络安全漏洞分析报告》解码漏洞风险", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487209&idx=1&sn=a6660dcdb1f9f562e4d7799704e36aa3": "Java代码审计 || 通过某博客系统实战学习一个有趣的 SSRF 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247549664&idx=1&sn=10c694c8488b49c6c9ce0e5e02d8fa5f": "【资讯】央行等六部门发布《关于规范供应链金融业务 引导供应链信息服务机构更好服务中小企业融资有关事宜的通知(征求意见稿)》", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495763&idx=1&sn=b5525b4ff6a7145ad745acde332b1058": "CNVD漏洞周报2025年第5期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495763&idx=2&sn=81dbf95c95307188cb89cd1961d46621": "上周关注度较高的产品安全漏洞(20250127-20250209)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503311&idx=1&sn=cc1b030ee4e0aa887458dd2d42b6e1f7": "雷神众测漏洞周报2024.1.20-2024.2.9", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650620998&idx=1&sn=038833fbf100b99ba44221dcd1c84582": "数字世界危机四伏,谁是云上安全的“齐天大圣”?", "https://mp.weixin.qq.com/s?__biz=Mzg5MDg3OTc0OA==&mid=2247489459&idx=1&sn=ca8ad552ca94bf47604c2bc682aef1e9": "通过符号链接致盲EDR复现", "https://mp.weixin.qq.com/s?__biz=Mzk1NzQwNjQ4Ng==&mid=2247485013&idx=1&sn=be0d1fb46c8bc3e033b38a5074dcad48": "经典漏洞复现:CrossFire老版本缓冲区溢出漏洞GetShell全解析", "https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247529040&idx=1&sn=30c75f230f8a0d1382be803f6e605fe1": "从量子威胁到人工智能防御:2025年网络安全将如何发展", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247485780&idx=1&sn=13897dbb76848e06e02f82ceeb9f02f9": "用友U8Cloud FileTransportServlet 反序列化漏洞(附利用脚本地址)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490027&idx=2&sn=e8ca69fcaa971711d4cc7da69be5f51f": "DayDayPoc-2024十大漏洞盘点", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486607&idx=1&sn=a941f758474e8e5434b59e39022ad320": "【漏洞通告】gzip 整数溢出(CVE-2025-0725)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486607&idx=2&sn=dc419e38b478f0c76636a664037140ff": "【漏洞通告】eventfd 双重关闭(CVE-2025-0665)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486607&idx=3&sn=33d4818fde869574b0d39c35f90a9229": "【漏洞通告】Adobe Experience Manager | 跨站点脚本(存储型 XSS)(CVE-2024-53966)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486607&idx=4&sn=c3e95d6c5c1122bb4ffa63f29cceb3c3": "【漏洞通告】IBM Cloud Pak for Business Automation跨站点脚本(CVE-2024-52364)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486607&idx=5&sn=3366e40713e490852fbe74db093b0b5b": "【漏洞通告】IBM Cognos Anaytics XML 外部实体注入(CVE-2024-49352)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486607&idx=6&sn=92fafbc939585f16bcf6ae82adef8c1c": "【漏洞通告】IBM 安全验证目录命令执行 (CVE-2024-51450)", "https://mp.weixin.qq.com/s?__biz=Mzk0OTUwNTU5Nw==&mid=2247489059&idx=1&sn=8f2e05660dcd8edef098cf5f50fb16cb": "【相关分享】记两份逻辑漏洞(重码)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497063&idx=1&sn=04369f8cd24a50a4e95af97f3349dee0": "一次十分详细的漏洞挖掘记录,新思路+多个高危", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313856&idx=1&sn=ed039a6940a4a920030ae6e8af7e94d0": "月神漏洞实战分享 | 推广系统的“隐秘高危漏洞”", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522190&idx=2&sn=9702cf83b7bdb3ee94d30829bea9f51b": "思科ISE严重漏洞导致攻击者以root权限运行命令", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484373&idx=1&sn=ad6eee9c2e3fb1cd9e629dd0cab89a90": "富通天下外贸ERPUploadEmailAttr存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489561&idx=1&sn=4d41cddc1c57f90001393fad9353a7e3": "【漏洞预警】CoinRemitter SQL注入漏洞(CVE-2025-1117)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490027&idx=1&sn=959d43f81ac390197794b45f3986dbc6": "Java代码审计 || 通过某博客系统实战学习一个有趣的 SSRF 漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247496474&idx=1&sn=3b7f619a49b28f35d8362dd8109d4f10": "转载 | 浅析K8S各种未授权攻击方法", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492209&idx=2&sn=9f33ec3430e70393ecead209206df7d1": "漏洞预警 | ZZCMS SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492209&idx=3&sn=d54d9827c9e695dad0d4d3c178134397": "漏洞预警 | NetMizer日志管理系统远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655265865&idx=2&sn=23a49bb9e1b422277e2ed6ce0398f72e": "2024年度网络安全漏洞分析报告", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247495507&idx=1&sn=5a8a3becd07c159f375f9643f540e071": "【AI专栏】DeepSeek崩了,又能奈我何?因为我有备选", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247496211&idx=1&sn=2571b5ff9fc0d109c6c406be334e8d21": "山西公安“净网2024”专项行动打击网络违法犯罪10起典型案例", "https://mp.weixin.qq.com/s?__biz=MzI2NTUyODMwNA==&mid=2247494176&idx=1&sn=b49c47712ff07c10d1d75f0490030c8f": "数缘科技推出商用密码产品定制、测试与全流程认证咨询服务", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519430&idx=2&sn=2ed62234f558bc0a538ee0adabc19978": "天狐渗透工具箱-社区版V1.1正式发布(附最新工具包版)!", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5NzkwNw==&mid=2247485604&idx=1&sn=c6dcab5521c29d40107a29306a515022": "CVE-2024-52046 Apache mina 反序列化漏洞简单分析", "https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651148961&idx=2&sn=ba5e02330b9a40fb5c9a31cf1b322201": "​【论文】情报和恐怖分子的“心脏”:发现和应对恐怖战术的管理系统", "https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652997301&idx=1&sn=09bd4de58c5c588576a09927ad5248f8": "先知通用软件漏洞收集及奖励计划第六期 正式开始!", "https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247487223&idx=1&sn=678ded11173db2f34686f861d3e16f63": "从漏洞到Shell:堆溢出漏洞利用实战指南", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493160&idx=1&sn=d79ca3718fd78e834d9a0ee7aecf50de": "苹果修复了iPhone和iPad中被“极其复杂的攻击”利用的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493160&idx=2&sn=9f12aca8306b8f8a6b9ceeea4988749a": "XE组织已从信用卡盗刷转向利用零日漏洞。", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251332&idx=1&sn=7060e151c0a64d76c7e312a01ce36f5d": "网络攻击者利用SimpleHelp RMM漏洞实现持久访问和勒索软件攻击", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247490224&idx=1&sn=10fae486a12b3fd3e882d4e9813e304b": "DeepSeek黑客工具箱!代码审计POC 漏洞报告输出 支持第三方API~拒绝卡顿!!", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794123&idx=2&sn=82c948e476d4322789951cf3cc1598dc": "AnyDesk 漏洞PoC发布,利用该漏洞通过壁纸获取管理员权限", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498871&idx=1&sn=d261fad92b90cc79e3796f377d25a658": ".NET 代码审计:发现某企业级 OA 系统中任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492209&idx=1&sn=851eff1bb5abd8ecfcda680e2c883570": "漏洞预警 | 金和OA任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484058&idx=1&sn=cfe2ad79afdd3f682accafcda1c3b65d&chksm=c006ca6af771437cd4852c9478fad118191e5d4f92714f30d11bd4a602af0bb5caf2936723f4&scene=58&subscene=0": "漏洞可达性分析:安全工程师的“手术刀”,精准切除90%无效漏洞 - 重构漏洞治理新范式", "https://mp.weixin.qq.com/s?__biz=MzkzMDg1MzIwNA==&mid=2247487404&idx=1&sn=98afb1b34a5b3d5d74ec5eb6a8bf3cd4": "【burpsuite靶场-服务端】XXE注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247490957&idx=1&sn=2b71f6ad9d8e9c61cc4c3cbda3769f45": "国内瓜吃腻了?来吃洋瓜:老外也整F12漏洞交src的骚操作", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490874&idx=1&sn=d7d5aa365df7408ec399e069796bac33": "泄露近600万客户敏感数据,这家金融机构被罚超1.4亿元", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486608&idx=1&sn=21d09d8534333f8cb6520e1b6328fa1a": "【漏洞通告】Bharti Airtel Xstream Fiber WiFi 密码弱凭证(CVE-2025-1081)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486608&idx=2&sn=568d9e7d729e12ae07144b29df4f520c": "【漏洞通告】IBM EntireX 拒绝服务(CVE-2025-0158)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486608&idx=3&sn=d11b77ec6194e5c66b399e21ff213dbf": "【漏洞通告】IBM Jazz for Service Management 跨站点脚本 (CVE-2024-52892)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486608&idx=4&sn=1805f6008b39a3173b8f1ecb9ec0ac17": "【漏洞通告】页面插件中的WordPress RSS 存储的跨站点脚本(XSS)漏洞(CVE-2025-25096)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486608&idx=5&sn=39fde4657c0a7d5721dbb71b81a8aee2": "【漏洞通告】RT-Thread信息泄露(CVE-2025-1115)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486608&idx=6&sn=54c90d1295f4b77846fbde3238cd269c": "【漏洞通告】newbee-mall 代码注入漏洞(CVE-2025-1114)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486608&idx=7&sn=6aae1a2d07773b5dc9cc58bedc92be53": "【漏洞通告】OpenCart CoinRemitter SQL注入(CVE-2025-1117)", "https://mp.weixin.qq.com/s?__biz=Mzk1NzE0ODk3Nw==&mid=2247491260&idx=1&sn=1faa2488bf6e19fbeefc315dcedb1fa1": "Enhanced BurpGPT | AI分析安全漏洞,支持DeepSeek、OpenAI、Google、Anthropic等等", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581088&idx=1&sn=6f659e38152e18f130196a1c00b075df": "新型 Aquabotv3 勒索软件利用 Mitel 命令注入漏洞发起攻击", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500720&idx=2&sn=ec3370ff287646f73a73fcefea2e2557": "【漏洞通告】Trimble Cityworks反序列化漏洞(CVE-2025-0994)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500720&idx=3&sn=e460fa55b42b5b3383570845e2839de3": "【漏洞通告】IBM Security Verify Directory命令执行漏洞(CVE-2024-51450)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500720&idx=4&sn=2a14af10cabc0002b9081454b197b8aa": "【漏洞通告】iPhone&iPad USB限制模式绕过漏洞(CVE-2025-24200)", "https://mp.weixin.qq.com/s?__biz=Mzg5NTkxNzg4MA==&mid=2247489976&idx=1&sn=33536be8b38f84509f71074a646fd952": "记一次ssrf漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495032&idx=3&sn=a795cc5e80a0ecc937a7f5a4fce5ec1e": "由于CVE-2025-24200被应用到针对特定人极其复杂的攻击,苹果更新了iOS 18.3.1", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490401&idx=1&sn=b75abc0ace7c4cb105337ae5c7eb0ef8": "虹安Heimdall DLP数据泄漏防护系统 pushSetup.do SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247492929&idx=3&sn=1de220ea50cdc4fc0a70f524e90355b6": "上周关注度较高的产品安全漏洞(20250127-20250209)", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247620738&idx=1&sn=895c4e67c640da2b28f6ea62f0d47e86": "车辆漏洞管理 - 从设计开始有效保护软件定义车辆", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067763&idx=2&sn=6f436c8b629c5b79837b0940cb025969": "【安全圈】苹果修复了在“极其复杂”的攻击中被利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247546875&idx=1&sn=d9b18c05b05ea8484c12487babb3a2d5": "一月漏洞信息简报", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553533&idx=1&sn=de7628d92873de621ebb993a6d7810f5": "Mysql LOAD DATA 读取客户端任意文件", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541526&idx=1&sn=91a08aea7ee6248f5917836862a46872": "黑客承认劫持 SEC 社媒账户以散播虚拟货币谣言,面临最高5年监禁", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489231&idx=1&sn=1673c57affefad636063799dce6a79ad": "Nftables整型溢出分析(CVE-2023-0179)", "https://mp.weixin.qq.com/s?__biz=Mzg4OTI0MDk5MQ==&mid=2247493344&idx=1&sn=21f8996426ad7ba73456c05e578e92b9": "【干货资源分享 】CNVD捡证书小技巧", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247486838&idx=1&sn=2eaf81a0e3a11a2a5a3aa79ff165f19d": "「深蓝洞察」2024年度最狂躁不安的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492139&idx=1&sn=b07468143e486aa2834f249402b59156": "Fortinet 警告黑客利用身份验证绕过零日漏洞可劫持防火墙", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489569&idx=1&sn=6a7922cf90fae39507c7be1ef4ac1c88": "【漏洞预警】Trimble Cityworks需授权反序列化漏洞 (CVE-2025-0994)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489569&idx=2&sn=9edca56049be68398ae6382b8440cb0f": "【漏洞预警】Apache James未授权输入验证不当漏洞可导致拒绝服务", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488011&idx=1&sn=efb1aeec73cf9a20254c5e9d6bbf4752": "锐捷网络-EWEB系统auth接口存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzU2MTc4NTEyNw==&mid=2247486527&idx=1&sn=5eb827911e56f33fa2de3029c2a1b225": "【oscp】JOY,ProFTPd拷贝漏洞提权", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247490015&idx=1&sn=9f25bb09138615022f6300c237d3ee27": "一个参数就能控制全站:IDOR漏洞深度剖析", "https://mp.weixin.qq.com/s?__biz=MzkyMjM0ODAwNg==&mid=2247488457&idx=1&sn=918fff81c542afba3c62ed6ab597737a": "一次渗透过程中的CVE-2022-45460撞洞RCE", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313909&idx=3&sn=2590df76d28cb088d070b9119d34bb02": "苹果0-Day漏洞被用于“极其复杂”的特性攻击中", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135067&idx=2&sn=032f618504363a24b36aa09bcb1de2a2": "AI驱动的安全漏洞发现正在重塑网络安全新模式", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485495&idx=1&sn=7adc25b7ef40b89ca08e3f70ca43aff5": "iOS 18.3.1 紧急更新发布:两大安全漏洞修复,iPhone 用户必升!", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515966&idx=1&sn=48ff535f701ee7bb4f5909debc29da6a": "重点系统指纹漏洞验证工具 -- Catcher", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515966&idx=2&sn=8c0391d1bd952362e009e4d04044d4d1": "APP渗透测试 -- 越权漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492140&idx=1&sn=18c1953b65a305fa321b66bd107120e0": "GitHub 上的虚假 LDAPNightmware 漏洞传播信息窃取恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522200&idx=1&sn=7bf07566564fbc663142355517974f16": "微软扩展Copilot AI漏洞奖励计划范围,提高赏金", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522200&idx=2&sn=a8084137286ce6cbebda935ab8c0d5c2": "苹果紧急修复被用于“极其复杂”攻击中的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247505212&idx=1&sn=9ea0b7b0b273b4166f85a23df443ac12": "漏洞挖掘之再探某园区系统", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492218&idx=1&sn=2ba4087ac374012aa5be38eb48fbd224": "漏洞预警 | 灵当CRM任意文件上传和信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492218&idx=2&sn=01f993448e638ce032e21cda5989fff4": "漏洞预警 | 亿华人力资源管理系统目录遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492218&idx=3&sn=6ffa797bb856083c6bc1d5cb8e36c423": "漏洞预警 | LED屏信息发布系统信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493547&idx=1&sn=155a6666a83262fde491030d6f110c94": "自动化扫描利器,指纹识别更精准,漏洞扫描更全面", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655266070&idx=1&sn=cf3934c00ce67ec9ef931c36c1211418": "Kali Linux 高级渗透测试+Web安全漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900172&idx=1&sn=b52d5388bd7c9ab14ea4c528e2d440a0": "高危!Palo Alto防火墙曝供应链级漏洞,Secure Boot绕过+固件篡改风险激增", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247485804&idx=1&sn=85c1af9e936f0d23839ec6b4201d09fc": "手把手教你审计金和OA系统漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247485423&idx=1&sn=e6286ca6cd90c4d2a801eedafbe80d71": "常见编辑器漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495050&idx=1&sn=aeb41c42996e75edb09cb2581c27e87c": "openssl出现严重漏洞CVE-2024-12797", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495050&idx=2&sn=a7069a3e23b2388dc3b2ee2229884f51": "微软 2025 年 2 月补丁星期二修复了 4 个0day和 55 个漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3MTUxNzQxMQ==&mid=2453885774&idx=1&sn=b4782eb064a80e1c6130cde4671128b5": "从 0 到 1:Linux 服务器应急排查实战指南", "https://mp.weixin.qq.com/s?__biz=Mzk0OTU2ODQ4Mw==&mid=2247486797&idx=1&sn=417a91fe12eb7b233f1ac2370ee64f2b": "探索协程世界:原理、实现与漏洞模式(上篇)", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523434&idx=1&sn=db2d557002cc5961c9e46222fba68336": "苹果紧急修复iOS零日漏洞CVE-2025-24200,已遭黑客利用", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490411&idx=1&sn=84eb2b76ab7713cd4ad89cd639d7aed2": "月子会所ERP管理云平台 GetData.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247487248&idx=1&sn=78f79715919610d6b3b89e8af529c0d4": "“挖漏洞换酒钱?通过信息收集挖到企业的严重漏洞全纪录思路分享", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493944&idx=1&sn=37bfa1a09e3e4052f15186a8d79afe86": "元宵福利 | WebShell、内存马技术、反序列化漏洞文章和工具汇总", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247488986&idx=1&sn=b89b053ab5e89414b112f4f64d1928e7": "微软最新多个高危漏洞预警", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493178&idx=2&sn=f8bf79797d8cf7d6d507d17b81a29411": "OpenSSL修复了高危漏洞CVE-2024-12797", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493178&idx=3&sn=beac0721a88ec306ba8b2ab356e17b3c": "Progress Software修复了多个高严重性的LoadMaster漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247485754&idx=1&sn=2ddadac1735b535a164f294a4a1451d9": "记一次某大型系统前台RCE(0day)审计经历", "https://mp.weixin.qq.com/s?__biz=MzI1NzQ0NTMxMQ==&mid=2247490124&idx=1&sn=5f65d929382ce98aedc91cb0ff579731": "注册信息安全专业人员恭祝大家元宵节快乐", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794136&idx=2&sn=d727d46353335fe5169b04494784bad5": "微软补丁日修复4个0Day和一共55个缺陷", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794136&idx=3&sn=a4f36c84353564f51c9bb2bdd6ad5735": "Apple 发现高危 OpenSSL 漏洞可导致中间人攻击", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502959&idx=1&sn=a89ad8c08deff62ef0aa67b1bb869142": "微软2月补丁日多个产品安全漏洞风险通告:2个在野利用、4个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDYwNTcyNA==&mid=2247487411&idx=1&sn=b3d8f81f6a2464f421ce720b913fe364": "【工具分享】xxl-job漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491502&idx=1&sn=fdc8f11a7eb0d5d69fa54437ec3239b4": "Java代码审计 || 通过某博客系统实战学习一个有趣的 SSRF 漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487739&idx=1&sn=e8c6a1fc9394062227ec738d42b45b15": "【漏洞挖掘】记一次985证书站Oracle注入绕WAF", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486522&idx=1&sn=4c039df49d5b5873996cb2bb12a8d423": "DeepSeek黑客工具箱!代码审计POC 漏洞报告输出 支持第三方API~拒绝卡顿!!", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247484866&idx=1&sn=0fb888f9a480e196ff34876713b14f54": "赏金猎人| 我利用文件上传功能利用存储型XSS漏洞导致网站访问者凭证被盗,并因此获得了1000美元的赏金。", "https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247485833&idx=1&sn=27fc8a4b3b278bf09913088150d1b2bf": "苹果在紧急更新中修复了正被积极利用的 iOS 零日漏洞 CVE-2025-24200", "https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247484319&idx=1&sn=656b410014770196baf6dbf51fefbe0b": "deepseek教程人手一份", "https://mp.weixin.qq.com/s?__biz=MzkyMjM4MzY5Ng==&mid=2247486068&idx=1&sn=3773ea922388fc24bc03e627f961cdac": "月圆人团圆 良宵更美好 | CAPPVD漏洞库祝您元宵节快乐", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581104&idx=2&sn=ef02cf62b1f0fc89d48703f2180f4c74": "NetGear发布安全公告提醒用户修补关键WiFi路由器漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484485&idx=1&sn=be2d001a5df43ea33c32243a990db863": "安钥®「漏洞防治标准作业程序(SOP)」征文启示 [2025年第6期,总第24期]", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484485&idx=2&sn=2b52496fc85fe21d1728d0daddd85c30": "Apache Tomcat文件包含漏洞(CVE-2020-1938)处置标准作业程序(SOP)", "https://mp.weixin.qq.com/s?__biz=MzI4ODQzMzk3MA==&mid=2247489635&idx=1&sn=2cc00bb7187a285176e6ced59cf399a2": "美国政府首度披露根据漏洞公平程序披露零日漏洞情况", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615450&idx=1&sn=7a402800b38095d0468c6a26ecdb2a0a": "【15万$】通过阅读文档发现Evmos中的高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493178&idx=1&sn=7e0aa2b04704010941843bfb2dd0ebd3": "攻击者利用新的零日漏洞劫持Fortinet防火墙", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094783&idx=1&sn=2e13e445612b4d43fc940aaa27f8ef15": "OpenSSL高危安全漏洞 CVE-2024-12797", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492632&idx=1&sn=f6588bf1c1fb7de7777cdc7ce5b4c0c7": "漏洞复现 || DATAGerry 终端节点接口敏感信息泄露", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487286&idx=1&sn=9805f62da7e79276a785586ab3e3720a": "一次JDBC反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067786&idx=4&sn=290289ab17f0f8e7dea5feaad426fb1b": "【安全圈】Microsoft补丁积极利用零时缺陷-CVE-2025-21418 & CVE-2025-21391", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313961&idx=1&sn=4e6aff5796c7c32b68f269fc47d57411": "OpenSSL软件库曝高危漏洞,可实施中间人攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651313961&idx=2&sn=2c65efb6b7c43158bdd51a5ec5fbd5b5": "攻击者利用新零日漏洞劫持Fortinet防火墙", "https://mp.weixin.qq.com/s?__biz=Mzk0MzYyMjEzMQ==&mid=2247487360&idx=1&sn=9b2c8ebc3826025578701e82a6e2962b": "博客更新:SSRF漏洞详细讲解(多个实验场景复现),别再SSRF文件下载了", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490300&idx=1&sn=5a0ef6e7c47150e595120882b8d00d3b": "【风险通告】微软2月安全更新补丁和多个高危漏洞风险提示", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500729&idx=2&sn=972e60ad21deca601a8cef2a20f84638": "【漏洞通告】微软2月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487230&idx=1&sn=aa85cc6c676afb2430d8504b3e1a81ae": "拿到了 SpringBoot 开发的系统,该如何代码审计分析漏洞?分享下我的一二三步的思路。", "https://mp.weixin.qq.com/s?__biz=MzI0NDgxMzgxNA==&mid=2247496618&idx=1&sn=5794658e6ad27d8f221a6c5551ce3164": "CNVD漏洞周报2025年第5期", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247625020&idx=1&sn=37c838f5c73124972b055f988b39585d": "奇安信与东方国信达成战略合作 筑牢AI安全底座", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522210&idx=1&sn=05cf8501f67197b21b3eb5ce8849477c": "微软2月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522210&idx=2&sn=98a6271cd5d293a67b756477a83dfab3": "OpenSSL 高危漏洞可用于中间人攻击", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236537&idx=4&sn=8d064e64087b18574f08e21495f7c20b": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523998&idx=2&sn=4f01bc599b04f754babeb8262f7c2cc6": "【漏洞通告】Ivanti CSA远程命令执行漏洞(CVE-2024-47908)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523998&idx=3&sn=afbb700c040110f32c702d5c6ab84345": "CNVD漏洞周报2025年第5期", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524286&idx=2&sn=a33977671c38eff660fad4096fa3f9ae": "2025-02微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488964&idx=1&sn=5c9f88f88b6352a5f7228166b197151c": "【安全更新】微软2月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462608&idx=1&sn=1493cf1f1e068c644c55ac02d47b6182": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462608&idx=2&sn=bb7717a397d4fb7d06626e907d254b79": "信息安全漏洞周报(2025年第6期)", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489242&idx=1&sn=97336de5da8017c565b14e6075329edc": "Nftables整型溢出提权利用(CVE-2023-0179)", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634294&idx=3&sn=7a815fd526eea90c6ccf81873a35cd7a": "OpenSSL软件库曝高危漏洞,可实施中间人攻击", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489574&idx=1&sn=75ecacddccc20c979ffa81423deae9ce": "【漏洞预警】WinZip 7Z 文件解析越界写入远程代码执行漏洞 (CVE-2025-1240)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497076&idx=1&sn=32e9b394b57251b8176752acb816e6af": "从云服务器 SSRF 漏洞到接管你的阿里云控制台", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527787&idx=1&sn=7cfa7b7e910e6b385f935a6371e0e701": "CVE-2024-29510 – 使用格式字符串利用 Ghostscript", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067786&idx=2&sn=c497b609a80250b639e05ac4c19e5d69": "【安全圈】OpenSSL 修补了高严重性漏洞 CVE-2024-12797", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649170729&idx=1&sn=3537c5685ac0d672104eea3d559eaf64": "汽车供应链攻击、0day漏洞攻击……2024年网络安全领域呈现这些态势", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247518627&idx=1&sn=f016e24f5e2b7700f035fd83e69d0a77": "Beanshell 反序列化分析(CVE-2016-2510)", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247515986&idx=1&sn=485cc5fa917fc24da3e447fc7b7e044d": "【漏洞挖掘】记一次985证书站Oracle注入绕WAF", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527787&idx=2&sn=40e61a0596f3a5df8025c00e03865215": "CVE-2024-29509:Artifex Ghostscript PDFPassword 处理期间的堆缓冲区溢出 _", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493558&idx=1&sn=23d7c3e78b51010ffc987a9b6d6ef37c": "基于 BurpSuite 新版 MontoyaAPI 的 SSRF 漏洞自动探测插件", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492238&idx=1&sn=f4dd6b56870cd96f2536f6fd8399207e": "漏洞预警 | Trimble Cityworks反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492238&idx=3&sn=d3881794d5a1600669b53b7a88bcbded": "漏洞预警 | ALR-F800远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247523926&idx=1&sn=554311fc0961ff14bb7a0de017496ce9": "国内外网络安全政策动态(2025年1月)", "https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247494038&idx=1&sn=ef2356ee2c5ea685686b153951a47a27": "BurpSuite插件 | 自动化漏洞POC探测", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495120&idx=4&sn=cfc9bdb364e53376daeb6f2259d21245": "价值 10000$的可查看任何 YouTube 用户的电子邮件漏洞披露", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495120&idx=8&sn=9f96489b67c1fd1ed23116769351016c": "Nvidia 严重漏洞可能威胁 AI 系统", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502983&idx=1&sn=193e4bb2d3d87a5c4ff9a65953e88b49": "【已复现】Palo Alto Networks PAN-OS 身份验证绕过漏洞(CVE-2025-0108)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486610&idx=1&sn=6186f4fa16a68721f5080ffc57fcdcb9": "【漏洞通告】WP DirectoryBox Manager 身份验证旁路(CVE-2025-0316)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486610&idx=2&sn=2581532a5837d572837c8048d34f2b90": "【漏洞通告】Dreamvention Live Ajax搜索免费Live_search.SearchResults搜索SQL注入", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486610&idx=3&sn=a0375c03f088a819f9ca1cd5c422179a": "【漏洞通告】DWT-目录和列表WordPress主题 验证通过短代码(CVE-2025-0169)存储的跨站点脚本", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486610&idx=4&sn=71aa6332a9955c6afd54b718fd746bbc": "【漏洞通告】JeecgBoot 安全漏洞(CVE-2024-57606)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486610&idx=6&sn=818bf4afbc43f7d6a606cd2d31d15fb9": "【漏洞通告】OpenProject存储的HTML注入脆弱性(CVE-2025-24892)", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523459&idx=1&sn=6699d81291647382f67521972250c787": "Windows存储系统现0day漏洞,攻击者可远程删除目标文件", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487740&idx=1&sn=d1d59cbab455964fa901dadccd8b8c63": "支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260567&idx=1&sn=de59d9f03d07c65fde900c5aeb955eb6": "【CVE-2025-23359】研究人员发现绕过NVIDIA容器工具包修补后的新漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490420&idx=1&sn=10202fa69c87b977ae0cf972681e3fc1": "方正畅享全媒体新闻采编系统 imageProxy.do 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4OTI0MDk5MQ==&mid=2247493368&idx=1&sn=7864a4b2183ce16732d4f0b33d371bb9": "【安全工具分享】GPTLens智能合约漏洞检测", "https://mp.weixin.qq.com/s?__biz=Mzg2NzY0MzM3Ng==&mid=2247484062&idx=1&sn=dc06539021441b7149610eed955cce08": "Gemini安全漏洞曝光:诱导式钓鱼攻击如何突破谷歌防御", "https://mp.weixin.qq.com/s?__biz=MzU3MDA0MTE2Mg==&mid=2247492593&idx=1&sn=18e2833e3b56b10cdb3e439088d3f3f9": "安全快报 | 俄罗斯黑客针对乌克兰政府和私营机构的7-Zip程序持续发起0day漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900181&idx=1&sn=63be4d65122403ccf041f1c642f85566": "微软 2 月份安全更新:修复 4 个零日漏洞,55 个安全缺陷!", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251346&idx=1&sn=7ac383d7e3690a4c2df004c7f0a83538": "超1.2万台KerioControl防火墙暴露于远程代码执行漏洞威胁之下", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493950&idx=1&sn=b11d87f7b5875b7a66cc56eaa30f1705": "DeepSeek黑客工具箱!代码审计POC 漏洞报告输出 支持第三方API~拒绝卡顿!!", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247497136&idx=1&sn=b67382c4466bda77361707b38f9fa5ea": "CVE-2024-50379:Apache Tomcat远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247490519&idx=1&sn=e57bd95fbcf35f18a0ec00e60577c858": "漏洞挖掘之再探某园区系统", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497167&idx=1&sn=fd1100718daded96ae40541b05f61e3d": "2025年2月微软补丁日多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497167&idx=2&sn=f9e6ae6b326c6d68d72a718670c40128": "【漏洞通告】iPhone&iPad USB限制模式绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497167&idx=3&sn=369b86d1da2f505afa10761b12cb8adb": "【漏洞通告】Trimble Cityworks反序列化漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497167&idx=4&sn=5d593989fb7beda78f5f86f0bd543591": "【漏洞通告】IBM Security Verify Directory命令执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492238&idx=2&sn=4463eba0669de844db1b00e50e83363f": "漏洞预警 | 视频话机设备信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454063928&idx=1&sn=b264dbdf71d2950c59bfa9e0307f59b2": "信息安全漏洞周报【第009期】", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500740&idx=2&sn=2939c49e8bb0231cd34cbd3b2a3ae1d4": "【漏洞通告】Palo Alto Networks PAN-OS管理界面认证绕过漏洞(CVE-2025-0108)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500740&idx=3&sn=99b5f73b93c1efe5c9cb814100a07c95": "【漏洞通告】Ivanti CSA管理控制台命令注入漏洞(CVE-2024-47908)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODY3NDYxNA==&mid=2247485948&idx=1&sn=133364b6eb92e6c4ab3ced4329a740eb": "手把手教你构建企业级本地AI漏洞文库:基于Ollama + DeepSeek R1+ Anything LLM 完整指南", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489584&idx=1&sn=8f38f1b4888f62f56d92a034996d972d": "【高危漏洞预警】Palo Alto Networks PAN-OS身份验证绕过漏洞CVE-2025-0108", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490876&idx=1&sn=207c131f116c7e9fec181ea13a703b9e": "能信安:漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI4NTYwMzc5OQ==&mid=2247500730&idx=1&sn=ea2c3ad10d4c8db36d2505d91d6f6432": "分享两个漏洞,含$3133 Google IDOR", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493189&idx=1&sn=86e0c579d46ccd91b3ef83ddf0346f5d": "2025年2月微软补丁星期二安全更新修复了2个被积极利用的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489629&idx=1&sn=c6f781b20ff35b2d1d19e4a4b61b261a": "Ollama 远程代码执行漏洞 CVE-2024-37032", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484598&idx=1&sn=9b702765222da3a104987fb5ae98ead4": "【漏洞预警】Palo Alto Networks PAN-OS 身份验证绕过漏洞(CVE-2025-0108)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486610&idx=5&sn=b55276c212815c172696415648e34207": "【漏洞通告】QingScan 安全漏洞(CVE-2024-57278)", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247598&idx=1&sn=79fd58e6ca4a35bd46d233ea66b410b5": "OpenSSL软件库曝高危漏洞,可实施中间人攻击 | 微软:生成式AI可导致人类认知能力下降", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650607914&idx=4&sn=b2cdf087af5e06f3cdb6328668060dc8": "自动化扫描利器,指纹识别更精准,漏洞扫描更全面", "https://mp.weixin.qq.com/s?__biz=Mzg4MzE1MTQzNw==&mid=2247491778&idx=1&sn=fd736a204e78369aca87d2c1b1be52a9": "综述导读 | 推荐系统的图基础模型", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314047&idx=2&sn=847279fdf8de4e66a7f4f7fd994a6a15": "特朗普政府拉长0day漏洞披露时间", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314047&idx=4&sn=299b0685f45d0992c27c5998c25440b0": "Windows存储系统现0day漏洞,攻击者可远程删除目标文件", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522224&idx=1&sn=671c73813c868c4819c48a9b54ab1b8c": "Ivanti 修复 Connect Secure & Policy Secure 中的三个严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488973&idx=1&sn=feee940c27412ea94086cdbf97ef6208": "【漏洞通告】Palo Alto Networks PAN-OS身份验证绕过漏洞(CVE-2025-0108)", "https://mp.weixin.qq.com/s?__biz=MzI0MTY5NDQyMw==&mid=2247525477&idx=1&sn=8625f0419bc871098271566762f61337": "开工纳福 | 每日福袋限定开启,提交漏洞福气开奖!", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524008&idx=1&sn=849e37134e6bdeb9f90145812297a26f": "【漏洞通告】Palo Alto Networks PAN-OS 身份验证绕过漏洞(CVE-2025-0108)", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650621021&idx=1&sn=5af15ca70447e4754a7581411f64889f": "涉及67个漏洞!微软发布2025年2月补丁日安全通告", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495873&idx=1&sn=059b6f320204da5222a5e0d8add6cfc9": "【论文速读】| CleanVul:利用大语言模型启发式方法在代码提交中进行自动的函数级漏洞检测", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135088&idx=2&sn=b3e7b1d94c192ca5610f346b402f8a00": "字节跳动因代码侵权被判赔8266.8万元;私募股权巨头竞相“抢购”,趋势科技或将私有化 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490492&idx=1&sn=29d3c3b95a3c8ac0a97aa898de368efb": "创宇安全智脑 | 网心云设备管理平台未授权访问等130个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553613&idx=1&sn=8601dbaec2dff6f45a92dafcbff4c197": "禅道后台命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499770&idx=1&sn=f303a687ebe9206f9735cb7e9d60641a": "让 Deepseek 帮我写 POC,又快又准确!", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484329&idx=1&sn=a7bf52780d272141894aa95d9382a988": "【漏洞预警】Github Enterprise Server 身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247510342&idx=1&sn=ff685c0b9a8b1eb4a953e98851a0e210": "微软2025年2月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzkyNzg4NTU0NQ==&mid=2247485005&idx=1&sn=4a6aeeddc0d40782e325c9956a678801": "Zer0 Sec团队2025新年首次开班 | 一起解锁技术新高度", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489251&idx=1&sn=0426db63fe3eca49229189fb6bd895f6": "Django SQL注入漏洞(CVE-2022-28346)", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc0Mjc3NQ==&mid=2247486642&idx=1&sn=2a4412e22514eb07569751c0fa0362af": "随机数、XKCD 漫画与 ZEN 系列最新 CPU 漏洞 CVE-2024-56161", "https://mp.weixin.qq.com/s?__biz=Mzg5MDQyMzg3NQ==&mid=2247484049&idx=1&sn=1b8ee0ba2139231aae6a1105ead8a6d4": "AI 抢安全工程师饭碗?这款工具让 POC 自动生成,支持DeepSeek等多模型!", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518586&idx=1&sn=2b3b596e3315f87fc11e82432b96214f": "利用js挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTAxMjA5Mg==&mid=2247484483&idx=1&sn=9dc0439726aa3ef90edd12c0aa58ba49": "首个GPU容器逃逸: NVIDIA Container Toolkit CVE-2024-0132 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487292&idx=2&sn=2eff3ed132d0a5b8a788a029441600a6": "Java实战篇-XXE漏洞利用从潜到深", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067800&idx=4&sn=ff3f3221472a2c3db7a23c81342c355a": "【安全圈】微软提高了Copilot AI漏洞赏金计划的奖励", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462614&idx=1&sn=cf6b570afb40e3bb45a01990c83da9a6": "CNNVD关于Palo Alto Networks PAN-OS 安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490190&idx=1&sn=bf3b832d82d575fb64000a004b6afd4d": "Z0SCAN一款基于Python3的主、被动扫描器|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260573&idx=1&sn=ae97094d57e6ca2ce1dcbd45d56b6076": "一个价值$100的漏洞发现", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485370&idx=1&sn=d25624fafddb6daf098c27bc55c8c8c6": "漏洞利用-可绕过已修复的NVIDIA容器工具包漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493559&idx=1&sn=6dec9fba6cdf6c92543df30c61371e0a": "JeecgBoot漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492249&idx=1&sn=2a8ad35b68ea767f281b27c83bdbf6f0": "漏洞预警 | IBM Security Verify Directory命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492249&idx=2&sn=ff479e9991791e89ca2af10254abafdc": "漏洞预警 | 大为知识产权协同创新管理系统未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492249&idx=3&sn=4279eb326b695d9759fc35959bc29627": "漏洞预警 | 平升电子水库安全监管平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507470&idx=2&sn=2d6ee715c6ec0a9fc4d7b86617b1dbb4": "暗网情报4则:又见SS7漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MDA5Mzg1Nw==&mid=2247486918&idx=1&sn=0bd313862a866fe51cf12882abdbafd8": "网安60秒丨文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495138&idx=1&sn=d38688cdf0ab432e603a39fe158c40be": "近期暗网 0day 威胁情报预警", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513734&idx=2&sn=950086d8fed7b88398537c94f251f1bc": "DeepSeek与OpenAI隐私政策对比:数据安全与用户权益的平衡考虑", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499780&idx=1&sn=e4354abba5ca24eaf695664592528fea": "Deepseek 有多强?延时注入检测 POC 只需一步,即可获取完美 POC 模板!", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727844111&idx=1&sn=1ded95f6c8b62f80377dbb25fabb5124": "浪漫来袭,单个漏洞达3w+,为你的恋爱基金添砖加瓦!", "https://mp.weixin.qq.com/s?__biz=MzkyOTQyOTk3Mg==&mid=2247485080&idx=1&sn=d6b096febd48fe0e88e0fccdd1f78146": "Ollama 目录遍历致代码执行漏洞 CVE-2024-37032", "https://mp.weixin.qq.com/s?__biz=MzUzNTI2MzU0OQ==&mid=2247497624&idx=6&sn=f81282855880d0400cfc10b6971f3fb5": "【网安洞察】漏洞利用分析:大众汽车近百万用户位置信息泄露事件", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247486015&idx=1&sn=dc02d7fa037fb872aa70e73b0dadb162": "CVE-2024-12797 修复指南", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037493&idx=1&sn=2946b3235a67d3e132aa11077a0ffa41": "手机短信轰炸与群发漏洞防御总结", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487766&idx=1&sn=bc34cb6287036636aacba0bc250ed36c": "EDUSRC漏洞挖掘技巧汇总+信息收集各种姿势", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490429&idx=1&sn=2ab0287fe70757abcc0b6b0802b9bba2": "郑州时空-TMS运输管理系统 GetDataBase 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzM2MjM0OQ==&mid=2247495722&idx=1&sn=893e66971463f7661828ab04451e1212": "LLM 提高 SAST 的代审效率的思考方向", "https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247486936&idx=1&sn=62a7d979e9c737398d16067065173053": "DeepSeek 大火下的本地部署问题:Ollama + 暴露端口 = 安全漏洞?", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247485834&idx=1&sn=c40fa31994263b8762d85e6b500f7453": "手把手教你审计PHP CMS漏洞 | 某腾CMS漏洞实战案例分析", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500635&idx=1&sn=3c3d582f04eee3e1dc7388c4509d9e1f": "【高危】AI大模型部署软件Ollama 未授权访问漏洞,警惕你部署的大模型被别人使用。", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501146&idx=1&sn=90497fe1fb951860c7927052f13be74d": "连环作案|zkLend 被黑深度分析,关联 EraLend 事件", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490877&idx=1&sn=935ce4d49048978d07a6d6b6e366d4d9": "能信安:漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkwMDMwNDgwNQ==&mid=2247485658&idx=1&sn=4cde13c89f470e234da4fb928192b9e2": "如何使用AI进行漏洞挖掘?完结!", "https://mp.weixin.qq.com/s?__biz=MzIwNjQ4OTU3NA==&mid=2247510118&idx=1&sn=f017ba4c2496a969dc6ca729f1a57426": "关于天际友盟", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247486403&idx=1&sn=9d92e338d6da7fa3703918469be653c3": "今日推荐容器漏洞扫描器:Trivy", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794168&idx=1&sn=d30fb9948566c2faef3b286cf3e6cd46": "Salt Typhoon 威胁组织利用较旧的漏洞破坏了思科边缘设备", "https://mp.weixin.qq.com/s?__biz=Mzk1NzI5NzA3NQ==&mid=2247486560&idx=1&sn=ed76a81669a91887f9db51dfd0ea0ef4": "漏洞扫描工具:AWVS", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664236773&idx=5&sn=17ed6c5d762f56355e082bcd5ff357cb": "CNNVD | 关于Palo Alto Networks PAN-OS安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094810&idx=1&sn=709cf4406367e974093c79b82a78f932": "WinZip 存在远程攻击者执行任意代码漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650621058&idx=1&sn=814edd4d94d2d4d5828586bc8833897f": "已复现!Palo Alto Networks PAN-OS 身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522232&idx=1&sn=cb025b96489e2100ef0f614b779833d4": "斯巴鲁Starlink漏洞可导致汽车遭劫持,主要影响美加日三国", "https://mp.weixin.qq.com/s?__biz=Mzk0NTg3ODYxNg==&mid=2247485123&idx=1&sn=d12fd7b9d4a9b2736ac64a452d866bb1": "支付漏洞四舍五入", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489589&idx=1&sn=ec59249fd16d4bf096fe03c2284fe995": "【漏洞预警】Orthanc身份认证绕过漏洞(CVE-2025-0896)", "https://mp.weixin.qq.com/s?__biz=MzIyMjQwMTQ3Ng==&mid=2247491083&idx=1&sn=bd75366a99a44d73b6ebf64acd3824ad": "【国际视野】美国网络安全和基础设施安全局和联邦调查局联合发布《设计安全警报:消除缓冲区溢出漏洞》", "https://mp.weixin.qq.com/s?__biz=MzUzNTg4NDAyMg==&mid=2247492393&idx=2&sn=1ab4e7a169bb4e9d0bc14e13b44af581": "全新改版!ISC2云概要证书上线", "https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247486815&idx=1&sn=3284ddeee179003ec71c466d57ddfb5a": "长亭X魅族:All in AI与多云安全擦出火花", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247501999&idx=1&sn=e17d9f9642717ffc7fa622dcfb5417a3": "Microsoft Excel 资源控制不当漏洞 可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247501999&idx=2&sn=b2fa2128cbc00826d9f4799ea38254c3": "Microsoft Windows Storage 需授权 解析缺陷漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247501999&idx=3&sn=d3b84a8fc9064cddb1e550fab0e81b0b": "Microsoft Windows 缓冲区溢出漏洞 可导致权限提升", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247501999&idx=4&sn=7a6994da926b697ec8f30c485db1661f": "Trimble Cityworks 需授权 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247501999&idx=5&sn=759e01e16b89d41a25716b5c5619971f": "Google Goland 代码注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247501999&idx=6&sn=7cdbacb059f6dd73f824304d42ea6217": "Apple iOS等 安全缺陷漏洞 可导致功能失控", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247501999&idx=8&sn=f7686cd3dff5c4052e5a8c6973829ed8": "用友网络 GRP-U8Cloud 逻辑缺陷漏洞 可导致敏感信息泄露", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484095&idx=1&sn=4291f26d60d708ee44796c81558c2a91": "Gen AI 如何将漏洞分析效率提升 9.3 倍", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484384&idx=1&sn=6b9ac958f8cda1f1eff9d636e24f9ee5": "IDocView在线文档预览qJvqhFt.json任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247496492&idx=1&sn=e1f08ec0aa1aa4a2a11eaed5ffa5d888": "一款基于 BurpSuite 新版 MontoyaAPI 的 SSRF 漏洞自动探测插件", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314211&idx=1&sn=08c8f322b781afd8c36557acc5c18407": "WinZip高危漏洞曝光:远程攻击者可任意执行代码", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314211&idx=4&sn=0409ead48650099d21cf3c406df480bd": "黑客利用Pyramid渗透测试工具进行隐蔽的C2通信", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094810&idx=2&sn=656be39cd85d609346a7d34be32580d1": "30,000个WordPress网站因文件上传漏洞暴露于攻击风险", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522232&idx=2&sn=3bc7a4466c3c33ff643ca604524fa401": "Palo Alto Networks 修复PAN-OS 中的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495157&idx=1&sn=9a828441f89b4ab116ea1f4a6b143732": "【吃瓜】疑似国内某 oa系统存在 0day rce", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495157&idx=2&sn=eb45716106d7be7e660cc5d1bb272c55": "美国政府效率部网站 doge 存在漏洞,任何人都能推送内容到网站上", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247518674&idx=1&sn=8a5839f4bd6aea08c59543e1fc84b3b8": "WinZip高危漏洞曝光:远程攻击者可任意执行代码", "https://mp.weixin.qq.com/s?__biz=MzU3OTYxNDY1NA==&mid=2247485016&idx=1&sn=3f8f30a52b34bb167cd7d0fafcd990c2": "一次十分详细的漏洞挖掘记录,新思路+多个高危", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492244&idx=1&sn=cd102439425274e98b1ecb56a3899bea": "PostgreSQL 漏洞与 BeyondTrust 零日漏洞一起被利用进行针对性攻击", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247501999&idx=7&sn=d14025c2eb40663492236ab68aaa73af": "Apache James 未授权 输入验证不当漏洞 可导致拒绝服务", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492261&idx=1&sn=15542626bc61f3c2d79fd1e2ad622101": "漏洞预警 | Palo Alto Networks PAN-OS管理界面身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492261&idx=2&sn=38f4cc5c746eb7fe09e36ad29e85710a": "漏洞预警 | Ivanti CSA管理控制台命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492261&idx=3&sn=90e0d9a96c3684327bddafcb1b4acefe": "漏洞预警 | 思迅商旗商业管理系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247571037&idx=1&sn=a4c20709fcd4e91ee6dc2c0bca97864b": "2025年全新网络安全大师班培训(Web安全、攻防渗透、代码审计、云安全等)", "https://mp.weixin.qq.com/s?__biz=MzkyMjY1NjI2MQ==&mid=2247483972&idx=1&sn=95cc21cf1d38bb9e9b6468de8580c3cc": "jeecgBoot漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489640&idx=1&sn=e57ea32bd4a7e9114628507c2d6e8d87&chksm=fb029530cc751c263986fd9ab93607d64eb1341f2b764780f3f5f69306e7b32e29f5b645bd47&scene=58&subscene=0": "Ollama zipslip 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314214&idx=1&sn=a1056bf9ab3938cd65066bb748645eab": "超大规模物联网漏洞事件曝光:27亿条数据泄露,含WiFi密码", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314214&idx=2&sn=ef30c6d1e6b611c95807734158569fb1": "FreeBuf周报 | 全球VPN设备遭遇大规模暴力破解攻击;OpenSSL 软件库曝高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491524&idx=1&sn=8f7c279bc6618681ec27b68cbc6ebec5": "DeepSeek 大火下的本地部署问题:Ollama + 暴露端口 = 安全漏洞?", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650608048&idx=4&sn=da8eb02ada2d9899ca9e2d88a50bba9e": "基于 BurpSuite 新版 MontoyaAPI 的 SSRF 漏洞自动探测插件", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794184&idx=1&sn=b981b65c831b421f1865a13d8f41a3ce": "以色列威胁情报公司ClearSky发现 APT 组织利用 Windows 新0day漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484503&idx=1&sn=d029caaad7130a3108019d9dd2f044f4": "03 漏洞从哪里来?——编程习惯", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114483&idx=2&sn=d435e59c50209ae74c02eb71ae61b191": "SonicWall防火墙漏洞PoC发布后遭利用", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247488699&idx=1&sn=1a44249f9b678443b61af9340436bcf9": "2025 最佳漏洞赏金书籍和网站", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247496500&idx=1&sn=7b4515108049356788359df518ec0a68": "自动化扫描利器,指纹识别更精准,漏洞扫描更全面", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527809&idx=2&sn=2d61b3262a97ddc66b583f26e7636c73": "CVE-2025-1240:Winzip漏洞打开了远程代码执行的门", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485812&idx=2&sn=75ac3bc6111bd2c99e9f112d5230b51b": "CVE-2025-0108|Palo Alto Networks PAN-OS管理界面认证绕过漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485812&idx=3&sn=59502076ba73b38962af8c4347429207": "CVE-2025-25064|Zimbra存在SQL注入漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589653&idx=1&sn=433781729a15abe45f89994393707a90": "PWN入门:异常变漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499437&idx=1&sn=bbbbf3016991c2b228c54ce492fae81a": "Palo Alto Networks PAN-OS 身份验证绕过漏洞批量检测脚本(CVE-2025-0108)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492245&idx=1&sn=5c3da14e0619b953b786741ae36ed742": "黑客利用 Cityworks RCE 漏洞入侵 Microsoft IIS 服务器", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502017&idx=1&sn=a2d8c702dc1223d85a28e0f7b4c9932a": "Rsync Rsync 未授权 缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502017&idx=2&sn=b8fb248bcb0171caf5d15b3c2a71241f": "Fortinet FortiSwitch 凭证管理不当漏洞 可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502017&idx=3&sn=75531a889717b200ac12ddb226e86d3d": "SAP NetWeaver Application Server 身份验证缺陷漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502017&idx=4&sn=fa110e1c88ed8ea6e80dbf638f172b83": "Fortinet FortiOS等 身份验证缺陷漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502017&idx=5&sn=499042d799975b7f2a9e114d995895e3": "蓝凌软件 EKP系统 sysTagWebService 未授权 外部资源引用不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502017&idx=6&sn=41e072b192f7fc3e34c3f8f06adf6e85": "蓝凌软件 EKP系统 sysNotifyTodoWebService 未授权 外部资源引用不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502017&idx=7&sn=652391caae54e84b6dd500006e9f9ba5": "蓝凌软件 EKP系统 kmImeetingBookWebService 未授权 外部资源引用不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502017&idx=8&sn=9bc958d15dc346ade48637d500a2a65f": "用友网络 用友NC linkVoucher 未授权 SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484106&idx=1&sn=f398b5755112251a67ba7163915a09b7": "2024年CVE漏洞数量激增38%:2024年CVE漏洞数据全景分析", "https://mp.weixin.qq.com/s?__biz=Mzg4NDc0Njk1MQ==&mid=2247487208&idx=1&sn=fdbfc3e75595ab7e36245db8e8891bcf": "网络安全中的“人性漏洞”:如何解决员工安全意识问题?", "https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166981&idx=2&sn=be8aa9a973159960c5a2529b3646bc08": "OpenAI 用于对抗高度依赖英伟达芯片的秘密武器成形", "https://mp.weixin.qq.com/s?__biz=MzkzODc4NjE1OQ==&mid=2247483939&idx=1&sn=45a4d08a8f56870c03669742f5e13133": "攻防技战术动态一周更新 - 20250210", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527809&idx=1&sn=4c9a289c886b612b0aa4b0d377e9ace3": "首次分析 Apple 的 USB 限制模式绕过 (CVE-2025-24200)", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513743&idx=1&sn=bbb290f45690884b2d92cb3ec0bf760f": "美国政府未来四年或加大零日漏洞储备以支持网络攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490033&idx=2&sn=71953f038039a18002695d97ccd51608": "EDUSRC漏洞挖掘技巧汇总+信息收集各种姿势", "https://mp.weixin.qq.com/s?__biz=Mzg4NzkwMDA5NQ==&mid=2247484669&idx=1&sn=7c6b41aedde69a2619f562070e07bc05": "海莲花对MSI文件滥用的新手法——MST文件白加黑复现", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247548165&idx=1&sn=68a28b957dc7395812be3ae38d92cb36": "新手小白如何挖掘cnvd通用漏洞之存储xss漏洞(利用xss钓鱼)", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247487151&idx=1&sn=6437eeee03cd6a0c9213f5e797660259": "「深蓝洞察」2024年度最憋屈的漏洞披露", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507519&idx=1&sn=7e42ceddcbd7c67038c422aaa62f0b1a": "马斯克麻烦缠身!DOGE官网现重大安全漏洞被黑客发布警告信息", "https://mp.weixin.qq.com/s?__biz=Mzg2MDA5Mzg1Nw==&mid=2247486937&idx=1&sn=5b7d1aedf705dfb321294a44ee9248e5": "网安60秒丨反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4MzM4MzQ1MQ==&mid=2247493266&idx=1&sn=ae6720ec4068838a582b90f62c4f281d": "研究生必读:贸易经济论文搜集文献100%全攻略,高分秘籍独家解析!", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094828&idx=2&sn=e00b73792c6010bafd694f144669bc0c": "NVIDIA Container Toolkit 执行代码攻击漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067846&idx=2&sn=cd94ea7cada0daf8d439805d2653a055": "【安全圈】PostgreSQL漏洞与BeyondTrust零日漏洞被联合利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067846&idx=3&sn=4a1a9e96de810a8e68ea6951a76de7f0": "【安全圈】黑客利用智能合约漏洞盗取价值950万美元以太币", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487199&idx=1&sn=d06894113d47469c531261fc1e859ab0": "PowerShell 漏洞利用 — 现代 APT 组织及其恶意脚本战术", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485743&idx=1&sn=60e704c3d5508664425da33ec5bdaff5": "S2-007远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650608065&idx=3&sn=c7d34eae06f416be4c6d10c950b6ec07": "利用js挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650608065&idx=4&sn=9ed3b6993146eb17d459b44de92badb4": "JeecgBoot漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527833&idx=1&sn=dc636474fb5e3a741caa55302a0cfb0a": "AMD贴片会影响EPYC和RYZEN处理器的高度SMM漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495192&idx=3&sn=ededea1ced7cf9f38255b6d817b81182": "SonicWall 防火墙身份验证绕过漏洞在 PoC 发布后遭广泛利用", "https://mp.weixin.qq.com/s?__biz=MzkzMDY3ODg5MQ==&mid=2247484027&idx=1&sn=b1625984432833d38ddd1cb19a0da306": "Deepseek 有多强?延时注入检测 POC 只需一步,即可获取完美 POC 模板", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247514781&idx=1&sn=1b7c5c1a2812367b70f1b070ebed172a": "DeepSeek代码审计技术解析:从模型革新到漏洞挖掘实战", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490243&idx=1&sn=cf746a0875a33ba4fd3c919e3ed69c15": "让Druid未授权访问漏洞危害最大化案例和利用工具|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzkzMDY1Nzc5MQ==&mid=2247483815&idx=1&sn=70578fd573bed32f8b903487d3956a95": "CVE-2025-1127 严重漏洞:利用非特权用户执行和未经授权的数据修改", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527833&idx=2&sn=55af17a0449fcbd2f2f16d0de9034c6a": "PowerShell 漏洞 - 现代 APT 及其恶意脚本策略", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247491560&idx=1&sn=38207e5d3b964e6a72dc91d14270d4fe": "CVE-2024-49194 Databricks JDBC 驱动 JNDI 注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkzNzQyMDkxMQ==&mid=2247487857&idx=1&sn=9d9297fb500f70d8a12d8b11faed976c": "根据POC分析代码", "https://mp.weixin.qq.com/s?__biz=MzA3NDUzMjc5Ng==&mid=2650202986&idx=1&sn=346bd2891d42c7e51096fb18ce5a628e": "御话资讯|一周安全要闻(02.10-02.14)", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655266683&idx=1&sn=fb0dc6533ecce9a02b65d58bb4a60e19": "逻辑漏洞挖掘思路与总结", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655266683&idx=4&sn=62a2c4bb4589aa1aeb0d421aaf7fedf7": "扫码下载今日更新:运营者漏洞管理、企业安全战略", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114488&idx=1&sn=f989ba630707e123288f15ece4aa1875": "Meta支付230万美元的漏洞赏金,美一检察长办公室遭网络攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3NTUzOTg3NA==&mid=2247515217&idx=1&sn=3184598c7d5433e44c347ae4582437ac": "企业漏洞全生命周期闭环管理框架与DeepSeek技术赋能实践", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247496266&idx=2&sn=5002e0a3e9ac066d9c7320a3c9256b6b": "美国CISA敦促开发人员消除缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493216&idx=3&sn=7f08465fc9a6ad10cdb766a2a6986184": "专家发现PostgreSQL漏洞与BeyondTrust零日漏洞在针对性攻击中被串联利用", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493216&idx=4&sn=58f19b6b973f5738f83d2dae141e44b0": "CISA已将Apple iOS和iPadOS以及Mitel SIP电话的漏洞添加到其已知被利用漏洞目录中", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507535&idx=2&sn=291601681d4a5ee3b757d32d4ee44478": "全球谍影扫描【20250217】007期", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037499&idx=1&sn=ab6f919570228078e38934b31cb0b23e": "Android-Webview中的漏洞利用总结", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650608108&idx=3&sn=48fbe58add90888e5fcf96de6a81dab2": "让 Deepseek 帮我写 POC,又快又准确!", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492273&idx=1&sn=079cc9a5565d053368fb80e9eeb88f8a": "漏洞预警 | 福建科立讯通信指挥调度管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260587&idx=1&sn=96691b525746ca862a4236f44e77b573": "【未经核实】Zabbix RCE PoC 公布", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486534&idx=1&sn=1a37dd48a06207e3a729a10594112ca4": "探索|DeepSeek免杀-弱道德限制的AI才是网络安全的顶流", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247540851&idx=2&sn=383851ac8ce307efc3652c13c8f2ad61": "网络安全中的“人性漏洞”:如何解决员工安全意识问题?", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MjAwNQ==&mid=2247486793&idx=1&sn=90f5f24e0bb7d2b3f4e1b5fad6542844": "软件供应链攻击:一次价值50,500美元的重大漏洞发现", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493216&idx=1&sn=f41b256657a71a23085921b184805b40": "攻击者利用最近披露的Palo Alto Networks PAN-OS防火墙漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODY3ODI0Nw==&mid=2247484106&idx=1&sn=b4be72b27886e7eb52c4f279aba397a9": "Cacti网络流量监测图形分析工具 任意文件写入漏洞 CVE-2025-22604", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650990591&idx=1&sn=a1f162313bc06603add4797b30daeba3": "原创 Paper | Zyxel Telnet 漏洞分析(CVE-2025-0890、CVE‑2024‑40891)", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487200&idx=1&sn=75d5511b69c66295a44d7dfea4278cf1": "AD CS ESC15 漏洞实例的特殊案例及其手动利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314280&idx=3&sn=a9b3d5d667c3070496a5c806eb3afffd": "SonicWall防火墙认证绕过漏洞正遭大规模利用", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495778&idx=1&sn=336bdb3940503b48c6b589da97ae2ffe": "CNVD漏洞周报2025年第6期", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506108&idx=1&sn=e3f2546270213664751742608420b0db": "每周网安资讯 (2.11-2.17)|Jsish存在跨界内存写漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541600&idx=1&sn=5c1c54f70df3464f6242215a65e64af9": "OmniGPT遭黑客入侵,3400万用户聊天记录外泄,信息安全敲响警钟!", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589660&idx=3&sn=a91d86cb6388b5fca042190152a82a3b": "今日更新第2章!系统0day安全-Windows平台漏洞挖掘(第5期)", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247717&idx=1&sn=6c555c7c98615814a6535053c5cd3756": "原创 Paper | Zyxel Telnet 漏洞分析(CVE-2025-0890、CVE‑2024‑40891)", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513752&idx=1&sn=39cc6a0e87b2d70d65cdc8731d42f1e2": "Palo Alto防火墙又被黑:最新漏洞披露后第二天就遭利用", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553673&idx=1&sn=3add3da2f52d88ebdbc62a26d27b3674": "pocsuites安全工具源码分析", "https://mp.weixin.qq.com/s?__biz=MzkwNjY1Mzc0Nw==&mid=2247486797&idx=1&sn=b662e0785cd134a8fd2f452daaeaa250": "腾讯偷偷接入了DeepSeek,也偷偷公布了大模型框架的漏洞和CVE", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484504&idx=1&sn=4cf348cbcf3e32b569ae015c5083896b": "04 漏洞从哪里来?——认知局限", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489278&idx=1&sn=3fd21ea40cd96b88b034e0f9dd207dad": "Hoverfly 任意文件读取漏洞(CVE-2024-45388)", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247536265&idx=1&sn=e73697b8bc66609c73db9ca14c3de805": "24%的网络漏洞在被修补前已被利用", "https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650559751&idx=1&sn=1e7783138cc61d431734aca6abae2854": "如何借助开源情报实时洞察北约军舰轨迹", "https://mp.weixin.qq.com/s?__biz=Mzk0NTMyNzI4MQ==&mid=2247484818&idx=1&sn=96464e8d385841931659d60467213cbd": "[小记] 共享其他人使用Ollama部署的AI模型", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490878&idx=1&sn=8b098b9dc0a64f9816d9cc15871f75d1": "能信安:漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581171&idx=3&sn=404de23a42d642551b4263a4ef5e5e03": "安全动态回顾|国家网络安全通报中心通报重点防范境外恶意网址和恶意IP 微软2月补丁星期二发布多个漏洞安全更新", "https://mp.weixin.qq.com/s?__biz=MzA5MTYyMDQ0OQ==&mid=2247493695&idx=1&sn=a2b364d43e5f2d83ca3fefd3f12fa0f5": "医疗行业数据安全风险评估实践指南(4.3)", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489662&idx=1&sn=9edd69a151d726cc1fb0956037207142": "揭秘NVIDIA AI安全漏洞:CVE-2024-0132深度剖析", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499795&idx=1&sn=0e6f5223c5dcf3b6c27eb6bda791e21d": "AI 的加持下,不懂代码,也能完成 POC 编写!多种语言 POC 一键转换!", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488025&idx=1&sn=c363ba5ade07c0ff910cb675933e817a": "锐明Crocus系统Service.do接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490037&idx=1&sn=75ac0191e779b60a0a67beee4b37b6ef": "S2-007远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247496511&idx=1&sn=092c1a55a23f5c7c0c8de0d40107c128": "Apache Tomcat 条件竞争致远程代码执行漏洞(CVE-2024-50379)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489604&idx=1&sn=b2c28b868e4f74ee12cccc280fb80df7": "【漏洞预警】jsonpath-plus存在远程代码执行漏洞(CVE-2025-1302)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495778&idx=2&sn=5301a0f00db8f69567b6be8758e4b7e1": "上周关注度较高的产品安全漏洞(20250210-20250216)", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516050&idx=1&sn=643f1d46fcb1881ecbd4e91a6798dfd5": "Aboutxxl-job最新漏洞利用工具(2月14日更新)", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247518721&idx=1&sn=2cfe5c67aa07e392ab707e85320267eb": "Go语言ssti漏洞", "https://mp.weixin.qq.com/s/wmr9SyAr06iEGdQrWIFwKQ": "Tips | 提取java应用内存从而直接获取明文密码和配置信息的方法", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581171&idx=1&sn=322267dfcff7b72c9907e1bfeb0e3ac5&chksm=e9146dc9de63e4dff4e79f5350c061c75033f964a32277104652b1f9f46fcf63f657ace60f6d&scene=58&subscene=0": "利用旧的ThinkPHP和ownCloud漏洞的攻击事件激增", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498952&idx=1&sn=a08ebc1ce872683b07a16218dbcbc8e9": ".NET 通过代码审计发现某 OA 系统全局性权限访问绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484408&idx=1&sn=716847d5f5891d0ccd9b5f2e5cad2384": "快排CMS-Socket.php-日志信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490879&idx=1&sn=863d65ed09d2832930606de282400cbd": "能信安:漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247497471&idx=1&sn=72d14df7eae39f856c3cf1f0173ab801": "【漏洞与预防】远程代码执行漏洞预防", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502270&idx=1&sn=e2e779dd3d5fe78788bccb1077b4190a": "不要只卷Web安全,硬件安全值得推荐", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489059&idx=1&sn=82637234f8498bd6055b10420c3494c9": "【安全研究】如何用 DeepSeek AI 去跟进最新的CVE漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523514&idx=1&sn=6848591f9dfcc44bed2e900350e55518": "SonicWall防火墙认证绕过漏洞正遭大规模利用", "https://mp.weixin.qq.com/s?__biz=MzI5MTIwOTQ5MA==&mid=2247487711&idx=1&sn=961d2d080a4b6959439f9c600e9bf75d": "同源策略漏洞初步学习", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247548196&idx=1&sn=7dbc0c78363e224b31b64408b0706a2f": "记一次src通杀漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615502&idx=1&sn=e22533c3ad06135297edbbe475a22477": "漏洞赏金实战分享 | 发现并利用开放的 SMB 服务", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247617&idx=1&sn=2f352d21f8ddb8241554fd23142026b2": "Palo Alto防火墙又被黑:最新漏洞披露后第二天就遭利用", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485049&idx=1&sn=2c3c26e2c4796c0f8af116747bc1187b": "腾讯云安全中心推出2025年1月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247490119&idx=1&sn=f98b8b918117932c3314605fcd00097c": "Docker容器5大致命配置错误,一个疏忽就是大规模漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490469&idx=1&sn=2861f809267604c82b092a6c7617beb3": "用友NC checkekey SQL 注入漏洞(XVE-2024-37013)", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519469&idx=2&sn=43a03341f38553bba3c4f126f3686c21": "“挖漏洞换酒钱?通过信息收集挖到企业的严重漏洞全纪录思路分享 | 干货", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499808&idx=1&sn=1c6724f7a6565b221b60843413d36b8a": "高效检测 SQL 注入漏洞,自动化实战经验分享", "https://mp.weixin.qq.com/s?__biz=Mzk0MTUxNzAxMg==&mid=2247484168&idx=1&sn=62f27fd16580b67a0032af61075f7153": "Catcher外网打点指纹识别+Nday漏洞验证工具|指纹识别", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490459&idx=1&sn=4a8e82f6583b5e64626d1303f8cc7f5f": "蓝凌EIS智慧协同平台 fi_message_receiver.aspx SQL注入漏洞(CVE-2025-22214)", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247484873&idx=1&sn=f3cbed791a94bce03ddb2345d14d0b9f": "如何找到越权漏洞?", "https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247497243&idx=1&sn=879f91b4f2ea241542436c8b724747a4": "本地部署DeepSeek-R1", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484334&idx=1&sn=f4599ad3ed50659f274d2b35c7589312": "【漏洞预警】Cisco Meeting Management客户端-服务器权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247488289&idx=1&sn=4adfd4de8707c7989afa203de3cd49f2": "常见WEB漏洞—SQL 注入", "https://mp.weixin.qq.com/s?__biz=MzkxMzQyMzUwMg==&mid=2247486443&idx=1&sn=9bf618a3a424cefc958f0ca4a7a0c934": "SRC实战系列-记某次大学漏洞挖掘经过", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314351&idx=1&sn=a008bd32d4ac4e5ba959a13e6714c501": "ChatGPT Operator 遭提示注入攻击,泄露用户隐私数据", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067874&idx=2&sn=634853ba2d9852cc240a7d5d46ce82c5": "【安全圈】俄罗斯黑客利用 7-Zip 零日漏洞攻击乌克兰", "https://mp.weixin.qq.com/s?__biz=MzAxMDQxODk4NQ==&mid=2247484364&idx=1&sn=6e261738ce559083feb198bd1fcef489": "继上次ollama自由后,又一次自由……", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522257&idx=1&sn=f4ba8096e5c48add46aab6c9f0f9b6db": "美国政府:开发人员应停止制造“不可原谅的”缓冲溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522257&idx=2&sn=9b28d0ae22a8aee011365d83bbe3e244": "VeraCore 两个0day漏洞被用于实施供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653931568&idx=1&sn=717c83d99ebeb4b1ad0806e4de9f8f6d": "《科学数据安全分类分级指南》等5项国家标准发布", "https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486178&idx=1&sn=0582e8fd5a1c4aa57ec6fab589ffa06d": "埃隆·马斯克的政府网站漏洞曝光,黑客留下嘲讽信息", "https://mp.weixin.qq.com/s?__biz=Mzk1NzI5MTc0Nw==&mid=2247485048&idx=1&sn=70c9a4aed11e2474656cc9141ff44488": "【渗透测试Top10漏洞详解·萌新友好版(上)】黑客最爱的5大漏洞竟是这些?", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503318&idx=1&sn=b5b13cfc554a840876a561de454e8f7e": "雷神众测漏洞周报2024.2.10-2024.2.16", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500752&idx=1&sn=aee35d6ecb95122bbaa6dd9b86ee7c72": "安全简讯(2025.02.18)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495247&idx=1&sn=66b1de6e05fb8550eed34aec7d7f156b": "【已关闭】香港:96,000 条 ETAXI 数据暴露于不安全的 Google 存储中", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489623&idx=1&sn=0eb82923c11d936eda41661733bab356": "【漏洞预警】ChurchCRM系统中通过EditEventTypes.php文件的newCountName参数进行SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527921&idx=2&sn=15dd9f4e59983a9c588916d3058ae171": "无休止的漏洞:macOS 漏洞被利用九次", "https://mp.weixin.qq.com/s?__biz=MzU1MzEzMzAxMA==&mid=2247499921&idx=1&sn=dd53eca4974397a099fb2c0461221fc0": "网络安全动态 - 2025.02.18", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650621078&idx=1&sn=da289a9ddcd5331afac177cfbef1d7eb": "CVSS评分9.8!亚信安全率先发现大模型关联Ray架构高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484415&idx=1&sn=768fbab36a3a8a77bd3a61a03f3b85db": "快排CMS-后台XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114499&idx=2&sn=db67506c69d25d3cedf1fe676cd469b3": "安全设计警报:消除缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516066&idx=2&sn=3a67f704ae6f8bdb1dc089aa86160a0d": "APP渗透测试 -- 支付逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499486&idx=1&sn=f1288ef1eda52db67635c3cfdb6af90f": "备案查询、空间测绘、漏洞测试、编码及加解密工具 -- MoonLight", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499486&idx=2&sn=e314f580efe2e6b6c2e655555e9f1e0d": "APP渗透测试 -- 文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxOTQ1OTY4OQ==&mid=2247486550&idx=1&sn=767fc770ad44864d7b3c4b445d59f817": "想本地化部署DeepSeek?这些漏洞要注意!", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247505145&idx=1&sn=f3f6f2766d76d987ba42cffb94bc77f9": "PowerShell 漏洞 — 现代 APT 及其恶意脚本策略", "https://mp.weixin.qq.com/s?__biz=MzkxMjczNzAzMA==&mid=2247485478&idx=1&sn=53eda1c680e45837913c4ff850011941": "漏洞扫描 · 详解", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507561&idx=1&sn=4a2a2cdf4b27de7e5b3515dd1530f63f": "黑客批量售卖多国VPN权限:漏洞利用+社会工程威胁多国关键行业", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247485812&idx=1&sn=9c8041ef6f81b259d3610b44ec4ac76b": "JAVA代审-publiccms_V4_2024_6", "https://mp.weixin.qq.com/s?__biz=Mzk0MDQzNzY5NQ==&mid=2247493215&idx=1&sn=1f6dfb712932a51bf044a0154d86867d": "【红队】geoserver图形化漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzU2NzIzNzU4Mg==&mid=2247489662&idx=1&sn=bf35f2a58e1a6121e3f3ab5e20886407": "带你解锁编码新世界!--随波逐流CTF编码工具使用教程53 --汤姆码Tomtom密码", "https://mp.weixin.qq.com/s?__biz=Mzk0OTU2ODQ4Mw==&mid=2247486837&idx=1&sn=873504acffe5b721cad8340ba89cff36": "探索协程世界:原理、现实与漏洞模式(下篇)", "https://mp.weixin.qq.com/s?__biz=MzkyNzM2MjM0OQ==&mid=2247495879&idx=1&sn=e854ce6f524f5e693ed5c29a51437c34": "Neat Reader存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462621&idx=1&sn=aca0dcf45b6a35456297791968051abb": "信息安全漏洞周报(2025年第7期)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507692&idx=1&sn=7311ec648e06da0783dc83eec9aba48f&chksm=cfcabdf8f8bd34ee59ae8a8d4d1d23ee9224edae49635d0a8ac5b4a6c828c18248f443cc9aad&scene=58&subscene=0": "永洪BI远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522278&idx=1&sn=7cfb4b23ad311c542e16a6d9517313ce&chksm=ea94a68cdde32f9ac833afa12536d7b2cd2202b3e8d1fa6d9863779bcceec652fa2982c74202&scene=58&subscene=0": "OpenSSH 新漏洞使SSH服务器易受中间人和DoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498958&idx=3&sn=a202f6c10e14360aa0b343b40d662a81&chksm=fa595223cd2edb356ea7e34c3324cdb436e25efdda6694e0c079923c8fb7df17a44a545a2a95&scene=58&subscene=0": ".NET 通过代码审计发现某 OA 系统全局性权限访问绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524012&idx=2&sn=9e872e2099b2a438b9e52ddd8f4e0ab7&chksm=ce4615bcf9319caa5caf74fa1b4d125d509dae73e7a802d8975cb8c18c7088a1855c39ada976&scene=58&subscene=0": "CNVD漏洞周报2025年第6期", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067894&idx=3&sn=b32c1ab569fca6e572624325f39c97ba&chksm=f36e7476c419fd60d6c90e1fe3b4a358f007fcdae3939c304c0695cbdcda2a5adc7d383310c4&scene=58&subscene=0": "【安全圈】施乐打印机漏洞危及数据防线,Versalink C7025 用户凭证面临窃取风险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067894&idx=4&sn=85a6a4431ee456852c1e21ec6d1e5c65&chksm=f36e7476c419fd6000d9d45304d2355d038ef135174afcc1f809e8523cd87ae9ff867c33af28&scene=58&subscene=0": "【安全圈】CISA 警告Palo Alto PAN-OS漏洞正在被积极利用", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500758&idx=2&sn=116f8a348755831b0d3b723dfc334945": "【漏洞通告】Apache Ignite远程代码执行漏洞(CVE-2024-52577)", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495915&idx=1&sn=c9215e3d5bcce9991783502f40eb59c1": "【论文速读】| EnStack:一种用于增强源代码漏洞检测的大语言模型集成堆叠框架", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787902&idx=1&sn=71b8270b1a8d55b1d42e0de55fd7e386": "时空穿越攻击!新型LLM漏洞让ChatGPT秒变黑客助手", "https://mp.weixin.qq.com/s?__biz=MzA4MzMzOTQ4Mw==&mid=2453672588&idx=1&sn=e738d8f6ccdd8f084839e810caabd3f8": "速看!OpenSSH 新漏洞来袭,不更新补丁后果很严重", "https://mp.weixin.qq.com/s?__biz=Mzg5MDk4MzkyMA==&mid=2247484544&idx=1&sn=beaee29c49361713503a737687bbe35d": "什么?你还不会代码审计?点进来!", "https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247531754&idx=2&sn=5b9bd6832a1f4db809f9cff35c5cd16e": "荐读丨即将过气的五大网络安全技术", "https://mp.weixin.qq.com/s?__biz=MzUyMjk4NzExMA==&mid=2247505583&idx=1&sn=8ed8a00690db7f06260546c6a5142380": "APT-C-28(ScarCruft)组织利用无文件方式投递RokRat的攻击活动分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522278&idx=2&sn=076acb12a1297f5e59b788217253c1ac": "Juniper 修复Session Smart 路由器中严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247550593&idx=2&sn=0e9833637df9ed5e657cd330c9fc3409": "高效检测 SQL 注入漏洞,自动化实战经验分享", "https://mp.weixin.qq.com/s?__biz=MzIxNTM3NDE2Nw==&mid=2247490346&idx=1&sn=f560ce4ed2559190090871179945ef2d": "试用完 deepseek,感觉到了恐惧,谁来阻止我的胡思乱想?", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484540&idx=2&sn=08af3b7e078ae95b11a9cf488cace84a": "【漏洞处置SOP】Python安全漏洞(CVE-2019-9636、CVE-2023-24329)", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497180&idx=1&sn=8de7c7676f3325422ce674661d8c437d": "【漏洞通告】Apache Ignite远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524012&idx=1&sn=c5a57f9f670e64b0338dd911fc145b72": "【漏洞通告】Google Chrome浏览器缓冲区溢出漏洞(CVE-2025-0999)", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyOTk0NA==&mid=2247488541&idx=1&sn=24d7360957cc7f39ac03a08a4e813833": "BlueKeep远程桌面代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314480&idx=2&sn=8ae67145b646b2f9e3573535a142a7ff": "黑客通过漏洞组合攻击获得Palo Alto防火墙的root权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067911&idx=4&sn=dc16ae2f429d6a98d49cbc1c5cc21999": "【安全圈】Windows磁盘清理工具漏洞被利用获取系统权限,PoC已公开(CVE-2025-21420)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488985&idx=1&sn=b62cb34bf017a9a433ab68cdb21937e7": "【漏洞通告】PostgreSQL SQL注入漏洞(CVE-2025-1094)", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493964&idx=1&sn=63a64ee576d2b3a60107a65348a1f3f6": "springboot actuator漏洞总结", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650277734&idx=1&sn=1de216b8561221dabd6a33ba117b3d61": "盛邦安全入选国家工业信息安全漏洞库(CICSVD)成员单位,助力工控安全漏洞治理", "https://mp.weixin.qq.com/s?__biz=MzI0MTY5NDQyMw==&mid=2247525529&idx=1&sn=b6164d03dd246e1f646619334f822f32": "Ubuntu24.04 提权漏洞实例分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522291&idx=1&sn=2de019743764d5d0f412d9060724fdad": "施乐打印机存在多个漏洞,可导致凭据被盗", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522291&idx=2&sn=d8279f609eb439d7d723557c865748fe": "Apache Ignite 严重漏洞可导致RCE", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490521&idx=1&sn=8e552558b2259edc5d6f4be9dd510ccb": "创宇安全智脑 | 科立讯指挥调度管理平台 set_extension_status.php SQL注入等88个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247571209&idx=1&sn=832936ecfbfba882b9b91688b3adf0a4": "漏洞挖掘 | 从零开始的路由器漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500764&idx=2&sn=27634f716b1374a9a22d6ea89b125687": "【漏洞通告】Google Chrome V8堆缓冲区溢出漏洞(CVE-2025-0999)", "https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486192&idx=1&sn=dce90cd29038d97d163fcb7fccd8ca31": "10美元便可购买访问权限,美国军事和国防凭证泄露", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489304&idx=1&sn=41fbee2422c7667f537e36ddd831c182": "cPanel XSS漏洞分析研究(CVE-2023-29489 )", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490489&idx=1&sn=183b8c37229b670e76ef68266f5ba356": "用友NC FormulaViewAction SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495318&idx=1&sn=e8d1084e98af2c9cc5bb276077c18d3b": "关于 office 内存损坏漏洞利用的最新情报", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495318&idx=3&sn=334299558f90f3a006f59363a3aa1df7": "Sliver C2 SSRF 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495318&idx=4&sn=f9b877b4807f64e8a65d7407f0fcdd77": "【PoC】CVE-2025-21420:利用 Windows 磁盘清理工具漏洞获取系统权限", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495318&idx=5&sn=923974a055355dbc92a2b0ff69e050c4": "Microsoft Bing 漏洞使攻击者能够远程执行代码", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495318&idx=8&sn=377ed29fa036b84186881736727f82d3": "边缘设备漏洞引发 2024 年攻击狂潮", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527944&idx=1&sn=37118bb57429964b615e9e8d3433cf60": "【漏洞预警】CVE-2025-21355:Microsoft Bing 漏洞暴露远程代码执行风险", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527944&idx=3&sn=ba471c29ee364e1f1b5a101125242f0f": "CVE-2025-21420:Windows Disk清理工具漏洞被利用以获得系统特权,POC发布", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc2MDQyMg==&mid=2247486497&idx=1&sn=b6699a63779636dfdbb736ce74f9ef07": "深度修复 DeepSeek 云端部署潜在威胁漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503060&idx=1&sn=3a5570a5f7c2b81a23c0df999dd5f7b8": "【水文章】自动化漏洞验证日记:每天的进步与发现", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581221&idx=1&sn=a58c1531f1796814173c3ec02e2d75ee": "超过12000个KerioControl防火墙暴露于被利用的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MzA0ODUwNw==&mid=2247487153&idx=1&sn=b859e9fb7ddd736a259222d2a545d591": "2025年1月考试成绩", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490303&idx=1&sn=0cf97d3df2509c3607132cac86990998": "基于BurpSuite MontoyaApi的自动SSRF漏洞探测插件|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516076&idx=1&sn=5a3e8111bf52b68d9909ea1fa8cb836e": "Apache Druid 远程代码执行 漏洞检测和利用工具 -- CVE-2021-25646-exp", "https://mp.weixin.qq.com/s?__biz=Mzk1NzQwNjQ4Ng==&mid=2247485248&idx=1&sn=a75fe515c6351305920279a9ac9bba05": "DVWA靶场保姆级通关教学", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489642&idx=1&sn=6064face8a43bfbd44bb352849d43c27": "【漏洞预警】Citrix NetScaler控制台认证权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492639&idx=1&sn=c6b920e5f54817df1df5840de70ac89e": "漏洞复现 || Palo Alto Networks PAN-OS Management 管理端权限绕过", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488048&idx=1&sn=6a4503bd7111e4c49102df95342ccf2a": "泛微e-cology 9 x.FileDownloadLocation接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkzNzU5MDMxOA==&mid=2247484258&idx=1&sn=5ae6363b4f7ed200faa6bae001de4bb9": "Cloudflare + IP白名单仍被绕过?伪造X-Forwarded-For绕过IP白名单漏洞实战", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094840&idx=2&sn=ecc022d7717f5159d2ecb8d5dd385c3c": "Microsoft Bing 远程代码执行漏洞 CVE-2025-21355", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211348&idx=1&sn=a1bbb57d4065a6539e329c6d33c2704d": "Goby工具分享——2250个POC等你来拿!", "https://mp.weixin.qq.com/s?__biz=MzkwNDI0MjkzOA==&mid=2247485878&idx=1&sn=140b24e60ec33962f14d916f17c5908b": "2025HW选手大量招募", "https://mp.weixin.qq.com/s?__biz=MzUzNDMyNjI3Mg==&mid=2247487285&idx=1&sn=39b5ae82c68a7a4e6c428a720d9acbb5": "springboot actuator漏洞总结", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553801&idx=1&sn=99ae54f86adaca86af608a1c81bc699a": "Mongoose 搜索注入漏洞 CVE-2024-53900 到 CVE-2025-23061", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489642&idx=2&sn=92ccce4678d894b8ff4f615634950927": "【漏洞预警】Hitachi Vantara Pentaho未经信任的数据反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NzU4NjkyMw==&mid=2650748026&idx=1&sn=23d88ffbc7950fb789ecde9e1ed8facb": "数据安全风险评估服务:筑牢企业数据安全的铜墙铁壁", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247519387&idx=1&sn=cb3c7e7dbc846a3f7100321de886c823": "从deepseek未授权探索clickhouse命令执行", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247500172&idx=2&sn=8e6a82ef8bfcc689310f3416058b2948": "FOFA API KEY 拼嘻嘻来啦", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507587&idx=2&sn=878473d56c32c8a3835a4393bbcebfd9": "5th域安全微讯早报【20250221】045期", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503030&idx=1&sn=0ab060e1af22e4d3a4dac36f832ed14d&chksm=fe79e82ec90e6138ff406fd5c9a16c94d345f47a1983ba0c406a4f2dbf6397ce682893e7bdc0&scene=58&subscene=0": "【已复现】Ivanti Endpoint Manager 多个信息泄露漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650990698&idx=1&sn=9c120d2f2a1822e13abc8143a6b07f38&chksm=8079aa58b70e234e7a0c943f76adad606a4b20f473b96e8e8749f2a5e5f35f9c21226b28549c&scene=58&subscene=0": "原创 Paper | 基于污点分析的 AI 自动化漏洞挖掘尝试", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498967&idx=3&sn=0409d42dae09be1c6a39ef74eb5b3c4f&chksm=fa59523acd2edb2cdc91665e5be91bb0f0f0bb956e67d7d46f627153df25c2c012f774a22a59&scene=58&subscene=0": ".NET 通过代码审计发现某 OA 系统全局性权限访问绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247489369&idx=1&sn=354272cc8ef4aaea23428d7d748748d4": "SQL注入漏洞批量检查工具", "https://mp.weixin.qq.com/s?__biz=MzkzMDUxNzU3MQ==&mid=2247483990&idx=1&sn=3e92098c973be99444cbd11877511c9b": "2025首波福利,大牛们速度码住!", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495333&idx=1&sn=a06739d7f0087af4742dacc2b56eed4b": "【真 0day】Parallels Desktop Repack提权0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMzcxNTQyNw==&mid=2247485847&idx=2&sn=66e03b3d28688a1a67714c47c33fe648": "25年HVV中的0day防护手法", "https://mp.weixin.qq.com/s?__biz=MzI3NDEzMDgzNw==&mid=2247485126&idx=1&sn=c77d681b3e0d8cfb12669017f6db4f50": "CVE-2024-49112 Windos LDAP 整数溢出分析", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490498&idx=1&sn=d805cfcaceac08ad6730b4f52181df4e": "用友NC importPml SQL注入漏洞(XVE-2023-29120)", "https://mp.weixin.qq.com/s?__biz=MzkxNTczMjA1Ng==&mid=2247483999&idx=1&sn=a9a5e8463d5f1228bb7ebc1d676bcd27": "圈内漏洞文库类公众号疑似上所", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247502411&idx=1&sn=9bfcbe3eba0c751e5bf590e19e885b45": "“万模裸奔”,DeepSeek正颠覆网络安全行业游戏规则", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650608292&idx=4&sn=50c019c3778782a4cdc6731de818d2c7": "sqlmap_gui是一款图形界面化的 SQL 注入漏洞测试工具", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454063951&idx=1&sn=d53cb1073731a3e9748eec66177fc60a": "信息安全漏洞周报【第010期】", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794252&idx=1&sn=6902b69e4fbc1f3242d6b19dd6550cac": "Salt Typhoon 使用定制恶意软件 JumbledPath 监视美国电信服务商", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794252&idx=3&sn=1e4659cba6cadc88a970fdf426f6cf76": "攻击者利用 Check Point 漏洞部署 ShadowPad 和勒索软件", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247518111&idx=1&sn=45b416a0a738520fe25fb20c54dbfe5d": "CNVD证书挖掘:20大技巧,一网打尽安全漏洞!", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492324&idx=1&sn=ad5f9d43df379b94caeac2ab68159764": "漏洞预警 | Apache Ignite远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492324&idx=2&sn=7be8d8428e41c435c552080c21419f48": "漏洞预警 | 浙大恩特客户资源管理系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492324&idx=3&sn=a94856c66b2b7ab250a805f353c37882": "漏洞预警 | 上邦电子文档安全管理系统任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484541&idx=1&sn=57e4d0c60cf1cb54008e73f1b4751545": "05 漏洞从哪里来?——体系痼疾(制度化)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492250&idx=1&sn=52b54f19c92224f00106f3bf69708220": "超过 12,000 个 KerioControl 防火墙暴露于 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzg4MTI0NQ==&mid=2247485642&idx=1&sn=4913c9f2f95530a8ed76be40ce7c439d": "Slack渗透工具箱-一款安全服务集成化工具平台,内置多工具集,支持导入自定义poc", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237172&idx=1&sn=6df6fbe0aeb012eaff194d61f8c490f4": "中国信息安全测评中心主任彭涛:筑牢网络安全漏洞人才基石,打造漏洞治理新范式", "https://mp.weixin.qq.com/s?__biz=MzU2MjcwOTY1Mg==&mid=2247521219&idx=1&sn=0e9681632d0404edbe4ce2e136a3e441": "每周网络安全简讯 ( 2025年 第8周 )", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490882&idx=1&sn=0219f691c40fe35f57f0388fe89127e0": "能信安:漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500770&idx=2&sn=2dbbedd5963caecd1e47a1772b256644": "【漏洞通告】PostgreSQL SQL注入漏洞(CVE-2025-1094)", "https://mp.weixin.qq.com/s?__biz=Mzg3MzUxNDQwNg==&mid=2247483861&idx=1&sn=ca8fc5e2159d6341dff7ffbe48977ce6": "深入浅出反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NDc3NDQ3NA==&mid=2247484643&idx=1&sn=f5f0bc71c2820d1abfb99295fb71fd6d": "漏洞预警 | 安美数字酒店宽带运营系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493243&idx=1&sn=5fa0cd4be8a6c6ea2f2c7f0d52469989": "微软修复了Power Pages中一个被积极利用的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493243&idx=2&sn=fe29f47ba3be810f2d40a88d8889f204": "Citrix 修复了 NetScaler 控制台权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581239&idx=2&sn=b73500f09beeb8531922e5bbe60b7afe": "苹果修复“极端复杂”攻击中被利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247496612&idx=1&sn=538a40dba7b3ec6190fbf1f6447bfc16": "sqlmap_gui是一款图形界面化的 SQL 注入漏洞测试工具", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499777&idx=1&sn=2cb418ec8937da5c3cdd427f2b8dbabf": "G.O.S.S.I.P 阅读推荐 2025-02-21 通往漏洞自动化修复的漫漫长路", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260612&idx=1&sn=21aceafabcc9782891588a07f82d4126": "【$200】一个速率限制不当的漏洞故事", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484194&idx=1&sn=ba76460d3a11bacb42d7e202d16181ae": "[开源 Prompt] AI 增强的漏洞优先级排序", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527966&idx=3&sn=1ceb766907bcba985016112e740222cc": "Google 发布 PAN-OS 防火墙中 CVE-2025-0110 命令注入漏洞的 PoC", "https://mp.weixin.qq.com/s?__biz=MzkwNjY1Mzc0Nw==&mid=2247486910&idx=1&sn=82bd6a405a7ee9f666350d0de1195733": "25年HVV中的0day防护手法", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314586&idx=4&sn=6ca9620e382e1a47895284ec9113cab7": "9万个WordPress站点面临本地文件包含漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067926&idx=3&sn=2d131a8cb6509a43ec57dad0ce5b7216": "【安全圈】赛门铁克诊断工具漏洞可让攻击者提升权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067926&idx=4&sn=0caef5e797b3df5141d039002092ba83": "【安全圈】Citrix 发布 NetScaler 控制台权限提升漏洞的安全修复程序", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247514174&idx=2&sn=baa07aa5fdf6fdee68a0f4271e488d58": "每周高级威胁情报解读(2025.02.14~02.20)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522309&idx=1&sn=edcb7974ccf436c421f7900223071912": "微软修复已遭利用的 Power Pages 0day", "https://mp.weixin.qq.com/s?__biz=MzU0Mzk0NDQyOA==&mid=2247521523&idx=1&sn=bdd34e6543bb83fd592e4e740e73f74c": "新标准!广东省网络空间安全工程技术人才职称评价标准条件", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492251&idx=1&sn=55ed4203d52448e747edd2dcf099d415": "SonicWall 防火墙漏洞可让黑客劫持 VPN 会话,请立即修补", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489647&idx=1&sn=ff0868c8b3b5f4e5ef6172a12d318e2f": "【高危漏洞预警】Ivanti Connect Secure外部控制文件名漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxODIzNzgwMw==&mid=2654070954&idx=1&sn=4778afa8d89c6f2236a8b5e8fa8a80e1": "【公告】漏洞盒子服务器升级通知", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499514&idx=1&sn=e2808f2a9b468980a02bc0c19b1836d4": "Fastjson漏洞探测插件 -- FastjsonScan4Burp(2月20日更新)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522309&idx=2&sn=75d35854eb171a70fb22bd76ed1b2cf4": "Atlassian 修复Confluence 和 Crowd 中的多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486228&idx=1&sn=99cda49883c13096c6a7c7f112ce9574": "SRC实战系列-记某次大学漏洞挖掘经过", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491577&idx=1&sn=5054be93b27132f8e1a7886df1e9dffb": "支付漏洞四舍五入", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650608338&idx=3&sn=4ff6d6b4347f64571169abb17894ff21": "高效检测 SQL 注入漏洞,自动化实战经验分享", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492340&idx=2&sn=b8655f909cd3a92aa77c81b8a97ab8f0": "漏洞预警 | 云出行后台管理系统未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492340&idx=3&sn=cf354202ac70a768414367482ede90c9": "漏洞预警 | 月子会所ERP管理云平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507603&idx=2&sn=bcdb38a497786cc33166dae408d4fb8c": "5th域安全微讯早报【20250222】046期", "https://mp.weixin.qq.com/s?__biz=MzkzMzcxNTQyNw==&mid=2247485857&idx=1&sn=898d8c8593363359aad19d29e85ae037": "高危:Ollama远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247490216&idx=1&sn=e5cc9f4d191703e6067bc26d0ae0a343": "弱权限目录成漏洞温床!3 个真实案例教你如何防范文件劫持!", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492340&idx=1&sn=095a542c437a13ab4926d06cbba74bdd": "漏洞预警 | jolokia JNDI远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497178&idx=1&sn=6f788f65837fb6ca1cbe920215c81bb7": "命令注入漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484218&idx=1&sn=798de36b9ce61a02dfbbd11529d91ff6": "[已开源] 基于大语言模型的自动化漏洞修复技术实践", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068081&idx=3&sn=6d7fd58dc0942e6b518c29bfda1a134e": "【安全圈】微软Power Pages权限提升漏洞被黑客利用,紧急修复中", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651314636&idx=2&sn=2c12b60203f66c0022ea31909d0d2253": "FreeBuf周报 | 马斯克DOGE网站数据库存在漏洞;OpenSSH曝高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247571270&idx=1&sn=fbf06decc398ffe50ab9ae13933fb767": "记一次“安全扫描工具联动”自动化扫描漏洞流程", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247498983&idx=3&sn=30752156e4a2a93c6dd37ef5296630cc": "ViewStates 漏洞,利用 .NET 机器密钥实施代码注入攻击", "https://mp.weixin.qq.com/s?__biz=MzI4NTE1NDMwMA==&mid=2247485256&idx=1&sn=98be3097618a87721f6b3b9ec4d3c3d1": "某红书Shield算法Chomper黑盒调用", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516098&idx=1&sn=ab5b62b94514dded20a6ffd2156df714": "若依Vue漏洞检测工具(2月21日更新)", "https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247492457&idx=1&sn=884a4bedfde17cd6e1e2dd3b403dbac9": "风险评估架构,终于让风险露脸了!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068092&idx=1&sn=2aaad093096f88adba585911871847bd&chksm=f36e74bcc419fdaa044ff4055328159a66579d42cbbbda1577b8e0e97d0077812fe4f0f44877&scene=58&subscene=0": "【安全圈】马斯克DOGE网站数据库存在漏洞,任何人可随意篡改内容", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068092&idx=2&sn=07ceda3a43b852c9147f82cc1ed039fa&chksm=f36e74bcc419fdaac195c826bdb0acc22ee49a2e1a959765c9c3405ad72d8f3cb5509157f596&scene=58&subscene=0": "【安全圈】Atos旗下Eviden公司紧急发布安全公告:IDPKI解决方案曝出高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522317&idx=1&sn=679554b806b7e1fcda5f5a1f19b270d7&chksm=ea94a967dde320710d1dd5fbd642d47741d406b21f64d8dafd7d0345062b52d42a50ee9dd341&scene=58&subscene=0": "MongoDB库中存在多个漏洞,可用于在Node.js服务器上实现RCE", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522317&idx=2&sn=3a958d05dc2598229ad1eb7da729f090&chksm=ea94a967dde320714cf55a2c58671be12fa1315bb5640ff597c526191eb23aa7e61a8fc542ad&scene=58&subscene=0": "CISA:Craft CMS代码注入漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068120&idx=4&sn=d542bcb895565396eeb06f3dd27a9809&chksm=f36e7558c419fc4e47365c9ac74ee849d679cf402628faefbb4eb0797133a5c6f1c29728b35e&scene=58&subscene=0": "【安全圈】CVE-2024-56000(CVSS9.8):KLEO WordPress 主题中存在的账户接管漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495793&idx=1&sn=a9d3ba527b75b54449cd133f15bd15c2&chksm=fd74c0b8ca0349aebb27ab08b9c3493a90fa65c118783dbe7121e0e9d664eaa77661810ea906&scene=58&subscene=0": "CNVD漏洞周报2025年第7期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495793&idx=2&sn=82330f2ae7a0b3481cae459d604b6b4b&chksm=fd74c0b8ca0349aed222ab1262a24463beb77dcef3efbd39c92424f4ae1bd159ba9f9723949c&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20250217-20250223)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503036&idx=1&sn=b53989b1f1d19404316138e3efb8d976&chksm=fe79e824c90e613231b36d1289d873a06ac8a140c180348b3f4d373786f198f2905fb1274ece&scene=58&subscene=0": "安全热点周报:Microsoft Power Pages 零日漏洞遭在野利用", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579638&idx=1&sn=4eb70b16b4f465338ffd109688c9916d&chksm=9f8d27fea8faaee8bbbf94ba27dde01c04ce77031ed7b6061d649828195f10e84619abb9b30f&scene=58&subscene=0": "漏洞致大模型遭“零元购”?360全方位守护企业AI系统安全", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458589963&idx=3&sn=24f46a4871064e20eae0124440b646d7&chksm=b18c2b8186fba29760071b5e7e885fe89940d18102965ecbfd954a022db2c0599c8ccdd7ec6f&scene=58&subscene=0": "今日更新:虚拟机镜像磁盘解密 | 系统0day安全(第7期)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522334&idx=2&sn=474bb8a99d7a850a95b1ba847ff41044&chksm=ea94a974dde32062c02dec1281a683b8abd8c00fcda80eb383e8ae5b015673dcd949cffc9973&scene=58&subscene=0": "MongoDB库中存在多个漏洞,可用于在Node.js服务器上实现RCE", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522334&idx=3&sn=f5c15f723d85e58e935d673891c323e3&chksm=ea94a974dde32062deaa7a995cad497c8687d3ed1373842bcc662824544918475c1ebf48d2cc&scene=58&subscene=0": "CISA:Craft CMS代码注入漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135207&idx=2&sn=fe9fd7cda8c8e759d23a78e5f2bcc243&chksm=bd15ac348a6225224e1cf74ba026bfd1f67c08cafcd68e38e1d81716e85a00ff077493c07592&scene=58&subscene=0": "特朗普“跪舔”马斯克虚假视频惊现美国政府部门大楼;CISA紧急警告:Oracle Agile高危反序列化漏洞正被活跃利用 |牛览", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247491596&idx=1&sn=9170509322096fbfaa92ba72346a68ab&chksm=c311af6df466267ba122fafd1e99a000d38493b92858068fcee7d437aaf234c29eb68e9ff5d0&scene=58&subscene=0": "CVE-2024-56145 Craft CMS 变量覆盖导致 Twig SSTI 漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499005&idx=2&sn=9c47da3e24414169e02a6c2294740935&chksm=fa595210cd2edb06d588fc0bb09c1c0b69c020b0c666f089bf17f53a28b8e2c719690e980d27&scene=58&subscene=0": "碰撞 .NET machineKey 实现远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484256&idx=1&sn=00e13d100666be48e18a69bc0611d063&chksm=c006cb90f7714286e194b9827c65e3f8716ce56b6e458ac167cdcda027109c57f54ab40064b0&scene=58&subscene=0": "数据驱动的终端漏洞治理", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489675&idx=1&sn=3b9c039bf25516fff7f55dd46f35d1dd": "【漏洞预警】Estatik代码执行漏洞(CVE-2025-26905)", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486114&idx=1&sn=5bc2a481b91fd4f6ad611627abc5f6d4": "jeecgBoot漏洞利用工具 - jeecgBootAttack", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497191&idx=1&sn=baaac6b3670ac5a8aae14c92c45e6bbe": "一个挖掘权限类漏洞的神器", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485848&idx=1&sn=e52da92201a82ff09e6115d1b2afd15b": "Log4j CVE-2021-44228远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUxNTQxMzUxMw==&mid=2247525214&idx=1&sn=dca01c9d03af27a6e497e97963bf985d": "安全通告丨网络安全漏洞通告(2025年2月)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522340&idx=1&sn=857f619293015f92aad6d9622d926c9b": "MITRE Caldera所有版本皆存在满分RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486232&idx=1&sn=7ab74584a0de2d86790dcb172bbac6b1": "审计分析 | 一套\"组合拳\"造成文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzE0NjcwMg==&mid=2650199810&idx=1&sn=f082f7a793bd6e080327538ec9460241": "立省110亿!百度完成重大收购", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247488607&idx=1&sn=6a48968640f88948a770a6718c8a1d17": "朴实无华的3.5w美金漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247553945&idx=1&sn=38b7fada5ce5565890cd42a52c455b17": "漏洞赏金多,有些东西千万别碰", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486670&idx=1&sn=b0dcd95f49211359657dca45283ee825": "【漏洞通告】PostgreSQL SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486670&idx=2&sn=fde2e76203b5735bb390f5876ce4a6f5": "【漏洞通告】Google Chrome V8堆缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486670&idx=3&sn=00be7bcfb1dd33ac76a31a49b01bdfbb": "【漏洞通告】深信服EasyConnect 客户端存在本地提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462638&idx=1&sn=b9005ecb68e41b0186d218d424f3954e": "中国信息安全测评中心主任彭涛:筑牢网络安全漏洞人才基石,打造漏洞治理新范式", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247664&idx=1&sn=85ca095106b78ad319fc988a7287d4b2": "Fluent Bit 0-day漏洞使数十亿生产环境面临网络攻击威胁", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485228&idx=1&sn=300d4fe094e069ac035715a6a4be31a2": "紧急预警!CVE-2025-21298高危漏洞曝光,双击文件秒变“肉鸡”!", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485228&idx=2&sn=eb6493f3f9f8f92ae91083d797feee00": "紧急!7-Zip惊现高危漏洞[CVE-2025-0411],解压文件=打开潘多拉魔盒?", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247507680&idx=1&sn=580396b07c1a36ca961383760f8498bb": "AI安全防线崩塌?H-CoT攻击揭示大型推理模型严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490368&idx=1&sn=e2d5a499e383a670e0c1a1e01817105a": "Sql注入漏洞批量检测工具一键排查SQL注入漏洞|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516139&idx=1&sn=b5e760fdeaf9cd3494eddff70ec62994": "XWiki SolrSearchMacros 远程代码执行漏洞PoC(CVE-2025-24893)", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzODA3Ng==&mid=2247484799&idx=1&sn=da5eb9198eb23803c64e9592d31a33bf": "百万赏金漏洞猎人带挖,零基础解锁美刀收入!(3月3日开课)", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486113&idx=1&sn=562b89948be6846c1dc033d8929fd391": "被动流量漏洞扫描器 - fizz-poc", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518639&idx=1&sn=6045c1dffaa09f03dfeac95c5cf02183": "SRC中的重置密码漏洞及案例", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489670&idx=1&sn=3c52fbfee0fce95d32789534caf6cc5e": "【漏洞预警】Lumsoft ERP 8无限制文件上传漏洞 (CVE-2025-1646)", "https://mp.weixin.qq.com/s?__biz=MzkwMDMwNDgwNQ==&mid=2247485669&idx=1&sn=c5c5aac25660a7007a041269156698b6": "如何使用AI进行漏洞挖掘(最终版本)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503327&idx=1&sn=cfd618f99ead03c5e379fba583590fb5": "雷神众测漏洞周报2024.2.17-2024.2.23", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247488586&idx=1&sn=76a22894f1536830f02415de1a4493c1": "勒索病毒\"三步上篮\"?别等数据被\"锁喉\"才喊暂停!", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516148&idx=1&sn=aab94bbe5beec98918553275a3efcdd1": "锐捷RCE漏洞检测工具 -- RuijieRCE(2月26日更新)", "https://mp.weixin.qq.com/s?__biz=Mzk0NDI2MTQzMw==&mid=2247484637&idx=1&sn=44877e35ef515b89336284007c639eca": "之前写的一些工具", "https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247492468&idx=1&sn=d8713a79b21270e5efd6d8930751e06a": "“后大航海时代”,网络安全行业转型思考", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487366&idx=1&sn=a4ed96c104b7cc2fae4fc500cc45b477": "价值3.5W美元的账户接管漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487443&idx=1&sn=30acba9103a0b62da6a7a2fdea10838a": "Windows 内核模式 Shadow Stack 漏洞利用开发研究", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528029&idx=1&sn=401d6ce39283de298cb3743102c3347a": "CVE-2025-20029:F5 Big-IP限制性CLI中的TMSH CLI注入命令注入", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528029&idx=3&sn=e6c881aee33576f9e91f21955a35d166": "0day漏洞:Parallels Desktop Repack Root权限提升", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486670&idx=4&sn=1f86da08882aa6790b84134bb8641b45": "【漏洞通告】Exim存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247491909&idx=1&sn=f5fd8fd25e6516d8db8c5f8798229f38": "大量岗位招聘!护网、等保-密评内推、实习、渗透测试工程师", "https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664993472&idx=1&sn=54ded258b136f6faa8af30fe8ba49892": "洞察 | 从恶搞名人到诈骗作恶,AI换脸背后谨防技术失控", "https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247521962&idx=2&sn=7a7801d113b5fab44d3c0c1f1c531151": "公开课预告 | OffSec OSEE(EXP-401)高级 Windows 漏洞利用开发", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485535&idx=1&sn=9353f37816943231d9288b3379447b41": "工具集:AppMessenger【一款适用于以APP病毒分析、APP漏洞挖掘等场景的Android、iOS、鸿蒙辅助分析工具】", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499017&idx=1&sn=c17b802fed118434bf2134310fadc29e": ".NET 通过代码审计发现某办公系统逻辑绕过漏洞可泄露管理员账户和密码", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650183236&idx=1&sn=1727469ff3beeb950542f8ae4d57d40b": "黑客最不想让你看到的,2024年漏洞攻击数据真相", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492383&idx=1&sn=468fb4f7517fc0a6e0d34fce61a7dfec": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492383&idx=2&sn=aa2a6ffb5f21dcdc7967d3f6c1d8f30f": "漏洞预警 | NUUO摄像头远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492383&idx=3&sn=3aafe209e0546cfe321f5deded92ca4e": "漏洞预警 | 锐明技术Crocus系统信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NDc3NDQ3NA==&mid=2247484683&idx=1&sn=c7a8d6ddd718f3548f93acb0adbccb24": "(0day)漏洞预警 | 安美数字酒店宽带运营系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493675&idx=1&sn=c30e8ce14ecba5195f62ef4fb2e67516": "CyberMatrix 是一个基于 AI 的代码安全分析工具,专注于自动化检测和分析代码中的潜在安全漏洞。", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488070&idx=1&sn=9fac9fc0db517b9c376769c882a60626": "灵当CRM Ambassador接口处存在SQL注入漏洞 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650183220&idx=1&sn=34be8b0d76bc7cd59409ffa3f4f79089&chksm=f4486d88c33fe49e8719753d5ddbafc48d90bc9b5f47766313acf66966eee9fad87a5218edd3&scene=58&subscene=0": "漏洞攻击?拦了!数据呢?丢了!", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503053&idx=1&sn=5fed028268e1c246223907f8312cd7ab": "【已复现】NAKIVO Backup & Replication任意文件读取漏洞(CVE-2024-48248)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650608698&idx=4&sn=de507df2d357c4b2dee963005b2438c4": "若依Vue框架漏洞检测工具,包括 Swagger、Druid、文件下载漏洞、SQL 注入、定时任务漏洞和任意密码修改漏洞等", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491608&idx=1&sn=9914279290b9661d3de7dec861bdbd99": "实战纪实 | 真实HW漏洞流量告警分析", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495551&idx=1&sn=9507c61ecf0dc83c0bb76c22d055671c": "苹果CVE-2025-24104漏洞未完全修复,可以读取沙盒外的文件", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247488546&idx=1&sn=f2302057910e6f3a6440bc67ba1703ed": "审计分析02 | 无鉴权路径拿下文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490390&idx=1&sn=ca485accbb6584c105b9c249cb55d5a4": "安全服务集成化工具平台,希望能帮助你少开几个应用测试|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzU5Mjg0NzA5Mw==&mid=2247494005&idx=1&sn=5524efb1bad095022152fff4f5441be2": "众智维发布|天巢SkyNest R1多模态版本 - 网络安全风险的睿智“听风者”", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486676&idx=1&sn=27cc3db5988b3258f4da361b685a1eab": "【漏洞通告】NAKIVO Backup & Replication任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NzkxMDUyNg==&mid=2247492129&idx=1&sn=483d21c406053478013a0aada7145b74": "通过DeepSeek和通义千问AI,实现越权漏洞检测", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484616&idx=1&sn=75700b8df64f2127eaa8cf2e840d09f3": "【漏洞预警】NAKIVO Backup & Replication任意文件读取漏洞(CVE-2024-48248)", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497213&idx=1&sn=ec9aa0b5d5985a796ae487d9a7430c96": "【漏洞通告】NAKIVO Backup & Replication任意文件读取漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5Njg5ODM0OQ==&mid=2247485997&idx=1&sn=55f4733683a9a17eeefdcc98d83f961d": "漏洞分析 | Apache SkyWalking从SQL注入到RCE", "https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247504375&idx=1&sn=1321d8f000691b7091c52ccfe42b3bc8": "一次JDBC反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTY5NTc2NQ==&mid=2247484149&idx=1&sn=5d4bbf203965b23c9cc8c9d32115c702": "上海企业福利来袭:免费漏洞检测,守护您的数据安全!", "https://mp.weixin.qq.com/s?__biz=MzU4NDExNDQwNA==&mid=2247490030&idx=1&sn=599e9314b2be9d0fee4c225aceed856e": "邀您参加 | OffSec OSEE(EXP-401)高级 Windows 漏洞利用开发", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650608698&idx=3&sn=3c47568230148e36b48a767f67b83009": "【挖洞之旅】一种验证码爆破漏洞的全新思路 | 简单实用", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495551&idx=2&sn=0eb24102813c3af395ce85334889cd16": "暗网 0day 漏洞售卖预警", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489105&idx=1&sn=224715ee4e240f98617531d910c0e58c": "【0day漏洞分析】WordPress Yawave插件存在前台SQL注入漏洞(CVE-2025-1648)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068179&idx=4&sn=39b4a77aebadbd2051b65b5c2aeac879": "【安全圈】CVE-2025-20029:F5 BIG-IP系统发现命令注入漏洞,概念验证已发布", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237530&idx=1&sn=d7efd3424f1b0073011b56155937fd1e": "专题·漏洞人才培养 | 网络安全实战人才培养的难点和对策", "https://mp.weixin.qq.com/s?__biz=Mzg4MTcyMTc5Nw==&mid=2247488493&idx=1&sn=a33b931700102ae3ce9eef7de2021cc8": "实战案例分享:微信小程序抓包(简单详细易上手版)", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135261&idx=2&sn=74d6fa6c49fbd2630c460749eb487fd3": "9.9分漏洞或导致2850多台Ivanti设备系统完全受损;三星系统推出业界首款后量子加密芯片S3SSE2A | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489731&idx=1&sn=2186b5230165ffa81d5b3f73d659278c": "2,500 美元漏洞报告-通过未认领的 Node 包进行远程代码执行 (RCE)", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490550&idx=1&sn=7bcda616277b8dc37ec062c199225436": "创宇安全智脑 | NUUO 网络录像机 handle_site_config.php 远程命令执行等67个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523576&idx=2&sn=5a572048a9e1cb46cbb1e8117f7a27c9": "GitLab漏洞让攻击者绕过安全控制并执行任意代码", "https://mp.weixin.qq.com/s?__biz=Mzg4OTkwMDc1Mg==&mid=2247484821&idx=1&sn=a5ce5d492958d3926abe275e3169f620": "锐明技术Crocus系统 RepairRecord.do SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247490804&idx=1&sn=ca1966f08da9001c172756d604a7b57b": "记一次实战小程序漏洞测试到严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247523576&idx=4&sn=9ca39af0d0b4423c729b0d33d57f7c9e": "Cisco Nexus 交换机漏洞允许攻击者触发 DoS 条件", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247490978&idx=1&sn=0603f40b2f130b53e05b709248fb079c": "能信安:漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664993521&idx=3&sn=ee026e4cb14df1e7019825637039d325": "【业界动态】黑客最不想让你看到的,2024年漏洞攻击数据真相", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490405&idx=1&sn=c411a6e8d31365647016b6219ddc98a8": "RuoYi若依 Vue综合漏洞检测工具支持二开或修改|漏洞探测", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490405&idx=2&sn=b6ab192d3fc3ec2bad8933a82c3c565e": "紧跟网安前沿:获取最新资源与漏洞POC库助你快速成长!", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490405&idx=3&sn=628802b5ca3ef3436daae552654e1362": "分布式自动化信息收集、漏洞扫描-V1.6", "https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650465690&idx=1&sn=650234777d3690854a7df522c77a89ff": "风云卫×DeepSeek-R1(四):当AI侦探团遇上“漏洞迷案”", "https://mp.weixin.qq.com/s?__biz=Mzk0MjM1MDg2Mg==&mid=2247502987&idx=1&sn=0be14c8d2ba66c5b6e6a678036e46aba": "标准研讨 | 《软件供应链漏洞管理平台能力要求》第一次标准研讨会通知", "https://mp.weixin.qq.com/s?__biz=MzUzNjg1OTY3Mg==&mid=2247491833&idx=1&sn=65aaa807093bcf808072079ee26ce664": "告别CVE焦虑!KEV:已知被利用漏洞才是真威胁!", "https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247516236&idx=1&sn=b6c7cfed1dd7e9d9460525fdb3364fb8": "免费公开课预告 | OffSec OSEE(EXP-401)高级 Windows 漏洞利用开发", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484590&idx=1&sn=baa8349e59cd2bd8ebde309628c78c2c": "07 漏洞从哪里来?——引狼入室", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247488638&idx=1&sn=3070b6431948cbbaaf02ab14ec9267cc": "SRC挖掘 | 文件下载漏洞getshell", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247488235&idx=1&sn=37eab098858f4cbdad36610c5a653f67": "74cms 最新 getshell 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247491201&idx=1&sn=88d1b6116dec0dca018f70fdd055e958": "棉花糖居然被开盒了!", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499023&idx=3&sn=cb6f9513abf9c16bdd07066ec58c2663": ".NET 逻辑绕过漏洞审计思路和挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg3NDc3NDQ3NA==&mid=2247484689&idx=1&sn=94527504b2e448aa423093d2f2140618": "(0day)漏洞预警 | 时空智友企业信息管理系统任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900240&idx=1&sn=78dd5740a9bf7c9073a43d0f957c7414": "警惕!全景框架Krpano漏洞遭大规模利用,350+网站被植入垃圾广告", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492396&idx=1&sn=ed27f2ed5b2592447ae166e604933cca": "漏洞预警 | JEEWMS JDBC反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492396&idx=2&sn=e9a5f92ff815052b895b38a29688b87a": "漏洞预警 | 金盘移动图书馆系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492396&idx=3&sn=3302046c21f8615dc58f12ee09881c79": "漏洞预警 | 竞优商业租赁管理系统信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMjczNzAzMA==&mid=2247485516&idx=1&sn=b21abb2c517402ce94496c99bb1bcd52": "网络安全事件分级分类", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247491987&idx=1&sn=4318ab61b6ed26115cf9b92eb5afa6f8": "关于举办“数据安全技能能手”和移动互联网安全工程师(CAPPSEC)2025年第1期培训班的通知", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495649&idx=3&sn=a78b2e70528300c78288e36b7ff0631a": "【吃瓜】gitlab 出现一个有手就行的漏洞,获取34,000 美元的赏金", "https://mp.weixin.qq.com/s?__biz=MzU3ODQ4NjA3Mg==&mid=2247565776&idx=1&sn=9f2e3e0870b849b79993d8e936b06a54": "0Day CNVD-2025-00727 某路由器未授权命令执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247502469&idx=1&sn=29cf28e93c6f19b1db42ec9821aff233": "大模型微调爆出致命漏洞:可导致模型“黑化”", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485238&idx=1&sn=14262b3d99bbb6abdf91c4570388feb8": "Auto SSRF BurpSuite自动化SSRF漏洞探测插件", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485238&idx=2&sn=322ffad55ffa06b05fb5df664b89d5a4": "紧急预警!Windows磁盘清理工具惊现高危漏洞,你的电脑可能面临被控制风险!", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488082&idx=1&sn=117c18babe6945dac69504227343a44b": "瑞友天翼应用虚拟化系统RAPAgent.XGI接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzk0Mjg4MTQxMw==&mid=2247486456&idx=1&sn=aea4e78228a6dc1cea47a6183efa579b": "渗透测试新利器!EZ漏洞扫描器全面解析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522363&idx=2&sn=30341de9895d38b4b0408b086cf54477": "报告:89%的企业生成式AI使用不可见,或造成严重风险", "https://mp.weixin.qq.com/s?__biz=MzkyOTI4NTY4MQ==&mid=2247491173&idx=1&sn=b9ab5a914f6021d8d6413a9918fd7220": "2025鱼影安全SRC精品课程第一期重磅来袭!《0基础到高级SRC漏洞赏金猎人!》", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237597&idx=1&sn=ac246e2e2252c07dfd03b7757a6b724b": "专题·漏洞人才培养 | 以CTF学科竞赛为抓手的漏洞人才培养探索与实践", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727844161&idx=1&sn=922ae5543dc979d89fee696210936a08": "城堡的小门:v8类型混淆漏洞CVE-2024-4761分析", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247495649&idx=2&sn=242368d99a4bfaa3bcd2af56491c1405": "【PoC】Windows Hyper-V NT 内核集成 VSP 提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496264&idx=1&sn=9a1a67f0fecf0b9f4c5afe51f253f839": "2024漏洞风险启示录:在攻防的螺旋中寻找【治愈】之道", "https://mp.weixin.qq.com/s?__biz=MzkzNjM4OTM1Ng==&mid=2247484080&idx=1&sn=1f8dc22338cd58512721297db9b477d1": "POC 管理工具AI版", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484441&idx=1&sn=f515a679c8eccd2f9698e3c566632e4f": "DVR-登录绕过漏洞-CVE-2018-9995", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484436&idx=1&sn=1eb39ebd2440e86d300f887aba8b4c10": "DT-高清车牌识别摄像机存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541657&idx=1&sn=a93d9fcd2d271eafbd57bf563e4e4be1": "苹果 Find My 网络漏洞让黑客可以悄无声息地追踪任何蓝牙设备", "https://mp.weixin.qq.com/s?__biz=MzIxNDIzNTcxMg==&mid=2247506995&idx=1&sn=f7b2a679150c1e6d0892c4c0f69476b4": "强国之路|网络强国 加“数”前行", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484117&idx=1&sn=67d5f69d1ee2df37f4cf112d0d5e4b9f": "PbootCMS最新代码注入漏洞(CNVD-2025-01710、CVE-2024-12789)", "https://mp.weixin.qq.com/s?__biz=Mzg4MzY5NjIyMg==&mid=2247483836&idx=1&sn=337d60ac261c7d9b3f9502d461eb2da1": "分享一次组合漏洞挖掘拿下目标", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzODA3Ng==&mid=2247484804&idx=1&sn=b170440f0a649057257155e770b161c5": "百万赏金漏洞猎人带挖,进阶解锁美刀收入(3月10日开课)", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491633&idx=1&sn=03d6a3f8d696ac65dfed03504c18209a": "记一次实战小程序漏洞测试到严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NDc3NDQ3NA==&mid=2247484700&idx=1&sn=35f4cdbcfc63fdbd774e14e4a033d88d": "记录一个src挖掘的骚思路", "https://mp.weixin.qq.com/s?__biz=MzA4NzA5OTYzNw==&mid=2247484559&idx=1&sn=87f9d38120eb1812acdf9d467b0086fc": "如何修复常见的WEB漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489687&idx=1&sn=bacf6474bf5e8f17cc9924c660a0c8c0": "【漏洞预警】Apache InLong任意文件读取漏洞(CVE-2025-27531)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503061&idx=1&sn=d35bc82adb76b97ee71ebd660128a85d&chksm=fe79e84dc90e615b14715455df9ec7a0e2bd9fe219cbe0c114bef033092b8ebd014e8e51a106&scene=58&subscene=0": "【风险提示】 DeepSeek等大模型私有化服务器部署近九成在“裸奔”,已知漏洞赶紧处理!", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492715&idx=1&sn=d7bae998bce7c8a9f1c6db0d49b80710&chksm=96f7fb06a1807210413176f7d16cd222ef6f5822c05c0e4303601397e050deb411274caac59c&scene=58&subscene=0": "【已复现】Ollama 未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NTEwMTMxMw==&mid=2247485692&idx=1&sn=4d9815de776a858efcd4aca02abca123": "【漏洞复现】可以白嫖别人的AI模型了?你的被白嫖了吗(Ollama)", "https://mp.weixin.qq.com/s?__biz=MzkwODY2MzMyMA==&mid=2247484544&idx=1&sn=2716c322ed455d4953daf0191a514256": "【6-2w$赏金】我的微软漏洞赏金 - 大结局", "https://mp.weixin.qq.com/s?__biz=Mzg4OTI0MDk5MQ==&mid=2247493462&idx=1&sn=18148cbb374422b1f16cd84f282338cf": "十几万个漏洞POC,直接梭哈", "https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247526517&idx=1&sn=1d00946ea3bf689b279f9318670cb530": "2024漏洞风险启示录:在攻防的螺旋中寻找「治愈」之道", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247484936&idx=1&sn=e11d6be021cee243d816d35d640e03d7": "《DOM型XSS漏洞之document.write触发》", "https://mp.weixin.qq.com/s?__biz=Mzk0ODYwNjI1NA==&mid=2247484127&idx=1&sn=b41d7cbe71aab9b99bc66d03d7ce3373": "【安全预警】Hisense-智能公交企业管理系统 AdjustWorkHours.aspx 存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655268382&idx=2&sn=cef18979a72b90617f3c78aba7eb7a8e": "2024年网络安全漏洞态势报告", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492428&idx=1&sn=2ebcb311652d637fd46dfcc2daf80bff": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492428&idx=2&sn=ee3dc0c2aea7c750168589599345d0b3": "漏洞预警 | Elber Wayber模拟数字音频密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492428&idx=3&sn=a054f58b95507991612d1c65d3524a5a": "漏洞预警 | 脸爱云一脸通智慧平台信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131331&idx=1&sn=92f69ee2ad9b4a15f5e1e2fdc40821ff": "法国电信公司数据泄露,黑客利用PayPal发送钓鱼邮件 | 一周特辑", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488106&idx=1&sn=60e1182848316c9eb674edd5fd5e221c": "Check Point Security Gateways 安全网关存在任意文件读取漏洞CVE-2024-24919 【老洞】", "https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651149259&idx=1&sn=25073b9cc9f17d9285b1f19d308595c5": "【工具】一个综合类型的AI大模型应用网站:Monica", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490056&idx=1&sn=821dd0c7466bfbe68f43b399f2df1c2a": "关于Ollama存在未授权访问漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528181&idx=1&sn=fb54712d1d893db735ce00240a585d0e": "黑客正在利用数百个网站的“Krpano”VR库中的反射型XSS漏洞,注入恶意脚本来劫持谷歌的搜索索引并大规模分发垃圾广告", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485852&idx=1&sn=c3fc83276d19ddfe2002d32b5259b653": "CVE-2025-25065|Zimbra存在SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485852&idx=2&sn=36c8d60ef3214c4f6ef3be41d60eade7": "CVE-2025-26794|Exim存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590214&idx=2&sn=4d97d38157c7fb6f120215fc38895100": "更新第3章!系统0day安全-Windows平台漏洞挖掘(第5期)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495797&idx=1&sn=405ff36b426052ed5994f6793b38063c": "关于Ollama存在未授权访问漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=Mzk0NTUwNzAyOA==&mid=2247484385&idx=1&sn=5e16fc3b3c6efcf460aa8e2383e92c03": "Caldera:CVE-2025–27364,你给个不能用的POC,把我们这些脚本小子都给气笑了", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485855&idx=1&sn=bf7c11f2b7878744e030858acc9bf7f5": "S2-005远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491635&idx=1&sn=42f997786d8e018ee17b019358be714f": "审计分析 | 一套\"组合拳\"造成文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485583&idx=1&sn=1afa1bacbbb165749e7af11bc78c7b0a": "工具集:Java Chains【 Java 漏洞利用综合生成平台】", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247488237&idx=1&sn=3fa4065ac094b4b882d68ee860bba6cf": "针对Swagger接口泄露未授权访问的各种姿势", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499572&idx=1&sn=e4824768075e17e8dfe1c4e27b79b484": "被动扫描的fastjson漏洞探测插件 -- FastjsonScan4Burp(2月28日更新)", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516181&idx=1&sn=1ec5998b9fa1bfc44a867f56d6c13d20": "漏洞挖掘小工具 -- SeeMore(3月1日更新)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492258&idx=1&sn=396c310a2a0c548856625c3ddaa03185": "黑客利用旧版 ThinkPHP 和 ownCloud 漏洞攻击量激增", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484341&idx=1&sn=a46a82777c2e17a48608a61876ca6b8b": "应用安全不仅仅是漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247510936&idx=1&sn=900e317a8277593e850658cd395d3cc5": "Apache MINA CVE-2024-52046漏洞复现分析", "https://mp.weixin.qq.com/s?__biz=MzU3OTYxNDY1NA==&mid=2247485213&idx=1&sn=c5693b5143b8fd0d9555d3dad848fbc9": "第106篇:深入分析自己曾经挖掘到的有趣的XSS漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247488577&idx=1&sn=7d82d779f8e22d546884384515247021": "实战一次完整的博彩渗透测试", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528194&idx=1&sn=c0cb9d7652c465c56ac345557868869d": "利用 AIxCC Nginx 漏洞:第一部分", "https://mp.weixin.qq.com/s?__biz=MjM5OTc5MjM4Nw==&mid=2457387398&idx=1&sn=3d6587e468dc6af99dfce3d688192a29": "别让更新变麻烦:Python脚本助你一键获取修复操作系统漏洞补丁包!", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247548410&idx=1&sn=77869ae7623c7e36bb980d5d28a186e5": "记一次某大学的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485582&idx=1&sn=afd08b843fd9e1b16081dfef5ee4df91": "URL 重定向:利用开放 URL 重定向漏洞的完整指南", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094892&idx=1&sn=44e4965782b459d63c3b2a6c668883aa": "PingAM Java存在未经授权的访问权限漏洞CVE-2025-20059", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094892&idx=2&sn=d896a5e9d72b1a5304fca2653f5f3113": "关于Ollama存在未授权访问漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490058&idx=1&sn=4fe091301529b6310456eeaca63e01f8": "Ollama未授权漏洞简单复现", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490058&idx=3&sn=abbfc9d3decab498075139a7195cf7ac": "EatPoc - 简单的POC捕获工具", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247525831&idx=1&sn=bcb977022fb49925580f765c3080e21c": "DeepSeek 出现严重漏洞!一个问题直接导致无限循环!", "https://mp.weixin.qq.com/s?__biz=Mzk0NjE0NDc5OQ==&mid=2247524924&idx=1&sn=b6493f2c3004123f94eba1e8e5e2e797": "EatPoc - 简单的POC捕获工具", "https://mp.weixin.qq.com/s?__biz=Mzg5OTY2NjUxMw==&mid=2247513056&idx=1&sn=89c0d614ab23f79cddf414ebf0178e58": "EatPoc - 简单的POC捕获工具", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247490136&idx=1&sn=fae0081ae370ef57ed83d22fb827953c": "周末来一场网安迷必看的纪录片", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497210&idx=1&sn=ccc4160591fb0b69fea00023035d6b2e": "【漏洞挖掘技巧】新手师傅从0到1如何挖洞", "https://mp.weixin.qq.com/s?__biz=MzkwOTQ4MzQ4Ng==&mid=2247484090&idx=1&sn=fe36dcaea5e05eb4bda4f16c36d89987": "Ollama未授权漏洞简单复现", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247519129&idx=1&sn=c73d3d9f20a15483db5d946e0a3522eb": "VxWorks设备分析与漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247551285&idx=1&sn=cc174b95a4ff4adedb6bb3743ac75d19": "EatPoc - 简单的POC捕获工具", "https://mp.weixin.qq.com/s?__biz=MzkwMzI1ODUwNA==&mid=2247487898&idx=1&sn=3795064d3c0df13534d1a6bb57ab1d9a": "俄友秒变乌友,狂冲乌克兰制造直播间,这比直接捐钱更爆炸", "https://mp.weixin.qq.com/s?__biz=Mzg3NDc3NDQ3NA==&mid=2247484732&idx=1&sn=99212d42b82dbaff92aaf2d90b79588f": "(0day)漏洞预警 | 资产管理运营系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNTg1MDYxNA==&mid=2247489808&idx=1&sn=208350639cf3aef1842e49e6162a94a8": "vulnhub靶场之【digitalworld.local系列】的bravery靶机", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485627&idx=1&sn=1d71cf04564480fc1f06240efce648c1": "工具集:F-vuln【集合了信息收集、漏洞扫描、暴力破解等功能的自动化工具】", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499044&idx=1&sn=b28ca172001ac4635fa12424bf8cf07b": "ViewState再现漏洞:行业内又一款知名的 .NET 分析工具爆出反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492438&idx=1&sn=d5276e882c0ab5fc5de5486e0b7953c7": "漏洞预警 | DocsGPT远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492438&idx=2&sn=bdc617dc147d9923d545100a995157bd": "漏洞预警 | SeaCMS海洋影视管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492438&idx=3&sn=5c90f6d998b193e7b233bb72430988c0": "漏洞预警 | 竞优商业租赁管理系统信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MDgzOTk2Mg==&mid=2247484748&idx=1&sn=55f9031ae4f50734505f69dd5b863111": "【漏洞复现】 Ollama未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489924&idx=1&sn=b95f33cfe879c52a31516b8a9ddb7cad": "【漏洞预警】Langflow code代码执行漏洞(CVE-2025-3248)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488343&idx=1&sn=123f95e731f9f3c18497b41770a1bafd": "Vite vite-project接口存在任意文件读取漏洞CNNVD-202504-684 附POC", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488343&idx=2&sn=69f21b0b8d700cdab4a4ccabf10ab050": "YesWiki知识库edit接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzA3NDE0NTY0OQ==&mid=2247485283&idx=3&sn=8d1af54cb617abf4d3a8740ddb8d2828": "卷不动Web渗透?世界500强导师带你用逻辑分析仪挖电网0day,薪资翻倍打卫星!", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497389&idx=1&sn=f935beb9ecf91aa86b9fdafc8a425aad": "打造自己专属的漏洞赏金搜索引擎", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489257&idx=1&sn=8b5f000c969e8e6090a24db990ee98e6": "【新原创漏洞】Vite任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522701&idx=2&sn=0b8f46ac41b6d62102b7ec1c02b25f60&subscene=0": "CISA:速修复已遭利用的 CentreStack 和 Windows 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068998&idx=4&sn=cdb2e49e21463c18beaaff3dc62243f0&subscene=0": "【安全圈】Adobe 紧急发布安全更新,修复十二款产品多项漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247514638&idx=1&sn=50fbc3fd492cbc86f28b28b7550870dc&subscene=0": "Foxmail 官方致谢!APT-Q-12 利用邮件客户端高危漏洞瞄准国内企业用户", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487090&idx=1&sn=a6a64abc12059dd495b3b54f61e2318e&subscene=0": "漏洞预警 ∣ CrushFTP 存在身份验证绕过漏洞(CVE-2025-2825)", "https://mp.weixin.qq.com/s?__biz=MzkzNjI2MzgzOA==&mid=2247485230&idx=1&sn=ad2f64d796e9f77a10027f69cf8c601f&subscene=0": "【大模型与安全】第三弹:LLM与 Fuzzing 技术在漏洞挖掘中的应用", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495902&idx=1&sn=6e409a9779bb62f3a8a6127d2db75045&subscene=0": "关于Foxmail邮件客户端存在跨站脚本攻击漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580245&idx=1&sn=7f3819091ef57c75e9a9f20747c775d0&subscene=0": "智能体连续发现汽车漏洞!360登Black Hat演示高危利用链", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545741&idx=1&sn=695994498ae1d291bfc9398a5d54ca94&subscene=0": "AI大模型安全漏洞预警!Langflow高危远程代码执行漏洞(CVE-2025-3248)", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492776&idx=1&sn=286e0d8a590f350cb3d58e1071ef4b57": "【已复现】Vite 任意文件读取漏洞(CVE-2025-32395)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503309&idx=2&sn=d2d68c02256db122161080d7fe2713f9": "【已复现】Vite 任意文件读取漏洞(CVE-2025-32395)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247759&idx=1&sn=47b9a3e6c630a769d32766bd744badf0": "CVE-2025-30208&31125:Vite任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247497374&idx=1&sn=f6d4cc19ed3b7333066d88b7fc8eb619": "CVE-2025-30208&31125:Vite任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492161&idx=1&sn=5b12d3d38a43c9aa86efb187997acb21": "漏洞预警 Optilink 管理系统 upgrade.php 任意命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247486423&idx=1&sn=4d6999d5d8777a9de0c401c9f02746d1": "Tomcat 漏洞分析与修复(2)CVE-2024-21733", "https://mp.weixin.qq.com/s?__biz=MzAxMjE1MDY0NA==&mid=2247509218&idx=1&sn=a50150a1cc526f9d202126e072d96ec5": "数据泄露频发,看中孚终端安全沙箱如何见招拆招!", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458591290&idx=2&sn=223c178dd8c527a98c3157bcec39a1ac&chksm=b0ad1e0ae369e6485cbb652726f7c5b48d6b8785756a7af7699f0006d39d231beafa1f2ee956&scene=58&subscene=0": "佳能打印机驱动曝高危漏洞,请及时更新", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514121&idx=1&sn=70289620d4c12396c7fb519604f6a12e&chksm=ea1feceb9e3b4697492f8ce73299c9d023f43f1aa1255f26ec61ae70c604526408d507e20b65&scene=58&subscene=0": "AI赋能代码审计:利用微软Security Copilot辅助挖出20个漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489777&idx=2&sn=749b788f108092b8702005d09fe0baef&chksm=fb0295a9cc751cbff0b797a5c1cc1bfa7d9c408b786b403fbbd8577f61e86f17bb5e3195ee55&scene=58&subscene=0": "已复现】Vite 任意文件读取漏洞(CVE-2025-30208)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503198&idx=1&sn=8b5fdcae994700ffdf393dccfc6008b1&chksm=fe79e9c6c90e60d0ecb11cdf2c257ac709c141b1bf383752eb40c953e0bc9a5f5dd0fd9dcf93&scene=58&subscene=0": "【已复现】Next.js Middleware鉴权绕过漏洞(CVE-2025-29927)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247505954&idx=1&sn=1546566c8ca34a9947e05d793949e87c": "我发现了HTTP请求走私并获得了巨大的漏洞赏金!", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524207&idx=3&sn=43f6ea64d7f39b9a5a0342f1f1dda341": "新发现的Ubuntu安全绕过漏洞使攻击者可利用内核漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495826&idx=2&sn=3bcf79d212bc76bc6466a16623626b7f&chksm=fd74c05bca03494d994a2e466dee462fcd4563c7d4e0ce844de0ba6ecb630a51d7fb685861b4&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20250303-20250309)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491052&idx=1&sn=e19606568b7c038ce43ee58b379c9065": "Crushftp 认证绕过漏洞(CVE-2025-2825)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503142&idx=1&sn=f4f47cabc55a311159daa2ca4cca64e4&chksm=fe79e9bec90e60a85e97f731b274b26c3cc17015ef8c1a979957b1c82c53ac998a1e16658bbb&scene=58&subscene=0": "微软3月补丁日多个产品安全漏洞风险通告:6个在野利用、6个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488273&idx=1&sn=0604d9ee59e568cd5b1c5eb1b19ec414": "Vite存在任意文件读取漏洞CVE-2025-30208 附POC", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522399&idx=1&sn=f2a16f697c5c7d7824f2f78d5b4b6148&chksm=ea94a935dde3202383547ee0d30d51758f21b98905e1a92f764da94b7a4f3388c67cef668c60&scene=58&subscene=0": "CISA 提醒注意已遭利用的 Windows 和思科漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581470&idx=2&sn=62d9ad4ddd6e96922be1ddcaed49dfb7&chksm=e9146f24de63e632322527aaf0723002cb70f32cf2e5ec66cb40e13d634819c2b0d7bcc2851f&scene=58&subscene=0": "超 4300 万 Python 安装有代码执行漏洞隐患", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=4&sn=e6dd20d2247732b0e5e73f6e9ae93343": "车载Android系统破解工具和漏洞挖掘浅析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068293&idx=2&sn=fab921fefe8673f13fcda40d2f2a8a58&chksm=f36e7585c419fc93777f66d5dc6d0cab3c6eef6c192ccbcb909d9e932e498d3bfcbf3a14e4e3&scene=58&subscene=0": "【安全圈】CISA 警告 VMware 漏洞正被积极利用,并敦促立即修补", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068486&idx=2&sn=a1a3a144476d291506c6e2ada3ac4e29": "【安全圈】Tenda AC7 路由器漏洞使攻击者能够通过恶意负载获取 Root Shell", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489211&idx=2&sn=a0ef31186a0567544e0b85d13cc33ee3&chksm=c2c641b0f5b1c8a64bedf66710c041dd20c197fd4aadc4f21f05749f10ea2825b66aa3db3b06&scene=58&subscene=0": "【处置手册】Kubernetes Ingress-nginx远程代码执行漏洞(CVE-2025-1974)", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485781&idx=1&sn=a6202f04b9554277d414118b861adaed": "【高危漏洞】Tenda AC15命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499319&idx=3&sn=b49ca67187bfbbf8794bb07879ddddab&chksm=fa5950dacd2ed9cc499c98c8a2b77b8cd0a5cdcf2d66c4d8ade7d38ae2f6ac0cf46667db06c4&scene=58&subscene=0": "实战+分析 | .NET 分布式事务反序列化漏洞插件", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495812&idx=2&sn=b080544563672f0f09d01e1fcf6684c9&chksm=fd74c04dca03495bb0367a73ea7853e0a5b5c15b56384e4f76506483fb7fc9a47c873ca01228&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20250224-20250302)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590589&idx=1&sn=9a4e01c36963a74c187f2be20cbc75a8": "VNCTF-2025-赛后复现", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068976&idx=2&sn=9430325038d82c9d54b40e83a162b8e8&subscene=0": "【安全圈】Adobe 修复了 11 个 ColdFusion 严重漏洞,共发现 30 个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NzY3OTA3OA==&mid=2247483964&idx=1&sn=37181e495181e9282850930fa781683a": "Ollama被爆DDOS攻击漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514099&idx=2&sn=287feb9a3757aec9d22df6fe26cb241e": "CNCERT:关于Google Chrome存在沙箱逃逸漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651317729&idx=3&sn=d17f83be602d42c821f5dd08dc304360": "CrushFTP 漏洞概念验证代码公开后遭攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538251&idx=2&sn=cefa0334db76252a4ad7f4bd3dca1876&chksm=c14424f6f633ade0e67c3ab7016594ba89c945a1cfd63f204e73631baa1e56dfbb3119d48e97&scene=58&subscene=0": "CAPEC 漏洞管理的“真”攻击者视角", "https://mp.weixin.qq.com/s?__biz=Mzk0NzE4MDE2NA==&mid=2247487883&idx=1&sn=8b5e310998a127501bad2c7335e21c38&chksm=c37b9660f40c1f76ba24d173a1a54aefd3feb334b7763789bbb400ccddf8a3639df7586b26cd&scene=58&subscene=0": "Vite 任意文件读取漏洞(CVE-2025-30208)全网测绘分析", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507734&idx=1&sn=514b7da1383cc81be32f1ac9544ad94b&chksm=cfcabc02f8bd3514c8a3415fe23d0b45bb8c7ad9dfd7c73a5958a3204c9724429b833c19f593&scene=58&subscene=0": "漏洞通告 | Next.js middleware 权限绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495894&idx=1&sn=561f117bd70f01a2cba0615333648030&subscene=0": "CNVD漏洞周报2025年第13期", "https://mp.weixin.qq.com/s?__biz=MzI5MDcyODIzNg==&mid=2247484884&idx=1&sn=1de88330caacf1c4b1a69e1e539d188e": "地图大师SRC漏洞挖掘课程学员突破800人!感恩回馈,免费再加一套DLC课程,助你挖洞无忧!", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492725&idx=1&sn=de0f08e06363a7386f762ff89911fa2f&chksm=96f7fb18a180720ebf4fc3a9847cbae47c513332d35b81c4111e4bb0b4cbbdfc8b40446bbfb0&scene=58&subscene=0": "【风险提示】VMware ESXi新型漏洞利用链已出现在野利用", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=1&sn=141b292fc69ff9d745e021ad98999ec2": "记一次小程序漏洞打包", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486956&idx=1&sn=7a0035fe012a08d75dbf22199a4ff975": "GitLab 紧急修补关键身份验证绕过漏洞 – CVE-2025-25291 和 CVE-2025-25292", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238645&idx=1&sn=540ff6beddde6e5966cace2a2d5353f5&chksm=8b580cccbc2f85da1ae4aa63203aa4f547c7391cc232e28fdc44f373ba4b0dd1dac705b61808&scene=58&subscene=0": "专题·漏洞人才培养 | 聚焦漏洞技术研究 探索实战型网安人才培养的实践路径", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489247&idx=1&sn=5126551864f27513e7f6f92d72a6922f&subscene=0": "【安全更新】微软4月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247496213&idx=1&sn=6a854c286f0cea1f3e5bea8feec61654": "风险研究 | AI 安全警钟响起:Manus AI 漏洞暴露的背后真相", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522418&idx=1&sn=6414a084ddce5639ed66ee1cdf5970cb&chksm=ea94a918dde3200e4957c6c238db663d0186415de3557b205951842801e465f313189d312680&scene=58&subscene=0": "谷歌修复已遭利用的安卓0day", "https://mp.weixin.qq.com/s?__biz=MzI1MDU5NjYwNg==&mid=2247496785&idx=1&sn=8dbf882c43e6a0cfac31a262bcb44b29&subscene=0": "MCP漏洞被利用,你的聊天记录可能已被泄露!", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490909&idx=1&sn=425a6f7bd1e945f3595d734220d07803": "百易云资产管理运营系统 admin.ticket.close.php SQL注入漏洞(CVE-2025-1535)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524111&idx=1&sn=09d5d3dd317a20c1cec8733f787b4520&chksm=ce46141ff9319d09540d9b68bf6d65b4f01b6eb9fe895c471ba92960c8eb1c46e2002d023c4a&scene=58&subscene=0": "Google Chrome 沙箱逃逸漏洞(CVE-2025-2783)", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484780&idx=1&sn=ad00b83656791606550d4b52900781f0": "Nuclei Yaml各类漏洞模版汇总项目", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635161&idx=4&sn=9d6a82b3ba1b5dc30baf706260800387": "工控漏洞 | mySCADA myPRO或被攻击者掌控工业控制系统", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068550&idx=2&sn=a11b6f875b76d50d5ffce23fbd07880f": "【安全圈】Apache Tomcat 漏洞在公开披露后仅 30 小时就被积极利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068670&idx=2&sn=4baddc750849fe08ccb334318a0ebcd0&chksm=f36e777ec419fe68e58105923fda4e2802bd4c66385ebfb351a2292cd0b0d03909a61ad04bcc&scene=58&subscene=0": "【安全圈】俄罗斯零日漏洞卖家开价 400 万美元出售全链 Telegram 漏洞经过 古鲁巴兰- 2025 年 3 月 21 日", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068433&idx=3&sn=70253a351fb115e049a9d256c1390052": "【安全圈】Apache Tomcat 中的 CVE-2025-24813 漏洞导致服务器遭受 RCE 和数据泄露:立即更新", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485906&idx=1&sn=8e1112c7cba5ac13edf23572157167bd": "CVE-2023-24205|Clash for Windows远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490267&idx=1&sn=13fa8ca9c91d7011be5fe43cd455c12e": "Moxa 问题修复 PT 交换机中的关键身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247485862&idx=1&sn=4483993602cd05191eb301edeba1b1e7": "思科警告公开披露cve -2025- 2015 - BGP漏洞使网络处于危险之中", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068467&idx=3&sn=a464bcdd8889a7e0e65921296df9fdd8&chksm=f36e7633c419ff25cb190652f57379ceebf2022a9c9068abce3cc38be20fe7f2fbd61fdf65b1&scene=58&subscene=0": "【安全圈】施乐打印机漏洞使攻击者能够从 LDAP 和 SMB 中获取身份验证数据", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485726&idx=1&sn=37f437eebac8a11ad3807bca34d5cd75": "锐捷 EWEB auth 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247496296&idx=1&sn=d5b907a532eae6ea54717b1fc1a12c97": "逆变器僵尸网络?全球三大光伏逆变器产品曝出数十个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485057&idx=1&sn=d185daa7ca11c442e787715c84c83682&chksm=c2b104f7f5c68de16c19df45ac696b74c45204829a237de7dd5b2cfd96387d525e017e503e24&scene=58&subscene=0": "腾讯云安全中心推出2025年2月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651317483&idx=3&sn=6085ec1328d90fbb8fcbfd9bf1ee0cea": "惠普HPE CMU曝高危漏洞:攻击者可绕过认证执行远程命令", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489804&idx=1&sn=98813150a2c0c4efc42ee2b776402997": "【漏洞预警】FortiSOAR代码注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590532&idx=3&sn=64c9bf27d9ed81ec82e0506b47b8d3cc&chksm=b18c2dce86fba4d89b9c96e5a591d6a3253d659e5c9cfe03f638e6fda35228fc96840fd97a35&scene=58&subscene=0": "第22周更新: 反序列化漏洞(三)ThinkPHP反序列链分析 | CTF训练营-Web篇", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518872&idx=1&sn=d8a9fedeea1a6ab5a74c75008869818c": "抖音刷出来的天降漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458591290&idx=3&sn=a9e692b6aeb10baa6c4753f4edcde22e&chksm=b0b6694717dddcdf388d78c7c08de52b7c2afbcb84c22984f17654a3f2b8fb4acb5e30f47545&scene=58&subscene=0": "今日更新!系统0day安全-二进制漏洞攻防(第4期)", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524207&idx=1&sn=f65dc31eb2a38abc269db7a7756db40d": "Cannon Printer 漏洞让攻击者可以执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635280&idx=3&sn=fe7e1f64c98f54c491825f79333c3078": "Mozilla紧急修复Firefox高危漏洞 与Chrome零日漏洞原理相似", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068293&idx=3&sn=c28c7a09130437d1363a6b34dc11bdcf&chksm=f36e7585c419fc93f0d6435efa2025a8433255864c2df71c0fc5a4c4a74991faaecce0f85f3f&scene=58&subscene=0": "【安全圈】Windows KDC 代理 RCE 漏洞让攻击者远程控制服务器", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497341&idx=1&sn=353bf45187d56042ddb590cdd022bb81": "利用js挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581623&idx=2&sn=ed65317702ca19322ce299614071d10d&chksm=e9146f8dde63e69b12b35daead3fc81c3829490c492b5f9ff856c0d6c35ae6f601360d08dae6&scene=58&subscene=0": "PHP XXE 注入漏洞允许攻击者访问配置文件和私钥", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592233&idx=3&sn=0fdc4fcb62923943df34ddd535ab89b3&subscene=0": "WhatsApp惊现漏洞!黑客可借此执行恶意代码,Windows用户赶紧更新", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524218&idx=1&sn=beb40faf6117ad25cdcedd03f1d9dfa4&subscene=0": "【漏洞通告】Vite 任意文件读取漏洞(CVE-2025-31486)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507736&idx=1&sn=1b6ad4565d22c8799d1f26db65dc05bd&chksm=cfcabc0cf8bd351ad950bbfe57e9cb4bcde555d02d83cb3bece5acd72d9fb05d08f9e647b9a7&scene=58&subscene=0": "在野!谷歌Chrome沙箱逃逸漏洞, 被APT高度武器化", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135800&idx=2&sn=2d44a7244307ff61986d8b4e8a871ec6&chksm=bd15afeb8a6226fddedd8869139a1fb4e0052c0c4142a3f400c67c2ae9395e4a47bd901ef458&scene=58&subscene=0": "中消协提示:谨防“免密支付”盗刷漏洞;Kubernetes“噩梦”:Ingress NGINX控制器漏洞威胁6500个集群|牛览", "https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247489217&idx=1&sn=a32a6e0c14c025e0663591226b8b83f9&chksm=fe5d0e41c92a8757dce02d28d059dcdd0d58d648be6c7dc516a67e9eac79119f102ce889c15e&scene=58&subscene=0": "DataCon24漏洞赛道冠军分享:vuln_wp——大模型赋能的漏洞自动化分析全解析", "https://mp.weixin.qq.com/s?__biz=MzkyMzcyMjgwNA==&mid=2247483864&idx=1&sn=eaf0d54456e96445a3d8631fae219d46": "nakivo-任意文件读取(CVE-2024-48248)", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634902&idx=3&sn=87c638841df320c816ef0a7d421ea324": "Sitecore 曝零日漏洞,可执行任意代码攻击", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237662&idx=2&sn=2deff5b6bd62f8dd20a62eb3510d400f&chksm=8b5808a7bc2f81b17f418934d36c8b8136e6d4feffde7376fd5ef51fa52d2c4615e6bd01a178&scene=58&subscene=0": "CNNVD | 关于Ollama安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489028&idx=2&sn=acdcd9105653b3dfe1eb03d48cf3bdd3&chksm=c2c6410ff5b1c819fcc80c2c0b6d4fa2175d93cb297e3e64fdb828b5d143815241270699ea7e&scene=58&subscene=0": "【已支持识别检测】Ollama配置不当未授权访问漏洞(CNVD-2025-04094)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489812&idx=1&sn=a934a03b1973580ab86c37b4fecde9cf": "【高危漏洞预警】ollama 0.1.37 ZipSlip远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MDU4NjYwOQ==&mid=2247484245&idx=1&sn=72e76c0d95fc37a646ebd834a39e1be3": "ThinkPHP 多语言本地文件包含漏洞(lang-rce)复现", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490868&idx=1&sn=8f4d6eae59046767cfa5bc05505c9889": "速达软件 doSavePrintTpl sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503086&idx=1&sn=54b69bd61f8b821652d16322e589e4d0&chksm=fe79e876c90e61605089205fed1cd9b9c046434058f58982e7e8a76e785ecdd9b8869f510bc0&scene=58&subscene=0": "Elastic Kibana 原型污染致任意代码执行漏洞(CVE-2025-25012)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610018&idx=3&sn=86b4c5ac3506c0922b207e9698ebcacd": "漏洞挖掘之从开发者视角解析Gin框架中的逻辑漏洞与越权问题", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486250&idx=1&sn=b8f33f2e96b66ff78c9914144f77d10b": "记录一次JAVA前台漏洞审计", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522450&idx=2&sn=07fb2382932a5afdd7e28086180274bc&chksm=ea94a9f8dde320eec3eed53ed3ea157df8ec294315dc7a8b460e0bda2fe0f64ecfd361d6bc0f&scene=58&subscene=0": "谷歌2024年发放1200万美元漏洞赏金", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489799&idx=1&sn=1cb0fef30c653dde429246b6a21a0eb8": "【漏洞预警】MongoDB BSON缓冲区溢出漏洞 (CVE-2025-0755)", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487062&idx=1&sn=2f68aa136a3f1b995aa02894b17831f8&chksm=c22296aff5551fb9986f3e16c405651b2e0cca48c94d9d83445ca4903b52acd64287de885fc4&scene=58&subscene=0": "漏洞预警 | Windows 文件资源管理器欺骗漏洞(CVE-2025-24071、CVE-2025-24054)", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247485172&idx=1&sn=6fc4d990ea049bfe9cc961a764b15a80": "Sitecore几年前的洞CVE-2019-9874:反序列化实现的未经认证的 RCE(CVSS 9.8)", "https://mp.weixin.qq.com/s?__biz=MzIwNDYwMDcyNQ==&mid=2247488956&idx=1&sn=7ff677c108fa9acc0c1135eb61a08aab": "【漏洞速递】Google Chrome 沙箱逃逸漏洞(CVE-2025-2783)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651316861&idx=2&sn=f11a61ca7c79b39287a08843bb723201": "FreeBuf周报 | “人肉开盒”再调查;ChatGPT SSRF漏洞迅速成为热门攻击向量", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462668&idx=1&sn=26885cbdc84ff23e350a6e29b79636ac": "专题·漏洞人才培养 | 实战化漏洞安全人才培养 为新质生产力保驾护航", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135498&idx=1&sn=e6172af9fbd2e65fbc9f54109fde301b&chksm=bd15aed98a6227cf7cc4588a7b37775b925fdd9b5ae318790cc89ca8c4d605fecc9a1f983774&scene=58&subscene=0": "顶流明星在澳门输了10亿?一男子用AI造谣被行拘8天;多平台SSRF漏洞遭遇协同攻击,逾400个IP同时启动 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506150&idx=1&sn=717af63b8afecffa2e7f4d48e4f3040b": "每周网安资讯 (3.25-3.31)|Zte Goldendb存在特权管理不恰当漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MDU4NjYwOQ==&mid=2247484232&idx=1&sn=00bc01f6b175e96b6f09c2fdbf3ef5d0": "SRC漏洞挖掘之越权漏洞挖掘实战指南", "https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247520591&idx=1&sn=09408e28e3286c2cfd405487e0f3950c&chksm=ce5db32ef92a3a38ecd1ca641509b925c3cede747f10949b7f398cfcf43d62fe17914bea2224&scene=58&subscene=0": "Jeecg漏洞总结及tscan poc分享", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068262&idx=1&sn=78dbf5467c924dcc1d55c9dbf6f78eca&chksm=f36e75e6c419fcf0d3b907f7583e56d4aa77a1cdbcd68a948618c67a3ca9fab09a768067b723&scene=58&subscene=0": "【安全圈】WordPress 第三方表单插件 Everest Forms 曝远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247517086&idx=1&sn=18d66c1e7fafedb491d9a303e6837d3f": "漏洞预警|金蝶 Apusic IIOP 反序列化远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507729&idx=1&sn=91c4104007c3995d939d644e4ff42c84&chksm=cfcabc05f8bd35130dfba5ee7c87d29483aef7fbced030dac399e85887b467d46217374db022&scene=58&subscene=0": "漏洞通告 | Apache Tomcat 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484741&idx=1&sn=a06c60b346f570564cf9d464eafc9344": "MSA-互联网管理网关-msa-任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486339&idx=3&sn=fcb0bdb0e0372f9798c50d7134bbe2cb": "\"0day\"漏洞裤", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485775&idx=1&sn=d1c19900739911f714b50fe75216702b": "【高危漏洞】【POC公开】Apache Camel 任意命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495859&idx=2&sn=cfcd917711ed3f44d0c8ae652b423a8f&chksm=fd74c07aca03496c3de41a60fe2a0e74720a5ceb3ac1d17699c4f9849d9f7eb4dd55f009333c&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20250317-20250323)", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247488851&idx=1&sn=a43c907623ec3b71e29230f3e545ff68": "某开源cms 0day挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyMzcyMjgwNA==&mid=2247483882&idx=1&sn=b5e4c934610b742b1a66c27dfdabc7a6": "poc难找?无问AI来帮你", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488123&idx=1&sn=b7aee73a916b84dc4c9b5119f1328c45": "Ollama未授权访问,白嫖AI服务 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524160&idx=1&sn=0a8fb96dd0d113225dc1ef266445f821&chksm=ce461450f9319d4601c0690cca59db779835f4e51d364c0fff3f6dbb9deab0e46e7627beeed3&scene=58&subscene=0": "【漏洞通告】Mozilla Firefox 沙箱逃逸漏洞(CVE-2025-2857)", "https://mp.weixin.qq.com/s?__biz=Mzk1NzE0ODk3Nw==&mid=2247492095&idx=1&sn=e05a2c434938ea37ab25bfec6f2995b2": "CVE-2025-30208,资产巨多(中国域名资产:12635+),附POC+批量检测脚本", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489028&idx=1&sn=2093ce6762f3251c9e9d9b6de632ad98&chksm=c2c6410ff5b1c819362fdf10a6e0acbea0001f6ca2dd2cdbac4ca1496af3aeda46869a3fa4dc&scene=58&subscene=0": "【漏洞通告】VMware ESXi&Workstation&Fusion多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489695&idx=1&sn=44e2f9c413c2cf08cdf02cd902212561": "【漏洞预警】Git 终端提示信息注入+信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135571&idx=1&sn=451a4d09d4e99c41227f7e738fd922de&chksm=bd15ae808a622796d75d85bb9e4abfd791d085b27f1b32cc8b1b6bc4ad1f2390e5a4ce4c3175&scene=58&subscene=0": "百度对“开盒”事件发布声明,已报案;美国西部联盟银行遭遇第三方供应商零日漏洞攻击,2.2万客户数据遭泄露 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499832&idx=1&sn=ebbb038d6dec77960f88e5a0af45fecb&chksm=ec1df010db6a79065ba5e20918e2613774bfd8c2889e4e5a69aeddbb2c809a98d0f1951db552&scene=58&subscene=0": "记一次 RCE 0day 的审计过程", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488238&idx=1&sn=9ac7927dbdd44832a9f0af3f156378ce": "Mitel企业协作平台存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484722&idx=1&sn=84d734d15904650106cf6f3ba5b4af22": "管好IT资产,高效防治漏洞(1)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497319&idx=1&sn=77aea8b0dc390b45f367b1edccaa56f7": "【漏洞挖掘案例】RCE", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524536&idx=1&sn=fe1a221c3018811a521d058549750ce5&chksm=eb70be87dc07379174ddbb0b779981b4c3e9b5b51a28f443dedb84b98e3ab3fb6f44063ae962&scene=58&subscene=0": "2025-03微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068690&idx=2&sn=98e895fbed9215819bc54876b78c409d&chksm=f36e7712c419fe0424b6ab37b13a32cfa1b379c514d4ca9bfaaa6d34e116b71548d60ca56d4a&scene=58&subscene=0": "【安全圈】JumpServer漏洞使攻击者可绕过认证并获取完全控制权", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489211&idx=1&sn=2545a4465b323bce728685e5258167b0&chksm=c2c641b0f5b1c8a6caa338aa94f4eb98241e1be29c59d25214c1bf60d93e64b68a84625c2b76&scene=58&subscene=0": "【漏洞通告】CrushFTP身份验证绕过漏洞(CVE-2025-2825)", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496682&idx=1&sn=e4643091842bb9fe7d576a85fe1e129a&chksm=ce96bed4f9e137c2d0a34d7f1aaad207f3a7e812cdf4e0f091b7d0a30d94463914b35014189e&scene=58&subscene=0": "天融信发布《大模型组件漏洞与应用威胁安全研究报告》​", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651316826&idx=3&sn=0cc4af02352183b198b12bda854a860a": "Veeam与IBM发布备份和AIX系统高危漏洞补丁", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486337&idx=1&sn=8923fda8c1f614d59101254e61f3bdcb&subscene=0": "美国政府只囤积几十个零日漏洞,你信吗?", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068467&idx=2&sn=8209e2048ee474d6b91f16029aa9c134&chksm=f36e7633c419ff25d6e98a532a0be210b5f282f06c12a405f3e5a178eeaa0ce3f664e58b2fab&scene=58&subscene=0": "【安全圈】PHP XXE 注入漏洞让攻击者读取配置文件和私钥", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490358&idx=1&sn=6b611d9ca7e3011a38f481ba7d429dda": "高危 PHP 漏洞可绕过验证加载恶意内容", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068486&idx=4&sn=0c958e3ed4260fbf4a7e0e8de17dafc3": "【安全圈】SuperBlack 攻击者利用两个 Fortinet 漏洞部署勒索软件", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503244&idx=1&sn=53fa39779f86846ff49c41cc68228e3e&chksm=fe79e914c90e6002e34dd3ba99521bdfeba0aca1e686b66e26cd67a8a1f4be0f3359ec564ffd&scene=58&subscene=0": "【已复现】CrushFTP 身份验证绕过漏洞(CVE-2025-2825)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487022&idx=1&sn=be6d4d80fd50ee781458871cfc1eef6f": "漏洞预警 | VMware ESXi 存在缓冲区溢出漏洞(CVE-2025-22224)", "https://mp.weixin.qq.com/s?__biz=Mzg2MDc0NTIxOQ==&mid=2247484725&idx=1&sn=743dcff5d5db215c7484ca210b88caa7": "用大模型探寻补丁代码的秘密 - 从漏洞挖掘到POC构建之旅", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522638&idx=1&sn=15b5a925b5a9f1eecca2dc4a721a63a9": "微软利用AI从开源引导加载器中找到20个0day漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485777&idx=1&sn=56f21b15e2595b14428f21c900388f04": "【高危漏洞】NC importTemplate 接口存在XML实体注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247505968&idx=1&sn=7c06c6abf44523c8ede64d6b1f322962": "MWC2025 | 华为网络安全产品通过全球权威标准机构BSI首批漏洞管理体系认证", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064050&idx=1&sn=e5cfd0999539184202ac68f658f7a870": "信息安全漏洞周报【第014期】", "https://mp.weixin.qq.com/s?__biz=Mzg4NjY3OTQ3NA==&mid=2247486842&idx=1&sn=e2839892a4c331387be5a704bf28bb61": "玲珑安全第六期漏洞挖掘培训开启!福利多多,速来围观!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068386&idx=1&sn=1b7561dc90e9ac7086e4648fbc108a8c": "【安全圈】紧急预警|Elastic Kibana 高危漏洞,可远程执行代码,速修复", "https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247486182&idx=1&sn=2add35c4bee30176cb7ea2ab9814d136": "高危逻辑漏洞-Web3+Web2前端结合的ABI任意调用实现链上交易免gas", "https://mp.weixin.qq.com/s?__biz=MzUzNDMyNjI3Mg==&mid=2247487315&idx=1&sn=4a145deeb3c9c632593bb92f6a88d217": "CVE-2025-21548(mysql客户端RCE)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651317729&idx=2&sn=26cffa974cc791aae1afb86227ead8ec": "CISO 视角下的十大漏洞管理最佳实践", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514099&idx=1&sn=8104d7f7e60e4828b66cb6cc30bf9fd3": "运营商巨头赔偿超2.3亿元:因系统漏洞令用户损失巨额资金", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490771&idx=1&sn=3ea948dc94da7cd2c0665bf5db8aa2ac": "深科特LEAN MES系统SMTLoadingMaterial SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503229&idx=1&sn=5f984b9cab97f883a7b92dad91e49ce4": "【已复现】Ingress NGINX Controller 远程代码执行漏洞(CVE-2025-1974)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489887&idx=2&sn=d1b44ebd3e9bc50f4110fcef5e0ccbc6": "【漏洞预警】Apache Parquet 代码执行漏洞(CVE-2025-30065)", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511217&idx=1&sn=f10cd6cccb88b27e6e00c232e8ca763c&chksm=fa52790fcd25f019358bbd12fe8671ab15c4414350450f773162f0b32549ca6aacea0f71d8ad&scene=58&subscene=0": "山石网科入选国家工业信息安全漏洞库CICSVD技术组成员单位", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490841&idx=1&sn=5b49fc5bd1f685c1483839448ca9aabc": "万能门店小程序管理系统 doPageGuiz SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514089&idx=1&sn=550fb0382e88cba964e12c3b23e25302&chksm=ebfaf0c9dc8d79df27e925935435e7b0c6fe6519771bfeb584b995d7bed8af635b83e5cb8995&scene=58&subscene=0": "OA系统漏洞致使数据泄露,青海一公司被罚5万元", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513903&idx=1&sn=308d37d9afc7b9c1bbeee150d0f27040&chksm=ebfaf00fdc8d7919d2e65ff851ff3fda13a8b220549b349bdd8005e97ee30656717595112fd2&scene=58&subscene=0": "虚拟机逃逸!VMware高危漏洞正被积极利用,国内公网暴露面最大", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581542&idx=1&sn=ad77c2d4beeea39629018a1de47c3ffc&chksm=e9146f5cde63e64a694399fcee5658e6f7e0a49cc4137740dda2cd89820ffe9ea1fcc500af08&scene=58&subscene=0": "Mirai 恶意软件借 Edimax 相机 RCE 漏洞大肆传播", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490949&idx=1&sn=b036b7fd087877a1c1e35107ec8667c3": "OLLAMA 未授权访问(CNVD-2025-04094)", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247492018&idx=1&sn=f6c2fa64faec6989678c3b5f676fa6ae": "网安笑传之《最新情报》TG 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490705&idx=1&sn=f5a167bb5a411f732d7f86b842591ff4": "网康科技 NS-ASG 应用安全网关 add_ikev2.php SQL注入漏洞(CVE-2024-3458)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488194&idx=1&sn=4fa7fb362dcd714adccbfaa020aec1e8": "顺景ERP TMScmQuote∕GetFile接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581542&idx=2&sn=ef5fe7c8ee3aa63d8f53067527f9797a&chksm=e9146f5cde63e64a33e419d1eb7d8ab1071dad1b6d4eca0d0f2a761e8d3a0463b40b63f01517&scene=58&subscene=0": "安全动态回顾|警惕 Apache Camel 漏洞,Windows NTFS 漏洞可能被用于数据窃取", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652095005&idx=1&sn=7e5eda40022a6ecf6f39094eabc755fe": "新的 Windows 0day漏洞让远程攻击者窃取 NTLM 凭据", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247579828&idx=1&sn=ae2245f2dadec2e5b2e181707bda93ef&chksm=9f8d28bca8faa1aa78c9627eccffd883155204692354a292c7b190c2ddaf354d034a5b984b56&scene=58&subscene=0": "实力认证!360入选国家工业信息安全漏洞库技术组成员单位", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486667&idx=1&sn=0aa6e0b666110b7eb82210b769e8e216": "【已复现】Vite 任意文件读取漏洞(CVE-2025-31486) 附POC", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522429&idx=1&sn=7d99cddabc388a3013ca34f627942e4a&chksm=ea94a917dde320011006f5e679bedfd31fd32d393bb995f4908d5696e704d35dea9b2b6b602a&scene=58&subscene=0": "速修复Kibana 中严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502184&idx=3&sn=e02b98d5c8bb81b2b22fb7d663f4ee30": "安全内参|面向漏洞编程:如何让AI编程助手生成带后门的代码", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247484755&idx=1&sn=bcf3bc12db7657b17728d7d4aac6529a": "Metasploitable2-Linux。关于老师给了任务,一位彦祖返回家无私奉献,打穿靶场的故事。手搓+msf提权漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068838&idx=4&sn=002ce9534343b99abd03634daa05b2ff": "【安全圈】Dell Unity 企业存储系统现严重漏洞,攻击者借此可实现 root 权限接管", "https://mp.weixin.qq.com/s?__biz=MzkyMzcyMjgwNA==&mid=2247483872&idx=1&sn=31b810718d480ba119f67d3e1712ba07": "Wazuh RCE漏洞CVE-2025-24016", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135460&idx=1&sn=a13284cb4a851616277053291d51988d&chksm=bd15ad378a622421a956dc238b66c97ba05efe1d8b33368f13012f4ff3352b9771b0d034c27d&scene=58&subscene=0": "警惕!黑客组织 Lazarus 在 npm 平台投放恶意软件包;SolarWinds网络帮助台漏洞曝光:攻击者可解密敏感密码", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647690664&idx=1&sn=522e16b0585b1398c84014d2d0ab2333": "0033. JS 漏洞赏金 2.0 Extreme Edition 2024", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503341&idx=1&sn=ce0710dc3a6918c74ef22d5044654abb&chksm=f2585e9ec52fd788ce5eb3c560d9ebc90e3fbb16171190237dccd816bd01536b50b5b12e73fe&scene=58&subscene=0": "雷神众测漏洞周报2025.3.3-2024.3.9", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485737&idx=1&sn=ccc400e1ade315a305c66d36b8adce27": "蓝凌EIS平台UniformEntry.aspx sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651317105&idx=2&sn=b72ae8277dbeb6be4e8ad59d982be965": "1小时思维蜕变!手把手教你挖出别人看不见的宝藏漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487016&idx=1&sn=dd6858c6275804be5e5f65f1068b7b16": "流行的 Python 日志库存在远程代码执行漏洞 (CVE-2025-27607)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528850&idx=2&sn=a92b4c381dcf89e40f17e7e410854589": "CVE-2025-31334:WinRAR 漏洞可导致绕过 Web 标记并执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490970&idx=1&sn=2897516a06b90533bff2c3097842c8a1": "用友U8CRM biztype.php sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MDU4NjYwOQ==&mid=2247484215&idx=1&sn=b3b4f0dd8ffc562c078ac4fe6cd3a90f": "SRC漏洞挖掘之SQL注入漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU0NDk4MTM0OA==&mid=2247488251&idx=1&sn=a0ff69f59017991bb27131c5e19d9dac": "金蝶云星空K3Cloud反序列化漏洞(老洞新遇)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651317105&idx=3&sn=bc1394021f4b824172f1f7cac528f7f8": "Next.js 严重漏洞:攻击者可绕过中间件授权检查", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484772&idx=3&sn=00f8b99f517f20975d9bfb09336649aa": "SAP_EEM_CVE-2020-6207-PoC", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247485167&idx=1&sn=e589a6e71a843af60fa3c86007e6177a": "Linux提权漏洞CVE-2025-27591", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503212&idx=1&sn=0b14bc32a6c2846c590bae64986309cc&chksm=fe79e9f4c90e60e20bc345c610a1a75e79dca3b5c7fe389c1d8c5f06560d38051e7ca12d8378&scene=58&subscene=0": "【已发现在野利用】Google Chrome沙箱逃逸漏洞(CVE-2025-2783)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581756&idx=1&sn=233a6168db1e7d093bfe515851283fdb&chksm=e9145006de63d910d6ba07704fe573a00724fd03085482864aecc4369de0434abdb1c4caa92b&scene=58&subscene=0": "Android Zygote 注入漏洞曝光:攻击者可借此执行代码获提权", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487016&idx=1&sn=2e54fafefdfe86ddaedd7dad16058baf&chksm=c22296d1f5551fc732f22ff2a4ba78de517f402c0831a2f381ccf12cad6bd3f37691c828388e&scene=58&subscene=0": "漏洞预警 | OLLAMA 存在未授权访问漏洞(CNVD-2025-04094)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522499&idx=1&sn=6f07e20fe9fdb9cd65f9d65f779e0e37": "Meta:FreeType 0day漏洞已遭活跃利用", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496690&idx=1&sn=6010f3a0a91bb3e0546c20a0e004fdd1": "【风险提示】天融信关于Vite任意文件读取漏洞(CVE-2025-30208)的风险提示", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485894&idx=2&sn=4430d0363e1ec98d7f78691dc17745c1": "CVE-2025-24813|Apache Tomcat远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514106&idx=1&sn=ce1556ee1970bc492d3185f1b9c3046b&chksm=ebfaf0dadc8d79cc2fa28d6291ceee2690d919a0c32a8f5f5ad4ede411fd6647c8656d260654&scene=58&subscene=0": "疑似NSA网攻行动曝光:神秘零日漏洞利用链 目标针对俄媒体科研机构", "https://mp.weixin.qq.com/s?__biz=Mzg2MjU2MjY4Mw==&mid=2247484933&idx=1&sn=64b9e26e7b7557dedc22cb286ebdefb7": "next.js再出严重安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487053&idx=1&sn=b9d22ca7bd7a1055a77e9be1ed28fcaf&chksm=c22296b4f5551fa2b86ae68c0ba9850ffe65cd3856cedfaa831fac42008140a40a26bed54099&scene=58&subscene=0": "漏洞预警 | Ruby-Saml∕GitLab存在身份认证绕过漏洞(CVE-2025-25291、CVE-2025-25292)", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635280&idx=4&sn=167a335f04f28d92d3d1fa32644ab9dd": "OA系统漏洞致使数据泄露,青海一公司被罚5万元", "https://mp.weixin.qq.com/s?__biz=MzIzMDM2MjY5NA==&mid=2247484147&idx=1&sn=0939e9dd2be26e16a02de544fd6d7072": "金融业“隐藏content-type”漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651317483&idx=2&sn=324b63cffc87610aa3dd0406f72e079f": "Ubuntu安全限制遭突破:攻击者可利用内核漏洞提权", "https://mp.weixin.qq.com/s?__biz=MzkyMzI3OTY4Mg==&mid=2247486871&idx=1&sn=7682083f99382971099682257e097d0a": "0Day|Telegram Mac客户端RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495843&idx=2&sn=3b77c90392efb207416c67e1fe0d85e8&chksm=fd74c06aca03497c648fcf713e58a7a6fc33dac6b532f9e91dae64b91a8e95394f5e069ba62b&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20250310-20250316)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495859&idx=1&sn=dd2bd48d4d9a3957d72e6c22ef2c981a&chksm=fd74c07aca03496c494eaf5bcbb9654842ac3bda890fda75180646b9124f9228315d48375a20&scene=58&subscene=0": "CNVD漏洞周报2025年第11期", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513939&idx=1&sn=174ed08d5a6c7985103d8537cbcc9346&chksm=ebfaf073dc8d79659e21b1bf00aa5bcf21b6868436740aab2bffdf7adebc9c7c03cb0d3df7dc&scene=58&subscene=0": "谷歌2024年发放了8500万元漏洞赏金,单个漏洞最高奖励72万元", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522661&idx=1&sn=234e6d8db3a2e78f2339f4951303f508": "Jan AI 系统中存在多个漏洞,可遭远程操纵", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135582&idx=2&sn=ac32564a4acce1bf67c2f14f346fd876&chksm=bd15ae8d8a62279bb919422313fa40df59f4553e4d7f990d6118c3391231f83835a4a6751909&scene=58&subscene=0": "国家互联网信息办公室、公安部联合公布《人脸识别技术应用安全管理办法》;​IBM AIX曝满分高危漏洞,可导致系统完全沦陷 |牛览", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247488621&idx=1&sn=a5074e3b1cd69f308361704ca9286056": "一次0Day漏洞Rce审计流程", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511471&idx=1&sn=32bd67757c2cbd6a79189bf1477d235b&chksm=fa527811cd25f107c9c9199292c9f0a93ad38ab2182c46f4066d25a5220f2f60f25701767127&scene=58&subscene=0": "Deep Java Library (DJL) CVE-2025-0851 漏洞复现与深度剖析", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489859&idx=2&sn=879bb903b2b9b5ea318af022c40e3724": "【漏洞预警】Google Chrome沙箱逃逸漏洞(CVE-2025-2783)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590984&idx=4&sn=2044b458d80ee0788c018e803e567e04&chksm=b18c2f8286fba694e564da0d5533bd62c3ba613b2578311a499c92ee9844005979547e166d4f&scene=58&subscene=0": "更新小节:syscallfuzz | 系统0day安全-Windows平台漏洞挖掘(第5期)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581723&idx=2&sn=a731992d8e99a45bfa48d2d2b7fb2090&chksm=e9145021de63d937fe9060a3bae70a87d1d63db083c029fc8fbed96781a26ee24782a6608d18&scene=58&subscene=0": "研究人员揭露 macOS 漏洞可导致系统密码泄露", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650609940&idx=3&sn=f77b5ceebb4c1b1584c1c909097b47e4": "某云盘系统 API 端点无限制上传漏洞解析", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528683&idx=1&sn=2120705cacf11ce8965ac57f3a6b68f5": "GLPI 中的预认证 SQL 注入到 RCE(CVE-2025-24799∕CVE-2025-24801)", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511462&idx=1&sn=dbf6cff295b957c2286575c5505be012&chksm=fa527818cd25f10e52b8a962818a01594298abb7a5b1c6c341ec6dac09d2cb920a403c24e87e&scene=58&subscene=0": "Apache ERP开源框架OFBiz高危RCE 漏洞复现分析", "https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247501701&idx=1&sn=17fc2d3e2f113ad0d445841150aae09a": "[安全开源分享] Datacon24漏洞赛道冠军分享:vuln_wp——大模型赋能的漏洞自动化分析全解析(武大)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489242&idx=1&sn=32afe35463f7452bceb936685fdc41d7&subscene=0": "【原创漏洞】Vite任意文件读取漏洞(CVE-2025-31486)", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511207&idx=1&sn=58a902a17a6203abce97ae77816a3818": "打印机变间谍?揭秘施乐设备中的致命漏洞!", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489887&idx=1&sn=52d7f6fcc01b08c1262f13722684690b": "【漏洞预警】MongoDB Server 证书验证不当漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524017&idx=1&sn=1eee483c71f1b398696a1d224d767b12&chksm=ce4615a1f9319cb7c52e9731ee8e24dcd9f34b47a048b0a5ff2af0f2bee17afdd1723624ae07&scene=58&subscene=0": "【漏洞通告】VMware ESXi 等多款产品缓冲区溢出漏洞(CVE-2025-22224)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489140&idx=1&sn=005ca73eac41c7c2b4d4cfd7fdb27989&chksm=c2c6417ff5b1c869c97d858ad5662a530cbb866b0b9cc70f278f36020e2cbb915fb8b52bd8ae&scene=58&subscene=0": "【处置手册】Next.js中间件权限绕过漏洞(CVE-2025-29927)", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486325&idx=1&sn=b007e2a16f16a368992e9a04becefb3d&chksm=fb04c81dcc73410b989b4cc614e455803aa48f6f21978d65381410aa3b32f39e2e8ec797b473&scene=58&subscene=0": "NSA的零日漏洞使用策略", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485590&idx=1&sn=2a71486a3b138f40f066e4f8b80bafd4": "【最新情报】新 Telegram 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522518&idx=3&sn=6117e55c1a630be2784ce1a5033b2094": "思科修复 IOS XR 中的10个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486300&idx=1&sn=5f149bb937a0d97f3d955d16139b09eb": "\"0day\"漏洞裤", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522555&idx=1&sn=46e012bb1770fd23ba35da839b60f669": "Veeam 修复Backup & Replication 中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497345&idx=1&sn=2a8ed1271cffebf6ef88cfb93c778cb4": "【SRC实战】支付逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487069&idx=1&sn=d79bf576f44253634e79f89adf4dc837&chksm=c22296a4f5551fb206bdfc5cd48995e8e6e2de51e7c02bbf332ab359d163bc98802ad54824a2&scene=58&subscene=0": "漏洞预警 | Next.js 中间件鉴权绕过漏洞 (CVE-2025-29927)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489172&idx=2&sn=6be35b296e5724047a1f7ff186aeff7d&chksm=c2c6419ff5b1c889b0e3e27e4f5e769c364a5b4300eee92161ef4b951a18cc97859554217877&scene=58&subscene=0": "【支持排查与检测】Vite任意文件读取漏洞(CVE-2025-30208)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499067&idx=3&sn=d404c85abd8bdb6c3324f5d84e25183b&chksm=fa5953d6cd2edac0bf20f8d0a542507a3fb18563e87f08d2eb20d047b52c6077acc8bdf500e3&scene=58&subscene=0": "利用 3000 条大字典 MachineKeys 爆破 ViewState 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484741&idx=2&sn=624995e43a19954bde28260f6fde500b": "MagicFlow-防火墙网关-main.xp-任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650277881&idx=1&sn=102cc0320f7027e82f03573ff2f16045": "携手国家级平台共建防线,盛邦安全获CNNVD漏洞库权威认证", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491008&idx=1&sn=a12cad183ebe681d7dec3021e816e928": "安美酒店管理系统 ∕list_qry.php接口 sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247488725&idx=1&sn=52287f1233a6787ea3e5deb34f55ac58": "【RCE】Dedecms V5.7.115 存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484669&idx=2&sn=c1b532838dd0610644a601decaa5b2f7": "Intelbras-Wireless-未授权与密码泄露-CVE-2021-3017", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513903&idx=2&sn=d68ae359b40edf3e65dd1d1f91932450&chksm=ebfaf00fdc8d79190748dd029b296c34afa7aeb0ed691b2d90dd42e5f014115ce7ff664ef20b&scene=58&subscene=0": "美国众议院通过法案:强制政府供应商设立漏洞披露计划", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484827&idx=1&sn=7e51f4747d161bec4842b4f0a2c5cc54": "CVE-2025-24071:通过RAR∕ZIP做到解压就传输NTLM哈希", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522579&idx=2&sn=df3fca1672e67390925fdec6d6a9c0b7": "Ingress NGINX 控制器中存在严重漏洞可导致RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247491570&idx=1&sn=2ee1fbfeebd277c3f51e39b15bc57c11": "1小时思维蜕变,手把手教你挖出别人看不见的宝藏漏洞!", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492754&idx=1&sn=9f437f4b0b3d4edced726f996430121a": "【已复现】Ingress NGINX Controller 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484655&idx=1&sn=44fe474b21b77e33f82994275c1e6b1d": "H3C多系列路由器存在任意用户登录漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494581&idx=1&sn=ad0145d6eed35548fb11eb39f7e438aa": "大模型如何挖漏洞 | 攻防视角下的AI安全", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485750&idx=1&sn=74f395c1171e6c9c874d7dd8c51669ad": "致远AnalyticsCloud 分析云任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135404&idx=1&sn=ec610c9e2c9d065f22a50abb851c7e68&chksm=bd15ad7f8a622469164870228249dc49efc800ab43dba9d5f29535505b2ddcb34a8e78e63c7f&scene=58&subscene=0": "公安部网安局提醒:警惕5种个税汇算骗局;新型勒索团伙SecP0出新招:威胁公开未披露软件漏洞 | 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247503042&idx=1&sn=20c19508c68cffb26c4b60f89bc1d381&chksm=ced9bed73923f615c7ca290ff333b80360e5d9f20262dd2ae6f9c3b08fe0ba542b4baf4b7460&scene=58&subscene=0": "600+历年攻防演练漏洞汇编!千起实战案例还原漏洞攻击链", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490666&idx=1&sn=5a6a46702a3c37dcdd57e12f37761f3e": "金盘移动图书馆系统download.jsp存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499049&idx=3&sn=4b97ee9cc0ae49cd67b78af29c0b5465&chksm=fa5953c4cd2edad224380f18ca2a769864bc1ac11a25a2452b27440670602b83a81dacc32a24&scene=58&subscene=0": "行业内又一款知名的 .NET 分析工具爆出反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484338&idx=1&sn=acf61d3d2e657954c7a599c74548d96d": "XSS漏洞利用工具之BeEF", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522548&idx=1&sn=665e87c79bcffb3144bfddbfa30f4941&chksm=ea94a99edde320886f01c758120a332a410814be0670c5949a7a78a617537558f68748989bb1&scene=58&subscene=0": "mySCADA myPRO中存在多个严重漏洞,可导致攻击者接管工控系统", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503112&idx=1&sn=c893698042b8152f244f955f31183141": "【成功复现】Vite任意文件读取漏洞(CVE-2025-30208)", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIxNzEzNA==&mid=2247489747&idx=1&sn=3ab64e4747733dd4b3d0dc1751603d7e": "【漏洞挖掘案例】不是哥们,北大被\"RCE\"了?", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487924&idx=1&sn=0e4cb23d4bf3788912144ba166947fcf": "漏洞利用 第二集 - 进入矩阵", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538336&idx=1&sn=9b2772d6dcefe1955b7581aa28773808&chksm=c144241df633ad0b63d46cbd1023a2b25ca5ff8486efbd89fa501d4ff371f40475db58dfc7de&scene=58&subscene=0": "OpenAI 漏洞赏金计划将最高奖励提高至 10 万美元", "https://mp.weixin.qq.com/s?__biz=Mzg5MDU4NjYwOQ==&mid=2247484236&idx=1&sn=5193c349b28c2433ae1e1c9799effd64": "SRC漏洞挖掘之并发漏洞挖掘实战指南", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651317727&idx=3&sn=c54d28a8a7e6dc5d3f6f82727e218720": "微软AI工具发现GRUB2和U-boot引导程序高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522429&idx=2&sn=de12997404efb67be58ceb4d9f00b64c&chksm=ea94a917dde320018285f560a02a66ff19ca665a4ce5ccef57f73129106406792248c5ba2b87&scene=58&subscene=0": "Jenkins 修复CSRF和开放重定向等多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506809&idx=1&sn=ec7c10de7e838754fc826ef2cd48b719": "WinRAR新漏洞:绕过Web标记,恶意代码悄悄运行,快更新!", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514023&idx=1&sn=381518eb509e476f3685c6908382a09a&chksm=ebfaf087dc8d7991b71a2196a788febe30c7e0370632a1f53eebc61ca677b5d55e0b4881a499&scene=58&subscene=0": "面向漏洞编程:如何让AI编程助手生成带后门的代码", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590893&idx=2&sn=af328a87e3b03b7ab64985167f61aadc&chksm=b18c2e2786fba731c9fd24a85ac66edc22f20580eb8cf8f4f8e6726836d9de793298bba21684&scene=58&subscene=0": "Apache Tomcat漏洞在被公开披露30小时后就被黑客用来展开攻击", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503334&idx=1&sn=c4e505bf12eabcf1f82af6e83b7b56a9&chksm=f2585e95c52fd783e8109ca24c97183197b1ab9ce706d245ad7ea1c431e08184b2752e467415&scene=58&subscene=0": "雷神众测漏洞周报2025.2.24-2024.3.2", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507742&idx=1&sn=b7ccd3b0c1a65d6e8d62b80f4e20a150&chksm=cfcabc0af8bd351c34cb4c878fe7fbd7a29db26e7a02ac762c35c0a2366edabcdb81c2d4f0e6&scene=58&subscene=0": "漏洞通告 | Kubernetes Ingress-nginx 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522472&idx=2&sn=634e39e2522108a7d73cce0437f95b34&chksm=ea94a9c2dde320d4cca1664a0acf35b1db71939405a13d0836aced66c411095f4704a7aa3dc9&scene=58&subscene=0": "Moxa 修复PT 交换机中严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247497266&idx=1&sn=5dcee01769e4b74ec8c673c1e920ddde": "telegram小0day, .m3u格式会暴露ip地址", "https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247484958&idx=1&sn=a5fdef6b47f9f1774734be2fec7da2bb": "从CVE-2025-30208看网络空间安全专业", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247623117&idx=1&sn=46c175a5f7fdf95af936bf30599cba76": "汽车.工控和物联网行业的.0Day.漏洞主动挖掘技术", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581481&idx=2&sn=2a2b8413424b32da5743ddb9a2b5d0aa&chksm=e9146f13de63e6057096876ddbef6879d3b48aab956596d0c6457f950bb9fc9ccd55c068b527&scene=58&subscene=0": "警惕 Apache Camel 漏洞 攻击者借此能注入任意标头", "https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647796090&idx=1&sn=d40321b3521f3b372257e0808346b7ba&chksm=8770a12db007283be4aab4b99cec391d73b79be34ce93228c2d2def1669ed25b5c9be1b5c9c7&scene=58&subscene=0": "悬镜入选“移动互联网APP产品安全漏洞治理”十大优秀案例", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485906&idx=2&sn=c0c80270b0a1a48f5f56c0501a6e948d": "CVE-2025-24071|Windows 文件资源管理器欺骗漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247498559&idx=1&sn=af48481d4b2e0ab2512792a0148d1423": "当风云卫拥抱DeepSeek发生了哪些? --从漏洞验证到自动修复的优化之路", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651316826&idx=1&sn=68a582db0aaeae73798dfecdb67bf96b": "Cisco智能许可工具漏洞遭利用,内置后门账户曝光", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487541&idx=1&sn=c628c51dfc39e091a6aa66c67807f1c9": "紧急预警:谷歌Chrome高危零日漏洞CVE-2025-2783遭APT组织利用!速更新!", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503178&idx=1&sn=3ac27daa001c706a40779721de3bf861&chksm=fe79e9d2c90e60c46785fcc107dc4f83985b7e2a5b4fc065c10562793198059272ec27181c91&scene=58&subscene=0": "【已复现】Windows 文件资源管理器欺骗漏洞(CVE-2025-24071)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522535&idx=1&sn=10fdb76beac0cf6d704c962fd3bc29a0&chksm=ea94a98ddde3209ba980b64632a182a7bb7e2abfb406f94bc1852dd2bf88cd66c2e7fb101bbf&scene=58&subscene=0": "ChatGPT 漏洞被用于攻击美国政府组织机构", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484861&idx=2&sn=f09d5bd239874d98b7f4518ba642a8c9": "Web应用程序渗透测试和漏洞赏金狩猎的综合指南", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247518027&idx=1&sn=32dc85072594e95e1c10986972ae569b": "MiSRC「白帽赏金挑战赛」上线!提交漏洞赢多重奖励~", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=3&sn=e70df2122c3094a8037fd3096b81ed74": "近期暗网 0day 售卖情报预警", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499132&idx=3&sn=bad7a801742081d9c36d408ad807c37c&chksm=fa595391cd2eda87375fa2afd6a738675f4f674de783b1ff7c3fad8f601a11014040430a1832&scene=58&subscene=0": ".NET v2.0 框架不用愁,通过 ysoserial_frmv2 触发反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3NDE0NTY0OQ==&mid=2247485041&idx=1&sn=ffd20bf2c8976c39ce10046760dfddfb": "卷不动Web渗透?世界500强导师带你用逻辑分析仪挖电网0day,薪资翻倍打卫星!", "https://mp.weixin.qq.com/s?__biz=MzU4MjYxNTYwNA==&mid=2247487642&idx=1&sn=71bb88df2d862259f4efa6b11b283efe": "GraphQL API 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247532694&idx=1&sn=0b8479b7a8d4db2d951234c650073a18": "专家观点丨油气管网工控漏洞识别技术发展态势分析", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247527877&idx=1&sn=e2f3cafb8ca5483d93b9636780003d5d&chksm=c2d11161f5a6987783bd107c9c0bca13161e6efde1b5ff480a723a8d0cb559f35d696689751b&scene=58&subscene=0": "SyntaxFlow实战CVE漏洞?那很好了", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484787&idx=3&sn=39f45efdd3874b5e4cf161a0de9d1c02": "Selea-OCR-ANPR摄像机-SeleaCamera-任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487050&idx=1&sn=f9c64f527e1dd43ae3fe8ad15bff0a80": "CVE-2025-24813 - Apache Tomcat RCE", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135353&idx=1&sn=eb05a450f5afe4bed0ad4fdf164d822b&chksm=bd15adaa8a6224bc47c2f0fc18b52fe5c1ddbbf69c10bd0cd9fa2b949ae25f4884dbdf9f61dd&scene=58&subscene=0": "CISA漏洞目录竟成勒索攻击“灵感”?28%漏洞被利用;新型网络钓鱼活动滥用微软SharePoint部署Havoc后门 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522669&idx=2&sn=3ecf5b6b7a463eeb4a8a469b68643184&subscene=0": "WinRAR 漏洞可绕过Windows MotW安全警报", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247484846&idx=1&sn=c3dd1824489ff000dd85c05c1ef51275": "某高校GPT漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNDgwMzA2Mw==&mid=2247483916&idx=1&sn=321b7646c67224e2fe07bd1bd4cd08ee": "【漏洞复现】用友 GRP-U8-obr_zdybxd_check等四个SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503274&idx=2&sn=e9f6ffc56c3234e8596eb265b88a679a&subscene=0": "安全热点周报:Apache Tomcat RCE 漏洞遭两步利用", "https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247491226&idx=1&sn=b26b748a724ec62868a06f96977a84bc&chksm=902fb1b2a75838a4dc04a89505a63a014896f181443466007e9d1038dbd6378716afcc09bcf3&scene=58&subscene=0": "利用Fortinet漏洞LockBit Black勒索病毒样本分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068293&idx=1&sn=4072ff26a5a85713e31cd4cf30212887&chksm=f36e7585c419fc9356a7046dc54fb206e322422b5731c4ab60f59fb6313a63c15c4c84191994&scene=58&subscene=0": "【安全圈】VMware 修复了 ESX 产品中三个被积极利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NDI0NzY3Mg==&mid=2247484850&idx=1&sn=74bfa68c6f1d096528a42672eb55c9c0": "nuclei扫描漏洞实操及漏洞模版收集", "https://mp.weixin.qq.com/s?__biz=MzkxMzY0MzAxMw==&mid=2247487470&idx=1&sn=031725f5e223aa1b49fadebbc0092b16": "EDU实战 | 某大学证书站漏洞打包", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490063&idx=2&sn=241437b974f35a6c3a28268481490310": "记某大学智慧云平台存在弱口令爆破∕水平越权信息泄露∕Wx_SessionKey篡改 任意用户登录漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490647&idx=1&sn=79a47f349f15755a1ac9615096a65d29": "金和OA-C6系统接口IncentivePlanFulfillAppprove.aspx存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538064&idx=1&sn=36865c16bae5fc4a460a0ea6115bab19&chksm=c144272df633ae3b2eebeb86193aee8ec918ee1bba78a9bb2f1e9564f2a51110aa99e7581bca&scene=58&subscene=0": "美杜莎勒索软件攻击300个关键基础设施,漏洞修复刻不容缓!", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487076&idx=1&sn=ca829b6f7c3b0c2f5b3e6132d81a40cb&chksm=c222969df5551f8b0ac104a8dd194558c93c795b6c4d68fd9257cb67d2118ff41777841aa406&scene=58&subscene=0": "漏洞预警 | Vite 存在任意文件读取漏洞(CVE-2025-30208)", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501364&idx=1&sn=086338f5631ba5b9edbfad56351ced61&chksm=fddeb8b3caa931a5456bde902fabfa96936a3c49ea3b5f1757dab3eb24436a0436ec407e0bb5&scene=58&subscene=0": "ECDSA 签名中的私钥泄露:elliptic 库畸形输入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528798&idx=1&sn=1c167839a88f0354525471243f8605bf": "OpenResty∕lua-nginx-module HEAD 请求中的 HTTP 请求走私 - CVE-2024-33452", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490081&idx=2&sn=c3a6d85279198a3d9597ca8b45a36fcc": "JAVA 代码审计第一课:环境搭建与SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503162&idx=2&sn=8cdebf57c6043395f1047ecde66a85e1&chksm=fe79e9a2c90e60b4e4da14481800d5a05b9334556a4f6f8f62eeb04669e28aecd293a6207286&scene=58&subscene=0": "ruby-saml 身份认证绕过漏洞(CVE-2025-25291、CVE-2025-25292)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484741&idx=3&sn=962e945483978cf1e07e32b538b73213": "NETGEAR-R7000-缓冲区溢出漏洞(CVE-2021-31802)", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788436&idx=1&sn=978fe93496bf395d0e2e273b681a5e2a&subscene=0": "国家级黑客瞄准公用事业基础设施,致命漏洞潜伏70%水系统", "https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649766761&idx=1&sn=cff7fce88b4f8e509c5f82223fd2e3f6": "漏洞盒子商城上线|挖洞战袍,限量预售!", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484802&idx=1&sn=4b21440507d4ccbf947bd9b7c79ca6eb": "CVE-2025-24813-PoC:Apache Tomcat 远程代码执行漏洞批量检测脚本", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247516982&idx=1&sn=a506e5bf30c3428da3f626f62a649560": "漏洞预警|Apache Tomcat 远程代码执行漏洞(CVE-2025-24813)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247493901&idx=1&sn=871290719a78a954580cecf05bb1f934": "一款基于绿盟漏扫系统漏扫结果的数据提取工具,实现更多维度数据提取以便于进一步分析漏洞情况,有助于高效化扩展其它方面的报告", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490859&idx=1&sn=5c7fc28cdddb3219f54e5fa1d0772581": "NUUO网络视频录像机 handle_config.php 远程命令执行漏洞(CVE-2025-1338)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497377&idx=1&sn=3fd371ed2ade0ad74770f2e789a2d099": "赏金$10000的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491303&idx=1&sn=7241c22dc3795d24d626afb4f0081efc": "vite 任意文件读取漏洞 CVE-2025-30208", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484669&idx=1&sn=82a9a982ee9d4f43c3290d5d51ccc4ee": "白帽子的 “挖宝游戏”:一篇文章搞懂 SRC 漏洞挖掘!小白必看!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522450&idx=1&sn=d780d2de95939199fea4d699bb1d2080&chksm=ea94a9f8dde320eeb301ff7f49732cf2941422f8c1638d73d2ad535ffe50153356e5e23a63af&scene=58&subscene=0": "这个严重的PHP漏洞正遭大规模利用", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489859&idx=1&sn=c5bd152543926ed7b3eddd9af782757c": "【漏洞预警】Splunk远程代码执行漏洞(CVE-2025-20229)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503253&idx=1&sn=4097b8627e1a4e2b99e50ae829dae77a&chksm=fe79e90dc90e601b8a56ef8a1bb21b31321814d76524af3dd50c69089e719db9f2197d3ca8c7&scene=58&subscene=0": "【已复现】Vite 任意文件读取漏洞(CVE-2025-31125)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489041&idx=1&sn=4e296b6bc36202ea679b904adb098521&chksm=c2c6411af5b1c80cb5fdadb70c72996472b91948a75c00b2e1d57f706e28f6e6c050c6100680&scene=58&subscene=0": "【已复现】Apache Tomcat远程代码执行漏洞(CVE-2025-24813)", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247501222&idx=1&sn=c67ffa9d6f898a97be73218b7cc8d19e": "【漏洞工具】某路由器Golang图形化跨平台利用工具", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458591044&idx=1&sn=77634b553ea2449ef601654c336e3958&chksm=b18c2fce86fba6d8c675ac2bf8d73240506d91ca5a0faf688fe6531983abe30d1466da87974a&scene=58&subscene=0": "CVE-2023-2598 内核提权详细分析", "https://mp.weixin.qq.com/s?__biz=Mzg4MTgyOTY5MQ==&mid=2247484427&idx=1&sn=47e5bc58ad9e3af7bec270f4936d44a8": "国外漏洞赏金交流群(2)", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247519869&idx=1&sn=9dcb5e8592b1c687b44a1fe878a77e6f": "深入Vite任意文件读取与分析复现", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487041&idx=1&sn=fb038aa4f1e439a4799309bf67f1c0e1&chksm=c22296b8f5551fae1f5f314d9269a1f3f9b456602fed225a076affb51fcfbe52d3f221a79e3a&scene=58&subscene=0": "漏洞预警 | Apache Tomcat 存在远程代码执行漏洞(CVE-2025-24813)", "https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247485872&idx=1&sn=e446122d80801f63da1adaa219dc9b71": "WordPress安全插件WP Ghost有远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503348&idx=1&sn=5ee2b3b8231527b88b6db57f3b018bfc&chksm=f2585e87c52fd7915e7026233da7fe8efb7af033a923c6073b88c7651cfdd85ec8e6e0acb507&scene=58&subscene=0": "雷神众测漏洞周报2025.3.10-2024.3.16", "https://mp.weixin.qq.com/s?__biz=MzkxNTM0OTQyMA==&mid=2247492128&idx=1&sn=09f9cfbceceb8ab2d8b4c7680f8a151b": "600+历年攻防演练漏洞汇编!千起实战案例还原漏洞攻击链", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247537996&idx=1&sn=fdcf381e7c40c8ecd8bebbd855c987ba&chksm=c14427f1f633aee7d974cbc8383746ff4c5a2dbc2c24c7a653886d084fdffb58147af6b5d8c7&scene=58&subscene=0": "谷歌 2024 年漏洞赏金计划,1200 万美元奖励安全研究人员,诚邀白帽黑客找bug", "https://mp.weixin.qq.com/s?__biz=Mzg3Mzg3OTU4OQ==&mid=2247493148&idx=1&sn=a0c9b24413bec09b5757dd7b1a63a421": "你以为的未授权漏洞VS我挖的未授权漏洞 | 一场与开发博弈的头脑风暴", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486448&idx=5&sn=43a1c97a96d25f7cc74bd61a0a2da84b": "\"0day\"漏洞裤", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497331&idx=1&sn=5043646c8c8773f885a1dc9dedd9bc34": "海外SRC漏洞挖掘|助你快速成为百万赏金猎人", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486231&idx=1&sn=6686650016dce8bd074f902ac63f8b81": "Miaoo朋友圈程序存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524207&idx=2&sn=63d46eaae65ecd516e9234ea9413ce94": "Microsoft 使用 Copilot 在 GRUB2、U-Boot、Barebox 引导加载程序中发现了多个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518881&idx=1&sn=6abd5222d13c67e835b43771eb3d7f18": "在ChatGPT中挖掘XSS漏洞实现任意账户接管", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495826&idx=1&sn=692ccce7930cf1208205ff791c73fda0&chksm=fd74c05bca03494dd94380a552c1693cb4752d612d37aa0b2d1a60d7832e80e6c1757d90df73&scene=58&subscene=0": "CNVD漏洞周报2025年第9期", "https://mp.weixin.qq.com/s?__biz=MzkyMjUzNTM1Mw==&mid=2247487249&idx=1&sn=4f9d8e7d9d607b5ad48075a71f26e95f": "云安全(九):容器逃逸—披露漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590760&idx=2&sn=0a7aeb5d4d57669042d37bf081806d7e&chksm=b18c2ea286fba7b419756a4c459e19762ac07b24d2bd8c3c96a4fe5ffa7a30e4286874880f20&scene=58&subscene=0": "Zoom客户端惊现高危漏洞,数百万用户数据或泄露!", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247508078&idx=1&sn=bac5f762ea43f7010a2f1142375fcb31&subscene=0": "专项活动第一期|单个漏洞1w元起的活动!", "https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247497837&idx=2&sn=a8c94479ae2b2dcff935713b4b5d1b19": "CrushFTP存在认证绕过漏洞(CVE-2025-2825)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522648&idx=1&sn=8642efdcfe877619e821e6fa74e779b7&chksm=eb8fe64c90bd747ea5473eb626206bd7a8fffdbb0dfe0ed84e565885ba00da456efdba11770a&scene=58&subscene=0": "Apache Parquet Java 中存在CVSS满分漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489774&idx=1&sn=397602da78c16240b8861b53c804bfaf": "【漏洞预警】Kubernetes Windows命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458591102&idx=2&sn=accc297b5a24cdc6b8979ef427e3e833": "Next.js 框架惊现致命漏洞,黑客可轻松绕过授权", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522693&idx=1&sn=451ddba96a307165862e9536bdf8b1eb&subscene=0": "FortiSwitch 严重漏洞可用于越权修改密码", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650609630&idx=1&sn=4454c4aee17f50f096bc0ec99c7d6656": "菜鸟驿站,在线辟谣;|3名“00后”利用平台App漏洞盗刷“金豆”提现近10万元", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247491674&idx=1&sn=2886124e0e2f8e9f0d50835197515ecf&chksm=c311af3bf466262d598c6cf3d3e1e3dda7643c21546242a96498d29bb394d2b052ecbe234a0a&scene=58&subscene=0": "CVE-2024-40711&CVE-2025-23120 Veeam Backup .NET 二次反序列化触发及绕过分析", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651131504&idx=1&sn=5e88a52481eb1913179f18f588709fd9&chksm=80e714c0b7909dd6e6604d4ce68a9e2fe396221f8d765521113d54f7e6f12294d257fe258f8d&scene=58&subscene=0": "VMware ESXi 报告新漏洞,波兰航天局遭受网络攻击 | 一周特辑", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495812&idx=1&sn=c0ee1f33a40c40d4e6a1ea0e36184317&chksm=fd74c04dca03495b2a3b6e889deece16586475e3d80c74bd293e0956235e0002e363d4366a68&scene=58&subscene=0": "CNVD漏洞周报2025年第8期", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494619&idx=1&sn=36c118acb8150acbc0137a85d7d564b5&chksm=fa9d108dcdea999bd1d8335ffb1c37c12f0433cb8e01f00e980ec38b7310f4579889451d3dc6&scene=58&subscene=0": "大模型如何挖漏洞 | 正在直播", "https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247488573&idx=1&sn=215619cd9851e79ec75408196ad92916": "红队技巧分享:看看二进制漏洞研究与免杀相结合", "https://mp.weixin.qq.com/s?__biz=MzkyMzE5ODExNQ==&mid=2247487732&idx=1&sn=e92589cbe79e05ee823759d988b688f9&chksm=c1e9e738f69e6e2e78755af17ee489b1e7fb96a891bbcfce9bf45ac7f7c6592147fafe36832c&scene=58&subscene=0": "2024 年 GreyNoise 在野大规模漏洞利用报告", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487034&idx=1&sn=17c00f90fbe293eb4a543d5699c8e22d&chksm=c22296c3f5551fd585268ca603fb6d11fb46347e9b820547cc8af639add0dd5ae6842331699a&scene=58&subscene=0": "漏洞预警 | Apache OFBiz 服务端模板注入漏洞(CVE-2025-26865)", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxMDU5OA==&mid=2247498704&idx=1&sn=2150111a90876f9a198e1c61baa03987": "微信新版本 小漏洞or bug", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490960&idx=1&sn=bfd43cc763c91b3e30dace3c4ceaa362": "NetMizer dologin.php sql注入漏洞(XVE-2024-37672)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068576&idx=3&sn=c5c8335b7757cd5111bdd63bdc478536&chksm=f36e76a0c419ffb6f7a39960edd0a751f2d475e98d807dd512e69fa49ed6db764ce9c6565079&scene=58&subscene=0": "【安全圈】ChatGPT 漏洞遭超一万个 IP 地址主动利用,美国政府机构惨遭攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590760&idx=4&sn=2cad9940a8a1545f94ff39f7369c4adc&chksm=b18c2ea286fba7b4e3d25f2c14ff96f82d35366d6cb021f77ebd28bf16e740ca6b8a14ff8a5b&scene=58&subscene=0": "更新第三章:固件仿真 | 系统0day安全-IOT设备漏洞挖掘(第6期)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489116&idx=1&sn=e0038d4be011868553a9a4953b122108&chksm=c2c64157f5b1c841cefebeaea609d8788b824943b4e5bfebe9a063d64830b5b4d477cc6f89ea&scene=58&subscene=0": "【漏洞通告】Next.js中间件权限绕过漏洞(CVE-2025-29927)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458591568&idx=3&sn=708c1efcf6d598e910c331f0996f643b&subscene=0": "5分钟造出假护照!ChatGPT-4o暴露KYC系统致命漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511206&idx=1&sn=3ae458008520330a9967de44f5aba9b6&chksm=fa527918cd25f00e4971988e89fb3b76e03c7a8bc1200335ddad13f040e9f98284757d0b87c9&scene=58&subscene=0": "苹果设备的“锁屏漏洞”:CVE-2025-24200如何被攻击者利用?", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650621626&idx=1&sn=7c189bb47f1aed3c2c11e26ac9cc3a6f": "9.4分漏洞!Next.js Middleware鉴权绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135403&idx=1&sn=782d8879f7d96cee8da7d2513d16fb2b&chksm=bd15ad788a62246e12de917ea5e93cdd9adbf8cdf4f2f544ff98e7370054e009d1bb8966c4e8&scene=58&subscene=0": "逾10亿美元Bybit被盗加密货币已初步进行洗钱,引发全球追踪;WordPress插件RCE漏洞曝光,威胁超10万网站 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489817&idx=1&sn=575c88c1fa41080d156d78747a403a00": "【漏洞预警】Mattermost MFA绕过漏洞 (CVE-2025-25068)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490919&idx=1&sn=c84be81cd4eca3e6d0506b51eb86c646": "泛微e-office sms_page.php sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492768&idx=1&sn=48c8e492f5552230f521836b521da5fb&chksm=96f7fbcda18072db624202b3bb6ec7be74fb37f8c4b36a66c11f9ac7ac33e4751cda7c8209af&scene=58&subscene=0": "【原创0day】Vite 任意文件读取漏洞(CVE-2025-31125)", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485644&idx=1&sn=255e67bb8d9d61f5899858812b8b1f51": "【价值2500美元的漏洞】基于 Facebook 短信的双因素身份验证绕过(文末福利)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490979&idx=1&sn=50adca9ec8960f776a6c13edf6e085fc": "竞优软件 商业租赁管理系统 信息泄露漏洞(CNVD-2025-03578)", "https://mp.weixin.qq.com/s?__biz=MzIwNDYwMDcyNQ==&mid=2247488963&idx=1&sn=7714d2b73a96608f7e0053bb2b8fac1d": "【漏洞速递】Zabbix API SQL注入漏洞(CVE-2024-36465)", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484827&idx=2&sn=01afe7cc13a2835f8f89d3469ed908e8": "fuzzlists:渗透测试和漏洞赏金FUZZ字典", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651317730&idx=3&sn=967c6e413b34f43cdd79f28cd0798792": "CISA将Apache Tomcat路径等效漏洞列入已知被利用漏洞目录", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489777&idx=1&sn=b3402faaa0fb25a4e600de43f1efd22a&chksm=fb0295a9cc751cbf32ee938f585196b7d81f864c7153560f6351a6fc8e18b38da999563fb069&scene=58&subscene=0": "【已复现】Ingress NGINX Controller 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650609940&idx=4&sn=5a59bf8768401324a3ba25525be871d2": "利用主流 AI(如 Kimi、DeepSeek、GPT 等)检测越权漏洞的工具", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522568&idx=1&sn=6c208cae9bd5b7c538ed45a6a6cd2308&chksm=ea94a862dde321741380f898ae5c379d4f9587b09a5c71def04014812a1c3c4ca7fc747b01a2&scene=58&subscene=0": "速修复Next.js中严重的授权绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489413&idx=1&sn=cd3b82bae5a3dcb62439277551c6a0c4": "【曾哥】从CVE-2025-30208看任意文件读取利用", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489841&idx=1&sn=b68a9fe9310ef672f507eb4ac000b605": "【漏洞预警】Ingress NGINX Controller远程代码执行漏洞(CVE-2025-1974)", "https://mp.weixin.qq.com/s?__biz=Mzg3NzYzODU5NQ==&mid=2247484947&idx=1&sn=96c721c56d57b7a2d4b0414b24a199aa": "路由器漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyMzcyMjgwNA==&mid=2247483914&idx=1&sn=c8315e7348b64b2db11e467ea90888a7": "上古神器Pwnkit提权检测:如何排除它的踪迹,守护系统安全(CVE-2021-4034)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528676&idx=1&sn=569ad9604302e5c782c17ad60779214c": "Android 版 Telegram(10.14.4 及更早版本)中 CVE-2024-7014(EvilVideo)漏洞验证", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497102&idx=1&sn=8ce5b99a9119010caa3b518820877e75": "Burp Suite插件专为文件上传漏洞检测设计,提供自动化Fuzz测试,共300+条payload", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135834&idx=2&sn=df3afea773d2de326cbb14a27986090b&chksm=bd15af898a62269f8a6f9eeb295743fbfab6e13b902147503f27c7ea0a30c26c79c9f3863b6b&scene=58&subscene=0": "小红书被曝高频获取用户信息,官方回应;Google Chrome零日漏洞已被在野利用,无需用户交互即可绕过沙盒保护 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247488806&idx=1&sn=c12710c7a4416f017148df5daaff62b5": "全球服务器正遭PHP漏洞精准爆破", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503162&idx=1&sn=f38c90f903249045d488afc798248811&chksm=fe79e9a2c90e60b4526737d910d2b2bb7a9346ed5a7e385cc6274e5f643507c9f4c615965d35&scene=58&subscene=0": "2025 Q1季度你需要关注的高危漏洞合集!", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513878&idx=2&sn=0e184b9557861d3c7399fdffd76bd147&chksm=ebfaf036dc8d7920a662e9643d096b44e95e78d8c3209a103c25ee7f36621563d77bfc613373&scene=58&subscene=0": "CNCERT:关于Ollama存在未授权访问漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503262&idx=1&sn=144ab53fe27ab9e6774fd2b64009cb84": "【已复现】Zabbix groupBy SQL注入漏洞(CVE-2024-36465)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489695&idx=2&sn=c5c5ec76e0e5bf76a4edf411a4287210": "【漏洞预警】HTTP∕2拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580053&idx=2&sn=f0326cff16ca89a3e6e4c10841b54946": "360入选2024年度移动互联网APP产品安全漏洞治理优秀案例", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651317727&idx=1&sn=0125a9808afe88e6ca8a55a031280eb4": "漏扫设备误报漏洞处理;数据安全事件中的 “开盒” 防护| FB甲方群话题讨论", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488299&idx=1&sn=d9d31904ee854131dfab883067af6a14": "Crushftp存在未授权访问漏洞CVE-2025-2825 附POC", "https://mp.weixin.qq.com/s?__biz=Mzk0MzY3MDE5Mg==&mid=2247484126&idx=1&sn=e3d80ab5d0956e1930d421366c98b27a": "CVE-2025-0087 安卓本地权限提升POC", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260733&idx=1&sn=27ca2df801ff05a6eeacc362fe817084": "Tomcat CVE-2025-24813 从计算器到GetShell", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490346&idx=1&sn=451473f91c6787f98006c1becb6494c5": "Splunk 高危漏洞:攻击者可通过文件上传执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522661&idx=2&sn=1f24df87fa44c9b3c92d7a7cdb139dd8": "谷歌修复GCP Cloud Run 中的提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068838&idx=3&sn=cdbfe3b796e5f0bf268dc90249286921": "【安全圈】Ubuntu曝高危权限提升漏洞 三大绕过机制威胁Linux系统安全", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247498531&idx=1&sn=c8c6e6ecb121cd2533d8dc4dbd3dc81e&chksm=e84c5dfcdf3bd4ea5d206af1b35fc989670d47d9004a543464f67e0dfae99a0987ea78760fd7&scene=58&subscene=0": "全球云上数据泄露风险分析简报(第五期):配置错误叠加供应链投毒与第三方组件漏洞,大模型数据链暴露全生态安全脆弱性", "https://mp.weixin.qq.com/s?__biz=MzU2NjI5NzY1OA==&mid=2247512763&idx=1&sn=3cf841bf1b93ce664ed136cd9b20d675": "重大工控漏洞曝光,工业网络安全如何保障?", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486308&idx=1&sn=8ae4a8ce7b252e88ca8437c6f3f252c7&chksm=fb04c80ccc73411a75f07661d2b3054792e5349bd21265f03f083ad51adb46eb1814cba7ef1c&scene=58&subscene=0": "漏洞研究和漏洞利用技术领域的本质演变", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524066&idx=2&sn=93a40ee8c5d3b9832561ea2de0fe1861&chksm=ce4615f2f9319ce4ef9e0e219fde02b0290a2fbe48140af183e5ab091de704323c946d09126d&scene=58&subscene=0": "【漏洞通告】Fortinet多产品前台远程代码执行漏洞(CVE-2024-45324)", "https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247488589&idx=1&sn=d77bace9cbcfdba23c79244d92ff5aee": "网络安全—Web常见的漏洞描述与修复方案", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247751&idx=1&sn=9f2e604ccb5f57c2da5cb3a65867871a": "CVE-2025-24813:Apache Tomcat远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649766913&idx=1&sn=4eb52c1050b8916733a01d1e0153aef3": "漏洞盒子×阶跃星辰SRC | 漏洞盒子「企业SRC」新住客", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507699&idx=1&sn=8685bbc4a7a5c3ab156290bdba31f839&chksm=cfcabde7f8bd34f109ac5cdbac70fafb57c5718aa87e116f36916bfdc6266974f17443de45d6&scene=58&subscene=0": "双倍奖金!X 春日漏洞悬赏计划启动!", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247524820&idx=2&sn=a2d5eb3834a1c2092323aa5ba76233d1&subscene=0": "2025-04微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzk3NTQwMDY1NA==&mid=2247484366&idx=1&sn=8f74d77f7f7357fe1ca951471fb0a03c": "漏洞复现篇 | Vite任意文件读取漏洞:CVE-2025-30208,最新!", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581851&idx=1&sn=89204ddc3d8a3883f51123a63590bbea&subscene=0": "Sante PACS 服务器漏洞可使远程攻击者下载任意文件", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487028&idx=1&sn=17913f755a5167c919f0c75985f35a7f&chksm=c22296cdf5551fdb3331a68f05a450c2a80d926451739f6e50c477f8f81f5cda6a47abd9447f&scene=58&subscene=0": "漏洞预警 | Elastic Kibana 存在任意代码执行漏洞(CVE-2025-25012)", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094945&idx=2&sn=b8927f61ae21ac02b310e4b2e01c22f6": "Microsoft WinDbg RCE 存在允许攻击者远程执行任意代码漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487521&idx=1&sn=d97ae7fdc1eaf6b8883dee4beac30128": "暗网漏洞交易的财富密码:如何用1个0day实现被动收入?", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094990&idx=1&sn=26a1f09c332cd65265003ec07d316544": "IBM AIX 存在允许攻击者执行任意命令漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488138&idx=1&sn=196d2a12c48d2e8d3ef171a1cc3b9b79": "蓝凌EIS智慧协同平台fi_message_receiver.aspx接口存在SQL注入漏洞 漏洞预警", "https://mp.weixin.qq.com/s?__biz=Mzk3NTQwMDY1NA==&mid=2247484306&idx=1&sn=50e69fcef563f3873d7be4b116ef6fff": "Web篇 |【全网最详细】Apache CC反序列化漏洞:CC1调用链POC构造过程,干货!!!(上)", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502184&idx=1&sn=234922f0cb0df3244d36814cc3f5dfa5": "【霄享·安全】XML外部实体注入(XXE)漏洞简介(总第50期月刊)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068282&idx=2&sn=cfbab77073fc932a8b466a9586809efc&chksm=f36e75fac419fcecbf602c6a23698a377a6e7431fbf29023fffe68d6c04af74eecaea10c2e0a&scene=58&subscene=0": "【安全圈】全球 49,000 多个门禁管理系统存在巨大安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491034&idx=1&sn=df883c3753afd737b65d84e85c22c83b": "ipTIME 未授权访问漏洞(CVE-2024-54764)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490328&idx=1&sn=ba3aac1c3b2f2418ffe8b3312ef3874a": "【已复现】Apache Tomcat存在远程代码执行漏洞(CVE-2025-24813)", "https://mp.weixin.qq.com/s?__biz=MzI3Mzk4MDQ5NQ==&mid=2247484489&idx=1&sn=5dfebcfd86fb7f56331edd5f8e9805cb&chksm=eb1a4969dc6dc07fddc561d2b6fdcdbc1509200e87a01bbaa2dae64623cba19e8ba282f21652&scene=58&subscene=0": "【春日双倍活动】专项众测-高危漏洞突击战", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484229&idx=1&sn=ae954257ec674a62d26a7d17f79fbe7e": "deepseek本地部署工具---ollama任意文件读取漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkzNzU5MDMxOA==&mid=2247484348&idx=1&sn=d438a7a76fc8c68be9a7a5135bac4493": "「1day」D-Link DIR 823G路由器存在未授权访问漏洞(CVE-2025-2360)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490067&idx=2&sn=ee52f8aa1b647a17c100596ca1ee8238": "SRC挖掘 | fastjson反序列化漏洞实战", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489148&idx=1&sn=180b33a58d78ae05e820d5927536fe60": "【0day】某礼品卡电子券收卡系统存在前台任意文件删除漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524146&idx=2&sn=00efd5096a697e5effb42fccec5a1ec2&chksm=ce461422f9319d34dfc4755e058d6900dfaf3921760925dd571340aafa78035d2530190e940b&scene=58&subscene=0": "【漏洞通告】Vite 访问控制错误漏洞(CVE-2025-30208)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528850&idx=1&sn=9c8893a8009d8a3d0b0490df0c5bea45": "CVE-2025-0108:通过 PAN-OS Nginx∕Apache 路径混淆实现的身份验证绕过漏洞 _", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651315731&idx=3&sn=ebb0b3379d3a800631a81f8124ac649b": "全球近5W个访问管理系统存在严重安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068802&idx=2&sn=6d43320c00ad321311bbe8ccf4c0cfef": "【安全圈】黑客技术自学成“提款机”,00后利用漏洞盗刷金豆非法套现10万", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247483955&idx=1&sn=00377c3a46e42e3f4e488f652f231c94": "【漏洞预警】Zabbix groupBy SQL注入漏洞(CVE-2024-36465)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458591568&idx=4&sn=0f391a6c73995bbef9871da319cef8b4&subscene=0": "直播课时更新-系统0day安全(第7期)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497311&idx=1&sn=b5bf0ffeaecb1297a913f0a4f0b91daf&chksm=e8a5fc3cdfd2752a2808ced61e9aadff045ce3e903cbbb20095287d207cede57a7a876d5e923&scene=58&subscene=0": "某微信小程序未授权漏洞挖掘(置空查询思路)", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484597&idx=1&sn=0f0f4255a3f6d7ce5b727f2864841f7d": "警惕!Ollama 未授权访问漏洞来袭", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486347&idx=4&sn=72e3c9d7b8fe9da410b4694bf9d5ab33": "\"0day\"漏洞裤", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528744&idx=2&sn=d98a71a758a0d2f757cd35589c6d55b6": "CVE-2025-0693:AWS IAM 用户枚举", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247508523&idx=1&sn=2ef8dc3680c5c26b96bdfb5d02405f9b": "Kubernetes惊现“入口噩梦”:Ingress NGINX高危漏洞可致集群全面沦陷", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528882&idx=1&sn=20c23e4f6c831a5896866910321414a3": "CVE-2025-24813 - Apache Tomcat 路径等效漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503290&idx=1&sn=a8392249522b3dfdf21eb6cd1a34ac57&subscene=0": "微软4月补丁日多个产品安全漏洞风险通告:1个在野利用、11个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524207&idx=4&sn=3eb963d2f1d71e099aa6044120c289fd": "关键 PHP 漏洞允许黑客绕过验证以加载恶意内容", "https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490459&idx=1&sn=2dba871cabda85172a8cbab0aab699f5": "Java XMLDecode反序列化POC变形", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610018&idx=4&sn=b27eefe8206a3b9ba9038bfbb6d6d675": "一款基于deepseek智能化代码审计工具,支持多语言代码安全分析,帮助开发者快速定位潜在漏洞。", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247484341&idx=1&sn=e4ec9ef45b99fd24053300313548b169": "IMF爆肝7小时绿野仙踪寻找6大flag,层层递进、sqlmap、bp、weevely、nc、cve-2021-4034齐装上阵", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238728&idx=1&sn=0b728fdb715ef29b39d89d6712305e7e&chksm=8b580c71bc2f8567ac9a9e82b8fcf398abb55ee2f9d8fdacc06103e40b09f84c5154e41e8bc1&scene=58&subscene=0": "专题·漏洞人才培养 | 网络安全白帽人才运营及创新实践", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522410&idx=2&sn=0aef267bcd2c2f831a7dedbda98b4668&chksm=ea94a900dde32016f9902d5634144e61cbf559478eaf697cb00cf146b7b4de1bae7a4526be98&scene=58&subscene=0": "思科: Webex 漏洞可导致凭据遭远程访问", "https://mp.weixin.qq.com/s?__biz=MzI4NTYwMzc5OQ==&mid=2247500781&idx=1&sn=4c5df9ca2a5e0efde9eb509c50522921": "玲珑安全第六期漏洞挖掘培训开启!福利多多,速来围观!", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489873&idx=1&sn=496a93baf7881cccb4fa05f4b1d41dfd": "【高危漏洞预警】Vite任意文件读取漏洞(CVE-2025-31125)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522648&idx=2&sn=90341e46704d8bff579e255a4405da41&chksm=eb8af58afdf08b026933e9bf8bc57815824f59d69547b3ec63d6bad01c77ae22bc4148e46569&scene=58&subscene=0": "佳能打印机驱动中存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492761&idx=1&sn=5f8c867388ac56894cc669a1454a5f60&chksm=96f7fbf4a18072e2487b594a12ec9eacba9abaa57fbcca2ac5c630c0e4b75cf39476131feb26&scene=58&subscene=0": "【已复现】Vite 任意文件读取漏洞(CVE-2025-30208)", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497155&idx=1&sn=966cfb1d9a041fad6285333b4a7a7086": "一款图形化的 .DS_Store文件泄露、.git目录泄露、.svn目录泄露漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247554342&idx=1&sn=446893fee26dc64fa6cfb9f977292177": "Jeecg漏洞总结及tscan poc分享", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489859&idx=3&sn=771fa528fc9373e9b736f7f1b99f9731": "【漏洞预警】Microsoft Windows文件资源管理器欺骗漏洞(CVE-2025-24071)", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462668&idx=2&sn=fea352bcd11c8dd1d9163cf83b2f0959": "专题·漏洞人才培养 | 以CTF学科竞赛为抓手的漏洞人才培养探索与实践", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651317345&idx=4&sn=2d2f67ba15b1fd479a1bca3d6027a20c": "Mozilla紧急修复Firefox高危漏洞 与Chrome零日漏洞原理相似", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522693&idx=2&sn=e1391919751a9d3acaf0708361a37f65&subscene=0": "微软4月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499815&idx=1&sn=dce5a2af1a71a8f7765ee5a87161a141&chksm=ec1df00fdb6a7919f721d0c66c27ddfb05e61b83d6542df7e2a185a0c3ecd417a34dd87c791b&scene=58&subscene=0": "我的首个 AI 智能体,一键关联漏洞 POC !", "https://mp.weixin.qq.com/s?__biz=MzAwMjc0NTEzMw==&mid=2653588940&idx=1&sn=6401dfd2bc0405557d89de2c2a935ecc": "JavaSecLab 综合Java漏洞平台搭建", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485823&idx=1&sn=501b849f5815c36d2ec6fd45dc1b51a8": "利用 CVE-2025-29824 CLFS 零日漏洞可导致勒索软件活动", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487083&idx=1&sn=d6ae088533da2dac07491e648388e71a&chksm=c2229692f5551f846f940d835aae7f15d1d6215adae1bfe10a3d09ed973e9650c97bcbbec930&scene=58&subscene=0": "漏洞预警 | Kubernetes Ingress-NGINX Controller 存在未授权远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651315768&idx=2&sn=371671713a9a66f0f4b69a57db9747ae": "FreeBuf周报 | 谷歌收集用户数据且无需打开应用;近5万访问管理系统存严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495843&idx=1&sn=36b368160ef2df7587d3c0c94ab30c81&chksm=fd74c06aca03497cb9aef84ffcbc6cb968f07edfb61063db88f6c5be00027c7f98b9358ce345&scene=58&subscene=0": "CNVD漏洞周报2025年第10期", "https://mp.weixin.qq.com/s?__biz=MzUyNjk2MDU4MQ==&mid=2247486520&idx=1&sn=7fd71cde4148956e0177fcfdda20030f": "Ollama 漏洞检测工具及使用手册", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581795&idx=2&sn=2b72c823fb0e62dc340567568c6dfd82&chksm=e84bd0e48e8f098e8db1eef8e687f013893fc2765d8109a6b3839a5ea69b609e695c01d125d0&scene=58&subscene=0": "新的 OpenSSH 漏洞使 SSH 服务器面临 MitM 攻击和拒绝服务攻击的风险", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096051&idx=1&sn=12d1531eec52768a008a3463a4226be5": "Apache Parquet 允许远程执行代码漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522605&idx=1&sn=d013414cab5f1de1d4ec9080c742585e&chksm=ea94a847dde321512841fc1abc7fb1931ffd8c2e62fc5dc59bb03f0d3cbfcb5b7956bfe75ab1&scene=58&subscene=0": "OpenAI 严重漏洞最高赏金提高至10万美元", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522410&idx=1&sn=0f5b704ab0b14c7dd3262ffbc0697b07&chksm=ea94a900dde32016fa789ad6e1cbd205eab3afe70049ad11ab8634e97423249682ce8b5d438a&scene=58&subscene=0": "博通修复3个已遭利用的 VMware 0day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664240236&idx=2&sn=879075c08d2e27c35ebadff15fb313f9&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068550&idx=4&sn=2c40ebea61f1937556e695b2be5f2873": "【安全圈】PHP 遭多重安全漏洞 “围攻”,应用程序风险骤增", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511459&idx=1&sn=d164a4a8ab7a6d67f374caa7978ce665&chksm=fa52781dcd25f10b28432fa6bc3a4eb73361e46c5c42b8c59895dd8e4dbfe53fdbec0fea8f12&scene=58&subscene=0": "微软2025年3月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247554402&idx=2&sn=d45339f0257dddd5563a007ae471271f": "【免费领】新手必备!Web安全漏洞挖掘实战入门教程", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489754&idx=1&sn=57c283962096cbe0ba12fd8927bf9ccf&chksm=fb029582cc751c943a4e53c5a0a3b96e80459f0cb16241c005be5e0baaf9eb80a742f2e3d548&scene=58&subscene=0": "【风险提示】VMware ESXi新型漏洞利用链已出现在野利用", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462671&idx=1&sn=f90d72f94fb77060e8128345abec4aee": "专题·漏洞人才培养 | 知攻善防,内外兼修,网络安全实战人才培养的实践之道", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247484743&idx=1&sn=7246afac3f6f47121512e04fd7838953": "【漏洞挖掘】密码重置漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495860&idx=1&sn=7a58eb41bf13bba3ebb80bfece796e81&chksm=fd74c07dca03496b5c8b56a0d65061a51877807dd82c478cab9ba58246288cbb23c42f669cff&scene=58&subscene=0": "关于Google Chrome存在沙箱逃逸漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489222&idx=1&sn=18f4c183c2bfc53de9996791fb5e33ca": "【支持排查与检测】Vite任意文件读取漏洞(CVE-2025-31125)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488311&idx=1&sn=f585cac7d8239a0cff353b75038a2d4b": "Emlog index.php接口的存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487478&idx=1&sn=6dd9af08e4fbf71708b9a8133038fb15": "HackerOne审核漏洞的隐藏规则:为什么你的报告总被拒?", "https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484348&idx=1&sn=e2703f4bd969e744f6d6b0d9b2d9e13a": "渗透测试神器之漏洞利用代理工具Empire", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068507&idx=4&sn=2de5344a3fcb8ad860aed5b850eab880": "【安全圈】开源字体渲染库 FreeType 出现高危漏洞,可被黑客利用发起攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458591194&idx=1&sn=8573593d270470e21d64034d47a9045b": "CVE-2023-4427 复现", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247502970&idx=1&sn=d4279c37345e6a404336b2158cb1f969&chksm=cfc56b25f8b2e2339fa4c0425bf32321f7bb80a09d224ad087dcc5152a9f8a7ddd7b3021c142&scene=58&subscene=0": "实力认证!360入选国家工业信息安全漏洞库技术组成员单位", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491026&idx=1&sn=20721f7418799a813246b42c73e03f2c": "ipTIME 未授权访问漏洞(CVE-2024-54763)", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496672&idx=1&sn=61480ecdb85f33408d2809e9d5d45378": "【风险提示】天融信关于Apache Tomcat 远程代码执行漏洞(CVE-2025-24813)的风险提示", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247580199&idx=1&sn=2e58119f92999a524f566f3335728a27&chksm=9ec7245d1f687fe5eafce7f07dc17ab66e22b61571693cc4c25d2ccb512053f2740114cdf4ce&scene=58&subscene=0": "2025攻防演练必看:千起实战案例、600+历年漏洞汇编!", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513917&idx=2&sn=286b213b1698f09bb36bba8eb40d4d21&chksm=ebfaf01ddc8d790b1e4ec9f94d937e8979a8008245c15cd8c8ce1388f9d2b5cb82fe1e88ebfe&scene=58&subscene=0": "多个政府机构和企事业单位门户网站遭攻击,工信部漏洞平台发布预警", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247508076&idx=1&sn=9c232aa11dcec49b95b63e043618b4af&chksm=eb965a93eec22b4b46eb98e0dbe72214c16c8a04ebf826be8fa170309306e12d2bbafad69d62&scene=58&subscene=0": "专项活动第一期|单个漏洞1w元起的活动!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522590&idx=1&sn=ee578730b1733ca26a369770366c3b00&chksm=ea94a874dde321621c61902e3f2a06600d7b26506c458661c5ca08a93507ffca99fe28a26c7d&scene=58&subscene=0": "博通:注意 Vmware Windows Tools 中的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492735&idx=1&sn=6dea5357862c227b6882f2948233a06a&chksm=96f7fb12a1807204479d179722d02b1be6aab60e7d63066f83a1c5f0994a3158e00bfc38b36f&scene=58&subscene=0": "【已复现】Apache Tomcat Partial PUT远程代码执行漏洞(CVE-2025-24813)", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485757&idx=1&sn=88c93afe3d77576996c88fd3a31b4901": "【最新漏洞播报】", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238220&idx=3&sn=ac6f6d9892b05eabfa11b6103d383753&chksm=8b580e75bc2f8763635869430b4598e1759d531dd6424e8018f4ce4e385d1ab2b7a98c0b7267&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788162&idx=1&sn=ead92e907ffe3dc8ae5f3212f1292138&chksm=8893bf6dbfe4367b0edc05095932cd4900c1465b8bdf5efe54d2505331c0524962347d41f388&scene=58&subscene=0": "紧急补丁发布:谷歌、苹果、微软联合应对高危零日漏洞 CVE-2025-24201", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486336&idx=1&sn=75b14eacfed52c233f8020786d12315d": "审计分析:验证缺陷导致文件上传漏洞的产生!", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247502991&idx=1&sn=aa35c8e8e6ad6ef56e7f35c84e5150ba&chksm=cfc56bd0f8b2e2c62f23476a2f394839ae286c8f994de2e8ba0f40cd727167b04167a569c207&scene=58&subscene=0": "360漏洞情报月报2025年02期|全网捕获4000+漏洞,整体威胁水平处于高位", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511562&idx=1&sn=a9ac30c9a1453dd6f10d10ad0dc38e84&chksm=fa527bb4cd25f2a2602307afbc35529e1305d7b5562cd081a9cce1ef01a61c513d794f459409&scene=58&subscene=0": "Apache Tomcat 高危RCE漏洞CVE-2024-50379:复现分析与防御策略", "https://mp.weixin.qq.com/s?__biz=Mzg5MDU4NjYwOQ==&mid=2247484240&idx=1&sn=d7532687fa54f9403d3489a824651ecb": "SRC漏洞挖掘之敏感信息泄露漏洞挖掘实战指南", "https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492290&idx=1&sn=a6f0e60f644aa507c0c852e5058b65d2": "春季特惠 | 实用办公软件 6 折起!Downie、WinRAR、PDF Expert 好价来袭", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484787&idx=1&sn=47fc321710f48f1f6e8c0ea35943f8ad": "Sapido-多款路由器-远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068414&idx=3&sn=901c48dfd12830282fa40f36c5da693f&chksm=f36e767ec419ff68fcb78d1cd0e8d0e7854fbc83e1fc5d9a2c3c966cfee30b8aaf4de92be4f5&scene=58&subscene=0": "【安全圈】PHP-CGI RCE 漏洞被用于攻击日本科技、电信和电子商务领域", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590984&idx=1&sn=c31273097426c0de80490922a0abe551&chksm=b18c2f8286fba694bf529bc37a0820cf419f1d29aab3881739da68477bc62e1f71151ce59c06&scene=58&subscene=0": "Hyper-v虚拟磁盘驱动vhdmp.sys漏洞汇总分析", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511221&idx=1&sn=b04ebc86e93bf83a9d60382e28d6ea0b": "Apache Tomcat远程代码执行漏洞(CVE-2025-24813)", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650609205&idx=3&sn=7b5061a2d007e86ba90068114d3a1ff8": "记一次某大厂csrf漏洞通过蠕虫从低危到高危", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485744&idx=1&sn=8e49c57f7e06a99568418c62c9c53121": "WIFISKY-7层流控路由器SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490657&idx=1&sn=c230af9bfb68100184dc8371bbe743a0": "Elber-Wayber模拟数字音频密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MzAzMzk3OA==&mid=2247485090&idx=1&sn=d153e5c7df9e1fb5e60ae40aeaf1d518": "反序列号漏洞解析及赛题分析", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499313&idx=1&sn=6e3ea4f65a3a341208b946ee3200f59b&chksm=fa5950dccd2ed9ca75b9c4b3efd59c0ff2d1232b56761d7c9e243aef74d77912825f853bf9d1&scene=58&subscene=0": "实战+分析 | .NET 分布式事务反序列化漏洞插件", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524174&idx=1&sn=1d798d08a9a7152d738fd82f9dba148b&chksm=ce46145ef9319d486615f7b9d3fc59b9b8f283376cc841e26e0adce442d010d6fd200ca5136f&scene=58&subscene=0": "【漏洞通告】CrushFTP 身份验证绕过漏洞(CVE-2025-2825)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489233&idx=1&sn=3b3871ac2d18a742398deb6e15ca9284&chksm=c35076a7b82ae7e693530ebc872cd3c4f6f475b2201470347718a068fcc7f09cc2a0efdc8794&scene=58&subscene=0": "【处置手册】Vite任意文件读取漏洞(CVE-2025-31125)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490061&idx=4&sn=f8a82b936d8fd0966a0b883e39f563c2": "《DOM型XSS漏洞之AngularJS表达式触发》", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094931&idx=1&sn=e3c2c8b464a873243e663da80de3035d": "Linux 内核越界写入漏洞(CVE-2024-53104)", "https://mp.weixin.qq.com/s?__biz=Mzk3NTEyMzQzOA==&mid=2247484810&idx=1&sn=a40974123602bdf89cc6c169259d7251": "VulnHub靶场之DC-3超详细Joomla漏洞命令提权和系统内核漏洞提权", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503073&idx=1&sn=6769c38d6b37afb2cecf671963dff742&chksm=fe79e879c90e616f8d3bc3f16b6ef82738e3618fb4be9584f97a3f0b6c743197970c469212d0&scene=58&subscene=0": "【已发现在野利用】VMware ESXi多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkxNDU0MTUyNw==&mid=2247492477&idx=1&sn=0e28b1917e0ce6cae09c2fbad5345526": "【2025最新】6款漏洞扫描工具!收藏这一篇就够了(附下载链接)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651316208&idx=3&sn=614cc4ab71f72682c6e24ab68cca503c": "微软与VMware零日漏洞紧急修复指南", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135784&idx=2&sn=a72b91fbbc4464ad90155ba6a5a9081b": "研究显示:超300万财富500强员工账户凭证近三年内遭泄露;严重漏洞威胁Next.js应用,攻击者可绕过授权访问管理面板 |牛览", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489211&idx=3&sn=ba50e05a2bc768b8aa87e315aaef328d&chksm=c2c641b0f5b1c8a6c70abe890e06b6d9ac422cac821204790cc7973c2e6ee6fbba6c3f1c3419&scene=58&subscene=0": "【处置手册】Vite任意文件读取漏洞(CVE-2025-30208)", "https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247485667&idx=1&sn=d395cb01aed4ebde31e39e2563eb0423": "从CVE-2025-30208看任意文件读取利用", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528721&idx=1&sn=8e7d2055056a5ecd904ce639934c19ad": "CVE-2025-0927:Linux 内核 hfsplus slab 越界写入分析(EXP)", "https://mp.weixin.qq.com/s?__biz=Mzg5MDU4NjYwOQ==&mid=2247484223&idx=1&sn=feba755768b8f849823e57dae54399e0": "SRC漏洞挖掘之文件上传漏洞挖掘实战指南", "https://mp.weixin.qq.com/s?__biz=MzkyOTQyOTk3Mg==&mid=2247485217&idx=1&sn=d0f50245c5ce735ba8528ea86d1c097e": "一个漏洞POC知识库 目前数量 1000+", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247496541&idx=2&sn=488de68d5a2e231c565a7021b36de1a8": "不赶趟的 tomcat:CVE-2025-24813漏洞验证", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519026&idx=1&sn=c7fa234af76b49572b577b843110190e": "列目录引起的一系列高危漏洞并获取一万五千元赏金记录", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068768&idx=3&sn=bce77deed6ad8035e8531d60d82059f8": "【安全圈】针对近期 Chrome 零日漏洞的利用,Mozilla 向 Windows 用户发布紧急补丁", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489116&idx=2&sn=55d30d438131d9bff6405626dd0a73b9&chksm=c2c64157f5b1c8417dbb20c3823a444773f296d5613ecec6eec3cd6c8f3f09561591c695221d&scene=58&subscene=0": "【处置手册】Apache Tomcat远程代码执行漏洞(CVE-2025-24813)", "https://mp.weixin.qq.com/s?__biz=MzA5NDI0NzY3Mg==&mid=2247484850&idx=2&sn=7e725c0a7ce8bdbaf01b01860e1719c8": "AllForOne nuclei漏洞模版自动收集下载", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503098&idx=1&sn=27b33ae5cbe86fa6be65bd5b34b2c1f0&chksm=fe79e862c90e6174deddc655619db7a160525240fea9fe86f3412c26ef2d03b01d958c4a00f3&scene=58&subscene=0": "Apache OFBiz 服务端模板注入漏洞(CVE-2025-26865)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484655&idx=2&sn=5db178d22f78ce33edd883a5dbb917e1": "H3C多系列路由器存在前台远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135481&idx=1&sn=d3265ca05fb3478831f69020f9a2c3f0&chksm=bd15ad2a8a62243c41425e7c068635da1e7bf2076baa3e4fa9ff044c5e52aac1c893eca8ef00&scene=58&subscene=0": "MFA告急!黑客利用高级技术绕过保护;WebKit零日漏洞被利用开展“极其复杂”定向攻击,苹果紧急修复 | 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524099&idx=1&sn=bc3a4611c8c85240a6fb2c1fd38ef7c6&chksm=ce461413f9319d05649f5a680834880964812593d72c98fb1d3c0e842324b677a6704dc3a6bb&scene=58&subscene=0": "Next.js Middleware 认证绕过漏洞(CVE-2025-29927)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503355&idx=1&sn=5c2e9383e5cd263c53c2bc880d636e89&chksm=f2585e88c52fd79e999ff0537a01fb50bb19170db5f55bde644c69f4dcf63e0f6f24c6c51057&scene=58&subscene=0": "雷神众测漏洞周报2025.3.17-2024.3.31", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485811&idx=1&sn=cdfad292d379fa7cba51408350147367": "工具集:svnExploit【SVN源代码泄露全版本Dump源码工具】", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497273&idx=1&sn=0bc20077a14bd5a29028a49ee15a9d4f&chksm=e8a5fc5adfd2754cc17f724edeec51bad5113f97814dcc19f67772fe3f84dcc83588fb8ecdcf&scene=58&subscene=0": "XXE漏洞各种骚姿势", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068486&idx=3&sn=49a253062081aae290f02f07ac4704a2": "【安全圈】GitLab 警告多个漏洞可让攻击者以有效用户身份登录", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524212&idx=1&sn=adc8b32975d00ac07cf0fd25f744e1f4": "【漏洞通告】Vite 任意文件读取漏洞(CVE-2025-31125)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490850&idx=1&sn=e76fe3973b2336d62ac834665ec2cdb4": "万能门店小程序管理系统 dopagefxcount SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499062&idx=1&sn=780d36184c63b257ce9a15c1e4cf67e5&chksm=fa5953dbcd2edacd634e99df62c8e21b1b249a45f475b8616cae4fc6a3152df08b9f1dcb90d5&scene=58&subscene=0": "MachineKeys 大字典:利用 3000 条 MachineKeys 爆破 ViewState 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068690&idx=1&sn=56b130f81a1375b405d522f031dbdbbd&chksm=f36e7712c419fe045a5eb90bb78f2db716f3a343592cfa7e354b6fd52234ef91f0f73d1485f3&scene=58&subscene=0": "【安全圈】研究人员揭露macOS漏洞,或导致系统密码泄露", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590963&idx=3&sn=3bd3151438c0f5b55d478fb9b092ab44&chksm=b18c2e7986fba76f0a4cf349800bbae5940e35ed0b05eb2822f0c3991f6574203d4d9cb178cb&scene=58&subscene=0": "更新2节(附课后作业)| 系统0day安全-IOT设备漏洞挖掘(第6期)", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094990&idx=2&sn=71a46ec096693c5fde872c3101911bb5": "Linux 内核越界写入漏洞( CVE-2025-0927 )", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490061&idx=1&sn=be33af5aab30b0fd1bafc6877d17f939": "Ollama未授权访问漏洞【实现AI自由】", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484772&idx=1&sn=b953ebaf6bd157dbe8582350ec8548bc": "Nokia-G-120W-F-路由器存储型XSS(CVE-2021-30003)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489062&idx=1&sn=7bfb2e666dd730047d33b3aba257b374&chksm=c2c6412df5b1c83b9122a4491eaa03f46d6adf74027b790fe46024417aefd7d5e1da9aa852dc&scene=58&subscene=0": "【漏洞通告】Windows文件资源管理器欺骗漏洞(CVE-2025-24071)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522548&idx=2&sn=0cc9b1e732d2a5c231ebd3f08b1198d4&chksm=ea94a99edde3208849ca7ab6d940870bda4fe6411d5141b128f4065c88085d0a6292aa744dd0&scene=58&subscene=0": "Chrome 修复 Lens 特性中的严重 UAF 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522437&idx=1&sn=fa13f44a7ac5f969c2545cd409208ea5&chksm=ea94a9efdde320f99e34707ab6058ef0fa72c3871963c59aa4dd58f17220777ad7b155eda06c&scene=58&subscene=0": "CISA:Edimax 摄像头中的严重0day漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651135371&idx=2&sn=6a4ed653f5f735d427b6b4b80a73c605&chksm=bd15ad588a62244e67295291773f1dfcf10039ea37bc7ec7363949d7f90676247858568f2c95&scene=58&subscene=0": "工信部CSTIS提醒:防范Murdoc_Botnet僵尸网络的风险;谷歌修复两个已被利用的Android零日漏洞 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486637&idx=1&sn=9582df0651833643a927edc2a197edd2": "【漏洞预警】Apache Tomcat 远程代码执行漏洞(CVE-2025-24813)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522462&idx=1&sn=c051df72b6c28d0692307dd16d721ac3&chksm=ea94a9f4dde320e2d70d9b7a80e5498b123869d81567fe01975c9045575a19dd18d413f1a724&scene=58&subscene=0": "苹果紧急修复已遭利用的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489835&idx=2&sn=ff63457657a61b42e52447167443ad0c": "【漏洞预警】Yii2反序列化漏洞(CVE-2025-2689|2690)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499125&idx=1&sn=0d7a07d43c5d44a19f72a0e53ba45e83&chksm=fa595398cd2eda8eaa59614d333b1a0096c89e121f302e740b5f7d310f32742cf1355b4a6e64&scene=58&subscene=0": ".NET v2.0 框架不用愁,通过 ysoserial_frmv2 触发 ViewState 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MDU4NjYwOQ==&mid=2247484219&idx=1&sn=89af4b699328ee762974eeb130ed2c58": "SRC漏洞挖掘之逻辑漏洞挖掘实战指南", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522462&idx=2&sn=f4fd6b2b3208ba9bf9c03f0a964fe0e5&chksm=ea94a9f4dde320e2794628bba1a96ea5a4fbdcaf3687cbaf3007508db92db3e077e36f2cfa87&scene=58&subscene=0": "微软三月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484814&idx=2&sn=d370c68ff4ae64de4cd6d6bbb4ddf60c": "malicious-devfile-registry :在Gitlab中利用CVE-2024-0402", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522568&idx=2&sn=ec34401dbcb58be493c11352d5815bb6&chksm=ea94a862dde3217407994c21b360a3a36b5d0158799c4aedf1f7d71946499b6f7e3f11b7e7c7&scene=58&subscene=0": "思科智能许可证实用程序中的严重漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495894&idx=2&sn=857f86603a4c210e66ac8ec76414e169&subscene=0": "上周关注度较高的产品安全漏洞(20250331-20250406)", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514014&idx=1&sn=940df55ce8c872acd2dc9639c8eef32a&chksm=ebfaf0bedc8d79a8d91b72468dda1173573bc960aff6d38299c3b3543b8078870c19af1930a6&scene=58&subscene=0": "警惕!Fortinet防火墙漏洞遭勒索软件利用,多家企业被黑", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458590984&idx=2&sn=b1db17b5fcaa1c4c3fc72ffc5ce6ecf5&chksm=b18c2f8286fba6941ab6105f712225167b1d0fbc683889fe28f7005fd280a1a5a1d1910c2f13&scene=58&subscene=0": "​Veeam 备份服务器现重大漏洞,速更新补丁!", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492746&idx=1&sn=ed13e6ad093adc8c57da7258ae6ca173&chksm=96f7fbe7a18072f19a82f0ea649e2b56c2bcacfba7dd95fd5fa8fd9319ee48e641b66e8ff029&scene=58&subscene=0": "【已复现】影响部分热门 AI 应用,Next.js 中间件绕过漏洞(CVE-2025-29927)", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788145&idx=1&sn=0f1a20f6a89c77dc027a3479ca3bfbaf&chksm=8893be9ebfe43788a04621c079caea12bf248a00372c0231aa1126095d0398806a01db2ad9c3&scene=58&subscene=0": "攻击链揭露:间谍软件利用零日漏洞攻破安卓手机锁屏", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490065&idx=2&sn=a4481e4d2263583ccf6816d48497e8a7": "SRC挖掘 | fastjson反序列化漏洞实战", "https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247530213&idx=2&sn=bc7ed39e7a3e88d201015a514b3feb0d": "国际 | 运营商巨头赔偿超2.3亿元:因系统漏洞令用户损失巨额资金", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484772&idx=2&sn=5d95f12ceb0ce9f2d63129ff4ab144c9": "Panabit-智能应用网关-后台命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MDU4NjYwOQ==&mid=2247484199&idx=1&sn=408d005a7a84117200e9705d131e6cbc": "《SRC漏洞挖掘实战指南:掌握这些思路月入过万不是梦》", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247634869&idx=4&sn=2c9302ea74183c37a3f8c5c49c45be5e": "虚拟机逃逸!VMware高危漏洞正被积极利用,国内公网暴露面最大", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524058&idx=1&sn=5b6a28647c2cd34f5170f008d75d7dd0&chksm=ce4615caf9319cdc9f7d4f3697a1785155e4ed93c11d4debd04fe847d984366a7dbf56607275&scene=58&subscene=0": "【漏洞通告】Apache Tomcat 远程代码执行漏洞(CVE-2025-24813)", "https://mp.weixin.qq.com/s?__biz=Mzg5MDU4NjYwOQ==&mid=2247484228&idx=1&sn=29999622ae9c6523de14419be8621253": "SRC漏洞挖掘之未授权漏洞挖掘实战指南", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511577&idx=1&sn=329f5c187a5d6240b0131787ff474b80&chksm=fa527ba7cd25f2b134a3912e061b55881b7fca8cd1c26c829a1e3a95b178f9f703dc8d0e3fc9&scene=58&subscene=0": "CVE-2025-24016漏洞对Wazuh平台的潜在威胁", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650609945&idx=4&sn=dc687ccf6f9d56f0b1e191eab3a03955": "Tomcat自动化漏洞扫描利用工具", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503362&idx=1&sn=667997870c33aaa2e8794279d067873b&subscene=0": "雷神众测漏洞周报2025.4.1-2025.4.6", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651316861&idx=1&sn=e1d97d2aad6fbc5ac14b4dc8e9e5b3ab": "白帽SRC百洞事件复盘;业务漏洞应对处理策略| FB甲方群话题讨论", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507726&idx=1&sn=87cb8cf899d518b4a7c07925db84de62&chksm=cfcabc1af8bd350c85607f26c312cc39b87c9a3d338bb63e6a33c229f56b8eedeaabb6b2177a&scene=58&subscene=0": "2025上半年最需要关注的80+高危漏洞!", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497257&idx=1&sn=85e09077ac49ae13a1f1daedf3fc5c1b&chksm=e8a5fc4adfd2755cb44a19150ec3a167ed8b06ccf317294d3bd576cf041953a49dc7873e1f24&scene=58&subscene=0": "SRC漏洞挖掘|助你快速成为百万赏金猎人", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247488786&idx=1&sn=51e7bf2013866df189a3bba48ca8cc41": "审计技巧 | TP框架的系统如何快速高效挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068262&idx=2&sn=4cf1db2edf35935c09365a77e168187e&chksm=f36e75e6c419fcf0e8d6fe9eaadfd6a76313699ef67cb33b279e19c41386af30413120edb153&scene=58&subscene=0": "【安全圈】苹果 macOS 虚拟机应用 Parallels Desktop 曝漏洞未修补完全", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494528&idx=1&sn=7f8e933d26286579c5b9dc60986b3aa0&chksm=fa9d10d6cdea99c024e39078c2ebc8819c119162458dc9295006e366faef9a056c2df2415957&scene=58&subscene=0": "双倍积分 | 生活服务漏洞+爬虫双专测开启", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247498599&idx=1&sn=db0a2d532eeebd49b487cd58d42cca39&chksm=e84c5db8df3bd4ae94459a242742ec736606d6bbf627d8c19000b53c16a2badd261a43f50ed5&scene=58&subscene=0": "从环境构建到漏洞利用:如何用Metarget和Coogo复现K8s IngressNightmare攻击链", "https://mp.weixin.qq.com/s?__biz=MzkzNzg4MTI0NQ==&mid=2247487370&idx=1&sn=828769015bbb4c7572a3da2b28bb320c": "CVE-2025-30208-Vite任意文件读取漏洞服批量漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MzkyNzQxMjQ4Ng==&mid=2247484230&idx=1&sn=a70c3aec36089a41b2117fe9b81065a3": "Vite 任意文件读取 CVE-2025-30208", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484791&idx=2&sn=956de1b1210bbe1ff1c918ae666442a9": "fuzzlists:渗透测试和漏洞赏金Tips列表集合", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491372&idx=1&sn=8f6d5ebd2c6ac2f7a14fcb693a978f1f": "震惊!Verizon 750万用户数据泄露,供应商成安全漏洞?", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522612&idx=2&sn=50c7ad88e87b485a09c7ae916f9d9677": "Firefox 存在严重漏洞,类似于 Chrome 已遭利用0day", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664237950&idx=1&sn=564e1295e727202d88f8e34675c0d416&chksm=8b580987bc2f80918156eda212fa6b3c348f101d69ddd43a6dddaf317a92ba6835a2f063c227&scene=58&subscene=0": "专题·漏洞人才培养 | 知攻善防,内外兼修,网络安全实战人才培养的实践之道", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522499&idx=2&sn=26c6be6088417f7563b0041ef251fe1f": "GitHub 发现ruby-saml中的新漏洞,可用于接管账户", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503274&idx=1&sn=1a92fb1a08b490191c7da0291d0f3737&subscene=0": "【已复现】Vite 任意文件读取漏洞(CVE-2025-31486)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488206&idx=1&sn=2dec6859f4829ffb1d7ef81960168081": "用友NC-Cloud系统getStaffInfo接口存在SQL注入漏洞 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094945&idx=1&sn=cab9786aaa955563472a712e9552f111": "Apache Tomcat 多项安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538037&idx=1&sn=ec33f4dc2eb70d9417960fe25cc4cc5b&chksm=c14427c8f633aede67a64ff67116350bf19c989ba2d1422ce2e2a71288e75d1e29168300a41e&scene=58&subscene=0": "Ballista僵尸网络利用TP-Link漏洞,6千台设备被攻击", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788184&idx=1&sn=40b357f765ffdbf61042f975a30fc982&chksm=8893bf77bfe436612fa4d97ac07547e2d7c9e38987dcbb8a271666423264511c01ca29598a75&scene=58&subscene=0": "ChatGPT漏洞被超过10000个IP积极利用,攻击美国政府组织", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522590&idx=2&sn=ee575193ee5fe0995b313a95a46890ee&chksm=ea94a874dde32162af6eae13f89ada50332950da90c99d60c106b45836f1993c80d8cd996cbe&scene=58&subscene=0": "谷歌紧急修复已遭利用的0day", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247637810&idx=2&sn=ec91d03b3b9d56b89bd17e92d40d0285": "CSO说安全 | 张天力:智能安全运营体系探索—分布式多智能体在漏洞修复中的应用与实践", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247496048&idx=3&sn=5301263a3d5af1729a93fc785f6f2aae": "美国众议院通过法案:强制政府供应商设立漏洞披露计划", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489835&idx=1&sn=c09fffd40a9c5a670b270f2c5e7fa89e": "【漏洞预警】Spring Security授权绕过漏洞(CVE-2025-22223)", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650609945&idx=1&sn=5aa5340587198c952ae4f44c9fa5c0ba": "外包保洁员段某泄露3项国家机密!国安部披露细节|黑客技术自学成“提款机”,00后利用漏洞盗刷金豆非法套现10万", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484889&idx=1&sn=4651a159ebddd37ffcec1791cfb81162": "CVE-2025-29927:Next.js中间件绕过漏洞POC", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247484141&idx=1&sn=156d01a5ddc9eb22fe1b24e1817e9f31": "vulnhub靶场渗透之Stapler 8000字详解,多种方式任你挑选,sql注入、隧道建立、hadry爆破、内核漏洞利用。", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484681&idx=1&sn=dd3a010cb7a74de83fa8dc1cdf225d53": "【漏洞复现】Vite 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503229&idx=2&sn=c5328659e9a3f009109e9af22c442b32": "【已复现】Vite 任意文件读取漏洞(CVE-2025-30208)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652997718&idx=1&sn=752d913378c3996e28d3f53b6afb9bc6&subscene=0": "先知通用软件漏洞收集及奖励计划第七期 正式开始!", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487389&idx=1&sn=37bc4e36e8c88426d8ced66cda70de42": "Apache Tomcat partial PUT文件上传反序列化漏洞(CVE-2025-24813)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524146&idx=1&sn=d09e102574d231b235425141cfef65af&chksm=ce461422f9319d34720cf5387352c6b926feaf5841e13e10cec9259e104efcf74757876a486c&scene=58&subscene=0": "【漏洞通告】Ingress NGINX Controller 远程代码执行漏洞(CVE-2025-1974)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068976&idx=1&sn=60a9f88e02e487944d15429688fbd7f6&subscene=0": "【安全圈】谷歌紧急发布4月安全更新 修复62个Android漏洞含两大零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NDY3MzA2Ng==&mid=2247484165&idx=1&sn=079a104fd320c9c27612368c79e5ef6a": "【漏洞复现】Apache Tomcat 命令执行漏洞(CVE-2025-24813)", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545731&idx=1&sn=e6c11f0be3ece715ea375cd373086b13&chksm=eb84d823dcf3513522edb395d85ad8adb6f946eeaf5c65e058109cceeafaeea1f795e60123ff&scene=58&subscene=0": "Vite开发服务器漏洞预警!启动即裸奔,低门槛攻击可致系统数据泄露", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489779&idx=1&sn=0e63132b1c7d972b6c91bcac37259929&chksm=fa801517e4e91fa05a42e61ac90392fef9ef05b622ee43e15761de7f29a6251f4f910fce842d&scene=58&subscene=0": "揭秘天价漏洞BrokenSesame 技术细节", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664238059&idx=4&sn=475d254c976f43978bdbea4bd84bebc9&chksm=8b580912bc2f8004cd4d679d99c77d8e0b6160005bd80b4eb56c439ca0bf6499bf983b741911&scene=58&subscene=0": "CNNVD | 关于Apache Tomcat安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484210&idx=1&sn=1686a772cf7455a19bfda4b623d6958a": "本周最新的、复现超简单的Vite任意文件读取漏洞(CVE-2025-30208)", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487054&idx=1&sn=f7a9ab7406135e91f6b98f7d0341f6bc&chksm=c22296b7f5551fa1bd51b4c258ac6244bad50aa97ea58f3c353361d92372e881f25e3addd18a&scene=58&subscene=0": "某合约任意提取BNB漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503114&idx=1&sn=51c104a70566f06d4b7bbc8e0fb68a0f&chksm=fe79e992c90e6084f11efad6b33b036377233c8947b09dc08ec185699823134f53a28fb4ffe9&scene=58&subscene=0": "Apache Tomcat 远程代码执行漏洞(CVE-2025-24813)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488251&idx=1&sn=9dd825fbac48298618f53dbb722f73ec": "FOXCMS黔狐内容管理系统index.html接口存在远程代码执行漏洞CVE-2025-29306 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484401&idx=1&sn=d1b0954e68a03906f60a5055bd8331da": "ZZCMS最新跨站脚本漏洞及解决办法(CNVD-2025-05384、CVE-2025-1949)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500968&idx=2&sn=8d2a6ef14e348b55969ad6cc82159d0c": "【漏洞通告】Vite 任意文件访问漏洞(CVE-2025-32395)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529020&idx=3&sn=307880420bc8cb8495f1f825729ab4ec": "Jenkins Docker 镜像中存在漏洞 (CVE-2025-32754, CVE-2025-32755)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651318396&idx=3&sn=a78c051f89f530f4063d6b0d8232c8ac": "CISA将Linux内核漏洞列入已知被利用漏洞目录", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651318396&idx=4&sn=d4cd7bb135efe9f1d1a5aac2a77284ce": "WordPress插件身份验证漏洞披露数小时后即遭利用", "https://mp.weixin.qq.com/s?__biz=MzU5OTg4MTIxMw==&mid=2247504106&idx=1&sn=b5c65ac97ae5321c0c1fd2a535f56bf2": "回顾 | 2025香港Web3嘉年华:CertiK以创新技术定义安全未来", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522711&idx=2&sn=2524dc1d635d1e0a9ec3abc54886f6ab": "日产聆风存在多个漏洞,可用于远程监控和物理接管", "https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247524240&idx=1&sn=4a854ad105d1b374a056f7c26ebea424": "CISO集体推荐!漏洞管理十大最佳实践", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490486&idx=1&sn=5e399f5cdae397c1fa1f19112bc6fcdc": "Linux USB 音频驱动漏洞正被恶意 USB 设备在野利用", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484409&idx=1&sn=4985296f3ca2c4956a30d0468edaebbb": "【漏洞预警】Foxmail远程代码执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490367&idx=1&sn=0b9a137ad0a91aedd26f7a5e9054583d": "【已支持检测】Langflow存在远程代码执行漏洞(CVE-2025-3248)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524246&idx=1&sn=b861355f8def9c56781fa86b8fe0a243": "【漏洞通告】Ivanti多产品缓冲区溢出漏洞(CVE-2025-22457)", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487971&idx=1&sn=013a3712fb405f76d1d1c0e53e923be8": "RemoteMonologue: 利用 DCOM 进行 NTLM 认证强制攻击", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489931&idx=1&sn=122fd98425212783a719b1be9750565e": "【漏洞预警】Vite 访问控制不当导致任意文件读取漏洞(CVE-2025-32395)", "https://mp.weixin.qq.com/s?__biz=Mzg4NjYyMzUyNg==&mid=2247491673&idx=1&sn=acb4d6ed548113a18913ac89297083ef": "安全威胁情报周报(2025∕04∕05-2025∕04∕11)", "https://mp.weixin.qq.com/s?__biz=MzkwMjU5MzgzMQ==&mid=2247485362&idx=1&sn=b3e9b39e80db5f4a7ca1c13b7d71427e": "逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247626162&idx=2&sn=74b4f80b9153fd3f2bbd12e7eac5acd3": "Foxmail 官方致谢!APT-Q-12 利用邮件客户端高危漏洞瞄准国内企业用户", "https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486442&idx=1&sn=34349d4f38ac1cc9d363fbec3bb38441": "AkiraBot借OpenAI绕过验证,AI垃圾广告攻击狂轰40万网站", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247485363&idx=1&sn=bcfa6206296abb06768c82b403f6db80": "午夜代码影:黑客捉奸背后的 Azure 漏洞暗战", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247534828&idx=1&sn=e9c2cc00e07c9dbaf6239c626a8a4abc": "【漏洞预警】Foxmail邮件客户端存在跨站脚本攻击漏洞,建议立即升级防护!", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247501805&idx=1&sn=cb6ccfa56e174c9f64d10e2da16b6167": "慢雾(SlowMist) 与 Web3 的香港之约圆满落幕", "https://mp.weixin.qq.com/s?__biz=MzIwNjQ4OTU3NA==&mid=2247510315&idx=1&sn=e436082393dcbb2944e29e0f6e0ed6c5": "[0411] 一周重点威胁情报|天际友盟情报站", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503309&idx=1&sn=7a1ece2cfde74c26341f4eba4ff36737": "Foxmail 官方致谢!Foxmail for Windows 远程代码执行漏洞(QVD-2025-13936)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486485&idx=1&sn=f914d4e913965d81c1f55f4deb639e18": "你为什么挖不到漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMjY1NDMxMg==&mid=2247485843&idx=1&sn=84a90e809a31d051b590280548b7273e": "【漏洞复现】帆软报表 ∕view∕ReportServer SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491091&idx=1&sn=f4e680a3ad39665ff306d21b2f4d4aec": "YesWiki 任意文件读取漏洞(CVE-2025-31131)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497393&idx=1&sn=74ff74da6853989a2c781e7b8dabfb59": "漏洞挖掘的几种思维", "https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247504525&idx=1&sn=4610ea3baed3a5f7e4e88c79c377c0f7": "src 挖掘| 奇怪的任意用户重置密码组合拳漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247485396&idx=1&sn=acb6f51557e59bdf3a92601a2fc2497d": "代码审计| 某u8 1day漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487994&idx=1&sn=976e5b596d7f3e794daa72cef2fdbaab": "MindshaRE: 使用 Binary Ninja API 检测潜在的 Use-After-Free 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247483984&idx=1&sn=de8a16f1b1a270597ae040358b8e2d5e": "【已复现】Vite 文件读取漏洞(CVE-2025-32395)(已经出了四个CVE了!!!!)", "https://mp.weixin.qq.com/s?__biz=MzkyNzY1NzEwMQ==&mid=2247484655&idx=1&sn=70cf4ce7b4537a05dee06afb4262c1ff": "欢迎各位师傅4.23来青海民族大学参加我们举办的ai安全沙龙", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529050&idx=3&sn=03390c04496d1105d0618a4a3619cfd4": "CVE-2025-22457:Ivanti Connect Secure X-Forwarded-For 堆栈缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486679&idx=1&sn=46b3a31a1ea5b645361d94338a8debfb": "【漏洞预警】Vite 任意文件读取漏洞(CVE-2025-32395)", "https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649467284&idx=1&sn=8b281bb06c564527481b340943af734c": "100台新交换机如何实现批量配置?", "https://mp.weixin.qq.com/s?__biz=MzkxNDUzMjE4Nw==&mid=2247490294&idx=1&sn=4bfdc69de183f0757321a590854111c7": "PG_Plum", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247489012&idx=1&sn=789da52475cd646f3ddffa24b8b85abf": "影响资产居多 | Vite 任意文件读取 【CVE-2025-32395】", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485926&idx=1&sn=fe08698cf9b61f835438e4c487247a1b": "工具集: DahuaExploitGUI【dahua综合漏洞利用工具】", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487671&idx=1&sn=3632be6e09b0b40b572900557be4a2d4": "25,000美元漏洞背后的警醒:API端点如何成为数据泄露的“后门”?", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491978&idx=1&sn=336e239d43c86ac21d4c675ef0a96a8f": "渗透测试-非寻常漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514163&idx=2&sn=833919f6929df766601724c5b9e4477d": "CNCERT:关于Foxmail邮件客户端存在跨站脚本攻击漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511689&idx=1&sn=b520b9a89b0e0dc7e5f319ee3e50dc9f": "固件安全的隐忧:UEFI漏洞的持续威胁与修复之路", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247518583&idx=1&sn=c1f7a64ef6e9780af0afdc339293cdf6": "小程序渗透记录 | 通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037611&idx=1&sn=faa5a7bb5555a25087fc85eae6eafdbc": "利用solidity与EVM本身的漏洞进行攻击二", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489113&idx=1&sn=0436d5c27d2708e16a0fd64c96d7d76f": "泛微云桥20240725存在未授权文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247498528&idx=1&sn=91134b170a08058f6d2d26fbb6dd082f": "参数** _session_name= RCE", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492841&idx=1&sn=651ce330b0e4ca0456383fb70b989319": "漏洞预警 | Kavita路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492841&idx=2&sn=b4790ecbb5fe40780165e7a41d0926b8": "漏洞预警 | 畅捷通T+ SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492841&idx=3&sn=effe50b8ba0886a68abc721bfdee3944": "漏洞预警 | 神州数码DCME-320出口网关任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyNTUyNTA5OQ==&mid=2247485165&idx=1&sn=6bf8e2894f9573d36bfc7203606b2150": "【漏洞复现】Next.js中间件权限绕过漏洞 CVE-2025-29927", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069034&idx=3&sn=b2c1459405fd108b2d8796be35f685ea": "【安全圈】微软4月安全更新:修复125个漏洞,12个存在高利用风险", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651318420&idx=4&sn=406df082a4a4770f0bef21dff25a3ee5": "Linux USB音频驱动漏洞正被恶意USB设备在野利用", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247488985&idx=3&sn=af1065e3e418f7750b6d75c25fd9eded": "CrushFTP新安全漏洞:未授权访问和CVE-2025-31161", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655274391&idx=1&sn=62c2d63989bba70217719e7677da48c7": "HVV蓝队面试题汇总", "https://mp.weixin.qq.com/s?__biz=MzIwMjE2NTM5Mg==&mid=2247485557&idx=1&sn=7d53e25aa71f65d1af21f8347a2c8d41": "XSS漏洞挖掘下", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491109&idx=1&sn=b60205c1c49c7d9ea4e2e6393cd0250d": "NAVIDROME 权限绕过漏洞(CVE-2025-27112)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491100&idx=1&sn=e1c7d7ebeb28e092fbcbe727bc69c56e": "Langflow 远程命令执行漏洞(CVE-2025-3248)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488354&idx=1&sn=e4e589ed2f4cfddcf07f04359155915e": "Langflow code接口存在远程代码执行漏洞CVE-2025-3248 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484396&idx=1&sn=2873a95da7a1ad77080e1e5c4b179fe7": "MCP 赋能安全工具的无缝集成", "https://mp.weixin.qq.com/s?__biz=MzkyMzcyMjgwNA==&mid=2247483951&idx=1&sn=a2682aafbaf36a8d13f230de07e070e2": "GeoServer-Tools-CVE-2024-36401内存马利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyMzcyMjgwNA==&mid=2247483941&idx=1&sn=800f2091e3d20945c642bb27c098819e": "nextjs中间件权限绕过漏洞(CVE-2025-29927)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488365&idx=1&sn=314c21aa414c89fadd60ee05820047c6": "Vite import存在任意文件读取漏洞CVE-2025-31125 附POC", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511690&idx=1&sn=6d60fe31b68f04bb55ead2d1e4d7aa70": "警惕!NVIDIA Triton推理服务器整数溢出漏洞曝光:原理、复现与修复全解析", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247484280&idx=1&sn=b7a40149f0c6ee185ce0c95c9d52ffe3": "实战|SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712178&idx=1&sn=25e55840517fe21298f753ffaab47fc7": "heapdump未经授权漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzUyNTUyNTA5OQ==&mid=2247485186&idx=1&sn=d60c71d512d754e0c55d1747a7c9c042": "【漏洞复现】Vite 任意文件读取系列漏洞(附POC)", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484853&idx=1&sn=bfee0d86e2a2f245553fd532d8791486": "Zyxel-NBG2105-身份验证绕过-CVE-2021-3297", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484853&idx=2&sn=40e5e9afccda310296c445df31f9cff7": "Zyxel-NBG2105-身份验证绕过(CVE-2021-3297)", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610203&idx=3&sn=4fde380e2a27458adacf0317df2124ce": "浅谈AI部署场景下的web漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260890&idx=1&sn=f46073f31278972785b097461b3b66bb": "从CVE-2025-30208看任意文件读取利用", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488005&idx=1&sn=6643771366172d0252db5ac06ea90045": "CVE-2021-31956 Windows 内核漏洞(NTFS 与 WNF)利用 —— 第一部分", "https://mp.weixin.qq.com/s?__biz=MzI5MDcyODIzNg==&mid=2247484994&idx=1&sn=1cb5bfec74a800ad6e63d0ef4b4a99d6": "3月成绩出炉,这届白帽子太卷了!地图大师新手SRC漏洞课程3月学员成绩报喜!!", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247498590&idx=1&sn=fc1e93c95932737caa9cab07855c7a1b": "CVE-2025-22457", "https://mp.weixin.qq.com/s?__biz=Mzg4NzQ4MzA4Ng==&mid=2247485569&idx=2&sn=bae8c0344767b0fd34f062816de56c31": "H3C多系列路由器存在任意用户登录漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069060&idx=3&sn=30e98f80aea19e6a87a4765e728b6602": "【安全圈】WordPress插件漏洞导致网站遭受关键文件包含攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069060&idx=4&sn=8f7ac8e308536849b9fc926f55d5b341": "【安全圈】TP-Link 漏洞:Wi-Fi 凭据面临泄露风险", "https://mp.weixin.qq.com/s?__biz=MzkxNjc0ODA3NQ==&mid=2247483889&idx=1&sn=8d4a9aa5fddab0aae717cdb3bb4727c6": "价值 $25,000 的hackerone 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491127&idx=1&sn=23169aa6102935e5aedefeeed1a167d6": "elestio memos SSRF漏洞 (CVE-2025-22952)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491118&idx=1&sn=73f107c1456e7a1b833ab075bb86432d": "Vite 任意文件读取漏洞 (CVE-2025-32395)", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQ0MTI2MQ==&mid=2247484833&idx=1&sn=2f76e4a9ca94746f37a50b9055fa9d19": "当心!新型钓鱼攻击正绕过你的双重验证", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484915&idx=2&sn=bd3b1bb5bb259d840a67c27b64a8af41": "CVE-2025-24813:Apache Tomcat 漏洞POC", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494035&idx=1&sn=9199ea3207a45dfee0cd53c3984a6f8d": "一个自动化PWN利用框架,专为CTF比赛和二进制漏洞利用设计,集成了栈溢出、格式化字符串等多种漏洞利用技术", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520068&idx=1&sn=e17599d10b5470a5e1aa10131271d8e7": "从CVE-2025-30208到CVE-2025-31125再到CVE-2025-31486", "https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247494408&idx=1&sn=eca1f790f3ef8cae120729ed27563c09": "工具推荐 | OSS存储桶遍历漏洞自动化利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490912&idx=1&sn=2c4cd750457017b6bf8776cae3c45bbe": "通过HOST碰撞发现更多资产和漏洞|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492583&idx=1&sn=8d29765a3bb3ec8506a8401886f45887": "EncryptHub 与 Windows 系统上的 MMC 零日漏洞攻击有关", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247486788&idx=1&sn=913b6fb09deb3d46c4c786dfc645458d": "黑客如何用一张图片掏空你的服务器?揭秘SSRF漏洞的致命陷阱", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484863&idx=1&sn=ae907d6c690893e6e09dc0c609caf6ca": "Zyxel-USG-Series-账户硬编码漏洞(CVE-2020-29583)", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484863&idx=2&sn=cf7f7e0a555f5c38dd960531d352bd63": "Zyxel-硬编码后门账户漏洞-CVE-2020-29583", "https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247491573&idx=1&sn=e64d595da71a593b827cb8f9df1400f8": "针对漏洞安全研究人员的钓鱼攻击", "https://mp.weixin.qq.com/s?__biz=MzA5NTUxODA0OA==&mid=2247493382&idx=1&sn=92628136ce7b70ecea181580346cb279": "Wireshark & Packetdrill | TCP Cork 算法续", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247491151&idx=1&sn=39ad93fa57285531b3b995548c657c33": "窗外有\"眼\":IP摄像头安全漏洞与默认密码危机", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651318490&idx=4&sn=36c83d3d53a3998b800eec9e88dabcff": "思科设备曝出七年旧漏洞 攻击者可远程执行代码", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247638706&idx=1&sn=08c0847526be9176f8b06fbf0c03b1e7": "直播回顾 | 2025百家说事:企业出海之安全观", "https://mp.weixin.qq.com/s?__biz=Mzk0MzQzNzMxOA==&mid=2247487923&idx=1&sn=dffb61931400a56d9f07668b674dcf66": "日产Leaf被曝存在远程控制漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDY5OTg5OA==&mid=2247494915&idx=1&sn=49f99424f090ec06972e9e6cd5627cae": "容器漏洞101", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495916&idx=1&sn=95dd17be4de0242ca4f54b54200179fb": "CNVD漏洞周报2025年第14期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495916&idx=2&sn=0a85f04f728e3f725c6f40109a6b4213": "上周关注度较高的产品安全漏洞(20250407-20250413)", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490549&idx=1&sn=b0d73cd6e39be667ff212ab730bb4454": "黑客利用已修复的Fortinet FortiGate设备漏洞获取Root权限", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592509&idx=2&sn=9a10b35e0c61ef7dbe37b2a1c097cb20": "Fortinet 漏洞再现,攻击者利用新方法入侵", "https://mp.weixin.qq.com/s?__biz=MzkyODIwNDI3NA==&mid=2247486213&idx=1&sn=c5a611cf1e8efde9cbd820d4274efefd": "BSSRC四周年活动联合礼包结果公示", "https://mp.weixin.qq.com/s?__biz=MzU1NjgzOTAyMg==&mid=2247523649&idx=1&sn=28b85b4837a0fdaf3bce0280ad7b5cc1": "系统0day安全-IOT设备漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492783&idx=1&sn=24722b7cf6403b97d3b9c5935eb86715": "【已复现】泛微e-cology 前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1Nzk3MjA5Ng==&mid=2247484800&idx=1&sn=05711cd30de2ff9e41e3cc73052a02c8": "你知道JWT漏洞如何进行攻击利用吗?", "https://mp.weixin.qq.com/s?__biz=Mzk1Nzk3MjA5Ng==&mid=2247484817&idx=1&sn=f1f2e54d99b2824f8f992cb533a8af88": "推荐几款好用的Jwt漏洞工具", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650621893&idx=1&sn=927ada6d707b69c72733b0208ea5eeef": "高危!Vite任意文件读取漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503369&idx=1&sn=67594945f0cabd22f1742778e4ad13a6": "雷神众测漏洞周报2025.4.7-2025.4.13", "https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247526651&idx=1&sn=8cc74d081512721be906f6871e5b24b0": "当漏洞攻击遇上腾讯混元超能力:EdgeOne 的 Web 安全赛博决斗", "https://mp.weixin.qq.com/s?__biz=MzU1MzEzMzAxMA==&mid=2247500002&idx=1&sn=8f8b447bced031f93302817a136888ed": "网络安全动态 - 2025.04.14", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503314&idx=1&sn=f30378a921d30010f931c4eb0741bce2": "安全热点周报:PipeMagic 木马利用 Windows 零日漏洞部署勒索软件", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247572356&idx=2&sn=18c79293f3ca29cbc3ff403b0257b17e": "今年运维这工资是认真的吗?", "https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486447&idx=1&sn=953fbcff32b36a93699e1ed6079cd185": "日产 Leaf 电动汽车被曝存在漏洞,黑客可远程操控车辆", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247623435&idx=1&sn=a552114e8824f9f24564fd27a751dd12": "网络安全研究:人工智能安全趋势研究", "https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649871255&idx=1&sn=3d17eaea3505ec55b3fe70510fb27b63": "邀请函 | \"AI+低空经济与数字化生态安全\"技术研讨会", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489487&idx=1&sn=a3fbf405d8596427ed2f89da41963dd8": "记一次某EDU站点实战从任意文件读取漏洞到RCE", "https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661300149&idx=1&sn=9aca54ccea3fb64c3a48596ec9bf9e38": "山石网科闪耀华为云生态大会2025,荣获“年度持续经营奖”", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247499118&idx=1&sn=c240cdea6dd7b9f4dbd9f227787398b1": "国外:一周网络安全态势回顾之第94期", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488006&idx=1&sn=49502e27205bd6d65ab6405276597d91": "CVE-2021-31956 Windows 内核漏洞(NTFS 与 WNF)利用 —— 第二部分", "https://mp.weixin.qq.com/s?__biz=MzAwMjc0NTEzMw==&mid=2653589001&idx=1&sn=238b7d26b15726787b8b9b1e2bb614ba": "SpEL表达式漏洞注入内存马", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615852&idx=1&sn=a626dd27fc9de09c765a8c0c6b20bc82": "赏金故事 | 入侵 Google 自家的漏洞追踪系统,并拿下1.5w$", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5MDI5Mg==&mid=2247508964&idx=1&sn=ef41b82ca3acfb1815ccb4c4a8bbc7bc": "中移动控股第一年,启明星辰上市首次亏损为哪般?", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489941&idx=1&sn=5120eb645929f0329d9f2ac32c52c8f4": "【漏洞预警】泛微E-Cology9前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489941&idx=2&sn=5b47223cad6d3d10a43beec69aa874be": "【漏洞预警】OpenSourceMatters Joomla 未授权SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyMDAwMjkzNg==&mid=2247513589&idx=1&sn=e47c0cb26111d9e399ce8cedf7f86ce5": "小程序渗透记录 通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491137&idx=1&sn=a2cd856b7ac743911b386c4629a31b1f": "JeeWMS cgAutoListController.do SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5Njg5ODM0OQ==&mid=2247486007&idx=1&sn=d62a59172f6e53c77c8c1fdb21e61e83": "漏洞分析 | Apache Skywalking的log4shell分析", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494044&idx=1&sn=a001baaaa089ff3339dcfe9e2c811276": "一款全方位扫描工具,具备高效的机器探活,端口探活,协议识别,指纹识别,漏洞扫描等功能", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655274891&idx=1&sn=7c4322c4431633091709b2d36229b8b1": "300页 Android 应用安全:缓解黑客攻击和安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487899&idx=2&sn=8342140bf27d4c4e50aa8bfede0fba83": "安全人员如何对漏洞进行定级?", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485278&idx=1&sn=fecba70d08e60884cefdea405e054459": "【工具分享】供应链漏洞探测工具", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247503070&idx=1&sn=f53d03400c6041496926b42651d6cdeb": "360漏洞情报月报2025年03期 | 漏洞总量持续高位运行,核心系统威胁加剧", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650627056&idx=1&sn=897e591387829326d8bf5577f47712d5": "“一周懿语”丨第十六期", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247497718&idx=1&sn=a9eb2025f299dcfc98322ff03f5f2f10": "悬赏通缉!3名美国特工对亚冬会实施网攻窃密被锁定", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491997&idx=1&sn=5834ac3728b18dcaa41d9487729d1512": "硬编码导致的前台上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492180&idx=1&sn=b3578e7314688379ad313a8065f7a44c": "漏洞预警 西部数据 NAS safepoints_api.php network_get_sharefolder 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzODMyMzQxNQ==&mid=2247484543&idx=1&sn=deb04049ce38b06879d91f9daa69f2ca": "CPTS考前PATH全部Flags合集", "https://mp.weixin.qq.com/s?__biz=MzkyNzM2MjM0OQ==&mid=2247496333&idx=1&sn=f9bfa284e08c84c0b573c55b87aac338": "SRC舔狗日常", "https://mp.weixin.qq.com/s?__biz=MzUzMDQ1MTY0MQ==&mid=2247506867&idx=1&sn=1d525340d344139f5182692369e05276": "某代理商管理系统存在RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489123&idx=1&sn=a1a8b52dbf0a3542e6bbadc615fff2bb": "实战 | 记一次双排渗透测试漏洞复盘", "https://mp.weixin.qq.com/s?__biz=MzIxOTM2MDYwNg==&mid=2247513081&idx=1&sn=652370f1585c30fe3300a01ffaec5179": "国际象棋网站漏洞 从XSS到账户接管的探索之旅", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247506010&idx=1&sn=80b1e19f7016f882c5d7aa2d3ab98cc1": "一次就学会网络钓鱼“骚”姿势", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247485937&idx=1&sn=cc10c48f62bbcfa614c1598fbda0c39b": "工具集: CTFTool-All-in-One【集信息收集、漏洞利用、提权、文件传输等功能于一体的CTF综合工具】", "https://mp.weixin.qq.com/s?__biz=MzkzNzQyMDkxMQ==&mid=2247488014&idx=1&sn=b2b8d96e8f2553a8d4be4fb1d8d0d808": "支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492866&idx=1&sn=86e9042f1a3e9c82ccc49178026541aa": "漏洞预警 | NetMizer日志管理系统远程命令执行和SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492866&idx=2&sn=2a8428d734de11e12b6d8063a65cfd4e": "漏洞预警 | 家装ERP管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492866&idx=3&sn=e18dd4b4d80de1a41360126b870fe746": "漏洞预警 | 用友NC SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NzIzNzU4Mg==&mid=2247489997&idx=1&sn=b280dd0cf6e984f8a066d6a5624c556a": "21201_ctfshow_misc_绀青之拳 writeup", "https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247511756&idx=1&sn=1d0b6a4dd53fa8d4b162dcbdd56e110a": "基于ESP8266水质检测 (MQTT上报小程序和HA)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491539&idx=1&sn=05c9048508a769e94dcae826662ecad5&chksm=fd772f1aca00a60c5bfd35fca6134ddc7af7c85af525ef10e442847393ec0dfaf16e78c2b1aa&scene=58&subscene=0": "CNVD漏洞周报2022年第15期", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247511412&idx=2&sn=a8d4aa558a717bc3227abcc1363b5e93&chksm=ea949c1edde315087a2d5ebd9235b98d5eabb6789a50df0860fd04883b4c64bacb6b33cd5daf&scene=58&subscene=0": "VMware Cloud Director 严重漏洞可使整个云基础设施遭接管", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247492771&idx=1&sn=5bc86cbf62a83db69b1b1919ad86273b&chksm=c007493ff770c0290f199daef6b03bd09f9f85e35c5179c3ca8fe062623ecc27522b45850f0a&scene=58&subscene=0": "【技术干货】CVE-2022-1162 gitlab 硬编码漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMDEyNTkwNA==&mid=2247486352&idx=1&sn=2e009dcc7c7de3913f7541079ebae00d&chksm=f9ee672fce99ee39f02d9456384daf94259dc4b1578dbcbcabccb39af473d1474fafe8525e4f&scene=58&subscene=0": "从Spring RCE 0day(CVE-2022-22965)看黑产利用速度", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649769413&idx=2&sn=fce295840d0736a1eee3d83f59ed6665&chksm=889375aabfe4fcbc869da1c91cd12ad53c19b08de096687dfc19904b9625ebf295f667b2ecb3&scene=58&subscene=0": "【技术分享】Visual Studio Code本地代码执行漏洞(CVE-2019-1414)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247495821&idx=1&sn=2b7f070f4e696369bb1d360fa1da05d1&chksm=fe79d415c90e5d0336b6c4b9847892371af5cf12d3a7b943c5916423bb5189577dbd2a486434&scene=58&subscene=0": "【安全热点周报】第241期:微软4月补丁日发布了120个漏洞的补丁程序", "https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247489504&idx=1&sn=fe86ccce73da17cd24ee84039aee3b28&chksm=9799ec45a0ee65530d6b7caa678c699c4a3dec3f83af411ac0aac6a9e32b4d25dbe1632b73ef&scene=58&subscene=0": "【漏洞预警】7-zip命令执行", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247525843&idx=1&sn=04cd642e1e38965470be1c70da6931a4&chksm=c1e9e982f69e60945c4712749bed3bfe994081237726b40e41460fa940b06e0f318aaba40549&scene=58&subscene=0": "由PolicyKit和DirtyPipe漏洞浅谈安全操作系统的意义", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247511433&idx=1&sn=ccfa58d4b24a80f8950bdafde68af58c&chksm=ea949ce3dde315f563191aee1b6f8c1e5a266126fe4968ef8018d1a937bc6e8a3bc500415221&scene=58&subscene=0": "NSO Group 被指利用零点击 iPhone 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247511433&idx=3&sn=ff04084cd337034fbdf95f2eb572c65a&chksm=ea949ce3dde315f54aac997e6b2fa73ed091ef780a4381e169502f00c9227d9bc2518f543d05&scene=58&subscene=0": "开源工具 PrivateBin 修复XSS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1MjgwNzc4Ng==&mid=2247503231&idx=1&sn=ca048f32cfba5260024b27cc3d4d479e&chksm=fbfef17acc89786c935d2ef0adce3bd44daa6a96eb8dc93665d1c2cb95307048f362cb63e1c9&scene=58&subscene=0": "“精”准把握静态分析|科恩二进制文件自动化静态漏洞检测工具正式开源", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649769428&idx=2&sn=d73dff2472aa389c279df1c88eebbae5&chksm=889375bbbfe4fcad5c8003c61cd83d13dffea1939b4a462a5ba2d071345609f7627e5cb78cad&scene=58&subscene=0": "【技术分享】Phar与Stream Wrapper造成PHP RCE的深入挖掘", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247495839&idx=1&sn=c72294b6276e1c689e23864ed5ba58e6&chksm=fe79d407c90e5d11f136dc6f94771866a7d844f8dc21908a0064c526c48de03c7f95e0710c2d&scene=58&subscene=0": "【安全风险通告】Oracle多个组件漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247490896&idx=1&sn=214fa7addb1f41d0ba4e6e55ac6192b0&chksm=fe251851c9529147ba43c6ac1d8be787053730d77014f3a2e378547955284fe0b41db1c7c4e6&scene=58&subscene=0": "2022-04 补丁日: Oracle多个产品漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458438427&idx=1&sn=a265492f38362801447a5423d49a51ce&chksm=b18ffb9186f87287b1fd247325b81803b4c18429d9238be1213ff186842ddfcea51fb5be09e2&scene=58&subscene=0": "CVE-2022-0995分析(内核越界 watch_queue_set_filter)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458438427&idx=2&sn=2eb22f30d7cfaf8028cdf109d5a2f6e2&chksm=b18ffb9186f8728772dc022c69c356a46572d6307f7804b2104c7aa4756c546b82864359f7b0&scene=58&subscene=0": "联想UEFI漏洞影响数百万台笔记本电脑", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247525895&idx=3&sn=e8bfbedec74f22090bbbcc68154bd865&chksm=c1e9ea56f69e6340073094afc4f69d97c4b558f9f68bec571d75be6b4f81d59ea23e719d8c51&scene=58&subscene=0": "黑客组织利用ProxyShell漏洞攻击医疗保健提供商", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247502480&idx=1&sn=e5c7bf21f30e66209597f0db25ec465f&chksm=ebfa8db0dc8d04a6dac8d9f03f2dc712a97b4fccdcaf155080ccd7f8e7aa8a5b6a62eb97313d&scene=58&subscene=0": "2021年零日漏洞在野利用状况:数量创纪录,传统漏洞为主", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247502513&idx=2&sn=57418a913633e1a1eef0e3f3dd302a4d&chksm=ebfa8d91dc8d048773f6a303df386bb472fa3f9f126ee351b8a4c0e3bde5e040cd037c8f5f9f&scene=58&subscene=0": "谷歌2021年0day威胁形势复盘:你知道越多,你越知道你不知道", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247511475&idx=2&sn=7b28cadcfa45182f3c7285f34c2454c8&chksm=ea949cd9dde315cfd74febfca37472f0cf099450eb767d476baa5fc7ac53ad75dfd0d3cc2d70&scene=58&subscene=0": "开源的 Snort 入侵检测系统中存在高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247511475&idx=3&sn=d944ace06613bb0fc7ab6099e251b30e&chksm=ea949cd9dde315cf4a1d48d11a8ef9a7f9d085aa16678adad9cc7ebee49b39f9415ceacb18eb&scene=58&subscene=0": "年度加密漏洞提前锁定:Java JDK 加密实现漏洞可用于伪造凭据", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247495448&idx=1&sn=a9a36e0f9b8e113a7b23f37cd1e36be7&chksm=fdde919fcaa918893069fb84233a1371c2a60494882878d62a3bbe8fa73f054e1295ece1132b&scene=58&subscene=0": "慢雾:Rikkei Finance 被黑复现分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458438567&idx=1&sn=a6f209fb274919dddcde9584f1e640e0&chksm=b18ffb2d86f8723b1eb6dfbb169a4c7ae4fee1dbb202b46a199da3e50201ab5ef8c1bc8a0094&scene=58&subscene=0": "JLink固件漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247490901&idx=1&sn=0697a2bcbc10e6fd5ff13148e2038d5b&chksm=fe251854c9529142ac787655adc1aec8ce976258aca9280f83d71c0ff717eb6656dea0a7f48b&scene=58&subscene=0": "CVE-2022-0540:Jira 身份验证绕过漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657044396&idx=1&sn=c50f71d249b87f2320faca35fdd565e6&chksm=803fa772b7482e64031830d3572f2e8f975c08c1b5bbde4895d5295889ee086984df4df6299d&scene=58&subscene=0": "【漏洞预警】Asciidoctor-include-ext 命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727834682&idx=1&sn=8261edbbddd3e823e50cc6466f2c4354&chksm=8050a3b2b7272aa430de05df201daa829b5ef20597a7b98081af84f8136bcc7368d744448381&scene=58&subscene=0": "漏洞马拉松·京麒站 | TSRC 3重奖励叠加,挖到就是赚到!", "https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247489524&idx=1&sn=4d2a9c15924b23024fbdb266eb516e76&chksm=9799ec51a0ee6547bd28b8a6f7f367bb30df3172dbe322f57a88953a315c85975783cfc10a64&scene=58&subscene=0": "【漏洞预警】WSO2 API Manager安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247489524&idx=2&sn=ab3f381c65ad078a6ed23ed15a647ec2&chksm=9799ec51a0ee654791261b6d1a91d50d580214c5f09f16a15c998f1df64c82656097f88747a8&scene=58&subscene=0": "【漏洞预警】Jira身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247493910&idx=2&sn=4c56a52e2568c099253af96d1beef3c8&chksm=eaa96136dddee82096526b39e8eb718af2b44776a350187ba09e78a2c781edf30bcc369f76f1&scene=58&subscene=0": "业务安全漏洞-登录认证实战总结(一)", "https://mp.weixin.qq.com/s?__biz=MzkzNjI2MzgzOA==&mid=2247484287&idx=1&sn=927a489a3271eb3aa63a31b58f997edc&chksm=c2a02a8ef5d7a398e3c9d4b8ee37fd33c01130cb53bc135f99009b23b5f9dd387f2eecd967ba&scene=58&subscene=0": "使用打印机漏洞获取Active Directory特权", "https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247489352&idx=1&sn=b9e728095c880831da1fca68f3c4f8bd&chksm=ec1bf69bdb6c7f8d1129ba8d7c2391e357a5adb76074a41a0477173703c3e3c5b5a0091bc926&scene=58&subscene=0": "重要通知 | 美团隐私漏洞处理标准1.0发布", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247511504&idx=2&sn=04504363458ec7eae8089dbfb498d827&chksm=ea949cbadde315ac5c9bd2f40a6f192b3250198f157ae151d9aa59e0f29ce6b3f21dd2118763&scene=58&subscene=0": "开源组件11年未更新,严重漏洞使数百万安卓按设备易遭远程监控", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247511504&idx=3&sn=db5e57652474eb1850d3b2b14ac08b7d&chksm=ea949cbadde315ac5a2e1ec42b1f22f41a109103847e4fd1d2ea90423d2291aaec360750ffa4&scene=58&subscene=0": "亚马逊的 Log4j 热补丁易受提权漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247502591&idx=1&sn=c919afebc098a9354907cb4211254d72&chksm=eb7014c0dc079dd692f3a2eb97d6f8a3815438a665040c06214d5c14a8e7bc397962ecb9240b&scene=58&subscene=0": "【火绒安全周报】7-Zip被曝出现零日漏洞∕黑客捐给乌克兰25万美元", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247525968&idx=3&sn=2c381c96faee6f8aa16e51ab1ccf589f&chksm=c1e9ea01f69e6317d8388d564867644ebbd3d78ae0b1b0c4c3bf80e6a997c43074a69b047811&scene=58&subscene=0": "CISA 发出警告,攻击者正在利用Windows 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247502551&idx=2&sn=0c04998e9088f9d84c07df4bd38abf2c&chksm=ebfa8df7dc8d04e1d983793aa0db2dfc5a4e025a85fb98a399bd6cc890d6eb88cb6821b00609&scene=58&subscene=0": "高通和联发科芯片漏洞致数百万安卓设备可被远程监控", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458438809&idx=3&sn=22897f7a006bea015f9615c487f59204&chksm=b18ffc1386f8750558ca8484f7436d52d56390a5317b419b63a1199fe1ea19d5b858f3c29ff0&scene=58&subscene=0": "Intel CPU漏洞研究,为你深入详解三个史诗级的芯片漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247489536&idx=1&sn=640891e328f90da1e1aab139344cfdda&chksm=9799e3a5a0ee6ab3186fe418fc33199f877ac4df5f0f3f07afcf13a01af63e4293a452c0b2e9&scene=58&subscene=0": "【漏洞预警】Java数字签名伪造漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247489536&idx=2&sn=0477b0c8ee438132fec22917e44c044d&chksm=9799e3a5a0ee6ab3ce16b13d47958c6cb4fc4af5fff356f8f4653b87975a19dbab575159830f&scene=58&subscene=0": "【漏洞预警】Apache Log4j SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247492926&idx=2&sn=8753e83a55476cdac042aba6e84bd7f4&chksm=c1449783f6331e95be73d42cea78d793e4518f0a6cada2aef1e003039686b05bbb1c71436d73&scene=58&subscene=0": "[调研]80%的软件代码库含有至少一个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652496833&idx=1&sn=0c9e7462798d247483c04d12e8a9d469&chksm=f2584072c52fc964f09b89dec09bcfe3e8afce57c9124168e52a84fe8b6c1511b99f7813a9fd&scene=58&subscene=0": "雷神众测漏洞周报2022.04.18-2022.04.24-4", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247511538&idx=1&sn=6f91f6176cac01585dd7b8fa5c1c7f18&chksm=ea949c98dde3158e379cbf7052ded0011c00528a6104cbb0043cbd738d11575dad2c31167efd&scene=58&subscene=0": "SmartPTT、SmartICS 工业产品存在多个严重漏洞,影响全球90国", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247526053&idx=4&sn=80bda77efd350d13a5b9959964e03a16&chksm=c1e9eaf4f69e63e229bbf5e0f611d9fa769decec6e589e5a2c7a80ab4e03e95eb9945f2cf20d&scene=58&subscene=0": "十年三倍!安全漏洞创纪录增长", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491577&idx=1&sn=29b4c59fd4ca8ebf49070b17188b9a98&chksm=fd772f30ca00a6268f5ad08faa531c80390c159549d4540e90386ccd8b356ece701d70d47489&scene=58&subscene=0": "CNVD漏洞周报2022年第16期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491577&idx=2&sn=84594d370130956460057cb4b985cfcc&chksm=fd772f30ca00a62607414a8b3873aacb90939ea4e06c24061b7496aec00e481cba597a56a9b2&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220418-20220424)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491825&idx=1&sn=c255c3be1aed3a608afd91dca32df6d3&chksm=fd74d038ca03592e8d619f99b8b587f43ecac5806d46d348014e4dff702fb11883f2b552979e&scene=58&subscene=0": "CNVD漏洞周报2022年第22期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491825&idx=2&sn=57f8a4022a8fd3918649a58cc76cdc4a&chksm=fd74d038ca03592edbb37dc72abeb8f4774f57076e6d218a8800aeec303f29d86cfb01b4da06&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220530-20220605)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496726&idx=1&sn=d0860fc41c405027399d1fdcc5a36f82&chksm=973ac774a04d4e623b815ca7e6d30e3bdead698d2734564442c1ae563e04fc6e7cf9d68d99a2&scene=58&subscene=0": "CNVD漏洞周报2022年第22期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496726&idx=2&sn=75bb0ccd9104d516ceabcabe29468ca9&chksm=973ac774a04d4e62aa7b6d30b1b67ec78d6fc4f8efdbd69f697c8de7c8dc5aae79508d843fce&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220530-20220605)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652497555&idx=1&sn=34ad39b51376d97a86d271794f0971b2&chksm=f2584520c52fcc3642230fc02b4e94a296f0d35f8fec8b4a4e3e13498a8fbff11c725f98cc30&scene=58&subscene=0": "ATT&CK-Spring Framework(CVE-2022-22965)远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650961305&idx=1&sn=5d27d89f79f036101db5acffdf124014&chksm=807937abb70ebebd10830cd2aa7822df3e266174fd12ff27f0a8b303661771fbc68d5c528a7a&scene=58&subscene=0": "CVE-2022-30190 MSDT 代码注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247527114&idx=3&sn=bc36689958f0aa95f4c9d42c74760da5&chksm=c1e9e69bf69e6f8d4dffdbe985b50d58a7a1b21c9f430e4de16ace50ea9bb6d7e97a7b80d5ba&scene=58&subscene=0": "美国BIS发布网络安全漏洞出口禁令,全球漏洞共享机制遭严峻挑战", "https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247489848&idx=1&sn=1dc3a8dd3d06d8666392a69df9630047&chksm=feb5982bc9c2113d18235b6386351752d880b4e0e5f639a8eaeee73598e8fc7aa02b16796537&scene=58&subscene=0": "美商务部出台新规:未经审批禁止向中国分享安全漏洞,微软反对无效!", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458451595&idx=1&sn=745cf76fb3ee0b1f35dd530b7146b017&chksm=b18fce0186f84717d542b5ae309eec80c2242099578d154522f4cba65fa3b74dbeee1d40c432&scene=58&subscene=0": "PWN入门-格式化字符串漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512217&idx=1&sn=695daaf2d00a8140749841523279263a&chksm=ea9481f3dde308e53ddaf06265f0cb4e13b91c90ff1268dba7dbdf22c4585a6fc9a29e2bcdd7&scene=58&subscene=0": "《2022年道德黑客洞察报告》:不少人计划当全职漏洞猎人", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512217&idx=2&sn=3780aed7f5cd6cb969207042687f44c0&chksm=ea9481f3dde308e5eadec773aa2e2e09e91f2ff17adcd39cf882f40ff93c3f574c50cfd9235f&scene=58&subscene=0": "DogWalk:Windows 新0day 获得非官方补丁", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652497576&idx=1&sn=d0482c3cf9412ae3d040c378f9613ec8&chksm=f258451bc52fcc0d6d4857054f33c9960197d3175be7562739ad89f219d6d441243a2073efec&scene=58&subscene=0": "ATT&CK-Log4j2远程代码执行漏洞(CVE-2021-44228)漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650172601&idx=1&sn=9a18ab52336f06584aa6fc8ee2b428ca&chksm=f4489705c33f1e13f63f10becd9276bf9f46e663e95bdb7d1bef405a1f0f6fc4cc6fa2de0b63&scene=58&subscene=0": "我,TDP,正式官宣一个0day检测新能力!", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247493445&idx=1&sn=e76269a88625e90cdc093e162f6e23cf&chksm=c0074ad9f770c3cf739e422130f5e8d656bc368c913a40da98e1076163e4fd8125a0b2fcff69&scene=58&subscene=0": "API NEWS | 国际最新API安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4MjEwNzMzMg==&mid=2247491163&idx=1&sn=1a56d85bee41dd17ab7fe9004569df79&chksm=fdbc37f0cacbbee688aa7e3956188b62818f77e1fef1ad28e61c40f32d53ffb95cc78de47b7f&scene=58&subscene=0": "火线安全荣获“国家信息安全漏洞库(CNNVD)技术支撑单位二级证书”", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496265&idx=1&sn=a5ca4709547add642a019e6c5c182ebb&chksm=fe79d6d1c90e5fc789f85ff961c1e6e4077ca5682bceb4aec3fc1ae5df931d102f23a576e9a6&scene=58&subscene=0": "PHP多个远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496265&idx=2&sn=5bcac3621449253e58b06d34c965cfba&chksm=fe79d6d1c90e5fc7814bcde0373501ab52a338e1797d814366f85e18babf522725f4c30d691f&scene=58&subscene=0": "GitLab账户接管漏洞(CVE-2022-1680)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512256&idx=1&sn=fd26c082e19e42b9579bfdc16d90cc36&chksm=ea9481aadde308bc8754e712723fe813063ab2ddc7a80a171069b724a6eedf732b4fa71a7684&scene=58&subscene=0": "Formidable 项目开发人员驳斥:MITRE 发的这个CVE漏洞纯属“碰瓷”", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247493980&idx=1&sn=8d000e5a38e37dddb934e3665cd90d69&chksm=fa523ce2cd25b5f4759b0e3dc883196c63cbceef292eaac7e12c6fb15b6d9945619cc31aeef2&scene=58&subscene=0": "浅析LuCI系统的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247493511&idx=1&sn=f058ea91433fda6529a6e116cf21ca6f&chksm=c0074a1bf770c30d6ec8076f3b09c10f8ac82de42d444df77f90fb0da7828b233ae0aef1cb85&scene=58&subscene=0": "【技术干货】2022-29464 WSO2 API Manager 任意文件上传、远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657044511&idx=1&sn=937b1528d16837b905b2e7287c73c747&chksm=803fa8c1b74821d77b34ad8c9c930fbbc8f62a9fc4614d2c9c30f6c5503a5b9cad357132dc70&scene=58&subscene=0": "【漏洞预警】Owl Labs Meeting Owl Pro信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649771657&idx=3&sn=614d32e629d1d8d2480258d77c54a706&chksm=88937ee6bfe4f7f0d862453c78811f0523ad4a0964ffe05b6e47c1f8d1f24406e28d1d7a01f2&scene=58&subscene=0": "【安全头条】Linux僵尸网络张开怀抱迎接Confluence漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMDEyNTkwNA==&mid=2247487602&idx=1&sn=03f65b30c42885ff3b5daab6ad8bf689&chksm=f9ee7ccdce99f5dbe4d36d131e4524e4f1c3dfc7adb06855e33d5cb87278b5830b7e8460c58c&scene=58&subscene=0": "Apache Httpd AJP请求走私 CVE-2022-26377 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650834910&idx=1&sn=5096efb28e423a5dccc66f41583ef9c2&chksm=80dbe47bb7ac6d6d4d5bc5aaedd70a3d6b59b3569d70335b43a358d2138cce25460543acf131&scene=58&subscene=0": "【漏洞通告】PHP 远程代码执行漏洞(CVE-2022-31625、CVE-2022-31626)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652497685&idx=1&sn=f4376357029a3618887b0d8509c29243&chksm=f25844a6c52fcdb0f907fdd6e4f24debf6e514cd3f22a1b97d90f29396e883adc536d3d3d5d1&scene=58&subscene=0": "雷神众测漏洞周报2022.06.06-2022.06.12-4", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247503459&idx=2&sn=c4e82a9f42389835c41505c8ba543295&chksm=ebfa8943dc8d00550f0162b3367a9a3d1af2d15f7a7c67555bd5cff3fb6f71271dcdfc4438f3&scene=58&subscene=0": "MIT爆出苹果M1芯片重大漏洞:补丁无法修复", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247495526&idx=2&sn=88f885d60dca173473f4cbfd7b7b7960&chksm=eaa96746dddeee501ce2261cdc5565c16f9b1167328404c929c476a78b326dbeccafe52a6455&scene=58&subscene=0": "ThinkPHP系列漏洞分析-2.x任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512281&idx=1&sn=371c8c2da75df09506fe20a95f3dbe10&chksm=ea9481b3dde308a5fea3d23bd48bcbb36b3d924ac6d8fae85e882d49a0dc1803005630b8a316&scene=58&subscene=0": "热门工业访问控制系统中存在8个严重0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512281&idx=2&sn=d4fe854721aa8050ee66a20a176080a1&chksm=ea9481b3dde308a5dc2fe7ffe9a71d112a0dafbf6fd6f05a2f6895852e794b2d7b9b353b2258&scene=58&subscene=0": "两个严重的富士通云存储漏洞可用于破坏虚拟备份", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458452267&idx=1&sn=1485f8a3c82d0f4e175e5574016311d0&chksm=b18e31a186f9b8b7c793f36dd47b8027f896de18b0001f5bf7951e9378649d9590b99ea05eb9&scene=58&subscene=0": "cgibin中与upnp协议有关的一些漏洞分析与复现", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496290&idx=1&sn=33f714add8320edd7103491825e65a86&chksm=fe79d6fac90e5fecfc269b09e0d01bf2a38fce6f9ec538acc4fbc47cdba0d4e482fa0d29d49b&scene=58&subscene=0": "【已复现】Linux Kernel eBPF权限提升漏洞 (CVE-2022-23222)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491859&idx=1&sn=0a31942b7776fd8366027cd54f8aef60&chksm=fd74d1daca0358cc084442cf5323b790dc0c18cc63e6251156baff886e5631dcab4b9ba0820f&scene=58&subscene=0": "CNVD漏洞周报2022年第23期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491859&idx=2&sn=5098a08f2b8a1d7d0c746a958a97b6c0&chksm=fd74d1daca0358cc7244cb7604455c28cd3c3f42181244a9f2930c38845687296eae8ac32731&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220606-20220612)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496763&idx=2&sn=8f1c78df98ebbff7b41bfa7d027c1ac9&chksm=973ac759a04d4e4ff8e7d445aca633c1ff5fd7bb536e1c1a294ff0a2665199b95edd4574ac30&scene=58&subscene=0": "CNVD漏洞周报2022年第23期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496763&idx=3&sn=a186020c19626529c2a5365485d4f085&chksm=973ac759a04d4e4f3f932b49cc69d0731998eff83514101a71026eb4c149dd856de1c973c3a3&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220606-20220612)", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247527332&idx=3&sn=b6f0ef5db53ab44fd2637a3681efcb51&chksm=c1e9e7f5f69e6ee33063bceb3223964f66ce3ba7fc0e65b6267f048caad8fad60bf803b58eb7&scene=58&subscene=0": "CISA公布新漏洞,可以远程解锁任意门锁", "https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247489844&idx=1&sn=a09c6bf3e96a5f5810e18ed8a2821350&chksm=9799e291a0ee6b87fb7e7c7d08699288d6a2f83d9bf007857ae091b22d15e3ecf54684cd493e&scene=58&subscene=0": "【漏洞预警】PHP远程代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458452356&idx=2&sn=013a06dec954773a9b481bc28ab06cf9&chksm=b18e310e86f9b818d0907e714c43d0d7adf60733714ef32d144bea0edfecbef268a5f148bac5&scene=58&subscene=0": "万字长文详解CVE-2014-1767提权漏洞分析与利用(x86x64)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652992694&idx=1&sn=2f500d1eff1e6203b8597f0e95abc1f1&chksm=8c9efbe1bbe972f7cfbf8332a5db22d25816a2b1407b5d351aaccc126958fe0ee717dc46508b&scene=58&subscene=0": "钉钉高危∕严重漏洞双倍奖励活动", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657044516&idx=1&sn=cb95654633224cd07d57d8e90b1cdbbf&chksm=803fa8fab74821ec3b23e081a7d4bfc725d0b453c2897726d10612ed29c82893fe3bc30fa881&scene=58&subscene=0": "【漏洞预警】Linux Kernel ebpf权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458452452&idx=1&sn=45e52124810e59e65a86ef7931c30160&chksm=b18e316e86f9b878e2497c82fce3813b09f238af469e4e868c131a0d98cf0b9125fada6094f9&scene=58&subscene=0": "CVE-2018-15664:符号链接替换漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247504566&idx=1&sn=8c67e0a8744c95efe6c772bee085ea77&chksm=eb700c89dc07859f71ca15098052c2e56bcde9c015f2af206b24cd7a8381a48e218089470aa2&scene=58&subscene=0": "2022-06微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512333&idx=2&sn=941187896fb7a8b1aa8894038839d4db&chksm=ea948067dde309712677a3c1025833ce2d2b6124a230df150c3d899e8252a0d9214dbea3d276&scene=58&subscene=0": "Travis CI API 漏洞未修复,可暴露用户机密访问令牌引发供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512333&idx=3&sn=8b2d3c40a59f28ad4ef19cca4e7de98c&chksm=ea948067dde3097194f650240489cdb2bfb2ee4a852e63ff960607da69af4ddc744d0a0e03d5&scene=58&subscene=0": "开源邮件平台Zimbra 出现新漏洞,用户登录凭据可被盗", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651084683&idx=1&sn=4ed8497406f88548b340cc4c67cbf471&chksm=80e64d3bb791c42dd6b65bfcf679a5b1dd717692cce846c124cd2d6ca4d92390ef030d585d14&scene=58&subscene=0": "十年三倍!OT漏洞增长88%!", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496307&idx=1&sn=dc2778ba9aa52569476df57c9077810d&chksm=fe79d6ebc90e5ffd24f29d0ac3c3031d90003450fdaec0b7d420c976707fc51524e8827a1b45&scene=58&subscene=0": "微软2022年6月补丁日多产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247500336&idx=1&sn=92ca5f0d1ee950a26b072189baa995c0&chksm=ec9f1b43dbe89255c9f79100d53536c39f259e25aef32b091e5dca1f91ef1de93ed153d6f0d7&scene=58&subscene=0": "微软六月补丁日:广泛关注的Follina漏洞(CVE-2022-30190)得以修复", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247503492&idx=3&sn=216f95b82cd464319c96816b9bf47f2d&chksm=ebfa89a4dc8d00b29c93480ea864c40d85c2af9b3a2af665c4cbdf78d3f1e3ff5dc30fcf50f3&scene=58&subscene=0": "2021年路由器漏洞数量超过去十年总和", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491068&idx=1&sn=9492ae74cc1baa7b5c182c5a5a908fa1&chksm=fe2518fdc95291ebd1bbe03d7efc891d0fe6e2ad67df3beaa8825dcf3919b26044ec19448ad9&scene=58&subscene=0": "2022-06 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247493712&idx=1&sn=0eb90bbd63cadffdd089fcd8ede0fbeb&chksm=c00745ccf770ccda84e24402f35e19e6349ba5c2d15e8362ab0e888041524876dda4eed7e884&scene=58&subscene=0": "【技术干货】CVE-2022-26134 Confluence OGNL RCE 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496326&idx=1&sn=841acaa2dd461bed677ec3decd01afc6&chksm=fe79d61ec90e5f0839d1ae3b2e91025c38ad9043e2a89c9f96eb5b9c50ce925cc3d663ca2843&scene=58&subscene=0": "【已复现】Windows SMB拒绝服务漏洞(CVE-2022-32230)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512362&idx=2&sn=8b46a7d7acb584b00292304dfcc7fd67&chksm=ea948040dde30956d4770c1c90d9bf9b7ad1acc876eb83ac63c20987e9f83b6678f23e01c62e&scene=58&subscene=0": "新型侧信道漏洞 Hertzbleed 影响所有AMD 和 Intel CPU", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512362&idx=3&sn=70e454390ffa2bbcc942bc0ef7d5a286&chksm=ea948040dde309563ae79f6f57791819cbb113d3001d4dfc53dbf437979066bb00c594bb068d&scene=58&subscene=0": "思科安全邮件设备现严重漏洞,认证机制可被绕过", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649772281&idx=5&sn=dfd503418dcc9a760cff1640209fb41f&chksm=88936096bfe4e980640b9724848b81cc7852dc28623312192088babc13420edc9c1b372355a3&scene=58&subscene=0": "【技术分享】Linux kernel 4.20 BPF 整数溢出-堆溢出漏洞及其利用", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247504723&idx=1&sn=ee6635e9205c54248d3c6eff47d02eed&chksm=eb700d6cdc07847ae68ac80c7d41e2aae12e61c5f9e1e8ae69e2c611a7648058a5a684b3d289&scene=58&subscene=0": "【火绒安全周报】勒索软件与恶意软件联手∕俄利用漏洞入侵乌机构", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247503550&idx=3&sn=143d95fc75127e6285ab1a65c5e3a09f&chksm=ebfa899edc8d008835323fd04aa90da6b09d494d1a3061696260bc97487ad49cfd295d1db0b5&scene=58&subscene=0": "Windows SMB拒绝服务漏洞 (CVE-2022-32230) 安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512404&idx=1&sn=3f6c217dd2037970aa2fb88576e72223&chksm=ea94803edde30928208f75e8e32f8dad8b673a8bbbddd571da9dc4a14718f8cd9403b3dac39d&scene=58&subscene=0": "热门Fastjson 中出现高危RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512404&idx=2&sn=c658bb128dac22af8e2041f4d86d9c98&chksm=ea94803edde309286702f0b3b4638f0e87262ccd067fca6402a3f21d7cd880e36026452daa2e&scene=58&subscene=0": "Anker Eufy 智能设备系统易受严重的RCE漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512404&idx=3&sn=0a2fc411015676c5b452cccf54ea5489&chksm=ea94803edde30928b210233c0861c0dbb30f257cb589c1889182de311e5db510fde7d392a632&scene=58&subscene=0": "黑客利用已存在三年之久的 Telerik 漏洞部署 Cobalt Strike", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651114742&idx=1&sn=0f318edb922b5718bea97387d2721cbb&chksm=bd147c258a63f533e3f2d92ef3069238fd3762d6133942837a5fb6b01ca467130432812b893f&scene=58&subscene=0": "如何制定一个可落地的漏洞补丁管理策略?", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247495755&idx=1&sn=c53a9c7408feda41482f9d284f33d082&chksm=fdde8ecccaa907daaa563b27b528bb2f499be89b80dbf0ff9c87988b6a5db3565f2d0fb17f52&scene=58&subscene=0": "MetaMask 浏览器扩展钱包 demonic 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496333&idx=1&sn=78a16eca8dff8a7e3863a481103ec60c&chksm=fe79d615c90e5f0366e79776af5da445231a2559168b2be92c8b6841a60c80bd2a4d771eef28&scene=58&subscene=0": "Cisco Small Business远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247500338&idx=1&sn=2fa717b3367276c07c87f3f2a4163431&chksm=ec9f1b41dbe8925763f9944ec19e2210152a563434ea2abf75df97b7698dc337151bb7f59c6e&scene=58&subscene=0": "腾讯安全威胁情报中心推出2022年5月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651114811&idx=3&sn=0a7ef41b0c1b19e911fbe8c976c6817f&chksm=bd147de88a63f4fef5dc787acbbdaf00f0df0de2adf2b8fcd9303f67d59f1f990d96ac904df6&scene=58&subscene=0": "安全头条 | CNNVD通报微软多个安全漏洞;工信部累计通报、下架违法违规APP近3000款", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496815&idx=1&sn=8d8b6aed4d0bda1b20c9a784729742e8&chksm=973ac70da04d4e1b7cc3ef78970a4c442208a3b9cd58cf42505e5fcc6a30c4dc71f487a226fd&scene=58&subscene=0": "CNVD漏洞周报2022年第24期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496815&idx=2&sn=bf57f161ca2b0de0e3a758a8801053b3&chksm=973ac70da04d4e1b7a4bd7e3eda8f60b037519d79310215b7817400f02b026089f2d5ea751ed&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220613-20220619)", "https://mp.weixin.qq.com/s?__biz=MzI4MzI4MDg1NA==&mid=2247484591&idx=1&sn=3c608f297f8150a40eeeb91c7a4c4ee4&chksm=eb8c5016dcfbd900e79d26d7683b4101251a9f333451401996ea01e10100addd23cb20fa25ff&scene=58&subscene=0": "双倍快乐|单个漏洞最高奖励1.2万元!!", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652497909&idx=1&sn=f51e40a67a60966742b0ec4c03fc286d&chksm=f2584446c52fcd507b7e9b8dd269585483c09d17f6b4c4943cecb0aa5dc203a524040638621f&scene=58&subscene=0": "雷神众测漏洞周报2022.06.13-2022.06.19-4", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512438&idx=1&sn=563e5fbc7e61730cf40397cd09414e2b&chksm=ea94801cdde3090ad98fcb1524ccb001df9942040fddf238640160b7dab3a84c77eeef57ee7e&scene=58&subscene=0": "思科不打算修复VPN路由器 RCE 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512438&idx=2&sn=dc6db27797628706ae9f2892365b1f0b&chksm=ea94801cdde3090a9082e2396cd7a7f51816e70a1559981a18d63bfbe37b3f27b2a62f868d35&scene=58&subscene=0": "研究员披露修复两次的 Windows RDP 漏洞详情", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491877&idx=1&sn=21bb58d07d6c7e6d80a2401dd4c00c77&chksm=fd74d1ecca0358faa1ee6787855b189ca7f196a5d9e75b04fb2e9e4289155f0c343e6515464d&scene=58&subscene=0": "CNVD漏洞周报2022年第24期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491877&idx=2&sn=211fe8b04ab0ec51efd24c093605a7b9&chksm=fd74d1ecca0358faed48517ece3efaf8b5dcbb92fc9bbec4c9dc1edc731e18ffd40e00d90bc0&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220613-20220619)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458453618&idx=2&sn=dba42df66438701cda904d463e51e760&chksm=b18e36f886f9bfeefd2de981ac20b75516801e14ee248a182751e0b64855fe6df533fe2c4a41&scene=58&subscene=0": "CVE-2016-0165提权漏洞学习笔记", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458453618&idx=4&sn=5a89909619e14747903efcdaf11aa2ba&chksm=b18e36f886f9bfeede1ea44ae22e97c8b39106820aca06b759c403ae4cf24cb285a83f61d3f6&scene=58&subscene=0": "(618限时9折)Intel CPU漏洞研究,为你深入详解三个史诗级的芯片漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458453650&idx=1&sn=80fd959ccaf32602fca0cc7462497228&chksm=b18e361886f9bf0e105675b2206100d43cebf617bf488de3bdedf767ed1a85768818145f8596&scene=58&subscene=0": "EXP编写学习之绕过SafeSEH", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496347&idx=1&sn=41c698327015d265c511437802918bbf&chksm=fe79d603c90e5f153fdd7145f6ea5d6ba48b5362dc439aa23e5858e297606fbd788989567046&scene=58&subscene=0": "Spring Data MongoDBSpEL表达式注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652497976&idx=1&sn=1afbd05efa7327021334863176f19910&chksm=f2584b8bc52fc29dd0536646067319f0f9ce3f873846ce32334bf543cee9ea4abb8aed54624d&scene=58&subscene=0": "基于Zabbix的漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512458&idx=1&sn=08b25be264dda4e141186f4948c38a61&chksm=ea9480e0dde309f63d8503831b6b7d929be097e6a6d155a43132e4f6cfafd14db0afa455cced&scene=58&subscene=0": "谷歌研究员详述已存在5年、已遭利用、已修复的 Safari 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512458&idx=2&sn=f1263ecf9f5f3344014fbb23ed01ef9b&chksm=ea9480e0dde309f6895b3ca1824f5dbf05ec60a8059c2590a09de5d1f9ce9f6091a15eacabfa&scene=58&subscene=0": "西门子工业网络管理系统中存在15个漏洞,可导致RCE", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512458&idx=3&sn=b55867df7184e1bc35226d1d943cabe3&chksm=ea9480e0dde309f669afde9e26ac00dda9d4749a4a0a6235ff4f8d5e7d597e1dce83c40d010d&scene=58&subscene=0": "思杰ADM高危漏洞可导致管理员密码重置", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649772458&idx=1&sn=494294c3f20c40f28df4b397616e079b&chksm=889361c5bfe4e8d343462ab6122b39674ce39bb51c3b6e78540d819caa0d80e9fc425373d8a4&scene=58&subscene=0": "【技术分享】从 CVE-2017-0263 漏洞分析到菜单管理组件(上)", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657044521&idx=1&sn=43271807ce76c3977a936ce5315e85f8&chksm=803fa8f7b74821e137a8c8d0d0a15122eb06ab12a284d59722e1d9cecb84a4f10eedfba47d06&scene=58&subscene=0": "【漏洞预警】Spring Data MongoDB SpEL表达式注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512470&idx=1&sn=9ff886e36269deab3af95b513c60754e&chksm=ea9480fcdde309ea294148ae92264463a822f5a65d3243f576e255cf7f0be60c1126a2ae9b95&scene=58&subscene=0": "研究员披露影响10家OT厂商工控设备的56个漏洞OT:ICEFALL", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247503648&idx=3&sn=6e10c4492d57bf004ee7b88d1ad2b186&chksm=ebfa8800dc8d01168e023cf591d82e41d5a373244fdfc0177102d5153428a7f2b1b2e5211406&scene=58&subscene=0": "工控安全火山爆发:“冰瀑”报告披露56个重大OT漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650961961&idx=1&sn=03653289ec8e2263cb248b5637ed7f34&chksm=80793a1bb70eb30d8a9dc4d7290f6f92e2e6bc0e6352fc5b7ec2d55741d00a27746d67e6735f&scene=58&subscene=0": "404星链计划 | BinAbsInspector:二进制文件自动化静态漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650172752&idx=1&sn=cab9dcbb993cb56adcdd585c77bb8b06&chksm=f44896ecc33f1ffa784933749ace038d3d66c1968838861ce284a5cbe87e96f7f723572e0c36&scene=58&subscene=0": "攻防演练实战秘诀:让0day内存马从送命题秒变送分题", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649772527&idx=3&sn=6f8291a6d2c6b16a93ef423b917b5d75&chksm=88936180bfe4e896fbc92202ab50c00ef0a1b1540e7d9bc7db91a7a5525446653537646bd0e1&scene=58&subscene=0": "【技术分享】关于Bludit远程任意代码执行漏洞的复现、利用及详细分析", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247496909&idx=1&sn=8b9774d3d050aa469356f4d08993a547&chksm=cfc55392f8b2da84c2ee6faf335bcb892d83d1ea7e2f227c5cb10f5eac7619d5b0113982294c&scene=58&subscene=0": "360漏洞云服务号迁移公告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512551&idx=1&sn=a3dc5a12724c0b9b230eedf1455dbf23&chksm=ea94808ddde3099bc99f14a224f4836cc7d9419f056f982dd29238ebf945806f58f2989225bc&scene=58&subscene=0": "开源项目 Parse Server 出现严重漏洞,影响苹果 Game Center", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512551&idx=2&sn=62ca391c055ea2839fe4178afcd48f4b&chksm=ea94808ddde3099be6ec5044d096c7921e4abb430485bfbd3eb207e3fa39af16c7a0ca6a766b&scene=58&subscene=0": "严重的PHP缺陷可导致QNAP NAS 设备遭RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512551&idx=3&sn=1d82552fab1461f66ca02457161cf83b&chksm=ea94808ddde3099bca51c4d30afed76e7f9f6f4d553a89f6a7585832af3f8743faabd0c122ac&scene=58&subscene=0": "Spring Data MongoDB SpEL表达式注入漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247527682&idx=2&sn=bad34031570e2c46a35b968dc174bf5c&chksm=c1e9e153f69e68456dd4d584b9629791702147ecfeff7f133e350c3ef3f962d48cd932e60141&scene=58&subscene=0": "工控安全火山爆发:“冰瀑”报告披露56个重大OT漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247527682&idx=5&sn=50c209d72bde4e92a99b774d3573e20e&chksm=c1e9e153f69e684552ae8721913f4a5f723a82f15a29bd63467ef73d6fd7e2838e4d5c03adee&scene=58&subscene=0": "网络安全行业热议“OT:Icefall”漏洞:世界末日or见怪不怪?", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247495672&idx=1&sn=5a43a5482769a476a870f49962c6d581&chksm=eaa967d8dddeeece563deeed31b727674e425c7fa244eadd99e525952e98140d5bf496f169fd&scene=58&subscene=0": "CVE-2022-25165:AWS VPN 客户端中的 SYSTEM 权限提升", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458454436&idx=3&sn=d8018013e051a19f37930afa7dc64b94&chksm=b18e392e86f9b038869ce00368b565364dd5133ebb4ad9c8de1bb25450ab5d5c687fd9fcb0c7&scene=58&subscene=0": "严重PHP漏洞使威联通设备面临远程代码执行风险", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649772687&idx=2&sn=5803cbd7d749677a192a0a4f70eda8ad&chksm=889362e0bfe4ebf6284ecc85b6f11d8979e65c17c2ebe7ed2d29469ee9ffc3defdd69b0a592c&scene=58&subscene=0": "【安全头条】MEGA修复导致数据泄露的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491101&idx=1&sn=fe143c42f81f8e70e6d17d15037c09ac&chksm=fe251b1cc952920aa8002863ce27e244c999f945539698884fe50d697945a8b7a380b20baee8&scene=58&subscene=0": "CVE-2022-21445:Oracle JDeveloper ADF Faces 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491101&idx=2&sn=7d8a506a104539a48a85ccdfc469ca72&chksm=fe251b1cc952920a5c68c82e547fa26beca531a1d57540582828999ffa00e4785bba44d8dd8e&scene=58&subscene=0": "警惕!PBot挖矿僵尸网络正利用新漏洞发起攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458454448&idx=1&sn=3555e70fdfeb7a4107c476199caa8d7c&chksm=b18e393a86f9b02c71f02972dd13db2c3c8623b6db04e13785ffee36db716f73c948e78678b9&scene=58&subscene=0": "[Rev赛题复现]DASCTF Apr X FATE 2022", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458454449&idx=1&sn=0e7fcab06f6208c134b8388ea61af637&chksm=b18e393b86f9b02df2779e9bd4d55058cc7666c0c83945978924a0690e47ee0f449087a1ef70&scene=58&subscene=0": "CVE-2016-3309提权漏洞学习笔记", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512575&idx=1&sn=831b8a4cf06da94d6f5012a897e71f84&chksm=ea948095dde3098340317267be4e92ba692ad9ab877266c163231767f839c7ce62ea51baeaf7&scene=58&subscene=0": "勒索团伙利用 Mitel VoIP 0day 发动攻击", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649773083&idx=1&sn=54c93c37622750cfef39e4ffcf0b5134&chksm=88936474bfe4ed62d436aa41b7313cfc3febe6251db8e5b87e36605e7cbc394e3605d4bc15da&scene=58&subscene=0": "【技术分享】SA-CORE-2019-003:Drupal 远程命令执行分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458455526&idx=1&sn=f42801fd98759f7224a3052d45b4cb25&chksm=b18e3d6c86f9b47a27170075f62d9833009f5714725c22fd190ecfd2231efed75f70c04055b2&scene=58&subscene=0": "记一次安全产品的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247489713&idx=1&sn=72f3c21c6e9381cdc42bb1643a8ba4a2&chksm=96f407dca1838eca7888f5511cbcd54504943e6a50a553ddf609272f89f0e7b47b29f6ccdf0d&scene=58&subscene=0": "一个xray POC的编写全过程", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247527805&idx=3&sn=c4f152021973ad99b59ac611538ec4a7&chksm=c1e9e12cf69e683a828fd642ac8c33042c141d24ba48da8975e83f4c00981cd7c81e192a415d&scene=58&subscene=0": "CISA警告:黑客仍在利用 Log4Shell 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496380&idx=1&sn=eca9992413b3c774e7e60c9c022a9e3e&chksm=fe79d624c90e5f32c8ea5ee773e5fc4c939f64804bef98e7395ab29b116be17a58bcd0e3e983&scene=58&subscene=0": "【已复现】Spring Cloud Function 拒绝服务漏洞(CVE-2022-22979)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247493869&idx=1&sn=73d04a1dc038d2616c5ee0b9d6f3da8f&chksm=c0074571f770cc67b6241e8cf6bab732df594b2f2a477e9b9ce50950185210dc15557eb74cbf&scene=58&subscene=0": "6月,盘点您需要修复的那些API安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247501833&idx=1&sn=c91b745c048596faf0e05510165d2299&chksm=ea663f7edd11b6681e35de65031ad4373f8ee1a722ce3e2a0dd7efed82fc007a21b3e64440ea&scene=58&subscene=0": "美国国家安全局(NSA)“酸狐狸”漏洞攻击武器平台技术分析报告", "https://mp.weixin.qq.com/s?__biz=MzUyMDEyNTkwNA==&mid=2247489030&idx=1&sn=0c9799377b28ef5851b8b0c3265be8ae&chksm=f9ee7ab9ce99f3af1f06c4c96d4bb9c801b8aba7754b7b1bad8ff4b3ff2973f2dc26926788a7&scene=58&subscene=0": "美国家安全局“酸狐狸”漏洞攻击武器平台技术分析报告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247503957&idx=2&sn=5b0b78bed396d22e22eca8124b7a678d&chksm=ebfa9775dc8d1e632fb422e60fb60782b6f3d35f15be37ee4115ae43401720df354eb1cfc931&scene=58&subscene=0": "美国家安全局“酸狐狸”漏洞攻击武器平台技术分析报告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496387&idx=1&sn=ed634e2458a888f961044354d6224c3c&chksm=fe79d65bc90e5f4dea518095d127b0141e945ba0a23b040fcc89632fc42317ec4781bdf0e56a&scene=58&subscene=0": "【已复现】Apache Shiro 身份认证绕过漏洞(CVE-2022-32532)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247488567&idx=1&sn=764b71452aaa0695da3626393f362208&chksm=c187d426f6f05d304a4c640ba7243e250dbe5fae353279cbe38685aac8a8fe999efc52d57481&scene=58&subscene=0": "CVE-2022-24521 Windows CLFS本地提权漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491116&idx=1&sn=21f9abfcf2de1dca06f6cbd909049206&chksm=fe251b2dc952923b53b62afe304cd9f38a09bf7b06c9a7161e8a246fa4f83799aee96e9d2691&scene=58&subscene=0": "CVE-2022-32532:Apache Shiro 身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247504000&idx=1&sn=dd431b937f81c9d207faa0e84d5e0ff1&chksm=ebfa97a0dc8d1eb61735870c66e1a5f7306d5bb2c304eb07eba979c076e11a986934b93a5f7d&scene=58&subscene=0": "微软云服务爆容器逃逸漏洞,攻击者可接管Linux集群", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657044539&idx=1&sn=844200f7ded4e407c1f60c4eaecf3c73&chksm=803fa8e5b74821f35d4b5770f899d11b40c4f3a94a22effe163efe173282d1d87eb8d9b1a296&scene=58&subscene=0": "【漏洞预警】Apache Shiro认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3Nzc2MjIxOA==&mid=2650344931&idx=2&sn=3e7cce36cd8fafedd7691fd8754476b9&chksm=8740b626b0373f30625fd0948617c121549bb31d5fe75b3f927102651251db845aa9935d75d9&scene=58&subscene=0": "美国国家安全局(NSA)“酸狐狸”漏洞攻击武器平台技术分析报告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512652&idx=2&sn=41462de310311abaadf3c81fa66dab19&chksm=ea948326dde30a30b6628410dbec18f7095b4ceac398685c020321f11a956d0d0c573779d4f5&scene=58&subscene=0": "微软 Azure FabricScape 漏洞可被用于劫持 Linux 集群", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512652&idx=3&sn=2b4e8e13ba0800dd1fc7f8468b6a0829&chksm=ea948326dde30a308994628b3b2468662db78d6469ed717a69fd91089fce0e26e5820559f664&scene=58&subscene=0": "亚马逊悄悄修复安卓相册 app 中的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512679&idx=1&sn=0c82369854fa59dc4fa12f66f58f28ba&chksm=ea94830ddde30a1bcbbf95307bc949733929927064b26c19848a6f40b73600efda78313738e8&scene=58&subscene=0": "谷歌分析2022在野0day利用后,得出令人意外的结论", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512679&idx=2&sn=59d6ec9653aaf6de0cfe4f624fe39695&chksm=ea94830ddde30a1b240c47dd7ca7dba361eef098dba1a723363510aee0f8b42df1d2234a6ae5&scene=58&subscene=0": "博通Brocade漏洞影响多家大厂的存储解决方案", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247528258&idx=4&sn=6c1fd15c19332a2003f81012c6193bec&chksm=c1e9e313f69e6a05a216a34674fb5f7357f5b9cdeabce8b2fcc0b676ced25855a0e807dd764d&scene=58&subscene=0": "微软云服务爆容器逃逸漏洞,攻击者可接管Linux集群", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491121&idx=1&sn=6109b0bcbf7e058596687514ab9900c1&chksm=fe251b30c9529226066d2a759791f33156e1850f7313a8efc73a2e3e7000d6cc768c0a394ea0&scene=58&subscene=0": "CVE-2022-2185:GitLab 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650509028&idx=2&sn=a6c0e4d6fefc50442fb0b9c34e30a9cb&chksm=8716a0afb06129b9afabd6b44caed4aa05205fd94662cf91b3e8775d536d09f43da2b1d5beeb&scene=58&subscene=0": "使用区块链分析评估朝鲜黑客的优势和漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247494084&idx=2&sn=e4761b62c8c1a41c94b18ede48d34cac&chksm=c1449b79f633126f670b14ddef2e1a65bca0ae22df29f70cc80fd6c7a9681175bd94cdde591f&scene=58&subscene=0": "2022年迄今为止半数零日漏洞都是之前漏洞的变体", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491947&idx=1&sn=c45f6af39402e6bf7a9cbdc86f0bf1b3&chksm=fd74d1a2ca0358b491c9365630034adc97d24c805030c42371ced87322714ad2aed020f20247&scene=58&subscene=0": "CNVD漏洞周报2022年第26期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491947&idx=2&sn=63ee4c1b9fa053be95bc0f1c9370c6ea&chksm=fd74d1a2ca0358b427e20224e8a653c31c277065d7f398044b40f369b05beb959d2fc649d070&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220627-20220703)", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247528329&idx=5&sn=15363350536361a51f100750382d49d8&chksm=c1e9e3d8f69e6ace29cc68a40086dc6b1b30f780dee8dca12c567a48f20d11b1861f72c4786d&scene=58&subscene=0": "可修补和可预防的安全漏洞成为第一季度攻击的主要原因", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247495894&idx=1&sn=bfe228cd674fd5b9b7a208578e579652&chksm=eaa978f6dddef1e0a33a0d4fd3ddae36722123c81c3ba71c439bc5d78ef5f272a090e44d4d22&scene=58&subscene=0": "AWS:代理服务器上的远程代码执行(hackerone漏洞报告)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496884&idx=1&sn=59c9ecb4ae1f668e9c383685ef0e7995&chksm=973ac7d6a04d4ec0321712b56a386c1138a7eb54af390cf9baca9a0033b97754e3346d1f3792&scene=58&subscene=0": "CNVD漏洞周报2022年第26期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496884&idx=2&sn=da05f25da1830fb5bb4144111a223a75&chksm=973ac7d6a04d4ec00d5d8082e9db04e6672acc20be8e4209e32a2b84b38598c8b60067b419f5&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220627-20220703)", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649773477&idx=2&sn=06bbfe9783ac4d923c198482f5e3ab6c&chksm=889365cabfe4ecdc4a39d6acb7fd25cfcc8aead738389aa7888518bf934bb0a8fe70a8739ba9&scene=58&subscene=0": "【安全头条】Hackerone员工偷卖漏洞报告截胡安全研究员", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512717&idx=1&sn=90d9ee1cbcb33e3442cfd9d4d4c1d958&chksm=ea9483e7dde30af103b74637ffdefd0a6d62164388d12598a2a74b18e802f659d18f3e11a70f&scene=58&subscene=0": "Chrome 103紧急修复已遭利用的0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512717&idx=2&sn=e7d555a3b2e371cc5f51269f55621112&chksm=ea9483e7dde30af1515cb24b488607e05e070f64625e434938207bb79bcccb49fafba26a620a&scene=58&subscene=0": "Django 修复SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512717&idx=3&sn=ed4f540ffb43d12f8f07655065653095&chksm=ea9483e7dde30af173547333a59e5ef20cbd256045c377a56722b6cac0af0d581a27bc4b07a1&scene=58&subscene=0": "澳大利亚莫纳什大学推出公开漏洞奖励计划", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247504210&idx=2&sn=79f8d32946140092fa33441779333b22&chksm=ebfa9672dc8d1f640b262f54dc1e1e622c0124172e3a1b037969f5a2588a2bce5a59a9c690e7&scene=58&subscene=0": "国家漏洞库CNNVD:关于OpenSSL安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496413&idx=1&sn=75d27dd23e9c49860973d4d084f41ccf&chksm=fe79d645c90e5f53a4e9ab2f690ed0a413b755370fcb4e5fdb4dc86290849b9f070b82e8475d&scene=58&subscene=0": "【已复现】Atlassian Jira 多款产品Mobile Plugin服务端请求伪造漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491130&idx=1&sn=a09de7b60ad7b88ab2ef105951eb808b&chksm=fe251b3bc952922d3e5ed8edf8a35d43000a2780c8a2890adeefa1fc7d073d3aa3c510dce848&scene=58&subscene=0": "CVE-2022-2274: OpenSSL RSA 远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657044546&idx=1&sn=c32a18047a3a1752df8b8559ea654cc6&chksm=803fa89cb748218ad642fa5994adfc65fb9ffd8480c7820dfb145f4205848194093580b59c54&scene=58&subscene=0": "【漏洞预警】Mitel MiVoice Connect远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652004281&idx=2&sn=35525b8ca0386fbd0815c59395cecadc&chksm=f36f73f9c418faefe1ef2c39a5ec66305c98045404db0b4eee9f2ce2738288343e142c2d8813&scene=58&subscene=0": "【安全圈】数亿网民受影响,OpenSSL又被爆高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512767&idx=1&sn=b404692db2fa859fc1ee08badadbb004&chksm=ea9483d5dde30ac3dd034ce16f1c411008f5df15f75344c3da5e32814ca23e20bc24795ba92a&scene=58&subscene=0": "高危OpenSSL 漏洞可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512767&idx=2&sn=a0b241acce83341531e098b976dc2d6c&chksm=ea9483d5dde30ac37e8cb4cb914a843a0ddc13924b0915e5518a0e2ebe4c6725758f476fb8fb&scene=58&subscene=0": "Atlassian 修复Jira 中的完全读取SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649773579&idx=2&sn=4cb7ffe230f86a2c2553adb40958c57e&chksm=88936664bfe4ef728792b708d3886e1a0f4fddd75aa1e4f69e8bcb0b25fec577f0bef2e9db66&scene=58&subscene=0": "【安全头条】MITRE漏洞公告意外展示易受攻击资产", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496422&idx=1&sn=0c7bbd815d87ed3ade312f727855681b&chksm=fe79d67ec90e5f6837a7057cda5e1c60e03430e10eb68c3f5cb6941f44ba46df5138c7bc63ef&scene=58&subscene=0": "【已复现】OpenSSL RSA远程代码执行漏洞(CVE-2022-2274)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512788&idx=1&sn=e187454b1e7105eca3d4a6988c305073&chksm=ea9483bedde30aa831b27a1729e393da823f28bb3b86c526f3c936e95d2d9c1d928b50b2db9d&scene=58&subscene=0": "苹果为Lockdown Mode 新特性推出漏洞奖励计划,最高200万美元", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512788&idx=3&sn=894340534673ba25a49c72eec950b0d7&chksm=ea9483bedde30aa8e9c0b3355eeee1ce56ec6cb1f2d55b60888cea9487bd8397fff4294a955d&scene=58&subscene=0": "Fortinet 修复多个路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247495947&idx=1&sn=7be2fddc2b9ac35897eb4701fa3b71ff&chksm=eaa9792bdddef03dcf44a4ae02879e3ad5eec37ae4221401b1c26110a283014cffdf8ac9b536&scene=58&subscene=0": "Kubernetes NGINX Ingress Controller 中的新漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247545015&idx=2&sn=3fe05d16ee63b849c702a1c7a93be17c&chksm=e915e08dde62699ba6a1f483893a804920d08555152b59808714f7e5036fb45df19e866e0e30&scene=58&subscene=0": "攻击者利用Mitel VoIP漏洞进行勒索软件攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458457914&idx=1&sn=1d505597b47089cbd8bdc1e6e0a2b068&chksm=b18e27b086f9aea63d4404f118b0dc4c0b87c5986f20e556a5a85c967834df0d7f3e8e6d98d6&scene=58&subscene=0": "Android漏洞之战——整体加壳原理和脱壳技巧详解", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512799&idx=1&sn=4c911268f2a7aa2fa486878c0d088a2b&chksm=ea9483b5dde30aa34eecfb2769cecc53e133885f12e381c6c1827d5a3d3dfa4f8e4e0edd9506&scene=58&subscene=0": "Node.js 修复多个漏洞,可导致RCE和HTTP请求走私", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512799&idx=3&sn=cf09134cb420304564ce779f73681d85&chksm=ea9483b5dde30aa399ffec055342fed6659cf6636ee189076567fb2b40cf6d02796785ce7ca1&scene=58&subscene=0": "思科修复企业通信解决方案中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247529335&idx=3&sn=e429a31a4e9ba1488b2dd79d1a28652d&chksm=fa93c5b6cde44ca0bf4f1f3c91dec333c077dd4f91fa994ea7cac29dd0c15336f7cc49aa227a&scene=58&subscene=0": "Chrome被爆严重零日漏洞,谷歌督促用户尽快更新", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491964&idx=1&sn=d461299f3e39c74b20e33b9dcaf3e281&chksm=fd74d1b5ca0358a3abbb18681b5319c622681d4308c9379ba45b6acb6397fb243f6e0bfc0f15&scene=58&subscene=0": "CNVD漏洞周报2022年第27期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491964&idx=2&sn=80a4f255978a971050a0010f0766ef95&chksm=fd74d1b5ca0358a369d10b1560f9bc64fe886d63ccaa74d39d63569f4214d4d6022796133273&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220704-20220710)", "https://mp.weixin.qq.com/s?__biz=MzIzOTAwNzc1OQ==&mid=2651135026&idx=1&sn=8c72045fe8a6eca860273815f68c11c9&chksm=f2c11d52c5b69444b0015b0d528f1479dc67347dad7d56d7f7b0d2b022709a3ac372c26061ed&scene=58&subscene=0": "演讲议题巡展|自动化API漏洞Fuzz实战", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496937&idx=1&sn=c63b8a7ad9c8a3491127886ce9c7d135&chksm=973ac78ba04d4e9da35c75e838a4d6e88a328bab331ecc565d8c9f8682cab55dcd9244ab1e62&scene=58&subscene=0": "CNVD漏洞周报2022年第27期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496937&idx=2&sn=9a695ffd2858f54045c35a1d43d01c21&chksm=973ac78ba04d4e9d888fcc0030e51da4184beb9d7e79ecff26ff05a9a07d64e49e5faa96e288&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220704-20220710)", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247529370&idx=4&sn=5d288dfc2b83e3cc2d3b88ca3cd063f5&chksm=fa93c55bcde44c4d529075048bf3053db7133cb4dfba028369ca0fe946f6d4acf9e2815b0740&scene=58&subscene=0": "多款本田车型存在漏洞,车辆可被远程控制", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650963075&idx=1&sn=31d9dd7f02ea26d6ae0f77e6d8271c0b&chksm=80793eb1b70eb7a709e4445827f22ddc20efea9918714fd5c1ab30865b4581113b1dbe47b085&scene=58&subscene=0": "Pocsuite3 入门教程", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496437&idx=1&sn=ea73f7efe0954c9ab9dea943c2b8666d&chksm=fe79d66dc90e5f7be42d2cec4604c6aecdcf028060bf774432e59acde813b60fd709ebc237c2&scene=58&subscene=0": "微软2022年7月补丁日多产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247494626&idx=1&sn=8e5c14866789c5c0390d87650d72b7d5&chksm=fa523e5ccd25b74ad1d76c79e837718502e0bb27a00122547f9341d37d40b93f213baf349921&scene=58&subscene=0": "2022 CWE Top 25年度常见软件漏洞榜单", "https://mp.weixin.qq.com/s?__biz=MzI4Mzc0MTI0Mw==&mid=2247494467&idx=1&sn=6188bd48221567077d761d469d56cea7&chksm=eb84b617dcf33f01566c397e682fe4dfc34c0da21f026f5c723d38c73a7e94db582ea965f4b2&scene=58&subscene=0": "原创 | CVE-2019-0808", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491154&idx=1&sn=dcf4dc8b7a21a1ffa81b99d8442ed7d9&chksm=fe251b53c95292456a0773e2c8798411f95c3a4493b6fdb9649486467254ee43648a0ad6e9b4&scene=58&subscene=0": "2022-07 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664161952&idx=1&sn=2a43bef037c0aa0f85047bc756f39852&chksm=8b5ee059bc29694f1f56f41f6adafb913da72db2ad5463d73169e6eb581f4c3cef01cc56ab54&scene=58&subscene=0": "专题·漏洞治理 | 践行总体国家安全观,推动网络安全漏洞治理体系建设", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649773970&idx=1&sn=b7968724cef926328cc5a195d7b21088&chksm=889367fdbfe4eeeb4f462c9b9b549517c0a77755ae8d7668ff3c71ac6cfa31554a2f2d67812b&scene=58&subscene=0": "【技术分享】CVE-2021-3490 eBPF 32位边界计算错误漏洞利用分析", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649773925&idx=1&sn=2fe5ba6b1353a79616b2662b4ca42de1&chksm=8893670abfe4ee1cc652913e58621225042e5dba33453e2102188fcc6842c35d31b431f2a4aa&scene=58&subscene=0": "【技术分享】从Java反序列化漏洞题看CodeQL数据流", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247504360&idx=4&sn=cccabea3d064a32e9bbdfd14df83b822&chksm=ebfa96c8dc8d1fde3d64af2ec1649d6ccd8d7b5b4af3d40a95830f68fa042077bc17af9593d0&scene=58&subscene=0": "Nodejs dll劫持漏洞 (CVE-2022-32223) 安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496453&idx=1&sn=bb1d672b440f09b242aeff4474aa7074&chksm=fe79d79dc90e5e8b1817458c24ae97997725ed65ef04878a422ccd82f9c9e1201d4ef57c7d36&scene=58&subscene=0": "【已复现】Nodejs Dll 劫持漏洞(CVE-2022-32223)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247512889&idx=4&sn=bd3623a8d3f38a4206124b8681f1c510&chksm=ea948253dde30b457da57e1cfc42ab6fc1b7c06335250b93b2f6b89654f0b83884057e98fbd5&scene=58&subscene=0": "适用于Kubernetes 的AWS IAM 验证器中存在漏洞,导致提权等攻击", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664162070&idx=4&sn=9371db36c1a1f42fd42e123e290c723f&chksm=8b5ee1efbc2968f94f93c2bce60ba734c5c4dc45892255aa0fff0f457f0efbeb547824335684&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247506402&idx=1&sn=824c75aa9238dda793cbd635a67f8a64&chksm=e89df13adfea782c8e9a701f13dad1f7e7bddce0d4a539cca52c762d13e76c58b991a5119f30&scene=58&subscene=0": "Tenda AC9 SetSystime 命令注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458458466&idx=1&sn=8c742be24415dc2fa50fb6296118882f&chksm=b18e29e886f9a0fe716047ad32b8eb915f206165ff87036b424364216f532142860e7db2dd0d&scene=58&subscene=0": "新课首发!Windows内核漏洞分析与EXP编写技巧(文末抽奖)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652006195&idx=2&sn=673cd09803f83fd346264e778e446440&chksm=f36f4b73c418c26510efacab5b7a78449aa1dc100c2dfc8eb4641345b0ffcec4891cea917022&scene=58&subscene=0": "【安全圈】WordPress主题中的漏洞可能会导致网站被接管", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652006195&idx=5&sn=5528e9f6ff21777a5a125e504028c8a0&chksm=f36f4b73c418c2653d20e822449a98447a6c800816178c6069f8a8d30e11f014757be9ddd63d&scene=58&subscene=0": "【安全圈】联想超70款笔记本电脑被曝新型UEFI固件漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652498735&idx=1&sn=1387459cd998e124aa04cc7d87dde4e5&chksm=f258489cc52fc18ae479d6cdc8bbe5d694f5bf5ea398e2a6cfce1acd31fbee352b9930cfadca&scene=58&subscene=0": "雷神众测漏洞周报2022.7.11-2022.7.17", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492073&idx=1&sn=70c0a792e8be9e4e30c54ab15a35847e&chksm=fd74d120ca0358365777c2ff8d6a8a2af9b789c6921f3ea8013f9617931543d5f112c2df13db&scene=58&subscene=0": "CNVD漏洞周报2022年第28期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492073&idx=2&sn=f28c1ec84d499387f9946b06893b33d9&chksm=fd74d120ca03583669520769b65d2dc8ffee808ee881ee9b6d2dd5347f1579ab6a79a36f2552&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220711-20220717)", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491169&idx=1&sn=1efa2d5412ce1462699b6c0c72d3d887&chksm=fe251b60c9529276a16f3e2025e09b4b172a1628112eaf6d56bdf26b6a6286f2d136f3dd253a&scene=58&subscene=0": "CVE-2022-33891:Apache Spark 命令注入漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247546070&idx=1&sn=b7870a98cce3167f4b3304a641e7366f&chksm=e915e4ecde626dfab5013813fab5509d733deb5fa14d1db5d241a683af2077a57d75abefc12c&scene=58&subscene=0": "Log4Shell漏洞的长期影响", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496949&idx=1&sn=3bf4566bf80aef54b0dc687f12811f30&chksm=973ac797a04d4e816cff077406c43eac712f78b4df7f78a5fd846810a99dedb96afedf62d23b&scene=58&subscene=0": "CNVD漏洞周报2022年第28期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247496949&idx=2&sn=7b0be2eda6b68372ca73959ac58413cd&chksm=973ac797a04d4e817a7b93b0fb0135c454cff8011bf5dec2360f29527f16e682ea20bff4375b&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220711-20220717)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496472&idx=1&sn=1c5dde52d4da3f12f89c9615f66f0fd5&chksm=fe79d780c90e5e96c67aff44179782d75959c58b83ab63cd75d28df80671e7ea4dd138d3fb04&scene=58&subscene=0": "Oracle 多个产品漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247529228&idx=3&sn=338b1b3666b9f905c4fc18754df53a23&chksm=c1e9ff5df69e764be3c7ae2b7dd65698126ed7489db8499e7dc75ede0d17f0091dfa8e752c74&scene=58&subscene=0": "工业控制系统信息安全漏洞管理思考与实践", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247529228&idx=4&sn=52211608c1db5b9356e1e9e71796621f&chksm=c1e9ff5df69e764bdaab1a5a9b08dae2d04d71b4de52e5352ac633c298796cb9e94c168b07dd&scene=58&subscene=0": "Log4Shell漏洞的长期影响", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247546167&idx=2&sn=a2253870abc25db5f8cbdd60e1ddb435&chksm=e915e50dde626c1b1771b162d40b31083443b5c077e92dfd54442772d720e6a4dbd511d62d57&scene=58&subscene=0": "CVE-2022-26706 macOS App沙箱逃逸漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247504552&idx=3&sn=cdd1be2f2e6fa007ee86be88f29b968f&chksm=ebfa9588dc8d1c9ed761079bb169582ae705356362500dd943b634f60794d7d2b26aac56d21c&scene=58&subscene=0": "国家漏洞库CNNVD:关于Oracle 316个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664162363&idx=3&sn=d105f469617cbd73cb6d2cddcdce879b&chksm=8b5ee6c2bc296fd417dfed5f2ed994e9155184fbe15275b95dc876bfdc4e885da62a83a9f981&scene=58&subscene=0": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650173145&idx=1&sn=94d664d0f7471439ffbbef7d6a1da4f7&chksm=f4489565c33f1c7315fd3ae577d1c6b0137bd256fce132507c10f16b67105d5302ffb9f96b64&scene=58&subscene=0": "0day检测手段完全揭秘:没有最好,只有更全", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652007909&idx=4&sn=d51243aee92bc9d50d4f0c5a6b7ead75&chksm=f36f41a5c418c8b394f42b8a3966a90c5dfb0e23a23b813f14d057f5b1515db48a6b00242469&scene=58&subscene=0": "【安全圈】关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA3MzU1MDQwOA==&mid=2247484063&idx=1&sn=a9557d0e9da2a34badffa271137ce8e9&chksm=9f0c1db8a87b94ae1e3fb080a40277e232c0330fd579654597b7d021711efe87470b95005e7b&scene=58&subscene=0": "IO_FILE 与高版本 glibc 中的漏洞利用技巧", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247546999&idx=1&sn=ccd9fc528b987ec53f7febef04249f2d&chksm=e915e84dde62615bf1d125e0805bb74295a7cc6222e2559294e5cb420c369fd77c860129cd43&scene=58&subscene=0": "CVE-2022-30563:浙江大华网络摄像机安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492139&idx=1&sn=53ee951745ab41ca341af44cf20171a6&chksm=fd74d2e2ca035bf466fb22adfd7ce0f75e566ab160e27865524282144956c50fe1718cf3fd7a&scene=58&subscene=0": "CNVD漏洞周报2022年第30期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492139&idx=2&sn=d618ff445b2b00a51153195424db9b6d&chksm=fd74d2e2ca035bf4408a132b6216c33bd666f22cf8f305ecb1f66b1e9fc6bcab7c855341e7d2&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220725-20220731)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664163104&idx=3&sn=8c2aa130714e1a192d0394163c15c0e0&chksm=8b5ee5d9bc296ccfc8d539e37f8125ce6d2d0def5a6215c099c9baf71ca66c31f0ca6bd34913&scene=58&subscene=0": "专题·漏洞治理 | 从漏洞管理到攻击面管理", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657044689&idx=1&sn=6dbc61c24a2236a48068f0d60ffc57fa&chksm=803fa80fb748211934160e55a2d35d211923f960cb7d0a0a1ce218ee5bb1037fc24c80f09e80&scene=58&subscene=0": "【漏洞预警】大华IP摄像头重放漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513283&idx=1&sn=5fbd02e0f95926cab449829326e0a8a1&chksm=ea9485a9dde30cbf0fb5e64dcbabdcbc1486306bbf9305df01d0f12022f30b84421fe09b167c&scene=58&subscene=0": "开源软件 LibreOffice 修复多个与宏、密码等相关的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247494694&idx=1&sn=561f31ff7b57eec886e6fa854d753ed4&chksm=c00741baf770c8ac229ddb5b1c2783aa31126879ede68c370ebd2c5a983abec8463d41f3bbaa&scene=58&subscene=0": "【技术干货】CVE-2022-33891 Apache Spark shell命令注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247529543&idx=1&sn=365025703684091eaf990bbc9441e31e&chksm=c1e9f816f69e7100947e5fc5e18b261c9404f7cb832a83c5dcaee0ae013c970428a947f1d071&scene=58&subscene=0": "从漏洞管理到攻击面管理", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513307&idx=1&sn=22a89560c545c2168147b9a9ea5ea9bf&chksm=ea9485b1dde30ca7cc5237c2be269090f21d72c259ef84384b2acc1e2f180f0899796cb4e52d&scene=58&subscene=0": "VMware:立即、马上修复这个严重的认证绕过漏洞!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513307&idx=2&sn=4a99112b9efeb2e33add05f94b1dd1d5&chksm=ea9485b1dde30ca77b26b217f677ed8a3be57d9c8750d39780781015e46520db5185da5bd1dc&scene=58&subscene=0": "开源web应用中存在三个XSS漏洞,可导致系统遭攻陷", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458460061&idx=1&sn=ce272d6b2b2f839d7eeeb2896eb90ee5&chksm=b18e2f1786f9a60139d90f95e9442cc01b6f218f6bd47045dbdeb25d946d7427ba16c9c24cd9&scene=58&subscene=0": "Android APP漏洞之战——SQL注入漏洞初探", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458460061&idx=3&sn=a69c59fbc79b634b447555f2ac76af93&chksm=b18e2f1786f9a601c51138cea6e9f663ec20364f3f7e629496aaac4c6a3207bec8e87cc4296a&scene=58&subscene=0": "VMware 修复CVSS评分9.8的身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4Mzc0MTI0Mw==&mid=2247494653&idx=1&sn=04654fc45de601b350b924e7a695ffc8&chksm=eb84b6a9dcf33fbf4d5745d8aa3eb15fe6d9777533149211cd7c90e8384af06070dad527997e&scene=58&subscene=0": "原创 | TP5 RCE漏洞总结", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649774718&idx=1&sn=bfd99d8e1ec1f53faf9aa6332d0de939&chksm=88936a11bfe4e3074c94cdfb9bc4dd06590acff22112bcea1b9ad7fc74f4b54d67576ab4515c&scene=58&subscene=0": "【技术分享】CVE-2019-10999 Dlink IP 摄像头缓冲区溢出", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2652963489&idx=1&sn=6baefa7c364a66dd13bf7d00a2e520ea&chksm=7e547f174923f60110d8873f928952672f5e5996867145905f8da1541cb309d078c5887dcbf7&scene=58&subscene=0": "Salesforce 解散中国团队;亚马逊17 亿美元收购iRobot;拼多多或将推跨境电商|极客早知道", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247547486&idx=2&sn=e0966f8b2f9644ca448d88f4c3904d9f&chksm=e915ea64de6263729e2879bf5732859e9ae4d364d5f66d69723470b7890bb2747883701dc9cd&scene=58&subscene=0": "Nomad Bridge漏洞利用被窃取1.9亿美元", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458461061&idx=2&sn=510e05c01a9daf99303c2533d446dc58&chksm=b18e130f86f99a19b1beb386becb0cc1cbe4396195ac6207d298610b756d1ecaa6d295893a43&scene=58&subscene=0": "推特零日漏洞遭利用, 540万个账户数据泄露", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458461061&idx=3&sn=c938a6d4e2238e7f16f544a361b68e1e&chksm=b18e130f86f99a19b9dd5df7b9b36730bb7b51ff317a1f2d42e7f6527902f8c204146c62d04e&scene=58&subscene=0": "Intel CPU漏洞研究,为你深入详解三个史诗级的芯片漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664163407&idx=1&sn=bba90a6df0087ce53b60c6ce39337bca&chksm=8b5eeab6bc2963a065ab8ada4610a998e3f471930ce2ccbcc68dbd398b57b9a1cf66c4ffd759&scene=58&subscene=0": "专题·漏洞治理 | 基于漏洞情报的漏洞运营实践", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492190&idx=1&sn=a5d34ff81f7a66d20199c5624eba8311&chksm=fd74d297ca035b81c4d85fad0854c29f8cabdc8a88f8c8e16a0c396c08545ff8711f660d8fd2&scene=58&subscene=0": "CNVD漏洞周报2022年第31期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492190&idx=2&sn=2d56b61365ea8d1ccac9b91cfd476a8f&chksm=fd74d297ca035b81cc7dc8fb0954c993c3a8d75d54fe4ea920d6edd8d6edf31c7185ff4bbd9e&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220801-20220807)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497001&idx=4&sn=8b1be5437acacb51547fc8495d3c8d04&chksm=973ac64ba04d4f5d873eaea5688ef65bdd3a4fe0c969a9d7ae1c76f6154949d0fb35320be52f&scene=58&subscene=0": "CNVD漏洞周报2022年第31期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497001&idx=5&sn=ae452782cd545fe0e918e1d5d5ec9574&chksm=973ac64ba04d4f5dbc0ad6773be3e8f450721acc1d91b57c742ad4169a503f1e185e0b5c1ccf&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220801-20220807)", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247530341&idx=4&sn=6ec6f56f89a6b1ad2d302fe38c183d72&chksm=fa93c1a4cde448b2ef68770cebf7087e71ce2d2c527321b2a2d3fd9c85c9c4ed4c9da05b0f37&scene=58&subscene=0": "Twitter 证实,零日漏洞致540万账户数据泄露", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652012203&idx=1&sn=35dea29c4476aabcccf8b64082b6393c&chksm=f36f52ebc418dbfd7b287c798687e4fdeaf1e40b9b187a280f82bd6707e20f2b4f7b53eaa772&scene=58&subscene=0": "【安全圈】网传ToDesk存在安全漏洞,多家企业禁用ToDesk", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247508324&idx=1&sn=efb7bc67b4d6143aa7b8449055306d09&chksm=eb707f5bdc07f64de7316f698d374456b21b57f9ea95f8d3e964a041f8326ef05778b103f8d1&scene=58&subscene=0": "2022-08微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652012427&idx=1&sn=f05679de579fcad095e0434bfc05b209&chksm=f36f53cbc418dadd46220c3dafcb5260c88d1f289e7081b461c296439c9ce0bd616fd04ac5bc&scene=58&subscene=0": "【安全圈】南昌一公司员工利用管理漏洞获利700余万", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247547895&idx=1&sn=93f90d03d6e504c583339f273f69b217&chksm=e915ebcdde6262db69ffbde94137c4b8d783f071d43de32961fd686762ad577c1978ed262266&scene=58&subscene=0": "DrayTek 路由器爆远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247487458&idx=1&sn=ffcca5f2a5186e2fd492ce9b96b14fc0&chksm=c2c658e9f5b1d1ff5267e2acd785efdc592f692eb77737aeaa68ea4377943049a3dc570c8ce7&scene=58&subscene=0": "【安全更新】微软8月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247505152&idx=4&sn=a769ee5add4ccdd2ba325772f6493061&chksm=ebfa9220dc8d1b368aa7e5d1386f2f2bf4f06dd67f14ec1c437b98f74663d07fed3fd2fc5286&scene=58&subscene=0": "VMware vRealize Operations多个漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458461724&idx=1&sn=7d6ba28997f645f74b3c8d692fb7dd9f&chksm=b18e169686f99f80223eeb9691f49b066081214ac3fbc568ffdd0274b7330902071b9d2f5ae0&scene=58&subscene=0": "CVE-2018-8453提权漏洞学习笔记", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458461724&idx=3&sn=b01accf72a94dd6b078b746f74279f73&chksm=b18e169686f99f800a393c906225f4048977ee3cf48008688649eb86e1063e11ef9a69242919&scene=58&subscene=0": "实战CVE漏洞分析与防范(第一季)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652012756&idx=5&sn=193718d31969d1d6318c050364810afc&chksm=f36fac94c4182582f22a1acc0703473cfc657d17fd9827ce601db45d9c025414ecb6ed07ce2f&scene=58&subscene=0": "【安全圈】黑客利用域名开放重导向漏洞,发送骗取M365凭证的信件", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247530015&idx=3&sn=99deb500f6cb30b84e55c5ea79d0295b&chksm=c1e9fa4ef69e7358935b77cdca673c0482418be794a9fca7e52712b91344cc40efe8e8484a58&scene=58&subscene=0": "DrayTek 路由器爆远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247495634&idx=1&sn=2667a54fafa67a8ec6888265bc6c113a&chksm=fa523a6ccd25b37a64085f117f3e92cd9179c37875dc3459701260314944f4e9c7d6c79575a4&scene=58&subscene=0": "密码学赛题复现:2021-CryptoCTF(二)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458463012&idx=1&sn=168bcf8ed4e910a3ea4cfdea4541cc63&chksm=b18e1bae86f992b85098a855dbb9a8e410ee97441d13ad958d3d0840f94379f170e98a5f2fb6&scene=58&subscene=0": "使用AFL++复现历史CVE", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247495666&idx=1&sn=f651ce4168131bbeeec06f4dbe8c6eb9&chksm=fa523a4ccd25b35a464ca9791fe44b8fc80ed231b7100f12a7d29d7479361ce5c39eb096ba99&scene=58&subscene=0": "​密码学赛题复现:2021-CryptoCTF(三)", "https://mp.weixin.qq.com/s?__biz=MzUyMDEyNTkwNA==&mid=2247489695&idx=1&sn=73ddd0afa6d28f251f1587df081a1710&chksm=f9ee7420ce99fd36aeb156bbf64be632a5a657ff3064b5d96ae568973c17df268b11fbcd77a0&scene=58&subscene=0": "安恒信息入选2022 BlackHat USA议题《Windows本地提权在野0day狩猎之旅》大揭密", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247497793&idx=1&sn=4b04a57f780fb94bc221502b2f5d4840&chksm=ec1dc869db6a417f5eb71be95987804cf2f726b02cff5d5ca95364b9cc80685508b1cdc4175d&scene=58&subscene=0": "黑产团伙正在利用 ES 未授权访问漏洞实施勒索", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458463453&idx=2&sn=aafc9c9a5d35924c81bedf54574f7f40&chksm=b18e1c5786f9954158614d47027a32601e9f0b8bdea361f4aaa4acd4c8646a97a1c24ff0bbdc&scene=58&subscene=0": "CVE-2018-18708 TENDA缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247488054&idx=1&sn=9a46b6d32b1d251728973404afc5eaa8&chksm=971e7f34a069f622f44331b371851c2fb75d99c065a1bd2cea80c67c4d218c7c151eb2b92514&scene=58&subscene=0": "黑帽大会:关注供应链安全与资产漏洞管理", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652013257&idx=3&sn=bbd76c87449818524b67a03a78ca112e&chksm=f36fae89c418279f7137a4859870d6a2b6141cb797a50230cddb5fb807e52708af0fd25b73df&scene=58&subscene=0": "【安全圈】Zimbra认证绕过漏洞成功入侵超过1000台服务器", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652013257&idx=5&sn=1eae8bc64e361fc9871088b4fd2ac4f2&chksm=f36fae89c418279f9a3cf14da27802193fd029d79ffcbd5092f45aa49632d6799805060852ea&scene=58&subscene=0": "【安全圈】利用macOS端Zoom安装器漏洞 黑客可以接管你的Mac", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649774945&idx=1&sn=5ea02bfc392d1efea15fd93b16cb6d35&chksm=88936b0ebfe4e2187888ddab92206f38d872b106ec59f9307dc5b77e5a2721e3f6cea3661872&scene=58&subscene=0": "【技术分享】CVE-2020-6828:Firefox for Android任意文件覆盖漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652499130&idx=1&sn=497230524a0219419fcd2da31163b695&chksm=f2584f09c52fc61facea882b3dd75e362a2cba34b5e0b2489d9300e09e6dcaac60afc85ed3a4&scene=58&subscene=0": "雷神众测漏洞周报2022.8.8-2022.8.14", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458463986&idx=1&sn=465f3de16b425a0c11683f9d79a85add&chksm=b18e1e7886f9976e0317b3e4e976c03799a7172268e01db399a64421ca76e9793ce131d3a85b&scene=58&subscene=0": "Android APP 漏洞之战——WebView 漏洞详解", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247494688&idx=3&sn=5fc2c6e9372f299b65b9232c9c28a2f9&chksm=c1449e9df633178b7a2a182925114d38c55f2fdd68d4eb0fe6969e1889f6e73e88a5d16a0749&scene=58&subscene=0": "8月16日直播!斗象科技「新一代漏洞情报与应急响应」新品发布会", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247494971&idx=1&sn=c95cc0ed47f8d072f9a8424953f8c838&chksm=c00740a7f770c9b187c52d870302fffbd6ad853efbbff7d808b9e5252f4131c58ee8c43a5350&scene=58&subscene=0": "【技术干货】CVE-2022-26135 Atlassian Jira Mobile Plugin SSRF漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247530121&idx=3&sn=fd9da0b9b13c169a3c7a0366c6769918&chksm=c1e9fad8f69e73ce73e5a1cd8e7355fa413adcc0ea1308697f323af36a9aeeb9f1a682415f53&scene=58&subscene=0": "黑帽大会:关注供应链安全与资产漏洞管理", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247530121&idx=4&sn=f7fed57e6aef63a8dff0064ff5940592&chksm=c1e9fad8f69e73ce519a8670a2894cc3650b74753ab656f52bc29ad5807b27e289776c5c8dcf&scene=58&subscene=0": "Zimbra认证绕过漏洞成功入侵超过1000台服务器", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247489799&idx=1&sn=6b3842493bbaaed6eb55b155889b696b&chksm=96db12dda1ac9bcb075903d9ce33ecadd6fb55bd00546a567f0910643bdbe7b4690547b02bb2&scene=58&subscene=0": "8月16日直播!斗象科技「新一代漏洞情报与应急响应」新品发布会", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651117343&idx=3&sn=5519e317564cb5a4a7ad2dc77c2e34ab&chksm=bd1467cc8a63eeda4165f8620f83ceef479bbf2b850795bb70dd0f21503e63faf22621f3eae5&scene=58&subscene=0": "CNNVD通报微软多个安全漏洞,涉高危及以上等级漏洞56个", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247495711&idx=1&sn=067094678019f8e91b3b0beabf0ed95c&chksm=fa5225a1cd25acb7c61b649de2e23e1af8f442864375ac1ef6143675f0f541d5c49db72dfae5&scene=58&subscene=0": "Django SQL注入漏洞分析|CVE-2022-34265", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496847&idx=1&sn=a8f69c0983e07ffffa3d5e187eeb09b2&chksm=fe79d017c90e5901dec562d02ce090efadb4c9c87928eb4ee3c2b684a6fe2443f07d22abee20&scene=58&subscene=0": "Google Chrome 代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664163773&idx=2&sn=58c0dc18583d05daace5aefc8ca52f88&chksm=8b5eeb44bc2962526f98098ccc1f8d4596492aa86ceaf679145f8760a89d7a5e54494acb3cb7&scene=58&subscene=0": "专题·漏洞治理 | 面向实战的漏洞运营实践", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513606&idx=1&sn=7ef2bbe710ecd61f87d32d3a53d28db7&chksm=ea94876cdde30e7a698417a1e60f215d5f74440aeb15e6238bef618870a8d31d953006005405&scene=58&subscene=0": "苹果紧急修复两个0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513606&idx=2&sn=eb7c5b8b8637ed62d0be305f14e2ba9e&chksm=ea94876cdde30e7ac31840c96b22a9c1872036aff023b5d8f88d53f211f15811f84aede4f150&scene=58&subscene=0": "谷歌修复今年第五个Chrome 0day", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247530283&idx=3&sn=3a534193323cbc338ece358594931aa1&chksm=c1e9fb7af69e726ca9095249cd5f172361743fc9f7e2268e4fa72b7d2d1c2ed4966d142ffd76&scene=58&subscene=0": "Realtek爆出关键漏洞,影响多款网络设备", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247505349&idx=1&sn=d475739315f4bbf0af1813cdc103bf31&chksm=ebfa92e5dc8d1bf33451f3621992026d670b74cdb70071e89fe9977e52d3b9ab20628d1c4a55&scene=58&subscene=0": "微软近一年发放了1亿元漏洞赏金:平均每个漏洞8.5万元", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247505349&idx=4&sn=ae48c8ca9ac705ebb8f4ec7ae7053544&chksm=ebfa92e5dc8d1bf33164d3b90f7bb4b678aedebaef542b1db2c403f05d09aa562e351337ac5b&scene=58&subscene=0": "2022医疗卫生行业网络安全报告:恶意程序和漏洞利用是主要风险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652014237&idx=2&sn=bf27c24ad2592e96f9ccad3bb4fd7b1a&chksm=f36faaddc41823cb36f29938ef9f0c8961a09a0acd067de77f78563dd6758a9715c4345d6e30&scene=58&subscene=0": "【安全圈】新谷歌 Chrome 零日漏洞已遭在野利用", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247530674&idx=2&sn=d6e155446a1958e88299b54f47ff5b3b&chksm=fa93ce73cde4476502cb06f01f20f1e3ca80fb8e2fee81464406b63ec2eacaebe8b76520b269&scene=58&subscene=0": "英特尔新型CPU漏洞可致敏感数据泄露", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458464924&idx=1&sn=49bdcb7acd7abb1eda7ad1781278f309&chksm=b18e021686f98b004f5f9c7b20fa0ab4019cec2fbf77d02c0326286f0c82ef74520314fcb24c&scene=58&subscene=0": "对一个随身WIFI设备的漏洞挖掘尝试", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458464924&idx=3&sn=cc3a9b9f7d7faaab16da6cc313b77172&chksm=b18e021686f98b00463c9ca812dd7383d635165c16a960f30d7e0be25fb65dbee51e3a357902&scene=58&subscene=0": "精品新课!Windows内核漏洞分析与EXP编写技巧", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496858&idx=1&sn=3ebee0d102cacc44bca58f2407829c82&chksm=fe79d002c90e5914d23e646d2f60046e75daa8623d45d945ea819c799aa75dd051494a301a95&scene=58&subscene=0": "Apple 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492256&idx=1&sn=194aa7c5c515750109b74663c7a34c64&chksm=fd74d269ca035b7f1c7dd50c9563f2151e807ed87ed85cf24f08f23cefce528170932f6e67e9&scene=58&subscene=0": "关于Apple操作系统越界写入漏洞和Apple WebKit越界写入漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652499286&idx=1&sn=071258b97a3a9f3c83d39050bbcc4644&chksm=f2584ee5c52fc7f3a4b5b99e55a399ac4c3fb134bd822efcd448c6aff17ae6e998328405095e&scene=58&subscene=0": "雷神众测漏洞周报2022.8.15-2022.8.21", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497254&idx=1&sn=b1d0d4f0a90a23e38c8f1d50c971b9bd&chksm=973ac544a04d4c52391876d2c3a42f1c30e5692313ac1b1351ff1c453780635fa1fd089da4e3&scene=58&subscene=0": "CNVD漏洞周报2022年第33期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497254&idx=2&sn=c315e26c488784c125e48118b051cd2f&chksm=973ac544a04d4c5299ff6d62e0deba5fc665978537da0f02d672180a2d41af31ebd49475e66d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220815-20220821)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458465022&idx=3&sn=34e5fb35ba5d37300b751f6348f1a016&chksm=b18e027486f98b620d51813f78145575aa0fb0b8df9b3e5feb89ffbdd93ee5e5d7adf707c15e&scene=58&subscene=0": "苹果曝严重漏洞冲上热搜第一,黑客或可完全接管设备", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247548798&idx=1&sn=804550d22ddb8f6f520f01faa3ee1e29&chksm=e915ef44de626652c6d637c900f777e5cea90d6e37031fe58837055b25ea4c5394408383a155&scene=58&subscene=0": "亚马逊Ring安卓app漏洞可窃取个人信息", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247530712&idx=2&sn=a8b2fec722331dbb746248d9408859ce&chksm=fa93ce19cde4470f51e918ec054323e06fae1819ed63fa196a3b58d0957036016ef459730564&scene=58&subscene=0": "微软修复\"DogWalk \"0 day漏洞和其他的17个关键性的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513642&idx=1&sn=c27beda5a40b560ba74580a1caf6d022&chksm=ea948740dde30e56257ab398f0d4f9790aad2d2f22465534355d2e72193d043fece45a36d8f6&scene=58&subscene=0": "微软详述严重的 ChromeOS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664164369&idx=3&sn=99f895e3826dd8c833d98c4d16083c3b&chksm=8b5eeee8bc2967fe5dd87157286c49ff676d07721322815c31afef0d89160fb92658ecce56d9&scene=58&subscene=0": "CNNVD | 关于苹果多个安全漏洞情况的通报", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247505448&idx=3&sn=ff7442735de8b8e1161a62e741782f21&chksm=ebfa9108dc8d181e0553fec08ad322ee646a8950defb82fd0fa1239a1ea2ed78e0a6fddb8f88&scene=58&subscene=0": "GitLab远程代码执行漏洞 (CVE-2022-2884) 安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247530494&idx=2&sn=e2f2ba8bbe39e4272567fe9e0a5d26eb&chksm=c1e9fbaff69e72b9063eb9d42c39d816addf4169a2e37ba91fecf915364d0400201628e1a30c&scene=58&subscene=0": "2022最危险的五个API安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247530494&idx=3&sn=2330973ada932f8ce314690abe87d965&chksm=c1e9fbaff69e72b9417b4a83478ef497db3fd1ec7a59f603aad2f3f4afbb30ced3a7a91a77f8&scene=58&subscene=0": "黑客利用零日漏洞窃取General Bytes ATM 机上的加密货币", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247495906&idx=1&sn=0ea6a9ce027d4a062f36ea81cf5026bc&chksm=fa52255ccd25ac4a995aba34668d33e20df4494de6c2f15c8c7f50b8ba8002608d9657518b92&scene=58&subscene=0": "SourceGuardian代码混淆的还原分析", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247549005&idx=1&sn=0ab806381d2637fc37e19c5d58384fcd&chksm=e915d077de6259610a5afc0d25043a2779a91b634922b0569b4eafee4e11ff0ea5573da2e148&scene=58&subscene=0": "超过8万台海康威视摄像头受漏洞影响", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458465700&idx=3&sn=8b93b0d13f775d53299314d9fd9011fa&chksm=b18e052e86f98c3827c75517863bd2cc1f973468ee593c9988fa189438462f99d8f00b660560&scene=58&subscene=0": "GitLab存在严重漏洞,允许通过Github导入实现远程命令执行", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247530546&idx=1&sn=441d3c4a1f7444bbb0d41fd620ecee12&chksm=c1e9f463f69e7d751e99cbebc3f215e1176755225a2e6c0f3fe2e9cb6d5a4bccf2ecfb94428f&scene=58&subscene=0": "2022上半年XIoT安全态势-XIoT环境下信息物理系统的漏洞披露和补救措施", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247530546&idx=3&sn=9f9780e145a4a4b627d2f08ecf308a0b&chksm=c1e9f463f69e7d75fe2c56b1c8388fc608aa3eb0cd26dc738a9867011bef8fd689d85529c6a7&scene=58&subscene=0": "推特前安全主管控诉存在“令人震惊”的安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247495290&idx=1&sn=a6fb2282c9208d2eb9b68a120aaac1be&chksm=c00743e6f770caf0cc12fb695389d94dc4c5016e5964e57849cdca213ab99f7bd99adf870e8e&scene=58&subscene=0": "【技术干货】CVE-2022-0540 Jira身份验证绕过漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247530818&idx=1&sn=7186baa61312bf8dd44abdbc526d6302&chksm=fa93cf83cde446957058e12471d6f7e4138ed08a0901f3fd56f5178f273ce05d5290e83e6b35&scene=58&subscene=0": "微软公开披露关键 ChromeOS 漏洞的细节", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247530818&idx=3&sn=82b5fbaa8965465c27b7c7c0d695f886&chksm=fa93cf83cde44695c5865d4239b2ef9384ae1aaedfb2c256ed2204ad93be57a2ad7c3ebc4c2a&scene=58&subscene=0": "超过8万台海康威视摄像头受漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513692&idx=1&sn=0f726f793b5bfac0b6d002b8506c64d9&chksm=ea948736dde30e204ff4f91d0084bee437def61910139696409b7b268f10c0ae0f63b07a54da&scene=58&subscene=0": "以太坊基金会设立最高100万美元的短期漏洞奖励计划", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247530874&idx=2&sn=33bcba2e1a1127ce540ee20e737a72ca&chksm=fa93cfbbcde446adcd73f5632c2387e8c38030d6bc81ab8bd6cec68143e0bc6d0ea5a1e70cd2&scene=58&subscene=0": "GitLab修复了CE、EE版本中一个远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247487993&idx=1&sn=9c6d388e20779e343c6885fd5bc257fc&chksm=fad4cceecda345f84249d2130ce7fffc7e8b7fa3e1b7dd28135b1d9d96af003d8466e7464c63&scene=58&subscene=0": "Java安全学习04-反序列化漏洞-动态代理-CC1链-入门", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650964259&idx=1&sn=70e0aea69c8255ba44f1b9738085b4f0&chksm=8079c311b70e4a075046e8e6bf55e21d786b99cc24bdf82deecaa8774ab152f770a55ab3b645&scene=58&subscene=0": "原创Paper | Cisco RV340 wfapp 命令注入漏洞(CVE-2022-20827)分析", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247530607&idx=3&sn=2bdefffa908eb5a777e46085c0c1ac39&chksm=c1e9f43ef69e7d28c65ad982ec538509d2d338f97c198379c9fad411170a5095cfc74ea91a3d&scene=58&subscene=0": "DirtyCred:存在8年的Linux kernel漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651117994&idx=2&sn=6668cac77efe9ff8f69b98c0129c0403&chksm=bd1469798a63e06f3e7c8e124a257c34f9b8b8cad79bc73c12c9757ad90771fc6eb4b023733b&scene=58&subscene=0": "安全头条 |2022年中国网络文明大会主论坛在天津举行;CNNVD通报关于苹果的多个安全漏洞情况", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247495396&idx=1&sn=71230f1c8ce8f5c8ecac51978dd8077f&chksm=c0074378f770ca6e92e338bd326eb30092102659ea54d54c417192d351e972cc491c0a9ab47f&scene=58&subscene=0": "【技术干货】VMware 系列产品之身份验证绕过和JDBC注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247490371&idx=1&sn=2d13096f981f40a65e1ad68d0d2b1acb&chksm=96f4042ea1838d38f4df946c1fb0ed0ed0ea0793c2d4ebba3b54f9500de0403dbbd52c252b1d&scene=58&subscene=0": "漏洞风险提示 | 畅捷通T+远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492332&idx=1&sn=59802f822b19f53158177e6b1f68430a&chksm=fd74d225ca035b33062e86bfc04651db0ad187a2ca5fdccbb56571c38e6bae52858f25eac324&scene=58&subscene=0": "关于畅捷通T+软件存在任意文件上传漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247549437&idx=3&sn=e22600143bef1de0f958dae29a26d10d&chksm=e915d1c7de6258d1ea00b4e22021adc9b24230d04705a33cb30bcc1955243e8b310d0b5ad67b&scene=58&subscene=0": "越来越多的黑客利用defi漏洞窃取加密货币", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247495793&idx=1&sn=94b38eda28383d4649bc2d265774e2f4&chksm=ce96bd4ff9e13459a7cb521db67c7a142c4810c6080414ae4f360dce9ad824b86f538c0ae589&scene=58&subscene=0": "【风险提示】天融信关于GitLab存在CVE-2022-2992 RCE漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513721&idx=1&sn=9ccc0511cb8d6c7134eb54700130f1b7&chksm=ea948713dde30e0503874ed6e5ebcd5a90933ef86048fd21466e73431420b799a861f800164a&scene=58&subscene=0": "谷歌推出开源软件漏洞奖励计划,提振软件供应链安全", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651118294&idx=1&sn=77ed86354261bc5af0e2c80be2c8b557&chksm=bd146a058a63e313b0d99249e6a5e142fc6731dff74b8d839cb7475b42ce1b97d81ac921838c&scene=58&subscene=0": "CVSS评分机制会将企业漏洞管理引入歧途吗?", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247495520&idx=1&sn=ea128a5304514cddbb0c6d762819554f&chksm=c00742fcf770cbeab05a152a6a855aa5f18bb0a73e7e526dcaf1cad64b184decc63d879400d6&scene=58&subscene=0": "KCon 2022议题分享:自动化API漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496892&idx=1&sn=bbe9a07e0dc92a4994baeae3e2aa429b&chksm=fe79d024c90e5932efd8d66b9775cd5e419f5e97726e8669bb9fdaf042a7ddc6cbc08aa4553c&scene=58&subscene=0": "Google Chrome 沙箱逃逸漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652499490&idx=1&sn=754ae03073da4e0d54b7817a64381466&chksm=f2584d91c52fc487b14aa8f325e426dc528ccda1546976ad25a7b7109c37ae8ffd9a15d5686b&scene=58&subscene=0": "雷神众测漏洞周报2022.08.29-2022.09.04-4", "https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651138298&idx=1&sn=cb42741ad65c10086e00346981085063&chksm=bd50b8ae8a2731b86d2f5822da1697bea36adba72e0a1fa0ee415718fecbffbcc465e43abdb0&scene=58&subscene=0": "【漏洞分析】CNVD-2022-10270分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513786&idx=1&sn=6db5fbb61270cf614d6605adb52ca99c&chksm=ea9487d0dde30ec6b7e1631c93975e24741275c2ba254fe0dac3f5f494c3000a8cedb03ff890&scene=58&subscene=0": "QNAP紧急修复已遭勒索团伙利用的0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513786&idx=3&sn=07ef04262f4e5c1f68019bd0eafffe20&chksm=ea9487d0dde30ec6ddb7fffd17fcf18c63f5f07f66769788f6748460497129ab130565fc545c&scene=58&subscene=0": "扩展物联网 (XIoT) 漏洞激增,安全压力倍增", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458468074&idx=2&sn=06eb27c1649bd4e3a3e43a46a9500add&chksm=b18e0e6086f9877644ba0de33658232f99213d1b1b074342260031cb529c1b7ad1b89b2e0204&scene=58&subscene=0": "V8 Array.prototype.concat函数出现过的issues和他们的POC们", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247495601&idx=1&sn=71c76d41dd00ba2aec9ee1f6344ee12f&chksm=c007422df770cb3bc974d42581d905ffaa99510683fe2a7bdd41a583186f88244bafaf99e774&scene=58&subscene=0": "API漏洞自动化测试、安全工作流编排-星阑科技在Kcon黑客大会进行精彩分享", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664165218&idx=1&sn=2abc5a81d2b47c85e6d021f2c1970df1&chksm=8b5eed9bbc29648df22152a192d14fa30a6a6a2243b963282a3fee91630e6504981266b17b8c&scene=58&subscene=0": "重磅发布 | 《2022上半年网络安全漏洞态势观察》(附下载)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247549956&idx=2&sn=a47885512dc1c9fdc3e0800df8752de0&chksm=e915d43ede625d28e34e5bbb52cc0f617a1f36fc859e63018a34cec25ef35f0ec262c9f7448c&scene=58&subscene=0": "抖音国际版安卓APP安全漏洞可劫持用户账户", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247549956&idx=3&sn=24d47c77f042ee08d69fa0ca9ccdc786&chksm=e915d43ede625d2893f05e5b057601a9043c723782e749294bf50326605eaa20f0f59d4dcf0d&scene=58&subscene=0": "如何在当今不断变化的威胁环境中,实现漏洞管理的现代化", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247550051&idx=3&sn=88924f43f8f8ed59b1575c7dbf08fbc5&chksm=e915d459de625d4f3d39375cf8c801cc6a44db4fa1ab98f3eb26be8726277af57a09b5781c20&scene=58&subscene=0": "ZecOps 对 AliExpress 平台购买的 Android 手机取证分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652016310&idx=1&sn=0f4193a2321197b6b8a7bfcf7ecff27f&chksm=f36fa2f6c4182be0b48ec33d6c5aa8aef24ea8d329b38067874ef21294bc1ff9b6b21399047c&scene=58&subscene=0": "【安全圈】800万美元可购买破解任何智能手机的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652016310&idx=4&sn=93905da2423a0214694ecd87a795e2f3&chksm=f36fa2f6c4182be0dbba265194064143a597d4e7d89ea97688dd69275296465350af5184e00f&scene=58&subscene=0": "【安全圈】CICD管道中的代码注入漏洞影响Google、Apache开源GitHub项目", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247495609&idx=1&sn=8db06764b675fd1a703a84b753dc5837&chksm=c0074225f770cb330379ff622acc3d75b3991f3a53fcf7958931a65c12f7cec4a6c8f84cff07&scene=58&subscene=0": "API NEWS | Bitbucket 服务器中的命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652499643&idx=1&sn=e3f3fc8f34444e02d6d98b03c2fd4218&chksm=f2584d08c52fc41efd5dc4fea1f9e9b9f2c35d8531c5c90d251bc8ae0b1aafd4b49eb3a1e714&scene=58&subscene=0": "雷神众测漏洞周报2022.9.05-2022.9.11", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247496393&idx=1&sn=2e9b49f125f3e1213066ef38c214c5eb&chksm=fa522777cd25ae61f3c4710f8d30f952e8c54e7fead74bb15b25a18d3958c3e80875c2c41598&scene=58&subscene=0": "Microsoft VPN远程代码执行漏洞分析1-CVE-2022-23252", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247495686&idx=1&sn=69667841f86fbf5f4743e7a76d5a42dd&chksm=c0075d9af770d48c7980bb487b21fea572848511a162f8e2a2f246f82b346fbcc4f69857971b&scene=58&subscene=0": "【技术干货】CVE-2022-22978 Spring-security 认证绕过漏洞分析和漏洞挖掘思考", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458469629&idx=3&sn=cb463369b466e7dc9945310ad7c5912b&chksm=b18e747786f9fd614cf809c09eccd5b78d9166b96d451f6f356ac22e37bb92c4ebea477f7899&scene=58&subscene=0": "修复两个零日、五个严重漏洞,微软本月累积更新发布", "https://mp.weixin.qq.com/s?__biz=MzU1MjgwNzc4Ng==&mid=2247503981&idx=1&sn=d273e181fa33ce870f0e361e118437cc&chksm=fbfeec68cc89657e8a48ce9e1243d8fc99b1d1301e4bd162df88de3f9631657681d6a181de17&scene=58&subscene=0": "新型漏洞威胁如何高效防御?9月15日19点腾讯安全专家带你揭秘", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247496920&idx=1&sn=09fcc34d768b47dd47376d87691593e6&chksm=fe79d040c90e59569dc9862f0352e851df661195710ff9869713259eafbf2d9bb3bd583938f1&scene=58&subscene=0": "微软2022年9月补丁日多产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247500606&idx=1&sn=3459777890e655e63f94dcc8acd6b09c&chksm=ec9f1a4ddbe8935b4c47fc510f393c39499a7255451891eeae70f1fb60bae6d2902adecd901f&scene=58&subscene=0": "新型漏洞威胁如何高效防御?9月15日19点腾讯安全专家带你揭秘", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247487663&idx=2&sn=40d714ecfa2e2951f59b96b5b71e5e19&chksm=c2c647a4f5b1ceb28051d8ae201d907e13d85f0d2829aa6f4f76f84bd5475c697e1607869c4a&scene=58&subscene=0": "【安全更新】微软9月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247495845&idx=1&sn=757f3a4e7883d23f00831a7b433e85df&chksm=ce96bd9bf9e1348dfeddd178b9971831b97160ae40dfd0f6f98c2f86ceb3ba81ef52801647bf&scene=58&subscene=0": "【风险提示】天融信关于微软9月安全更新中重要漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247496409&idx=1&sn=dfb92078804e6eed5a061cec8c088faa&chksm=fa522767cd25ae712b0c3fdc33d582db11cd1a97585e0f3303b8071275b3db1546086c4ae8e7&scene=58&subscene=0": "PbootCMS历史漏洞分析 0x01", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652017030&idx=3&sn=3461a82798e3ec0a48b8bcc094819de2&chksm=f36fbdc6c41834d011a1661fa32e34d8e6f59376bc6b83b10d6188c6f423ae67541ba02b4ae0&scene=58&subscene=0": "【安全圈】Talos警告Lazarus黑客正利用Log4j漏洞入侵美国能源公司", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513971&idx=1&sn=a96bbeda0b7a0d9df01ce667900321cd&chksm=ea948619dde30f0f90befd2e027230569d8ee5170c881a341474a921aa2ee684ec8bcd9c03d4&scene=58&subscene=0": "微软补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513971&idx=2&sn=e4ccf27e2628af5d0016b4b5f9385131&chksm=ea948619dde30f0f97cc248ac9a1d2d7798573ed43876f19e4b1849ebe2ef2a02e8627f3a28a&scene=58&subscene=0": "趋势科技修复又一个已遭利用的Apex One漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513988&idx=1&sn=512f50328bad39cab97a240c184bc7ce&chksm=ea9486eedde30ff8572a7444f4f52b015f9bfd058124dd3d017529d471f6db94e6474fea07d9&scene=58&subscene=0": "优步被黑,内部系统受陷,漏洞报告被盗", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247513988&idx=2&sn=d8e2aa2199ecfa383521908c1073c29b&chksm=ea9486eedde30ff81f3dd92049688847d298f700e6c02f09be03797789e7985c8a14915576a5&scene=58&subscene=0": "开源CMS TYPO3中存在XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652017403&idx=5&sn=d7e367f0feb39def28f9fda5c7f90ac1&chksm=f36fbebbc41837add953d530035179dd90cf167ac95d69488c53bb7042884b53d812f33ba797&scene=58&subscene=0": "【安全圈】CISA 在其已知漏洞目录中又增加了 2 个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652499819&idx=1&sn=796b70af8f78e533b8336ad39c1c6f69&chksm=f2584cd8c52fc5cee0b21e61cbd7db0c63e6d11d7f51677dad213a8f3a340dba1754bd4bafe8&scene=58&subscene=0": "雷神众测漏洞周报2022.09.13-2022.09.18-4", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247496425&idx=1&sn=f0c3c882070605665fc0f700ea6c6e4c&chksm=fdde8c6ecaa905781a105137828a1c2e7b0705cb2260c76ffad5f997978197627fbecc0b4e36&scene=58&subscene=0": "揭秘以太坊 Vanity 生成器 Profanity 私钥破解漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247488155&idx=1&sn=afdbe0f1cb8e91c0517f25c74289b6cf&chksm=fad4cf8ccda3469a8804c422f609401e3875d0596aceaed715f119301d211207a315b6c358fb&scene=58&subscene=0": "CS4.5粗略预防CVE-2022-39197 XSS RCE", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514056&idx=1&sn=489ac21f2dc7107d9761186e3dd7d283&chksm=ea9486a2dde30fb4eafe6158ad59e258c50a18c960de4de7dea19ef5248f190232c7019708d1&scene=58&subscene=0": "Cobalt Strike 远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458471704&idx=1&sn=7374ced93133efd064bb0e7316cd8087&chksm=b18e7d9286f9f4840a35d6618f2fa625359b1095cd8ca266fc48bfc9576e2ff0d0835b9e4ef0&scene=58&subscene=0": "CVE-2014-1767提权漏洞学习笔记", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514082&idx=2&sn=a353a69d6d2c5a3f065ae133b67f4256&chksm=ea948688dde30f9e50183652d6391b23fd17af36c96c1ebcf3a7f40b0034288e9a22f16cbcd8&scene=58&subscene=0": "CISA提醒修复Zoho ManageEngine RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247491539&idx=2&sn=72b1c1dc318fa56cf706394a00b34692&chksm=fd772f1aca00a60c272a259645a67b793223989e3dfb851a7fe40540e55d3f07dc63d25990fb&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220411-20220417)", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651114266&idx=2&sn=d46cc7c19d763eff8878931ac9831377&chksm=bd147bc98a63f2df1b5c4b6b1a045c14c9123701b71e9f039b154fc398479f88e9985e2d8b5a&scene=58&subscene=0": "CNNVD通报Microsoft Windows Support Diagnostic Tool安全漏洞,23家安全厂商提供支持", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247494357&idx=1&sn=b4bd92c79d8a7812aeea975d6cda69c3&chksm=fa523f6bcd25b67dc4ebaac554c2b09719c95aca595aa852ead35aec080902dfcd00dab27e15&scene=58&subscene=0": "Windows UAF 漏洞CVE-2021-34486分析", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247529742&idx=4&sn=e4549250fb4e2e70d51067e4aeaf51eb&chksm=fa93c3cfcde44ad91277c0384c08cf1b9a358aa6326b6e368355617565fbfc3ac6e086a8e736&scene=58&subscene=0": "针对WordPress插件漏洞的攻击数量激增", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247548434&idx=1&sn=b3bf5f9241784ef67399678e53f24149&chksm=e915ee28de62673e936ee21e9ac95f10be78561eec0e8a7599ead8c6743641ee92040f00dd0a&scene=58&subscene=0": "小米手机可信执行环境安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247500554&idx=1&sn=d5d6e289e3e03f249f99d92fd62f9f74&chksm=ce5de16bf92a687da706dd32f2b317d52cb08348ad01e6dc080e66be429f8a70cb0713eddd12&scene=58&subscene=0": "悟空crm漏洞新用", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247495884&idx=1&sn=82c81cafe16e8158f9c32923e14fce50&chksm=c0075d50f770d446333878ac4b6e889ff44d1913228ac3c95b802f7ece1622432785fd12d156&scene=58&subscene=0": "【技术干货】CVE-2022-34916 Apache Flume 远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkwNzIxMDUyNg==&mid=2247484915&idx=1&sn=82f13aaded590b6134c85928adb82888&chksm=c0ddff82f7aa769489b6d69baa3a2b26bf659e36e0df7191226e029165b5824409e6c916c25c&scene=58&subscene=0": "基于SBERT孪生网络的漏洞描述归一化", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652019240&idx=3&sn=6c1dd642eb051751f5d6a042205f1f26&chksm=f36fb668c4183f7e982b5c294ce06c789d467f25200814a0f123e730987b11f11c9f74cb7a52&scene=58&subscene=0": "【安全圈】微软称两个新的Exchange零日漏洞已受到主动攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3NDU2MTg0Ng==&mid=2247493588&idx=1&sn=99c7a429bb57cb121f8c871814cea3d5&chksm=cecc4f8df9bbc69b5f5234417c06e2379a38490660699f9c5e6b9eabec241d3f8ec711b64556&scene=58&subscene=0": "GLPI htmLawedTest.php 远程命令执行漏洞 CVE-2022-35914", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458473853&idx=1&sn=cc6c0e7d75f02b4b34edad2bd0525349&chksm=b18e65f786f9ece19e09b9e261ff88f235ba67ffb4045b5e66669bcdc70a6ca550edd5e96ba9&scene=58&subscene=0": "2022 SDC 议题 | 国产智能网联汽车漏洞挖掘中的几个突破点", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514120&idx=1&sn=875f2a8038dd18f4393f68e4958721d8&chksm=ea948962dde3007476979db37549927911d0a40f66cd92734aac2576932e65c02e814b4d2292&scene=58&subscene=0": "微软证实称两个Exchange 0day 正遭在野利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514120&idx=2&sn=e9b6c1a8e128a9eee70880b0fc3cce94&chksm=ea948962dde300745ee1435a5b05de3016d29440d127c2f0dad65ea6b5b80bc83b6a301afaec&scene=58&subscene=0": "Fortinet:立即修复这个严重的认证绕过漏洞!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514120&idx=3&sn=70433e477638c9c6b3ed925cbdb9cb76&chksm=ea948962dde300745c90d6d6c46d60584f699d5afcb625367d464f79bbbb7bf930be487ee4b9&scene=58&subscene=0": "JavaScript 沙箱 vm2修复远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514120&idx=4&sn=2326059ddf5ddf3a36ed6009c070e3fa&chksm=ea948962dde300745ca4da0f4fd5f0139c312973295e9d112ead5f8df77010a6fd05ed83ebd7&scene=58&subscene=0": "研究员发现 Akamai配置不当漏洞,获得4.6万美元奖励", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247551853&idx=2&sn=2d846fc97f966aa40945a159c1f271e8&chksm=e915db57de6252412a01a8e5d5cf42923de37f8a819c10ee3f09fd02228f71c5b64055dd4072&scene=58&subscene=0": "新的攻击活动利用了MICROSOFT EXCHANGE服务器上新的0 day RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458475098&idx=2&sn=a70d164c39ff37d3b983f97d4a94a61c&chksm=b18e6ad086f9e3c65c1fbb5cc0f1946976397406f7193f8d6e58f47e4867829294012ab75648&scene=58&subscene=0": "一个密码学漏洞导致一亿美元损失!某虚拟货币交易平台遭黑客攻击", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247551871&idx=1&sn=bd2a46a697628ef293d7b08dcd57ec5a&chksm=e915db45de625253c2e8df5bb617dfcaf97bcd79854f13adea280e6248da04ebdc780a89c860&scene=58&subscene=0": "研究人员在宜家智能照明系统中发现漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652020254&idx=3&sn=ce1a2a77f4185c5fd8b146e3b3cd790d&chksm=f36fb25ec4183b4830c7a78a61ce39ec4333a9dde92466c334547374640ede9f58283c218f67&scene=58&subscene=0": "【安全圈】macOS Archive 工具漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657044860&idx=1&sn=2ff650583175cf79e13410fbea2b633f&chksm=803fa9a2b74820b48f19d2b405d13ad5b5d149bf325eb88067a05be827a036e6211105d866c2&scene=58&subscene=0": "【漏洞预警】Fortinet多个产品身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458475529&idx=1&sn=e671849b648ae1495d898f2f6d2ce96a&chksm=b18e6c8386f9e5950a273cd6d31bda88a81e428b8a93489476c57810e5c4f0a5262d0d989c48&scene=58&subscene=0": "2022 SDC 议题 | 从后门到漏洞——智能设备私有协议中的安全问题", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247552045&idx=1&sn=97beaa36cf2d426426e8f71be82014ee&chksm=e915dc17de6255012ef33cb9f2dd96090317f048d4650f6f009322c007a6100f330393939bd4&scene=58&subscene=0": "【技术原创】Sophos XG漏洞调试环境搭建", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247506309&idx=2&sn=5855170cbea5718ba41bd7d0f4270ccd&chksm=ebfa9ea5dc8d17b35ad83875cd8d48130d3b7923fabc75eb83870f80f843543ef5d1496a9b0e&scene=58&subscene=0": "这个VMware高危漏洞已发现超一年,官方至今仍未修复", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247531881&idx=3&sn=431fbbfdd6d4289044979c28af52d62a&chksm=fa93cba8cde442bee88d05d015a39bcc32594e774108ceff530298c9ebcf698d371be8636943&scene=58&subscene=0": "游戏机黑客披露了“实际上无法修补”的PS4∕PS5 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514198&idx=2&sn=7355930428f40ec6edfaaa22d7aee746&chksm=ea94893cdde3002ae09057a6941995beea58bffa9829737ad255d7b107096c28655b9bb0dfb1&scene=58&subscene=0": "Aruba 修复EdgeConnect 中的严重RCE和认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247496915&idx=1&sn=f41ce8a944db1f5895aacb5bfdd94797&chksm=eaa97cf3dddef5e579d473cc823c5e15090bcf64d77a4f3460e97bc9c421edfd2070e52184a6&scene=58&subscene=0": "重温OMI:分析CVE-2022-29149,Azure OMI中的权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247552091&idx=2&sn=445cd3cc9b5c1d062ed8c6c4a99dcfc4&chksm=e915dc61de6255774a3e4eb5b6e47ebc8f30d7aaac158cde1aeb35ef18677cfd20d370b07936&scene=58&subscene=0": "VM2远程代码执行漏洞曝光", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514220&idx=1&sn=750a288be57eb8452af469145908204b&chksm=ea948906dde3001079435980a74be8cd2323e4db3b1658dd30655296b28c8fa54cacfd9002d3&scene=58&subscene=0": "奇安信代码安全实验室研究成果入选Black Hat和POC安全大会议题", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458477025&idx=2&sn=c1d30434d9df949a29f0acb219c1214a&chksm=b18e516b86f9d87d7ab1131d064b815b4057d53d80f43a64d033635efc6d40be4aa915335daf&scene=58&subscene=0": "CVE-2021-22555_Netfilter堆溢出提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247486693&idx=1&sn=fa9c3e02922c098748e9f5aeef4b7b36&chksm=fa5aa208cd2d2b1e8fde199fe6520edef65d69731b7b2f62350d9045d2a26f12446984495746&scene=58&subscene=0": "推荐 | 基于Roslyn实现C#脚本代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247496080&idx=1&sn=0c8c93506c6b7c979228b89ccc50ff3e&chksm=c0075c0cf770d51a8092d98e8bc2094aefa9a547b0928ad085e10457676fa57de12e22368d99&scene=58&subscene=0": "【技术干货】CVE-2022-25237 Bonitasoft Platform RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652021173&idx=1&sn=7718a1c0580e5003e4a8ff222a1c3101&chksm=f36f8df5c41804e3960c4adc2e697c26ce4b1b97520b531694d69334950ea509a07313af7162&scene=58&subscene=0": "【安全圈】利用平台漏洞“薅羊毛”被判刑真的并不冤", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657044865&idx=1&sn=ff932955d7bcf4f68b03b758ba4913ff&chksm=803fa95fb7482049e6d89a80ed79269bb84b92c6878d51e85b8ec8c05683cab94aefe26c87bd&scene=58&subscene=0": "【漏洞预警】Apache Dubbo Hession反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652021860&idx=1&sn=9d4de6b51a485c0b181f8ce8fd53ee1b&chksm=f36f8824c41801329bf0778a74c3fafc27058e9fd28a0d041ea685d913c3c6a7a20960565617&scene=58&subscene=0": "【安全圈】团伙利用游戏漏洞倒卖虚拟货币和道具被判刑!", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247496153&idx=1&sn=c7b6380da70f19597139eccbc3d5ece4&chksm=c0075c45f770d5531554ded20d88f4fb281938d1d64c9766ef97c53de7483945cab03c773fa7&scene=58&subscene=0": "【技术干货】CVE-2022-41852 Apache Commons Jxpath命令执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247532094&idx=1&sn=205506e690121d4569b673e7a408d989&chksm=c1e9f26ff69e7b793d012dfd60aa8a00d4624a8ea2ec7a4fff14aa26936cd03477a7f12dc95d&scene=58&subscene=0": "OPC UA .NET Standard Stack可信应用认证绕过漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247532214&idx=1&sn=3f16187309ec36daaa844062ec769cb2&chksm=fa93c877cde441616fda0e7930ed46bdd8227679670fe12f6824c182169be2ce232ddab464b4&scene=58&subscene=0": "原创 | OPC UA .NET Standard Stack可信应用认证绕过漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514319&idx=1&sn=10f6c5afa8be65b7ccac62c9ab73645c&chksm=ea9489a5dde300b312a93ec52a321f835baed001465326883dd6cdbbe70fecd5b94b1b8000c7&scene=58&subscene=0": "苹果修复已遭利用的第9枚0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514319&idx=2&sn=dcb724416b73a279ecc84b431bf4b120&chksm=ea9489a5dde300b3db050905faed63fce50f5ac9036956a0592ecb89ab79e60230ab4419c6a6&scene=58&subscene=0": "HyperSQL数据库存在严重漏洞,可导致RCE后果", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514319&idx=3&sn=6dd16dc42aa628d2d112e9e0f6512428&chksm=ea9489a5dde300b3d2d064af27d6ad29e9592f0c42842c936f2cff8d04443759b19d1a8545b5&scene=58&subscene=0": "一个值1万美元奖励的GitHub 登录欺骗漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514319&idx=4&sn=bb1d931819cef01583083f9eddee4a6d&chksm=ea9489a5dde300b349e85d3bf53d19d161712a5ac99dc81cf9fa3b09e54426e9bedd529d9889&scene=58&subscene=0": "Abode 家庭安全包存在多个严重漏洞,可导致黑客劫持和禁用摄像头", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247496852&idx=1&sn=84850e657a6a4b987a6989f1917b95e5&chksm=cfca9780f8bd1e969cde4f57453d79f7bc3f1abe5d1fadecb8d905d2e58b5ee86964cdb06299&scene=58&subscene=0": "主机提权 | 浅析sudo堆缓冲区溢出漏洞CVE-2021-3156", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458479751&idx=2&sn=d8815a87725c397271c5d6ee9447a1e0&chksm=b18e5c0d86f9d51b5b87bdfbb7a895e5f5887457e614f23379d8e09755492f7fd1c743ce22d9&scene=58&subscene=0": "CVE-2022-23613复现与漏洞利用可能性尝试", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497009&idx=1&sn=25cd2513f09cad43f422298f6a7f8615&chksm=fe79d1a9c90e58bfbde3a438e590e6ca4dda5926661b2f5192e6a7211892524dfc7e626c5a7f&scene=58&subscene=0": "SQLite拒绝服务漏洞(CVE-2022-35737)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652022381&idx=3&sn=d2bae64116e1ce9e3718607b683615a4&chksm=f36f8a2dc418033b8be6bc5ad4499c98a7e24cee411d21ba4a616b25f494b90b8d1cb50c096b&scene=58&subscene=0": "【安全圈】苹果曝严重漏洞,可窃听用户与Siri对话", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652022381&idx=5&sn=4caa05eb4b770d746b59e3aa33929523&chksm=f36f8a2dc418033bab6ea2bd74c0f9efbbb315343ed130a0f32b40da6eadf50dcd7c574a1395&scene=58&subscene=0": "【安全圈】因严重 OpenSSL 漏洞,Fedora 37 延迟至 11 月中旬发布", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247552901&idx=1&sn=6b508f55415007ada6193d9eaf7aa281&chksm=e915dfbfde6256a94aca316a2fe2d2ef07dacd7ab5e3b70f879889e99d897941e353af87c316&scene=58&subscene=0": "成千上万的GitHub代码库分发含有恶意软件的虚假PoC漏洞利用代码", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651119544&idx=2&sn=58f1b3191fba48554bc6a88f544474c2&chksm=bd146f6b8a63e67d1e3ae631a4351d62fc3f1a48012e224c3df83ae6dd91431dd19928e39e95&scene=58&subscene=0": "安全头条 | 国务院:全面加强网络安全和数据安全保护;工信部印发《网络产品安全漏洞收集平台备案管理办法》", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652500315&idx=1&sn=957328c8c6e83d1803c3066f2d18f124&chksm=f25852e8c52fdbfef23fafb6983dbd87669ace34d06e7555bf0cc9fe71a64892362cb2c0c8a9&scene=58&subscene=0": "雷神众测漏洞周报2022.10.24-2022.10.30", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492560&idx=1&sn=c8c382c5e8c734a6064669177e8a4ddb&chksm=fd74d319ca035a0fc36fa711f55e3ebdb8688edac5951ff0d22c1fc3730cda112048c9fc2ab4&scene=58&subscene=0": "CNVD漏洞周报2022年第43期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492560&idx=2&sn=034896b9c76f87d5290b97d18694d2ed&chksm=fd74d319ca035a0f707fde40a6a53cec1afef22b0e31c12b189f1b4620f8f43c92b897cf1af3&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20221024-20221030)", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247496274&idx=1&sn=5c6544a72b9eed690e3a73c2fb027c7c&chksm=c0075fcef770d6d8054d952a01dcff84dfa075b6ac36186f4bc7311cfb88357186f5de273068&scene=58&subscene=0": "【技术干货】CVE-2021-3019 Lanproxy 目录遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652022775&idx=2&sn=2cde490875cfc601f506ea1ccff199be&chksm=f36f8bb7c41802a191d7958f63e4de6fb9b1745a714157bf0dfd64ef28682e2343d10a6f7dbe&scene=58&subscene=0": "【安全圈】工信部印发《网络产品安全漏洞收集平台备案管理办法》", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657163463&idx=1&sn=d2b540f40e9448b5e49f52cee44d56a4&chksm=f1d4ea22c6a363344226769249dc154ffa1b3d693881790d42914bad9aa14db057f425ff7956&scene=58&subscene=0": "GoEXP WANTED 3", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247506559&idx=2&sn=d6c171a7788894e50fb3da15a958b053&chksm=ebfa9d5fdc8d1449f4cd0b01e6ce464182d60b292f3fc9509a2c540bca6a1b749e763bbe94e5&scene=58&subscene=0": "已复现!OpenSSL多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247484870&idx=1&sn=01da931f28c3f3478c32a6aded0ade01&chksm=cfa49e3df8d3172bdad20a1dbe5678e617d98b8c5ff31708c202b1581694a2fa38b210bbfc9b&scene=58&subscene=0": "GoEXP WANTED 3", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491547&idx=1&sn=a0e2e2ad607e7a06734348103cd5ba98&chksm=fe251adac95293cce380de64f37642eb98ceb7f3c50ce93ae5468eca262afdb391e64bb27683&scene=58&subscene=0": "CVE-2022-3602∕3786:OpenSSL缓冲区溢出漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458482303&idx=5&sn=b2775462c2b19ddeef0b7c88acc2b0e8&chksm=b18e46f586f9cfe3bc6ccc22d5cb59dfa568714ed46abf09f8e44802f11387b423d7419cf661&scene=58&subscene=0": "精品新课!Windows内核漏洞分析与EXP编写技巧", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652500440&idx=1&sn=cb8574e8db24451ab305b860167b24d6&chksm=f258526bc52fdb7d1be711c964787f47fa3a291f3c73ab6e1587fbd05589b8a1accac47ea394&scene=58&subscene=0": "CVE-2022-30190分析", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247532525&idx=2&sn=7bce76321d0fd4bec104efd51ae396eb&chksm=fa93c92ccde4403adc8e3f4f7c6d9c8916227aa1db8c490845fdb2ec2c620292de6d8be633bb&scene=58&subscene=0": "工信部发布《网络产品安全漏洞收集平台备案管理办法》", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247532525&idx=4&sn=9d416b02136309790d831399243a6351&chksm=fa93c92ccde4403a1ef9284fb06ce64b4557ad09c9c1f6aa43b9f7681605c598d2c28f0f793f&scene=58&subscene=0": "GitHub高危漏洞可劫持其他用户的库", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247515331&idx=1&sn=d30b12490438ac177fe8cfc9347fc3bf&chksm=ce4637d3f931bec5264bdb33a398d0e4bf7c38d7a6b8aae071704c4e95f7b80b7f245a596059&scene=58&subscene=0": "【漏洞通告】Spring Security身份认证绕过漏洞CVE-2022-31692", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458482822&idx=1&sn=13f269f0ee613726295c941a895fd3ad&chksm=b18e480c86f9c11a3daab021795a44acc40cbb38c4ffa76cf30c057095e3210c348762631e98&scene=58&subscene=0": "2022 SDC 议题回顾 | 国产智能网联汽车漏洞挖掘中的几个突破点", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247483993&idx=1&sn=39ceb1de3ef26623e9da33d247601963&chksm=c2b1002ff5c68939a59c407373cdf440bdc4bb4305f612ae464ed12419caff83e2a07be74138&scene=58&subscene=0": "腾讯安全威胁情报中心推出2022年9月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514414&idx=3&sn=dd3d82b3a03b5b06090e5bc38014da44&chksm=ea948844dde301521b0cb907cb7dc3aadabd0e9a46e67d5b3855a850f580c0124798fa2504ec&scene=58&subscene=0": "CISA:注意这三个工控系统软件中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247532489&idx=4&sn=d6c6237a6da5f631eb34cf0d3e853e15&chksm=c1e9f398f69e7a8e62e1d5339328ff19b972db72e267967ea2297f578af1a3d0531f51cd7c87&scene=58&subscene=0": "CISA警告3个工控软件系统存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247553459&idx=3&sn=9bedb5923c780ad7a71f336c16fbdcf1&chksm=e915c189de62489fe5262730f558f97117c4a4e809c879373d03a9c83a4f09edf7c3b855fe7a&scene=58&subscene=0": "CosMiss:Azure Cosmos DB Notebooks远程代码执行漏洞详解", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247515418&idx=1&sn=4a7140509130770f1bae19de2324dca2&chksm=ce46360af931bf1c68854c563fd77a32376a2c2ba54f9d758b9fc6ba6b0ef1403d15d0ffb1e6&scene=58&subscene=0": "【漏洞通告】微软补丁日安全通告|11月份", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247511196&idx=1&sn=fe076996b55c5fe98a036c98e2f17eed&chksm=eb7072a3dc07fbb5ea57a0ec92e27d45669751c7dd23d5fb200ff389f9d756bfc2453c331f15&scene=58&subscene=0": "2022-11微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247497225&idx=1&sn=0d968065dbf9532f264e69571bb9faf8&chksm=eaa97e29dddef73fefa216287db7c08532b8879eab76641d0afba705ae00cf0d858cadf21174&scene=58&subscene=0": "Azure Cosmos DB Notebook 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497064&idx=1&sn=582a952bc48b2a7138c0807e7599b9a2&chksm=fe79d1f0c90e58e6581d2b98d276a44e5d30678f49b0122c1f519acf9a2f0180c8d2cae31896&scene=58&subscene=0": "微软2022年11月补丁日多产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497064&idx=2&sn=a9ce5bbf48d86e3c3ba5ea46d2ccd079&chksm=fe79d1f0c90e58e6f317cbe32759a4a97ed60854ac6746fbb40d4f0f207404a7c88c6c836093&scene=58&subscene=0": "Microsoft Exchange Server多个0Day漏洞安全风险通告第六次更新", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247495945&idx=1&sn=2d84f5b73db5d8f6f3d8054bcc2c616d&chksm=ce96bc37f9e1352118766f55800747314e997c418e2c2000dcff852728d840a287e7768f14ee&scene=58&subscene=0": "【风险提示】天融信关于微软11月安全更新中重要漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247532618&idx=4&sn=7e7aa6211704357eaf343bdb1644e3b5&chksm=c1e9cc1bf69e450d6305187bd645dafb1893f26ab1eb1fd642607017bbf399bab9d7c4570462&scene=58&subscene=0": "最新披露!三星手机组件发现三个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497084&idx=1&sn=fc4a7ba050faaa9a68cdb0f4966cee0a&chksm=fe79d1e4c90e58f2bae37d494596f1ef1361427b8b825743c4077ab1330954c6f1d455f74274&scene=58&subscene=0": "YApi命令执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650174812&idx=1&sn=ba9cbf3e1a073d9c787d840f4af2e7f1&chksm=f4488ee0c33f07f688256918783ef2de6e470f87d471647e9db941d8bc19f315c56705cbd3f7&scene=58&subscene=0": "速修!开源API接口管理平台YApi爆高危漏洞(附补丁链接)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247553649&idx=1&sn=d14f4ba92f85e724d9482ecdb12de308&chksm=e915c24bde624b5debd29ad82abb67d68f78d004a062f8f49d9ec433c271b264cc4323490b8f&scene=58&subscene=0": "三星0day漏洞被用于监控活动", "https://mp.weixin.qq.com/s?__biz=MzI4Mzc0MTI0Mw==&mid=2247495372&idx=1&sn=4cb544c359426734e0bb5f77918384de&chksm=eb84b398dcf33a8e9e2713d42439ddee7c71d757bba13401aa7e368eb9289ee7a63733fb9f9e&scene=58&subscene=0": "赠书福利 | 《物联网安全漏洞挖掘实战》", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247532672&idx=2&sn=f524abe156b9a9003f21688a56deeb9c&chksm=fa93f641cde47f5770573216781edafe1c78b5f58231ef49352ba5b5937cc20caae83b4e5126&scene=58&subscene=0": "漏洞管理十大度量指标", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247515489&idx=1&sn=f208a84999443e30c783de0d35733506&chksm=ce463671f931bf67dcdaf64f5af9e851edb97bc1cbe69b54752d58eb8cd56f2e44a9343b0e17&scene=58&subscene=0": "首届中国eBPF大会分享 | 基于eBPF的内核漏洞检测实践", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652024283&idx=2&sn=8d503685003568764b705d4552b869ed&chksm=f36f819bc418088d81845fc2faf65cc5aa086b2f7da2773cea9b42088f4d7dde2ba7531b3e8f&scene=58&subscene=0": "【安全圈】三星手机组件发现三个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458483697&idx=3&sn=56a74f29fe0266ac98f5568d10cd2d1a&chksm=b18e4b7b86f9c26de866c908f8b255a0e2f92936dbb26439738f543fef2d61a63a479443983b&scene=58&subscene=0": "安全研究员无意间发现谷歌手机一个锁屏绕过漏洞,收获七万美元赏金", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458483697&idx=4&sn=6c5d49f550285631c32600351a9fe1f8&chksm=b18e4b7b86f9c26dc2f394392117c9e76c2ca1381843ab1f8c5e9e7e565154294db7ce01f53d&scene=58&subscene=0": "精品好课!《Windows内核漏洞分析与EXP编写技巧》", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650965955&idx=1&sn=ffbddba91498541e48f1a86b8069e60e&chksm=8079c5f1b70e4ce75b9d45ef86993625962961b1338881acdedc7d7d59063bf5a5e5c93e2970&scene=58&subscene=0": "404星链计划 | Pocsuite3、veinmind-tools、afrog 版本更新", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652024390&idx=3&sn=647b4c1f2c155a44ae22f05502c86521&chksm=f36f8206c4180b104f83a68039d989ec133a6ad2c325f86388ced4da5aa445ff84da20c02379&scene=58&subscene=0": "【安全圈】全球最大BT网站曝安全漏洞400万用户信息泄露", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491579&idx=1&sn=4e4b1ca4a1c417f42a38d045710635e2&chksm=fe251afac95293ecfa4adb66d7b89483782aab79c22e7a4aae5b6581e239543ff50fc5516795&scene=58&subscene=0": "CVE-2022-27510:Citrix Gateway∕ADC身份认证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247553752&idx=2&sn=e4018f4129fcb9921f469dbfdf73aa2e&chksm=e915c2e2de624bf47c59126095f4069443a6f3e108b982d3733600818e678de4101e9d2812e9&scene=58&subscene=0": "价值7万美元的谷歌Pixel手机锁屏绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514661&idx=1&sn=ed03e7c7fed936ce5c82e4583a0df074&chksm=ea948b4fdde302593a589756559c66f23db2dff4547b4b3a335485b1a65abafd877d7bc5310a&scene=58&subscene=0": "F5 多款产品中存在多个RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514661&idx=2&sn=059d03a2384d5d57513f1e02a69f1f4d&chksm=ea948b4fdde3025977bec54f5099ef0554974ed2c2a16b192b61bd98eb58875466740d94e666&scene=58&subscene=0": "美国政府:伊朗黑客利用Log4Shell 漏洞攻陷联邦机构", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247500668&idx=1&sn=2aa462502ebb29059cf6f2f7e3698d02&chksm=ec9f1a0fdbe89319c61e01bc3bdd5dc8e19bdcc03c1fe8a4c406b1edc950748399c9ffcc4643&scene=58&subscene=0": "腾讯安全威胁情报中心推出2022年10月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247532755&idx=3&sn=300cb893ef8bed20ca0882362c9e06bf&chksm=fa93f612cde47f0424c8ac6c11c81e6b0696051b2c604ec7585d7af32b29f5f6ce6aad01992b&scene=58&subscene=0": "马斯克执掌推特三周后,双因素身份认证出现漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247553953&idx=1&sn=1bb691ecd45e87668ba75673e17c1e0f&chksm=e915c39bde624a8d17aa3f4a5f8cfbda701d441da884fcfd62dd547f2a8b092d1505dfe15587&scene=58&subscene=0": "Pcspooof:新漏洞影响航天器和飞机使用的网络技术", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652500626&idx=1&sn=9d8fdcef903dfd13a79cd4c8c1e318e8&chksm=f2585121c52fd837fb89cd4248f4ae7f7b72bfeb8d9727a8c8e0005e4613e92ad9378037cceb&scene=58&subscene=0": "雷神众测漏洞周报2022.11.14-2022.11.20", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247497573&idx=1&sn=497d359ecd88e851b8824180a0ec5256&chksm=fa5222dbcd25abcd961a9aa09376e304d0ea62650887931afb070d3b423ad9ff0ab58d65567d&scene=58&subscene=0": "0Click RCE:攻击VMWare Workspace ONE Access", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650175034&idx=1&sn=e409660353cc61a0e6f4c5a3369eeb11&chksm=f4488d86c33f049066b9b734f4b5fc12ccf26e67fcf88d4547cf973c83715a5fd79b5e009ea9&scene=58&subscene=0": "速修!Smartbi软件高危命令执行漏洞,影响超4000家企业", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247515674&idx=1&sn=7ef0eeef29d2b1246c764ffd34f917dc&chksm=ce46350af931bc1c4bf841fa2a80d41c87fd91e6b2796da1198bfc7e66412e1529f9d83040cd&scene=58&subscene=0": "【漏洞通告】Atlassian Bitbucket Server and Data Center 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497113&idx=1&sn=76113d2d01432b6eb1b383fd9123b857&chksm=fe79d101c90e5817e6503ca34cff483174d26805c184492edf297d314c1c91f2316edbe96f4c&scene=58&subscene=0": "Google Chrome GPU堆溢出漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247496519&idx=1&sn=1ba1f0896f7dd78c5707ac5460c856f1&chksm=c0075edbf770d7cd08317656491cd31e92712cc7eaaf8c713a12509ab3e80ccffdffbd20ed8a&scene=58&subscene=0": "【技术干货】CVE-2022-42889 Apache Commons Text RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514771&idx=2&sn=82231141505568820fbd6a3f66546680&chksm=ea948bf9dde302ef5d8114281a47daf92a67743ea8eba6632472a813a8d656b261c788586d1e&scene=58&subscene=0": "谷歌紧急修复已遭利用的Chrome 0day", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247554374&idx=2&sn=523ea6c8810bf78b43d6a05166888f53&chksm=e915c57cde624c6a17a59110f941582ca6a4bca041e3f0e7b280b82cf6247c1a482f2cdc6fc0&scene=58&subscene=0": "新攻击利用Windows安全绕过 0 day 漏洞投放恶意软件", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247497643&idx=1&sn=b57d74a8d6875c4a970922b35346ac69&chksm=fa522215cd25ab03f5421436165d5085e6f2c2b2774e9da3ea8270b2f3a749868474329b00df&scene=58&subscene=0": "利用solidity与EVM本身的漏洞进行攻击(上)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652026116&idx=4&sn=732180dc0d04439122b38983b1496ac7&chksm=f36f9944c418105244f8b19679a11b5c658f7f64a1c33db06c728bbd66676ba0e684838bb494&scene=58&subscene=0": "【安全圈】黑客正在销售最新Fortinet漏洞的访问方式", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514853&idx=1&sn=10d64bdf4f72858d7013dd2cff5fe37e&chksm=ea948b8fdde30299e8387c194b6f4ea7215218284949ef26ba92e2bee711fe42c1b49615e283&scene=58&subscene=0": "热门Java 框架Quarkus中存在严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514853&idx=2&sn=aa7edf1c528ee030b826738933440806&chksm=ea948b8fdde3029958ce600f79ba636a4b31e5e7bd11dbda3eca72604cd5ebe9f8c54899f257&scene=58&subscene=0": "英伟达发布 GPU 驱动更新,修复25个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514853&idx=4&sn=f887c2246bde0615a6afcc197112e9a8&chksm=ea948b8fdde30299897ba08d1d9780bac245ae05c8b213f63334fa58fc54924eb5c5e95c5bac&scene=58&subscene=0": "德企Festo 和 CODESYS 的OT产品受3个漏洞影响,可导致供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247532999&idx=2&sn=72d37dbdeb4d2742b0442b6155d37740&chksm=c1e9cd96f69e4480371336b17b1c1884751ec266185c54fcbac1ce79528d998bbbc60455509d&scene=58&subscene=0": "美国CISA最新收录高危漏洞,系与甲骨文有关", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247533031&idx=3&sn=923a2ac91f88b70444b51f2bc70be139&chksm=fa93f726cde47e30f3f8f15fa6feb7405f6ae07962685e259dcc221cc04050fb8bbf1d64bfd1&scene=58&subscene=0": "停用UEFI安全启动,宏碁多款电脑存在严重安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247554584&idx=3&sn=352271b528745f4d6201e246b00917ac&chksm=e915c622de624f34d70c5f5b07a0e35ec1b57a1c91874d8a299e3af90bd3e9894434b0735a25&scene=58&subscene=0": "Chrome、Windows Defender和Firefox的0-day漏洞统统与西班牙一家商业IT公司有关联", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491631&idx=1&sn=23f6b889fb044adec5d046573adfb0c9&chksm=fe26e52ec9516c3893d2f61519c471f06c71fc7f6bec0eb8cc26efe21a1899f62f1ab3d93344&scene=58&subscene=0": "CVE-2022-4262:Google Chrome V8类型混淆漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652500801&idx=1&sn=d69df6a6377c2f9eafae2d2355fb3e69&chksm=f25850f2c52fd9e4e6a9dea2d46f42e0505b92180cf620453f09d05526a079d6c7f7cf563f00&scene=58&subscene=0": "雷神众测漏洞周报2022.11.28-2022.12.4", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247533101&idx=5&sn=9ba36bcd6e768076a0dda7474e9abc0f&chksm=c1e9ce7cf69e476a093b7f34c83e5bc04f50c296eb2b3080f5611264a9390779c8a2d5363641&scene=58&subscene=0": "App漏洞可远程解锁启动汽车,影响现代、捷尼赛思汽车", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492722&idx=1&sn=fedfdcec9a3f970b243c317de610b24b&chksm=fd74d4bbca035dada3dff95c3ce06c0a1f1d14f9f97a94d89c5699829ea8391bf5f80684571a&scene=58&subscene=0": "CNVD漏洞周报2022年第48期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247492722&idx=2&sn=fb5839b2138a86dcc952bcd6c80ded02&chksm=fd74d4bbca035dad6a27a210b44a6a1d89dfbc05d4de536e2589417a48f39c494885c2272d81&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20221128-20221204)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458486646&idx=1&sn=a5fc19d6a8405526da6127ff2e147b3b&chksm=b18eb7fc86f93eea6a210b8071e8c207de283e3b8270c54e8841cacd4803361bae5ee77b2d7d&scene=58&subscene=0": "新课预售!系统0day安全- 二进制漏洞攻防,赋能企业安全", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497162&idx=1&sn=8a432eb3310578a28011180ff782c015&chksm=fe79d152c90e58444a2c2cfebba23556c9754d53db9c401d2ae356d7ffb88b46b63beda9d5d2&scene=58&subscene=0": "Cacti命令执行漏洞(CVE-2022-46169)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247507000&idx=2&sn=60e3981328a12fd29dc99a957d181af7&chksm=ebfa9b18dc8d120e1364a0af9b45f7b37458a4684159574d80810f151b8061549e77b880ddf6&scene=58&subscene=0": "能写漏洞PoC?网红人工智能ChatGPT的十大妙用", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247507000&idx=3&sn=a34992b3108b2b846bc685ecb1742aca&chksm=ebfa9b18dc8d120e9b3222c33e188c204237930dc44b065d83a7f987ed07f38a7bb91214095e&scene=58&subscene=0": "Cacti命令执行漏洞 (CVE-2022-46169) 安全通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514911&idx=2&sn=a07e3f6f6557db4b5408f3f337728a4c&chksm=ea948a75dde3036344fe266d8db84bdd445070bc070dfd60d49eaeb5317d40dc0f3cb80d4e0a&scene=58&subscene=0": "多个BMC供应链漏洞现身,数十家厂商生产的服务器受影响", "https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247504035&idx=1&sn=84908b67217a82438cd8f506fefcc839&chksm=ce5df2c2f92a7bd4610396f7707d667fb2920bf8cf8fdbe6440492b1048370df037fee7fa578&scene=58&subscene=0": "APP漏洞挖掘之某款APP开发商通用漏洞的挖掘", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045100&idx=1&sn=31586f16a73e73b8a9fb966398823104&chksm=803faab2b74823a4397617124337a4ee2c6bbdff62df4fa6b3d1d5674450170ca74de8fc2011&scene=58&subscene=0": "【漏洞预警】Google Chrome V8类型混淆漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491641&idx=1&sn=285394a64d4fd977f649d3dd9c12c8a8&chksm=fe26e538c9516c2e25a5f0f8a22c7a2cce6066f09495541fa4aa24bb19515e4457c8be79c3c3&scene=58&subscene=0": "CVE-2022-46169:Cacti命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497693&idx=1&sn=01aa123b0f4d0555852d9879c04af0c2&chksm=973ac4bfa04d4da90c19842493ca550086ffed405c81f0edfab9a0fdce42886c02fa0e13b786&scene=58&subscene=0": "CNVD漏洞周报2022年第48期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497693&idx=2&sn=118e7dc8d2495658173f51c8f43a7d66&chksm=973ac4bfa04d4da907be6a8a97f28bd7786145e4f279ccba33fcd2e9c1ce32c86431f56e5c21&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20221128-20221204)", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247533194&idx=3&sn=5aff8415158698c181468f65fd30f3bb&chksm=fa93f44bcde47d5dd8d2ae651793b0189675dd7aaadde80a6d1d585389e6c45dbfb4c9dbad07&scene=58&subscene=0": "AMD、ARM、HPE、戴尔等15家服务器厂商产品曝出严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247498726&idx=1&sn=a3230d5676fae8c8b9e5c65ebe959974&chksm=cfca98f2f8bd11e4d9272df3f0a45408d63956f9566f52f1a4e5718cb866f51f2b91b9ebac4b&scene=58&subscene=0": "ThinkPHP开发框架曝高危漏洞,需紧急修复!", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247554835&idx=1&sn=aa14159337001f1d807d64f69660a760&chksm=e915c729de624e3f5dfeb9d3e95242df04a030c39b809f4942fb1d944f16bcbeada489173390&scene=58&subscene=0": "CVE-2022-23093:ping漏洞影响FreeBSD系统", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247487885&idx=1&sn=58d14a5a85ba194e4fbde5cebd91b1b2&chksm=c2c64686f5b1cf90623db665cdddf6b71670130a643c839a3c4e33c5cf4787c05079dee43cd2&scene=58&subscene=0": "【漏洞通告】ThinkPHP远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649781006&idx=1&sn=b2ff8f31e73c5f920dabda206f70b0f3&chksm=88934361bfe4ca777feaceb3be5fe1f80617eeaa505ec2d2c410f907fe14bbf0dd8fbcc062c4&scene=58&subscene=0": "【技术分享】针对比特币钱包App的三种漏洞攻击与对策", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247493948&idx=1&sn=0f7bb04084bf95d09ac771a0a9f9dae1&chksm=e84c4fe3df3bc6f5e25574fd707bb56ce65c7f4678c1738501798cdc5f4eea0a52b5ef98c18a&scene=58&subscene=0": "【公益译文】了解、预防、修复:开源漏洞讨论框架", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491657&idx=1&sn=5ea289ea07f728f6a0daa10fc9b6d558&chksm=fe26e548c9516c5ed714bed387f73978b272fd0e2da2ff77dde3af89c57a1717e2c548b83151&scene=58&subscene=0": "2022-12 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458488972&idx=1&sn=de0687bfa9fd03296e051372c3f38b65&chksm=b18ea00686f9291034706473da2cd2e85759dcedca31e322d4925ee5064a8a795b67d6acf2a1&scene=58&subscene=0": "CVE-2017-14627栈溢出漏洞及exploit的调试与分析", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247533470&idx=3&sn=f63b902421452faf93a29151d0aa018b&chksm=fa93f55fcde47c490f3bf02a6545daa5f0c593d614deb358da2ffc6e89bd8303b5a5cddfa3a1&scene=58&subscene=0": "微软发现可以绕过安全审查,开启Mac电脑大门的恶意漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458489310&idx=2&sn=65be16f07e07cab5d29111dbd406d3ec&chksm=b18ea15486f928428114713f06dc4016836f052e13c456507ecca59f74de756e19f7aa224f80&scene=58&subscene=0": "Intel CPU漏洞研究,为你深入详解三个史诗级的芯片漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652501026&idx=1&sn=d632f5ea585a733c18d46106c96df433&chksm=f2585791c52fde877a13e73a53496dbb27a041ae57bec8996d78984746aae061ca07068a9d32&scene=58&subscene=0": "雷神众测漏洞周报2022.12.19-2022.12.25", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515107&idx=1&sn=47eca1a57ee9fd7e5cb0b36080483ab3&chksm=ea948a89dde3039f969c6fe7e6e1558310d44cc7a2c51cd0e7f4b2aed00e0d79952a523ded02&scene=58&subscene=0": "【已复现】Microsoft Exchange Server \"OWASSRF\" 漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247533487&idx=3&sn=dd3652a2a41151e1db7b674816c777e5&chksm=c1e9cffef69e46e8369bb03f84136131d0798dbf7b66a069c560b29b21073927545a96dcd6f2&scene=58&subscene=0": "macOS漏洞可绕过安全检查", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491691&idx=1&sn=8b0b07d00988d9ae5e72a1ef13673008&chksm=fe26e56ac9516c7cd9ec4328ac3f95facce83c04b012f31417dc90e81f2decdf3238892d797d&scene=58&subscene=0": "CVE-2022-47939:Linux Kernel ksmbd UAF远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247533490&idx=3&sn=baae970d2a5f1c24887478ff3acd4bd2&chksm=fa93f573cde47c65b734878c588013b0478eb5b37efdd27df76b95b7f61120e753363e65cd0c&scene=58&subscene=0": "Lastpass事件调查:黑客在云存储漏洞中窃取了保险库数据", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650175357&idx=1&sn=567c7233f02197b8f0f16837f912df90&chksm=f4488cc1c33f05d745c2490017ea7e57ecbda681309c91a6a61e4f1facb5d411c971f93ab465&scene=58&subscene=0": "重磅福利 | X情报社区全面开放漏洞情报能力!", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497772&idx=3&sn=c9b98e7544782d306b440b4ad84540c3&chksm=973acb4ea04d42583d0fedfba4599fd168b290df30c68c8ef40ef5042bddff0bb78ac2ee07f3&scene=58&subscene=0": "CNVD漏洞周报2022年第51期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497772&idx=4&sn=633e7fe1307a96a1a68cd2128c74e7b6&chksm=973acb4ea04d4258fd356f202b8d8cabbb149974dc2b4b50fe42f5ef3a38efd05daf722e6397&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20221219-20221225)", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491702&idx=1&sn=d67d3fa0aa6b5dbb35fc4b914466507e&chksm=fe26e577c9516c61d1c52dac871cd8ffb0e7fe0d75a76cc200c38f46cfa64cefd86e6ff3ee1a&scene=58&subscene=0": "CVE-2022-41966:XStream 拒绝服务漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247496812&idx=1&sn=a471fd83df5ea6c4d53cc2e86c2cdff4&chksm=c00759f0f770d0e64fc60f3c677050aa7c623003aff223bb6b57abf9f48aef23082347ffb2bc&scene=58&subscene=0": "12月API漏洞及相关资讯一览", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247487943&idx=1&sn=e8915ac33599559dbea5d2a06abcd9f6&chksm=c2c646ccf5b1cfda90e2c0fbc3ffce4505f0c14ce5ef6d24c8c107bd6c3f0358c1b553be687c&scene=58&subscene=0": "【处置手册】Exchange Server OWASSRF漏洞(CVE-2022-41080∕CVE-2022-41082)", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247533654&idx=3&sn=f799f0ef49a7ef1f3c0de5b3ed1bfe1d&chksm=c1e9c807f69e4111c33bcf480452885c9a7c5f1c524c78ce2a20e10f99651b9dc96dcc98b594&scene=58&subscene=0": "Google Home智能音箱漏洞可监听用户会话", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497287&idx=1&sn=699dc588b5eacb72a805ddefab2e8b5e&chksm=fe79d2dfc90e5bc90a30623c1df61092c6b45ab55beb2d9faf5ecb736771ddcb00979c815051&scene=58&subscene=0": "Apache Kylin多个命令注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NTMzNjU4Mw==&mid=2247489519&idx=1&sn=ecb528312386d1c9ff9f1fc9de398419&chksm=fd8d4587cafacc918cd035c8669b8b7b2bc551acfb06cfbe2c88e7a76662d4809e9264ceb7c3&scene=58&subscene=0": "《58集团漏洞标准V4.2》", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515192&idx=1&sn=e87e601569d5822582e1538bb28323b7&chksm=ea948d52dde30444d574600b79a6c202142ec2bf9b6ce53a72934ada80a5c93a9670132bbf3f&scene=58&subscene=0": "Synology 修复严重的VPN路由器漏洞,CVSS评分10分", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515192&idx=2&sn=272bc0a3af1895e35d8757fc824d54e7&chksm=ea948d52dde3044428c3a85f3626292aa92baae3cad83b4c5ec41f5fe18285b316d2ca225fa6&scene=58&subscene=0": "研究人员发现Google 智能扬声器中的多个漏洞,获奖超10万美元", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497797&idx=3&sn=f3c68b3596365eb8b17987c5f5f8b61b&chksm=973acb27a04d4231fa27f30872f000b9ae77c163f218b4664437b4c8933506397a148a37d623&scene=58&subscene=0": "CNVD漏洞周报2022年第52期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497797&idx=4&sn=073c1d83aaa20c2faa054abe8e6069e1&chksm=973acb27a04d42313e48ef3c3714aeeb12ba7a4ec27430d0662ecfe37d62f34e07d9a4c5e15c&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20221226-20230101)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458490765&idx=1&sn=27c79edaca0efbde1cc2dadfdc6b7e53&chksm=b18ea70786f92e111c980d570c1686005a98480e522ee37144e8d9e61f1e360807f0cb3998b5&scene=58&subscene=0": "Notional Double Counting Free Collateral 分析和复现", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458490765&idx=3&sn=6fa59add274fc550ca3624fbe9db0ee4&chksm=b18ea70786f92e115145550ac751497df50ca1fc551b6279e029828da36f492179a5072820ff&scene=58&subscene=0": "新课预售!系统0day安全- 二进制漏洞攻防,赋能企业安全", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515203&idx=1&sn=0154c72722b8b2c44432c3c779bc5ce6&chksm=ea948d29dde3043f88a8f390467e5fe9417ffdbb15210cc62b5ca63cb1bb7d11d80897439b47&scene=58&subscene=0": "Fortinet 两款产品FortiTester和FortiADC中存在高危命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515203&idx=2&sn=b4c1c37a3e9a0cec0dc518765c86b736&chksm=ea948d29dde3043f45edbaf7748079fecbc26a7462e00af08c08cf7d77d9c07d2ccd669686f9&scene=58&subscene=0": "Zoho:立即修复这个严重的ManageEngine漏洞!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515203&idx=3&sn=1ce2594fe8a272445e3b52a3598227f3&chksm=ea948d29dde3043f06e675d6f61647db3b51b77bc3191575c8ab8aec96e8f443eab259a28d5f&scene=58&subscene=0": "丰田、奔驰、宝马等API漏洞暴露车主个人信息", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247507433&idx=2&sn=48d9a0f7de6244cd2971a24b1dc2e153&chksm=ebfa9ac9dc8d13df0d5ef10c5b9dd578bb67739a207c6b380d751a77288b3ff62468067a93f6&scene=58&subscene=0": "汽车行业最严重漏洞:20家知名车企API暴露车主个人信息", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650175461&idx=1&sn=72d1e76098b09bc5ec3b8754e6848f98&chksm=f4488c59c33f054f04a1960abb51f885c2fa3b559cccc27b9a827a2b043868bb31249cd0ea88&scene=58&subscene=0": "漏洞奖励计划升级第二弹:首胜奖励+周周有奖!", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491726&idx=1&sn=e894591ca2f6f476d53070c2791f2385&chksm=fe26e58fc9516c9990e9737802278a1fdea92990d547f6eed92d1f46abddf00b6759a4635532&scene=58&subscene=0": "CVE-2022-39947∕35845:Fortinet 命令注入漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491726&idx=2&sn=7f5ffe5e7668e55bebfd8df8cd7e5bfa&chksm=fe26e58fc9516c99d51c9492348652278a3020992d7a1ca400216f1ef56f432ba34c8556875d&scene=58&subscene=0": "CVE-2022-43931:Synology VPN Plus Server越界写入漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247508121&idx=1&sn=e34f59e53a1394600c7e768fcbf237f9&chksm=e89d8841dfea0157a63c1a15213306739f936f3b63aa8e32ae6657a87934aec82d60bfe046b8&scene=58&subscene=0": "某达摄像头的漏洞挖掘经历", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497301&idx=1&sn=5a3254374e3be80cedbce988f57d58e3&chksm=fe79d2cdc90e5bdb098a310de0957ef6282331cb166e6bf71f8e5964257c766739e6ef102e46&scene=58&subscene=0": "Fortinet FortiADC 命令注入漏洞(CVE-2022-39947)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497301&idx=2&sn=b6e6e17cabcd53962b115f1120005bf4&chksm=fe79d2cdc90e5bdb639eb6d373369c202a7e96782a4d995033744406d6369fe079aaa37d1a21&scene=58&subscene=0": "【已复现】GitLab 远程代码执行漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247507495&idx=1&sn=47e4462318ce8a6f10b370663b17f772&chksm=ebfa9907dc8d101122c7fc7c7964bb868cb70f039ad8a44e89e060a7039e7e66fcc6e5f51c85&scene=58&subscene=0": "突破太空网络安全!航天器关键技术爆严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652501303&idx=1&sn=a3e39072840cc04692ce8c0a513dcd76&chksm=f2585684c52fdf9275620cc2eff570bb627f998eb64c09084e59124d2dd854680eb0ed4d3b60&scene=58&subscene=0": "雷神众测漏洞周报2023.1.3-2023.1.8", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515233&idx=1&sn=1e9a33dc52094b1fa20a75a16e81d1af&chksm=ea948d0bdde3041d97220eab3c1615d2e8e9d7bf783d606a1571bea4c078d16aed093074a0d6&scene=58&subscene=0": "热门开源库 JsonWebToken 存在RCE漏洞,可引发供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515233&idx=2&sn=df29998bb260f1c274b561d8d33c1ed7&chksm=ea948d0bdde3041d86dd780d173b82a65374d35b5fc063d67de6fb5a4dde1e81e6b3d7805a8c&scene=58&subscene=0": "CISA提醒注意日立能源产品中的多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247533812&idx=2&sn=65ce28bfcca12c0f35227f0581bf67ac&chksm=c1e9c8a5f69e41b3a52829514568c5d036a1467e733ca6a5b88fff990796e5490c1c8bb2dbf0&scene=58&subscene=0": "突破太空网络安全!航天器关键技术爆严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497343&idx=1&sn=26b3d52e67c145e77a14acbc9c645693&chksm=fe79d2e7c90e5bf1bac62af14f18ce35de7ea5eccbcea8385cb4940ccf18aa7cfa5c2ea6f34a&scene=58&subscene=0": "微软2023年1月补丁日多产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491746&idx=1&sn=bac8d935768cb75687b2d29dff99861e&chksm=fe26e5a3c9516cb5c49281b35d82b6709aeb25f129db1d07487779db23f30aa8e2edac7775eb&scene=58&subscene=0": "CVE-2023-21752:Windows Backup Service权限提升漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247533840&idx=3&sn=a795c2eda4ac337c0c119d01ffb83886&chksm=fa93f3d1cde47ac7f6c4dbf8832aa166b038e79d6ce1dd32b81208e4c3fe32865ca4bd72bfdf&scene=58&subscene=0": "Experian严重漏洞暴露信用报告", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651121436&idx=1&sn=5cea0e9ecd77cfbe49fe51e99dd7a766&chksm=bd1457cf8a63ded9b018b2f83a979b94d4770aca865f39424b0c5d1eb268774b0e1fec1c1972&scene=58&subscene=0": "应对0Day攻击的高阶版防护实践", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497382&idx=1&sn=20e8b4b124f3d778da180c3953b80744&chksm=fe79d23ec90e5b288576a44e455f702c149c3a2df4ec69977f683101c00e8536cc7c4716bcd9&scene=58&subscene=0": "【已复现】禅道项目管理系统远程命令执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497382&idx=2&sn=e24de37a297ab8a0a4c624226ec9e154&chksm=fe79d23ec90e5b2846999b719d8ed565784ee37f13367871e13ec9a9c95b353f81610c7517dc&scene=58&subscene=0": "PowerShell 远程代码执行漏洞(CVE-2022-41076)安全风险通告二次更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515297&idx=2&sn=460499858dd7355f4569e49b316d18b4&chksm=ea948dcbdde304dd13d7b674af7f35b59b16dd02b31770de7ae9738688f20bcc072fae10dce9&scene=58&subscene=0": "思科不打算修复SMB路由器中严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247512639&idx=1&sn=75d26c05a17c696b6aaf69bb9cde156b&chksm=eb706c00dc07e51629b399ba347fa165d05ada66959957265a163e92255d1cfa94a95eb6d0e7&scene=58&subscene=0": "【火绒安全周报】“鹅鸭杀”服务器遭到网络攻击∕推特回应2亿数据被出售,并非系统漏洞导致", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247497212&idx=1&sn=8ef48006a3978bfda8961f0956f5a45e&chksm=cfc552a3f8b2dbb5f80a50045c0ed26a635f98b6895aa64f5ef0a89cac5a949b6032432608f5&scene=58&subscene=0": "前方即将抵达漏洞云星系,引力弹弓开启中...欢迎来到2023北京之夜 !", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652029816&idx=3&sn=6c31705746744488dc93dc0ca77b4f21&chksm=f36fef38c418662e935bdf4f7d68927774fe8e0149895e2501bbf81e8c21472f01402cae5d59&scene=58&subscene=0": "【安全圈】竟然不修复!思科企业路由器存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515307&idx=2&sn=bf20e1ace07e74a2657417caf4f0b6f6&chksm=ea948dc1dde304d73004888e52b7d0ac3b89bb748d42de28380055d0894a642c8b456bdb6652&scene=58&subscene=0": "Juniper 一月安全更新修复200多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247521997&idx=1&sn=d3c444f95c97f06b1d24240a91bd898d&chksm=eb847d6ddcf3f47b0c50ab4a97b2adbee3241149d9a3ac5a56958e76ac33ede48e0bbd108952&scene=58&subscene=0": "用 Goby 通过反序列化漏洞一键打入内存马【利用篇】", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458492659&idx=2&sn=a63c0f35e0b19a057d9fbe52e437b144&chksm=b18eae7986f9276feb843b5b5ea16ac6b6234be576b2224b8390c71020f6bf3bf6e68dde9ff2&scene=58&subscene=0": "谷歌浏览器“SymStealer”漏洞:可窃取用户敏感文件", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247507614&idx=1&sn=c0c99d7e69558b1dc0aae3659916bfae&chksm=ebfa99bedc8d10a8456eee61e1f300db9fd57dd78a90f74e1b2bff2a58303233326c93d521bb&scene=58&subscene=0": "从美国CISA KEV项目看海量漏洞管理方法", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497887&idx=2&sn=8c720639705095d13d001791a2bc7f20&chksm=973acbfda04d42eb34961c002f81e0437acaf90110de0f24e37c5993ea9507dd7e2f79f00838&scene=58&subscene=0": "CNVD漏洞周报2023年第2期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247497887&idx=3&sn=ea70a1c3f87e7c33469f650be4bfaa02&chksm=973acbfda04d42eb006b585ec84be3ee7360efde761ff643c08ef745d426f6e2e567d2d2fbf7&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230109-20230115)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652029924&idx=1&sn=ab547df73b4cfdd2405bade9fcf6ca5b&chksm=f36fefa4c41866b20226cfbe5d0534d62b885ad74f7f219a16a2d8e53328e3d54e43f89d0b27&scene=58&subscene=0": "【安全圈】ManageEngine 曝出严重漏洞,攻击者无需身份验证即可远程运行代码", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652029924&idx=4&sn=7f882b1b2a8760c9911800eebb3782d1&chksm=f36fefa4c41866b22955936529e3f96cb8a9b2b588cd47f271a7f26d2c4a450762717e023502&scene=58&subscene=0": "【安全圈】Fortinet VPN已修复的缓冲区溢出零日漏洞,可执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515346&idx=1&sn=3d1acdb97283a7d9606c441b9ca5eb27&chksm=ea948db8dde304aea15c93964eceaeb7328f9d6fd59ebe7ea979943fac2a6e48c8fd1b9087c2&scene=58&subscene=0": "TP-Link 和 NetComm 路由器中存在多个远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515346&idx=2&sn=9c64d78059c7b3ee275ab9039c5b3544&chksm=ea948db8dde304aeca214fe6e90ce53733d06ee853e596d44400020349aeb9c8fd6ab433bba3&scene=58&subscene=0": "CISA提醒注意西门子、通用数字和康泰克工控系统中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515346&idx=3&sn=7314d6f33c9cc44614100d627ee92de1&chksm=ea948db8dde304aeb1f522231dc8ba2f6cc789d08fd9bc2d2f0964ba7cd303a8233461778c96&scene=58&subscene=0": "厂商纷纷主动绕过Adobe发布的CVE-2022-24086安全补丁", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247489912&idx=1&sn=10019b03b94e9aac5a7d3e204b02b529&chksm=96db12a2a1ac9bb4db1e52e9126f6d58878020cd56f9f545d9114685bd230e36c1471e40832d&scene=58&subscene=0": "斗象漏洞情报中心分享|禅道命令注入漏洞深度分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515363&idx=2&sn=36927e449388a6dc1fcc5e7ccbf92a2e&chksm=ea948d89dde3049ffbff2cf56bcfbaa5d4e844e193a9391619d310ac4f075848d0fc66a2cf00&scene=58&subscene=0": "微软Azure新漏洞可导致RCE,研究员获3万美元奖励", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515363&idx=3&sn=6c939ad71b9754325cf5e804212ce38e&chksm=ea948d89dde3049f9674c7caff6a7a10ad9243925974600a40bc322cfba7198f6d8f4e045dbf&scene=58&subscene=0": "四款微软Azure服务存在漏洞,可导致云资源遭越权访问", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247534015&idx=3&sn=c1a316a3d8062190e9aa438050f240ac&chksm=c1e9c9eef69e40f8704e40cacc6d1086b48e79117fa77607ecf8063b93bdd4b8dc41aeaf28d5&scene=58&subscene=0": "Threema 加密通信APP多安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247496979&idx=1&sn=96f7d68a74d716551585d051bdc3cc99&chksm=c14487aef6330eb8dfd4c939b0051998a55902aff8704791933bd5e9dc59f4157d8edf8638d5&scene=58&subscene=0": "[调研]Java和.NET开发人员更容易遭遇漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247496989&idx=1&sn=8eadd8d98e52f3f3c7c72b48a9995438&chksm=c14487a0f6330eb6a1dc960883672e15b7bf63cfa90109ba2cc80f100ccb257e110e2bbd1eca&scene=58&subscene=0": "基于风险的漏洞管理缘何兴起", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497477&idx=1&sn=9cb0283803d41ab7cad568351a54b3f6&chksm=fe79d39dc90e5a8b46e7802d574e387775273196386f98e1d17fe96611a347b22394b927af09&scene=58&subscene=0": "Argo CD 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491787&idx=1&sn=b6e6f73d94e17797f797784791e0d0cd&chksm=fe26e5cac9516cdc7ad4831086fc1426f42ff432a3f66e19a00b1c5365b7446e1131b0f09833&scene=58&subscene=0": "VMware vRealize Log Insight多个高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491787&idx=2&sn=894b48c7f0763d1e9918b5f6d9a68b19&chksm=fe26e5cac9516cdcb549574d9ea7671a8ca1644ec365103764ef5e394e1a135234e6904b0d65&scene=58&subscene=0": "CVE-2023-23560:Lexmark打印机服务器端请求伪造漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491796&idx=1&sn=a591d7f370fcba76b195cb82cc3847c7&chksm=fe26e5d5c9516cc3a07a1acae8e3d2ba6746443bdccaa82247c10657e4bce8e13a47d698ad71&scene=58&subscene=0": "CVE-2022-27596:QNAP QTS∕QuTS hero SQL注入漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247556868&idx=1&sn=c617d450756c0557ff1266baf3f80426&chksm=e915cf3ede624628adb794ea9d4535a169b48f2d75fbe4f81870a1076ad3f4810c0fbddf98df&scene=58&subscene=0": "【技术原创】Horde Groupware Webmail漏洞调试环境搭建", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491801&idx=1&sn=62540c25ea1fc3a3f866c1ff8cf476e4&chksm=fe26e5d8c9516cce9eaa581d2382700135404e6f072b35acf9276c7209b8960de7ecc66b4c43&scene=58&subscene=0": "CVE-2023-22482∕22736:Argo CD 身份验证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247556885&idx=1&sn=f1bdbd83d8a5d9a5ddcbcdb7bd9a0d62&chksm=e915cf2fde624639ed5322b7fbf506b741c80491d84589bf1b9820d13efab96ff57b9abb7be2&scene=58&subscene=0": "CVE-2022-42856:iOS 0day漏洞,影响iPhone 5s等老版本iPhone和iPad", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458493266&idx=2&sn=235736dba6bc7ec0d726a21754ba6044&chksm=b18e91d886f918ce6609c86f32d28f15abe1cf05e71e455b1886a598b1fdc97bcbf02b0aafc7&scene=58&subscene=0": "27200美元赏金!安全研究员披露Facebook、Instagram双因素身份验证漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458493266&idx=3&sn=f57dbd97a75dec34212f575d46218c05&chksm=b18e91d886f918ce45a58487474c53b78022ae54089a5b53da7407d2ce0af7113c3bf9d3d1fb&scene=58&subscene=0": "想要深入了解各类CVE漏洞,get独立挖掘和分析漏洞的能力吗?", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515460&idx=1&sn=300b30047d4cb364fa903361e05d3052&chksm=ea948c2edde30538eab915c12ac7b6a1d83fe856638e1a22d727813fb060b9c1ad7f612dfa10&scene=58&subscene=0": "F5 BIG-IP 高危漏洞可导致拒绝服务和代码执行", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515460&idx=2&sn=6ff90ed5a1a5cfe857a4aa75a16def08&chksm=ea948c2edde305386563b822262353daa67aecbbe719fdcbf7b97f402220ee247091ea7aeac0&scene=58&subscene=0": "热门开源Dompdf PHP 库中存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247556983&idx=1&sn=6d82fa0da6bbbeab07a1ba623f56f2ee&chksm=e915cf4dde62465b1cc58f2364765a1d318ec8c5e435b4c69e7e3ffb9877567ec2217b2795f8&scene=58&subscene=0": "ImageMagick:隐藏在网上图像背后的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652030295&idx=3&sn=166a3b7691e894cc8223bd17daea1cab&chksm=f36fe917c418600181c972cc9b84176d7a74e72b96ea31ab86b8f0b9d7e39a4b35b608cb79f9&scene=58&subscene=0": "【安全圈】VMware已修复的堆溢出漏洞被勒索软件利用攻击ESXi服务器", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515504&idx=2&sn=59769cc0918ffbe4502f46bca1f3a6a9&chksm=ea948c1adde3050ccb386f6f3f2e1851f4b3aec399d1c496bf1ed6b4355e88d7aeb87a86d249&scene=58&subscene=0": "遭活跃利用的GoAnyWhere MFT 0day 补丁发布", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497658&idx=1&sn=d1718c5294e9c5c6f4013d6a370d27da&chksm=fe79d322c90e5a34c4e7c2a02eedcc47a13972be2d7eb002a33621f3f7172746fb63326d2b06&scene=58&subscene=0": "IBM WebSphere Application Server远程代码执行漏洞(CVE-2023-23477)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488033&idx=1&sn=c41e361f49daa2573026dfe1275f8037&chksm=c2c6452af5b1cc3c25c5e758415d17a1bb67fb1a64fb0a8de7ce0843c44cc063458f3617a3a1&scene=58&subscene=0": "【漏洞通告】IBM WebSphere Application Server远程代码执行漏洞(CVE-2023-23477)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247557232&idx=3&sn=ca560dae23f1c31f1cfa8686b7bff606&chksm=e914304ade63b95c9a94b05581be027f11fa484d095e13865d92c8b400d60b054b903161f940&scene=58&subscene=0": "CVE-2022-34689:Windows CryptoAPI漏洞PoC公布", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247516883&idx=2&sn=6dd5577d4d628c211bb4fc8ad56b185f&chksm=ce4609c3f93180d562260fadfcb6cfb015040fd454d1902108c10b7dad2275be1b05afd40c2a&scene=58&subscene=0": "【漏洞通告】Apache Kafka Connect 远程代码执行漏洞CVE-2023-25194", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458494504&idx=5&sn=0f1099583439b97e246b469f7b67bd0f&chksm=b18e96a286f91fb40e6ef12a67e76f74eb305929f3d423381cae8f73aabf4fdedd007cd1d19b&scene=58&subscene=0": "带你一路狂飙!快速掌握PHP的调试技巧及反序列化EXP编写", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652501556&idx=1&sn=a654f7bc7fb06e5ec2a44ed150e5d5c2&chksm=f2585587c52fdc9159aeaf62628c35c023e42c095327c8a9a3b9afea22ed414048bfb5d74ff6&scene=58&subscene=0": "雷神众测漏洞周报2023.02.06-2023.02.12", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491845&idx=1&sn=7b877f1b8497988c5e5f14e784ab555a&chksm=fe26e404c9516d12df653bdb84e900012e7353e672a82f4d94bedc0bf49a8aa215607a3e6e55&scene=58&subscene=0": "CVE-2023-23529:Apple WebKit任意代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497708&idx=1&sn=e044bc73f214fc3dc41c3e17285c0a1a&chksm=fe79d374c90e5a6208c1134374e0e862db2cdd38fdb9538a398384f093549c6b1d1f9d2e0209&scene=58&subscene=0": "Apple产品多个漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515546&idx=1&sn=f9311f04f319e12385edbfcd698fa495&chksm=ea948cf0dde305e697564ae3c0b973831eece5c572326a20990546b6bacf3bef67450345d514&scene=58&subscene=0": "苹果紧急修复已遭利用的 WebKit 0day", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247557497&idx=2&sn=ae71d749d86192c4e3265172546501ad&chksm=e9143143de63b855791971a957c477aad3380281b6d9757fa092319aa1b5ddd1b40f5c0b89e6&scene=58&subscene=0": "Clop勒索软件团伙声称:使用GoAnywhere零日漏洞闯入了130家组织", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247557497&idx=3&sn=d3ccbd05cb90ef8fbd264df79e75c591&chksm=e9143143de63b855b3525bedcbc1fb1aa24fe1ae732d74472e116a49ed887bc963340504fdf5&scene=58&subscene=0": "CVE-2022-22583和CVE-2022-32800技术分析", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045247&idx=1&sn=e99542169f15d3b8c755b7bfb2a43a24&chksm=803faa21b74823375d0d9b7dc7937a621552a92123135e18e6bc1a5987271e4d11b22bb01f70&scene=58&subscene=0": "【漏洞预警】微软2月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664176313&idx=4&sn=a10fbfe3daa8aea290bb20a6903fce0b&chksm=8b591840bc2e91561fb51469f33d6a638859349dd324219d89cfca91244d0b3bdf0af0776ad1&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA3MzU1MDQwOA==&mid=2247484330&idx=1&sn=b725d8802e71d215baaf57bd8159648b&chksm=9f0c1c8da87b959bb6f98ddab396a6c9f5009a41efdb41d018d28aa7ab74a30508ce74f7394e&scene=58&subscene=0": "Android 反序列化漏洞攻防史话", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458494923&idx=1&sn=1d157ebbe377348cad89a8367a9d4da4&chksm=b18e974186f91e5776bbaf02530f84af44781a7e26187dd4f8907cec6cab7ec2df8f5ee2f4ee&scene=58&subscene=0": "CVE-2015-2546提权漏洞学习笔记", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247497028&idx=1&sn=79d9c0773c1a16a5e94d32294b7ca75c&chksm=fdde8bc3caa902d5ac89af5b6c59233bcffe37ce7cce8aa4fe8eb6aa9cd388a4065ab92a5bfa&scene=58&subscene=0": "ZKP 系列之 Circom 验证合约输入假名漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491253&idx=1&sn=1caf40cf97c5238ac58bef1254e37b18&chksm=96f401d8a18388ce04f9a2813df0e40c698c8ff0792417ca6ba3a2e3e945acff902d7076adb0&scene=58&subscene=0": "漏洞风险提示 | Joomla webservice 接口未授权访问漏洞(CVE-2023-23752)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515656&idx=2&sn=75097008dc3956ef9f875f11ccec6d4d&chksm=ea948f62dde306749d121190dcb5ebb30950231f44947d0194107e5f848801a0c9dce99f5818&scene=58&subscene=0": "热门开源代理 HAProxy 修复HTTP请求伪造漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491869&idx=1&sn=eb4c5401f22be6e08fa8f686b376920e&chksm=fe26e41cc9516d0a8da8a44de28f515adf9a197239970796f839e7248259424b3468c55bbc4e&scene=58&subscene=0": "CVE-2023-23752:Joomla未授权访问漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491869&idx=2&sn=3a9a63f17d92cec0575cfe68e4fc63ed&chksm=fe26e41cc9516d0ad7ddfdba2968570b03a730a00f5f67a0669b53ddf36e314e749532aabe27&scene=58&subscene=0": "CVE-2023-24998:Apache Commons FileUpload拒绝服务漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497797&idx=1&sn=0b337bd555a67a90094e46161cdd31b0&chksm=fe79dcddc90e55cb3b1da85ec7d47e6f3bd71338a9759628e656e04e37e8a1215bf92cd1a4e0&scene=58&subscene=0": "【已复现】Joomla未授权访问漏洞(CVE-2023-23752)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497797&idx=2&sn=d9086378cd19a4cd75896b8c009f95ac&chksm=fe79dcddc90e55cb4c8d4aa79a9ef4636aa112cb0b109451708d1fbabb64ae2af7382debf959&scene=58&subscene=0": "Fortinet FortiNAC 远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458495053&idx=1&sn=e037fbe4c1ee7d86342985897cf1e6f5&chksm=b18e98c786f911d13201a01d3626398637a97f524d39d9cf191d212505874b40e2097f7fe9a3&scene=58&subscene=0": "CVE-2016-7255提权漏洞学习笔记", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515674&idx=1&sn=a2545f99534c8c181bb5022bbc3989e1&chksm=ea948f70dde306661e8a7532ffad9fe411f3cd1cbcb74c5ae58c6e4f394d04247cb807e3ce08&scene=58&subscene=0": "VMware 修复严重的Carbon Black App Control漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515674&idx=2&sn=bcbd823a17b7b53fa3727413e8b16af7&chksm=ea948f70dde3066650f26a64de4d11fa90f8b89d0724f7d08d98105e9d23003c590c5def6010&scene=58&subscene=0": "苹果更新安全公告,新增三个漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493030&idx=1&sn=d854ee809c510d0e5ac627f6fe78ae04&chksm=fd74d56fca035c793aecbaf5f72db5c6861a041f6008e6806df77e7e686ec5eaac2b6f7832bc&scene=58&subscene=0": "关于Joomla存在未授权访问漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497814&idx=1&sn=e874182595597f68c01f9d9610a15e18&chksm=fe79dccec90e55d8e1626348dc381a75dc441875bb098ebdb8c926d2a4c2b8dd851cae338489&scene=58&subscene=0": "VMware Carbon Black App Control 远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497814&idx=2&sn=751cd6f30cd0a6aafa9a54fea4689dc4&chksm=fe79dccec90e55d86be9e601f65c1d6ea5e30388ecb286de5b61bf86d06ffe48e07c9003b0c1&scene=58&subscene=0": "【已复现】Fortinet FortiNAC 远程代码执行漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247517276&idx=2&sn=c543bba51ebb4e7801cba1bc72f25d3c&chksm=ce460f4cf931865aca5f8eb804ed6b84f658600d2147b7966c684e4f68be1b1a81e14b330dac&scene=58&subscene=0": "【漏洞通告】Joomla未授权访问漏洞(CVE-2023-23752)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247517276&idx=3&sn=8822839506828410ea0dc2e1e6f68e7c&chksm=ce460f4cf931865a76f3ae5315fe8653877e5e0fa3986fdd90ca3aaeacd5624ebbc23cb117d1&scene=58&subscene=0": "【漏洞通告】Fortinet FortiNAC 远程代码执行漏洞(CVE-2022-39952)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247557874&idx=2&sn=411077d6fe9d41b32dcf5c269764b9e2&chksm=e91432c8de63bbde60d3e18c87ded130bb48a571d22ee82320934c997db116ab58942d686144&scene=58&subscene=0": "TouchEn nxKey键盘加密应用程序出现的许多漏洞很容易使其被黑化", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045254&idx=1&sn=50a33c047697502a5c2ed114bca4631f&chksm=803fabd8b74822ceebe40fb17ac6c408e74370feb3d8f284143ea9ade4d66da98e9812db182d&scene=58&subscene=0": "【漏洞预警】Joomla未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247513001&idx=1&sn=a9f5596cb1f6f2e354a59f33b58ca6c3&chksm=eb706d96dc07e480850351f9fa6c79b80e83fddefe224a598da2408e3d95dda84998c9bdd0cf&scene=58&subscene=0": "【火绒安全周报】谷歌支付1200万美元的漏洞赏金∕动视暴雪疑似员工信息遭泄露", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247534924&idx=4&sn=f5a83697da74ed3e41697c47cc94c8e3&chksm=c1e9c51df69e4c0b83839e8f5a755f8ccd6680911ad11479e7cad9c43172e1383b54edf2a378&scene=58&subscene=0": "【TrustZone相关漏洞导读】Glitched on Earth by Humans", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498018&idx=1&sn=b98a39f754e6d77185a8c570a1b70742&chksm=973aca40a04d4356f958c04d39268e01295f2731d5b74122dd3ef02ad73f996902fbe80d30fd&scene=58&subscene=0": "CNVD漏洞周报2023年第8期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498018&idx=2&sn=1848dd3e9e6a79c48153750b56169430&chksm=973aca40a04d43561a26a9d196ad67d59a0917d5cc7e59096b89af835fdaee0863abfcdb8da7&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230220-20230226)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515762&idx=1&sn=3de5cd1e8a38ecfddac1ebab20ee6b48&chksm=ea948f18dde3060eb71f9ad5b5a212e250c11191c75766067819d29b3ced5103a9e86c9dd415&scene=58&subscene=0": "QNAP推出新的漏洞奖励计划,覆盖应用、云服务和OS,最高赏金2万美元", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515762&idx=2&sn=d0544e7c040ded8d269077260cf6dd17&chksm=ea948f18dde3060e3aeb1b186df35346212a396dafcdc58377d0aad3d492d5483edf1b72a7cb&scene=58&subscene=0": "Chromium 漏洞可用于绕过安卓设备上的安全特性", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458495738&idx=1&sn=97f941a0ee1dfbaddc067923a065c7fb&chksm=b18e9a7086f9136614e6e161d91ee6ce3bb13b7f943441a293454e435443a1542bedc0b5efbb&scene=58&subscene=0": "Windows 2000系统的一个0day漏洞发现过程", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458495738&idx=4&sn=0f59a14c11c0ee7a03637f8b8ba3332e&chksm=b18e9a7086f913668e1d7ff397d695b4783724d61e1ea63914a58f80c6dffa1efba9061362ff&scene=58&subscene=0": "明天开课!系统0day安全-二进制漏洞攻防", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247500125&idx=1&sn=be5aa0c7eb891e1d3ced4d1b7d55831a&chksm=fa5214e3cd259df56c9575dfbfc4789fe93e43b93717a419897f40f21e67863330b75521b59a&scene=58&subscene=0": "山石网科获CVE漏洞编号颁发权限CNA", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247535023&idx=4&sn=dbdd70f2ecefea4e895f35ddcbfe5cc6&chksm=fa93ff6ecde47678392685b1cf158a6009f1213123eb8fb26c391a2c7fa85831052bffd703b6&scene=58&subscene=0": "针对痛点修复: 2023年有效的漏洞管理", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247499991&idx=1&sn=18dee09de6007d604de3d05bdb87e577&chksm=cfcaa3c3f8bd2ad506d1591df7d6e31c5e0029be63a45ded0df9225bb330debed7783748b5f6&scene=58&subscene=0": "0day 速修!Smartbi 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247497863&idx=1&sn=b1491f0343ff76f15ba2e6269ad8cfbb&chksm=fe79dc1fc90e5509806ac5ec072a93dad754cb32b4742a54150ae000c701447adcb2ad785c41&scene=58&subscene=0": "Smartbi远程命令执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652030887&idx=4&sn=80a5c3de889f4943b1455f267cb13ac9&chksm=f36febe7c41862f16550e57981d534748cf29a8792357f3bdc962bbfdb35bb3d22917b0e7dda&scene=58&subscene=0": "【安全圈】iPhone 存在重大漏洞! 歹徒靠“偷看”搬空银行存款", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491264&idx=1&sn=cdc5b203155c0997eeddc6494479e0d1&chksm=96f401ada18388bb8da71f9d5033328f5d9c935827bc32a93534551b9c567a08d8704f14f8a3&scene=58&subscene=0": "漏洞风险提示 | Smartbi 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247507965&idx=2&sn=bda7939fe2acb1d0b35a3163437166e0&chksm=ebfa98dddc8d11cb1024f3a686f5ed9298cebe0149e11e4a354bc5f5c1d074fc9032421edfc1&scene=58&subscene=0": "谷歌2022年发放了8200万元漏洞赏金,平均每个漏洞近3万元", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247497205&idx=1&sn=0df5b8681134d24706d84a2712fef404&chksm=c0075869f770d17f2bc1aaea39310d5a05183bcbdeca87e99cbcef268fe717f459ea1fb598e6&scene=58&subscene=0": "1&2月份重点关注的API安全漏洞一览", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247558152&idx=2&sn=5627951c01f79aea257767fee6d6f22f&chksm=e9143432de63bd242eaf0e25405d59783d4bc6fd0be2d8880709f2f732980b2c901cbe200b0b&scene=58&subscene=0": "如何以一种意外的方式发现并找到 WinIO 内核驱动栈溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247535137&idx=3&sn=e26eb362e18303614e9d972bab15b76a&chksm=c1e9c670f69e4f668ba0c2a2586fdf957ebc45dad4a219e01b0e5afcedcbac1bc720386aef15&scene=58&subscene=0": "如何以一种意外的方式发现并找到 WinIO 内核驱动栈溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247535137&idx=4&sn=e2323b85a30494c647b84f9ab8100c6b&chksm=c1e9c670f69e4f66027c941af8c6edea7b4f7128b43e6b7b73e00f104d42398b2679cf1cb3f3&scene=58&subscene=0": "重大供应链威胁!这个 Java 开源框架存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247497416&idx=1&sn=b56a90dc0ea3e6dd587f09b90dbb4f23&chksm=c1448475f6330d6303352a6b93b815b498558d9ba8e9fdd3a7e992792b38148fe14923cc6b2a&scene=58&subscene=0": "严重性评分差异干扰漏洞修复", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652501706&idx=1&sn=5c677f40d7297f925122360e93f2e90f&chksm=f2585579c52fdc6fd148fc41fe190819ebf7570fd51459851e30ec76c16e203fef7baced07b6&scene=58&subscene=0": "雷神众测漏洞周报2023.02.27-2023.03.05", "https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247508316&idx=1&sn=36d50d5692915ad1113d4db76ad5aba6&chksm=e89d8984dfea00926f74ec20e7842fdf5c4e7fde82d0f0b0cf2ac10c530ae21a3e0fa374cf65&scene=58&subscene=0": "TPLink 中继器设备命令注入漏洞分析及复现", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247507991&idx=1&sn=f2d9aa2b2e592da0a02ad8de66296a9d&chksm=ebfae737dc8d6e214696c343c6fd760657182e27dbc69c5324cb746674525b9a63633cfe4a55&scene=58&subscene=0": "大疆无人机被曝16个安全漏洞:可破解禁飞限制、飞行中强制坠落", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247498498&idx=1&sn=b08147f28191d9099028907736055d18&chksm=ec1dcb2adb6a423c4857fdcc2e76c8c8d8c6f819864ea680f3c90d9262e563e810f48110d5d0&scene=58&subscene=0": "如何更高效的玩儿 nday 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493081&idx=1&sn=f357c2ee63f56911e49f1a2317133e4f&chksm=fd74d510ca035c06caf9940cb29d434155300a28622409651e666e1ad75eec0d1b81b40c16ff&scene=58&subscene=0": "CNVD漏洞周报2023年第9期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493081&idx=2&sn=498c337e3043ca5574ad23f2ace21708&chksm=fd74d510ca035c06b370b1b2556fc0a335cbcd3067989388b3d898eba380ecaa450d66a1d2bf&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230227-20230305)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458496584&idx=1&sn=4d74ffbf312639dba3ab745ac46517af&chksm=b18e9ec286f917d46ed7b5d20462c43a6726db71c8c321b57042b864b4ad5683060f56cbc40a&scene=58&subscene=0": "[译]大疆无人机安全与DroneID漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458496584&idx=3&sn=be8ee21f66f51125119d0e2695a8e220&chksm=b18e9ec286f917d4e8339c8638afc3379cf9565a948b1d8990a8d1cff22ec8b2dffcf99a5978&scene=58&subscene=0": "正式开课!系统0day安全-二进制漏洞攻防", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515830&idx=1&sn=62672aef02ae740d65e67ab95a5db18c&chksm=ea948fdcdde306ca7893363e26bd5bb43dd9943d0e2be4690cc6e385c40a5e449486bcb837a2&scene=58&subscene=0": "【已复现】Microsoft Word 远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247487338&idx=1&sn=1af7d11a37cf6d9049ba508afcaef373&chksm=fa5aa187cd2d28912017f2c50b0d0ba1cc689d5a153bb1d33b307eb57d49e46cf801c3ac7416&scene=58&subscene=0": ".NET 调用Expression表达式树执行命令(5)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652031129&idx=1&sn=0ef375ee19fbac8349168c2a3eeac4b8&chksm=f36fe4d9c4186dcfb046175851735080259d5b44643c7d9f0c8f32d7d1741cc6bc81387ce7c4&scene=58&subscene=0": "【安全圈】研究机构披露某购物平台利用漏洞,非法获取竞对信息,阻止用户卸载 APP", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488130&idx=1&sn=a889eafb23174d222109d7d0303d1038&chksm=c2c64589f5b1cc9fde7bdca60e0ca40e050560aae1e8fab33f47dd476da8790842057a2534ad&scene=58&subscene=0": "【漏洞通告】 Microsoft Word 远程代码执行漏洞(CVE-2023-21716)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247558351&idx=1&sn=b2a5aecc9be4547715a3749684d149ab&chksm=e91434f5de63bde3c8755e9c86f3af692182c5fecf7082f7822e3cab3b5b76e9e194e59d8a86&scene=58&subscene=0": "NIST抗量子密码算法被爆安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247558351&idx=2&sn=bb553ceff82f275b789aac5b8b923bb1&chksm=e91434f5de63bde32b78d09f5e1e11b1e8fc879cd1fa122818d817c47a2c4f8503a591ffe3a9&scene=58&subscene=0": "Sysdig报告解读:配置不当和漏洞是云安全的两大风险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652031161&idx=4&sn=33a8ff910f309667d7b6bcd1f1b168cb&chksm=f36fe4f9c4186def774c912f46f546cfc3788cf8e83771a865bdf42f67c905c15f6746684629&scene=58&subscene=0": "【安全圈】Win11 强制要求的金身告破 TPM 2.0 漏洞影响数十亿设备", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247558413&idx=1&sn=b989669735234e44060bbd0e4afe9440&chksm=e9143537de63bc21d2366af1579641cdc9aec153e4d2d7629ed60eb5cc58c3a66b3914237aa2&scene=58&subscene=0": "TPM 2.0安全漏洞可窃取加密密钥", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247558413&idx=2&sn=a9468eb241589a06fda7943bc9e6f9cd&chksm=e9143537de63bc2137f1f706bdba056beb18fce8af79525bab7f495469de16432b69853ad36f&scene=58&subscene=0": "CVE-2022-25365在内的多个 Docker漏洞,通过攻击命名管道实现权限升级", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458497424&idx=4&sn=29a4ce346a457a8d752cc66e9e079d55&chksm=b18e811a86f9080c0d82a621fc70d6452576b25da30b6bbc685f6eb82bcf2a121a4d85bd7a48&scene=58&subscene=0": "快速掌握PHP的调试技巧及反序列化EXP编写", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491296&idx=1&sn=3673bde0517b695ebaab4cd050431276&chksm=96f4018da183889bf1ed140434bbbedf30fd4851d6c17e98ddb075bfc50e934ad23402102784&scene=58&subscene=0": "漏洞风险提示 | FortiOS、FortiProxy 管理界面远程代码执行漏洞(CVE-2023-25610)", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247500323&idx=1&sn=d490cc0d8bd8298a3d0a093c388f2701&chksm=fa52179dcd259e8bb50fe3de14bfb67612204aaf46be994c7a5da67713f1cdf296f8a8007d49&scene=58&subscene=0": "美国网件Netgear RAX30路由器RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247484984&idx=1&sn=cc9c7b4f9053f1c3f91018c3bb333a20&chksm=cfa49dc3f8d314d57d91f02c5b4ac8a746aad43b4ae18533c850175a94278054b3d17297aa72&scene=58&subscene=0": "浅析IPv6下的安全漏洞与应对措施", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515862&idx=1&sn=d2ef6b5ab51eba3e97af531d1a8b212b&chksm=ea948fbcdde306aa2d71b31b492175fc0c01a69233601e35fc9fee73fbfbae62668f3aaaffb2&scene=58&subscene=0": "Fortinet:注意这个严重的未认证RCE漏洞!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515862&idx=2&sn=559cb44fa0529b875f5361b1112c5b60&chksm=ea948fbcdde306aaba8058c93f2a95d0d723359a0d01dee3fa2e873d99d65d6a7d5d0c5bdae4&scene=58&subscene=0": "Jenkins 出现严重漏洞,可导致代码执行攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515862&idx=3&sn=e59b1a83fa85ee490560066b8b39f535&chksm=ea948fbcdde306aa8791fa944d0c5db86f2535cd2381fc0dcc7d846cf5ee4c1686e12f3696d8&scene=58&subscene=0": "CISA新增3个影响IT管理系统的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247517720&idx=1&sn=147b9e9704b289c1194075c225a48c44&chksm=ce460d08f931841ee449f0af542ca71973fe40f34f0a65309f04d3dbbfbf8498087fede482cc&scene=58&subscene=0": "漏洞通告:Apache Http Server请求走私漏洞CVE-2023-25690", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652031207&idx=4&sn=b848ec73e7021ffd21a1029674d74c86&chksm=f36fe4a7c4186db1de4bdd1b4fbe0068a7602615e5a018cff4209c51c8b037c4d5a248ad91a6&scene=58&subscene=0": "【安全圈】Jenkins曝两大严重安全漏洞,可允许代码执行攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515885&idx=1&sn=8bd8588f210b0b78430ead9ac6d5eeb1&chksm=ea948f87dde30691621e2aadd60a0a45bf17ed8880497e1c1b6489d2b57c7f52806f896318c4&scene=58&subscene=0": "思科企业路由器受高危DoS漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515885&idx=2&sn=26d62bc99cdd37f8365bae8a9b94dba5&chksm=ea948f87dde30691fa7f9887c40e755916adb1ef81c320c67bd9cf032e3495edbc2c16f71288&scene=58&subscene=0": "CISA必修列表未收录数十个已遭利用漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515885&idx=3&sn=ffefe13a8f5da2c680df756b9e641cfd&chksm=ea948f87dde30691fda5efbd07f068606a775eb6e6e596b39f44c7f1cd843a4c64a24c1a88a7&scene=58&subscene=0": "Veeam修复严重漏洞,可攻陷备份基础设施", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491937&idx=1&sn=e79a1e1a4a2f85628e807c3772899529&chksm=fe26e460c9516d76455e608f44dfde0516aab55b0731813b990c00d49cb3b260cd1afef8ff50&scene=58&subscene=0": "CVE-2023-21768:Windows Ancillary Function 本地权限提升漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491937&idx=2&sn=a3daf844724e4d23888453e193fd4c27&chksm=fe26e460c9516d76fd0c6632a2dfe1d87f6ec472cf0b135f284c78f8f525ff274ec355bebb20&scene=58&subscene=0": "CVE-2023-25610:FortiOS ∕ FortiProxy 远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652031340&idx=3&sn=73911b694d2e53db282bfe93cef755de&chksm=f36fe52cc4186c3a007f7f3c136204f30ef44e3ceb2759c8263e96fbc618ed02036a25237da9&scene=58&subscene=0": "【安全圈】可泄露用户密码,Bitwarden 密码管理器浏览器扩展发现新漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652031340&idx=4&sn=30809f0487da8f7f558c754efdbb132d&chksm=f36fe52cc4186c3a7d09be4755055ee473fb2ac7c97cd08378c8e8ff7a825c48d96261cad44a&scene=58&subscene=0": "【安全圈】黑客正在利用远程桌面软件漏洞部署 PlugX 恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247490776&idx=1&sn=0104e61a81d39838feab66a61bd5dcb4&chksm=ec1bfd0bdb6c741da082f4e0ed1bd5b7366e4fd428a3f0382d1ff7ca7a7a47a9ea9caff576d6&scene=58&subscene=0": "活动 | 什么?这两个月的漏洞奖励都翻倍?", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458498157&idx=1&sn=366f45bb8b731d0201324e7fc400e6dc&chksm=b18e84e786f90df19b716a5ccb23483e516b9385da573df9433be99054c3e1a9d8691469845e&scene=58&subscene=0": "全新Pwn系列课程上线!解锁二进制漏洞挖掘技巧,掌握操作系统底层知识", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515912&idx=1&sn=0d48724c08d4d63949a7142683b6fdd7&chksm=ea948e62dde30774b504e3a089bab575daf337854bba663d40f81014b5672260b74230a007a3&scene=58&subscene=0": "Fortinet FortiOS漏洞被用于攻击政府实体", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515912&idx=2&sn=9a2496bb8c17bcf9ed8e477367f18001&chksm=ea948e62dde307749ef7616c97efc1c91e680e87bd654e1a1766fae70831f36318fa216354cf&scene=58&subscene=0": "CISA提醒注意与LastPass泄露事件有关的Plex漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491315&idx=1&sn=2faea3c945bfe79f3459af2cae1925cb&chksm=96f4019ea183888893aff05a67723628b984281e04b67f8184cedc2ccf55c3a718f7ceb3ab74&scene=58&subscene=0": "漏洞风险提示 | 微软3月补丁日多个高危安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515919&idx=1&sn=93fed13d31237fe54742e8ed9d5d4fd0&chksm=ea948e65dde30773778a62d7fdf7941794ec42b1c350761ec8df50d27dbe226a8d8aef902b22&scene=58&subscene=0": "微软3月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498048&idx=1&sn=4b594ec737ac7ea4420a342c57fddcf7&chksm=fe79ddd8c90e54ce2dacf892eb092468d2df798f102b3494730ca81b28de5a9c9127f65c3517&scene=58&subscene=0": "微软2023年3月补丁日多产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491953&idx=1&sn=6bc6c87aba134ea0e8c0f1391ea27095&chksm=fe26e470c9516d66a1db46b26426e46a0b7a06fea964ccd82d800f5c693205f81917c4d8879f&scene=58&subscene=0": "2023-03 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247513498&idx=1&sn=7643e8f8e5ed2d59662eccbc1f23bcc9&chksm=eb706ba5dc07e2b36a40cb8c61eeec38f38fef0d58832ec181365bc24184f7f6d8dce0f4cf25&scene=58&subscene=0": "2023-03微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458498394&idx=3&sn=174b693b2624db3c1bda2611bc4d2728&chksm=b18e85d086f90cc6c19df0b8f6f750b602d94da177b693a64cbff470e3911ab5708be74c92c4&scene=58&subscene=0": "正式开课!系统0day安全-二进制漏洞攻防", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484044&idx=1&sn=71c0e4d9abeb486d200111b22a2b99b3&chksm=c2b100faf5c689ec9653bd022983d1e218259c0eca48d1d2a6f90e734c3a503af18d89b7c0f3&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年2月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515956&idx=1&sn=01fe340192b1659e658210ae4b02ac97&chksm=ea948e5edde30748775821e1c9ed1b389b2c0dd119e01cd78b9292d859542e3f209300000e4c&scene=58&subscene=0": "谷歌在三星Exynos 芯片集中发现18个0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247515956&idx=2&sn=7870f9607adf1541eef5be5402a82ab4&chksm=ea948e5edde307489a6b2a77b80ba248729a3d0dbfd20a6b65ee00d181f4b422bc09fa95eb1c&scene=58&subscene=0": "Mozilla 修复Firefox 浏览器的多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491959&idx=1&sn=354174a7453cd3167537442dd86a1401&chksm=fe26e476c9516d60787f975dbeb1e528425ce93206912f60427176cf461a252adac12fd69952&scene=58&subscene=0": "CVE-2023-23397:Microsoft Outlook权限提升漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247535554&idx=2&sn=c03482deff61e9fe5d2a653bd31517c2&chksm=fa93fd03cde47415953fe3a46b336a4e282cd92652003e9c718e7992752f6f4bf2ef3a69bbd5&scene=58&subscene=0": "紧急修复!微软Outlook和Web标记功能的两个高危漏洞已被大肆利用", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247487417&idx=1&sn=5e81a1b84d891e027b48067bd7a32ad5&chksm=fa5aa154cd2d2842e1a1cdb0a6b6649e415df39cbaac7f9e506ce00a7592b4280697092e25bb&scene=58&subscene=0": ".NET PC客户端安全评估-SQLite注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664178468&idx=4&sn=e78a0e342300f83d29e5db52b8b611ad&chksm=8b5921ddbc2ea8cbb658e4082fb6b76e0727a6d206fbbbcf2c85f62f4c93bf87e3e86d29f7a5&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247497642&idx=1&sn=234e9332fdb37d819063decacd9b9ee9&chksm=eaa97f8adddef69c5fe379ca48e6c82ad3c22f0840d6756afd8779f39cd1e0de789550bb5b30&scene=58&subscene=0": "Fastjson漏洞和JNDI注入的前世今生", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458498698&idx=2&sn=1be4286243e16d8e3af1c79a636972e1&chksm=b18e860086f90f16e9fa31043d70fdfad1c692f8eef85af1822fef2d5f5cded497e33e94d664&scene=58&subscene=0": "全新Pwn系列课程上线!解锁二进制漏洞挖掘技巧,掌握操作系统底层知识", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247488587&idx=1&sn=eaa6d625d787d74342dbbf44751b1e83&chksm=fe2eebc0c95962d6595920c03318678accf546a6522ef1beb64c88df90f2416e262a9e33513f&scene=58&subscene=0": "SySeVR:使用深度学习的漏洞检测框架", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498070&idx=1&sn=9212558a06ed798050d59b06eb31f52d&chksm=fe79ddcec90e54d8772ffebc530b981c9c1ea341d980c13d501aa45aff1fc8238e8f34d9ee9a&scene=58&subscene=0": "全网漏洞态势研究 | 2022年度报告", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650176054&idx=1&sn=ae799116802f387b09319eeb22cde59b&chksm=f448818ac33f089cb41b7fcddb76d09eb16a846d63dfc930d84d2355680eb8b6f0c3e84aa546&scene=58&subscene=0": "春春欲洞 | 漏洞翻倍奖励,暖心好礼迎春", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247517954&idx=1&sn=7820c08652736e96e2fe15c221314b4b&chksm=ce460c12f9318504184b33040cbede8c35d60da7b8bc41a8b55b2c8ecad807f8208e30d63288&scene=58&subscene=0": "Adobe ColdFusion多个漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247558912&idx=3&sn=2974d3b7e3b10e340a9183be3a571f67&chksm=e914373ade63be2c9dc48816f1a04e92f2d3bc6cde4aa819adaecfe104641d2cae2388fdd9f6&scene=58&subscene=0": "CVE-2023-23397:Outlook漏洞PoC", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247505672&idx=1&sn=638255f31c1079460271945a7b560a99&chksm=ea66207fdd11a969c02794a3ce2e62f11780f256836a6a2baf72f38dc5d5c6836ab8f648d239&scene=58&subscene=0": "全网漏洞态势研究 | 2022年度报告", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650176068&idx=1&sn=cb41cc8984ede3ac8ede4b34dc82473f&chksm=f44881f8c33f08ee76c668501d7a8b09c690095db2083e243ff30e8ebc88fc4e8371172dc8a4&scene=58&subscene=0": "微步成为国家信息安全漏洞库(CNNVD)一级技术支撑单位", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247535631&idx=3&sn=0b028a99a444b67cb78077ecbb7e691b&chksm=fa93facecde473d8e5fa54aee23c72de10a90c674501cdc4b710805611e0163b22275294c5f0&scene=58&subscene=0": "利用同一漏洞,多个黑客组织入侵美国联邦机构", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247490286&idx=1&sn=ea1f5b7787d7d9642cb7aef171217ffb&chksm=96db1134a1ac98228c2463265bce81cbb9cd3273922ae931c33e4af12765901da32c0f821dcc&scene=58&subscene=0": "2023年2月必修漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498150&idx=1&sn=a72ac25760dc7b1d6ea633fe64161f0a&chksm=973acac4a04d43d24f04d4b3fa1dafc42f444605c5dc5d18b9874068247fa1bf789c4d986bfb&scene=58&subscene=0": "CNVD漏洞周报2023年第11期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498150&idx=2&sn=b6a6e5bfbbed172ab93bcfaea13ba60c&chksm=973acac4a04d43d2d35543f520632adfa1a80eb7992d5c36ed0be0143281b55e1124790c17a2&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230313-20230319)", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247488635&idx=1&sn=6ddeb8cb691959850c3152d4fae55cae&chksm=fe2eebf0c95962e6d1dd365f8ac002c795d84521bc3b4bd747ddc11f1ec0cef0326843765896&scene=58&subscene=0": "结合图学习和自动数据收集的代码漏洞检测模型", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488186&idx=1&sn=7748c9a4dcec9fc6cba2cec1a265f9f8&chksm=c2c645b1f5b1cca792bb380e94ca65c2656c7d455e8f6467f3006ce46f69fa5df602a0f9afc9&scene=58&subscene=0": "【漏洞通告】Spring Framework身份验证绕过漏洞(CVE-2023-20860)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498098&idx=1&sn=11b501628fc3ca85f12c352ee29865db&chksm=fe79ddeac90e54fc6f52b51be38955e4d52e96dbe0f6f6d79be35ec53b8131bef69d5e43ecef&scene=58&subscene=0": "Spring Framework 身份认证绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491971&idx=1&sn=60887c2073bbf485187057e7416e2f72&chksm=fe26e482c9516d94bae3e0db8a063f3608baaec30ce18531550d6d86b9057e3b1a14699e1ea0&scene=58&subscene=0": "CVE-2023-20860:Spring Framework身份验证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247517969&idx=1&sn=c57b65879f9377e7f59d02a151261154&chksm=ce460c01f93185174396365fa0c1aa959a33d56da802d33b7ed82312cffdf534aaccf926effe&scene=58&subscene=0": "【漏洞通告】Spring Framework 身份认证绕过漏洞CVE-2023-20860", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516017&idx=1&sn=5e3c7c8f862132892592ddc4374aa0d8&chksm=ea948e1bdde3070dc62e414af95b3217979ff5f063fd707703f34555416351b9698de9b19f0e&scene=58&subscene=0": "速修复这些Netgear Orbi路由器漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516017&idx=2&sn=09318646aeb89a81eeacb8a2b51f9939&chksm=ea948e1bdde3070d895e8c6cea2e67f1eb2a166309fb913b70ade0894f89d12b2f3aefb0b477&scene=58&subscene=0": "CISA提醒修复这些严重的ICS漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247498554&idx=1&sn=aa16b67212105b0e9ec9234f0297a7cf&chksm=ec1dcb12db6a420407078c0aef6790d2a350842c93acc0033351d9e570181c3345eb483b460d&scene=58&subscene=0": "首期公开课,web 漏洞自动化挖掘实战", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458499198&idx=3&sn=84ae074e1b5729feb539932059046e7e&chksm=b18e88f486f901e2b8301d21fd2ec71134de274ded416c3fc57fa284531dd78432a4c3e56e95&scene=58&subscene=0": "掌握系统0day安全攻防技巧,成为二进制漏洞猎手!", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247497346&idx=1&sn=57cb4f410d05e0cac2a9374b7159bf5d&chksm=c0075b1ef770d2080581a836776027b29083afa95721a3cb4b66bae3ac3163d1a0a695d30ade&scene=58&subscene=0": "【技术干货】CVE-2023-21839 WebLogic Server RCE分析", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498109&idx=1&sn=a2da687e3f25165e023b256388e132b5&chksm=fe79dde5c90e54f38a4b69b19d50872ac127afd009e98d10748ed331977cf5e61f0245b65b04&scene=58&subscene=0": "MinIO 信息泄露漏洞(CVE-2023-28432)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247517975&idx=1&sn=dfabd6d89dc49fb318615a303ee628ca&chksm=ce460c07f93185111732a39687ea8631014d6b3a622bda235e9ae816d70f645ab615537ed444&scene=58&subscene=0": "ChatGPT+RASP,实现CodeQL漏洞挖掘高效自动化 | 2023INSECWORLD", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664179090&idx=3&sn=9a4dfb1e7e7fcd82d178e4553cf91b2a&chksm=8b59276bbc2eae7d6f0f2a8b8411aaf2f309d84a8dfef4d961ff280cb88a206a8fddbcd75e18&scene=58&subscene=0": "2022年度CNNVD漏洞奖励评选结果公告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491978&idx=1&sn=4870d58fee4592f4b8a12a4d53aad796&chksm=fe26e48bc9516d9dbadd2d48de2a414a309b8d024bd5bbaf773474030eebf52ed7639dda7033&scene=58&subscene=0": "CVE-2023-28432: MinIO信息泄露漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247527209&idx=1&sn=5a549945a40b73d6731b3d5ad8904c81&chksm=eb848089dcf3099f7469e26717431f80f3a94261ab4cbfb02cd4a1ac23ae4b645a53e082fe1e&scene=58&subscene=0": "ChatGPT 写 PoC,拿下漏洞!", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247527209&idx=2&sn=05b4fa943f11c7aa3da5e855cfb2146a&chksm=eb848089dcf3099fc8d74012d003d120239f8e3828672923d0d7284495d24e74dcc4f79f2b69&scene=58&subscene=0": "GoEXP将于3月31日暂停漏洞收录通知", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488202&idx=1&sn=88821c84798d79ce2d6a8925def7455f&chksm=c2c645c1f5b1ccd72558dbbe502681a04d10c87f755b1674e01c109e7faa6c155a525e36259f&scene=58&subscene=0": "【漏洞通告】MinIO信息泄露漏洞(CVE-2023-28432)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247559087&idx=1&sn=5e8b6eb722e5ac678fda2b4dca7bbdd2&chksm=e9143795de63be83337bf1b8140846f4e3698d1efce59797df2a8cda81fa3070ae992de0b8d4&scene=58&subscene=0": "三星Exynos芯片集中发现18个0 day漏洞,影响三星、vivo设备", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247517999&idx=1&sn=abd7a549cba9aae9ae97057eb5b6cdc1&chksm=ce460c3ff9318529906e251aae267394cf9e57c7e8db97b5ae48583ba351b9496f58127ae521&scene=58&subscene=0": "【漏洞通告】Apache Tomcat 信息泄露漏洞CVE-2023-28708", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247517999&idx=2&sn=ac0b62faf4f6b293f65beab278551eb1&chksm=ce460c3ff9318529fe7c3c07497b6af7f0d1d4062e8488f321cdff36726dfc9e533f1d049bf5&scene=58&subscene=0": "【漏洞通告】Minio敏感文件泄露漏洞CVE-2023-28432", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247500523&idx=1&sn=9ea77ceff0668330f4f0335064b8f8d3&chksm=fa521755cd259e436f5328e93c4ce6396fc8df2e2a97223994abff5f3b1311d0ef2eae169d6d&scene=58&subscene=0": "PHP开发服务器远程源代码泄露漏洞原理剖析", "https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652312716&idx=1&sn=a9dc5e61b6a12c595f594002d685994d&chksm=8bc48902bcb30014ce28544f1a191a8ea7b17b35199b3f9de1d05f66596afc117f9c99a7467e&scene=58&subscene=0": "【S&P 2022论文分享】以Protocol为中心的UEFI固件SMM提权漏洞静态检测", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516023&idx=1&sn=7a78fd326a65fcefb63640ca08718328&chksm=ea948e1ddde3070bbd81a64cbc30f293a43f08c270359b9dda6bb7d7a8cd0b43ca3fef303428&scene=58&subscene=0": "Spring Framework 身份认证绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247484986&idx=1&sn=15a3b003a1b73a2219dbd34873df994c&chksm=cfa49dc1f8d314d7ad8d57b57555cfd74c1d8f841cdd23655b7f79c2d481343d85a9606d6bec&scene=58&subscene=0": "ChatGPT 写 PoC,拿下漏洞!", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458499499&idx=1&sn=b9163880e1d230947cb4c7011d6618c2&chksm=b18e892186f9003768dc8d960ed3181f73eeca2b3998bd00fd2d97f0a22cbac13db4d9f05aa6&scene=58&subscene=0": "源代码与二进制漏洞的融合", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652031856&idx=4&sn=c9f626a533e011a570bff35aa6a8918d&chksm=f36fe730c4186e26cbf2b6dbacb8cb52d4f5399aa0df0aa8f3b4e636fabe2e7b176965026a13&scene=58&subscene=0": "【安全圈】2023第一个重大漏洞,几乎影响所有组织", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650967612&idx=1&sn=ac3a298f1d1bc5efcd9d94cfbfd93586&chksm=8079cc0eb70e45188c719d641fbefc9cf484ae65a5c4de12710fb6a18f8e3dc496ce2cf7592e&scene=58&subscene=0": "404星链计划 | Pocsuite3、veinmind-tools 项目版本更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516047&idx=1&sn=6aa14e04c8c7775ff68e6c8cc3b625d1&chksm=ea948ee5dde307f30458a51c238b2dfa50d2fc70f5537f28618295941f6d1236a8d47f705984&scene=58&subscene=0": "Redis客户端开源库漏洞导致ChatGPT泄漏支付卡信息等", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493169&idx=1&sn=10d8f2fa4ce9afe7649b66f69e6adfe9&chksm=fd74d6f8ca035fee47a7121beb209b451c16a6ab0ca3b39d85f6a18ecd7ccaab8d93e99f8a22&scene=58&subscene=0": "CNVD漏洞周报2023年第12期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493169&idx=2&sn=f45a62958f981c35a94a8d672f7dccdf&chksm=fd74d6f8ca035feefe8fa6e589c3bcbadcb6415a7482107624a545605991c57bfbe03d3e2d62&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230320-20230326)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652501806&idx=1&sn=fef36b5c708b4902094d710636c5dcab&chksm=f258549dc52fdd8b2aaddb5f362a9bc88f49125920d5e27d1d5cf77bb36ec4f956e90b9eba8b&scene=58&subscene=0": "雷神众测漏洞周报2023.03.20-2023.03.26", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458499980&idx=4&sn=586afdc8061ff76318b7f75b44f3ff21&chksm=b18e8b0686f90210217c19076194a95ce2114f23d88ee0349eb615e507f6e5af4a60040242d2&scene=58&subscene=0": "精品新课!系统0day安全-二进制漏洞攻防", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247559250&idx=1&sn=d794642ec65cb9e8b5273862c63aa49d&chksm=e9143868de63b17e2d9ac6c1199957892c0b9038874b2ba15cf6e27aeb57a8c8cfd31bb29139&scene=58&subscene=0": "OpenAI:ChatGPT支付数据泄露系开源库漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516064&idx=1&sn=7fab64273f8adce01a48faf50055431f&chksm=ea948ecadde307dcd53290844da902ec142820effb62c358fda87676545eb9c2424da1575e72&scene=58&subscene=0": "多家大企业受GoAnywhere 0day 漏洞攻击影响", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516064&idx=2&sn=3b952d583d720b24a32bea4b8840959e&chksm=ea948ecadde307dcb7d589b06a0bed588220bc1bcb179f9c53db7692f79bdbf1e2514b8bea61&scene=58&subscene=0": "苹果修复老旧设备中的已遭利用 WebKit 0day", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247497294&idx=1&sn=c3270820e15569f4e6af8e8059907419&chksm=fdde88c9caa901df83a7ded5c85c5426c22d5fe6d4c8050113d5b45566e51a67276b46e53936&scene=58&subscene=0": "Ronin 黑客计中计,你听说过扭曲攻击漏洞吗?", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247535800&idx=4&sn=a17c0503c033b8619929b8b72b99e8ba&chksm=fa93fa79cde4736f4a97f370e65e2f4fb1cbd28c9dc26e525df76befae755c4852763dc4c559&scene=58&subscene=0": "ChatGPT漏洞:部分高级用户数据已泄露", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498166&idx=1&sn=075a5cedf65a8afc367b9803bcc1f8a2&chksm=973acad4a04d43c20e1bf047ac9154e123e8aa83b309fa9c1cc6908e1892e78e1dc5f87cbaf8&scene=58&subscene=0": "CNVD漏洞周报2023年第12期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498166&idx=2&sn=c2a7d8b3b8a8c5950dcd780f0b76ba34&chksm=973acad4a04d43c2ee0802c9c90debe6843502381603b411efc6356c20d08124027490b97772&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230320-20230326)", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247497714&idx=1&sn=7e72265e2c25406baf241218d312829a&chksm=eaa97fd2dddef6c4b4c24d1f29ea8b53c1c1768ab293d674208e80d534a69568a89fd33f3087&scene=58&subscene=0": "JNDI注入- JNDIExploit 改写内存马适配冰蝎3.0以及魔改", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247535633&idx=3&sn=d20fb9cd50c90dbde5576aa432920cbd&chksm=c1e9c040f69e495628d998b2fee3b97ac15ce09a09808ba9abe7882f6d484b082d7cba9f4135&scene=58&subscene=0": "OpenAI:ChatGPT支付数据泄露系开源库漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516076&idx=2&sn=7aa0709e9df4a0d8c797ce6c54547971&chksm=ea948ec6dde307d069669905324ed5495a07a93a3b8b7382f3bd7a98c0ca31d2a53d56e329c5&scene=58&subscene=0": "WiFi 协议漏洞可用于劫持网络流量", "https://mp.weixin.qq.com/s?__biz=MzI4Mzc0MTI0Mw==&mid=2247496882&idx=2&sn=5917f507d1ac6758629f5e6727d5c3fc&chksm=eb84a9e6dcf320f0782a15ccc4f88e91c949b37d4bb43f5ff87704d605c98fa8f4f0f6aeee81&scene=58&subscene=0": "原创 | Spring Cloud GateWay CVE-2022-22947 SPEL RCE", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458500315&idx=4&sn=4b0c050214f2a7a4f3eaee8fc9396bdb&chksm=b18e8c5186f905471f84c108da695cf622b311716b6c915f1dff7dda1ab73cd867677628fe72&scene=58&subscene=0": "全新Pwn系列课程上线!解锁二进制漏洞挖掘技巧", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516096&idx=1&sn=1b7557f7a2683f3f9e215004fb1e4922&chksm=ea948eaadde307bc2c035530c28e9af2f550d85dccbde7413bdd71c3c755aeaea56acc4d9dc4&scene=58&subscene=0": "商业监控软件厂商利用多个0day 攻击安卓和 iOS 设备", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516096&idx=3&sn=82f067c61adcd0aa4a98ca6165d9c9d3&chksm=ea948eaadde307bc40d0015e6feadf0f1264ab387fd2b2500439ce984d5722ddf2e79da15ca4&scene=58&subscene=0": "QNAP 提醒用户修复 NAS 设备中的高危 Linux Sudo 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247508198&idx=1&sn=c7f94589bf9f280dd6d5c3fbbba3e904&chksm=ebfae7c6dc8d6ed031c6ef227147468722adde008f6439b9c2ffd7cecee70da738180440a8e5&scene=58&subscene=0": "商业间谍软件猖獗!去年底至少使用5个零日漏洞,安卓苹果设备通杀", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045298&idx=1&sn=003af88982bcffea255811c386776f95&chksm=803fabecb74822fa8fb4d8b6ad955fc7be0408ea57310a4f753c4827e8c4a5450c0667d9a73c&scene=58&subscene=0": "【漏洞预警】Apache Fineract SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518031&idx=1&sn=a9c4f1bdf8ed2470f7edbed8332cf551&chksm=ce460c5ff93185499a43aead7d9648228455f99496161249743e76c9a233de2d2267c781c9ca&scene=58&subscene=0": "【恶意文件】Magniber勒索软件借助微软的漏洞实施攻击", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650967645&idx=1&sn=109a11ab8834fb555d5b67282d2bea42&chksm=8079cc6fb70e4579fd233ae2605ac1ddba7fe836c4f3194b4eb776f399aff4906e3b1680d6c7&scene=58&subscene=0": "原创Paper | parse-server 从原型污染到 RCE 漏洞(CVE-2022-39396) 分析", "https://mp.weixin.qq.com/s?__biz=MzIzOTE1ODczMg==&mid=2247496054&idx=3&sn=459c362b0e7873f861960f8026e4758e&chksm=e92ce5d5de5b6cc34530cb457dfa2656c9930f0c9b7ab39156f5007750ef4e8135f7e82d2820&scene=58&subscene=0": "紧急!问脉开源工具支持扫描 MinIO 敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498142&idx=1&sn=dcfa11ee9419d2d7b56fe90c9d70ab10&chksm=fe79dd06c90e541077b0c8b16c8f4e7b76fc11fedf89babca2205d25bb9bf42e64f40fcaf3d4&scene=58&subscene=0": "3CXDesktop App 代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491996&idx=1&sn=d42e993e673d06e90cacb968fa27dca6&chksm=fe26e49dc9516d8b1f86fa432faf4b8535ad648a93fc9b9851eac031fe5e2771978854a21d04&scene=58&subscene=0": "CVE-2023-29059:3CXDesktop App 代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247535685&idx=3&sn=a0410151052c54d6236a447a3fa720bb&chksm=c1e9c014f69e490257d4b3442271eb247d2f45462fb08ecd5c847c9c3d94f1336296502e9b87&scene=58&subscene=0": "商业间谍软件猖獗!去年底至少使用5个零日漏洞,安卓苹果设备通杀", "https://mp.weixin.qq.com/s?__biz=MzkwNzIxMDUyNg==&mid=2247485105&idx=1&sn=4b8d8da5eebe0dfccc7f9801df6cc7a2&chksm=c0ddfcc0f7aa75d6d608b4c0984939a46eb6af70aac8d36c5af20f722c430be304b68ac7de62&scene=58&subscene=0": "Realtek Sdk CVE-2021-35392漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516114&idx=1&sn=f5e9f50e1c37ba75e607261b2e912282&chksm=ea948eb8dde307ae2d64f8f3e3672eb57e1d5b5e92d34a87f2ce6162682818039452ffca1697&scene=58&subscene=0": "通过配置不当的微软app劫持Bing 搜索结果,获得4万美元漏洞奖励", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516114&idx=2&sn=430b1d4e9614f9b4e81d5de5e6b1ae9e&chksm=ea948eb8dde307aeaf7d488295dab582fa9cd7c306c29a64c23f69abb2dbed6ed5993532967a&scene=58&subscene=0": "未修复漏洞可导致水泵控制器遭远程攻击", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664180162&idx=5&sn=0196766a0886bac33e5678d6fa761c02&chksm=8b592b3bbc2ea22d80958680aab4b923821b2d2d36876b1fac38fd2ec28ebc3093e6f80dfba5&scene=58&subscene=0": "CNNVD | 关于Apache OpenOffice参数注入漏洞情况的通报", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247559413&idx=1&sn=6ef1e8bfc555f0bad13f9da67ca6ad71&chksm=e91438cfde63b1d978cad62067f34df4e8270a6dd8542a85213ec057919253235a8b7bd26323&scene=58&subscene=0": "WiFi协议曝出漏洞,攻击者可以轻松劫持网络流量", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247535857&idx=1&sn=e79309521140afaf024690bd0cf4887b&chksm=fa93fa30cde4732621590ab4c1eef494a20392471fa14710c44c9db3b7bec4876efed4f14dce&scene=58&subscene=0": "谷歌:黑客利用零日漏洞监控 iPhone、Android 用户", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247535857&idx=2&sn=7401706bdf553ed90faa559a63525b15&chksm=fa93fa30cde4732660061de45a0a635075eae6285fffe32986cd22d01da897fbc7f0658afda4&scene=58&subscene=0": "WLAN协议曝重大设计漏洞,可劫持web流量", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458500598&idx=2&sn=2df59155b864da24c3ab9886148769a6&chksm=b18e8d7c86f9046ad89b990c4859800aa6e8e7b0e033d90c2923cd831b13801d9a86a1b04564&scene=58&subscene=0": "周日14点直播预告 | 系统0day安全-漏洞挖掘复现cve-1", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652032104&idx=3&sn=ba4e8260dd4481401f7a01ef2e267e00&chksm=f36fe028c418693e1250a10aa9eebb7df40b599633b23bfae2cbc9f2797fd5de2bdc09c4ac0b&scene=58&subscene=0": "【安全圈】WLAN协议曝重大设计漏洞,可劫持web流量", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516131&idx=1&sn=9ced8ade5f5884fcee054a1767486be1&chksm=ea948e89dde3079ff7147b94758c02675ebca5937a221a0e770238a109b77f798c296e082e35&scene=58&subscene=0": "Windows漏洞十年未修复,3CX供应链攻击影响全球60多万家企业", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516131&idx=2&sn=e4062667fe1d4694a90a9ffa17a2fd40&chksm=ea948e89dde3079ffc2cbba3e2f13e7929117094754c9e3216a4c6cb5f303cf622ec99800e6b&scene=58&subscene=0": "1500万公开服务易受 CISA 已知已遭利用漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652501821&idx=1&sn=bac6ecfce0b0aee5d764550b202e6d50&chksm=f258548ec52fdd98d31367888d4ad1de972ddcaaf8b30beba92b38d5313f724253b2bb13562f&scene=58&subscene=0": "雷神众测漏洞周报2023.03.27-2023.04.02", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649784347&idx=1&sn=b9252c99e6302e46dd7712a33fd39c57&chksm=8893b074bfe43962178a2726486c35e702df3b646e5f8703c4bc6a2af81c2030c02a6aba2ce3&scene=58&subscene=0": "【技术分享】shiro550漏洞复现与研究", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650842064&idx=1&sn=5565f8103481350574d2016b643fb2ed&chksm=80dbc075b7ac4963edcb6320ece4694143fb7f218d7a18a0ee7c3da23b7a50ac8e6c92c5e6bc&scene=58&subscene=0": "418新品发布预告 | 漏洞之痛,有了新“药”", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493203&idx=1&sn=134b81d2a28339697d5d4a611b56ab49&chksm=fd74d69aca035f8c9db6356bb19b8a79552064a3d71fdfd1138457c0c46ced7bd0cf97fdf15b&scene=58&subscene=0": "CNVD漏洞周报2023年第13期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493203&idx=2&sn=929ce90ec622ad04e45fd2c6f4bb3caf&chksm=fd74d69aca035f8c762be26f6749f32380b7f81620be0d2ec6e9f6434fb5e5a45c86db7001ab&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230327-20230402)", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045303&idx=1&sn=6819963b821e9b6cd34e427ef87c84c9&chksm=803fabe9b74822ff7f768e6aeb00fb84e2aa8082e69e19b5d211c95ed57e434bfed0c5db21fb&scene=58&subscene=0": "【漏洞预警】WordPress Elementor Pro插件访问控制漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498182&idx=1&sn=c2a1446bfb50731a0c4e0e89b2a65942&chksm=973acaa4a04d43b2b41bc1ea4aff7327147a3bccfb046502201d4eacfa9a2ceeffbc12c311af&scene=58&subscene=0": "CNVD漏洞周报2023年第13期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498182&idx=2&sn=fa7d44051f291acca115d186ccedeeb0&chksm=973acaa4a04d43b222b4e513c2ca753757d8b1d3676183be1646d72a7a9e23d6aab1467181a9&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230327-20230402)", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247497388&idx=1&sn=04c01e40fdfa1a4b3a7633149f7b1a20&chksm=c0075b30f770d226467dee1190f9884f57c899b235bc696283eec6d938971866c77b91329dd0&scene=58&subscene=0": "3月这几个API安全漏洞值得注意!", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664180665&idx=1&sn=3c6b7cacda11801aecf44cf9fd4f558e&chksm=8b592940bc2ea0566a98b2a293683981cf4bab40c9868ad24e3c630e73c0788324a7cf4e3012&scene=58&subscene=0": "关于发布 “CNNVD漏洞奖励计划”的公告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458500902&idx=1&sn=a463b0a219b9bed49b7cc74b634894ab&chksm=b18e8fac86f906ba1fd8b11bfd4f684aa1a08fa6ea340dcb4b85ce010c4871324e51c7929dea&scene=58&subscene=0": "【上新】实战能力UP!从基础到入门,轻松掌握 CVE 复现技能", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516164&idx=2&sn=00deb0a15fae5034e3bbde0e1407178b&chksm=ea94b16edde33878ac23c8677c44d1e95a6307fec34807fd13ba32689de740186ca370c72df0&scene=58&subscene=0": "QNAP正在紧急修复两个0day,影响全球超8万设备", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247497394&idx=1&sn=e75719d9de68c12b39fd50fae1c05a5d&chksm=c0075b2ef770d23889ffa0c0b9042f79a408351b162ccea5c395cf3f85463ffa8e8107bce231&scene=58&subscene=0": "权威认证!星阑科技入选CNNVD漏洞库技术支撑单位", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247497798&idx=1&sn=cb2107f7f7aebe91a72e9937a78728e9&chksm=eaa97066dddef970e2db91eff9b6a61988ceeabc3df6fda3d69625a4cfa6ec3702cdc1cf3a56&scene=58&subscene=0": "CVE-2023-28432 MinIO信息泄露漏洞分析及复现", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247500678&idx=1&sn=5d4dc9dd7ce903393e763e2909cc1c28&chksm=fa521638cd259f2e1e24fc37313477389addc03a76f99790dd803391d9337e000ef85f941e65&scene=58&subscene=0": "基于Drozer框架对安卓四大组件的漏洞挖掘总结", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247508273&idx=1&sn=3c87cc2169e6cb18135d52741c96f298&chksm=ebfae611dc8d6f07c2cccb120fc878b1d82525f66c3b04ff4c3b16f4fe72311470b40a09445f&scene=58&subscene=0": "美国FBI查封全球网络犯罪关键平台,封堵网络防御漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247535940&idx=5&sn=374c5a3403ffc6bfea37f58177c69e53&chksm=fa93fb85cde4729317cffbd737090f931b215dda246a072fc42942dbe2d6652e49cd950ab7db&scene=58&subscene=0": "影响上千万网站,WordPress插件曝高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516175&idx=1&sn=20108ea07af5ffc49fe8a5d6be681dda&chksm=ea94b165dde3387388e6da861135928b57d5b4252f7d07184156526321bd80542df17fbf073f&scene=58&subscene=0": "惠普将在90天内修复这个严重的 LaserJet 打印机漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516175&idx=2&sn=622c1e525eac66ff89956cf0d9c7c94b&chksm=ea94b165dde33873d49fb73b3c492d7b57426e571702dc507fa765696fae2dc5c921f62762a4&scene=58&subscene=0": "Nexx 智能设备存在多个漏洞可使黑客打开车库门等,无修复方案", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247490490&idx=1&sn=fd53d0a05cfea5787c1e07c1dfb37520&chksm=96db1060a1ac99762bcce2b9c902d25d274201fa3887ba11c2a0a74d49aff5f3208f3c4e96a2&scene=58&subscene=0": "2023年3月必修漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247535806&idx=3&sn=b888124b27f105c99041e8ec50d3249c&chksm=c1e9c0eff69e49f9d90c6b5d1207d5b21eed399a6949ded42e0b65370f6ab33fda514b42c9d6&scene=58&subscene=0": "美国FBI查封全球网络犯罪关键平台,封堵网络防御漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY0NTExNA==&mid=2247488934&idx=1&sn=57d56a257131f971f035b3dd3f7a6a86&chksm=fdf97eb3ca8ef7a53929120f4ca3c7c0e1501718659a5dc3043212f37e79f332f4d1eebba4d9&scene=58&subscene=0": "Linux提权系列14:[训练营] 利用存在漏洞的应用程序进行权限提升", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651123480&idx=3&sn=3b74197c7c22d4cc678b48bfade093cf&chksm=bd145fcb8a63d6dd1ac2625b240d9c617af705234d8d4686af1ae7c81fe681b863b2d34a4dde&scene=58&subscene=0": "安全头条丨CNNVD漏洞奖励计划发布;知网因数据出境问题暂停部分港澳台高校服务提供", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458501417&idx=4&sn=95f27b53a93dc97ad95808068e59ee96&chksm=b18ef1a386f978b55065760dea3f23e4889b61e33402a7ae33d756e7395201c8481bfa6528c4&scene=58&subscene=0": "赋能企业安全!系统0day安全-二进制漏洞攻防", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247505978&idx=1&sn=a9869f2d37b14edc4ea6cac008a6d339&chksm=ea662f4ddd11a65b5f9f859bcf42540aa5136602aa8f17ad2b9a958f4eedee6a0297b682c583&scene=58&subscene=0": "Operation $mercenary$:弥漫在东欧平原的战争迷雾", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247488715&idx=1&sn=107cfc67929223715b23f410d8130876&chksm=fe2eeb40c95962567768b25ca9aa2aa21a83ac55273d2aa610bc6e66b038bb1666225d280e5d&scene=58&subscene=0": "JSLIM:通过\"瘦身\"技术减少已知JS漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247500980&idx=1&sn=cab7d7f050e87ec980aad9debd64e9cf&chksm=cfcaa7a0f8bd2eb6f2fbea515ba7baca0c6cc684caaa68d72641a76c02de96629559c639973b&scene=58&subscene=0": "0day 速修!瑞友天翼应用虚拟化系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498176&idx=1&sn=ec6c041efce70dfcb91e3be4a3f55cf4&chksm=fe79dd58c90e544e4fa0ed46a8043595df7684a2509d6393e4f8d6d1d6dc253bf990ec7de346&scene=58&subscene=0": "Apple 多个产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492024&idx=1&sn=5fb70978fa0b4658e7b6d43f8d669f2e&chksm=fe26e4b9c9516dafc7182b254c2f955c2022b071bcbbe7a992e5015d431ea6ec1c4fd470e4a5&scene=58&subscene=0": "CVE-2023-29017:vm2沙箱逃逸漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493235&idx=1&sn=beeb3a3051f0926c822ecf18deafadb4&chksm=fd74d6baca035fac0f08c8e7a64763b2b2dac1a546e600e33bcfafd8c3830461436808b1ce41&scene=58&subscene=0": "CNVD漏洞周报2023年第14期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493235&idx=2&sn=cc394f73f2f9f06475efbfd62d1c4a79&chksm=fd74d6baca035fac9aacaf0e9a53e3933649c9f2e99738f9fca4f5b0c21c5f450eb5398baa4f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230403-20230409)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516192&idx=2&sn=5c3e3733fceb0ec8d172ac2df805b47d&chksm=ea94b14adde3385c3f37236533daf5e7d38ba6c37d81d396c80446e2d37a13b2fd254a3b2904&scene=58&subscene=0": "苹果紧急修复两个已遭利用的 0day,影响 iPhone 和 Mac设备", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516192&idx=3&sn=8ab0a31dc71c4a46eafb1990c1f0f021&chksm=ea94b14adde3385cb974be6e0db2bac6737f0ffb278d0cb57922f45c53afcb115f38d3ad64de&scene=58&subscene=0": "VM2 JavaScript 沙箱库中存在严重的 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649784484&idx=1&sn=f15bb5717f9482ad94afcbc40cc28f02&chksm=8893b0cbbfe439dd0c74aa9f82e6fdc11b3ed841a537848aa410309d8feee2b00a528c7dd491&scene=58&subscene=0": "Apple发布针对间谍软件式0day漏洞的紧急修复", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458501607&idx=3&sn=e7de63a69ca3c42259e17958802fe1cb&chksm=b18ef16d86f9787bb10a2d9eb6c3ad9c5e0cad280d2a062280c63cd3697c9446c05705f7b621&scene=58&subscene=0": "报名中!CVE复现漏洞精讲-从基础到入门", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492028&idx=1&sn=58769b911bfab0f6072868100f90c271&chksm=fe26e4bdc9516dab8cc389bf7d999593e2002ef4ae76946be19a82f79c5abdc484f0b1fe4bef&scene=58&subscene=0": "瑞友天翼应用虚拟化系统远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247487540&idx=1&sn=a6099c3b9d222aea90d968ae8332cbd2&chksm=fa5abed9cd2d37cf256e4e458d2dcddbe48a22499014ed4dea61cc79a9127932284e2b8fe4fd&scene=58&subscene=0": ".NET ViewState反序列化漏洞 (三) 命令回显", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516210&idx=3&sn=feeedf873b800fb3d1e85197987d1eb2&chksm=ea94b158dde3384eab1d174044d92af1e092828334e6fed424c36bdcf2f0c95e38402680d94d&scene=58&subscene=0": "Sophos 修复位于 Sophos Web Appliance 设备中的三个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518110&idx=2&sn=7284fa55368e73fb77e7db9b054d6c35&chksm=ce460c8ef9318598c13773845577dd614e9e19c97bf42e9448b72ef5efa93bac9a1048528eae&scene=58&subscene=0": "【漏洞通告】Apache OFBiz任意文件读取漏洞CVE-2022-47501", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518110&idx=3&sn=c7ff38f4cd3eb2c2dad5ca3e13619330&chksm=ce460c8ef931859826f35e2a35a8677daff72bc64e51fc2f6a73bb9e07029522cb63cd5de20a&scene=58&subscene=0": "【漏洞通告】瑞友天翼应用虚拟化系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498197&idx=1&sn=3da1613c3b0d6dfbddc39048fc06c098&chksm=973acab7a04d43a1b06dab27444666e8186e0908782edfa366020910f8a7e4819e8a8d0cb0ef&scene=58&subscene=0": "CNVD漏洞周报2023年第14期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498197&idx=2&sn=9575f454f77e03525dc50c3700e46480&chksm=973acab7a04d43a19503726781dea40857dd0aaf0d24e6c33d33aab13556b84f8d6c81460c26&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230403-20230409)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652501829&idx=1&sn=ba2a62de5d5afb2200a701029bc8bcd1&chksm=f25854f6c52fdde0e532ae98335689fffe90f9bc0330e3aebc9436b1d183d4452539869614e2&scene=58&subscene=0": "雷神众测漏洞周报2023.04.03-2023.04.09", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491352&idx=1&sn=dd8ac90f81d7e0a0838e47dd525ba362&chksm=96f40075a1838963da54a28a42181541013c530fa65d838a6833a2a51375fc7f65f55494d01f&scene=58&subscene=0": "漏洞风险提示 | 微软4月补丁日多个高危安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649784550&idx=1&sn=d0a97eaf8c7ef5f48e8e49d70ef8dd33&chksm=8893b089bfe4399f37e831c6e988fa8fabafc603ab5c0253a268124101c4f5276be71630fe1a&scene=58&subscene=0": "微软 2023 年 4 月补丁日修复了 98个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516226&idx=1&sn=5e792e5dafde4d77cfdd688736f28c8a&chksm=ea94b128dde3383e614541db7f16f6541e41d277c21c7e45a8763e50d67b280ea5123f8697e6&scene=58&subscene=0": "OpenAI 推出漏洞奖励计划,最高赏金2万美元", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516226&idx=2&sn=e7f2dafb8a5996808eb986ee331cc878&chksm=ea94b128dde3383e7747fbb60df716ad987539ab7a5b46d2212e3c63ee1e6e0e8deee53cef41&scene=58&subscene=0": "微软四月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY0NTExNA==&mid=2247489150&idx=1&sn=ae044369083d652369da533cab6f47d8&chksm=fdf97d6bca8ef47dfeac4f8abf42e6240c81e64671e3afca5e9a8f6d83010c0c8ff388f9f1f4&scene=58&subscene=0": "Linux提权系列18: [训练营]利用linux能力漏洞1", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492035&idx=1&sn=3025853285e6979542f11e5ad3fd97c8&chksm=fe26e4c2c9516dd4536e6f58444df177e17a1a814a972fcc93ee79b0e7dcf426774d8f896398&scene=58&subscene=0": "2023-04 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045308&idx=1&sn=4aa00249cb875493ae3591ff631aa3f8&chksm=803fabe2b74822f45faf2c949f329a9e3bc8410113f5a92d95d911a164b508969aaec0f8b99c&scene=58&subscene=0": "【漏洞预警】Apache Linkis多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4Mzc0MTI0Mw==&mid=2247496889&idx=1&sn=46623999da05db946894e49718ff6564&chksm=eb84a9eddcf320fb57a301655cfa1e14849c42959a6b89558ce47e597d53a8f6a0cd87201a53&scene=58&subscene=0": "原创 | 缓冲区溢出漏洞那些事:验证与危害判定篇(文末福利)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518224&idx=2&sn=1dc5f62747d15c973a831fa54251ffdb&chksm=ce460300f9318a16743589c81853b28cb7ea2f27f8c7a155a0129eadfbb86e4c86cbbd96dffc&scene=58&subscene=0": "【漏洞通告】Apache Linkis多个安全漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498222&idx=1&sn=5675d2096bfe46b9f106d1d65e163c59&chksm=fe79dd76c90e5460e10716bc590dd437c281eb0782fe3638e8185a6700bdb42fe16da52c067a&scene=58&subscene=0": "【已复现】Windows 通用日志文件系统驱动程序权限提升漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498222&idx=2&sn=14f21da8af7ffdfb21453fd096ebd2e1&chksm=fe79dd76c90e546039c9410efa4cdc0f956ac84b4649ea7b01d74a765f22c8eb65d7794390fe&scene=58&subscene=0": "微软2023年4月补丁日多产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498222&idx=3&sn=0d77681957bfeb51671213ce56b3386a&chksm=fe79dd76c90e5460f4e23392b050cae9221a02733d5bfc23d18a5382a98d84c403f67e0cb243&scene=58&subscene=0": "【已复现】vm2 远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488220&idx=1&sn=b454c2817c4ea3d0944facf571176c38&chksm=c2c645d7f5b1ccc1faf967e0d670114c2098fd57e079a9317e9f17fdfebdc5bb3896bbba81b5&scene=58&subscene=0": "【安全更新】微软4月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488220&idx=2&sn=9573101cf5c3a8c41c0e54e9b67ac8c1&chksm=c2c645d7f5b1ccc1c02512aa3e2475d58f65d1c793cd71a89445fd0ced97cfdc70f398fa49f0&scene=58&subscene=0": "【安全通告】瑞友天翼应用虚拟化系统远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247514173&idx=1&sn=ab66a4c23630d0d9d51514ad3eccfa30&chksm=eb706602dc07ef14f6001e4b825d1aa0e6428c484cc147c2c59803470d75e28e4de7bd5bbf8e&scene=58&subscene=0": "2023-04微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458501920&idx=1&sn=21104bc7823e9c882fc22cb0cd5b88af&chksm=b18ef3aa86f97abc18d4ca5b25be38309812ed2473e9b2f64277def7c1e6da92f26f0eea4431&scene=58&subscene=0": "Windows_AFD_LPE_CVE-2023-21768分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458501920&idx=2&sn=41597905291fa77f12bc5ca7483240b3&chksm=b18ef3aa86f97abc939b05ea8650626ba4984eaeb284c0aa7f971bbba2f5cb989cfcf0f11104&scene=58&subscene=0": "OpenAI推出漏洞赏金计划,最高奖励2万美元", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649784555&idx=1&sn=29b213bcc277a68e7938608810da376b&chksm=8893b084bfe43992b81111e7da097b8adc075f37f64fccf7c930354f93d43f77ce233bca20be&scene=58&subscene=0": "ChatGPT 发生数据泄露后,OpenAI发布了漏洞赏金计划", "https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651139477&idx=1&sn=ed516988a04cf77e32ba18a4861f43be&chksm=bd50bdc18a2734d7fbd4a5701a258f3d99b4e44bac936b3e9df8eabede916c19533d3d468ba8&scene=58&subscene=0": "Source Insight 4.00.0126 破解", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498239&idx=1&sn=7cec830cbb332985f066744388032bef&chksm=fe79dd67c90e547149b600b4e0c17de3ea4913f8a9a4f1139b2596e200366d798b3130fda7c2&scene=58&subscene=0": "【已复现】瑞友天翼应用虚拟化系统远程代码执行漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516234&idx=1&sn=ba72ac437de85dff898598d11ce97f6d&chksm=ea94b120dde338367ba09290193fddc80c82805257f0aac35587dafcb63dd98f43f418cc767f&scene=58&subscene=0": "Apache Linkis 修复多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516234&idx=2&sn=8b8cbd3bbef796e7781c52396c37618f&chksm=ea94b120dde33836274567a92fa01a00f6e40b1b29565d989648c9eeada3ac326405a7a9e7d9&scene=58&subscene=0": "Fortinet 修复数据分析解决方案中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652032362&idx=2&sn=937d07175a9f2f69e28230a60cca93ad&chksm=f36fe12ac418683ca506348e5e3ba0d8dba3019d2f08eb9dde0c1eb927dc59c0dbe470c521e6&scene=58&subscene=0": "【安全圈】1秒盗刷!注意看,原来是骗子钻了这个“漏洞”", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652032362&idx=3&sn=8dde31dab85f0bc1a59ac470d48e12dc&chksm=f36fe12ac418683ca752bc869a6d0953278d57d58adcaff4794cfd9fda4d5cfeaf830186d77e&scene=58&subscene=0": "【安全圈】微软敦促 Win10 ∕ Win11 等用户尽快升级,已有黑客利用零日漏洞植入勒索软件", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518238&idx=1&sn=0e9d62e0b09506bb43dbbbf003665f88&chksm=ce46030ef9318a186681a51fcd5aaec147f3612716cef3c36f1dcad6738be1afbd537e0e4915&scene=58&subscene=0": "【二次通告】瑞友天翼应用虚拟化系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTE1ODczMg==&mid=2247496277&idx=2&sn=8b2d7960195ede33d0585a4a5dc34e82&chksm=e92ce6f6de5b6fe0c7fa41bde3b336d1326638aa2fbf929bdee38aebd1dd531a764e79c9eb95&scene=58&subscene=0": "检测工具发布|瑞友天翼应用虚拟化系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247527734&idx=1&sn=93073a73437cfee6dd2c91dce0331a48&chksm=eb848696dcf30f80bd676f6000ec92283893ecce08ec2abe571d0a4d908b0f9046512259b727&scene=58&subscene=0": "跨越语言的艺术:Weblogic序列化漏洞与IIOP协议", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498264&idx=1&sn=a73d1de88aff3c562df2aa3e7fc71e9d&chksm=fe79de80c90e579682aed7a38c1b5ab35dce9dc17581428999026dcb8e19c333eeac401ab6e7&scene=58&subscene=0": "【已复现】Artifex Ghostscript 代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498264&idx=2&sn=336a77c1bf6acef7c5cef9b5cf83f0b5&chksm=fe79de80c90e5796e21dad634ce0bb1948db022a15cdd2cba7592db4913cf6f0802df1fe50c0&scene=58&subscene=0": "【已复现】VM2 沙箱逃逸漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247497995&idx=1&sn=1512b8bcb2df5c6a6da63ab66d81df63&chksm=eaa9712bdddef83d5df1f9611fe66a5799286ba2e5636f2f30a534ae4ab3ed6bb4334da9deb1&scene=58&subscene=0": "Joomla Unauthorized\"后\"渗透到RCE", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247497995&idx=3&sn=0abd25c48e4481bcd49a4040d40e7405&chksm=eaa9712bdddef83da8e7bd807b1f7fb845cb1159e07c9b7d09ee6ebce5dec3141279c54de9ea&scene=58&subscene=0": "ISRC劳模众测月!单个漏洞奖励最高可至万元!", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664181549&idx=6&sn=7c004b8e2dfab2049da218eb37d31878&chksm=8b592dd4bc2ea4c22dfc9e94d172555d1250a24fef332f15cb614295ab179c2a2ae82bfeb76e&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247514208&idx=1&sn=79c7c50895aeb562b85e350cbee58aa0&chksm=eb70665fdc07ef4920de0a05cf8e5965d1448da6a401bf4d000f9ee76c6a1b2be18ce980229c&scene=58&subscene=0": "【火绒安全周报】肯德基母公司报告数据泄露事件∕OpenAI推出漏洞赏金计划", "https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247485011&idx=1&sn=107c0a62e834e34ef909acca94443796&chksm=cfa49da8f8d314bed5edaea02a0a1fd3a8e8b56320a2cc3fb4da678fa8a15b7c236f181b5f2b&scene=58&subscene=0": "跨越语言的艺术:Weblogic序列化漏洞与IIOP协议", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498275&idx=1&sn=3baa5653ca8ecb725d971d90ee0cc869&chksm=fe79debbc90e57ad534c373ee1acc6d3b97e1f6c712f163885a31974f9a1d0a9302119a8f11d&scene=58&subscene=0": "【已复现】Apache Solr 代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652032427&idx=2&sn=17f1222dcc12dae652e6c942c59cc8f6&chksm=f36fe1ebc41868fddfece91af8419a045c07d0b26e2962d3c582c937c3ac47fc9dde6d7c2164&scene=58&subscene=0": "【安全圈】Windows 系统曝高危漏洞,数十万个系统面临风险", "https://mp.weixin.qq.com/s?__biz=MzkwMTE4NDM5NA==&mid=2247486277&idx=1&sn=dbc764a89e6e4ade9b83d2f2f0566b93&chksm=c0b9e5a0f7ce6cb6cc6a8febaa5ba44c9094bf8624805db54e3cdbc454786b26e29fa787bb08&scene=58&subscene=0": "开源堡垒机teleport任意用户登录漏洞审计", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651123563&idx=3&sn=297021801bf52aa412e51e51d1dfc89a&chksm=bd145fb88a63d6aec201d6ef4536da9044a00cd456e0b39198ecb7f749b0fa380e39936596b9&scene=58&subscene=0": "安全头条 | 国常会审议通过《商用密码管理条例(修订草案)》;CNNVD通报微软多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516252&idx=1&sn=8371d9c05433cba2f5df47f101e8ad05&chksm=ea94b136dde33820c0033b8827312e06fe8bf7770075580020919000bdd6049133fc97d2a49e&scene=58&subscene=0": "谷歌紧急修复2023年第一个已遭利用的 Chrome 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516252&idx=2&sn=546ab537a158f4562912d5ce5c76c6ac&chksm=ea94b136dde338205c6567186607ee7781fff2af825518c69732f7f401efd9705272298cb50f&scene=58&subscene=0": "Juniper Networks 修复多个严重的第三方组件漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657164455&idx=1&sn=01df8e32bc1dff626f3bda6aa1d570e3&chksm=f1d4ee42c6a367542f76dcdccb67a51cf818319160324b256e63118fbd7f278d00a06226a1b2&scene=58&subscene=0": "ISRC劳模众测月!单个漏洞奖励最高可至万元!", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484108&idx=1&sn=959dd47bc264b364f3cda08b754cddb2&chksm=c2b100baf5c689acbe0773f5aed75ca8896aaef9f78157e03f5793b84b26b9a011ecd4278215&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年3月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247500838&idx=1&sn=86c1b0702e091070098c7bbf50ae8b1e&chksm=ec9f1d55dbe8944380fe9b66a37e5492ab10a1cf23fbae1053886f8e62366a85644caf62425d&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年3月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=Mzk0NzE4MDE2NA==&mid=2247487530&idx=1&sn=5b4c5b12cb80a3424683ca021f06b00a&chksm=c37b97c1f40c1ed7dae898cfb70ddf3a8b6d5e3f12303168f7fc2716a233c45b6b1fd53d7c9c&scene=58&subscene=0": "深度协议特征分析在测绘领域中的应用:改革传统漏洞挖掘与运营的新途径", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458502023&idx=1&sn=1b4793ad60f92dcf0756ee8f8079a595&chksm=b18ef30d86f97a1bdb1db0888d7dd11e0a3186ece2bf41c892c43206adfddbc35f4dad0670ee&scene=58&subscene=0": "Chrome存在高危漏洞!谷歌紧急发布安全补丁", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458502023&idx=3&sn=ef814f90c4413f4af0dddda95b82d302&chksm=b18ef30d86f97a1b1ee3fb09cfa1745333edf0a6cc73a392dd478c662882659c304bc5f08752&scene=58&subscene=0": "报名中!CVE复现漏洞精讲-从基础到入门", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498284&idx=1&sn=fa90d06ed2883ad1f080ce301bd79b73&chksm=fe79deb4c90e57a2c9796435744ae209aba3fc597b6609250d037b354cb88f5f1910cbd82031&scene=58&subscene=0": "Google Chrome V8类型混淆漏洞(CVE-2023-2033)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493254&idx=1&sn=eefe9470b91a7dfdbf7fc1950ac1b381&chksm=fd74d64fca035f5991c856307027ddacac82b9efb4caeb905fd85fb274c52f933328ce7127a6&scene=58&subscene=0": "CNVD漏洞周报2023年第15期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493254&idx=2&sn=e941beeda7757cfdcaba6a6f5726ebf5&chksm=fd74d64fca035f59509adb7c2f671fa7d5b47314f7e38c758cbabc2e11fc9fc06b8370781efd&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230410-20230416)", "https://mp.weixin.qq.com/s?__biz=MzU4NjY0NTExNA==&mid=2247489187&idx=1&sn=9b793ed6fbbea4c66c0431fd1f1995da&chksm=fdf97db6ca8ef4a078d6f61339b6a85f3cc3584ddcf061367a69101a682f755bfb6779d88ce8&scene=58&subscene=0": "Linux提权系列23: [训练营]利用linux能力漏洞6", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247560165&idx=3&sn=845c22e1e319dea213a1a56c8953b528&chksm=e9143bdfde63b2c957018d617eed6b6ee4036cd278aa2a822397ee5db2946b2c8cd094954b24&scene=58&subscene=0": "多个 TPM 2.0 实现存在越界写入和越界读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518378&idx=1&sn=d2f006db4ff181a5b0068944bdd13d1e&chksm=ce4603baf9318aac2e947ea1aeeaf61508c505bcecc00cf5e9ad0f00097daa69f6ab7e2dec3b&scene=58&subscene=0": "【漏洞通告】Google Chrome V8类型混淆漏洞CVE-2023-2033", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518378&idx=2&sn=895b54808f4ff67e10cfa960cf693caa&chksm=ce4603baf9318aac7b57862812c68a62592725be8c40650b73934cc8eab9a073fd890b40ac84&scene=58&subscene=0": "【漏洞通告】Apache Solr 代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652501837&idx=1&sn=b3edad8de91665e3b1b902601c02c736&chksm=f25854fec52fdde8d6cc23bf978a73dbfe18d52e6dfca9267fe0d358f1d73700cc1d983e93dc&scene=58&subscene=0": "雷神众测漏洞周报2023.04.10-2023.04.16", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498319&idx=1&sn=fd17b4ca9f3680b0113de4bbd0032610&chksm=fe79ded7c90e57c1176ebbadfe15b0275a28a979dbfd427189c852b18c9125bb72ac781d5c2c&scene=58&subscene=0": "【已复现】Vm2 沙箱逃逸漏洞(CVE-2023-30547)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247536219&idx=3&sn=f07e8f484e87c2bdc6c2f88d9ab7a446&chksm=c1e9c20af69e4b1c73a5038a55ce5a4d8e22d991f1abd69ad7d7d451cb5dbbbb14c8b4f49977&scene=58&subscene=0": "多个 TPM 2.0 实现存在越界写入和越界读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498215&idx=1&sn=5d4908e61cc00f3d786cfaa3d3c50a28&chksm=973aca85a04d4393e8035d516a80b540974970ef77efcb353200b5ffaf7e2210bf6f21edf802&scene=58&subscene=0": "CNVD漏洞周报2023年第15期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498215&idx=2&sn=21f6d638515e30d2222b344bf38fc352&chksm=973aca85a04d4393cf5d351e64588bf7279f1e0b58436f578b3bb6f1c752504a1cd77a956b36&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230410-20230416)", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491396&idx=1&sn=df6c2b7c075306c2b066bb13bb5b4f69&chksm=96f40029a183893ff65ee390ff8ff0f413ccbb6335c72fdfbef5afb4ef94feb48ee1f2e126a3&scene=58&subscene=0": "在野0Day漏洞预警|Apache Druid远程代码执行漏洞(内附检测工具)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516269&idx=1&sn=02f92ed155ba727f4c05720d3c0cd9c4&chksm=ea94b107dde33811b517d3ac16982dcec7d0609c87c4939a05f50a0f147bc4d6cf1ead52c3ab&scene=58&subscene=0": "速修复!VM2 库中又出现严重的沙箱逃逸漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516269&idx=2&sn=ce98d0e24d86dc1299d184713687b43d&chksm=ea94b107dde33811dc2662ffe815d6035779b7303082f256c0cdb7b0bdec0bd9b0552a29a5eb&scene=58&subscene=0": "NSO集团2022年至少使用了3个 iOS 零点击 exploit", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498334&idx=1&sn=3f90c4d2f610d9bf7bdc1c63cfdb90d2&chksm=fe79dec6c90e57d04be4536d15c30d84dafcd9337f69e3be9052ce02a592b5187b56796525c5&scene=58&subscene=0": "Oracle多个产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247501384&idx=1&sn=e3dd2817da868fe0aeaffe9ac1e52895&chksm=cfcaa55cf8bd2c4ac165a2ad16d0eeddec35eb6bae16d7e5bd68d8e924a989b0e1aa435fb042&scene=58&subscene=0": "0day通告!WebLogic JNDI 注入远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458502201&idx=2&sn=dec5aa410d77a35b61cc19f3f6f9eeb8&chksm=b18ef4b386f97da58f600a523505e06a6e0c93a8ec67ca80bcace10f3c05bcc1bc9743f7e6c6&scene=58&subscene=0": "谷歌联合网络安全公司创建漏洞挖掘基金,为保护白帽黑客免受法律追究", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458502201&idx=3&sn=4aa585dfebda7b61fb987b90aea73411&chksm=b18ef4b386f97da51c6c4719f51ba63f8dc1368924a3d937e73c75d9ef2ab1229b499a60dcde&scene=58&subscene=0": "系统0day安全-二进制漏洞攻防", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247536251&idx=3&sn=9e375f7f08aa1b28249fcf9f082a88f9&chksm=c1e9c22af69e4b3c3d7dff946637a3a68b543fd94b8ce8480937494bf886b4bc05217306fad3&scene=58&subscene=0": "五大API安全漏洞及缓解措施", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247560265&idx=1&sn=83d3a6c82350bf0e0da60781778d9c2a&chksm=e9143c73de63b5658781fcf496c687c47cf8b90c1f184341214e427708d48776dc0c0ab8e7dc&scene=58&subscene=0": "【技术原创】Server Backup Manager漏洞调试环境搭建", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491411&idx=1&sn=6987fa135e5a5e39bb11beb3432fdc0e&chksm=96f4003ea1838928bfb36569a450cc1055bc3abc53fe1a35d857846ccd2ec57702ab45573735&scene=58&subscene=0": "漏洞风险提示 | WebLogic多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247527913&idx=1&sn=f3dce554430b75bc9bd5c1e76dde5587&chksm=eb848649dcf30f5f829b8e51a85390b2581f29b0a164d67fa164609f84c9ddd6f72de2231100&scene=58&subscene=0": "Weblogic CVE-2023-21931 漏洞挖掘技巧:后反序列化利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516282&idx=1&sn=52eb5c1094115b783391abfa147ff39a&chksm=ea94b110dde3380674f5e90137e75fac973293e981e63b279fe6617e8a82bd25e2a2d066eccf&scene=58&subscene=0": "谷歌修复今年的第二个已遭利用 Chrome 0day", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045315&idx=1&sn=0d95ab0071c1029c509095cf81714723&chksm=803fab9db748228b32abb7327593ae570b95e5e69bf590bb656abe42e40549202d051e31d701&scene=58&subscene=0": "【漏洞预警】Oracle WebLogic 4月份补丁日安全通告", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664182276&idx=4&sn=72010f997374d1d3f421fec398344969&chksm=8b5930fdbc2eb9eb78a24576a90d9ae26cc41a4242e0c4a42baa8387abf6a2678224ba5f2701&scene=58&subscene=0": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458502953&idx=3&sn=913e68bcaf5fb7460acdc2ee45798919&chksm=b18ef7a386f97eb57682288bdd8539021f8c51f5b5a51e19139b164cfb7a05a0bd8ae1dc52e6&scene=58&subscene=0": "周六19点直播预告 | 系统0day安全-apache fuzz", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498396&idx=1&sn=d9ffaac639246f184569db4d949b9d7c&chksm=fe79de04c90e5712f5058e9ddeb2f6de881a40a2143ff5ea56a3655d074d28e9e6e798c1b61d&scene=58&subscene=0": "【已复现】Apache Druid 远程代码执行漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498388&idx=1&sn=550a94c4f42d404cab19bdf5741af5c7&chksm=fe79de0cc90e571a9ec6b1bf717cc29951a7e7a7efd50ee0a92fd3b84191541a9dc62759c3dc&scene=58&subscene=0": "Strapi 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498388&idx=2&sn=4a7471494513fa70ac9bf47b19b9c963&chksm=fe79de0cc90e571abcd5d0ff0bb23de44f4210a5c757caa2d63305c65391c8ce983b10720113&scene=58&subscene=0": "Apache Druid远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247508453&idx=1&sn=9e8fae986be9414269b82315cd57090c&chksm=ebfae6c5dc8d6fd3e3cd233650b49e5955f4a61d6ee6e22c814722eb208fb67c0416e620a063&scene=58&subscene=0": "阿里云数据库曝出两个严重漏洞,全球公有云漏洞层出不穷", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247536336&idx=1&sn=52c232b48f8e57501a7521d3ad074218&chksm=c1e9c281f69e4b97534025a6d0c94eb19c21b8c642120b12a9ac3bc7ae7dbc177c16db54081a&scene=58&subscene=0": "罗克韦尔控制器身份认证漏洞CVE-2018-17924分析复现", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516298&idx=2&sn=1625888e8762acc4a48a665717933497&chksm=ea94b1e0dde338f62127926fd478fb71059387a0ae20c0fd3e0d9c2f4c6405f946351edeb454&scene=58&subscene=0": "VMware 修复严重的 vRealize 反序列化漏洞,可导致任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247536493&idx=1&sn=4693d95c36ea5aac35337f6591c78bbe&chksm=fa93f9accde470ba0b5b4e9d504c5314421862e4fd12f723be361419a90585ed4ee756266ca5&scene=58&subscene=0": "罗克韦尔控制器身份认证漏洞CVE-2018-17924分析复现", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518495&idx=1&sn=81f2ce2af3a5c3ce80d7ba9602ab6145&chksm=ce46020ff9318b19f302ac307805e251fdd6e472ffd687796f3b243c78f1f7d29557f6296329&scene=58&subscene=0": "漏洞通告:Google Chrome Skia整数溢出漏洞 CVE-2023-2136", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652032821&idx=1&sn=1c4a278828b2ff1092ac903cd3b4a436&chksm=f36fe375c4186a630be4ae42843ca86ebd932da52439bc4b47724ffa365daeee9a3d233b1b1e&scene=58&subscene=0": "【安全圈】现已修复!阿里云SQL 数据库曝两个关键漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458502960&idx=1&sn=5322cbc9e7501a9a24071e302e5fec1d&chksm=b18ef7ba86f97eacd561cd723e6f10bb2079c158987bc141c57b87f91a515d5f6c719fd93b66&scene=58&subscene=0": "Netatalk CVE-2018-1160 复现及漏洞利用思路", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247536370&idx=2&sn=da8ff048efa8b5ee8fe964ba58e7265f&chksm=c1e9c2a3f69e4bb54099f82028c7e6f561055b51afce9c600dad532abfd3628337d397e9b9c2&scene=58&subscene=0": "黑入AI:通过MLflow漏洞接管系统和云", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247536511&idx=3&sn=64b612365e880c7f037b0ba6fb226353&chksm=fa93f9becde470a89d125c3767c9fbb053ab5fbd953ea56c7216ba0313bd8677f9d5bc6cfe99&scene=58&subscene=0": "阿里云数据库曝出两个严重漏洞,全球公有云漏洞层出不穷", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247486979&idx=1&sn=8d18648e46f26e2d8a763e232495f536&chksm=fb02835bcc750a4d7fb191fb525f0b1cfdf3ecb1886aca44d85a170fb3a745e04c37e4541020&scene=58&subscene=0": "漏洞风险提示 | 泛微 Ecology OA SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MjgxOTc4MA==&mid=2247484325&idx=1&sn=ad53c618b35d6c3241c5e7062eca6f62&chksm=ce03470ef974ce18370c5734b646f5d3165af5931aae235fcdd17d1ffffb3edeb65ba2747aac&scene=58&subscene=0": "Weblogic T3 (IIOP)协议漏洞分析(三)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516312&idx=2&sn=2cac42d417ababa92025bbc46308d532&chksm=ea94b1f2dde338e4bb6a7f32bffeb2acff01f5c37bb2e78c7c90eeff36d1925523800c87dd66&scene=58&subscene=0": "GhostToken 漏洞导致恶意应用隐藏在谷歌云平台中", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652032969&idx=4&sn=f7aef4bcf75ec900c4c79b8e7ee76d52&chksm=f36fe389c4186a9f1b0ed7ceee9f44da75db0c922e72df01eee35599e8479d255c978bb9f4cb&scene=58&subscene=0": "【安全圈】美国CISA最新收录三大漏洞,涉及谷歌和ChatGPT!", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498447&idx=1&sn=b5963a92370ae0d4fc385831023ca5df&chksm=fe79de57c90e57412313d7d9e5e3e80b7521865a631df8c16b122b9f0b015cf6e18029f1940a&scene=58&subscene=0": "【已复现】泛微Ecology SQL注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498447&idx=2&sn=822761baba2a2efce84f4c6465474153&chksm=fe79de57c90e5741138d0b3b928df05470b4ca225d445afbdcca6733910b20d7dbc033f2d788&scene=58&subscene=0": "【已复现】Strapi 多个高危漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247488850&idx=1&sn=a4dcde9937f598926d27524ca4ed0f48&chksm=fe2eead9c95963cf852c901fb78e955aa043899ad61a6a84449a80c4c332835c99acc2838f33&scene=58&subscene=0": "VRepair:修复c语言安全漏洞的神经迁移学习", "https://mp.weixin.qq.com/s?__biz=MzI4MzI4MDg1NA==&mid=2247484708&idx=1&sn=ad2f4ce1b53957cfe9d005d8e9438a35&chksm=eb8c519ddcfbd88b5acfc1a11a54902c806d9739f760a68cbd3166aea05582b1b63cdb36a6c4&scene=58&subscene=0": "同程黑盒漏洞扫描系统 - 飞刃(nextscan)正式发布", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493294&idx=1&sn=79c543115a4b296bbf6842184f950fc7&chksm=fd74d667ca035f7156ec23ff411e762aa279e81d3167f5052562bf96fcc0a929183d4ee0c6a8&scene=58&subscene=0": "CNVD漏洞周报2023年第16期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493294&idx=2&sn=e785929b28c50d8ae99c499ea170d6ab&chksm=fd74d667ca035f7139e728965ef39064ac93485edd1932a2d143e2f2dead1e2a964e48d215e2&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230417-20230423)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247560463&idx=2&sn=850b8b3aa1bde77b54d3837bde1c7ef1&chksm=e9143d35de63b4233f9fa0e8e047676557ca4af7aa9cde2139970b76aec20d38132762d4291f&scene=58&subscene=0": "在阿里云PostgreSQL数据库中发现安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652501863&idx=1&sn=6e372b1bdd00a8281ea8ab3358f7edc4&chksm=f25854d4c52fddc2e5f4fb2bd8d31d1542f98200f346f97bfbe6b89823d8c6942a9b105e3936&scene=58&subscene=0": "雷神众测漏洞周报2023.04.17-2023.04.23", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458503197&idx=3&sn=1dc8739401530a0203437093a0fd38ef&chksm=b18ef89786f97181cc51ce6eddab40e14ad63762d788020a3271f32429b6bf8cc9e33d89abd6&scene=58&subscene=0": "CVE复现漏洞精讲-从基础到入门:现在报名立得20元优惠券", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516335&idx=1&sn=d6970653344d43075615c17ff16238fe&chksm=ea94b1c5dde338d3789946c1608390c5efd92097c9603d9825cf6e2a34dfd82935abe1d1fd32&scene=58&subscene=0": "施耐德电气 UPS 软件中存在严重的未认证 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516335&idx=2&sn=7714c02477242110c20958d13327c558&chksm=ea94b1c5dde338d3aea7cd488e25f4d59825e633deebe43bb64963f20d6336a81cf4016641f1&scene=58&subscene=0": "SolarWinds 平台修复两个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487043&idx=1&sn=fa2085171776869c3e4a75f896b3be59&chksm=fb02831bcc750a0d2767497ea742469359fae0025a0e5d4c9e9564fb1208ad4a42741a04ea7b&scene=58&subscene=0": "Netty和Tomcat环境下给Spring Cloud Function Spel RCE注入冰蝎内存马", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498228&idx=1&sn=cc121dc951d62ab71189871eb1d32af0&chksm=973aca96a04d4380fbb6a2e28f5df0cc8279377407e916c2b76c28b67cf5368fe6445e4b2cc5&scene=58&subscene=0": "CNVD漏洞周报2023年第16期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498228&idx=2&sn=627801a5f720abffba3a484e76cacb42&chksm=973aca96a04d4380e52a059db2cb51f791aebc992ad8945b868fd06dc4274efffccdd1da887f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230417-20230423)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247560534&idx=1&sn=4a88bf2f7b8dfca94315ecddbbf70195&chksm=e9143d6cde63b47ae28c2b07e5775af6afc1d387c9ac0e874f6968fa6437f9b9bb54570cacd4&scene=58&subscene=0": "vm2再爆沙箱逃逸漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498472&idx=1&sn=62a9b6554d133eef35c8fae8ac7dbefb&chksm=fe79de70c90e576609eedf07dfc9dd1bc5a58113bffe5a45168638d9722a7cb0587cc295e564&scene=58&subscene=0": "【已复现】Apache Superset身份认证绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498472&idx=2&sn=b44e92245487d7eff9f96da6fe9f0b61&chksm=fe79de70c90e57662854b773fddd08aa092866e7fcb48f7e824505978a3cde386dbb464648ca&scene=58&subscene=0": "服务定位协议(SLP)任意服务注册漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498472&idx=3&sn=36e28ea5b7d470017fb942d2a7fa934b&chksm=fe79de70c90e5766038bb78c4654bf7c4d7378a66e3d602309f00811019cc1f5bc29bd8d76dd&scene=58&subscene=0": "VMware Workstation与Fusion 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492080&idx=1&sn=7f731f1fc953800abba0855319684744&chksm=fe26e4f1c9516de755ddd197c5a6ed07a98b9b8ac9024e512c4e5ce72278dac29e29ec540b95&scene=58&subscene=0": "CVE-2023-27524:Apache Superset身份认证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516346&idx=1&sn=260aa87f75279d3101ddc11e8e48ee81&chksm=ea94b1d0dde338c6aa50da46b3651794726cdf0d14752bb2a5af194367089da4bfa90355660d&scene=58&subscene=0": "VMware 修复在 Pwn2Own 大赛上发现的两个严重0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516346&idx=2&sn=c84ae42d9a4eab4b30b8eba4a27130a5&chksm=ea94b1d0dde338c6da3cc189e548d10cc3511c1ef2d59f067bd428a6efae2df174b66c93b0f6&scene=58&subscene=0": "Apache Superset 会话验证漏洞可导致攻击者访问未授权资源", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518562&idx=1&sn=ee8dca38555a426ebfe65e2c27a9d832&chksm=ce460272f9318b64a572b2f6531973886ef9a542052aa656ad7b84dec032153e7fd2e660fbba&scene=58&subscene=0": "【漏洞通告】Apache Superset 身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652033185&idx=4&sn=aeb42c67f64b4f18109f11323bbf7b67&chksm=f36ffce1c41875f73671bb0397cac20255c07cb7a3b8e31355f39abbfad3119a3c532f398e18&scene=58&subscene=0": "【安全圈】2200倍!新的SLP漏洞引发史上最大DoS放大攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651206295&idx=1&sn=6b005f55bf514a7057439ae4ee4aaf6a&chksm=bd2cd7318a5b5e2710289af29bb301f48e3136aff7e3f9a527ebd58b83a58d37263082b885f2&scene=58&subscene=0": "TSRC拍了拍你,全新漏洞处理和评分标准即将上线~", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492087&idx=1&sn=c5ab55deaa16c1789fa911cce8a0f845&chksm=fe26e4f6c9516de09d927d1d9b2ea9d99947094234b51ba6a1d65fb85c34d9bedb1a1d84fe0d&scene=58&subscene=0": "CVE-2023-20869∕20870:VMware Workstation∕Fusion 漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516356&idx=1&sn=3a870e38244c8f43090fe23f54c81fa7&chksm=ea94b1aedde338b8242499091a2cb37dec7924bffa0bde2f1dc62c5d42e10242fb0125850d86&scene=58&subscene=0": "思科服务器管理工具中存在 XSS 0day", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498483&idx=1&sn=d2276988aeb46f7a30634dcbeba28b9d&chksm=fe79de6bc90e577dd721a745bc9640e5deaa6f084b0872ccf0f127f9118ae2b304b1f5a8719b&scene=58&subscene=0": "【已复现】Windows HTTP.sys 权限提升漏洞(CVE-2023-23410)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247488885&idx=1&sn=07bbdc918e7c7e0d8958d9464125c045&chksm=fe2eeafec95963e889b4620109884c2edbf0f72a6c3e07117630bcd3a61e03ade4736f09fd6c&scene=58&subscene=0": "VulRepair: 基于T5的自动软件漏洞修复", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652033310&idx=4&sn=806dc3b6cb797a293abe87f4853a686a&chksm=f36ffd5ec418744898b7bb0a943469115e47d38ff9a54b13dee1649e3be130edb7b3ade9d69e&scene=58&subscene=0": "【安全圈】黑客利用PaperCut打印机漏洞传播Clop勒索软件", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247488913&idx=1&sn=c9dc28bfde182f6d14951a6dcf128c89&chksm=fe2eea1ac959630c50bb9097b3420578aad0488a4983896965ddef91b05ad43ea9b6a35abfe2&scene=58&subscene=0": "Java项目第三方库漏洞兼容修复", "https://mp.weixin.qq.com/s?__biz=Mzg3NDU2MTg0Ng==&mid=2247493790&idx=1&sn=c6eb7b7480638b11e5fc7405aaed44bb&chksm=cecc40c7f9bbc9d1f2dbc8979be06b8291b2b109c21fc0116ca844ebba2a884b016c94e48f78&scene=58&subscene=0": "PaperCut MF SetupCompleted 远程命令执行漏洞 CVE-2023-27350", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652033607&idx=4&sn=4993f0942dd95c4f48a07aa8fe545e93&chksm=f36ffe07c4187711382dcacbcf12b120b6d52908545c628d5d1ec29f8719190bcc7db8c8a93b&scene=58&subscene=0": "【安全圈】黑客利用PaperCut打印机漏洞传播Clop勒索软件!", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458503744&idx=2&sn=fc25fe131fd11a3b2cc7ffec6a0f19d3&chksm=b18efaca86f973dc58047dd2c996703bb7dfafdbb06c345115a8e56aeea3b886454dffb84fa2&scene=58&subscene=0": "赋能企业安全!系统0day安全-二进制漏洞攻防", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652501882&idx=1&sn=ce8fbf6b948abc55737bec131ca2b9a6&chksm=f25854c9c52fdddf0bc3a4a0dde3c87e19e95dde5d0be8b04849ccb72411e0a40e47136aa3a9&scene=58&subscene=0": "雷神众测漏洞周报2023.04.24-2023.05.03", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516377&idx=1&sn=4cbbc6c979c62c393f9ef2db0243a131&chksm=ea94b1b3dde338a54cdab96dad5458c78ef17312b82e06a66b7cded637686a8042982eadf075&scene=58&subscene=0": "黑客正在利用 TBK DVR 设备中五年未修复的 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516377&idx=3&sn=192b57a49188eff333e91ac76838eb8f&chksm=ea94b1b3dde338a56301077e9edbeaff1b5814e3eb2e0e1c8e5abcad7423c6ee89408b7c3aae&scene=58&subscene=0": "热门的开源互联网路由协议软件中含多个漏洞,存在供应链风险", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650967962&idx=1&sn=e3764c5fea9f8fb7b595c849daf1d783&chksm=8079cda8b70e44be76a22ad7bed9aef3a29c7433c5842f1555694da4691e4d6b0f48f66e5dbe&scene=58&subscene=0": "404星链计划 | Pocsuite3、Viper、veinmind-tools 等项目版本更新", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247536668&idx=3&sn=5d7d66434063bd6238799ec3e65b209c&chksm=fa93e6ddcde46fcb23f6d08480e265528d811f88cd26ea098c1b4fcf8fd9664279140d3a9792&scene=58&subscene=0": "英特尔CPU曝安全漏洞,攻击者大量窃取数据", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487061&idx=1&sn=cc96a55d1551c797222da18c18d77434&chksm=fb02830dcc750a1b5847cc863d90ff5e511dd11862a4fa3f26cdb7750875db04fa366ce9897d&scene=58&subscene=0": "BrokenSesame 阿里云PostgreSQL 漏洞思考 --详情见原文", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518580&idx=2&sn=617c114e08916bd96e5a15baf3c16e44&chksm=ce460264f9318b726ada26d432003f93a9630a5c6a6eb216c38b27034432c1e3ef8c1a5e331f&scene=58&subscene=0": "【漏洞通告】Apache CouchDB信息泄露漏洞CVE-2023-26268", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458503883&idx=4&sn=ebcb47ca8752979cffaef2c5a2519ddc&chksm=b18efa4186f97357030561e6ba732cdd619f617467df4e3dd42cf2c83876234af8ed424bbed9&scene=58&subscene=0": "CVE复现漏洞精讲-从基础到入门:现在报名立得20元优惠券", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516392&idx=2&sn=30f06254fcca6feb3228b78389c85056&chksm=ea94b182dde338944d1c48c872c538f5333e8de4ceb4594aede8579d82c069df184557fca031&scene=58&subscene=0": "思科电话适配器易受 RCE 攻击,目前无修复方案", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516392&idx=3&sn=f563d9d06d17140943a9006f9816fecd&chksm=ea94b182dde33894747c1e2aa9ddbd52a923d8f1cc8ec0edd712caa946b58d97a9ac1bda8ecf&scene=58&subscene=0": "研究员在微软 Azure API 管理服务中发现3个漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652033780&idx=3&sn=d718a5562f0748dbdf7a36eef3879d4c&chksm=f36ffeb4c41877a212ea69188a6804d0ebcf738036b1bcc76603330b475654ad212f9fc3fa8c&scene=58&subscene=0": "【安全圈】OpenAI 曝新漏洞,允许新用户“无限试用”", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458503921&idx=3&sn=ffc8785e954686794f023f73e7bb7f4c&chksm=b18efa7b86f9736d4aebb186d947a0c46e9bf2f0bc3cd01e844b786c2496df35e236504859bb&scene=58&subscene=0": "赋能企业安全!系统0day安全-二进制漏洞攻防", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491430&idx=1&sn=53bea7b2cea5eb21146f06dc64a6e58c&chksm=96f4000ba183891d98d9d66711bc5f5d017cc1195e6d64c2e83dde184fb45d4d4afdd582d8eb&scene=58&subscene=0": "漏洞风险提示 | Linux 本地提权漏洞 CVE-2023-0386", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516406&idx=1&sn=c826fb7f5e9179a2dd41fd8fe00141de&chksm=ea94b19cdde3388ab79dce0421053447244374dcf510572bc9b52942e7f1d77fea731786465d&scene=58&subscene=0": "OpenAI 账户验证流程存在漏洞,可导致用户无限薅羊毛", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516406&idx=2&sn=b0ac9c5e379181f6de71e5f0afdecc23&chksm=ea94b19cdde3388ae47cb6b4ff1e53afb3905e4b6e68d53559b0769ef5360da2cb7152a72bae&scene=58&subscene=0": "【已复现】Linux Kernel 权限提升漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516406&idx=3&sn=f6d52c7913cb9a7127079a424f287d22&chksm=ea94b19cdde3388a41d9382c14e8649d4db7f27382de8b638a8c2430d9fb7a6e3125a60ceed6&scene=58&subscene=0": "Fortinet 修复FortiADC 和 FortiOS 中的多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247536592&idx=2&sn=e54515133fe7c305b9b14808236628bb&chksm=c1e9c381f69e4a9797c5813053d992f241c78189e7fe0b1acd8deaba1f8f4c9d53b5659e0576&scene=58&subscene=0": "独家:Illumina测序仪再次爆出安全漏洞,可能导致结果篡改、泄露", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492101&idx=1&sn=353c4f8cf7f3e304eabbb942110989c8&chksm=fe26e704c9516e12ba04afa132fb69c926c129f1a2c5c8282324f0427e18b3bc17efa236b0bb&scene=58&subscene=0": "CVE-2023-0386:Linux Kernel 权限提升漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247536716&idx=1&sn=f6fe40eee492fbd478ace619a08ae18b&chksm=fa93e68dcde46f9bdb678ec24191f5c50ae5033ed0de6eea9296b232bda37188364fcfe42a89&scene=58&subscene=0": "独家:Illumina测序仪再次爆出安全漏洞,可能导致结果篡改、泄露", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247536716&idx=3&sn=9dccf30b49a6ea0f764103f16bf37681&chksm=fa93e68dcde46f9b0f0868278ad3047a8cdba326e875f0f186004c47ca35c044c08d42878c14&scene=58&subscene=0": "针对ChatGPT的隐私提取攻击:多步骤越狱漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498491&idx=1&sn=98b9815801067ca7640f0bb5b75e3b10&chksm=fe79de63c90e577579bcda4179e189ae371dd054ae59fef374a4861d8cbd68b8cbf1968df337&scene=58&subscene=0": "【已复现】Linux Kernel 权限提升漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488276&idx=1&sn=094e8b3eba2a20f5c460f8b80e448e97&chksm=c2c6441ff5b1cd09417d30595a84d2c0c92ca2ef4835a1f8abc23f52517cc22fb26f4e12e4fa&scene=58&subscene=0": "【漏洞通告】Linux OverlayFS权限提升漏洞(CVE-2023-0386)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458503947&idx=2&sn=d2ca3aa3565629e6d61a2d6380e29263&chksm=b18efb8186f97297dd452f5de872e5e84a998c31a0a196c545a2c7e8ba2f7024fd806153e056&scene=58&subscene=0": "直播预告 | 今晚7点!系统0day安全-Linux内核初探", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652033875&idx=4&sn=027f3f9b86e51bc9bb359b06b3c373dc&chksm=f36fff13c4187605b39ca647548862a89014321d699bf39886503e86b2362329cfab6037e9be&scene=58&subscene=0": "【安全圈】8220 利用 Log4Shell 漏洞进行挖矿", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487076&idx=1&sn=53dd511a84fc6db1766c8b5212759acd&chksm=fb02833ccc750a2ae14a819e0783eba6d98aa76b41d3b0188c4fda8918a180ca6c5d2c93f02e&scene=58&subscene=0": "阿里云数据库漏洞分析与思考", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498499&idx=1&sn=26b98eefba224dff75c7e62bdc0c1b46&chksm=fe79df9bc90e568d4ff545e7f03710377fc26d1f211c92e678ca9724be6c09768a51937cee84&scene=58&subscene=0": "GitLab代码执行漏洞(CVE-2023-2478)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516420&idx=1&sn=89d69a30e805ed5fabd9a6d3e57a5388&chksm=ea94b06edde339781e5c419630c9e72ffa180199862e815f7759f68b8f5998b0e102f93b4a3c&scene=58&subscene=0": "严重的西门子 RTU 漏洞可导致电网不稳定", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516420&idx=2&sn=e419c137b012ee8e70e8514f7bf3a2e1&chksm=ea94b06edde339787fa928cc50927bb993d84cb037cf64c8f353c0b7afc9b6064576dddb5f44&scene=58&subscene=0": "WordPress 热门插件中存在漏洞,200多万网站受影响", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458504102&idx=4&sn=e47932caba2baf983d8d964cdf9ac9c1&chksm=b18efb2c86f9723affda406effc026d5b30850d36c8629748f9e8ca842ca98f1f64f17a272e5&scene=58&subscene=0": "CVE复现漏洞精讲-从基础到入门:现在报名立得20元优惠券", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247488974&idx=1&sn=f1d962a933bea1fd677999af67004fc5&chksm=fe2eea45c9596353855c80233798c8109a90332e384fcc99742d5912bdbfc71a07d8cbbf4e8f&scene=58&subscene=0": "乔治梅森大学|隐匿在commit中的安全漏洞(DSN 2019)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518656&idx=2&sn=3c55cc4cb541a6ad164b659bd3619ff5&chksm=ce4602d0f9318bc62f156e05f74b3d361bd6d4a7783c57bad24fb8280e58d0bd6796b6448c8b&scene=58&subscene=0": "Linux Kernel权限提升漏洞CVE-2023-0386", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491438&idx=1&sn=c0b683b5887e2e6535b429b12ea7a054&chksm=96f40003a1838915b986da882639425aeec69f9db2bea33d33d3432643731ecc9a5dafb5f296&scene=58&subscene=0": "漏洞风险提示 | Gitlab CE&EE GraphQL添加恶意Runner漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498308&idx=1&sn=63adc5e821c1254bdb73699f1ae1bb12&chksm=973ac926a04d4030822a7094b9b98502c1299ef58830853c333620956a3b4847bbe07aff02e4&scene=58&subscene=0": "CNVD漏洞周报2023年第17、18期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498308&idx=2&sn=dd3dc41c3c7a9cd2a36e7afca1c08bc2&chksm=973ac926a04d403069ee33f69e497c03170761bc324ae0f54fd1e250982900ad8864cd82e928&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230424-20230507)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493326&idx=1&sn=b31abeb5a12fe912b86f0311c23b6bc1&chksm=fd74d607ca035f114d7515d89e8c22d48b37b10c4e0a64cf6808ef3138b5f168a9200bdc0639&scene=58&subscene=0": "CNVD漏洞周报2023年第17、18期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493326&idx=2&sn=35b560babe87fb3750fe61d5d2cb1cb4&chksm=fd74d607ca035f11a1a701b5817b8400697512ec41f5b7344ab1afd22b63d8ec68dfcee42fb9&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230424-20230507)", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492113&idx=1&sn=40bbf022aa96bda627a1fe51ec62bb15&chksm=fe26e710c9516e06e26ad98bbf68d10c5c62c33bcd5e1dc72a26a7da3c33425e33439758dd03&scene=58&subscene=0": "CVE-2023-2478:GitLab代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518723&idx=1&sn=5eb98f20cf316411995031d5ca109035&chksm=ce460113f9318805270f9e2256fc26467cb809f3a6f75f75f9f0f543853eed5f090bc8c75900&scene=58&subscene=0": "【漏洞通告】GitLab代码执行漏洞CVE-2023-2478", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652034021&idx=4&sn=7389e3ddf6dd0e1108b956e9a7832127&chksm=f36fffa5c41876b3e3b1793344b39896ac919261beac85def637eff0be6b77a154bcc575ed8f&scene=58&subscene=0": "【安全圈】苹果数据传输面临漏洞威胁: 新的Wireshark剖析器揭开面纱", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458504176&idx=2&sn=e70f2207658070a8da1ca18c00fed64f&chksm=b18efb7a86f9726ca7ca0e28051f959b5a43ff788dd5a2e4109251e5d42b1c267b1754061f89&scene=58&subscene=0": "ZEEKRSRC挑战信 | 单个漏洞最高奖励2w", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247536767&idx=3&sn=9f58c71262fe3144857b72136ff02895&chksm=fa93e6becde46fa8e271e3ee3d442ac405dd78776cf065f07e6fda44229b32fedbe6a980cafd&scene=58&subscene=0": "深度解析DARPA网络安全漏洞发现计划HARDEN", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487083&idx=1&sn=4160ac7d5ffa330e381b0862bb15427a&chksm=fb028333cc750a25570833c7efc774aff8154b2d615881582487a5c0d61e0c905173ca399306&scene=58&subscene=0": "漏洞风险提示 | Gitlab CE&EE GraphQL添加恶意Runner漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649784781&idx=2&sn=e24a474b3c116b93ebb4533abf50637b&chksm=8893b1a2bfe438b415baa135cc20dd8cca7b388d35af92001e6805167eb832c32bb2f519d2a9&scene=58&subscene=0": "【安全头条】 Linux被曝内核漏洞,攻击者可借此完全控制系统", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516449&idx=1&sn=17fb3428de6050c5e0ce8daaa751c406&chksm=ea94b04bdde3395de1c91c780a8796919fd059dce25c7d3ae460bbf340057ec40a3581920c4d&scene=58&subscene=0": "洞少事大:微软5月补丁星期二需关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516449&idx=2&sn=3d707d11e6ef16e4beb82600320a1003&chksm=ea94b04bdde3395db7478af8cdc09378319ac019551a410d1a90692898da9314af37ab22b878&scene=58&subscene=0": "Linux NetFilter内核新漏洞可导致攻击者获得 root 权限", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491444&idx=1&sn=c7e8cbf14c8adb12811e1d45999bf559&chksm=96f40019a183890f994c4d998cf065ff5ff375344b37037cd02e8ce73a6a4f6a6f034d58f502&scene=58&subscene=0": "漏洞风险提示 | 微软5月补丁日多个高危安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY0NTExNA==&mid=2247489413&idx=1&sn=c9d46582431adeb470fc48eb5b133850&chksm=fdf97c90ca8ef586e6a7fbdfe659bf3241c988b88b83f824acf02ec2b3fef87c640ed78926fa&scene=58&subscene=0": "云安全案例11: 溯源分析黑客如何利用Oracle云基础设施Attachme漏洞无需授权访问和篡改任意租户的存储卷", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652034088&idx=4&sn=c3bbfa78ff001268aa73a50a0969859d&chksm=f36ff868c418717e28bcc9e8f6722c314f78f2544a683555268fc003b299f90d8300e9d7f636&scene=58&subscene=0": "【安全圈】微软修复Windows 10∕Windows 11上BlackLotus UEFI漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247514377&idx=1&sn=b3791ab34c6e0edd9d2cb57935b39a78&chksm=eb706736dc07ee20b60cd072fcb2288c5d1f5a95faa81719d1ff741cd5a26388c82d45131040&scene=58&subscene=0": "2023-05微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498528&idx=1&sn=9d8e2d05d36d1d633b88ce811d5c7a7f&chksm=fe79dfb8c90e56aee6553bca93d97ca71ce656786d4886a58c9aa963dc2b35ab580ad90ae91b&scene=58&subscene=0": "微软2023年5月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492119&idx=1&sn=72fe2d462267101bb192927e4b475d68&chksm=fe26e716c9516e008465281fa28c5bc484bf79c7cf05213a0ada3532b86ad58edb583c845a37&scene=58&subscene=0": "2023-05 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247501142&idx=1&sn=4159db67338cbe3b34a387caa0f2d8c8&chksm=fa5210e8cd2599fedf775bae397a3c927871d25e913e4944bd38ad6da7172059ee117f8111ca&scene=58&subscene=0": "山石网科信创安全实验室获USRC漏洞致谢", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488285&idx=1&sn=90a1119f2b53da93e0403f791477e284&chksm=c2c64416f5b1cd002af1bae19d8f014fba5e7f4c348fdaf92f3357f77c5df4aa5f7029aaefa4&scene=58&subscene=0": "【安全更新】微软5月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045339&idx=1&sn=f108d08288a076f253678288e03da35b&chksm=803fab85b748229383099d18e2d2f65f3c3ae511df1e36106acd9490deef5a51ef8b1e19a88d&scene=58&subscene=0": "【漏洞预警】Apache bRPC代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516461&idx=2&sn=1319c4b17cbfce2602f31c1375378a21&chksm=ea94b047dde33951dc262c284fcf1d6aac308d66672887728510ab05882edc873667a4dcb89f&scene=58&subscene=0": "SAP 修复多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498546&idx=1&sn=37c3861644b3e52fa62f2b4be8b59068&chksm=fe79dfaac90e56bc032681bce9ce6c98437a58af8767809818c27f09494e6db02c7a5a351679&scene=58&subscene=0": "【已复现】Windows MSHTML Platform安全特性绕过漏洞(CVE-2023-29324)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664183744&idx=2&sn=16b2cd993f2a33ea858a9d9de489443b&chksm=8b593539bc2ebc2f58b8a664aff5e13a1afcdd82c794b59354190ce6e15b6240ecea2fd227d9&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491452&idx=1&sn=4060657dcce7004f457f3cf426676bc3&chksm=96f40011a183890730a653c10ef7ccce4fa58371ed907db948834c8cee7d9e15ec68a4e53a49&scene=58&subscene=0": "在野1day风险提示|宏景人力系统 SQL注入漏洞(内附检测工具)", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484165&idx=1&sn=758a6119eef77796827517d9f6b5ab09&chksm=c2b10173f5c68865cd0509f6322aa791826cd8486b59d149748b7f2274de6ed8df94ec34e3c9&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年4月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516473&idx=1&sn=f56859b3fc89bfc1ea259f355d5ea57b&chksm=ea94b053dde33945ba3fd2c0d75213db0b00c2d06a6798292b97054c90cd86bbf0e56d7f1c5e&scene=58&subscene=0": "微软将花近一年的时间才能修复这个 Secure Boot 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492130&idx=1&sn=321f4c0c0d31f5987fdbd2557885ac8f&chksm=fe26e723c9516e35e84509f1dec22b670d39437efd80848c3b9b95954002988a248a9e99f933&scene=58&subscene=0": "CVE-2023-29324:Windows MSHTML Platform安全功能绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498554&idx=1&sn=48a092be1127f0d584edca2f82ff81bc&chksm=fe79dfa2c90e56b40b49318e08c3e9d96163293a7a4ff6017982ad11fd99f0c44a7d8ba1f15f&scene=58&subscene=0": "【已复现】宏景eHR SQL注入漏洞(CNVD-2023-08743)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247500841&idx=1&sn=33c9b247586ffcfa1efa2fef39b20b31&chksm=ec9f1d5adbe8944cda97fd6acf1ce465c794c7fa65b9f09a958b50282d5563afb84eec872816&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年4月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247514406&idx=1&sn=3a11ec1ad062f13bf6e8b0ca87a1cad1&chksm=eb706719dc07ee0f12dc6a4261ccb9f9816cddb65ebff108eff555e0fc656d21df12eec41208&scene=58&subscene=0": "【火绒安全周报】Linux被曝内核漏洞∕推特网络攻击案主谋预被判七十年", "https://mp.weixin.qq.com/s?__biz=MzA4ODYzMjU0NQ==&mid=2652313170&idx=1&sn=24321d16a88641c8a6f501418e74a6e9&chksm=8bc48bdcbcb302caf2549fd94e734e3f7027250d54211151bada0826382c59724ed8ae2f613d&scene=58&subscene=0": "【InForSec2023 年会论坛回顾】王帅:软件侧信道漏洞检测", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518793&idx=1&sn=452346e011e010b10f906b1cc3b1e695&chksm=ce460159f931884f4bfff424d4edec16e03d65f3e15cf1d51d9748147469216d1f80cc8e6ee9&scene=58&subscene=0": "【漏洞通告】宏景e-HR SQL注入漏洞 CNVD-2023-08743", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518793&idx=4&sn=0cd77eb9fc8e89f8c033b68cbf1d67f7&chksm=ce460159f931884ffa6201c6b26918e673d5dd76fcc15e9265ea1e0b2e1b1691bd79ec84fe4d&scene=58&subscene=0": "【漏洞通告】Windows OLE 远程代码执行漏洞CVE-2023-29325", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516487&idx=2&sn=a0bd3a1e5ae0747b856ff42a50636fa1&chksm=ea94b02ddde3393b8a0a1ef90ddb1b3ee7f686b99ca6be0fbe36815c0c1d139cd46fda753f61&scene=58&subscene=0": "CISA提醒:严重的 Ruckus 漏洞被用于感染 WiFi 接入点", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498568&idx=1&sn=01741813c0e3733a78dd83b0886f6256&chksm=fe79dfd0c90e56c66466aaf9ad2a47a2f3cba5017b36136ac387f49e6bfdc11a4aceacb2d91d&scene=58&subscene=0": "【已复现】Foxit PDF Reader及Editor任意代码执行漏洞(CVE-2023-27363)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493344&idx=1&sn=84ce337b7d1e2cd0a14b84be1e5bb7a7&chksm=fd74d629ca035f3fab8a7140e2970a147288c415847b2afc2bb455a98cfedc3481cf876f0c1b&scene=58&subscene=0": "CNVD漏洞周报2023年第19期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493344&idx=2&sn=1af5daf5e77d07abd3ed0ea96ecd4971&chksm=fd74d629ca035f3fe91225c72c074d6a64a913827d27202b90f380a2adef9af58b479f9976bb&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230508-20230514)", "https://mp.weixin.qq.com/s?__biz=MzA3Mzk1MDk1NA==&mid=2651908118&idx=1&sn=9d35cd44172636fc65732cde95a5dbbf&chksm=84e37b93b394f285d7ebd5f9562be0a9d98f74c7eb9ba9578a2135317a9f354bb8535fa93a15&scene=58&subscene=0": "DSRC漏洞奖励 TAI KU LA!快挖呀挖呀挖!", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657164518&idx=1&sn=676703a4222541f9bdd460442ffce0ff&chksm=f1d4ee03c6a367158ffaf5bacd1df0e2e72f35a29946cb0c9e8e96999e6a3268e24d1a159962&scene=58&subscene=0": "CVE-2023-32233 linux内核提权", "https://mp.weixin.qq.com/s?__biz=MzA4MDMwMjQ3Mg==&mid=2651868606&idx=1&sn=6379ef63644b645d3539afc2affe2bab&chksm=8442b559b3353c4fb7cd81f12eac3778602d81a78d5896d81f322e11c4fd6d424cb4e6f01a31&scene=58&subscene=0": "CVE-2023-32233 POC", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458504523&idx=1&sn=efa8d1d5a282655cfd12dfbf973a3c12&chksm=b18efdc186f974d78d20a6e7ed6a29099ff6664fb96a58de72172bd73f87b08f7ae0c248dd2a&scene=58&subscene=0": "CVE-2023-21768 Windows内核提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487090&idx=1&sn=da3ca4cfeb2a99ce68f1a5cfc358611d&chksm=fb02832acc750a3cef5c31decfae264f51736e0a1fe28aecbcb482707fb7da46c8c36391ba65&scene=58&subscene=0": "在野1day风险提示|泛微Ecology信息泄露&前台任意用户登陆漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518822&idx=1&sn=e9109c0777c9684ca6ce3535d3b555a0&chksm=ce460176f9318860e105e1f8c6b692159bd362ebedcac504d33c8b343a64684762b6c25476a1&scene=58&subscene=0": "泛微E-Cology9 任意用户登录漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498326&idx=1&sn=972b6786c114d1043b06cf38e9491b45&chksm=973ac934a04d40229566184cf9624e001b03095b7fba6ed1920b8832395c2f726a253a047001&scene=58&subscene=0": "CNVD漏洞周报2023年第19期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498326&idx=2&sn=89020c1349dec9121ac5f5a0e429947f&chksm=973ac934a04d40226f1edfa9a7c3a9af403c4835dc1b0fa2bbaf09780480d40d295c68f7b99f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230508-20230514)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458504553&idx=3&sn=caf8fb1dca574464e28d699e77c74c6c&chksm=b18efde386f974f567d6bb9e9e2d420ceee94570e8f262a4f1f5fcc26a924a0849b76b072ae3&scene=58&subscene=0": "CVE复现漏洞精讲-从基础到入门:现在报名立得20元优惠券", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516507&idx=1&sn=b78916339d8b011287a81705ae5bad84&chksm=ea94b031dde33927690ac184722ad174120f995e5e18207d26b03075f5d29177a92bb82a179a&scene=58&subscene=0": "11个严重的 RCE 漏洞影响数千款 IIoT 设备", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516507&idx=2&sn=4feb9d27621fad108f4bf0e243869f00&chksm=ea94b031dde3392716b432265d80ced2cfbd7405b059e17ff1bc8264c018c4987a6a30fd5e32&scene=58&subscene=0": "0day 可导致设备遭远程攻陷 贝尔金不打算修复", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247536792&idx=2&sn=4b64571e25df2baab9d644203dcf831d&chksm=c1e9dcc9f69e55df34c3c0495adf42daab0fb1b45ddb6a3ce4012f688ca82a17183243aea8d5&scene=58&subscene=0": "严重的RCE漏洞导致数以千计的工业物联网设备遭受网络攻击", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492148&idx=1&sn=290de8c8425d570a0c9bcf36632902db&chksm=fe26e735c9516e2338443e7b672b27cd5f8ccd530a955d98fbcfed29d43bb7a8c3c5f48db88f&scene=58&subscene=0": "CVE-2023-32233:Linux Kernel 权限提升漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492148&idx=2&sn=1d6818d43bd4902d72aa378b0d282784&chksm=fe26e735c9516e23e60a53839e11e83c88931294e918afdd15a65ffaa7f5bbb813dcde8cf858&scene=58&subscene=0": "泛微多个漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247536910&idx=3&sn=c47d6d2219c584c7cd12e2cbd419e2a4&chksm=fa93e7cfcde46ed951b6c9a3b8e33d1443eb1884a728a2fa42ea78a591ce1da3ac9192aee773&scene=58&subscene=0": "工业路由器曝光11个新漏洞,可远程操控数十万台设备和OT网络", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458504753&idx=1&sn=6e75e8af4a3669d23289177676d74213&chksm=b18efebb86f977ad431358e3815a24c1efc2912522e4f7aff2621beae46654056e2e4941db4f&scene=58&subscene=0": "Linux内核漏洞分析系列——指定版本内核编译及使用", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247489059&idx=1&sn=557049e158f2f5ba19f848d20f477e93&chksm=fe2ee9a8c95960be537e31cbc4b690b774370459a5d916f18f848146d6fb44807ddf5c047dca&scene=58&subscene=0": "美国国家标准局 | 对最危险软件安全漏洞的评估(ACSAC 2020)", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247490861&idx=1&sn=11df64bb80eddcf806dfdd402447a542&chksm=96db16f7a1ac9fe170af2b336905721f51fda142e9c02da3e227d0a7337a802c46e6f7574ffe&scene=58&subscene=0": "漏洞情报 | Linux netfilter UAF漏洞(CVE-2023-32233)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516520&idx=1&sn=b218e43205e7038adc4f452ffee4c6e2&chksm=ea94b002dde339147f0499b209d253c186277b9ecf0af4a44153ac18705dffd978ecbe379083&scene=58&subscene=0": "思科提醒:多款交换机存在多个RCE漏洞且利用代码已公开", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458504797&idx=4&sn=31d77bff4eebd40237f7c7f02f488a18&chksm=b18efed786f977c13121c7be694f69d288688609304e54142cfd0cea2292e4381f00fdcb704e&scene=58&subscene=0": "赋能企业安全!系统0day安全-二进制漏洞攻防(限时75折)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498625&idx=1&sn=70828d24506bb2372aecbb7922fc5a28&chksm=fe79df19c90e560f4edebb0868cc494c69693bda453bbef12b3ac9293e78a6f8ebb836aadadf&scene=58&subscene=0": "Apple WebKit 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649784890&idx=1&sn=76b2c376d5f45299a74e88e88179692a&chksm=8893b255bfe43b431c32dda40c8769a5c3645bed889abeb45c22d64060ace856b72d3ea51846&scene=58&subscene=0": "破纪录!LayerZero 推出价值 1500 万美金的加密漏洞赏金计划", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649784890&idx=2&sn=a201fea56c83b01f9307f40740905927&chksm=8893b255bfe43b43e19527683936885f24e577c736910dc862d8c659e256c54f985ef9f4a290&scene=58&subscene=0": "【安全头条】CVE-2023-2478:GitLab代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650177185&idx=2&sn=8cd17af9003cf8146ae00c7b16c41930&chksm=f448851dc33f0c0b6ddc2aa7a793f704163af77e606c1c9180a9250a3d877e5df33e7fdca70f&scene=58&subscene=0": "CSOP看点 | 微步在线樊兴华:漏洞情报助力高效漏洞运营", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516531&idx=1&sn=71b3e940c482c53d52c592cdfe3992db&chksm=ea94b019dde3390fb1ecf3bd947eb8852a1f27e29e28f9c88b97d9bb2087840f62be6d882d4b&scene=58&subscene=0": "苹果修复3个已遭利用的新 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516531&idx=2&sn=bec3a163f15f4644b2f3e77f9bd07201&chksm=ea94b019dde3390fc8f528515aca82446e3ee7d9a840c5976c277f125edd5a476b402f161717&scene=58&subscene=0": "史上最高:LayerZero 漏洞奖励计划最高赏金1500万美元", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652034825&idx=2&sn=e67e4654b3ccf451d11593c12285f6e2&chksm=f36ffb49c418725f425458c0a275495fd206c53e47a2cd91c5ea45b4fda3ceb51b78589e75e3&scene=58&subscene=0": "【安全圈】快更新!iOS 出现严重安全漏洞:黑客可直接盗取你的通讯录", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458504808&idx=1&sn=7ecb49e9008d049c71e522d51082d956&chksm=b18efee286f977f498369005601452d6ed032a8d3a5dd11c615fd423cf047077db736f8df119&scene=58&subscene=0": "Linux内核漏洞分析系列——CVE-2023-0386", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247498153&idx=1&sn=09aecb24c4bab695755e584c3eaa592c&chksm=c1448b14f6330202334476c760c5758d08c7eacaaecfe19e1565e7df95b12b2a983863b1fd9a&scene=58&subscene=0": "从漏洞管理到风险暴露管理", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652034891&idx=1&sn=7aaa97cc21b81bb234d7b2ce9b0db538&chksm=f36ffb0bc418721d063842695efb29e81efc235263cffebc895ddc2ee29d008ad0b54fa83165&scene=58&subscene=0": "【安全圈】注意!苹果又曝 0Day漏洞,iPhoneiPadMac等全部受影响", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247506484&idx=1&sn=ce0525563b459be8e785fe4b7d5215f0&chksm=ea662d43dd11a4551d89c74cc3f5e1fea4f30622bd1de7df95a129473875def53c2c7dbf34e0&scene=58&subscene=0": "CVE-2023-28252在野提权漏洞样本分析", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492164&idx=1&sn=1514f16983921e7bd0731f9b78655914&chksm=fe26e745c9516e53f7d97caaa6c436ab78150b508206a15cfaa095601f382a6fe4dc4003af04&scene=58&subscene=0": "Apple WebKit 多个漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247561564&idx=1&sn=0d56ec2104c35ec586ed3f3fdc6f3954&chksm=e9142166de63a870d3ea6d1f3ad37e633813f7ec21ea1ba6f0362b6fdf1f7a7bf61e0aa515a2&scene=58&subscene=0": "AI语音克隆产生安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247561564&idx=2&sn=fccdbe7cbd01b4f8ceee0d447192ddeb&chksm=e9142166de63a8706a4433887a69c1261a14728aff5f32d88bd253165cb9fc781e01e3574c47&scene=58&subscene=0": "LayerZero发起最高1500万美元漏洞奖励计划", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493376&idx=1&sn=a5156aeeda3ef3cdf3827ada78660066&chksm=fd74d7c9ca035edf9f6b071516675cd5aa4aa0569b9fb5d7cde1e8c197c0a261516098d04edb&scene=58&subscene=0": "CNVD漏洞周报2023年第20期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493376&idx=2&sn=0cbdb37cbbba127b677fd9a6da003fc3&chksm=fd74d7c9ca035edf57f9fd47294eb2480e42c8f6a9f5071a96202fe67332687e4d0e95a9207f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230515-20230521)", "https://mp.weixin.qq.com/s?__biz=MzIzOTE1ODczMg==&mid=2247496611&idx=1&sn=0790468b3f8ba1a63e9ef5869a0c3e36&chksm=e92ce700de5b6e16552796d530de183bdbd2284f4e60078982ddaf2cebf76b50adf2779de3d0&scene=58&subscene=0": "蓝军视角:阿里云 RCE 战火余烬下的启示", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498661&idx=1&sn=330bb331846e36562f1fcd32a59aca59&chksm=fe79df3dc90e562ba830817314220425bd7031724dc5e9a0103aa63aab799bd9be28a11618ff&scene=58&subscene=0": "【已复现】GitLab 目录遍历漏洞(CVE-2023-2825)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247497553&idx=1&sn=46f01acf8c15b06cbd1c8b5e7c41e0ec&chksm=cfc5500ef8b2d918bbcbdd3ac8c0f4ea0038dc69cd41d1db960e8762c2dfbeb43378c059c14d&scene=58&subscene=0": "“粽”享好礼 | 端午特辑 - 通用型0D漏洞提交学习计划", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516580&idx=1&sn=3e272b8a4ba9c8f7b596e5bc1c9f6576&chksm=ea94b0cedde339d8dee6f14566aaa4da84cb44e202cc0582353695ecd4620c832ba4c9ddab91&scene=58&subscene=0": "GitLab强烈建议尽快修复 CVSS 满分漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516580&idx=3&sn=167c3b3338d23cf14213471948cfc1fa&chksm=ea94b0cedde339d839a79eabe54cb687eb0f8bd5b2f135cadbc58cffcbc6b04f783f530dead1&scene=58&subscene=0": "使用广泛的开源框架 Expo中存在多个 OAuth 漏洞,导致账户遭接管", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247537612&idx=5&sn=69f0ec0f32b459125c4dff9af73fcca7&chksm=fa93e50dcde46c1bee15463b3eabfdf3413b92426a5eb501c99b6742623dfd90f71a05996a36&scene=58&subscene=0": "谷歌为其Android应用程序推出新的漏洞赏金计划", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518923&idx=1&sn=71a4d11d6e38781087fde158e848c732&chksm=ce4601dbf93188cd6361003c8ae5885b7acb4890acb0f63d0b63b3fbcc68906b6e69a06ee046&scene=58&subscene=0": "Gitlab任意文件读取漏洞CVE-2023-2825", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247501830&idx=1&sn=1e0b6bde70aff658c42dc49c0507e79d&chksm=cfcaab12f8bd2204835ef36a87ba65442f9fc045a62e3fbd489e352516dfb744111c1decb7f1&scene=58&subscene=0": "别急着修!GitLab满分漏洞(CVE-2023-2825)实际几乎无法利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516588&idx=1&sn=981ba7ac004cc1b05279618b3be57e1f&chksm=ea94b0c6dde339d00da0ef0e86a316035b22c4f86ccc177e5420b43bcffb6d47b13200edab35&scene=58&subscene=0": "D-Link 修复D-Link D-View 8软件中的认证绕过和 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516588&idx=2&sn=9de12fd66aca0db1dd5cf6843cf5172b&chksm=ea94b0c6dde339d067936cdf6ad3806f1669be3d65022c613d8544726872d4dca7d3377e4a9f&scene=58&subscene=0": "合勤科技防火墙和VPN设备中存在多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502015&idx=1&sn=39a4dd93fe5cc0a85dcb4aae28c6bf9c&chksm=f258544cc52fdd5a3ef748e125527cbe76d325b0b403ce359b686362a5cd923963e16faa2d45&scene=58&subscene=0": "泛微e-cology9 changeUserInfo信息泄漏及ofsLogin任意用户登录漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247537549&idx=1&sn=0ac962eb7f129c9bec78b28b0add2f1f&chksm=c1e9dfdcf69e56ca304ee03f22340418bc3701f1c0654d989b28738126d18d54d203ed7fd9b5&scene=58&subscene=0": "CVE-2022-24521:Windows CLFS 本地提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247537662&idx=1&sn=b1c12982eada7b757d915a4c3323c90e&chksm=fa93e53fcde46c29584968ace8430e5ab259aa77cdbdbaf7c5ae5ef045f8cb1349739cc3f885&scene=58&subscene=0": "CVE-2022-24521:Windows CLFS 本地提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247537662&idx=4&sn=4d497de5881dbc08e9217601a9bd6c01&chksm=fa93e53fcde46c29161ef5b609b5f7ae5b166c444162276cd06d33cf19ace0213cd75528fc3d&scene=58&subscene=0": "ChatGPT 和 Bing 的核心安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649784921&idx=1&sn=9d2a1306597b68332193319614bca078&chksm=8893b236bfe43b20989924d3c09c0426078fdd734219860ab44b277e60bcc16c67ce5677d457&scene=58&subscene=0": "GitLab呼吁:尽快修补高危漏洞CVE-2023-2825!", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649784921&idx=2&sn=47e30f07fc46aef27b9d212b25f54332&chksm=8893b236bfe43b206f9992da23f2f2b6916e781eea295c1e3e1329be7e563a19730972f4a1df&scene=58&subscene=0": "【安全头条】网络安全厂商ESG遭遇0day漏洞攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518929&idx=1&sn=f5378b09e2615a95d877152aa1ff0d75&chksm=ce4601c1f93188d7d0ada6ec92212859bbcd687d59036d9252881a509ccee8458dd79c44d571&scene=58&subscene=0": "高危漏洞占比上升4%,《2022漏洞威胁分析报告》复盘三大场景漏洞趋势", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247490892&idx=2&sn=1fd0550bfd9a5749f35838719a7ed1e1&chksm=96db1696a1ac9f8003fe5cad9709d0c8d14ff4e66f910def666aab5a91ba8ccb2601ce0d4f53&scene=58&subscene=0": "漏洞情报 | GitLab 路径遍历漏洞(CVE-2023-2825)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652035447&idx=2&sn=7bdbe45cf5e9efb340dbb03d686ff1a9&chksm=f36ff537c4187c21e8bc8fb25edb0b88187a614c60da5e21f4897dc5edaef81ecb442abc6b3b&scene=58&subscene=0": "【安全圈】Expo框架出现能劫持账号的OAuth重大漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516596&idx=2&sn=7cb9c52c6de509bd244e7ae651a5f1d9&chksm=ea94b0dedde339c84813054bbdbdd547ed52a95f29edf6a134aff5d6417917a6d6f16e49593a&scene=58&subscene=0": "利用5个0day的安卓恶意软件 Predator 内部工作原理曝光", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652035510&idx=1&sn=d94f2e7de28306deb75e9ff6a8468c5f&chksm=f36ff5f6c4187ce06c995b8f2bfc1db5a699a81b24cd7b2818a838331d43b8f585289d9c63f6&scene=58&subscene=0": "【安全圈】可让攻击者在有针对性的攻击中绕过保护,三星漏洞正在被黑客利用!", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247498256&idx=1&sn=a39f3b0f90f4e25c8e64e4a15ce5518a&chksm=eaa97230dddefb26955cdb3ba65e2c87652fcdf580ad8996e525980e9f856e3d0e67290e4a70&scene=58&subscene=0": "光速下班,用IAST挖CNVD通用漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247561983&idx=1&sn=d6fb71afe15689bf0d9927dfa66fbd7e&chksm=e91422c5de63abd309fbccb6ffff5b11b6326d997466bd36f7290788be7dda6dfe3a2c5e9c97&scene=58&subscene=0": "三星漏洞正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247561983&idx=2&sn=c2d07f53557935fffaffc413792a2036&chksm=e91422c5de63abd3807e3bb59bd50b2b92b943371ba19bfdb8a6f3ebd65dd517de495da3b802&scene=58&subscene=0": "针对安卓应用,​谷歌启动新的漏洞奖励计划", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247537628&idx=3&sn=bbeab0b7d9e1472fd9ae555e8324e0cd&chksm=c1e9df8df69e569b2e6a77e319b9075a14795039e22aaf7411b4b1d34fe806bb4e9665ee034b&scene=58&subscene=0": "OPC UA .NET Standard Stack 资源耗尽漏洞分析-05-26", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502022&idx=1&sn=21d7e4ffa00279fd1afcfa51f2a2cdc8&chksm=f2585bb5c52fd2a35041de9a4d5db3a6de71776bd4c0e4ca1004fcf896e53b4ead7149428132&scene=58&subscene=0": "雷神众测漏洞周报2023.05.22-2023.05.28", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247537739&idx=1&sn=6a91ff111dc9bd1745185c90a1723815&chksm=fa93e28acde46b9c542d831f67da382709a9c21d9329b2837884e62e064b54d874da799ac6b0&scene=58&subscene=0": "原创 | OPC UA .NET Standard Stack 资源耗尽漏洞分析-05-26", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493411&idx=1&sn=665a7171dda2aa864ee1256d22956528&chksm=fd74d7eaca035efcaff3a53c173087d73117ff25cb724954697a3dfef21d093236ef377fff46&scene=58&subscene=0": "CNVD漏洞周报2023年第21期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493411&idx=2&sn=fbc56dc7f45ace44c741f22faa0fff90&chksm=fd74d7eaca035efc1c72ba5e9518fef8345320e806fd44551d24c50c933b8b7bf3a0d25a7f1f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230522-20230528)", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649784938&idx=1&sn=474c7049794606bedfa046788062beb6&chksm=8893b205bfe43b13e0b890b25454a8ca955c37463da2a5ee16878e2126bf355fb4ccca704290&scene=58&subscene=0": "开源平台Expo Framework 曝出高危漏洞,攻击者可劫持海量账户", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498358&idx=1&sn=9182081600bb49460cf05d15c5f38693&chksm=973ac914a04d4002662e86a1fe647f3d4e5d0963d201176d8703b378e5c38fc4bf5dea19f802&scene=58&subscene=0": "CNVD漏洞周报2023年第21期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498358&idx=2&sn=da427fb990d82b6a2bfb56d2b5cfdc46&chksm=973ac914a04d4002f16b4f22c07d30860e4bd22f57e1e867ca3cca42c052d2979a04301acfe3&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230522-20230528)", "https://mp.weixin.qq.com/s?__biz=MzU4NjY0NTExNA==&mid=2247489518&idx=1&sn=87ea73cd6e5750561ff7aab40cd8b671&chksm=fdf97cfbca8ef5ed9cc4afd75acacf9ecb9d219029ed236b6fa627730972a5dd23918a46b949&scene=58&subscene=0": "云安全案例16: Wiz在黑帽子2021上展示亚马逊云跨租户漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247537647&idx=4&sn=6b1cec65a434c2baa4031e8e5acb5b80&chksm=c1e9dfbef69e56a8eefbbbfbe7439e907264aee6b8ef54dc46723f3fb27a7d734225bc4bdcdf&scene=58&subscene=0": "针对安卓应用,​谷歌启动新的漏洞奖励计划", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498691&idx=1&sn=5150cd2327f31d12e76022e19beef645&chksm=fe79df5bc90e564dc23989f691b723875f80133d8816dd9d3f88fc54d79a6416682e82e2e65b&scene=58&subscene=0": "【已复现】Apache RocketMQ 远程代码执行漏洞(CVE-2023-33246)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652035632&idx=1&sn=3ec538535b6643b4374afef6a908bc78&chksm=f36ff670c4187f664f4390c1d94367e51711cfb13060de9c8f459720b258f419aeeb1f2ce0f0&scene=58&subscene=0": "【安全圈】微软发现 macOS 漏洞可让黑客访问用户私人数据", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247497740&idx=1&sn=4bb1141412585f887bf6a51f78201230&chksm=c0075590f770dc861ca242167e23543045090ca8014af755153e9fcc87b7461d8d9525bf41da&scene=58&subscene=0": "API NEWS | 三个Argo CD API漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516628&idx=1&sn=76b9f155a8fc5e1a9280131bb8c9a71c&chksm=ea94b0bedde339a86e6f4823421deb003dbbfdea7920b2ee0c60d27f88c6c00bf1c461413ab5&scene=58&subscene=0": "微软发现绕过苹果 SIP 根限制的 macOS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516628&idx=2&sn=eb96b9d65915efbbd1f1b4c2d593f8ee&chksm=ea94b0bedde339a888633e30fcb2b3c54d03a36f0627a8c4fbc37aa593420cfd86fd86d9dbf4&scene=58&subscene=0": "黑客早在2022年10月就利用0day 攻击 Barracuda ESG 设备", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516628&idx=3&sn=e345f10a85be40cc222042b8747dfb66&chksm=ea94b0bedde339a84d0513845df5d1561cb160925121211045013fc286425c47dba6eaa93da1&scene=58&subscene=0": "这个Sonos One 扬声器漏洞价值10.5万美元", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247537792&idx=4&sn=4733f70e3a936b3b8900ba772f672599&chksm=fa93e241cde46b570aad3d64f4d47353b9976a9780e42213a6d2b57961835c0034710522440b&scene=58&subscene=0": "12 个漏洞!与勒索软件有关联", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487236&idx=1&sn=d220ca128eaa3df1a9f4823b88f347f4&chksm=fb02825ccc750b4ad253aa189277cf2147343c2e34e2cbf4057825db0c7a560a36acf677aa87&scene=58&subscene=0": "漏洞风险提示|大华智慧园区综合管理平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491477&idx=1&sn=448e963910a5f67359c7251de56c45f9&chksm=96f400f8a18389ee0f49af5b07c9fb329027a96a78b5b8ec1ddb409ac9bd11f4a3fc72e1d109&scene=58&subscene=0": "漏洞风险提示|大华智慧园区综合管理平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247562037&idx=2&sn=cbff2f1a8d1ea48dcd6d4ce408081b48&chksm=e914230fde63aa19388cc20d596034a3bab48666991091698ad24e23fde212f7575eca757fae&scene=58&subscene=0": "黑客利用 cookie 插件漏洞攻击 150 万个 WordPress 网站", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247489117&idx=1&sn=e9490c7d4f8f4477a44cbc5f41e7e5bd&chksm=fe2ee9d6c95960c06243799e2cfeed939a701305a21d4569776e28ae41056b43bbebb609a088&scene=58&subscene=0": "柏林洪堡大学 | 基于深度学习的Python代码漏洞检测 (IST 2022)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516632&idx=2&sn=6facb00a2129b1781ccdfcfda5ba6032&chksm=ea94b0b2dde339a4b08ad29601e05b57e19dce03c622d127ff45336a2fbabf8f8c427990f5be&scene=58&subscene=0": "Chrome 114 发布18个漏洞补丁", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045362&idx=1&sn=510588c77e5e0efa4aecf996ae33c7e6&chksm=803fabacb74822ba5eb5f941080b7e3cef73c523fdd11b4e9a6edfda8ece7396ddfc07e72a1e&scene=58&subscene=0": "【漏洞预警】WordPress Gravity Forms PHP对象注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492192&idx=1&sn=bf18e75366e077eeaa5fb597dd470c19&chksm=fe26e761c9516e77e9a5b3251437f19e701776ea3e911fdf3c03905950c4193228bd3b034f21&scene=58&subscene=0": "CVE-2023-33246:Apache RocketMQ 远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652035765&idx=1&sn=0a1881b5c128c668dddfaa651cddd6b4&chksm=f36ff6f5c4187fe3fbfcac2da9e4027b67a26f0c0a4dc69a28ac047812efd031da69b45ed351&scene=58&subscene=0": "【安全圈】技嘉曝“类后门”安全漏洞,影响约 700 万台设备", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247537811&idx=2&sn=bd4769d2754bb5f795afa53533ca3778&chksm=fa93e252cde46b4482e3045ecab878ea7a703f453842efc842b8283ee8b002a71c610cc8c03b&scene=58&subscene=0": "黑客利用 cookie 插件漏洞攻击 150 万个 WordPress 网站", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247501901&idx=1&sn=b07f02ce308232a5bb1f09b1427d9f5b&chksm=cfcaab59f8bd224fc741d81baffec5f44e2fea9142c7d6b42c57a5e57d50e7139a3d651c30d2&scene=58&subscene=0": "速修!Apache RocketMQ 曝 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664185432&idx=2&sn=cb97f76db371285d06c8b929df7df0f3&chksm=8b593ca1bc2eb5b7ceaf55833ef227ec3cd91018aa33eda0d0fba6a6124060382a5e767eb831&scene=58&subscene=0": "CNNVD漏洞奖励计划 | 积极促进开展漏洞预警及风险消控工作(二)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458505973&idx=2&sn=1a5a1042b8a06a2dae3ed108b6002ba4&chksm=b18ee27f86f96b695268b964bf1ac044432cd779d1f40ee7d4375d6dfffc2797504f30d1c958&scene=58&subscene=0": "CVE-2023-22809 sudo提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516649&idx=2&sn=8568497e673e6061401b953a0bb37e2d&chksm=ea94b083dde3399587e9f570cb506e4f4d17d2f23280a147343bc96a5a1c55eaa427de1dffb0&scene=58&subscene=0": "合勤科技修复NAS 设备中的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516649&idx=5&sn=3a673400f9a00b2b334fadfda1b0a8a9&chksm=ea94b083dde33995e9079edc64941b6bda561e4fbb1c4406e76ffcfb5423d723243494cbb5af&scene=58&subscene=0": "WordPress 紧急修复影响数百万网站 Jetpack 插件中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650177376&idx=1&sn=6d11cd9d56aa8d90c669d5a07423c5ee&chksm=f44884dcc33f0dcaf3292abe8a0062794750ec81535e520e9e7a1fb5d5322f0f63fcb7d3a463&scene=58&subscene=0": "X漏洞奖励计划周年庆 | 一周生日,三周欢庆", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247537838&idx=3&sn=ad1bdb2bdaf5360fda4d083470772aa2&chksm=fa93e26fcde46b79d409f74c1eac3531ffbb2c82ef0b5e95dd612b365cd82b3616e91f262217&scene=58&subscene=0": "技嘉曝“类后门”安全漏洞,影响约 700 万台设备", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247508762&idx=2&sn=51b5d1e4541e9ee8217612dad470801a&chksm=ebfae43adc8d6d2c415e66f715b7c0547eac619b4d5bf4e4234b38c7ae6bd57849416e8625db&scene=58&subscene=0": "梭子鱼邮件安全设备零日漏洞被利用长达七个月", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458505990&idx=2&sn=6e321eaf6bde47657f2d343472c40fa1&chksm=b18ee38c86f96a9aa0a6d06be8b0bcfb4ee2f86314ee88d080898ea7704bd8aa3e84e3cc9e02&scene=58&subscene=0": "直播预告 | 系统0day安全-syzkaller 之linux内核蓝牙协议fuzz", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247518962&idx=1&sn=8c1a61e35e15c48b4c7d0e31a9046467&chksm=ce4601e2f93188f4708b42cbb59973d95185fc5852dc8c240ca05cbfe093ca64fdebf21c9340&scene=58&subscene=0": "RocketMQ 远程代码注入漏洞 CVE-2023-33246", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502060&idx=1&sn=6929690d91581f8ab424c0004fea7d22&chksm=f2585b9fc52fd2890680143756ddb1b883c4b4e5cce096f91a49a6d0c21c2a5de33d0bae3396&scene=58&subscene=0": "雷神众测漏洞周报2023.05.29-2023.06.04", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516660&idx=1&sn=bb8f16701a800011a7e9bc8857cd59d2&chksm=ea94b09edde33988e2fee2cb9c23d0031149201a1722cfabc8899b76b31016a44a835836d8a9&scene=58&subscene=0": "MOVEit 文件传输软件0day被用于窃取数据", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516660&idx=3&sn=50c590fbcde8660028cb962e1ee37397&chksm=ea94b09edde33988842895577616f04e287bb0a7c46caf92527cd2429f348583f32f77e7c6c9&scene=58&subscene=0": "Splunk 企业版修复多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247508776&idx=2&sn=9495bc8c7adadd8558fd1cabf57bdae7&chksm=ebfae408dc8d6d1e11c3e0c29506e39c020de81e8b7d661ec4392b9ff8223dede92023882903&scene=58&subscene=0": "NIST发布《联邦机构漏洞披露指南建议》概述", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247497798&idx=1&sn=daf1fc65869ccd862c91e434ca16271b&chksm=c00755daf770dccced4def1e57cb98469665a2c1e19999249fe6f4a11e5ba20a8b60b8140d71&scene=58&subscene=0": "API NEWS | Money Lover爆出潜在API漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY0NTExNA==&mid=2247489533&idx=1&sn=907a9c32adbf3699efa7bfd7d1fb25ae&chksm=fdf97ce8ca8ef5fe204bd7d7218465b5acf993f9639b1227cfb82c59e57a4e031a745181a698&scene=58&subscene=0": "如何有效遏制针对通达OA漏洞利用活动", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493425&idx=1&sn=406ab215c90ab5ba821c661849e7d7d4&chksm=fd74d7f8ca035eeece1684ce08d327d4c6d3e0a0774d06ea96473378d48e01f6fba54319f30a&scene=58&subscene=0": "CNVD漏洞周报2023年第22期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493425&idx=2&sn=7da59f3af3a967322f4ac1c66ee5da15&chksm=fd74d7f8ca035eee1caa9a20e5351382d9c1e67949b5662adcca791a4cf466777ad7c20ea7bc&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230529-20230604)", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247528693&idx=1&sn=6ade045bffc6e92ddc565c2d85332670&chksm=eb849b55dcf3124309380646766b6335752e451b00903f90738c7b25b11d6000fe02ceef04ae&scene=58&subscene=0": "插件分享 | Headshot ⼀击即中,对指定URL进行漏洞批量扫描", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652036152&idx=3&sn=9163239840bff6cae8450825d8a26a6d&chksm=f36ff078c418796ead7b5dfe1e8c586707324f762c313022db9846624693594c237f62eaa0d7&scene=58&subscene=0": "【安全圈】Zyxel 防火墙曝出高危安全漏洞,现已修复!", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664185600&idx=2&sn=01eeff48ab0ee85e4d02674ec543c7ca&chksm=8b593df9bc2eb4ef61e32fd797976961b17a1f07ac2baa8eaec2daa59645516de245b4dc5f47&scene=58&subscene=0": "CNNVD漏洞奖励计划 | 积极促进开展漏洞预警及风险消控工作(四)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458506062&idx=3&sn=5daf7ce036fc94df3e11f661f4eca38d&chksm=b18ee3c486f96ad202cd1061e3fbbaaca602d2c6bc7a5e4ed68fc67b11c6ba188a6b5df6302b&scene=58&subscene=0": "赋能企业安全!系统0day安全-二进制漏洞攻防(限时75折)", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247537799&idx=4&sn=2948c119e30b4b8dfb7bbf8600f64805&chksm=c1e9d8d6f69e51c0a49ab9da489f52f26f2cd3a25e7a7dad76c97ea6f5317055513d5aedbf39&scene=58&subscene=0": "MOVEit Transfer 漏洞似乎被广泛利用", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498375&idx=1&sn=0db04d6cc956d8a9d5f69bcc7fbed560&chksm=973ac9e5a04d40f3bc31b1f00520cc0b43fbe038ce086b62c2da346d735a7f5cebce57551834&scene=58&subscene=0": "CNVD漏洞周报2023年第22期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498375&idx=2&sn=7da02de8518cd673a568adb1ce16f001&chksm=973ac9e5a04d40f3cf3ce43c130b7928c6068a63184309b35cb6a84d7e0aeaebc7e239eebeb9&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230529-20230604)", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487289&idx=1&sn=d89f0865420192343c03e450b1315d0e&chksm=fb028261cc750b77003915a7f1041378a9d47158210c223a41c491163c383744fd73ef1fa622&scene=58&subscene=0": "Azure API 管理服务上的经过身份验证的 SSRF 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519210&idx=3&sn=9343dfa8040d62b242762fa841a0f32f&chksm=ce4600faf93189ec31a29b3a84c1daaec61b30ab885f1fd7f332dcab66aa8fa3cff69e3c7927&scene=58&subscene=0": "【漏洞通告】Nacos 集群Raft反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519210&idx=4&sn=336d660569a37517798de300a70fbe89&chksm=ce4600faf93189ec59cfcc9b0689a61e2c927123031c88dc0286e14bfcb48a3b3dd63e5e52cf&scene=58&subscene=0": "【漏洞通告】Google Chrome 类型混淆漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498747&idx=1&sn=5edf6cbf885159278839eee7fbd7d927&chksm=fe79df63c90e567539d4ecd1eeb38a23bbeadc6752dd432c3c746e5a551817c11a20deda6e91&scene=58&subscene=0": "Nacos 集群Raft反序列化漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492204&idx=1&sn=deef214fbd770f4d8b795f264ef9e01c&chksm=fe26e76dc9516e7b66704f364a43d50c019fedcdd500260d0629a67a60e5ecdefd7ef31a5792&scene=58&subscene=0": "CVE-2023-3079:Google V8类型混淆漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651124264&idx=1&sn=2e3d84cd33dfefa1b22103ff6e3d3e9e&chksm=bd1442fb8a63cbed9027e7271d75a2b695b45941ef260cb02433255ed2b8f14ce4915bba50ff&scene=58&subscene=0": "OWASP发布大型语言模型漏洞威胁Top10(草案清单)", "https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651139579&idx=1&sn=e662f5e25e72a9c2f8cd646c1bdcd8e6&chksm=bd50bdaf8a2734b906b0f81aa883140d614bc674ad3dd26d30049877227cae270e589ce1c3c6&scene=58&subscene=0": "[漏洞分析] 【CVE-2021-3490】eBPF verifier 32 位边界计算错误漏洞分析与利用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458506114&idx=1&sn=3de4c938a01579657384d414f8354047&chksm=b18ee30886f96a1eadb472d362824892580f3842a07b83805e619e01028fc05716f002df8616&scene=58&subscene=0": "【新课预售】学习Windows平台漏洞挖掘,为企业安全保驾护航!", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657164521&idx=1&sn=6031758ec055f571b10268b8ee283618&chksm=f1d4ee0cc6a3671a6d67c91391ecd816103ff2ec92063d9d7a066073ceeb2488cb69a42753bd&scene=58&subscene=0": "ISRC端午“粽测”,单个漏洞最高奖励可达万元!", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488295&idx=1&sn=2d31d457037e75b161c56f80a44cf6ed&chksm=c2c6442cf5b1cd3a82bbda20da3addf486e0f9d559cb464e46731c5f98201e7fc57e387e1a50&scene=58&subscene=0": "【漏洞通告】Nacos Raft协议反序列化代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484240&idx=1&sn=58c308d646302ec2a6c223ff2f9acfa6&chksm=c2b10126f5c68830eb202afa508c2c65211dafa90dd98d5cb059babe4554bde985eddf54ede2&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年5月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487296&idx=1&sn=c89ca10c36824bb46089dad3085081a1&chksm=fb028218cc750b0e776b51446faf6808cb6c6e1794c6c65970e78700ae70e34666bf13a4168e&scene=58&subscene=0": "漏洞风险提示|Nacos Jraft Hessian反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652036392&idx=1&sn=abde9f0a6a861bb927578678fc3025c0&chksm=f36ff168c418787e1ec87079e44304607077518d37a6ef4f539aecc56040f82d9670c7dc2ef2&scene=58&subscene=0": "【安全圈】尽快更新!苹果iTunes出现漏洞,威胁Windows电脑安全", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492213&idx=1&sn=314decc1448b53667999d7d6888b4407&chksm=fe26e774c9516e62642d754af129ba2530124d540879f0c2a6f0d5ba7260022e4add2b23c21d&scene=58&subscene=0": "Nacos 反序列化漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247487767&idx=1&sn=a014e0b07c2a7b1dc97db7495bd7bef2&chksm=fa5abffacd2d36ecc9292620b1ee52dc80e545c7462518b469e6acfd1aaaeb32164d785998fe&scene=58&subscene=0": "X漏洞奖励计划周年庆 | 一周生日,三周欢庆", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651124328&idx=1&sn=ae7137e7ad069bc850ebf98107f48131&chksm=bd1442bb8a63cbad29b5cb5ab83094b9ebcba585e429386103f43bed0dcb3efd3887f1f8b828&scene=58&subscene=0": "最受渗透测试工程师欢迎的10款漏洞扫描工具(2023版)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502098&idx=1&sn=25bb891c91472663d9021c43e520b651&chksm=cfcaaa06f8bd231065d04bb5a2d0540553ad6b07f842b17b8a62e84d157787cf506d66f3b692&scene=58&subscene=0": "0day通告|畅捷通T+前台远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491515&idx=1&sn=806c1fbdd42c8b457a0eb4bcd7400836&chksm=96f400d6a18389c0e771d035a4e9e7c723920633345c9013a6e07f5e98bdd52b948de9adb085&scene=58&subscene=0": "漏洞风险提示|GeoServer SQL注入漏洞(CVE-2023-25157)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516696&idx=2&sn=f9d50b8697f67622344d6400a4246a35&chksm=ea94b372dde33a64677eb42039df16b745cc37313484a52d2b714d5b8c2fad89b1bc71258855&scene=58&subscene=0": "VMware 修复 vRealize 网络分析工具中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498759&idx=1&sn=a94a4f140c197d799071eb5682d719a2&chksm=fe79d89fc90e5189b6a1b86ad4625fefab7e1890bb4ab439d0039e9fbfb158d92589fe482321&scene=58&subscene=0": "【已复现】Nacos 集群Raft反序列化漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492224&idx=2&sn=17ba3b7815ac741fd75a4194d3b74a69&chksm=fe26e781c9516e97a25a9eefccb2df072227201443ac4f65406d93a4dda3ce12fa1d462b25a1&scene=58&subscene=0": "CVE-2023-20887:VMware Aria Operations for Networks命令注入漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247490921&idx=1&sn=31200ce95ca249f98c39de210679166e&chksm=96db16b3a1ac9fa54dfcb17eb9ac11440a2feb5b58544f89dc4021bcba3bbe62699d830c1aa9&scene=58&subscene=0": "漏洞情报 | Nacos 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487304&idx=1&sn=e2c70c32b8c50ce020e61c0f9f645743&chksm=fb028210cc750b0623b9c74870d65c32332461903567efdffd20a5828678f918dcad81bee6c8&scene=58&subscene=0": "漏洞风险提示|GeoServer SQL注入漏洞(CVE-2023-25157)", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650844765&idx=1&sn=79417ca56e3c2c90cd5cdc72e09a957f&chksm=80dbcdf8b7ac44eebaf71c96715e544fcd3f9f7cf15e27fe62ea0456e76f97d922a4c2f57cb6&scene=58&subscene=0": "新品预告 | 漏洞数量创10年新高,一键屏蔽神器将面世", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652036537&idx=2&sn=de9b9382006479ea420e02598f3cd1f2&chksm=f36ff1f9c41878ef7dcfeaad699f637563081b7a92ff0c92264316eedbaa23114fb663b42441&scene=58&subscene=0": "【安全圈】本田被曝存在API漏洞,客户数据正处于高风险状态", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247537847&idx=3&sn=37c594a0431fe841938bf19409fd6bcc&chksm=c1e9d8e6f69e51f00b1adffeed4370eea00d65e3e600dec1f9e99b2ff30a13cf226297bd0624&scene=58&subscene=0": "至今未修复的NASA 网站漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491525&idx=1&sn=366570ded64f752c78071aa7ec86cbda&chksm=96f400a8a18389bec1fb5c2b1070e033505cd0a397aeaf86dcf991e6fe7d5c9fde35cb55824f&scene=58&subscene=0": "漏洞风险提示|畅捷通T+ SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498772&idx=1&sn=263188a175877ed8d0f664c582555541&chksm=fe79d88cc90e519aab93130067a2a47de3e9a0b4f9f7f1ee84b86f714f9e9a002a4122ab2cd5&scene=58&subscene=0": "【已复现】Windows Win32k 权限提升漏洞 (CVE-2023-29336) 安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498772&idx=2&sn=1d646f4a8ce13e3bc72d7c9581ac3430&chksm=fe79d88cc90e519a4671119defce846f196cfa586ac4159d0822ce8444cd42db5b4b29c323e3&scene=58&subscene=0": "【已复现】GeoServer SQL注入漏洞(CVE-2023-25157)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458506452&idx=1&sn=f359676578f92bb362d2a407284bd160&chksm=b18ee45e86f96d48c9ff1bca4d6044e238c140d4ff9b1af2ecef5bb9fba2f9cac045b34071dc&scene=58&subscene=0": "Chrome v8 Issue 1203122:IC类型混淆漏洞原理", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458506452&idx=3&sn=cf542635eed6b98578fe9412e0d5e39b&chksm=b18ee45e86f96d48ccf46c94e9e47bc2b2b6ab5d22d0ef36cd4e587346ea49ada09a8cc5518a&scene=58&subscene=0": "尽快更新!VMware修复严重远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045367&idx=1&sn=a1c50037a6811f484ff1dbba7110f280&chksm=803faba9b74822bf779d12fdc6c1ab0ca8f03cee1db098f6e3aa312aa40f8b3cc128c890b72e&scene=58&subscene=0": "【漏洞预警】VMware Aria Operations for Networks命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516704&idx=1&sn=6a051f71c4415e8ad5f9be754927a9e7&chksm=ea94b34adde33a5c62b6fd4ed5257ace796ceae62afe7d61ca91d818c2973aaa40cfbe68ff91&scene=58&subscene=0": "思科修复企业协作解决方案中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516704&idx=2&sn=90a401546772e7ddd611ed9a84fb46dd&chksm=ea94b34adde33a5c17d938d43cbd131ac5900fc08a3090769d517b6fa917aa91f939093de687&scene=58&subscene=0": "本田电商平台有漏洞,客户和交易商数据被泄露", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487312&idx=1&sn=06fcac2fea43c089a17386f67ec3534b&chksm=fb028208cc750b1e029e6dbf3a84c359b6ec6db990d6c7bceab7c754ff97fabf626f42eec402&scene=58&subscene=0": "漏洞风险提示|畅捷通T+ SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247514585&idx=1&sn=dc64d67187d8437264d77ea9bba55613&chksm=eb7067e6dc07eef081eb115358c3ef7ed34caa74dca30f631be5f633c139d34282b6f7eb5e39&scene=58&subscene=0": "【火绒安全周报】微软因侵犯儿童隐私被罚两千万美元∕本田被曝存在API漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458506724&idx=1&sn=b1098632b2f5f551625fe6d246900f66&chksm=b18ee56e86f96c78a4cca9e92ace4ead5000146093581d87d2594f7f62387147ad04a98a9361&scene=58&subscene=0": "CVE-2022-37969 CLFS 提权漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519250&idx=1&sn=62e96748157b1360fbe1d629a6696eb0&chksm=ce460702f9318e149cbefa85bc2a61d1f1f51b7c0e53b8f60d8429c908862ef4b00817f9a1c7&scene=58&subscene=0": "GeoServer CQL_FILTER SQL注入漏洞(CVE-2023-25157)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519250&idx=2&sn=582a204bc02adc7699d973440b2aa24c&chksm=ce460702f9318e14fe3d199b79f91a83d3ecce24ef55e60fc1b20c6e1ba8f55be0b8fed74090&scene=58&subscene=0": "用友畅捷通Tplus远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458506725&idx=2&sn=09622bb71eadf9a21f8f106647a55609&chksm=b18ee56f86f96c7934cc378d2f7d0c7f4fa96fb6ed13d47ed7d9bfbe812cb252507787c98726&scene=58&subscene=0": "CVE复现漏洞精讲-从基础到入门", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652036779&idx=4&sn=8fe56768771b90a8fb4d6f8f5df99a45&chksm=f36ff2ebc4187bfd900477ac57e5d26cb7df3eee7b24b37115deaf55b1b98397d05bcf355b96&scene=58&subscene=0": "【安全圈】好端端的“驱动神器”,怎就成了安全漏洞?", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502100&idx=1&sn=d498e594d0809b6e6215b55dbe72a447&chksm=f2585be7c52fd2f10de56418dbb2740b0807160a8059b84838dac57afbba0f1a618508ea7ccd&scene=58&subscene=0": "雷神众测漏洞周报2023.06.05-2023.06.11", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650177528&idx=1&sn=7ee3f748202af2ef6c7b2587c0c85b86&chksm=f4488444c33f0d52153778c2e534c1cd94f6b4c6c10ae4fc741eacf41a6556a3e072f3837166&scene=58&subscene=0": "CSOP 干货直通| 微步樊兴华:漏洞情报助力高效漏洞运营", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516712&idx=1&sn=db056d3f152e8f52867cc5021679e6f1&chksm=ea94b342dde33a543f8d7daaae604ffb6f0a65f865bf3fd926dfee86ad48be7d6460b9107d7d&scene=58&subscene=0": "Fortinet 修复 Fortigate SSL-VPN 设备中严重的 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516712&idx=2&sn=a69d93a9d282a667bbbf33bc190b4dfb&chksm=ea94b342dde33a545caba266547e0a3d88b670ddfb23236984d8f468dfbefe639a55bb220239&scene=58&subscene=0": "速修复MOVEit Transfer 中的这个新0day!", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487373&idx=1&sn=c9edb1189d2365ca052f5d8cd4873d4b&chksm=fb0282d5cc750bc32728ffa6442944d1c929c24b788f387c633b8838be6cf730744282130dd7&scene=58&subscene=0": "Azure 机器学习服务上已验证的 SSRF 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247562497&idx=1&sn=e7f03f361765fcfb71dd6bc6156ad11f&chksm=e914253bde63ac2d5616ec8c9c7441baa0d64907db618234427bec2a80a0b4672b72524f1b5d&scene=58&subscene=0": "【技术原创】vRealize Log Insight漏洞调试环境搭建", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247508841&idx=2&sn=f0eaeaf4c5c0fbb5bef2807926a4a81e&chksm=ebfae449dc8d6d5fc19f83a511b9e22894aa0b16cf7cdb952ea41e74f7c2eef03de062d1f398&scene=58&subscene=0": "本田电商平台API漏洞暴露客户隐私数据", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519262&idx=1&sn=e6845507abb6be6fb07b0ffec4007483&chksm=ce46070ef9318e182e589f8cfe9ce61d176eec324d33a17e517d0299bdc8e6cd592bc8d71808&scene=58&subscene=0": "【漏洞通告】Fortinet FortiOS SSL-VPN 远程代码执行漏洞CVE-2023-27997", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498781&idx=1&sn=0cd380c63936520da367d6728eed9c2e&chksm=fe79d885c90e51934865d9a809115921c7783bde4f31c334923d4f670130407f7d4708d22281&scene=58&subscene=0": "Fortinet FortiOS SSL-VPN 远程代码执行漏洞 (CVE-2023-27997) 安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492235&idx=1&sn=4c455dc531e0499380f9cc349d9063dd&chksm=fe26e78ac9516e9c033ca8a02545ad2d879031a3337089e0c3bb40a796289549c5527b2e9425&scene=58&subscene=0": "CVE-2023-27997:Fortinet FortiOS SSL-VPN 远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493458&idx=1&sn=f1352f32285409baab588608226aa04b&chksm=fd74d79bca035e8d2f725f450948c0a0ad93185af032952287ad4d5795ec9ae7dc5d32fd87d3&scene=58&subscene=0": "CNVD漏洞周报2023年第23期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493458&idx=2&sn=fe55da1fdcc415c5ca80bd581e7141a6&chksm=fd74d79bca035e8daf61edddce7050b95aecda805ba0a0b758010df64dff0b50f655fcda9a8d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230605-20230611)", "https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247509030&idx=1&sn=b8d81f649643466bca0c32b9ef100d65&chksm=e89d8cfedfea05e86dca8e3e9ef460c9c1ff56bf94f9a68caf107a8330da16d60342b12f2ac1&scene=58&subscene=0": "web3-solidity历史漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458506879&idx=3&sn=f5aeab283fd1eee7a9e717bb8ac19e74&chksm=b18ee6f586f96fe3502f87c3f6c3ab84bd52c1f50bdff90c8720796b17b87e458d47a3d50379&scene=58&subscene=0": "【新课预售】学习Windows平台漏洞挖掘,为企业安全保驾护航!", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247537917&idx=3&sn=1e1814afd8dab37791f813590d4cc2a9&chksm=c1e9d8acf69e51bad870825cff11f890f96285415b6d821605f26f6d061e7b88641ea75c615e&scene=58&subscene=0": "本田电商平台API漏洞暴露客户数据", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487419&idx=1&sn=f58a5c9d69349a6c3ee0f3d8b36b46f4&chksm=fb0282e3cc750bf511cab2a35f9fc34d53182f1bc4bdb713a2decd23eeb6faece1f5167fc88b&scene=58&subscene=0": "CosMiss:Azure Cosmos DB Notebook 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247490950&idx=1&sn=1a583200400a90503979bf70bb004f33&chksm=96db165ca1ac9f4a4bf9345ba9bfed37e938b72f73336c4d6ac660f5791b86ef7c5f3c6c971c&scene=58&subscene=0": "漏洞情报 | 畅捷通T+ 前台远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491538&idx=1&sn=c51227367f656ce95b170527c047cf8a&chksm=96f400bfa18389a95cb29fdec892e36d794d4e1e0446ffb90c8f124936bb477ac2f4aef0b5de&scene=58&subscene=0": "漏洞风险提示|Openfire控制台权限绕过漏洞(CVE-2023-32315)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498403&idx=1&sn=61b3e925634c5fafcf1f54eb80213432&chksm=973ac9c1a04d40d7306d72e86256558c8bbe8f26a0a62ab96d8b69deccf94a46474c05fe3306&scene=58&subscene=0": "CNVD漏洞周报2023年第23期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498403&idx=2&sn=de442ce723184e101fd6a8478548783c&chksm=973ac9c1a04d40d77fe115bd164d5bd111e0a155a6a92192f9987e0fc22b90211e1cb127789f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230605-20230611)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247562524&idx=2&sn=032e11d5bb7b981a9f9e9e87129dce17&chksm=e9142526de63ac3068c3faf374697a6de73dacc0285cc098cd2e66f2c7b2a54fb826bea89f31&scene=58&subscene=0": "Win32k 特权提升漏洞PoC公布", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247501401&idx=1&sn=6b9cb6de3dfd78fd92a8ec5c3e5338d5&chksm=fa5213e7cd259af12f83142fc0b258f0805636b4abaa77069f16511ba92948024d9b4338e791&scene=58&subscene=0": "openfire鉴权绕过漏洞原理解析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516727&idx=1&sn=a11760ca63822034757b0f90ea22ba76&chksm=ea94b35ddde33a4b4ab3d7f0981ca595959c1ccc03fc4652120de9da8c72927fb588b8bb0803&scene=58&subscene=0": "微软6月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247487793&idx=1&sn=666bca77416bacf6ea464941dd617167&chksm=fa5abfdccd2d36ca47f7e81381a0c112a737682653448040ce9e0f5af8039aefbb2c699c066a&scene=58&subscene=0": ".NET 群友分享某CMS漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498845&idx=1&sn=bba898f851a44e096eeedd81b71858c3&chksm=fe79d8c5c90e51d35c66a8e8d38a8bd7acb314f3a8f3bfe5ba69344f0d8641568e9af5262c02&scene=58&subscene=0": "微软2023年6月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498845&idx=2&sn=1752d1c635495e77f5963ffa0fcda731&chksm=fe79d8c5c90e51d3c9b7f06d30e96ff07edb5c070fdbad9e32a3ac5699980c70183d65572c16&scene=58&subscene=0": "【已复现】Apache NiFi 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498845&idx=3&sn=566986aaa9fa095a00416fc80289ba59&chksm=fe79d8c5c90e51d34980a18a44f6223d665193385af589dd20a041fac83d43439bcb66b1f4a0&scene=58&subscene=0": "【已复现】Openfire身份认证绕过漏洞 (CVE-2023-32315) 安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492245&idx=1&sn=e4f6d95c38e831fd88af9e67c9069a7e&chksm=fe26e794c9516e82453cc895a28929ee4c1fdce281e8267e0fd2c2fdaf0146d8a94b63bc4f40&scene=58&subscene=0": "2023-06 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664186261&idx=3&sn=03f759b0fab62ae2d14e480dfa192dac&chksm=8b59436cbc2eca7a4f9357e666e00247742236c02fd07d05b20475d46e205df98a9e55d0fdbd&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247490965&idx=2&sn=5c3548137126ae4105fffea78a2c538c&chksm=96db164fa1ac9f597f04d210ccc22dfadf35646015ad4ebe08812162099043c675cd22953843&scene=58&subscene=0": "漏洞情报 | Openfire 管理控制台身份认证绕过(CVE-2023-32315)", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247514640&idx=1&sn=8b98286e52ebd7b992bdd824ebb5ca61&chksm=eb70642fdc07ed393bb615430dc7b428aef407176e1650da1e338297abe0e77371dbe974519d&scene=58&subscene=0": "2023-06微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247491043&idx=1&sn=7787e7ce8b46875084af5d7c32776bec&chksm=fa9ee6b5cde96fa3be68ae6289ff515b610da5341790d5c371880e375947804d607546f89a97&scene=58&subscene=0": "ByteSRC成长体系正式上线!单个漏洞额外加1200元-9000元!", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247562552&idx=1&sn=c02161a0cd6e095a2539115cc6f18daf&chksm=e9142502de63ac1459fc438fdccaa58c2731fb5988c2a4d889c902862170b523f54bb113fb7d&scene=58&subscene=0": "本田电子商务平台漏洞暴露客户数据", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652037048&idx=3&sn=ddc69e0ed488f7c458907d3b7cc6ca78&chksm=f36ff3f8c4187aee3534aea9cdd28681ec8f24432f2d50d5c89d8f0c41822066c43934a969ce&scene=58&subscene=0": "【安全圈】Windows和MacOS平台上发现多个Zoom漏洞,已发布补丁", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487426&idx=1&sn=daa7b82ade4af3b738c43d0cc90ff85d&chksm=fb02829acc750b8cc075d368aa17f20bfbb451b314afc3a5f2e64c486fe0a88394be1427cf9b&scene=58&subscene=0": "漏洞风险提示|Openfire控制台权限绕过漏洞(CVE-2023-32315)", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651124391&idx=2&sn=9e4dcec0d4ce4470939bd21d8e30fe07&chksm=bd1442748a63cb6214ef453f8890f35cd61bb175c5aa18a28ec915cdaf1c2a77422306da69cf&scene=58&subscene=0": "CNNVD 通报微软多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516737&idx=1&sn=c4b5adfcf7e55915ef943fcfd4fd9a56&chksm=ea94b32bdde33a3d834b36d01e90e0a897698720411c56832829d175a4722dd94ba823e665d5&scene=58&subscene=0": "微软 Azure Bastion 和 Container Registry 中存在两个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516737&idx=2&sn=368349f3292248a0829924a329eab306&chksm=ea94b32bdde33a3d73ce830890ee3113abe962086d9059767525a81c0884679a6ca038ff9aa7&scene=58&subscene=0": "GitHub 上的虚假0day PoC 推送 Windows 和 Linux 恶意软件", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458506978&idx=2&sn=0f4bfb93302e9e73c4b61a0ac60f395e&chksm=b18ee66886f96f7e6f8d11a80766b8610f5685d7741e64bc827e24b22c4be16a27b34edd8d94&scene=58&subscene=0": "黑客团伙通过虚假PoC诱骗网络安全研究人员", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650844814&idx=1&sn=6fe88d005c5f1cf6a95f3d4c0b983487&chksm=80dbcd2bb7ac443d7ed9b9e3695eec15e7c67f9cb93d8f851a78ef8741d01f489567db8a887d&scene=58&subscene=0": "亮点速览 | 一张图GET漏洞屏蔽新神器4大亮点", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502138&idx=1&sn=c01503fdc8a7d79bd393c85cf9f74fc9&chksm=cfcaaa2ef8bd2338cae24fcbfad2e14c7ebb02ac1b63541bce881725ea28b40ed467ccacb969&scene=58&subscene=0": "速修!金蝶云星空软件曝远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487491&idx=1&sn=c6466b0618fcd98b237654352495dee6&chksm=fb029d5bcc75144def3271795bff7b4fd4f22ce3df41bb9b01db165e98761495e02fa400c2c4&scene=58&subscene=0": "Azure Bastion SVG Exporter XSS", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247491072&idx=1&sn=f82a158b44f65fc68af647a4489ec261&chksm=96db15daa1ac9ccc0df6a5fc1bea8ac3643e0d1ae358930b9ef905e69a74ba40771fce6d531c&scene=58&subscene=0": "漏洞情报 | Apache NiFi 多个漏洞通告(CVE-2023-34468、CVE-2023-34212)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488319&idx=1&sn=13398076e9b863c74a9b1e683fff9642&chksm=c2c64434f5b1cd228e29d8dbf134f8c9cda2d48212463d2b2a1c109e2b49899ba39c3375f39d&scene=58&subscene=0": "【安全通告】VMware Aria Operations for Networks代码执行漏洞(CVE-2023-20887)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519310&idx=2&sn=d4df46aa53bdcc6f1a218ce5fdc47dce&chksm=ce46075ef9318e4884e48e737e92293230d1d4510df9c4c09e36b885e3972f0bc27ee8a5b7d9&scene=58&subscene=0": "【漏洞通告】Openfire身份认证绕过漏洞CVE-2023-32315", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519310&idx=3&sn=e5d81fc7aaba8081152d3ade00db58d7&chksm=ce46075ef9318e48c1020f36cff1b847f14e1b87a3a42567849076e906754c5fa2de03a8add7&scene=58&subscene=0": "【漏洞通告】Progress MOVEit Transfer SQL注入漏洞CVE-2023-34362", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519310&idx=4&sn=386fa59826a37a8091a8223c31171897&chksm=ce46075ef9318e48849b116e2cee0fcc677d96d61bd455d1badde315d93d72325678983df635&scene=58&subscene=0": "【漏洞通告】畅捷通T+ SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652037133&idx=3&sn=8de5dba663d95c8be539431938607398&chksm=f36fcc4dc418455bc2a08890dc75bfb3bcbab196d2cd2b7f876a121e100cb08e2143bdfa847e&scene=58&subscene=0": "【安全圈】黑客使用 VMware ESXi 0day漏洞在虚拟机安装后门", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247538050&idx=3&sn=7aaa79e173e57c411c9a245cb5c3dae0&chksm=fa93e343cde46a55887912003588e850df5c350a031274af2770600f0291b5e20c669976f8c6&scene=58&subscene=0": "本田电子商务平台漏洞暴露客户数据", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247562605&idx=2&sn=0a289f364661b94e8b7f7a8fd2751893&chksm=e9142557de63ac41253befafd0d436c32cdcdeeeecf7ba10b7efcdd89d8957726e2675bd5bbc&scene=58&subscene=0": "2023年十佳开源漏洞评估工具", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247498200&idx=1&sn=698e8ee889e0042d8f50e53e01ad6e62&chksm=c2d1857cf5a60c6a5a5a77e7a94645a38e0b44fe3f841496441b58df9b46062b4ac3236ca671&scene=58&subscene=0": "自动化神器 Yakit,风险与漏洞看得见!", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487498&idx=1&sn=7aaf798063772498b98477b44d8c7985&chksm=fb029d52cc7514446844c4c8a3a66416981c450fa885b4455f525e8a7c865a4d62243284338e&scene=58&subscene=0": "漏洞风险提示|金蝶云星空远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247501488&idx=1&sn=ddeea63fd5deab6d4b6a1be5fc4e8330&chksm=fa52130ecd259a18cf59e21026ab3f8620e31a5f6468fb7252bde02b7ae0d3cfb77894ae018c&scene=58&subscene=0": "手把手玩转路由器漏洞挖掘系列 - 基础入门", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247498416&idx=1&sn=d0f54fd6648bf7b8217512d81481f009&chksm=eaa97290dddefb866140fd52b11e9ddd3d52f009a120887c673c2fb3b135c8db44119e08afea&scene=58&subscene=0": "CVE-2023-3009 TeamPass漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516743&idx=1&sn=3cb8165c2ddc920b17e02e78f61b7ee6&chksm=ea94b32ddde33a3b819e16044a6666b31db296c3fd4317448aa54816d9004cfa96e0a6d66c98&scene=58&subscene=0": "MOVEit 爆第三个 0day,美国多个联邦机构等受影响", "https://mp.weixin.qq.com/s?__biz=MzkwMTE4NDM5NA==&mid=2247486384&idx=1&sn=bd17ca3ce203445eca014892aa6a8b5f&chksm=c0b9e555f7ce6c437dbd93bf2ac507d0f8e212188a061b664edb261903949ffdf41240178f6c&scene=58&subscene=0": "【工具篇】漏洞扫描-最新版Invicti v23.6.0.40861", "https://mp.weixin.qq.com/s?__biz=MzA4MDMwMjQ3Mg==&mid=2651868669&idx=1&sn=ef642f2768a34ab4fb8c554297994b3b&chksm=8442b51ab3353c0c93a839c192dba3b0ba711add14cd423dea38feb7abdfc60b557b8fd1fee8&scene=58&subscene=0": "云渗透案例剖析 | 阿里云PostgreSQL漏洞技术细节", "https://mp.weixin.qq.com/s?__biz=MzI3Njk2OTIzOQ==&mid=2247485176&idx=1&sn=2e70dd4297145e6cd806368ca861472d&chksm=eb6c2480dc1bad9673981cfd1aad398f2111607e63749642f5ad102eefee87af788705645b69&scene=58&subscene=0": "安全事件运营SOP:接收漏洞事件", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045378&idx=1&sn=396b53ac6c0285cce36f4387fac9ef88&chksm=803fab5cb748224a00fa8a923d33309bbed9031c130f8a9077dc3f69e3a8d7046700efc31642&scene=58&subscene=0": "【漏洞预警】Google Chrome V8类型混淆漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458507648&idx=3&sn=90e18ac93a4df9bf4803d28d287c3d08&chksm=b18ee90a86f9601c95377016e9ca80baad5dd8bc55e3672b877c27f6b52d28ca4678f23fd4b3&scene=58&subscene=0": "【新课预售】学习Windows平台漏洞挖掘,为企业安全保驾护航!", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247508899&idx=1&sn=766bbd43b4cd0917d9db8d18ca246822&chksm=ebfae483dc8d6d95ab0f5d0cf0a3ae53b6a8800ae9982a5b9bd11c57e1618a1ba080dcd75494&scene=58&subscene=0": "今年最大规模网络攻击:零日漏洞击穿防线,美国近百家大型政企遭勒索", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487505&idx=1&sn=415cb0d2e5ff136c57d57ea1ae6e5524&chksm=fb029d49cc75145f51fd19e155c2eac737ea59411b95b9fe00f94a3c6a49fd17e82b4349c27c&scene=58&subscene=0": "可RCE速修|Smartbi内置用户登陆绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247501525&idx=1&sn=862cca5c62d3b6958a193629f606c8d1&chksm=fa52136bcd259a7dcb9e6af31e77d15af6c408f379ba8a284ae32e8bafe98e6e62d309d093fb&scene=58&subscene=0": "消息中间件RocketMQ命令执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491565&idx=1&sn=eb2af62a72167c6f82ae8ec3db878511&chksm=96f40080a1838996d0e9501e348fa8c8ff5a19b468f1dec3b6accc0c18a9fef5a5e32b5e7508&scene=58&subscene=0": "可RCE速修|Smartbi内置用户登陆绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516754&idx=1&sn=a1e32820ac8d5bb8432eeb77bbd839e2&chksm=ea94b338dde33a2ee7103027b591018e1800ea1c4ff5971fcc4ff2b04d330fa5994acbc7174e&scene=58&subscene=0": "西部数据更新固件版本,修复4个漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493496&idx=1&sn=a11ff71655b544c3f004348df0a538f3&chksm=fd74d7b1ca035ea7bc1dbfb555d5353ffd3cca54019c34d795f20525f696fdfe971fb8d5ffe3&scene=58&subscene=0": "CNVD漏洞周报2023年第24期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493496&idx=2&sn=4e2c1d2e8be6bca100fb957773b04a21&chksm=fd74d7b1ca035ea7e2e9495916217f4ce907c2d3b75d107659c2fdc843cec13155ca5f575ae2&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230612-20230618)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516769&idx=1&sn=e00e30e1c0b1187da247a4f936d2761e&chksm=ea94b30bdde33a1d1e665e5aff83de4c7dc1f514f22b2f801b2394245122fa4c1d765b8d7585&scene=58&subscene=0": "华硕紧急修复多个严重的路由器漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247508916&idx=1&sn=2077341efdf975aff70c80c031d28d7e&chksm=ebfae494dc8d6d82c249f76beb08afea429de50f01c5e23a858e535f0c4c78534fe3e91f0234&scene=58&subscene=0": "运营商底层协议“漏洞”:通过手机号算出使用者的现实位置,几乎零成本", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502313&idx=1&sn=8a703d5e0ff7c398d1dda1ace1e655bc&chksm=cfcaaafdf8bd23ebfcdfe7fa3c0a3b716a3119c1d4762e7b0a7192f5157e66482ca18c090218&scene=58&subscene=0": "速修!Smartbi 曝身份认证绕过漏洞,可RCE", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247538050&idx=2&sn=e3e95bb45169c4086dd60223b2825fcf&chksm=c1e9d9d3f69e50c55cd6eb67df759098da4913cc332457b02594850f622b5e0d4bc004892309&scene=58&subscene=0": "今年最大规模网络攻击:零日漏洞击穿防线,美国近百家大型政企遭勒索", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498967&idx=1&sn=6da6341fc95d2924da146a8fc32adb62&chksm=fe79d84fc90e5159d3aaf2a0e2eb1f8a2c7f21610629d07d4444b139e925428c5f708aa38259&scene=58&subscene=0": "【已复现】Linux Kernel 权限提升漏洞 (CVE-2023-1829) 安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652037480&idx=3&sn=92c94213fb28c164491aea642f8868cd&chksm=f36fcd28c418443ef815ea9dc974f30a3395a90f3670d294d7d384193da8013d486587061f74&scene=58&subscene=0": "【安全圈】华硕用户注意了!官方曝光路由器的关键漏洞,称尽快修复", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650968315&idx=1&sn=52018a3763c24f5ce799f543d6de313f&chksm=8079d2c9b70e5bdf94aa50bd89bdfa8cdbc904abd1f7f5043bf74678f4f2d78c39047c7e6f4c&scene=58&subscene=0": "原创Paper | Apache RocketMQ 远程代码执行漏洞(CVE-2023-33246)分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458507929&idx=2&sn=dea24421f0e1d25dfea01e642724ff0f&chksm=b18eea1386f963052a0621315aaa00235d483def239d751cea1933ade9d634dfdb4c5d8f6727&scene=58&subscene=0": "VsCode配置Wdk7600开发环境 以及 \"自动编译\" 和 sources文件简单介绍", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516795&idx=1&sn=4e3841d5ec2df12ab173f87cfff65c6f&chksm=ea94b311dde33a0794d17d8242e150e4a00dd604aaa3e2a712d13b6b431abe63f1221d8e095e&scene=58&subscene=0": "研究员发现微软 Azure AD OAuth 应用中的账户接管漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516795&idx=2&sn=0a8689d4ca1f5d7f44d3b17c702f6a4c&chksm=ea94b311dde33a071c30ec0b9109e9ab69948260bf38040c3f0a7266e8cac25eee9ec8afcef1&scene=58&subscene=0": "OT:Icefall:Wago 控制器中存在多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492309&idx=1&sn=bbb15e575262be9df93d40524f50b023&chksm=fe26e7d4c9516ec2fe8b74af786d5bbd6b8d6dbbae6927b451511f2f0271cc76fbd9b6d268b8&scene=58&subscene=0": "CVE-2023-1829:Linux Kernel 权限提升漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247508938&idx=1&sn=077b7d514eec061d985c49c5238ef4ab&chksm=ebfae4eadc8d6dfc9a252258d2edf189f6ab8292fe3c136a640aa6802855b844e64bdf29965b&scene=58&subscene=0": "re:Inforce 2023:亚马逊云科技聚焦AI驱动的安全", "https://mp.weixin.qq.com/s?__biz=MzI4Mzc0MTI0Mw==&mid=2247497488&idx=1&sn=3b86ca6c57a47b8e6c0a769b00fc34c7&chksm=eb84aa44dcf3235219d5258ac3fc3485e2c769d2309c2644041a535f3c803484039bbcd561fa&scene=58&subscene=0": "基于Win32k内核提权漏洞的攻防对抗", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247489154&idx=1&sn=8574bbdbff2facb30194064ab4027bf7&chksm=fe2ee909c959601f90eb3e9325cd77ace2327c2fed4e528f732dbb74427b5761aabfa5b16042&scene=58&subscene=0": "华中科技大学 | 一个图像启发的可扩展漏洞检测系统", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498440&idx=2&sn=f622ba8154c9f1a1b98c042f1c200cee&chksm=973ac9aaa04d40bc9d39fbd72c648b86be527c4b6c1a6322183aac0886d399d8f31525b99a93&scene=58&subscene=0": "CNVD漏洞周报2023年第24期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498440&idx=3&sn=302861ca4321ec263718be9d62e8eb40&chksm=973ac9aaa04d40bc5c8e21921dc848c04179a1890e60be80ef5bd60601bf5835e6c1e957a51e&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230612-20230618)", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247538104&idx=4&sn=7b3c72895e8656aa37cf8ce694216173&chksm=c1e9d9e9f69e50ffb6d7a7f184b58841405cbfa1e76a37c1803644d0190871455d738a3c74b8&scene=58&subscene=0": "运营商底层协议“漏洞”:通过手机号算出使用者的现实位置,几乎零成本", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652037555&idx=4&sn=d93875644510ec93c238b3c9ba2c8a3f&chksm=f36fcdf3c41844e5acc44c8b85d694dc9aaa1631225d56bd7d2d36179c701e37621782e4f600&scene=58&subscene=0": "【安全圈】已修复!Zyxel修复了NAS设备中的严重漏洞!", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498973&idx=1&sn=26fb13d40b117853343f7a6c1f5dbb11&chksm=fe79d845c90e515390603918faf3feb53c7798da6ffd84b1521529948d3fc8999938acd4c716&scene=58&subscene=0": "Apple多个产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652037650&idx=2&sn=f509c9456856a5424a8991e0ea21a148&chksm=f36fce52c418474429a9e96be7ed7d177fe79f27a442ae73505f2220d9b9eb60057304386ab2&scene=58&subscene=0": "【安全圈】微软新漏洞导致Win11文件资源管理器CPU占用率异常", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652037650&idx=3&sn=4d451fdcb3a14fe88639e3b0f97db3f9&chksm=f36fce52c41847441f5630c48400044362c485c3bc973ade84af81c2fc15e2d3056bca5afa28&scene=58&subscene=0": "【安全圈】苹果修复全平台系统中存在的 Triangulation 漏洞,被利用传播木马", "https://mp.weixin.qq.com/s?__biz=MzkwMTE4NDM5NA==&mid=2247486519&idx=1&sn=0c6fdeec969b1c23e033d4b35f276b9f&chksm=c0b9e2d2f7ce6bc41322570b502b55588e196ddb851e17fdf1e11bc500f83815cfe2b0538825&scene=58&subscene=0": "【工具篇】SRC自动化监控赏金项目 自动收集资产漏洞检测漏洞推送@laoyue", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498978&idx=1&sn=841d3de357a5c47c8054173948049dd2&chksm=fe79d87ac90e516cec2bf5ea0dc7f11be85e35ad729a37b09098cd2f73d3c8593d3e6b95df01&scene=58&subscene=0": "Grafana 身份认证绕过漏洞(CVE-2023-3128)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516818&idx=1&sn=1088fe2b36f5e1648053d9005c87f2ca&chksm=ea94b3f8dde33aee090d8160c827cb19fdabb2041da6ed2e472b13cf421105f734ea2276b4d6&scene=58&subscene=0": "vCenter 服务器漏洞可导致代码执行和认证绕过", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516818&idx=3&sn=7524bc2288375bbf06f9574e73e15a00&chksm=ea94b3f8dde33aeeeb1313ae4cb6608ffa6876baa1ba49cbdac2b97cf5307198a79fd41eed8b&scene=58&subscene=0": "Fortinet 修复严重的 FortiNAC 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516818&idx=4&sn=9a52564b1d6d8454dd34dce86019d266&chksm=ea94b3f8dde33aee6b782b9e8375062d482d95de70270edef8b5657685d76f0a6bd70c018c8f&scene=58&subscene=0": "Grafana 提醒注意严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458508052&idx=3&sn=5cd76794d7498841a694242daba850ba&chksm=b18eeb9e86f962882e6d956bccbe1c43d06f512dddc2d22e08eb82b9b0c38bbec7d8c40dbee5&scene=58&subscene=0": "赋能企业安全!系统0day安全-二进制漏洞攻防(限时75折)", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492424&idx=1&sn=5d55678132400cbfa4e55644b239344a&chksm=fe26e649c9516f5fe3c2fe85ed972d8989bd6478b63387c334a1c62467d306cf42325799c88b&scene=58&subscene=0": "CVE-2023-3128:Grafana 身份认证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492424&idx=2&sn=013b226c1fe4cc1b692a1e3827f92616&chksm=fe26e649c9516f5f17f6da28c7833aa8db097f531193607a75b08d635fcb78f3d579e1cd2d02&scene=58&subscene=0": "CVE-2023-33299:FortiNAC 反序列化漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502113&idx=1&sn=9c8c0cca963d0ee4606128283894dac2&chksm=f2585bd2c52fd2c415a2a5e11bcdf19cc5babb702d5f6707039b97258e10e72c5afeedd8d991&scene=58&subscene=0": "雷神众测漏洞周报2023.06.19-2023.06.25", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488353&idx=1&sn=cf6a60bb5e6d7c486527fc2957950016&chksm=c2c6446af5b1cd7c43927ac1e89bc8e69237080579fe8fabdc94588893e050b0da1f0b826cf7&scene=58&subscene=0": "【漏洞通告】VMware vCenter Server多个高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488353&idx=2&sn=c3f8c9c91802144824a86e52ce034576&chksm=c2c6446af5b1cd7cd92ebffbd1474e6cfe1f1c9706fe76e65578dc31c8bee9248f07bf39dd7b&scene=58&subscene=0": "【安全通告】Grafana身份认证绕过漏洞(CVE-2023-3128)通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493510&idx=1&sn=b8e27be2ecef3234351a65166f2e4bce&chksm=fd74d74fca035e59f2f3733df451e9ee29f3f0c7ec0da119b2260557e3b6c963b1d1528a4be5&scene=58&subscene=0": "CNVD漏洞周报2023年第25期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493510&idx=2&sn=4ff4e36f0ef5ec26a310c52203b2299d&chksm=fd74d74fca035e59d8753d4af0b4187b1614a6e1d2374c74423c344c445ca949dc7f6b55c0aa&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230619-20230625)", "https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247488139&idx=1&sn=21233d0e622ecdf50956a83cbebdfc17&chksm=fa58b0b0cd2f39a6c1edb563e5d594811232593421218dfab5a20ef7f7307b9088f54347141f&scene=58&subscene=0": "只有1%漏洞值得投入,但如何处理好这1%?", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516831&idx=1&sn=7580dc107a14d8421aa9e835398f57ff&chksm=ea94b3f5dde33ae35faadb81cb82d8b91fdb6e527eefe52e7663db9e5d8d31e7f1dc6a0156d8&scene=58&subscene=0": "CISA 必修清单新增6个已遭利用的0day", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652037853&idx=4&sn=b570a81855c56b5746d5eb0b58c25191&chksm=f36fce9dc418478b92b4fe31f52fcfbe9f0c401606013aa17b008b80177169ab2abf4ceba1ed&scene=58&subscene=0": "【安全圈】7月14日前完成!CISA 督促联邦机构修补 iPhone 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498442&idx=1&sn=22cda43bc84b62e80d2a36afa94f9c17&chksm=973ac9a8a04d40be5f279b310d3e75efab2bfe4a34babe74dc33ffe625dec8d06eab61c9fa3a&scene=58&subscene=0": "CNVD漏洞周报2023年第25期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498442&idx=2&sn=8ee67a21f50ffacc91756ddcc79affe4&chksm=973ac9a8a04d40be30784b70dd212e1f421d397d39d1b06915db5d9c4359003da4a8a3bca217&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230619-20230625)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519350&idx=1&sn=eebd1ed938d0f1ae56cd63aa21b8fb17&chksm=ce460766f9318e70ae6aedccc68da3babbcf1fd6b3fb832605e3d7f0a6da72d50449eb00d8ab&scene=58&subscene=0": "VMware vCenter Server多个漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519350&idx=2&sn=21b9848ef6657434b84616a9b4042ee5&chksm=ce460766f9318e7077a69a73fce6750ed54ccc45319ac04f91c581ef9dabcc2bc5aa42f8eab2&scene=58&subscene=0": "Grafana 身份认证绕过漏洞CVE-2023-3128", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247538282&idx=3&sn=7659694b00453585a6a1a71cbfef0257&chksm=fa93e0abcde469bdbb5eb416f8199b0470ec60c807beb0afa8ab26304d658d55e9f57bb25765&scene=58&subscene=0": "施耐德智能电表曝出严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247563005&idx=2&sn=ec3a43fc8a2665b4de5d247970ada492&chksm=e91426c7de63afd1d127322ca97ec859b107eee09e2c8b25beefe6fd9ca0095b5131c9a9a3aa&scene=58&subscene=0": "Win32k的内部结构以及可能出现的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502138&idx=1&sn=69bf2fc6a7a7ab720e094f4685982c4c&chksm=f2585bc9c52fd2df36a765b6608a3118b630a293bd9f3526741d4cea23209c4da9a68093926d&scene=58&subscene=0": "CVE-2023-32315 Openfire管理控制台认证绕过漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516843&idx=2&sn=08d47901f423ad544f407dead0344eef&chksm=ea94b3c1dde33ad7879cb6a504aa623576e7d749f80f139f04f047b1e28a6e6d949bea885041&scene=58&subscene=0": "Chrome 漏洞多:web 浏览器还安全吗?", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247528988&idx=1&sn=ce221e6ef302aa68a7a50b5946aab1ad&chksm=eb8499bcdcf310aac0dee3d4c1489b7eda0cb8f18ff91ba5f33608dec6e266c0f43fb53d8be4&scene=58&subscene=0": "漏洞分析|死磕Jenkins漏洞回显与利用效果", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491574&idx=1&sn=043729e27577a851856c002cfb0409b8&chksm=96f4009ba183898d0f7c37a24ee56b6f826d4ba00987d160d6fef5d25f320f9cbc6be3dc3d93&scene=58&subscene=0": "在野0day捕获|nginxWebUI runCmd远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487526&idx=1&sn=e65a6750c9f2e96c3ec0aba68f35f56c&chksm=fb029d7ecc7514688c5ae05fc811096e12acf2d1d11aa24aa61ec587313f505ebe87b667dd50&scene=58&subscene=0": "转发先知社区《SRC中的SSRF漏洞挖掘笔记1.0》", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487526&idx=3&sn=f3eec7a0c51ab1a45074d709748f051d&chksm=fb029d7ecc75146876938a65def6a0fb0a3c9dac4c53e01acc23f445345325b3a7843ed4038a&scene=58&subscene=0": "Azure 机器学习服务上已验证的 SSRF 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652038343&idx=1&sn=f0f908f052f9183d2cd720a5688663ef&chksm=f36fc887c4184191960ee25208e9ac774f30981ca3ec187af83f622376a5fe0e34ed1c893cbd&scene=58&subscene=0": "【安全圈】用户账户信息遭泄露!WordPress 社交登录插件曝出漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458508722&idx=3&sn=89b26b7375566edb262ae98430db35f9&chksm=b18eed3886f9642e14af0b227dc0eca6dc9931efd61246b00cf65c95413f7de472ca08ed5c95&scene=58&subscene=0": "CVE复现漏洞精讲-从基础到入门", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516908&idx=1&sn=3861a45ade1fc801daa3c767fef3f318&chksm=ea94b386dde33a90582ec8599b01780524bb88c9f1a2cd4cfd9874889611594313e5443e60b1&scene=58&subscene=0": "黑客利用WordPress 插件中的提权0day攻陷网站", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491582&idx=1&sn=b94836fcf0990550373c52e398bf153e&chksm=96f40093a1838985c8ad9bc7a7d44b5b926b7a7505cb66f40e69095798f0684269c3d342a39b&scene=58&subscene=0": "0day速修|Smartbi 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247489199&idx=1&sn=495ff7aab614ef1759d0629ee9fd7c02&chksm=fe2ee924c9596032e4de4c27477dd6dc4f84edbe5f9b7066bb8657fc4c5f2834686a1932b231&scene=58&subscene=0": "香港中文大学 | TChecker:用于检测PHP应用程序中的污点式漏洞的精确静态跨过程分析", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519380&idx=3&sn=1eb4d07840e26a8f1b2813c106fe000a&chksm=ce460784f9318e92aa217d623b4d980afbc8fd3bcc686991e5fffdd3098e0ca79d3141de3f18&scene=58&subscene=0": "【漏洞通告】Parse Server远程代码执行漏洞(CVE-2023-36475)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652038457&idx=4&sn=52880f06f7551eda712226293d9d3269&chksm=f36fc979c418406f1c3c4c10459891e91bed62cfa3dab2e772d13a1d7c3a79a9581027964800&scene=58&subscene=0": "【安全圈】WordPress爆高危漏洞插件!可被用来创建非法管理员帐户", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499021&idx=1&sn=95e8b7dcc9ad8d311479840daf7dd205&chksm=fe79d995c90e5083f8a66c9c402ca15c2231a9296aae7b1c39987c3af3b5d4fe4df12fb1bae3&scene=58&subscene=0": "Smartbi 登录代码逻辑漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502167&idx=1&sn=3e73cef2ca89ecd30a74c7b1c7b89882&chksm=f2585b24c52fd2328758a520e4c47351510ed86b1fde8aa766ad9d1abdce0087e2798671b0ab&scene=58&subscene=0": "雷神众测漏洞周报2023.06.26-2023.07.02", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493543&idx=1&sn=fb14310e38e672ded98825c5db355c42&chksm=fd74d76eca035e78aa7637e9a2431d879cf655f16966d6b40f0990b04ce2163236cba23faa0c&scene=58&subscene=0": "CNVD漏洞周报2023年第26期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493543&idx=2&sn=e294f9e65916af0811b9c191280d42dc&chksm=fd74d76eca035e785b7386caaf361e50ab74c860a5f9d1d38dd69cd3c52c3d4333db3a816411&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230626-20230702)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488362&idx=1&sn=3dccdc1e088b969858063526c4e35ffa&chksm=c2c64461f5b1cd775d8d1827cee51d9e57632b6ed7e8f7e0d739ce551133db7694bf84996197&scene=58&subscene=0": "【安全通告】Smartbi商业智能软件登录代码逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045393&idx=1&sn=1ec3675af09d4855a459b6ccac44832d&chksm=803fab4fb74822591618fcc114f06a5cfb76e818abc9e0d3e372af4e470e4e4c7b244000252c&scene=58&subscene=0": "【漏洞预警】Parse Server远程代码执行漏洞威胁通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502180&idx=1&sn=1eebd0aa3734d92cc47e82ea22ffff73&chksm=f2585b17c52fd2012c291a8f5fe91eb9215f42a53c41409a7d056356db28d558e398048c2707&scene=58&subscene=0": "通用型漏洞收录|雷神众测星网计划一期全面启动", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247538322&idx=4&sn=fabec25f4368791590c1d6b4fe5c2ca8&chksm=c1e9dac3f69e53d5ae761f92c80aec415d035d6d50653c41169f1241296087135ccc40b2d982&scene=58&subscene=0": "MOVEit Transfer漏洞成肉鸡收割机--受害者遍及20多个国家10多个行业", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498478&idx=1&sn=5b2745aec22580b7046f1fb1fb2968cb&chksm=973ac98ca04d409aaa63eb808108e0b3a56402445c5dd75e61d2fcb91729248088fdf27dc727&scene=58&subscene=0": "CNVD漏洞周报2023年第26期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498478&idx=2&sn=e4685fe9b71a1a907f85f445b51cf38b&chksm=973ac98ca04d409afa281f698238b016e74fea3683c39487a3af5ec7205729200106559a1981&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230626-20230702)", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247492789&idx=1&sn=0a5855d699b8f31aab378f106ba474df&chksm=fe26e1b4c95168a2a788562cb62066bfcd24ede6e402f9d056e60c69b1f3da455e02a44571c8&scene=58&subscene=0": "Smartbi 多个高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516937&idx=2&sn=65d504384b5ecc49b9c872f25971c1d9&chksm=ea94b263dde33b75aa7bd18b0397741b6641cd7b8e5a8e4ccfb85a349ff055e359e2aaccdaf6&scene=58&subscene=0": "联发科漏洞影响智能手机、平板、WiFi 等芯片集", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247538459&idx=3&sn=e2bb415c602d0e6aaccc86c4dba85420&chksm=fa93e1dacde468ccdc71bada826ad891d6e32f86b5f427482209148531c517f604789f7587ce&scene=58&subscene=0": "超30万Fortinet防火墙仍未修复严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516957&idx=1&sn=0c991d0259551cf99a74bab4a9ff4d65&chksm=ea94b277dde33b61becbdad319212fd4bb06ba1b59e4ac18340519acf8bf4c6b36fdd4ca6c96&scene=58&subscene=0": "太阳能监控产品存在三个RCE漏洞,影响数百家能源机构", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652038691&idx=3&sn=9778f52fc1725dd3735903a9ed1f81ed&chksm=f36fca63c4184375638df8dd57db53eb89c9e2b9f6555d6e257dc4b583e27d6a268e67794b2f&scene=58&subscene=0": "【安全圈】警惕!仍有33万台FortiGate防火墙尚未修补CVE-2023-27997漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247501598&idx=1&sn=e426748336be285415bfd9944e8a0270&chksm=fa5212a0cd259bb63133a02725a8808efd8caa9d89416304a1707ab208736912469182c142aa&scene=58&subscene=0": "路由器漏洞挖掘系列之未授权访问漏洞及常见绕过技巧", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509086&idx=1&sn=4eafec8feee155417a8f9d25e701e976&chksm=ebfae37edc8d6a68941ea947937700d10737538660f9bf56c49780e65e243d78e41ab11f7c03&scene=58&subscene=0": "年审发现2万个关键漏洞且迟迟不修,这家政府机构遭通报", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247500859&idx=1&sn=03e415df425ccc60142debee4a1b3473&chksm=ec9f1d48dbe8945ef46d8c10c52f9b3feac2c139c4905c42c90e03ec99097502fa9ab65204e5&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年6月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484340&idx=1&sn=575160a41eba6d83606beade85419c57&chksm=c2b101c2f5c688d45a77849de896f884c6ca8b22e42b68a40d61043ead70cb2a15f0fdfcba02&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年6月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652038793&idx=1&sn=917ef4773c2395938f186798eb0f3035&chksm=f36fcac9c41843dfba6d0d4f2749b18855a77c359fd4cee8e345b7c4efaa01e7f7037af42b4c&scene=58&subscene=0": "【安全圈】利用网络漏洞,“薅羊毛”赚100万!", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247498526&idx=1&sn=385b117935236a92bd29a2d6757cde0b&chksm=eaa9733edddefa28dc6fe2fcdaefbb8bb437cbdb250a76a4dc98c7a9390318e329653c930980&scene=58&subscene=0": "nginxWebUI runCmd 未授权远程代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458509141&idx=3&sn=612c31305342961b29a1fe9f96349e41&chksm=b18eefdf86f966c94f59f1a8a5944b549eb53587fcb00e0ef5673c1fae9b540b87ae66668dbc&scene=58&subscene=0": "9月1日正式开课!系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516974&idx=1&sn=f09811b20739fa443eccabea54c8e088&chksm=ea94b244dde33b5216cec0158383e1f235baa85de882dd9c75b416e85ece3869bfc6d17c36b5&scene=58&subscene=0": "速修复!Linux 内核严重漏洞影响所有 Linux 配置", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516974&idx=2&sn=179eead740cfb91b376bafa02e4fcb99&chksm=ea94b244dde33b524d84c5fad51227142548b6794645504ad026ef59442f37d9388673b96ff7&scene=58&subscene=0": "高危无补丁0day影响思科数据中心交换机,可导致加密流量遭篡改", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652038994&idx=3&sn=48179ef3929a58dacea37166693ee4b1&chksm=f36fcb12c418420476133d5fa69d70f662600e907d51dcb3f596450137c32df7f1cc190d975b&scene=58&subscene=0": "【安全圈】2万个关键漏洞!这家政府机构迟迟不修遭通报", "https://mp.weixin.qq.com/s?__biz=MzkwMTE4NDM5NA==&mid=2247486593&idx=1&sn=9657c2b166e696345fca82d40f171d9f&chksm=c0b9e264f7ce6b72f6ebd50793fbd0998a26258a059089a5f9c54ac54fc52613f373d35719dc&scene=58&subscene=0": "云上跨租户漏洞攻击面分析-RSAC议题解读", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651124680&idx=1&sn=121fec0fb399c233a4c7e9804de56867&chksm=bd14431b8a63ca0d2938e3b27fde257f3a93bafe389ff0528d5f9a761acef51cc3548e41ac75&scene=58&subscene=0": "网络安全漏洞(风险)扫描的12种类型", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502207&idx=1&sn=159ebc77b5489d559489bc1374defbd1&chksm=f2585b0cc52fd21ac811fa394a78b09d8100c0b1faa9c40e1eb6b8704887b8a00357c13df601&scene=58&subscene=0": "雷神众测漏洞周报2023.07.03-2023.07.09", "https://mp.weixin.qq.com/s?__biz=MzIxMDYyNTk3Nw==&mid=2247513159&idx=1&sn=bf8e6bec4497729447f9b208ae0b7726&chksm=97634091a014c98799427769dd1831b03f174f2236885984e9898f3070f2d3d086aafc287ad1&scene=58&subscene=0": "看一个经典的缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499049&idx=1&sn=d70500146286bd2b43128b9b149f8065&chksm=fe79d9b1c90e50a709d4a719277ad1dabdd72a3264bb69fe6a7b84d1b2c3d5fa4bf302733e71&scene=58&subscene=0": "【已复现】泛微E-Cology SQL注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502420&idx=1&sn=f249c36b0c7851da88466fbf7473967b&chksm=cfcaa940f8bd2056480d5af27b51c8bf71133280b8d4f75c4672cd4940cf2f7e9fcd4ba53665&scene=58&subscene=0": "已复现!泛微e-cology SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493574&idx=1&sn=c56c298a69619441313c0011c5bc4529&chksm=fd74d70fca035e19812f137e9deb66951a6d229667bdced0df9bfb589920c10da2a4d3429943&scene=58&subscene=0": "CNVD漏洞周报2023年第27期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493574&idx=2&sn=6629e1ea3965d7e6ff5e59bc7565a42c&chksm=fd74d70fca035e19ca2c70baa1c1ab6fb66afdb669da398355ecc58eef556058da5b532ffa28&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230703-20230709)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516985&idx=2&sn=1314af5aa885e4849eef0319cfc6f5f1&chksm=ea94b253dde33b45266932db87448f0614dda574b5bb33e1598ef3acd97302e9bd4ab2ae157a&scene=58&subscene=0": "严重的 TootRoot 漏洞可导致Mastodon 服务器遭劫持", "https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247491790&idx=1&sn=0064387737127e6ab8a704d07b6fdea3&chksm=c18420dff6f3a9c96c3a61bae7751f8b7354937272a8f11cb9f5acb26391ebcda1e5757ecac6&scene=58&subscene=0": "CVE-2023-24941 Windows NFS 远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652039099&idx=2&sn=0d8bce0029b11f2d06a770552611b615&chksm=f36fcbfbc41842ede5989bec69b1aad95cd9fb7baa7feec7e8d534c59397f8021fe1d7dbbcd4&scene=58&subscene=0": "【安全圈】Progress Software再现三个新漏洞,影响 MOVEit Transfer多个版本", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652039099&idx=4&sn=d04069a547c743f069aa3379c730c5f9&chksm=f36fcbfbc41842edb9e2a5dc86d157d02e505081f7edae3995a6b51ff432f3bc6dc45643e21c&scene=58&subscene=0": "【安全圈】速看,三万个太阳能光伏电站面临严重漏洞威胁", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650969461&idx=1&sn=ed8ccdb489494086dced43a36a7e4caf&chksm=8079d747b70e5e517f2ff0cbe38915afaf9c32a9b18b9cb7fc8337a63c52543065ab4a8da528&scene=58&subscene=0": "原创Paper | 从入门 .NET 到分析金蝶反序列化漏洞学习笔记", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509114&idx=1&sn=7d7fb0fd13ddc54c9faf7825dca8fa6d&chksm=ebfae35adc8d6a4c3c39a4a09061890d7aadb2c84cbb4bcd77c2392c5ed547a5963a3d59486e&scene=58&subscene=0": "知名金融科技公司漏洞遭利用,近1.5亿元资金失窃", "https://mp.weixin.qq.com/s?__biz=Mzk0NzE4MDE2NA==&mid=2247487689&idx=1&sn=0756db46003dbed16ff371ff2224e40d&chksm=c37b9722f40c1e34c8f2b4caa0152e740bbaea439c5932ad2f1fe83ad8136efdf7aa87bc5c4c&scene=58&subscene=0": "Wordpress插件漏洞快速分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458509356&idx=2&sn=fa763caefd7f84e6a0c7ad852a20de2c&chksm=b18ed0a686f959b0a89fba3150d3b528c8ff08069e988f9bdcf7080f4d723a7c48d5a39c52bd&scene=58&subscene=0": "20万网站受影响,WordPress插件曝零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499055&idx=1&sn=64892fc6e10c57dd10abe34a4814c590&chksm=fe79d9b7c90e50a16a77d26089da4cc5f1e542d0e6f28df720b30da42a1c6127dfef03dcf4b1&scene=58&subscene=0": "Apple WebKit 远程代码执行漏洞(CVE-2023-37450)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516996&idx=1&sn=99077b8f872c126bf4abbae8c76123fc&chksm=ea94b22edde33b3872fa9d5e8336be03c61f1dbca04bd5821d460d5e0fcd1915fb4c2e9163a3&scene=58&subscene=0": "苹果紧急修复已遭利用的 0day", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487649&idx=1&sn=919546fdcbc846fc754dabd325270105&chksm=fb029df9cc7514ef749551ed34f948088036cdf04e6cd3591da05256f51fc76e213950b973ff&scene=58&subscene=0": "风险提示|泛微 OA e-cology 前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491601&idx=1&sn=5a16c8b5375967d8ef1ccf54d95c4527&chksm=96f7ff7ca180766aa85b76c75b7a3a04079773034c84e33825ab90d518c8ee7c1c423fc4399c&scene=58&subscene=0": "风险提示|泛微 OA e-cology 前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650844962&idx=1&sn=2a5946900a0942367c748e78008c2b15&chksm=80dbcc87b7ac4591f64c46caf9cd64d14d0023451139ef1942abe3ca8a3ae2f3e53983e61387&scene=58&subscene=0": "99.99%漏洞屏蔽率的NPatch,部署简单+业务0影响,是如何做到的?", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247538571&idx=3&sn=df0c9c6346eba40c28aaf5a4733a0110&chksm=fa93e14acde4685c8dbdfb272dde2ef6fc7aeef80647a83fac494285f90c2bf3a0a7c31ed402&scene=58&subscene=0": "三万个太阳能光伏电站面临严重漏洞威胁", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247538571&idx=4&sn=19ea0803dd81920a91f4dfe461db1803&chksm=fa93e14acde4685c2c8e11a8ffe2d936de4fc4a1b30de14d627b40c49e64bcf78fb8c819f897&scene=58&subscene=0": "CISA要求联邦政府尽快修复影响安卓程序的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652039179&idx=3&sn=cfd94a9924c972edad805b74f572a7c7&chksm=f36fc44bc4184d5d8e45d135e150876a3b00070c052815ec74e93eb338913eb619d9db097ecc&scene=58&subscene=0": "【安全圈】安卓程序出现高危漏洞,CISA 要求联邦政府尽快修复", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652039179&idx=4&sn=acfa395a5f9b320ef6c8078ac3b5660e&chksm=f36fc44bc4184d5de23a4b760b44bc1d448297616385db9535f943d3316de373552317c70cc2&scene=58&subscene=0": "【安全圈】出现了今年第十个零日漏洞,苹果发布紧急更新", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247563680&idx=1&sn=66248957b31fd7c04862ec9a1c3a224a&chksm=e914299ade63a08ccc17ec1767d225ce5d53caaa4e670cd444e1a0645f3a77c9cbdbf2c32d21&scene=58&subscene=0": "【技术原创】GoAnywhere Managed File Transfer漏洞调试环境搭建", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498490&idx=1&sn=25773c618473632eeb2ec8194127796f&chksm=973ac998a04d408e2711d89f093f6029c78a11dd630e4f7e875b82a5f34576cb286965bcc8b5&scene=58&subscene=0": "CNVD漏洞周报2023年第27期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498490&idx=2&sn=2c4202556e4a61c9bb2533313966fdcc&chksm=973ac998a04d408ee371aa7a6869361c659948f2603716865f31fcb878c28908b37b8477caab&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230703-20230709)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458509499&idx=2&sn=6ee5f2e1932d0ae1abe2a829e7de3408&chksm=b18ed03186f95927392d3bf24233851ec58d16b7678aed59477b870ae63ef3ff19ec8b7f5cdf&scene=58&subscene=0": "苹果修复导致任意代码执行的0day,但该补丁会使Safari浏览器不可用", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247493151&idx=1&sn=6a3db31bda7de5cc4d309671ad0f0e46&chksm=fe26e31ec9516a08cc3d655f54de5dff022f545dc3c75c1994b715e388e3af4519faac48298b&scene=58&subscene=0": "2023-07 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517016&idx=1&sn=5074282ae6c24bac3355b40d1cabb8fa&chksm=ea94b232dde33b24e9adff41dd364497012cd4fe06f43ac2e6579c5f297ce1443c3c745b757b&scene=58&subscene=0": "微软7月补丁星期二修复132个漏洞:5个已遭利用0day且1个无补丁", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517016&idx=2&sn=8edf5db583691ce70b6b4910729e5c5b&chksm=ea94b232dde33b241569143c1e9ebd78ef7b09e8ff2e3c45fd633d3d5f55ff51c0e2e4ed9dd5&scene=58&subscene=0": "工控补丁星期二:西门子、施耐德电气等修复50个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247503364&idx=2&sn=c11e68db755e6c1b320f9caea8093076&chksm=e9d305e6dea48cf0a614999ffb44d069bdb3b8d54008d6dc5f7372873fab77d77c386994a731&scene=58&subscene=0": "定制化白盒检测 | 越权漏洞治理分享", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247514936&idx=1&sn=de2a8a2b28bfde5b560dfe831c0e6251&chksm=eb706507dc07ec1182b90814fcc25931bece4740aaa45116234760f1c038a557142f1db4a1a1&scene=58&subscene=0": "2023-07微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491615&idx=1&sn=9b5db3d5e156bdfbdfec2bb90a3c7d83&chksm=96f7ff72a18076648c2e5021573fae783e0a9876fd72605997f55588ed9cb23ba6ea26ff8b14&scene=58&subscene=0": "风险提示|泛微OA e-cology XXE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499060&idx=1&sn=0d0d9bc4ee7f6846d4f6b65c6e2340da&chksm=fe79d9acc90e50ba53a8daf9ad123b6d90b64269d9fb3c9ed1f9abd334b348a08fb1c80bf3a7&scene=58&subscene=0": "微软2023年7月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488371&idx=1&sn=fc26d950d432c24595fec2e7729da150&chksm=c2c64478f5b1cd6e0af037ff7b0e8fd89ce4256a08f830c5750c92a1a290bd66a3fae819c04e&scene=58&subscene=0": "【安全更新】微软7月安全更新多个产品高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652039283&idx=2&sn=40f2febe4085e40b1bf331a4e4975ec6&chksm=f36fc433c4184d255e4b460de41bbd49e4b2c5fdb040103b350f18c2e424c1d33bc59553b8af&scene=58&subscene=0": "【安全圈】危险!哈佛大学网站现高危漏洞,可导致数据泄露", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458509525&idx=2&sn=e1c336aa109e0f61024e6900c1c28ebd&chksm=b18ed05f86f95949f8c33ccb531c78cb856953536f302d1847de55d0e04fd32c12006be170e9&scene=58&subscene=0": "哈佛大学网站存在严重漏洞,易受远程代码执行攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458509525&idx=3&sn=43b58e0946288c379cc274fc8d1fba69&chksm=b18ed05f86f95949ff530d339912cf7224098214ee10392107c7015b04c79a26c380c645d06b&scene=58&subscene=0": "预售报名中!系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491631&idx=1&sn=645c7d7b62b70a420ad8a33be9d53373&chksm=96f7ff42a1807654f75ec668d6aded0cbfb5ecc9687a4db0f3cb664f4bec18a9d51059810b8b&scene=58&subscene=0": "风险提示|Apache RocketMQ远程命令执行漏洞(CVE-2023-37582)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499087&idx=1&sn=cf7553080245afbf9db4ea2e2dfa1798&chksm=fe79d9d7c90e50c190055ec511b9e087e55892d06b4a400171fc6f52a70b254f70e461cdb7af&scene=58&subscene=0": "【已复现】泛微E-Cology XML外部实体注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499087&idx=2&sn=92b6663b5161cd160f90f2b702f8baa6&chksm=fe79d9d7c90e50c1547c4e1541af9d5eb132ea6fcffe1a96dcaa8eeee5e928386c39df8ab244&scene=58&subscene=0": "SonicWall GMS∕Analytics 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499087&idx=3&sn=211a64a83198ece48ded5c6d5ef041a8&chksm=fe79d9d7c90e50c16ba9ae014e4b29d2180cd413859e69361f7b24d9f244fbec5e611ee8f216&scene=58&subscene=0": "FortiOS和FortiProxy 缓冲区下溢漏洞(CVE-2023-33308)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499087&idx=4&sn=82c0d7d39ea68786f13a6928a4fad896&chksm=fe79d9d7c90e50c131d5a30d36b37a5503448f185ff909ff9edc9c0d3e18f1d5ae14a6b3921f&scene=58&subscene=0": "Artifex Ghostscript 代码执行漏洞(CVE-2023-36664)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247538616&idx=3&sn=f27c606a606487ca735cb0efe8907c0b&chksm=fa93e179cde4686fd55605cccb583ba8b6a80c7811a98212aa01d372dfd9d6ca6ceb198e74bf&scene=58&subscene=0": "苹果紧急发布iOS、iPadOS、macOS和Safari零日漏洞补丁", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045400&idx=1&sn=1b306dac29b0a2485a341e02e43c768c&chksm=803fab46b74822508cef1982c3c615b7747cec1a6c89d73796ccbd446d138eb5699c32299d57&scene=58&subscene=0": "【漏洞预警】VMware Aria Operations for Logs反序列化漏洞漏洞威胁通告", "https://mp.weixin.qq.com/s?__biz=MzI3NDY3NDUxNg==&mid=2247496151&idx=1&sn=3abcb0c72f223758053d44b35430c24a&chksm=eb12d7ecdc655efacf9e3990e8a6ca646c562a1f6ba44f8f4285e8a057ebcdf74639294a5bd2&scene=58&subscene=0": "被忽略的API逻辑漏洞,可能引发大规模数据泄露风险", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487669&idx=1&sn=0a41c0d6151023009245cd63e5542ba7&chksm=fb029dedcc7514fb9c385efc36a59cfed4655ac9a14fe893de4cab47ec0a846701555b47aec6&scene=58&subscene=0": "风险提示|泛微OA e-cology XXE 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519523&idx=1&sn=34bae7755bcdd90765fc93d430c3342b&chksm=ce460633f9318f25b066264931f8a8fbe21835819bd447b7f741bdc31de65d8ec366e3497cfa&scene=58&subscene=0": "【漏洞通告】微软补丁日安全通告|7月份", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519523&idx=2&sn=f70930943af9274faf9e874ec56fc566&chksm=ce460633f9318f25fffef3945bf4e91208171db379014137115f4ab3af1a9b326d164fe15f6f&scene=58&subscene=0": "【漏洞通告】Apache Johnzon 反序列化漏洞CVE-2023-33008", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519523&idx=3&sn=4be3178fb0f39ac325e096961e94d128&chksm=ce460633f9318f253c4b2397044b05b81452870d335e5df2ac9a486e0c85fd17feddafe74e3d&scene=58&subscene=0": "【漏洞通告】FortiOS∕FortiProxy栈溢出漏洞(CVE-2023-33308)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664187963&idx=4&sn=c07bca6b8c628328603d847039527ca7&chksm=8b594ac2bc2ec3d4d1012abd28072261d7493c9fb6920ae45a2b9c6964eabdf785852f83c0c9&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652039401&idx=3&sn=b100a7bcb2dcca7a55c1e3b873b8f3f4&chksm=f36fc4a9c4184dbf7e1c897eef611338adeaa505819e7b16c89f6f1b98ebb1b834a8c384b84d&scene=58&subscene=0": "【安全圈】Ghostscript开源PDF库中发现关键漏洞,需用户尽快更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517034&idx=1&sn=278a8688600c329d28ed0d3b4a718a2f&chksm=ea94b200dde33b16a06dee1ccc74e730dbb4bc108f1ca32266a7baf602bd1ef37e83faf331e1&scene=58&subscene=0": "SonicWall紧急提醒:速修复多个严重的认证绕过漏洞!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517034&idx=2&sn=0e6034be825eac879386635841578fa0&chksm=ea94b200dde33b16e5b00a74e6327aca06b3192a6c9501d14cc86edab7c248c3044a44ff1a9c&scene=58&subscene=0": "Fortinet:速修复 FortiOS、FortiProxy 设备中的严重RCE漏洞!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517034&idx=3&sn=98d9cf7e622b692b63ba4d74e3e4668b&chksm=ea94b200dde33b16646cb3f47455884bc322a6f139a1486a3c3a8ac13bfe6030f4bf1d493bb5&scene=58&subscene=0": "热门开源PDF库 Ghostscript中存在严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517034&idx=4&sn=6e2b7be2533c1e454539a3b4905483c7&chksm=ea94b200dde33b16f46f5c52b43bc116d9a9ed99bf381bbe9dbd8d1b3902ca57cb785c81a283&scene=58&subscene=0": "Citrix 修复 Ubuntu 版本安全访问客户端中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651124776&idx=3&sn=4c341a9dcf9f7e37dfeb4e132686eeba&chksm=bd1444fb8a63cded111e9261138185062acedead574ea803a2af4509d656344f949b71714a6e&scene=58&subscene=0": "CNNVD通报微软多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502470&idx=1&sn=c0d38876db69fdab48b2ffba0b28f966&chksm=cfcaa992f8bd2084b80252e971b8dafdc0b16a83806d7c4221a967a17f3630d73266bfe03c6a&scene=58&subscene=0": "紧急修复:Apache RocketMQ 曝远程代码执行漏洞,攻击门槛低!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517057&idx=1&sn=3cc4f03b1925ae57509bdbf2be1dd327&chksm=ea94b2ebdde33bfd6913c1087dd83618db3713959965348bee9a2af707862b9ac83d892845c1&scene=58&subscene=0": "Zimbra 紧急提醒手动修复已遭利用的0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517057&idx=3&sn=ac0e0bde77420df4712fba006d14f767&chksm=ea94b2ebdde33bfd540cb9d9cd4757ae8042142e812d7913a4f1c2bfa3c36967e61192a4c9d0&scene=58&subscene=0": "Linux 内核漏洞虚假 PoC 发 GitHub,专门攻击研究员", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652039478&idx=4&sn=b7bbfe62da4a8678d2e8f3704245710f&chksm=f36fc576c4184c60fa204697d86b8c36dc8916c102e9078ca78d3ce0b7c80d3e373aba62b724&scene=58&subscene=0": "【安全圈】受 MOVEit Transfer漏洞影响,德意志银行确认其供应商泄露客户数据", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488389&idx=1&sn=f36b07b590b42ebe813b6d076de03802&chksm=c2c6448ef5b1cd98aa7e5945c4774da1c3605abf1526f9789030c477919085d687015cae8f24&scene=58&subscene=0": "【安全通告】Windows错误报告服务权限提升漏洞(CVE-2023-36874)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488389&idx=2&sn=a934ad9eaf7b49fa13a6a26107c43f38&chksm=c2c6448ef5b1cd98a9263f201950ecfd0255d95dc2202f7c3f2f9ed958cb099cb6d61e6a11a4&scene=58&subscene=0": "【安全通告】FortiOS和FortiProxy堆栈溢出漏洞(CVE-2023-33308)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499103&idx=1&sn=302e71595751c4e7cd989e54a18612af&chksm=fe79d9c7c90e50d1809e9e61166ef6204eab0f8643430c9c76d8e37c68bf3ff1d80693707388&scene=58&subscene=0": "【已复现】Apache RocketMQ 远程代码执行漏洞(CVE-2023-37582)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247497626&idx=2&sn=78b443ab7a1c324a18e96943ee140c72&chksm=eaf9bfd6dd8e36c04c87ca6263ba5825c094f2c802fb92d8ea994b06d4e50f8606c697321e80&scene=58&subscene=0": "现金奖励| 2023补天通用型漏洞专项活动第一期来啦!", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247491126&idx=1&sn=11be852b68a417d54fee57533b4e9309&chksm=96db15eca1ac9cfa0f9147957287b12922278532647b5dfb412ea90644c797070c2026e9fb36&scene=58&subscene=0": "喜报丨斗象科技入选移动互联网APP产品安全漏洞治理十大优秀案例", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247491126&idx=3&sn=1ee282d981e917c443d96fc764a254b8&chksm=96db15eca1ac9cfa3cadf196a050a3ed3faa342e7ae6982bd9274d7b9b53bf3a16feeb513ad7&scene=58&subscene=0": "漏洞情报 | Apache RocketMQ 远程代码执行漏洞(CVE-2023-37582)", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247514971&idx=1&sn=ea718f968db2bcbd140105d900f33883&chksm=eb706564dc07ec720ee6223f2a311fa7e8e24d34e8f6a67951e5088436375bde9402641142c2&scene=58&subscene=0": "【火绒安全周报】哈佛大学网站存在严重漏洞∕游戏装备雷蛇发生大规模数据泄露", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247563902&idx=1&sn=e6617aad97c6564f3dc6dfa50099f517&chksm=e9142a44de63a352530b7c91421f57c74384444ddbc19b76ca8ac32d00c46f1374c2e5fca56e&scene=58&subscene=0": "CVE-2023-36884:Office 0 day漏洞被用于北约峰会攻击", "https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651384863&idx=2&sn=9948dd8d257a3d0f74b6130b20260670&chksm=8d399d97ba4e1481d73a10373f4569a91fcc259697f1eb5526fb6007648737a7efdd3c172dc2&scene=58&subscene=0": "长亭获评工信部移动互联网APP产品安全漏洞专业库支撑单位", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458509569&idx=2&sn=9f1a70041682a54624f9165fe0e12e1b&chksm=b18ed18b86f9589d4c84ee7249f43dc207f17870cbb2440a2eecbad4633a8108bfa3afcd02d3&scene=58&subscene=0": "赋能企业安全!系统0day安全-二进制漏洞攻防(限时75折)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652039562&idx=1&sn=9b46614b93c2ac4eded5b87ed1b980c2&chksm=f36fc5cac4184cdc2498a3afc177118bca4c77d8afc77a06d3f26771385621688a0e8a692dc9&scene=58&subscene=0": "【安全圈】高达139个安全漏洞!微软:已发布漏洞修复补丁", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458509570&idx=2&sn=daa7d181522c147e9fd67594b79cfb0b&chksm=b18ed18886f9589e8dae924c36ece6d985c2f4807a68e2a4a1b4c283453b5a3b8f6769a187f1&scene=58&subscene=0": "CVE复现漏洞精讲-从基础到入门", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247563992&idx=1&sn=a29853f205a362a3828873d8f9a152d7&chksm=e9142ae2de63a3f4845cef0b4116cce1914d6c0d9e2b32ec80eb692b022832811cf43c62a68d&scene=58&subscene=0": "被大肆利用的漏洞导致数百个太阳能发电站面临威胁", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517076&idx=1&sn=5d64e3975416d9a2acd6b0ae94ceec96&chksm=ea94b2fedde33be8db007deb0d5e30088fbd4d8a0748739733378f6ba498f8ec8e4997102ba5&scene=58&subscene=0": "罗克韦尔提醒关基或遭APT组织RCE漏洞利用攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517076&idx=2&sn=7062958ef499c9d253edf70f467f8bde&chksm=ea94b2fedde33be891e7da5d57174e952f57f47382684f02bd3d5e2c37370e44dce20a358785&scene=58&subscene=0": "Reddit替代品 Lemmy 开源软件遭 0day 利用攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517076&idx=3&sn=5783890433df33edd46704822b336e2f&chksm=ea94b2fedde33be8ccaa53780a4f81e980c66987f64df773bfa2efe676c804eaa707f59d61fa&scene=58&subscene=0": "霍尼韦尔 Experion DCS 和 QuickBlox 服务中存在多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502221&idx=1&sn=296ad88a02ad5c1f7ae4d6a182e13a4c&chksm=f2585b7ec52fd268ca90c33632efcafc20c2c78597d556a9e5a026cd7b1180fb79ce6d86872e&scene=58&subscene=0": "雷神众测漏洞周报2023.07.10-2023.07.16", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499138&idx=1&sn=f1b780fd2f6c7c609f1d875cbf1fd09c&chksm=fe79d91ac90e500cbcff998db9b3172b65b2c3d28c75ae2b21f59b7c60d8809809f406d924e7&scene=58&subscene=0": "【已复现】Linux Kernel 本地权限提升漏洞 (CVE-2023-31248) 安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509146&idx=2&sn=d2b8155a7e8b294e92ab3c71248055fb&chksm=ebfae3badc8d6aac994236ed6baaaaff1ff3851ae4e1e87872138438b1b5afe84780d4a40ee8&scene=58&subscene=0": "国家漏洞库CNNVD:关于FortiOS∕FortiProxy安全漏洞情况的通报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664188250&idx=6&sn=33caa47b5418c8ebab3affc456107ef3&chksm=8b594ba3bc2ec2b51fd68400c6b41f71965b55927b7a9f56d2a6ebdda2f3141d880f80ee561f&scene=58&subscene=0": "CNNVD | 关于FortiOS∕FortiProxy安全漏洞情况的通报", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493588&idx=1&sn=b8dabb69611c1c1560cc536447d668a5&chksm=fd74d71dca035e0b6d427fdd82bc442be5d736c46a21e5843a32fa0094b720a3fa126fac5883&scene=58&subscene=0": "CNVD漏洞周报2023年第28期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493588&idx=2&sn=65cbca6997dc1f9d3be3d427600848dd&chksm=fd74d71dca035e0bc39a1f6c5e8c8f8a423310a8378a647fd4775c425ad1910c99c7c1e9876f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230710-20230716)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519640&idx=1&sn=7a5d1b3ecfaa1302554a4e1384aa19be&chksm=ce460688f9318f9e67a07e5fa7951bafe5baf5fe61cb9fc15dd419707df715cb9a1805cee4b7&scene=58&subscene=0": "【漏洞通告】Apache RocketMQ远程命令执行漏洞(CVE-2023-37582)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247498171&idx=1&sn=07fcedcfc0e86cf88fa2424a544755b8&chksm=cfc55ee4f8b2d7f20b6f31c163f6a6e881221d1f88917e868e5f74fb9b461ba17d61aba708bd&scene=58&subscene=0": "协办单位!360漏洞云应邀参加2023年度首期移动互联网APP产品安全漏洞技术沙龙", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247538578&idx=3&sn=75a2d5b81dda3b82b76249bb93b13b14&chksm=c1e9dbc3f69e52d5aca305c2e2a4b371c2db1bf7420803bbded6ebdbb709cf0eee19cc130d93&scene=58&subscene=0": "艾默生电气成为MOVEit漏洞攻击受害者-疑客户和员工数据被窃", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247538578&idx=4&sn=f0198b0c98791c58376f0d9d310a1664&chksm=c1e9dbc3f69e52d551844ee631833dfb2d2574bdd7d16057989fa435d44a68b510d132522437&scene=58&subscene=0": "被大肆利用的漏洞导致数百个太阳能发电站面临威胁", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247538682&idx=3&sn=b7ad9d3c0a751d19967273c567157205&chksm=fa93e13bcde4682d03ffd09d6f4d10335b639bc1878b22c7280dec1853b69b641355506e8b83&scene=58&subscene=0": "微软:利用0Day漏洞,黑客组织攻击北约峰会", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247489823&idx=1&sn=c5c9e44649c7fdfd82f7af647988111d&chksm=ea4bb358dd3c3a4efa60f6deb5c5e157371eb79ddb98fa3895b4820639a5772b8c58e275cfda&scene=58&subscene=0": "如何解决防火墙拉黑Nginx转发的漏洞扫描流量问题? | 总第198周", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458509678&idx=1&sn=99f695d745b8d499152f5b1ab7d09cd0&chksm=b18ed1e486f958f27bba7fe46705b572b6fe1d3c5c60f5a0c4360bc22c0424a986233465e0d4&scene=58&subscene=0": "TP-Link WR740 后门漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650969484&idx=1&sn=6ca0c3cd34fffeaeda419b9cd95d47c0&chksm=8079d7beb70e5ea80d54d1e89be616fa770b19ceb51ed9b69ff459ef5b97c4519f70820d18a8&scene=58&subscene=0": "星际奇兵第7期:必备神器!开源远程漏洞测试框架 Pocsuite3", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498502&idx=1&sn=3e163d0130e6bfe0b50136fc1f4f9baa&chksm=973ac864a04d4172ba77eb5f5177770803d12f668cabe16b5b2f42e91b94d4390efeb719e2fb&scene=58&subscene=0": "CNVD漏洞周报2023年第28期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498502&idx=2&sn=29a7fed6146124e64416404494b6a143&chksm=973ac864a04d41722a7926c400fa0e61843d06bb60a216c1a7ab2738558fae88dbda864399a5&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230710-20230716)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517089&idx=2&sn=d00e1d0fe24db8bf16d2d2b13ca24261&chksm=ea94b2cbdde33bdd104cf70c1e39dc9aa9a50a4a440cfb4040c51ffb19d02aa65883822b0e90&scene=58&subscene=0": "严重的思科 SD-WAN 漏洞可导致信息泄露", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247493498&idx=1&sn=27fb36d34fb3189131c1331c6a4dc810&chksm=fe26e27bc9516b6dcd1e06f286a3df392a36d3bc2decafb74bcba0d5e9f97a224d420c2171b8&scene=58&subscene=0": "CVE-2023-3519:Citrix ADC∕Gateway 远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499147&idx=1&sn=ceb7547c1973dec74ab29cc614f791b3&chksm=fe79d913c90e500516e036dd3bcd64aada69adc856aa9764920528f7be8c032d525d330d22f0&scene=58&subscene=0": "Citrix ADC 及 Citrix Gateway 远程代码执行漏洞(CVE-2023-3519)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499147&idx=2&sn=0bcedc63f177adb297cebf2535e7945f&chksm=fe79d913c90e5005fc444c984b35741e6b02b8c8d9fc7f2c7ed633ff0dccda7ee1586367befa&scene=58&subscene=0": "Oracle 2023年7月补丁日多产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517101&idx=1&sn=b0c111a99bc956b2107431d6ebb95ab6&chksm=ea94b2c7dde33bd16109770cd4770a6f7f989e459557db59356249469c17b8d71240693faa1a&scene=58&subscene=0": "Google Cloud Build 漏洞可使黑客发动供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517101&idx=3&sn=4586afd90d79f3ea05777c153e54e3b9&chksm=ea94b2c7dde33bd1f6e95273014ab0c8f7b74d0fc58e85898d7611dcd45fce260bb851d6ebfb&scene=58&subscene=0": "CVSS 4.0 发布,助力评估实时威胁和漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247491357&idx=1&sn=000a3e4c9ae19ef9fea2edb143d9333a&chksm=96db14c7a1ac9dd10b688a03e96aa79c6147a2ffb1215f1a963c844432954358f825be48f9c4&scene=58&subscene=0": "2023攻防演练必修高危漏洞集合", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045433&idx=1&sn=894de6e0f80de8813ca812b0e7eeaec1&chksm=803fab67b7482271ea3eca2005bec5145d42a523ffb40cc9d85b8a3064ba949037bf68117ccd&scene=58&subscene=0": "【漏洞预警】Linux Kernel 权限提升漏洞威胁通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488410&idx=2&sn=75607f118aa6bc12041cedfef0096376&chksm=c2c64491f5b1cd87dbb6428f1141d33c8b10928c9a8aadc76cdc9cf42981034d96ec60d5973d&scene=58&subscene=0": "【安全通告】Citrix ADC及Citrix Gateway远程代码执行漏洞(CVE-2023-3519)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519686&idx=2&sn=8390b80d386d4d107942a3418c1cb7d3&chksm=ce4606d6f9318fc0cb6b93af87910437602829d46be0198655b5c0af62a72fc04c3e2999e16b&scene=58&subscene=0": "【漏洞通告】Citrix ADC及Citrix Gateway 远程代码执行漏洞 CVE-2023-3519", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519686&idx=3&sn=2a51c2499b7c6f2474f75bbc4f4fdc40&chksm=ce4606d6f9318fc055a23e79fdf9990d3cdbcfc048fe80faea573235809863c02bcd5a8fb3e9&scene=58&subscene=0": "【漏洞公告】Spring Security 身份认证绕过漏洞通告(CVE-2023-34034、CVE-2023-34035)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664188610&idx=5&sn=c249fab50e5492c9559105a2e91f9976&chksm=8b59483bbc2ec12dcaa5ecd11305de75d1b61839b33a9dbc3dda00d56077a4cfc579739c46f3&scene=58&subscene=0": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247497684&idx=2&sn=e93c8cdd4837ba647b9a61d2b8b7cc4c&chksm=eaf9bf98dd8e368edd37b3384678f0760730b61ebdc62eb8e8358db5ed3180ea4a1a1149af44&scene=58&subscene=0": "现金奖励| 2023补天通用型漏洞专项活动第一期来啦!", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519696&idx=1&sn=d6ec619c4af40a939aa2d0c4c5983dad&chksm=ce4606c0f9318fd6960f75538081bcc23f14c65abb2a29a418a81b01b0ac836b5e8a79cab6a7&scene=58&subscene=0": "【漏洞通告】Atlassian Confluence 远程代码执行漏洞 CVE-2023-22508", "https://mp.weixin.qq.com/s?__biz=Mzg5OTQ3NzA2MQ==&mid=2247486801&idx=1&sn=45042aaae9fd45a42d840dc3ac29a58d&chksm=c053f67bf7247f6da477351737d3192afbd045841f8af864022a23730bfe356db92354081686&scene=58&subscene=0": "CVE-2023-34192 —— Zimbra XSS To RCE", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247507248&idx=1&sn=713ad24b77c2c71419f9e2c735065bfc&chksm=ea662a47dd11a351c62b60f5f172302ca85912e2931af83ac4d979f4fdc53f9e5fa2aa5e85cb&scene=58&subscene=0": "BCS2023威胁情报技术论坛——《漏洞情报:走出漏洞处置的泥潭》", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499208&idx=1&sn=e99f6397a57e63b8cb415fcf586b0473&chksm=fe79d950c90e504603460538fbca4a08e80e7785568286a786620e604c09b22b6ffe3d114a34&scene=58&subscene=0": "BCS2023威胁情报技术论坛 ——《漏洞情报:走出漏洞处置的泥潭》", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499208&idx=2&sn=4fce93f53577e992ba0ecb0df96f8882&chksm=fe79d950c90e50465547dcc5215d1d879fc3b97fceda1fb4b73b7e5155e30064d9eec8031308&scene=58&subscene=0": "OpenSSH ssh-agent 远程代码执行漏洞(CVE-2023-38408)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499208&idx=3&sn=ea78ed01984c8162e634097022707909&chksm=fe79d950c90e50461b3bf692fdb737afb57039bdace80e60b1aa0c113c74e0be7d2d5603299a&scene=58&subscene=0": "Atlassian Confluence Data Center & Server 远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499208&idx=4&sn=69661c101bfd2941e3d18cf1ecd98a79&chksm=fe79d950c90e50460932242b4a4011b7826c238ad124d7ce520687bdb6b0286a2dc9e3bc019d&scene=58&subscene=0": "Spring Security 身份认证绕过漏洞(CVE-2023-34034)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509203&idx=2&sn=857e3f3f7d75c7ab00a0cfe58bac34b5&chksm=ebfae3f3dc8d6ae52d72e529a33b898fd95520430bd64ef2ee8fdd4670cc5acd294affe0f31d&scene=58&subscene=0": "国家漏洞库CNNVD:2022年度网络安全漏洞态势报告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247493624&idx=1&sn=8a14583af1defacd2babe8e294ffc010&chksm=fe26e2f9c9516befd11c73b35650a36f2d7c59c28209b012b0ecac86d2fd9b5bf92d370ec0a2&scene=58&subscene=0": "CVE-2023-38408:OpenSSH ssh-agent 远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651124919&idx=2&sn=1b4783e4159523cf12f31fdccb4a89ea&chksm=bd1444648a63cd72073b0b1e5551e543c5980a4f9b98a75c325e427c4af896f0259fd3cff431&scene=58&subscene=0": "CNNVD通报Oracle多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664188940&idx=1&sn=2cda9ca456151e503d2ab37bae82c5c0&chksm=8b594ef5bc2ec7e39814453a5fa57ccbd7ec86e086bdeaddfb60290ff60befb8edfcc3513231&scene=58&subscene=0": "CNNVD发布《2022年度网络安全漏洞态势报告》", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247497695&idx=3&sn=890274cc139a71747d20b481f503a63f&chksm=eaf9bf93dd8e3685494a3fa206c7e9fb77d7f24c525f60d6e9455735f45310d5c6ea78e3f1f5&scene=58&subscene=0": "现金奖励| 2023补天通用型漏洞专项活动第一期来啦!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517127&idx=1&sn=74e944a2a7142293f94b417dd8e62970&chksm=ea94b2addde33bbb2f499dd4d4e1637c58c5a7c66b5757d75699678391447fc6feadccdeb10a&scene=58&subscene=0": "AMI MegaRAC BMC 软件存在多个严重漏洞,可触发供应链攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458510132&idx=1&sn=89ff1eb23af91def9ef50a1dc3a28878&chksm=b18ed3be86f95aa8083bcf5d09670cf6debd41a6ab5f68fb58c1bc957a058b35db474703e0d4&scene=58&subscene=0": "命令注入漏洞CVE-2022-26258复现", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651124938&idx=1&sn=62869991ab75d8c01f3130120ce13230&chksm=bd1444198a63cd0fa8b8a6c12a1055d4963ff07b863cc8ebd691744787b202432f3a16ee5c0f&scene=58&subscene=0": "开展网络安全漏洞扫描的10个关键步骤", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499238&idx=1&sn=1a817786920836087f286c10ef072993&chksm=fe79d97ec90e50682acab11d45ffef11b815ae4600335630e540b13480f5123178078e3ade4f&scene=58&subscene=0": "2023年Q2季度 | 漏洞监测报告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247564396&idx=2&sn=bde45456f2d1ab03e06d2fedba143d33&chksm=e9142c56de63a54058aaf6e8471f2e7e992fcf7df08c9b02b62d73c9d80373b8232463330fe6&scene=58&subscene=0": "恶意软件伪装成漏洞PoC进行传播", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519718&idx=1&sn=0020681837b853f7bb190029406ecebc&chksm=ce4606f6f9318fe025af9b57facc1ed87cd2684216a3f96ae468272762a330eed234873bc3fc&scene=58&subscene=0": "【漏洞通告】OpenSSH ssh-agent远程代码执行漏洞CVE-2023-38408", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493633&idx=1&sn=dc74311bc14a72762a1eb08746ae319b&chksm=fd74d8c8ca0351de9ad10dce982e15b68371f567dfe602219d107aa36d78e8a1f7cd32d6033a&scene=58&subscene=0": "CNVD漏洞周报2023年第29期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493633&idx=2&sn=395d4c159f58ef831fb507dbb8c2a1ba&chksm=fd74d8c8ca0351de1400460e03664e7b2b7a66ad30eede96c2b112b099da0423166cdf3e3282&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230217-20230223)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502228&idx=1&sn=26b90b4c7f24d5f14440033c5cb1e187&chksm=f2585b67c52fd271163bd7fff3f1bf81e204e8ef119ed37ee29bcb66cc5d883816f838877058&scene=58&subscene=0": "雷神众测漏洞周报2023.07.17-2023.07.23", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247538859&idx=4&sn=c0a559298993feefb94a2b3db45ea99c&chksm=fa93ee6acde4677c61a5ee22dad8c0b2dedd4e97a2c5b9498ff8be2338995299b0c0112f801e&scene=58&subscene=0": "数百万台计算机中的固件漏洞可能使黑客获得超级用户身份", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458510261&idx=2&sn=95534e1d9859ce12ff979f19e0893861&chksm=b18ed33f86f95a29de6ca959c0ed435aede7cc2093d0c9de0209ddfa143fa9b6d72cee985280&scene=58&subscene=0": "黑客正在利用Citrix新0day漏洞,全球超过15000个Citrix服务器易受攻击", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498515&idx=1&sn=320b954692dd394322c84aa36d0f27e2&chksm=973ac871a04d41672cc4e6fd9841a8396e69decca3260f8151cea03a3d99822b81e8c9742c75&scene=58&subscene=0": "CNVD漏洞周报2023年第29期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498515&idx=2&sn=2fdac7dc1294a7427d0ca594ba856f70&chksm=973ac871a04d4167664ee1aa4a56fd9001f4e2c812def1a67bee35cc507cf1dff8f3f1979e95&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230217-20230223)", "https://mp.weixin.qq.com/s?__biz=MzIzOTAwNzc1OQ==&mid=2651136567&idx=1&sn=8eca396b89ef4f9b1bb67f44e8dd2ffb&chksm=f2c12357c5b6aa415d837ee98a4e9bc19b0a088bd9aade1a2b19739ce3a2601f22209565697c&scene=58&subscene=0": "KCon演讲议题巡展|Tai-e: 基于程序分析的安全漏洞检测框架", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499250&idx=1&sn=e69ac9665b28dcbf593b57b22373b16e&chksm=fe79d96ac90e507cbee1460132be111df391a4ab9b07d72ba79c1458f08eb2159d20099484fb&scene=58&subscene=0": "Apple kernel 安全特性绕过漏洞(CVE-2023-38606)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499250&idx=2&sn=849de8a1b63d6468f2c4ee76a22c3e31&chksm=fe79d96ac90e507c34e6986978d6b68795c519b5b273bc8222c6d1bbe1af81c11a2490e728a9&scene=58&subscene=0": "Metabase远程命令执行漏洞(CVE-2023-38646)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247519766&idx=3&sn=626b32056bb5d2e49f449d5e455c89d4&chksm=ce460506f9318c10406f8ee79b6f56705dd4011b77467ac14e9fc7d8a9784f3478b3e77ebb13&scene=58&subscene=0": "【漏洞通告】Apache Shiro 目录穿越漏洞CVE-2023-34478", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487732&idx=1&sn=19e48397819e052e795c4fb282d65ca8&chksm=fb029daccc7514ba69f41fc6cbed948032b92dfdbe71c671dc716f54e8c46d96b07efb162ed1&scene=58&subscene=0": "好工具分享:Web漏洞fuzz神器 Arjun", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247538754&idx=2&sn=77f861e3caa4f22514ff83a71f8c92f5&chksm=c1e9d413f69e5d05165a935cb84402707620902ec96be1aaaa5449a572d1e2521f6f11e92d9b&scene=58&subscene=0": "恶意软件伪装成漏洞PoC进行传播", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491655&idx=1&sn=e7ba2a26b4db9f5c1adacac5300f7048&chksm=96f7ff2aa180763c1329aae675b3570d10e14f96855cce8bd0e4ac0c834c234d9c21f0476f5c&scene=58&subscene=0": "风险提示|Metabase远程代码执行漏洞(CVE-2023-38646)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502621&idx=2&sn=15346f6e1fe6ac6a68bd29d747c98849&chksm=cfcaa809f8bd211f7f65c559849c9d47127d75e8136182a4e94bc53d0bdb33421c118e7e47d7&scene=58&subscene=0": "别急着修!Apache Shiro 最新身份验证漏洞实际很难利用", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499263&idx=1&sn=486a35d69c07545d3efb8a1d322c9ea8&chksm=fe79d967c90e50710bfcbb52fb39615338f894dcf3ddd080fc1fdfd42d16ec9e6ff7c3284509&scene=58&subscene=0": "【已复现】Citrix ADC 及 Citrix Gateway 远程代码执行漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499263&idx=2&sn=d05107c61448ff746d2b08162fcb72c7&chksm=fe79d967c90e507187ad54cc0778c72ad3685d9a847105c1817f16603326d3321ad27131874d&scene=58&subscene=0": "【已复现】Metabase远程命令执行漏洞(CVE-2023-38646)安全风险通告二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499263&idx=3&sn=563e9d181ce1ea4d3dc8ddc9d3fc1356&chksm=fe79d967c90e5071271e8681475c78a770188268833e3bfe56a35b49e3548cb2a33148eef68e&scene=58&subscene=0": "【已复现】Apache Shiro 身份认证绕过漏洞(CVE-2023-34478)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652040378&idx=4&sn=a6770cb53a5583f0e8b921778dacfca5&chksm=f36fc0fac41849ecaefef66e916873551746f8c0e7a59be9c75cb86aab177b0f7d36120b18f8&scene=58&subscene=0": "【安全圈】所有 AMD Zen 2 CPU 均受影响,专家发现 Zenbleed 远程执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517225&idx=2&sn=cfa4e9c7c012a88ff6a1ca8ada75564c&chksm=ea94b543dde33c556be2fcb984ebb556ca8d5f6654c7938d9996636b045518ace000eb82f2b6&scene=58&subscene=0": "新Windows?! 苹果再修复已遭利用的新0day", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509264&idx=1&sn=8ef440293d0677177f5b04eb1cf8696f&chksm=ebfae230dc8d6b26084833e5006dcce396fcb5e145f9c54e57223de7ed1e615d7432312a6e08&scene=58&subscene=0": "TikTok未修漏洞节省数千万美元,一年后在海外大选期间遭利用", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247491380&idx=1&sn=2f40dddc4328508d2b91786d45e8b300&chksm=96db14eea1ac9df856a953e4845a7f53ff87ecd25135280183d097f26654d15d852c02a03e82&scene=58&subscene=0": "漏洞情报 | Metabase 远程代码执行漏洞(CVE-2023-38646)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458510764&idx=2&sn=4c9839f9d021cdb18fa11e50c7846ff4&chksm=b18ed52686f95c304025d30b081318adae6451ee201c61b732540291b705724581c41038a7c2&scene=58&subscene=0": "研究人员披露MikroTik RouterOS安全漏洞,数十万设备面临风险", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502633&idx=1&sn=383cc8a77f6ba489c0e9bc6c722828e4&chksm=cfcaa83df8bd212b7efebaa31d91ac9762b7d3cb78e83bdb126aacab47f46caf6c71fe0b0c96&scene=58&subscene=0": "漏洞通告 | 泛微 e-cology 前台文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247493879&idx=1&sn=180d8c09cd0e3aab39eb42305fc18ac2&chksm=fe26edf6c95164e0d2d08314778f2cbb6a822574d80a56dac1ecf1a4a446dc00b0cf534da1b4&scene=58&subscene=0": "CVE-2023-34478:Apache Shiro 身份认证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045457&idx=1&sn=81fcd58dca0f94a944c9276dd8db1a03&chksm=803fab0fb748221971735f68c8bf6a7e48264465b7ab4685707e4f756208942e1b8e0fbfbf16&scene=58&subscene=0": "【漏洞预警】VMware信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517243&idx=1&sn=a9d490b0fe3c69b9beed676a4ccc3e0e&chksm=ea94b551dde33c473e54e115f39d74066be049818db17f214e1674f3045916cd7ee85729c8b7&scene=58&subscene=0": "MikroTik RouterOS 存在严重的提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517243&idx=2&sn=329c721e1fa372f0edbd3acd7c5e9f14&chksm=ea94b551dde33c473259bf586af36e37db0dd338a1c952035c402307d640678be061c2fcc4b5&scene=58&subscene=0": "Ubuntu 内核存在多个提权漏洞,近40%的用户易受攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517243&idx=3&sn=aec30860da6f2a9d9af2ea532a32b258&chksm=ea94b551dde33c4713eeba8084b8b9a9eff3f5fb6ef34ea6ac25267f911bc21fd317e9ca8c8d&scene=58&subscene=0": "Apache Jackrabbit 中存在严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517243&idx=4&sn=511caf97dafdcde1dd21fcb95768e980&chksm=ea94b551dde33c47b6a71354af1737e8e593836833549d175113a7bb57e05b10bb109b58b71b&scene=58&subscene=0": "TETRA:BURST:热门无线通信系统中存在5个新漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247502373&idx=1&sn=207a1c3151f1cda503bda8fed22ffd2b&chksm=c2d1b681f5a63f970a603d98bcfe84360bf5d318483b449598c256e23f2a18a78d62e0103e2d&scene=58&subscene=0": "发包工具大升级:poc", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652040464&idx=2&sn=439d05a020a648840737075413ed0e38&chksm=f36fc150c41848464d2a601bc750a28094c84df6c389ae4aba261c7434e4e00489f268506baf&scene=58&subscene=0": "【安全圈】Ubuntu 曝出两个Linux漏洞,近 40% 用户受到影响", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652040464&idx=4&sn=2b549225fcaa4938d23bca7cd57cfa46&chksm=f36fc150c41848461342ac41eeae245ac066f245eaf8da28e03462fb2c505e0f60b7f26a8c4a&scene=58&subscene=0": "【安全圈】TikTok未修复漏洞节省了千万美元,结果大选期间遭攻击", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487739&idx=1&sn=1c7a6fd32c1c2e6dcdc897a8504543eb&chksm=fb029da3cc7514b584e1e88942b44bd119c54154b3d1fc2908e60a8a17c00ec8c05919cd5632&scene=58&subscene=0": "风险提示|Metabase远程代码执行漏洞(CVE-2023-38646)", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247538929&idx=4&sn=3b84bafaf5ff532f976de265e9e9bee9&chksm=fa93ee30cde467261d08acc70e00e6a0cd896b3a252ad6feec21fd4b4411f7a38efb2d7d0cb0&scene=58&subscene=0": "超级管理员权限提升漏洞使90万台设备面临风险", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247538835&idx=3&sn=bd00c6fc2d5b61352ce92b7713f1f3f6&chksm=c1e9d4c2f69e5dd452b18a1a1610a55bbe71890013ea44876ead81b171d52a52a136967c750e&scene=58&subscene=0": "TikTok未修漏洞节省数千万美元,一年后在海外大选期间遭利用", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651125017&idx=1&sn=dfe8a7a6887a760f1a2c871958f03814&chksm=bd1445ca8a63ccdc7fd04e18773945023c942acfab39a3a8092ce31cc9723e3da68843bf40b9&scene=58&subscene=0": "云安全漏洞管理的原则与实践", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502641&idx=1&sn=2717d7710bcb50d64e6fdc702fd8e57d&chksm=cfcaa825f8bd21334d74444e8733c4fbf93bcfb6367a352dc433b78e438e0cea81f3816166f9&scene=58&subscene=0": "漏洞通告 | Metabase 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247529429&idx=1&sn=823772f28e4bf9dc1f387eebad6e25e5&chksm=eb849875dcf31163432df4fd6959b52d7d01f5b9a7283c2e060f36a9d6975e354284d017a20b&scene=58&subscene=0": "漏洞分析|Metabase 远程代码执行(CVE-2023-38646): H2 JDBC 深入利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517276&idx=1&sn=4af5856a408590c04f66b8cf7944909b&chksm=ea94b536dde33c20a349d0ce168088e20f1710c32321c5af387665d68fc566998f5763f5cf27&scene=58&subscene=0": "谷歌发布2022年在野利用0day年度回顾报告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517276&idx=2&sn=0fe8d060cc5c519d99f3e936383d6905&chksm=ea94b536dde33c20a01f016bee84519b7931877eb62ae99de7f03d559b786d4f88d6bd29678e&scene=58&subscene=0": "开源BI分析工具 Metabase 中存在远程代码执行漏洞,未完全修复", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491664&idx=1&sn=ef84c66afc7804d32d00460f9238fb5b&chksm=96f7ff3da180762bca9bff1e75b08cd01bfdbe601db9daf0322774fa149b8eeab87711d37881&scene=58&subscene=0": "风险提示|泛微OA e-cology 前台文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247515119&idx=1&sn=103827169ed08a4ed01999526e2a3eb4&chksm=eb7065d0dc07ecc64f07b36a8ea95df4e43aedab6c9ac65ad998243571e3c1f8c01a3b916f7a&scene=58&subscene=0": "【火绒安全周报】亲兄弟合伙窃取教育机构学生信息∕TikTok未修复的已知漏洞被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247497758&idx=3&sn=c2433bbba53640eaba4a2271b28decd6&chksm=eaf9b052dd8e39441064734b2f3b87f07e7e513cdb7f403b3bc51ec698d09cf0bae2433af52a&scene=58&subscene=0": "现金奖励 | 2023补天通用型漏洞专项活动第一期来啦!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652040612&idx=2&sn=f0543a5651872e75d69b8047d73e12b0&chksm=f36fc1e4c41848f23937fef04ce89aa8feeb7e76df05da12a8b662261747e2c5ba507a59c608&scene=58&subscene=0": "【安全圈】全球92万台!RouterOS漏洞曝光:设备面临大规模攻击", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247564759&idx=1&sn=3b5923ba278b90efdb0b1180b6178b70&chksm=e9142dedde63a4fbc4cc75725f526489af19ce5e823b6a3c6171c71db10035a48e8b7ae9d368&scene=58&subscene=0": "【技术原创】Veeam Backup & Replication漏洞调试环境搭建", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520309&idx=2&sn=af5f74514a34486d2c33e695ac25c3de&chksm=ce461b25f93192330e8bd6089e33c7babf8588ab5c3774eb2991b80af04b41d04445f2df3821&scene=58&subscene=0": "【漏洞通告】Metabase远程代码执行漏洞(CVE-2023-38646)", "https://mp.weixin.qq.com/s?__biz=MzA4ODc0MTIwMw==&mid=2652538336&idx=1&sn=d8cb4b43c71cdf945602ebc11147ef78&chksm=8bcba1dcbcbc28ca7e7de8e59cfcc6b4afef50e93ea526cd1c23de528ecaa9b999c0bb5a91b6&scene=58&subscene=0": "奖金累加上不封顶!BSRC启动首次隐私安全漏洞众测", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247498327&idx=1&sn=e0ba190529b0f7d3af107b002efbbb6d&chksm=cfc55d08f8b2d41eac418635b9576da3ad7516718cc901abe0d93b9733394512d0d16d7a126f&scene=58&subscene=0": "发力车联网漏洞治理,360提升车联网安全防护能力", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652040716&idx=4&sn=bee4a78022fb8a8baa8d665df35fcd78&chksm=f36fc24cc4184b5a5fcf151fa95b907050c1cff9fc0a6800d36ab8b997f3e7ccf5f86526dad3&scene=58&subscene=0": "【安全圈】WordPress Ninja Forms 又被曝出严重安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247488142&idx=2&sn=c152b396aac5d6635333777ab3e0b59f&chksm=fa5abc63cd2d35750c79f8b8d5bf5618031bc8b1ce6e86d29fd3270a8b1fa3bb0173bd57b135&scene=58&subscene=0": ".NET ViewState反序列化 (十三) ViewState RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652040793&idx=2&sn=902fb0fe35e67f134b17cc8e446c5de7&chksm=f36fc219c4184b0fd48ce5b541ab374793858b947331126216393414fa3d2f60fa7a2b097cb8&scene=58&subscene=0": "【安全圈】全球紧急服务通信协议曝出五个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458510986&idx=1&sn=0d028b0c7abaeade83a18ae861373954&chksm=b18ed60086f95f16409be42955524e847e0dfb90bb341cc573caa3f9f3fe9a823b7c8dcacb4e&scene=58&subscene=0": "命令注入漏洞CVE-2022-34527复现", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458510986&idx=3&sn=d1e528af52c6a28389dffa23d351c311&chksm=b18ed60086f95f16031c4d6ed5bceafc1e888963cfe3f76101c8fd7cde836c1189dac9a0261e&scene=58&subscene=0": "赋能企业安全!系统0day安全-二进制漏洞攻防(限时75折)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517282&idx=1&sn=92bc54d50120e90cdb14ffdc9575e7e5&chksm=ea94b508dde33c1eb06b110c0e5f8a197bfcb980488faddce9fee996ea1be88dc50821b49082&scene=58&subscene=0": "挪威政府机构遭攻击,黑客利用的不止IT巨头 Ivanti的一个0day", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502246&idx=1&sn=c985517412ae45a2a3eaac1432271002&chksm=f2585b55c52fd24371534ce41d7268c17acadbdcc4e5d46c6364a11930d3b6254d8d70d93883&scene=58&subscene=0": "雷神众测漏洞周报2023.7.24-2022.7.30", "https://mp.weixin.qq.com/s?__biz=MzIzOTAwNzc1OQ==&mid=2651136790&idx=1&sn=1a50f5b8dc85cd4c3af37fb659849003&chksm=f2c12276c5b6ab602378c81d3c3c3bd997c854c47d0c9197e73229adf7f069b18b0b4aaf9915&scene=58&subscene=0": "KCon演讲议题巡展|AI对于代码审计和漏洞挖掘的作用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652040914&idx=1&sn=a861d568b75d247080ea3a4d52defcae&chksm=f36fc292c4184b84e0cc5811ddb95f946ff77dc4a66f5813ec814cb6fbc8d759789f73a70e7f&scene=58&subscene=0": "【安全圈】勒索赎金超7亿元!2023上半年最“费钱”的漏洞来了!", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493665&idx=1&sn=7b66b974f4526698636015196931c379&chksm=fd74d8e8ca0351fe28a72a41ad55ed723450f08b49c94ed636088b58d7490e37d14178c060c8&scene=58&subscene=0": "CNVD漏洞周报2023年第30期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493665&idx=2&sn=3c70abce74aa7615d35e001dbb4f18ad&chksm=fd74d8e8ca0351fe7b7fdf665c10a091fc52ad7c1211240660b98c6038436ce898669e77dfa2&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230724-20230730)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502715&idx=1&sn=bb7ffa48bd998f01a59b5fa047be069b&chksm=cfcaa86ff8bd2179c9b829dc7d93bea4c5ab0521192f9bdfdf86ffe26839543c60b469788743&scene=58&subscene=0": "漏洞通告 | Smartbi 权限绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458511138&idx=2&sn=4a1d4fa601f495dd5eeaae9fdfc9b9da&chksm=b18ed7a886f95ebe3cd2ab7fde7fc963b9becd947858048e04da6452470336aff7236f0c6447&scene=58&subscene=0": "热门游戏《我的世界》模组存在RCE漏洞,已被多次利用", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499289&idx=1&sn=82c70d805070e91f33a0de8d9cbf1f43&chksm=fe79da81c90e5397f945a682983879408e1707be9b6416d97898c8cfe3136c9e2397f856909b&scene=58&subscene=0": "【已复现】Linux Kernel权限提升漏洞(CVE-2023-3269)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517295&idx=2&sn=2c61b03a254eb41986877bc9977f28d5&chksm=ea94b505dde33c137d2d2dcec01ebd94afa1b449dd12ce0261075f458567109501412321929a&scene=58&subscene=0": "美澳提醒注意 web 应用中的访问控制漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247494064&idx=1&sn=5a5f2d18cdf4ac177c334046c95b20c8&chksm=fe26ecb1c95165a7f746f0bccfb5866df6b1f5637e1633578d782304bd8ca4dcc3a4b5051c80&scene=58&subscene=0": "QNAP 多个高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247501899&idx=1&sn=9e7937d4b847dcfe2be780200c020741&chksm=fa521df5cd2594e386f80c9ce1b702f757297a9bc63a491a3ccd7d39723eb93393028c2c7b2e&scene=58&subscene=0": "Vyper 智能合约重入锁防御失效漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498573&idx=1&sn=6378da1a6d84b564151c5ff60c3dbdb6&chksm=973ac82fa04d41393ae79e16622e0e58a8aab3f1aaaa62179a1dffd255623e6dde2c8b3aa59e&scene=58&subscene=0": "CNVD漏洞周报2023年第30期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498573&idx=2&sn=56503dd44dc678c6459ba987434abcfe&chksm=973ac82fa04d4139b2010ffaebf54d43ed53cc01fe7f5dab2af2c455d31e0c4c7cd531846c8e&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230724-20230730)", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491680&idx=1&sn=5a3e981c1052bd15ec5f6e2483132a11&chksm=96f7ff0da180761bb48d115b5b6efdd2edf45b0a257a10454dfa577920b9c6dc511a77225281&scene=58&subscene=0": "风险提示|Smartbi 权限绕过漏洞导致后台接管", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247564910&idx=2&sn=1b173c442d7d628b2b76514306484dbc&chksm=e9142e54de63a742bb33bb9fe90e53feca460d42d3b70b259834bfa51a6d1f7e7976488374c0&scene=58&subscene=0": "综合分析CVE-2023-23397漏洞初始攻击样本", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487760&idx=1&sn=7d39d8966ac8fac50e5540e4d549f5c2&chksm=fb029c48cc75155e9e4de8405985f8b2806bb4e128a232b5bea8250710ff225672a7bdf3510d&scene=58&subscene=0": "风险提示|Smartbi 权限绕过漏洞导致后台接管", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499295&idx=1&sn=1b3a8a3387f2cc4c90405bd501270b66&chksm=fe79da87c90e53916f816d20c0e2a7d098ea0dde447e03517b6a00f57ee3e1dc63a0bb9c5e1b&scene=58&subscene=0": "【已复现】Smartbi身份认证绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247529590&idx=1&sn=1c31354c67dd41b2a44e0b3205c01ab5&chksm=eb849fd6dcf316c01d09f9ba703dafa48132b0205be239fb78c38a9a76ca801f2a5b2a3738a6&scene=58&subscene=0": "漏洞分析|Adobe ColdFusion 序列化漏洞(CVE-2023-29300)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520319&idx=1&sn=15cfe96185c4eb2f100b1773da3cef8c&chksm=ce461b2ff9319239bc6f2082c9642f8484f316f00c80c4284e33225809870131a486697b2633&scene=58&subscene=0": "【漏洞通告】Apache NiFi 代码注入漏洞(CVE-2023-36542)", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247491395&idx=1&sn=7792892771fb7c40cccccee7eb8ebf0f&chksm=96db1499a1ac9d8f47f8a756dce0d06cffa4ef05265e4ab56d4cb695b1b1eb8a2ed142935b95&scene=58&subscene=0": "漏洞情报|Smartbi 未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652041097&idx=1&sn=b39d2ccb74fbcd5cfadc2cf52d7535b8&chksm=f36fc3c9c4184adf36a9fac63f571b445cd449b0e9244654be9c5f5f753a48345bda297766fa&scene=58&subscene=0": "【安全圈】Ninja Forms漏洞危机:900,000+站点面临潜在风险", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487762&idx=1&sn=857d02153eb02af80d942c8464b65197&chksm=fb029c4acc75155cd3b8eee46a7cca03a112108f5f4fcbb6b7bcd560925809520ba4833feecb&scene=58&subscene=0": "nacos 身份认证绕过漏洞(QVD-2023-6271)", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650969682&idx=1&sn=797855374d00ad6985c62c1abd053e38&chksm=8079d460b70e5d76fbd5b83786ee943e008c8bc7dd7d78a15957181d700211072b0c3f7df6b7&scene=58&subscene=0": "404星链计划 | 5 款全开源的免费漏洞探测工具", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509405&idx=2&sn=d21181bbdd306c3f1da1022ef7d4a887&chksm=ebfae2bddc8d6babe39030cf64a2f51703d2e29c098e8905754573c4e90098a5d9db557f585e&scene=58&subscene=0": "热门游戏《我的世界》模组存在RCE漏洞,已被多次利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517307&idx=1&sn=26cfad6c669ec577ec8907950826b5c8&chksm=ea94b511dde33c077dd3527a4599003fb1642d19fa4d39f96bb7d85c79dc6bf7f0166a73df88&scene=58&subscene=0": "Salesforce 邮件服务0day用于钓鱼攻击活动", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247502367&idx=1&sn=7bc6a334a6c3f43abf6fa757e470e1dc&chksm=c144b8a2f63331b4bc3f96294f00a179c6c671e5eb9c922631ead7651d3720ea67deaf93b233&scene=58&subscene=0": "“卫星安全”背后的秘密:软件和固件均存在漏洞,几乎是“裸奔”状态", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247491517&idx=1&sn=94aa89cfa11fdf1c9458914cb6905452&chksm=96db1467a1ac9d713ece80e49690d49527896fe9185940f03626b368ee140e981c8304445285&scene=58&subscene=0": "2023攻防演练必修高危漏洞集合(2.0版)", "https://mp.weixin.qq.com/s?__biz=MzIzOTAwNzc1OQ==&mid=2651136930&idx=1&sn=7812346600e1480ce80d045f317603d3&chksm=f2c122c2c5b6abd47e0c74491b05e30ca36f04043013229dd43107001f189d737d83b64d15ec&scene=58&subscene=0": "KCon演讲议题巡展|闭源安卓系统下的漏洞自动化发现之旅", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458511529&idx=3&sn=8c8ddb0e02e8cd33ea9217b33212db10&chksm=b18ed82386f951353a0aae66f5f36fc03c622ece13520a71496744eb4d40da526c72f9473358&scene=58&subscene=0": "CISA公布了2022年最常被利用的12个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657164611&idx=1&sn=cdb1e4da26943252a22c5e771b16a8a0&chksm=f1d4efa6c6a366b03c5745a214272fe28c16f064afe54e186539b40021fb97cc05cdbf6d4e6a&scene=58&subscene=0": "CVE-2022-30887(文件上传漏洞)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517324&idx=1&sn=fcb1dd9543642ee629606aecbbeff4bc&chksm=ea94b5e6dde33cf09a7babed3a61a2379955914e7340c99d74a64dd82396dc612b8fb0b73ddf&scene=58&subscene=0": "五眼联盟发布2022年最常遭利用的12个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517324&idx=2&sn=148eb4867662d131943cf25c80175992&chksm=ea94b5e6dde33cf0d8a2d47cf997596fef2f4a4cce32ddcc3df68065796ee8ad4be5dc6c9d66&scene=58&subscene=0": "Milesight 工业路由器受数十个RCE漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509423&idx=1&sn=34a6099e6da1476ed7f315831b3e2c7b&chksm=ebfae28fdc8d6b991002af660bfcb4626b96cc4786bf707679a730c4d623f1d922df8a2baa81&scene=58&subscene=0": "抓紧修复!2022年最常被利用漏洞清单,Fortinet五年老漏洞位列第一", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045463&idx=1&sn=acbc4594ee0cc580232576e4875215ec&chksm=803fab09b748221f48e54bc80be6e991a33a4c60eb3e3556bc493b124de359487b4e3404b741&scene=58&subscene=0": "【漏洞预警】Apache NiFi 代码注入漏洞漏洞威胁通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520333&idx=2&sn=3c5ace9d336ccc603bd0ff6313a09f79&chksm=ce461b5df931924be7b0faa9417d4352cf3598d23467095b7ec6fd81ccfd297454c6b506e421&scene=58&subscene=0": "【漏洞通告】Metabase远程代码执行漏洞(CVE-2023-37470)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520333&idx=4&sn=3b9063bc22ecfe16c5ddcc1da593b941&chksm=ce461b5df931924bde0762381c5efcb81edc59647984455b7b4ba5fa60e03f25344b4118ac3d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230217-20230223)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520333&idx=5&sn=4731e7b86bf1266ff336bde4a1e43414&chksm=ce461b5df931924b1fc3f53b39fbd367f2f31a1ae62b8b8f0220991ab91a4ce599521f620dbb&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230724-20230730)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520333&idx=6&sn=c4c67e0ae167e90567b80a508f692459&chksm=ce461b5df931924b5233b2d88c07ba82efea7d74513dbdbdd517f339268e46f4a8e172de43f3&scene=58&subscene=0": "CNVD漏洞周报2023年第30期", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247538955&idx=3&sn=e96eadeac1bd8b6617e411a9603a4051&chksm=c1e9d55af69e5c4cf8dfca2260b0f37c5861dd6a62b24302253ca407bdbe81a4657c7c84f2eb&scene=58&subscene=0": "半数人工智能开源项目引用存在漏洞的软件包", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520335&idx=1&sn=8b5dff9e555c4758efea49a6093727ef&chksm=ce461b5ff9319249e9fdc814058b306159de76e321d62aa7ca49477d00a36aa38885ad8ef5a8&scene=58&subscene=0": "CNVD漏洞周报2023年第28期", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458511583&idx=2&sn=5abcbfe9689cc31587ec3fa07f5217d3&chksm=b18ed85586f951433532f6e06b1e342136c87c64b365e740d5b7428e53edc06be6f464b0524a&scene=58&subscene=0": "赋能企业安全!系统0day安全-二进制漏洞攻防(限时75折)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502799&idx=1&sn=87f72b432bd40665572c9d626fd14045&chksm=cfcaa8dbf8bd21cd8cc6905079e58592f100388b0aca30a17833807e895f71ca17aeb4e1a418&scene=58&subscene=0": "红队最爱50个高危漏洞,马了赶紧修", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517335&idx=1&sn=fb6f828cad2dd147b64eb18c25e34e7b&chksm=ea94b5fddde33ceb6bbdf2cd3e5cda0f1103d555edec4b0e6008b76a45ecf4d51beda67e6305&scene=58&subscene=0": "PaperCut高危漏洞可使未修复服务器受RCE攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247498430&idx=1&sn=be6fc1d853f25c1e8c365885c615d832&chksm=cfc55de1f8b2d4f71eae248fd7dc0a6a94390ca699926751eea264a9ec10ade49d7537d074f5&scene=58&subscene=0": "三年内攻防演练实战总结,200+必修高危漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247500881&idx=1&sn=c86fbf5c42f9178d591341d7100546ba&chksm=ec9f1d22dbe8943498923c08aeac1fc8371be74811fc2f7a02a0325cc736cd32978f74d0777b&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年7月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484443&idx=1&sn=6a309a5029ab2670567d199816289765&chksm=c2b1066df5c68f7b50f74899e797c12a7de169dc78d2073017e4bd59fff7c2bf1d4e4a5d3f87&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年7月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652041451&idx=1&sn=6f5bd9b3a6801ab469fbc602a5998ecf&chksm=f36fdcabc41855bd943a95afcae93ee70122e56d148dedcbc9a4889c3111c7efeeec4e43b48c&scene=58&subscene=0": "【安全圈】黑客组织Clop发动零时差漏洞攻击,近600家企业遭殃", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520353&idx=1&sn=9965a19f51dfd4649a08ef06e913a2ab&chksm=ce461b71f9319267934d98badbbe56e84eacf2cd3181e29f102d022339fc7dabd5ca9efe5108&scene=58&subscene=0": "【漏洞通告】通达OA SQL注入漏洞(CVE-2023-4166)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520353&idx=2&sn=bca1eb7c09f375b2242d1b33ebcdc214&chksm=ce461b71f9319267a3262f0203e6d288609486957b479200587e64796a021d20dd5b17f1eb06&scene=58&subscene=0": "CNVD漏洞周报2023年第29期", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247565101&idx=1&sn=bf4eb692fd6ed4fae912ea01a97de36d&chksm=e9142f17de63a601b18a4678e18f787a6efa9b17e9f648e459ece1c8785d7c280d5fe34634fc&scene=58&subscene=0": "【技术原创】ADAudit Plus漏洞调试环境搭建", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493679&idx=1&sn=8b02c6da20ec3ad8ee699a7515981433&chksm=fd74d8e6ca0351f0c08f285eec79d8a52d436fb98fa463481c13f5a8848534556585573c658f&scene=58&subscene=0": "CNVD漏洞周报2023年第31期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493679&idx=2&sn=654cbb4eaca0b8bfe157ba8b1b8c50df&chksm=fd74d8e6ca0351f080adfd0a3c9b3d0f6ec570f7e52de89ca157e6d6eb8e124c1cca1a6f5742&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230731-20230806)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502858&idx=1&sn=fc907d27e828caf719a54d9717116813&chksm=cfcaaf1ef8bd2608bf7492e8e3ac078bcad968c637e7777625a0e5a878923f5da5a53c5771fe&scene=58&subscene=0": "漏洞通告|致远OA文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517346&idx=1&sn=dcb42c27a9ed130e2ed414e92a522703&chksm=ea94b5c8dde33cde439ed84e902f38cec723ed64a1fc2cd77d5d8c72b7068883f9bc90788a74&scene=58&subscene=0": "被别家CEO狂怼,微软火速且老实地修复了严重漏洞后......回怼", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502255&idx=1&sn=b605aa0fc6d1ef5726d3cd0d78b6e394&chksm=f2585b5cc52fd24a89b49198824fa84f7c9096e012f0e7bed381838f9b9ee3b8aa21796695bf&scene=58&subscene=0": "雷神众测漏洞周报2023.07.31-2023.08.06", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499326&idx=1&sn=02037a8614e42f34cedecd8261a7eb9e&chksm=fe79daa6c90e53b00ac3283d996d6c72db3ccc95b9d885dd8d79f8a43568ead5d6b6365d359f&scene=58&subscene=0": "攻防演练收敛已知漏洞攻击面,请更新这些软件到最新版本!", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498594&idx=1&sn=01a5a495981d7df06109ebc330f60efd&chksm=973ac800a04d41160f4a0d75dcf39e7cf69dc56e1f46df4a54cf08361f9e6a6f0b58dc1f061c&scene=58&subscene=0": "CNVD漏洞周报2023年第31期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498594&idx=2&sn=7719cb859059087ebc614a952ab650c0&chksm=973ac800a04d411667b1570f8c0c2ee3dfc953e11b449b452025a34ae55e71c3ef2c6392f496&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230731-20230806)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652041526&idx=3&sn=da030aad92f0c611891337fcf921fa75&chksm=f36fdd76c418546003f96f0c0506229f3d0d179149f90e6c560ea5c6c01ff41fd47345a2975d&scene=58&subscene=0": "【安全圈】Facebook企业账号危机:Salesforce漏洞成黑客入侵新通道", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539126&idx=5&sn=6c4e84b4f46c0ba4445d5f10002748a5&chksm=fa93ef77cde466617355f2a8e0f58d207e8ede5638858dedbb0d39b449127e92432ce16f6548&scene=58&subscene=0": "Facebook企业账号危机:Salesforce漏洞成黑客入侵新通道", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247502867&idx=1&sn=bdf4ddb32305e594c8cc9e0aacf9264c&chksm=cfcaaf07f8bd2611dad27aa939c7501e82316625e89dabd1376f3640fd08ac7103b5fd346e16&scene=58&subscene=0": "漏洞通告 | WPS Office远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247496039&idx=1&sn=13869cb9d150fafc58b51bf95d27178e&chksm=c063dfbef71456a84d7b59116e1dbaab0b1744b269c7f4d17b0b43cf7fecbd10811c4a7c6e0e&scene=58&subscene=0": "G.O.S.S.I.P 阅读推荐 2023-08-09 又见CPU瞬态漏洞~", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247494434&idx=1&sn=5fb75f3662223304e580c2fe87b58d55&chksm=fe26ee23c95167350ffc596b89c8554e01ff439a05f54b818f610e385b31920079f5f02cdf92&scene=58&subscene=0": "2023-08 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MzU4MjEwNzMzMg==&mid=2247493593&idx=1&sn=c4af3b00377a8692514c3bb95b8c9ef6&chksm=fdbfce72cac847649d805bd1c7890a84942e094f194175660cf5fa05e76de9d1e227292a19cc&scene=58&subscene=0": "IAST技术专栏 | IAST下基于请求调用链的漏洞验证方案及其问题", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499331&idx=1&sn=5c2f7f14cfed7d76ce94f142caf9a11b&chksm=fe79dadbc90e53cdd88c22b3346d91f3b0b84a6fe2c9b0893185026f0d4ab8567fdcf8ea2f12&scene=58&subscene=0": "微软2023年8月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247491597&idx=1&sn=bf626eed5b4ebc12087b425bbeb4459b&chksm=96d8ebd7a1af62c16333baa973b44ef41825f550b67045094a35cf02a175b50d5db6b4a58f34&scene=58&subscene=0": "2023攻防演练必修高危漏洞合集(3.0版)", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247515219&idx=1&sn=53b40e26ce1636a1107b3cf2e00a52ff&chksm=eb70626cdc07eb7a1ea78cbd7bcf6a22561c647a9863dc58c288eabeaf834ed84fc0baad5d8f&scene=58&subscene=0": "2023-08微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539147&idx=1&sn=9d7262b7f5c8d77f061a17ac5cd91a55&chksm=fa93ef0acde4661c255f06fe9923e7abc3939689877c148d689e98919243839a5f9897a26c25&scene=58&subscene=0": "航旅业大地震:常旅客积分系统曝严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045469&idx=1&sn=146ffafeda746741d69606fd61537efc&chksm=803fab03b748221568d58eaf72654e28de9ea3d60b47c11700f92f36774061979a7be01f16d1&scene=58&subscene=0": "【漏洞预警】通达OA SQL注入漏洞威胁通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458512398&idx=1&sn=e94173003b672140560834fae162b2e1&chksm=b18edc8486f95592f8a4f3736efb33b9069bd8cfa4c4abe6a1a5f1a4c6077e2486da858831d2&scene=58&subscene=0": "CLFS信息泄露漏洞CVE-2023-28266分析", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247502524&idx=2&sn=ffc138bf8851d6946411e5e8d660c7db&chksm=c144b801f6333117119431fe5ddd23dffe694179025286da07d5c4f6784f500c4b02ad2687e8&scene=58&subscene=0": "2023攻防演练必修开源组件漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499349&idx=1&sn=6bdcb194908f4694661fbb48a2e37582&chksm=fe79dacdc90e53dbfb2134731ee7926479bf097f8b9f835ac5ea9f4fdeeb2d74f5fecd1d808c&scene=58&subscene=0": "【已复现】Smartbi Token 回调地址漏洞(QVD-2023-18159)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509480&idx=1&sn=1e6e1dd3e9bb9d765a595f725995be0f&chksm=ebfae2c8dc8d6bde207bf527c9f499343a09e2c7ad6767cf15049a4fa322a2996f3b8410fc7b&scene=58&subscene=0": "美国政府发起超亿元奖金挑战赛,悬赏能挖漏洞的下一代AI", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487792&idx=1&sn=17ec955dc15f82ca9c7961629d3888b4&chksm=fb029c68cc75157e692bf21c513b8056a4971a73efdf5910b661ef44b33b88fa44ebd7a2f4b5&scene=58&subscene=0": "GraphQL API 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458512618&idx=1&sn=ab32e94019edabc828b92b00bb04b7ef&chksm=b18edc6086f955767a1dfc37e9375ab96447f5b8016d0e91d40d9dcee5cabd84541963c85852&scene=58&subscene=0": "D-Link Go-RT-AC750命令注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458512618&idx=4&sn=1c44c2ee9b7113706c57aaada44c8d66&chksm=b18edc6086f95576bfaccbc7606dc29fc528de2f92ca30f588d20220ca0857b13f99b54978f9&scene=58&subscene=0": "预售即将开班!系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517364&idx=1&sn=0937446fd50333a9a8fb6fe1f809bcb8&chksm=ea94b5dedde33cc8d61486458ef5a6c7588c031fb6dfce3c05350366debaedb3f7c0da9d2ff4&scene=58&subscene=0": "西部数据、群晖 NAS 漏洞暴露数百万用户的文件", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247539067&idx=3&sn=a7a75c79cc1778a589610c6804055f7f&chksm=c1e9d52af69e5c3c21d1626f98c421ca0efeaa81688cc3425b877459112f76941dc8ccede5c2&scene=58&subscene=0": "严重的AMI MegaRAC漏洞让黑客可以瞬间使高危服务器成废砖", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652041765&idx=3&sn=7122da67020670cfad662194bcef4799&chksm=f36fde65c41857735c9a6201de60c3a60ea19f6641dc350828879ac639e3ee59ba1ba92046d2&scene=58&subscene=0": "【安全圈】EoL-Zyxel 路由器五年前的漏洞仍在被利用", "https://mp.weixin.qq.com/s?__biz=MzI2NDQ5NTQzOQ==&mid=2247498621&idx=1&sn=dac4974847665c8a871a92df14b94fd4&chksm=eaa9735ddddefa4b368f264a7a4289cce27077ca46743862746e9701c86a7db319bde3b39068&scene=58&subscene=0": "【代码审计】WordPress 插件 download-manager 神奇的漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539197&idx=3&sn=262e2ab73b0f48bc5de9daafc5f2a813&chksm=fa93ef3ccde4662a21b8cba48ec708cc63eb470c16754f15ef69a42cce3cc03cb381ae807163&scene=58&subscene=0": "基于风险的漏洞发现和补救措施", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458512632&idx=2&sn=88ccdabafa9395c6bb807f35f1092f93&chksm=b18edc7286f955642f78e20e03d92c0a00b96987592e21ede6914a7707dd7984fef27104e2b5&scene=58&subscene=0": "CVE复现漏洞精讲-从基础到入门", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652041839&idx=1&sn=aa98805b041a61a1609e985298bbf60f&chksm=f36fde2fc4185739f7745bdc78faaf0b18b100e728bc1cfdaf87e12c1106c5073ed48705f77c&scene=58&subscene=0": "【安全圈】英特尔CPU被曝存在重大安全漏洞,可窃取加密秘钥和机密数据!", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247489319&idx=1&sn=922e12880a69292afb9f92d80c0c1371&chksm=fe2ee8acc95961bada79af1b82467967d078254881430abfb8d5bf3b04914389346a1a225af5&scene=58&subscene=0": "清华大学 | 通过攻击意图同步增强Web应用程序的漏洞检测效果", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517374&idx=1&sn=12d034509187f5a1ffad1d3d7be93a19&chksm=ea94b5d4dde33cc26330d27ea0f0629dceaeb2c31603dc8c6b20989ca3fda14c8fc08fca76fe&scene=58&subscene=0": "15个CODESYS V3 RCE漏洞影响全球工业PLC", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517374&idx=2&sn=6d9a155300780ffb8b966b2bbc21d887&chksm=ea94b5d4dde33cc296b93b32e5cd32ac9615348457175affa0556a82c0a3015f42839582329b&scene=58&subscene=0": "Python URL 解析漏洞可导致命令执行攻击", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487832&idx=2&sn=b9f5d6f9c29044cb0bc17cc87122420a&chksm=fb029c00cc751516c5167c97319fe8ad7bccf8838d34b51b7a7d5eb8e82267a0791ee4572732&scene=58&subscene=0": "零容忍!保护你的容器环境免受镜像漏洞威胁!", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247565557&idx=3&sn=5b98c359860331189626ae7f60dd2d65&chksm=e91410cfde6399d90632dafa41c795082c16c6ce9cf10c52e57eb795477da8d17e37d17bd059&scene=58&subscene=0": "进化中的勒索软件:不断发展的漏洞利用技术和对零日漏洞的积极追求", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657164625&idx=1&sn=d5d74b11c433aab63bd093ab7cc75982&chksm=f1d4efb4c6a366a2a47763e8dfab958667fa4919d50279c8f224ea72a37d91deb7633a482e73&scene=58&subscene=0": "Lexmark远程代码执行漏洞(CVE-2023-26067)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458512939&idx=1&sn=4c513a941804b06e9170713dc1bad023&chksm=b18edea186f957b7e4b8440ad8635500916b4dbdee105d88a0555bca05ca2cce962262b3eb43&scene=58&subscene=0": "Windows 2000 系统资源管理器的一个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517384&idx=2&sn=a3ac27cb893f93f4d515bb9f2533225d&chksm=ea94b5a2dde33cb45dfb944387b01581c10e3427af2b480354fb1f1599bc067b982a0c128fb5&scene=58&subscene=0": "福特车载娱乐系统中存在缓冲溢出漏洞,可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247539123&idx=2&sn=760abe8e1dbad6f5c4808b804619ecee&chksm=c1e9d5e2f69e5cf4033fc97a9e51155825c4e58eaf37e24ec35aa24de59d755b1f4b9583e808&scene=58&subscene=0": "进化中的勒索软件:不断发展的漏洞利用技术和对零日漏洞的积极追求", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498604&idx=1&sn=7ef6681da2649da60211fe559b8fdc30&chksm=973ac80ea04d411840e9071f4b43d907a5c76ccc9e8ea935bfe54ca2a55e1db5042541bc3c93&scene=58&subscene=0": "CNVD漏洞周报2022年第32期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498604&idx=2&sn=6fe1670c9e562c37ff791732488dc680&chksm=973ac80ea04d41181ffe32cf9d30a19cd11c661f4c5c72aa44f72ae2533df09acae5485a9196&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220807-20220813)", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539252&idx=1&sn=f009d4e5bd3c8c77d6e594137033fc00&chksm=fa93ecf5cde465e34267f43ef427566328af020d5f71f6678efc0fd675c725ea0f810aac326a&scene=58&subscene=0": "福特曝WiFi安全漏洞,官方称仍可安全驾驶", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539252&idx=2&sn=9eacb38a086b87938029b7616e4e231b&chksm=fa93ecf5cde465e366185cad03eb8d9d2bb8fb38b7e4a299022bd3bcbb7470e55b43e92c9178&scene=58&subscene=0": "潜伏于数据中心的威胁-电源管理软件漏洞可导致关机、恶意软件横行和隐蔽数字间谍活动", "https://mp.weixin.qq.com/s?__biz=MzIxMDYyNTk3Nw==&mid=2247513977&idx=1&sn=cf750f1a90bba048223aeef96a721e90&chksm=976343afa014cab9f59c02e29a2c391b0f914f9ca11d8d1b762ae19b281cf942f4d45030ee1e&scene=58&subscene=0": "从命令注入到空指针:IoT漏洞的挖掘", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247491320&idx=1&sn=c69c9959c14499978f1717fd616db70d&chksm=fa9ee5aecde96cb86cb712905ed260b1166e550447e38c96a0cf0d2910662019ecc14b8db45c&scene=58&subscene=0": "单个漏洞4.5万元,特殊漏洞额外奖励最高20万元!", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539278&idx=1&sn=b4ffacaf2e9e7d7f261ae1cad53665b9&chksm=fa93ec8fcde465992bc744ad47fb66e479a884d05a26ac3081a43ce059d08b17302d0d65115f&scene=58&subscene=0": "潜伏于数据中心的威胁-电源管理软件漏洞可导致关机、恶意软件横行和隐蔽数字间谍活动", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539278&idx=2&sn=39cc8c976dae414ba5babaacc6210890&chksm=fa93ec8fcde465996537a0b0d79d16a69297e6a76a5d97410dcec7e868e016d4ad772a790828&scene=58&subscene=0": "红队发现关键漏洞,可远程控制ATM机", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247488320&idx=1&sn=63fed8f75e4fbeabd4e59bebdda271b8&chksm=fa5abdadcd2d34bbaa257321867dac8a27c567e4ed92f34dd9437cee264c2777ddc6b600e3b1&scene=58&subscene=0": ".NET CVE-2023-36899绕过IIS身份认证漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247489857&idx=1&sn=a37d7b0787c0870827750662907eca0d&chksm=ea4bb306dd3c3a10978fe38eceabc29530cd554ec751b6179c29c20f5873bbe2cb4872eb8102&scene=58&subscene=0": "关于企业移动办公场景下如何管控数据安全的杂谈暨近期漏洞情报共享|总第202周", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652042092&idx=2&sn=89f98bd211f39aed55c44c2be710de4f&chksm=f36fdf2cc418563a4c096debba5d52d58075829476d5899eb0360e2c785647a628ff27a6e19c&scene=58&subscene=0": "【安全圈】几乎所有VPN都中招!这个漏洞潜伏了二十年终于被发现", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652042092&idx=4&sn=61e2a2a7169dee35e88ecc5cccd88a87&chksm=f36fdf2cc418563a0bb8ac7ca28ec3eee5e0ce32e4f00a4197533a5c40e3e2b9508172496060&scene=58&subscene=0": "【安全圈】红队发现关键漏洞,可远程控制ATM机", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458513337&idx=3&sn=4f8e5fa296ce4305e7a138340feb0d55&chksm=b18edf3386f95625c676b35409cba94307e6d078f0b9afa82bfab4e3c9041837c6b6ecfa61e2&scene=58&subscene=0": "Mac安全专家揭露苹果漏洞,其恶意软件检测工具可被绕过", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045487&idx=1&sn=11cd16907fd384e8564c40a46f91e298&chksm=803fab31b74822274646c14d65e84b9ca0c9005d70b81887c02273460ee25962fd74c78751d9&scene=58&subscene=0": "【漏洞预警】Ivanti Avalanche多个高危漏洞漏洞威胁通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509533&idx=2&sn=6c880079a471cc8b5ce9681a833e32a0&chksm=ebfae13ddc8d682bec177cfece7ee73f89c9af206aa300e0b6bbe32cfe590a1bac751ec79194&scene=58&subscene=0": "微软2023财年发放了超1亿元漏洞赏金:平均每个漏洞8.5万元", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652042168&idx=2&sn=7bba6e213a662904caf3ccbac3e58e76&chksm=f36fdff8c41856ee81fa602795e80057d4c66694da8daeb8c528b87289a5da8f7ad26e5a8cb6&scene=58&subscene=0": "【安全圈】 MOVEit软件存在安全漏洞,致普华永道泄露8万名用户信息!", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539334&idx=3&sn=a15eab86009640463de09aeb30e8ad6a&chksm=fa93ec47cde46551e0d16daafe0b98cfc11fec6b99ba5ec9747a2d752b50d83f0f28f93df819&scene=58&subscene=0": "潜伏二十多年漏洞曝光,几乎所有VPN都中招!", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247565735&idx=2&sn=fdbda8d890550e9484a70120f5ab6db4&chksm=e914119dde63988b6483541ac7cbd894823c13209c66decf091d09de7a907a718a53f24c5272&scene=58&subscene=0": "有史以来最严重的七个软件漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247509273&idx=1&sn=aa97d785cf8263314ff48f77a3fbcff7&chksm=c2d1d9bdf5a650ab32cc68fc46bc369fce7a1954cb558054911bc373c616a4017824ccd8d2e7&scene=58&subscene=0": "URL重定向漏洞检测插件", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517401&idx=1&sn=97cc9af4b78a594813c2d5db37dddef1&chksm=ea94b5b3dde33ca5e1e2efd3fd3111eefb9dd04cd588a68ac12db6c0e4699427d59de46573a7&scene=58&subscene=0": "PowerShell 多个漏洞可引发供应链攻击,微软说修了但仍可复现?!", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247539213&idx=1&sn=7caab3f7fa8f033a6c7a57ef07aa8c90&chksm=c1e9d65cf69e5f4ae257acc92e42949c3a3ed3cdc0979f43e5309886a7f7d0d89a00e8b9b559&scene=58&subscene=0": "有史以来最严重的七个软件漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247565798&idx=3&sn=60dd415b12abf231818756ad8521fa24&chksm=e91411dcde6398ca55e61bb0177eb5704993d7e9e7223ef8fd411efd2afe958db8fad895b190&scene=58&subscene=0": "全球各地的工业PLC受到CODESYS V3 RCE漏洞的影响", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247492453&idx=1&sn=2c0dd010126ba1d532cfd8a9d0bee8fd&chksm=fa78e229cd0f6b3feb3d5309f43858836108ac3f458713b0993800515faae48d63d1499c5d07&scene=58&subscene=0": "【众测挑战赛】第5期-单个漏洞最高奖励可达20万!OPPO浏览器与快应用专场", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458513713&idx=2&sn=cad5fa8eaf17f525b1ef7e6b4b53a00d&chksm=b18ec1bb86f948ad847e9ed538f3c1f2780bf8314117555ec06dd10a85c35dbda575e7e7790c&scene=58&subscene=0": "Fuzzing101 Exercise 4 - LibTIFF CVE-2016-9297&CVE-2016-9448分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458513713&idx=3&sn=35dd2369a3bdc8350a871fc6adf81abf&chksm=b18ec1bb86f948ad906cfd19eebf74901c2accfe80d83bcb3f63f4956b37bbac1b5593f579a0&scene=58&subscene=0": "满10人,9月1日开班!系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247509314&idx=1&sn=e37d29fb0e24cce3ba88fe0a9d88ba04&chksm=e89d8d9adfea048c6b33f9ab9e9726d684009303b381dc6bd6b0705db91d88bf0114d8990d54&scene=58&subscene=0": "CVE-2022-42475-FortiGate-SSLVPN HeapOverflow 学习记录", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458513730&idx=1&sn=d4a5fd43679ba3475e4cb7e061f214ae&chksm=b18ec1c886f948de54c7a8fd5b5384fa146af98293db97dc238990f1bcc5e233697a69ae404e&scene=58&subscene=0": "CVE-2023-28252 CLFS 提权漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657164691&idx=1&sn=32c1ece19dd3d48a92cb736669d8f5fa&chksm=f1d4ef76c6a3666028260b654b5c6ebcceb8ede41b0a62e5a1408890f21692ff0199504d1d94&scene=58&subscene=0": "【干货】HW2023POC收集", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652042341&idx=4&sn=e7b22e8152aeaf9e0bd49d7e82861c2c&chksm=f36fd825c41851333abbd3e89070cd6dbf43298e18403cfdccc11b29033c09b8b2691d92a87b&scene=58&subscene=0": "【安全圈】请尽快升级 WinRAR 至 6.23 及更高版本,新漏洞可远程执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517407&idx=1&sn=05e2d2e97807df0ba39c7ef3ac5d51bf&chksm=ea94b5b5dde33ca35b8400aefa41a5828e3b415b6b156f9d119ed338b388bad433656c88fedf&scene=58&subscene=0": "速修复!Juniper Junos OS 漏洞使设备易受攻击", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493747&idx=1&sn=1d11dd84c9f99f6ee3342c7843c6e100&chksm=fd74d8baca0351ac431413b3a15305f5f5e9a57e5e5e004b3834a7aee724e040aee05773cf4e&scene=58&subscene=0": "CNVD漏洞周报2023年第33期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493747&idx=2&sn=31bac182e60b4cadfa638a9e78352923&chksm=fd74d8baca0351ac75161d09d03693f8b65062ba46bab74d3024f40b9de87aee09267106a68e&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230814-20230820)", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539383&idx=2&sn=fb2d2e0bf8f923ed9c6bc3fbf3f67886&chksm=fa93ec76cde46560f4cf8dc1e03de5588d806c58f053e6d224e4d2f6461d39f8dc1c1a5abc50&scene=58&subscene=0": "确定漏洞优先级排序的操作指南", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247565938&idx=2&sn=e94de07b5918d311ac58ececb705e27f&chksm=e9141248de639b5e146f651388b122294560065e24d6ecf353460ec908978341575ea877871e&scene=58&subscene=0": "CVE-2023-40477:WinRAR远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458513816&idx=3&sn=76510c97acfecc2566ea7c396931a12d&chksm=b18ec11286f94804837e73384db17cc87399a2c3a6eb97ecc1597d160cfff3fc2fbfc0bfdafd&scene=58&subscene=0": "WinRAR解压缩软件存在漏洞,允许黑客执行任意代码", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458513901&idx=1&sn=ad23ea7c50ecf652aae13144efe21d48&chksm=b18ec16786f9487179120d200cc43b42474229ab7d7722e077c18c4a0e8c61294d0854374748&scene=58&subscene=0": "从零开始复现 CVE-2023-20073", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517421&idx=1&sn=31756dd565b1bbd216e954def83c61dc&chksm=ea94b587dde33c91e83a737ae3eb0a14c48a427523b94dba12823b03eac1cecf97a890e21afa&scene=58&subscene=0": "Ivanti 紧急修复 API 认证绕过0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517421&idx=2&sn=dc8679fac09663662db54780d91b1a0b&chksm=ea94b587dde33c919ddad97730995e5dbd757afebf8436ee2cae3d3f3ecbc90788b004e929e9&scene=58&subscene=0": "WinRAR 高危漏洞可导致设备遭控制", "https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247494660&idx=2&sn=d480b539c93668bad2baefe043da4677&chksm=feb66d17c9c1e40115b728c1dc5a4f240f2d3c78c8439e66f4457c004f28331802fc36d8e8b7&scene=58&subscene=0": "确定漏洞优先级排序的操作指南", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247491350&idx=1&sn=af9088bb4fcb582b39b215dda577a46a&chksm=fa9ee440cde96d5687f86e47973cdaf27aca2856f9254683e69a2ce58865b1d3675c8b3ed9e2&scene=58&subscene=0": "字节跳动IoT产品漏洞奖励计划V1.0", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247565992&idx=3&sn=4b808e57870a7448f22077286ed896e2&chksm=e9141292de639b84d03a0340fc2f25d497a8fd7f09cebc0414e0b8c77247ee4e92046f4242ea&scene=58&subscene=0": "对SugarCRM零日漏洞(CVE-2023-22952)的防御", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498616&idx=1&sn=4ea176be13532ebe152731722ad27cb7&chksm=973ac81aa04d410c7831acde7df54bf2dfe0ba00f4dcf2a6be4be22800c237d2ebb42ce1fdf8&scene=58&subscene=0": "CNVD漏洞周报2023年第33期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498616&idx=2&sn=1282cbe38bffc673b9af8c6c52d87f26&chksm=973ac81aa04d410c50f1f20a72f6c1653395f22f5fe60aea52be5e66706a84d0734e81a8006e&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230814-20230820)", "https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247509459&idx=1&sn=189276e7edf91a3c036e10906a9be4d7&chksm=e89d8d0bdfea041d1807319f7677f8152f7fb44d43e4a61f6f8d0c294c513a3c9d62f3a36a81&scene=58&subscene=0": "TOTOLINK CVE-2022-25084 漏洞分析&复现", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651125350&idx=1&sn=84a4efa7b0eff924c7c5fbafd1c89ee0&chksm=bd1446b58a63cfa391267d289e1fb4495e360760a1be9acc32421ee4c41efc472b898bac6c54&scene=58&subscene=0": "软件漏洞检测场景中的深度学习模型实证研究", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458514480&idx=1&sn=2a7941beebe6b131ff8c1ad918b85156&chksm=b18ec4ba86f94dac7aabcb5f4fadbe9c7aae818d259f5185aaab849b95fafd658ca6b2ac6671&scene=58&subscene=0": "CVE-2020-22253后门漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458514480&idx=3&sn=81c6eef6b84729d196793a6f08398a08&chksm=b18ec4ba86f94dac4dab4a5943317441605ff9140ee726b361c5ec5340359cc5f2ad750058c4&scene=58&subscene=0": "TP-Link智能灯泡存在漏洞,黑客可以窃取WiFi密码", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458514480&idx=4&sn=221c3c57af478d26e8ce605281e4ffc5&chksm=b18ec4ba86f94dac94b7b6e1f963d5cecd006001fdf92175fb503a83a1f6955155aa1e635f02&scene=58&subscene=0": "预售满10人开班!系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517437&idx=1&sn=561e8ad37f584120784a95e9ad1c33f4&chksm=ea94b597dde33c810a56421fadb562f0a4fbab00589ec4d11a1fb82d61b17dffcab841d4546a&scene=58&subscene=0": "CISA 将Adobe ColdFusion中的这个严重漏洞列入必修清单", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517437&idx=2&sn=b43eb67509ce31f1726c7bb953adb331&chksm=ea94b597dde33c816cc6b6b60429447908b3cbafd3b5194aa4e547412a0c05805aa001546707&scene=58&subscene=0": "Apache Ivy 注入漏洞可导致攻击者提取敏感数据", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247507897&idx=1&sn=5a2f184159e0bad26253655e899fa913&chksm=ea6628cedd11a1d870c7c4426da3a5a34f0eb95201d9051d4e8145cf3cc5e1f7ce6e74f544b4&scene=58&subscene=0": "嗅探文档中的WPS 0day漏洞气息", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650178473&idx=1&sn=30f83f3c9c7287f7ed01cb10cc683df9&chksm=f4487815c33ff103c43ec46d58b4f6ea206e5c2bc6519df319b4879d0e1b6dadbf6a794683de&scene=58&subscene=0": "干货!如何检测发现WPS的未知漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247489563&idx=1&sn=4304324f5f58c4b87ed2ca7be0e204cf&chksm=971e7519a069fc0fe5b9851c9d83539ba52317c961ce07326b46e690a5b2dbb3064e378a227d&scene=58&subscene=0": "奇安信的漏洞管理实践", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458514823&idx=2&sn=a4540b5441c3bbd54fe05b0219c880fb&chksm=b18ec50d86f94c1b0411408b5f824ecd3edea4b91f336f9f2230b6509476b36858f519fd4015&scene=58&subscene=0": "命令注入漏洞CVE-2023-27216复现", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539431&idx=2&sn=ca9873be2b3e61c563f9ccaf8def6485&chksm=fa93ec26cde4653073d6f95fd1b6b806a53d13ca87ca6385082bee11c41047150d587d4debe8&scene=58&subscene=0": "美国国防巨头Belcan曝出漏洞!40多个联邦机构陷入危机", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499420&idx=1&sn=55c5c00b7fc1df2a8e175c0bc85097b3&chksm=fe79da04c90e53120b62ddd29d00d330f1b068343849e50d0f67d3f8b825e0b5218a7d60217f&scene=58&subscene=0": "【已复现】Smartbi身份认证绕过漏洞(QVD-2023-19579)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499420&idx=2&sn=a27e57d80fe11dd58a28d9695dfec274&chksm=fe79da04c90e5312bd90adcfb6851438d75a5d1766637117a5eda7f88db9ae10558aa237d8e6&scene=58&subscene=0": "RARLAB WinRAR 代码执行漏洞(CVE-2023-38831)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247566108&idx=2&sn=0afc61998690ccf56c022ed2116df07b&chksm=e9141326de639a300028f520cf97f1eb57b9701d47c181f6729e5993642cd27fcf0376f530c1&scene=58&subscene=0": "TP-Link智能灯泡漏洞可窃取目标WiFi密码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517453&idx=1&sn=46ad95e6457a6e91acad1e31dccc833a&chksm=ea94b467dde33d7139c65d06a237e0ff638752ec0b58e00c0d4aa3c0f2795c6b267d15e8feeb&scene=58&subscene=0": "罗克韦尔ThinManager 多个漏洞可导致工业HMI 易遭攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517453&idx=2&sn=251402ddfd4c8a150b8758f1c605b2af&chksm=ea94b467dde33d7195d23ecc995280d0ef6b19557e14a8330945c641004b75bea1871b2c82a6&scene=58&subscene=0": "多个高危漏洞可导致思科交换机和防火墙遭 DoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247498218&idx=1&sn=e12250462c06941ec281296b003cbd5d&chksm=eaf9b1a6dd8e38b0bedd20638dc8476845e0e05a5d24ba700b0909bfc30fb9a8599e8502cc4c&scene=58&subscene=0": "重磅发布|“全网大语言模型产品漏洞悬赏”守卫计划", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499430&idx=1&sn=d5475a44f2c9580c79cd8baa14030c17&chksm=fe79da3ec90e5328728e7c32494b34b07a0abe77beb0b30f9eea9c8e8b49bf5d8013ebc3189d&scene=58&subscene=0": "【已复现】Windows 错误报告服务权限提升漏洞(CVE-2023-36874)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499430&idx=2&sn=562314516f810c01def3815d7ce56cf5&chksm=fe79da3ec90e53284e69f40169653e6215592bcac4d1475db26a50baa2210a9ccd0546997eaa&scene=58&subscene=0": "【已复现】RARLAB WinRAR代码执行漏洞(CVE-2023-38831)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458515354&idx=1&sn=282663afdadcd7ef0efccff8b4a84470&chksm=b18ec71086f94e06b9b4a5f6d56402738283e665f6656a7c01acb1ad2c0fcdebbdeda0a23a6d&scene=58&subscene=0": "CVE-2021-4034分析", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247504739&idx=1&sn=4d503cdad7ee0ce6029c6f934873535b&chksm=cfcab077f8bd39619242fddee99daf125b994b080d9ed01f55ce7b81cfe1989e0183142cf1f9&scene=58&subscene=0": "极有可能被黑客利用,Outlook远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518892&idx=1&sn=b7220370e3340f240091cca34c399d57&chksm=ea94bbc6dde332d024909d576d7b563018e16c1e79f3ee057e9cec70d8d5837a228f47fbf6d0&scene=58&subscene=0": "速修复!Joomla 漏洞可导致RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518892&idx=2&sn=21e7796662495b4b807b3393dafd9890&chksm=ea94bbc6dde332d07356a2e54be40ffbdc88a3cac47f21912107d477815155335555fe2c827d&scene=58&subscene=0": "WiFi漏洞导致安卓和Linux设备易受攻击", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247490776&idx=1&sn=59653d64fc3ad7a06be3b0429a384e44&chksm=fa5ab235cd2d3b23a0ea4336f71b869b80ab7a2a15dee0466db73aa874a53cfa3849c6e66d23&scene=58&subscene=0": ".NET 文件上传漏洞在不同框架下的差异", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498980&idx=4&sn=81a93d21e714f441268e54c242cf498d&chksm=973acf86a04d469015f8ce11f4ff8a185768cd295eba073988429f6fbc8dfd33dd7e7312168d&scene=58&subscene=0": "CNVD漏洞周报2024年第6、7期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498980&idx=5&sn=8258d4a8405977d6bb178cc8d79ff9ce&chksm=973acf86a04d4690da6ae0a4cc4eb22b2665b12afbe068fc565f3f2a2e8affdd109dab3b438d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240205-20240218)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522147&idx=1&sn=35d55d648f76703c3d5a5c40e828bdf9&chksm=ce461c73f9319565b01c9f563cb4d1ba21d41f7b92879efd427236ce466c205eb4dfb1391189&scene=58&subscene=0": "【漏洞通告】Spring Security 访问控制错误漏洞CVE-2024-22234", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522147&idx=2&sn=8bb2cce9e98dc40498cf1bc7b2b483e0&chksm=ce461c73f93195657b39e7887da2d77225cd3ca8fe3914cde5b24a939a380c18a22a6490cdce&scene=58&subscene=0": "【漏洞通告】PostgreSQL JDBC SQL注入漏洞CVE-2024-1597", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247494172&idx=1&sn=15a8eaba243f04d99e6f0a835af409e1": "Chrome 122、Firefox 123 修补高严重性漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652105193&idx=3&sn=8b6cd41523d8372a1a64b8a6712f017e": "人工智能开发供应链披露的八个漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500553&idx=1&sn=7ec2582d717304a81f79ae70f8bea4d9": "【0day漏洞】Internet快捷方式文件安全特性绕过漏洞(CVE-2024-21412)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247485815&idx=1&sn=5af4cf54878e30673b971661dbbbdf5a": "最新Invicti-Professional-v24.2.0.43677漏洞扫描器下载", "https://mp.weixin.qq.com/s?__biz=MzI2NTc1ODY0Mw==&mid=2247485835&idx=1&sn=65d13400264d3ec7e2a1c00dec13bcaa": "JAVA代码审计之XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485348&idx=1&sn=f8fa0576b9bb01bd97a1b95ad844e70d": "WordPress的Bricks主题存在远程命令执行漏洞CVE-2024-25600 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485081&idx=1&sn=1c2dba72fa99737637771f7aaa292640": "[漏洞复现-101] 免费星球它来了-马赛克安全情报共享(限免)", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092582&idx=2&sn=dc1bcd633b72d3dba8fe558268a96360": "【漏洞通告】Spring Framework URL解析不当漏洞(CVE-2024-22243)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652054348&idx=4&sn=954e62d1619b2db694807191fd923070": "【安全圈】注意!苹果快捷方式漏洞 (CVE-2024-23204) 可以暴露敏感数据", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651259481&idx=3&sn=12206f5035a799689313896b2f514b15": "微软Outlook中#MonikerLink漏洞的风险和大局观", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487605&idx=2&sn=788d7382d2137697316f665db950b70c": "【漏洞预警】GitLab 16.9存储型XSS漏洞CVE-2024-1451", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487605&idx=1&sn=da9aac066b43c21cc80cf24eeb60367d": "【漏洞预警】Spring Framework URL解析不当漏洞(CVE-2024-22243)", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247493624&idx=1&sn=73deb76aab1e2dc602b25e3841077cd7": "SRC案例 | 某公司小程序四个漏洞挖掘过程", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247502796&idx=1&sn=ce48dd867994ddaaef86e0dea742ce4f": "CVE-2024-21413:Microsoft Outlook 远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518905&idx=2&sn=89ec572b50147fe28714126b1d8bcb55": "苹果 Shortcuts 零点击漏洞可导致数据被盗", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518905&idx=1&sn=d78b42cf79ea9e1666eb0759db2961cb": "开发人员注意:速修复这个严重的 Fiber Go 漏洞!", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247501013&idx=1&sn=7a640ed1c6dde0c8398c7da2e6614a08": "【成功复现】WordPress Bricks Builder远程命令执行漏洞(CVE-2024-25600)", "https://mp.weixin.qq.com/s?__biz=Mzg4Mzg4OTIyMA==&mid=2247485451&idx=1&sn=cf4fa900e8d3d8f07cca2b23bdcaefb8": "Spring Boot系列漏洞(一)", "https://mp.weixin.qq.com/s?__biz=MzAxMjE1MDY0NA==&mid=2247507413&idx=1&sn=460ca20ea8dee7e50c89364fbeeffcfe": "权威认可|中孚信息荣获工信部CAPPVD漏洞库感谢信", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247487662&idx=1&sn=cd04fc0d0c5eabe96ce62fd7bcd49c3a": "WordPress爆炸性0day,直接RCE!附POC", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247499491&idx=1&sn=6957abdfa1ebc4191c6183196f228b62": "【云原生安全】K8s安全漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247516313&idx=1&sn=7f32426859a5f2629c1cd5642b36fa62": "新 Wi-Fi 漏洞导致 Android 和 Linux 设备近乎“裸奔”", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484271&idx=1&sn=e750929882df1d736b095e6e2c8557e9": "YouDianCMS友点系统漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651723304&idx=1&sn=a79a057e60b3f88b012ef6bddd5d1fbf": "Outlook高危远程代码执行漏洞,启明星辰提供解决方案", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247573734&idx=2&sn=d3281066b883701bcf89b718c0efb478&chksm=e91470dcde63f9caea217c3ce6edd5028e2475620ddd6b26ee3712dbe814c255e78268ec8c70&scene=58&subscene=0": "新的 Linux glibc 漏洞可使网络攻击者获得主要发行版 root 权限", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500545&idx=1&sn=d9f990d1990fcac777ec01aff28ad72e&chksm=fe79e799c90e6e8f8253fd98dc7849e67980986d1c1b53bcf10d71a0b8bc0e6d1f6eb58eb694&scene=58&subscene=0": "【已复现】Microsoft Outlook 远程代码执行漏洞(CVE-2024-21413)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzk0NDUxMjAzNw==&mid=2247485744&idx=1&sn=8da10f3a600f04ffe7712617274bdbd2": "【漏洞情报 | 新】WordPres Bricks Builder 前台RCE漏洞(CVE-2024-25600)", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485558&idx=1&sn=6179e910ad96335b34531bddf83d1b4c": "用友U8 Cloud smartweb2.RPC.d xxe漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247512722&idx=1&sn=bf29855b6639267b5ace0b6b948f7804": "实战中遇到的一些莫名其妙的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247490763&idx=1&sn=5679824f14ab5a20530e89c3dfb7662c": "dedecms之汗流浃背的审计1day", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485379&idx=1&sn=cad3f569bd587a121cc02e29c1307a9e": "Edusoho网络课堂cms存在任意文件读取漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247514913&idx=1&sn=dcfc3b6f42ce854b41897b340a1beeb8": "某CMS的通用漏洞挖掘过程 | 干货", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493616&idx=1&sn=64370cfcc3e5436519f5ead1e91b0781": "漏洞挖掘|一次某站点的任意用户密码更改漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651259482&idx=1&sn=1008e0f1cbcb4e6e1c4fb75dfd16369d": "新 Wi-Fi 漏洞导致 Android 和 Linux 设备近乎“裸奔”", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485083&idx=1&sn=c48dda5dc6293eeeaf88dcc818d93ba2": "[漏洞复现-101] 免费星球它来了-马赛克安全情报共享(限免)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652054423&idx=3&sn=59f460185f705e3183b470edb4249bcd": "【安全圈】Joomla 发现5个漏洞可执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247616632&idx=1&sn=88e2fc1e1f46d78bd487711269c92822": "在看 | 周报:华莱士系统漏洞被薅羊毛;16人买卖100万条个人信息;2中国公民骗5000台iPhone被抓", "https://mp.weixin.qq.com/s?__biz=Mzg3Mzg3OTU4OQ==&mid=2247489795&idx=1&sn=986afe445585dec512cbe585fff2863c": "“虚拟号码\"场景下的逻辑漏洞挖掘(全网原创首发)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODk2OTcxMw==&mid=2247484834&idx=1&sn=d735b31942af97843c80f32e910f154d": "漏洞复现-用友U8-OA协同工作系统doUpload.jsp任意文件上传(附poc", "https://mp.weixin.qq.com/s?__biz=Mzg2MTg2NzI5OA==&mid=2247484178&idx=1&sn=a2034ae8f489afbf420b5d3b815ff86f": "内部漏洞库,福利开局", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247606268&idx=1&sn=a8c307de4ee79b67f9acc85e22f89376": "某恩特文件上传漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247485452&idx=2&sn=29049e56196bc99050ac9ff7e0917768": "研究人员详细介绍了苹果最近的零点击快捷方式漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790506&idx=1&sn=7e18a18c2ae6ab1ac7a37dcbcce6d495": "ScreenConnect 漏洞(“SlashAndGrab”)被广泛利用于恶意软件传播", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650943479&idx=1&sn=985eed34b58c3e2c662b5e792bc49ba2": "万象漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=MzkyNDI2NjQzNg==&mid=2247491938&idx=1&sn=c5d911b1e5592c184339a43fa8878ae5": "CNVD通用型漏洞挖掘思路-平台漏洞列表一眼定睛法", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092584&idx=2&sn=76092b3906e9df239142d3a5b2043892": "新 Wi-Fi 漏洞导致 Android 和 Linux 设备近乎“裸奔”;", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652054495&idx=2&sn=9a62c38f083509de6baf57d55e58e03d": "【安全圈】警告!ConnectWise 漏洞正被广泛利用,数千台服务器面临危险", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247552430&idx=1&sn=6455f4ab69c62b66af0a1081058fc7d8": "[经验分享]-SRC漏洞挖掘之道", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247504254&idx=1&sn=f7e0ac845b99d7b329c2040d30e3e0ac": "开源应用程序导致 XSS 到 RCE 漏洞缺陷", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485519&idx=1&sn=80832a0520e64e299927733bbdfe503d": "【高危】浙江大华技术城市安防监控DSS系统存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485391&idx=1&sn=aa5d5dbff3236275de3b833f3fbb352e": "万户协同办公平台ezoffice text2Html接口存在任意文件读取漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzI5MzU4ODE5Mw==&mid=2247485085&idx=1&sn=8e60b3b61f4ce67815414bb0f9a3bf19": "[漏洞复现-101] 免费星球它来了-马赛克安全情报共享(限免)", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485626&idx=1&sn=9751623bdf034a5dc517561dc4c46e3c": "CVE-2024-1709", "https://mp.weixin.qq.com/s?__biz=Mzg4MDkyMTE4OQ==&mid=2247484041&idx=1&sn=e8ff705f07c1d81a6497c8f04084aeec": "多个赏金漏洞直播思路分享", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247512784&idx=1&sn=4075993006e45ab603831176e7a5ff67": "Finebi反序列化漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyOTMxNDM3Ng==&mid=2247488211&idx=1&sn=771ba4d5329e121e1b56281e844a4397": "关于通达OA存在反射XSS漏洞的预警", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493657&idx=1&sn=7097162fe771e7e2bc7c8e232e86e367": "记一次EDU漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487620&idx=1&sn=4b8a2a3d5db65ae09343105b9d9487db": "【漏洞预警】aiohttp 路径遍历漏洞CVE-2024-23334", "https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247502895&idx=1&sn=8a46111ec72b3d17d4bd91885261a868": "未然通讯社:2023年供应链攻击同比增长78%;微软Exchange Server曝出高危权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652054725&idx=4&sn=d9ccbfa3d57ec25a2877c596ac66c08b": "【安全圈】Apple Shortcuts 存在高危漏洞,可能会导致用户敏感信息泄露", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652054725&idx=3&sn=29edac4c99bd8a74e59e4be9a3fd1060": "【安全圈】WordPress:严重 SQLi 漏洞威胁 200K+ 网站", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652054725&idx=2&sn=087f0f17e0dbc7f14be7247bf3000723": "【安全圈】台湾合勤科技证实,Zyxel 修补防火墙产品中的远程代码执行错误", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484525&idx=1&sn=66b5eea337873594e346c5d7ac86b3e9": "【复现】aiohttp 路径遍历漏洞(CVE-2024-23334)的风险通告", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247496716&idx=1&sn=6538671ce2b7e305ab75ca53bb387d2d&chksm=e84c52d3df3bdbc5037e9cc1f265e3d783013a066a2ee3e91111f92718756cfcbc2982bf24c9&scene=58&subscene=0": "绿盟科技星云实验室获微软MSRC致谢|Azure数据库服务存在RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247504751&idx=1&sn=f90c46b44fc0ea7706b98adfc3c342ee&chksm=cfcab07bf8bd396d1a6e98e9d80a82a83dfc64f5fa99b3df4128b26ad1393cf1c04ea15ee2dc&scene=58&subscene=0": "漏洞通告 | aiohttp路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247502939&idx=1&sn=06adc8dc9bec1a11b9306ce8b8d39871&chksm=fe26c95ac951404c830e8379426dc7d1eba3018623bf22f320e2aa6065bcea95eae38594d7f6&scene=58&subscene=0": "CVE-2024-25600:WordPress Bricks Builder远程命令执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247492376&idx=1&sn=11fd3392c7e6456edf8452e18e031bb4&chksm=fa9d184ecdea915845c1a32070c66ed727a4e197c9b87b58f049f2c8a56dd5e16b38a32ca3fe&scene=58&subscene=0": "漏洞单价10万元!ByteSRC规则V6.0奖励计划叒升级!", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498982&idx=1&sn=d1a1dd16c930ce1bb66d32c874d7906f&chksm=973acf84a04d4692d806b8904b0037b5308ff7f65b477cb49ae0603b4099f2a708f7d5eedb37&scene=58&subscene=0": "CNVD漏洞周报2024年第8期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498982&idx=2&sn=af832212e91fa01b57b9c1a9f99e62fc&chksm=973acf84a04d4692e670fbf0d307a5bb55fcce93339e99a2dc5e0d2563a904d981aace7c1f69&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240219-20240225)", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247485526&idx=1&sn=316cfca21c48869e0100d71724b9955d&chksm=c1f44c9ef683c5886d170dc2831a116a08509487ce006a273f4d2699f36d60b1c5b02eb9d1ee&scene=58&subscene=0": "「深蓝洞察」2023 年度最“软”的硬件漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650180393&idx=1&sn=99f1b59068443cb0dc5b538cc3eecbb3&chksm=f4487095c33ff983a03aadfd64f98fbbff7d507d92a7615c9e468e313d95d9d874e986578a41&scene=58&subscene=0": "又是一年春光好,漏洞奖励少不了~ 限时奖金上调,X春日礼盒发放中!", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522184&idx=1&sn=0f5a1dfe58d147f30570d750bc7adbd0&chksm=ce461c98f931958eaef25d92a5f4306162862025f095aeb0b75b8d4ff627c6305165ccd3a8ee&scene=58&subscene=0": "【漏洞通告】Apache OFBiz目录遍历漏洞CVE-2024-25065", "https://mp.weixin.qq.com/s?__biz=Mzk0NDUxMjAzNw==&mid=2247485818&idx=1&sn=e0785eec65cbbb842e0a2950c76bd6b8": "【漏洞新情报 | 附POC】蓝凌EIS智慧协同平台SQL注入", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247512396&idx=1&sn=ce52a1ac8195bb69b46606e267f4199a": "跨平台漏洞扫描器 -- EZ(2月29日更新)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485469&idx=1&sn=6b0db9054c4fa4a459192e13e6a76564": "蓝凌EIS智慧协同平台rpt_listreport_definefield.aspx接口存在SQL注入漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092594&idx=1&sn=fdbe1c36c08a52f3e80c7e18cfef9e33": "Windows 零日漏洞正被黑客利用,以此获得内核权限", "https://mp.weixin.qq.com/s?__biz=MzkyNDI2NjQzNg==&mid=2247492239&idx=1&sn=ea393ca4bb77a3350710a4efc1f94eb5": "cnvd通用型漏洞挖掘思路-从逻辑漏洞到拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542928&idx=2&sn=11b71c70fd0d855a0ce7208c4f22a0e8": "近日更新:命令∕代码执行(二)Bypass技巧—CTF训练营之Web篇", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247504612&idx=2&sn=3b331b4ba79b9f51bc84d4c02ba15525": "CVE-2023-42942:xpcroleaccountd Root 权限升级", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247606466&idx=1&sn=7522223a7a1d5f490a8a1a5822288c18": "一次h1漏洞提交记录", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485764&idx=1&sn=59fff1505259c5f0c8af6e1e12bf582a": "CVE-2024-25419", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651260329&idx=1&sn=510c64d2efe80d2f814055908f198fb8": "WordPress 插件存在漏洞,500 万网站面临严重安全风险", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650588155&idx=1&sn=c21709a87370dfdda0560127239d47eb": "诈骗受害人的自述:感觉智商受到了严重打击!;|深圳制造商Eken10余款智能门铃曝安全漏洞 黑客可直接获取摄像头画面", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650588155&idx=4&sn=e0b67e54386c36006edf02200ab14c62": "一款集成高危漏洞exp的实用性工具", "https://mp.weixin.qq.com/s?__biz=Mzk0NjE0NDc5OQ==&mid=2247523051&idx=1&sn=5a860e4eb7f781d156d8d86385fe7f53": "Spring漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247490905&idx=2&sn=00b75876f110369771f5cc64f7219135": ".NET 文件上传漏洞在不同框架下的差异", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650944089&idx=1&sn=2e95782fd7bdd1429902fce4c47acdc5": "CVE-2024-23897 Jenkins 未授权任意文件读取漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500578&idx=1&sn=f7f767f62adc6bdce5c6666e0137cb06&chksm=fe79e7bac90e6eac43c6e1a031a9ce9df3f17e78d3ba487e9f1874b137548132adb8f0982120&scene=58&subscene=0": "【在野利用】Apple iOS 与 iPadOS 多个在野高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519003&idx=1&sn=87b2f80deede9f2cb8e1092e9732820f&chksm=ea94ba71dde333675f4150799bb36ccc5360912e77c0af8aef77e7426b9b0c244aabb76833e4&scene=58&subscene=0": "苹果紧急修复已遭利用的两个新 iOS 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519003&idx=2&sn=c494f1df6adfe5a6b91c813d2d236c8c&chksm=ea94ba71dde3336793921a1d4a9852067a51546a77a39e5c25ed0836ffe1f6e0706fb9618530&scene=58&subscene=0": "VMware修复多个严重的ESXi 沙箱逃逸漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485938&idx=1&sn=7c07f8f79391a393cb45ddea6e7b9dfe": "CVE-2024-27198漏洞复现(POC)", "https://mp.weixin.qq.com/s?__biz=MzkxNDU2ODc0Nw==&mid=2247484040&idx=1&sn=90773fb05e51f8f362f4e5cb5eea9f18": "Reporter内置报表管理系统敏感信息泄露+远程RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247485999&idx=1&sn=4f480238d3e92ddfecfc032c2bd318e2": "最新Nessus2024.3.1.1版本主机漏洞扫描∕探测工具下载Windows", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247620068&idx=4&sn=517d37cadb872451621be187cd1f1449": "苹果曝出两个 iOS 系统 0-Day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493796&idx=1&sn=b53d102fab8b87888185a7f0a4dcb38c": "浅谈js在挖掘CNVD通用漏洞中的思路,附实战案例", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487692&idx=2&sn=06b7789472a705ff53eeb3044970889f": "【漏洞预警】Apache InLong反序列化漏洞CVE-2024-26580", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487692&idx=1&sn=3a151b0f870b5783fcaf842b887b6e4e": "【漏洞预警】GitLab 身份验证绕过漏洞CVE-2024-0199", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247498696&idx=1&sn=054e8edc20ed99390940a67525645b58": "OA漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkzMjQ0MTk1OQ==&mid=2247483946&idx=1&sn=f11eb50e8fd170fd5329bdeb01f3e4c2": "Aim Web API 远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664206559&idx=2&sn=3fe5875d83ef70b9971756fd2452e894": "行业 | 绿盟科技中标重要项目 助力云南移动漏洞管理平台建设", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092598&idx=2&sn=d3e9e47ba77d7d40e12d09fb0e5f2bf9": "【漏洞通告】Apache InLong反序列化漏洞(CVE-2024-26580)", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092598&idx=1&sn=9d3484340943974bd3995278fb740934": "【在野利用】Apple iOS 与 iPadOS 多个在野高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055379&idx=2&sn=652d4300b439e300723b7b702396e800": "【安全圈】Android发布3月更新,解决了38个漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458545106&idx=2&sn=37769e599a88afda3213c69a7cd4c34e&chksm=b18d5b5886fad24e8fd645429bb9109c40b802651bf8ff7c214b07f642ae0c872352dda72a91&scene=58&subscene=0": "更新VMware!多个漏洞可导致沙箱逃逸", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247543321&idx=3&sn=7a9bce694078bea43058fa36977e1b02&chksm=fa939cd8cde415ce8899550aa089fa6b912b58641845f9f7efae9423832bdc47b256920450bd&scene=58&subscene=0": "苹果修复了两个新的用于攻击iOS的零日漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522223&idx=1&sn=39f2b6d8eacdc1093b2cca17395db60d&chksm=ce461cbff93195a9d74bd443b8577648842c06b83a2c1a4def32f19ec8b89925742ee68c4eef&scene=58&subscene=0": "【漏洞通告】JetBrains TeamCity 身份认证绕过漏洞CVE-2024-27198", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519025&idx=2&sn=9f5aa3afc5e6ee3f439bd94c36a8f2ce&chksm=ea94ba5bdde3334dbbb580cbb52dc01d9b7a0de98233c5e79d4a4bf0758bdf9bec08800e86fb&scene=58&subscene=0": "JFrog Artifactory 多个漏洞威胁软件供应链安全", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786271&idx=1&sn=1519f0aa105aefc8422972fb122dc22c&chksm=8893b7f0bfe43ee6bad34ce8f8a13a84d3e6b150722807d50813b2c22971f68b77f401e12817&scene=58&subscene=0": "思科修补 VPN 产品中的高严重性漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522236&idx=1&sn=c5ae94da4a043a6537afde69135e05ba&chksm=ce461cacf93195ba157ba71eb360df87971ac36b7ea50e82a8b9fe7bc67f52244ad896b36bf3&scene=58&subscene=0": "【安全通告】VMware ESXi 释放后使用漏洞等多个漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647790063&idx=1&sn=88adf918d77088701cbec8db9a4bb464&chksm=877099b8b00710ae86d32831d057d79b2f4342018a46f89eba8c978f4d1db00a8b383314f711&scene=58&subscene=0": "供应链高危漏洞披露 | Winmail邮件系统曝出存储型XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493802&idx=1&sn=28e6ae27f70efd218102293c780f867d&chksm=e8a5e2c9dfd26bdfc98cba763a7a3d9c0b7908b734df2bd82210d079759ac19107770124cef5&scene=58&subscene=0": "教育edusrc-越权漏洞案例集合", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486017&idx=2&sn=1235deb7412e45dda71981657a27afcd": "CVE-2024-27199(POC&EXP)", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247497481&idx=1&sn=c7f5a3db82d131565163df18f5d44f4d": "Spring漏洞利用工具 -- Scan-Spring-GO(3月7日)", "https://mp.weixin.qq.com/s?__biz=MzI0NjA3Mzk2NQ==&mid=2247493351&idx=1&sn=2696fdafdc1882870a37c2607888a91d": "漏洞实战(1):NACOS默认密钥漏洞QVD-2023-6271", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493809&idx=1&sn=5dd53565883e5ea283fecd371d80aa4a": "实战SRC|某交友APP一分钱买会员漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485524&idx=1&sn=677302fa74ebb64eacd4d41198329aae": "帮管客CRM jiliyu接口存在SQL漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055476&idx=1&sn=e2cf122361637a74206b3ee986ca6cdb": "【安全圈】VM虚拟机重大漏洞!立即升级", "https://mp.weixin.qq.com/s?__biz=MjM5MTg0Nzk5Nw==&mid=2247484555&idx=1&sn=0735de28b6845a595fd79aca44f6a196": "锐捷Ruijie-UAC online_check.php存在RCE", "https://mp.weixin.qq.com/s?__biz=Mzg3ODk2OTcxMw==&mid=2247484875&idx=1&sn=e1f9743c511537551c84058cc9a964b7": "JetBrains TeamCity 身份验证绕过漏洞(CVE-2024-27198)-附py", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247485493&idx=1&sn=98b08164437c89204bc9f29f886cbebc": "Java实战篇-XXE漏洞利用从潜到深", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247486631&idx=1&sn=cfc3a59792191fcc5ad2d86992bc7b20": "第89篇:方程式工具包远程溢出漏洞图形界面版V0.3(内置永恒之蓝、永恒冠军、永恒浪漫等)", "https://mp.weixin.qq.com/s?__biz=MzU5Mjk3MDA5Ng==&mid=2247485915&idx=1&sn=14e8a7154b17d3f61d8cad00c39cc1df": "Microsoft Designer AI SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MjEyOTE4MA==&mid=2648519998&idx=1&sn=c7cc8284186fd8b5ac08895b43635471": "聊聊漏洞管理那点事儿", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247504789&idx=2&sn=55075484b067359e788367cf2688f40b": "CVE-2024-27198 和 CVE-2024-27199 身份验证绕过 --> JetBrains 之前的版本中的 RCE", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247504789&idx=1&sn=d77e9e912a3670acc198e5d23920eaaf": "CVE-2023-25365 ∕ Bypass通过文件上传XSS", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247483990&idx=1&sn=b93613ce90d6f777620349d11a5108d1": "朝鲜APT Kimsuky 团伙利用新ScreenConnect 漏洞作案", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247485875&idx=3&sn=742751765e529ce14a7698fa0ccf349b": "CISA警告:JetBrains TeamCity漏洞被利用", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247485875&idx=2&sn=c7bef7c3907452042fecf2fef24d3910": "思科Secure Client VPN劫持漏洞修复", "https://mp.weixin.qq.com/s?__biz=Mzg5OTY2NjUxMw==&mid=2247511219&idx=1&sn=11653c0ff6ef280c2fa79b63fb2e8dcd": "Google 开源漏洞扫描系统 Tsunami", "https://mp.weixin.qq.com/s?__biz=Mzk0NjE0NDc5OQ==&mid=2247523075&idx=2&sn=d63533df9b17c0cdd9ef031f119564d4": "一款集成了JS接口提取漏洞扫描及内网渗透的工具", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247548700&idx=1&sn=45c9a7cda52c24d81f3f153f4ef61a08": "LeekSacn:一款可在线漏洞扫描的工具", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247485603&idx=1&sn=a7e100a8390944b28da42c6e90fe5fcb": "一次十分详细的漏洞挖掘记录,新思路+多个高危", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650588549&idx=2&sn=1548bdac7173a5b9c4f8fbd0ee5e261c": "苹果修复了两个新的用于攻击iOS的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486034&idx=3&sn=99442b714bc1b314b444543772868a54": "CVE-2024-0188", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486034&idx=1&sn=ad67fd8a1878c1d86a8251b1e221991f": "CVE-2024-2330漏洞复现(POC)", "https://mp.weixin.qq.com/s?__biz=MzkyNDI2NjQzNg==&mid=2247492535&idx=1&sn=329287e42362930ae6e0055e9c73ccc3": "一次证书站逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486049&idx=1&sn=d807f7d09baee0d667ef7c71ef5f0904": "Vscan二次开发的版本开源、轻量、快速、跨平台的网站漏洞扫描工具|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727836263&idx=1&sn=294a4f6199ae1398f4b613d6ea707d6f": "【活动】京东健康逻辑漏洞挑战赛即将上线!", "https://mp.weixin.qq.com/s?__biz=MzU3MzE2ODAyNA==&mid=2247484842&idx=1&sn=05680492e743b40d8f05f0ae15ca7b39": "论当今白帽子到底有多法盲之倒卖漏洞牟利", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247485033&idx=1&sn=d318781e76c1c31f873e04caef98ad4f": "redis 4-unacc 未授权访问漏洞复现及其利用(全网最简单后渗透利用方法!!!)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055545&idx=3&sn=696df55150dcdbe280ec7b78be4287bb": "【安全圈】谷歌修补Pixel漏洞,CISA发现可能被商业间谍软件供应商利用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458545484&idx=1&sn=ba54c0bae5a9c91ff71d0b350478c90e": "CVE-2021-32760漏洞分析与复现", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247490975&idx=2&sn=0a0316fd4f446e2f508071b476de2e4f&chksm=fa5ab372cd2d3a6423f946b5b1699fdd0cd925cdc6fef69d51ae5cd2f2b751d5dcf837280743&scene=58&subscene=0": ".NET 反序列化Xunit1Executor漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486092&idx=1&sn=e8145a9f9845afdf6d624c2ff86305fd": "记一次犯罪链条中的URL跳转的挖掘-漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwNTQxNDc1MQ==&mid=2247486469&idx=1&sn=a106a6e05dadfdd866cb025a7170bc34": "JetBrains TeamCity权限绕过(CVE-2024-27198)分析与利用", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493821&idx=1&sn=cf922b9c1823334936a8be709bac6e60": "赏金猎人|兜兜转转拿下平台充值漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247512476&idx=1&sn=67968f8e870c1d40b8e15e5a121c183c": "ThinkPHP5.x远程命令执行(getshell)测试工具", "https://mp.weixin.qq.com/s?__biz=MzI0NDYxMzk1Mg==&mid=2247500860&idx=1&sn=074223d28f89ac347d153613db7db00e": "附下载 | 高价值漏洞采集与推送工具", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487704&idx=1&sn=fbd663eb378c8d4b464e4446a3474adb": "【漏洞预警】Fortinet FortiOS & FortiProxy越界写入漏洞(CVE-2024-21762)", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247620216&idx=6&sn=c22cf49edbf102fbd71c979292779e7d": "美CISA因漏洞攻击紧急关闭2个业务系统,此前就此多次发布预警", "https://mp.weixin.qq.com/s?__biz=MzI2MDI0NTM2Nw==&mid=2247490054&idx=1&sn=17ac77bb053303b46f5eb7c030cf6587": "OpenSSH升级到9.6P1以修复CVE-2023-51385漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1MTA4ODM4MQ==&mid=2247485164&idx=1&sn=e6b4b5671f8d4f3bc5029b4e72c8fca0": "一篇文章说清楚Shiro-550漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDU5MzY0NQ==&mid=2247484005&idx=1&sn=b5b8c70154cbb450f384b300f05fb349": "lineCTF-22Gotom复现含docker环境", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055614&idx=2&sn=e085c55917a6e9387a603b5f1b4e3b9e": "【安全圈】一天就完成!Magnet Goblin Hacker Group 利用漏洞成功部署 Nerbian RAT", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247515146&idx=2&sn=48e43b3d8df0dad0288ba8597a3650d7": "干货 | Redis的漏洞总结(建议收藏)", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5OTQyNQ==&mid=2247484870&idx=1&sn=753ebd3f33a3b79e2638d8cbee8791a6": "漏洞挖掘|从edusrc转战到企业src的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649290812&idx=1&sn=9fcda2b66df0ccfdf2d2f2a0d8e418b8": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494511&idx=2&sn=683c1634af28cd4d91c8ef9f277548cf": "上周关注度较高的产品安全漏洞(20240304-20240310)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494511&idx=1&sn=c2014a6e9946e9288a0336fdf1b17626": "CNVD漏洞周报2024年第10期", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247492426&idx=1&sn=a14346da449ffabad42316df664fcdf2": "龙年首场「漏洞攻防安全」| 第13期安全范沙龙开启", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458545766&idx=2&sn=e8896921407797229cfc38f89a1358dd": "可未经授权远程破坏系统,威联通披露其NAS产品三个漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786278&idx=1&sn=d11d3cdb95c15f5ab540492a77b1dd83&chksm=8893b7c9bfe43edf5a45b90af35d19070b027b86e8ab50bcb1e70416bb8215cdbf71cdcd46cc&scene=58&subscene=0": "Tesla Model 3新漏洞:一部智能手机即可把车开走", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502821&idx=1&sn=a726d1e7d0fd5858ea4a02fd1552c50f&chksm=f2585896c52fd18007fb23447f3c3be858e7263b092635d5dea25377bc8fd7158f4340e9f9fb&scene=58&subscene=0": "雷神众测漏洞周报2024.3.04-2024.3.10", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519033&idx=2&sn=59f095fb0e0636ab2257aaf9cc7d7e27&chksm=ea94ba53dde333458f33894831a44c39ac69f925de1b9e7262ba526c9c4ebe0f113e84a4f2e5&scene=58&subscene=0": "QNAP提醒注意NAS设备中严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511165&idx=2&sn=e80c8e6bb5c755f5cac73eb229bf9601&chksm=ebfaeb5ddc8d624bd2e40d59b2b1f119658c556f6380e4775f043c0b94c7287ae0d533c610fe&scene=58&subscene=0": "美CISA因漏洞攻击紧急关闭2个业务系统,此前就此多次发布预警", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500591&idx=1&sn=b587312d96aff4aefa32e4e2f400f3f6": "微软2024年3月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247485949&idx=2&sn=24bdceb7bbf705eba3635fb078b3448b": "弹出生成器WordPress插件漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzkyNDYwNTcyNA==&mid=2247483900&idx=1&sn=8d38151cfb7a733630bd2f88a5198b80": "抓包学的好,劳饭吃的饱,利用Burp Suite插件进行自动化漏洞挖掘【附完整代码】", "https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247486766&idx=1&sn=f0680c4774d2d478ef0cbf4602521ab9": "Ultimate Member Plugin 漏洞致 10 万个 WordPress 网站遭受攻击", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485541&idx=1&sn=fd39771e892032ccceac8b65b214c0fd": "【高危漏洞】 北京亿赛通电子文档安全管理系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790610&idx=1&sn=c2f9038a54cc989cb4988511b2ee8a72": "Microsoft 发布2024年3月补丁日安全更新,修复了60个漏洞,包括18个RCE", "https://mp.weixin.qq.com/s?__biz=MzkyNzM2MjM0OQ==&mid=2247492165&idx=1&sn=f36f1d1da44024625102c1b4bb5ee146": "小白学习日记:路径穿越漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNjYzMjc3OQ==&mid=2247484134&idx=1&sn=b5aa55c8bddc6ad74aa0e43766ea7b8c": "[0day]FLIR-FLIR-AX8某接口存在任意文件读取", "https://mp.weixin.qq.com/s?__biz=Mzg2OTk3ODYzOA==&mid=2247485270&idx=1&sn=336d7d5b0a04c8cc8e08956022823281": "weiphp5.0 scan_callback 代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MjAwNQ==&mid=2247486321&idx=1&sn=2d732fc4485abeee8c1cd43fc8355ea4": "CVE-2024-21413:Microsoft Outlook远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650944988&idx=1&sn=50d0617b43d5ccf3614e64cabcf27760": "About一个高价值漏洞采集与推送服务", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487970&idx=3&sn=7be58c5b37aad0bba6276ec09b42768a": "漏洞预警 | QNAP NAS身份验证缺失漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487970&idx=2&sn=087799527e10d6126e6600a0b0f43e4b": "漏洞预警 | 畅捷通T+ SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487970&idx=1&sn=4b038a4e0bf203e9b515cda7afd4cd70": "漏洞预警 | Fortinet FortiOS & FortiProxy越界写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247504284&idx=1&sn=d69bd1856e912ba63ff5c47429c50fb4&chksm=fe26d49dc9515d8baf6f665555e0133efeb4dfe39b6acd4d69ed914e7e749a666d66ab62b9b3&scene=58&subscene=0": "2024-03 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519052&idx=1&sn=f7f3e5630b942ebc8cd1ed12142096a0&chksm=ea94ba26dde33330163b7ef2afd5eea7b2d39a964b3be22ca3c651c70ba3e9df6478b2177356&scene=58&subscene=0": "微软3月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519052&idx=2&sn=d5b9f6a7d087ce1726d9e0679cc933b4&chksm=ea94ba26dde333307a450f63f68590bc4791675780d23d65dd3bb4bc44f6f0006aacb375962f&scene=58&subscene=0": "谷歌2023年共发放1000万美元漏洞奖励", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247502892&idx=1&sn=f77346f7b09284b47fbf1e7aeaf19821&chksm=eaf98460dd8e0d7668bfb38e1ad2fe0ee430b97feee1ce1b7fe3ef457af4690df3937921f3f1&scene=58&subscene=0": "奖金翻倍| 2024补天通用型漏洞专项活动第一期上线!", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493831&idx=1&sn=6586cd1b5f207d86a1b40c9dc9a70dfc&chksm=e8a5e2a4dfd26bb2fe37b5ecd69513866815798c87202fa79a2fe08e9de5fb5351a6e75df60e&scene=58&subscene=0": "浅谈渗透漏洞思路分享-水平越权", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786330&idx=1&sn=45f7c3571c50b65a04e3626b948108aa&chksm=8893b7b5bfe43ea381f7bd31ad3c7b9072b0d19c0383f28e813028d2485c03f9080082928571&scene=58&subscene=0": "黑客利用 Windows SmartScreen 漏洞投放 DarkGate 恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519060&idx=1&sn=bd31e9a884e83396402ed8ca25c23ecd&chksm=ea94ba3edde333283d9736a8148c06430f74a8742642b854653fb130487618d9bdd7fb00804c&scene=58&subscene=0": "Fortinet 提醒注意端点管理软件中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247496824&idx=1&sn=98efa1a8fcc9dfb28968bd12718d824c&chksm=e84c52a7df3bdbb177ce5a2a81d11a334a7987654713bccea7f0ff95a07bc9cdda13a05ab8f4&scene=58&subscene=0": "【云原生攻防研究】— runC再曝容器逃逸漏洞(CVE-2024-21626)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664207621&idx=5&sn=66af2194c689ba5ac8d6cdecfa054b2d&chksm=8b5997fcbc2e1eeabe1bd7d9f7c4b261258e43a933b43523d47547b31dd16ac260746eb0b40b&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247492466&idx=1&sn=84b2b31cdce477897b57ef42e20cb21b&chksm=fa9d1824cdea9132e1d32af2365f3c5222aac03b790233d0b8a1d5feadf421382564c01cfce4&scene=58&subscene=0": "一图了解「漏洞攻防安全」安全范儿技术沙龙", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247516454&idx=1&sn=1956c3ef3690d050946a83f25057779f&chksm=ea83a7b3ddf42ea5cb19be41217f2692a412184362cf7ad1abc018b7c6d92b7cb7d4deab70f2&scene=58&subscene=0": "龙年首场「漏洞攻防安全」| 第13期安全范儿沙龙开启", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493836&idx=1&sn=34277489072e7273b2d6d6c0ceeaffdc&chksm=e8a5e2afdfd26bb9da14cc0d98404868a7c125c5a7eaa14c86a021155fa6e5086e11892de1ce&scene=58&subscene=0": "漏洞挖掘|从edusrc转战到企业src的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247517847&idx=1&sn=09660dbfa3c5b39351c9e176021aa7d1&chksm=eb7058a8dc07d1bed9c9b0efdf2831d0b77af47fc5431040a516a43149e80447afa986c93a7c&scene=58&subscene=0": "2024-03微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkxMTIyMjg0NQ==&mid=2247494318&idx=1&sn=bc3ee5634fc0913755f52db584b4af09": "方程式工具包远程溢出漏洞图形界面版V0.3(内置永恒之蓝、永恒冠军、永恒浪漫等)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485783&idx=2&sn=8233958995868f7379fa9a0d4f7f803a": "用友NC base64接口存在SQL注入漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493843&idx=1&sn=80af60f272bcc5f544c88825b59cea95": "教育edusrc-漏洞挖掘-逻辑漏洞篇", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247491493&idx=1&sn=d30548547320bc0924639b8897d34ff1": "一款Spring综合漏洞的利用工具,工具支持多个Spring相关漏洞的检测以及利用", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247513901&idx=1&sn=a959091489ae2baa232f9f04424fc66e": "从历史漏洞学习漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511212&idx=1&sn=9916d583c2e3125ee6f8f1f48d464987": "谷歌2023年发放了7100万元漏洞赏金,近年累计支出超4亿元", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522315&idx=2&sn=f1e11bbe5b00d6c0ce316a3c9ccd93af": "【漏洞通告】Fortinet FortiClientEMS SQL注入漏洞CVE-2023-48788", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651262326&idx=1&sn=e8373e1ba0836c2f54e314721d95aba1": "安全左移是责任左移吗;漏洞重复出现怎么办 | FB甲方群话题讨论", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055890&idx=3&sn=d22a6994c0c950c556f4a1340243f76a": "【安全圈】Fortinet 修补关键漏洞,以防目标服务器上启用远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055890&idx=1&sn=2948324905b60f87a186b698c3a76da7": "【安全圈】Windows Defender SmartScreen 漏洞可被黑客利用,微软发布声明:已修复", "https://mp.weixin.qq.com/s?__biz=MzkyOTMxNDM3Ng==&mid=2247488390&idx=1&sn=17b9a8ee698021cdf5a5da237a972222": "畅捷通漏洞大全集合", "https://mp.weixin.qq.com/s?__biz=MzU2ODY0ODk2Nw==&mid=2247488434&idx=2&sn=f23bec4962948a8bb54574c6f9360a9b": "【漏洞情报】Fortinet FortiOS & FortiProxy越界写入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247485151&idx=1&sn=204683a6583f0f4228dea5db8b323e6b": "软件安全评估之软件漏洞基础", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487738&idx=2&sn=9463f84809c26e433b5d7a2f775fb7e6": "【漏洞预警】Argo CD 存在 CSRF 漏洞(CVE-2024-22259)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487738&idx=1&sn=4e2572401b6122e2bf9b1e1b90662917": "【漏洞预警】Spring Web UriComponentsBuilder URL解析不当漏洞(CVE-2024-22259)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500607&idx=1&sn=5ad5d2c73b6894dcc021668868e6760e&chksm=fe79e7a7c90e6eb104753409eb662c6f5c055fca36269020b9becb667d0ffb9981be58e4e2be&scene=58&subscene=0": "Fortinet FortiClientEMS SQL注入漏洞(CVE-2023-48788)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247504978&idx=1&sn=4f2ea6f11a637a543bd101c27b5fa2c7&chksm=cfcab746f8bd3e50ab1a6b53fc6411d7f17cf05c8e5b9911cbb3b5bd283e13e14610adb49d36&scene=58&subscene=0": "漏洞通告 | 通天星CMSV6车载定位监控平台系列漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786340&idx=1&sn=d209747c78142916f2c8600b6e313b37&chksm=8893b78bbfe43e9d18701181f612e57b7fd39f7b3c4537bdcfd9c37df3d556d0de9d1f4334a7&scene=58&subscene=0": "开发和安全人员看过来!Kubernetes RCE 漏洞允许完全接管 Windows 节点", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786340&idx=2&sn=291fb586743de6e13ce2b961936a7dfe&chksm=8893b78bbfe43e9d2214cd6edc5cae67012392cc6c5525f9df6b05da587326a86b9114004205&scene=58&subscene=0": "360漏洞情报:Fortinet FortiClientEMS SQL注入漏洞发布", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492405&idx=2&sn=c3371791d224a3c42f39de7e9ef631b9&chksm=96f7fc58a180754ec0513bd36a1e92a89b9dcc0fe355f2229ff39a1e2add09ce4d32f3ed42ab&scene=58&subscene=0": "【已复现】 通天星CMSV6车载定位监控平台SQL注入致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247542764&idx=1&sn=e554b0f49130a582bb664ef055dba234&chksm=c1e9abbdf69e22ab8814100e69cf6c97fde14686ffb4d24d0cf92811d7285aae89d7574fe5ab&scene=58&subscene=0": "基于人机协同的漏洞挖掘框架设计", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247543456&idx=1&sn=c99c920003f5cf167c8f2687b1755e5e&chksm=fa939c61cde415773e6af6a4a2ac1dfbee18b3e1c37b73e7b5106880d25030c048dfc856df04&scene=58&subscene=0": "已发布PoC,神秘GhostRace攻击可窃取Intel、AMD等CPU数据", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247604735&idx=1&sn=2e0eb92a0a2aaaab53de277b53141bc7": "基于模拟仿真的蓝牙协议栈漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493859&idx=1&sn=402e374d761ebe2bb4ffea2943ebddd0": "五千块-某金融赏金SRC漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247484351&idx=1&sn=e0252ffacf7fabee8604c3fdbe6c783d": "记一次项目中快速挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4OTI0MDk5MQ==&mid=2247491030&idx=1&sn=c430c2aee6624b48934633fd0464b7a3": "kali 系统 利用MS12-020 (CVE-2012-0152)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247505034&idx=2&sn=5298725d36661589e1d9fb6fdd204c57": "使 Mojo 漏洞利用变得更加困难", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247505034&idx=1&sn=eea20c0c0223dfdf55befd611c74a45d": "CVE-2024-2432:Windows设备上Palo Alto 程序权限提升", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247515199&idx=1&sn=b0c7fd91ef175d68332757e86cb3847b": "若依最新版后台RCE | 干货", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247489700&idx=1&sn=9279c112ca09f4a01fd363689ff4118d": "某OA 0day审计分析", "https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651140292&idx=1&sn=525c0180c43ad8028deadaa683e50c9d": "【漏洞分析】CVE-2021-4145 dirty cred漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650588838&idx=3&sn=b160b30ba7660978d0790b7422eba2dd": "海康威视iVMS综合安防系统任意文件上传漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488012&idx=3&sn=bfeec874574fac755c10bbab355b52f9": "漏洞预警 | Fortinet FortiClientEMS SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488012&idx=2&sn=1a50c6638ef897bc16be47c382c9b289": "漏洞预警 | Apache Pulsar任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488071&idx=3&sn=2b667f30a0cd91b552d2cd851c471de8": "漏洞预警 | 麒麟堡垒机命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488071&idx=2&sn=34b74fe79660ad7594eca129abf96232": "漏洞预警 | SCM一卡通平台系统未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488071&idx=1&sn=36c48dffeaec8531d88d75e7a2329288": "漏洞预警 | 74cmsSE任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247484422&idx=1&sn=6d125acc7c2a843c0afcd48b5893ae05": "Spring Framework URL解析不当漏洞以及绕过", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247494475&idx=2&sn=5942889f2a7dd05c693b3409a472017f": "2016 年以来五角大楼收到超过 50,000 份漏洞报告", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650258219&idx=1&sn=6164bb078302d43929d5fe7b7ad2d145": "继续Citrix传奇:CVE-2023-5914和CVE-2023-6184", "https://mp.weixin.qq.com/s?__biz=Mzg4NDk4MTk5OA==&mid=2247485230&idx=1&sn=e11b52f841dd450314592bce5049542e": "0day!!0day!!—RCE—飞鱼星上网行为管理系统企业版前台", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487775&idx=2&sn=c71dca01c5e9ddc3422198c900cf9c99": "【漏洞预警】Parse Server注入漏洞(CVE-2024-29027)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487775&idx=1&sn=333c91643fb2319d4ab6677a68890123": "【漏洞预警】Confluence Data Center&Server路径遍历漏洞(CVE-2024-21677)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247509982&idx=1&sn=72095e2216ac522b0e41dda75db6ee83": "RCE 遇到受限 shell 的突破", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485855&idx=2&sn=8fc959e7aec9b58c48f4b93aaf12b1ba": "京师心智心理健康测评系统MyReport.ashx存在敏感信息泄露 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485855&idx=1&sn=57b14b10cfc2c52e3e590c252fe44dea": "用友NC runScript接口存在SQL注入漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU3OTA4Ng==&mid=2247484006&idx=2&sn=401889b31fc25ba76370d15862bc77a6": "【1day】宏景e-HR的report_org_collect_tree接口sql注入", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU3OTA4Ng==&mid=2247484006&idx=1&sn=1f603175d723d55a844bc2f32a11e28b": "【1day】正方教学管理信息服务平台ReportServer存在任意文件读取", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650275274&idx=1&sn=f5a239440164daacc33e2c5f7212a88c": "行业突破,再添标杆!盛邦安全中标中国工商银行全行漏洞扫描项目", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092616&idx=1&sn=3891e1692d582efbd1674e2d553698ff": "全球知名游戏竞赛选手电脑遭漏洞攻击,总决赛被迫中断", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247488112&idx=2&sn=82acf69228d66418c92a808840b7001a": "漏洞挖掘|从edusrc转战到企业src的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247488112&idx=1&sn=026c6701d7cdbddf64fff5080b2f26cb": "自动化进行目标资产探测和安全漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651263072&idx=4&sn=3742cabf56b61ebf0bc3cbb1475d7b7b": "如何使用Rayder组织编排漏洞侦查和渗透测试工作流", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652056176&idx=1&sn=aced7ef67a0dcab4ca07374264708b12": "【安全圈】电竞总决赛现场电脑遭漏洞攻击,影响选手比赛,最终被迫中断", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247618336&idx=1&sn=a3d24b112da8ea903d700b2b3a51c544": "压力使人倦怠,倦怠让安全漏洞百出", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522328&idx=1&sn=4f0c1bf023dc08dfe12fe5f945fd5999": "【漏洞通告】Atlassian-Confluence路径遍历漏洞CVE-2024-21677", "https://mp.weixin.qq.com/s?__biz=MzIzODAwMTYxNQ==&mid=2652144870&idx=1&sn=04ed37834d666107df6d492e27c5b160": "平安银行邀你来测!单个漏洞最高2万元", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247542840&idx=4&sn=32bd510d08b43f813787df68a7925d40&chksm=c1e9a469f69e2d7fb4dba068a0e13c9e09211712b301da53083ad7aa2e9c593cc62e1df5ccb0&scene=58&subscene=0": "全球知名游戏竞赛选手电脑遭漏洞攻击,总决赛被迫中断", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493908&idx=1&sn=cd2cd2fdfc83a2d3d7b1097ef973267e&chksm=e8a5e377dfd26a61bb23382d9f768913c2ddc3e46e2387a836c5649849bb4c012eca0540943b&scene=58&subscene=0": "从开放重定向到远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493931&idx=1&sn=b9672b427b9f4fade9a615d2bd744cfe&chksm=e8a5e348dfd26a5e929e59762c284e381d643e2c74b964276378ee6b92ab392af5f913239426&scene=58&subscene=0": "记一次捡漏通杀未授权访问,拿4本CNVD证书", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493936&idx=1&sn=eb55bc68b28d81a40c318124bd404847": "抖音: 重定向跳转 -> XSS漏洞 -> 升级高危", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485889&idx=1&sn=dfa8832002b3a1c53e633b23b0060f6a": "华天动力OA8000办公系统TemplateService存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247537261&idx=1&sn=5d1a643ab3061e05904648eafd5e83e2": "支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247620625&idx=4&sn=cb73388acbc4120330234002c765e818": "AWS曝一键式漏洞,攻击者可接管Apache Airflow服务", "https://mp.weixin.qq.com/s?__biz=MzIyNzU2NDIwOA==&mid=2247489481&idx=4&sn=9878bfda9caf026a9332f10be7ba8c9f": "飞企互联-FE企业运营管理平台uploadAttachmentServlet 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNzU2NDIwOA==&mid=2247489481&idx=3&sn=519d82d2db6562bf55d5b7065e170398": "​飞鱼星企业级智能上网行为管理系统​ send_order.cgi 前台RCE漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkyNjU3NDQ1MA==&mid=2247487815&idx=1&sn=c937b495aeb6e6815e5513c4e4c326f8": "【漏洞复现】CVE-2024-24747:MinIO权限提升", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652056367&idx=4&sn=77218186bd8b695558705b716f6cbc23": "【安全圈】苹果 Apple Silicon 芯片被曝安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247505317&idx=1&sn=bd95f9a23b7e3dbfc214d3a17598e680": "Pwn2Own 2021 Parallels Desktop VM 逃逸漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247505317&idx=2&sn=9d00b3264d87b35b88553ee60bbba72b": "Pwn2Own 2021 Jscript9 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247607086&idx=1&sn=aca64303efc7aa22d2db92e16c9e53be": "记一次黑盒摸鱼意外挖到的0day", "https://mp.weixin.qq.com/s?__biz=MzkyNDI2NjQzNg==&mid=2247492908&idx=1&sn=da8db85bead460d776789880b81531ac": "edusrc证书站漏洞挖掘(垂直越权)", "https://mp.weixin.qq.com/s?__biz=MzkwOTQ4NDMzOQ==&mid=2247483943&idx=1&sn=60b7a6831c8090435b90da18b6b99a65": "CVE-2024-1698", "https://mp.weixin.qq.com/s?__biz=Mzk0NjE0NDc5OQ==&mid=2247523242&idx=1&sn=a10203344730ec8f9003c6d9d6002fea": "记录一次万元漏洞赏金的挖掘", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247605407&idx=3&sn=8f870cc713c839a722dcebb1fc9c4cf8": "逆向分析在漏洞挖掘中的应用", "https://mp.weixin.qq.com/s?__biz=MzkyNTU4MDc5Mw==&mid=2247485429&idx=1&sn=6bcd80377c2cf421105d0ba804b22c7b": "【漏洞复现】用友-畅捷通T+-RRATableController-命令执行", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247510011&idx=1&sn=592135c4e6680aa23347d1c0b3ad5e28": "伪造账户接管之路:价值$$$$的复制密码重置链接漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486190&idx=3&sn=f9c6424d23f9495252f1445b1bda66c1": "CVE-2024-1208", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486190&idx=1&sn=fbff0368f4440af721619e1e482219b4": "CVE-2024-1210", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493941&idx=1&sn=40aae1010c6b37f969b260817de084b0": "通用0day挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652056486&idx=1&sn=81f3778a0f6ca6b630531e0ede055a93": "【安全圈】震惊!AWS曝一键式漏洞,攻击者可接管Apache Airflow服务", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5OTQyNQ==&mid=2247484928&idx=1&sn=27a66ae01ff4594ce19221c29be80ef9": "赏金猎人|SRC简单拿下某公交后台系统多个高危漏洞思路及试探通用型漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458548845&idx=2&sn=8d3776912d03b70254f1f5514a704dc8&chksm=b18d4ae786fac3f1855e7e0e8a1457b5e41007b85ae345102c033762b8eaf15a31af40f0a79a&scene=58&subscene=0": "利用漏洞,黑客能够轻易打开全球300万家酒店门锁", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519143&idx=2&sn=dc771e1d0ed09825b9fb60e06a9c8291&chksm=ea94bacddde333db8eb4ff27c6f46bccc6a819c55ebd58f8f6b71a42833f11ad76c92012ba76&scene=58&subscene=0": "AWS修复 Airflow 服务中严重的 “FlowFixation” 漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247492534&idx=1&sn=8024e7f79f4579f7bd08982706c4076c&chksm=fa9d18e0cdea91f6b20e3405679f9c51aed601dd96740c8974c28a3b538d6fec3b1169ec2078&scene=58&subscene=0": "ByteSRC专测第19期!敏感数据相关漏洞享2倍积分!", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247542990&idx=6&sn=f21898455e708f1f3743801855f65bfa&chksm=c1e9a49ff69e2d89188e880d82e25cad86b17fb4c3af2a7ed2006211ca827ace3bcdd5fdf941&scene=58&subscene=0": "AWS曝一键式漏洞,攻击者可接管Apache Airflow服务", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494563&idx=1&sn=9fc26454f6e7a9261890e06b35582738&chksm=fd74db6aca03527c9b9028c0d84f8f25558638bc24f0ea2517e06c3aa7cd8fb251a9b3535c3a&scene=58&subscene=0": "CNVD漏洞周报2024年第12期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494563&idx=2&sn=96ed4f66057751d3d49872ac7f55c56e&chksm=fd74db6aca03527c5f7392b1236094bf0e607606b8b33d0018b61671417ecf76e43b8a221b16&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240318-20240324)", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247485865&idx=1&sn=2ce8e3c9766b51278815e1dcaa6c4468": "漏洞分析 | SeaCMS v12.9 中 SQL 注入", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486207&idx=1&sn=9ed9da75383eb02de9b9dcbb24375496": "CVE-2024-27564", "https://mp.weixin.qq.com/s?__biz=Mzk0MDQzNzY5NQ==&mid=2247490481&idx=2&sn=dea01a356635876fca3447bd89cfbecd": "【红队】Spring漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyOTMxNDM3Ng==&mid=2247488403&idx=1&sn=7fb618fcced375d6c7cec2eaf154453b": "致远OA ucpcLogin密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485915&idx=1&sn=fb907fd3f7b0b94098a000456d575a45": "飞企互联-FE企业运营管理平台ShowImageServlet接口存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247515399&idx=2&sn=a5470421719afcbe904cca202065b27b": "漏洞挖掘 | EDU小通用漏洞分享", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247515399&idx=1&sn=6627e9eb67588949812cccda94657d61": "实战 | 黑盒摸鱼意外挖到的0day", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487809&idx=1&sn=fe1ec3bf919d15673c15fa587b285345": "【漏洞预警】checkemail Check & Log Email代码执行漏洞(CVE-2024-0866)", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247484223&idx=1&sn=ca87cfd364ac1db85cd2101bc7fa814b": "金和oa协同管理平台历史漏洞分析三则", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500639&idx=1&sn=786acdc97a6d5123183053ce4dcb74ae": "【已复现】Adobe ColdFusion 任意文件读取漏洞(CVE-2024-20767)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651264201&idx=4&sn=a9456b463682b1146d0f885cbbaf08ac": "如何使用route-detect在Web应用程序路由中扫描身份认证和授权漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3MzQzODg2Nw==&mid=2247485162&idx=1&sn=c734506fd43ddf6af271eda7cb76ad2b": "价值3k的漏洞挖掘分享(漏洞已修复)", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247492591&idx=1&sn=6eb38827f25aa04aebd0869a6928299d": "文末有奖|「漏洞攻防安全」PPT、回放来啦", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458548918&idx=2&sn=7ef737b6b8265be41c3dcb64fc615884": "Pwn2Own温哥华黑客大赛落幕,火狐浏览器连夜赶工一天修复两高危漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458548918&idx=3&sn=9ce968f889e8981d78d12bf72ab17865": "学硬核技术!系统0day安全-二进制漏洞攻防(第3期)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519154&idx=1&sn=3f4209efe9a510274abec479b51dcceb&chksm=ea94bad8dde333cec265a5c93f4ed89b687c3a2301fd4d5045252f76ea8505a6aa3b125f9070&scene=58&subscene=0": "Mozilla 修复Pwn2Own大赛发现的两个 Firefox 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519154&idx=2&sn=e5156dc817f213bae9628a3a674da4e8&chksm=ea94bad8dde333ce498ee36da84dbfce9ddeb839294d45a9916983f7515549e2bd774f39bb8b&scene=58&subscene=0": "CISA督促软件开发人员消除SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499056&idx=1&sn=3b5177323cd2fbc152ae8ce7079dffba&chksm=973ace52a04d474481b55c4bc2543ebcc391e23899a6781a07e81eaaa8f062a3baedbd9dcb49&scene=58&subscene=0": "CNVD漏洞周报2024年第12期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499056&idx=2&sn=b50a81bb94f1eb31a684a0b383a78f5d&chksm=973ace52a04d4744f3e9b5e4ae01b2fae72242ded228d3a2d462ca9b78e346c8d3a6b2eca980&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240318-20240324)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502840&idx=1&sn=d74c5314f0cfdb74edb0d60961c35995&chksm=f258588bc52fd19d3aa3e16d264a6a1ce649f40a1f69627c5dc896e34c922f7dd9adc888aee2&scene=58&subscene=0": "雷神众测漏洞周报2024.3.18-2024.3.24", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488647&idx=1&sn=f2a10f535769b3453789cbc2bf07b706&chksm=c2c6438cf5b1ca9a11cfb8620d56b5b18b415c735e07c7a48397869514a26d27242f3b4849dd&scene=58&subscene=0": "【漏洞通告】XZ-Utils供应链后门漏洞(CVE-2024-3094)", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650977901&idx=1&sn=d9200fcaa853656a5b7310333a4c52bc&chksm=8079f45fb70e7d497ad8e1e241b1791686dd6c9a9f9143d3a33b8d9ec1f535e6a7cf14eef2ab&scene=58&subscene=0": "【知道创宇404实验室】警惕Linux生态xz-utils软件包被攻击并植入后门(CVE-2024-3094)", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247510108&idx=1&sn=726338571c7d1bb396f47d07fa83e2d1&chksm=ea665f2bdd11d63d5db5c710e5e19d0949065f144ca783d25061761f7816e68dd906b871994c&scene=58&subscene=0": "liblzma∕xz库被植入后门影响SSH事件紧急通告(CVE-2024-3094)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458549352&idx=1&sn=c45c212b8db20154dbfa9edeaaebc593&chksm=b18d4ce286fac5f415b3697517f2c12d523f7c13d1d143b25d895a980a49a2e420d79e5a46f8&scene=58&subscene=0": "CVE-2022-2588 Dirty Cred漏洞分析与复现", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458549352&idx=2&sn=4f896f0f8644a3c8984ec9ef0c04cf7b&chksm=b18d4ce286fac5f453954862bb18ba139e33d42aa6231fb393a771a6f36a125f66b5f8d2d831&scene=58&subscene=0": "明晚19点直播课!欢迎报名《系统0day安全-Windows平台漏洞挖掘(第2期)》", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496594&idx=1&sn=e09266aaa54a6ad0e8188a288084ef7f&chksm=ce96beacf9e137ba3f5cf5b3fe2c25d938f100aeb6d1fef231b0e044081c3c86649e0b627e96&scene=58&subscene=0": "【风险提示】天融信关于liblzma∕xz库5.6.0、5.6.1版本后门事件(CVE-2024-3094)的风险提示", "https://mp.weixin.qq.com/s?__biz=MzI1MjQwMTAyOQ==&mid=2247483855&idx=1&sn=13a48a1e2c31decad06367213547f917&chksm=e9e50525de928c3339c75a7cc8471208a57fe6c0ba4ef069fa40711148b9c148ef88183e1b0e&scene=58&subscene=0": "xz xz-utils供应链攻击CVE-2024-3094初步分析", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502847&idx=1&sn=16b495176592ad2fec8611a1dafe6934&chksm=f258588cc52fd19a8353d6b8928785dfd6cc8622d4f8c218eb4a968f46738742c2fb0e8a3dcb&scene=58&subscene=0": "雷神众测漏洞周报2024.3.25-2024.3.31", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657165462&idx=1&sn=449cfe25143f2b0e51cca7cbc5efb668&chksm=f1d4d273c6a35b655e853a017a8ce4b9bccdf19c6510614462d602dca17ac449fdc67724e844&scene=58&subscene=0": "Linux内核提权(CVE-2024-1086)", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486319&idx=1&sn=e22f7130d587359aa8c94b49be6f7443&chksm=ec6fec6fdb186579fb397aa6569fd83608613a04c2830005741c1fa8ed30b1505a8fe321e8fa&scene=58&subscene=0": "【风险通告】XZ-Utils 5.6.0∕5.6.1版本后门风险(CVE-2024-3094)", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543108&idx=2&sn=661494379fd07b40946385687f93d29f&chksm=c1e9a515f69e2c037852cb56eefedacfc20201c3ebee681f2501149df14300916b36528c327e&scene=58&subscene=0": "谷歌报告显示:2023 年 50% 的0day漏洞利用背后都是间谍软件供应商", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543108&idx=4&sn=2b0b1e6bb59fbeac67261b7ecce9a7e4&chksm=c1e9a515f69e2c0323805452df95a048e066342060b67e5564e19c41aa89e913b90d9be525c8&scene=58&subscene=0": "ScreenConnect 管理员应尽快修补关键的 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247543827&idx=1&sn=f727ecb6dd35ada1a09372f3c027faf5&chksm=fa939ad2cde413c493ea2f17e46df7f8ecd64c7c2c4d20c8126a5b7d933bb41d72db366979ee&scene=58&subscene=0": "谷歌报告显示:2023 年 50% 的0day漏洞利用背后都是间谍软件供应商", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484539&idx=1&sn=e6419879ea1b37b020f493fb1b6e54e7&chksm=c12af9faf65d70ec6c2189a77b34bef906796152064310cd302b706f565746c625049d66f304&scene=58&subscene=0": "【复现】JumpServer 后台模板注入漏洞(CVE-2024-29202)的风险通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494599&idx=1&sn=945617df0078d55f0a5a3cd84dd0dae6&chksm=fd74db0eca03521862a78027187cc0135393aad039de89dbf7adb9d7501296f7f90c46f5e75a&scene=58&subscene=0": "CNVD漏洞周报2024年第13期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494599&idx=2&sn=19a1236472ccab941ee13b0311a7f3aa&chksm=fd74db0eca0352186be3b42594debf031a3fe38ffcd7635dd42e5c2b4b740a9f128fa8f39a48&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240325-20240331)", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650590410&idx=2&sn=936d8ce5574f30c74e6439b80f98e8bc": "被忽视的“高危漏洞”", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247475&idx=1&sn=fe99fc58f51eec9c92d9a2080b8283fe": "某办公系统反序列化漏洞分析复现", "https://mp.weixin.qq.com/s?__biz=MzIxOTQ1OTY4OQ==&mid=2247484379&idx=1&sn=9302f859d29315e1b88390191d0c8354": "关于xz核弹级漏洞,看这些就够了?", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486015&idx=1&sn=6fd61fb957dabec717b5b034b468516d": "用友NC Cloud importhttpscer接口存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247491139&idx=1&sn=efccf7a88b6041fd559d9b1a3604dfec": "符号连接替换漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494022&idx=1&sn=7ac77a24e1c151c2246d1b041b7fcf29": "实战之常规漏洞快速挖掘", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247515503&idx=1&sn=862a23d0a30fe9822b17885a8b5bcdd1": "干货 | 支付金额类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247491188&idx=2&sn=1c624fd62b1c810203bf4fd183513fed": "谷歌解决了两个被积极利用的Pixel漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247491188&idx=1&sn=b5eb54268da4929559a66f697d9d39d3": "谷歌解决了三月份 Pwn2Own 比赛中利用的另一个 Chrome 零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247538697&idx=1&sn=eaacfb4cf3681c0ddbccc55f17410c32": "漏洞挖掘 | 某证书站Bypass sql", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247554964&idx=2&sn=7ae5fd07a3a684153358b3a77496bb2c": "实战中遇到的一些莫名奇妙的逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247484245&idx=1&sn=39fb8d813619c8b2e44262d36bbbe6f0": "朝鲜APT Lazarus利用AppLocker零日漏洞部署rootkit", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652057293&idx=4&sn=965b31a78636ecd723b8b5207417ca97": "【安全圈】WP-Members 插件中的安全漏洞导致脚本注入", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488283&idx=3&sn=afb6380e1a16409d0267f9369d73820a": "漏洞预警 | Apache Fineract SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488283&idx=1&sn=53b339e76177b6240b0a4f84d6f49554": "漏洞预警 | JumpServer JINJA2注入代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488283&idx=2&sn=208c1ab85b235a315e4426c16055a701": "漏洞预警 | 用友U8Cloud SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790792&idx=2&sn=df13ca830ce19a60c0716fb7ed6e019f": "欧盟警察机构遭遇严重安全漏洞:高级官员的敏感文件失踪", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458549820&idx=1&sn=73458e68b807dae75e6a79d17550f812&chksm=b18d4eb686fac7a026d9cfe3ccecbebdb1242912bac315b2c31a0a7088d33ff1dd50daea12b5&scene=58&subscene=0": "CVE-2024-0015复现 (DubheCTF DayDream)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494043&idx=1&sn=c967124b95eaae8f0ee5615bd69709c2&chksm=e8a5e3f8dfd26aee66a5b8dab05336d51aec15c186ab8abbb88b7186c1617b25c71e456b5f81&scene=58&subscene=0": "支付类漏洞挖掘技巧", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486403&idx=1&sn=37ae23f1bc1bf4646e0f37208ac83f79": "中间件安全-CVE漏洞复现-Weblogic+JBoss+GlassFish", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247484457&idx=1&sn=6228ec33344f78434b67e0363e5ee754": "支付漏洞渗透测试思路", "https://mp.weixin.qq.com/s?__biz=MzkxNjQyMjcwMw==&mid=2247486023&idx=1&sn=a9aed6df7df53368fe5f52b391051c37": "实战 | 记一次某报表系统漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247491256&idx=1&sn=cb4258d5dddf56a302b4fc746784f7f8": "dst-admin饥荒管理后台相关漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487875&idx=2&sn=8f108bd7f47ebc89f7f3ee65a9553153": "【漏洞预警】Progress Flowmon命令注入漏洞(CVE-2024-2389)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487875&idx=1&sn=edccd6122407c13a5eeed762fb16d388": "【漏洞预警】HTTP∕2 CONTINUATION Flood拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNTU2NA==&mid=2247485739&idx=1&sn=43b07a879757ce786603b57f91abfcc2": "实战 | 教育SRC漏洞挖掘获取rank以及证书获取", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092634&idx=2&sn=143b2301d4a1ca677c66847c464e4a28": "俄罗斯称利用WinRAR 漏洞的攻击活动与乌克兰有关", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652057486&idx=2&sn=9b2fe9c936492d052e96683f6c334db6": "【安全圈】男子利用网络漏洞刷取游戏金币,非法获利413万,被判刑三年六个月", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247501287&idx=1&sn=a94e6420ef446afc23b7abd0f9dac6a9": "【成功复现】Telesquare TLR-2005KSH路由器远程命令执行漏洞(CVE-2024-29269)", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247485533&idx=1&sn=28aa38d2a9264ae5ec6cd557ed4e9144&chksm=fb04cb35cc7342235918310d4701d0e1f516e31a3ba89a0630a6a8afc29094879983ac7be1bc&scene=58&subscene=0": "灰色地带需求井喷:零日漏洞价格再创新高", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519231&idx=1&sn=5f9f5009dffb1ec140664df249e99fae&chksm=ea94ba95dde33383baddf488f4094e6fa0cd272867dd83693a008407c6112765694a7f8ef1d6&scene=58&subscene=0": "谷歌修复遭取证公司利用的两个 Pixel 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519231&idx=2&sn=b7b32d73cbe2046719780c03304729ce&chksm=ea94ba95dde333834c93da6e263ab3af72ce14f2a171799c65802dab992336cd0c1a96492159&scene=58&subscene=0": "思科提醒注意Small Business路由器中的XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543157&idx=3&sn=f495bd399aea42837957b112d223e204&chksm=c1e9a524f69e2c324b88e88a435623bb379e7aba2463231edf0280c7ce29d934d6ff2f98b11f&scene=58&subscene=0": "俄罗斯称利用WinRAR 漏洞的攻击活动与乌克兰有关", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486406&idx=1&sn=7589fdf7a535788081c3ed0047d93f11": "中间件安全-CVE漏洞复现-Docker+Websphere+Jetty", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486305&idx=1&sn=93580403e5545fb119e0145b8043b197": "CVE-2024-25869", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486402&idx=1&sn=b641fe8f630d6a05506205432dffbd3a": "记一次小程序渗透并拿到后台管理员权限-漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247537414&idx=1&sn=f90e0199a445f85a57a49694cfba0323": "某oa命令执行漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486098&idx=2&sn=ca5e0f55bc7ea9c3474d2017047ba345": "畅捷通TPlus App_Code.ashx存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486098&idx=1&sn=a73ca152dbb0b24fc06474932072b496": "D-Link NAS设备nas_sharing.cgi接口存在远程命令执行漏洞CVE-2024-3273", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487887&idx=2&sn=c7d5f6729a047143000776043e874da6": "【漏洞预警】pgAdmin远程代码执行漏洞(CVE-2024-3116)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487887&idx=1&sn=79a97db0c4509d1662d5d68401f62393": "【漏洞预警】Adobe Magento Open Source命令注入漏洞(CVE-2024-20720)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652057549&idx=3&sn=e9657c747c3e254c76f6156c11ffa313": "【安全圈】HTTP∕2 协议被曝安全漏洞,被黑客利用可发起拒绝服务攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652057549&idx=1&sn=d444948a104679ef92393004fce2dea5": "【安全圈】7名新能源车主被抓,他们找到了系统漏洞免费充电", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519242&idx=1&sn=6c9094b038e67aea0f2968fffbb125e0&chksm=ea94bd60dde334764a9154d61f5809e1fd0a977ba3617a96d698def9b968b04b3039d7ecc3b2&scene=58&subscene=0": "产品中又现4个漏洞,Ivanti 宣布安全大检修", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494631&idx=1&sn=f7bb6973a42b05d5dfb8d3c054854408&chksm=fd74db2eca035238404e0318d694ccb2b65dc27f54afeec5e095620c2f343d69317910ea3689&scene=58&subscene=0": "CNVD漏洞周报2024年第14期", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545610&idx=1&sn=fc68572f3dac32cb743ebd68f5f855b8&chksm=eb84d8aadcf351bcf0af30549c858b2e6c7a5f71c2e686adcc20cdf0ca90d114833794aaf7f0&scene=58&subscene=0": "技术分享|某办公系统代码执行漏洞分析及检测优化", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522464&idx=1&sn=a768ef9a7d868cc6a4b3634693c49f13&chksm=ce4613b0f9319aa644d9451f1473ec0fe1e645cc139af8f188cbe3a5cf6cc07855c68cfaff54&scene=58&subscene=0": "【漏洞通告】Rust命令注入漏洞CVE-2024-24576", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247505357&idx=1&sn=526b993d31f6b6d0ce1f87daddeca19a&chksm=fa520073cd25896569480bce7e34b0322302bb3fd971dfd014940ade0be29e39e586d40c7028&scene=58&subscene=0": "微软2024年4月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247537544&idx=1&sn=f4cecd23d72c740c47af236c985f7dfc": "0day Telegram核弹级漏洞 ?1day Telegram Windows客户端RCE漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg3MDY0NjA5MQ==&mid=2247484219&idx=1&sn=d3b6865f992372bf6a3bde54e372f931": "Tomcat 中间件漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247510516&idx=1&sn=5dd03ff1a2fa6985aa6c3def33d26873": "一次曲折的JDK反序列化到JNDI注入绕过(no forceString)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494230&idx=1&sn=3d60b938d2f7194662aad014135943dc": "五千块-某金融赏金SRC漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092646&idx=2&sn=6af6dd5841739e8435b25fb02ffe74d0": "CNNVD关于Fortinet FortiClient代码注入漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650590818&idx=2&sn=8736cdcc9dba1cfa3ea78d7832e7f39c": "英特尔、联想等服务器曝出难以修复的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652057923&idx=3&sn=09ef5dc82240d4c898117b6d7be0e8ae": "【安全圈】微软安全漏洞暴露了员工的敏感凭证和内部资源", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247503998&idx=1&sn=332988b40b127d770f6525695889df84": "[在野0day预警] CVE-2024-3400 Palo Alto Networks PAN-OS 命令执行", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550274&idx=2&sn=53a4f8f7f37c588a16a18923a12a8a94": "周日19点直播:《系统0day安全-Windows平台漏洞挖掘(第2期)》", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550274&idx=1&sn=83844418c6e1fb22d4d8c2033abdea5e": "V8漏洞利用之对象伪造漏洞利用模板", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247608055&idx=1&sn=0b542051cce6198c805aed2d10476498": "通过补丁分析Jenkins任意文件读取漏洞(CVE-2024-23897)", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247539001&idx=1&sn=388050fed116b9eedbac487d44ee6630": "实战纪实 | 几个有趣的漏洞导致的连锁危害", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486415&idx=1&sn=398603e7cb7800d99ec2ed966d448104": "框架漏洞-CVE复现-Apache Shiro+Apache Solr", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506254&idx=1&sn=0461a56548adc3433d5ef3146aea4a44": "Telegram Desktop RCE . \"pywz\" VS \"pyzw\" 开发的手抖经典案例", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790874&idx=1&sn=cd83c5569ad5e24f61370ce12b85570e": "不明黑客利用0day漏洞对 Palo Alto Networks 防火墙进行后门攻击", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247484816&idx=1&sn=f6673de3d6698e44d132f584fa097d0d": "智能合约web3.0都有哪些漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650590818&idx=4&sn=eb886a17b2c3919d9b51fe645fde2cd8": "HW 必备|一款通用漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485198&idx=2&sn=d5ffb48a03c958a702b178fa9d9a5be2": "CVE-2024-21378|Microsoft Outlook远程代码执行(RCE)漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485198&idx=1&sn=9fb16ba413e9330ee9bb4e828efedc37": "N∕A|0day!Telegram Windows客户端存在RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247491369&idx=2&sn=b79f1b564a012e5458dc6d3347af35dc": ".NET 复现某OA 3个SQL堆叠注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwOTQ4NDMzOQ==&mid=2247484112&idx=1&sn=e509eac25656f1e296286a47884bb666": "CVE-2024-28255", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247513366&idx=1&sn=02b55f3c9d8d57be9032e9eb35ba1bf5": "漏洞分析 | LangChain代码注入漏洞(CVE-2023- 36281)", "https://mp.weixin.qq.com/s?__biz=MjM5NDcxMDQzNA==&mid=2247488796&idx=1&sn=71904b1ab0cf9c917c99abd6601ece7d": "msf Exploit+ssh priKey:DerpnStink1靶机", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494240&idx=1&sn=b7882d6d1f1dba7c20ac68457c0e15f7": "如何在一个目标中获取两个RCE", "https://mp.weixin.qq.com/s?__biz=MzkwNDQxODMzNg==&mid=2247484629&idx=1&sn=3ca94535ef902fbe9504deae6866e0d9": "el表达式注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506303&idx=3&sn=ca3bd38aeffe49cbbbf80d08e4f019f9": "GlobalProtect 中未经身份验证的远程代码执行漏洞的0day利用 (CVE-2024-3400)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506303&idx=2&sn=6dca41aa657e1bb06b3694a7206b1f59": "浅谈JSONP劫持漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506303&idx=1&sn=7bde7dc361bd64dfca7f8834b7a428a4": "CVE-2024-20670 报告 - “新 Outlook”NTLM 泄漏和文件执行", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486382&idx=1&sn=fabb5d7f88a1664bf66aea41f714d6ac": "CVE-2024-2389", "https://mp.weixin.qq.com/s?__biz=MzU4OTg4Nzc4MQ==&mid=2247501893&idx=1&sn=6cfe6bf3d098b7c28990dda8574b0515": "招聘网络安全分析师(漏洞、病毒方向)、渗透测试工程师、密码应用安全工程师、工控安全渗透工程师、产品安全渗透工程师、芯片安全渗透", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486503&idx=1&sn=61bee8a9763700af95cfab1dfe7d9153": "通天星CMSV6车载视频监控平台Logger接口任意文件读取漏洞|漏洞预警", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247497814&idx=1&sn=01aefbdd8ac5ca5f28e1dfc28eacdd3f": "G.O.S.S.I.P 安全事件 2024-04-16 PuTTY 高危漏洞 CVE-2024-31497", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247501476&idx=1&sn=1e275c526ef34241eec5348cda6838b9": "【成功复现】Apache Zeppelin 远程代码注入漏洞(CVE-2024-31861)", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247539080&idx=2&sn=e0cd0acddc26263ca4119d42a72952d8": "蚂蚁数科发布ZOLOZ Deeper防范AI换脸 设百万漏洞悬赏", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487943&idx=1&sn=b4f882c5a7658d31dd5a065ef12e9c98": "【漏洞预警】IP-guard WebServer < 4.82.0609.0任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550427&idx=2&sn=d9a271f5a233c557b7d7775102e3bbaa": "可绕过安全警告并自启Python脚本,电报修复其Windows桌面客户端中的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489062&idx=3&sn=c00124bb8440d01f50c7e146bec5f6ab": "【已复现】IP-guard WebServer 权限绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489062&idx=2&sn=fc63f02f9a2443b0b405d8c71651a84d": "SnakeYaml 中不安全的反序列化漏洞 (CVE-2022-1471) 有感", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489062&idx=1&sn=0b22555b73684bc3311b2f7a6749a29c": "Apache Pinot SQL注入与远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506392&idx=4&sn=04ec73c45bc47e62c97a5d0292d78c68": "已修补关键 PHP 命令执行漏洞CVE-2024-1874漏洞等:立即更新以减轻攻击", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506392&idx=1&sn=e09c67a310cf301c23d15b68d4462db0": "针对 0day Windows 内核特权提升漏洞 (CVE-2024-21338) 的 PoC 漏洞发布", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500870&idx=1&sn=8c9b48f9aeb86f839bf5b3d9d6628f6e&chksm=fe79e0dec90e69c8cfad2ddb033e473edd93b42e2c16e7a7258cafd3471d7ccdcb1bb163aaaf&scene=58&subscene=0": "安全热点周报:本周新增三个在野利用漏洞,10w+设备易遭恶意攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505502&idx=1&sn=6ef977ad6be5e7f57360cc32233db7bc&chksm=cfcab54af8bd3c5cd34b7b0505d716d33fe5a9da6cad9aecb2d0f86554607a36b1d84d4c9f92&scene=58&subscene=0": "漏洞通告 | IP-guard WebServer权限绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492460&idx=2&sn=7a18e706b8ef14ceb195095fac536313&chksm=96f7fc01a1807517aabcd21da41645883c1d567c1db54bf95d1861a9f30d556e7b740cc79bb7&scene=58&subscene=0": "【长亭科技技术支持】关于防范利用xz-utils恶意代码植入漏洞实施网络攻击的风险提示", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544084&idx=1&sn=fc9fe1827166aabecba3e94a8dae0372&chksm=fa939bd5cde412c3d1125b97ec201987e7ecc4b8c540a6b2659b17315034914647a4918478a0&scene=58&subscene=0": "通过这个0Day漏洞,黑客对Palo Alto防火墙发起后门攻击", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499093&idx=1&sn=04697292fa2c44f2485abdfab464ac9e&chksm=973ace37a04d47219d012a830774941d9e79a0a087a0873b61f03d086f0ad7c34443abfd17c8&scene=58&subscene=0": "CNVD漏洞周报2024年第15期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499093&idx=2&sn=cb9d8680ae74c1014e25c8fe1f6ee87d&chksm=973ace37a04d4721fddbf4a96a5beb747f346b0f7ff1186146ea3abc1b04dd841c65465b37e3&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240408-20240414)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247574685&idx=2&sn=ba97b28ed17a690b1a43d00ae298d355&chksm=e91474a7de63fdb1997a56007d8d00b64e3fe12d2eb097e727f1c1f644f9b4507762d0914898&scene=58&subscene=0": "黑客利用 Windows SmartScreen 漏洞投放 DarkGate 恶意软件", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486395&idx=1&sn=471cae5f635e3315a0d3265f04ca13b4": "CVE-2024-3400", "https://mp.weixin.qq.com/s?__biz=MzkwNDUxNjg4MA==&mid=2247483928&idx=1&sn=d8f1ec842c0bca41d6d921450aa70aa9": "(互联网未公开)建云科技系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247501521&idx=1&sn=195dd51ba38be0e6d30d68e254078c03": "【成功复现】Palo Alto Networks PAN-OS 命令注入漏洞(CVE-2024-3400)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486514&idx=1&sn=37328ba4a1c519818900c82fe0ebf460": "Burpsuite被动探测与递归目录探测插件|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzA3MTM0NTQzNA==&mid=2455773111&idx=1&sn=5a12877d0629ccbd5b657dc68dc7f6c1": "2024年网络威胁概览(05)| 供应链安全:漏洞的连锁反应", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247484878&idx=1&sn=41811a994524c6035018b71f94d73a9d": "CVE-2024-3400 操作系统命令注入POC来咯", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500885&idx=1&sn=7ec8e4fd113f243c830250396629a553": "【已复现】IP-guard WebServer 权限绕过漏洞(QVD-2024-14103)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyOTMxNDM3Ng==&mid=2247488470&idx=1&sn=3cf9f8d4d3fd8348e5892153d565b395": "Nacos 漏洞利用姿势大全-附批量工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247485361&idx=1&sn=bc81a96ea2d67cc527574ebe47a218e1": "工具 | 命令执行不回显但DNS协议出网的命令回显场景解决方案", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486198&idx=1&sn=971121723b24414642a6efd672c22ecc": "泛微e-office系统ajax.php接口存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247500248&idx=1&sn=e4d95b2841b1b7b2599fd007b7c7f5d3": "RCE 遇到受限 shell 的突破", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487963&idx=3&sn=98afbca0734c907d40d49660755e7d75": "【漏洞预警】PuTTY密钥恢复漏洞(CVE-2024-31497)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487963&idx=2&sn=a5ad7ad26a5a4c2009eafb735e67ecf8": "【漏洞预警】Oracle WebLogic Server 4月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487963&idx=1&sn=d6da1a252e7adf5f35a234ad7b275939": "【漏洞预警】kkFileView 4.2.0-4.4.0 任意文件上传导致远程执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMjk4NzExMA==&mid=2247497628&idx=1&sn=8b8adc602b7e57aca551e59dc468c7e3": "CatDDoS僵尸网络正在利用CVE-2023-46604进行传播", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505520&idx=1&sn=297bf9a8ae5cfd00d83ebdd276cc56bc": "【已复现】Palo Alto Networks PAN-OS GlobalProtect 命令注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506426&idx=3&sn=7060f36d7142eed1a4bb2ae88abe3e34": "TP-Link AC1750 漏洞挖掘的文章 (2022)- Pwn2Own 2021", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506426&idx=2&sn=a70329aeda95fdbe27e7ce2be95ae9b5": "Java 应用程序远程代码执行场景", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550539&idx=3&sn=099f86598c4ae81395d8ff63cabb3ed8": "可能允许攻击者在Windows设备上执行恶意代码,Node.js披露一个命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550539&idx=1&sn=99d99a504e0b364140e6cfe6c561f0b1": "揭秘Chrome V8漏洞利用!体验攻防实战全解析", "https://mp.weixin.qq.com/s?__biz=MzUzNTkyODI0OA==&mid=2247525982&idx=1&sn=ce0b28c7a1e068fe04d635cea56d9e51": "Secx专访丨擅长入侵类漏洞挖掘,成功获得百万赏金!", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492467&idx=1&sn=f049bb5e657abe929a2e4379052605cb": "【已复现】kkFileView任意文件上传致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MTI2NDQzNg==&mid=2654551430&idx=1&sn=7738dc378f7a173e654e1e24a43efdc0": "2024-04 Oracle补丁日|漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519303&idx=2&sn=e86decfa003bf7ebcb19d43552440c7f": "Ivanti:注意!Avalanche MDM 解决方案中存在多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500871&idx=1&sn=8b6edac403c2c8a90bdf1050ebaa2eca&chksm=fe79e0dfc90e69c91ff6729091ab42b4f9cc1537ec43a77666d33d8be8bcde7e3ed481d92f2e&scene=58&subscene=0": "Oracle 2024年4月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544112&idx=4&sn=c9f423a017f17fa96e851c46e0a2fde1&chksm=fa939bf1cde412e77d910bcdbddf500cb4f6ddb6cf832a288dfb6c34b2fd6aec0a40f4b7571a&scene=58&subscene=0": "黑客利用 Windows SmartScreen 漏洞投放 DarkGate 恶意软件", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247505701&idx=1&sn=7fd765de21052272a66ad4fd5c0219d0&chksm=fa52029bcd258b8d9bc651d69ca03c55a7bbfb7c7cec85eabc6f43f1f830c39af5ae9280867e&scene=58&subscene=0": "手把手玩转路由器漏洞挖掘系列-WIFI安全威胁", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522543&idx=3&sn=f2cde13325167d9c9f7a7bdb3d381f10&chksm=ce4613fff9319ae9518125731e5d2d4d1e80b7b28987224099e363ca2b8ee1e916dfb8c0a9b9&scene=58&subscene=0": "【漏洞通告】IP-guard WebServer权限绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489068&idx=1&sn=cd0aa9faa84043366affb06ddab7fd90&chksm=fb029b74cc751262342350d998f6826e3e868d6a872da9da83c4e2b4d85aca289153cf10117b&scene=58&subscene=0": "【已复现】kkFileView任意文件上传致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484573&idx=1&sn=fd18eea55ae9cd68173825003e1a888d&chksm=c12af91cf65d700a6b02d2062a901bcf475d5f7154df4f83a58f619bab78b12d9bd74f12c8a6&scene=58&subscene=0": "【复现】WebLogic T3∕IIOP 远程代码执行漏洞(CVE-2024-21007)的风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486516&idx=1&sn=bb872e554bb4c49eb532ab3445740412": "最新Nessus2024.4.18.1版本主机漏洞扫描∕探测工具下载Windows", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247494793&idx=2&sn=199140d6419c35bee91668db9e76ee20": "Oracle使用2024年4月CPU修补了230个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487969&idx=1&sn=c38cc6e3ea4ba97c34518d352af2a73a": "【漏洞预警】Cisco IMC CLI命令注入漏洞(CVE-2024-20295)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486235&idx=1&sn=797e70d49305df0d175e890a846fa980": "用友NC Cloud doPost接口存在任意文件上传漏洞2", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247485545&idx=1&sn=fa0a12f2c4413f4596c2d355be26b924": "宏景任意文件读取漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247507509&idx=1&sn=8938b90ac359492d60f13dc2f8767bac": "漏洞通告|kkFileView 任意文件上传致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522593&idx=3&sn=b04edf7ab7ac7baccfa10e155a273c55": "【漏洞通告】kkFileView任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522593&idx=1&sn=2798fee47ac3def4197336ec31c7674d": "这是一篇避雷贴!OpenStack这个安全漏洞你修复了吗?", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652058288&idx=4&sn=2200667348e3e2717f60f203b4de886a": "【安全圈】Chirp智能锁存在远程漏洞,数万家庭受到影响", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511429&idx=2&sn=d030eeef1a0b08d3301f132e9b261a04": "立级修补!PuTTY曝出密钥泄露严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506491&idx=4&sn=75a8dee7a1664d7d53638d78d3e9b28a": "Google Flank 中的一个模糊操作工作流程漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506491&idx=3&sn=58405a68e570408c9d7ff6d442b851c6": "CVE-2024-3400 活动和 Upstyle 后门技术分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550630&idx=3&sn=ba36af0d63c944bed413574923662884": "AI已经能够通过阅读安全公告利用1day漏洞,成功率达87%", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519311&idx=1&sn=d41f0d79f130254f124a7ea7404a3b12&chksm=ea94bd25dde33433a3f6fee230eea0ec03c4f96a3c2c63e2978e87fe79ae4a7a724a521d65e4&scene=58&subscene=0": "思科修复IMC 高危根提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519311&idx=2&sn=401025ac3e395a09d42e0c4010e1c700&chksm=ea94bd25dde33433f71c98400a340b5dd1b85b7b53eb90e6408a59135e76522aa1e07c595050&scene=58&subscene=0": "OpenMetadata 已知漏洞被用于在 K8s 上实施 RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484580&idx=1&sn=475d11873f5ce8b62f309d3d27462bef&chksm=c12af925f65d703381e9e3f67fe1b66fee810a6e02b0d6f1d3fdc8dc29d41429222db339da2f&scene=58&subscene=0": "【复现】kkFileView远程代码执行漏洞的风险通告", "https://mp.weixin.qq.com/s?__biz=MzI1MjQwMTAyOQ==&mid=2247483860&idx=1&sn=3de40d5aa7f864b87631eff73283563d&chksm=e9e5053ede928c283e4e4700898f1ce99cccc24de154423c3c99a5fc506dff334fa3a48b66fd&scene=58&subscene=0": "供应链后门检测方式以xz xz-utils为例(CVE-2024-3094)", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651129189&idx=1&sn=74a9fce770bc3e210e24b580134390e8&chksm=bd15b5b68a623ca0e5dd3425d5e0e6697665bd8f898a4e77bcf62c2a4d0f2f62abd8cfa55628&scene=58&subscene=0": "从漏洞管理向持续威胁暴露管理演进的5个关键要素", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247491427&idx=1&sn=6686133df3318e5de5e8bad34b321401&chksm=fa5ab18ecd2d3898392df0170f87de92af5a9a012c8f363e578dae292303154174041a9473de&scene=58&subscene=0": "干货 | 分享一个.NET逻辑漏洞绕过的Tips", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500912&idx=1&sn=cae3656e770ff4dfb4cf538fcd935ec0&chksm=fe79e0e8c90e69fe9858293fdbd2b018d250b8b87f5278c1a4f630dffecfd47f1bf2a076456c&scene=58&subscene=0": "【已复现】kkFileView 远程代码执行漏洞(QVD-2024-14703)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543388&idx=2&sn=ed95337790ab274755b175ce203dc5ac&chksm=c1e9a60df69e2f1bf83d528411de2cd0c9f7320fa0c67e4d7b17220f4e618d0184276de689e0&scene=58&subscene=0": "英特尔和联想存在永久的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247505733&idx=1&sn=cdb1237783f3ee41c70bb1c6ce2c5c91&chksm=fa5202fbcd258bed0c97031cec3dc565e5d125976b343520dd4db1223221dd10744167d5df26&scene=58&subscene=0": "Palo Alto Networks PAN-OS 命令注入漏洞分析(CVE-2024-3400)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247574749&idx=1&sn=5332a7ff0cba0cf900829dabd188645a&chksm=e91474e7de63fdf1ee6770e729eff85ec897c2983e3f2fd8f15496b004c12a616c599b791fb6&scene=58&subscene=0": "多个僵尸网络利用一年前的 TP-Link 漏洞进行路由器攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485230&idx=3&sn=e5dde220eecc73505d3580be8646957f": "CVE-2024-3721|TBK DVR硬盘录像机命令注入漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485230&idx=2&sn=1a7e2db8d66b6d96c04e806ca38f1735": "N∕A|kkFileView 任意文件上传导致远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485230&idx=1&sn=f2dc70906cf7d43bb91d8e61599b879d": "CVE-2024-21007|WebLogic 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494328&idx=1&sn=bcd935177f51157bcbbcf674c6a18e18": "实战 | 一次敏感信息到接口fuzz-RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652058441&idx=2&sn=d64040092e2636ebb14a8f9ff7cd36b3": "【安全圈】多个僵尸网络利用一年前的 TP-Link 漏洞进行路由器攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550827&idx=2&sn=465b7c6a176881671763605bfea22586": "视频资讯 | AI已能通过阅读安全公告利用1day漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550827&idx=3&sn=1f22436b6c59a3c7352c1009adeea50a": "解锁Windows内核漏洞之谜:跟随大牛讲师深入学习EXP编写方法", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550827&idx=1&sn=133060020f3fe673589f8029a401e44c": "vctf apples leak libc操作复现(高版本libc overlapping)", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247555740&idx=1&sn=48273bba598ce292691df6f64977be7c": "0day!POC管理和漏洞扫描小工具", "https://mp.weixin.qq.com/s?__biz=MzkzODU3MzA5OQ==&mid=2247483931&idx=1&sn=aad7be198de2e3f580b2670b4b6e87b7": "用友U8 Cloud hr SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492464&idx=2&sn=7f7dd968e45f49fc589e8bc981dca571": "漏洞复现 || IP-guard getdatarecord 任意文件读取", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5Mzk2OQ==&mid=2247485801&idx=1&sn=f77e0320c971208bf8d2eb1c31823cc6": "SpringKill的0day|若依后台定时任务存在SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247539246&idx=1&sn=8e46baed61a7f36e17f196b807b72ac5": "Geoserver漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247518477&idx=2&sn=b3b2003221f4077ced3efaa73f97cdb6": "英特尔等设备供应商存在永久的安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247484926&idx=1&sn=27f9d63b638e89be88f8608a6b001af9": "CVE-2024-20356 是思科 CIMC 中的命令注入漏洞。", "https://mp.weixin.qq.com/s?__biz=MzkwOTQ4NDMzOQ==&mid=2247484156&idx=1&sn=1a2612169f0d111a79f766df4c95b166": "CVE-2024-24725", "https://mp.weixin.qq.com/s?__biz=MzI3NzI4OTkyNw==&mid=2247489226&idx=2&sn=3b69f5b5bbe201284d25d3ef8c99f461": "魔方网表存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODQ0MDc2Mg==&mid=2247484872&idx=1&sn=1832bb5729cda6692b4bfe6b4d48c50c": "JAVA代码审计-EL表达式注入漏洞(配套视频)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488485&idx=3&sn=60f8f15b2d187c21df9502d7753528e7": "漏洞预警 | MajorDoMo远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488485&idx=2&sn=18e5aa8204985883cd4b8a305dbbd8c4": "漏洞预警 | 锐捷EG易网关信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488485&idx=1&sn=b9ba30ecde31f9af6527988d851c628b": "漏洞预警 | OpenMetadata身份验证绕过和SpEL表达式注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790936&idx=2&sn=42495f2c49a37aa1b955133b89aabf0d": "GPT-4 只需阅读威胁通报即可利用大多数漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247491438&idx=2&sn=66faa537ccef7a6265f6567806651d49": ".NET 复现某CMS系统未公开SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247491264&idx=1&sn=fc4b37ed596976b24a5293420ca52ee7": "漏洞修复时如何确保业务不受影响?| 总第242周", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247484578&idx=1&sn=b9ed7fc5e61b68de8cb58bc5a92d295e": "任意用户登录漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486294&idx=2&sn=b90cb034d55c1f6a53708dc904f5c00c": "时空智友企业流程化管控系统formservice存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486294&idx=1&sn=170fb1b72f2e33077f59120ee9ed73af": "用友U8-Cloud api∕hr接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjQwOTc4MQ==&mid=2247489254&idx=1&sn=f3ce2efbb735f74ed34aa0008f9e0256": "从漏洞管理向持续威胁暴露管理演进的5个关键要素", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247621935&idx=4&sn=4ebf7b87a138c01190b9c9836ee4a866": "GPT-4化身黑客搞破坏,成功率87%!OpenAI要求保密提示词,网友复现ing", "https://mp.weixin.qq.com/s?__biz=MzkzMjQzNjg1Nw==&mid=2247484792&idx=1&sn=23729250b7d04fee5ab227abade943dc": "kkfileview远程代码执行漏洞复现--保姆级复现", "https://mp.weixin.qq.com/s?__biz=MzkzODU3MzA5OQ==&mid=2247483935&idx=1&sn=e9c963cc561866b7c7cf0e136337d5cb": "从0到1 学会究极RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652058517&idx=4&sn=1303a6dbc3664c88e254b4b87fb01967": "【安全圈】kkFileView文件上传代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4OTkwMDc1Mg==&mid=2247484675&idx=1&sn=1148cd865c27c6e1cd8c14466f53cb6e": "时空智友企业流程化管控系统 formservice SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247494118&idx=2&sn=2d29aa656e39c52dcc25066e737f7339": "Secx专访丨擅长入侵类漏洞挖掘,成功获得百万赏金!", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550849&idx=2&sn=608b9698cbb5be73c7b8cc3f595013a3": "揭秘Chrome V8漏洞利用!体验攻防实战全解析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550849&idx=1&sn=b8850e0b29af4bdd94cce4572aac98a6": "以栈的视角来认识格式化字符串漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5ODQzNTE3NA==&mid=2247485408&idx=1&sn=60b91c13dadfe6388c862dc27fc1fc4b": "geoserver漏洞解析以及测试方法", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247491450&idx=2&sn=6813ceca0fcb468af794aeb7419bbb75&chksm=fa5ab197cd2d38815883dc57b0e60a29acd076adc6a86db1cf94eec7ab47b41a447f635ecbba&scene=58&subscene=0": "干货 | 分享一个.NET逻辑漏洞绕过的Tips", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519338&idx=1&sn=ec0b92257a640cd98dd5d59c00746548&chksm=ea94bd00dde33416a366cb12677dd49947a98c7871d8fdd4a46fd91ade629a7273a99af8f64c&scene=58&subscene=0": "CrushFTP 提醒用户立即修复已遭利用的 0day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519338&idx=2&sn=c65a447c216d55afbb9483c48c34f453&chksm=ea94bd00dde334161df74aa1e15e2b728e866bddfe2a1e21bfb5e44dfcf65213634e19fe8ad7&scene=58&subscene=0": "Apache 项目中存在依赖混淆漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544211&idx=4&sn=97fc8c299063cc0b44a5ac66de97f70c&chksm=fa939b52cde41244a6c2e1c43cc3723d289a2f67a817d2a1ad8717df42bd10f1a725c62bb9a9&scene=58&subscene=0": "从漏洞管理向持续威胁暴露管理演进的5个关键要素", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247494714&idx=1&sn=5142c17db8c6a2903a7fa2d3d8ecb51e&chksm=96d8e7e0a1af6ef6c5aa74425cc16e306002f4070d242a575a9cafe82bb81a347168ca862705&scene=58&subscene=0": "斗象“世界五百强”客户案例巡礼之「漏洞运营管理」", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652058680&idx=4&sn=62f5ed929c2a7d7b026ec0c82ebc3108&chksm=f36e1878c419916e4b7154cc97b398f3f143c291bb8932a3e835c645d48ef93ec0f25c72289d&scene=58&subscene=0": "【安全圈】立即更新!思科发布 IMC 高危漏洞 PoC", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522623&idx=1&sn=3151bca16b924b789c6f894de55ff22a&chksm=ce46122ff9319b395eaa28a152d600bb08bb74c129f1b0946a2d65d9bb59751e043a5d5aaed0&scene=58&subscene=0": "【漏洞通告】PuTTY密钥泄露漏洞CVE-2024-31497", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494367&idx=1&sn=7dbac7db68bf0dd8d66ef40f381411ce&chksm=e8a5e0bcdfd269aa6d8d642f814b52b4566a59e3b297d3f62000be301c66d56c37af890bbcf5&scene=58&subscene=0": "一个$1600的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499103&idx=1&sn=cddc0f5e7d4b8beeddb99da413eb0fa6&chksm=973ace3da04d472bdc8b273b76608a1b7cc750f74c29e53b6b31f8d43bbbcb7b3f875ad21d10&scene=58&subscene=0": "CNVD漏洞周报2024年第16期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499103&idx=2&sn=440b2537425f32892b82ba7a5ada72ad&chksm=973ace3da04d472b1cb374b0dda3da0d88ba9a07f8df5fa9d86ec4855f8b659365dda5a3e1c3&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240415-20240421)", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486445&idx=1&sn=e2b2e389f8a5d91f9acfa0e90b82e57b": "漏洞利用-PoC-in-GitHub+msf简单利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTUzNDgxOA==&mid=2247484406&idx=1&sn=c419e40a587c938212a57b157b232875": "漏洞速递 | Microsoft微软最新RCE漏洞(附EXP)", "https://mp.weixin.qq.com/s?__biz=Mzg5NTkxNzg4MA==&mid=2247488794&idx=1&sn=72a28179c13cd108a0d48db70f503b91": "新瓜速递--微软最新RCE?!", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486606&idx=1&sn=d551b0ad928684620835639f4ea1e092": "Venom流量转发-自动化捡洞∕打点必备神器|漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247491393&idx=1&sn=f934692a268910ecf9dd00d6f383d0a3": "RFD漏洞原理浅析", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494400&idx=1&sn=dcf9e942b499c3b49f49f3cfa1162ce0": "任意文件读取rce记录", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247511010&idx=1&sn=b5f1c0c3e57d76924bfb4a33e082ad4b": "我与逻辑漏洞的爱恨情仇", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511484&idx=1&sn=c133b3c2669ed1967b52e137ee822d36": "八大主流中文手机输入法曝出泄密漏洞,仅华为幸免", "https://mp.weixin.qq.com/s?__biz=MzAwNDUzNDExMQ==&mid=2247484380&idx=1&sn=d71220b5ddc425e99941c674e4ef54c8": "CIA组织MikroTik软路由攻击场景复现及后门加解密剖析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652058881&idx=2&sn=06c71b1369aebba0ff5f1eaf0426bce9": "【安全圈】警报:思科 ASA 防火墙平台遭遇“ArcaneDoor”0day攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652058881&idx=3&sn=0a21f1de27fc8dcacedba41d5e1d4383": "【安全圈】GitHub 被曝安全漏洞,可被黑客利用伪装成“微软”分发恶意软件", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500949&idx=1&sn=0884b6bc0d1ab6b385ac694edc308959": "【已复现】CrushFTP 服务器端模板注入漏洞(CVE-2024-4040)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2ODY3MzcyMA==&mid=2247505914&idx=1&sn=b771d6003b53b8482a93112d782648b8": "漏洞通缉令——FSRC诚邀各位师傅挑战!", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488012&idx=1&sn=56f7a1361227ba816195055867ef1ed1": "【漏洞预警】Primeton EOS Platform jmx 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488012&idx=2&sn=6a23a0180abe86194e031e4ccfada139": "【漏洞预警】CrushFTP 认证绕过模板注入漏洞(CVE-2024-4040)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519358&idx=2&sn=398290f1e1cbf32a9f72ff26e3d708c4": "速修复Progress Flowmon中的这个CVSS满分漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519358&idx=1&sn=080e82a553f5a1d52ba96fc6f20d14c3": "国家黑客组织利用思科两个0day攻击政府网络", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786498&idx=1&sn=58d3061354592a77d6438635891189fb&chksm=8893b8edbfe431fb236143e04680e9f5b2c83362b1f0a147ac21b608db8ed458bd5194933099&scene=58&subscene=0": "多款中文输入法存在重大安全漏洞,暴露了超过10亿用户的击键行为", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484587&idx=1&sn=09f983ed61a819c47982eddccc4481f6&chksm=c12af92af65d703c37d174a0f2a47f140f34d819fef8aaa3868b61b83b9e739f11a151792fad&scene=58&subscene=0": "【复现】禅道项目管理系统身份认证绕过漏洞的风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522648&idx=1&sn=60ed9ffc7caf52796e7d1c416df4f39e&chksm=ce461248f9319b5e2f94fb3551673d86536c49edea3f6396606c0e645457f5c7d84d4d5a9149&scene=58&subscene=0": "【漏洞通告】Primeton EOS Platform远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522648&idx=2&sn=3c5663596e9de910f32940f685606d1e&chksm=ce461248f9319b5e778463ac649df8866ab0835fd621402bb403a5b6557339965fc14a68c917&scene=58&subscene=0": "【漏洞通告】OpenMetadata身份验证绕过漏洞CVE-2024-28255", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489081&idx=2&sn=7604b0fea0e059c91c4d0c566dec7d9d&chksm=fb029b61cc751277b9c36f945b2baa1e4de91221f697c81aa7f96105a70c1c418c68513a75c0&scene=58&subscene=0": "Primeton EOS Platform jmx反序列化致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247488967&idx=1&sn=d7a5d788e5dc5e8c07321d79d5520a50": "【更新版】Tomcat漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247620851&idx=1&sn=cfaf998fb7fc13f45fca4021d0a889a6": "在看 | 周报:国产输入法曝重大漏洞;支付1.5亿赎金仍被泄露数据", "https://mp.weixin.qq.com/s?__biz=MzkyMzQ5NjYwMw==&mid=2247484473&idx=1&sn=0dfd34ec9dbbf7e81ed7012a1ac0e75e": "安全情报,X达OA down.php 存在信息泄露漏洞!!!", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247497162&idx=1&sn=1ae364238106a40e59a5cc95ea525a9b": "RSAC 2024创新沙盒|VulnCheck:漏洞优先级挑战的解决方案", "https://mp.weixin.qq.com/s?__biz=MzkxMDMwNDE2OQ==&mid=2247492107&idx=1&sn=8d4b7a6b65e9f406656da90a236368a9": "Swagger API Exploit 1.1", "https://mp.weixin.qq.com/s?__biz=Mzk0NjE0NDc5OQ==&mid=2247523984&idx=2&sn=df826a8a0231d26dcfa5455493f222b0": "CVE-2022-42920 BCEL 任意文件写漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTY2NjUxMw==&mid=2247511779&idx=2&sn=cd5ba32df8e7f60e013451e0032e1394": "常见未授权访问漏洞总结及验证方式", "https://mp.weixin.qq.com/s?__biz=MzU2NjgzMDM3Mg==&mid=2247491109&idx=1&sn=bd36d5611de33f571cff265161dbdf4c": "过W的漏洞被质疑是造假", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247608947&idx=1&sn=fe9bbe5567c7e2d35beddc6fa2fdbff9": "高JDK的JNDI绕过之复现某比赛0解题", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247539466&idx=2&sn=a69535ef83245eeaa4e9aaa0201be86c": "输入法重大漏洞曝光,近10亿用户受影响", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247499797&idx=1&sn=1d29cb3af3354861ebca4938c4655d46": "实战|记一次女朋友学校漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247549590&idx=2&sn=1498064403c18467dfc487a4dc2f2976": "渗透测试 | 一次实战远程命令执行漏洞并提权", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247549590&idx=1&sn=f1ac9cda7ee149962417b76ff5e704a3": "漏洞扫描系统 -- 临兵", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651272975&idx=4&sn=195f2d44b08819da4e94acdddf4c5ee0": "MetaHub:一款针对漏洞管理的自动化安全上下文信息扩充与影响评估工具", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651272975&idx=2&sn=0486e941c5e906cdf83f2dd545fb067c": "FreeBuf 周报 | 乌克兰关基设施被破坏;GPT-4 会自己发起漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzkyOTQ1MjQwMw==&mid=2247484092&idx=1&sn=1b440d7ae798211edfb7727ac73d77d5": "MM-Wiki 文档管理器未授权访问漏洞(附POC)", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486527&idx=1&sn=20e2bf2b5b5b899cb1e5ea1a137c8232": "用友NC grouptemplet 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664711469&idx=1&sn=78ea93de526742d9cad64ecc551ed076": "03-Git信息泄露及其漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247485923&idx=1&sn=ae289c6bef92d840d22592e5817f7dc3": "Primeton EOS Platform jmx反序列化远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488039&idx=1&sn=26445b72831245cfb3c7517d39cec06a": "【漏洞预警】runc <1.2.0-rc.1 systemd属性注入漏洞CVE-2024-3154", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494419&idx=1&sn=bacef83776b6d2e3d7db06d2f2c85a47": "一个25,000的RCE", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247516098&idx=2&sn=b86e254ce704472f84b75aa1331f8bd6": "漏洞挖掘 | 记某SRC邀请处逻辑越权到组织管理员漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247516098&idx=1&sn=30f5f57a3cc44a2e6da4e4f11e8f0a26": "Tomcat综合漏洞利用 | 工具", "https://mp.weixin.qq.com/s?__biz=MzI1MzQwNjEzNA==&mid=2247484069&idx=1&sn=8b9062933b916b4c11d273039380e257": "app漏洞产生知识", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651273295&idx=4&sn=a83425dd81079f41869f5756dca7f966": "firebase:一款功能强大的Firebase数据库安全漏洞与错误配置检测工具", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511500&idx=2&sn=9b437667c52632f6eb92981ac85d8232": "CISA将在今年底前全面部署应用自动化漏洞预警系统", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458552129&idx=3&sn=40e99a1392a775cfc35321843f0d2ac8": "WordPress Automatic插件漏洞允许完全接管网站,已观察到数百万次攻击尝试", "https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247517937&idx=1&sn=503f13ae1a50b21f12b6c79ce658c250": "GPT- 4 会自己发起漏洞攻击,成功率高达87%", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486665&idx=1&sn=e460bf2924ee1bf023a1acbbaba35765": "一款未授权∕敏感信息∕敏感关键词∕接口JS文件指纹特征识别插件|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488056&idx=1&sn=ad2ac51d4bf9dfd29b0eb949ea34632e": "【漏洞预警】onethink安全漏洞(CVE-2024-33443)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488056&idx=2&sn=123c07d21046d759ce40d251aa6bb565": "【漏洞预警】 јizhiсmѕ v.2.5.4跨站脚本漏洞(CVE-2024-33338)", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247497887&idx=1&sn=929eab0791c4fcfa122c6b241bbd06a8": "G.O.S.S.I.P 资源分享 2024-04-30 EXPLOIT.EDUCATION", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247507176&idx=1&sn=82a4ecfa728880cbcbbe5e1caf3e0814": "研究人员发布了 Windows 内核 EoP 漏洞的 PoC 漏洞 (CVE-2024-26218)", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY3OTc5Mw==&mid=2247483898&idx=1&sn=60653ce49a1c3b8f92563de4803cdaeb": "【0day】KingPortal运行系统信息泄露漏洞【未公开|附poc】", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458553405&idx=3&sn=72480427ed37e5f604e9e1d14b11483d": "内容更新!人气讲师带你揭秘Chrome V8漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519400&idx=1&sn=66cec4a7fd3d72c14f92738147c6d83a&chksm=ea94bdc2dde334d4b90886120c2d35848bb06c0cb45b93d2e709e6ceeacef8ea6b680ebbac16&scene=58&subscene=0": "R语言中的新漏洞可导致项目易受供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519400&idx=2&sn=e79b7a5da52b70449d7f2d6c99c8cab2&chksm=ea94bdc2dde334d48c4fc1fc698133c71550c937353091502e020643ff271de8656b39d98e84&scene=58&subscene=0": "开源的Judge0 中存在多个沙箱逃逸漏洞,可导致系统遭完全接管", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544353&idx=4&sn=c4345a7d4befb2ee37dd1dd4f44a2722&chksm=fa9398e0cde411f60ca41b0d019e560a98f379bdea923b94060a4e567e17cc7d0b4c886547bf&scene=58&subscene=0": "利用微软office七年漏洞!乌克兰遭网络攻击", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499116&idx=1&sn=7712ecc8501214a220cbe3a414b195f3&chksm=973ace0ea04d47183d9e3b923e703c5603fb7235f063e031c8afee7d84fc4d1670cfe8da6a3f&scene=58&subscene=0": "CNVD漏洞周报2024年第17期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499116&idx=2&sn=c62c1d526bc88ef678a6a02dab932701&chksm=973ace0ea04d4718591b1a1c7a19915efb8ec337eed24d64ce79e45ef6bca57a334de5bcca5d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240422-20240428)", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247485240&idx=1&sn=2206b11124ce084e0938cbbcf01224fd": "Hackerone 附件功能存在IDOR越权漏洞15000$", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247485231&idx=1&sn=517ffdc05d2b556167d8fad310ae9026": "使用扫描工具在同一网站的不同页面上发现了 4 个 csrf 漏洞!!!", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494478&idx=1&sn=d0def8633adc8488f9bdf152bf302300": "漏洞挖掘之某厂商OAuth2.0认证缺陷", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485251&idx=3&sn=5f20e1d3e3fb8091bb9f2e6a2c8df503": "N∕A|Jeecg commonController 文件上传漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485251&idx=2&sn=a5e3bb1742e53371e2a85d0f35945065": "CVE-2024-4040|CrushFTP 认证绕过模板注入漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485251&idx=1&sn=7598223ae3b4b591ace83cc8e1843488": "N∕A|禅道项目管理系统身份认证绕过漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDExMg==&mid=2247484461&idx=1&sn=4fa4201d386b0785aadb0c260f04e018": "【漏洞复现】ZenTao(禅道)身份认证绕过漏洞(QVD-2024-15263)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652059142&idx=4&sn=7deb8017aa70156f687fc27a99e3e4a8": "【安全圈】5000 多台 CrushFTP 服务器被零日漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492516&idx=1&sn=bd9f7ce4f679a8baf4680bd256f21592": "漏洞复现 || SpringBlade dict-biz∕list接口SQL注入", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247507224&idx=4&sn=29632a807ce108a4b3ecf2bc27c3a828": "(CVE-2024-25648)福昕阅读器 ComboBox 小部件格式事件 UAF", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247507224&idx=3&sn=5f59951bac47803d0685d21da887fff2": "(CVE-2024-31852)福昕阅读器条形码小部件 Calculate 事件", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247507224&idx=1&sn=0e781cdf33f9a934aa769e0ff0287f27": "PPPwn - PlayStation 4 至 FW 11.00 的内核远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247609092&idx=1&sn=cbc54c842151fd9e433cb2eac28e4d3d": "任意文件读取&下载漏洞的全面解析及利用", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247490566&idx=1&sn=1f943829de3bdbcc76baae593ba14f44": "禅道最新身份认证绕过漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649791016&idx=1&sn=4c9d428152f4b13675b3f28c3976ce59": "R 编程语言中的漏洞可能助长供应链攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486460&idx=1&sn=adb23478ece61b88e28c3153477d40f6": "WAF绕过-漏洞利用篇-sql注入+文件上传-过狗", "https://mp.weixin.qq.com/s?__biz=Mzg4MzA4NTM0OA==&mid=2247490219&idx=1&sn=03a4c2f8c18ca5cf605c4ced06cee801": "如何利用关键 Ray 框架漏洞来入侵全球 AI 机器?", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488647&idx=2&sn=ef303fa031df94814966ded54e8b11aa": "漏洞预警 | JeecgBoot任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488647&idx=1&sn=3fe7d11b4b95e4a807093abebf9507c3": "漏洞预警 | 若依druid未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458553429&idx=1&sn=d5674757eedccb83f6e0063db0a5205c&chksm=b18dbcdf86fa35c90d21a8db9c292c73f5adad26a9111751b5c4d2c718ea88c46623724de5d2&scene=58&subscene=0": "CVE漏洞复现:Maglev中VisitFindNonDefaultConstructorOrConstruct的类型混淆", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458553429&idx=2&sn=a7a32731738b87ae9193ca4b54e2fe47&chksm=b18dbcdf86fa35c9cad5b804f83951af76e5b353adc24246dcb18ede995eaff0187ed2b1e138&scene=58&subscene=0": "从零开始,掌握CVE漏洞复现技能", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494486&idx=1&sn=10286369df3533012ecaba68da80c2a5&chksm=e8a5e135dfd268230250cef0bdd8aeb8a04ff00b10cc17f1aeabbc3c1ac52a589348d249d5b7&scene=58&subscene=0": "记一次从登录框到前台rce", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247505492&idx=1&sn=19ea061613352f2f11f107abbc78c206": "Hackerone 被黑,看我如何窃取你的POC!", "https://mp.weixin.qq.com/s?__biz=Mzg2MTc1MjY5OQ==&mid=2247485480&idx=1&sn=6c1d2713a7478949c1ae65bdc3f31ee8": "任意用户注册漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494493&idx=1&sn=813f79d75e12afa42d4a4437f808868b": "src漏洞挖掘浅谈", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486678&idx=1&sn=802f8e5854b78a5e21540668e68c7c0f": "AJ-Report数据大屏系统存在命令执行漏洞(未公开)|漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247507316&idx=3&sn=085d57978dadf0e659d3372ae838e4c1": "CVE-2024-32114:Apache ActiveMQ 中暴露的高严重性漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247507316&idx=1&sn=de5d500b3990a9c5071b5f2e1a7377c4": "Okta 验证 Windows 远程代码执行 – CVE-2024-0980", "https://mp.weixin.qq.com/s?__biz=MzkzNjE5NjQ4Mw==&mid=2247538070&idx=1&sn=8e37d5ad8a52a70c17f24e3d2c12ede3": "漏洞利用3倍·数据泄露翻番|Verizon DBIR 2024报告·附下载", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651274447&idx=2&sn=f74d9503a7e83bd641ccb00a5fca5cd8": "一次收获颇丰的Google漏洞挖掘旅程", "https://mp.weixin.qq.com/s?__biz=MzU2MDE2MjU1Mw==&mid=2247485444&idx=1&sn=81ef7eae995934888e3689f48f18fe68": "物联网安全篇——Sapido RB-1732路由器命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDExMg==&mid=2247484490&idx=1&sn=a50dabe0455f0b8e89575b0a8947fb1d": "【漏洞复现】kkFileView任意文件上传漏洞(QVD-2024-14703)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458553431&idx=2&sn=6a811b6c6ec0fa04b5f83e533744bf50": "0day 2期-更新第7章:Windows服务漏洞原理讲解", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247556517&idx=1&sn=a032e629aceef7ba09122b144fdda41f": "一次h1漏洞提交记录", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247484471&idx=1&sn=146c2c6d1ea2195b33157d5d7083afee": "AJ-Report代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247487077&idx=2&sn=6808649102931b354834638b4a3cf92c": "[渗透利器]全能工具=信息收集->漏洞扫描->EXP调用", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247507334&idx=1&sn=e359b6c2c192e14a2f2421a045809885": "GitLab 中的 Devfile 文件写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247507334&idx=2&sn=ccf6b10e9283d97d7d0456161b3bf894": "CVE-2024-2887:Google Chrome 中的 Pwn2own 获胜错误", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649791049&idx=2&sn=0a0db9de2b8f990c67c23c412aaef4d9": "电子邮件安全漏洞是朝鲜社会工程攻击的最新途径", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649791049&idx=1&sn=5287d1bcd697cad32aadb808f89c805e": "福布斯:安全研究人员警告20个安全漏洞“对小米用户构成威胁”", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650949651&idx=1&sn=0fbd82ad214476d4035faa5b741ef032": "任意用户登录漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247486084&idx=1&sn=d675d97743f3286e815172ef0b1067f0": "H1:价值4860$的 CVE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486547&idx=1&sn=ccd54ba2467078cc1a4809c4ab91aac1": "CVE-2024-1212", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486722&idx=1&sn=d29c47e65347c78f9e192eb62be63936": "最新Linux_Nessus2024.5.6版本主机漏洞扫描∕探测工具下载Linux∕Windows版", "https://mp.weixin.qq.com/s?__biz=MzU2MDQ0NzkyMw==&mid=2247484811&idx=1&sn=910d8f71952c18404a78433339ba3733": "有手就会?记一次绕过防重放的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494526&idx=1&sn=f3f30bd91943d1e1da9a8919f97657ec": "记一次绕过防重放的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486420&idx=2&sn=6a461c6f7a17fdcdb37ce5181a0437a8": "图创图书馆集群管理系统 updOpuserPw接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486420&idx=3&sn=5bf37bdb307fc21378ce1a5ac9b85a17": "图创图书馆集群管理系统SSOServlet接口存在未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486420&idx=1&sn=554681943252463531f2ab502b1e6f50": "用友时空KSOA linksframe∕linkadd.jsp接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MTg0Nzk5Nw==&mid=2247484638&idx=1&sn=5d239f3910b71388d8d5ffc3df48ddad": "打靶训练——Netlogon域提权(CVE-2020-1472)", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247485461&idx=1&sn=9aed3cd124004258059098ef4e49edd7": "【护网必问】Vcenter后渗透漏洞应用!", "https://mp.weixin.qq.com/s?__biz=Mzk0NzYyMTAwNw==&mid=2247484485&idx=1&sn=cd825856d1681e05b283928989e0b228": "Ncast高清智能录播系统存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651274677&idx=4&sn=dfa221ca3eeb561e06ca6189bd85fc2a": "如何使用resource-counter统计跨Amazon区域的不同类型资源数量", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651274677&idx=3&sn=df364817b521461e5677e5bb2e15e1cb": "3.5倍!组织修补CISA KEV列表中的漏洞比其他漏洞要快", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651274677&idx=1&sn=690841047c44e4d2379e1332d44d9b12": "微软披露严重安全漏洞,受影响App安装量超40亿", "https://mp.weixin.qq.com/s?__biz=Mzg4MzgwMDE2Mw==&mid=2247487251&idx=1&sn=d52b7484e72ac9d9799b3e7db02385b7": "SploitScan帮你发现最新漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291019&idx=1&sn=844bd8f052c142a9826d16661deb1327": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500982&idx=1&sn=01f21b986415a5a6d16103d6efda5b2e&chksm=fe79e02ec90e6938aa007712dd3277dd23f48b046149ac9b8a0a5ad975ca5288215b981f9c85&scene=58&subscene=0": "安全热点周报:本周新增两个在野利用漏洞,成功利用可导致供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519411&idx=1&sn=71d7f62af378983948cbcfd164e479e7&chksm=ea94bdd9dde334cf0ea19613ca4a0e169aa3a40e91e48a6e0bf7ddcd1baf7dd1713e112b9cb6&scene=58&subscene=0": "CISA督促软件维护人员修复路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519411&idx=2&sn=ce0a25d6937eabdc487272441bd3019d&chksm=ea94bdd9dde334cfe771b6fd011febb7616a978a4699a95ed386884efc11435c75b8f9cdf67a&scene=58&subscene=0": "谷歌安卓应用的RCE漏洞最高赏金45万美元", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458553456&idx=2&sn=7d11fa5255fca67b5d6f56c2b689f563&chksm=b18dbcfa86fa35ec4d968125dd5ce2e108dd0a34d72ce5a6a951be8636bec182b2027a1de2ad&scene=58&subscene=0": "微软披露Android应用中普遍存在的严重漏洞,受影响应用安装量超40亿次", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653040540&idx=1&sn=6231eb3dc149209e66a046a13e718e03&chksm=7e57522a4920db3c1a02a461bd7a533b1f1001eb4bdd1723e540b85abb6898b301657ab23fd6&scene=58&subscene=0": "微软发现严重漏洞,涉超 40 亿下载安卓应用;iPhone 16 电池壳改用不锈钢;苹果「AI iPad」或明日曝光|极客早知道", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544389&idx=3&sn=734a0b2e81822614531a01b0fb820078&chksm=fa939884cde41192c274f3323d6c14a905dbf4cd6019689437052b2a4792497ae4844d97918b&scene=58&subscene=0": "从最初的漏洞利用到最终的部署勒索软件 历时29天", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247484963&idx=1&sn=6f5011a3c2f64b08e0878f25251b9718": "多个 CVE-2024 CData 路径遍历", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247513695&idx=1&sn=166e9fec37b5ff4213a46aa076165666": "0Day CVE-2023-26615:某路由器密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247494997&idx=2&sn=8f6fe2823fc0bdbb4d72a0a6109d3ff5": "CISA、FBI要求消除路径遍历漏洞影响", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486731&idx=1&sn=669d6212ead6dd39cb424edeba338777": "JScanner一款隐藏Url接口探测∕目录递归访问请求工具|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247485929&idx=1&sn=25af8b8d5cebd5561c79eaba1cbdefe4": "大华智慧园区综合管理平台 pay 远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486445&idx=1&sn=8bdb62ea27278bf299374c0b49268a95": "畅捷通TPlus keyEdit.aspx接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486445&idx=2&sn=7b14db1be77a421682eb286ddfa642cb": "开源数据大屏AJ-Report存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247507397&idx=2&sn=d84561efd669d3aec3a3c0e269af4dca": "LLM 渗透测试:利用代理集成进行 RCE", "https://mp.weixin.qq.com/s?__biz=MzkyMzI3OTY4Mg==&mid=2247486669&idx=1&sn=a57e8cce05df72bd31863f468f2338cb": "漏洞挖掘 | 使用HaE与CaA组合挖掘高危漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651274864&idx=1&sn=b0f80e985d92616655b1b96236218190": "Tinyproxy曝出严重漏洞,影响全球52000台主机", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247538336&idx=1&sn=4fd61611539de09b487f35f0ea9b819e": "微软发现普遍存在于Android应用中的“Dirty Stream”安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5OTQyNQ==&mid=2247485344&idx=1&sn=9e513e2aab080c39541f8585299cd6df": "实战学习|保姆式实战等保测评Windows镜像(邀请码+全流程+未公开漏洞)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652059393&idx=4&sn=f6952adeaf1b5050f2c2afdfd8ab153c": "【安全圈】Tinyproxy 曝出严重漏洞,影响全球52000 台主机", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652059393&idx=3&sn=5643ee0278b70287a5d11765458f2825": "【安全圈】开源编程语言 R 曝光存在 8.8 分代码执行漏洞 CVE-2024-27322,可引发供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652059393&idx=2&sn=3248937a939063fb6ee6d17c4068af0f": "【安全圈】微软披露严重安全漏洞,受影响App安装量超40亿", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519419&idx=1&sn=3bb85759ff76414bd555bb55aa1b3c16&chksm=ea94bdd1dde334c73add716fd4c17f5d7be8d21d23464d3e187d43446f34d83e52d9482ed5cd&scene=58&subscene=0": "Citrix悄悄修复相似度极高但严重性不及CitrixBleed的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247485306&idx=1&sn=4bc5681431940711f2ae68ffab6eae90": "真0day分享!用ZoomEye发现通用组件0day漏洞的新姿势!", "https://mp.weixin.qq.com/s?__biz=MzkxNjQyMjcwMw==&mid=2247486218&idx=1&sn=9c11537a6eac646ddb8687dbbae74d9c": "实战 | 记一次无聊闲逛到某设备RCE", "https://mp.weixin.qq.com/s?__biz=MzkxNjQyMjcwMw==&mid=2247486218&idx=2&sn=bbd63198babd387181c6b48af9234e13": "第91篇:shiro反序列化漏洞绕waf防护的方法总结(上篇)", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247494423&idx=1&sn=e1d0e5b340ceffad6dad5ea1e1e9ad78": "QVD-2024-15263:禅道身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3MTk4Mjc3NA==&mid=2247485418&idx=2&sn=b25f9f9e864f7ad321bc1f5d8e92ab0f": "【安全资讯】攻击者利用 TunnelVision 漏洞暴露用户数据", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247622411&idx=4&sn=6d5464101c4cea669873bb83c5363c09": "Tinyproxy曝出严重漏洞,影响全球52000台主机", "https://mp.weixin.qq.com/s?__biz=MzkwODUxMDUwMg==&mid=2247483793&idx=1&sn=42c68bd3acf0c13723704af42add1c96": "【0day】瑞友天翼应用虚拟化系统", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489311&idx=1&sn=7309b4a75390573b14fbd0fcbcf147c3": "【风险通告】瑞友天翼应用虚拟化系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1MzQwNjEzNA==&mid=2247484103&idx=1&sn=41517b5852785ffe7c08516c0d069bb0": "模糊测试:强制漏洞挖掘wfuzz", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652059452&idx=1&sn=32d0ba2ab948ab3cc96dc4597617c32a": "【安全圈】CNNVD关于Apache ActiveMQ安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458553736&idx=1&sn=fa9d04982a90b1c0cf6c375efce65314&chksm=b18dbd0286fa3414de804dbd2315099238c1ec027489de8a51a7a6dd663b3a239d6768593497&scene=58&subscene=0": "CVE-2020-9802:Incorrect CSE for ArithNegate 导致的越界访问", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519427&idx=1&sn=2eb6613f503e93d2de22af9bc452b3a1&chksm=ea94bda9dde334bffc72ca6f29b9a557a1fd54b79b9a4601e0ef668734b8a1deffd1207e4642&scene=58&subscene=0": "超5万台 Tinyproxy 服务器易受严重RCE漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519427&idx=2&sn=952e60354283e3d7df02f25ba52d112d&chksm=ea94bda9dde334bfdb20afde43208f87f3735f6e17a2969217271e4641c5537ab0fd6b0689be&scene=58&subscene=0": "CISA的KEV清单加快漏洞修复速度了吗?", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664212629&idx=3&sn=241cd3d5ab30432e0d5d0cac9d887350&chksm=8b59aa6cbc2e237ae319acd99af69a4a40ae2309839d0ae9716dc6f491f4dc5fa6be5fea9c02&scene=58&subscene=0": "CNNVD | 关于Apache ActiveMQ安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543592&idx=2&sn=36a0c4efffe2c6e20d2b1b7a5b2b15b1&chksm=c1e9a779f69e2e6f3aadb5f0ab593fb5828ec25c048956d6aa81ef7751a99c1383490e8cd643&scene=58&subscene=0": "Tinyproxy曝出严重漏洞,影响全球52000台主机", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247575073&idx=1&sn=99130659e83a8e7a352f1ab41fa9d9e2&chksm=e914761bde63ff0d646b126541260a1f9342b157ac148542e582b398ff796b6871eaf4c1cbbd&scene=58&subscene=0": "SoumniBot 恶意软件利用 Android 漏洞来逃避检测", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522724&idx=1&sn=c227ddd1744e3813b7c1604c6b8b5566&chksm=ce4612b4f9319ba2252a6f2be255873103af6b78836b3bce6387f32a0db537b076d5aeace664&scene=58&subscene=0": "【漏洞通告】Apache ActiveMQ API 未授权访问漏洞CVE-2024-32114", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522724&idx=3&sn=325273d2a839fbd1989632bcdefa65ee&chksm=ce4612b4f9319ba22e6de7010f65de934afb9ee7e8d4fdd7aaeb9b7009d82e4197eb6fb8a38f&scene=58&subscene=0": "【漏洞通告】Util-linux wall 权限提升漏洞CVE-2024-28085", "https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247485324&idx=1&sn=7f3bd0f204d239814dd6e00a70aac425": "从历史漏洞学习漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247492936&idx=1&sn=86a3393664adaa6ee8347f59f46b5c1a": "1day Symfony 敏感信息泄露", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247513758&idx=1&sn=92bdaf63916fcc102b3f0429638aaf93": "XSS跨站脚本攻击漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3MTk4Mjc3NA==&mid=2247485513&idx=3&sn=f086b5c2f569c58651d591083da26085": "【漏洞通告】Google Chrome 零日漏洞在野外被利用(CVE-2024-4671)", "https://mp.weixin.qq.com/s?__biz=MzI1NTM4ODIxMw==&mid=2247500721&idx=1&sn=348ba0d44c244322b444ee0794ad081e": "CVE-2024-2389命令执行漏洞 (附EXP)", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489118&idx=2&sn=f667ad2c09238c82aea8a96035c8ff12": "【原创0day】瑞友天翼应用虚拟化系统SQL注入致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489118&idx=1&sn=c3b78ff737cf38a66ad8c66f3e0fa00b": "【已复现】瑞友天翼应用虚拟化系统SQL注入致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247515142&idx=1&sn=90252716ad6cb665cf5d4ada7e47ec4d": "记某积分商城任意金额支付漏洞分析利用及思考", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494588&idx=1&sn=43b54088a0ce0112655f46d16171c9ac": "从 SQL 注入到远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485706&idx=1&sn=b6bb60b6a5409232512e2de38dde73f3": "Tomcat综合漏洞利用工具 - AttackTomcat", "https://mp.weixin.qq.com/s?__biz=MzkzOTY1MzcyOQ==&mid=2247487633&idx=1&sn=01e46300373a1789d7d874a7b011cefa": "一款Spring图形化综合漏洞的利用工具", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247621361&idx=2&sn=03d57b92df3ba49e6102419878585220": "超值999!ZoomEye终身会员开售!使用ZoomEye快速追踪热点漏洞!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652059573&idx=3&sn=56e787c3d6fc67263cf244b5f5bca640": "【安全圈】TunnelVision 漏洞曝光,几乎可监听所有VPN", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651129537&idx=2&sn=6a376cd91b7e8ef56786b850f959275a&chksm=bd15b6128a623f040da004a68693b333f39d6010b04580cd39975fa14fdbb7bc5707ba687b10&scene=58&subscene=0": "16项网络安全国家标准获批发布;CISA启动新的漏洞管理增强计划 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501009&idx=1&sn=d4ce01ea254aeccbb07cfcce19a1bcd3&chksm=fe79e049c90e695f10ffd55009e5d3021f075e5e8f3b29711b247ba2f9db1c76465db24145b7&scene=58&subscene=0": "【在野利用】Google Chrome Visuals 释放后重用漏洞(CVE-2024-4671)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519453&idx=1&sn=b108366a369534bc2bc55f5a5089d587&chksm=ea94bdb7dde334a1ed46fce3773a11cab5d7d420a9b40d13263be90a5ffc622be738b323c0ec&scene=58&subscene=0": "Citrix 提醒管理员手动缓解 PuTTY SSH 客户端漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543629&idx=4&sn=d7b030e328d1e574324cfdfbe79a8694&chksm=c1e9a71cf69e2e0a8b2a2ee37d5dd3bf4f51a4674499946b21cec261a0a652bf07c3add397ad&scene=58&subscene=0": "TunnelVision漏洞曝光,几乎可监听所有VPN", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544511&idx=4&sn=e534c9301c354ce82b2432df461e824e&chksm=fa93987ecde411680c23b31d24a508894409f38608846abdcfb79d0a9b9d4b934b4f6df451c0&scene=58&subscene=0": "多个三星移动设备漏洞可让攻击者执行任意代码", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522769&idx=1&sn=a3fca586ab64a8cfbdbae6affd5b813b&chksm=ce4612c1f9319bd71bde9c021e9b7f509491f1a7e560d3a8cfbd811d4d96a994642a591c55a5&scene=58&subscene=0": "【漏洞通告】瑞友天翼应用虚拟化系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247513769&idx=1&sn=271421f7ed767bbe16e6217db9b4062a": "Weblogic-CVE-2023-21839 漏洞解析", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485796&idx=5&sn=283e87d36face5b763dbf1d04b5bbf7b": "科荣AIO ReadFile 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485796&idx=6&sn=abbc2933c62759c267d513474c197018": "畅捷通T+ KeyInfoList.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485796&idx=3&sn=bc0069d693793af5ce9985219e0fa59f": "金蝶Apusic应用服务器 createDataSource JNDI注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485796&idx=4&sn=37b5c787d107bf19351efe9a9fd7a5d3": "金蝶Apusic应用服务器 未授权目录遍历漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485796&idx=1&sn=e99efe813386e524c1cb81acf1138610": "浙大恩特客户资源管理系统 i0004_openFileByStream.jsp 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485796&idx=2&sn=4fef35879a755a07fb22dde96f67be2c": "浙大恩特客户资源管理系统 RegulatePriceAction SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247497988&idx=1&sn=a8798125f655ace74199ad628bb2edd8": "G.O.S.S.I.P 阅读推荐 2024-05-11 可能是今年最令人拍案叫绝的exploit——俄罗斯方块黑客帝国!", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488135&idx=2&sn=7aa9b69b13b656f1a970d3dd1455cee7": "【漏洞情报】金和-c6 FileDownLoad存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488135&idx=1&sn=b027427e95c2c340ca64c741e197ba0a": "【漏洞预警】Next.js < 14.1.1 Server Actions SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1NzgyMzA0OA==&mid=2247490236&idx=1&sn=4f8050afc569c7baaba5b0e299bf1418": "蓝凌OA漏洞-POC合集", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489319&idx=1&sn=63bdc3f9dff15cf69d00ef439e1fe547": "【已复现】瑞友天翼应用虚拟化系统存在session反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519462&idx=1&sn=1f7824cfd17d3489bc4ba1b37c5d974c": "谷歌修复今年第五个 Chrome 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247489879&idx=1&sn=f1261a183c0355b9fd530d31aa2bd391": "某通用设备的二进制文件RCE逆向分析", "https://mp.weixin.qq.com/s?__biz=Mzg4OTkwMDc1Mg==&mid=2247484751&idx=1&sn=2e45fb3943d7f52f54cf1b9b0175cdfd": "泛微OA E-Cology ln.FileDownload 文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247515166&idx=1&sn=a502600d479bc31cf54fcdd88b1b5d98": "CVE-2024-22262(CVE-2024-22259绕过)浅析", "https://mp.weixin.qq.com/s?__biz=Mzk0NjE0NDc5OQ==&mid=2247524148&idx=1&sn=568967d88db3a2d7f8e898b97fd71f13": "记一次梦游渗透从jmx到rce", "https://mp.weixin.qq.com/s?__biz=Mzk0NjE0NDc5OQ==&mid=2247524148&idx=2&sn=392d923652e1e298725e6d0328d4e1f4": "实战|对一个随身WIFI设备的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzOTE1ODczMg==&mid=2247499063&idx=3&sn=7917fee83895985056f762dcfb71b3a3": "超值999!ZoomEye终身会员开售!使用ZoomEye快速追踪热点漏洞!", "https://mp.weixin.qq.com/s?__biz=MzIzOTE1ODczMg==&mid=2247499063&idx=1&sn=2ab6cc91c1d912af75bf0cc10e49ba07": "xray社区平台功能再升级 单个PoC最高奖励提升40%", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505762&idx=1&sn=42f58b5109a63fd7a453c861fa31434c": "【更新】H3C-CAS虚拟化管理系统文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247575139&idx=1&sn=1258e61c9be3e488950d83d1c04e53bb": "50000多个小型代理服务器容易受到关键的RCE缺陷的影响", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657165474&idx=1&sn=076b28cf8913b7e1034e1de3f7b0c25a&chksm=f1d4d247c6a35b513c4e2adf94aad5b75dd2a68728a3cbc56c1164be0895d8dbbaa3d4a222d5&scene=58&subscene=0": "记一次梦游渗透从jmx到rce", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501058&idx=1&sn=284130df847441aac4703f9086a92925&chksm=fe79e19ac90e688cf700b05d49d0b60cde072c2ca7a925428107e7a223203465adc5a2c1a6a3&scene=58&subscene=0": "微软2024年5月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519497&idx=2&sn=1e1dfda946c84c3456230b9252dc53b1&chksm=ea94bc63dde335758128401d8248286936aecf6b12e9914935af867fdbb2ff0e4494f3b4d849&scene=58&subscene=0": "微软五月补丁星期二值得关注的3个0day及其它", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458554906&idx=3&sn=073f55f0fa8ed213e61474f7aa8d4af7&chksm=b18da29086fa2b866f2e5110b5925c724a76e9a03084c6e247513e92f54bdecde82c781786c5&scene=58&subscene=0": "全新课表6.18开班!系统0day安全-二进制漏洞攻防(第3期)", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543723&idx=2&sn=5043ee6a15382491ce491b2b77bbd771&chksm=c1e9a7faf69e2eec63a27f7bde86de9197a15b953fe940b0160c254d3e0f41ba076300818edc&scene=58&subscene=0": "微软Outlook通杀0Day漏洞:黑客开价1,700,000美元", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543723&idx=4&sn=9fd005fa06ab5964879de8e9fb76894e&chksm=c1e9a7faf69e2eecb8829ce4421a269b479ab846b0401231d0bee983699efb944dd06c7b51ea&scene=58&subscene=0": "新漏洞太多让美国NVD面临崩溃,还可能引发供应链风", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247518499&idx=1&sn=0e5a8e2a7353f28847308546ddc6f92e&chksm=eb70571cdc07de0a6e9ca3264120754d93e98ee5c8ecb20e1a40ad20d8455d5c71577cb90a0b&scene=58&subscene=0": "2024-05微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494619&idx=1&sn=fc96fa0e3667e78735394f8b01a1e3bf&chksm=e8a5e1b8dfd268aefe538dee8805b57648a8b1f59dc3e98d7b1eab324d102f1b13d94be6117d&scene=58&subscene=0": "漏洞挖掘|一次在线商城漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247571343&idx=1&sn=9458873eacc7ea5ef4633b1e5facf44b&chksm=9f8d4787a8face91d38f6978318eb62ba3ef251b9385afc2090130528a00864aaa3ad51835a1&scene=58&subscene=0": "360安全大模型实战笔记:核弹级漏洞,拿捏!", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786531&idx=1&sn=17cd4398213abe5f7559a5558455a15d&chksm=8893b8ccbfe431dab7682f7ae3a934776d8fe01b08014abe2693ba7712110de6f58ed36c9e93&scene=58&subscene=0": "攻击者正在利用Foxit PDF Reader漏洞传播恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519506&idx=1&sn=6a998af125698c3afd195f3d1eb96981&chksm=ea94bc78dde3356e58d441d5787adcdb360f70675c569aa3b7e5d7d549868bea76393657c2bd&scene=58&subscene=0": "谷歌紧急修复周内第3个已遭利用的0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519506&idx=2&sn=15447e0bd14688896d0aac2ef6d85333&chksm=ea94bc78dde3356e2862d49586a76b04a8277c3e27ee0cbad93ba1906c685c4e45d848bd682a&scene=58&subscene=0": "VMware 修复Workstation 和 Fusion 产品中的多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501088&idx=1&sn=bd5d274af61c330863468cbc87a5d01c&chksm=fe79e1b8c90e68aec8783ee34e0b9b2cdcf03daf75962bbc9bb98fb4073519182c0f9472cb9b&scene=58&subscene=0": "【谷歌一周内修复第三个在野利用】Google Chrome V8类型混淆漏洞(CVE-2024-4947)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664213290&idx=4&sn=3a4861967fdbecc25b0446058b99e015&chksm=8b59a9d3bc2e20c56946b01350f1b166ce06e37b42c856588430d1ddea92238a11f16fddd5e1&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522825&idx=1&sn=a821c15b75bc485ff843a08e76279ed9&chksm=ce461119f931980f43f45f600643fb5a42896d5a42f38aab91085f749777e7cd04c25ef44bfb&scene=58&subscene=0": "【漏洞通告】Cacti 远程代码执行漏洞CVE-2024-25641", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494630&idx=1&sn=799ed673248d52ad892b0ed82583849e&chksm=e8a5e185dfd26893a73ba9a0bbaf26c0be86911bd6b498c722d211ac11c851ee56e7d4f4adfd&scene=58&subscene=0": "由LFI所导致的RCE", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485311&idx=1&sn=b1a169294dbb58cd7913d36bbf9f3f0c": "CVE-2024-27130|QNAP 存在未经身份验证的RCE漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485311&idx=2&sn=d2580a8757c0244766bffb2343073fdd": "CVE-2024-25641|Cacti 存在多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485311&idx=3&sn=9d17a645ca0614b8ff340d218594f7df": "CVE-2024-4367|Mozilla PDF.js代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5Nzc4Njg1NA==&mid=2247489093&idx=1&sn=e58cfb2145a9148efeee31357c00074d": "关于调用安卓FileProvider组件的移动应用程序存在高危漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247485714&idx=1&sn=1eade64ad4cecfb688072efdfc682538": "详细的漏洞报告是怎样的", "https://mp.weixin.qq.com/s?__biz=Mzg5MDk3MTgxOQ==&mid=2247487652&idx=1&sn=4bd4a475be8d8c48ddd856ac6e6fb2c3": "Weblogic T3协议反序列化漏洞分析(上)", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492543&idx=1&sn=bc5f9c5ac74d2b5948c63be9b2529959": "漏洞复现 || Palo Alto Networks PAN-OS GlobalProtect 命令注入", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060059&idx=4&sn=3a1f98131b57d56bfc927626be63cff2": "【安全圈】新的 Wi-Fi 漏洞通过降级攻击进行网络窃听", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555047&idx=3&sn=c876d8c856a673d4454d41dccd839959": "内容更新:沙箱及绕过-人气讲师带你揭秘Chrome V8漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzU2ODY0ODk2Nw==&mid=2247488627&idx=1&sn=d10d14a786e8e9b13d2772dc143b31c2": "【漏洞复现】瑞友天翼应用虚拟化系统appsave SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247537889&idx=2&sn=c4d8540fd890d3b3d3270e36e581048a": "小米汽车安全漏洞奖励计划正式启动!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519516&idx=2&sn=6d57caff04aeb615ccc68ff28c0abe53": "WiFi 标准中存在漏洞 可导致 SSID 混淆攻击", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511649&idx=1&sn=f42994e31909f6f64eda52c9fd7cd4f0": "神漏洞!GE医疗超声设备感染勒索软件,设备停摆、数据遭篡改", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511649&idx=2&sn=4bed154b2b1a7dff303ab027ea8e3508": "多模态大语言模型的致命漏洞:语音攻击", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488196&idx=1&sn=7077c19b9859878e7494aae39eaebd6c": "【漏洞预警】FE业务协作平台存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488196&idx=2&sn=b39e9c8c1dab4b5e686d919ec7111f53": "【漏洞预警】SiAdmin多个SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488196&idx=3&sn=fb71c16f0b888e2f750c786531c4f045": "【漏洞预警】mlflow信息泄露漏洞(CVE-2024-3848)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488196&idx=4&sn=70ea68575cc0a708fd9b90879c0e35a9": "【漏洞预警】wandb信息泄露漏洞(CVE-2024-4642)", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651129719&idx=2&sn=7c30a82986188efb2e5ebbf7494c99f8&chksm=bd15b7a48a623eb2f3b74f382bab96536f7c1d28d72a57f7f17c2411b4649f289e80431eb0d4&scene=58&subscene=0": "价值60亿元的艺术品拍卖活动因网络攻击延期;CNNVD通报微软多个安全漏洞 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786537&idx=1&sn=63dcb4fb901d9668b26229d60339ffe7&chksm=8893b8c6bfe431d0567cb9cfc74dd4c1fb43fad0c7a82bbc7a195d659da71dc1c2270b03f5f5&scene=58&subscene=0": "严重的 Git 漏洞!CVE-2024-32002允许在“克隆”操作期间远程执行代码", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247490752&idx=1&sn=0e2c2a4945e6facba3d7321e20eb4c12&chksm=fe2ee34bc9596a5deaa8727826485143e8d5ba6b48148d2a7b18e33201e19902afb28605dfe1&scene=58&subscene=0": "浙江大学 | V-SZZ:自动识别受CVE漏洞影响的版本范围", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247516740&idx=1&sn=e37fcf4f30d47e6705dea50865ddd401&chksm=ea83a4d1ddf42dc7e96975fb22c501e469952d28c81b6b478501fdc66a8a004822818065cf1b&scene=58&subscene=0": "小米汽车安全漏洞奖励计划正式启动!", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247506029&idx=1&sn=16f520e893fd0c69a6985f56789aa123&chksm=fa520dd3cd2584c574e7dcef09cc3f3d6ee37fcecf553ba4391018ca7990c8c09a0ed821818d&scene=58&subscene=0": "微软2024年5月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247512952&idx=1&sn=463151cc889dd04ca746431c6089302e": "Thinkphp框架的图形化漏洞扫描工具 -- Tp_Attack_GUI(5月16日更新)", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247622853&idx=4&sn=eefc4a2753d59ea00e90419a404c98b0": "多模态大语言模型的致命漏洞:语音攻击", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247622853&idx=5&sn=92bc47346d9c1691cebf65aa8a58cbc9": "神漏洞!GE医疗超声设备感染勒索软件,设备停摆、数据遭篡改", "https://mp.weixin.qq.com/s?__biz=MjM5MTg0Nzk5Nw==&mid=2247484681&idx=1&sn=94d380dea727d9f9dba7ef7b652e03e5": "JDBC反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490297&idx=1&sn=5d1c8c21766ac289f22b5a24f43399e9": "漏洞复现 | 英飞达医学影像存档与通信系统WebJobUpload任意文件上传漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247508006&idx=1&sn=5584261aaf8e1605593178a0cddbf9a1": "从未经身份验证的存储型 XSS 到 RCE", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247508006&idx=2&sn=a42afa7000ffa7bb5960b487d4af7dfa": "XSS 到 RCE", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247508006&idx=3&sn=2d4e35674646702d66c61547270f81fa": "CVE-2024-4040 SSTI 和 LFI PoC - 漏洞利用", "https://mp.weixin.qq.com/s?__biz=Mzk0NTI2ODE1Nw==&mid=2247486099&idx=1&sn=6218afc12f10458ed243b9e9a8823ae6": "某一次PDF-XSS漏洞挖掘(安服系列)", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485613&idx=1&sn=86e0f78b5d99b3f0dcd6ab3b044369f0": "【高危漏洞】网锐捷网络技术有限公司EG3210存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485613&idx=2&sn=40bfc9b15c2c43e172a21b5f81531e65": "【热点播报】利用以太坊安全漏洞,麻省理工两学生12秒窃取1.8亿元", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247485939&idx=1&sn=ee0408334d317780ab5dbd2544ca453a": "游戏漏洞挖掘端游页游手游逆向课程免费领取", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247490762&idx=1&sn=2bd4529131b49953489229fbc501bba2": "用来扫描和验证MS17-010、MS09-050、MS08-067漏洞的工具", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650593067&idx=2&sn=8edb88907ae019eaa993c7ba23bbce78": "福昕PDF阅读器漏洞被用于传播恶意软件", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650593067&idx=3&sn=aa890484e3add5b37af89e9b0eb52964": "记一次某双一流大学漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650950854&idx=1&sn=454347767b4f7ae08b1db0249efc6a91": "自动化漏洞挖掘工具,集合Nuclei + Subfinder + Gau + Paramspider + httpx", "https://mp.weixin.qq.com/s?__biz=MzkwOTQ4NDMzOQ==&mid=2247484369&idx=1&sn=318373b9e25bd03baa09482bb05f4a58": "CVE-2024-34220", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488857&idx=1&sn=e3a07dc5a5bb85a22f3c86b17a3b9f95": "漏洞预警 | User Meta敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488857&idx=2&sn=7c1145a49e4c39c877a77a2337c280ef": "漏洞预警 | Ruvar OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488857&idx=3&sn=3c5413787c62d739a5dda35f0e5a8d2c": "漏洞预警 | 联软安全数据交换系统任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTgxNTc5Mg==&mid=2247485768&idx=1&sn=1fe6d3c9f18c1d915fa9f615d0cc8f91": "【万字总结】 NMAP 从 原理 到 全参数实践在 到 开发漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247491526&idx=1&sn=0dee52f07a71b248c4d256400b6478ab": "D-Link NAS 未授权RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY3OTc5Mw==&mid=2247484166&idx=1&sn=9ba9f53791b7d18fc195a096859dcacc": "【漏洞复现】cockpit系统assetsmanager∕upload接口存在文件上传漏洞 | 附poc", "https://mp.weixin.qq.com/s?__biz=MzU3ODc2NTg1OA==&mid=2247489845&idx=1&sn=e6293defce4d9ca341ed77fbffdae178": "CVE-2023-35001 - nf_tables - LPE - Pwn2Own Vancouver 2023", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060079&idx=1&sn=c866158eb9b623045fa98d41c3c4fee9": "【安全圈】利用以太坊安全漏洞,麻省理工两学生12秒窃取1.8亿元", "https://mp.weixin.qq.com/s?__biz=Mzg4MDA2NjExMA==&mid=2247489706&idx=1&sn=2a672e11f228997aaeee1330c06a2d8e": "思科企业级路由器0day漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555133&idx=1&sn=c8e9b1dd3cf1f1a0f12cfac184dca0e1": "CVE-2024-0517分析心得", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555133&idx=2&sn=9866c17c47c3cc3d3d22ebca693d7a98": "今晚7点直播 | 漏洞挖掘实战", "https://mp.weixin.qq.com/s?__biz=MzkyMjYxMDM4MA==&mid=2247484021&idx=1&sn=81684080386042b9f3b0b1764d8e71c8": "【0day漏洞复现】北京慧飒科技有限责任公司WEB VIDEO PLATFORM存在未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjU4NA==&mid=2247485354&idx=1&sn=9a7f4a0e3c7069f212b3afa3cbfc141f": "我看刑,运营商高危在野业务漏洞被利用到网络诈骗", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247508034&idx=1&sn=096e87696fa35d4e06734e396ba2e1b1": "使用 NAM 在思科安全客户端中执行代码 - CVE-2024-20391", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485616&idx=1&sn=0f7f040d6cf77ecd6aef4b470f2c1710": "【高危漏洞】亿赛通数据泄露防护(DLP)系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247540081&idx=1&sn=592e1351143f9e75e05171c1e6e08264": "漏洞挖掘 | 记一次绕过宝塔的的文件上传", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486474&idx=1&sn=9f0b09ec20e8bcf7ae338e474deb1544": "Gradio component_server存在任意文件读取漏洞复现(CVE-2024-1561)CVE-2024-1561", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247484562&idx=1&sn=073228de808545d08198d01ee41cca23": "JAVA安全-Shiro-550反序列化漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247511540&idx=1&sn=04f703a49de44a535247915bfce9edc8": "记某src通过越权拿下高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501103&idx=1&sn=77d7d1baeb92d88001aa13413a6399c0": "【已复现】Git 远程代码执行漏洞(CVE-2024-32002)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501103&idx=2&sn=6f464020cf0c9164f6c949b9195856ae": "安全热点周报:谷歌、微软等厂商发布紧急补丁,防范本周新增的七个在野利用漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489354&idx=1&sn=a60c31365e1598fffd221539de126193": "【已复现】Git存在远程代码执行漏洞(CVE-2024-32002)", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484332&idx=1&sn=1ec0efe6206597ee81da5b4f55a60a78": "英飞达医学影像存档与通信系统 WebJobUpload 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291075&idx=1&sn=dcf985acfaca02b50e96cc850196b424": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522888&idx=1&sn=b3b2db09fddfe74676a41938cdeeaad9": "【漏洞通告】Zabbix服务器sql注入漏洞CVE-2024-22120", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522888&idx=2&sn=4803f975b796fc5f44e8fcde69f81708": "【漏洞通告】Sonatype Nexus Repository3 任意文件下载漏洞CVE-2024-4956", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505849&idx=1&sn=07cd46ceeb91cc3424e86b76d68b8fc8&chksm=cfcab4adf8bd3dbb738fbc88132b03504d494daddcd595e529a092c48f72160139c4c7fa162d&scene=58&subscene=0": "漏洞通告 | Git 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519528&idx=1&sn=9ed9dbdab8ecbf2108523342f0297d50&chksm=ea94bc42dde33554871d71670361198896ce01f979786a3843579e0bc30cf8ca128d3449e155&scene=58&subscene=0": "英特尔披露 AI 模型压缩软件中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519528&idx=2&sn=39c67314f7459aa04cbef3604ef663a9&chksm=ea94bc42dde3355434c8a075d0b4feaf246269872775783789967ae81284e468716a6872fdaf&scene=58&subscene=0": "CISA提醒修复严重的Chrome 和 D-Link漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247575276&idx=2&sn=ac8ce9e389bb4bb5577616b531678977&chksm=e91476d6de63ffc06e379e6887c737a76613cd78cc18b8af70b58a324e5424fd4de4b6424184&scene=58&subscene=0": "安全动态回顾 | 16项网络安全国家标准获批发布 D-Link EXO AX4800路由器中的RCE零日漏洞PoC漏洞发布", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544675&idx=2&sn=66fffdd309b21fa4612f8cf540a1ac76&chksm=fa9399a2cde410b4ceadf13f49667f5e6621d22f7d7307b0bb0c60dc3d57673e8940f1a322b4&scene=58&subscene=0": "福昕PDF阅读器漏洞被用于传播恶意软件", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544675&idx=3&sn=74cba19a7ce682cf0281a120af83357b&chksm=fa9399a2cde410b4da5c45617c519ff2f339afbb30ee6a8a79767281e9168cfbf53d8a139d1e&scene=58&subscene=0": "脆弱的Tesla汽车!第三方软件的漏洞可致汽车被黑客操控", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494779&idx=1&sn=2e2ce5f5fd03312e6616c914c60cdfe0&chksm=fd74dcb2ca0355a4dd09d00fe78a15b2184fd485500f6d4fd485534120e273549a0198a2f45a&scene=58&subscene=0": "CNVD漏洞周报2024年第20期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494779&idx=2&sn=42f3570f814e7482cc91ae4ca66372a0&chksm=fd74dcb2ca0355a48b11a697176946c633dee8667b8324e6f9ba748c6611c0a9cebedbc0cc74&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240513-20240519)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519537&idx=2&sn=0c7319379db8bf6e0addcbc46f4c0464&chksm=ea94bc5bdde3354d4d5855a7d7501ff99d30e1b597fa0d4fa901144babfdc7514f07566727d3&scene=58&subscene=0": "Fluent Bit 严重漏洞影响所有主流云提供商", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511673&idx=2&sn=55a60c687661c5440d845f8b927ec1c7&chksm=ebfae959dc8d604f26d1d65bb006f22e14dbdaada588fbda38fb1e47e5dac4ecc31e92128053&scene=58&subscene=0": "Fluent Bit高危漏洞威胁全球云计算大厂", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543913&idx=6&sn=be3e19241f277dd61581cb69f2416aa0&chksm=c1e9a038f69e292ed1d8ee27ddd5e54fdaaf2b5c0ab107aff79334b3416dda2c1f7cd8b3c979&scene=58&subscene=0": "2024 年第一季度漏洞和漏洞利用趋势分析", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247575307&idx=1&sn=8e75156ec07e8dad4cbe46b92f9ef2e0&chksm=e9147731de63fe27744f4625c784aa4e8e5a8a319e3785e3d133545954d2b5d0d593d12ec43f&scene=58&subscene=0": "2024 年第一季度漏洞和漏洞利用趋势分析", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489152&idx=1&sn=45ca521cab7ad87451274d3800c9c900&chksm=fb029bd8cc7512ce8fc079cbe62c92ea3b6dc9c09ba70a3b2b8b968d39471f04cd1af432a810&scene=58&subscene=0": "github好项目推荐-综合OA漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522907&idx=1&sn=824fd9f13249d1a3a60346f6e3217101&chksm=ce46114bf931985d6ff21e926f261208e84b2aa6e775a1affa5351c8c8752f08d2e21dba5322&scene=58&subscene=0": "【漏洞通告】Git clone 远程代码执行漏洞CVE-2024-32002", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522907&idx=2&sn=d4415c6cc8d46253d3c8db1ebe5be0b6&chksm=ce46114bf931985de822b4afbe8c167c9c54a820a0d843b5e75748b4be6d095cd8d904fdf668&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240513-20240519)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499145&idx=1&sn=12d673468cd743c84791c03a74b928c0&chksm=973aceeba04d47fd75bc7d470c06afa0008b720a6959d5d38a2fe78b58b4cffc6655095fc1c2&scene=58&subscene=0": "CNVD漏洞周报2024年第20期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499145&idx=2&sn=793b07b12e4324467c0998e48d6b54fe&chksm=973aceeba04d47fdbb8b83cb25074a8812eb29a3185b6e1db5618013a4fc2ae3fb76ae8b2de8&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240513-20240519)", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484352&idx=1&sn=1add312614f437b839c518ed66e347d9": "某网址导航页 搜索页面存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDY0NjY3MQ==&mid=2247484742&idx=1&sn=12a26ea18ab7f62e36c50d04e45afe8b": "代码审计-某人工智能语音系统多处文件上传+命令执行", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484339&idx=1&sn=43a896a68891cb43aeb9f2efdc938c14": "开源数据大屏AJ-Report远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664711579&idx=1&sn=07bbf84370e04a2ce770782b7b3b2276": "Zabbix zbx_auditlog_global_script SQL注入漏洞(CVE-2024-22120)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494674&idx=1&sn=1c095e995b649a632804fd8fa3d26edc": "如何快速挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247622979&idx=6&sn=437485b668f014c3a479eb7fb9184e88": "产品频曝严重漏洞,罗克韦尔向全球客户发出紧急断网通知", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651278368&idx=2&sn=aca6f8d454d4498f040b8bc4d4bb09bf": "可绕过身份验证,GitHub企业服务器曝满分漏洞,附PoC", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092845&idx=1&sn=643307ad35cacd22eb8acf1f36dce8b1": "英特尔AI模型压缩器现满分漏洞,可导致任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092845&idx=2&sn=27c98ed7b81c43c052f956b591f7419c": "信息安全漏洞周报(2024年第21期)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060362&idx=3&sn=505f4f8076fc9bc85e9fc7214f64c120": "【安全圈】可绕过身份验证,GitHub 企业服务器曝满分漏洞,附 PoC", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247484469&idx=1&sn=da3bc20d14c03da8bb61d0f6108ec535": "CVE-2024-4367 PDF.js RCE 分析(译)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489361&idx=1&sn=9dfe4a510af3938cf728ff9116797db0": "Atlassian Confluence Data Center and Server存在远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555304&idx=2&sn=df944a905e518992cb6313d8133ab99d": "GitHub警告其企业服务器存在满分认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519550&idx=1&sn=c9df29fac4cc88482637824b11ada5e4": "GitHub 企业服务器中存在严重漏洞,可导致认证绕过", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519550&idx=2&sn=6b4de50a6ef98b37be097aae6daafa64": "Veeam:Backup Enterprise Manager 中存在严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502921&idx=1&sn=9ca2c5a6e20e4330d154cec232946aa4&chksm=f258583ac52fd12c3facf50f2419afd7c824e8c7de041fa70f57aa6c657babf91c6cb4796def&scene=58&subscene=0": "雷神众测漏洞周报2024.05.13-2024.05.19", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511682&idx=2&sn=4b3976cacd5e715e779455e46164319a&chksm=ebfae9a2dc8d60b4cabcac3aa5374ff2b781cd58784b1f89bcd74acbad6be79f21d03563f929&scene=58&subscene=0": "产品频曝严重漏洞,罗克韦尔向全球客户发出紧急断网通知", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501160&idx=1&sn=bbca83e44eca687fce84ed143277fe00&chksm=fe79e1f0c90e68e6dadfba1a2e10010c1a635b1cbea29185a3f3a57b2fe95492fe182838c445&scene=58&subscene=0": "Atlassian Confluence 远程代码执行漏洞(CVE-2024-21683)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505887&idx=1&sn=48261a9d8f7fdfd08589065fea717d87&chksm=cfcab4cbf8bd3dddd0e5d0a447e99881c00ad4cc3146c2bd82c8b206751102bbbd8c47cff6fd&scene=58&subscene=0": "漏洞通告 | 猎鹰安全终端安全系统 V9 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543940&idx=3&sn=090b47c6861db2193bfdee900ff46af1&chksm=c1e9a0d5f69e29c37a376ae2d497a7a560fdc8f934012a7d4fbfe230f794b675f6d93efb37d9&scene=58&subscene=0": "超火爆的Fluent Bit曝关键漏洞,影响几乎所有云服务商", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543940&idx=4&sn=261deececdc2e69909a6db29ae134682&chksm=c1e9a0d5f69e29c3beb3a74324ca227542cc4eeb13ba52ed31a57308b793205db91af36e268b&scene=58&subscene=0": "Fluent Bit高危漏洞威胁全球云计算大厂", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544855&idx=3&sn=e13924444b221977cc6975206f6983cb&chksm=fa9386d6cde40fc03f209304da63d5387c54599739cc92f85504ad91770ee625dfe24f96b8eb&scene=58&subscene=0": "英特尔AI模型压缩器现满分漏洞,可导致任意代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522958&idx=1&sn=6fa605df18a31d9d3cbc6657d37f8599&chksm=ce46119ef9319888ecb7a00f532f46cd20b58151ea86d9a16001596e3c37a3f6f951aaad6f48&scene=58&subscene=0": "实战攻防季:主动猎捕,让0day漏洞无处遁形!", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522958&idx=2&sn=adde25c4c3875a0d7b1aae6db04d0965&chksm=ce46119ef9319888e6ee4158cf8174d10d2247608a642a4f11096eba8a211364105b93bea592&scene=58&subscene=0": "Confluence Data Center and Server登录后远程代码执行漏洞(CVE-2024-21683)", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484604&idx=1&sn=46cf3513acd9420e3b59d150885b6ed5&chksm=c12af93df65d702b01fa7358ebfce7b88c574be20a74701dcc78c065bc1f75c082f43e8a8694&scene=58&subscene=0": "【复现】Nexus Repository3 任意文件下载漏洞的风险通告", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247505698&idx=1&sn=0bd0e0d4014a6c57ba354459a6fbef99": "PDF.js中任意JavaScript代码执行(小核弹)", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247484497&idx=2&sn=a38d49230978fb4d6b866c1b0c86abe3": "Google Chrome 的漏洞链分析(译)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494690&idx=1&sn=a4963e02faa16fbf1a20f2eeb9f22a1b": "通过路径遍历所实现的RCE", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511689&idx=1&sn=036b328783d84f45701f2910aadcfea9": "内部VPN遭漏洞攻击未向监管报告,这家金融巨头被罚超7000万元", "https://mp.weixin.qq.com/s?__biz=MzkwNTQxNDc1MQ==&mid=2247486673&idx=1&sn=e72e7d2bcf7ecd5d561716edece72ae8": "Confluence Data Center and Server认证后RCE(CVE-2024-21683)漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247491559&idx=1&sn=90a0d674b76152b8a3a66643bc10c085": "听说PDF.js插件漏洞很火?", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484361&idx=1&sn=17cacf138b85f6eca0b1483b5eae8ce3": "用友NC warningDetailInfo接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MDk3MTgxOQ==&mid=2247487792&idx=1&sn=9934c4cd4964ff439b2b12d8686459d3": "漏洞预警 | Git 远程代码执行(CVE-2024-32002)漏洞复现与分析", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489266&idx=1&sn=617d314d2b0d6bb380f5402885fbdba1": "VPN遭漏洞攻击未向监管报告,被罚七千万巨款", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484345&idx=1&sn=3f8d51ff4f36aacfd40b03c2692ca92b": "魔方网表mailupdate接口文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060477&idx=4&sn=9bce7bfcfe76a7430ab4f38562be2fbe": "【安全圈】英特尔 AI 模型压缩器现满分漏洞,可导致任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489369&idx=1&sn=256cd3f4ad5dc918996b1040d9cf42bc": "【已复现】Sonatype Nexus Repository 3 存在路径遍历漏洞(CVE-2024-4956)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664213899&idx=4&sn=69cc141f56506dc5d4516255849a7131": "CNNVD | 关于Atlassian Confluence安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651129868&idx=2&sn=a52e95a2770955f90dfa8bc1ce475b2e&chksm=bd15b8df8a6231c90919ff6d8e503640bf35d6d8d61212e6795cd8a4b250d92a018a3b496d97&scene=58&subscene=0": "四部门联合印发《互联网政务应用安全管理规定》发布,7月1日起施行;超过60%网络安全设备自身缺陷可被利用为零日漏洞 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501174&idx=1&sn=ca7c460d094e96aaefc7cf3f05bcb31f&chksm=fe79e1eec90e68f81460b4c8227f7eb9b7b4d714e8723c837061e6209b52d1b152744597867d&scene=58&subscene=0": "【已复现】Sonatype Nexus Repository 3 路径遍历漏洞(CVE-2024-4956)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543982&idx=4&sn=61a190cf3ee70778798ec5543328514f&chksm=c1e9a0fff69e29e9a2bf226260eaf181262f2571c828edff1d0b6ee5cc088f21823b82f953ab&scene=58&subscene=0": "可绕过身份验证,GitHub企业服务器曝满分漏洞,附PoC", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519566&idx=2&sn=ed407d4fe01434881f2b2243f80ea1a7&chksm=ea94bc24dde33532df90bbcb4626b222cc57354fa7d3706da1c59a20b6238ffeeba1bda202c6&scene=58&subscene=0": "【已复现】Sonatype Nexus Repository 3 路径遍历漏洞(CVE-2024-4956)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247506151&idx=1&sn=1dd24365ccb385a1847e61b321e00af2&chksm=fa520d59cd25844f773413a75edffa9f4f53bc5ceab5929cc98e0a1fe869bb454e2e1b458363&scene=58&subscene=0": "手把手玩转路由器漏洞挖掘系列 - COAP协议分析", "https://mp.weixin.qq.com/s?__biz=MzkwMTUzNDgxOA==&mid=2247484443&idx=1&sn=5e439fba9c07fc876a5252b7679794e5": "狗屎运~Atlassian Confluence CVE-2024-21683 RCE漏洞复现(附EXP)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494695&idx=1&sn=b3efd346f945746a08c26d597065852a": "任意JavaScript代码执行(小核弹)", "https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247527357&idx=2&sn=b84c3d11f1487a3a9b4a0818dcef3807": "荐读丨Fluent Bit高危漏洞威胁全球云计算大厂", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247512979&idx=1&sn=3f988301cbca087c1b6753063030b8c7": "Struts2全版本漏洞检测工具 -- Struts2VulsScanTools(5月23日更新)", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247623097&idx=5&sn=0fa1f42cdfc740064f33176fd36bd1c0": "超火爆的Fluent Bit曝关键漏洞,影响几乎所有云服务商", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489272&idx=1&sn=afb4b05d5909232be658f6e2e84d9bd2": "请尽快更新!第 4 个 Chrome 零日漏洞已出现", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247494518&idx=1&sn=82fb56009b950303e3a57ad1c4f22f6a": "RuoYi 4.7.8 执行任意SQL语句导致RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTEwNTE1Mw==&mid=2247485002&idx=1&sn=02235ce6d479e11af8339d3005b043d5": "CORS跨域资源共享漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247622044&idx=1&sn=c11507f85c7269edaaba23579160ea06": "什么是0day市场?为什么无法被取缔?", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488233&idx=1&sn=10738bde5ec4118cb205f1f57d34d903": "【漏洞预警】Google Chrome 类型混淆漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060533&idx=2&sn=16e465b1a0d59be29d1298544b645733": "【安全圈】黑客利用 VMware ESXi 漏洞进行勒索软件攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060533&idx=3&sn=c45035b3b90f8a7e30f79306f425c591": "【安全圈】GitLab 爆出安全漏洞,允许黑客接管账户", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786576&idx=1&sn=db752fa8fc840060c5be222a5da8ec62": "发现WinRAR严重漏洞!利用ANSI 转义序列欺骗用户触发", "https://mp.weixin.qq.com/s?__biz=MzI3NjUzOTQ0NQ==&mid=2247510744&idx=1&sn=7d4ee314a2c4d8097417b25dad175c74": "兄弟们,我发现了一个有好多漏洞讯息的宝库...", "https://mp.weixin.qq.com/s?__biz=MzI0MTY5NDQyMw==&mid=2247514651&idx=1&sn=718dfc249e5f8a35b1fd4a3b37dc0864": "奖金大放送!华为云漏洞奖励翻倍活动,只等最“粽”要的您~", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555478&idx=2&sn=106ec226917c2ceb37626b2eac723d49": "允许执行任意代码,英特尔披露其AI模型压缩软件中的满分漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522972&idx=1&sn=c6c31629fdc283bf4b66558e21632bc5": "【漏洞通告】Google Chrome 浏览器越界写入漏洞CVE-2024-4761", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247484509&idx=1&sn=45146cc9ac50724ce0581e3a15cdb767": "CVE-2024-21683 Confluence RCE 分析(译)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485351&idx=1&sn=43476287a5e8d12e56ff5f82b16417ed": "CVE-2024-4985|GitHub Enterprise Server身份验证绕过漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485351&idx=2&sn=0adc42b4d60e706882552cdd8c61db21": "CVE-2024-21683|Atlassian Confluence远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485351&idx=3&sn=e67485085ffcc76b19b04bcefe5d768d": "CVE-2024-4367|Mozilla PDF.js代码执行漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448662708&idx=5&sn=1bc7eed8fdf16715987729ee70eeb976": "CNNVD关于Atlassian Confluence安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519584&idx=1&sn=8ca7ba7442a6234b2f5910147094c5bb": "GitLab 高危漏洞可导致账号遭接管", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519584&idx=2&sn=dab52360076996946ff35b2afa4a9f72": "【在野利用】Google Chrome V8 类型混淆漏洞(CVE-2024-5274)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519584&idx=3&sn=2aa72d7f1d783c31f298fa9a0f01f07f": "Ivanti 修复Endpoint Manager 中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650616425&idx=1&sn=f7171cd1c43e56a32e314b4050108c2a": "红队视角!2024国家级攻防演练100+必修高危漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501184&idx=1&sn=6ef011b0a502294c7cc9a5e94c18f9b5&chksm=fe79e118c90e680e9c8dad5834623ed6b42d668cb79e0afbea68b1b4fdd6ce0e537afa15fa36&scene=58&subscene=0": "【在野利用】Google Chrome V8 类型混淆漏洞(CVE-2024-5274)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544934&idx=3&sn=157baf0b09d936f2914fb20a92883bab&chksm=fa9386a7cde40fb1b884fc1b49f8dd6c791506fa42a236cdde66777d95e340fe52ab4a9c580a&scene=58&subscene=0": "内部VPN遭漏洞攻击未向监管报告,这家金融巨头被罚超7000万元", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484380&idx=1&sn=7c542581eae589a5538df3a8c293eb39": "Sonatype Nexus Repository 3 路径遍历漏洞(CVE-2024-4956)", "https://mp.weixin.qq.com/s?__biz=MzI2NTc1ODY0Mw==&mid=2247485972&idx=1&sn=f2dc5cb97f8b94f44ad044ff87211554": "存储桶遍历漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247501851&idx=1&sn=98774218dd229b9f64b80379bed144a4": "2024HW 攻防演练100+必修高危漏洞合集(附 PDF 下载)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247512451&idx=1&sn=b7c96c3c14e4359d1f6552e1c984a267": "记一次有趣的逻辑漏洞挖洞经历", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651279565&idx=1&sn=2aaace50bafb4c1d6f10f60047809116": "GitLab爆出安全漏洞,允许黑客接管账户", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060547&idx=4&sn=b7a4eb251751fbdf14936fe290910b87": "【安全圈】今年第 8 个零日漏洞,谷歌发布 Chrome 浏览器 125 紧急更新", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555501&idx=1&sn=99d873c7182ecf50f6f4ad61c5f952d6": "CVE-2017-11882分析和白象样本分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555501&idx=2&sn=13deb6ab25d31f49afcf2a1c4106554a": "从零开始,掌握CVE漏洞复现技能", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247557467&idx=1&sn=d045c3e1ea1e95138ea642889ebfb4c7": "HW前网安人必读的高危漏洞合集(2024)", "https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651725788&idx=2&sn=d6418d4c9eed6489426ea2c81b02977a": "Atlassian Confluence远程代码执行漏洞来袭,启明星辰提供解决方案", "https://mp.weixin.qq.com/s?__biz=MzIxOTQ1OTY4OQ==&mid=2247484907&idx=1&sn=8bdf245dd9e06cd3b175a9d0bea8f2de": "geoserver漏洞解析以及测试方法", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247508285&idx=1&sn=8d51109ec4420270fd8afe069893581a": "CVE-2024-4367 & CVE-2024-34342:PDF.js 中的任意 JavaScript 执行", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247508285&idx=2&sn=c38f1b57c4440816371a19d05a3db8e7": "Git RCE - CVE 2024-32002 | 技术分析和本地复现", "https://mp.weixin.qq.com/s?__biz=Mzg5NjU3NzE3OQ==&mid=2247488934&idx=1&sn=2ac68a757f64f3eadf5ef51d8d59315e": "【转载】geoserver漏洞解析以及测试方法", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485633&idx=1&sn=08b21e99de8874a3eeb083a4a3cadb76": "【高危漏洞】金同方科技有限公司月子会所ERP管理云平台存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486732&idx=2&sn=4a6b92b3fae4f1f0e59431f1691f4cc7": "CVE-2024-32640漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650593499&idx=4&sn=63b5392ae5bb4eb2eb8a7be7bbcb9c63": "一款 Struts2、Fastjson、Weblogic 等漏洞集合工具", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655240330&idx=1&sn=8c7c5ccf1a669bd6a1caae34a6ca1e74": "2024攻防演练利器之必修高危漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488990&idx=1&sn=c68bf295e6b3bb743bb02e0c31e9711d": "漏洞预警 | Zabbix SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MTg0Nzk5Nw==&mid=2247484694&idx=1&sn=41fb3a356a0bcf99887549a8b9345d93": "RuoYi 4.7.8 RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247485511&idx=1&sn=c272f84fd8e7c6d2b159562bfce81b23": "漏洞挖掘 | 一次上传点解压缩的渗透测试", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484390&idx=1&sn=594e1069c5707fd19d0e8c2a3d5060d4": "『漏洞复现』智慧校园(安校易)管理系统 FileUpProductupdate.aspx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060568&idx=3&sn=443baf691158d8592a60269c80799312": "【安全圈】苹果定位服务被曝漏洞,可用于追踪部队行踪", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060568&idx=4&sn=c31b7000ca1726455c9fbac5c8545662": "【安全圈】安全漏洞再现,逾 20 万个 Confluence 数据中心实例面临暴露风险", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247623165&idx=4&sn=85e1131c369cdb8314c7c581f7b46960": "英特尔AI模型压缩器现满分漏洞,可导致任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247501700&idx=1&sn=3481e567a5490fdbc8a55232de4c7dbc": "【成功复现】SeaCMS海洋影视管理系统SQL注入漏洞(CVE-2024-29275)", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247486084&idx=1&sn=3cb42ea9b85e568b082bdd85648d1dda": "本周最新7个CVE漏洞POC", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513008&idx=1&sn=cb25e4707d7805bec175e9603c0dcdb6": "漏洞扫描神器 -- AWVS 24.4.24(win+Linux你懂的版)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494788&idx=1&sn=41cd0629c255e0eca224f27fe8068bb8": "SRC实战:指纹识别->代码执行", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488240&idx=1&sn=92c722812e265ad96c586585d0d6f199": "【漏洞预警】Wireshark拒绝服务漏洞(CVE-2024-2955)", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247485431&idx=1&sn=088d6ef67eb97bb8876f159c3a74d992": "一文了解往年热门的漏洞-shiro", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247498099&idx=1&sn=13a9735532676995662d40ccd6b1d862": "G.O.S.S.I.P 阅读推荐 2024-05-27 智能合约漏洞检测到底行不行?", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484399&idx=1&sn=eea441368636fe22d94c6c6d1b83a011": "『漏洞复现』用友GRP-U8 sqcxIndex.jsp SQL注入漏洞(XVE-2024-12560)", "https://mp.weixin.qq.com/s?__biz=Mzg3NDc3NDQ3NA==&mid=2247484378&idx=1&sn=e3e35e671302f137527c8eaea10b8e31": "CVE-2024-32002 Git远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490326&idx=1&sn=5022c6e0e8365d7822e417c7ffa1de5a": "漏洞复现 | Atlassian Confluence远程代码执行漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247571584&idx=3&sn=dad74d698529317d823489926f592c2d": "千万奖金虚位以待,“矩阵杯”漏洞挖掘赛三大赛道火热招募中!", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511705&idx=2&sn=47c2abe7c23def186cd1bcd51eebd038&chksm=ebfae9b9dc8d60afdfbd2c736697a70a085455fdf1bfd63a6337c3ba4ddb52a2789c73d254d8&scene=58&subscene=0": "苹果WiFi定位系统漏洞可监控全球数亿设备", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519595&idx=2&sn=421be600ca95aa95412393d825b2c7be&chksm=ea94bc01dde335174233180b777c8fcff8f4763f4762c05ae682537b40255e42ef6898bc08d5&scene=58&subscene=0": "Replicate AI 平台存在严重漏洞,可被用于暴露专有数据", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544039&idx=3&sn=276bb55d3ddfe272b7d4d230359ef41a&chksm=c1e9a0b6f69e29a0e1636f58db6aac2306165300fa020dfc0d10d36539c0c5bc0739f97d2767&scene=58&subscene=0": "黑客利用 VMware ESXi 漏洞进行勒索软件攻击", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501189&idx=1&sn=d46d6ba5474f04d8e1646c94911f5205&chksm=fe79e11dc90e680bd41ae2262f4005343033302d6f50a7034e93b8affe8b42a9ac357aa4a1f2&scene=58&subscene=0": "安全热点周报:本周新增三个活跃利用漏洞,影响Chrome用户、Flink用户和医疗机构", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247575410&idx=2&sn=511f316a58c5a255ae3d9a2cdaad8cbe&chksm=e9147748de63fe5ee5e877865b4519f33c403a5d510a94c55e17cb04f4b98fb79ea1a82b9396&scene=58&subscene=0": "安全动态回顾 | 《互联网政务应用安全管理规定》印发 黑客正利用Chrome、EoL D-Link漏洞进行网络攻击", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544959&idx=3&sn=9002550b4c54e11c879e639f9b58c92e&chksm=fa9386becde40fa88762d1808654d4c2d0ff359cf5efe20f981f3b7dae8da4422f3d5d99f22e&scene=58&subscene=0": "苹果WiFi定位系统漏洞可监控全球数亿设备", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494812&idx=1&sn=e7febd5c1c8143b1a097e833dec5848b&chksm=fd74dc55ca035543079b8cb0bda9ab2c182b937888a2299f11c40bea7499d56ca4866b1f2a54&scene=58&subscene=0": "CNVD漏洞周报2024年第21期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494812&idx=2&sn=2927c7da0fdc0ced9452cc0ca53c0341&chksm=fd74dc55ca035543734201243bcf06c042cb4d5684ed4ae534bc14ae8b48973f165944401c4a&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240520-20240526)", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247497638&idx=1&sn=f45986dd476d5f00ebd54eae36a8a7ff": "spring部分漏洞,nacos部分漏洞,禅道认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484409&idx=1&sn=a59e20cabb04a4fd6f3ec0792840e71c": "「漏洞复现」用友NC linkVoucher SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513021&idx=1&sn=871254fd8a37006c82a9298ccaaf7f63": "Shiro漏洞利用工具 -- ShiroEXP(5月27日更新)", "https://mp.weixin.qq.com/s?__biz=MzU5OTg4MTIxMw==&mid=2247503023&idx=1&sn=57682c7b42518e8e1a8ff31dd851e938": "零知识证明的先进形式化验证:两个ZK漏洞的深度剖析", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247485442&idx=1&sn=fa6ac2ca7c8dbec292d1f3e402d8357b": "CVE-2024-3552 WordPress-Web Directory Free SQL注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651281185&idx=1&sn=193f4029f5da007bfc47bb9ad7a3b32c": "近八成CSO认为,人为「错误」是最致命的「漏洞」", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489377&idx=1&sn=3e5c0919e5b6ea55ab6083620e9ac8c9": "【风险通告】ShowDoc存在远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484359&idx=1&sn=a775727bf3119f67352d6cb6ebecc0ac": "大华智慧园区综合管理平台 ∕ipms∕barpay∕pay RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247484409&idx=1&sn=acf147186ed109ef38fe6b9b8424285c": "某Android网址封装系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247491695&idx=1&sn=a74c27a5a4953895453a5b246bb1bfa8": "OA-EXPTOOL漏洞综合利用框架", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555625&idx=1&sn=ee276983d41d05786ff66e4f41c37ffa": "VCTF apple 复现(apple的通用模板)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555625&idx=2&sn=9c12b0439fbe3788e0439e9a6b4b0905": "研究员披露WinRAR中的ANSI转义序列注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNTYwOTU1Mw==&mid=2650089857&idx=1&sn=6c8d1589bb6c19b7c2f18969e52c60ff": "苹果WiFi定位系统漏洞可监控全球数亿设备", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519603&idx=1&sn=70cfaf8c8f867ef05e90b02ea49b69ae": "Rapid7:0day攻击和供应链攻陷剧增,MFA利用率仍较低", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519603&idx=2&sn=5b673992d99e5a955d95db1c6dd17669": "TP-Link 修复热门C5400X 游戏路由器中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488256&idx=1&sn=610b39f74b6e0a091a93ea1c35d8c05c": "【漏洞预警】Showdoc 未授权 SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488256&idx=2&sn=3c8ab86b9a5dea142f95cb5dba5b9468": "【漏洞预警】Ampache命令注入漏洞(CVE-2024-1540)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488256&idx=3&sn=c11b57dc5e4f961765de5360d10d1955": "【漏洞预警】Splunk Enterprise信息泄露漏洞(CVE-2024-29945)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488256&idx=4&sn=a71dc6718183abc291d09a985aa72e5c": "【漏洞预警】Elasticsearch授权错误漏洞(CVE-2024-23451)", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786585&idx=1&sn=a17cb026c528eda4a6d556fcdd7b3dee": "用户面临远程代码攻击!TP-Link 游戏路由发现高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247489933&idx=1&sn=deb1742f3c4b58f6e8fe86043684e3fa": "快速定位漏洞 BBScan 3.0 是一个高并发的、轻量级的Web漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502928&idx=1&sn=4f5bf073de4e2ee116ad25a91d1c947a&chksm=f2585823c52fd1355f668c064b2fe26d0dbd89d69384d05fb6991617477ba5df2590faf7852d&scene=58&subscene=0": "雷神众测漏洞周报2024.05.20-2024.05.26", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505947&idx=1&sn=79392958a37a3cd43eed3a3e3d43636d&chksm=cfcabb0ff8bd32196c2b57cdc4fa8ee5b5892f037b70c77dc12522884f4fe19319cc9f5da670&scene=58&subscene=0": "漏洞通告 | Showdoc 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544994&idx=2&sn=3787c2d790a78b7b31e08b51cbbf27a7&chksm=fa938663cde40f75a1cedbe5964885bc2842139b9902185869e417559272b73c81a6de827569&scene=58&subscene=0": "商用间谍软件pcTattletale惊现漏洞和后门!17TB敏感数据遭泄露!", "https://mp.weixin.qq.com/s?__biz=MzkyNjM0MjQ2Mw==&mid=2247483733&idx=1&sn=a56abbd2cd2429d256fda283d4cffb41&chksm=c2398d05f54e0413140b612d9b0607e2f1146129fbc30ff223fdcc5945f45ba259d60d9a9146&scene=58&subscene=0": "BBScan3.0,一个高并发的Web漏洞扫描工具,辅助API安全测试", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499156&idx=1&sn=60e3fa6c1738373597c2fd773d3e3fa1&chksm=973acef6a04d47e0140084a67c6678dfdd6cc42b55fd904120ff4aec16b87eb26833509d180f&scene=58&subscene=0": "CNVD漏洞周报2024年第21期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499156&idx=2&sn=eb7657cc54e113f48c136c3afdb96fdb&chksm=973acef6a04d47e0ec0136b7ed541fb5987ff285b8e87ce027e8cd8a3487b3f0d4da7a80c513&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240520-20240526)", "https://mp.weixin.qq.com/s?__biz=MzkwNTQxNDc1MQ==&mid=2247486763&idx=1&sn=e563f048ee58375fcd732c407073231e": "【新洞随记】CVE-2024-24919:CheckPoint Remote Access VPN任意文件读取", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484428&idx=1&sn=0f9a787e7dc85adf27033429b5a1b02b": "「漏洞复现」RuvarOA协同办公平台 file_memo.aspx 存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513048&idx=1&sn=b489df827b02c53c9ee19d54b5643d7b": "Hikvision综合漏洞利用工具(5月29日更行)", "https://mp.weixin.qq.com/s?__biz=MzIxNzY1MTc1OA==&mid=2247483791&idx=1&sn=e7758bac9faeca3b33e45dcdc66d172f": "OWASP TOP10之逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247490085&idx=1&sn=042e6fd0a0e79cbcc1b5702a75bcb018": "各大SRC漏洞挖掘中 Swagger是拿奖金最佳入口点", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247516922&idx=1&sn=ccbfdcd47296715bdf653aae8e51edae": "干货 | 安全威胁情报的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060815&idx=4&sn=9f6d685c3070d208a9b936f19d163163": "【安全圈】Fortinet 曝一严重漏洞 POC,可获得 SIEM 根访问权限", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651281833&idx=4&sn=d1d39f231f6196329bc3a3fc4b9c21af": "jsmug:一个针对JSON Smuggling技术的测试PoC环境", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485375&idx=1&sn=65e8515e23d1c84030d976d50f2e9615": "CVE-2024-24919|CheckPoint Gateway任意文件读取漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485375&idx=2&sn=a8c6e95b745161da8ef84565921938c4": "N∕A|Showdoc 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247538750&idx=1&sn=7bca8313fc121bdd9da05afece669506": "AI 平台 Replicate 曝“跨租户攻击”漏洞,用户模型可被黑客入侵", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501217&idx=1&sn=e2658556a8a02400a8b52b03e1b82ba1&chksm=fe79e139c90e682f59cbffa44e6a7d2973c6d6f5895e411492625ad66781a4706ab68e25d616&scene=58&subscene=0": "【已复现】Check Point 安全网关任意文件读取漏洞(CVE-2024-24919)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519622&idx=1&sn=8d3ab9117deabed2f2a5be11649e1236&chksm=ea94bcecdde335fa30a3ee14f088a9a4bb16b50355dbc3619f88dfc987a30ac8fc2c69606baa&scene=58&subscene=0": "Eclipse ThreadX 中存在多个漏洞,可导致代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458556628&idx=2&sn=a2555648aa475ab184a2c6a29a0bc9af&chksm=b18da85e86fa2148b7407d6e2ffc61247804eb905ffea3d7db1034d5234c9d02252e8ad23b66&scene=58&subscene=0": "影响所有版本,TP-Link路由器存在满分RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458556628&idx=3&sn=8132fc494c3b8785a67560ab1a434280&chksm=b18da85e86fa2148f8636363939b05ac0784594a7f39758c3f74a2138b561533edd434777846&scene=58&subscene=0": "全新课表6.18开班!系统0day安全-二进制漏洞攻防(第3期)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488289&idx=1&sn=6150e535ea9b66a46df741dc0e01acc1": "【漏洞预警】Tongtianxing CMSV6 SQL注入漏洞(CVE-2024-29667)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488289&idx=2&sn=843334c3fb70df2a1e68541b53921303": "【漏洞预警】Spring Boot Online Exam目录遍历漏洞(CVE-2024-29466)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489409&idx=1&sn=d0c8a348cd19430a0cbb00b1edf5e7fa": "2024攻防演练前需要关注的高危漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489409&idx=2&sn=0f10d4b871a55e3445eba75aea04d1f9": "【已复现】Check Point Security Gateways存在文件读取漏洞(CVE-2024-24919)", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247501747&idx=1&sn=5f96451d734222a0c3f4d0ae10342faa": "【成功复现】Check Point Security Gateways 任意文件读取漏洞(CVE-2024-24919)", "https://mp.weixin.qq.com/s?__biz=MjM5MTAzNjYyMA==&mid=2650587912&idx=1&sn=4d8f9a1ef033e474c07fc5251190cfb0": "AI安全警报!英伟达喊你修复漏洞了", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247491731&idx=1&sn=4422d6a65398ace67392bdc6415fd122": "【护网必备】Spring综合漏洞的利用工具", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519633&idx=1&sn=a16b68e9987a385bda6e79bbb1252d42&chksm=ea94bcfbdde335ede8ed9a118bde1fe4d0343d94336c6c0f64efeb97a9066f40885f8ebf54e1&scene=58&subscene=0": "NIST披露NVD的漏洞分析恢复计划", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493497&idx=1&sn=22a0cad8aa0351e5e38cad6d0a59bf7f&chksm=fa78e635cd0f6f2354a00697f98defd9cb41289e62592de206812f516b01847c268a9295f1fa&scene=58&subscene=0": "【众测挑战赛2402】喜迎六一!AI 大模型全新上线,单个漏洞奖励最高可达8w!", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247506172&idx=1&sn=9e74be4f65423c20ed6703cd3b97ff53&chksm=fa520d42cd258454d897d9a6bd6a8f006009508ec34123fdf2a96d30d8a7e8c3fddba48f54c9&scene=58&subscene=0": "HEAP HEAP HOORAY - 揭示 GLIBC 堆溢出漏洞 (CVE-2023–6246)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494854&idx=1&sn=71671354c002d3431999b72e4501603a": "渗透实战:记一次JP web服务RCE到内网", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247512477&idx=1&sn=a232dcd557f2ee5d5c86c1b57d0cf7cc": "SRC实战中遇到的一些莫名其妙的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484453&idx=1&sn=59b2fa6962eaecd56bb429a9d856d39d": "「漏洞复现」SpringBlade tenant∕list SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247517016&idx=1&sn=0a2a8f8fad4192e7576c8a35be05616d": "Shiro漏洞利用工具 | ShiroEXP(5月27日更新)", "https://mp.weixin.qq.com/s?__biz=MzA3MzU1MDQwOA==&mid=2247484988&idx=1&sn=0aeb2158b68b18db537c9694446cf052": "XML 相关漏洞风险研究", "https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247490188&idx=1&sn=679dd6cd3c5709c5be34d4732822265e": "报告:56%企业攻击归咎于VPN漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247508746&idx=1&sn=ae3400529c5039dfa699ccadf7a2b51e": "mXSS:隐藏在代码中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247508746&idx=3&sn=ab512c689c27e286ced3bea0f130fcc6": "Reaper 是一种概念验证,旨在利用 BYOVD(自带易受攻击的驱动程序)驱动程序漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5Mjg0NzA5Mw==&mid=2247492417&idx=2&sn=e1f19b6b70ace30438ef78f77d3867a1": "高危漏洞预警|英飞达医学影像存档与通信系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247485358&idx=1&sn=03ada3fac6bcc39ff4fae6f8e23dd449": "水一篇众测的漏洞报告---两分钟看完", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247486317&idx=1&sn=f7dc3ec9d5ecd748f5b005fc55c805a4": "价值3900$的越权帮别人添加商品的支付漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247491753&idx=1&sn=72bae47532bad5be24c78858586a75a5": "【护网必备】海康威视RCE批量检测利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247487514&idx=1&sn=9cb7871a9979c9ecf2b0a7f118806f43": "2024攻防演练需关注的高危漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzkwNTQxNDc1MQ==&mid=2247486772&idx=1&sn=be5758ab1554e773e2042f2c6fb64f4d": "【悬赏问答】复现疑问求解答:Microsoft Sharepoint XXE(CVE-2024-30043)", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247491432&idx=1&sn=449beb0b46c405eb67bdd2ccd462e544": "【很深情的奇技淫巧】不一样的越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247485960&idx=1&sn=0a44bc0f970ea22246e98a439a200141": "大华DSS 安防新平台struts2远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247485575&idx=1&sn=0e3eb9ecb4477a67da022ff78b130ba9": "通过IDEA远程调试vulhub当中的Nexus镜像分析CVE-2024-4956", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494861&idx=1&sn=79e37026c4eca3723b99344d177d0b54": "XML 相关漏洞风险研究", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247492631&idx=1&sn=b1757942745d4fc3f2bdf3bdb950878a": "从API接口信息泄露到挖掘出一个RCE", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501231&idx=1&sn=149d1942b6b9dc0a4a08fa5c0017d674": "攻防演练收敛已知漏洞攻击面,请更新这些软件到最新版本!", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523052&idx=1&sn=f2e81718a583a73c07f445345bfd757b": "【漏洞通告】Linux Kernel本地权限提升漏洞CVE-2024-1086", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523052&idx=2&sn=061da9e1d572420582e8cfb67d81b551": "【漏洞通告】Check Point Security Gateways任意文件读取漏洞CVE-2024-24919", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247611804&idx=1&sn=7cd8e7192f518a61fed5b7b0c5e1b5ea": "100个攻防演练常见高危漏洞,你查了吗?", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484464&idx=1&sn=255d46c31fa507cf4fe0e9bcc7352cfd": "「漏洞复现」万户ezEIP企业管理系统 ∕member∕success.aspx 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488294&idx=1&sn=a758fc94434dd846ec5510e1dc94c52b": "【漏洞预警】Apache OFBiz 路径遍历漏洞 可导致远程代码执行CVE-2024-36104", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652061096&idx=3&sn=157b0ddf2ea750aeeaff6fe88cc84f0d": "【安全圈】59% 公共部门的应用程序长期存在安全漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651283007&idx=2&sn=3ddbb47335db3f62f91c20da655dfc65": "Springblade框架(又名Bladex)渗透测试漏洞利用总结", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291170&idx=1&sn=c1e86a3c676d32866c04bb9af1dd3fa2": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247494799&idx=1&sn=078bc73aad5fae5b55fc489a5d9282fd": "2024攻防演练必修高危漏洞集合", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545134&idx=3&sn=230d40faf3f7a8f0e80adfe81f3d4462&chksm=fa9387efcde40ef96c95ca557860062ae7bcda13d668729515d69a8d9c1da0f998ab8cdcbef5&scene=58&subscene=0": "WinRAR漏洞造利用,俄罗斯黑客向乌克兰发送恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247575594&idx=2&sn=dbfa135a7451b9c89715344b31790a96&chksm=e9147810de63f10695596c666eb732bc62ec05f63fe2dd01dd350c26ef8c693823d3406a5427&scene=58&subscene=0": "安全动态回顾 | 佳士得遭RansomHub勒索软件团伙入侵 TP-Link修复C5400X游戏路由器中关键RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494828&idx=1&sn=0db4832ef6794957da5094b10839f104&chksm=fd74dc65ca0355734ae553e4098094e7ed70126389bb9190a83ba454bf895407bf99cb68b71c&scene=58&subscene=0": "CNVD漏洞周报2024年第22期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494828&idx=2&sn=7b872ea6143c5b22e4f4ac32e9c19ef0&chksm=fd74dc65ca0355736cfc71600bc0d7d4a711795bf19aa0aeea0db610884eb1eb3393d437b7cd&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240520-20240526)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488303&idx=1&sn=430a42b3a8a1128be7da4340bb73c36f": "【漏洞预警】ShowDoc < 3.2.6 存在 SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488303&idx=2&sn=aca0a155a0a6c4983a5c8ad99aa1ad56": "【漏洞预警】泛微E-Office detail.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247497657&idx=1&sn=f686183c5f11e7cd0ca62c694d6d2be4": "校园网管理系统未授权访问一键断网漏洞(付脚本,6月3日更新)", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247485970&idx=1&sn=29600e5aa88b7fa1260423afaa1232a9": "海康威视综合安防管理平台 AutoLoginTicket 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492565&idx=1&sn=d4b36fdc9d9629d1e0c946d330ade92f": "漏洞复现 || Check Point Security Gateways 任意文件读取", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651283155&idx=4&sn=58d16ba5f0c27f84616fe06e7bba2bae": "SploitScan:一款多功能实用型安全漏洞管理平台", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652061166&idx=3&sn=dde0b68b30b18b6ff606f91c40450140": "【安全圈】Cox 存在API 身份验证绕过漏洞,影响数百万台调制解调器", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc4ODc1NQ==&mid=2247489306&idx=1&sn=ee94eb4a897de21028916f8e6046a249": "奖金大放送!华为云漏洞奖励翻倍活动,只等最“粽”要的您~", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499174&idx=2&sn=9e8e0c276823530508e7a23f69a183cb": "上周关注度较高的产品安全漏洞(20240520-20240526)", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650181396&idx=1&sn=b75000a8f75a2581a91bd05998941305": "光伏行业首次证实被攻击!基础设施遭漏洞利用劫持", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519654&idx=1&sn=22b4f342e957ddb68acf5d7dabc14f7b&chksm=ea94bcccdde335da0a488c11021c8d947834829e062cbd4a5917bc946b3037f54a151014c361&scene=58&subscene=0": "速修复!Progress Telerik 中存在严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519654&idx=2&sn=85017568a959a5ea6d3069e2a3d7da89&chksm=ea94bcccdde335da53a480dfc3fe032de755f8e5c485f6529964c2b1c65cfb7e11811be88e46&scene=58&subscene=0": "Cox修复 API 认证绕过漏洞,数百万调制解调器受影响", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523067&idx=1&sn=6a32a7d2b7aae80ebef369787146be48&chksm=ce4611ebf93198fdfdda3eff3c6bb8bdff91183b28f4a201911796c4a535abd09a4f55360566&scene=58&subscene=0": "【漏洞通告】Apache OFBiz路径遍历漏洞CVE-2024-36104", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489188&idx=1&sn=773b6d30489d0cb1da63efc0ecd4e4d4&chksm=fb029bfccc7512eaaaf33b13e2e8a16592a1597274e1cbf48d000ac46e1fff3f7d6af743e24a&scene=58&subscene=0": "【已复现】ShowDoc item_id SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513092&idx=1&sn=a11ab37a3ca8f02a7ed9219d272c8ce5": "帆软bi反序列化漏洞利用工具 -- FrchannelPlus(6月4日更新)", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484391&idx=1&sn=fc3d86edac93001113c282cb93b76b53": "用友NC pagesServlet SQL注入致RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247550132&idx=1&sn=3ba2f43b30f343395d166f2c0a71ca3a": "红队快速打点漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247485516&idx=1&sn=8c8ee1a2b3cbedee8d01b156d55a0dc7": "CVE-2024-36104 Apache OFBiz路径遍历RCE漏洞复现(附POC)", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247492637&idx=1&sn=4343b9ef13d9292cc1b97b1c2bf66fb1": "命令执行绕过技巧", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651283365&idx=1&sn=e73def5bb71540a61259f129c308b5f9": "TikTok零日漏洞被利用,可一键劫持高级账户", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488314&idx=1&sn=9ccd70cc28ee1f9a35fd87b2dd514e4d": "【漏洞预警】Apache Wicket XSLT 代码执行漏洞(CVE-2024-36522)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488314&idx=2&sn=41e4af5a4caf150ecdc04c38892dd881": "【漏洞预警】Zyxel NAS 未授权文件上传限制不当可致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488314&idx=3&sn=a1dbefdc9453c2b3c31b7fc64d9319c2": "【漏洞预警】Progress Telerik Report Server身份验证绕过漏洞(CVE-2024-4358)", "https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651725955&idx=2&sn=2d178b2903a8bbddac5d9a47c02b4434": "Spring Cloud Data Flow任意文件上传漏洞来袭,启明星辰提供解决方案", "https://mp.weixin.qq.com/s?__biz=MzkxNjQyMjcwMw==&mid=2247486275&idx=1&sn=24c050031ee9297eee171d4151497676": "记一次某HR管理系统漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458557784&idx=1&sn=fb7dfad2083284553b5456d07e6a7cce&chksm=b18dadd286fa24c41eea7f619fb8b395e4fa076186d2300483c3ed3dac1786f2df59d8b05831&scene=58&subscene=0": "IOT漏洞复现——PSV-2020-0437", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458557784&idx=3&sn=1deff2f562543b11788b70e6737ae8d4&chksm=b18dadd286fa24c4722596a53777030d62be7ca3cafbb633c1cb00296b3207faa89556bac3aa&scene=58&subscene=0": "0day windows 直播回放更新:SimpleNtfuzzer分析", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506008&idx=1&sn=8809880121383761d9afdbfa4580fd00&chksm=cfcabb4cf8bd325afbd4a3b5d7ce42d3e58a2c8acc7a9dcf11e70cad84ffc0ce0e58cc10f981&scene=58&subscene=0": "漏洞通告 | 派网Panalog远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519665&idx=1&sn=16f68838d4899ea09b8df2f5f96357ab&chksm=ea94bcdbdde335cdc94e76fa3278e8af36adadc6af065778ed4f389d32ac7d826a4ad944c89f&scene=58&subscene=0": "合勤紧急修复NAS设备中的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519665&idx=2&sn=86259d3f96b173403f1a65b601fc1989&chksm=ea94bcdbdde335cd0f308951f098245eea81c0364b1a3726dc92bad88f1ce58de6b53eef24ec&scene=58&subscene=0": "Atlassian Confluence 高危漏洞可导致代码执行", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544240&idx=1&sn=f1c2668abccac70ff9fbbfdb9b0b8d04&chksm=c1e9a1e1f69e28f7e72e5999e2c5288a611e466e596e6aacab3b253f21c0acf304ff2bca6f5d&scene=58&subscene=0": "AMD前瞻执行之内存访问预测器逆向分析与漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247494879&idx=1&sn=82e8e69ddb7f507d6c5bf3db46303ff7&chksm=96d8e705a1af6e1300ca9fb53b883539af084997597087ca620596840fca988c41e07aefa870&scene=58&subscene=0": "2024攻防演练必修高危漏洞集合(2.0版)", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545195&idx=1&sn=10c35a640481aaf7e46a14c7d4894ea2&chksm=fa9387aacde40ebc7d0c0bd73629ef159e72977e6b5b46f67742bd85feee173707104a23f0ba&scene=58&subscene=0": "AMD前瞻执行之内存访问预测器逆向分析与漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzA4ODc0MTIwMw==&mid=2652540845&idx=1&sn=cdfb2f01d7d244fa9a83cae509136b00&chksm=8bcbab91bcbc22876618729238dbd2a2d9465d67435ef55e2f85f1afffb90e563bb125d1cbd1&scene=58&subscene=0": "漏洞价值提升!BSRC奖励细节V7.0来了!", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493507&idx=2&sn=42b386bdb1266313d68a2c6d51191eee&chksm=fa78e6cfcd0f6fd99220083f7edcc88c7781ce1a8554bcb4035bc6409c089b5b5fb56e90c9b6&scene=58&subscene=0": "【众测挑战赛火热进行中】AI 大模型全新上线,单个漏洞奖励最高可达8w!", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247512479&idx=1&sn=266c3d048fc07f419f0d699770693618": "SRC逻辑漏洞合集", "https://mp.weixin.qq.com/s?__biz=Mzg4NDk4MTk5OA==&mid=2247485296&idx=1&sn=f6f2a4b34a1fcc2ba993a09ff0e3d844": "【新洞洞!】海康威视综合安防管理平台 AutoLoginTicket 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488326&idx=1&sn=66d8ab8eecb5951e250928bd4647816b": "【漏洞预警】springboot-manager任意文件上传漏洞(CVE-2024-24059)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488326&idx=2&sn=80a62232db18b1cb133dcfcef2a349d4": "【漏洞预警】ClickHouse信息暴露漏洞(CVE-2024-23689)", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247623968&idx=4&sn=92a803497aa1c597f949c28a4f1d6343": "TikTok零日漏洞被利用,可一键劫持高级账户", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247484448&idx=1&sn=937898e9c83ea344993813813b7fb6e2": "29网课交单平台存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485722&idx=1&sn=7344f6c53dac9f1816b7fa5e5b7f3621": "Hikvision综合漏洞利用工具 - Hikvision-", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651283704&idx=1&sn=cd01fd82ca3b48baca9b9f89fb8c26c9": "挖洞别只卷国内漏洞了,一起赚美金好吗 | FreeBuf培训", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519685&idx=3&sn=5ff2515ea003efe342365bfb3e9d8af7&chksm=ea94bcafdde335b9fed2634f43fe71bf14953a3fbc06a298ce9ac436a576ce39e6b2dfa25269&scene=58&subscene=0": "德国政府会议信息遭泄露,思科修复 Webex 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519685&idx=5&sn=cd7840386d236e97bc419b0a943f9d25&chksm=ea94bcafdde335b99fff79a2689e78cb78922997a12f87792bff03a1861af54f7ec49cf32f44&scene=58&subscene=0": "【已复现】Apache OFBiz 路径遍历漏洞(CVE-2024-36104)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501249&idx=1&sn=b8105f3bf1ef2554314d204e9f57ed2c&chksm=fe79e159c90e684ff68547160b11ec15b0cb71bc2b36b108454acf6d1eafe6c72227a10cf280&scene=58&subscene=0": "【已复现】Apache OFBiz 路径遍历漏洞(CVE-2024-36104)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247493180&idx=1&sn=467e7354822a9ce134753d4134223e79&chksm=fa9d1d6acdea947ca55b37bd1d48e78895b8b4c51ff17d483c09a9555d3e5246241725b16211&scene=58&subscene=0": "单个漏洞10万元!飞书、火山引擎双倍积分专测进行中!", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523077&idx=1&sn=b299d7c76b6af9ab4bb527ffdeaf8e21&chksm=ce461015f931990328b2db8575ddfeb30675495c05079524f3b88437b18d2a2cc0734e6ccd7f&scene=58&subscene=0": "【漏洞通告】Zyxel NAS未授权远程代码执行漏洞CVE-2024-29974", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544264&idx=3&sn=a8c5efc32d5b1701c449da6b4d39e074&chksm=c1e9a199f69e288f57a5ec34dcd60a0e521aefb62bb89334e24135f292913c30cebb517d6369&scene=58&subscene=0": "TikTok零日漏洞被利用,可一键劫持高级账户", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650616778&idx=2&sn=d033e29609c4b1520c1f4ecc77ca60a1": "5月威胁态势 | 2024攻防演练在即 高危漏洞增速明显 银狐团伙仍高度活跃", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485723&idx=1&sn=7d3e33f939881ce9b221bd6d84b29e8b": "禅道最新身份认证绕过漏洞利用工具 - ZentaoExploitGUI", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488613&idx=1&sn=398d222564f226ed9ea6603112180e76": "关于PHP CGI Windows平台远程代码执行漏洞(CVE-2024-4577)简要说明", "https://mp.weixin.qq.com/s?__biz=Mzk0NDU5NTc4OA==&mid=2247484011&idx=1&sn=d1094714a3ed119ead6ac68cbebd00df": "一次文件下载漏洞获取源代码审计", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489420&idx=1&sn=238d156a56288b84efa46abfadc6e9af": "【已复现】PHP-CGI存在远程代码执行漏洞(CVE-2024-4577)", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247486494&idx=1&sn=fd121823c6aa5a683e04fb2fe27dcc02": "【复现踩坑】浅谈Microsoft Sharepoint鸡肋XXE新洞:CVE-2024-30043", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651284541&idx=3&sn=40ccc08bcc926aa7822b1019d9cdadc6": "技术沙龙|关于征集第五期移动互联网APP产品安全漏洞技术沙龙议题的通知", "https://mp.weixin.qq.com/s?__biz=Mzg4MjY5MDE4NA==&mid=2247483873&idx=1&sn=f5c797113a08782430ed7017b7d94ab7": "php最新远程命令执行漏洞CVE-2024-4577", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247484487&idx=1&sn=231497d1cc8d864d29b572805fa5ab7c": "某客圈子社区小程序审计(0day)", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247538808&idx=1&sn=187e1483000517375db15fbcdbd80a17": "TikTok零日漏洞被黑客利用,CNN等知名账号被入侵", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485411&idx=1&sn=e3c47dc7c7dd3cded51cefa46511183b": "CVE-2024-4577|PHP CGI Windows平台远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485411&idx=2&sn=bb531e1d648c27ca9c8c6c59744043bc": "CVE-2024-22263|Spring Cloud Data Flow任意文件写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxOTQ1OTY4OQ==&mid=2247485054&idx=1&sn=525123fd4a3d5351560748eecd3a90af": "【高危0day】PHP+XAMPP超高危漏洞,影响国区数万主机", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484610&idx=1&sn=6600bf5f9e75da56e1c85e3e7865e86a": "【复现】PHP CGI Windows 平台远程代码执行漏洞(CVE-2024-4577)的风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501265&idx=1&sn=113d8f380673723f53d9c0b06f9f2fc4&chksm=fe79e149c90e685f02814a0c15dd3a94527f01b5c592f312e9be04e2eb6c288401a64574b358&scene=58&subscene=0": "PHP CGI Windows平台远程代码执行漏洞(CVE-2024-4577)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506035&idx=1&sn=06dc8b5a1f9a6cb91284cdb888cdc127&chksm=cfcabb67f8bd3271a35e1da5b75b502f719db6c9891f8e133d8019718e0e858252922d4017ea&scene=58&subscene=0": "漏洞通告 | PHP CGI Windows平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486335&idx=1&sn=5ea73962f1c1fc775b0c2b029a1d588d&chksm=ec6fec7fdb18656977d37afd170713e98320dd1f6105a82bffc313002f32214b68bc81ad9a44&scene=58&subscene=0": "PHP CGI Windows平台远程代码执行漏洞(CVE-2024-4577)", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247506566&idx=1&sn=c92546b115bf6eff1037a48e2773a409&chksm=fa520f38cd25862e4d698ffaa778aa907ac23f3400d542edd9d8fdcf17ce41134e5aefee5709&scene=58&subscene=0": "由浅入深理解Nodejs原型链污染漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247494893&idx=1&sn=6b65ab2572b8fd9f159cfaeb09b3955e&chksm=96d8e737a1af6e21c8924ee3a55a4e3b34ab83cc94f3fb9499391cd3161b1ecb06f19ab1e33b&scene=58&subscene=0": "2024攻防演练必修高危漏洞集合(3.0版)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523089&idx=1&sn=f1ff9f27782698349113c91b765c8a3d&chksm=ce461001f9319917f45232a8455c78e5300cb412c5125192233ea584c80669e8b485315518b2&scene=58&subscene=0": "【漏洞通告】PHP CGI Windows平台远程代码执行漏洞CVE-2024-4577", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494891&idx=1&sn=01ca33bed8cf52f3da612d5c572e8b73&chksm=e8a5e688dfd26f9e4f91f03eec51390a8c3edf79c3222919602d9291fe189048ab2d5183f475&scene=58&subscene=0": "通过劫持存储桶来实现RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0NDE3MTkzNQ==&mid=2247485400&idx=1&sn=e9a9e2b567cb20e96aad0e64fccd160a": "爆出 CSS 注入漏洞之后,GitHub 被玩成 QQ 空间了", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488339&idx=1&sn=0549925000b94d17d6d20bf3896186cb": "【漏洞复现】PHP CGI Windows平台远程代码执行漏洞(CVE-2024-4577)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652061357&idx=2&sn=f47b137a7644573cda57047d5adbcb58": "【安全圈】TikTok零日漏洞被利用,可一键劫持高级账户", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc0Mjc3NQ==&mid=2247486094&idx=1&sn=68c9f8b460e9116b0c75f20672b3afe4": "周末补漏洞:PHP CGI Windows平台远程代码执行漏洞 CVE-2024-4577", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458558525&idx=1&sn=2ea8bd4a5bbd5ac1da70d5d508b76129": "CVE-2018-17066复现(D-Link命令注入漏洞)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247509068&idx=1&sn=6a6160eec54afd457d1565a84b2d8e71": "CVE-2024-4577 - PHP CGI 参数注入漏洞批量(复现)Nuclei 模板", "https://mp.weixin.qq.com/s?__biz=Mzg3NDc3NDQ3NA==&mid=2247484462&idx=1&sn=6623a45dd82f0d23a470e02604fb2604": "PHP CGI Windows平台远程代码执行漏洞(CVE-2024-4577)附poc和批量扫描脚本", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650978895&idx=1&sn=9a46e408102150a096c3bb4e47368636": "【知道创宇404实验室】警惕PHP CVE-2024-4577 对XAMPP Windows 版本影响", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247484300&idx=1&sn=7498ece5b4c3c2c5a33e80d4a177033e": "PHP 最新RCE POC (nuclei文件) (内含抽奖)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247484508&idx=1&sn=a2d30230ce8857d639fd54e91757fd4d": "CVE-2024-4577 PHP CGI平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484404&idx=1&sn=8fd68672cb988c3d790735bbc8deb5ef": "PHP CGI Windows平台远程代码执行漏洞(CVE-2024-4577)", "https://mp.weixin.qq.com/s?__biz=MzU2NjgzMDM3Mg==&mid=2247491596&idx=1&sn=6d73e290074687371c17e2838cafb741": "实战-最新PHP-RCE+详细分析(CVE-2024-4577)", "https://mp.weixin.qq.com/s?__biz=Mzg4NTUwMzM1Ng==&mid=2247510687&idx=1&sn=014841930cb50c6fc3f3a08aa909d948": "CVE-2024-4577 PHP RCE 再次来袭!", "https://mp.weixin.qq.com/s?__biz=Mzg5MzE4MjAxMw==&mid=2247484209&idx=1&sn=7f3d74d1fdcf19428c00170d9b8a1fa4": "PHP-CGI-Argument-Injection 默认配置打法[CVE-2024-4577]", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490421&idx=1&sn=25278f4f397f871682288c59035b88ff": "代码审计-某产品高清智能录播系统漏洞分析附未公开POC", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484511&idx=1&sn=eef02168a01649a31887df719b4fae9e": "「漏洞复现」锐捷校园网自助服务系统 login_judge.jsf 任意文件读取漏洞(XVE-2024-2116)", "https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651726007&idx=1&sn=c78107eda1ffa3704b55b4b8f873ddac": "PHP-CGI Windows平台远程代码执行漏洞,启明星辰提供解决方案", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247490351&idx=1&sn=c5ceca1f755c9c21421eee69828ea250": "领导没事就会拿这些基础PUA你 挖掘SRC表示也得掌握java基础漏洞原理", "https://mp.weixin.qq.com/s?__biz=MzkxNjQyMjcwMw==&mid=2247486306&idx=1&sn=b08a1e9e9c7cc7ec8c6f2a7e5f3a05b5": "华天动力OA登录绕过漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzU3NDY1NTYyOQ==&mid=2247485945&idx=1&sn=b2ac1525b61300b215074426d8aabf41": "演示复杂之眼抓CVE-2024-4577漏洞利用活动", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652061378&idx=4&sn=05e10a3fb0e9ee84074b0fadcd55f4e2": "【安全圈】PHP 紧急更新修复漏洞:自 5.x 以来所有版本均受影响", "https://mp.weixin.qq.com/s?__biz=Mzg2NzY0MzM3Ng==&mid=2247484001&idx=1&sn=793f3aef8dea039e92acf9d161c63e79": "GPT4-o是否仍然存在奶奶漏洞?", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247509115&idx=1&sn=f76eb72f49268dde370680b87452c476": "利用 Windows 10 反馈中心 安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247484578&idx=1&sn=14d1fbc9a20af09a7b469a6966d4c2ee": "CNVD漏洞代码审计 | 危险代码与漏洞成因分析", "https://mp.weixin.qq.com/s?__biz=MzU5MTc1NTE0Ng==&mid=2247485381&idx=1&sn=38e0fbe548073a19b093911895e96d30": "【漏洞复现】PHP CGI参数注入RCE漏洞(CVE-2024-4577)", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490423&idx=1&sn=f4347badbcfb08ce8aff7a1d232decb2": "【审计0day】Dedecms最新版本RCE", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247486356&idx=1&sn=00ea2fec805b4c246008a55918fc1845": "新的 PHP 漏洞将 Windows 服务器暴露在远程代码执行中", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247484601&idx=1&sn=56ad03d14ad3195bd9fe902b62b00d8e": "金和OA JC6 FreeMarker模板注入漏洞简析", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247484559&idx=1&sn=9f0eaceed66575acd45752d16821eafa": "通过代码审计用友获取CNVD高危证书", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484529&idx=1&sn=c59235b9f796821bd823e49b80f70cff": "「漏洞复现」29网课交单平台 epay.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247517156&idx=2&sn=b9b47fb2fc42d188d4ece58c091e4a19": "实战 | 最新PHP-RCE+详细分析(CVE-2024-4577)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652061400&idx=2&sn=ea3fcc933611cdb5a7db0d2c4f8ed05f": "【安全圈】TikTok 零日漏洞被利用,可一键劫持高级账户", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484416&idx=1&sn=8df0c95f84321950de1aaf111ac34de2": "天智云智造管理平台-Usermanager.ashx-SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247485116&idx=1&sn=ded82356b740ca1234a6000f7691da41": "【漏洞复现 | 含批量POC】天智云智造管理平台 Usermanager.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247485581&idx=1&sn=310a69454f42d6d7798c696aeccf723b": "华天动力OA登录绕过漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247491845&idx=1&sn=d3f04184bb6746d4057205c77d64aba3": "使用Markdown RCE服务器", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247509176&idx=1&sn=8c402a3f38d2f3d916183ab4ff4447b9": "CVE-2024-23692:Rejetto HTTP 文件服务器中未经身份验证的 RCE 漏洞,PoC 已发布", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247509176&idx=4&sn=f5136d97348a8f3807034696e13a0de2": "CVE-2024-5171:libaom_中的整数溢出 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488351&idx=1&sn=075e7deb481f1ef09502a0cf184a2863": "【漏洞预警】海洋CMS任意代码执行漏洞(CVE-2024-30565)", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489340&idx=1&sn=0d0d5730a96772815aa3b8c4706a858c": "新的PHP漏洞出现!Windows服务器暴露", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247490706&idx=1&sn=a47d285f8bbd248fe3b834c45d333e89": "一个高价值漏洞预警监控工具,果断收藏!", "https://mp.weixin.qq.com/s?__biz=Mzg4MzA4NTM0OA==&mid=2247490527&idx=1&sn=6c0ab4db459d6da45ce8dcbdb573ef00": "据称 RCE 漏洞威胁意大利国防部子域名", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651284700&idx=3&sn=15a2ddc9f65250cd490a97b6bd3e3067": "Forescout报告显示:物联网漏洞激增,成为黑客攻击的关键切入点", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484422&idx=1&sn=b469734bab2d5bd55a63b4341311f824": "多客圈子论坛系统httpGet任意文件读取漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247487810&idx=1&sn=2850a328b103b13a587e2650e43a3cb1": "【紧急警示】Locked勒索病毒利用最新PHP远程代码执行漏洞大规模批量勒索!文末附详细加固方案", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484538&idx=1&sn=bcd1851b6501037401a40c4ec81e92b7": "「漏洞复现」PHP-CGI Windows平台远程代码执行漏洞(CVE-2024-4577)", "https://mp.weixin.qq.com/s?__biz=MzI0NDYxMzk1Mg==&mid=2247501673&idx=1&sn=e87631031ffd9fc060490f6042d30950": "[含POC]紧急测试!PHP CGI Windows平台远程代码执行漏洞爆发!", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501282&idx=1&sn=04048b008f0579b2dc98f180b8b7c19d": "【已发现在野攻击】PHP CGI Windows平台远程代码执行漏洞(CVE-2024-4577)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501282&idx=2&sn=fc6e352e1eaa20ace9b188a348b294b0": "安全热点周报:TellYouThePass勒索软件利用PHP漏洞全球扩散,多个在野漏洞遭遇实际攻击", "https://mp.weixin.qq.com/s?__biz=MzA5MjA0OTAwOQ==&mid=2247485436&idx=1&sn=d89baa68707ff58d35f8b94f11dce889": "活动|log4j组件命令执行漏洞专项测试开启~~~", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247492544&idx=2&sn=b04c51face94ddff57a133efca0eef93": "Cox 存在API 身份验证绕过漏洞,影响数百万台调制解调器", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519716&idx=2&sn=df8e16d464e733a183fadfc8e360cc10&chksm=ea94bc8edde335986daf0ff0d4e2bdf8751fd9df7c47d7cf2d9e614452e475a020ef01df0b6c&scene=58&subscene=0": "PyTorch 严重漏洞可导致AI敏感数据被盗", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247491306&idx=1&sn=3a71b2d0df8aa7c7e5fffa5af67c36a5&chksm=ea4bb4addd3c3dbb006919e981d0007c3cc7de83004d33f88d91be839aef84132d764ff34da6&scene=58&subscene=0": "如何判断API接口类型及漏洞分类管理方法?| 总第249周", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489198&idx=2&sn=a00689e9633a24c6dec3d604920bc0af&chksm=fb029bf6cc7512e071eee32f1bd2f86435f505cdc20dcf25c591e998af544aea10b16efea335&scene=58&subscene=0": "CVE-2024-4956 Nexus Repository 3 任意文件读取调试分析", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494864&idx=1&sn=9db8628275286f63cefe68bd42b2ed1b&chksm=fd74dc19ca03550fab7cd0c0bf146d88cbf1a81c5cc8b845d0db27f9fc05b9cab3864757d6a4&scene=58&subscene=0": "CNVD漏洞周报2024年第23期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494864&idx=2&sn=af372a4ce33566b6d28ae6a2853a6853&chksm=fd74dc19ca03550f0ff06a249625c7fae7f0e186874e379e014f35331b39997b5905a7a62265&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240603-20240609)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488358&idx=1&sn=bbeb21e8a4ba4f1b98c3960f1b9e98cc": "【漏洞预警】Microsoft Message Queuing UAF漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484429&idx=1&sn=5c97d95f791343fd89e38cc9c283bab4": "电信网关 del_file.php 命令执行漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494948&idx=1&sn=7105607c658f8821456492745233d9a2": "实战:逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247485287&idx=1&sn=5ac6bbeccad3ca8d62ae755f7d55bd29": "[翻译]安全警报:CVE-2024-4577 - PHP CGI 参数注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247485287&idx=2&sn=8f1916e6bc1ac59c8d6d7009a5a39ae2": "[翻译]No Way, PHP Strikes Again! (CVE-2024-4577)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458558816&idx=3&sn=7a86403d7d6d98be2e3dc608d5b2ab73": "PHP曝出严重RCE漏洞,影响数百万服务器", "https://mp.weixin.qq.com/s?__biz=MzA5OTk2OTY5MA==&mid=2247485629&idx=1&sn=50f12de8927006e4aa4de64b34b6fa45": "Microsoft 6 月 CVE 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247493249&idx=1&sn=c2db28da34b33996a91c3624782ec82e": "攻防演练场景下的漏洞挖掘与治理 | 安全范儿沙龙开启", "https://mp.weixin.qq.com/s?__biz=MzIyNDg2MDQ4Ng==&mid=2247484947&idx=1&sn=b5229e7b48172f07e651e913d33a5e8c": "CTF-Web_RCE的出题思路", "https://mp.weixin.qq.com/s?__biz=Mzk0MDY2NTY5Mw==&mid=2247484559&idx=1&sn=33cec2f981d2eedf40f9e44aac246a96": "用友NC6.5版本oacoSchedulerEvents接口存在sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519726&idx=1&sn=0763c56c20d23383e9286aff08fcb684": "Arm:Mali GPU 驱动中的0day已遭利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519726&idx=2&sn=d94ad8ee115123318833dea4701e52e3": "微软六月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MTI2NDQzNg==&mid=2654551547&idx=1&sn=30b1e99360b03d3381312bb9ed18f62b": "2024-06 微软补丁日 | 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247495653&idx=1&sn=cfdaf4565efc1652db16eb0c5b0fb864": "2024年6月微软补丁日多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247495653&idx=2&sn=bb57ef1536c4008ed538622298046fa2": "【漏洞通告】Arm Mali GPU Kernel Driver释放后使用漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247495653&idx=3&sn=1cc6ba8a971dd3bb25cc63b9befe6d63": "【漏洞通告】Veeam Backup Enterprise Manager身份验证绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502948&idx=1&sn=14418cbec5109a7481093e79db7673f2": "雷神众测漏洞周报2024.06.03-2024.06.10", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486911&idx=1&sn=d7e8d8bea8e2eb3a2dd0860a2d16faae": "CVE-2024-4577 漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkyMzQ5NjYwMw==&mid=2247484606&idx=1&sn=ec2c65fa2b4719faa7737dbc9dc9ee93": "通过weblogic历史漏洞cve-2015-4852学习java反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247485281&idx=1&sn=c4194fdcbed65d258b851aa1fce1c271": "物联网漏洞激增,成为攻击者的关键切入点", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544360&idx=1&sn=43e24e352d568f740891054b2bacb487": "Forescout报告显示:物联网漏洞激增,成为黑客攻击的关键切入点", "https://mp.weixin.qq.com/s?__biz=Mzg4NDk4MTk5OA==&mid=2247485315&idx=1&sn=bfc6d4a13447f1f463d863f81440c020": "【新洞!】畅捷通TPlus keyEdit.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501287&idx=1&sn=022a78e23e4ee17c8d48c6f7be7511d6&chksm=fe79e17fc90e6869e4c92a585a1dbfbc44d9a2dcc53ef03d576ac6b49348f33efce88cb24552&scene=58&subscene=0": "微软6月补丁日多个产品安全漏洞风险通告:1个紧急漏洞、10个重要漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506047&idx=1&sn=5dd15bfead5ec12c095022c0b8ed9df3&chksm=cfcabb6bf8bd327d0691eb8c03d1fa2b25a7f32dd9f23e589a69c9b7ab069de135a8889662ac&scene=58&subscene=0": "【更新】PHP CGI Windows平台远程代码执行漏洞发现在野利用", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247510724&idx=1&sn=452ee38da734f36eaa7d67ebbe1f52b0&chksm=ea665db3dd11d4a5cee6e19d14ef3bab1c5da7b604742980f1fb8f75624966acc9e59e1842e9&scene=58&subscene=0": "PHP CGI Windows平台远程代码执行漏洞(CVE-2024-4577)已发现在野攻击!", "https://mp.weixin.qq.com/s?__biz=MzkxNDU2ODc0Nw==&mid=2247484068&idx=1&sn=520104bb581194866957ec194c033790": "SLMS智能照明控制系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247624235&idx=3&sn=e359aea615ab8b7f93f282731e2e35ba": "美国削减国家漏洞库预算,或造成全球网络防御基础数据缺失", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484435&idx=1&sn=aa95c3ea1d670a64521f4dee9da8a607": "【新】用友NC-oacoSchedulerEvents-SQL注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488365&idx=1&sn=2f8676f49acf784fb92ca2a50904b336": "【漏洞预警】Whoogle Search文件写入漏洞(CVE-2024-22204)", "https://mp.weixin.qq.com/s?__biz=MzIyMDAwMjkzNg==&mid=2247513279&idx=1&sn=8c0cd8aa921dd2d3b9a3640a0d301125": "一个漏洞库", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486551&idx=1&sn=1c2c8960ddcdd696338beedc9da53ad0": "Rejetto HTTP File Server 存在远程命令执行漏洞CVE-2024-23692 附POC", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490458&idx=1&sn=efd58b683fd26478419ae55b826f4a3b": "漏洞复现 | Rejetto HTTP 文件服务器未经身份验证的 RCE【附poc】", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652061545&idx=3&sn=5ef59f2343edec1154373cd283a1ccf8": "【安全圈】白帽报告苹果 Vision Pro 特有漏洞,或可导致空间计算黑客攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3NDc3NDQ3NA==&mid=2247484471&idx=1&sn=c59126faa29529fa727f002cedb19069": "HTTP File Server RCE一键利用工具,大量资产未修复!", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247518930&idx=1&sn=6be6e3a2194a95b5199f1414a2f8107d": "2024-06微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489353&idx=1&sn=781f0ca9c994925f31a829c45b12ce4b": "不止一家全球知名半导体公司出现新漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664215962&idx=3&sn=89b385a7b6135a0f56873e2bcc07068e": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664215962&idx=4&sn=666a0faedd648f610e44feeb856cc525": "CNNVD | 关于PHP操作系统命令注入漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458558911&idx=2&sn=020187014e4c0ceb0710b20fb338e22a&chksm=b18d913586fa1823f7af2f61ca2882d6aea4b3c085be9b01a48c2725aa10b4b68288a5663ea5&scene=58&subscene=0": "ARM Mali GPU驱动程序中的零日漏洞正被利用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458558911&idx=3&sn=6dcbd9ebd0e7a4b265aa00818a070728&chksm=b18d913586fa18231d2586cefa305256cb6033666efdde4fa309145511b6c2f3b39b93402ae2&scene=58&subscene=0": "二进制系列之Pwn篇-逐步掌握二进制漏洞挖掘的技巧和操作系统底层知识", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519734&idx=1&sn=fcc36eded6f81b0c6a5496090527e207&chksm=ea94bc9cdde3358abfe399d7142f16536018699b0dedc6a6d9566915c0a7341a60b1d647e397&scene=58&subscene=0": "谷歌:Pixel 固件0day漏洞已遭活跃利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519734&idx=2&sn=e2956d27d020b75520e84dc6e02b483a&chksm=ea94bc9cdde3358a09b0520a5e8b66690030282303eda23770be759f6755bff0fd841526d768&scene=58&subscene=0": "Fortinet 修复 FortiOS 中的代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511934&idx=2&sn=f76185da488d539a915e14f3e935238a&chksm=ebfae85edc8d6148e9db41e8f81ebb7deabd78afe775fae00a980342a8ad98815175fbdb6330&scene=58&subscene=0": "美国削减国家漏洞库预算,或造成全球网络防御基础数据缺失", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657165502&idx=1&sn=b1f7b81f2d70c1710c362dfce554f245&chksm=f1d4d25bc6a35b4dc264bba481dd84c9ad3f7ecc87ee54ad1551b0317d661c2ae846efae73dd&scene=58&subscene=0": "【成功复现】用友NC系统JNDI 远程代码执行漏洞(JNDI)", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544382&idx=1&sn=898c7d727044b27820014878692a7611&chksm=c1e9a26ff69e2b79500d4ff09344fafb75e603232df9e977edd5b19f4aceac798306043d874e&scene=58&subscene=0": "人民网转载报道本公众号原创文章“首个国内自主挖掘的RISC-V处理器设计中危漏洞研究”", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544382&idx=3&sn=7ad094ef6c5c7f55fe81906e66cd9f87&chksm=c1e9a26ff69e2b799079ea21c6c741609595f60234a239420ff4dabc923f8c4d3ec2d5b707a5&scene=58&subscene=0": "全球知名半导体公司Arm和Nvidia新漏洞揭露", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544382&idx=4&sn=2d5100f8229908daa67b6419998e4f34&chksm=c1e9a26ff69e2b792518663d45006e01a791219829583bb6d9f9619fc9dfd6381f172131b2a6&scene=58&subscene=0": "白帽报告苹果Vision Pro特有漏洞,或可导致空间计算黑客攻击", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650979026&idx=1&sn=7aa8dce637a665cd7f929f18a665dd69&chksm=8079f8e0b70e71f6fcaed5ab7cbe556fe427b66f9c40a19bea137686b9d56fc7387b15dd3685&scene=58&subscene=0": "原创 Paper | CVE-2024-2961 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545325&idx=1&sn=844beab2371107f9cc99af4e5f806b4a&chksm=fa93872ccde40e3af0ee0c418dc145df7417aff5d33523ba2ed8598e384e564dbbbd78c24b77&scene=58&subscene=0": "人民网转载报道本公众号原创文章“首个国内自主挖掘的RISC-V处理器设计中危漏洞研究”", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523172&idx=1&sn=4a52568dcd1a2cb9f52585470f26c721&chksm=ce461074f93199620078293b7c21f8235e9f6c27bc99cf104243531d6b28cfa464f3608bb19f&scene=58&subscene=0": "【二次通告】PHP CGI Windows平台远程代码执行漏洞(CVE-2024-4577)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499190&idx=2&sn=9f4c967e182c1106fd19d5df303fc87f&chksm=973aced4a04d47c29c17a7b12ad2f455fed57c041cc51ef91a017a6baa6054d9db6f237161b8&scene=58&subscene=0": "CNVD漏洞周报2024年第23期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499190&idx=3&sn=b720bc5674a7555f2fa97448ec7d14b7&chksm=973aced4a04d47c2a13bf2e6ab1f5f83c0f1b0ecd5315ddde312583ae875e2d46d70f30e7044&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240603-20240609)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494955&idx=1&sn=1f0c718da0e35d6cbf9e144fbda499d2&chksm=e8a5e748dfd26e5eba43c00aa8ebcedc0ee28326d136db4de396571b117dbeb36cabadd453ce&scene=58&subscene=0": "五千块-某金融赏金SRC漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzkyNTU3MjA3OQ==&mid=2247484963&idx=1&sn=7907f50ae9f81d0405709d6263af37c4": "【代码审计】RBAC权限管理系统-SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484446&idx=1&sn=72c5dec36e505a211a50e97281f4329f": "29网课交单平台 epay.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247624279&idx=4&sn=68719e8165d9ffd771f56421c1e13513": "无法修复立即删除!谷歌 EmailGPT 曝零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzYxMDQ2MQ==&mid=2247484713&idx=2&sn=2a4c56295ed0d3975bb0ccafd3a57f9f": "华天动力OA登录绕过漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652061675&idx=1&sn=23b2d19c63d917c220518dec1eac717c": "【安全圈】卡巴斯基在中国生物识别访问系统中发现 24 个漏洞,凸显身份验证系统风险", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247558407&idx=1&sn=b619eb391027ca4ea795daf92f83070a": "临兵漏洞扫描自动化渗透系统", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247491606&idx=1&sn=40a388ab639e5c8433fd78d09c24cc2d": "XXL-JOB executor 未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247610152&idx=1&sn=84118eeb186f092973307c56223743f8": "车联网-站在研发视角挖漏洞 - 小米", "https://mp.weixin.qq.com/s?__biz=MzkyNDYwNTcyNA==&mid=2247485451&idx=1&sn=2c6eef0b61d7e001b9a072e974dbd663": "【漏洞复现】PHP-CGI Windows平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTcyNjU4Nw==&mid=2247485250&idx=1&sn=42fadf4a40bab94ab8937b6ee9897a10": "漏洞分析|PHP-CGI Windows平台远程代码执行漏洞(CVE-2024-4577)", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484590&idx=1&sn=c852bde1e425d508ee6aa5ca95d82798": "「漏洞复现」英飞达医学影像存档与通信系统 Upload.asmx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247520073&idx=2&sn=4c7594159b1f0faaf2836aaea1b364f2": "美国削减国家漏洞库预算,或造成全球网络防御基础数据缺失", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247488648&idx=1&sn=26c917f1ac891f9a3bf00fb09f2b0dbd": "Mitel IP 电话未授权RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650594891&idx=3&sn=98ba61e5d0731044d4fdc6fe347dc700": "存储桶OSS遍历漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247485228&idx=1&sn=6c086634e9c3523cc1f4e1230908bf16": "【漏洞复现 | 含批量POC】泛微e-office-mobile_upload_save 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486577&idx=1&sn=500f84ae463ef70e2b0c5bb53d30af5e": "fastAdmin开发框架lang接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247500776&idx=1&sn=fcf677fb33ff9b9585edf36340eb8a0d": "记录某次攻防演练中几个有趣的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247485407&idx=1&sn=e486fa7f62758ae2f27115e20dcf306e": "企业SRC实战案例-时间校验漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247486197&idx=1&sn=9fee96052b1f16e782a6d1ceed9a9346": "0day预警 | Windows WIFI驱动远程代码执行(CVE-2024-30078)", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513166&idx=1&sn=f31c1636b18dab80795263e81033acf5": "一键漏洞扫描神器 -- NetsparkerV24.6(6月13日更新)", "https://mp.weixin.qq.com/s?__biz=Mzg4MjY5MDE4NA==&mid=2247483881&idx=1&sn=1a07a6cf5a211ce2a551f59769cfbfe3": "FastAdmin任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIwMzM5Nw==&mid=2247488572&idx=1&sn=0717a3816ccff8bdb32f670a594ec91a": "Windows | TellYourThePass近期利用PHP漏洞实施勒索攻击", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247509420&idx=1&sn=95e27cc359bb901743a6455e14d6e331": "ICONV,将字符集设置为 RCE:利用 GLIBC 攻击 PHP 引擎(第 2 部分)", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247488667&idx=1&sn=8b1673a4e8da4fea21f0069fe2c5c709": "Iconv 实现PHP引擎RCE part2", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652061730&idx=4&sn=947d04cf52ea4a73891745fddb3414e8": "【安全圈】微软修补可能很快被利用的零点击 Outlook 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651285810&idx=2&sn=4bb67121da193509e7fc9b2c4aae8151": "华硕曝出高危漏洞,影响 7 款路由器", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247497440&idx=1&sn=bd797f6a2fc78bab38df0eb935711750&chksm=e84c503fdf3bd929845aed7c0ad26487f8f1bbfaf96f3d3b4a9cddfe30733f8fc2c826dce027&scene=58&subscene=0": "【公益译文】设计安全警报:消灭软件中的SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501318&idx=1&sn=df41421f8b47f09554de975ada1d3ca9&chksm=fe79e29ec90e6b887547a4e3809143e1fadba6ceab773886f5a7526de10956315bccffad96c3&scene=58&subscene=0": "安全热点周报:Black Basta 团伙利用 Windows 零日漏洞全球勒索,多个在野漏洞引发广泛关注", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657165506&idx=1&sn=bef814dd011825098a8a413911c7ed03&chksm=f1d4d227c6a35b31ee83e172332ede054f61fc3cefdf8fbca8221b874ecc9d8b69fff1bf7091&scene=58&subscene=0": "护网来临再爆核弹,Wi-Fi 接管攻击-CVE-2024-30078", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519766&idx=1&sn=e5617e80059a29c20c16b011271e8511&chksm=ea94bf7cdde3366a40c735785d2003fbc49acc442aa93976fea8022789285571f11532bd03a9&scene=58&subscene=0": "华硕:严重的远程绕过漏洞影响7款路由器", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545372&idx=3&sn=2b32d079be8099c164ecdc40211e3ec8&chksm=fa9384ddcde40dcb540403eb3a5715785a079ff7aeffbf16cd55e5feabb7e853f302d213d16a&scene=58&subscene=0": "500万美元!天价安卓0day漏洞暗网开卖", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247575750&idx=2&sn=45c5645081961c30b314d2ba160548e6&chksm=e91478fcde63f1eafbd261a0be431bf8485296171ac694cf9edace23a986a025f2506e9efe7d&scene=58&subscene=0": "安全动态回顾 | 网安标委“数据安全标准与能力建设研讨会”在南昌召开 谷歌宣称Pixel固件零日漏洞可能被利用", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544429&idx=3&sn=419dd67c6001dfbf39b4346472a842ec&chksm=c1e9a23cf69e2b2ad8fdf1214cd85f0ae8df67c28da51f3eef40433f3efff420cbc3fbddb145&scene=58&subscene=0": "无法修复立即删除!谷歌 EmailGPT 曝零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494900&idx=1&sn=021d050b9be09e49bf2c55691bb34c73&chksm=fd74dc3dca03552be846659e9f0f45de7c38ffe7c31564e836a516628c2046dc8d6427317291&scene=58&subscene=0": "CNVD漏洞周报2024年第24期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494900&idx=2&sn=036b1a0b2626fa919cf689d1ee1a3098&chksm=fd74dc3dca03552bfc8c1328a56cd3bbe5517777cb8447c7a2344e9b7d3d5c1134e509534a80&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240610-20240616)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486589&idx=1&sn=28a33953f3c2b8607bf5ea5dcab765bf": "Hikvision海康综合安防管理平台存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247484649&idx=1&sn=57745f0af7b68905c05deeec652272b3": "Apache OFBiz 目录遍历致代码执行漏洞(CVE-2024-36104)", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247485440&idx=1&sn=2f5fb1003012aa39b5090fbde5c8dc57": "SRC简单中危漏洞--618大促!!师傅们来看看吧!!", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247485440&idx=2&sn=2ac45be14b71980266050889d8b0f0b0": "企业SRC实战案例-时间校验漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247486892&idx=1&sn=9fdaaf95ec97f48a853a0868eb6c9647": "漏洞挖掘|从实战中学习漏洞挖掘与渗透测试流程", "https://mp.weixin.qq.com/s?__biz=MzI1NzQ0NTMxMQ==&mid=2247489669&idx=1&sn=0c04c98a07002689ac802ace2beae6e0": "国家信息安全漏洞库(CNNVD)2023年度工作总结暨优秀表彰大会成功举办", "https://mp.weixin.qq.com/s?__biz=MzkyNDQ5NDM3OA==&mid=2247483903&idx=1&sn=a9135a04fb0226a937bc2b46420d4f6b": "记录一下自己第一个贡献值破百的漏洞(小米src)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652061782&idx=1&sn=e8894306d0de41042737e971d78c8b8a": "【安全圈】华硕曝出高危漏洞,影响 7 款路由器", "https://mp.weixin.qq.com/s?__biz=MzU3MDEwMjk2MQ==&mid=2247485076&idx=1&sn=1c9481e2c232d39f4414ebf44d15ce8e": "Nginx日志分析实战:揭露4种CVE-2023-1389攻击手法,加固网站安全屏障", "https://mp.weixin.qq.com/s?__biz=Mzg3MTcxNDUwOQ==&mid=2247484008&idx=1&sn=5741c10bcc621a60355eb20f2ada798d": "Fastadmin 前台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486601&idx=1&sn=79ce1b6dfd0752f45c55a956f9965c1c": "CRMEB电商系统api∕products存在SQL注入漏洞CVE-2024-36837 附POC", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511975&idx=2&sn=51c504be3959e1bf389ceda027ef2111": "大语言模型利用零日漏洞取得重大突破", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247494112&idx=1&sn=384886689f5da7c430dd0c39144cfca8": "【论文速读】|对BusyBox进行模糊测试:利用大语言模型和崩溃重用挖掘嵌入式系统中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652061822&idx=1&sn=818ab7c696f0abf2c84aedd40ddaa98b": "【安全圈】VMware 关键漏洞修复程序已发布,请立即更新", "https://mp.weixin.qq.com/s?__biz=MzUzNjg1OTY3Mg==&mid=2247491411&idx=1&sn=88133ad85f76b61b2747524f5e9047eb": "华顺信安获评CNNVD“年度漏洞消控优秀贡献奖”、“年度优秀技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=Mzg2MDU5NjI0Mw==&mid=2247489841&idx=1&sn=ad440ab088a35137486da56ad04613da": "LLSRC 新增漏洞收录范围啦,还有翻倍奖励等你来!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519800&idx=2&sn=9ec908fe16262acbc252fd098d15c022": "Mailcow Mail Server 在多个漏洞,可导致RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651449640&idx=1&sn=099195ee328e5529a623c60dd0697859": "信息安全漏洞周报(2024年第25期)", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247484250&idx=1&sn=7641a915ae129785a130536136ec6504": "讨论:这算不算逻辑漏洞?", "https://mp.weixin.qq.com/s?__biz=MzUzNTkyODI0OA==&mid=2247527152&idx=1&sn=ccf580121d3afec5e2ae3972768ac07c": "i春秋助力 | 字节跳动安全范儿沙龙「漏洞挖掘」专场", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247572358&idx=1&sn=625eee7c77e8008d771dcb1f0ece5c93&chksm=9f8d4b8ea8fac298755b5ed5d56cf9c1fffdea52c9ef7c748ada036477016d3af64a917c4a2b&scene=58&subscene=0": "连续上榜!360荣获中国国家信息安全漏洞库(CNNVD)多项荣誉", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488664&idx=1&sn=c8c57643a924ebd60b71ff011e5aa1e0&chksm=cf8412b3f8f39ba5b3dc6a583047688bfa21e2ad6b8aebb6da5f0fb4ac77c1c23b299af6b466&scene=58&subscene=0": "攻防演练场景下的漏洞挖掘与治理 | 安全范儿沙龙开启", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486614&idx=1&sn=59b11180ff49c681b6eaa049e27549aa": "Hikvision海康综合安防管理平台applyAutoLoginTicket接口存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513223&idx=1&sn=ab9bd1daeb3b3e41c6b389be17f4d917": "漏洞管工具 -- miscan(6月17日更新)", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513223&idx=2&sn=deec9d24456e35ee9dec41f7f4a9e8d0": "红队实战教学 -- 如何通过自动化POC检测来识别软件中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495011&idx=1&sn=9cef8ce1aba44f3c87899de5413be4c7": "重定向跳转 -> XSS漏洞 -> 升级高危", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247485564&idx=1&sn=01ab46c46d2f4688b09971959cb5d265": "揭秘PHP反序列化漏洞-入门:黑客是如何入侵你的网站的?", "https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247492662&idx=1&sn=d4396450c3e49ec4a93a6b1f46abe5bc&chksm=979a1f93a0ed96859300c5592236d69b8a92992125370ba5ef58a1c990d60f6f7cbbf6bfb364&scene=58&subscene=0": "【喜报】锦行科技荣获国家信息安全漏洞库“年度漏洞消控优秀贡献奖”", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458559406&idx=2&sn=632576348965a5b970f63750e623de27&chksm=b18d932486fa1a32f79c2c3ed2499f3287efa961c86065b0101526eee067da0aee0ea5a0b7eb&scene=58&subscene=0": "白帽黑客还是敲诈勒索?某安全团队疑似在披露漏洞的同时盗走300万美元加密资产", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545449&idx=3&sn=b75c1e95ef4d6034c5716763b61244b3&chksm=fa9384a8cde40dbe6b8e1baf006ed07d8057ab12db6bdf7b7d12c5086667b6b45736572dd38b&scene=58&subscene=0": "CISA 称 Windows 漏洞可能被利用于勒索软件攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247516770&idx=1&sn=b76958f8d8d03c4ba401ea1d1cec39f3&chksm=ea83a4f7ddf42de199c6200445895de96ff029c95934129d5444360cacd5f7c1911c3a2f9a77&scene=58&subscene=0": "【MiSRC助力】攻防演练场景下的漏洞挖掘与治理 | 安全范儿沙龙开启", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523217&idx=1&sn=99457fc50e091dbf5fd016828db202c0&chksm=ce461081f9319997e28ca55e40d370ec83285adf0e865be13cefbb37bbdd2df9280b4604f6c4&scene=58&subscene=0": "【漏洞通告】Rancher Kubernetes Engine敏感信息泄露漏洞(CVE-2023-32191)", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247517362&idx=1&sn=bf370ee0118a504e97617f2856bf84c4": "干货 | 挖逻辑漏洞整理合集", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495016&idx=1&sn=3e28c5141d52ee5228fb7933981b2d56": "漏洞挖掘之二维码功能点", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247498282&idx=1&sn=355f7616565e52048ba94ec4627bb2e9": "G.O.S.S.I.P 阅读推荐 2024-06-21 漏洞猖狂,硬件帮忙", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247572465&idx=1&sn=4700b25b79ff92902644872cf1c687ab": "157个红队目标打点漏洞,95%严重高危,有POC、有修复方案的送分题千万别丢!", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488423&idx=1&sn=a97da2d8e92479332e4b481ba47e9ffc": "【漏洞预警】NVIDIA Triton Inference Server 远程代码执行漏洞 CVE-2024-0087", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488423&idx=2&sn=df414fe31d803e2f12a2c26010744a99": "【漏洞预警】MingSoft MCMS任意文件上传漏洞(CVE-2024-22567)", "https://mp.weixin.qq.com/s?__biz=MzkxMTUyMjUxMw==&mid=2247522598&idx=1&sn=090870c38862993db7c339fb4daa0d80": "【漏洞情报】核弹漏洞 CVE-2024-30078 WIFI POC已经公开", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499517&idx=2&sn=62c17a5c04483cd1480d11d360265369": "【漏洞通告】NVIDIA Triton Inference Server 远程代码执行漏洞(CVE-2024-0087)", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488707&idx=1&sn=b84579427ed989c61f0055c8a4c11f15": "Apache OFBiz 命令执行漏洞分析(CVE-2024-32113、CVE-2024-36104)", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247485883&idx=1&sn=57ff717773d84772bb8f3d2bb10db631": "CVE-2023-5002 pgAdmin <= 7.6 后台命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NDgxMzgxNA==&mid=2247495934&idx=1&sn=281270fe42f5c0e08c142c7fe5cd1eb0": "每周安全速递²⁹⁸|CISA警告Windows严重漏洞被勒索软件组织利用", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247558618&idx=1&sn=422dbb6071b59721e40b472a798cd0f9": "0day预警 | Windows WIFI驱动远程代码执行(CVE-2024-30078)", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493517&idx=1&sn=b27a79376a45c9017cb6e59466ce4c79&chksm=fa78e6c1cd0f6fd7242a09eb113da53a1c4ecb05243db94b659757f768fc1b59e44bece553c4&scene=58&subscene=0": "【最后五天】众测挑战AI 大模型,单个漏洞奖励最高可达8w!", "https://mp.weixin.qq.com/s?__biz=MzkwMzY5NzgzNg==&mid=2247483724&idx=1&sn=361129bfe56f1f32ecea108b728cd430": "春秋云镜 CVE-2023-2130", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484647&idx=1&sn=205dd6ef02b4a10b4e5f3fd41a9dc8d8": "「漏洞复现」学分制系统 GetCalendarContentById SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247485320&idx=1&sn=cc0a0318f846b4cedd3d58d26af3243b": "【漏洞复现 | 含批量POC】锐捷上网行为管理系统 static_convert.php 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247488778&idx=1&sn=e7c96e6ad1c3ee713da25b1359427dcf": "智能合约漏洞入门(7)- 调用注入", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247509629&idx=2&sn=f24528ddfa6a574c85434c9a9a619bdc": "CVE-2024-28397:js2py(JS 解释器)沙盒逃逸,绕过限制执行命令", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247509629&idx=3&sn=98c5b52e70563cc3442221bacdc900f0": "Apache Kafka UI 中的远程代码执行 (RCE) - CVE-2023-52251、CVE-2024-32030", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247610888&idx=1&sn=66896355992d0c82df934af5f228a87c": "磕磕绊绊的sql注入漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyMDUzMzY1MA==&mid=2247498818&idx=1&sn=04151b66e5f2d3d50d94eecb651b65df": "web 0day 大全(一)", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650595368&idx=3&sn=2aef28ca018a89d69d5ac891d1135a70": "记一次磕磕绊绊的sql注入漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247489346&idx=1&sn=4db491eafc77beaad485e5784cc44893": "漏洞预警 | JetBrains IntelliJ IDE信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247489346&idx=2&sn=48d9b1140e8a9101f326ac208575c623": "漏洞预警 | Magento Open Source XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247489346&idx=3&sn=6f4bb6a6dfd668ed05c2366d54ef2196": "漏洞预警 | Windows Wi-Fi驱动程序远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486626&idx=1&sn=ffb1cfde2680e1ba65b9a128fbf09378": "Zyxel NAS系统setCookie接口存在远程命令执行漏洞CVE-2024-29973 附POC", "https://mp.weixin.qq.com/s?__biz=Mzk0NDU5NTc4OA==&mid=2247484081&idx=1&sn=bbfe4c1bf255c0e88ccdd2088305ba72": "src | 奇怪的任意用户重置密码组合拳漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247486221&idx=1&sn=d1f40781ecfb8e7620174e3937b063ad": "漏洞预警 | Triton Inference Server for Linux远程代码执行漏洞(CVE-2024-0087)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062045&idx=2&sn=04156204e5a5e50f4b58d3075efc7e3c": "【安全圈】微软发布紧急更新,修复Windows系统重大Wi-Fi漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1NTM4ODIxMw==&mid=2247500780&idx=1&sn=1b7346d7e7262f5b785a570f045b5b2c": "干货 | 代码执行高级方式--APC注入 回调函数 映射注入 函数踩踏", "https://mp.weixin.qq.com/s?__biz=Mzk0MTY5NzYyOA==&mid=2247485064&idx=2&sn=631851bab420dddb4ef6b1a326d98d48": "【漏洞复现】天喻软件数据安全平台 deviceid 存在SQL注入", "https://mp.weixin.qq.com/s?__biz=MzA5NzEwOTUzMw==&mid=2447979963&idx=1&sn=d265161d565ea712228a8c9d318031ca": "借助大模型提升甲方安全漏洞发现和修复效率", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247484558&idx=1&sn=c80e31af68613955a6d8d41a69463a69": "CVE-2024-29973 Zyxel-NAS设备存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247485332&idx=1&sn=8c8a92ce2276c4cda4aa186240b99c58": "【漏洞复现 | 含批量POC】Zyxel-NAS设备 setCookie 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0NDI5NTY4OQ==&mid=2247485743&idx=1&sn=2e24257247537afe562abc045f172f2c": "Frida Hook(四)- 通用漏洞挖掘实战思路", "https://mp.weixin.qq.com/s?__biz=Mzg5ODE3NTU1OQ==&mid=2247484406&idx=1&sn=4ebabbc7065f50f5a101437e02b5f55d&chksm=c067c4def7104dc8206967f2a8225623f32d44c22eaad3bb8594190747919d4f2b16c4d59d9c&scene=58&subscene=0": "SinkFinder - 闭源系统半自动漏洞挖掘的尝试", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486639&idx=1&sn=d36f6c246946f1914a7a0cd162746367": "XWiki DatabaseSearch 存在远程命令执行漏洞CVE-2024-31982 附POC", "https://mp.weixin.qq.com/s?__biz=MzU3MTU3NTY2NA==&mid=2247488569&idx=1&sn=ea7e9271ed5d82a5d98a8d120af585c2": "New | CVE-2024-26229 Windows 提权漏洞(附EXP)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488429&idx=1&sn=a984bda188c125e5f81a48b7088eae2f": "【漏洞预警】Apache Kafka UI 需授权 反序列化漏洞CVE-2024-32030", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247517407&idx=2&sn=c39acbe4e6a175424400e50b228e3303": "开机,关机。chatGPT RCE", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651287383&idx=3&sn=5985623adb460b6ebb941b21b6906f13": "支撑单位遴选|关于开展2024年工业和信息化部移动互联网APP产品安全漏洞专业库支撑单位遴选工作的通知", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501436&idx=1&sn=be2a778d2d89d8e4eba601f99f49e1be&chksm=fe79e2e4c90e6bf211362c381750088da928663286ac4f4b77f5a31b8450f5821ebf58803716&scene=58&subscene=0": "Apache Kafka UI 远程代码执行漏洞(CVE-2024-32030)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494944&idx=1&sn=e6548de8c7b74db8fab5b02dd811c08b&chksm=fd74dde9ca0354ff3e45086961c2c6eac16e410eec18485c1bb1e9992e8216666b49069aa5e2&scene=58&subscene=0": "CNVD漏洞周报2024年第25期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494944&idx=2&sn=ecd213a9dc0a7eef9d66124e1c0497bb&chksm=fd74dde9ca0354ffbe32e8495d64e46e78e8a12bfe7837f9b5026caedd0966197fd7c968ee35&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240617-20240623)", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247506730&idx=1&sn=9485ea111b50fc3097e820849a2b4205&chksm=fa520e94cd258782911c90cb418b3b1dadaab27074c2d9183a7a4148d67e20b22f07f7269fcc&scene=58&subscene=0": "Vivotek CC8160 固件栈溢出漏洞复现分析", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247575872&idx=2&sn=ad0fd3b6e74c6720e4889ad89173f58e&chksm=e914797ade63f06cb8504c5a7d8a92e30e71c0fd48caccdf6234ee4be844cfff3d7feb6a7ff4&scene=58&subscene=0": "安全动态回顾 | 工信部通报22款侵害用户权益行为的App(SDK) Phoenix UEFI漏洞影响数百款英特尔PC型号", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486378&idx=1&sn=46e8b5185f9aa58aaa0eff98dac0a93e&chksm=c2229353f5551a4575bc5a135b8cd678100dff6d37ff170516a27add2bae886290e69dd15a9f&scene=58&subscene=0": "showdoc sqli to rce漏洞利用思考", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506078&idx=1&sn=796cc9d6a8a14eb0bc2a06aea13a1716&chksm=cfcabb8af8bd329cb5055db5715804d9cd0bbcb0a39bcfcf86154709b4026d4228f5e18fcc31&scene=58&subscene=0": "漏洞通告 | 蓝凌 EKP 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495045&idx=1&sn=8e00061164537579320f9c558a697996": "漏洞挖掘|从实战中学习漏洞挖掘与渗透测试流程", "https://mp.weixin.qq.com/s?__biz=MzIxNzY1MTc1OA==&mid=2247484011&idx=1&sn=a903a6a4c02f20931a2dc6253a81f9e6": "ctfshow之无字母数字的命令执行", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488437&idx=1&sn=1d3a0b0ea9076b6c9bacd0e179c158c1": "【漏洞预警】MailDev 2远程代码执行漏洞(CVE-2024-27448)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488437&idx=2&sn=c4b69497439006211028c2bfe2b8dce2": "【漏洞情报】MetaCRM6存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247492722&idx=2&sn=4b076ed9215ee1c2ab87b19e7db8b31f": "15款热门企业级漏洞管理系统可用性分析", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486679&idx=1&sn=2c1832570498df9be3f8886502dedf6d": "真内控国产化开发平台preview接口存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486679&idx=2&sn=097e556ae9eb83e35f40ad30225495f2": "通天星CMSV6车载定位监控平台merge接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523349&idx=1&sn=e3e53416bea5fb0b0aba19610415f9de": "【漏洞通告】Apache Kafka UI 远程代码执行漏洞CVE-2024-32030", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523349&idx=2&sn=9a07cddfe92cd4ebb055941e106e424b": "CNVD漏洞周报2024年第25期", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247490995&idx=1&sn=4433f27de6d18fe15fbbc668059eaa71": "一款简单好用的漏洞管理工具", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY3OTc5Mw==&mid=2247484283&idx=1&sn=8abd5a49d6cbb1de225affe1d05f31d8": "【漏洞复现】WIFISKY 7层流控路由器index存在命令执行漏洞 | 附poc", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651130754&idx=1&sn=745215e991ceb85458f387e47875bd1e&chksm=bd15bb518a623247e5fbfb384008e67fc7de7ad4de066d8aee3ec9378497d3ec345f649e9008&scene=58&subscene=0": "15款热门企业级漏洞管理系统可用性分析", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501449&idx=1&sn=f1dbb2d68cb71bfb98d0ff9d87fbdcb8&chksm=fe79e211c90e6b0767de1e428fa983f3bdf843fb24c6cc50dfd4eba6f3ca35101d2dd33b9680&scene=58&subscene=0": "Ollama 远程代码执行漏洞(CVE-2024-37032)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502962&idx=1&sn=8040a64c6a755cc0a5f40150cc2a6c57&chksm=f2585801c52fd1177c7603d27e752667d529bbb37cc7184d6d1f734d28a73f3a2354a3a367de&scene=58&subscene=0": "雷神众测漏洞周报2024.06.17-2024.06.23", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519855&idx=1&sn=7088d05b2e6a3cdf56986e480ea5119e&chksm=ea94bf05dde3361305094408f06ff54a8d271116378e3c9f710153b2dcb7f133fb984b7373ff&scene=58&subscene=0": "Ollama AI 基础设施工具中存在严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499202&idx=1&sn=910fdfa8893c0f40379b745fa5e21ea1&chksm=973acea0a04d47b63e9a1e9aa90ca9a67cbfb15dd7686417f81791684be3d7f9d749991cb35b&scene=58&subscene=0": "CNVD漏洞周报2024年第25期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499202&idx=2&sn=a432df29e50b2da02e699d4e1d3212aa&chksm=973acea0a04d47b654dd9a1092a8a86ec8580c1a4a6064349a0404214e86251e31e6b44d7a4e&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240617-20240623)", "https://mp.weixin.qq.com/s?__biz=Mzg4Njg3MDk5Ng==&mid=2247486640&idx=1&sn=ea628abeb1424e172b7694a73798f0d2": "FastJson-RCE (CVE-2017-18349) 漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489425&idx=1&sn=27ec685f8cf5605c6379cd0ad4e676e6": "Apple 修补了可能允许窃听的 AirPods 蓝牙漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495055&idx=1&sn=f25709c65a4f829bc4bc891d1259c22c": "一次报错所引发的五千漏洞赏金记录", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523359&idx=1&sn=bffc166bc1eab423df5345120d709e28": "【漏洞通告】Progress MOVEit Transfer身份验证漏洞(CVE-2024-5806)", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5OTQyNQ==&mid=2247485689&idx=1&sn=e06cf3dcc460c9aa23ea1323b25d3942": "学习干货|保姆式实战等保测评Linux镜像(邀请码+综合全流程+未公开漏洞)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501462&idx=1&sn=77865454524301f0f45e10383f0a5e02&chksm=fe79e20ec90e6b186b96468a2f782f0efd926a4f2680e6e613e2a2da5416ce188ef5d19dc72e&scene=58&subscene=0": "Progress MOVEit Transfer身份认证绕过漏洞(CVE-2024-5806)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519884&idx=1&sn=6407cbe53c48d873acacc653dceafd9b&chksm=ea94bfe6dde336f08a96c5768226e9e70afb02e7a0fdafe7042e062a6cd911476df4b34ebdfb&scene=58&subscene=0": "MOVEit Transfer 软件中存在高危的认证不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491025&idx=1&sn=70cb9fad31ecd9042c55d4d1a20fcb22&chksm=fe2ee25ac9596b4cf5aa157bdbbe6da61559ee80939d2ac500ccd77f40d711c0cf57413f4167&scene=58&subscene=0": "马里兰大学 | 漏洞可利用性预测", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489431&idx=1&sn=3c37fa42812f448199f9bb9d68e4904d": "尽快修补!新的 MOVEit 传输漏洞记录的漏洞正在被利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062245&idx=1&sn=9807219a5c81c6a070f48fc1140ac17f": "【安全圈】现已修复!AirPods 最新固件曝出蓝牙漏洞,可能导致设备被窃听", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062245&idx=2&sn=1ccb234b27c280f54b9e84eb70565004": "【安全圈】售价 15 万美元,影响 Linux 内核的 UAF 零日漏洞在暗网出售", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484697&idx=1&sn=3e088bf1c86c81b7d06d5d2b41f84d13": "「漏洞复现」易天智能eHR管理平台 CreateUser 任意用户添加漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501474&idx=1&sn=ab0e32fa5ac1ec16b77b0fa38e76d18f&chksm=fe79e23ac90e6b2c6f110936d0dfb4f694ea475c06d54e21bc9d7f4187a82ed6ef45ce946acc&scene=58&subscene=0": "【已复现】Ollama 远程代码执行漏洞(CVE-2024-37032)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519901&idx=2&sn=3262641607db182c3d651a403a7e8a1f&chksm=ea94bff7dde336e1616ab487b523e96ef95fcc21705f4fa168d534c13bb1ee1a7bc0de09a134&scene=58&subscene=0": "苹果修复可导致窃听的 AirPods 蓝牙漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512052&idx=2&sn=973a40b91068882b5694e3e098e992fe&chksm=ebfae8d4dc8d61c297e37da9b170cf981716348d18b2d4630270d780891fa8f3b2d0aa7c81b0&scene=58&subscene=0": "美国拟投资3.6亿元,研发医疗设备漏洞管理方案", "https://mp.weixin.qq.com/s?__biz=MzkyNDQ5NDM3OA==&mid=2247483911&idx=1&sn=fd99a39267f9ffe2d201db3e18b8c721": "记录一下自己第一个贡献值破二百的漏洞(某企业src)", "https://mp.weixin.qq.com/s?__biz=MzI1NTM4ODIxMw==&mid=2247500824&idx=1&sn=82971c64e8f636a2553656700068a363": "福利 | CVE-2024-29943 Firefox RCE (附EXP)内网书籍赠送", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247485532&idx=1&sn=64158c86bc868a0bcc15c9423cedc710": "【漏洞复测 | 含批量POC】碧海威L7产品 confirm 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247485358&idx=1&sn=dad2acdcf7e58ae905d806589cb9c083": "[翻译]Progress MOVEit Transfer身份认证绕过漏洞 (CVE-2024-5806)", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247485358&idx=3&sn=16ab8f7b68a8d3eea838d128ddcd4e0a": "[翻译]Apache Kafka UI 中的远程代码执行 ( CVE-2023-52251、CVE-2024-32030)", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247486129&idx=1&sn=25ee123661b779a49ad7204627915434": "监听蓝牙对话的BlueSpy技术复现", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489441&idx=1&sn=ecaef287c1273408b821c6ee351267d8": "影响 Linux 内核的 UAF 零日漏洞正在暗网被出售", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062300&idx=3&sn=5f32791db93bd0f2f45b960437353863": "【安全圈】售价 15 万美元,影响 Linux 内核的 UAF 零日漏洞在暗网出售", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062300&idx=4&sn=eef50c8162b1fe1147e683a139687387": "【安全圈】MOVEit 又曝出高危漏洞,又要来一次供应链大事件?", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651288307&idx=1&sn=3b09176b73a73bc340220be4e99aae90": "Black Hat 2024:5G技术存在漏洞,易被绕过和DoS攻击", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488456&idx=1&sn=7d697a70807f96e087cb807a37fea48f": "【漏洞预警】GitLab 身份验证缺陷漏洞CVE-2024-5655", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650275765&idx=1&sn=3e04ccc169c969b5da6c9cb3b99aacaf": "盛邦安全中标能源行业某单位百万级漏洞扫描便携式一体设备采购项目", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519913&idx=1&sn=f485e4897bd8f134b2685e61ec98b8ae": "GitLab 严重漏洞导致攻击者以任意用户身份运行管道", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247520620&idx=1&sn=d6f837af14b69c5c6d31d6c26949369d": "使用 SyntaxFlow 审计你的第一个“漏洞”", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501489&idx=1&sn=46fdad1e31db9b8afd7fbdffd013e99b&chksm=fe79e229c90e6b3fdc41aede2ee6f73de9a07fbe418172d18b19199e5501d5d87a2cc139c3ef&scene=58&subscene=0": "GitLab身份认证绕过漏洞(CVE-2024-5655)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247494909&idx=1&sn=5df718768b5921431f4fbe6e26165425&chksm=96d8e727a1af6e31d6e9a8402563036516d402398ac0df5a96feb0079c5f779662816fb01165&scene=58&subscene=0": "2024攻防演练必修高危漏洞集合(4.0版)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651288308&idx=1&sn=df1754e4886299cc872dfdb8c39ef9e4": "MOVEit再曝9.1分高危漏洞,又要引发供应链大事件?", "https://mp.weixin.qq.com/s?__biz=Mzg2MjAyMTczMw==&mid=2247485632&idx=1&sn=fac479a71bd9e5f8f24a239e27c3f4fd": "2024HVV最新POC∕EXP,目前有10000+个POC∕EXP", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247513186&idx=1&sn=619d4fa90bc30472abdf9d7f8664eee2": "设备漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484717&idx=1&sn=817845af4def667053fe02f5b6f7ca11": "「漏洞复现」契约锁电子签章平台 add 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062353&idx=1&sn=fb48af9932b77d47fa4768f95e5b7111": "【安全圈】5G 连接存在漏洞,移动设备易被绕过或受到 DoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247486221&idx=2&sn=fd1fc7016a344bab5e2e3e6181c40914": "CVE-2024-36072 (CVSS 10):CoSoSysEndpointProtector中未经身份验证的 RCE 缺陷", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247488877&idx=1&sn=7d68d7faa708408a8c558f7dbf23d963": "Xerox WorkCentre 打印机RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650954395&idx=1&sn=1c2dd4f89ff927a081c20ce24a0ddcd0": "利用已知cms漏洞getshell", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247485545&idx=1&sn=e6f10462dd619289d0ef3fa021362b52": "【漏洞复现 | 含POC】通天星CMSV6车载定位监控平台 point_manage SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093085&idx=2&sn=427da8530cccf7c40d6cc5f557a5aacd": "现已修复!AirPods 最新固件曝出蓝牙漏洞,可能导致设备被窃听", "https://mp.weixin.qq.com/s?__biz=MzA4NjQxMDcxNA==&mid=2709355176&idx=1&sn=1d59abbf862aa8b97b999d62aa2311eb": "利用openrestry动态修复部分漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247491309&idx=1&sn=c283844066ff9c9e7d318ca89330437c": "Geoserver后台漏洞检测一键化工具", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247625422&idx=5&sn=e6a850c81ea0ca3351258b9326e09aa9": "售价15万美元, Linux内核UAF零日漏洞在暗网出售", "https://mp.weixin.qq.com/s?__biz=Mzg2NTcyNjU4Nw==&mid=2247485264&idx=1&sn=f7ec6832f343c05ef90dbef834c62b94": "漏洞速报|POC分析|CVE-2024-6387", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247491769&idx=1&sn=33e6d36f4ba4c4d74c422c4bc61d0093": "SSH也能存在RCE?", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247488703&idx=1&sn=54152b79016a5077ef44a58f37f5ae32": "CVE-2024-6387 OpenSSH RCE漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzU5MTc1NTE0Ng==&mid=2247485400&idx=1&sn=233269bb311bccdaf20dcf9cc2d3a90c": "【漏洞告警】(CVE-2024-6387)OpenSSH 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247484688&idx=1&sn=928f50f70991a1979dcefb8d02cb02d6": "源码分析致远A8任意文件读取漏洞,附数据库密码解密脚本", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513339&idx=1&sn=df9ed11a7cfed784d5ec94510db63f0f": "geoserver后台漏洞检测一键化工具(6月30日)", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492585&idx=1&sn=c7f5d7a0c85be99a99d23a0c69574f8d": "【风险提示】OpenSSH 远程代码执行漏洞(CVE-2024-6387)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489477&idx=1&sn=01ddd420b709a634208ec9c36d363aba": "【已复现】OpenSSH存在远程代码执行漏洞(CVE-2024-6387)", "https://mp.weixin.qq.com/s?__biz=Mzk0MTQ4NTU5OA==&mid=2247485515&idx=1&sn=86b2eef9d1d7afda866b48f732514564": "近 20 年来 OpenSSH 的第一个高危 RCE!", "https://mp.weixin.qq.com/s?__biz=MzkxNDY5NzMxNw==&mid=2247483979&idx=1&sn=c7dad3304cb4f3328dd6e7e905ddf907": "SSH-RCE(CVE-2024-6387)", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490460&idx=1&sn=7276be856c9a1e000c8a4d69123c7d5e": "漏洞复现 | 迈普多业务融合网关send_order.cgi远程命令执行漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649868718&idx=1&sn=c7133745486c32cef152a05a7b966300": "【知道创宇404实验室】建议关注Glibc-based Linux OpenSSH 最新RCE漏洞(CVE-2024-6387)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485458&idx=1&sn=2329965e5f5d25506e85163e15834f1c": "CVE-2024-6387|OpenSSH远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ2NzQ0Ng==&mid=2247484852&idx=1&sn=61b418d89a37fabfe014c84436d2aed7": "CNVD—由前端Js引发的SQL注入通用高危", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484736&idx=1&sn=466abab53f6ccca7a55f663032da83e7": "「冷漠安全」六月份0day∕1day∕nday漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488465&idx=1&sn=f11c080f95cc283e7ac7f50f509faeac": "【漏洞预警】OpenSSH 条件竞争漏洞CVE-2024-6387", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488465&idx=2&sn=d0ceeeb0175f882423a10b82124133ca": "【漏洞预警】Saltstack需授权路径遍历漏洞 (CVE-2024-22232)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485458&idx=2&sn=c25113b4a0ead82773652cae79323bf6": "CVE-2024-36837|CRMEB电商管理系统存在SQL 注入漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501517&idx=1&sn=2c24ec57c7a0b725973a2b588dd07fbc&chksm=fe79e255c90e6b438d046237314e4ad411dfbd947a699e92762dd186271fcf204c1834a98237&scene=58&subscene=0": "OpenSSH 远程代码执行漏洞(CVE-2024-6387)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502969&idx=1&sn=b1c6510f73b076788e0d93dc8b589ca8&chksm=f258580ac52fd11c5d477a00b46118ce36d969614b0a3a96b044e9591d5ed8aacfb4fbc7fb99&scene=58&subscene=0": "雷神众测漏洞周报2024.06.24-2024.06.30", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519930&idx=1&sn=fb9fb97863d38cac47e2e8c94fdfc267&chksm=ea94bfd0dde336c6cc905b39fdfcd6192b649ef99de88faa7d5c707a3eedf44f88820ce1fbee&scene=58&subscene=0": "Juniper 紧急修复严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519930&idx=2&sn=acd4b1226ac3021b5aa91433e3f657f5&chksm=ea94bfd0dde336c6a6ba483f21d5d9572e139fb0e5cd5ac1a9ccde95f91e2330823dfbc71c20&scene=58&subscene=0": "存疑 CVE 漏洞带来无谓压力 热门开源项目开发者归档 GitHub 仓库", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545625&idx=3&sn=c8fb7ac2663ccd0375b830fbfbe40a2e&chksm=fa9385d8cde40ccee5c177614fe3af26d655e9ab43b52cf0a33d65ad359e03d18dd426152516&scene=58&subscene=0": "售价15万美元, Linux内核UAF零日漏洞在暗网出售", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494959&idx=1&sn=ae79f30b8aafe49e53ea4afca0da8c31&chksm=fd74dde6ca0354f08071274e2e610f385c6b4fcfd3edd87c5107631e04baa35cb178960d3529&scene=58&subscene=0": "CNVD漏洞周报2024年第26期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494959&idx=2&sn=0320ca35f1b70fe13692b868354a82dc&chksm=fd74dde6ca0354f03f801a9e2cbaab8db21727546aec6437b14a2aeed70bdf0869017b56a25f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240624-20240630)", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247572647&idx=3&sn=74126bea92b9fa3e7b8f2f51a69381d2&chksm=9f8d4cafa8fac5b99234f106b255def667048e0573abd1b2869d8523b102d687720c2f0d5cd1&scene=58&subscene=0": "3000名黑客巅峰较量,100+漏洞震撼突破!矩阵杯决赛落幕", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247499960&idx=1&sn=c8d8d06562588da449f6e84aa1e98dbf": "原来是个“废物”漏洞,我以为是多牛逼的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495095&idx=1&sn=3b2fcf7fb8dc6ec2b4c7b55eb61a2d44": "实战登录框漏洞测试", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247517478&idx=2&sn=625cb9f9115aff27508956aa87530da7": "OpenSSH RCE (CVE-2024-6387) | 附poc", "https://mp.weixin.qq.com/s?__biz=Mzg4MzEwMDAyNw==&mid=2247485103&idx=1&sn=f4d14912f9151d55123e7fbf45311793": "为啥取证厂商扎堆突破安卓12∕13提权?来看看CVE-2024-0044高严重性漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247487943&idx=1&sn=04d0d45ae9c85cb8739d15e47c05c779": "护网在即,助力安服仔漏洞扫描~", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488474&idx=1&sn=efcba7c4f757ebdb583f9aeeb668be71": "【漏洞预警】GeoServer property 表达式注入代码执行漏洞(CVE-2024-36401)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488474&idx=2&sn=7767e45978a0b9d59238e70cab89ff67": "【漏洞预警】Apache HTTP Server 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492594&idx=1&sn=c56a9f265ee403ab4c30a4843bf186d6": "【已复现】Geoserver表达式注入致远程代码执行漏洞(CVE-2024-36401)", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093105&idx=1&sn=c819fafeb3e37805f86058ce11862d70": "Windows 修复漏洞遭利用,推送恶意脚本", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093105&idx=2&sn=fb5b6c98e59185a017957f200436a6ea": "PoC已出!高危漏洞CVE-2024-6387强势来袭", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651289248&idx=1&sn=1038bcf8639305760ff8f997072f5914": "OpenSSH漏洞预警:无需用户交互,可提权至 root", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247485596&idx=1&sn=aef6013b3b1d585ad0e15e98e4bcd5aa": "【漏洞复现】GeoServer开源地理服务 wfs 远程命令执行(CVE-2024-36401)", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650617407&idx=2&sn=28b223bf2f81dd3a768d0e5b36b7c9ba": "高危!OpenSSH远程代码执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247504105&idx=1&sn=8be3ac5a93373daad53d3c7736185cc7": "现金奖励 | GROW计划漏洞挖掘实战第二期", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501533&idx=1&sn=41f10403f24687361e445dd7db724d59&chksm=fe79e245c90e6b5330516a512b8d6693c2cad0c3f307306d69bf52efc2b7ccf1774f24bc1102&scene=58&subscene=0": "【POC公开】OpenSSH 远程代码执行漏洞(CVE-2024-6387)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519949&idx=2&sn=4951a0b220cf599191f950ae82909410&chksm=ea94bfa7dde336b19e411b9455b63b9d21ae84069ef0a118254f7f6b31c0ea710d0d2d333d1e&scene=58&subscene=0": "CocoaPods 严重漏洞导致 iOS 和 macOS 应用易受供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519949&idx=3&sn=9ad23a7958936b34139856b555d79794&chksm=ea94bfa7dde336b18b8f1704248e65771ec3abfe05106214615b0be0a21e73c95fdf2eb0d85f&scene=58&subscene=0": "谷歌推出新的KVM漏洞奖励计划,最高赏金25万美元", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506182&idx=1&sn=e32c43c9bbdfb49cae905689f467cc73&chksm=cfcaba12f8bd33045dc3ac65b6563b4c624c0065e445853be316ea1971c138819987b75b669d&scene=58&subscene=0": "关于OpenSSH RCE(CVE-2024-6387)高频关注的FAQ", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247485842&idx=1&sn=6a462334aa94328aa7689f1ddf80be6a&chksm=fb04cafacc7343ec8a7d7b6f7a1e22e59e7773a2e66dcb46fb8d7e678f64be58e3ae3921bf3f&scene=58&subscene=0": "防御任意SSH远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650979086&idx=1&sn=d18d0320395ab76700da91330bb4c9da&chksm=8079f93cb70e702a8cb5710255140bfa65cc54600d4c38a662639e9898f2ad54463d1f70de40&scene=58&subscene=0": "【知道创宇404实验室】建议关注 Apache 2.4.60 更新修复多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486344&idx=1&sn=2493307778c8d3fa9b0b7d61a3656021&chksm=ec6fec88db18659e9a3c304f15ccc18809df5cb87cb7d99204c95058a64c7a8693928aecb990&scene=58&subscene=0": "OpenSSH Server 远程代码执行漏洞(CVE-2024-6387)", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544704&idx=3&sn=a6156d6b4aefa04de16dcdaed046d91b&chksm=c1e9a3d1f69e2ac75a6c20168062423c9fb229c9130cc03d103ee9da4752ca51c54d63eb7f1d&scene=58&subscene=0": "Windows 修复漏洞遭利用,推送恶意脚本", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062466&idx=3&sn=4dfe5314c316497a5472075715addb64&chksm=f36e6f42c419e6545ff5723e21946f0585f854c86b309bc58c4b329798deb87d9c2d854f8a9c&scene=58&subscene=0": "【安全圈】数百万 OpenSSH 服务器可能遭受远程 regreSSHion 攻击(CVE-2024-6387)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247500244&idx=1&sn=26804b21e972905c02ca73a1ac8293d3&chksm=cfc5668bf8b2ef9db3b2a43b2973545d53619c4ac03295fa9dc76bdef433f3598b6c2ebedf8e&scene=58&subscene=0": "360BugCloud助阵矩阵杯,合力共建漏洞安全新生态", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545642&idx=2&sn=62b6c38796efc55051d7e1d1f5414fbf&chksm=fa9385ebcde40cfd2d589384b08f6e0f122d56287ca00ab4364b0725848cddb500cfda36d690&scene=58&subscene=0": "Juniper Networks曝最严重的「身份验证」漏洞,影响大量路由器", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545642&idx=3&sn=03bae878bdc7eb64e62f2a406ece64d0&chksm=fa9385ebcde40cfd1d206f91fe2d6619b52fab3d85a3bd68b19a24295bb86a216fe7ed3cb25b&scene=58&subscene=0": "PoC已出!高危漏洞CVE-2024-6387强势来袭", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499211&idx=1&sn=135556963d9a14a1b8a7eb3905db6c9a&chksm=973acea9a04d47bf6f3f4b191dd72b08c23626f10e17bcc0502276b67bb530619439d1de0a23&scene=58&subscene=0": "CNVD漏洞周报2024年第26期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499211&idx=2&sn=a875fb3c01a3352444c7fab81aab55d5&chksm=973acea9a04d47bff64226a21c2edb3965be9dd5f4e2aeef19a54da2ceb48a57d28826038423&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240624-20240630)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523409&idx=1&sn=985894b777bee43f3f5ed6860b5d2614&chksm=ce461741f9319e5795d997d3c1d3a5e1850f890ca25d7b71527ac978d9b2529bfb1ad6ff6c43&scene=58&subscene=0": "【漏洞通告】OpenSSH 远程代码执行漏洞(CVE-2024-6387)", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486390&idx=1&sn=77c7cea2378d96abb260adb6361df587&chksm=c222934ff5551a59aa0fa02931b9253e82d11ec3db6dc835400be0db4006de6875cfb2b9ef75&scene=58&subscene=0": "漏洞预警丨OpenSSH 远程代码执行漏洞(CVE-2024-6387)", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496648&idx=1&sn=34cf6111dc8ff2fca5fb1e2c2b2acd74&chksm=ce96bef6f9e137e07c35a98ee741d562d347d1f6014d6017a40a619440194df4d5b0bc662978&scene=58&subscene=0": "【风险提示】天融信关于OpenSSH远程代码执行漏洞(CVE-2024-6387)的风险提示", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488479&idx=1&sn=1214fe3b5fccc667d0cf9132d6040200": "【漏洞预警】FFmpeg n7.0 缓冲区溢出漏洞CVE-2024-32230", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247485992&idx=1&sn=51ae396e92767c40d2e901ce5f598811": "GeoServer 远程代码执行漏洞(CVE-2024-36401)", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247485520&idx=1&sn=e05a191f6ee098a1c2d4307fa5281fb0": "企业src实战-突破限制的绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489465&idx=1&sn=5807c6e928b67cf11fe9e1343428b021": "恶意推送脚本,Windows 紧急修复漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247498353&idx=1&sn=d62d0967413b693930e5b7e34c976967": "G.O.S.S.I.P 阅读推荐 2024-07-03 Racing on the Negative Force", "https://mp.weixin.qq.com/s?__biz=MzkwNDM4MjgzMA==&mid=2247495006&idx=1&sn=077c7fbe6bca293076931ff3debfb88b": "【已复现】安全通告|GeoServer远程代码执行漏洞(CVE-2024-36401)", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484758&idx=1&sn=ef9a30a3c1e94bcceb2e7c0618d4bcd7": "「漏洞复现」热网无线监测系统 SystemManager.asmx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093115&idx=1&sn=5c2bde3a46d4e73ab91391ed1b17ad5e": "覆盖1400个服务器!OpenSSH 严重漏洞可导致整个系统遭入侵", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489495&idx=2&sn=a97728c4a1895937c969b5ccd486e141": "【风险通告】OpenStack存在敏感信息泄露漏洞(CVE-2024-32498)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062520&idx=1&sn=fe43c7a39bc5a06b1c4e2934de8517d3": "【安全圈】可获 root 权限,思科 NX-OS 零日漏洞修复已发布", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062520&idx=2&sn=764d34aa1130ed7f83bd837c6a514c0e": "【安全圈】Windows 修复漏洞遭利用,推送恶意脚本", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062520&idx=4&sn=33ecb849545820707a62bfcb0b8c9a95": "【安全圈】Juniper 警告存在严重身份验证绕过漏洞(CVE-2024-2973,CVSS 评分为 10)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651289403&idx=3&sn=cdaedbae3d2e0cbe299486cdc86722f9": "最高可达25万美元!谷歌为 KVM 零日漏洞计划支付巨额奖金", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484522&idx=1&sn=c2d24d445055d8569c707a1f36bd4bae": "GeoServer远程代码执行漏洞-CVE-2024-36401", "https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448664925&idx=4&sn=c910800861608c3cee28b041656a905d": "CNNVD关于OpenSSH安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501547&idx=1&sn=89c87b00a18c6040e3d5bd80324a259c&chksm=fe79e273c90e6b655b053671c1956539ccfedd0a3088054f12faef833c9972f33cb956f0f12b&scene=58&subscene=0": "【已复现】GeoServer远程代码执行漏洞(CVE-2024-36401)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506192&idx=1&sn=d63be631e744eb42d6ea499f35b25240&chksm=cfcaba04f8bd33129b0be0a8fb521897d4b041ab403d691d313f7c35fedc1b215c5907f11da5&scene=58&subscene=0": "漏洞通告 | GeoServer JXPath远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247485846&idx=1&sn=81c0d5ae32735444d61b8ea24f839dea&chksm=fb04cafecc7343e85076ace5178b5efa651156f3e48cc682c3b01997e4bee934a0b953ca87da&scene=58&subscene=0": "检测OpenSSH远程代码执行漏洞CVE-2024-6387(行为和流量)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664218035&idx=4&sn=4038cd11a28e9ab52dd6aa740ce6d365&chksm=8b59bf4abc2e365c46b35463b89d852e165bb9d6fedd4a1659ceffedb75219923be85ecd4a74&scene=58&subscene=0": "CNNVD | 关于OpenSSH安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664218035&idx=6&sn=1448c0207fbc83b6e30fbf9420bcb75d&chksm=8b59bf4abc2e365ccf1ce094bcee24a8dcf4b8bc759813a6684f3c23a3191e6190dc6f6dcf44&scene=58&subscene=0": "评论 | 防网络沉迷机制有漏洞 谨防“青少年模式”被架空", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545671&idx=3&sn=86fc4f651ec46819ac9eb7c6c31d8e48&chksm=fa938586cde40c90916dad84cf4eef1b825910fcabc3861354084854d7c472fda2e8e905044b&scene=58&subscene=0": "覆盖1400个服务器!OpenSSH 严重漏洞可导致整个系统遭入侵", "https://mp.weixin.qq.com/s?__biz=MzIxNDAyNjQwNg==&mid=2456099109&idx=1&sn=116f9d13c503b19979510eb0ae5b3f9a&chksm=803c68ecb74be1faf07a888c5caa89656bfd0588cbc2e63339f9b1fa2572929e78579be8ca25&scene=58&subscene=0": "议题1- 投票| KCon大会议题评选 High-value Web Application Post-Exploitation", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523428&idx=1&sn=533f9c89b2ec8b6b42d63614393c2801&chksm=ce461774f9319e6237ccbce4a643d1ad2c37afe17585e0d257b59eba1c7ec797829bab719a75&scene=58&subscene=0": "【漏洞通告】Geoserver远程代码执行漏洞(CVE-2024-36401)", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484628&idx=1&sn=02f3159b9b0a138729fbe7b3cc66643c&chksm=c12af955f65d704304978b1561d8035d4b9aecea3ae10637d1fa25796c4983c71ce3fa140be7&scene=58&subscene=0": "【复现】Geoserver远程代码执行漏洞(CVE-2024-36401)的风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513376&idx=1&sn=b8232acc2fd818e44be21beb4d5f2309": "漏洞扫描工具 -- GoT(7月5日更新)", "https://mp.weixin.qq.com/s?__biz=Mzg2MTc1NDAxMA==&mid=2247484076&idx=1&sn=4064cb6a006f5cc454b7fb982e8ab9c6": "GeoServer property RCE注入内存马", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488491&idx=1&sn=a22c9a282f7a043b1c249fa2c44c24de": "【成功复现】GeoServer 远程代码执行漏洞(CVE-2024-36401)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488491&idx=2&sn=44444de25a87b0d01d0e9887709eb48d": "【漏洞预警】XWiki Platform 未授权 代码注入漏洞 (CVE-2024-21650)", "https://mp.weixin.qq.com/s?__biz=Mzk0MDY2NTY5Mw==&mid=2247484747&idx=1&sn=7614d7e1f69cd591f2bead4359b34e75": "[含POC]宏景eHR LoadOtherTreeServlet SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDY5NzMxNw==&mid=2247483999&idx=1&sn=45822239bbbf3c1a28116c5080a58c1a": "【0day】金斗云HKMP智慧商业软件", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651289696&idx=4&sn=129426b92208e7d4a8e699e46c3fb43c": "SiCat:一款多功能漏洞利用管理与搜索工具", "https://mp.weixin.qq.com/s?__biz=Mzk0NzM4OTQ5NQ==&mid=2247484445&idx=1&sn=82edd36842fbb8a2a449479095c9eb89": "CVE-2024-0044,致使 Android 12∕13 提权那些事", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062569&idx=2&sn=767bae933bd5b26e83854ba266b06a3c": "【安全圈】最高可达 25 万美元!谷歌为 KVM 零日漏洞计划支付巨额奖金", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062569&idx=3&sn=0a96ee46ba5e08d8166d3b3681c3906e": "【安全圈】Microsoft MSHTML 漏洞被利用来传播 MerkSpy 间谍软件工具", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062569&idx=4&sn=3c331fa10c28683cf1af086ef876f0d3": "【安全圈】黑客利用 D-Link DIR-859 路由器严重漏洞窃取密码,必须更换设备避免受害", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484768&idx=1&sn=82638260e1aafd174cf2bf5c6066735b": "「漏洞复现」Geoserver JXPath表达式注入致远程代码执行漏洞(CVE-2024-36401)", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247494207&idx=1&sn=5133ee256094c3290702adef567f02a7": "【论文速读】| 用于安全漏洞防范的人工智能技术", "https://mp.weixin.qq.com/s?__biz=MzI5NzUyNzMzMQ==&mid=2247485218&idx=1&sn=86aedee1914662648646d9e616f7dc0a": "afrog-漏洞扫描(挖洞)工具【了解安装使用详细】", "https://mp.weixin.qq.com/s?__biz=MzI0MTY5NDQyMw==&mid=2247517441&idx=1&sn=fb6c946ee1c4871982d6097a577687ce": "CVE-2024-24788 Golang DNS解析过程中的DOS漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458562108&idx=1&sn=690de0bb7bffe7752c4e3f3b48a0b5aa": "Boofuzz在二进制IOT漏洞挖掘中的简单运用", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247539839&idx=3&sn=49483e36097fa9d8a7e035d11eba547e": "特斯拉上价值 10000 美元的 XSS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489499&idx=1&sn=5017e0ee989a8f4c13accd8bac85b041": "【已复现】GeoServer 存在远程代码执行漏洞(CVE-2024-36401)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489499&idx=2&sn=64e5b0784d13a285b7174fe399e73173": "【风险通告】OpenStack存在敏感信息泄露漏洞(CVE-2024-32498)", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247489138&idx=1&sn=d2426a494bb172047d86051eab44dcac": "创宇安全智脑 | OpenSSH 远程代码执行(CVE-2024-6387)等80个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzU1NDU1NTI5Nw==&mid=2247487883&idx=1&sn=e6d84b040d04c1a903cb7140fc5339f3": "从0至1,关于我在Day1安全团队中的SRC漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=Mzg3ODk1MjI5NQ==&mid=2247484565&idx=1&sn=94318687615030b573b716626e88453d": "红蓝队已经开始布陷阱了,开源工具类别随意 git clone,一不小心就会直接触发 RCE", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499585&idx=1&sn=6ff5cb00a581611b3f02e17f8bad68af": "【漏洞复现】Artifex Ghostscript任意代码执行漏洞(CVE-2024-29510)", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247486021&idx=1&sn=6f915991275be71952d1f076ac9e1b34": "CVE初探之CVE-2019-6250反弹Shell", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651130970&idx=2&sn=fbce5a8193aba744bdff50c3be2e899d&chksm=bd15bc898a62359fb9b9ff7e749aaba4843671818fd3332d91ccaeeb67212a43b1419e7268c7&scene=58&subscene=0": "CNNVD通报OpenSSH安全漏洞情况", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545687&idx=2&sn=cf53690789dc4b121b48b550818c1e4b&chksm=fa938596cde40c808831048f48023d784a5853344092094313a591ec7c49fddb04d9f2941cfd&scene=58&subscene=0": "最高可达25万美元!谷歌为 KVM 零日漏洞计划支付巨额奖金", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247486274&idx=1&sn=e5ad8820ae0fc43bd8ae8dcd2095088f": "ARL联动AWVS实现自动化漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062621&idx=4&sn=a0d960abf9bef0212c3233e0d087d087": "【安全圈】已发布补丁!微软披露 Rockwell PanelView Plus 两大漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502062&idx=1&sn=fd9a312a7d696cc570b19b891ac59d5b": "【成功复现】D-Link GO-RT-AC750 安全漏洞(CVE-2024-22853)", "https://mp.weixin.qq.com/s?__biz=MzkyNDQ5NDM3OA==&mid=2247483932&idx=1&sn=4f66bfdf38825bae4145ca9490599eb6": "命令执行无回显利用总结 附工具", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247494721&idx=1&sn=a01a6a4ceecdef125f7cd1b842d2ea71": "XXL-JOB默认accessToken身份认证绕过RCE", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651132799&idx=1&sn=5d93b8f19dc6fbb89fc3804fc1e107bc": "荣耀加冕 │ 梆梆安全荣膺NVDB「2023年度漏洞报送最具贡献单位」", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501571&idx=1&sn=574d5dec651b6103d4d6e0e82d891092&chksm=fe79e39bc90e6a8dacf59710b83f675ab7664964c63de9aa806e385bde1a9b195dd4a826e6d5&scene=58&subscene=0": "Apache Tomcat 拒绝服务漏洞(CVE-2024-34750)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg3NzYzODU5NQ==&mid=2247484665&idx=1&sn=1fe0fa4c6289330a1a76585393eafaab": "T00ls全新“0day漏洞分析”板块重磅上线,开启网络安全新时代", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502086&idx=1&sn=3464b759c61c6c9ea961edbf4bda7007": "【成功复现】Splunk Enterprise任意文件读取漏洞(CVE-2024-36991)", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247485322&idx=1&sn=2b5f00c0a13825af3f843f9d3cf49561": "【未公开】无铭科技存在lang前台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247485322&idx=2&sn=2bf6ff1f69ee0b5c3253e2830857b7f6": "【未公开】无铭科技存在index前台敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247485322&idx=3&sn=a7706a3da691791843fcb070fab9fd2a": "【未公开】无铭科技存在juhecurl前台任意文件读取和SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247485322&idx=4&sn=62187d7cd6e4672cd0a97fec452f4866": "【未公开】无铭科技存在money前台水平越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062645&idx=4&sn=b35c2b28f3749760b6925f7494df5bd0": "【安全圈】新的 OpenSSH 漏洞可能导致 Linux 系统以 Root 身份进行 RCE", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651450896&idx=1&sn=7e0ce91b855f1e92b182955de4fc8b91": "信息安全漏洞月报(2024年6月)", "https://mp.weixin.qq.com/s?__biz=MzA4NDA3ODc3OQ==&mid=3045897661&idx=2&sn=bb1ec8cfd2d00b8c5ea70972bd57567b": "需要紧急修补!三菱电机软件存重大漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484331&idx=1&sn=57e0a0a722a53fd3eb13983f2b27833d": "【漏洞实例】某咖啡站点通过IDOR接管6k美元的账户", "https://mp.weixin.qq.com/s?__biz=MzkyMDUzMzY1MA==&mid=2247498862&idx=1&sn=4b5d3df9616b7d3dc094f4815bbf42e7": "TOP10 漏洞详解", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY3OTc5Mw==&mid=2247484364&idx=1&sn=eeab0f6e306b7b445c9a1c6d9c6322a5": "【漏洞复现】CVE-2024-30088 Windows内核提权漏洞 | 附poc", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247486000&idx=1&sn=3d4e367841161aa62f6248862e1d8824": "GeoServer 远程代码执行漏洞(CVE-2022-24816)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247484591&idx=1&sn=e6d4b8e4149b72285d33596281175aa2": "某付费短剧影视小程序后端审计(0day)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247510389&idx=2&sn=5290f267582fa0f34aadf00a2a968515": "CVE-2022-24785 MomentJS 路径遍历的工作原理:详细的漏洞利用指南", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247514902&idx=1&sn=269dfceff6ca51b0a080be058479d8ac": "关于 CVE-2024-2961 glibc iconv exploitation (part 2) 注解", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484786&idx=1&sn=ae8de0a918f33c841687ea3573da491a": "「漏洞复现」宏景eHR sduty∕getSdutyTree SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247487094&idx=1&sn=d4a769464f3810b904fbf60ef9d887eb": "CVE-2024-36991 漏洞复现 POC", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247486526&idx=1&sn=6a19364165564038671893971fbbc136": "CVE-2024-6376 (CVSS 9.8)MongoDB Compass 存在代码注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247486526&idx=5&sn=4c1234eb1db05ea4adeada1f48244b5a": "ChatGPT for Mac 曝光聊天记录:OpenAI 修补漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247488937&idx=1&sn=0e5ef9e13eba4f8357a88f5b372096b2": "FOSCAM R4M WIFI 摄像头 RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247491373&idx=1&sn=905598bc5f1b5347b885dd4295cfe5ae": "GoT指纹识别、漏洞POC管理扫描工具", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651290219&idx=2&sn=7cede22ef1d6f8145dea2327408aaec1": "FreeBuf 周报 | Juniper Networks曝身份验证漏洞;Xbox全球瘫痪", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651290219&idx=3&sn=d37c58876a3be96ba583a6807f910c6b": "工控威胁预警,罗克韦尔(Rockwell)设备存在两个重大漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247485643&idx=1&sn=6e63d26b93fd7a3bdb45072f65a106cb": "【 1day | 漏洞复现】锐明技术Crocus系统 Service.do 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247497814&idx=1&sn=a2d74b82fc5b69275c080e78ee6488ea": "网络安全学习资料 -- 文件包含+命令执行", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513407&idx=1&sn=2fb44ef74d40e4db0079da01e5d2ab34": "2024HW必修漏洞集合(PDF下载)", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247550333&idx=1&sn=4810139bf7b0df2581c68ec244122761": "红队快速打点漏洞检测工具 | POC-bomber", "https://mp.weixin.qq.com/s?__biz=Mzg3MzUxNDQwNg==&mid=2247483770&idx=1&sn=d7a17b53977b2928d804cd2455868a4f": "Remote Code Execution RCE漏洞详解", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093147&idx=2&sn=d85f43bd86138d72636fb232958b4d88": "新的 OpenSSH 漏洞可能导致 Linux 系统以 Root 身份进行 RCE", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247484634&idx=1&sn=f686460168fa48fb5978cd71a9788d27": "某UI众人帮悬赏任务系统审计(0day)", "https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247485415&idx=1&sn=52a693006c8ff941f0e24d88657f3746": "最新的Ghostscript漏洞困扰着专家,成为下一个重大漏洞的推动者", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247510451&idx=1&sn=a8c582e83e35747d6fae99869fb987ec": "CVE-2024-36401 远程代码执行 (RCE) 漏洞 绕过 waf poc", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247486562&idx=2&sn=395a69ba9a967dc8e7db89b1097f37f0": "CVE-2024-36041:KDE Plasma 漏洞导致未经授权的系统访问", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247497821&idx=1&sn=3d56831fa3556de42bad381c72bda260": "网络安全学习资料 -- 文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484530&idx=1&sn=49810cbf565cbd74c822a1f2e66c9ece": "Docassemble任意文件读取漏洞(CVE-2024-27292)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247513307&idx=1&sn=04104cbdc4a470795f75ca1c3d724aad": "Java之SpringBoot漏洞利用姿势合集总结详细版", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488507&idx=1&sn=934d432e7cc597ef8b00c9ae240ca8cd": "【漏洞预警】Apache CloudStack 未授权命令注入漏洞CVE-2024-38346", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062668&idx=2&sn=68fcfda6f4ef6330c00ccfd590442cd1": "【安全圈】CocoaPods 曝关键漏洞,数百万 macOS 和 iOS 应用程序面临供应链攻击风险", "https://mp.weixin.qq.com/s?__biz=MzAwNDI0MDYwMw==&mid=2247485733&idx=1&sn=e8429d66e58892487df4185071f12d98": "CVE-2023-38831", "https://mp.weixin.qq.com/s?__biz=MzkyMDY4MTc2Ng==&mid=2247483866&idx=1&sn=a434a371190034769cf7ee550d5d0c9c": "探索安全之道 | 企业漏洞管理:从理念到行动", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291351&idx=1&sn=0df8d5f1d492d4bbf84a2814c7edf98d": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501601&idx=1&sn=3f1ad85dbaeb33a00bf608803bb1c2b4&chksm=fe79e3b9c90e6aaf90103e15b62a48422f1a0c40ed2a252e545233731d94036864022c2602b2&scene=58&subscene=0": "【已复现】Splunk Enterprise 任意文件读取漏洞(CVE-2024-36991)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501601&idx=2&sn=5e1d5d2643e634cb1522d0b410ec0261&chksm=fe79e3b9c90e6aaf87c90702c2073820bd30007eecde93dd05410515341b0117c3550795346f&scene=58&subscene=0": "【已发现在野攻击】Rejetto HTTP File Server 模板注入漏洞(CVE-2024-23692)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501601&idx=3&sn=5a721709a3e5979ffcd7cec5b864469e&chksm=fe79e3b9c90e6aafcb24bdd898611c1af81431e26390014f34f2f32906b5737047b819609e87&scene=58&subscene=0": "安全热点周报:本周新增两个在野利用漏洞,Rejetto HFS 和 Cisco NX-OS 成攻击新宠", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520009&idx=1&sn=b958a0460ffa3e890f8c189660f04487&chksm=ea94be63dde337752a7dace28761adae32e92abbff78ddbb4dba723691c1d4eb489dd3e5deb2&scene=58&subscene=0": "Apache 修复 Apache HTTP Server 中的源代码泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545731&idx=2&sn=e2bc79fca8c76db4162bae1b4ffd26c4&chksm=fa938542cde40c54f53688c64def68778dfe9ec56dae030498f6f9fb8d9d15197283675a4ff0&scene=58&subscene=0": "影响 300 万款苹果 iOS ∕ macOS 应用,CocoaPods 平台漏洞披露", "https://mp.weixin.qq.com/s?__biz=MzUzMDk0MjY2NQ==&mid=2247484096&idx=1&sn=9694f5515fd5417cb2a039c3fd4aed65&chksm=fa4b5d66cd3cd470bc20ef660ce40124d90eddfff9f473f1e71505e0fc5eb12ba10d645db713&scene=58&subscene=0": "漏洞管理新论:从KEV到CTEM", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494996&idx=1&sn=0299e41acc5ae93d05fda77e049a86d2&chksm=fd74dd9dca03548b99cbdf6c9267daa238c4c95cde444c2118edebcb7c5458e254eeb8fc79ec&scene=58&subscene=0": "CNVD漏洞周报2024年第27期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494996&idx=2&sn=e6541508d9788147314469aac16621b2&chksm=fd74dd9dca03548b0813c0222f38f5fed7d845b195c4ee1d724dd16358635cb17bee591b0421&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240701-20240707)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486704&idx=1&sn=d6b2eca06fc71f7d2706f4ec6d7ef6a6": "GeoServer ∕geoserver∕wfs接口存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488512&idx=1&sn=fb7d6ee44cd7857c7d199145867a314c": "【漏洞预警】Apache CloudStack初始化不当漏洞 (CVE-2024-39864)", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247497828&idx=1&sn=3cdd9e177f5502093fd6a1438e12bbba": "网络安全学习资料 -- XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489496&idx=1&sn=9ba54321a5267936b19f88c482d66ed0": "RADIUS 协议漏洞使网络暴露于 MitM 攻击", "https://mp.weixin.qq.com/s?__biz=MzI4NTYwMzc5OQ==&mid=2247493743&idx=1&sn=3f5fe3b6e83d484107da879b18a6bc6d": "SSRF 之 Azure Digital Twins Explorer", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651290493&idx=3&sn=444b7ed600b9589fd3c7858e5457df52": "新型APT组织CloudSorcerer瞄准俄罗斯政府", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247613610&idx=2&sn=2b6bc8547705c6fdd1a88d33e91a6d61": "奇安信获评“2023年度漏洞报送最具贡献单位”", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247572840&idx=2&sn=0fd4cfb7f7f22aa386fb144f7ab8354c": "360斩获NVDB两大年度奖项 漏洞治理能力再获国家级认定!", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650617623&idx=2&sn=147e12700f8e90cf9549980eda741101": "攻击者可随意获取敏感信息!Splunk Enterprise路径遍历漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247494746&idx=1&sn=588b2eafcd3443c908a6d181e50d33b8": "CVE-2024-21683:Confluence远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3OTMxNTcxNA==&mid=2650928820&idx=1&sn=7c3d4f043f11d3586eb16707aaa64e66": "“漏洞治理+漏洞报送”两项荣誉,天融信获工信部NVDB认可!", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664219335&idx=1&sn=6876d708d8e348e6ed7836b031b24db1": "专题·漏洞治理 | 坚持总体国家安全观 加快推进国家网络安全漏洞治理 赋能新质生产力发展", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506252&idx=1&sn=f5849bfe706eb5b54b6813a1eb248021&chksm=cfcaba58f8bd334eab9878982c9ed49c2e133b8e9752c2f81e9e9163eaf07f54433995842471&scene=58&subscene=0": "漏洞通告 | 通天星CMSV6车载定位监控平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502976&idx=1&sn=9fa296838f4f3240e4523ff393547f8f&chksm=f2585873c52fd16510f215a5083f3590fc3823d1e9321680d835cacb801c31d9314c72dfe81a&scene=58&subscene=0": "雷神众测漏洞周报2024.07.01-2024.07.07", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247494921&idx=1&sn=4177296ba0ac285efefce557d0df8cb1&chksm=96d8e6d3a1af6fc5b978d5828bda53cd24fb19c49432b08237a3bfb5c265a556cd982dff90be&scene=58&subscene=0": "老旧系统漏洞修复难?能源集团选择斗象「漏洞无效化」方案,原因大公开", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523449&idx=1&sn=4d7627a87e923b868639d7149ec14f1f&chksm=ce461769f9319e7feb144fa3e1c5363f43209ff79a0324ea1a37aac2079222a16809198381cf&scene=58&subscene=0": "【漏洞通告】Apache CloudStack未授权远程代码执行漏洞(CVE-2024-38346)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523449&idx=2&sn=cda5fa3fa588f724623aed9fbfaffb7c&chksm=ce461769f9319e7f273d7b8b5c457163bcfca374d77ff52a71ae8b6de09ca58bc7fb33cd4672&scene=58&subscene=0": "【漏洞通告】Splunk Enterprise for Windows任意文件读取漏洞(CVE-2024-36991)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523449&idx=3&sn=8866030f307324e169f20091496ee431&chksm=ce461769f9319e7f68ab31930a04c711237a4663af24c612a67077cdc92435901ae63e6ddf1d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240701-20240707)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247500545&idx=1&sn=c368de62b1799d9850c42c3a7bca72e9": "[漏洞挖掘与防护] 01.漏洞利用之CVE-2019-0708复现及防御详解(含学习路线)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486727&idx=2&sn=40fc6717de121d8c0e5954d008bc2ee9": "Docassemble存在任意文件读取任意文件读取漏洞CVE-2024-27292 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg3MTcxNDUwOQ==&mid=2247484052&idx=1&sn=6feb7bcf088b9d1025ac92ac3c761fa5": "红盟云发卡系统存在反序列化RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247497834&idx=1&sn=f27c0bbb3c6b132da4b12d900904269b": "网络安全学习资料 -- 逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5OTk2OTY5MA==&mid=2247485631&idx=1&sn=4d2ffd558e416f9eeb9c6e96fd0125ab": "Microsoft 7 月 CVE 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664219477&idx=1&sn=757dea7f0dc373434c1b2e2b96994304": "专题·漏洞治理 | 网络攻防对抗下的漏洞治理探索与实践", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520029&idx=1&sn=1e2797120026ca6fbcf0a0d550923f4f": "微软7月补丁星期二修复142个漏洞,含4个0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520029&idx=2&sn=b58737a69aeafc6a694ae82500739603": "OpenSSH 易受RCE新漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499617&idx=2&sn=8f7641867b259ec120cc5b1949631a70": "【漏洞通告】微软7月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499617&idx=3&sn=0d626d751317c9a0e5b4008eaeaee368": "【漏洞通告】RADIUS协议欺骗漏洞(CVE-2024-3596)", "https://mp.weixin.qq.com/s?__biz=MjM5MTI2NDQzNg==&mid=2654551624&idx=1&sn=d77ae913b211690ae58565a351a17877": "2024-07 微软补丁日 | 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651131046&idx=2&sn=79b6cbdc88599ac2cf334c6fa4371dec&chksm=bd15bc758a623563eb117c6ded7816adc9d295322aefdd62d12fe409ddbe0207f142d3b96f4a&scene=58&subscene=0": "多家网络安全上市公司上半年业绩预亏,市场整体形势仍较严峻;一款流行的文档转换工具被曝存在远程代码执行漏洞 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501618&idx=1&sn=9593ae978490bf55a9dbc632d4d83c6f&chksm=fe79e3aac90e6abce546a96abd8076691994f6ba44c7ae02a1177dfd09e9407f27e37d6403d7&scene=58&subscene=0": "微软7月补丁日多个产品安全漏洞风险通告:2个在野利用、5个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544810&idx=1&sn=4e5763c8c8dab2f7da58ceca6421a330&chksm=c1e9a3bbf69e2aadc6264466fc25e365eea9900d2975f7bbe69da110cb0a32fdffb5d90555a0&scene=58&subscene=0": "坚持总体国家安全观 加快推进国家网络安全漏洞治理 赋能新质生产力发展", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544810&idx=3&sn=d97510e8e11881fff644917260d0f722&chksm=c1e9a3bbf69e2aadcca603f0f2bb57580d1738a5c67bf1a4dfc15c7819b2a2860552bb6ae2ed&scene=58&subscene=0": "新型APT组织CloudSorcerer瞄准俄罗斯政府", "https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247490471&idx=1&sn=38e35f75e2df8edc5a0121c237c6f5d0&chksm=fdeb9fd9ca9c16cfcc1b23b909b88f9ffbddc46a130ea27a5d5df4feb56be9c6114e0e9b1a74&scene=58&subscene=0": "再创佳绩 | 复旦白泽漏洞治理团队研究成果获软件工程顶会 FSE 杰出论文奖", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247506914&idx=1&sn=f5b78174719cf547a9504e2f2c07f7cd&chksm=fa520e5ccd25874af7607ff5e8fb21a157b8d295d363b990b1425c65f34be09f18dc345cb816&scene=58&subscene=0": "Self Destruction To Use After Free In Kernel:CVE-2024-38059分析记录", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247519374&idx=1&sn=ff707af5c3d29a6cf9344893cc88456a&chksm=eb7052b1dc07dba733448ed04a498436284e8176b61a605d7ba7f04c230dd355a2d137678b11&scene=58&subscene=0": "2024-07微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247504311&idx=1&sn=e757f23b345e817c9d6cbeb0ce132912&chksm=eaf999fbdd8e10edb410f6496ab32a480103af0ae52100808f74d607370e1b29d785fbdbb86d&scene=58&subscene=0": "单篇最高1500元 | 奇安信攻防社区「漏洞分析与复现」投稿活动", "https://mp.weixin.qq.com/s?__biz=Mzg2ODkyNjU4NQ==&mid=2247483956&idx=1&sn=dfa6a02d788c559004f21001da9c2ecb": "若依4.7.8版本计划任务rce复现", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489510&idx=1&sn=cc8306cc8225b9953ead1bedcb2dcdc6": "微软警告称 Windows Hyper-V 零日漏洞正受到利用", "https://mp.weixin.qq.com/s?__biz=Mzk0OTM5MTk0OA==&mid=2247496265&idx=1&sn=f6678b65b379bd64114d157cc84658a7": "API-Explorer - API接口管理工具2.0版本发布!", "https://mp.weixin.qq.com/s?__biz=Mzg3Mzg3OTU4OQ==&mid=2247491261&idx=1&sn=8a4f44d0651b3899ad3533383031e5b5": "强力亲推:专属于大学生的SRC漏洞挖掘课程来啦!!", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247500984&idx=1&sn=3a5f714017cf013e212aee1e7f4fac7c": "FastJson全版本Docker漏洞环境", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247486801&idx=1&sn=72a8c7921aa79da5d7bf4e41738ba9d3": "第98篇:Struts2全版本漏洞检测工具19.32版本更新", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247625867&idx=3&sn=b1a81e19cbe32f0f4d9fa5a2fc2ac8e4": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247625867&idx=5&sn=689898ecd768cde7a86b6eaff14692d0": "RADIUS身份验证协议惊现三十年的漏洞,CERT呼吁紧急关注", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062731&idx=2&sn=03802f599fd83f635075cf5aed1356e7": "【安全圈】微软警告称 Windows Hyper-V 零日漏洞正受到利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062731&idx=4&sn=c490c4def6e7894ae1f812dd7175ee46": "【安全圈】官方强烈建议升级,GitLab又曝严重的账户接管漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651291170&idx=1&sn=491166d10256b42f2cfe9c3223860b31": "官方强烈建议升级,GitLab又曝严重的账户接管漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650617670&idx=2&sn=8f2ee33f127228bcbd4865df11054ff2": "共建漏洞协同防御体系,亚信安全成为麒麟软件漏洞协同优秀合作伙伴", "https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247497131&idx=2&sn=0fa30e888919abc50254dda8b4decfe8": "微软2024年7月补丁星期二修复了2个被积极利用的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501645&idx=1&sn=033df8702e13f8707d03274b085c7391&chksm=fe79e3d5c90e6ac3126b23338bc75eb076c1c17b83c0a2e96c117458a4af4d98444ce7343ee7&scene=58&subscene=0": "GitLab身份认证绕过漏洞(CVE-2024-6385)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520038&idx=1&sn=c47470c41eba485c6761c101be23ab04&chksm=ea94be4cdde3375a05493cfa38283ce2ea210148cf20f12ae01666d4ae7d06828b0073a00526&scene=58&subscene=0": "VMware 修复Aria Automation 中严重的SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520038&idx=2&sn=921e2fe11a431d8a458188b65d0a3b9d&chksm=ea94be4cdde3375abbf6e79690d31fd0c1e2f7bdc02b738a8fc06afa426d4a95adedea7492d3&scene=58&subscene=0": "NSA 的开源员工培训平台 SkillTree 中存在CSRF漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247500251&idx=1&sn=2289b0646f7e49f6135807061fc2fbd8&chksm=cfc56684f8b2ef92517d779a1e35f0bf22abc42ea99dba6a254957ce420de7797c87a7a5bc51&scene=58&subscene=0": "360斩获NVDB两大年度奖项 漏洞治理能力再获国家级认定!", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650181683&idx=1&sn=674c9d3ffc253f63d6ceef2e1c3d9b0b&chksm=f4486b8fc33fe2998364107fbb66554aba0eebcbadd6cc5ae833722c640793c1ef123b59aa04&scene=58&subscene=0": "漏洞报送最具贡献+1,这次来自NVDB", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545807&idx=3&sn=7f6db24ad10a606511a85329be57f3f9&chksm=fa93850ecde40c18b691df71506bee2aadd9fac8fddba238c8564b80869a3005d642b3301149&scene=58&subscene=0": "RADIUS身份验证协议惊现三十年的漏洞,CERT呼吁紧急关注", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544845&idx=3&sn=0528c7fac6dcd50b5f1fe70d3936c7d7&chksm=c1e9bc5cf69e354a56af5c6c60f19a0ca720c56ea4d96587d85600821a56ec26e01a758f1f21&scene=58&subscene=0": "网络攻防对抗下的漏洞治理探索与实践", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247516897&idx=1&sn=f1e158dc91284eb64c5daebc25ee1b5a&chksm=ea83a474ddf42d629457383967254ddb4435771c295a39e05bb6e17fce92bd075658d2e8a500&scene=58&subscene=0": "小米获 NVDB “2023年度漏洞管理实践先进企业” 荣誉", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247506915&idx=1&sn=40b10ca14c76a8004c4792e3dac86271&chksm=fa520e5dcd25874bfc6b07882ebdf3a476767cd18b82924130b7d1ed0975095138f7aafe98fd&scene=58&subscene=0": "CVE-2024-34331:Parallels Desktop权限提升漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664219618&idx=3&sn=f6a6dc3c205405509b4a52e702ff5af0&chksm=8b59c11bbc2e480d7c57c697b02221b9bc1152391972b6db1663ca03e5ab678c841bd04e4904&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499233&idx=2&sn=acdfa4e4131e82f0f77fdeb1f4cc81fd&chksm=973ace83a04d47956f679067d871d86b706fd913b8fc2b3d30dfe49fc066ce34866840107b28&scene=58&subscene=0": "CNVD漏洞周报2024年第27期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499233&idx=3&sn=72a54c94a48e79cd965fc36e5dcf88ad&chksm=973ace83a04d47950d8dfce9fbc49edb53fd7f88d3a3c3039ea0ec78e87c15b2a8335f6f6b05&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240701-20240707)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523478&idx=1&sn=e608ed8dae2aa81c25029bbd9542cb8b&chksm=ce461786f9319e90da26ddf051b8623ce64302fada4f9683b51082ecb52aab486fada14b3619&scene=58&subscene=0": "【漏洞通告】GitLab身份认证绕过漏洞(CVE-2024-6385)", "https://mp.weixin.qq.com/s?__biz=MzU0MDcyMTMxOQ==&mid=2247487332&idx=1&sn=71b33d61aa38bffd24ebc8ac825b419f&chksm=fb35a6accc422fba335f182f00cbee272bda30d7f6ffffb543c22fa3ac8eea0852d5e73bc6d0&scene=58&subscene=0": "Evernote 应用中PDF.js字体注入导致跨平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247485706&idx=1&sn=168333fe02c563852960a57ca0a50110": "JeecgBoot指纹与漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485754&idx=1&sn=44ab1dd7f55e2618b861fb3d5a5f5744": "漏洞poc指纹整合管理,漏洞扫描工具 - GoT", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651291429&idx=3&sn=d40dae3e9504841f0054bf4f14f47846": "谷歌发力争夺漏洞资源,漏洞赏金再提高5倍", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484553&idx=1&sn=7db37627e333aef468335d1f2f86bf31": "新中新中小学智慧校园信息管理系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062747&idx=3&sn=ae5e5926e091aae0dab0734b1cf7101d": "【安全圈】谷歌发力争夺漏洞资源,漏洞赏金再提高5倍", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486393&idx=1&sn=20df1e2fab426b42800ed7a20f0a4490": "【已复现】ServiceNow 存在代码注入漏洞(CVE-2024-4879、CVE-2024-5217)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488534&idx=1&sn=8714a0374652be9d76842db702331ba2": "【漏洞预警】ServiceNow Glide表达式注入漏洞CVE-2024-5217", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488534&idx=2&sn=d1c89ee6b0cc5ff21049f1c01c290e4d": "【漏洞预警】RADIUS响应篡改漏洞CVE-2024-3596", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664219805&idx=1&sn=e4c41c8af01e89a57c91e1aa2d94164a": "专题·漏洞治理 | 当前美国漏洞治理体系面临的挑战与应对举措", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488746&idx=1&sn=3634dd7face9fa8b51e68605157ade44": "GeoServer 远程代码执行漏洞分析 (CVE-2024-36401)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520048&idx=1&sn=b45bc25ca26f3d26e25a19aee6ea8983": "谷歌系统和应用的最高漏洞奖励提升至5倍,达151k美元", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492602&idx=1&sn=c2dd6499124a6082ea12265c8fb45fae": "【已复现】泛微e-cology WorkflowServiceXml SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MTY5NDQyMw==&mid=2247517865&idx=1&sn=774cdced317edbd7eed3213d8da96ffa": "CVE-2024-32030 Apache Kafka UI 远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458563554&idx=1&sn=cf5419ad49285034ace2d1512bd65162": "V8 torque函数PromiseAllResolveElementClosure 相关的issue和POC的探索", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458563554&idx=3&sn=23a45f558e95ae27ddaf79590c903e1d": "GitLab漏洞允许攻击者以其他用户身份运行流水线作业", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247520725&idx=1&sn=3e1b985d66f030c3fae08a3fc6fe3272": "Yak与nuclei的深度融合:打造高效漏扫生态,解锁PoC管理新姿势", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544862&idx=3&sn=2865af7f677dd8dc692c0020a64a5200&chksm=c1e9bc4ff69e3559141d9a95b6f8f108bd5bd6aba15bd29a603f7066f6f658509853579d5830&scene=58&subscene=0": "官方强烈建议升级,GitLab又曝严重的账户接管漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545830&idx=3&sn=7afd7f19afbfb2fe3fec0538fafc4127&chksm=fa938527cde40c318a0e9cfabe671a96083f396ab3cc529b0bad0368159bb2d2737e6e36f22e&scene=58&subscene=0": "严重漏洞披露,影响Microsoft Outlook 应用程序", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247507001&idx=1&sn=013a5f321e6cfdabdf218b2a8feb5a81&chksm=fa520987cd258091c6a11b765021ebdd2d7d5cdd83d16c1b041579d7680cd221c9f096bc00b7&scene=58&subscene=0": "微软2024年7月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495187&idx=1&sn=865545f98b505cc9bc3ebc55f590cb5c": "实战 | 记一次X站逻辑漏洞到到管理员后台", "https://mp.weixin.qq.com/s?__biz=MzI5NzUyNzMzMQ==&mid=2247485227&idx=1&sn=9356daa3304f7f740d2b446652ac7255": "Vulmap【一款web漏洞扫描和验证工具】", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486397&idx=1&sn=004a244c16799de6ec5b4b0a32a6acbd": "【漏洞预警】Wallet for WooCommerce SQL注入漏洞(CVE-2024-6353)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062795&idx=2&sn=06bef90352b8f62e7fdfe8a46e442706": "【安全圈】微软已修复,Outlook 被曝严重远程执行漏洞:影响 5 亿用户", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062795&idx=4&sn=7c20206815b5d743b0d3b2fe37cda2d9": "【安全圈】中文 ∕ 日文 PHP CGI 安装包漏洞披露 24 小时内遭黑客滥用", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247484843&idx=1&sn=c8b0379316ea919644675abfed7caf7e": "泛微OA E-Cology存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247486755&idx=1&sn=d7a5e727ccfd242bd46964679ebb0b05": "Exim 存在严重漏洞,可绕过 150 万个邮件服务器的安全过滤器", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247541807&idx=2&sn=856052a79ce43772e7237d467871c1ca": "漏洞复现 | Showdoc反序列化", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247489225&idx=1&sn=6e39235fb690e8a96d27a2626491b961": "Pwn2Own:WAN 到 LAN 的漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247510758&idx=3&sn=e73da5b40c8970459f6889f41e417680": "利用 Chrome CVE-2023-2033 进行 Electron 中的 RCE", "https://mp.weixin.qq.com/s?__biz=MzkxMjYxODcyNA==&mid=2247484308&idx=1&sn=7302c5f3f6a7fe9b648022c9c65d4fe3": "某微信小程序未授权漏洞挖掘(置空查询思路)", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484852&idx=1&sn=ce8c8441057765afd79d529d23997829": "「漏洞复现」用友U8 Cloud MeasQueryConditionFrameAction SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247487176&idx=2&sn=32dc23804e4518e4b68dddfbd88627d7": "CVE-2024-6188 漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650596548&idx=1&sn=032aecab7039664de2d7bb5bb9c88d6b": "掌握“宇宙高维智慧”?网红“苗圣”被捕;|Outlook 被曝严重远程执行漏洞:影响 5 亿用户,可窃取信息、执行恶意代码;", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247489645&idx=1&sn=109fce74415df29a9b8ce388f881d842": "漏洞预警 | 号卡极团分销管理系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247489645&idx=2&sn=812e6af6c35104ab19b9e03bc3b77743": "漏洞预警 | 宏景HCM SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247500997&idx=2&sn=bbc12826b38f64f9f1c76719a347eefb": "经验分享 | 记一次通过子域模糊测试识别漏洞并获取高额赏金的经历", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495199&idx=1&sn=9f92812648bf61f9b7bf52671c8f6a9a": "通过命令注入来实现的RCE", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093179&idx=2&sn=dea47dea1d68f2afc9185d9aa7aa77fa": "微软已修复,Outlook 被曝严重远程执行漏洞:影响 5 亿用户", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486399&idx=1&sn=596b68342eeb353755a15bded1d87a10": "【漏洞预警】MStore API 身份验证绕过漏洞(CVE-2024-6328)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247492923&idx=1&sn=94ad1c246dabcc298fc72ec8eb248183": "专题·漏洞治理 | 当前美国漏洞治理体系面临的挑战与应对举措", "https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247500579&idx=1&sn=ed3c9232e67f1e244ff09da7db10d0b8&chksm=cfcf73eef8b8faf886676005ab6a5702e6e37443049fcec999ae10c3ca3db386b039b73e9a42&scene=58&subscene=0": "[漏洞挖掘与防护] 02.漏洞利用之MS08-067远程代码执行漏洞复现及深度防御", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247497895&idx=1&sn=7ba6cd7d6f74d444df1d134df08fcc63": "红队武器库漏洞利用工具合集整理(7月11日更新)", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513478&idx=1&sn=220014678051574b8be34bc947e8b63d": "fastjson漏洞批量检测工具(7月12日更新)", "https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247489662&idx=1&sn=2508c666e4d64e5f01b182de33a7ed74": "关于最新 Nacos RCE 限制条件", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247484438&idx=1&sn=c17337745e3da043122defc50041a39f": "关于网传的nacos最新0day", "https://mp.weixin.qq.com/s?__biz=Mzk0MTQ5MjIwNg==&mid=2247484036&idx=1&sn=d5889264587656c771656d05a6cd933e": "最新Nacos 漏洞复现与修复建议", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247486720&idx=1&sn=1d76d97ff44e992c63c63627eb40a837": "0day预警 | 已复现Github公开nacos rce的exp(小白友好)", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247492762&idx=1&sn=9d7af9ba25435e6affec93bf4f1d76f7": "NACOS RCE 0day POC分析及复现", "https://mp.weixin.qq.com/s?__biz=Mzg5MzMzNTUzMA==&mid=2247485180&idx=1&sn=2d124243f7aa4ed56579bcf80ba1338e": "紧急修复!Nacos 0day POC 及修复方式", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486405&idx=1&sn=dfa7ce2bc783c81365d21815a76f39c7": "【漏洞预警-已复现】FOGPROJECT 文件名命令注入漏洞(CVE-2024-39914)", "https://mp.weixin.qq.com/s?__biz=MzkwODUxMDUwMg==&mid=2247483798&idx=1&sn=9650f8ddbea3fd4311cd369765e990e9": "0day?传疯了", "https://mp.weixin.qq.com/s?__biz=Mzg5OTY2NjUxMw==&mid=2247512297&idx=1&sn=fecaac796e36bdf2f0c7b7017cef594f": "干货|安全方面的笔记∕工具∕漏洞合集 建议收藏", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247486807&idx=1&sn=535d1e07bd4d997e2690a98a39fbdf31": "速报:Nacos最新0day漏洞的临时修补方案", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484561&idx=2&sn=fe58c2cb005ad70a8878a0f850c67c3d": "【新】nacos RCE 0day", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062855&idx=3&sn=4c3de4434af430e0c1bf88432232e34e": "【安全圈】仅需22分钟,刚公开的漏洞PoC就被黑客利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651291518&idx=1&sn=03be9ad43eb32796ba2d65e6babd9dd8": "仅22分钟,漏洞PoC刚公开就被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291361&idx=1&sn=2c0be5e8d9a3d0946499feabcf9f8102": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247510735&idx=1&sn=eaf90a9f79f315001df513effc7f0d6d": "漏洞通告|Nacos Server 远程命令执行 0day", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489526&idx=1&sn=d9ef23aa77626a9738060d0bb38a74e1": "【已复现】泛微 E-COLOGY存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501684&idx=1&sn=44cc19da424c8d5a4210ab1e390cabb8&chksm=fe79e3ecc90e6afab2dde978b8af8c436087de3554f33458a7969f346f01c69e5e5ceb22b23d&scene=58&subscene=0": "【已复现】泛微e-cology9 WorkflowServiceXml SQL注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501684&idx=2&sn=c2f25c8f5524b2bc8d881d1c7d54b6e7&chksm=fe79e3ecc90e6afae418944501c2fc4b3ac7f7fbab4966185c2a7e805ef1041635cd508b3bae&scene=58&subscene=0": "安全热点周报:本周新增两个微软在野利用漏洞,请及时更新修复!", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502999&idx=1&sn=4cb6a9c0b0cbe82859178ecf7ac47fd5&chksm=f2585864c52fd17226eba6b340b4c0e491f482397059f08e570ba6929d8563e02e0ee0e343ab&scene=58&subscene=0": "雷神众测漏洞周报2024.07.08-2024.07.14", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458563662&idx=3&sn=7735f76a13e592d4101f77b0195e0ea6&chksm=b18d84c486fa0dd21444b51e877007e8d1688a8ff9746cbffc78b9018c3edbfb89f257d2e1fd&scene=58&subscene=0": "最新!0day windows 课程更新3节", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506446&idx=1&sn=9bb29eca5759a9d768fdf5591b188226&chksm=cfcab91af8bd300cf1bc4ea3d1f4f78488f425fd3e4ec6bedc818ad6944006f89a5d28ca2f94&scene=58&subscene=0": "已捕获在野利用,泛微e-cology9 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544884&idx=3&sn=0c0fe11708cabfb29a30a374a258cca8&chksm=c1e9bc65f69e35730b09714b0fd450d8ea6a11b0ff641309e9219d8a443505ed8c1d0164de1a&scene=58&subscene=0": "当前美国漏洞治理体系面临的挑战与应对举措", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495014&idx=1&sn=9c9a8f0c586a649abf33499dc1c295c8&chksm=fd74ddafca0354b9e3f58d24725b40addff019431a247f3f1a00f854618e6c37f7aefbe1c95a&scene=58&subscene=0": "CNVD漏洞周报2024年第28期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495014&idx=2&sn=9f9f39d41a5069bfadd30e9a47f10ca9&chksm=fd74ddafca0354b9cb6c72c97c2cd39d5348ff3deb0109577eecf32b5d55d3a3bc805e8f1610&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240708-20240714)", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489530&idx=1&sn=99c0f7b4b6813514438eeeca5b8c43b6": "Veeam备份软件漏洞引发全球勒索软件攻击浪潮", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513490&idx=1&sn=58e55679203b47c695e504ffaf29f757": "通达OA漏洞检测工具v1.6(7月12日更新)", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247491857&idx=1&sn=fd5598c9d0f2c82936d41dd09260e6d7": "nacos的1day保姆级漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484881&idx=1&sn=71991cf3b6dfca2c2a387dc6232bba18": "「漏洞复现」ServiceNow UI Jelly模板注入漏洞复现(CVE-2024-4879)", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484570&idx=1&sn=4b428b75abc5f6aedf9bba09a69fbf3e": "喰星云-数字化餐饮服务系统信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062873&idx=2&sn=79b2c32bc74a08b3c9cbd15f8a68a03c": "【安全圈】Veeam备份软件漏洞引发全球勒索软件攻击浪潮", "https://mp.weixin.qq.com/s?__biz=Mzg4MzA4NTM0OA==&mid=2247490832&idx=1&sn=042d272469e672778d013e81d171bce8": "近期暗网0day售卖情报", "https://mp.weixin.qq.com/s?__biz=MzA5MjA0OTAwOQ==&mid=2247485451&idx=1&sn=f6e54229e1ec64b2b8848b2c0d637456": "活动|BKSRC组件命令执行漏洞专项测试活动三期开始啦~~~最后机会,欢迎上车~~~", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458563721&idx=1&sn=e2cc8158623ee93a36640990531d4b1a&chksm=b18d840386fa0d15cf8cb0fbf51100ab9e1c54ed453f329470eb54243f1db836d56a8fae7809&scene=58&subscene=0": "新手飞跃!零基础Android漏洞挖掘全攻略(实战+技巧)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499235&idx=1&sn=375cb047a38747b8a77b3966d5a4f676&chksm=973ace81a04d4797e1459d00fa7c969809a4d1b600e3027fbbccf86c49c0eac300150ef8ab9d&scene=58&subscene=0": "CNVD漏洞周报2024年第28期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499235&idx=2&sn=4b3d5df99ac77847294c448db7478507&chksm=973ace81a04d479796d58c4afde6dd5c9092b8d475c24630d922afc58f3676178c4221ead77e&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240708-20240714)", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247545871&idx=2&sn=7ece6f8e0f769cba28f2fee090a063fb&chksm=fa9382cecde40bd8bd50cc7543bb1c666ef2b78d52b426c561398501215c315ed060695b4c96&scene=58&subscene=0": "网络攻击提速惊人:PoC发布22分钟内被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488558&idx=1&sn=df8eec545fc9c75d06dedaa08424d36d": "【漏洞预警】Atlassian Bamboo 需授权文件包含漏洞CVE-2024-21687", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488558&idx=2&sn=31b08847c7171aab3d37f4685424bd4e": "【漏洞预警】Apache Airflow 远程代码执行漏洞CVE-2024-39877", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247497899&idx=1&sn=1a503c20af61b9dde4f176dc8c116c01": "JeecgBoot综合漏洞利用工具V3.0(7月11日更新)", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513511&idx=1&sn=11d9a8e92093ceb1a1498807aade6163": "网传nacos_rce漏洞poc(7月15日更新)", "https://mp.weixin.qq.com/s?__biz=MzkxNjY0NDM3OA==&mid=2247484012&idx=1&sn=1284843fcc9d2a829347c55919f6cb41": "第四课-系统学习代码审计:命令执行漏洞讲解", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247486045&idx=1&sn=cd67e626e0e7d703379bdd0503efa703": "Nacos Derby Sql注入RCE(常规出网)", "https://mp.weixin.qq.com/s?__biz=Mzk0MTI4NTIzNQ==&mid=2247491568&idx=1&sn=a7b7d61cd6bcc4aeb69bb8f64c58c015": "Oracle exp 导出表时表名长度限制", "https://mp.weixin.qq.com/s?__biz=Mzg3NDk1MDczOQ==&mid=2247484861&idx=1&sn=2e453ec7f4d807f11643e8f9fa875051": "Nacos 1Day RCE不出网利用方式", "https://mp.weixin.qq.com/s?__biz=Mzg5MjY0MzU0Nw==&mid=2247484687&idx=1&sn=4beea94d216333844c334f6687295106": "【IoT安全】BMC 固件中的漏洞影响 IoT 设备安全-第 1 部分", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651292178&idx=2&sn=52f7dbd8102cb94165669c4576c9f622": "FreeBuf「漏洞分析」主题征稿活动即日上线", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484578&idx=1&sn=ce51b5ffb96ed8665dc55376b99cb6cd": "Next.js框架存在SSRF漏洞CVE-2024-34351", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520084&idx=1&sn=011fff146cf764aa7cd74c6ce7c7fee4": "攻击者最快在PoC发布22分钟后实施漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzIzOTAwNzc1OQ==&mid=2651137465&idx=1&sn=2e8d5ead476b9a858ce74ad314634b1b": "演讲议题巡展 | 芯片安全终局之战—故障注入漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247540497&idx=2&sn=79bf7017883e275e4d0b00fa1e9846a2": "大咖来了|江苏智能网联汽车创新中心:车载操作系统网络安全漏洞验证实践分享", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220182&idx=1&sn=8d8cb460c64828274bbb360ee11d9924": "专题·漏洞治理 | 对漏洞治理体系革新发展的思考与建议", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486428&idx=1&sn=1e0d4335e705333b85106dd88bb6056c": "【漏洞预警】Atlassian Bamboo Data Center And Server 文件包含漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486428&idx=2&sn=3519c62607de1fb749b279ef0bc9b914": "【漏洞预警】Oracle WebLogic Server未授权访问漏洞(CVE-2024-21175)", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486428&idx=3&sn=0966b848bf1bf6b1b1b617eed633636a": "【漏洞预警】Products Filter Professional for WooCommerce存在sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNTYwOTU1Mw==&mid=2650090872&idx=1&sn=a2940a5815a52a7cad2ecf4a909462e4": "最严重的39个硬件安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501710&idx=1&sn=65b45fbd7fa2c3d992923a30134ff42d&chksm=fe79e316c90e6a009de30885aa1d3a9b162f3f495e9dcc0c5ac3b9af501bae2c1bad98e32c77&scene=58&subscene=0": "Oracle 2024年7月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650471437&idx=1&sn=65a6a59740e485ce51fcc230e559e3cf": "秦安:安防“三大漏洞”告诉枪击真相,特朗普将更加危险,利东方", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247517694&idx=1&sn=f81db683fc6662aeddbb716635f9630b": "工具 | Jeecg-Boot综合漏洞利用GUI", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520092&idx=1&sn=2c708cd0c74c042942553df613872635": "思科 SSM 本地漏洞可用于修改任意用户的密码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520092&idx=2&sn=cc02ff9f6ef98e6d539f13b4c6c892c2": "Atlassian 修复Confluence等产品中的多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651451508&idx=1&sn=e9a112af7632262bc373ce727fbf8065": "专题·漏洞治理 | 建设全流程漏洞闭环管理机制,筑牢关基安全屏障", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651451508&idx=2&sn=1d69e6e878da20533eab05b03a2e4278": "专题·漏洞治理 | 对漏洞治理体系革新发展的思考与建议", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651451508&idx=3&sn=651bcb396bd774176d9a4049326b9679": "CNNVD关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489543&idx=1&sn=b20c7e33b1d622c9a2dec24d5b89815d": "思科紧急通告:本地智能软件管理器曝出高危漏洞,安全升级刻不容缓!", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093213&idx=2&sn=c1b4080f849e6c81f1220cd8c5741b63": "2024-07 Oracle补丁日|漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499669&idx=1&sn=e92a9a2998cda5eb97c6459180c9a3e5": "【漏洞复现】JumpServer文件写入代码执行漏洞(CVE-2024-40629)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499669&idx=2&sn=75ae3cf070581a529e71905a8490cfa9": "【漏洞通告】Cisco Smart Software Manager On-Prem密码更改漏洞(CVE-2024-20419)", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484641&idx=1&sn=9ed7e32692520ce98eb9b9ad5d0ccc77": "【复现】JumpServer 后台文件写入漏洞(CVE-2024-40629)的风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652062916&idx=1&sn=2f7a7da6edfcb8aa7c22e2e6f2afc7c9": "【安全圈】Cisco 再曝超严重漏洞,黑客可修改管理员密码", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651292305&idx=1&sn=2b8d74dc40441707334eb2994cd3cfca": "Cisco曝超严重漏洞,黑客可修改管理员密码", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544964&idx=1&sn=0f92f33ca6de46957220610b4d1a5db5&chksm=c1e9bcd5f69e35c3ba94759722f90126a41f443cc9d2fe76bbcebbc14da99d4337f9452ec4c0&scene=58&subscene=0": "对漏洞治理体系革新发展的思考与建议", "https://mp.weixin.qq.com/s?__biz=MzIzOTAwNzc1OQ==&mid=2651137524&idx=1&sn=dc487ab0c9b5371c9d3713ba3444cf25&chksm=f2c12494c5b6ad82f89e994c5a8693b7a4569d5ca32a165f9fd38674af9c7e530335d5b7cb66&scene=58&subscene=0": "演讲议题巡展 | A Post Exploitation Toolkit for High Value Systems", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247493626&idx=1&sn=c5fa1063ba130c5ceae3940a8701d3b6&chksm=fa9d1caccdea95ba537ddf60dc4ef4636b9d5d5df5a1bde2c7bc513dc308708b4460f6571684&scene=58&subscene=0": "抖音漏洞奖金提升至20万元∕个!", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220248&idx=1&sn=7f26861b88e955fed09c8f25b46f48c2&chksm=8b59c4a1bc2e4db73b81466fdeaf2951d62361caf64dca9094a77ebb4fa649e7556e3caff055&scene=58&subscene=0": "专题·漏洞治理 | 建设全流程漏洞闭环管理机制,筑牢关基安全屏障", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247494927&idx=1&sn=9c15dc1380c9f14c49f4a4f45b691281&chksm=96d8e6d5a1af6fc38abd993d427d62522a3a09314cab533205fda3539dfe574e832b9cbc60ed&scene=58&subscene=0": "「人机结合」理念,科学推高SRC漏洞收敛水位线", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247491097&idx=2&sn=4f2b5b6f6640165d9fb477ae56953c25": "GeoServer 综合漏洞扫描工具V1.2 发布!", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492622&idx=2&sn=421756753855b4778e62e57395995703": "【已复现】Nacos 后台 removal 接口 SQL 执行致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093221&idx=2&sn=c5835431828cd5f3af78d071c2ce2d87": "思科 SSM 本地漏洞可用于修改任意用户的密码", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247486840&idx=1&sn=be8331018c1a11e0bf21444b2365e557": "速报:Weblogic反序列化0day∕1day漏洞的临时修补方案", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486142&idx=1&sn=d234b6f0bc1689c780142eea2ef8a8a5": "【漏洞通告】SpringBlade存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486142&idx=2&sn=33882966256509cc273af17c9338eeb8": "【漏洞通告】Alibaba Nacos derby 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486142&idx=3&sn=f26f338e7099dbd0381634c4bc6750c7": "【漏洞通告】TorrentPier 存在安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520104&idx=1&sn=b5831c292df944c1998d2c0e89a80188": "SolarWinds 修复访问权限审计软件中的8个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520104&idx=2&sn=7a044b182ec50064eba8b67fb588a968": "思科严重漏洞可导致黑客在SEG设备上添加 root 用户", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk3NjczNQ==&mid=2247484949&idx=1&sn=3ba5af1c2414d2ab0d85fe8c0dc8a725": "98%企业存NDay漏洞超5年,风险高端局得怎样打?", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485509&idx=1&sn=4737cbe885067447a2783aa611d6b374": "CVE-2024-38050|Windows Workstation 服务权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485509&idx=2&sn=80f304722ffe4cb1b5ca0fc357a74939": "CVE-2024-39929|Exim安全绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485509&idx=3&sn=9ba2f58a14f4d67f9f5da2fa675e32a6": "CVE-2024-21181|Oracle WebLogic Server远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247540591&idx=1&sn=17e0bb45458ead9b732fdf3477841ec8": "汽车网络安全 -- 漏洞该如何管理", "https://mp.weixin.qq.com/s?__biz=Mzk0MTMzMDUyOA==&mid=2247497852&idx=2&sn=95b955bc2ffe39686f926dbf7197a2ea": "安全验证与传统评估方法的比较:红队、渗透性测试和漏洞评估", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506507&idx=1&sn=843cdb4e55d16425fc965f93f16e0c28&chksm=cfcab95ff8bd30493077a4f3294ca470692f064eaa62fbc37008dda2e6870ac49aaac1c5fe91&scene=58&subscene=0": "漏洞通告 | 已修复!Nacos RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501756&idx=1&sn=d2a6bccad06819cf70176bc02a7ee944&chksm=fe79e324c90e6a32139fd6113ec70cea92a332ab1c089e0b8e3b4676c71774730911e98195de&scene=58&subscene=0": "【已复现】Nacos Derby 远程命令执行漏洞(QVD-2024-26473)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501756&idx=2&sn=df4016bd9cdbf9046656891f477b8bbe&chksm=fe79e324c90e6a32eb519c03daf43b2a21637c818171618482583076f652528551b0d4fbb9fc&scene=58&subscene=0": "【已复现】JumpServer 多个高危后台漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544985&idx=1&sn=17dd354b8d00e3b573af17749e217761&chksm=c1e9bcc8f69e35de35e402885532f8732d404ea96cce5dc8a753d6a972f50a658691f17e2d21&scene=58&subscene=0": "建设全流程漏洞闭环管理机制,筑牢关基安全屏障", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544985&idx=3&sn=04a154860e6a3a0044645583796a7c5c&chksm=c1e9bcc8f69e35de3d606ff5179d3d5265397f54bbc9231163b8c9fdd9c4d406ffe10e575673&scene=58&subscene=0": "Cisco曝超严重漏洞,黑客可修改管理员密码", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220358&idx=2&sn=5f3accbc203322dc2fbae600386507cf&chksm=8b59c43fbc2e4d29012e171adc3228bb5511402eec4cf08bf4afc84306d403daeb3607747a6e&scene=58&subscene=0": "专题·漏洞治理 | 防微杜渐,加强漏洞治理的应急响应环节", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220358&idx=4&sn=649dce789eb58a23639314e1fa9bc65d&chksm=8b59c43fbc2e4d292edf11dd8ba02343cfaf86652bfae7dbf41f46364f7070a9e5cd0f53152a&scene=58&subscene=0": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzU0MDcyMTMxOQ==&mid=2247487546&idx=1&sn=d1287857ffd6a62fcd91721f5e93c44d&chksm=fb35b9f2cc4230e4d9b766d19a5a63fd5a716de89c8f0102ed44d5b08628030e54c69e399a62&scene=58&subscene=0": "「推安早报」0719 | nculei反制、yt-dlp反制、jump漏洞等", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247626166&idx=2&sn=d8701df8f4748af6882cee2f1f7cd880": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486439&idx=1&sn=aca5b6f607e6396e0b9dbc97ce3a279d": "【漏洞预警】Apache CXF SSRF漏洞(CVE-2024-29736)", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490609&idx=1&sn=7f1b96a451be7c93d387187ff761bb94": "首发0day-1Panel面板最新前台RCE漏洞(内附Poc)", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247486001&idx=1&sn=87030960d183e19ea7cb3571d6e39cde": "【 CVE | 漏洞复现】Next.js框架存在SSRF漏洞(CVE-2024-34351)", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247611665&idx=1&sn=190696a4c0667127874c9379917d5ad0": "某通用系统0day审计过程", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484918&idx=1&sn=0a83f55fe8b1cc96dfcc6f470298b4b6": "「漏洞复现」数字通云平台 智慧政务OA PayslipUser SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyMDEzMTA2MQ==&mid=2651167307&idx=2&sn=2ec9e5c1e98e2d43681e2547a6f0a448": "Cisco曝超严重漏洞,黑客可修改管理员密码", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485012&idx=1&sn=a0fab6a6872d359dcb129127801e4d67": "某TP拼团零售商城系统RCE漏洞审计", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247486854&idx=1&sn=22f93339432647d0ad0776c139606e37": "速报:某EDR产品服务端RCE 0day漏洞临时加固方案", "https://mp.weixin.qq.com/s?__biz=MzkzNzM0OTcyOQ==&mid=2247484617&idx=1&sn=cb65350f5023a64558c5f639196a477d": "漏洞利用小工具V1.3更新", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247513932&idx=1&sn=93f322246016615a57010658c5ff5e4d": "记某智慧云平台越权信息泄露SessionKey篡改 任意用户登录漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486441&idx=1&sn=9f534c95bf817bcf2fef94fd8d0cbe44": "【漏洞预警】WooCommerce - Social Login数据篡改漏洞(CVE-2024-6636)", "https://mp.weixin.qq.com/s?__biz=MzkzOTI2NjUyNA==&mid=2247484240&idx=1&sn=4467be07eab1806b8b59c62abfe5e6f0": "用友U8 CRM 文件上传致RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MDcyMTMxOQ==&mid=2247487637&idx=1&sn=6229121098df1fb61d8329fd41691f72&chksm=fb35b95dcc42304b684e585cae8bda7bf94df3255303709e86078dc1c4146f940858080b2d1c&scene=58&subscene=0": "「推安早报」0721 | apache2个检测poc公开", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247485960&idx=1&sn=34831d345fd134ba1817c79a7d68dd95": "护网第一天!浪潮云财务系统RCE已首发披露!", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488585&idx=1&sn=ac37c16bd21ef2bf635aefdc71483e0f": "【漏洞预警】Nacos derby 接口SQL注入导致RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488585&idx=2&sn=f928b1dd5f4de5f6a9ea51b82c8d1c25": "【漏洞预警】泛微 E-Cology 任意文件写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247626233&idx=4&sn=6a99c5a3177ffa512f3c60d993c62111": "神漏洞!远程篡改红绿灯时间,制造交通堵塞事故", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501769&idx=1&sn=2edeb62bd20fc5bd84da63caa890e03e&chksm=fe79e351c90e6a4753944bb594a30e2b7bf1dddd44e2f6071ae200c622e71290e1d1d89607eb&scene=58&subscene=0": "安全热点周报:本周新增四个在野利用漏洞,Magento、SolarWinds等企业级应用受波及", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512223&idx=1&sn=5cf0aa8b503295906af7fac1abdf57ae&chksm=ebfaf7bfdc8d7ea98017e06476a5b15e64759493f16994959a0e3ca41de6d2a4f1c0882572ea&scene=58&subscene=0": "神漏洞!远程篡改红绿灯时间,制造交通堵塞事故", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545006&idx=2&sn=1aaa1df68b4e9d5ac7f2a1ee6568d030&chksm=c1e9bcfff69e35e9ce5887ee7f4061e51957f6687944b6df014db40c5ae6108dd7134c38e8e1&scene=58&subscene=0": "防微杜渐,加强漏洞治理的应急响应环节", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493586&idx=1&sn=b5b6e35be18616b3b804f0ed74cc21bb&chksm=fa78e69ecd0f6f884168806e7866c9fc07d6f56fa754c30c8765d49c3e1d8d7ae1fb683c7907&scene=58&subscene=0": "【手表众测招募啦!】单个漏洞最高奖励可达6w,还有机会免费赢得一加手表!", "https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247516589&idx=1&sn=107da3b45e88255f240504d033ebde7f&chksm=ce5da3ccf92a2adab0511bd798570d967cd4b0b7d7528f2f17163f5ed77e4dd7a02ac17c39d7&scene=58&subscene=0": "无影(TscanPlus) v2.2发布:1300+内置Poc", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495053&idx=1&sn=12c77584f45d35f849c6617d4fb050ab&chksm=fd74dd44ca035452adcfaf4ce2cbe022ca6ab443db71a7591911a4c6ba49df8448c9a9750237&scene=58&subscene=0": "CNVD漏洞周报2024年第29期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495053&idx=2&sn=7250465475c2c84c39e33e88cc0cc7aa&chksm=fd74dd44ca035452bd0826714e86d5a85e2fd7266a0274c5b036a272160fe38c0a8c0583aece&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240715-20240721)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220446&idx=3&sn=5ff6dd8ac6d7cde9af96f7b3abb6fa60&chksm=8b59c5e7bc2e4cf1b81359a4abc7b3525116e5303fa924b5eeab43e5df5a18d6a927484dd431&scene=58&subscene=0": "专题·漏洞治理 | 强化全闭环漏洞管理,让安全漏洞无处遁形", "https://mp.weixin.qq.com/s?__biz=MzU0MDcyMTMxOQ==&mid=2247487643&idx=1&sn=64eb3611770faf3c620745406fe40822&chksm=fb35b953cc4230456b344f2c8cfad661942c46b403667231dfb6e48c1cb894212b668a3dd93c&scene=58&subscene=0": "「推安早报」0722 | exchange、漏洞赏金等", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495346&idx=1&sn=6a13b341165b3e94dc2c0b536102afa2": "记一次任意文件读取漏洞的挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyNDUzNjk4MQ==&mid=2247484651&idx=1&sn=081b57a0a2ea1485ab7cdab56a3d5809": "2024Hvv【在线更新Poc合集】", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247485734&idx=1&sn=de7f421d7d8a1360421bc6356e6ad381": "2024 HW漏洞威胁情报合集", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651451711&idx=1&sn=241c0e21c15e2dd7f922c6622eee78f3": "专题·漏洞治理 | 软件安全研发成熟度模型研究与实践", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651451711&idx=2&sn=432f1e152b0227a30ecf1ffacbc2a97e": "专题·漏洞治理 | 安全验证导向的漏洞管理方案分析", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489695&idx=1&sn=fdb9068a1b92e6ecc953bf45730bef4e": "【7∕24特辑,就2个!】恒脑协助在野漏洞分析显神威", "https://mp.weixin.qq.com/s?__biz=MzkwMjQyNjAxMA==&mid=2247484317&idx=1&sn=cb803241d8672d4ad805521da756b598": "惊!Android手机请尽快升级:电报0DAY正在影响你的手机安全", "https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247489970&idx=1&sn=0b1e0ee1773f584da98044236690a4ba": "今日hw情报-某小众CMS 0day 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063065&idx=1&sn=efdee5eeb85ca8a24d1876f21e7e8e18": "【安全圈】Telegram曝零日漏洞,允许发送伪装成视频的恶意APK", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484956&idx=1&sn=f1c90002b490ec19bd8d57d2e13848ed": "「漏洞复现」AnalyticsCloud 分析云 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247511512&idx=4&sn=671e93f615bf73e85b12e8c75297a9e3": "CVE-2024-4040:CrushFTP VFS 沙箱逃逸", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650617951&idx=1&sn=16d5748c8c04c3ddfafda69476668620": "赶快排查!2024实网攻防演练最新高危漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzkyMjM0ODAwNg==&mid=2247488012&idx=1&sn=48d23745fec7bd4b16dd0a7e15aa44bb": "【这两天一些神POC】不废话", "https://mp.weixin.qq.com/s?__biz=MzkzNjM5MDYwNw==&mid=2247483967&idx=1&sn=1205565b992ed2c0d2528c02084295e1": "靖云甲ADR捕获WebLogic远程代码执行0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652994983&idx=1&sn=d4d5f0a42debfbb7a0b2855ddf523aed": "关于阿里云先知暂停漏洞测试的通知", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247491497&idx=1&sn=f61f543e16e24b07d827839a02447cd1": "漏洞预警 电信 网关 ipping.php 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545063&idx=5&sn=174632fd15b0ca95c5d986caa6be8d69&chksm=c1e9bcb6f69e35a0004f5ce8482e45ff22f8590076ea898168b7a2eaa206098afb786f06dd09&scene=58&subscene=0": "Telegram零日漏洞被售卖数周:恶意APK文件可伪装成视频消息", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220664&idx=2&sn=8b8f21875ea62dedfa21b52495bbce86&chksm=8b59c501bc2e4c17c0f03d1335dbe0168c91c1ecc8b73fdd5d5dd8f027a0e843d3ec18071652&scene=58&subscene=0": "专题·漏洞治理 | 安全验证导向的漏洞管理方案分析", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220664&idx=3&sn=7d0d967cfcb149eb7288327e0c5ca39a&chksm=8b59c501bc2e4c17ffa1ac337e3b9c53d085d694a4c9832032e59688b2187eed09c9668b19fd&scene=58&subscene=0": "专题·漏洞治理 | 软件安全研发成熟度模型研究与实践", "https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247485932&idx=2&sn=e034592ca1acc9fd40ce672883d9d75d": "最近的一些高危rce漏洞附poc", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495364&idx=1&sn=2f2f32391be139c07331888749eb7045": "安全认证相关漏洞挖掘 | 高级攻防01", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520213&idx=2&sn=94fff5ae2231152f4d3c3f04cb6d19e3": "Docker紧急修复已存在6年且可导致系统接管的CVSS满分严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220786&idx=3&sn=8104fa961284f508c01df5856f7d38f1": "专题·漏洞治理 | 基于漏洞情报构建高效漏洞运营体系实践", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220786&idx=1&sn=da831ae9baf07e7d443a29c0412aafd2": "专题·漏洞治理 | 美国工控安全漏洞管理政策研究与思考", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2NDM4MQ==&mid=2650841434&idx=1&sn=1890a49b8879172c25061b9599b225de": "ForCloud赢战攻防 | 无惧突发0day漏洞 ForCloud虚实结合快速处置", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664711773&idx=1&sn=fd8eb9f9fc2f342de3b591f819d5c604": "2024年HW漏洞专项", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247493111&idx=1&sn=09d6f05aa220dc4491e6651b71e91610": "Telegram零日漏洞被售卖数周:恶意APK文件可伪装成视频消息", "https://mp.weixin.qq.com/s?__biz=MzkyMjM0ODAwNg==&mid=2247488018&idx=1&sn=190e378f3f95346162d6614682a3059c": "HVV漏洞PoC分享第二弹", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220786&idx=5&sn=a474c68060e30cc0c190f355e6d018f0": "“微软蓝屏”事件最新回应!美国“众击”公司将宕机事件归咎于内容更新漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247493559&idx=1&sn=5d3dcee7a24e488f9467a2a626360726&chksm=fa59495acd2ec04c4b242bb62bd8e75c7538501ea8fc7f95789d4adf2df04612ef2eaddd41d6&scene=58&subscene=0": ".NET 一款利用打印服务漏洞提权的工具", "https://mp.weixin.qq.com/s?__biz=MzIzOTAwNzc1OQ==&mid=2651137640&idx=1&sn=8b8abb905b8924055448ce8ce28c9507&chksm=f2c12708c5b6ae1ed53cdd3c383c0c593eb1efc0aa4033aa6bb421027e725955ba31bbd28853&scene=58&subscene=0": "演讲议题巡展 | Windows远程文件协议漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=Mzg4MDcxNTc2NA==&mid=2247486232&idx=1&sn=5307e2418c9c5e8d33a08d63a91b77b7&chksm=cf71b983f80630956b887410a557b2cb56b386fb616ed0ebeebac54ea505cb4f6212fe68d659&scene=58&subscene=0": "CVE-2024-36401 JDK 11-22 通杀内存马", "https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247485934&idx=3&sn=522e1194ba6559a2a59af648b7f1c66e": "代码审计|NginxWebUI多处漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495366&idx=1&sn=296bd8f1f373777462c9179f8b0f8b47": "任意文件读取rce", "https://mp.weixin.qq.com/s?__biz=MzkxNjY0NDM3OA==&mid=2247484028&idx=1&sn=8dbdf402636ad1a7044450c645280e42": "第八课-系统学习代码审计:XXE和XSS(VUE中可能存在的漏洞)翻车讲解", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247484638&idx=1&sn=72aeb8505b660108d1447619bb3e029a": "帆软报表最新前台SQL漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220895&idx=6&sn=2e182b324ca03720f8633fb69d9c4638": "专题·漏洞治理 | 实战导向的漏洞运营实践", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664220895&idx=5&sn=9b46129ef4ad8e72f276042122c1b9f1": "专题·漏洞治理 | 漏洞全链路治理与运营管理建设", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651294547&idx=2&sn=6aa0ec2a3d81bddd1e8f357ae699a46a": "初学漏洞挖掘,很多师傅都在走弯路", "https://mp.weixin.qq.com/s?__biz=MzIzOTAwNzc1OQ==&mid=2651137673&idx=2&sn=41370ac51edb67318e988eabd6d69a3b": "诚邀漏洞猎手!KCon白帽赏金大赛即将开启,OPPO企业专场率先来袭,现金大奖等你来战", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063111&idx=2&sn=788b41903202c10118e89009d4f07a51": "【安全圈】LangChain曝关键漏洞,数百万AI应用面临攻击风险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063111&idx=4&sn=23f2ccd28f8d422d1feed77a32e3e912": "【安全圈】某些版本的 Docker Engine 存在一个关键漏洞,在特定情况下可被利用来绕过授权插件 (AuthZ)。", "https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651388033&idx=2&sn=959fa7ae76566c78a23129c981ad657b": "专题·漏洞治理 | 防微杜渐,加强漏洞治理的应急响应环节", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247483844&idx=1&sn=8685b0090897f36692db5ebd5c7aea8b": "【2024HW情报】0722-0726漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458565034&idx=1&sn=c3fb1f75fd43b7cabc845b7e6a541826": "IOT漏洞复现----RWCTF 6th - Let’s party in the house", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520228&idx=1&sn=d9e2734ebb4a13c747b20000c240d7bd&chksm=ea94be8edde33798e81c133dacfe538263083021026fe777545f067b211569e604c359b9c639&scene=58&subscene=0": "Progress 提醒注意Telerik Report Server中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520228&idx=2&sn=e2baa4f853063d34474bdd1973b4b156&chksm=ea94be8edde33798101d04ab50a6066bd659de102e44e7f9e8a8a8d63f9a91f86499e33bffbd&scene=58&subscene=0": "研究员披露谷歌云平台上的 ConfusedFunction 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247491342&idx=1&sn=e4bb64f117526b3289e7f63fa1cb8952&chksm=ea4bb549dd3c3c5f34fb2e64216c8ef15578c1ca1dfe79f2c776c52add9151c98d042a30670d&scene=58&subscene=0": "探讨非 http 供应链产品漏洞防范与不停业务之策| 总第255周", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545108&idx=1&sn=ca547d14914df9f640386caf37c01ae3&chksm=c1e9bd45f69e345320d269f3f4ce51cb9663f9c2b9216db42ae132530f829e959298725ccaa1&scene=58&subscene=0": "基于漏洞情报构建高效漏洞运营体系实践", "https://mp.weixin.qq.com/s?__biz=MzU0MDcyMTMxOQ==&mid=2247487685&idx=1&sn=7eb34d26696d991deb33192ae556c622&chksm=fb35b90dcc42301be0287b6f42989e0e3b8aeb7c996006163f088deb8f511e421a729f7d2afd&scene=58&subscene=0": "「推安早报」0726 | Selenium Grid Rce、红队新技术、spring Skipper组件rce", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247577257&idx=1&sn=547f0afc47fa10d49243af17b5283616&chksm=e9147e93de63f7850c6bcba1a139e655c4fa06196ad723ee291f31c2033ead563e4190635311&scene=58&subscene=0": "Ghostscript 库中存在 RCE 漏洞,现已被积极利用", "https://mp.weixin.qq.com/s?__biz=MzI4NTYwMzc5OQ==&mid=2247494424&idx=1&sn=c29423df3626026c4d87ea402cfc7b5f": "子域名模糊测试实现RCE", "https://mp.weixin.qq.com/s?__biz=MzkyMzU5NTM5Nw==&mid=2247488292&idx=1&sn=eb777bc7695c5b116af5f921cf2882ff": "CVE-2023-32243踩坑", "https://mp.weixin.qq.com/s?__biz=Mzg2MTc1MjY5OQ==&mid=2247485842&idx=1&sn=91b4788dd554295ad4dc1219c70639af": "二进制安全之栈溢出漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTg0MjQ5OA==&mid=2247485810&idx=1&sn=b167a9302bc734568a4099ade2d818ee": "激战N天,0Day漏洞成攻防分水岭!", "https://mp.weixin.qq.com/s?__biz=MzI5MTUxOTMxMA==&mid=2247484937&idx=1&sn=976677ffc1edccd7382a56df410cdfd0": "Day5-HVV Windows LPE 0day漏洞在暗网出售,可直接打穿系统", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486462&idx=1&sn=cfc27eaa6d56976be9ad0b9d1bc9a7e7": "【漏洞预警】OpenAM FreeMarker 模板注入漏洞(CVE-2024-41667)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247511621&idx=2&sn=6f2101afab604347a94c00433a1f6d97": "通过 MemoryUserDatabaseFactory 中的路径操作进行 JNDI 注入远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247511621&idx=3&sn=643a84281b291d6d166d64e84f94c048": "身份危机:Delinea 本地特权升级漏洞的奇怪案例", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651294548&idx=1&sn=969c31c8480912fac4e4fa0244f68184": "LangChain曝关键漏洞,数百万AI应用面临攻击风险", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484983&idx=1&sn=edac4bc4af1eec375cb81433fc9e0900": "「漏洞复现」用友U8 Cloud MeasureQueryFrameAction SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NDYwOTcxNg==&mid=2247483995&idx=1&sn=1c6e00785d5041b0329792ed42b10efd": "【泛微】漏洞利用PoC整理", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484617&idx=1&sn=69cdea92bd6fb92bc2d25c32bb02b5bb": "天问物业ERP系统VacantDiscountDownLoad存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484617&idx=2&sn=3f3bae94927c54d4a566f1acee1bda7a": "2024HVV漏洞整合", "https://mp.weixin.qq.com/s?__biz=MzkyNzQxMjQ4Ng==&mid=2247484121&idx=1&sn=35b28adb1ba73f6015bb64145ee0356c": "工具|OA漏洞利用工具,集成348+漏洞,包括nday、1day(未公开poc)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485082&idx=1&sn=215bb67ff03c8f21a52b5332d08b420b": "(0day)超级猫签名APP分发平台RCE漏洞审计", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247487194&idx=3&sn=3da9260c849fb73395ab75b2b5569686": "CVE-2024-39676:Apache Pinot 存在敏感数据泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247489400&idx=1&sn=fe5af6843a6469b9622822aaf47a0dd0": "WhatsApp中的双重释放漏洞如何转变为RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDExMg==&mid=2247484517&idx=1&sn=809506e30dea24a1a61c23d4ea77ff65": "【漏洞复现】润乾报表dataSphereServlet接口 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247487604&idx=2&sn=862e73cd28c2f14cebf90491779eed19": "红队终极指南:“A-poc∕RedTeam-Tools”", "https://mp.weixin.qq.com/s?__biz=Mzg3MTc0MDYwMg==&mid=2247483832&idx=1&sn=e2090f312429a67f99c09b47a236d4a9": "利用SSRF漏洞读取云服务元数据", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651294548&idx=4&sn=141235fab569ab62dc49eacc66a64f6f": "Ars0n-Framework:一款针对漏洞奖励项目的现代化框架", "https://mp.weixin.qq.com/s?__biz=MjM5NzYwNDU0Mg==&mid=2649246077&idx=1&sn=05963301601ffe07d3797aaf87707a8e": "邀请函|第五期移动互联网APP产品安全漏洞技术沙龙", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247493616&idx=2&sn=6ee74d0df3e60b8d50600f3d4ca40ac1": ".NET 一款利用打印服务漏洞提权的工具", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484626&idx=2&sn=216285ccca848571d4ae5e385ce0f46a": "帆软报表ReportServer接口 SQL注入漏洞导致RCE", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486464&idx=1&sn=9ddccf5f819814e26be51cca4ebc847b": "【漏洞预警】Apache HTTP Server敏感信息泄露漏洞(CVE-2024-40725)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063149&idx=4&sn=e8f3fa1fcc121009dd82f54633a6d085": "【安全圈】Ghostscript 库中存在 RCE 漏洞,现已被积极利用", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484992&idx=1&sn=b69ca0fa47971b39d5852ca415619dc2": "「漏洞复现」汇智ERP filehandle.aspx 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247486065&idx=1&sn=90b6a690ce5003d30024ef89ef0e8190": "【1day | 漏洞复现】某厂商-多业务智能网关 远程任意命令执行", "https://mp.weixin.qq.com/s?__biz=MzU5MTExMjYwMA==&mid=2247485685&idx=1&sn=41fef7adb41d79dee22e702880262df9&chksm=fe32b802c9453114e50aca694082d9ad00ddf538fa9b77ab62a283f0bd841a67c545698c749a&scene=58&subscene=0": "nacos_后台rce分析", "https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247485949&idx=1&sn=b5bb45848b2cce26668a77530fda5f04": "某系统漏洞挖掘小记", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247514239&idx=1&sn=5e4782a9b3e18de0e62573f00b0b6b01": "2024hvv最新漏洞威胁情报7.29", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501777&idx=2&sn=59a3391319d7540116203966bdd3dd7b": "安全热点周报:黑客利用 Twilio Authy 漏洞窃取数百万用户信息", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651294766&idx=1&sn=ead81c0e4b3000600e88d4e77647d9d5": "专题·漏洞治理 | 漏洞全链路治理与运营管理建设", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651294766&idx=3&sn=55788e1a6e5d68d7d773023f5010f5b1": "邀请函|第五期移动互联网APP产品安全漏洞技术沙龙", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545130&idx=2&sn=6529cd7a31a894ac1c8e19045dc11835&chksm=c1e9bd7bf69e346df12084d426da102894bae3128a5642f422d8e693a5cdbbe6729d2026d436&scene=58&subscene=0": "Telegram新型0Day漏洞曝光,将BUG藏在视频传播", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546076&idx=2&sn=9dcfedb79381f24838259acd58c9beb5&chksm=fa93821dcde40b0b1e57ef7e5c1fc4d87c806f1b349e519715242e9ce20e0f717d9929d7f6f8&scene=58&subscene=0": "Ghostscript 库中存在 RCE 漏洞,现已被积极利用", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247577275&idx=2&sn=ce92824409c72d054e0c157fc9e75785&chksm=e9147e81de63f79753b74a7b725fec00ee88380f0fe9b6217bdd2f6b71922fafe5a1d3a6d783&scene=58&subscene=0": "安全动态回顾 | 关于下达5项网络安全推荐性国家标准计划的通知 Docker修复了存在5年之久的关键身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495092&idx=1&sn=d925db99dfb31c0b13ab6c7bcbcadaf2&chksm=fd74dd7dca03546b447331e486359c9190feac004b0e2ed0efda0c122225129c6a463b7e8d21&scene=58&subscene=0": "CNVD漏洞周报2024年第30期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495092&idx=2&sn=7b57bdcb52e9aee61bce09c2e5fcd0b5&chksm=fd74dd7dca03546b99bf1c23a5305dfe2019f135c7fb15ec7228264873873c4c6f769e15407d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240722-20240728)", "https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247485951&idx=2&sn=9e0c28f0846a8818c34bd0767bff120b": "TOP10 漏洞详解", "https://mp.weixin.qq.com/s?__biz=MzkyNDYwNDE3NA==&mid=2247484759&idx=1&sn=c44961fc4e3bdd02879b7aca8600a173": "泛微ecology系统 WorkflowServiceXml 接口处存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1NzgyMzA0OA==&mid=2247490264&idx=1&sn=a06b00e597e35717b4a380c55f5b8ed2": "某木报表RCE_0day", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458565345&idx=2&sn=c74c7dd95c0c85c62ed058944ee36a0c&chksm=b18d8a6b86fa037da936a020c736441e5d4277a81b05d137bab438d7ddbb86320108f66c3b6e&scene=58&subscene=0": "WhatsApp Windows版本存在严重漏洞:点击文件会直接执行Python和PHP脚本", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458565345&idx=3&sn=b99b21263181acfc73e0aaab1655adb0&chksm=b18d8a6b86fa037df120c1a99e239cfbd8a088ea2ff6a690673f7de28c2acf75713c5e227d1f&scene=58&subscene=0": "新课已完结!零基础入门Android漏洞挖掘-入门篇", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503010&idx=1&sn=1e5c5126eafa4980abf3540552a5bb2d&chksm=f2585851c52fd147a50a6813465be5ba6ce79a6e338742454fe39d953a22f4c791057fcc4d70&scene=58&subscene=0": "雷神众测漏洞周报2024.07.22-2024.07.28", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520250&idx=1&sn=9de0d686df407512d09aa335542c6ef3&chksm=ea94be90dde33786a8a2ddd13dfb06aecf5ccfac3c0ec6aa88b69dd6affa1f42e9efd6b7a515&scene=58&subscene=0": "网络基础设施 Acronis 中的严重漏洞已遭在野利用", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545145&idx=1&sn=70d3c7cc10b7dcc19251b716dd83f63c&chksm=c1e9bd68f69e347ef3f3e2ef032805bfc6276f43b6e0cc4c387fa25052f63a7c0237209d0e8b&scene=58&subscene=0": "漏洞全链路治理与运营管理建设", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499257&idx=1&sn=b3e3cc7749d6c3694649fb57821ff541&chksm=973ace9ba04d478d459a49263ccd8c5cee49b944fd94985bb28f47e4cd0b15a7f26f91d16df5&scene=58&subscene=0": "CNVD漏洞周报2024年第30期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499257&idx=2&sn=37951c72e55ca239379d282a5c928542&chksm=973ace9ba04d478debed3a4a9d7a9c1bf8b69d51574c3e475ae854c2cfb8afe16cf6bb10060d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240722-20240728)", "https://mp.weixin.qq.com/s?__biz=MzU0MDcyMTMxOQ==&mid=2247487691&idx=1&sn=383f62eea8e5e77b27c6b320d9af61c1&chksm=fb35b903cc423015b83726b63dc28c72861c94a6e47c925f76a5c55e5f26c1c11c1ef39b8f0f&scene=58&subscene=0": "「推安早报」0730 | outlook C2、ESXi漏洞、红蓝工具", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486473&idx=1&sn=3db53b01cf5289e0904e79b5987597d4": "【漏洞预警】Apache SeaTunnel Web 身份验证漏洞(CVE-2023-48396)", "https://mp.weixin.qq.com/s?__biz=MzI0OTIwMjE2NA==&mid=2247485778&idx=1&sn=de9b520d965b209d06934b52bdd19489": "爱奇艺SRC延长暂停漏洞测试时间公告", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545166&idx=2&sn=0d296f18234549aff828cf1a6d89e7a6&chksm=c1e9bd1ff69e3409a31cb034d2641cd10c071a6ef133fe9deb7d3c3e451adaacb51387df9c49&scene=58&subscene=0": "微软:VMware身份验证绕过漏洞正在被勒索团伙利用", "https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247485957&idx=3&sn=21aed8508698fad4ecf0663bd33ac0d3": "某木报表RCE_0day", "https://mp.weixin.qq.com/s?__biz=MzI5MTUxOTMxMA==&mid=2247484969&idx=1&sn=4afcab08a31c2bce3bbc1927fb709e18": "2024HVV-0801【0day】xxx狗输入法_逻辑绕过windows登录漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxODQxOTUxMg==&mid=2247483793&idx=1&sn=54fdbf31ca0480a73bba18e12c240bca": "浅谈搜狗输入法0day的原理", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484790&idx=1&sn=cf08f3bf47be3b075e1e0b762bea1261": "【0day】同享TXEHR V15人力管理管理平台UploadHandler存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484790&idx=2&sn=ed6b684bf7418e1f32667b35df95e15d": "HW2024汇总-8.1(漏洞数173)", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247486084&idx=1&sn=588d4574ba993580187a5fdaaaba8964": "「深蓝特训」2024 移动安全漏洞对抗专场,报名开启", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486475&idx=1&sn=f041c58e86ead5c3ed463ddc68c3bcbe": "【漏洞预警】ELECOM 路由器命令执行漏洞(CVE-2024-39607)", "https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247486469&idx=1&sn=6f7f53793e09ad849b789bbb987fd628": "漏洞挖掘 | edusrc挖掘的骚技巧", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489791&idx=1&sn=f1e4fd6ee4b955bb5e6558f3fabaa483": "【8∕1特辑】今日热点漏洞速递", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxNTMzNw==&mid=2247483968&idx=1&sn=b1ed644f54a83e0ca3e063955c896b66": "Windows10∕Windows11使用搜狗输入法漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651295386&idx=2&sn=1c5a5e8bd06adcec07eeb29a10b915d5": "告别无效扫描站点漏洞,这两个工具嘎嘎好用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063243&idx=3&sn=3d3aadb0fb7259f6470cfe1f79c7ecd5": "【安全圈】苹果修复了iOS和macOS中的数十个漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495410&idx=1&sn=41f16c2639431fa942ba796ae22ed672&chksm=e8a5e491dfd26d8775a425654819ef718a12fba4577f1db9e9d2b9e7a5fbdff8256d9d8b08e5&scene=58&subscene=0": "一次十分详细的漏洞挖掘记录,新思路+多个高危", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485524&idx=1&sn=773266cbe2dc151da3831d9b0659cbc4": "CVE-2024-40725|Apache HTTP Server 源代码泄露漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485524&idx=2&sn=107bfa4ace14218a76c777ada29d55c0": "Android版Telegram中的0day", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458565629&idx=1&sn=f07b4983ee9378e3146d939c02c51bd7": "内核漏洞学习记录(CVE-2021-22555)", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247487627&idx=1&sn=0e958ee8f029be1f08a6d1948ba3a80f": "使用开源AI探寻0day的艺术", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247590&idx=1&sn=768b212ad04e04b3f97d42e7487fec88": "CVE-2024-36401:GeoServer未授权RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzOTI2NjUyNA==&mid=2247484409&idx=1&sn=f72dcefb7d5608fb375bb480e60b4c05": "[企业安全运维] 海康威视现新0day 可未授权致RCE 速查!", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247487506&idx=7&sn=43bda1741b2ce43f7c7fee57e06cbe2e": "CVE-2024-6980 Bitdefender GravityZone 存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyODY3NjkyNQ==&mid=2247484141&idx=1&sn=4af853d12549f6e13405948ca931cc5e": "IP广播服务平台未授权文件上传getshell-0Day附批量POC", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485048&idx=1&sn=78e6d2231f1e075130aff92d0e70cacb": "「漏洞复现」百易云资产管理运营系统 comfileup.php 文件上传漏洞(XVE-2024-18154)", "https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247539571&idx=1&sn=1b5aa84b6f96db73405247703d1c5b5e": "一文读懂2024HW & 2024HW漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484804&idx=1&sn=21078dd6a8ecf1f455196e1b45c5f9d9": "HW2024汇总-8.2(漏洞数196)", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247484744&idx=1&sn=b00faa90eea9c7143bc98bda076739bc": "HopLa插件让漏洞挖掘更轻松", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247491559&idx=1&sn=dc307b921e03c9215e4951320bc30903": "漏洞预警 用友 NC querypsninfo SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247488182&idx=1&sn=0f14d3a4712e92ae290d5eece6b597f4": "[Win11]集成化综合漏洞扫描系统", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484832&idx=1&sn=6f24e6e4354db0ff88b3c7dfca22b6ed": "【新】IP网络广播服务平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486481&idx=1&sn=c7b9d64e85f7ed057857d967532331a4": "【漏洞预警】D-LINK DI-8100 远程命令执行漏洞(CVE-2024-7436)", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484448&idx=1&sn=a833946a771aafeb5e01053b677b715d": "润乾报表dataSphereServlet接口存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484448&idx=2&sn=98f25a5ac73f09e5a3b9f1edc804f2ae": "润乾报表dataSphereServlet接口存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484448&idx=3&sn=112d0c2fd701f1a7253cfa66bc76d01e": "润乾报表InputServlet接口存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484448&idx=4&sn=e90d885ffaf3c86d29f2e664bddbc9a0": "润乾报表InputServlet接口存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484448&idx=5&sn=5ca049009a3074a11b83683d68539d60": "喰星云-数字化餐饮服务系统not_finish.php存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484448&idx=6&sn=ebeac3920aab864e35cd454e8de21e2c": "喰星云-数字化餐饮服务系统not_out_depot.php存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484448&idx=7&sn=751e96790ac212053c2bbe3b3115e4be": "喰星云-数字化餐饮服务系统shelflife.php存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484448&idx=8&sn=19a267675678ec78e258a77ad8ae1ac7": "喰星云-数字化餐饮服务系统stock.php存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY1MDc2Mg==&mid=2247505464&idx=2&sn=e0d69b07bbcfee314e9d1553d5aaee0f": "XML 基础知识 && XXE 漏洞原理解析及实验", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501791&idx=1&sn=ee41f8931eefed9cc459de3f0673f3ee": "【已复现】Apache OFBiz 授权不当致代码执行漏洞(CVE-2024-38856)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501791&idx=2&sn=f2a4a01fe90a969544f6d6b4567ded0f": "安全热点周报:本周新增四个在野利用漏洞,企业安全面临新威胁", "https://mp.weixin.qq.com/s?__biz=MzI1NDQxMDE0NQ==&mid=2247485059&idx=1&sn=88ea8bf4dfa968f2d66ff833c81c4bbc": "【已复现】CVE-2024-38856 Apache OFbiz未授权RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484162&idx=1&sn=ee30ecae20f1a11a1d44fe85e2dad04a": "信呼OA系统index接口处nickname参数存在SQL注入漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650259544&idx=1&sn=12d397398e227135f8865c54eb768372": "Pixel7∕8 Pro 安卓 14 内核漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzkzMDcxNzg4MA==&mid=2247484049&idx=1&sn=c3f120e7bbfccc3d6751ad547b259fb4": "[漏洞分析]LiveBos文件上传漏洞复现及绕过分析", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247517898&idx=1&sn=71a4e648fee7d992a9399be5c8a174aa": "工具 | JS接口提取并漏洞检测", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247487600&idx=3&sn=fe6592479e639e297f50ba06adb981aa": "威胁者声称在exploit以 1 万美元的价格出售“.url”漏洞源代码", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247487600&idx=4&sn=fe1a22b7b8ae625623224d76a9dcb9d8": "CVE-2024-38856:Apache OFBiz 存在未经授权的代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247487600&idx=6&sn=5d02d33f1fcb736902e6fe86a06f2b49": "CVE-2024-38100:Leaked Wallpaper漏洞使Windows用户面临权限提升攻击的风险", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247487600&idx=7&sn=edf130a7c62012baad4ac90b6c6595ac": "Calibre 电子书软件存在严重安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485067&idx=1&sn=e1cacfa89c75a522c97a834bfef66f1d": "「漏洞复现」方天云智慧平台系统 Upload.ashx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247489486&idx=1&sn=2a0b3418c79b6130b68662f93851293f": "CVE-2024-38100 Fake potato LPE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650597673&idx=4&sn=e3ca1ff02d8fad3456821abc9e890b21": "一款强大的burpsuite漏洞扫描插件", "https://mp.weixin.qq.com/s?__biz=Mzk0MzU5NTg1Ng==&mid=2247484752&idx=1&sn=66e1b93610568a4e152be1e5a3fc29ea": "hvv漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247485515&idx=1&sn=e322deb80e03f81553e55b9ba58f6730": "【漏洞复现】某天云智慧平台系统 Upload.ashx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247487493&idx=1&sn=b0e2be0473ff20ea340495be184064b6": "CVE-2024-7339:DVR 漏洞使超过 400000 台设备面临黑客攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0MTcyNDk4OA==&mid=2247483684&idx=1&sn=573e3f481bcdf83b45f64697c405a09e": "Panalog 日志审计系统 SQL 注入漏洞【XVE-2024-5232】", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247523258&idx=2&sn=468555d0ea7b19ea14f3ad6c2c4466b8": "干货 | vCenter 漏洞利用总结", "https://mp.weixin.qq.com/s?__biz=MzkwNzM5NDk4Mw==&mid=2247484272&idx=1&sn=83d7dd724948db7d2e8cec59c6fc4bbf": "Hvv姿势——0day拦截", "https://mp.weixin.qq.com/s?__biz=MzkzNjE5NjQ4Mw==&mid=2247539797&idx=2&sn=b5654e000666a5b242f693ac0ee0cfc9": "你真的不来吗?2024 V-Transform Expo 数字化转型先机!", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247484547&idx=1&sn=bbf30cce68075e9b4b1f6335776521ca": "info_scan 自动化漏洞扫描系统", "https://mp.weixin.qq.com/s?__biz=MzI3NzI4OTkyNw==&mid=2247489347&idx=1&sn=dea84fc81df6b06d42a22a8648d20162": "某系统漏洞挖掘小记", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247487206&idx=1&sn=d0cc310ad461ed8f1800f2c27e7f0b4b": "高效轻量的 Web 漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520334&idx=2&sn=db306ee3ac03c2a6708b7ae1cc72beaf&chksm=ea94a124dde32832c4479a4e205381dc87f02c98b62b21ceb6a18b70624d029f055e06ba57b2&scene=58&subscene=0": "【已复现】Apache OFBiz 授权不当致代码执行漏洞(CVE-2024-38856)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503017&idx=1&sn=913a9a9b91f4e22982b1c4ab50f19e31&chksm=f258585ac52fd14cfc9e21597ebac254db5b621a90325f316f23943957f6b6991697b0e3fd6c&scene=58&subscene=0": "雷神众测漏洞周报2024.07.29-2024.08.04", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495106&idx=1&sn=31f4659b7733a1c5712d0f6085e1faa0&chksm=fd74dd0bca03541db6d39e9e2e99f24bc42b817a1acd8004d769444e42b7dfcc203ad5361395&scene=58&subscene=0": "CNVD漏洞周报2024年第31期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495106&idx=2&sn=cdd2978970a9308518d332147a69da4f&chksm=fd74dd0bca03541d5951bda458e38c8728229b6904dfe5e5f5184b2a1603d2e6d87ce68135b6&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240729-20240804)", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247573253&idx=3&sn=616105bc7d29789ae0ad5103d688f43c&chksm=9f8d4f0da8fac61b443ba5af0ab8142a1f9cc625cdb7697e09741a474b374e9e6bfee24c2f69&scene=58&subscene=0": "弘扬数字时代青年力量,ISC.AI 2024漏洞生态与实战人才发展论坛召开", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484554&idx=3&sn=d1259f78998db698a6b79736086dd495": "满客宝智慧食堂管理系统selectUserByOrgId接口存在敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484554&idx=4&sn=d37aef8d75bf1642148f5729df50cc54": "世邦通信SPON IP网络对讲广播系统my_parser.php 接口处存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484554&idx=5&sn=6e897d1ac3e8d7954874a8b8d6086924": "世邦通信SPON IP网络对讲广播系统busyscreenshotpush.php 接口处存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484554&idx=6&sn=1d5d09470d0dde87a17e1c4183c7210c": "满客宝后台管理系统 downloadWebFile 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484554&idx=7&sn=2bb3d6b326603fef7d44b6bbe994d372": "Bazaar v1.4.3 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247485971&idx=3&sn=326b7975ff9b74492c0d0a53b7309e92": "某系统漏洞挖掘小记", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488657&idx=2&sn=aedeb3fd5d2019e24df5bd17409ef14c": "【漏洞通告】Apache OFBiz 存在代码注入漏洞CVE-2024-38856", "https://mp.weixin.qq.com/s?__biz=MzI5NzUyNzMzMQ==&mid=2247485259&idx=1&sn=3dc3ac4fcd1d45de58ff4c80a25e28ae": "nuclei-快速漏洞扫描器【安装&使用详解】", "https://mp.weixin.qq.com/s?__biz=MzkzNTI5NTgyMw==&mid=2247508330&idx=1&sn=8235d2f8f93a21b9cf7e86a45458c6f9": "防护验证通告|Apache OFBiz 未授权访问致代码执行漏洞(CVE-2024-38856)", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489596&idx=1&sn=088712cc6820d9d1e6bb11918ac7afbe": "Apache OFBiz ERP 中的新零日漏洞允许远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486486&idx=1&sn=8b10cffc7b881c6740a5a7bd01c6da08": "【漏洞预警】Roundcube Webmail跨站脚本漏洞(CVE-2024-42009、CVE-2024-42008)", "https://mp.weixin.qq.com/s?__biz=MzkyODY3NjkyNQ==&mid=2247484165&idx=1&sn=d22ff2d4b36cab1bcf3f84836d02fbb3": "某系统回显SSRF+文件上传0Day审计过程", "https://mp.weixin.qq.com/s?__biz=MzI4NTYwMzc5OQ==&mid=2247495054&idx=1&sn=67e31952625254e84cff96332af68731": "探索AI聊天机器人工作流程实现RCE", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489840&idx=1&sn=10930775301b0c13147e40485fa04915": "【8∕6特辑】今日热点漏洞请查收", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501805&idx=1&sn=9bcc8e467e9b2b3ad370addf609efdf6&chksm=fe79e375c90e6a63762884c5e2c7beba403382963943a0863d187156c4387989205bcd4c533d&scene=58&subscene=0": "Roundcube Webmail 多个XSS高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520345&idx=2&sn=e480c7108b41c03d874e5bd6bc1c39bf&chksm=ea94a133dde3282563f26f94c29d3b95b05a082b1c377d83aa2ef24ce6e26794bc98899319d7&scene=58&subscene=0": "谷歌修复已遭利用的安卓内核0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499267&idx=1&sn=fbbbfd3d9b20b890c3bdc0fca4d1b859&chksm=973acd61a04d44772f5d8f4b4ccf7c7dc1e2394f7b807dcf9b04a5e0087145a28b54ccae0f15&scene=58&subscene=0": "CNVD漏洞周报2024年第31期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499267&idx=2&sn=6505dc8ab16e9ab4e35591b635fa3ca4&chksm=973acd61a04d4477c2b19a5a4baea3f568b7c3ce0f3d4bfc7f611b1abfa59438f0901ca0daa0&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240729-20240804)", "https://mp.weixin.qq.com/s?__biz=MzIzOTAwNzc1OQ==&mid=2651137790&idx=1&sn=4d10871553e37b644ea579f8a345d243&chksm=f2c1279ec5b6ae8899508bfdec6c50c34125f363e71063cefe56c903baad12cd1cae05c173e2&scene=58&subscene=0": "演讲议题巡展 | 新视角关注Windows漏洞挖掘-从USB设备到操作系统内核", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247573263&idx=2&sn=64ebb12cee090271b870f6d43ca9e417&chksm=9f8d4f07a8fac6119571640149a3e634dae01424e38a2fa621b38725f4e78314a9b12737a466&scene=58&subscene=0": "连续11年亮相BlackHat大会,360发布重磅漏洞研究成果", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486491&idx=1&sn=8e7ba1b1dd3f1677b99186e956026c28": "【漏洞预警】Apache CloudStack 权限提升漏洞(CVE-2024-42062)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489862&idx=1&sn=823e02d728a99485f3746176125f3fb3": "【8∕7特辑】热点漏洞速递", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484476&idx=1&sn=96bbd0c3c49ea89d94fb89e6c29502de": "【漏洞实例】微软云服务漏洞云安全漏洞 Azure CSV 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485085&idx=1&sn=abd4d2d23dab5dd3549fcafc32fdd95a": "「漏洞复现」BladeX企业级开发平台 usual∕list SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247485607&idx=1&sn=7f76458feeafa84a2eb546c91f33c3ee": "【漏洞复现】Apache OFBiz系统存在ProgramExport命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247550626&idx=1&sn=b0ccf8821ca7fe2efe4b6dcf8d9d721c": "【漏洞速递】未授权RCE漏洞(附PoC)", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651452119&idx=1&sn=3975229f46108a60f2d7fe1c1b5d86df": "信息安全漏洞周报(2024年第32期 )", "https://mp.weixin.qq.com/s?__biz=Mzg5OTY2NjUxMw==&mid=2247512704&idx=2&sn=ddb68de8ec1314fcba5996cb5f62adb3": "实战| 一次host头中毒导致的逻辑漏洞(骚思路)", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247484826&idx=1&sn=b3b12db24559ef40edc87d8e20d4a47c": "解析YAML漏洞脚本,反向生成漏洞检索数据库", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247612171&idx=1&sn=a4a79689b008bc43644d4757eccc8c18": "通过Apple漏洞实现账户接管", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247512170&idx=1&sn=35fd9570933b69e317edcd7353b41a2b": "Apache OfBiz CVE-2024-32113和CVE-2024-36104 漏洞 POC", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247489502&idx=1&sn=1727cdeef2e6a21983f31f8a11240a1c": "Tenda Ac8v4 RCE漏洞挖掘与分析", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484853&idx=1&sn=d85600ba20a5e2d7f6a628cad46fc1c3": "HW2024汇总-8.6(漏洞数229)", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484853&idx=2&sn=7e9026e6620882a056d2ef5ce054f4f2": "漏洞复现| Apache OFBiz 授权不当致代码执行漏洞(CVE-2024-38856)", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650597826&idx=3&sn=a440d3351b3d955b7ff8d58670a438eb": "通过代码审计用友获取CNVD高危证书", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492114&idx=2&sn=8e07f39dc7fc380a8791274a94f1e453": "谷歌警告:Android内核漏洞正在被活跃攻击", "https://mp.weixin.qq.com/s?__biz=MzkyNDYwNTcyNA==&mid=2247486677&idx=1&sn=0f3b54ba1ad825b28c5cf0da243522a1": "【漏洞复现】鲸发卡系统 ∕pay∕xinhui∕request_post 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247494371&idx=1&sn=816b5ef5d549bb8a4f3345a7b508bf0d": "Hvv 日记 威胁情报 8.6 (漏洞、IP、样本)", "https://mp.weixin.qq.com/s?__biz=MzIzOTAwNzc1OQ==&mid=2651137817&idx=2&sn=fc86b6b219057f84c0450e71f9b51267&chksm=f2c12679c5b6af6ffa0e26717d1f5b36de1ea81c30dbf569569398511c95a28ce4e01ac19c27&scene=58&subscene=0": "招募漏洞猎手!OPPO、字节跳动企业专场激战正酣,大奖等你解锁!", "https://mp.weixin.qq.com/s?__biz=MzI1NDg4MTIxMw==&mid=2247486523&idx=1&sn=e8923691c0de788b457ee6bb036f01c3": "积木报表授权绕过漏洞缓解措施", "https://mp.weixin.qq.com/s?__biz=MzA4NzE5MzkzNA==&mid=2650359507&idx=1&sn=d83d114d3bc207852cc88f3b6e2a2e80": "【漏洞风险通告】Windows远程桌面授权服务远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzYzMTE5OA==&mid=2247484342&idx=1&sn=f14a55798bc700034e448099ff179641": "微软window RCE(CVE-2024-38077)漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzkyMTMxNjQ5NA==&mid=2247484682&idx=1&sn=d9bc1b37636295c267138d0a5a40963d": "【0day】SpringBlade系统usual接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495485&idx=1&sn=4d82d1b9bfa545c0306e83e61b159e47": "【实战分享】某系统任意密码修改漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247615668&idx=2&sn=9d3df637bb4e094962327f60d416a4cf": "安全风险通告|微软RDL服务远程代码执行漏洞(CVE-2024-38077)", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485804&idx=1&sn=e9837fc66c3e5b1eabf40876064695d6": "JS接口提取,漏洞检测工具 - 0x7eTeamTools", "https://mp.weixin.qq.com/s?__biz=Mzg5Mzg2MTc0OQ==&mid=2247484830&idx=1&sn=8f4178ec524da80ada575fda377e00c0": "核弹级漏洞预警微软超高危漏洞“桌面许可”波及全球远程桌面RCE CVE-2024-38077", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485104&idx=1&sn=19bc71eca0565fb775eafef63ba7869a": "「漏洞复现」Mtab书签导航程序 LinkStore∕getIcon SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495128&idx=1&sn=e0b1de34f683ef8b0168db0b41777f5d": "关于Windows远程桌面许可服务存在远程代码执行漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzkzOTIyMzYyMg==&mid=2247494170&idx=2&sn=dc4af16128f998e18240b706129fafb5": "弘扬数字时代青年力量,ISC.AI 2024漏洞生态与实战人才发展论坛召开", "https://mp.weixin.qq.com/s?__biz=MzIxODIzNzgwMw==&mid=2654070081&idx=1&sn=efd208a532488f91ff335cd4a6f8628f": "【公告】漏洞盒子服务器升级通知", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650849299&idx=1&sn=efbce6ff0ed4006ea736d7fc49fde2fb": "十年罕见的高危漏洞“狂躁许可”来袭:青藤THP快速发现、监控受影响资产", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063453&idx=1&sn=d73fd28af3fb74826ab6995bcbf8feb0": "【安全圈】微软超高危漏洞“狂躁许可”波及全球", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063453&idx=2&sn=61cd680b64106fa2783cac5fef974d80": "【安全圈】0.0.0.0 Day漏洞曝光,谷歌、Safari、火狐等主流浏览器面临威胁", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247520420&idx=1&sn=3eefd25d189aef74df81a9a9d31fc1da": "ThinkPHP框架漏洞解析", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247592&idx=1&sn=5f966a9ca828472e07dfb026b1d4add1": "QVD-2024-26473:Nacos Derby未授权RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650618249&idx=2&sn=09530f1f6d7d8014afde2f382dc4ea39": "微软超高危漏洞“狂躁许可”安全通告,亚信安全ForCloud快速响应处置", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489891&idx=1&sn=b6203807e44579ccce6ff5d790fb5912": "【已有检测工具】Windows RDL存在远程代码执行漏洞(CVE-2024-38077)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489891&idx=2&sn=a6533f75ecec6007996aa27e97bc5574": "【8∕9特辑】热点漏洞速递", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650276234&idx=1&sn=2f877192c0fb671f23d88958003d3a7c": "客观看,有序防,拒绝漏洞PUA", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247628855&idx=5&sn=f0e2a8d7144bd4bc967473fb4567abd2": "光伏电网曝出高危漏洞,可导致全球停电", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291467&idx=1&sn=57c6ad5c81f0ca6419ab2d1ec2c46f20": "高危漏洞通告|Windows 远程桌面授权服务存在远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5Mjg0NzA5Mw==&mid=2247492995&idx=1&sn=ed9829a0106455abf8fea39e1cc5a4e3": "高危漏洞预警|Windows远程桌面授权服务远程代码执行漏洞(CVE-2024-38077)", "https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247517401&idx=1&sn=8bcd65da316b44373397ec4ba89817bb": "Windows超高危漏洞“狂躁许可”实际利用全过程曝光!(附POC)", "https://mp.weixin.qq.com/s?__biz=Mzg4MjQ4MjM4OA==&mid=2247517401&idx=2&sn=93296e42c51981bd4d422f2a229d206c": "网安周讯 | Windows超级漏洞曝光!(八月第2期 )", "https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651388110&idx=1&sn=f85ab376dfe5e685ddd43813452f4af0": "首次揭秘!演练充电,长亭漏洞应急响应奉上「三大法宝」", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512361&idx=1&sn=bebd3a48b23e784bdbd3263b221d4f76": "微软2024财年发放了约1.2亿元漏洞赏金:平均每个漏洞8.6万元", "https://mp.weixin.qq.com/s?__biz=Mzg3MDkxMjEyNw==&mid=2247483955&idx=1&sn=53d371df8fdf0c1258051dd24dc2b99d": "高危警报:Windows 3389端口发现CVSS 9.8漏洞!", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247539383&idx=1&sn=1e316e036f94820d8211e625a202809e": "有漏洞?黑客可利用5G基带静默监视手机用户", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486613&idx=1&sn=5ea69a057b00c07747b9394c95904e75": "开机就能打?没那么玄乎!客观分析 “狂躁许可”漏洞(CVE-2024-38077)及其影响范围", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458567380&idx=1&sn=18d81c63ed1044e4ad9f30e080f0ac7b": "Linux 内核重大安全漏洞曝光!indler 漏洞威胁数亿计算机系统", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458567380&idx=2&sn=8c1990606b262264742a8e0832a17687": "存在近30年的零点击RCE漏洞,所有Windows服务器都可能受害", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458567380&idx=4&sn=6c820f7b6e1e1ab3eb2134ebefd14d17": "新课已完结!零基础入门Android漏洞挖掘-入门篇", "https://mp.weixin.qq.com/s?__biz=Mzk0NzE4MDE2NA==&mid=2247487855&idx=1&sn=3e6217b04654fe9f86c4d47a56cc1e2e": "“狂躁许可”全球来袭,0-Click RCE", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520401&idx=1&sn=fcb5f892311d2858672c9908d0e08554&chksm=ea94a1fbdde328edf70f4fe9cfcbc9004bf69c75392d0814b2f4ff08e6699e5ec07b0e81730a&scene=58&subscene=0": "0.0.0.0 Day漏洞已存在18年,影响 MacOS和Linux设备", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520401&idx=2&sn=bad61fd4a7dd0064d773564100fa0d93&chksm=ea94a1fbdde328ed9792a7787f0942bd8375dfb3d8e89c5d0413c4d48ad449acff958b59a1b2&scene=58&subscene=0": "思科:注意这些已达生命周期IP电话中的RCE 0day", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486348&idx=1&sn=4b875127b201db45d02a8f7fd30fb8aa&chksm=ec6fec8cdb18659aab20bf74432b9411dde10ccaa2d8d27a27499abbe2abfb232c125c38bc76&scene=58&subscene=0": "Windows 远程桌面授权服务远程代码执行漏洞(CVE-2024-38077)", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492629&idx=1&sn=fb88510cbd04a8c42b260aaadda2e2c8&chksm=96f7fb78a180726eb89e28826edb49a89370e948239ba7bf962b81ee019a9380e53914eb894c&scene=58&subscene=0": "【风险提示】Windows 远程桌面授权服务远程代码执行漏洞(CVE-2024-38077)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501832&idx=1&sn=3777c56170133c5fb3590a70ef2051e1&chksm=fe79ec90c90e658626b710f3ca4b9923ce7c57fe2fe813482b744a9ac5c8d430cb6ce8d19ed8&scene=58&subscene=0": "【POC已发现,立即打补丁】微软RDL服务极危远程代码执行漏洞(CVE-2024-38077)", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496654&idx=1&sn=c5c34d08fc0854fbc917b591cdaf263c&chksm=ce96bef0f9e137e6e2b3de72b68f7320a54b2215b6a145cff73440eded94437f2573ba35edbd&scene=58&subscene=0": "【风险提示】天融信关于Windows 远程桌面许可服务远程代码执行漏洞(CVE-2024-38077)的风险提示", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650956847&idx=1&sn=6ef3edbbb5162f4ee436f69b6eaf324b": "SpringBoot 漏洞扫描利用工具(8月7日更新)", "https://mp.weixin.qq.com/s?__biz=MzkyMTMxNjQ5NA==&mid=2247484688&idx=1&sn=1fa7d0094ff430248a7052ff7e06af5e": "【0day】用友U8 CRM import.php文件上传致RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492597&idx=1&sn=38060ceba7e34896970d343651ab366b": "漏洞复现 || Apache OFBiz代码执行(CVE-2024-38856)", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247494399&idx=1&sn=32e6fd1dc25922b9d78f25603d5b5582": "Hvv 日记 威胁情报 8.9 (0day Windows 远程桌面远程代码执行 CVE-2024-38077)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495493&idx=1&sn=d7f020920c94600cbf7bf7eaa6979657": "由sqli所引起的RCE", "https://mp.weixin.qq.com/s?__biz=MzkwODY2MzMyMA==&mid=2247484049&idx=1&sn=84130ad3d326c9bda0b245dda5579435": "SSRF到本地文件包含,再到RCE - Include", "https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247486481&idx=1&sn=bf1d2ead48ef7adb0c4cad509a0ecb61": "Spring Boot Actuator信息泄露漏洞三种利用方式总结", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492464&idx=1&sn=80a734dc724e1163618c1a1efd083b62": "某企业网络设备远程命令执行", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063469&idx=2&sn=761374073d1c4cc7b0aac0c05f7eba9f": "【安全圈】5G 基带安全堡垒被突破,黑客可利用漏洞静默监视手机用户", "https://mp.weixin.qq.com/s?__biz=MzkyMjYxMDM4MA==&mid=2247484037&idx=1&sn=96b0950d7b0b48e1784340e0fed39b8c": "漏洞响应(CVE-2024-38077)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651297865&idx=1&sn=de1e594bd72559592983037e63285d14": "微软超高危漏洞「狂躁许可」波及全球?", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484098&idx=1&sn=3d39fda02a605542ba11c135d2e6e4ed": "微软RDL远程代码执行(RCE)漏洞(CVE-2024-38077)修复手册(SOP)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489904&idx=1&sn=36d1f0275a2f8ce53f3c076b22a7ec11": "【已复现,尽快排查修复】Windows RDL存在远程代码执行漏洞(CVE-2024-38077)", "https://mp.weixin.qq.com/s?__biz=Mzg3MDkxMjEyNw==&mid=2247483966&idx=1&sn=d9a33cd4f39229b161d4fe9d79da6f06": "0day-亿赛通电子文档安全管理系统SQL注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247512276&idx=2&sn=454b2f64b6be47ee6a3bcda68dcc1f54": "受到攻击:发现可导致 RCE 和 LPE 的 OpenVPN 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501882&idx=1&sn=660d306b48b28c05d58892ce2a5252eb": "【已复现】微软RDL服务远程代码执行漏洞(CVE-2024-38077)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247487882&idx=1&sn=5f87e3309fe17625d9b20e1cec76cef3": "专家发现AWS存在 RCE、数据窃取和全服务接管的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247487882&idx=2&sn=006a5e352ef397fcbab4c36aed18ead3": "OpenVPN存在RCE 和 LPE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247487882&idx=3&sn=2dff1ac217869f6f136f5906c0caa9dc": "CVE-2024-38200 微软披露 Office 2016及更高版本 0day,仍在开发补丁中", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247561593&idx=1&sn=06e4981eb9eafc45d1b8fb6a10e3be09": "Windows高危零点击漏洞风暴来袭!附POC", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247542529&idx=1&sn=845b251ddd056d981bbf3057403490ee": "针对thinkphp站点的漏洞挖掘和经验分享", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247507418&idx=1&sn=da776c2f8240abafa5a269743b0deeec": "Windows高危漏洞来袭?已有补丁不需惊慌!", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651297865&idx=4&sn=515beed154dab3442c718328b4a41522": "VulnNodeApp:一款包含大量安全漏洞的Node.js安全练习平台", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485549&idx=1&sn=b9e3eafbbbfa1c660e98e35d2aabcb14": "CVE-2024-38077|Windows 远程桌面授权服务(RDL)远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485549&idx=2&sn=bd0fed193fad260b6fb53993cc21a43c": "CVE-2024-42009|Roundcube Webmail跨站脚本漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485549&idx=3&sn=1007dc8c5a197645420e8126a154ccc6": "CVE-2024-42005|Django SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664711849&idx=1&sn=45fb52a23b9a523339e19196717fc91d": "来事了——微软RDL服务远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523548&idx=1&sn=c149459c0442ce7a37100add75a54a21": "【漏洞通告】Windows远程桌面授权服务远程代码执行漏洞(CVE-2024-38077)", "https://mp.weixin.qq.com/s?__biz=Mzg3MTY3NzUwMQ==&mid=2247489502&idx=1&sn=f278870a53f6115fe21e4f932748156e": "微软Windows 远程桌面许可服务RCE漏洞(CVE-2024-38077)的相关说明", "https://mp.weixin.qq.com/s?__biz=MzUyMDM0OTY5NA==&mid=2247485017&idx=1&sn=8629da1a7c1cc5b6d48dd6e81e1f0329": "详解:L4LB四层负载均衡IP伪造漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486590&idx=1&sn=138cdb6c3c735d46a80e99523d5a5c27": "【漏洞预警】用友U8 Cloud SQL注入漏洞(CNVD-2024-33023)", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492469&idx=1&sn=dfabe7524dc1ee589621d02cddb50ecd": "某路由器远程命令执行", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063486&idx=2&sn=94b64db3663bb7d45fd9bf9fc70146ec": "【安全圈】研究人员发现新的Linux内核漏洞利用技术“SLUBStick”", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650956903&idx=1&sn=9ec151c44664cb430d8ffbf6ebc97bc7": "快捷搜索PoC、一键运行Nuclei工具", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458567422&idx=2&sn=87af595a7cbae8921af01dc2655bac9a": "系统0day安全-二进制漏洞攻防(第3期)", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247498664&idx=1&sn=9f47846b5fd9c9e4dcc3f3ba19f2df61": "如何为漏洞赏金猎人找到您的第一个漏洞(分步指南)", "https://mp.weixin.qq.com/s?__biz=Mzg3NTk4MzY0MA==&mid=2247486813&idx=1&sn=551a2548c9d75f426e63383634003b0e": "Rce!Apache OFBiz代码执行(CVE-2024-38856)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247485816&idx=1&sn=93b5ed31a27e922e9854ba21564f2bfc": "【漏洞复现】某赛通电子文档安全管理系统 SecretKeyService SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjQwOTc4MQ==&mid=2247489580&idx=1&sn=e5ce1687bb3c88fce4a87f0d26ab34ef": "攻防演练实战:如何快速应对0day漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247486057&idx=1&sn=0088a3eccf2728533c493853437acb71": "漏洞挖掘|某次SRC引起的连锁漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489614&idx=1&sn=c1316392616337c673ca9cd1c7b35736": "FreeBSD 针对高严重性 OpenSSH 漏洞发布紧急补丁", "https://mp.weixin.qq.com/s?__biz=MzkzOTY1MzcyOQ==&mid=2247488921&idx=1&sn=d0c215ae2162563e656d91439b206a50": "记某src通过越权拿下高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzOTI2NjUyNA==&mid=2247484658&idx=1&sn=47dc535885c64c8fd94cd36db5d55994": "[企业安全运维]大华-DDS数字监控系统-现新漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650956997&idx=1&sn=a90b0b61aa6791de0234bc5ad7b36c12": "漏洞扫描工具 -- vulcat", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247514481&idx=1&sn=5d7d2a279aa46abe4d3ba679819334cb": "【总结】设备漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247486093&idx=1&sn=c65bc00be82366648a8f3997c8b36487": "H3C IMC 最新三个远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492476&idx=1&sn=790e86c862a9a8aac7035f5536d3acf3": "某网络监控设备远程命令执行", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490778&idx=1&sn=5a612744a9b910cc8ca9df0459f8409a": "CVE-2023-1713 Bitrix24远程命令执行漏洞分析(RCE)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651297941&idx=2&sn=eb72dfd6e649e1da6af96ad8bec264c7": "AWS多项服务存在漏洞,能让攻击者完全控制账户", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651297941&idx=3&sn=e50cc9b6ba31e2571dc88e53642823a7": "微软披露Office最新零日漏洞,可能导致数据泄露", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063504&idx=4&sn=ef34907a0f051967ee97afdd7658e099": "【安全圈】科沃斯扫地机器人被曝安全漏洞,可利用摄像头和麦克风监视主人", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247615783&idx=1&sn=0aba30eb0899dc3644e69c1363f81c76": "奇安信《软件供应链安全报告》:七成国产软件有超危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291477&idx=1&sn=c2e052e86c8c083316eb832b0a4e325f": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546308&idx=3&sn=fe6fa5beb3f182063903df58f3171ce3": "降级攻击可“复活”数以千计的Windows漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247520451&idx=1&sn=f6428f0783a5c98a89dd8f149ea4c9bf": "Nacos rce-0day漏洞复现(nacos 2.3.2)", "https://mp.weixin.qq.com/s?__biz=MzU0MDcyMTMxOQ==&mid=2247487708&idx=1&sn=cd5dd5acf5c37615c972d5742a0818f8": "「推安早报」0812 | bh议题节选、红蓝工具、漏洞情报", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499787&idx=2&sn=b6ec2def156bbc4b14217b94096162a8": "【漏洞通告】FreeBSD OpenSSH远程代码执行漏洞(CVE-2024-7589)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495149&idx=1&sn=0fb019db73c6b117a502011e95b3099e": "CNVD漏洞周报2024年第32期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495149&idx=2&sn=84183e6a7dbba10ce11ec15106abac77": "上周关注度较高的产品安全漏洞(20240805-20240811)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501899&idx=1&sn=4f517ea335c158c922a944ca713d340b": "安全热点周报:本周新增两个在野利用漏洞,系统安全不容小觑", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651131511&idx=1&sn=6e786f73d7018451546c14ed82806bee&chksm=bd15bea48a6237b27b9f2a48e628bfe61c16ab6e4fc1f40f99b3403d02e27528ad0c3aa226c3&scene=58&subscene=0": "《联合国打击网络犯罪公约》将提交联大表决,我国发挥关键作用;韩国“伪猎者”APT组织利用国产化软件漏洞对我国进行网络攻击 |牛览", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503026&idx=1&sn=6c3d99b8831cee16a63f2f6636703868&chksm=f2585841c52fd1577bee5bf73a2afd20663654296bb0ac2a499a8817ba226206a92e0ab219b3&scene=58&subscene=0": "雷神众测漏洞周报2024.08.05-2024.08.11", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520483&idx=1&sn=88f4a392cdd026b85ddfa12a4faa8746&chksm=ea94a189dde3289ffa6b70b463e67d3cc6da669d3540403f5551f944351a8b435d3b9e32a029&scene=58&subscene=0": "奇安信《软件供应链安全报告》:七成国产软件有超危漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMDEyNTkwNA==&mid=2247496709&idx=1&sn=0629689057d2e4c43b1adf59fb75f46a&chksm=f9ed98bace9a11ac90ea8546f8ea195805876b1f70075a6fa776e7e0a238d5d0db08f708a755&scene=58&subscene=0": "韩国“伪猎者”APT组织利用多款国产化软件漏洞对中国的攻击活动", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545319&idx=3&sn=2db209002ce8351f85f3f4498b2c3b94&chksm=c1e9bdb6f69e34a02ff1e6915bc76b81a03bc6a87ee10fb8a31647c9bdc31dc64cec1ae67a77&scene=58&subscene=0": "思科预警,旧版IP电话存在严重RCE零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247577477&idx=1&sn=935cc5568627cabe26b2c92049b17c38&chksm=e9147fbfde63f6a99cb1716fc7a3591966af701b71ca0e85709f05f937548d7ea8f88d42a7cb&scene=58&subscene=0": "自 2018 年以来,Windows 智能应用控制和 SmartScreen 绕过技术一直存在漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247577477&idx=3&sn=039be99df83f40baf931ebc8299400a1&chksm=e9147fbfde63f6a9536b278643a8066f62b35ef8ff25d2a3f1b47e6a88bc859e9b762302c346&scene=58&subscene=0": "安全动态回顾 | 谷歌修复了针对性攻击中利用的Android内核零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247574033&idx=1&sn=16774451704a9aa5bc2a23d178d5a43b": "微软超高危漏洞“狂躁许可”来袭!360终端安全轻松“拿捏”", "https://mp.weixin.qq.com/s?__biz=MzkxNjY0NDM3OA==&mid=2247484090&idx=1&sn=b616a5adf16aa3c5f9d1e1a02fb4e894": "第十三课-系统学习代码审计:业务逻辑漏洞--URL跳转", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485143&idx=1&sn=afaae5bb90579f735bf7283622fb5822": "「漏洞复现」用友U8 Cloud BusinessRefAction SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486595&idx=1&sn=1cef7a19a3ce6b3999e861298376dc54": "【漏洞预警】Microsoft Windows CLFS.sys拒绝服务漏洞(CVE-2024-6768)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495508&idx=1&sn=edbeefeaedc92073a826f5fd5f5c84be": "SRC实战:指纹识别->代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg3MTU1MTQ0MA==&mid=2247484735&idx=1&sn=dd6cd5cb820b61d8c4571ca21dca8308": "Apache Tomcat请求走私漏洞POC(CVE-2024-21733)", "https://mp.weixin.qq.com/s?__biz=MzkwOTUyODE5Mg==&mid=2247485086&idx=4&sn=f3bc9b75d76d6fc472d2e08281d49f08": "湾Snews | 微软发现了OpenVPN中存在可能引发远程代码执行(RCE)和本地权限提升(LPE)的安全问题", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651298172&idx=3&sn=88069f898bf2efd747761976177962db": "FreeBSD 针对OpenSSH 高危漏洞发布紧急补丁", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650980808&idx=1&sn=236c94b01cd05a39e5d4d3cdd3d09b40&chksm=807983fab70e0aec55349c9968ad70b9beeaf3307b81142c146f3058c9ae4619fbe0905dcf51&scene=58&subscene=0": "原创 Paper | Tenda-FH1201 多处命令注入漏洞分析和复现", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458567868&idx=3&sn=51ce082542dbdca604ce20649716b717&chksm=b18df43686fa7d2058d94efe033112bff67b0ad59fc9f336fadbada60dd176fdb2adde9e22f9&scene=58&subscene=0": "密码可被窃取,1Password 用户需立即更新以修复重大安全漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458567868&idx=4&sn=9e21aaac3d642bad0c74159ddd48a57b&chksm=b18df43686fa7d20ce6e5910b944a08e97b910ed415610bc44be1ecd4d02ef4ee99a7256715a&scene=58&subscene=0": "最新!0day windows 课程更新5节", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512388&idx=2&sn=01588a4f77a95262b958dac7437a63d4&chksm=ebfaf664dc8d7f720646b3beadea3825169689330e392ee3ba77cb47d333e5d2353f9fdaa1cb&scene=58&subscene=0": "美国拟立法推动联邦政府网络安全漏洞全面消减工程", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545333&idx=3&sn=aeb6d7bb499cb9e7875eed7b2ebe2e00&chksm=c1e9bda4f69e34b2f9e2acf8bf5c86c0928ad8ddc68ab52a3afdf27cd993722049424991b40e&scene=58&subscene=0": "微软披露Office最新零日漏洞,可能导致数据泄露", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499278&idx=1&sn=f36976890c5c22673be9a26f2527e990&chksm=973acd6ca04d447a22e751dafbd60dfd4b106311c14dbeb8adc594f42074d31be269a138289f&scene=58&subscene=0": "CNVD漏洞周报2024年第32期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499278&idx=2&sn=7e03628749308268cbc72b52078297c3&chksm=973acd6ca04d447a5454f6b7f6a4b0d59068dd7f2c3aaa7ffc6b0b05b0f870ea1d47b0da92a6&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240805-20240811)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499278&idx=3&sn=6d0f73c13496b2ad82bb5ca604dcde80&chksm=973acd6ca04d447a4717fdd92efb2e12917a3fb533aff080704abf7c1a2441891a1e2c720596&scene=58&subscene=0": "关于Windows远程桌面许可服务存在远程代码执行漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546359&idx=2&sn=df3daa0069b98945b731490f87c06a82&chksm=fa938336cde40a20d0d0227fa9167dd34ce4b5204443400cbb5e84ba4d3c5a553d221fd62c13&scene=58&subscene=0": "扫地机器人变身间谍!扫地机和割草机爆出严重安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546359&idx=3&sn=eabda756bf27488246302c177126100a&chksm=fa938336cde40a20f1c467e5205fb76f11dfc8ad9c9e4412d7267a4aa04d0abf9e2e20a5f1e2&scene=58&subscene=0": "自 2018 年以来,Windows 智能应用控制和 SmartScreen 绕过技术一直存在漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651298484&idx=3&sn=aa962ba4688993711bf27e6c9224b1bf": "Microsoft Azure Health曝出严重漏洞,可能导致横向移动", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489946&idx=1&sn=55520f929bc7d3412e62405f1e16aa6b": "【风险通告】Windows TCP∕IP 存在远程代码执行漏洞(CVE-2024-38063)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489946&idx=2&sn=9bac40b11aac8b49d77518fb508fb37c": "【8∕15特辑】今日热点漏洞新鲜出炉", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650259634&idx=1&sn=0b1a9a07b5f2562992ab5d7498c09039": "Apache CVE-2023-25690 漏洞手动调试分析", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664222576&idx=1&sn=82dc2fc02da277149526454105643179": "聚焦 | 国家信息安全漏洞库漏洞技术研究联盟正式成立——强化漏洞治理生态,共筑网络安全防线", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247486921&idx=1&sn=ff0f7144ec40e567aae3df9fc455890d": "漏洞预警 | Windows TCP∕IP 远程代码执行CVE-2024-38063", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651453076&idx=3&sn=1c2267a9693b8a8138b2eba214692903": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458568320&idx=1&sn=434a0d45e0f50895b547dd72d30e0ec0": "Vigor3900 CVE-2021-43118 命令注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458568320&idx=3&sn=59b48dd6be50ab875dec6ef6f0247f21": "允许攻击者访问本地服务,影响所有主流浏览器的“0.0.0.0 Day”漏洞已存在18年之久", "https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247519258&idx=1&sn=2cf24d89b3c255c2851c57f860fc2b28": "Windows TCP∕IP RCE漏洞曝光,影响所有启用IPv6的系统", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650618308&idx=2&sn=7a6eeac78f1c44617ae6d59b8ee07846": "【已复现】Zabbix远程执行代码漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650957250&idx=1&sn=05a3e71d4e6e1969a216175b76d34530": "一款多功能的信息收集工具|备案查询|敏感信息收集|HW漏洞威胁情报", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247489389&idx=1&sn=48f7acc8958b4a368c090764f2a1ec24": "创宇安全智脑 | Windows 远程桌面授权服务远程代码执行(CVE-2024-38077)等66个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484921&idx=2&sn=7513db3aa9bb0774165abd120f697713": "漏洞通告| Windows TCP∕IP 远程代码执行漏洞CVE-2024-38063", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499812&idx=2&sn=c8503b439e8a54a02b0a71686f055bfe": "【漏洞通告】Magento Open Source文件上传远程代码执行漏洞(CVE-2024-39397)", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247484885&idx=2&sn=cc7aac2d8ec03f52aefe98c413b7c863": "【漏洞预警】CVE-2024-38063:Windows TCP∕IP 远程执行代码漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTMxNjQ5NA==&mid=2247484706&idx=1&sn=98c3bd901b7160a6b2a79cd74a9946a2": "Bazaar v1.4.3 swaggerui 接口任意文件读取漏洞(CVE-2024-40348)", "https://mp.weixin.qq.com/s?__biz=Mzg3MDkxMjEyNw==&mid=2247483972&idx=1&sn=f81067d7b7a218c361f56c0a03dab449": "【漏洞预警】CVE-2024-38063 Windows TCP∕IP 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNjQxOTk1Mg==&mid=2247485944&idx=1&sn=fb8efea54fb3a9d1b8f31f3181260288": "美国拟立法加强联邦网络安全措施并实施强制性漏洞披露政策", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647689820&idx=1&sn=03315df159fecf631f1640c21efc3af0": "HTB靶场 Resource (Linux)[Medium]", "https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247489679&idx=1&sn=7afe9f1fd533070230fd9cf3a2bfaed1&chksm=fad4c598cda34c8ee9471ae8a052325752f4e15de96a19764229b57e366ed176ea55608881b0&scene=58&subscene=0": "谈谈 Windows Redis 高版本 RCE 及 重要提示", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546452&idx=1&sn=541681f933c582b66e8545b9c213e326&chksm=fa938095cde40983140ed87241e7d4c5589a689e7d7c3af7b7d7b7690c3e94acfe6cd8113c22&scene=58&subscene=0": "基于虚拟化的固件蓝牙协议漏洞挖掘框架设计", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546452&idx=2&sn=ad4dc560dfb13c43ce8759c177038dc7&chksm=fa938095cde409834902598ce6539132711347d62e5e4dec10c3ad4bfc8372945241d543999b&scene=58&subscene=0": "荷兰黑客挖出了太阳能系统中的关键漏洞,成功利用可危及欧洲电网", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546452&idx=3&sn=9bfff01554c90d3f5b8ffdc01dc133a2&chksm=fa938095cde409836c7514d175aaa78dfd397150b7ec1615b07bae900fb128468b9d9dd6742c&scene=58&subscene=0": "严重的SAP漏洞可让攻击者绕过身份验证破坏企业系统", "https://mp.weixin.qq.com/s?__biz=Mzg4OTI0MDk5MQ==&mid=2247492271&idx=1&sn=586b7f695754a785037e6b592ff16aea": "快排CMS1.2文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247488194&idx=7&sn=bcfaf331f2f9a7c7ddf20928fd623260": "Flatpak 中发现严重漏洞:CVE-2024-42472 (CVSS 10) 导致文件暴露在沙盒之外", "https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247487551&idx=2&sn=47014121a42ee4435ec1e9997af8ce4a": "据称 EduSports 存在漏洞,泄露了 70K 行数据", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247512438&idx=2&sn=5685bf5bf9692dc3a287ba7a21ef8bf8": "CVE-2024-38213:Copy2Pwn 漏洞可规避 Windows Web 保护", "https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651141171&idx=1&sn=66f61359150558e0f64a6fce7ef9c39f": "2023腾讯游戏安全PC决赛复现", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247500235&idx=2&sn=826d0383e047e46d0d30c200889fe077": "自行车无线变速器曝出漏洞,黑客可操纵比赛结果", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247486076&idx=1&sn=5c5616fb7c16e18fd5caff5a00e17c75": "【漏洞复现】某时空社会化商业ERP系统 user∕online 身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650598441&idx=3&sn=a476f7d5a8051ace3eab75f6fc37c68d": "【总结】设备漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzkxMjMwNTEwMg==&mid=2247486232&idx=1&sn=2de4a2d0f4bdc0fbff11443f8c2555a6": "exploit_db漏洞复现&分析1_CVE-2024-40110", "https://mp.weixin.qq.com/s?__biz=MzIyMTg0MTE3MA==&mid=2247487244&idx=1&sn=9b79c5b4ce03bf91ed1dde37a832785c": "微软2024年8月发布补丁,解决88个CVE漏洞问题", "https://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655347022&idx=1&sn=f68cc72cfe2cc76d9f1983dae65e8959": "微软AI医疗机器人发现严重漏洞,可能泄露隐私", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247494489&idx=1&sn=4a97973839172a2c0aa30f8b45d3fce4": "​Hvv 日记 威胁情报 8.15 Windows TCPIP 远程执行代码漏洞(CVE-2024-38063)", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247487280&idx=1&sn=5dc1b7f2e33984d523fc5a61daeb170d": "miscan!简单好用的漏洞管理工具", "https://mp.weixin.qq.com/s?__biz=MzkzOTI2NjUyNA==&mid=2247484713&idx=1&sn=234c3686e5e6cd33c5f3f8cb81de28eb": "Windows本地提权漏洞 CVE-2024-21338", "https://mp.weixin.qq.com/s?__biz=MzkyNDYwNTcyNA==&mid=2247486828&idx=1&sn=3a8f27ebf5bbc45d7df6e45187429885": "【漏洞复现】Web user login存在RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490142&idx=1&sn=3dcaa7deecdd338c188c048b3b4ab0aa": "漏洞预警 | Zabbix代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490142&idx=2&sn=5d2bc952fa0de6941790cce5c58e234a": "漏洞预警 | PostgreSQL竞争条件漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490142&idx=3&sn=1d32f6690b105b65a77bc2ceb91396bd": "漏洞预警 | 亿赛通电子文档安全管理系统反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247484967&idx=1&sn=1bae927d84677fbb4f7e2a9e6ba490bf": "【资源推荐】收集所有命令执行技巧的靶场(更新中) | 本文附一些网络安全学习资源", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247515697&idx=1&sn=37169f9951565dc9937a2a736c5efde3": "SonicWallSMA100将XSS存储到RCE", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513893&idx=1&sn=1a01f1df6ecce283157f8f7096c8e950": "第二十四天 -- 反序列化漏洞与vulhub靶场搭建", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501938&idx=1&sn=d0ffecf00a33d91609cea098c7d70a9f&chksm=fe79eceac90e65fc7a71b961d6d526d1e00a06cd9940fde42fde602b4626bc5209d64573394b&scene=58&subscene=0": "【利用场景更新】Windows TCP∕IP IPv6远程拒绝服务∕代码执行漏洞(CVE-2024-38063)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520507&idx=1&sn=e6e47b92dd8197ca7619e46204cd615d&chksm=ea94a191dde3288755f5a94855a167362c77297344a3a5d57101da16165db6ba956165bc24d8&scene=58&subscene=0": "【利用场景更新】Windows TCP∕IP IPv6远程拒绝服务∕代码执行漏洞(CVE-2024-38063)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664222633&idx=3&sn=a749180d86722bdba5b2316c3e52adb4&chksm=8b59cd50bc2e4446c80dc983beaada568e4288c898f75e3f22cf171b1793e65054cbf5945fbc&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546480&idx=2&sn=429d11d6b0114a07acaa351b2f01e153&chksm=fa9380b1cde409a7c4fe600f34d4baaf8ae0da3da85d7f1470ce43194ca2549eac0db818971e&scene=58&subscene=0": "微软AI医疗机器人发现严重漏洞,可能泄露隐私", "https://mp.weixin.qq.com/s?__biz=MzkxMTI4MDI3NQ==&mid=2247484236&idx=1&sn=c700e235c4f64b800265d21b1bc58500": "CVE-2024-41660: 一个OpenBMC高危漏洞利用", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492547&idx=1&sn=ab4aad38f36418ed4e4007c059dfb3b1": "某防火墙命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063663&idx=2&sn=d6a0838353577d942d09c5ac068979da": "【安全圈】针对 Ivanti vTM 关键漏洞的 PoC 攻击代码已发布", "https://mp.weixin.qq.com/s?__biz=MzkxMTQyNDM5MQ==&mid=2247483947&idx=1&sn=26ac8ded821b8463cb4581c8ee4b71de": "【工具推荐】Goby红队版工具分享,附2024年漏洞POC下载", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247562309&idx=2&sn=2a4881d9574f7db00b40c8204e281dfa": "功能最全的Nacos 命令执行、内存马注入等利用工具", "https://mp.weixin.qq.com/s?__biz=MzkxNDU0MTUyNw==&mid=2247489846&idx=1&sn=84be6201df65cc9c66a946f2cbb3bae8": "挖漏洞经验分享,挖漏洞赚取生活费,7天收益近2200,教你从零基础挖漏洞的正确姿势!", "https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166172&idx=2&sn=6a84004789e9d4abe8db7b6ab6017e17": "微软警告六个Windows零日漏洞正在被积极利用", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247488251&idx=3&sn=9dfaf34b92f10dac3b869c1b69346012": "预装应用漏洞导致数百万Google Pixel 手机用户面临风险", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247488251&idx=4&sn=7374a0b8c4438ac9ae8746e2cf6f00f8": "0day Copy2Pwn CVE-2024-38213 可绕过 Windows 安全防护", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247488251&idx=5&sn=0f9631b13b842f7608bd09100ab77c3e": "Project Zero:我们需要所有人共同努力来终结0day时代", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247629084&idx=4&sn=fea4d000d8f1b6006795e81fc06c76aa": "Windows TCP∕IP RCE漏洞曝光,影响所有启用IPv6的系统", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247486331&idx=1&sn=5c67337d837d79bf8107d0606dbc1515": "【1day | 漏洞复现】某在线团队协作工具存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NDU5NTc4OA==&mid=2247484157&idx=1&sn=dbe66de5a3565b5514ad9f7139880166": "【代码审计】某系统存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650849361&idx=1&sn=08dde19387bf183649e8ee32e52153fa": "青藤RASP再显神威:捕获电子公文系统0day", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247512474&idx=3&sn=6f48fc00a8d1a2828185c5d3139bcfbb": "通过浏览器扩展中的链接消息实现通用代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650612868&idx=1&sn=0a258c6a1ac1f79d182caac480504a91": "喜讯|安恒信息成为国家信息安全漏洞库漏洞技术研究联盟创始成员单位", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490160&idx=1&sn=82a5a49afb418c5b2cbf7f111e325406": "漏洞预警 | 用友U8Cloud反序列化和SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490160&idx=2&sn=3c80f3c39b0405305131ab41ecb0710d": "漏洞预警 | 福建科立讯指挥调度管理平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490160&idx=3&sn=318a74a08b1a5017d1a49f2260360356": "漏洞预警 | 中成科信票务管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247515709&idx=1&sn=59db911ed2d846bcad68279346c33e7f": "Sonatype Nexus Repository3 任意文件下载漏洞(CVE-2024-4956)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247496710&idx=2&sn=8f3c24fc4cafc7a91cc5e49887bba8cf": "微软2024年8月份于周二补丁日针对90个漏洞发布安全补丁", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650259653&idx=1&sn=5fa681968c3fcef089a7b58d304a9069": "hackerone上TOP5的开放重定向漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247513907&idx=2&sn=ee1de87ba18d21189ea3b3c63e3c9bd2": "第二十四天 -- 越权与逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247498492&idx=5&sn=689d612c25afc31aa562275fab88e29f": "人工智能可以发现基础设施软件中的漏洞吗?", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247486630&idx=1&sn=1b5861f84be010f696e5220c14dfaabb": "Redis未授权访问利用RCE脚本", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247491992&idx=1&sn=834e5cd47b8c2e754f080b5e2635d122": "织梦全版本漏洞扫描", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492553&idx=1&sn=19f41fae628d3c1232f17bd3c16558d8": "某网关配置管理系统存在漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247498883&idx=1&sn=c80fde2b5bc009353ee2d6370255c051": "漏洞和攻击模拟 – 产品比较", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490798&idx=1&sn=82482d8342e46c8e07a74cd67eb060ce": "某微商城系统RCE漏洞审计", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485190&idx=1&sn=72b273910c65d5453093d9f351fc1127": "「漏洞复现」智联云采 SRM2.0 runtimeLog∕download 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650598473&idx=2&sn=d1f7ae4c01353c07e56e2f6669da4f4f": "自行车无线变速器曝出漏洞,黑客可操纵比赛结果", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247487295&idx=1&sn=a648d6d464abe5584119d934d1a4e7df": "推荐个POC库", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650618366&idx=1&sn=9dcb63cd5988767a522c778d0734317e": "涉及办公环境安全!某微e-cology远程代码执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546519&idx=1&sn=4a12fb581996141b09e2dcc788a77f52": "新的 Webkit 漏洞可让攻击者利用 PS4 和 PS5 游戏机发起攻击", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512435&idx=1&sn=a313f2e1e863f7446edeb31e3789b915&chksm=ebfaf653dc8d7f45a3f94e1e50093e90e4dfe9b36a8d76187af3e10780c7ada79fdd76647510&scene=58&subscene=0": "印度国家支付系统部分中断:因供应商高风险漏洞迟迟不修后被黑", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520531&idx=1&sn=3711327c08007954c754b1a665f4b963&chksm=ea94a079dde3296fb3e16aed65fdb526227e260cd11c96212ca1fd8bbde8380e989c2c1c2f57&scene=58&subscene=0": "F5修复BIG-IP 和 NGINX Plus 中的多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247501046&idx=1&sn=7ecaa11fdcf5403a5db9a4e60500617f&chksm=cfc563a9f8b2eabf6d8af91033486020de2743e64b17315111c962195d01a79e6d2951b07b1b&scene=58&subscene=0": "“源”聚创新力量,“洞”见安全未来:360漏洞云亮相GOGC,共促开源漏洞安全发展", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545423&idx=2&sn=f444f16d478e86e7304a44ab986ff6ae&chksm=c1e9be1ef69e3708414dae4e58d69554f9f1e62d8a2e5f72726f9132daaeec1218eb529ed743&scene=58&subscene=0": "WPS Office两个严重漏洞曝光,已被武器化且在野利用", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499291&idx=1&sn=a44a1265fbf3ebc24901ba0bc0ad2475&chksm=973acd79a04d446f1d69086e4800a9fe4d371a3f8c7c5b419415704811b988504f00b96ec89d&scene=58&subscene=0": "CNVD漏洞周报2024年第33期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499291&idx=2&sn=c2ef55212f528784fe5a99e829f8f28e&chksm=973acd79a04d446ff1a2ff92572a5e90c083fb44763ec99623eec25cec3adae8520afa969272&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240812-20240818)", "https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493233&idx=1&sn=fcbc3a07cee5cf64e3c6b24925e2bd46&chksm=ec1807a2db6f8eb4f9e072ab8c517a39542fe6943b282abfc2271cd3ac558ac504c019e15748&scene=58&subscene=0": "美团安全团队在第五期移动互联网APP产品安全漏洞技术沙龙中分享移动应用自动化安全实践历程", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489484&idx=1&sn=0170236eec27f6c4cbcbdfa22e76901a&chksm=fb029a94cc75138237d08c5ca44d60e9ec07ebe3edef94b783c6e4877f479b58f3f402313e1f&scene=58&subscene=0": "某报表玩坏的反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063733&idx=1&sn=04dd13bf3a0e027fb707f063fa89ffbf&chksm=f36e6bb5c419e2a399b928d676f3db243488855358d520c5a9617dc0e258679995acfe13a05d&scene=58&subscene=0": "【安全圈】紧急!WPS被曝出现两个严重漏洞:且已被利用", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247574228&idx=1&sn=dabdc19860af60436e332258debda6a6&chksm=9f8d32dca8fabbca035a79b0828b4a7ff3058e381913d65d8f2918fa5e6852b3381ba4cacb9a&scene=58&subscene=0": "攻防演练实录 | 360安全大模型再狙0day漏洞,助蓝队“上大分”!", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495554&idx=1&sn=07c147197a62ad4b5235c4342d2634c4&chksm=e8a5e5e1dfd26cf7e8dafb1547e1913e08f78702165868748224efa9ec4ef39279b4ad86c95e&scene=58&subscene=0": "全自动白帽漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247486934&idx=1&sn=9c3b5246bbf686127bba2c0019cbdd2f": "第101篇:一个绕过5层权限校验的0day漏洞的代码审计分析", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247629184&idx=3&sn=d0b58f45a461d55f656c7f86f8ff7d82": "印度国家支付系统部分中断:因供应商高风险漏洞迟迟不修后被黑", "https://mp.weixin.qq.com/s?__biz=MzkxNjY0NDM3OA==&mid=2247484108&idx=1&sn=d9de55345695e9b293f1247c489a7356": "第十五课-系统学习代码审计:SSRF漏洞利用和常见防御写法以及绕过方式", "https://mp.weixin.qq.com/s?__biz=MzkzOTI2NjUyNA==&mid=2247484772&idx=1&sn=9a08022aff8607607dc4cc3acb382217": "CVE-2024-7928 FastAdmin 任意文件读取 全网20w+潜在风险资产 含批量验证脚本", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484130&idx=1&sn=0b5905380c5de16c41a17e07379e286d": "安钥®「漏洞处置标准作业程序(SOP)」征文启示", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247484833&idx=1&sn=8a7a576da107265ec7f46c7b957ce06d": "「 典型安全漏洞系列 」08.文件上传漏洞详解", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495561&idx=1&sn=833ec534a6c613773a4eb95593f3a122": "让XSS漏洞无处遁形!0x1", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063755&idx=3&sn=4f24cae6d48a6d6004885ec8aaa3d6a0": "【安全圈】适用于macOS的多个微软应用程序发现库注入漏洞,用户数据安全受威胁", "https://mp.weixin.qq.com/s?__biz=Mzk0MTMzMDUyOA==&mid=2247499942&idx=1&sn=77465571d8ef0d6d93445fe8d020d881": "漏洞分析 | Apache Tomcat 信息泄露漏洞 (CVE-2024-21733)", "https://mp.weixin.qq.com/s?__biz=MzkxOTYwMDI2OA==&mid=2247484175&idx=1&sn=b44ebf3540ad05aa32a0e370732fd1be": "[CTF复现计划]2024巅峰极客初赛 easy_java", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520541&idx=1&sn=f403f1139228e0543f485dc49192281e&chksm=ea94a077dde32961ced8bbf8b9f4d047894c070f5256758fbcda18bd2c501885e592e9ba6f05&scene=58&subscene=0": "Atlassian Bamboo Data Center and Server中存在RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520541&idx=2&sn=c8001046f4088bb94fd3ffcd7e6926b0&chksm=ea94a077dde32961061f5df3f34bcfb998ef7faf4faaf97b0d98fbf993523b5bcb3996850eb0&scene=58&subscene=0": "CISA:严重的 Jenkins 漏洞已被用于勒索攻击", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545438&idx=3&sn=6b30684225b55fb0f6996f240793d61d&chksm=c1e9be0ff69e3719d7419386368e3bc67f746c3f06b14dcd19b3a1c924c4abad611770e5de92&scene=58&subscene=0": "印度国家支付系统部分中断:因供应商高风险漏洞迟迟不修后被黑", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247492248&idx=1&sn=32038256bfbfc149d7199c70ecb40861": "edu漏洞平台挖掘-7月总结", "https://mp.weixin.qq.com/s?__biz=MzkzOTY1MzcyOQ==&mid=2247489258&idx=1&sn=c0c59bcd09cc073dc9d0ef6f6c3a4662": "小米在 Pwn2Own Toronto 2023 大赛前修补了 RCE 漏洞,并在大赛结束后删除了补丁", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247513647&idx=1&sn=b48d7b6e6f5f94bb490056bdcc894e0d": "漏洞预警|微信内置 chrome 浏览器 RCE", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247612470&idx=2&sn=ccd046999045da8444d84c24ce3d01d4": "再看云虚拟化安全.QEMU通用漏洞挖掘新思路", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247484761&idx=1&sn=a03240635bbf7b8349bc1185b17f13fb": "应用程序的安全漏洞会造成什么后果?", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247487219&idx=1&sn=a1ec97c07c4f775e1141b67a2d59c9d0": "在野漏洞的应急响应流程", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520566&idx=1&sn=74a7817b3955a25dccb8da1009e1b185": "思科修复由NSA报送的两个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520566&idx=2&sn=2201f2665ef471e47e5dc87762920af5": "SolarWinds 修复 Web Help Desk 中的硬编码凭据漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653930539&idx=2&sn=bf55583fe702803dc0523d70ecd9cfb2": "重庆银行漏洞扫描与基线核查系统项目招标", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499853&idx=2&sn=fc17d196787689d9c87b249b5e9b95d2": "【漏洞通告】WordPress LiteSpeed Cache权限提升漏洞(CVE-2024-28000)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489984&idx=1&sn=064d9589871f024f32fb7c48c8402b8c": "【8∕23特辑】今日热点漏洞,你排查了没?", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247520761&idx=1&sn=b4fca986ee5f584bb66ed2138350998e": "DouPHP(CVE-2024-7917、代码分析xss)漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247512183&idx=1&sn=d4b15738828c6830361323236cab85bf": "模糊测试平台SFUZZ V3.4惊喜升级 | 测试协议数突破200+,漏洞挖掘更全面", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247491711&idx=1&sn=cdcb62b7a6e56e03bd38503da055a999": "漏洞预警 点企来 客服系统 getwaitnum sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNTYwOTU1Mw==&mid=2650091536&idx=1&sn=a1b34022d3a94f9b45a670527c7246fb": "错误展示《黑神话悟空》客服电话,必应被曝AI信息抓取与处理存在缺陷;F5官方通告可导致会话固定与资源耗尽的高危安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MTU5ODQ2Mg==&mid=2247506921&idx=3&sn=f9d8f09848ca468315a8f8036f05563e": "关于Windows远程桌面许可服务存在远程代码执行漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546571&idx=1&sn=995ff830fdcb2120e3e322525d780f14": "Litespeed曝高速缓存漏洞,威胁数百万WordPress网站", "https://mp.weixin.qq.com/s?__biz=Mzg5MjgzOTM2Ng==&mid=2247484071&idx=1&sn=6991a1517f5cd6491d9e070dd74c21c5": "CVE-2024-38856:Apache OFBiz远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182057&idx=1&sn=736ea3eb21f7f91e5e6952955cfb1279&chksm=f4486a15c33fe303d18ba90114cc1a48dc5ad3af5b9e99345295d6b82000994bb9974c3102dd&scene=58&subscene=0": "钓客服、打漏洞……钓鱼攻击或进入最后的疯狂", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495571&idx=1&sn=71f193deb6f5f3bec2dfc58f6bbde6b4": "价值 3500 美元的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTMxNjQ5NA==&mid=2247484750&idx=1&sn=34bd14d75cdc21b0760da33454ed0630": "用友畅捷通CRM newleadset SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651299945&idx=1&sn=b7299413cea852ef6dc89cbbb704babc": "官方强烈建议更新,关键漏洞影响GitHub Enterprise Server所有版本", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063818&idx=4&sn=8cf1e8bb192224ef0c90f7a993439312": "【安全圈】GitHub 修补GitHub Enterprise Server 中的三个漏洞并建议企业用户紧急修补", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247486326&idx=1&sn=25b1ca6857bb8d411e117ea9c7da3aa3": "【漏洞复现】某管家 listUploadIntelligent.htm SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492632&idx=1&sn=13e2c8aba44b30a3092534c9238781fe": "某系统任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247627220&idx=1&sn=8973ab362b5e263df1c2f203f445f98d": "在看 | 周报:30万条业主信息被卖;WPS被曝出现两个严重漏洞:且已被利用;国内某上市公司疑遭勒索攻击泄漏2.3TB数据", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247512824&idx=1&sn=ef407c0a21f7b07bd52c7d7749d1ea11": "CVE-2024-22263:Spring Cloud Dataflow中路径遍历导致的任意文件写入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTY2NjUxMw==&mid=2247512911&idx=1&sn=2f5f69194b2eb5bbb46b0454d008dc45": "2024最常被利用的十大漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNjg3MjczOA==&mid=2247485808&idx=1&sn=a7804e92f804d2afad1fe979a057612d": "2024 年第 2 季度的漏洞利用和漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMjY1NDMxMg==&mid=2247484758&idx=1&sn=52b68be8f2744d1c49de19945875bab4": "某友U8+CRM的SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485005&idx=1&sn=fc9852d47746ec2d32294c98159e7b99": "【速看】谷歌浏览器 Chrome RCE | Google Chrome 沙箱穿越", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247612460&idx=1&sn=da92f5ea4529a34912a9acb4cd4b4b3a": "复制密码重置链接漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247488568&idx=2&sn=40ed3d89171ceeb91a85cd82de461adb": "ALBeast 漏洞导致数千个 AWS 应用程序面临关键 AuthN∕AuthZ 绕过风险", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247542864&idx=1&sn=4508652b0770f6666704146403ce3a88": "利用ce修改器进行漏洞挖掘(内存修改)", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5Mzk2OQ==&mid=2247486124&idx=1&sn=7596f7151df4cb76a38849bf9e4cf538": "工具|测试水平越权使用的虚拟身份X生成器+1576个Goby附加POC", "https://mp.weixin.qq.com/s?__biz=MzI2NTc1ODY0Mw==&mid=2247486016&idx=1&sn=9c7a5cc3c100823aad8813c159258723": "某招聘系统0day挖掘(获取4站点报告证书)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490277&idx=1&sn=0eaa450eebcb095ae3dcbce6dbfc5bb3": "漏洞预警 | 北京中科聚网一体化运营平台文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490277&idx=2&sn=8863f67a0e69722910886b66684eed8d": "漏洞预警 | 用友NC任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490277&idx=3&sn=2d4392fa4866c84713ec3dca2858165a": "漏洞预警 | AJ-Report权限绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485246&idx=1&sn=f8bb690a2774f348717bbc6bea4d1f64": "「漏洞复现」金和OA C6 DBModules.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTUxMzk2NQ==&mid=2247484895&idx=1&sn=4974c1af8b36dd2986db08710b724fe5": "CTF分享 | 命令执行-1", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247486372&idx=1&sn=c99f323e3324fe1ff4bc158ecdc87fce": "【漏洞复现】某成科信票务管理系统 TicketManager.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247518227&idx=1&sn=be4d9fd868f2dbad6640d183e4301937": "武器库 | Win11集成化综合漏洞扫描系统[更新]", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458569248&idx=1&sn=a4e99289593b2b238d1fa1685f2e9c60": ".NET Remoting反序列化升级版之TypeFilterLevel.Low模式无文件payload任意代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485565&idx=1&sn=0e2af3b7e65445094251998d525506be": "CVE-2024-38063|Windows TCP∕IP远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485565&idx=2&sn=aee195924d2e29573e0e3e8223db9611": "CVE-2024-39397|Magento Open Source文件上传远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4OTI0MDk5MQ==&mid=2247492360&idx=1&sn=5dbb85c63021dc40188e382e333423cd": "dedecms 两个常见漏洞的复现", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247512852&idx=1&sn=5542e0e2073fd72b187b19bd2b231217": "CVE-2024-20693:Windows 缓存代码签名操纵", "https://mp.weixin.qq.com/s?__biz=MzkzOTI2NjUyNA==&mid=2247484854&idx=1&sn=5ac416b2eaf4283d12d612c8d2b4459f": "[提权漏洞] CVE-2024-38054 特权提升漏洞 win11可用 含利用脚本", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247542899&idx=1&sn=997dfed2a5e32a0feb80b9616bb80181": "漏洞挖掘 | 记一次Spring横向渗透", "https://mp.weixin.qq.com/s?__biz=MzI5NzUyNzMzMQ==&mid=2247485292&idx=1&sn=fef85fbc9e3693b23fd2e4f1e020abfd": "Explain-MySQL分析和优化查询的核心工具", "https://mp.weixin.qq.com/s?__biz=Mzk0NjE0NDc5OQ==&mid=2247524822&idx=1&sn=9c083a33fc289816d637e02798c8062a": "实战 | 某外汇常用CMS通用未授权RCE", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247490293&idx=1&sn=38f904e828f23c168df38eb030dfc81a": "【流量分析】Java框架Shiro、工具利用、漏洞复现以及流量特征分析", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247486389&idx=1&sn=fd96450f237dcadbf4a40028de9c2e31": "【漏洞复现】智慧校园(某校易)管理系统 FileUpAd.aspx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651300128&idx=2&sn=7dcd364110d7b1200a88931626fb8556": "审计发现FBI的数据存储管理存在重大漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501958&idx=1&sn=699c44f8f8bd7c4117f7087e0679f1cc": "安全热点周报:本周新增两个在野利用漏洞,其中 Jenkins 被用于勒索软件活动", "https://mp.weixin.qq.com/s?__biz=MzkyMjM4MzY5Ng==&mid=2247485760&idx=1&sn=74de45434d1aa20510b240ba872096a4": "案例征集|2024移动互联网APP产品安全漏洞治理优秀案例征集", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492268&idx=1&sn=e8385f226e42e5e2efaf72688a07383d": "Linux恶意软件sedexp使用udev规则来实现持久性和躲避", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520597&idx=1&sn=9b3ac1b3b69c7d221bc720fd7a3db778&chksm=ea94a03fdde3292902b6c3d7139405802f57a749310705af7fc05e5a069ef6f28ccd0544c717&scene=58&subscene=0": "LiteSpeed Cache 插件中的严重漏洞正遭利用", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247511799&idx=1&sn=dbee6e45aaba5f7c6308a2858553cf8a&chksm=ea665980dd11d096dd4fe1f22547cc7af8007a29731a898baee057bcd2430aa7f98fa07b3788&scene=58&subscene=0": "Operation DevilTiger:APT-Q-12 使用 0day 漏洞技战术披露", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495211&idx=1&sn=d4af6cc705f1da29e6c1acebaa8e3625&chksm=fd74dee2ca0357f41f116c585625b6e0c884be87174a6ae59e44346cc14504a0d5dfb048a6d2&scene=58&subscene=0": "CNVD漏洞周报2024年第34期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495211&idx=2&sn=5948b260aa941937650fdf718efb01a2&chksm=fd74dee2ca0357f4db1fe7b93847188214facd87ccdf368d039bc25ca0905a176a07b15fed7b&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240819-20240825)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247500748&idx=1&sn=4de2b05a37a8facd043380f16ed6ced3&chksm=cfcf7301f8b8fa175cbf53f57ba32424ba7b11dd70a4ae2a3c28c82cc6e4ee4fa4993c7ab89c&scene=58&subscene=0": "[漏洞挖掘与防护] 03.漏洞利用之WinRAR安全缺陷复现(CVE-2018-20250)及软件自启动分析", "https://mp.weixin.qq.com/s?__biz=MzkzOTY1MzcyOQ==&mid=2247489260&idx=1&sn=e5e289cab099187d0a5ea0deee288dd7": "定制化payload让漏洞挖掘更容易", "https://mp.weixin.qq.com/s?__biz=MzkwNzcyNTUwNQ==&mid=2247483914&idx=1&sn=afee775f423bc9a06224df219d3e061a": "一款强大的自动化漏洞发现与验证工具 | 抽奖送《黑神话悟空》", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489677&idx=1&sn=a7273e78279a8a1b0656d5525954e7ff": "Microsoft 修复了导致 Microsoft 365 Copilot 数据被盗的 ASCII 走私漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063884&idx=1&sn=2d5740ba2fdfb8a2e1aa220e2a5b1661": "【安全圈】谷歌紧急发布 Chrome 浏览器更新,修复 V8 引擎高危类型混乱漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063884&idx=3&sn=5d561409ba544adc4539db1e1dd59dab": "【安全圈】Mirai 僵尸网络发现新漏洞,能同时被攻守双方利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063884&idx=4&sn=ac82f3320a0cef85245dea5edb57eed0": "【安全圈】存在严重供应链安全风险,MLOps平台曝20多个漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651300179&idx=3&sn=973f845fc9c0bc68b9aa03e957ce7099": "存在严重供应链安全风险,MLOps平台曝20多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520605&idx=1&sn=943de838e9f963febbf06e2dc05dfbba": "谷歌修复今年第10个已遭利用0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520605&idx=2&sn=6bd044882cfd8e5f96140c71e26498f4": "MLOps 平台存在20多个供应链漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501973&idx=1&sn=642d4586d72419c24fb9052198320549&chksm=fe79ec0dc90e651b10a86079648e6917eb2dbf036e82b5833086f1ab978545cd46a0be548cbc&scene=58&subscene=0": "【可用POC已公开】Windows TCP∕IP IPv6远程拒绝服务∕代码执行漏洞(CVE-2024-38063)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503066&idx=1&sn=261146d853de3a392a7ac573a84610d3&chksm=f2585fa9c52fd6bfda8442c0c0a4f9b3728c5b7e4225e10c8fad33dfe2457be529e7e38445e0&scene=58&subscene=0": "雷神众测漏洞周报2024.08.19-2024.08.25", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545505&idx=4&sn=444b44d00f2b4c15a7a757ca7343eaec&chksm=c1e9bef0f69e37e6123ae9bbf983cbb47d9704ed94cf76f265624a28062953190081fdd10429&scene=58&subscene=0": "审计发现FBI的数据存储管理存在重大漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247501061&idx=1&sn=02f6dbd52cef52ad1286e40be6822880&chksm=cfc5625af8b2eb4c0f9c7f64097e7aeaf128ef9f0daa73b35ca479eebba7d764da9e0218a097&scene=58&subscene=0": "XCon2024 x 360漏洞云精彩链动 | 焕新出发,共见未来", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247577691&idx=2&sn=8d5b89fd888317e60e720a84a091937d&chksm=e9146061de63e97744313abc7ee0b3d3c84ad30fc1f925a8ab1d2742cb0a38b49c693c0f24be&scene=58&subscene=0": "Litespeed Cache 漏洞导致数百万 WordPress 网站遭受接管攻击", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499302&idx=1&sn=cfa2928aefa4a4b253cd82651cb2c942&chksm=973acd44a04d445272a9e75cc988f6d2f41ef1e5d267eb5dcef1ca9d4f0feb0af49d1f607a8b&scene=58&subscene=0": "CNVD漏洞周报2024年第34期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499302&idx=2&sn=de9eef2b7aabc2200be1e12c88cfb24c&chksm=973acd44a04d4452b0ae386618ce4a5b7e65c478377657b21fba01e59c656f8132ad0bf63a69&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240819-20240825)", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247494952&idx=1&sn=38fc4ffdc41d3f9ebad7c4484ba2ee33&chksm=96d8e6f2a1af6fe46f66fa87646d4b0e0379d624e13dc9226d241663b45a879537a56672116d&scene=58&subscene=0": "与漏洞管理平台“人机对话”:斗象VMS DSL数据语法引擎", "https://mp.weixin.qq.com/s?__biz=MzIxNDAyNjQwNg==&mid=2456099362&idx=1&sn=d715fd63fd371cac92c6796893e28863&chksm=803c6bebb74be2fd81cbb57ce0e54638e1dc9ff84c13516390f2039afbafcf7375aa9c892a5e&scene=58&subscene=0": "High-value Web Application Post-RCE Penetration Research", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247574747&idx=1&sn=8d80826f0a4df2cfcf7580ec5f5143da&chksm=9f8d34d3a8fabdc597b32a9f298394d92885637755c89b8b48928e521d6ddfa7bc728ef3d6f1&scene=58&subscene=0": "360告警:全球知名大模型框架被曝漏洞!或致AI设备集体失控", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485297&idx=1&sn=0b54ca34c0e746164c429bf818e57f12": "「漏洞复现」方天云智慧平台系统 setImg.ashx 文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247629815&idx=5&sn=440972b460d87abd170607134cc5f8ef": "存在严重供应链安全风险,MLOps平台曝20多个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NDAyNTg1NA==&mid=2247490425&idx=1&sn=6c38e15c1b3710a0b409bac95d49ab2f": "CVE-2024-38063(Windows TCP∕IP IPv6远程拒绝服务∕代码执行漏洞)复现(附POC)", "https://mp.weixin.qq.com/s?__biz=MzU5OTg4MTIxMw==&mid=2247503248&idx=1&sn=dad794a3bfc8624ec991128ea4808785": "技术详解 | CertiK揭示秘密修复的Solana核心漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512491&idx=2&sn=b7943378b9c01c831c15774810d0cc34": "俄乌战争导致俄罗斯漏洞赏金计划蓬勃发展", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458569936&idx=4&sn=17681a834dc092366a71eca0764ea6cf&chksm=b18dfc5a86fa754c6f6c1c27e466e085d367666cbe5502b805206ff13250ab81b6068efd5c26&scene=58&subscene=0": "零基础入门Android漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545525&idx=2&sn=2561e9c960843541f48a7c0485262341&chksm=c1e9bee4f69e37f2159a41ed177df75958f3736f9f965e767cd823cbca87a8c875b9ccb5150c&scene=58&subscene=0": "开源GPS系统曝出两个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520613&idx=1&sn=dc30b8ece16a42c6097ccba6e9284aa9&chksm=ea94a00fdde32919dccc17f899e4d9558219f654e103df2e221227381caaf4269a2ee6a1a5d5&scene=58&subscene=0": "SonicWall 提醒注意严重的SonicOS 访问控制漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546648&idx=1&sn=cb150b8f6ffe70f6026faf0867d2a5d4&chksm=fa9381d9cde408cf1c2866ce41eb8b47575dfdb10ec11865c14ab7d215fd37885b23f8ed099b&scene=58&subscene=0": "存在严重供应链安全风险,MLOps平台曝20多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546648&idx=2&sn=5bc78f332dbb7dacafb5d2d1801939e2&chksm=fa9381d9cde408cf4d7fc45f5ee0ab19a79fe6014579141019c412e0050c7d7dd4cf91ea37df&scene=58&subscene=0": "Litespeed Cache 漏洞导致数百万 WordPress 网站遭受接管攻击", "https://mp.weixin.qq.com/s?__biz=MzkwMzI1ODUwNA==&mid=2247487408&idx=1&sn=35c68c2e29a32528c0daad15ca4a5e8e": "新生代免费漏洞扫描器,NextScan,开盒即用", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247489585&idx=1&sn=b81b8bf776e2c9708eb2940abbaf6c19": "Chrome ipcz TOCTOU 漏洞分析与利用", "https://mp.weixin.qq.com/s?__biz=Mzk0OTUwNTU5Nw==&mid=2247486466&idx=1&sn=9ce1d4707e9e118acd678a9a4aa976ab": "【相关分享】绕过验证技巧-逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247518295&idx=1&sn=2b321dc0feed9ab950f7c05ea48234b0": "基于人工智能的网络漏洞扫描器 | SmartScanner 1.21", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489689&idx=1&sn=7fdc7cd004f58e30139bd46417693371": "APT-C-60 Group 利用 WPS Office 漏洞部署 SpyGlace 后门", "https://mp.weixin.qq.com/s?__biz=MzA4NzU1Mjk4Mw==&mid=2247491570&idx=1&sn=61c4fc101a987476e901906eae5189b1": "PostExpKit插件更新:进程注入模块", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651300329&idx=3&sn=c3694354781c05687543f4ababc05cff": "谷歌再提高 Chrome 漏洞赏金数额,最高可达25万美元", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485850&idx=1&sn=83cbaf5ac8b41ed8b58a208af2892ab7": "cms漏洞检测框架 - FrameScan", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063922&idx=3&sn=81a7b25c65525b6c22e056b4862fd75f": "【安全圈】韩国黑客利用 WPS Office 零日漏洞部署恶意软件", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063922&idx=4&sn=d84ea75a78fbb31a769c8664a64275c2": "【安全圈】Google 再提高 Chrome 漏洞赏金数额,最高可达25万美元", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247519778&idx=1&sn=bcbf30c86ef70444538124d910a8ee1f": "防护修复双重保障 | CVE-2024-38063远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520627&idx=1&sn=e98afd2bb604a7bc41cadce2c53f2ab3&chksm=ea94a019dde3290fe4adbad1106c57776b38ae4dd608564a94bb4be8c9881f87478eac1c79a0&scene=58&subscene=0": "谷歌单个Chrome漏洞的最高赏金超25万美元", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545541&idx=1&sn=3e287b0b3ad08f9b440684d7eb685583&chksm=c1e9be94f69e3782e116f581ad8837de986e0279a7964044235a913869e44d37588b5109b895&scene=58&subscene=0": "WPS用户警惕!APT-C-60利用WPS Office漏洞部署SpyGlace后门", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545541&idx=3&sn=2ffde667d54880ea7961dafc7249ce12&chksm=c1e9be94f69e378215095598a5295a9b92fb3857c31c5f1e5af9439a3f31195ca955cfac8e97&scene=58&subscene=0": "“伏特台风”黑客利用Versa零日漏洞攻击美国服务商", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247494858&idx=1&sn=b4c4f1702a3037deb41649ab20b1f787&chksm=fa594227cd2ecb31e6dce89bccda6be4ffab66b31d2df343d739294613a35a09b107c350a606&scene=58&subscene=0": ".NET 一款支持反序列化漏洞的白名单工具", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247521013&idx=1&sn=4cc8c8c5df1575b43920069d190fc62b": "Apache Solr 任意文件读取漏洞(poc编写 )", "https://mp.weixin.qq.com/s?__biz=MzA4NjMwMzI3Mg==&mid=2247500055&idx=1&sn=e9d5a57d81bc5a277940aac0328be875": "【漏洞通告】某海云eHR系统pc.mob接口SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247486147&idx=1&sn=822651cb451034705849a80796bff580": "用友NC content SQL注入漏洞复现及POC", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489696&idx=1&sn=215e0559e13aad69ad2b671712b7b3be": "勒索软件正在利用VMware漏洞,通过VPN访问发动攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652063941&idx=3&sn=d0b2a7a428e1e3ddc94e16b41928c099": "【安全圈】黑客利用未修补的 AVTECH IP 摄像机漏洞进行僵尸网络攻击", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499892&idx=1&sn=3483c5c84cfad6c4bc1bca6e479241dd": "【漏洞复现】Google Chrome V8类型混淆漏洞(CVE-2024-5274)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499892&idx=2&sn=042f91d908b9b87bec4d0ed11dee25fc": "【漏洞通告】Ivanti Avalanche XXE漏洞(CVE-2024-38653)", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk3NjczNQ==&mid=2247485153&idx=1&sn=784f3f0a890681eb98611cac744f7ab4": "实战攻防|某物联网系统通用漏洞实战案例分享", "https://mp.weixin.qq.com/s?__biz=MzIxNzY1MTc1OA==&mid=2247484379&idx=1&sn=0374a5a1c7f9e1bd189a564c696db086": "TimeAxis Sec团队漏洞研究组纳新启动", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492679&idx=1&sn=175cf892e9035aaa422dc8e6e25bf4ff": "某系统多款产品存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546686&idx=2&sn=a34751fbd2e1c714f9ce9b19ce35fe2c&chksm=fa9381ffcde408e99309575941093b3419ce03b392d240232b9bd2f44ee9aee41602bd0777ec&scene=58&subscene=0": "针对蒙古政府!疑俄罗斯APT29利用与NSO和Intellexa“惊人相似”的漏洞实施水坑攻击", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546686&idx=3&sn=db8acc8f9a59c0d4fd98dd11633b5f2f&chksm=fa9381ffcde408e93963dc6a04d139c6d84d7e5dda3d386bacf14604ec386142fa9b58451beb&scene=58&subscene=0": "BlackByte勒索软件:利用VMware漏洞,通过VPN访问发动攻击", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545566&idx=1&sn=7b488e10e38c4af21db3afd7d9a6ec55&chksm=c1e9be8ff69e3799a409b3e9e6478aa7595ffaafc14dafe3f6e81cfa29c7775ecb3cb14e1e2a&scene=58&subscene=0": "谷歌再提高 Chrome 漏洞赏金数额,最高可达25万美元", "https://mp.weixin.qq.com/s?__biz=MzI1OTUyMTI2MQ==&mid=2247484617&idx=1&sn=fcfb1017057c31933e9a33d1704df00c": "HW2024 283个漏洞PoC合集", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247629927&idx=2&sn=4701e168bb3160b5e6971e25b9050e99": "韩国黑客利用WPS零日漏洞开展大规模间谍活动", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492687&idx=1&sn=06fc4c417a06fb42fe9d820431a77246": "某视频云平台存在未授权窃取用户凭据漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247551067&idx=1&sn=77d376467232482d2821d0aaf9113555": "反序列化漏洞和fastjson实际漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247513111&idx=2&sn=a8407e9bcd004aac577fbf3fd9558dc7": "朝鲜威胁行为者利用 Chromium 中的零日漏洞 CVE-2024-7971", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650958176&idx=1&sn=f826441ecf3a8c2c87726b3394ca825d": "CORS漏洞学习", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485324&idx=1&sn=ec8874faf2c018db193b568338bd2964": "「漏洞复现」用友NC link∕content SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651300584&idx=2&sn=a83b17c1ed134e4fc9f60875e4899b7b": "FreeBuf 周报 | 2024年网安最高处罚记录诞生;谷歌再提高Chrome漏洞赏金数额", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650599410&idx=1&sn=aa9f7ded8745a6c761dd42d9f898cbc0": "韩国黑客利用 WPS Office 零日漏洞部署恶意软件;强制关注公众号、获取大量个人信息,扫码支付怎么变得越来越复杂?", "https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247500766&idx=1&sn=a587bd51a90cb20b7edbf77c6cbcd001": "[译] 威胁分析报告:12.APT29利用spy软件供应商创建的IOS、Chrome漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495675&idx=1&sn=b2f83dec52050274e8eafc46f30c606d": "一个$1600赏金奖励的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzOTI2NjUyNA==&mid=2247484902&idx=1&sn=eae50a81028e28f70c0b9c992a84f2b1": "CVE-2024-21413 Microsoft Outlook远程代码执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492696&idx=1&sn=4a504cdfca410835fca9403592e7d584": "某系统存在默认凭据漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064070&idx=2&sn=7239638bdebe1719d8bd1c3cc6d8db1b": "【安全圈】微软曝光朝鲜黑客利用Google Chrome浏览器零日漏洞窃取加密货币", "https://mp.weixin.qq.com/s?__biz=MzkyMTMxNjQ5NA==&mid=2247484791&idx=1&sn=4160ee6707e37e6885085d5813a4f104": "「0day」金和OA C6 jQueryUploadify.ashx存在sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247493575&idx=3&sn=3c376e3f80656a67c52a3fa4c8541e21": "针对蒙古政府!疑俄罗斯APT29利用与NSO和Intellexa“惊人相似”的漏洞实施水坑攻击", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485435&idx=1&sn=99f5eb0f17d458b8c2069dc178885434": "2024年最新新小剧场短剧影视系统代码审计(RCE)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247488285&idx=1&sn=93e26682915f36381c11de4d5c201d38": "人工智能AI漏洞扫描工具PRO版SmartScanner-1.23.0-Pro版补丁更新|漏洞检测", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247543153&idx=1&sn=d2b8b12d5e17292082e41466224a072a": "记一次某中学系统越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247543153&idx=2&sn=7b877e3365ef72190578f4e1a0bd2bd2": "漏洞挖掘|自动备案批量查询脚本", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247612683&idx=1&sn=ce0ad67f72ba3658c0f2860f8f33d5e8": "开源软件中的加密漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247612683&idx=3&sn=9fce372dd44e785ffffdc36a6c85bc40": "车辆漏洞管理 - 从设计开始有效保护软件定义车辆", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg3NjE5MQ==&mid=2247485065&idx=1&sn=a62a0479493cae0a6b6cea6506250443": "实战|任意用户漏洞挖掘分享", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485332&idx=1&sn=cfd3a526b441fa5f1eb00b908033b9df": "「冷漠安全」八月份0day∕1day∕nday漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650599479&idx=3&sn=1cc7929df512bd6969f4150b5b969660": "【总结】设备漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651300585&idx=3&sn=fd4708f6d06b3f193b4c030bcd27ea70": "韩国黑客利用 WPS Office 零日漏洞部署恶意软件", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490380&idx=1&sn=538ffde4f200d11080b50e5d40c4a7eb": "漏洞预警 | Ivanti vTM身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490380&idx=2&sn=df1affa756439486c0a7d9e4986bcdc1": "漏洞预警 | 赛蓝企业管理系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490380&idx=3&sn=57c6a9b39234d3e0fb0d3a1a3a8d201f": "漏洞预警 | 同鑫T9eHR信息化管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492608&idx=1&sn=58853db4366ab941adbcef183a9a8cb2": "漏洞复现 || Bazaar swaggerui目录遍历", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485002&idx=1&sn=ff76852b82c0dbe8d44f0ad7b6a4ac71": "漏洞推送|用友U8C reservationcomplete存在sql注入可RCE", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485341&idx=1&sn=b02dd419f6671b4d1407d3c15f433710": "「漏洞复现」WookTeam searchinfo SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MDQ0NzkyMw==&mid=2247484850&idx=1&sn=d8259a8a6f631c69a331466ec553adaa": "HVV2024POC漏洞核查思路", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492703&idx=1&sn=945b1ecb68f1d8853ba2d2792f1602a5": "某系统存在路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMjYzNTE4MA==&mid=2247485024&idx=1&sn=b7fefd2c21e5df19413546fcf9618f10": "【Nday】短视频矩阵营销系统 user 敏感信息泄露漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485865&idx=1&sn=75af3c999502318ebcdf0fb6908ad949": "红队武器库漏洞利用工具合集 - VulToolsKit", "https://mp.weixin.qq.com/s?__biz=MzkyMjM0ODAwNg==&mid=2247488058&idx=1&sn=3cb21c6ed20893aa8b5f76007d577c58": "MSI 文件漏洞的探索", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651300656&idx=3&sn=3a17f5dc582f0f0007863eb1ba578030": "案例征集|2024移动互联网APP产品安全漏洞治理优秀案例征集", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786826&idx=1&sn=5836a828206db72a5c4643bca67de664&chksm=8893b9a5bfe430b386427669dfc669d65e16f9ebfb2388771f56ff7a703089c1471750fbf486&scene=58&subscene=0": "美航空管理服务系统存在严重SQL注入漏洞:允许未经授权人员绕过机场安检", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501978&idx=1&sn=61c623acad92737f00bcef0c5d233829&chksm=fe79ec02c90e6514f2a3f9dfa4c965e4bd2f7564b0fbb65741aed98ae042d7200a125f983d3c&scene=58&subscene=0": "安全热点周报:Google Chrome 和 Apache OFBiz 漏洞被黑客利用,紧急修复措施发布", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520645&idx=2&sn=db3b91279c8927a20b8803d337553df8&chksm=ea94a0efdde329f99b47426cd38ffb58a35fb2dfc1c4037771332b1adac06119f08b376e6cad&scene=58&subscene=0": "研究员利用SQL注入漏洞绕过机场的TSA安全审查", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495227&idx=1&sn=9187af7308b472287a51ffacd76b43f7&chksm=fd74def2ca0357e40ead351657ac36a999f6508668c4d42c6bee9c2459e1011a31855cac318d&scene=58&subscene=0": "CNVD漏洞周报2024年第35期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495227&idx=2&sn=bd78a786194d867f9ec3252f293da309&chksm=fd74def2ca0357e4d5a4cb6efcbe5aa4696ca0804b691806246e8f44727a746f2589576470ea&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240826-20240901)", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492305&idx=1&sn=d9cc7a790db58f5b22afa02b52a9cde2&chksm=e90dc8fbde7a41ede9648f2572bb5e59d26f8e7c663778e3bb1a1fdc5560c59c3bb6668177cc&scene=58&subscene=0": "黑客组织利用WPS Office零日漏洞针对国内用户展开攻击活动", "https://mp.weixin.qq.com/s?__biz=MzkxODczMzQ1MA==&mid=2247484674&idx=1&sn=86a7bb2160c9da1bba46aa4564ff44f9": "[24HW总结] 400+漏洞POC汇总", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495762&idx=1&sn=434fd10109993b75f20958419e34818f": "sign加密小程序漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488804&idx=2&sn=409d1274dfb07474fae0068a3eee0beb": "【漏洞预警】vim代码执行漏洞(CVE-2024-45306)", "https://mp.weixin.qq.com/s?__biz=Mzg4NTgxNTc5Mg==&mid=2247486675&idx=1&sn=63e6f415e8df75ebc74724e870224326": "Adobe ColdFusion (CVE-2023-26360 入侵了美国联邦民事执行局)漏洞分析,实现反弹思路,", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247514839&idx=1&sn=5da207a82544f6ace7596001e395d30f": "【CNVD证书get】某集团信息系统存在未授权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247501597&idx=5&sn=2c94bec2d8c4269eb40124ee83685b12": "强大的间谍软件漏洞引发新一轮“水坑”攻击", "https://mp.weixin.qq.com/s?__biz=MzkyMTMxNjQ5NA==&mid=2247484796&idx=1&sn=40ec636837b552124e00b05b6fcccd82": "「POC」用友U8-Cloud系统接口RepAddToTaskAction存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1NjczNjA0Nw==&mid=2247484863&idx=1&sn=742bcdb07ad43feb536332915632a87d": "影响WPS Office的两个任意代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247486192&idx=1&sn=50a65af2527cf436fae0ace628e999e2": "金和OA C6 jQueryUploadify SQL注入漏洞复现及POC", "https://mp.weixin.qq.com/s?__biz=Mzg4MzU3MTcwNg==&mid=2247485680&idx=1&sn=c874c954fee0807a4e717df8c0ed0f6f": "逻辑漏洞——验证码篇", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064118&idx=3&sn=e8c491c09d170fcdfc57c3a67ba7a5b4": "【安全圈】Durex India 的安全漏洞泄露了客户的个人数据", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512533&idx=2&sn=59c7c075584844fac09165ec9597045e": "航空安全系统曝严重漏洞,黑客可绕过安检进入驾驶舱", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501997&idx=1&sn=4250ae8d9c3b15a1f415b1fe31a2bdb4&chksm=fe79ec35c90e65237e2ab8c4b59b1a8b4bb67fa64b7b1e09cc25988186b744580cddd86e5386&scene=58&subscene=0": "【已复现】Jenkins Remoting 任意文件读取漏洞(CVE-2024-43044)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503077&idx=1&sn=89af6affce528a5801fc34b663c10676&chksm=f2585f96c52fd6804cd2250c0fe4a0eeb8ca448d87db81f77c33e1eda130c0abab5dc94dc600&scene=58&subscene=0": "雷神众测漏洞周报2024.08.26-2024.09.01", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247577796&idx=1&sn=688d856a01c7b230c32b8c18dc012b4e&chksm=e91460fede63e9e80281f68cb78e9487926fd2648745163007e14b4e6f3d1026a164e8951cc4&scene=58&subscene=0": "恶意软件利用零日漏洞感染报废的AVTECH IP 摄像机", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499313&idx=1&sn=5d3b3cac772fc286cb235f96abdeafca&chksm=973acd53a04d4445dc6d6ee84c6dd54c26216cd5558878d657141ca8b0991b5f6a4ffc63bc41&scene=58&subscene=0": "CNVD漏洞周报2024年第35期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499313&idx=2&sn=532e346579ef66b6342499ec2fa0ce05&chksm=973acd53a04d4445bf162a4d9f40a21e7d84581ec6e9eee0e9611e57c27af4784ce84355552c&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240826-20240901)", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247516903&idx=1&sn=7d8947bd52b5fd4540e4345bd767cb86&chksm=ea83a472ddf42d646ecf522b28af66cf52a72c8862d14e73543eb383b46d113ef6cb1c4756e6&scene=58&subscene=0": "小米中秋活动开始啦,礼盒兑换&漏洞翻倍在等你,冲鸭~", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546725&idx=2&sn=c4dbbf0aae29b7f972e6b36b2d394146&chksm=fa9381a4cde408b280ee644051703f8b7b81e4d06c664d4507ae8d507ed10703620ffa200d45&scene=58&subscene=0": "朝鲜黑客利用Chrome零日漏洞部署Rootkit", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488812&idx=2&sn=7775fe2ef8cf6bdf886ca2462007fa98": "【漏洞预警】Apache OFBiz SSRF致代码执行漏洞CVE-2024-45507", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247514912&idx=1&sn=ad5f0315fe634390d9e14290fd2b84a8": "【SRC】某众测项目中有手就行的几个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485449&idx=1&sn=6da3eb65c8cdd4717a3098a097183c09": "招聘启事-漏洞挖掘工程师", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247491193&idx=1&sn=0b4f11ecd294dd99667d2b21ba9ec44b": "中科院软件所 | 一种针对非回溯正则引擎ReDoS漏洞的有效检测方法", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492711&idx=1&sn=087ee2540301bf77bbc8c352b35d3f5a": "某防火墙存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650958675&idx=1&sn=1d86b38d04a873fd1c87c1118ae5fda4": "比较有意思的几个漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247517239&idx=1&sn=f81cd23d9d9b7ab8278b1c2c829fc6e4": "Src挖掘之比较有意思的几个漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064138&idx=1&sn=53220a217e6d037a4a2660176faf81c0": "【安全圈】尽快更新!Zyxel 路由器曝出 OS 命令注入漏洞,影响多个版本", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247617161&idx=1&sn=3891a70924cc4a21b2198b11ccfb35e0": "齐向东:“数据三角”的安全体系各自为战,是网络安全最大漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520668&idx=1&sn=33ddf9ab82fd7db2d5c560e478add189&chksm=ea94a0f6dde329e00b344533f754d89385c211e8596d9ad29addaf0ee37d57d5ea6a58459475&scene=58&subscene=0": "D-Link 不打算修复 DIR-846W 路由器中的这四个RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520668&idx=2&sn=a47864fc0328391d921ce4629b3bac8b&chksm=ea94a0f6dde329e023f990c89d3f4b6a44d09f2026fcdb3ad4e8deed8958ffe6ef4fa464fc38&scene=58&subscene=0": "合勤提醒注意路由器中的严重OS命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520668&idx=3&sn=899efb652a40601d77b2cb2fffa9e4a2&chksm=ea94a0f6dde329e0c294039de56f65cffda877a972c98fbfebe68abac81d4ee415d453a6203e&scene=58&subscene=0": "VMware 修复Fusion中的高危代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502006&idx=1&sn=cb69b47b02bcfc5ff4836ba5403fec0c&chksm=fe79ec2ec90e65380654be1e4b959fcfde77763ecee1b2aac3d13cc7595c172d9ed284186b6c&scene=58&subscene=0": "Apache OFBiz 服务端请求伪造漏洞(CVE-2024-45507)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545632&idx=3&sn=1a5b5a9455da06cb57832c3cacf88afe&chksm=c1e9bf71f69e3667fac031d888ccd6cb7f0e63da1d6576e16b42056153c55fa308a12c21070f&scene=58&subscene=0": "恶意软件利用零日漏洞感染报废的AVTECH IP 摄像机", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247545632&idx=4&sn=56bb16ab43e5ed769e22fb7332101b6d&chksm=c1e9bf71f69e366711339d915d0dea11dd33d68c51574030b4a042afa01c1278356ff0166495&scene=58&subscene=0": "航空安全系统曝严重漏洞,黑客可绕过安检进入驾驶舱", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247486242&idx=1&sn=f4b22189165d6cc0af032b4b426f4835": "用友NC show_download_content SQL注入漏洞POC", "https://mp.weixin.qq.com/s?__biz=MzIyMDAwMjkzNg==&mid=2247513380&idx=1&sn=c597ca25d97dfa3d225abefdc38ec2ce": "SpEL表达式注入漏洞总结", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247485387&idx=1&sn=98ba5b0e0967ecba746a0c0e140b4922": "nuclei+burp 快速构建护网漏洞武器库!!", "https://mp.weixin.qq.com/s?__biz=MzkzOTI2NjUyNA==&mid=2247484918&idx=1&sn=0414f876c0d77a66e7f16a319822a208": "超高危 Wordpress RCE漏洞 CVE-2024-5932 全网资产 5W+ 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492718&idx=1&sn=a33252cb33ce8147cb6d79a626d9e3f7": "某视讯平台存在敏感目录文件泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502008&idx=1&sn=32eb5b732b23cab67d8003b1974eb88c&chksm=fe79ec20c90e653629a844feee3fdd101acbd5cb2b5f841aa7aefb53bdc20748d4f36dd6addf&scene=58&subscene=0": "公开的隐秘:CVE-2024-30051在野提权漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247512365&idx=1&sn=710b2599bd33984303fdd16660edd361&chksm=ea66465add11cf4cdd356438020e41b92263c87bc7219fc04f3e4837e4527555fd80cbd8c12d&scene=58&subscene=0": "公开的隐秘:CVE-2024-30051在野提权漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520683&idx=1&sn=00f735c28afb0e6cc70f919cade9dc5c&chksm=ea94a0c1dde329d7537d32cf0cc038587d8e6da619b0dc82fb99bb8917e432ece7028a7dd65c&scene=58&subscene=0": "思科修复已有 PoC 的根提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664224600&idx=2&sn=1de60783b88daab0ab81b0280e7614e1&chksm=8b59d5a1bc2e5cb78dcd92738723de7e6054e27b1e86b876add7543c5936d051c2bf7b136495&scene=58&subscene=0": "报名开启 | CCS 2024成都网络安全系列活动——国家漏洞库网络安全漏洞治理产业协同创新研讨活动", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523564&idx=1&sn=10f214e39c6a8000a11eb0a4f35c0ac1&chksm=ce4617fcf9319eea12a5d926f35c9c86b08e8618e385ae84d761303b04f4064a5ddab01d3a60&scene=58&subscene=0": "【漏洞通告】Apache OFBiz服务端请求伪造漏洞 (CVE-2024-45507)", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484655&idx=1&sn=2661756f5e49f4a5168faf30cd1745d7&chksm=c12af96ef65d707884432e641bc6c163d8234567c44b7747fbaeaf2b7848926cfa4c53c4726e&scene=58&subscene=0": "【复现】 Apache OFBiz远程代码执行漏洞(CVE-2024-45507)风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2ODc0Mjc0Mw==&mid=2247484101&idx=1&sn=a0cedc41f3e38dbc7ad0a57ff454ec89": "漏洞不收不就安全了", "https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247487857&idx=1&sn=d884699b9103af848b9618c881780d1b": "红队技巧分享:躲避现代检测系统的命令执行", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489721&idx=1&sn=aac489fdf71eec0dac0723c03ffdeb9f": "Apache OFBiz 更新修复了导致远程代码执行的高严重性缺陷", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492726&idx=1&sn=0ce7b47bfebf264b917e962c8e54458e": "某视讯平台存在登录绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MTY5NDQyMw==&mid=2247520138&idx=1&sn=ec007593d1fbab50393005cd3256e658": "Tomcat CVE-2024-21733漏洞简单复现、分析", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093435&idx=2&sn=3d72c981bf7de50e7fbc9c84b70b615e": "黑客活动家利用 WinRAR 漏洞对俄罗斯和白俄罗斯发动攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651301191&idx=3&sn=229cee39f8d034cce3d979395f0b94ee": "尽快更新!Zyxel 路由器曝出 OS 命令注入漏洞,影响多个版本", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064175&idx=2&sn=3f54fca5e0c49722e56e0d3e226be408": "【安全圈】LiteSpeed 曝出严重漏洞,致使超 600 万 WordPress 网站遭攻击", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499926&idx=1&sn=7084340f10b3ffc3b370b80237a212b6": "【漏洞复现】Apache OFBiz远程代码执行漏洞(CVE-2024-45195)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490038&idx=1&sn=3235605275d5b7bdf36280124086c7b8": "【已复现】Apache OFBiz存在未授权远程代码执行漏洞(CVE-2024-45195)", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247485855&idx=1&sn=f6975c51f543a81eaed123cbed06c635": "Safety:Python 依赖漏洞检测与安全保障工具", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247521204&idx=1&sn=1d4bfea09b7d3dffc1799a441b253206": "总结RCE漏洞(常见RCE的组合案例)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502018&idx=1&sn=cf4b96420aefe1c1c6a2e624c4568c0c&chksm=fe79ec5ac90e654ccd9ce71c63e6c66514c7eb82807b05995a88e1d3b091a282f3bdc9f5ed3b&scene=58&subscene=0": "【已复现】Apache OFBiz 远程代码执行漏洞(CVE-2024-45195)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520714&idx=1&sn=df4e06a4fa7f19703c54eeb2ccf244d6&chksm=ea94a0a0dde329b6b9068782af2d2311165f4ac3aea68076c75da8cfa12aec8d17c556e6f0fc&scene=58&subscene=0": "Veeam 修复5个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520714&idx=2&sn=a3784b5b2245f1449edaefa3064d676f&chksm=ea94a0a0dde329b6ca2b17012b7eb003867fd983c6abcc5e7fde821968dec1ea86592860496c&scene=58&subscene=0": "Apache 修复严重的 OFBiz 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247501969&idx=3&sn=4c46939ec96ab5a8013ec34eb54fea29": "Zyxel(合勤科技)路由器中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247501969&idx=5&sn=37b97c04c8b0e48e22d8a7b473fa7c6f": "中控智慧终端漏洞:黑客可访问受限区域", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247518541&idx=2&sn=9c54b3eedbb7e8e3259caec044f262cd": "实战 | 测试文件上传漏洞的5个小tips", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492734&idx=1&sn=b809f231c4711e36b9079d5367a51189": "某视讯平台存在未授权任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064191&idx=4&sn=2fe0d56663512b21ba1785d9a22bcd38": "【安全圈】研究人员发现Yubikeys中存在一个难以利用但也难修复的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247484396&idx=1&sn=1eaf044032849dd9a642f72330921b4c": ".NET反序列化漏洞类型以及案例分析(1)-LosFormatter", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484176&idx=1&sn=075c87d06e177c5cfc335bc6dbcf67dd": "入选作品公布|安钥®「漏洞处置标准作业程序(SOP)」征文第一期", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458572213&idx=1&sn=6f216d0dd151bf49db7607367a01d861": "CVE-2023-4208复现笔记", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485388&idx=1&sn=867c422735a6515a7f990a8020c763f3": "「漏洞复现」停车场后台管理系统 GetPasswayData SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247484963&idx=1&sn=5682d175e2b9907a7a93439a4f64c2d2": "俄罗斯APT29再度出击:重复利用NSO Group和Intellexa开发的iOS与Chrome漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247489305&idx=8&sn=e5e9b6fad46ed8ab874972f4284abef8": "CVE-2024-45076 (CVSS 9.9):IBM webMethods 存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247485950&idx=1&sn=3f4bb6cf0bf446a7947b950392f8baf6": "本想分析rce还出了一个sql注入", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490888&idx=1&sn=36fc9449d74f7e3d4b59775930f4265b": "继上一次权限绕过漏洞代码审计", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649792317&idx=3&sn=92893f4a7e7c5090b547d8cf01fd1b47": "CISA 打破沉默,回应备受争议的“机场安检绕过”漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492741&idx=1&sn=034e5d529304de4e4b75ea6e90382f06": "某摄像机系统存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247485954&idx=1&sn=8527585ced54072fb2565c1c4ebd6df5": "支付漏洞之拆分购买漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247630209&idx=4&sn=13b7e384901a33504a2f3bcf0e976ac1": "LiteSpeed 曝出严重漏洞,致使超 600 万 WordPress 网站遭攻击", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247513599&idx=1&sn=aa6fb0f490fb240d8e600ebd4bae0fe1": "Windows DWM 核心库特权提升漏洞 (CVE-2024-30051)(2024 年 8 月 15 日发布)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247513599&idx=2&sn=b25be6ece986744ffd85d9161050359e": "Copy2Pwn:CVE-2024-38213 如何仅通过复制粘贴绕过 Windows 安全机制", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247495117&idx=2&sn=e01a452e7ec7591d0ce4c072ca7a99da&chksm=fa594320cd2eca367401579eda5ca61a2b34d32f0fe1e69f829aca5eecbc06a998e4d565faee&scene=58&subscene=0": "献礼中秋! | .NET 文件上传漏洞对抗最新研究成果和新工具发布预告", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495853&idx=1&sn=e2491623e5caefdaadabfac23ad5bc2d": "未知技术大揭秘,让XSS漏洞无处遁形!0x2", "https://mp.weixin.qq.com/s?__biz=MzkwNjY1Mzc0Nw==&mid=2247485803&idx=1&sn=53b5c0dd82c224a4f2eed99846c2a4bf": "漏洞不收,系统就安全", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502031&idx=1&sn=c8e850fe73d19f83709ccb2fd1fbcbfc": "安全热点周报:HAProxy 漏洞 CVE-2024-45506 正在被利用需要紧急修补", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291588&idx=1&sn=e5d6b00bc850160b3d4f0d7615cb115b": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486283&idx=1&sn=b5539ba26595b5e6bb75cc17c0174299": "【漏洞通告】Google Chrome 安全漏洞(CVE-2024-7970)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486283&idx=2&sn=c8c0be5d21df164f65b935065ca1c59f": "【漏洞通告】Google Chrome 安全漏洞(CVE-2024-8362)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486283&idx=3&sn=8b9cac95c2168c9ef33e9368c6e07f6b": "【漏洞通告】Vim 中的堆缓冲区溢出(CVE-2024-45306)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486283&idx=4&sn=ad0d01a874ed28df70220a5fcb50d307": "【漏洞通告】TinaCMS 中的锁文件泄露 Tina 搜索令牌(CVE-2024-45391)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486283&idx=5&sn=4b53fd8a53fa5ade807248873d5c6816": "【漏洞通告】 ActiveMQ 服务在 OpenEdge 管理 Web 界面注入未经身份验证的内容(CVE-2024-7654)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486283&idx=6&sn=dab423aa01c0d69dc548faaa4e9d52d2": "【漏洞通告】使用 OpenEdge 默认 TLS 证书的客户端连接可能会绕过 TLS 主机名验证 (CVE-2024-7346)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458572285&idx=2&sn=0222e2ed9589877a875eb5cb86056ac2": "CVE-2023-2008复现笔记", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458572285&idx=4&sn=f46ed7fb4fee1632b7844f82c7f17301": "【零基础】系统学习移动端漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499934&idx=2&sn=0a517feb485eedfbb6f699b53824282a": "【漏洞通告】Progress Software LoadMaster远程命令执行漏洞(CVE-2024-7591)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499934&idx=3&sn=d97dffa533752178ad2b8111d4f1dfb4": "【漏洞通告】Kibana任意代码执行漏洞(CVE-2024-37288)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520732&idx=1&sn=8fafa0f4d8f56d2a8361866cce3ac84c": "Progress 紧急修复影响 LoadMaster 的超危RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520732&idx=2&sn=080d86bc26683d38189a49ac073be44c": "CISA提醒注意百特、三菱产品中的多个ICS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247493777&idx=1&sn=853ffd52cd3e4fe26b3ace83a7d96042": "50万元奖金池|ByteHACK漏洞挖掘赛等你报名", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495269&idx=1&sn=7a5a422f10ca150bbd73702a76e550bf": "CNVD漏洞周报2024年第36期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495269&idx=2&sn=eea86aadf895bd9500df03bddd96b8f7": "上周关注度较高的产品安全漏洞(20240902-20240908)", "https://mp.weixin.qq.com/s?__biz=MzU2MDE2MjU1Mw==&mid=2247485655&idx=1&sn=dc5948522083140e8f4649d471c8bf0f": "记一次帮朋友扬眉吐气的逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786854&idx=1&sn=25f5439f2c74dc7cc3ec94a747abc73e&chksm=8893b989bfe4309fd963a838e1969fff8021a2ad98ff018949349385565dfd71096351b12e72&scene=58&subscene=0": "或致防火墙崩溃!SonicWall SonicOS 管理访问和 SSLVPN 中存在访问控制不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503092&idx=1&sn=7eb9b0a033af163cd89464f3755bf727&chksm=f2585f87c52fd69170614c7ba395865961e3ec98e2972b274795314cc2b6e97829f91390f78d&scene=58&subscene=0": "雷神众测漏洞周报2024.09.02-2024.09.08", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247577870&idx=2&sn=e83ce73fccab4a6d0c7d4fb148fb3c47&chksm=e9146134de63e8225cb28582033da7a52ea67635411e71c8f4df2ebd9c1ded247a001fa9f5f2&scene=58&subscene=0": "安全动态回顾|网络安全知识手册正式发布 谷歌将Pixel EoP漏洞修复程序反向移植到其他Android设备", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492319&idx=1&sn=2bc2e6350f0d55656a7d48f640abc307&chksm=e90dc8f5de7a41e3148222ca6d7ed1370352ea86fa4783409fee3b32f05d92acdb19ebf0af63&scene=58&subscene=0": "腾讯微信存在可能导致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488839&idx=2&sn=fcd32690a504a9872791c88b214c515d": "【漏洞预警】Apache Airflow<2.10.1 远程代码执行漏洞CVE-2024-45034", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485682&idx=1&sn=bc1af13e2702db928a49381db10efa39": "CVE-2024-43044 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247486270&idx=1&sn=109d74d540fc4f336f7d36015fc357b9": "通天星CMSV6车载定位监控平台 getAlarmAppealByGuid SQL注入漏洞复现及POC", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651301371&idx=2&sn=00caa6e8c45708f265c740f2edad10ef": "SonicWall SSL VPN曝出高危漏洞,可能导致防火墙崩溃", "https://mp.weixin.qq.com/s?__biz=MzU5OTg4MTIxMw==&mid=2247503293&idx=1&sn=2993df5b35103c1436e5793b18fbec8e": "技术详解 | Divide and Conquer:ZK除法中隐藏的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTY2NjUxMw==&mid=2247513037&idx=2&sn=129204f4fb27bf8e1352d7eace42e2b8": "实战 | 某外汇常用CMS通用未授权RCE", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247630251&idx=5&sn=9bc4275223f801b6c81d099064753e1d": "美国网络安全漏洞披露管理情况研究", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502047&idx=1&sn=4976c29872b358ad54c24144d77593f7&chksm=fe79ec47c90e6551465957209a3719e2a12bbd7dbb860dc36a9edd85f7f8dd2e8d1528480c7f&scene=58&subscene=0": "FreeBSD umtx释放后重用漏洞(CVE-2024-43102)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502047&idx=2&sn=02def7dfd210294564b852a1c08450f3&chksm=fe79ec47c90e6551b868ea62e10ba5c9958c86c2642f2cded4d8bedaf27e100d34e02060ccf3&scene=58&subscene=0": "【已复现】Apache OFBiz 服务端请求伪造漏洞(CVE-2024-45507)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520744&idx=2&sn=d688e69adb847820b551749458a9b1b2&chksm=ea94a082dde32994e04c2f938e2fe0eb8aa1705c92cd5936096716788c157aff940c5983a116&scene=58&subscene=0": "FreeBSD紧急提醒注意严重漏洞CVE-2024-43102", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650849411&idx=1&sn=a65104c9166e2106afae06305049936a&chksm=80dba326b7ac2a3015a67bc263b6a654ca0e8d529c6dc375b2a1138f70c3c576d763ceb85073&scene=58&subscene=0": "青藤获评CNVD年度最具价值漏洞报送单位", "https://mp.weixin.qq.com/s?__biz=MzUyMTcwNTY3Mg==&mid=2247486263&idx=1&sn=f73406fc022a52936ad43f7b4d6adb58&chksm=f9d64a90cea1c38677f79c1c642b50d2371de1cf6f687a5f2a33ec022cd1a15db5bb77d47e9b&scene=58&subscene=0": "关于中通SRC恢复漏洞测试的通知", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247515741&idx=1&sn=4844e5434f49a01d9ca7e4dfa5a3cd8a&chksm=c144cce0f63345f682b14293450572f91013bfe8aa243de0049fee6aaf521decb3b74a6bb49f&scene=58&subscene=0": "攻击者正在以创纪录的速度利用漏洞——以下是应对措施", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499334&idx=1&sn=578d488c866c1b1f4931876613436946&chksm=973acd24a04d4432be35ea573f286a3d5382fd4cbb01f78e2938184bc0a9ddcbe924adc212b2&scene=58&subscene=0": "CNVD漏洞周报2024年第36期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499334&idx=2&sn=30d323fe7703de45ff63454267337734&chksm=973acd24a04d4432987ce1dbb4f130e01bc13809dfad68cad7b07c50f58d6df3cefd550eef8d&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240902-20240908)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495274&idx=1&sn=918ff18c97eecfe93c1816c31a2a0d78&chksm=fd74dea3ca0357b5a4cbbdd1ce172ef6f0702db64d44c1684604bd0c226681267b06daf04e8c&scene=58&subscene=0": "2023年度CNVD优秀单位(个人)表彰名单", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488847&idx=2&sn=4bf12094bda39048ae52b9edb1ea2e1b": "【漏洞预警】Ivanti Endpoint Manager 未授权反序列化漏洞可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664225217&idx=1&sn=0ebd1a9b4ffa506ab68f550a7dff2059": "CCS 2024 | 国家漏洞库网络安全漏洞治理产业协同创新研讨活动成功举办", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651456430&idx=1&sn=2fc8e4a6c25f2aedf0780201cf653d78": "CCS2024 | 国家漏洞库网络安全漏洞治理产业协同创新研讨活动成功举办", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786863&idx=1&sn=830d42f5a9877e0226f0be133543e6a8&chksm=8893b980bfe430960a4d3f99dfd5fefe6d1c298ab14665d4cccab6322be1d5689712b289b465&scene=58&subscene=0": "涉及微软多款产品,4个被利用的0 Day漏洞亟待修复", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502059&idx=1&sn=2a4c7dc68382398f1e644be7ef2820e7&chksm=fe79ec73c90e656573c8297ab60ed4699b08361a5cf6fbcf954b080a5f0fb8d7c32f13070418&scene=58&subscene=0": "微软9月补丁日多个产品安全漏洞风险通告:4个在野利用、7个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520759&idx=1&sn=abba88eb7f82857147b09b6d65f6a0bd&chksm=ea94a09ddde3298bd3eabfaf2b2d2b717a79896e6ee33f80bd7f180e34018a9592c880374715&scene=58&subscene=0": "微软9月补丁星期二到底修复了4个还是5个0day?", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520759&idx=2&sn=1fc5e0f7a15b2f6ee85191294e7148e0&chksm=ea94a09ddde3298b03f1d93d760c4ebe1bbf0831c2823c5d15bdc98a012ee7662c48075afa5d&scene=58&subscene=0": "Ivanti 修复Endpoint Management 软件中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247519878&idx=1&sn=88171477acce677f3ea59c51ae78a90f&chksm=eb7050b9dc07d9aff1465fa38febad1891e0ec5e104de9545d309c56afae28bced7beca62c75&scene=58&subscene=0": "2024-09微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247508186&idx=1&sn=866d9f074a573e308aa16343c41de7db&chksm=fa527564cd25fc72e6b1b3db72d5076e9768a947504c3e6de113d99b2e24fe0223df594f98b4&scene=58&subscene=0": "微软2024年9月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064335&idx=2&sn=ae95b2ac3eb9fe50dc11b71ae2308f86&chksm=f36e660fc419ef19c976b3738d066d4b60f7f036f183ba48fbafaed13f5584b33c4080e6a1cb&scene=58&subscene=0": "【安全圈】WhatsApp“阅后即焚”功能曝漏洞,黑客可反复查看", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064335&idx=3&sn=ef8069d8946623ebc55c3e93a45ad582&chksm=f36e660fc419ef19327e756dcb04ba4ac776b959972bfb8b560427de7fae57d06333410a3ea0&scene=58&subscene=0": "【安全圈】SonicWall SSL VPN曝出高危漏洞,可能导致防火墙崩溃", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523597&idx=1&sn=50c7a69fd3cdadcf9260a6ebd8d8f145&chksm=ce46161df9319f0b446aaff350028dad89891db30da8040766bb16c851b5504844ef7d50b65f&scene=58&subscene=0": "【漏洞通告】SonicWALL SonicOS 访问控制错误漏洞(CVE-2024-40766)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523597&idx=2&sn=8b37864c2d0ad3b3d5d38e5b5f081f6d&chksm=ce46161df9319f0bb837971b3d1b5f4a01bb985dff4713589a46f43a8c820e18404fd6b60fb5&scene=58&subscene=0": "CNVD漏洞周报2024年第36期", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488858&idx=2&sn=a158b142f68c979b4d73dcb63a9f1cda": "【漏洞预警】GitLab CE和EE 权限管理不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488858&idx=3&sn=38f32c755e6456532e48944e63b36f05": "【漏洞预警】Adobe ColdFusion未授权反序列化漏洞可导致代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515333&idx=1&sn=120ba17b146038df61811e208c7dd6bb": "记某src通过越权拿下高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247542076&idx=4&sn=5d192220d90813cbeb79c594b648750d": "聚焦AI与网络安全漏洞治理 推动国家漏洞库产业协同创新", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512612&idx=2&sn=ae566de4b75dbca3e319e0346eb6a590": "硬件密钥集体破防,英飞凌芯片暗藏14年高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485435&idx=1&sn=19f79ffed6a900a401edf811b06f4e2f": "「漏洞复现」智联云采 SRM2.0 autologin 身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502078&idx=1&sn=01e8c66b9473341191586457712ebbd3&chksm=fe79ec66c90e6570ba8594d8c1f113277d90c73c4abe4aae21303da31ed17ed6c9093931f7dd&scene=58&subscene=0": "GitLab身份认证绕过漏洞(CVE-2024-6678)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520782&idx=1&sn=e5eaa66675d142213f7058469e5446bb&chksm=ea94a364dde32a72ce25776dba29053b255994b2a432f179d45b77761bdd6400a0d76195be17&scene=58&subscene=0": "Adobe 修复Acrobat Reader 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650988435&idx=1&sn=6f045ca2902b977ac512c9c90104e2a1&chksm=80799da1b70e14b7f248baea53b0cb6c498c01a08274785298680319d6141c728d8d3a1c5cf1&scene=58&subscene=0": "原创 Paper | Apache OFBiz SSRF to RCE(CVE-2024-45507) 漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515433&idx=1&sn=7cb2d6b820800ffcb6aba2dc6cfe081f": "【SRC】比较有意思的几个漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492749&idx=1&sn=da357c7c2b994374c55b6dc7b70b670a": "某群管理系统存在默认凭据漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247488087&idx=3&sn=86731e9bc4cbd890cfe511414d20e180": "红队终极指南:“A-poc∕RedTeam-Tools”", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247521300&idx=1&sn=84ae528eacd397beb5132491e9211fa7": "全文干货!Redis漏洞利用详解 (上)", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247630351&idx=4&sn=7c9a2680f3c37fd0b28b9ee0516e9a1e": "硬件密钥集体破防,英飞凌芯片暗藏14年高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247501798&idx=1&sn=a76d5474a92c90670c66f8e9b85316f2&chksm=cfc560b9f8b2e9af07005fbaf393e5be4c3544e75d5d50c38398f79105e487214d2c7c08c495&scene=58&subscene=0": "中秋元月特设百万奖金池!增设10%额外奖金激励和豪华礼品!以洞会友,360漏洞云邀您共赏明月下的安全之美!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520799&idx=1&sn=2e34312c9e5c05291452bf69189cd8b5&chksm=ea94a375dde32a6355837cb4f23e5933d2192469425e3f2054204b18a8780163e090447f172b&scene=58&subscene=0": "GitLab 提醒注意严重的管道执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502111&idx=2&sn=a0e2e886edfb053f6e7a1694f1f8c228&chksm=fe79ed87c90e6491bf04dd2b03940c922066d6ba7c27b3d94172b185aaeb95b2b646abead2f7&scene=58&subscene=0": "Ivanti Endpoint Manager反序列化远程代码执行漏洞(CVE-2024-29847)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247508210&idx=1&sn=f4d51b36b045dc0575cac5343103829e&chksm=fa52754ccd25fc5a6e8a575662b4fe57916e8fc1a0c90a6cf2917cabd4af7fb14a88da0a4a22&scene=58&subscene=0": "山石荣获国家信息安全漏洞库CNNVD多项年度大奖", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484672&idx=1&sn=4c77e764e5765c0ad1569cae53a066c5&chksm=c12af881f65d71970b0da2104ef3a933f1c76da88821d891a50daf16dd7813052ed3d74a9e6f&scene=58&subscene=0": "【复现】 Zimbra 未授权远程命令执行漏洞(CVE-2024-45519)风险通告", "https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247505032&idx=2&sn=c75b3ad01df79dd65e9b15f78d79cd51": "第二届“天网杯”网络安全大赛,华为安全产品零漏洞完赛", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492757&idx=1&sn=dc9dd4d1d67d4fb2c56dc12b05f5195c": "某群管理系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTUwNTU5Nw==&mid=2247486492&idx=1&sn=98cf86db13198f7536c05f0ee025a34e": "【漏洞情报】惊!PC端某云盘存在Bug?", "https://mp.weixin.qq.com/s?__biz=MzU5OTg4MTIxMw==&mid=2247503353&idx=1&sn=0638683a745a06bcfa2780066b864099": "技术详解 | CertiK协助修复Solana大整数模幂运算中的DOS漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458573672&idx=2&sn=e7904e70a178847a903038130b5fdab2": "苹果Vision Pro被曝安全漏洞:眼球追踪技术或泄露密码", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650259822&idx=1&sn=3b0245be9578373bfbfcf824509c11dc": "【赏金15000美元】通过监控调试模式实现 RCE", "https://mp.weixin.qq.com/s?__biz=Mzg4MjY5MDE4NA==&mid=2247484226&idx=1&sn=4bd1a82ac2d7f30f8bdf0fbf9408d78c": "实时更新的漏洞库索引工具推荐", "https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247486880&idx=1&sn=e898bb43f0ebcd28df583ed34e08ef82": "向日葵RCEbypass", "https://mp.weixin.qq.com/s?__biz=Mzg4MzU3MTcwNg==&mid=2247485703&idx=1&sn=54fe4f888a552a21a9049472d6daff2a": "一次简单通用漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247486361&idx=1&sn=c3a760a9131d252ca4b230fbbc8e2a99": "万户协同办公平台ezoffice filesendcheck_gd SQL注入漏洞复现及POC", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520811&idx=1&sn=890fffef04e0244ca4a0fe359dfb3886&chksm=ea94a341dde32a57534c153b9526fd132574d3fa54a5c70c2bf6fe73dcf1c38e1c35c88ce3d1&scene=58&subscene=0": "CISA 和 Ivanti: Cloud Services Appliance 高危漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520811&idx=2&sn=cdd399a1e596944337296b502f39a272&chksm=ea94a341dde32a57462d257dbcf7542f8174cff89c0d51445832a0fbc2c9c94617cb6672be9e&scene=58&subscene=0": "Apple Vision Pro漏洞暴露虚拟键盘输入", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664225572&idx=5&sn=909cc8ab173a1ba6cdcd7a5a2c7c083b&chksm=8b59d9ddbc2e50cb971db9698bc8d95f04ffe8dff64c932d435490adae32bcaff9a711a38fa9&scene=58&subscene=0": "CNNVD | 关于GitLab安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064389&idx=1&sn=7a205baee5ce2be6ab3b75ba6a3c86c8&chksm=f36e66c5c419efd3d7b7824ab4d3b6ce965b4f87f2b86d1e236ffb7f3e3469f8b5e4e8cceefe&scene=58&subscene=0": "【安全圈】苹果 Vision Pro 曝出严重漏洞,黑客可通过用户眼动输入窃取信息", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495890&idx=1&sn=b243c56b528e1421f5ff31bca30701b5": "赏金15000美元的 RCE", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653930809&idx=1&sn=2b2812ff7b44b09082681743d1a2f018": "硬件密钥集体破防,英飞凌芯片暗藏14年高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3Nzk1OTA1OQ==&mid=2247484711&idx=1&sn=a697ff02702f42dff3f352e70cdc6ed0": "Fastjson 1.2.24 RCE复现", "https://mp.weixin.qq.com/s?__biz=Mzg4Mzg4OTIyMA==&mid=2247485735&idx=1&sn=4b22a954aa056bd97255e56f870c8b5d": "漏洞?忽略!忽略!忽略!", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247543592&idx=1&sn=ac94fd8b219d4813431a8ed23ce63693": "漏洞挖掘 | 记一次针对blade站点的渗透测试", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247486762&idx=1&sn=f6e65d0f82a5926b428ee57450f7f081": "API接口文件包含+命令执行", "https://mp.weixin.qq.com/s?__biz=MzU2MDE2MjU1Mw==&mid=2247485702&idx=1&sn=3f9ff14b98a25f19e2f62cf6e6691201": "ThinkPHP5路由rce漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490621&idx=2&sn=338a788a251ffb769772ad5f1bcb4993": "漏洞预警 | 浪潮云财务系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490621&idx=3&sn=abbfaa6e264b587103b417a551ed5b2d": "漏洞预警 | 亿赛通电子文档安全管理系统反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492765&idx=1&sn=81092c3fdd5d05d5d63c64de16623c58": "某群管理系统全版本存在登录绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247543615&idx=1&sn=54bf466b40d894cbd76c3abaaab0f4b9": "小程序渗透 | 利用ce修改器挖掘内存修改漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247613012&idx=1&sn=48f79244af863de979f6f28ffc191ddc": "漏洞挖掘 | 发现隐藏子域的虚拟主机", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485471&idx=1&sn=a7a8304b7f63c4013d9b9cd0b52b6556": "「漏洞复现」用友U8 Cloud AddTaskDataRightAction SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651302005&idx=3&sn=942ea6bf2349d306ead962b60cf819b1": "2024年推出的11个顶级漏洞悬赏项目", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490953&idx=1&sn=2d774577bc76cb86e26ca2ef54c04852": "代码审计 | phpcmsV9.6超详细RCE代审流程", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490633&idx=3&sn=d5857d3cf223b7c6f6226d1e64d588e2": "漏洞预警 | 泛微E-Cology SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485035&idx=1&sn=591d00a4c81f2feee376ea8b445237c2": "漏洞推送|Array Networks APV应用交付系统命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247505935&idx=1&sn=69ea4216b3d472df4bc011e01a477e21": "寻找IDOR漏洞:Key Endpoints and Resources", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247613013&idx=1&sn=5a900033e5a651e882949308eac88392": "黑盒测试 | 挖掘.NET程序中的反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247543616&idx=1&sn=09b4d91f88fd6da791a09b13d8217cba": "漏洞挖掘 | 记某大学信息服务平台密码重置缺陷", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485480&idx=1&sn=98ac1c915968172bae2f5e91462f8e8e": "「漏洞复现」唯徳知识产权管理系统 DownloadFileWordTemplate 文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247497074&idx=1&sn=11d005d6c531b2412d88443edf8cf9dd": "使用Joern进行漏洞挖掘(Joern支持Android漏洞挖掘)", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650259834&idx=1&sn=4d9522a2c80eda88a87262e7cc067b9a": "Gmail 中的 HTML 表单注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515474&idx=1&sn=ceb0a66335902d4aa2974021d04e15c0": "手把手edusrc漏洞挖掘和github信息收集", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247521351&idx=1&sn=cb4e12582f843e6211bac2dd8fa7e5ad": "全文干货!Redis漏洞利用详解 (下)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458573979&idx=3&sn=3d9c0d170d71f48b1b6c87b0b10c0e5e": "今日更新第十章录播!0day windows", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506979&idx=1&sn=cf1a5f323f458590215473dd71ad4555&chksm=cfcabf37f8bd36214d8a6355a6b51781fdc382de7fbbf0ae147b1ca4e34a117a6dcd14af296f&scene=58&subscene=0": "漏洞通告 | Ivanti Cloud Service Appliance 命令注入漏洞(CVE-2024-8190)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503099&idx=1&sn=1832f11e6c8c65f016aac1a47d2d93ce&chksm=f2585f88c52fd69e177373358cd9638181df5d2f1673a1b6320c7830bf4f96d0d04fb87a963f&scene=58&subscene=0": "雷神众测漏洞周报2024.09.09-2024.09.17", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520848&idx=2&sn=d95814f9037c7711dfcb09cd0e590f0c&chksm=ea94a33adde32a2cc2d70ae1c9f784e58a1068b3439966be8fc0130d96ff48e1aae33021a835&scene=58&subscene=0": "博通修复 VMware vCenter Server 中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520848&idx=4&sn=5dd6c8f2b2d48123ef978d8ef1b071ff&chksm=ea94a33adde32a2cfb349b7e9cc119746f3287400e9fd952e369f64de22f4b7a706240b85d71&scene=58&subscene=0": "Google Cloud 依赖混淆漏洞影响数百万台服务器", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502134&idx=1&sn=188a5e6a0729aeb0acdfa68c6f634eaf&chksm=fe79edaec90e64b8a70ffe83db1e01417bce3429dc8304556cd7dece2f28f643fb06cfcd836c&scene=58&subscene=0": "VMware vCenter Server 堆溢出漏洞(CVE-2024-38812)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064505&idx=2&sn=4f43301ff2f7aea69701f9caee393e63&chksm=f36e66b9c419efaf8abe64f74ac1deebb763a2ad3298be33ecad40d79f7d7eb8c50ee69e6649&scene=58&subscene=0": "【安全圈】VMware vCenter Server 漏洞让攻击者能够执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247578012&idx=1&sn=8f71511509699663e10b684f507e850d&chksm=e91461a6de63e8b0588b8f65c1d668014ee13a7b52f21c346c5d24a3829662398a9289002b91&scene=58&subscene=0": "黑客自 8 月以来频繁利用公开漏洞攻击 WhatsUp Gold", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247508415&idx=1&sn=dcf10b1f8619a087f4f5cc65105f49cd&chksm=fa527401cd25fd17f06017d2d19cddd790b2921d65a84f074fa89bb4e1411bd980b5854088f2&scene=58&subscene=0": "FortiGate SSLVPN 堆溢出漏洞分析与利用", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495294&idx=1&sn=c41d53679f352766144c8cb1da62a9ce&chksm=fd74deb7ca0357a1f50cb03e184552d8ae2c866eb4285aa8474bb704a4a0e379c0e303858925&scene=58&subscene=0": "CNVD漏洞周报2024年第37期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495294&idx=2&sn=9aebbbfe94c24d3a4691f81461c6196c&chksm=fd74deb7ca0357a1edd2a96e0702d41fd6263b15b6f0bebbaf4a23d390dd1c0ec3c5ca413692&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240909-20240915)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495928&idx=1&sn=1afca4fc9b4535d61ae95af4c09b168f": "一次十分详细的漏洞挖掘记录,新思路+多个高危", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247485533&idx=1&sn=b70b23874678655aa24a3f25024b593d": "【海外SRC赏金挖掘】供应链攻击,通过依赖投毒实现RCE(Dependency Confusion 漏洞)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064524&idx=3&sn=ac02f46258dacbf415152fe2bad17d2e": "【安全圈】建筑行业会计软件Foundation遭受攻击,威胁行为者利用MSSQL漏洞进行入侵", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485498&idx=1&sn=eef8d9f5be09d05d40f17078b097d54b": "「漏洞复现」华望云会议管理平台 checkDoubleUserNameForAdd SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520856&idx=2&sn=e42af408ee177430c69f52668c7cc6eb": "CISA、FBI督促消除XSS漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523639&idx=2&sn=f72c98fada6e952b880ce69d69e1f446": "CNVD漏洞周报2024年第37期", "https://mp.weixin.qq.com/s?__biz=MzAwNDUzNDExMQ==&mid=2247485066&idx=1&sn=558a7a2dfc736e15b0826905c799ef0f": "Patchwork(白象)APT组织PGoshell后门攻击场景复现", "https://mp.weixin.qq.com/s?__biz=MzI4NTE4NDAyNA==&mid=2650396972&idx=1&sn=cf200ebcf2ba4ee3988760f23507cc03": "【安全科普】OSS存储桶漏洞总结", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512642&idx=2&sn=028197550edfd20b6316e7d8e8b1f2e9&chksm=ebfaf562dc8d7c74377e4de3061c541587ecccfae85d1fcc3f4de157f976354eb2f57e9ccf47&scene=58&subscene=0": "谷歌云被曝重大漏洞:或影响数百万台服务器", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502168&idx=1&sn=218d2b0e656b39a5e0ba5453cb151804&chksm=fe79edc0c90e64d60068b582d417b2f2df79b628fed0b9f6868a071dc3c2b6fd6480d3d17ed5&scene=58&subscene=0": "GitLab SAML 认证绕过漏洞(QVD-2024-40180)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502168&idx=2&sn=5331760540fabf360fd05ab9f060c51d&chksm=fe79edc0c90e64d64b3af5b90275bf2792a703588343e49cddfcce7b2981be18577010f48589&scene=58&subscene=0": "【在野利用】Ivanti Cloud Service Appliance 命令注入漏洞(CVE-2024-8190)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520856&idx=1&sn=99796b9ba1361fcd9611a05729e2219d&chksm=ea94a332dde32a2463e0bfdcf157730ba4f594970fb1f1c5d6338bd7b9fb1c0f066de30cf974&scene=58&subscene=0": "GitLab修复严重的 SAML 认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499350&idx=1&sn=4cc74803538598b1beb87141e065be88&chksm=973acd34a04d44227871d98d556dcc37e1a86f744212f05ae44b6dd5b3d11d21aa3d94d48471&scene=58&subscene=0": "CNVD漏洞周报2024年第37期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499350&idx=2&sn=4102c823ee70a61fbb84a0eb8d98af47&chksm=973acd34a04d4422e8b978aeeb23b403acacbd9e398eb75b004a3ee1d4d2683be1fd5a912e6f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240909-20240915)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523639&idx=1&sn=e1a9a1309d80e72dce3a14ecad7c3119&chksm=ce461627f9319f31cb245eca32db530f0283eaed784dd2b1008f477a71a0524ae660e6fc579c&scene=58&subscene=0": "【漏洞通告】VMware vCenter Server缓冲区溢出漏洞(CVE-2024-38812)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495934&idx=1&sn=5b61a877e3f1aef771b82f1d489db53d": "命令注入漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247490728&idx=2&sn=ca8ae5825b37f344fb72b658d9b38764": "WPS的漏洞原理解析【黑客渗透测试零基础入门必知必会】", "https://mp.weixin.qq.com/s?__biz=MzkzOTI2NjUyNA==&mid=2247485008&idx=1&sn=00337e072eff92e67f03b3d57e06fc03": "macOS 日历 0-Click RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMjAyODU1NA==&mid=2247491632&idx=1&sn=6edbe0baa82b577229a8e00a2e680e9d": "易行网安学习平台:3000+ POC文章,等你来“取经”", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499994&idx=2&sn=d531771e2f43278c12836011c3406696": "【漏洞通告】Ivanti Cloud Service Appliance 命令注入漏洞(CVE-2024-8190)", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485507&idx=1&sn=581907af866932abfcd794f98e71e17e": "「漏洞复现」万能小程序运营管理系统 _requestPost 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651456579&idx=1&sn=152d44b230945dc282843378b205c121": "信息安全漏洞周报(2024年第38期 )", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247489765&idx=3&sn=e446cb2faef7325f096cd7ad4e727070": "什么是已知被利用漏洞 (KEV) 目录", "https://mp.weixin.qq.com/s?__biz=Mzg4MzU3MTcwNg==&mid=2247485719&idx=1&sn=3824e63b8c04f2ff371ffb48e88d1601": "一次简单通用未授权漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512650&idx=2&sn=0eabde31993b06b2caf7204aa68c6caf&chksm=ebfaf56adc8d7c7c7e69336a2f4b969c13cee905fada9ca951f51e1348c1cc1ab85bfe3fcba4&scene=58&subscene=0": "“PKfail”漏洞曝光:全球近千种设备安全启动机制失效", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502180&idx=1&sn=162866a32a0466de02a7e97212e45005&chksm=fe79edfcc90e64eabf7c347da74ba93f7855ace35b296f6ca338f9ed0ce3b3a1a9701c15a1e9&scene=58&subscene=0": "【已复现】Ivanti Endpoint Manager反序列化漏洞(CVE-2024-29847)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520876&idx=1&sn=4efce31d5b8659ed3e426f95d90c4384&chksm=ea94a306dde32a10266fe5b357f6ce4e9f8404a2fbef256f7a4ef79b91a3158a225b496f9f09&scene=58&subscene=0": "微软SQL服务器漏洞被用于攻击承包商软件", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506983&idx=1&sn=c086ab2af199f50371565cb8c7b7b6b5&chksm=cfcabf33f8bd3625ce4ad4262146c35456c6f35f7397c88af4eb714f90ee008dc79fff7c3d4c&scene=58&subscene=0": "漏洞通告 | Ivanti Endpoint Manager 远程代码执行漏洞(CVE-2024-29847)", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492637&idx=1&sn=902b7d00667aae6392217033d7241912&chksm=96f7fb70a180726656d4f57bcfecd7b45dbc6cf43dc805d5c5052e355dd8eada1b48d774f487&scene=58&subscene=0": "【已复现】Ivanti Endpoint Manager 反序列化致远程代码执行漏洞(CVE-2024-29847)", "https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647791525&idx=1&sn=53fda8c621f38d6a60214e808f654212&chksm=87709ff2b00716e457a360871bd408a5902b703ce4f85c89b54d26a810c9e10a7100d9005bfd&scene=58&subscene=0": "下一代SAST |灵脉SAST3.5智能AI漏洞验证技术智慧再升级!", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485049&idx=1&sn=6de51cd0b0f7da7f4725bf6f4806006b": "漏洞推送|【0day】深大智能科技有限公司管控平台getAreaInfo存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064581&idx=1&sn=a8d25f47e9142354cddaccee15a9e264": "【安全圈】速更新!GitLab发布更新修复CVSS满分漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523651&idx=1&sn=eadc5c5144a966ccbb3daf5470278865": "【漏洞通告】Ivanti Endpoint Manager 反序列化漏洞(CVE-2024-29847)", "https://mp.weixin.qq.com/s?__biz=MzI4NTYwMzc5OQ==&mid=2247496908&idx=1&sn=7dfe5c5b700278fba8e76368a37520d6": "2300$:分享4个高危业务逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485516&idx=1&sn=ee9e2fcfcb9eadb2840c574b194480c7": "「漏洞复现」灵当CRM marketing∕index.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485621&idx=1&sn=1b13c64244a3add656f9f9c4d082f471": "某最新微信广告任务平台存在任意文件上传漏洞(RCE)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492274&idx=1&sn=301cfb2a6ccda3bad5c3a7fb805106bb": "一款用于检测jsonp及cors漏洞的burp插件", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247489858&idx=5&sn=27c6a1a37bf4c0173ad9b9f6dd377a02": "Broadcom 修补紧急 VMware vCenter RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649792463&idx=3&sn=03ab8c9e798942a59829883192aaa3fe": "CISA 警告 Apache HugeGraph-Server 漏洞遭积极利用", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650600682&idx=4&sn=5579dc3c28547367010fca0545123bec": "ScopeSentry-资产测绘、信息收集、漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247529598&idx=2&sn=26aadaff6022074bcfefaa80cd52e22b": "警惕风险突出的100个高危漏洞(下)", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247516296&idx=1&sn=6a7f606a07a056c53e6534c8cf6ce3e2": "记某src通过越权拿下高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515521&idx=1&sn=799603ba4aee9963ef177ab5e5022953": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247630684&idx=3&sn=1a2ce93b4bef5e52ca10194680f36bab": "“PKfail”漏洞曝光:全球近千种设备安全启动机制失效", "https://mp.weixin.qq.com/s?__biz=Mzg4Njg3MDk5Ng==&mid=2247486723&idx=1&sn=acb600df69a2783386c771505c276b14": "nuclei+ai 解放双手,自动刷洞,同时poc共享!!", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247485556&idx=1&sn=124abd373abcf05cfce32306e6ee3cbe": "【海外SRC赏金挖掘】供应链攻击,通过依赖投毒实现RCE(二) -- PyPI", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247494898&idx=1&sn=023b74a598e5750ffce665ac515eea64": "SRC挖掘实战之某勒索病毒解密平台命令执行", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495950&idx=1&sn=c424f3a1985e8525da2274979195b9eb": "寻找IDOR漏洞:Key Endpoints and Resources", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488909&idx=1&sn=f75bdb706102963e90f97ff2d965bc38": "【漏洞预警】Ivanti CloudServiceAppliance 未授权 路径遍历漏洞CVE-2024-8963", "https://mp.weixin.qq.com/s?__biz=Mzk0OTUwNTU5Nw==&mid=2247486506&idx=1&sn=da29f2232dde980f8760042ae32f20af": "【相关分享】记一次某985高校的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247505943&idx=1&sn=7c0f15870782a61558fbb2add2e482cd": "Android活动(Activities)Exploiting 技术", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485057&idx=1&sn=10dbde78f656bc4714701e2063a354cd": "漏洞推送|数字通云平台智慧政务存在登录绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651132290&idx=1&sn=c647762ca51047695761be68b988000b&chksm=bd15a1518a622847ef28400f58a458e4df0033d1228b7fbabad25ffeec88e1ad3c6fc5fdc1f5&scene=58&subscene=0": "警惕风险突出的100个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786922&idx=1&sn=65c358c89c58d491a2f92c2b3631ca7a&chksm=8893ba45bfe4335380d4a58bf6c3a5e54f4c0d13f8a4d2503f2a996b11bbb998c2858f824979&scene=58&subscene=0": "ZeroLogon 到 NoPac 漏洞:Black Basta的漏洞利用武器库", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502185&idx=1&sn=4c979dfd0e63af2bb96c91360d9e23d9&chksm=fe79edf1c90e64e7751ef785fcb7e26cf09d317648d2b36002ac1b42ec41a60b323d60527343&scene=58&subscene=0": "安全热点周报:时隔一周,Ivanti 又公开一云服务设备漏洞正面临在野利用", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507011&idx=1&sn=e966bc67a09c85f8e234fadcb822e12b&chksm=cfcabf57f8bd36418bf9a324af25302777a1d6e6ec1f3dfa7c0a2f2d2d55fe4c40778ed553e8&scene=58&subscene=0": "漏洞通告 | Ivanti Cloud Service Appliance 路径穿越漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520886&idx=1&sn=d50fe47ebc8b4ad640aab8d8ead453e4&chksm=ea94a31cdde32a0a3cb660901fbb4949d1bd11b55a7718fcf71f3c28cf274e27bc3e091b0c27&scene=58&subscene=0": "CISA 提醒注意已遭利用的 Apache HugeGraph-Server 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520886&idx=2&sn=126c04a9c54e26df9c23fa6d3ce0a917&chksm=ea94a31cdde32a0a9d0038d0c44c2cdb76dd526d2aef602402cdea8f1901b21dc339b653ba1b&scene=58&subscene=0": "速修复!FreeBSD 中存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503106&idx=1&sn=23ddf55f8f40bb2367fcbaaf425edf8c&chksm=f2585ff1c52fd6e7e85f797c28988112b945c7e9158ab46c6f8ec8b5927216d0b80948cb5d27&scene=58&subscene=0": "雷神众测漏洞周报2024.09.18-2024.09.22", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495308&idx=1&sn=69a2bef801bb9d86845d338bed9efc0b&chksm=fd74de45ca0357535b3277a535bf7d21e672a4972b88f50412fd9b5574952cd2c16498210789&scene=58&subscene=0": "CNVD漏洞周报2024年第38期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495308&idx=2&sn=fe020ae08c8c54e40ed0683eac5665be&chksm=fd74de45ca03575353101e3329ca94fe73c5617c10acd2a652e53963cf1acc5ec876e6004c85&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240916-20240922)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488914&idx=1&sn=88ee3915a1e646fe7d315363f89d9525": "【漏洞预警】Apache Tomcat资源分配控制不当漏洞可致拒绝服务CVE-2024-38286", "https://mp.weixin.qq.com/s?__biz=MzkwODUxMDUwMg==&mid=2247483800&idx=1&sn=e6374d549b72047491deabdb535f1c70": "Thinkphp5.1.0-Thinkphp5.1. 文件包含漏洞(CNVD-2024-29981)", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489804&idx=1&sn=208a870745cf2cc96f3f4a90779302d0": "警惕风险突出的100个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664226041&idx=3&sn=87dad19f51d6050fe425f9c4c3ef63e9": "警惕 | 风险突出的100个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499360&idx=1&sn=7cc2d4a08ebffe00391492e76d7d3abd&chksm=973acd02a04d4414462822489e2701a535ce2456914037bb717f32ee1b6eff40f9b9862a8c8a&scene=58&subscene=0": "CNVD漏洞周报2024年第38期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499360&idx=2&sn=dbb3747c61799c5448c0974d7f616e97&chksm=973acd02a04d4414b15d84ec513fe6fd9f09a99fc65835143af33e1f44cbb36d3802c8b4eda1&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240916-20240922)", "https://mp.weixin.qq.com/s?__biz=MzU4MjYxNTYwNA==&mid=2247487486&idx=1&sn=50026139607238479c299cba6efbf37a": "GraphQL API 漏洞挖掘基础学习", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488928&idx=1&sn=9b041c33441ec8dad16d2e9aa1d5f8d8": "【漏洞预警】PgAdmin身份验证缺陷漏洞CVE-2024-9014", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488928&idx=2&sn=414f128e94f5fb795fc1b07d9edeb18c": "【漏洞预警】Apache HertzBeat SnakeYaml 反序列化漏洞可致远程代码执行CVE-2024-42323", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488928&idx=3&sn=aaefa8b1dc4835c9c7b6d1856cad91e4": "【漏洞预警】Google Chrome Dawn UAF漏洞CVE-2024-8904", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485558&idx=1&sn=3c314e2081007f57f119b3007f0b9976": "「漏洞复现」某徳知识产权管理系统 UploadFileWordTemplate 文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484244&idx=1&sn=69857ae11e16ae9b9f7951034746293b": "第六期 · 安钥®「漏洞处置标准作业程序(SOP)」征文启示", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247618627&idx=1&sn=ac13190f67261a80fcad3befe8ddcf53": "【实战攻防纪实】“NGSOC+N”联动出击,7分钟扼杀危急漏洞利用攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520913&idx=1&sn=ff28d982d0fbb9bf50ea1e84d3243134": "10个严重漏洞导致数千燃油储罐易受攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520913&idx=2&sn=2148647cf20c87cf57d601cf283f4805": "CISA:这个严重的 Ivanti vTM 漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500015&idx=2&sn=fa3c164a593a346616882cf67bd8bdea": "【漏洞通告】pgAdmin信息泄露漏洞(CVE-2024-9014)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500015&idx=3&sn=92c0fd669af8f3ac0706529c42eaf15e": "【漏洞通告】Apache HertzBeat SnakeYaml反序列化漏洞(CVE-2024-42323)", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649167011&idx=2&sn=113127a8f0ae39344a8a09d1559c1f82": "你的接口漏洞该补上了……", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247515974&idx=3&sn=6e2161a830081cda8b67c38236329724": "编写 iOS 内核漏洞利用的分步指南", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247515974&idx=4&sn=3ebabe689ca0e75be47034b569f34b2c": "CVE-2024-9014 (CVSS 9.9):pgAdmin 的严重漏洞使用户数据面临风险", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786931&idx=1&sn=d811fc395cb65cd42f076751aa4df447&chksm=8893ba5cbfe4334add98d795a0fadf030fc6f74bee6394f49d954c1990f6b2e088822b67fdef&scene=58&subscene=0": "影响全球数百万用户:主流路由器默认设置检出30个可利用漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064660&idx=3&sn=76404297d360a8a29d29bd4e1754bf06&chksm=f36e67d4c419eec244711e4bb0c826cc9d4dcec6041c9fba8c7c58e55ac12b7addde0fdb3206&scene=58&subscene=0": "【安全圈】你的接口漏洞该补上了……", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649792547&idx=3&sn=823d400dff519ab40c4110032852ffb6": "TeamViewer for Windows 漏洞可让攻击者提升权限", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490778&idx=4&sn=1ce49903acde1db6b71e74a79373edbe": "工具 | Poc-Monitor", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650988745&idx=1&sn=7614cfdb45e03ac394179c55a5ecb303&chksm=8079a2fbb70e2bed49da87ac41567a61d9448264392ab96640bf673f06aa62f0b09c233cc28a&scene=58&subscene=0": "【知道创宇404实验室】警惕 Unix 系列 CUPS 多个安全漏洞最终可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512712&idx=2&sn=1462102ea6899032e23a0e2c3f92f742&chksm=ebfaf5a8dc8d7cbe7bfbcd97e005992c93312c65e14e9522f033a1569d658fa6d41c80d84e6d&scene=58&subscene=0": "起亚汽车曝严重漏洞:仅凭车牌号就可远程控制汽车", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502207&idx=1&sn=cfc9b1847e536079d77a15b62c233f71&chksm=fe79ede7c90e64f152e40ebd2eb9ea5c25f60156788a4a3ba17b585916170400fcc6cb8739d3&scene=58&subscene=0": "cups-browsed 远程代码执行漏洞(CVE-2024-47176)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520951&idx=1&sn=05f9503385c7ca3c9f3e13e6c82e0f69&chksm=ea94a3dddde32acb03298861ce169a6c4c83c15dd24d70d9fe591e2d0aa7ddc17fffe73092b2&scene=58&subscene=0": "仅凭车牌就能远程控制起亚汽车,漏洞已修复", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507014&idx=1&sn=61509a9ff7f832712d14e53f16aa5587&chksm=cfcabf52f8bd36446dd0ad3a1f8b89c463fec0ad2bb65bbd333807707111b21ff33e1d6ceb4d&scene=58&subscene=0": "Unix系统打印服务爆RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486358&idx=1&sn=aaa326ccbda26617b134607032873818&chksm=ec6fec96db186580a977e00197d6d466c3106efd5efd42c98d42b8e177b4c6afdd0fa1f9fe5c&scene=58&subscene=0": "Unix CUPS 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458576190&idx=2&sn=a3ed8ca9a5fdd06e093e2a6fc36dfb70&chksm=b18dd5b486fa5ca2fef1a21738c63db1056fdc46ae8c15de0dea98a184932ca6db29d2450fea&scene=58&subscene=0": "起亚汽车曝严重漏洞,仅凭车牌便可远程控制起亚汽车", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064708&idx=2&sn=bf69c637c7d271c8d448931606eaae24&chksm=f36e6784c419ee924165c15dde3c2a7866369a8243bcdc17416bd9e83f80b425804d7f0d3c77&scene=58&subscene=0": "【安全圈】Linux圈曝出高危漏洞:远程代码执行风险升级", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182336&idx=1&sn=e6cc1cbfee8b7289ecfe56d1b9ee179f&chksm=f448697cc33fe06afdf4135e96754b4e3309faa336f83f0a173cf1371a5ad604e58c775d3618&scene=58&subscene=0": "【更新】Unix打印机组件RCE漏洞已复现", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523672&idx=1&sn=6e1a31099f47934302aa92d40af90630&chksm=ce461648f9319f5eb4e4b221faf298e3e6beab2dc56c5736bd5e0a3ca5d305d171461718a05d&scene=58&subscene=0": "干货分享 | 2024年漏洞利用五大关键趋势", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247578221&idx=2&sn=69bbe929a17138a57a3de2a5cf92b578&chksm=e9146257de63eb4184599261d7c268a8569d8cfa24bdfd47ef37f96857e5238ec7531f68be85&scene=58&subscene=0": "GitLab 公布存在严重的管道执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495975&idx=1&sn=db6b0aefc65adf02759bda48c194704a": "api漏洞系列-401、404和302", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485585&idx=1&sn=c711481e190027598179924e34fcfb23": "「漏洞复现」九块九付费进群系统 wxselect SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247490346&idx=2&sn=e677ac0fbbe56316f33dcfe83c2faa03": "【Exp】绕过 EDR 防病毒软件以获取 Shell 访问权限", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650601088&idx=1&sn=0c99dc169f2ebe2626e133081e85d7cb": "上交所系统被股民买崩了?异常卡顿、交易延迟……现已陆续恢复;|起亚经销商网站曝出严重漏洞!黑客可在30秒内远程操控数百万辆汽车;", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247516775&idx=2&sn=d362c5f08126a7cf97aaf861acbd4384": "Cups 浏览的远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651303102&idx=3&sn=fa91293a9b750eac95bd18ebebf9fa5e": "起亚经销商网站曝出严重漏洞!黑客可在30秒内远程操控数百万辆汽车", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649792560&idx=2&sn=e47d6e8a61a4c6094ecd910ca9ceeab6": "所谓“核弹级” UNIX 打印系统 (CUPS) 0day漏洞可远程代码执行,但严重程度不及预期", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247530424&idx=2&sn=49f41b8f25ca827e202d8e7e3dd4eead": "1_【漏洞预警】GNU Linux打印服务多个安全漏洞导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490796&idx=1&sn=a6123b3c3e1f7ce6772dc9a7d568ea84": "漏洞预警 | Apache Tomcat拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490796&idx=2&sn=341b147c2dd9efefb58dcf81539ec8ec": "漏洞预警 | 唯徳知识产权管理系统任意文件读取和文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490796&idx=3&sn=090bd94b95dbff2dee3a5ac216a2b97e": "漏洞预警 | 商混ERP系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247488670&idx=1&sn=bb32ace8a9ef4d320c453c944cba4648": "警惕风险突出的100个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786965&idx=1&sn=9d5d6532dfa21eebce12d91147a0581d": "仅凭车牌号就可远程控制汽车!研究人员揭露汽车严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497246&idx=2&sn=245d6a5e964aedf66d4cfbed2adcfd85": "FYSA –GNU-Linux系统中的严重RCE缺陷", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652111095&idx=2&sn=5a90bb275b25a3fa20da73c1c6ee5bc6": "高危漏洞:思科修补 IOS 软件中的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064747&idx=2&sn=794aa8ee4f38945f6c525525ffa0fcf1&chksm=f36e67abc419eebd4c6abf786ab80ae28d1d0f727283f05add4aa4ea22224aea23ccf3f15642&scene=58&subscene=0": "【安全圈】ChatGPT 客户端曝“记忆”漏洞,黑客可令 AI “转发对话记录”", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064747&idx=4&sn=0ad8e79bc37793bdec4e27ceccd86183&chksm=f36e67abc419eebd1f227c0320e2024d7e1443e23e6e656cc7b8c73ea12037871637df6270d4&scene=58&subscene=0": "【安全圈】起亚经销商网站曝出严重漏洞!黑客可在30秒内远程操控数百万辆汽车", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc0Mjc3NQ==&mid=2247486416&idx=1&sn=911c51ebc3ca6d1c300664448e32d652": "Linux 最新 CVE 9.9 分末日漏洞,还居然被偷家先泄露给黑产", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488944&idx=1&sn=6e56b8ac17480c984aa0ed08a2d28149": "【漏洞预警】ArubaOS 存在代码执行漏洞 (CVE-2024-42506)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495980&idx=1&sn=3836d926af7f7a250ab81bb9cc036cbb": "由403所发现的SSRF高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjQyMjcwMw==&mid=2247486505&idx=1&sn=49391bc87433d43d4fa2e05bac3d222d": "某电子文档管理漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515753&idx=1&sn=7bd1a5c5390651ee8dd6458a53d98b44": "实战 | 记一次1000美金的TikTok盲打XSS的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg3NTk4MDQ1NA==&mid=2247484706&idx=1&sn=9dd2681a298415b991066ce04dba18f6": "泛微E-Mobile client∕cdnfile 任意文件读取漏洞【漏洞复现】", "https://mp.weixin.qq.com/s?__biz=Mzg3MDk0OTc1Nw==&mid=2247487762&idx=1&sn=ceddd0b685d873b2d207f46e97c26a42": "开源:快速代码审计辅助工具,助力0day挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491220&idx=1&sn=6440ccbe44aee8599facf701e45cd66c": "黑客利用Windows 漏洞-盲文“空格”进行零日攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064768&idx=4&sn=4a40b11619da28fb516d2360775dd505": "【安全圈】CUPS 漏洞能使攻击者对Linux电脑远程执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247490000&idx=1&sn=b6f9fa784439345553fe6af8361f1d00": "CVE-2024-21310 Windows Cloud Filter Driver 池溢出漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520960&idx=1&sn=919fb43b3860018ef3997b0e4159dee6&chksm=ea94a3aadde32abc1b1672f51c4f96ac9221aa568d099da519cf4bbabc756923465716a0ad6e&scene=58&subscene=0": "Progress:尽快修复 WhatsUp Gold 中的多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520960&idx=2&sn=245f37b0bdb6b7db64b1b5f20c65a6d8&chksm=ea94a3aadde32abc108ecad23597f05291d6371f5eedbb64d286868f3aaa0f5a360d87b3c36b&scene=58&subscene=0": "英伟达容器工具集中存在严重漏洞,攻击者可获得完全的主机权限", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651132386&idx=2&sn=474202fb0308842c0b28c6ad93793beb&chksm=bd15a1318a6228275f9c84a220df913ebc76eb922b7086a1fc26b9862b297c3f545cbe6bcb0d&scene=58&subscene=0": "Patchwork集团攻击手段升级,利用新型后门威胁我国网络安全;英伟达容器工具包严重安全漏洞威胁主机系统安全 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247487124&idx=1&sn=a82e0e0fca275c4cc59c978d3b1dedc9": "第105篇:方程式工具包图形界面版V0.42,更新永恒浪漫exp对Vista、Win7系统的利用", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488949&idx=1&sn=5eec8829e9d5dbdc1b3b13f4c1a84fbe": "【漏洞预警】Apache HertzBeat SnakeYaml反序列化漏洞(CVE-2024-42323)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502218&idx=1&sn=1911aaea26cf117a13c8db46af66a5ba&chksm=fe79ed12c90e6404076d806b29b138e8264d9b0a1360a43d0046a74692889ba53aa00906a2f8&scene=58&subscene=0": "安全热点周报:严重的 Ivanti vTM 身份认证绕过漏洞现已被攻击利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520981&idx=2&sn=804d3895d9a0ec8b221e9c44449e8673&chksm=ea94a3bfdde32aa9f5bdbcd7d9bc4439b09e511516e9c3a98c685f059104336ba92c2d6638a7&scene=58&subscene=0": "PHP中存在多个漏洞,速修复", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503113&idx=1&sn=9e0af14b0914adb98dda4decfe908e5e&chksm=f2585ffac52fd6ec9c2078a493874ad925d0cd35a1aa5c7176ad513d6dcfcc4c3e39c345df9e&scene=58&subscene=0": "雷神众测漏洞周报2024.09.23-2024.09.29", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247578261&idx=3&sn=b15c40e0a69bb0c74e3dadee1da58822&chksm=e91462afde63ebb9ebd5fa6b9d9f9604ee77def49bba75bb7ae728aa1eb0b619a0ac5f3e1b18&scene=58&subscene=0": "安全动态回顾|国家计算机病毒应急处理中心监测发现13款违规移动应用 起亚经销商平台被发现存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247542901&idx=2&sn=2133da115eacf4e2a0d2e2c9206b1cff&chksm=f9ebf6d8ce9c7fce557fe7aca4c1671c15110094e6d07863cda92cecefef7aac440653b8ccba&scene=58&subscene=0": "Linux爆出9.9分高危安全漏洞 暂无漏洞补丁且已存在十多年", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495340&idx=1&sn=3d093fe9f3dfeb695eb080fd4b940171&chksm=fd74de65ca0357735eab0ab2cf130bb9856280e03a8e0cb40a891489ac179a1c1bd71a1ce5c0&scene=58&subscene=0": "CNVD漏洞周报2024年第39期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495340&idx=2&sn=566b5c7a05d1154964e8b138ed472b94&chksm=fd74de65ca0357735a4e9ed1af74e892e8217e688e8338bf4ce7c2dffed774f433507a9f72af&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240923-20240929)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064805&idx=3&sn=41d291b0ddc00a4ac2d49d81a437a9ac": "【安全圈】起亚修复高危漏洞:影响数百万车辆,攻击者几秒内可定位、开车门、启动引擎", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247517271&idx=1&sn=f0645f7ae4a1a0b6e76d4456cde051ba": "通过代理实现代码执行——DLL 劫持的另一种方式", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485622&idx=1&sn=d3236f8be8aeac1dca9cd4585ebd5f5d": "「冷漠安全」九月份0day∕1day∕nday漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166535&idx=2&sn=2b17b73c26da870ac1f97bf62637a908": "美国各地的法院和政府使用的系统漏洞百出", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247543968&idx=1&sn=dfec28a16768863af56a710fdb6ce477": "漏洞挖掘 | 招聘平台验证码爆破+短信轰炸", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064829&idx=1&sn=43b9a1718f1914415bedb5011a00c419": "【安全圈】ChatGPT 曝严重漏洞,聊天记录黑客随意看,网友:本地运行也没用", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485623&idx=1&sn=553cbfb3000b00b5e080ec11c460e49a": "「漏洞复现」百易云资产管理运营系统 ticket.edit.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651303863&idx=1&sn=1aab462ce475163468d2c71df97ba194": "CUPS 漏洞能使攻击者对Linux电脑远程执行任意代码", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485704&idx=1&sn=0359d7e4517b159b06fc603c6e170de0": "某微商代理商补货商城系统RCE漏洞审计", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247485884&idx=1&sn=85a5f93e52e3636328292437b47a78a4": "【海外SRC赏金挖掘】Microsoft微软高危漏洞 403ByPass (二)-- 协议降级实现403绕过", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDExMg==&mid=2247484538&idx=1&sn=a62effbf20173d741cef019ad352ca83": "【漏洞复现】FastAdmin 任意文件读取漏洞(CVE-2024-7928)", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247613395&idx=1&sn=cebfde08750ae954e7947af136687434": "漏洞挖掘 | 强制 SSO 会话固定", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247490557&idx=3&sn=1670eb215c0480c52fc8e00d530fba8f": "安卓0day风险预警", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650601500&idx=1&sn=77c2a70c9eadad53c566d263822307de": "抓获4人!五马公安打掉一侵犯公民个人信息犯罪团伙;|英伟达高危漏洞威胁全球数百万AI应用", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650601500&idx=4&sn=a3f80a96b3afcfebc350549b3663a015": "一款集成了H3C,致远,泛微,万户,帆软,海康威视,金蝶云星空,畅捷通,Struts等多个RCE漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247486156&idx=1&sn=870a429389f89f3f1418b35f47001465": "安服水洞系列 | Tomcat堆栈跟踪启用漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247487663&idx=1&sn=eaaf918e4d876f277aafdd19396dbe8f": "插件化指纹 POC 扫描插件", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495999&idx=1&sn=1b4d0f45c6f63df8fdd433266911827e&chksm=e8a5fb5cdfd2724a334a4fdb7fc1f5377af1e828cb80efe40819d30819cf51a129e0f2ffb1ad&scene=58&subscene=0": "Src漏洞挖掘-一个严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDExMg==&mid=2247484544&idx=1&sn=c24c78f413a2f5661a6f3accbf369575": "【漏洞复现】pgAdmin4 敏感信息泄露漏洞(CVE-2024-9014)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485719&idx=1&sn=3d1debe6f24dbb672949a68126a62453": "某返佣理财商城系统存在前台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496005&idx=1&sn=967eeaa012e8650468701d28c0e9f62a&chksm=e8a5fb26dfd27230380b3bfbe7c3ae3c67b2569cf139bd32290d543bfcc6cedb9bfeeb334e6b&scene=58&subscene=0": "通过报错实现的一次五千漏洞赏金记录", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064930&idx=2&sn=9e0b6e9777472bb86645d8c262c2d91b": "【安全圈】用友U8CRM存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652064930&idx=4&sn=50aa62340aafdd3857cb784843b9b10c": "【安全圈】Zimbra高危漏洞已被大规模利用:无需身份验证即可控制服务器", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485641&idx=1&sn=80739363ddb3f675ca46a010ee1edebc": "「漏洞复现」EDU 某智慧平台 ExpDownloadService.aspx 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247517490&idx=1&sn=49ae75eb5899ede375569566b1c9fe10": "使用 Joern 查找用于利用 Java 中 Unsafe Reflection 漏洞的类", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485732&idx=1&sn=fe631724694459fc2a6c69023ceb98cf": "微信公众号小说漫画系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247485910&idx=1&sn=e2a5538f51f3b642a15fe87af794a031": "【海外SRC赏金挖掘】诺基亚漏洞!! 403ByPass (三) -- 修改请求方式实现403绕过", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247515975&idx=1&sn=fc34ebb2e5bf60646927fd254eb9d533": "SRC通过越权拿下高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247490647&idx=4&sn=ca25e8cdf784d1e303508b25d46192a2": "Jenkins 中发布安全公告,修复多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247490647&idx=5&sn=52e7e60a1ec5853f036f3f99896cf8e0": "Chrome修复任意代码执行漏洞,字节跳动无恒实验室上大分", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651303865&idx=2&sn=726d3bbf72947a2f7f09b4f79154a8a4": "如何使用大型语言模型(LLMs)自动检测BOLA漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649792613&idx=2&sn=64f4d18d7cd2fdd782092c138ac35cd1": "研究人员披露微软 Office 漏洞(CVE-2024-38200) 技术细节,发布PoC代码", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649792613&idx=3&sn=f5f0dce3519b7d232c2c256b09de7e77": "14个新漏洞使超过70万台台湾产 DrayTek 路由器面临黑客攻击", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247495769&idx=1&sn=b9db5a3d353f4c6b25399db7552e42fd": ".NET 回顾 | 一款反序列化漏洞的白名单工具", "https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650207772&idx=1&sn=e55029c4e9a3c39c0f304200e8d7bd7c": "安全行动,只为中国(三)—— 重大事件分析研判与高危漏洞响应篇", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485650&idx=1&sn=cdfbafea55559c878216919bcd7b2455": "「漏洞复现」用友U8 CRM config∕fillbacksettingedit.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247505976&idx=1&sn=f89635b0fdc90f31c1b644dee84014bb": "寻找TeamViewer 0day漏洞—第一部分:故事的开始", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247517532&idx=1&sn=dceaebe6a99d759168baea5bfc276467": "通过转储文件利用 Visual Studio - CVE-2024-30052", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247517532&idx=2&sn=86bcf7e4bb8859df00575d90436f5688": "CVE-2024-7479 & CVE-2024-7481:利用TeamViewer中一个漏洞的概念证明,用户到内核的权限提升", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247517532&idx=3&sn=9de249a520ca0d15ef257421a838eb31": "CVE-2024-6769:毒害激活缓存,将完整性从中提升至高", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485743&idx=1&sn=25c078ba226e0d13ca8cd43fb03fceb6": "微信公众号小说漫画系统前台任意文件写入漏洞(RCE)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247490670&idx=1&sn=cf7dcab59375ba4fb36340a145abc927": "本周漏洞报告汇总:NVIDIA、Adobe、CUPS", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247490670&idx=2&sn=fceac47dae2120463ad6ad23302594fb": "Zimbra 电子邮件服务器存在RCE,CVE-2024-45519", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650601550&idx=1&sn=908bad1691b6b423af9150a98a9f4e74": "ThinkPHP 的老漏洞依旧是黑客手中的大杀器;|网警提示:举国欢庆享长假,个人信息要护好", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493592&idx=1&sn=a5ae2ac61b4c791986e06b8466bdb73d": "【Nacos】漏洞利用Poc整理", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651303866&idx=1&sn=995c5e3bbec1e68de1e2fa754d5c4c0f": "ThinkPHP 的老漏洞依旧是黑客手中的大杀器", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506009&idx=1&sn=f16378da4eef9713e48225b98db38346": "寻找 TeamViewer 0day 漏洞(二):逆向身份验证协议", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247486037&idx=1&sn=d6c64bfc8ba212200da23f420f5a294e": "针对 Electron App 的漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkzNjQwOTc4MQ==&mid=2247489661&idx=1&sn=c299c5bf6f7b9270c5138b9e83c9e8c1": "红队武器库漏洞利用工具合集 - VulToolsKit", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247544038&idx=1&sn=58da88837125a4aeedc3c7ff7b89d091": "bladex漏洞思路总结", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485659&idx=1&sn=e281df00860e8b672e57e78ccb217067": "「漏洞复现」用友U8 CRM config∕fillbacksetting.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247503083&idx=1&sn=be4a6143eb42c3717ae07ce965573cde": "某众测项目中有手就行的几个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyODUzMjEzOA==&mid=2247483787&idx=1&sn=56053a927cb73e0a494c2df1ee450d36": "从shiro命令执行到远程桌面登录", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247490693&idx=1&sn=2d210489f41cb79e203171301389b8de": "【PoC】CVE-2024-45519 - Zimbra Postjournal 漏洞利用教程", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247490693&idx=2&sn=e6306a33dfc404f7ed2ca40249ff453d": "【PoC】 TeamViewer 用户到内核权限提升", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247497367&idx=2&sn=255c1db5fef5f72eeb2040e6721361a5": "新的蓝牙漏洞会在配对时可能泄露密码", "https://mp.weixin.qq.com/s?__biz=Mzg3NTUzOTg3NA==&mid=2247514050&idx=1&sn=2536ede840f63cdf0250e2d94ddb8b8a": "【总结】设备漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzkyMzY4NjQwNg==&mid=2247483867&idx=1&sn=2723bd2857b3dd694141031842e5e08e": "xx学院漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492334&idx=1&sn=ba57cfcb9d3b7a70e372e34914c6976c": "一款基于Go语言编写,针对赛蓝企业管理系统的漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458577823&idx=1&sn=33a9a6d291b672fdfc6bb86c1afd0740": "SDC2024议题聚焦 | 探秘语法树:反编译引擎驱动自动化漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247487320&idx=1&sn=2086c03b38cab1994df7a4a5c9c190a0": "CVE-2024-9014", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247487320&idx=2&sn=dc810095158ae07d52b7e57492d74068": "CVE-2024-45519 poc exp", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247485393&idx=1&sn=ed4f71197933ca368e923fd71781fd81": "带你体验一款主流且开源的Web漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247544039&idx=1&sn=060b0e54309235e58f40c8f53718ce75": "漏洞挖掘 | 某平台存储型XSS", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485668&idx=1&sn=cd8475d7058d6019c91f51f5cb22a647": "「漏洞复现」魅思-视频管理系统 getOrderStatus SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485751&idx=1&sn=f269f2e394f6779cdc687f97d4d9c0e8": "微信公众号小说漫画系统存在前台任意文件上传漏洞(RCE)", "https://mp.weixin.qq.com/s?__biz=MzkyMTMxNjQ5NA==&mid=2247484829&idx=1&sn=16c3c7cf6b58179bb669c3697c75a1fa": "「0day」通过 iTunes 入侵 Windows - 本地权限提升", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496037&idx=1&sn=8baa21296ec3927599c0f53deaeb66b6": "通过分析JavaScript文件寻找漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488957&idx=1&sn=cdc7a68e3f43fa0b9a1e05193bb25cdc": "【漏洞预警】Redis缓冲区溢出漏洞可致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488957&idx=2&sn=1d7d57a0f1b28a9935412a057edcf203": "【漏洞预警】Jenkins OpenId Connect Authentication Plugin 身份验证缺陷漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515894&idx=2&sn=09562b713be1b351ba4eef99a9153169": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247487907&idx=1&sn=d23ca74c67a2e9f3c8958147f083d16a": "金和OA C6 SignUpload.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502231&idx=1&sn=064d60427f108f8f909c083eeb668d62&chksm=fe79ed0fc90e6419d5697cfa860a5d6ecbd8b7329cbbd76b01abc16f26cc66321db05e1e2547&scene=58&subscene=0": "安全热点周报:研究人员警告称,利用 Zimbra Collaboration 关键漏洞发起的攻击正在持续发生", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520994&idx=1&sn=0feb249fd14e6b8b07d5d6531f3287c2&chksm=ea94a388dde32a9eb0fccc6276a05b3ffc8ece88601d58cd5cded78e58234b59bfe4172d8caf&scene=58&subscene=0": "Apache Avro SDK 中存在严重漏洞,可导致在 Java 应用中实现RCE", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520994&idx=2&sn=ef89231ad1b43e2679e43b82ddb620f4&chksm=ea94a388dde32a9eaaa26c00774eea9eacc851b7bfac4dd8327e24dbc59a2ed40d011b782248&scene=58&subscene=0": "高通修复已遭利用的高危0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499384&idx=2&sn=fcf8911d518e900182a3c74752ec702f&chksm=973acd1aa04d440c1d405bec7eab91f7f0de8cd4242a153a0a6e65883ed92a731c0af303752f&scene=58&subscene=0": "CNVD漏洞周报2024年第39期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499384&idx=3&sn=1bdce0da6aeb3a8beb40f4bba0a11bf1&chksm=973acd1aa04d440c23a14d694654e5ba8c431415d1de6e24b336f28bf1fe53b8f24b325bc361&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240923-20240929)", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486748&idx=1&sn=46e2c665774918fd88693d73fdfb0a0c&chksm=c22295e5f5551cf3db16503a2dda80ff895aa21c9d20192e08efbba7a5120179ec3ffb5ac154&scene=58&subscene=0": "WPS Office从路径穿越到远程代码执行漏洞(CVE-2024-7262)分析与复现", "https://mp.weixin.qq.com/s?__biz=MzkzOTI2NjUyNA==&mid=2247485060&idx=1&sn=88aeba728cbc508c7e8d8a6877287b14": "MediaTek MT7622∕MT7915 芯片组驱动程序RCE 利用 CVE-2024-20017 4 种不同的方式", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488968&idx=1&sn=3c44fc1cc0fe46e63aef0d92d84c57b6": "【漏洞预警】微软2024年10月补丁日多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488968&idx=2&sn=95d11417c369f02cbcdc0f55f836197b": "【漏洞预警】Ivanti CSA 需授权 命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488968&idx=3&sn=6f678e1039632d1ef226ee55c4023c1e": "【漏洞预警】Google Chrome类型混淆漏洞CVE-2024-9602", "https://mp.weixin.qq.com/s?__biz=MzkxNTY3MTE5MA==&mid=2247485437&idx=1&sn=acaf6ae20643ae4d49f3c37d3d918a28": "微软 2024 年 10 月补丁星期二:已修补零日漏洞和严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5OTk2OTY5MA==&mid=2247485638&idx=1&sn=45a92ab8c4fe708de3b1bcc2cfd19e52": "Microsoft 10 月 CVE 漏洞预警", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247521654&idx=1&sn=4706aef45ec08ad3eda23aa9ce5ba7f1": "最新Ruoyi漏洞复现", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458577958&idx=3&sn=5299b845cc0ae3b5cfa70c929ff1dda7": "微软10月 Win10 ∕ Win11 更新修复118个漏洞:5个零日,3个“关键”", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521006&idx=1&sn=7a1549af926e4d8c203943ef0147805d": "微软十月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650619186&idx=2&sn=09f5d678e743a7e4e21eddbd6f5bc528": "涉及121个漏洞!微软发布10月补丁日安全通告", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485068&idx=1&sn=2fd9dd1e1c990a4b13d1f1a0d7691f31": "漏洞推送|用友U8CRM_fillbacksettingedit_存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651456731&idx=1&sn=be34023aa8dea84245e6cfe828e4c626": "信息安全漏洞周报(2024年第40期 )", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503120&idx=1&sn=615871a4daccb1d5d5b43011a71d1eb9": "雷神众测漏洞周报2024.09.30-2024.10.07", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247516613&idx=1&sn=a067b289eeadfb59c90b418869f7aff7": "威胁行为者利用GeoServer漏洞CVE-2024-36401", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500053&idx=2&sn=e1a2f5cc2d40e3615471baaddd9da894": "【漏洞通告】微软10月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502240&idx=1&sn=9d1336306a715b56d6e6705fbe518d38&chksm=fe79ed38c90e642e4a1c2d6f9c60bac4b495f718856cefabd2e6b3466ec79ce5575465d27828&scene=58&subscene=0": "微软10月补丁日多个产品安全漏洞风险通告:2个在野利用、3个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521006&idx=2&sn=9a5993bb8ee14a8ab3071f40bb56c909&chksm=ea94a384dde32a92ccb1a8526ad5c231c4b03f141939c534f660d161815dae61f90ad81795c6&scene=58&subscene=0": "Ivanti 中的3个0day已遭活跃利用", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523705&idx=2&sn=4630dc368c780bcd3b7409d9d65ac622&chksm=ce461669f9319f7f785e685bc9181750f4a023bf8b73338fdbc09223a76fdc279d3268fc3512&scene=58&subscene=0": "【漏洞通告】Redis 缓冲区溢出漏洞(CVE-2024-31449)", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247520122&idx=1&sn=d27143db34cd4266b43bbec74b58e5ba&chksm=eb705145dc07d85352e5f290abf2553a3667a1858790b552e721e448538131fa4af87e417deb&scene=58&subscene=0": "2024-10微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg5NDU3NDA3OQ==&mid=2247490628&idx=1&sn=5dddd171f4a50dd6ee8aa5c475b2a9f9": "【工具】Poc扫描图形化工具-脚本小子必备神器", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488981&idx=1&sn=31f1223c3e134d773514c42de986895a": "【漏洞预警】GitLab CE∕EE关键更新修复多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488981&idx=2&sn=ac749c0555df5d4ef714f88780a0a92f": "【漏洞预警】Apache Subversion命令注入漏洞CVE-2024-45720", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488981&idx=3&sn=a438c463223451be6cb9f37118a05329": "【漏洞预警】Laravel Livewire 文件上传限制不当漏洞可致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506148&idx=1&sn=fc1ab80e699dc72968314607d6fafb49": "NodeJS 0day!代码安全为何重要 —突破强化的环境", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247496262&idx=1&sn=68a875b8658ce94beffe7a60f13b59fd": "福利 | 超低价三日SRC漏洞挖掘课重磅上线", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247487968&idx=1&sn=810e34c9ca8b7b22041f33278f6f5071": "JeecgBoot 权限绕过致AviatorScript表达式注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247487332&idx=1&sn=3790f3b08fa68d5849d92c2b34c102fb": "CVE-2024-46627", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247487332&idx=2&sn=ae3176157adc7539e4fc37663a694171": "微信公众号小说漫画系统 fileupload.php 任意文件上传漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515911&idx=1&sn=539939cd6e859cbf211e5b2024233dd9": "实战 | 记一次X站逻辑漏洞到到管理员后台", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486333&idx=1&sn=affa5ae7a5b4cd40032b82cac254d7d5": "【漏洞通告】Windows 路由和远程访问服务 (RRAS) 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486333&idx=2&sn=46a8ce123f925f7caadf6f44360bd9e5": "【漏洞通告】Linux 版 Visual Studio Code 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521019&idx=1&sn=9271b20273e3b193c059558ab4844fcf&chksm=ea94a391dde32a87f79666c661628c4452d6cdc35a07001450db6ed6c017dd177937fd6328ed&scene=58&subscene=0": "Mozilla 修复已遭利用的 Firefox 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247508440&idx=1&sn=069bf25599fdcf6ab2f7082fe209ef75&chksm=fa527466cd25fd70dd56fa773e56119b6aa8dab21d70d9a882266134542f636d50a81a540b96&scene=58&subscene=0": "微软2024年10月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzU0MDcyMTMxOQ==&mid=2247487728&idx=1&sn=c5bab130b8939748b305e97018968ca2&chksm=fb35b938cc42302eb6ee9d5c39cd5bd24a55f006fc9e15428ee399e70b9f8427971dc69c421b&scene=58&subscene=0": "「推安早报」1010 | 近期漏洞、红蓝工具", "https://mp.weixin.qq.com/s?__biz=MzI4NTYwMzc5OQ==&mid=2247497343&idx=1&sn=e1c215673f3e24642603f65ca22a3c6a": "漏洞案例:提升Self-XSS危害", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515926&idx=1&sn=1a3b44c1541f5d747fe89d45857c91da": "实战 | 一次敏感信息到接口fuzz-RCE", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485083&idx=1&sn=4333c36b842e0f3ff156694d22ecff88": "漏洞推送|某户协同办公平台GeneralWeb_XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488008&idx=1&sn=000cae539fcdc3108050d6059a4d04f7": "同望OA tooneAssistantAttachement.jsp 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651304295&idx=2&sn=338088b2ca1a5e534879eaea3e726836": "研究人员在Windows版的SVN中发现代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651304295&idx=3&sn=5d68b349de95a82767974f4180930681": "Veeam曝出关键漏洞,勒索团伙趁火打劫利用RCE攻击全球企业", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093803&idx=2&sn=6e442c59bc197593f5e7e9fcc44f92b5": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065126&idx=3&sn=d8f627407df3a5064e3fae6c93f446fe": "【安全圈】Veeam曝出关键漏洞,勒索团伙趁火打劫利用RCE攻击全球企业", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247521682&idx=1&sn=6386647ae2cacf08d74b221e1c94f495": "cnvd通用型漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=Mzg5MzE4MjAxMw==&mid=2247484364&idx=1&sn=d63d36282e797a36f8ca5eea10bcc91b": "Ruby-SAML Bypass && GitLab SAML Bypass(CVE-2024-45409)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664227116&idx=4&sn=8dbbf9cbef7eb99802bbbd62166c06e0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521035&idx=1&sn=2551f0b914e44081d01813a9f39a47c4&chksm=ea94a261dde32b77e9f71015064c4ea237b5843d654575058520e4256615a479b230e5b288a8&scene=58&subscene=0": "GitLab:注意严重的任意分支管道执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247495927&idx=1&sn=b390dc5b5e080b28a5ab543a09698407&chksm=fa595e1acd2ed70cbfd020a35a68db9d2619fa2876f50b66b11db352df43ae9bba135320f0c8&scene=58&subscene=0": ".NET 一款事件查看器反序列化漏洞绕过UAC的工具", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523743&idx=1&sn=e644e27dc857081ad51b891224719a70&chksm=ce46168ff9319f993557ca8f7f660d45ff3ff3adad0a8b550ed272f32e6d1415fca9e904ce79&scene=58&subscene=0": "【漏洞通告】Mozilla Firefox Animation timelines远程代码执行漏洞(CVE-2024-9680)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523743&idx=2&sn=516f37895ba787576d2124b19ba0772a&chksm=ce46168ff9319f99b53023d2a6b733ebf17a7d9e272d8662486704c5538ddf564924102c664d&scene=58&subscene=0": "【漏洞通告】GitLab EE 权限绕过漏洞(CVE-2024-9164)", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485716&idx=1&sn=e95e1de5a3ab8374301732f2b11278aa": "「漏洞复现」锐明技术Mangrove系统 任意用户创建漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247486119&idx=1&sn=d6a8a4e144d2452a72b382ebd93fa464": "某赛通-数据泄露防护(DLP)多个接口代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651304452&idx=2&sn=172d4f156c16758bf457cb4a2a25f868": "FreeBuf周报 | Apache Avro SDK曝关键漏洞;Word神奇Bug会直接删除文件", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488994&idx=1&sn=d7ca42d79b8fa4c6d18ab08b99e92f74": "【漏洞预警】Mitel MiCollab SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247484762&idx=1&sn=7744d4f3a1f601cedd365fd4880da362": "致远oa表单导入任意文件写入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065140&idx=4&sn=1c9477d3d6b96c81067c89ebb34124e3": "【安全圈】GitLab 曝出严重漏洞,可能导致任意 CI∕CD 管道执行", "https://mp.weixin.qq.com/s?__biz=MzkyMTQyMzkyMg==&mid=2247484062&idx=1&sn=514a51596c625e7a30139b4db960c8fa": "BlueCMS 1.6漏洞复现CVE-2024-45894任意删除文件漏洞+SQL注入", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247550891&idx=1&sn=58dde38d5244c56d59b734ffcaf673d6": "Hoverfly 任意文件读取漏洞(CVE-2024-45388)", "https://mp.weixin.qq.com/s?__biz=Mzk0NzM4NzI1MA==&mid=2247486171&idx=1&sn=e44babcf73dce91d36a9d026603c80ba": "CVE-2024-38816 Spring路径穿越漏洞分析复现", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502274&idx=1&sn=7cfe89f647e27a1ff53d00457d072c3c": "【在野利用】Mozilla Firefox 释放后重用漏洞(CVE-2024-9680)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651132583&idx=2&sn=927cc74d7f74f7f30828c1bcd13465da&chksm=bd15a2748a622b62badec66a8ab4dfa7d9fb50a404070ca6095346cf5f932594d5699c50aa6e&scene=58&subscene=0": "个人数据资产可以变现了?国家数据局已官方辟谣;Palo Alto紧急修复多个严重的防火墙劫持漏洞 | 牛­览", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247495950&idx=3&sn=bde8270c0e5c37e962ef4613dadd7d13&chksm=fa595fe3cd2ed6f59aab65cc5ea10c5fbd76078dc84834f09e518245cff009237870de468bfe&scene=58&subscene=0": ".NET 一款通过事件查看器反序列化漏洞绕过UAC的工具", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486363&idx=1&sn=baf45524fbf14d61eed273fa14654e2c": "【漏洞通告】Lightroom 桌面版越界读取", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486363&idx=2&sn=a466b7b8f2e8320c4996a20938008152": "WordPress WP JobSearch 插件 <= 2.5.9 - PHP 对象注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486363&idx=3&sn=fa9cf740d90ddb661a5ecd10872b1a0a": "UserPlus <= 2.0 – 未经身份验证的权限提升 (CVE-2024-9518)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486363&idx=4&sn=415fe376c4eab2e76fd07e8a95c6819b": "Apache Subversion Windows 平台命令行参数注入漏洞 (CVE-2024-45720)", "https://mp.weixin.qq.com/s?__biz=MzkyMzY4NjQwNg==&mid=2247483880&idx=1&sn=3eb6c7a3afe2860482dc4a3c80dda7db": "EDUSRC漏洞挖掘思路整理", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489002&idx=1&sn=17ec8989802800573eb311df4b18c882": "【漏洞预警】Fortinet Fortiproxy越界写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489002&idx=2&sn=692bbe2b67e7376823617ba1f6076bd5": "【漏洞预警】Fortinet Fortiproxy未授权外部资源引用不当漏洞可致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487509&idx=1&sn=ef7b4ed4bce6dbe5db7f2055a04a98f0": "灵当CRM wechatSession∕index.php接口处存在文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488122&idx=1&sn=de222db52e4f55f3fd4fb09e07f9a50d": "用友GRP-U8 dialog_moreUser_check.jsp SQL注入漏洞(XVE-2024-10610)", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502444&idx=1&sn=25d31e4dd9032784d9312068efb74c90": "【成功复现】SpectoLabs hoverfly任意文件读取漏洞(CVE-2024-45388)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502279&idx=1&sn=7d6b8cb849a31ab262adeb5bd8e046f7&chksm=fe79ed5fc90e6449c03830212b75378e987057b90d6178496fee7926daa442b488d4144d002b&scene=58&subscene=0": "安全热点周报:超过 87,000 台 FortiOS 设备易受远程代码执行攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521075&idx=1&sn=2987012f618a751eabf08e620add0615&chksm=ea94a259dde32b4f7f4cd4bbb93cd3024cf4fe292975773a34fe5eecddb3c01f64facf63d74e&scene=58&subscene=0": "Palo Alto 修复多个严重的防火墙漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247488397&idx=1&sn=803555aaa261b72338ff9174a93e22cd&chksm=fe5d0b0dc92a821bd595bbfa006245c3bee34848c37698e92aff9ee1b13101377059fc1e03da&scene=58&subscene=0": "DataCon2024漏洞分析赛道 | 快来“挖洞”了,46万赏金等你拿!", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247495981&idx=3&sn=aae5bd11f9ebc1214ffbe7e93d94fa74&chksm=fa595fc0cd2ed6d64f5a6be9228c74f8617998b5aae687ad56a15560e3fe625dd7ddc0f3f7c6&scene=58&subscene=0": ".NET 一款通过事件查看器反序列化漏洞绕过UAC的工具", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495360&idx=1&sn=08c8aaa599655248498915b802e02910&chksm=fd74de09ca03571f4e114de1799a4f8e268697f2dad0045ab53d4da688de5506311147b1391d&scene=58&subscene=0": "CNVD漏洞周报2024年第40、41期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495360&idx=2&sn=a946b22916a7ec84210e348b79bd5140&chksm=fd74de09ca03571f679f9ddb17539a205a372f8818529708ce3b46fe5d744ce9e7187fc7e96c&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240930-20241013)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487538&idx=1&sn=3d81bb489c2cac56a6265f1f7c082975": "泛微e-cology CptInstock1Ajax.jsp接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjU4NA==&mid=2247485474&idx=1&sn=efbbd22dbe26059c22b5825f4d3b0750": "国外大牛都在用,助你高效获得漏洞赏金", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489010&idx=1&sn=9b1216ebf12b27eb4ea276b4db64b71c": "【漏洞预警】Apache ActiveMQ Artemis需授权,权限管理不当漏洞可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489010&idx=2&sn=9efe7afeda1c5a29dedb67750f9dc19a": "【漏洞预警】Splunk Enterprise需授权路径遍历漏洞可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247614530&idx=2&sn=660a0db793b4125e1d4361931f3f5bfb": "在早期车辆开发中主动解决网络安全漏洞的方法", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485893&idx=1&sn=d072ddebbdf2fb8f20c9d19a19ed1d23": "图形化界面的cms漏洞检测框架 - FrameScan-GUI", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488142&idx=1&sn=af2f73aa9df9fe6d2cb1acd53d0965f8": "用友U8 Cloud ExportUfoFormatAction SQL注入漏洞(XVE-2024-4626)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496152&idx=1&sn=ddedfa05e83130aba8435d365a25e48d": "api漏洞系列-API权限升级", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489848&idx=1&sn=70375bbc9c85aad3fcc4f884ed10a631": "WordPress 插件 Jetpack 修补影响 2700 万个站点的主要漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521093&idx=2&sn=0e8722e391f5315692fb46494ee4c4b9&chksm=ea94a22fdde32b39c594e884c3d9c1189f426e88c963cd7073b26e7d547a6f3b1ceabdf1498e&scene=58&subscene=0": "2016年就已存在,Jetpack 中的这个严重漏洞终于被修复了", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065256&idx=2&sn=980220c27c207e4156417e7e6a6c2657&chksm=f36e61a8c419e8beda8644a1da99eb23c6b4b5bc49fe59673a854f6c38bdd77c924120e00ea7&scene=58&subscene=0": "【安全圈】乡镇公交车系统信息泄露漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503127&idx=1&sn=f41a55862318c3c009544720b185d7b2&chksm=f2585fe4c52fd6f245763aea3cd47026d9b2b3b13ea6635d8f2137f35c59793e15891a9f563d&scene=58&subscene=0": "雷神众测漏洞周报2024.10.08-2024.10.13", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247505280&idx=2&sn=2cbb1124020b1ffe7fa08942bb363d3a&chksm=eaf99dccdd8e14da4f825a654836eff592f88ca9277fccf44e7700b04d48c049e7b8d9e4c304&scene=58&subscene=0": "DataCon2024漏洞分析赛道 | 快来“挖洞”了,46万赏金等你拿!", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653058147&idx=1&sn=26bb3c8ec058f16c2eff407d714460ff&chksm=7e5709d5492080c30fc8626a8661173f161d3f0e4fced378f21cbc12a73c6b6159e66497a661&scene=58&subscene=0": "记录生生不息的创新力量|2024 年度「InnoForce 50」启动", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247493935&idx=1&sn=4b066ad41530b8a863afaab67a718f2a&chksm=fa9d1279cdea9b6f86e8734b39314a764d3bcbd0cab4ab8232acfc2c9b79f2caa8a6f622b744&scene=58&subscene=0": "ByteSRC活动|生活服务漏洞奖金提升!双倍积分专测来袭~", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499400&idx=1&sn=e66e05258ce846cb6a6d5e29aa31532d&chksm=973acdeaa04d44fc2b083d0b411bf903fa7177406a3f4d6c22240adbd19c1bd23ca6bcc537cc&scene=58&subscene=0": "CNVD漏洞周报2024年第40、41期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499400&idx=2&sn=ab09f3d7c1abf5549d539d6491fda613&chksm=973acdeaa04d44fcf5289afa87e3fe57db123f39183824b6f0e8fb437318cae9cb677b53fa9f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240930-20241013)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489018&idx=1&sn=25b15d96d4bc9970a941dbfc8cf01dac": "【漏洞预警】Apache Solr 认证绕过漏洞CVE-2024-45216", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489018&idx=2&sn=b6463e9e1c223c7061c5f5031ee1236b": "【漏洞预警】Oracle 2024年10月补丁日多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247487339&idx=1&sn=b7a322912471738372ced61d13d4b408": "漏洞预警 | Oracle WebLogic Server 存在反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516132&idx=1&sn=836d0bf24b23efd4cafb6d02109c7b15": "万户ezOFFICE协同管理平台 GeneralWeb XXE to RCE", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488162&idx=1&sn=c0a4ed867540fb32daba33e4c392a250": "用友 NC saveXmlToFIleServlet 任意文件上传漏洞(XVE-2024-6507)", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787042&idx=1&sn=9ff9664f254d1077000edf4df5aeb18b&chksm=8893bacdbfe433dbddfdff5e5b5ff909029b141c9c1b7ddb9543066891e251c28569991008e3&scene=58&subscene=0": "Linux系统安全告急:新技术绕过“noexec”,任意代码执行风险激增", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521118&idx=1&sn=19780899ec9f4282e334e41a25f88aa3&chksm=ea94a234dde32b22456eab2d416b2ae3e9baeb788e7522fb6a65a51b8fbd47d5083ff9c5dbc1&scene=58&subscene=0": "GitHub Enterprise Server中存在严重漏洞,可越权访问实例", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512828&idx=2&sn=d9c0cdb53702ee4b2ae0bad511238d05&chksm=ebfaf5dcdc8d7ccaa01f994a12a740f7f0322a1da473e5b9c51c36307a8247e7b17ba8729640&scene=58&subscene=0": "美国州政府利用漏洞奖励强化防护体系,安全众测成为联合防御最佳实践", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507134&idx=1&sn=69655f32f2e4294df6a9d9cc5dac80e0&chksm=cfcabfaaf8bd36bcc77b7272635fa42e235244a9b23804d2bff2b3a4ed42012c70e89b9f7c11&scene=58&subscene=0": "捕获在野利用!Weblogic RCE 数月前已支持检测", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502283&idx=1&sn=834229924382fbc68f713cf9d9a8e2ce&chksm=fe79ed53c90e644508dde2790e07290568b6a1bb509d06d88b8de01fefcc99e727038963686d&scene=58&subscene=0": "Oracle 2024年10月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485003&idx=1&sn=5ccde4dc82fa09bd366a7f2de01ff1bb&chksm=c2b1043df5c68d2b005f4b5523973459c8717c99e881f1551c3c3d6686df0cd277c4cd62e81d&scene=58&subscene=0": "腾讯安全威胁情报中心推出2024年9月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247543210&idx=1&sn=19f7add2afcfe39cfdf7c03cc03ffea9&chksm=f9ebf707ce9c7e1178e7b19be262e0935e0a2e1ed0d93523039f451af307042b0f1627c8e4d7&scene=58&subscene=0": "零日漏洞风险加剧 NDR或是一大可行之解", "https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247500845&idx=1&sn=62b16be90b356915a3d4f4fa81bef9ac&chksm=cfcf74e0f8b8fdf67590d03b1319ceb57d3883a3c1f55768e879535d50a78c9bbbd392b4fc79&scene=58&subscene=0": "[漏洞挖掘与防护] 04.Windows系统安全缺陷之5次Shift漏洞启动计算机机理分析", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247509921&idx=1&sn=9fdd6ea2cedf4dd4274a85ef3bf2f92a&chksm=ec9f7ed2dbe8f7c4086f98662d1ba0decb9eba3fe75e1d9f4a135ed538eb467812e802e39302&scene=58&subscene=0": "24年9月必修安全漏洞清单|腾讯安全威胁情报中心", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487562&idx=1&sn=99753a0058790bd700823d05c2b8c9ec": "DataEase存在数据库配置信息暴露漏洞(CVE-2024-30269) 附POC", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247491904&idx=1&sn=8f3ae793af4b84ed6315c1d558b961d9": "Adobe ColdFusion 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247491904&idx=2&sn=b1052d613073438fa5a8d38862c91bb4": "Adobe ColdFusion 文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489029&idx=1&sn=e06fcf8b161146051562b020df371242": "【漏洞预警】Kubernetes Image Builder凭证管理不当漏洞CVE-2024-9486", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489029&idx=2&sn=45c13fae69d09e919a581792b920dd43": "【高危漏洞预警】Apache CloudStack 模板验证绕过漏洞CVE-2024-45219", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489029&idx=3&sn=c7839c7032c6a427251183a661c11555": "【漏洞预警】Apache CloudStack请求来源验证绕过漏洞 CVE-2024-45693", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516149&idx=1&sn=cbe88eb7ebe0586102f335b02213fa33": "CNVD通用型漏洞挖掘思路-平台漏洞列表一眼定睛法", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651304727&idx=1&sn=12c12769972fdea40ed8af5245c31654": "谷歌:2023年被利用的漏洞70%是0 Day", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485763&idx=1&sn=cd985bec3b400befb5bb20dc16fceade": "「漏洞复现」英飞达医学影像存档与通信系统 WebUserLogin.asmx 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065297&idx=3&sn=763d27a5148619b21d8a21de71663c4c": "【安全圈】SolarWinds Web Help Desk曝出严重漏洞,已遭攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065297&idx=4&sn=6553ac6cf6c694af3a1a0522d91e551e": "【安全圈】谷歌:2023年被利用的漏洞70%是0Day", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651132707&idx=1&sn=bd2c2d2f6660a916bde388c86ee21002&chksm=bd15a3f08a622ae6ec4388e5375c28f7f22b8e192a26b9f47c3bbbc6cddfd225327e74effc09&scene=58&subscene=0": "面对英特尔CPU触目惊心的安全漏洞, 除了排查,更要加速信创发展", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521136&idx=1&sn=8dae0f9e90eb71b97f2e0b1158775cb8&chksm=ea94a21adde32b0cd92f1996cd9d86287351e84ca7c503267ffd83e79c363ced14eec5b768e0&scene=58&subscene=0": "谷歌:2023年70%的已遭利用漏洞是0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521136&idx=2&sn=092bf2813ecefa63156a83b9d8eab160&chksm=ea94a21adde32b0c330f235f9beca98c24ce44fcacdb92e916ec286a71acd272b5c86b1d517b&scene=58&subscene=0": "VMware 修复HCX 平台上可导致RCE的高危SQLi 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247519596&idx=1&sn=88483bcb603bb9106ca73d388a24ae3c&chksm=c144ffd1f63376c7f65520acac781b6e83d1c8748666964ba534ab28f1441519a06bc648f410&scene=58&subscene=0": "安全漏洞曝光:AMD 和 Intel面临新型攻击威胁", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247519596&idx=2&sn=2e6fa57e983a1089d0bac2b689b5ad0a&chksm=c144ffd1f63376c75dd07ed764dbe9256be18213697902d9bf9eeb691864c901e864371bfe57&scene=58&subscene=0": "漏洞频发、故障率高:应系统排查英特尔产品网络安全风险", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664227620&idx=4&sn=e9585c8752086698d13714a906e6256c&chksm=8b59e1ddbc2e68cb89f65aeb671229f601d5cc51c1faa29f8cc724c2e7a1893aba22919cf478&scene=58&subscene=0": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247508470&idx=1&sn=dfd1ab29e0bb1ca56156c689c03be221&chksm=fa527448cd25fd5ec170e8ee587eb3f3d1f366b9652a5b26ead1e2b8a008f1a804379faff2d2&scene=58&subscene=0": "手把手玩转路由器漏洞挖掘系列-ZigBee协议", "https://mp.weixin.qq.com/s?__biz=Mzk0OTUwNTU5Nw==&mid=2247486715&idx=1&sn=d9e461792e604356a775307b342be280": "【漏洞情报】惊!安全圈众多师傅都在用的\"它\",竟存在文件下载的bug?", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247487688&idx=1&sn=594252eb04e54a09a9bc39b28335db12": "明源云erp报表 geterpconfig 未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5OTI3MTE5MQ==&mid=2247485336&idx=1&sn=47d85adfbc1d7d31d68137edf003a899": "【开源工具】 - 从漏洞数据库搜索漏洞的工具go-exploitdb", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093845&idx=2&sn=8e1ba2c88682415efe17b9bcbb051aef": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653930961&idx=2&sn=d4474c33b0bd0366619c93841ac6dced": "因漏洞频发、故障率高,英特尔产品被建议启动网络安全审查", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521146&idx=1&sn=9082baa037a6e59fedb1cd685658ae1c": "F5 BIG-IP 修复高危提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521146&idx=2&sn=671909f46dea5c8b54973aff9c570634": "Kubernetes Image Builder 严重漏洞导致节点易遭root访问", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247521814&idx=1&sn=7c04b027e05981c97b949d4d6ea1b6cb": "初学QEMU虚拟化漏洞利用——XNUCA2019-vexx分析", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NTI1Ng==&mid=2247486066&idx=1&sn=7513b610056f889b69775198f52c3617": "python 代码审计工具和TripleDoggy -- 基于clang static analyzer的源码漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523756&idx=1&sn=25bc11e88e2e6316cb3d20ecd0352283": "【漏洞通告】Spring Framework 路径遍历漏洞(CVE-2024-38819)", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247551010&idx=1&sn=619a3e6770abc85e382e9ec6ef8bb653": "kernel heap exploit", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489038&idx=1&sn=76e5f6ff889433b7e3828482025eb228": "【漏洞预警】Spring Framework路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651132716&idx=1&sn=8d52a87f9d70ea0278b7e3c51b015fdf&chksm=bd15a3ff8a622ae934ab86db5bed30a0bdd4190e986bf72dfd45c8b6224c00afca5eeda00012&scene=58&subscene=0": "FIDO联盟提出全新密钥交换标准,旨在破解跨平台应用难题;CISA就多个新发现的关键漏洞发布紧急安全提醒 | 牛­览", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787055&idx=1&sn=5fbaf89659bf338d051cb13fa1bf9923&chksm=8893bac0bfe433d624ae16f6ea2aac5b4e7f989baf93d651e5c5725c4a3df924fd0e735b0fb4&scene=58&subscene=0": "AI驱动机器人暴关键漏洞,可致机器人失控执行危险行为", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502299&idx=1&sn=069a958959ae15278139095c33508054&chksm=fe79ed43c90e6455a2fc9c729de185bf1defc9325a602adc4c8e65889bcf3917632f49bdf156&scene=58&subscene=0": "Spring Framework 路径遍历漏洞(CVE-2024-38819)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492366&idx=1&sn=a4b61bc1dfa3c615999b2eb232269619&chksm=e90dc924de7a4032e1555fa467b97d3b1509e4f98c743db55e9bcaf257add39d745e94fb1aaf&scene=58&subscene=0": "疑似有国家背景的APT组织利用0Day漏洞针对Ivanti CSA展开攻击—每周威胁情报动态第196期(10.11-10.17)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487588&idx=1&sn=39be759d6fe21c5a270a606bcdaf2076": "畅捷通TPlus FileUploadHandler.ashx存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485642&idx=1&sn=bddf508c37501c451564ebe8f130ad95": "CVE-2024-31449|Redis 缓冲区溢出漏洞 可致远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485642&idx=2&sn=c5119101d9eefb333bd6589e995cffa9": "CVE-2024-45216|Apache Solr(插件)身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485642&idx=3&sn=c84b84a4fd15c783aa141a963d53bc65": "CVE-2024-28988|SolarWinds Web Help Desk反序列化远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488248&idx=1&sn=7d1b8380479581f2ad430159d1d0148b": "泛微E-Mobile ∕client.do 命令执行漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247485431&idx=1&sn=a8a41e58f8be63da19896c7b97b1bf3f": "六大知名Web安全漏洞靶场", "https://mp.weixin.qq.com/s?__biz=Mzg4NjI0MDM5MA==&mid=2247486743&idx=1&sn=d5c3e200b5e29e1d45944abc315a89b0": "【工具推荐】DockerApi未授权漏洞一键利用工具,适合攻防演练内网梭哈。", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485781&idx=1&sn=18e0ea9bae3b7a875fdc01ed67fcd4dd": "「漏洞复现」某普SSL VPN 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247544351&idx=1&sn=2d72e6818a965ce03ead29b88c67beeb": "热乎的EDU证书站点漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485869&idx=1&sn=eba54d4b768cd77acedbc40f9642bc7d": "WordPress BookingPress 插件存在远程文件写入漏洞0day分析(RCE)", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650602174&idx=2&sn=d7a013f508f9e888a248d2910468f387": "谷歌:2023年被利用的漏洞70%是0Day", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649792777&idx=2&sn=8d93414a26d37cff85a47a61cd5f6a99": "Kubernetes镜像生成器存在严重漏洞,允许未经授权的Root访问", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650960266&idx=1&sn=0b0657c2d8e4b27d3037f7b2b9ddbb85": "内网常用38个漏洞nuclei-poc", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496184&idx=1&sn=7014f42d58aee7478234c29528d5208c": "api漏洞测试-GraphQL自省问题", "https://mp.weixin.qq.com/s?__biz=MzkyOTc0NDY2Nw==&mid=2247484396&idx=1&sn=3ec965e87120a0015871c598f7e170c7": "NSA的\"主板Bios后门\"原理&复现与检测方案", "https://mp.weixin.qq.com/s?__biz=MzkxNTY3MTE5MA==&mid=2247485458&idx=1&sn=8840f1796f6f0fa2a4fc68b6f9c4b050": "使用 LLM 和静态代码分析查找可利用漏洞的工具", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488306&idx=1&sn=18c46dcdc76deba5e3b03d212a80459a": "浙大恩特客户资源管理系统 Quotegask_editAction SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486084&idx=1&sn=bcb54b256e2ad9b89b48606289fa29b4": "漏洞 POC 编写", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247491509&idx=1&sn=400eff89a6efb8cee54b33fad24ee6e0": "【PoC】开源监控平台Grafana 后认证 DuckDB SQL 注入(文件读取)CVE-2024-9264 (9.9)", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247544353&idx=1&sn=3b3bd7946016d0094679ec5e4467a6cf": "漏洞挖掘 | 全站一个Cookie鉴权,哪哪都能越", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247491968&idx=1&sn=ac9ba78b3f9279f5860cb55441ef096e": "Hadoop-未授权访问-内置配合命令执行 RCE", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651305000&idx=1&sn=56853f3edbfbffb3e3263ccd81746397": "新的macOS漏洞允许攻击者绕过安全控制", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496111&idx=1&sn=a9c13386be33a20f5686d5f025838111&chksm=fa595f42cd2ed654a4ffbdc980de3e3b470254c804574c60f2132169b7d98ecd75e80f386b73&scene=58&subscene=0": ".NET内网实战:通过白名单文件反序列化漏洞绕过UAC", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489043&idx=1&sn=8e8e88ba3a013bde42389a566b434230": "【漏洞情报】北大方正电子有限公司方正畅享全媒体新闻采编系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzU5MDMxOA==&mid=2247484079&idx=1&sn=1b435fb3c548049216a2c3e3b2b78c33": "Edusrc证书·实战分享|逻辑缺陷漏洞才是最好挖的高危!", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487624&idx=1&sn=33135f963826604ee69c3fa856c5c052": "明源云ERP报表服务GetErpConfig.aspx接口存在敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485799&idx=1&sn=6230dec2d2b0c39e0c38016487a6d4d4": "「漏洞复现」明源云ERP报表服务 GetErpConfig.aspx 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488364&idx=1&sn=c12971a0443f4d300e0123651fa99f54": "联达动力OA UpLoadFile.aspx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093854&idx=2&sn=17caca1b98cbfb4b15d5da5554a19c61": "CNVD漏洞周报2024年第42期", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502468&idx=1&sn=fdcfaaf1af096c1acb9eff80808fbea1": "【成功复现】Bazaar swaggerui任意文件读取漏洞(CVE-2024-40348)", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487298&idx=1&sn=e65e9056ec5802e7b6ac0254d2254783": "国外漏洞平台收集", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787064&idx=1&sn=eb0e5b2ca525fbe78c6e915d6ca10a26&chksm=8893bad7bfe433c1b5181788c6b975e2ad01d9cb21059bb2825cf761e3b2dd2f0b245d4f7812&scene=58&subscene=0": "macOS 用户注意: Safari严重安全漏洞可致摄像头、麦克风数据被捕获", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521165&idx=1&sn=7b3b7e63cd3887724011c1eb4c584441&chksm=ea94a2e7dde32bf12a8f6cd4ff3687c49864e1369095f8f1fad77a56829cf6a8b8d01cf23abd&scene=58&subscene=0": "朝鲜APT被指利用IE 0day 发动供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521165&idx=2&sn=7bfb29f17ff7d1e5ee3a692d0325509c&chksm=ea94a2e7dde32bf194da0ee3afbb6e7b53ba6046185343d45732773ec0b1c7298b65203944a5&scene=58&subscene=0": "Roundcube Webmail XSS 漏洞被用于窃取登录凭据", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502304&idx=1&sn=39a8312527ed9247cdbdebef5de8f796&chksm=fe79ed78c90e646ee1f3a370bea49f6df5cc8082b2b8be47d00cda48f7f214936da8381d923b&scene=58&subscene=0": "安全热点周报:OilRig 利用 Windows 内核漏洞针对阿联酋和海湾地区进行间谍活动", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247520738&idx=1&sn=f5660b24e2b5dc8b58b68b60bb20ba76&chksm=c144e35ff6336a495bbcd1c10e70325946e9336571babc4758819d55ee1b730498c12c2cd6d4&scene=58&subscene=0": "CISO焦虑:砸钱买工具,漏洞为何依旧“逍遥法外”?", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512862&idx=1&sn=985a72021a5e4cbab44d293299fed951&chksm=ebfaf43edc8d7d282746dad19ad03b0997600ca3c1a37382d730a5612d90d08e3101f0dcb223&scene=58&subscene=0": "突破!首次利用大模型在真实环境发现十余个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496137&idx=2&sn=55fd4d14cf887dad2994acb352efafa4&chksm=fa595f24cd2ed63236dc96bc03b88dce4f3f5f5a21ed1c8417e52c2886eb11135bc74a231892&scene=58&subscene=0": ".NET内网实战:通过白名单文件反序列化漏洞绕过UAC", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495379&idx=1&sn=2b0c92687662122ccf63124e85d690a0&chksm=fd74de1aca03570c7b58afda767a83603481ae981cc083cf2b0c88b04ce81644c53f2a34ce70&scene=58&subscene=0": "CNVD漏洞周报2024年第42期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495379&idx=2&sn=d14d89fd1abf7c552ef725fc62e854e8&chksm=fd74de1aca03570cbdf702090bf2911f0eed247b3014a174db00eee30681901496e8ba114c33&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241014-20241020)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489048&idx=1&sn=8ff851d6670d9d279b89268ddbf94dfa": "【漏洞预警】VMware vCenter Server 堆溢出漏洞(CVE-2024-38812)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516187&idx=1&sn=4bb0112ddb6d2c03390ed916b7962441": "实战 | 记一次实战中SelfXSS+CSRF+越权漏洞的组合拳", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247503769&idx=1&sn=c6f976c22cb8304fa3b8937ea45b56f1": "WhatsApp 的多设备加密漏洞可导致设备指纹识别", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488420&idx=1&sn=07be9c3be205933e69cd4175656b0083": "鸿宇多用户商城 scan_list.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247620069&idx=2&sn=c2bd23f2cfb5c20c5a22a265d59cb2e1": "突破!首次利用大模型在真实环境发现十余个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651305162&idx=1&sn=b65db7335b3786d4873f6755e1eb933a": "K8s曝9.8分漏洞,黑客可获得Root访问权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065418&idx=2&sn=787d8f4417c21d5b963ec8d4bd7652a2": "【安全圈】多款云存储平台存在安全漏洞,影响超2200万用户", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502313&idx=1&sn=8a541914c191770ce4a526f904df3d16": "VMware vCenter Server 堆溢出漏洞(CVE-2024-38812)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503134&idx=1&sn=b72aa0c10a0231bc871832249bfdfb92&chksm=f2585fedc52fd6fb7fc0e99ca6c80c3dc5b09df78e4860b33b16042eb978b7c0153bbe6606fd&scene=58&subscene=0": "雷神众测漏洞周报2024.10.14-2024.10.20", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521197&idx=2&sn=f0f32cd958563d41b14cb555f2762a85&chksm=ea94a2c7dde32bd1a32b3d2d35ef7aa57cf0cfb210340478ffad469c368154ce8aba26ed865e&scene=58&subscene=0": "谷歌云漏洞奖励计划发布,最高赏金101010美元", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247501857&idx=1&sn=2e079402b260598477d6e163ca3128ec&chksm=cfc56f7ef8b2e668c223c903c3f0b7d3fa2e30eb39f0d34f97a233fa159ee87303cdb4bebad3&scene=58&subscene=0": "智领未来,安全共生 | 360漏洞云亮相“S创上海2024”,共探AI安全发展", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247578576&idx=1&sn=af22a7aa77dc9421a9f89d19b22a0e46&chksm=e91463eade63eafc5d2d910ffeb0b54892bb97f09d19f2dbd1be6ccbf95470ea7a7d6ed16af4&scene=58&subscene=0": "Palo Alto Networks 警告公众利用防火墙劫持漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499416&idx=1&sn=09fb2a778dda4995b337380f6c5435ce&chksm=973acdfaa04d44ec0ae0d49b1f9f104174e4c5bcea45fde80e8b975059a6656c04784bf9a42a&scene=58&subscene=0": "CNVD漏洞周报2024年第42期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499416&idx=2&sn=06f15d4281288d345aec0f26f8db7831&chksm=973acdfaa04d44ec732b40d4a70349afd53f745a48387b3d82fb0071c0b7b77837035bc26621&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241014-20241020)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489053&idx=1&sn=6b9831d7cffc0e16f83d2ca7e5494d64": "【漏洞预警】Microsoft Remote Registry Service特权提升漏洞CVE-2024-43532", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487647&idx=1&sn=c097b974aed0d81ebbb39b47e560e070": "时空智友企业流程化管控系统uploadStudioFile接口存在任意文件上传漏洞 -老漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487647&idx=2&sn=0a6daa07bc040bc9d6b31d2179c49de8": "高校人力资源管理服务平台系统ReportServer接口存在敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488439&idx=1&sn=dc594d32088d00f69d51b137d775322a": "号卡极团分销管理系统 index.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485822&idx=1&sn=d8c7be2cc93bee896585fe8e7a1fab40": "甄云SRM云平台 SpEL表达式注入漏洞(XVE-2024-18301)", "https://mp.weixin.qq.com/s?__biz=Mzg4MDY1MzUzNw==&mid=2247497733&idx=1&sn=e7d88ef8bf93a838a6f99e1ee37b91ec": "警惕!泛微E-Office漏洞引发数据泄露风险", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489881&idx=1&sn=8407b31be58a4d7df854956230d46a62": "VMware 发布 vCenter Server 更新以修复关键的 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065432&idx=2&sn=c5c869e24ab938b185e97679ede50f75": "【安全圈】高通64款芯片存在0Day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065432&idx=3&sn=8dd024db6fb200b80ea9bd4b0ab86a5a": "【安全圈】K8s曝9.8分漏洞,黑客可获得Root访问权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065432&idx=4&sn=e821667ba35126b55834a52a98cbf559": "【安全圈】三星设备曝出高危零日漏洞,已在野外被利用", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651132888&idx=2&sn=b405ddb420bbe1c66190259e178df00d&chksm=bd15a30b8a622a1df5a88dd3c982736d21d0697cbebf8bb6b8d55b88c29341fdf8d6f24c4739&scene=58&subscene=0": "美国海关执法局间谍软件项目被叫停,将接受白宫合规审查;新型Spectre漏洞变种持续威胁Intel和AMD处理器安全性 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247578604&idx=2&sn=c0b781c34f0739765cd98e9a80e88115&chksm=e91463d6de63eac0b3554a00897098303ddd44ee55066b7bb8966b5f850812c79ae4a02ead90&scene=58&subscene=0": "Jetpack 修复了 2016 年以来存在的关键信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523759&idx=1&sn=0017e7e09220abab6863e930d09e9778&chksm=ce4616bff9319fa9f3f362abe9c8b14ae2f3dc0e600c6c17b86ef86e6681e85e93de88966548&scene=58&subscene=0": "【二次通告】VMware vCenter Server堆溢出漏洞(CVE-2024-38812)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523759&idx=2&sn=ade609dc4121e8db8cdd22351a70b964&chksm=ce4616bff9319fa92a4326734635d92d6946e3314447a9a01e11890b67f98d70862f213abc6c&scene=58&subscene=0": "CNVD漏洞周报2024年第42期", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496207&idx=1&sn=f671487cb5cace98ea383ac5ace90a95": "深入分析自己曾经挖掘到的有趣的XSS漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MzU3MTcwNg==&mid=2247485773&idx=1&sn=52f845eead540944388f53f878302c9d": "企业SRC简单漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485831&idx=1&sn=16b34c4a018d0f4203b4d95d58649f40": "「漏洞复现」东胜物流软件 GetProParentModuTreeList SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489058&idx=1&sn=530bd6b2063c2ff38531ad4ad70603e5": "【漏洞预警】Fortinet FortiManager身份验证缺陷漏洞CVE-2024-47575", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065447&idx=1&sn=af6b1e3779b7cc108da77693a2bd8568": "【安全圈】苹果、特斯拉均受影响,新型漏洞迫使GPU无限循环,直至系统崩溃", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651305339&idx=1&sn=647dd10900af35cc6dc491808ed58233": "苹果、特斯拉均受影响,新型漏洞迫使GPU无限循环,直至系统崩溃", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650988899&idx=1&sn=a13937c80af8c787059b4745aaa94748": "【知道创宇404实验室】警惕CVE-2024-47575针对Fortinet FortiManager的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247490111&idx=1&sn=95011f51967fa1c60a10b9691bccf675": "0day 挖到手软,403 到 getshell", "https://mp.weixin.qq.com/s?__biz=MzUxNTQxMzUxMw==&mid=2247524106&idx=1&sn=faa6020cdee1e1b30188ceafa8fef815": "安全通告丨网络安全漏洞通告(2024年10月)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502325&idx=1&sn=96b42ac12247f0bfe4fa746ce232ee8c&chksm=fe79ed6dc90e647b040d50365f5f1f16e5dd0464c3dd3cbb6e943b2a6d9b022f8fc74346337e&scene=58&subscene=0": "【在野利用】Fortinet FortiManager 身份认证绕过漏洞(CVE-2024-47575)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507206&idx=1&sn=1bd7a83db8388ec3fec86f43feb61d99&chksm=cfcabe12f8bd3704bc28c1362cd66bef001bee5a96dfea9f1912eab7f51ed9d6b8c3def0a513&scene=58&subscene=0": "已知利用!Fortinet FortiManager远程代码执行漏洞(CVE-2024-47575)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495387&idx=1&sn=4b11b67781cc01260f323237f4760f1d&chksm=fd74de12ca03570409b90f05069bcce53813287269fc25f8a73f92667d6a9d85378ee794eb27&scene=58&subscene=0": "关于VMware vCenter Server存在堆溢出漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521255&idx=2&sn=96000770c62b8decfa9e07a493e63e88&chksm=ea94a28ddde32b9b8ba137aabc05013a57d35ead43238f1f5f4b42cb723d96b1f4792e330c13&scene=58&subscene=0": "关于VMware vCenter Server存在堆溢出漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521255&idx=3&sn=a3d253a523be442f0e1f72789ba75fb2&chksm=ea94a28ddde32b9b8de1966962ff8445b3814e03944529cc5ba0b88db8ff3ee88e958cd066e8&scene=58&subscene=0": "谷歌:三星0day漏洞已遭活跃利用", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512888&idx=2&sn=9ab92be86bc560da728a970bb6326045&chksm=ebfaf418dc8d7d0ee48db9f08c4c5345ef2a33cb3e806075e7fd3588f3e72c575aba72a92d3c&scene=58&subscene=0": "CNCERT:关于VMware vCenter Server存在堆溢出漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523765&idx=1&sn=d5269efa9c133e8386aac651056fa956&chksm=ce4616a5f9319fb3f628b88d8a0c2065d23addc3a2b3c41320194419c8a2eb2170dce710ad1e&scene=58&subscene=0": "【漏洞通告】Fortinet FortiManager 身份验证漏洞(CVE-2024-47575)", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247487150&idx=1&sn=17db604e5005721b42fc9f2863f361c7&chksm=c25fc1d5f52848c3d5c67253f51bfe1d452764930bf3d384ea7d69e1f45a895da74b3cc96b18&scene=58&subscene=0": "第106篇:深入分析自己曾经挖掘到的有趣的XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664228108&idx=2&sn=abc43d62cb95085716ab56b10e4614b9&chksm=8b59e7f5bc2e6ee374296f40186fcbab2104b021dcf4449410b4828db7d5c14fc65a785e97fb&scene=58&subscene=0": "CNNVD | 关于Fortinet FortiManager访问控制错误漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489063&idx=1&sn=c7a9b986007651dd85fdccbbe1c90fdd": "【漏洞预警】php-heic-to-jpg远程代码执行CVE-2024-48514", "https://mp.weixin.qq.com/s?__biz=Mzg4NTA0MDg2MA==&mid=2247485397&idx=1&sn=0ae94a98aec6037d9a6289476b51416c": "Suricata之CVE-2024-21773 Tomcat请求走私检测", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488507&idx=1&sn=845d497240abaa6b5112b03f3ca0c258": "易宝OA ExecuteQueryForDataSetBinary SQL注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247530534&idx=2&sn=752691d53f9685030ee94e7b3646e0fd": "上周关注度较高的产品安全漏洞(20241014-20241020)", "https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651388403&idx=1&sn=ccd6b4cab598267ee5adf8bfb0fc7dd8": "勒索攻击离你有多远?(附勒索漏洞检测列表)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458579138&idx=2&sn=d49eabd04ac16baca0e9c0ff3e7a6d16": "Fortinet安全产品出现高危零日漏洞,恶意组织积极利用", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496225&idx=2&sn=f6933902136b7b238acbe1c6f78d718f&chksm=fa595ccccd2ed5da5b6ba7d157628c2d6c1da8716361531ea23fb206270067855fb51757b1a2&scene=58&subscene=0": ".NET内网实战:通过白名单文件反序列化漏洞绕过UAC", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521275&idx=1&sn=23094a8bbc6812308a558007e25112aa&chksm=ea94a291dde32b87e35eaab4a3eaca0db1c4a21c577bfdffa7e0bc64e4aa607f757182427737&scene=58&subscene=0": "思科紧急修复已遭利用的 ASA 和 FTD 软件漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521275&idx=2&sn=19b473f06f7cec3e44d2eaabe7de9012&chksm=ea94a291dde32b87aff71cc0155c176a313b40ce3d7e6f79a0f7ffc2adc898412e8c6a0b0be0&scene=58&subscene=0": "苹果创建 Private Cloud Compute VM 助力漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzUyMTcwNTY3Mg==&mid=2247486275&idx=1&sn=38fd591f0eddaef23fedadee61aa0b95&chksm=f9d64ae4cea1c3f2e197e864064a7e972ed44a14db900244dddd58d438db5eaa0b2bc63495a7&scene=58&subscene=0": "【公告】中通安全应急响应中心漏洞评分标准V4.0正式发布", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516245&idx=1&sn=948e700d1384f7322cfbc4d3ca0375e7": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485671&idx=1&sn=0bcb6efe26a9d6e6c0deaf625f1db8c6": "CVE-2024-47575|Fortinet FortiManager身份验证不当漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485671&idx=2&sn=3c50f92d11faad65195774409be07b3b": "CVE-2024-9264|Grafana SQL表达式允许远程代码执行(POC)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458579145&idx=2&sn=ac98ac7f79cffd3013852fcf53069c62": "“协作共御、洞见未来” | 首届华为漏洞管理与应急响应技术大会于深圳成功举办", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247491969&idx=1&sn=56688650d3492c29222fdd4727f6b75d": "InfluxDB JWT未授权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488545&idx=1&sn=c8f4e293b57313327db9532c7fbeb9dc": "易宝OA GetProductInv SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486036&idx=1&sn=52131d932e8fe4f24db3d7bdf41625a0": "对抗零日漏洞的十年(2014~2024)", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484325&idx=1&sn=de7186ee2bde1a9178df7086cf65b1d9": "入选作品公布|安钥®「漏洞处置标准作业程序(SOP)」征文第八期", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247521535&idx=3&sn=33711754cf017150c1a7bfb6002a1331": "PS5:“Byepervisor”漏洞文件及演示幻灯片发布", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485883&idx=1&sn=e3e846d7e1ab99552ba08fa54d5d8dea": "RAISECOM网关设备存在远程命令执行漏洞(RCE)", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485849&idx=1&sn=d7a6732d1e7a22003f4bec5ff10a3a4d": "「漏洞复现」BladeX企业级开发平台 tenant∕list SQL 注入漏洞复现(CVE-2024-33332)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247491778&idx=1&sn=eec7f9dd81bd03b107fec9d6bc9e68fc": "【Exp】Windows 11 通用日志文件系统驱动程序存在提权漏洞 0day", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247491778&idx=2&sn=35f98ca87e5bf812a496b5c0b509e004": "【PoC】Wi-Fi 联盟测试套件中存在命令注入 0day漏洞CVE-2024-41992", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247492616&idx=1&sn=e6b40211569149267d234ff709f15c24": "windows&linux中 命令执行的各种绕过方式", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247492544&idx=1&sn=181f09ae3c4f0d8d2aebf1427e547926": "一款越权检测 Burp 插件,通过增加AI分析模块 && 进一步优化检测逻辑,大幅降低误报率,提升越权漏洞检出效率。", "https://mp.weixin.qq.com/s?__biz=MzkzOTI2NjUyNA==&mid=2247485162&idx=1&sn=0d63c7f890eb4563656383fdbb5c295c": "CVE-2024-9465:Palo Alto Expedition 未经身份验证的 SQL 注入 POC", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651305558&idx=3&sn=33b0add5bc3325a56111ff4eeb8ece15": "多款云存储平台存在安全漏洞,影响超2200万用户", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247516790&idx=1&sn=b1bd8c8ef193dafc29cb1b70a33b6336": "PHP序列及反序列化安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247485591&idx=1&sn=5769b72d3516063e4f68feab9cd46e15": "ChatGPT中的高级API攻击以及AI供应链漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496224&idx=1&sn=9b8aaafd8f73e348cfbc19ab9f57e033": "有关漏洞挖掘的一些总结", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065543&idx=3&sn=b8a04fa9094f1ff644a46c7e77e91aad&chksm=f36e6347c419ea5117820d0337cd4fc89a241b03666d801bebddaba03c52cb638805deea4261&scene=58&subscene=0": "【安全圈】​Fortinet安全产品出现高危零日漏洞,已被恶意组织积极利用", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489068&idx=1&sn=6ee0ddbf78a091d62549611d721d7ebb": "【漏洞预警】Codezips Sales Management System信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651305632&idx=2&sn=abcc7f6ea28f282e6e84f1baa318862e": "利用Windows漏洞,攻击者能降级系统组件恢复漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516303&idx=1&sn=eed8364856f2f0b86782e634a9333f21": "【干货总结】浅谈src漏洞挖掘中容易出洞的几种姿势", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489902&idx=1&sn=58965be5053725e329d20a6c84261eaf": "针对 Microsoft Windows 内核的操作系统降级漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502343&idx=1&sn=c581c4fefdbb5b55df5877b9ce52c210&chksm=fe79ee9fc90e6789ecb2b69f8bad06387c6f053c88a9528d0a991a4004936a8e021e5980cd06&scene=58&subscene=0": "【已复现】Cyber​​Panel 远程命令执行漏洞(QVD-2024-44346)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502343&idx=2&sn=f3ecf71ee875550a542839608c722045&chksm=fe79ee9fc90e6789619f3e2ad7f4f170cabde1967b8e0962c9452f64c9bc1819341bc8960307&scene=58&subscene=0": "安全热点周报:UNC5820 威胁集群利用 Fortinet 零日漏洞窃取企业配置数据", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499585&idx=1&sn=bb3e82184bfc1090abf8ec83acf49f06&chksm=ec1dcf69db6a467f2f75c4e0073e1032006639afcc51c13bd3115bec66944e074807f1d852bc&scene=58&subscene=0": "一键检测 PbootCMS 历史漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065566&idx=4&sn=2b801b48c3a2637022eda84b8ded4b9b&chksm=f36e635ec419ea48fb3673df944a0a01efd65ec51428521954973b7f681350f5cba836cf2779&scene=58&subscene=0": "【安全圈】利用Windows漏洞,攻击者能降级系统组件恢复漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489073&idx=1&sn=3b9a9cfc65a343f1abd7e6bc67deaf45": "【漏洞预警】CyberPanel upgrademysqlstatus未授权命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650960992&idx=1&sn=9aa63c3d1281d916e9082e0f627e0e5d": "本工具为jeecg框架漏洞利用工具非jeecg-boot!", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502500&idx=1&sn=38e5bc2cf558c49c7b9b71342e9a74b3": "【成功复现】Palo Alto Networks Expedition 远程命令执行漏洞(CVE-2024-9463)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502355&idx=1&sn=d02ee95b980e1540ef75c5a0f0f10f5b&chksm=fe79ee8bc90e679d2beeef7ce3ff4a032f4e9bd79fe2e0f3f690b65ed6e720af290e491fcc2a&scene=58&subscene=0": "【已复现】Apache Solr 身份认证绕过漏洞(CVE-2024-45216)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650988902&idx=1&sn=2a04b8d588193921ddcf484e998cea72&chksm=8079a354b70e2a420bc72f2616a230d619eb09f0fdae05e36bfba84a84e6cffa276af718fd55&scene=58&subscene=0": "【知道创宇404实验室】警惕CVE-2024-38812 VMware vCenter Server远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503163&idx=1&sn=bb163ba65161abfdfca8d8316610d55a&chksm=f2585fc8c52fd6deae42a920a09826b50fe56878ec56d0f7887f2c603873588ec374ca9146d0&scene=58&subscene=0": "雷神众测漏洞周报2024.10.21-2024.10.27", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458579476&idx=3&sn=a068c8f37e67f44576894bd4525a3be6&chksm=b18dc29e86fa4b886b74ef63e071b4feff13d277532cea3a21cbf0f7168a31fde1eb79d4f282&scene=58&subscene=0": "​研究者揭露微软 Windows 内核的操作系统降级漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521319&idx=1&sn=cbfae51c8facf463612f1507daddd94f&chksm=ea94a54ddde32c5b7ff26a5495c0c74862c8d1d5d0f76cbca0ca1a506b5dc7d6f3328da0a5ff&scene=58&subscene=0": "Mozilla:十六进制代码可用于操纵 ChatGPT 写 exp", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499430&idx=1&sn=0a75b4ee3ae57467d0e470d7bc420974&chksm=973acdc4a04d44d24daf7f1e240999f466c84de627290332f167043cd1942e8f40c6552b2953&scene=58&subscene=0": "CNVD漏洞周报2024年第43期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499430&idx=2&sn=0d5599512ccbb7bf2c6f53cccc609f3d&chksm=973acdc4a04d44d2b49e070e8e9d9b5315d469f7677c37d284d028af56dfb94198b71e7489b7&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241021-20241027)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495419&idx=1&sn=8b5c4919259cf65b80eb4f0ed8f609c7&chksm=fd74de32ca035724df35cec0f34fab9a85dacbcadd8e68d03bf0508ef141873d761af5448c6a&scene=58&subscene=0": "CNVD漏洞周报2024年第43期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495419&idx=2&sn=8d5402906f78b000befa396e8c14d460&chksm=fd74de32ca035724d51b1235867f6c2e967da9ebeeb2fa24babafbc289c473284185748fabc3&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241021-20241027)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247501886&idx=1&sn=780951e4861d8b26ed8ed6276602a3c2&chksm=cfc56f61f8b2e677a640e3268488c2bbf7bc6c550bfc2c39cc01c733cce1c264dd276ea49f55&scene=58&subscene=0": "360漏洞云亮相看雪峰会,携手行业精英共话安全创新", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489080&idx=1&sn=f530f172b19670cc5a325374b967ef70": "【漏洞复现】Apache Solr路径身份验证绕过漏洞CVE-2024-45216", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507329&idx=1&sn=0a2cf458a45cbd59b0416309a4bcfdf5&chksm=cfcabe95f8bd37833e6a5024c97259be35a8948851b49eaafd4184990e41bb88b853159f0a9b&scene=58&subscene=0": "可任意文件读取,警惕Solr身份绕过形成的漏洞利用链", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512950&idx=2&sn=8dd420cffbbe201209b733f10108d32d&chksm=ebfaf456dc8d7d40d20f36730f47f7d2220ec4a6c4edae00cbc78a3cedb1fa7a88bc5c113a98&scene=58&subscene=0": "苹果悬赏百万美元查找“苹果智能”安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521331&idx=1&sn=e13cd9f9dccd9d17953e551df9108205&chksm=ea94a559dde32c4f32a18c5ad4c3a2fc98f17fb29f69f73cac5c613c67ae28f36ab473d14936&scene=58&subscene=0": "研究员在开源AI和ML模型中发现30多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521331&idx=2&sn=71c64c97cc3e699a2bf61baa2a1d09d4&chksm=ea94a559dde32c4f31512e2ba17773a1688545d45b94fa660cb6d7416b5ad9d187bb38882894&scene=58&subscene=0": "这个已存在18年的提权漏洞影响 X.Org 服务器", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247491605&idx=1&sn=e7a98ec2cfec80361cbc51e7d443ab06&chksm=ea484a52dd3fc34490249df4936289d4c6c589fecc6f23845f2f11ff2722d1a38fe5984b0aeb&scene=58&subscene=0": "开源安全检测的漏洞,从哪些维度考虑整改标准?两种场景下(供应链软件入库,应用投产上线)针对检测的漏洞需要强制修复吗|总第270周", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579103&idx=2&sn=adfdc60fab72010fc498354e6b8e034d&chksm=e91465e5de63ecf3b84e279ce2aa6052f69aa36f7f173acd826db6b6aa4ba09b72015ede4daa&scene=58&subscene=0": "谷歌:2023年披露的被利用漏洞中有70%是零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247521490&idx=1&sn=33ee9166ab5cf893dcaf4018e242d991&chksm=c144e66ff6336f79c03afd673af4ba5c00c4cf71053a2310975d7774d5ced316bf0f92c47cfa&scene=58&subscene=0": "这谁防得住?Wi-Fi 联盟官方测试套件中存在命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1MjgwNzc4Ng==&mid=2247511952&idx=1&sn=fb6c167d7e11e70f7c74b2dc72ab2a2f&chksm=fbfe9395cc891a838b2137f982fe26ffd6086b203b3b72f93f249399022f284a94e58a0cf9e2&scene=58&subscene=0": "BinaryAI更新布告|漏洞存在性分析功能上线", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484700&idx=1&sn=48eb10e18c40164bf672a3e7a8a36e39&chksm=c12af89df65d718b1147d7cbd64e4d33eebebe24618e137438c2c8418dd84a2b49f557e691c5&scene=58&subscene=0": "【复现】 Apache Solr身份认证绕过漏洞(CVE-2024-45216)风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523812&idx=1&sn=e47ad6d6110101bd34045546f03ed5e6&chksm=ce4616f4f9319fe296ec3e7eb302ab62746c722066830a2014c99336ef4f3c9bcf67018e8193&scene=58&subscene=0": "【漏洞通告】Apache Solr 认证绕过漏洞(CVE-2024-45216)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523812&idx=2&sn=eb2f4b3b34ac1799bcb461c02fb1e6f3&chksm=ce4616f4f9319fe2cee38c81934e037f2f6a972955ed5fa0bd7ae9d1f3d2419b572ac1a5e19b&scene=58&subscene=0": "【漏洞通告】CyberPanel upgrademysqlstatus接口命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTMxNDM3Ng==&mid=2247488710&idx=1&sn=5223f08864253e636c04a27e2f87e8bd": "自动化漏洞检测平台-解放劳动力", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260089&idx=1&sn=a928eb710d68d2d5998b1b8e67870c78": "如何从IIS欢迎页面中快速挖掘漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489096&idx=1&sn=c8accee68b4718e765f61dec8cbe8f8b": "【漏洞预警】DrayTek Vigor2960 Router命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489096&idx=2&sn=9d456db4a342d43da8256ed6ddf9e893": "【漏洞预警】ServiceNow Now Platform未授权代码注入漏洞CVE-2024-8923", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489096&idx=3&sn=25f7a2a8f8f7e4b964e70fa30accba7a": "【漏洞预警】QNAP SMB Service安全缺陷漏洞可致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489096&idx=4&sn=73d4c51435bd454c408d416cea9a5b99": "【漏洞情报】Vmware Spring Security访问控制不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485900&idx=1&sn=d861a393e4d4a859614fb991e1868bbe": "「漏洞复现」瑞格智慧心理服务平台 NPreenSMSList.asmx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502372&idx=1&sn=400ea5c9c064b177d0b240c397a749d5&chksm=fe79eebcc90e67aa16307551e35b7b7002d193a6cdbe965ed72a47d1db7eed6fd3f08142a32d&scene=58&subscene=0": "【已复现】Spring Security 静态资源权限绕过漏洞(CVE-2024-38821)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521342&idx=1&sn=355a1e1a938422e3437d8a957f360c7e&chksm=ea94a554dde32c42e130665c527ed8a177be5afa09da92ec4ea9eb9f45b2b85a56062bff40b2&scene=58&subscene=0": "谷歌修复由苹果报送的严重 Chrome 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521342&idx=2&sn=f31a6cd39b33c9b2bd7cd10c19169e81&chksm=ea94a554dde32c4280fdfcb682ecbd81e1802f47e0b691b8784f9c448c03289cbcd65c02d0fb&scene=58&subscene=0": "Opera 浏览器修复严重漏洞,可泄露用户信息", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523818&idx=1&sn=cc8b5b5a74093b7a22d801da1132bd66&chksm=ce4616faf9319fecfebae28dae8ce14b0cf427706a9de714ff032080609c0830726222f52a10&scene=58&subscene=0": "【漏洞通告】Spring Security 静态资源未授权访问漏洞(CVE-2024-38821)", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247486129&idx=1&sn=3bbbd1dcdb4a01b60c222f4c03f9034e&chksm=c1f44e79f683c76f71275d0ec73d9c3ea50dd75449eb7bfb10cdcd9147b93563c3e62d6ea701&scene=58&subscene=0": "「技术研报」以子之矛陷子之盾 · 用AI对AI漏洞的利用探索", "https://mp.weixin.qq.com/s?__biz=Mzg4MzU3MTcwNg==&mid=2247485823&idx=1&sn=e0e2cd99f757953e163e4ec3d8dccdf3": "记一次edusrc漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkxNjY1MjY3OQ==&mid=2247487803&idx=1&sn=e035cdbd9c75fbd7e2a4f157e8ff1596": "KingPortal开发系统 kingclient 任意文件读取漏洞复现及POC", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489102&idx=1&sn=e436c94e09979e7fdf47fd9109dc4024": "【漏洞预警】PyTorch反序列化漏洞CVE-2024-48063", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485210&idx=1&sn=63c31c73b77a35e945817222ee66ee76": "【翻译】0day 代码审计 CyberPanel v2.3.6 RCE", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247487563&idx=1&sn=dadb2bd3a148fb3e1cd64f1707f785ff": "CVE-2024-38063:IPv6远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065645&idx=2&sn=77c5717f51ce4ad0db60c17c295d7d49": "【安全圈】热门摄像头曝零日漏洞,黑客借此入侵政府部门", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065645&idx=3&sn=77a3bd1b9376d22214d1764a39ccbcfb": "【安全圈】LiteSpeed缓存插件漏洞正对WordPress 网站构成重大风险", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485911&idx=1&sn=8fc8a06eaff8a30e5c870d8259f6d2ff": "「漏洞复现」F22服装管理软件系统 openfile.aspx 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzcwODQ0Ng==&mid=2247484033&idx=2&sn=b67b8ad347ea0cd24538bd99d42019d1": "【漏洞推送】CVE-2024-23897 文件读取漏洞(poc)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458580008&idx=2&sn=477b16b48e296bf88d2ad7ec6b81dfbf": "PTZ摄像头曝严重零日漏洞,黑客利用漏洞发起攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247522412&idx=1&sn=d948303b4a3110511090563e55017ff5": "RapidCMS 1.3.1代码审计 (超多漏洞点)", "https://mp.weixin.qq.com/s?__biz=MzI3ODk3ODE2OA==&mid=2247484373&idx=1&sn=cb9cf6754bfb3422c1199a404f122579": "各类勒索软件利用CyberPanel RCE严重漏洞无差别实施勒索攻击!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521357&idx=2&sn=dc9695c878770ba5390c627bc3e3681a&chksm=ea94a527dde32c31d351cd6dca491aa437fa8431c26df61f85217feb3f68a6a8070a59cfc195&scene=58&subscene=0": "开源客户端qBittorrent 修复已存在14年的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486059&idx=1&sn=47222bc64fb7a59d81b46147bf1c1df3&chksm=fb04c903cc734015bf6f159f27ff8d7a2210df186ff70093d8fed2e4c1b4cf656195b38e41dc&scene=58&subscene=0": "IBM X-Force 进攻性研究组(XOR)安全研究员", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247491610&idx=1&sn=438031527be962084da64f2670cadb29&chksm=ea484a5ddd3fc34bef2d60cd3b08851f246386a56f1a886279d24a86bed7a6dcf6f94161afb4&scene=58&subscene=0": "关于勒索防护的探讨(防入侵+数据恢复);EDR主机安全管理、漏洞管理、资产管理的日报如何汇总统计;对威胁情报的讨论|总第271周", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496260&idx=1&sn=389e904c78fac4570ca21f6ae5ad56b5": "一个价值【$2000】的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516620&idx=1&sn=e117b52652f6e9f7f081b9551fc8ceb7": "【SRC】记一次实战小程序漏洞测试到严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065679&idx=3&sn=837c6f8a05d0deea042a4571a86897f5": "【安全圈】BT 客户端 qBittorrent 修复存在 14 年的远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485685&idx=1&sn=838e54bc45cab050c38c37137d553fa1": "CVE-2024-37383|Roundcube Webmail存储型XSS漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485685&idx=2&sn=13428af7f389014028621bea8c536f63": "CVE-2024-43532|Microsoft Remote Registry Service特权提升漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247486110&idx=1&sn=ec77fd3511dcbf2344c05615c27f127d": "某edu供应商cms存在URL注入(通杀0day)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247494580&idx=3&sn=20c8a26dfc67f5be797fbc55b1863089": "PTZ摄像头曝严重零日漏洞,黑客利用漏洞发起攻击", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485948&idx=1&sn=5379268e13fe9269e003aa3bb435e143": "(1day)某最新版快递微信小程序系统存在前台任意文件删除漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492069&idx=2&sn=36de75895b12de22074f18cfbfbccac1": "【PoC】Spring框架爆出严重漏洞CVE-2024-38821详解", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247522085&idx=1&sn=42efe18b02498de744de84434d5e1cb8": "使用 CodeQL 发现 Portainer 中的隐藏漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247486298&idx=1&sn=925a50f99eaeb64dc0401aa2fababe5d": "【工具篇】Apache Shiro 反序列化漏洞检测与利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg5OTY2NjUxMw==&mid=2247513052&idx=2&sn=8ac9499394e27147aa0c69e5bc30d9c1": "漏洞扫描工具 -- vulcat", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488793&idx=1&sn=600d11f7470d5babb37801dd5ed65fa3": "英飞达医学影像存档与通信系统 WebUserLogin.asmx 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247631817&idx=2&sn=0ed49d551b896693f6ee10bd6af08488": "LiteSpeed缓存插件漏洞正对WordPress 网站构成重大风险", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489112&idx=1&sn=4091a1b02ed1720fac4784544ff29ef5": "【漏洞预警】泛微E-Cology QRcodeBuildAction SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487685&idx=1&sn=513f6f10d762dfcbd9844d6fbb7a78f1": "用友NC Cloud service∕esnserver接口存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247631892&idx=4&sn=7486d5bda90d3b4c016da44b9938b5d2": "首次利用大模型发现内存安全零日漏洞 (附大模型挖洞经验)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516696&idx=1&sn=c4e0c1073d45876a00992736c5a0671b": "(SRC漏洞挖掘五)越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491048&idx=1&sn=d048136385519ecbe50e950e278c312d": "漏洞挖掘 | 全站一个Cookie鉴权,哪哪都能越", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485101&idx=1&sn=cb6b47bc40d3f0c3a270a14ca20ebb57": "漏洞推送|美特CRM sync_emp_weixin存在反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489931&idx=1&sn=b39c0c26a6e1015e54ba65799810e0bb": "Google 警告 Android 系统中存在被积极利用的 CVE-2024-43093 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247483938&idx=1&sn=9faf94b4298a6188c09a87f82195b204": "新闻 | 谷歌大模型挖到0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521392&idx=1&sn=5ed582159f171db2001138a8ba65e297&chksm=ea94a51adde32c0c02371dadb481e0b6f1d6763dc98bc2b323c974300a40d061d2aa67a43277&scene=58&subscene=0": "用户名太长的坏处:Okta 修复认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521392&idx=2&sn=75cd21ca2fe9a85ff4068e97cde7a6cc&chksm=ea94a51adde32c0c617d16fed416a8b1c92c13c260ef7ec42b84c5f4a43aefdd7102fba9a980&scene=58&subscene=0": "PTZ摄像头中的严重0day漏洞遭利用", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499443&idx=1&sn=6d39e19c7eb6f9aa7a0e364b748bb603&chksm=973acdd1a04d44c790ef7b9e87d4d1759190e066421ee5179d4bfe544ca1dc718aa918dcf053&scene=58&subscene=0": "CNVD漏洞周报2024年第44期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499443&idx=2&sn=8486ce03af29247af53c30b12bd5cc7e&chksm=973acdd1a04d44c79048bf258e847f1b628920403efabc642a478fd5f507399d4c633b163a95&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241028-20241103)", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247512989&idx=1&sn=3db390e902ccf6b370d33cf57039a63b&chksm=ebfaf4bddc8d7dabeb3eb7f7a2d1da640e786c734a47ba8735de0e749fac50d107c43658a4ff&scene=58&subscene=0": "首次利用大模型发现内存安全零日漏洞 (附大模型挖洞经验)", "https://mp.weixin.qq.com/s?__biz=MzkyMzE5ODExNQ==&mid=2247487460&idx=1&sn=8c5d9a22b844d923d9d5fb938bd920a0&chksm=c1e9f828f69e713ec32ee1ed21079a5963d0b11dce114958bb9d73c5ac60c4f0bebbbb951561&scene=58&subscene=0": "Open-Source Intelligence Summit 2024议题慢递", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065731&idx=2&sn=ec1234ec73aa6227c6092ac7f59a2a1d&chksm=f36e6383c419ea95b652d8e0d3e28f413e419b31f88142e6e6631f248ff8921ae09270e90b14&scene=58&subscene=0": "【安全圈】微软SharePoint RCE漏洞,安装火绒杀毒后导致安全防护崩溃", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065731&idx=4&sn=1865f8c94d510093c5028b8b63f9b02a&chksm=f36e6383c419ea9504d4986e57eb7b3947367eebcc2f52aa9f277891a3fa457671970378d39b&scene=58&subscene=0": "【安全圈】重大突破,谷歌AI大模型首次找到0Day漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247544687&idx=1&sn=22924643aa95c3eba97f52ac536b87a6&chksm=f9ebf1c2ce9c78d417a9c3bf74e40693061380d60191073390ff15d669dede4c58e61f807870&scene=58&subscene=0": "Wi-Fi测试套件漏洞入侵商用路由器 背后原因剖析", "https://mp.weixin.qq.com/s?__biz=MzkyMTQwNjA4NA==&mid=2247485118&idx=1&sn=eee78d9d95d9656113e2124fd9944b29": "Exp-ToolsV1.3.1更新", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247492554&idx=1&sn=79d368cda39d6845d7774be7e5c470a4": "0day 挖到手软,403 到 getshell", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489117&idx=1&sn=361148c5c0871789f40e6758bde5c3f7": "【漏洞预警】Google Chrome Serial释放后重用漏洞(CVE-2024-10827)", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489938&idx=1&sn=e959f5a5df92072bbe3d96fe05fab604": "Ollama AI模型发现六大漏洞,能导致DoS攻击、模型中毒", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521406&idx=1&sn=af981c3476e81115ffa11866a0bb7b7d&chksm=ea94a514dde32c02776e9a8a0d78022cfa4b713f7c32259d90a550950b10f2b9692a01826316&scene=58&subscene=0": "谷歌修复已遭利用的两个安卓 0day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521406&idx=2&sn=1a37afaf7e8cd1893b64cc0183aae730&chksm=ea94a514dde32c02df3f45ffe36a3bc5f29632e75d87ca05c0296cf0f528796ba0a3a5facadd&scene=58&subscene=0": "Synology:速修复零点击RCE漏洞,影响数百万 NAS 设备", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458580536&idx=3&sn=07f91dc9d9d91ecd1ab33fbac3e076d5&chksm=b18dc6b286fa4fa41a3b684cde43528429157587b3b6285f0eea22c43c5ac73c742b29b405ba&scene=58&subscene=0": "Ollama AI框架发现严重漏洞,可能导致 DoS、模型盗窃和中毒", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065749&idx=1&sn=b8878258d3b73972d34180a4f45b9858&chksm=f36e6395c419ea83933909751917712797ee725716d53445c905e31288295910cc4fae20086d&scene=58&subscene=0": "【安全圈】Ollama AI模型发现六大漏洞,能导致DoS攻击、模型中毒", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485967&idx=1&sn=5a936d865874c1e2d229ae517527a9a2": "「漏洞复现」快递微信小程序系统 httpRequest 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487712&idx=1&sn=c689a918835d8fd979a54c56110824f5": "用友U8 Cloud uapbd.refdef.query接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg5NDU3NDA3OQ==&mid=2247490706&idx=1&sn=9000b39b5cf76ad0b2c04e1c6d61a3a8": "Nacos从快速发现到漏洞利用,没想到如此简单?", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516769&idx=1&sn=ce9e6b53923a5ca91aa19e5a4f68b6c1": "有关漏洞挖掘的一些总结", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521416&idx=1&sn=dd174cdf4dec9fc76bae7be5c63bbd68&chksm=ea94a5e2dde32cf4e638ee3f72a13942731f386460354ea9e67337c58ebd9209a77a4d9c6b27&scene=58&subscene=0": "思科满分漏洞可使黑客以root身份运行任意命令", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523827&idx=1&sn=a926b2cc9de4cc0c3453404c3f6a5324&chksm=ce4616e3f9319ff5ff6983e8a22f17859ff07cad09a170c5648c9d7b0fce795ac301966aa60e&scene=58&subscene=0": "【漏洞通告】Google Chrome Serial释放重引用漏洞(CVE-2024-10827)", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247504292&idx=1&sn=63c9d389a9d50e5c4b5748b3a7214f45": "马自达信息娱乐系统存在零日漏洞,汽车面临接管攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496304&idx=1&sn=2c8db754f88f6dcc2b2a31ce0784c1c3": "一则SSRF漏洞的故事", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485108&idx=1&sn=48e8e3233f08d51fb2ae2540b1c2e39e": "漏洞推送|章管家listUploadIntelligent.htm存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487724&idx=1&sn=bc4ff16c25b5f725c98a97a4467bfe2f": "WordPress Time Clock插件存在远程代码执行漏洞CVE-2024-9593 附POC", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065786&idx=1&sn=195423ec6a9e07c9345dd1881df02828": "【安全圈】马自达车载信息娱乐系统 (IVI) 中的多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247531101&idx=2&sn=d95ca2f86113617ec76f711d47435df2": "聊热点|工信部印发《工业和信息化领域数据安全事件应急预案 (试行)》、重大突破,谷歌AI大模型首次找到0Day漏洞……", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247544815&idx=1&sn=d83743a98032be2d6fe5d1fb19950a44": "高通芯片0Day漏洞事件分析及安全建议", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521429&idx=1&sn=8d164e84c96d33be487787e9f3024b73": "HPE:Aruba Networking 访问点中存在严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247494143&idx=1&sn=2824f44b6636aac11c899b6d79c8cb74": "【Pikachu】RCE远程命令执行实战", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458581737&idx=1&sn=11b4721ad2d8cab57cd181d05200a709": "SDC2024 议题回顾 | 探秘语法树:反编译引擎驱动自动化漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513033&idx=2&sn=ad9b7aed64a0dd5dbae5e6a488f7cdca": "Ollama AI框架被曝严重漏洞,可导致DoS、模型盗窃和中毒", "https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247512985&idx=2&sn=3adce1104c839e2306d519512d538937": "《中国信息安全》| 基于能力成熟度模型的车联网漏洞管理探索", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133278&idx=1&sn=84243d8902f4572a208cf40cfc2c6059&chksm=bd15a58d8a622c9bf5acd24730338536a7622347f3a7f49417c4d1a8628c883ff335a10108e2&scene=58&subscene=0": "加拿大政府以国家安全为由下令TikTok关闭在加业务;思科工业无线设备曝高危漏洞,未授权者也可获得root权限 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486773&idx=1&sn=d265a545b7ba37c5291d890bb91d4528&chksm=c22295ccf5551cdaabeb73f0632d091dde76ca101a9b892a510a9e6f158243d848e01978010f&scene=58&subscene=0": "Xlight FTP Server整数溢出漏洞(CVE-2024-46483)分析与复现", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579462&idx=1&sn=541bd360da0c5a0e969b17d37f31681c&chksm=e914677cde63ee6addc2f0510740f14706afe244ad9f07bb05ef43e5a56bceea731f0f8f06e5&scene=58&subscene=0": "Microsoft SharePoint RCE 漏洞可被利用来破坏公司网络", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484564&idx=1&sn=d9d85e66140fdd8d9dc110b7b55dfd95": "【漏洞复现】宏景人力资源信息管理系统uploadLogo任意文件上传", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484564&idx=2&sn=b07efea55f510216ba422ee7f05cf037": "【漏洞复现】蓝凌OA hrStaffWebService任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247484559&idx=1&sn=dfa06985780ced7479518e5c4f1a7d1b": "1day | 网神SecGate3600-A1500会话鉴权逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516847&idx=2&sn=42974687df2f0be746a8c87ed3daf826": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247567022&idx=2&sn=c328654f4fab285159092f50ab3bf509": "Web常见漏洞合集,420页Web应用安全权威指南(附PDF)", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247491078&idx=1&sn=9801251a60e0eba261b3d56515676ce0": "某蓝星抖音快手微商城RCE漏洞审计", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488988&idx=1&sn=97902a623e312af600c0ff3bf2d9a1ed": "万户 ezOFFICE SignatureEditFrm.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247489470&idx=1&sn=5f23e7f0e6637873fe59950a8d899e1d": "【必刷靶场】JavaSecLab-Java漏洞平台", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651306556&idx=2&sn=3544323a467462a66f36ec24cb615b41": "FreeBuf周报 | 谷歌AI大模型首次找到0Day漏洞;诺基亚被黑客攻击泄露大量数据", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492347&idx=1&sn=5c1f5626d796a237d2d06cf6196c837a": "近期暗网0day售卖情报与预警", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247492347&idx=3&sn=1fc0229e77e5ee97f00aaeb516eaf468": "黑客称他们利用反作弊漏洞封禁了“数千名”《使命召唤》玩家", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603262&idx=2&sn=ca2003ffa397c1b521dc28ce4711d769": "德国起草法律保护 IT 白帽黑客:发现并上报软件漏洞不用承担刑事责任", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650603262&idx=3&sn=c86a3f497bd78655e9c41dd9b76f387c": "某订货系统文件上传漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzk0MDY2NTY5Mw==&mid=2247485539&idx=1&sn=cc966d740f341ab5a0417166bafd8a37": "[含POC]宏景人力资源信息管理系统uploadLogo存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650962002&idx=1&sn=c3d5dc01f62b5b616729c291359c4b35": "记一次实战小程序漏洞测试到严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MTc1MjY5OQ==&mid=2247486133&idx=1&sn=febe31ffff79efcf3b3fdfac6080f7a7": "中间件安全|WebLogic漏洞汇总", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247486040&idx=1&sn=6520123ba9bbe8eb5c7937f7be6fcf10": "(0day)API接口调用多用户管理系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247509188&idx=1&sn=47ae6fc613e62202d4e630f4456a6803": "黑客可利用系统漏洞访问马自达车辆控制系统", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247485022&idx=1&sn=8231fa01055d9cb41f3643ab3ed507bc": "利用现代二进制中的盲格式字符串漏洞:来自 2024 年 Pwn2Own 爱尔兰的案例研究", "https://mp.weixin.qq.com/s?__biz=Mzg5NDU3NDA3OQ==&mid=2247490728&idx=1&sn=b241414c796601ba5bce5a401730aa73": "一款简单好用的漏洞管理工具-miscan", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247551185&idx=1&sn=8944d940a4a3cbb93b88c363dcc06c35": "简约风-tomcat漏洞批量弱口令检测、后台部署war包getshell", "https://mp.weixin.qq.com/s?__biz=MzUyMTA0MjQ4NA==&mid=2247551185&idx=2&sn=68605f476421afa6d5732501aedf2e9f": "一款Burpsuite自动化检测越权 未授权漏洞插件(更新至2024.8)|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485976&idx=1&sn=fd297219fc1ee88452e677d064b0f9e8": "「漏洞复现」用友U8 Cloud service∕approveservlet SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649793046&idx=2&sn=f4615670d051892447c4cdd51a29a748": "趋势科技披露多款马自达车型的信息娱乐系统漏洞,可能导致黑客攻击", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487736&idx=1&sn=4865fc23b95914c8edf9a3f840699298": "苹果IOS端IPA签名工具Sign.php接口存在任意命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496316&idx=1&sn=8a590c6f1202155c857fa00dca4c64b5": "一次通过Fuzz API发现漏洞的旅程", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516976&idx=1&sn=dbf4db2c9ecdf80631540cea1fc96cd0": "某订货系统文件上传漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzk0MzI2NzQ5MA==&mid=2247486497&idx=1&sn=b3eb5ff474acdd0cc864d1669bb2cad4": "Apache ActiveMQ RCE漏洞(CVE-2023-46604)复现", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485987&idx=1&sn=87decb8f8c57f3828c6a6fbb23befb14": "「漏洞复现」某融信运维安全审计系统 download 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247631989&idx=4&sn=ed86d7a8443251eaed3d096f5b140c5a": "马自达被曝存在多个漏洞,黑客可执行任意代码", "https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247526543&idx=2&sn=c5bc8e32ced91ffee1bdb2f2cb7035fa": "快讯 | 马自达被曝存在多个漏洞,黑客可执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489139&idx=1&sn=9d86286b4ba4ffbb4aed4a1e75de0ec0": "【漏洞预警】H3C CVM fileUpload∕fd文件上传限制不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487750&idx=1&sn=fe3f4129970c2a296fce00901f6135f0": "用友-U8-Cloud service∕approveservlet接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492618&idx=1&sn=90efb91aa4bbdd9061a6322293c9b6a6": "漏洞复现 || 苹果IOS端IPA签名工具Sign.php接口存在任意命令执行", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247486745&idx=1&sn=34d7a9d0d600f3840faaef07591563e7": "从上传到入侵:揭秘文件上传漏洞的操作原理", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517074&idx=1&sn=8e8f2792d26aebcbc1ba39a4c550a7b0": "Src挖掘之比较有意思的几个漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489958&idx=1&sn=cf0b97f0b058c73b649423d7a0ddccf5": "网络犯罪分子使用 Excel 漏洞来传播无文件 Remcos RAT 恶意软件", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485924&idx=1&sn=880e377ede7aa9c733bfcc7c142fb276": "综合信息收集、漏洞扫描工具 - ScopeSentry​", "https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649166815&idx=2&sn=dfa5665a0947b0341e0e6efd2a73fbc8": "马自达汽车因这些未修复的漏洞极易遭黑客攻击", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094001&idx=2&sn=3243b539bbf64fc0751ab34bb2a22230": "未修补的漏洞允许黑客攻击马自达汽车", "https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247514303&idx=1&sn=fe607654fc7f15f1a6013398469ae07b": "马自达爆出安全漏洞,影响旗下多款车型", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521440&idx=1&sn=3bf8ff26ce74c0c7fbfeb2701a773a5f": "Palo Alto Networks:注意潜在的 PAN-OS RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521440&idx=2&sn=1ddad70ced916d3fad493805c8d04d62": "D-Link 决定不修复这个严重漏洞,影响6万多台 NAS 设备", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291845&idx=1&sn=f381efe5ebe05970c8e7c676b0885b9f": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649787211&idx=1&sn=40b97f9c64321b8516bbca6631808119&chksm=8893bb24bfe43232f5c4d89a8a9182ee80048792ee10b961e085a263348adaf3286f09f46441&scene=58&subscene=0": "为什么AI开发者必须拥抱漏洞研究与透明度?", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458581829&idx=2&sn=ae51e18b3e301f060ae8410a32df301f&chksm=b18dcbcf86fa42d92bae8cc2f3715e847a91f7f6f73eeb8782b5f428961d44c44ae7b55be2fe&scene=58&subscene=0": "马自达汽车系统漏洞引发安全危机:黑客可执行任意代码", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458581829&idx=3&sn=c1ae7509c268529b0ebb8db6f9a20d3a&chksm=b18dcbcf86fa42d97d34d5f6076db35f779433e43f6c42f4a563ac9f84428a72ddfa7b3d70e8&scene=58&subscene=0": "【入门篇】Android漏洞挖掘,实战演示挖掘技巧", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496338&idx=1&sn=80a4550b2c47fcef3288062f68a563bf": "从404到RCE,挖洞像喝水一样简单", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489152&idx=1&sn=aeea13224eb88755f02f3d652be34508": "【漏洞预警】Php开源框架-Laravel注入漏洞CVE-2024-52301", "https://mp.weixin.qq.com/s?__biz=MzkwNjY1NjI2Mg==&mid=2247487295&idx=1&sn=e3e1be9ae9f24240a8b4e85cc8347f3c": "挖掘漏洞-小白到脚本小子的进阶之路(小脑篇)", "https://mp.weixin.qq.com/s?__biz=MzU3NjQ5NTIxNg==&mid=2247485200&idx=2&sn=9af87d8fa4683d81431cadfc8435582c": "全球警报:零日漏洞攻击激增,网络安全新挑战来袭!", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094015&idx=1&sn=9023a1408c4836ae401f7476ecc527ca": "【漏洞通告】微软11月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MzI2NzQ5MA==&mid=2247486587&idx=1&sn=692958f6dd36e647baa4c44504b444e4": "nacos身份绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5OTk2OTY5MA==&mid=2247485640&idx=1&sn=8b123244b4bcdbba6b3b8b9b4af5fb41": "Microsoft 11 月 CVE 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247485068&idx=1&sn=674a8d6280af068e1fa586eb59d2c77d": "掌握内存利用:基础知识、栈溢出、Shellcode、格式化字符串漏洞等", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133346&idx=1&sn=556b9a1064dfd11eb639b71bf3c7c736&chksm=bd15a5718a622c672c53da29aef5997274bbc076900718fcd2bd1bf6ddb1760c8ce8c357fe49&scene=58&subscene=0": "为何1∕3企业安全事件源头没法追溯,审视网络安全管理的6大漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133346&idx=2&sn=633af7e95341eb332fdb5296c7c0da20&chksm=bd15a5718a622c674fd63d39c579d48a472c1a2711e8ae7dfb92d210e25d5d3c1e4d34db9ebc&scene=58&subscene=0": "首届“数证杯”电子数据取证分析大赛报名启动;Epson打印机设备曝严重安全漏洞,攻击者可创建恶意管理员账户 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650989809&idx=1&sn=59e24b139d616af6ecba7ffe4405ddd7&chksm=8079a6c3b70e2fd50cece8a352d2222de22473efc6ecc19ddf08f65ba6d3fb3a8b4047078050&scene=58&subscene=0": "原创 Paper | Vigor3900 固件仿真及漏洞分析(CVE-2024-44844、CVE-2024-44845)", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513066&idx=1&sn=1f1e58c9bfd0c64d48f2d26a4ec2332c&chksm=ebfaf4cadc8d7ddc5a473f4f05bf0906cba0f94f6fe531716ea0f290040eaebb75c627252e0a&scene=58&subscene=0": "多国警告:零日漏洞攻击暴涨已成为网空新常态", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247502410&idx=1&sn=5d483b57bf88202bb0946f066ba9a44b&chksm=fe79eed2c90e67c41a2f098c2b66533fcbc9c8e2572efafeaca7cd51d9d2d91c35796baf4efa&scene=58&subscene=0": "微软11月补丁日多个产品安全漏洞风险通告:2个在野利用、4个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521471&idx=1&sn=c305cea275e183b3f69b86df88828903&chksm=ea94a5d5dde32cc3de89c8d966920d171d8349630c6c42a4ad744a7ce734c022a357c43519d2&scene=58&subscene=0": "刚刚,Citrix 修复两个易遭利用的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521471&idx=2&sn=2629744498ede8666250667452c2766f&chksm=ea94a5d5dde32cc348c8039432e0d0951418935225bd4ede79c06e3f0aacb455fc798c61d85e&scene=58&subscene=0": "微软11月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523842&idx=2&sn=b9124857bac988d1212fa9b72549629b&chksm=ce461512f9319c043e349dec8f94b6e5d53de154021d2b931e26bef2d01d01918032954e50ee&scene=58&subscene=0": "深信服漏洞治理综合技术能力获认可!CNVD给予12星好评", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247520504&idx=1&sn=b4f2a0fd94ef8bd4ef87c2cd0aa0b248&chksm=eb704ec7dc07c7d1a4b07f3b4ed99fc0d7de9b4a11125b9156f0cd94c2ed29a91e2f973c8f37&scene=58&subscene=0": "2024-11微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488799&idx=1&sn=3fcedfd76ad5aa653ae31e9acc7ceacc&chksm=cf841334f8f39a220d354f51b25fef6784eb2f9c79a2814e4aa8907e11c1f2a2f2a6f538533f&scene=58&subscene=0": "Apache OFBiz 命令执行漏洞分析(CVE-2024-45195、CVE-2024-45507)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489157&idx=1&sn=1f5ad72d63c024e79894451071bcb1ac": "【漏洞预警】GitLab Kubernetes集群代理未授权访问漏洞(CVE-2024-9693)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521484&idx=1&sn=19327f5e0d0275273114fd7a7e37da3f": "谷歌AI平台存在漏洞,可泄露企业的专有LLMs", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521484&idx=2&sn=719611812a4cbf91cb5c976ad2da4620": "FBI、CISA和NSA公布2023年利用最频繁的15个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4Njg3MDk5Ng==&mid=2247486759&idx=1&sn=dd53a459259c153a9a8cf3f7c9e6fdc5": "【SRC】未授权访问漏洞引发的惨案.......", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247487681&idx=1&sn=272487de1db94994ad44bab74b936541": "Apache ZooKeeper Admin Server 身份验证绕过漏洞 CVE-2024-51504", "https://mp.weixin.qq.com/s?__biz=MzkyODYwODkyMA==&mid=2247484533&idx=1&sn=fa4a3fb451fbbb11eb51b8c4af9b934c": "2023年被利用最多的15个漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDMyNjI3Mg==&mid=2247487184&idx=1&sn=834e20b19fcffcda9a3357c7621d7bcc": "springboot环境下的写文件RCE", "https://mp.weixin.qq.com/s?__biz=Mzg4NTUwMzM1Ng==&mid=2247512694&idx=1&sn=f2d74047d65ae9a8657b28f183ba852a": "Web版Java Payload生成与漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyODcwOTA4NA==&mid=2247486916&idx=1&sn=7a2cb57896a75ea4c2b63eabefcc72d2": "【海外SRC漏洞挖掘】参数FUZZ工具Bug修复+实战利用案例(任意用户接管)", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496744&idx=1&sn=b93dff4344d705e558e15a9eb491261e": "【漏洞通告】Ivanti Endpoint Manager SQL注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651133384&idx=2&sn=7bdabf0f97b6003aa96c3e448d46105e&chksm=bd15a51b8a622c0dccc7d2c0206564f36a7dbd2031c63d8863c6c2c5a694753e8363b287d42a&scene=58&subscene=0": "以色列支付系统遭大规模网络攻击,全国加油站和商超一度瘫痪;Citrix录制管理器曝零日漏洞,未经验证即可实现远程代码执行 |牛览", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247522718&idx=1&sn=18565624c487f6ebbdffa5caafd44c03&chksm=c144eb23f6336235b6f2107a8e371a668fc4b23534fa198557c6052b928b515723d5b625fffa&scene=58&subscene=0": "马自达警报:黑客利用未补漏洞发动攻击,你的汽车安全吗?", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523847&idx=1&sn=39421de38a4fa902816ab76b8c05b09a&chksm=ce461517f9319c012f5450f8086b9a584c065fdc518b3ae960793d8160565168385a0e26edbd&scene=58&subscene=0": "【漏洞通告】Ivanti Endpoint Manager SQL注入漏洞(CVE-2024-50330)", "https://mp.weixin.qq.com/s?__biz=MzkxNzY0MzE2NQ==&mid=2247483950&idx=1&sn=f1b198ac63084dea04a2ad4503124b5a": "2024∕11∕14 CNVD漏洞跟踪复现报告", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247494285&idx=1&sn=1457a3d2448681e7a007c4daf8accd3b": "【Pikachu】PHP反序列化RCE实战", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496368&idx=1&sn=776d5575867f08de6b73d3b5ba545171": "从302到RCE,拿shell就像喝水一样简单", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496371&idx=1&sn=93ad4b6d65fb25b94f1496a72fb90ad1": "如何快速找到 RCE", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247494359&idx=1&sn=73d1bfaf36566466761237f63dbc8251": "【DVWA】RCE远程命令执行实战", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545694&idx=1&sn=08893a5d79ebcadd741a29b0a011327c&chksm=eb84d8fedcf351e8c814b2a07a2672d4d106b081847112b501146d33275db05bf23a5d669bbe&scene=58&subscene=0": "什么!这条PoC∕EXP的作者竟是?", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486109&idx=1&sn=ec2de28da805a6862479f62c88baa86f": "「漏洞复现」微信活码系统 ucenter∕index SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496868&idx=1&sn=086918413912fb2d458b885b4ef7b36a&chksm=fa595a49cd2ed35f7c824e981f1b937ed1fc725ada05083e40abca7c120bf1f087a2949104b1&scene=58&subscene=0": ".NET内网实战:通过动态编译混淆代码执行Shellcode", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247524569&idx=3&sn=94367f341068640a73141f77d8660cc1": "Ruby 3.4 通用 RCE 反序列化小工具链", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496912&idx=2&sn=e31c73bcb3dd603db5bd1640d808e197&chksm=fa595a3dcd2ed32b0373269efe1cc1ccf6944719a00f03acf5d94547d4357dc79b2b6ea3e77d&scene=58&subscene=0": ".NET内网实战:通过动态编译混淆代码执行Shellcode", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486155&idx=1&sn=3a958fa80af2b26a774df1ce587f8218": "「漏洞复现」顺景ERP Download∕GetFile 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247517424&idx=1&sn=f752827decb18a5d0f8b591374c8b49d": "从404到RCE,挖洞像喝水一样简单", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247484119&idx=1&sn=c39d95f9cf5532ea16ca05fd549f5fcb": "从 LFI 到 RCE 的旅程!!!", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486212&idx=1&sn=2c15b71df98eb927c666b4e0030fe500": "「漏洞复现」用友U8 CRM lead∕leadconversion.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486236&idx=1&sn=ab4b94dd00b317fbf6812afbb94bb15b": "「漏洞复现」用友NC yerfile∕down SQL注入漏洞(XVE-2024-34596)", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247485622&idx=1&sn=c6b1a76d598054eb86efa917775f6188": "Spring Properties 远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzkwODQyMjgwNg==&mid=2247485335&idx=1&sn=38f3023b39c5fd027dee549e09ba0eac": "用可命令执行的大模型进行偷家", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489592&idx=1&sn=d4b5b3b2d49bb277a97a0f4f1ade1c30": "用友NC ∕portal∕pt∕task∕process SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247512202&idx=2&sn=73814a49bc3d3b62dc7f2528d46458b9": "见证无限可能!火山引擎冬季 Force 大会开发者论坛来袭", "https://mp.weixin.qq.com/s?__biz=MzAwNTczMjAzMg==&mid=2650239261&idx=1&sn=f15bf183207a5552c9f41fe325a94da3&chksm=831bf2b2b46c7ba49f5d2495c6783473d869a42151273dcb48466592200c9d4b660d52902c21&scene=58&subscene=0": "聚焦纽创信安 | 上海ICCAD 2024-Expo", "https://mp.weixin.qq.com/s?__biz=Mzg3NzYzODU5NQ==&mid=2247484894&idx=1&sn=513ddea2f76c9a5bc7e6b7e6986b9c25&chksm=cf1ea372f8692a649a82ba31296a0367a3ed3cbe91863b71f8d217351f73503a214f6d1fe09e&scene=58&subscene=0": "主机侧命令执行监测的规避", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653069382&idx=1&sn=dc216dec7a27133253dec39e9f725188&chksm=7e57ddf0492054e651e2d5da482f15d83be9df05fa44b26a4e380e2aa8b1c24105a1096d917a&scene=58&subscene=0": "看见创新力量!极客公园 2024 年度「InnoForce 50」发布", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247494891&idx=1&sn=7ced433ec09c940da8d57846e884096d": "【bWAPP】OS Command Injection(Blind)&PHP Code Injection 系统命令执行", "https://mp.weixin.qq.com/s?__biz=MzkwMzcwMDU5OA==&mid=2247484107&idx=1&sn=efc2381710f01860a5727090f7f992f4": "记录一次RCE无回显突破内网隔离", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488790&idx=1&sn=376728eef98af14fb13112cf8db0c80d&chksm=c2c6421df5b1cb0bf4d652a5327391b380ed9f96e669ea2f562500cca152e6b8f911693e7459&scene=58&subscene=0": "【处置手册】Apache Tomcat条件竞争代码执行漏洞(CVE-2024-50379∕CVE-2024-56337)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247580480&idx=2&sn=22f89a7412dbbbf2caf0286dbef998ec": "Apache 修复 Tomcat Web 服务器中的远程代码执行绕过问题", "https://mp.weixin.qq.com/s?__biz=MzU0NDc0NTY3OQ==&mid=2247488323&idx=1&sn=48b714fc62e8ad09f232a9ee6ee1fd02": "【漏洞通告】Apache Tomcat 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247486184&idx=1&sn=5c1bd5ddbc40812af82fbfa7a9f22770": "(滥用) ClickOnce 实现可信任意代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247486378&idx=1&sn=e03dd256a0ee13f3f03024f4de886e7a": "edu挖掘从弱口令到RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496813&idx=1&sn=eab6d19d242d637c1797d76ec3ae43fa&chksm=e8a5fe0edfd277188a3ce54336fe9ddf992716daadef1e899d9d6e4de34f5c25335a2222782c&scene=58&subscene=0": "从 SQL 注入到远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247487032&idx=1&sn=3953d7b15c531d645369722844c65578": "Lua项目下SSRF利用Redis文件覆盖lua回显RCE", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247488263&idx=1&sn=269b6a44555f773dd66be01cffb6ef76": "从302到RCE,拿shell就像喝水一样简单", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488860&idx=1&sn=d1d87ac982c32f01e05fc74e29efccff&chksm=c2c64257f5b1cb416e9fd6d3a45e35247f42e76947e51170f466288638bc9ff50a5e290f30c1&scene=58&subscene=0": "【漏洞通告】Rsync缓冲区溢出与信息泄露漏洞(CVE-2024-12084∕CVE-2024-12085)", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492698&idx=1&sn=31b2a6d8629fb3f69e5a9c159e42c650&chksm=96f7fb37a1807221e222b2e62698c88569521b9b0ec86deebfe7d0dab53b302b142b23b9358f&scene=58&subscene=0": "【已复现】Fortinet FortiOS∕FortiProxy 认证绕过漏洞(CVE-2024-55591)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067407&idx=3&sn=8ab61dc14be99150b80875b0242ba5ee&chksm=f36e7a0fc419f31991628c4d2745df5c3bc235f99efb1f272830e57fe97a8ce3d84f7a21bcb2&scene=58&subscene=0": "【安全圈】超过 660,000 个 Rsync 服务器遭受代码执行攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518264&idx=1&sn=6823adc5590ea93b5292ad7b512fc377": "$40,000!如何将路径遍历升级为RCE!", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247496907&idx=1&sn=bf65d0102436150a0dc5482d51b5c998": "$40,000的RCE!", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652114147&idx=1&sn=257856caede83532d8fbbbbaa718c6be": "OWASP 2025年十大漏洞–被利用∕发现的最严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490021&idx=2&sn=78ca373b771055bfce301e58e2d94839": "渗透技巧 | 小白都能会的通用漏洞挖掘技巧", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490313&idx=1&sn=74c67202db6cc3e463b34c9f381ceebf": "博斯外贸管理软件V6.0 log∕logined.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527156&idx=1&sn=ce41716d54949eb8045c2dec96ee44a6": "在受限的 Rails 应用程序中通过任意文件写入实现 RCE", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518315&idx=1&sn=5664abc72c27c8258f88adcb7ac37b50": "从 LFI 到 RCE 的旅程!!!", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490023&idx=3&sn=254de260da45916c1b80cf6eee6c4ed4": "对 404 站点的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI0NjA3Mzk2NQ==&mid=2247496095&idx=1&sn=4bba7300e436e3e9e1eb11a361c42c25": "攻防靶场(54):从LFI到RCE", "https://mp.weixin.qq.com/s?__biz=Mzg2MjYxODQ4Mw==&mid=2247484982&idx=1&sn=226d2daae237f9ead22b087b2611e457": "UbuntuServer24.04上使用NVIDIA GeForce RTX 4060Ti部署并训练DeepSeek R1大模型", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037457&idx=1&sn=32e47044585804b9f31934fb3a7a3f5c": "Redis数据库主从复制RCE影响分析", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037458&idx=1&sn=0ee75174afec20a34c3f3243329d42e4": "无参数读文件和RCE的利用研究", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247570693&idx=1&sn=91430db87cc7d4fe301b95d1c68fda36": "21.4k star,开源安全漏洞扫描神器,可集成CI∕CD", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247527476&idx=1&sn=3c6e650cd3989e4318e4de87b1cab4a3": "Microsoft SQL Server 中的 RCE:探索错误配置并获得命令执行能力", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497057&idx=1&sn=42c4340829ae711582db88434152f996": "任意文件读取rce", "https://mp.weixin.qq.com/s?__biz=MzkzNzg4MTI0NQ==&mid=2247485520&idx=1&sn=e4925fcac21853b179581f4104118a38": "CTFHub-RCE题目wp", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490027&idx=3&sn=a55241cb4ad74dea7e2a68b523143d8c": "Tabby 2.0 自动化代码静态审计:CVE-2024-53675&53676 HPE IRS XXE&RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492534&idx=1&sn=61ec9a86fe31f884fa4184f67dc9097e&chksm=e90dc99cde7a408ad941003edd68c1a1b59dfbc542e9105616e3e6ab01b75a4a9dea867d58db&scene=58&subscene=0": "朝鲜APT组织Kimsuky利用新型恶意软件ForceCopy发动网络攻击", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487102&idx=1&sn=cba6188bace0bf873c12474f7685fdd1": "通过 ROP 实现 RCE", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652094783&idx=2&sn=87b91e610336b534cc5d4cdcf539aae7": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247487125&idx=1&sn=5d3ee2705a46c90599478e027fbeb548": "探索堆利用机制:深入理解 House of Force 攻击技术", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MjAwNQ==&mid=2247486782&idx=1&sn=c600479f6914a1a887f7c345c57c86fd": "从路径遍历到RCE:解锁$40,000赏金的黑客进阶之路", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247505047&idx=1&sn=24e6bb5aea2968471e3bde09e7dac13d": "我如何入侵荷兰政府:利用无辜图像进行远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497094&idx=1&sn=fd7fe711af4c15fb8cc6bd275d1e15b8": "通过供应链发起的RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247492585&idx=1&sn=0e00cf9c90545a036b2dfd1a3025966d": "实战 | EDU 某些985∕211证书站 (漏洞挖掘)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522246&idx=2&sn=fbca692993726f368c05fa16b80eb5a8": "新型 “whoAMI” 攻击利用AWS AMI 名称混淆实现远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488037&idx=1&sn=e95060073c6bd35b738e6465d0b60b50": "漏洞预警 用友 UFIDA NC portal∕pt∕office∕checkekey 接口存在 SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497171&idx=1&sn=8ca08a7437f1a26a0c136af6fda98438": "从开放重定向到远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247510554&idx=1&sn=42c98f4263928e124525e90ee39adbc6&chksm=fa527fa4cd25f6b24ecff2015fd9c0adae0adf7f648e7d55c4ce7824d72ea227aac38fd43b44&scene=58&subscene=0": "通过ROP实现RCE的一次技术探索之旅", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488094&idx=1&sn=017c55356ea1da2d85e1726e6695cfc9": "方正畅享全媒体新闻采编系统reportCenter.do∕screen.do接口存在SQL注入 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488323&idx=1&sn=086e4caa87776a8beceee9e29aacf5be": "用友crm客户关系管理borrowout∕ajaxgetborrowdata.php接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489903&idx=1&sn=45b60628a72c9d08161aaff449250ee7": "【漏洞预警】PgAdmin远程代码执行漏洞CVE-2025-2945", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247491094&idx=1&sn=64efc1868367b9b6eaf2b6e29255b4f3": "一行代码引发的灾难:PHP文件包含漏洞全面剖析与防御", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486454&idx=2&sn=cbab7efd444f59e85a05e6533d64937e": "玲珑安全第六期漏洞挖掘培训开启!福利多多,速来围观!", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486454&idx=5&sn=a20e29ef98478fbcdddf3c5d1ab5b030": "\"0day\"漏洞裤", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486673&idx=1&sn=c2ca26d2b8ad1423184df53dd95a00b6": "【漏洞预警】pgAdmin 远程代码执行漏洞(CVE-2025-2945)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651317886&idx=3&sn=183f8704e264104213ccad7bd5d4ec2d": "谷歌修复安卓系统中遭攻击利用的两个零日漏洞及其他60处缺陷", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068959&idx=4&sn=e57a187e3a257c344e9371d382cfa185": "【安全圈】Dell PowerProtect 系统漏洞可让远程攻击者执行任意命令", "https://mp.weixin.qq.com/s?__biz=MzU0NjU5NDE4Mg==&mid=2247485575&idx=1&sn=868a7708d13adce2fb67a49e090f7846": "EMQX后台插件命令执行", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068976&idx=3&sn=f9111a0c6b1ffd4f0343440dd3e28f00&subscene=0": "【安全圈】假冒 Microsoft Office 插件工具通过 SourceForge 推送恶意软件", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499392&idx=3&sn=39ea8ccae55109a2df63bb3741bf2c1a&subscene=0": "突破 .NET 身份认证,上传定制化 web.config 实现RCE", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581892&idx=1&sn=cfdb826f07e961227de9a4eea2dac941&subscene=0": "滥用WooCommerce API的梳理工具在PyPI上下载了34000次", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247547487&idx=1&sn=c830ae49e2dce87e99ce5c6f7b7e5344&subscene=0": "三月漏洞信息简报", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581907&idx=1&sn=8427207ebd9d65dbf78eb5299105c613&subscene=0": "假冒的微软Office插件工具通过SourceForge推送恶意软件", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592315&idx=3&sn=015a7f7e6a2c5be21c61063231419004&subscene=0": "440万用户记录被出售,黑客声称入侵WooCommerce电商平台", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497401&idx=1&sn=90eda1b06e1f03b62249f21e6509a522": "RCE", "https://mp.weixin.qq.com/s?__biz=MzkxNjc0ODA3NQ==&mid=2247483905&idx=1&sn=bb01f1a332c9f8a8f1bfcbb3c3e93448": "如何发现AI chatbot 中的RCE", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484846&idx=1&sn=6b0b65d2a82971a0756c5fb755742bf9&subscene=0": "泛微Ecology后台远程代码执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458480115&idx=1&sn=8e3211890f0da696ad3be2371a2fe2eb&chksm=b18e5d7986f9d46faeddc98950ea0a2f82fbac0677c761cef3fc43934133aa9563e5ef59fa8b&scene=58&subscene=0": "CVE-2018-17463详细分析及复现", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247491615&idx=1&sn=a03326f5f60da16680f0f7f3b7b9bec5&chksm=fe26e51ec9516c08b1410d7449e843bd20ca49e9aaba4743e42950d3572bf1dd79f11e5118f4&scene=58&subscene=0": "CVE-2022-34721:Windows IKE协议扩展远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247532917&idx=2&sn=0e3d66662a5333079a98caca45c6bb12&chksm=c1e9cd24f69e443285f1c3913b94c8f11cb97997cff79b8fa6825906e859d0186c8886403725&scene=58&subscene=0": "新攻击利用Windows安全绕过 0 day 漏洞投放恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514814&idx=1&sn=4b21aca000d15beda25426bb096a28d7&chksm=ea948bd4dde302c24b745c39ef1eac1f344225d97e67e0eea5c1563b626468ec92c838104593&scene=58&subscene=0": "思科ISE多个漏洞可用于一次点击exploit", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247514814&idx=2&sn=d77760825e29cde63586a63c502a43c9&chksm=ea948bd4dde302c23aaeb3cca7bc0319a84411de5600ffbdd5a3f0b8d9241858e091fa9b19f8&scene=58&subscene=0": "华硕修复可禁用安全启动程序的UEFI漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247497097&idx=1&sn=5ec364d92f62c6b8c09c491aa4b6cfe3&chksm=c1448734f6330e227feecbdf9830cb5f9029815a32dc7204b64b02944cf3f71d98b50537f5ae&scene=58&subscene=0": "[调研]错误配置和漏洞成云安全最大风险", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247487282&idx=1&sn=88d6db85d37a02aa7331b7a20dbff1b7&chksm=fa5aa1dfcd2d28c93201241a496cac457930c9cff11a69df8637a37dd3c3af7957deb9ac4693&scene=58&subscene=0": ".NET 任意文件下载漏洞绕过", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247535287&idx=3&sn=e347508d2b0b26476aeb9b5453a4fefb&chksm=fa93fc76cde47560a39c163459ac3ee95b4d38d58704dc7249aa321cd119023aba4654e8c37e&scene=58&subscene=0": "TPM 2.0安全漏洞可窃取加密密钥", "https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247491091&idx=1&sn=2e92be66d078b12bd4accecc94a1c267&chksm=c187de02f6f05714718695b4ba38c4d8a2b3a2f38cff218afdf39da87f489fe21aef06f5b8d6&scene=58&subscene=0": "CVE-2023-21752 Windows 备份服务漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247501760&idx=1&sn=a6b0688f0dfc67ca43e21be3770fe318&chksm=cfcaa4d4f8bd2dc29c46295b156d66aa21bae973c4430b67d81dc0afcf97422c362f717b4ead&scene=58&subscene=0": "0day通告|用友 NC 反序列化远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458504808&idx=2&sn=f1c6d6a58ddd92dfaa4efef07369e9ca&chksm=b18efee286f977f4ad8ff4541fb08e58550bc673a64fdf7fe5dcf88ee36cb3e95724028443c1&scene=58&subscene=0": "直播预告 | 系统0day安全-boa漏洞挖掘实战", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247516580&idx=2&sn=fee108ee4d61523b8dc544a5c1bfd2b8&chksm=ea94b0cedde339d822e3ed4ea277e795e733ad86df5ff4de2e3d1c97f16ea72d051b98a2395c&scene=58&subscene=0": "Barracuda 邮件网关遭 0day 漏洞利用攻击", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487263&idx=1&sn=3bba56ec214c0123d4d8add0f4325e57&chksm=fb028247cc750b51f0899a6430cd5a51459a6af48305e106c11500ba95a4ff82fe37821c03aa&scene=58&subscene=0": "Azure Functions 上未经身份验证的 SSRF 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247498936&idx=1&sn=8be5979ad8dcb3db66ed76590f2e87a1&chksm=fe79d820c90e5136a83023fd6346c09eb26c0df43e1eaf5dfba2e4d45c715898252b33b37b5a&scene=58&subscene=0": "为了做好这件事,他们在漏洞堆里挖呀挖呀挖", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247491714&idx=1&sn=aba7be143506bbef9329eaeb52557b35&chksm=e8a5eae1dfd263f7aac84cf815247cbc5f5bb7f2c51e69e8c3ec7d7e9b264b00e629fd1aae73&scene=58&subscene=0": "GraphQL中api漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517466&idx=1&sn=56ec3d83af97ad62084124c205e2349b&chksm=ea94b470dde33d66e66beaa6ad53e44d25babf2e6c0517f8b86135be8ba15399ba13dcea6b78&scene=58&subscene=0": "数千台未修复 Openfire XMPP 服务器仍易受高危漏洞影响", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458515490&idx=4&sn=85a285318e4ff0158c7304b182bb1097&chksm=b18ec8a886f941be5cfb760d9ad76a8f3b8b8b53989d71bfb96e7063a9c83071d57bf73e0b52&scene=58&subscene=0": "CVE复现漏洞精讲-从基础到入门", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493761&idx=1&sn=3f1a17ad2be1ca942cab1e8ac0d1977a&chksm=fd74d848ca03515ecb806117d2d72b4f13726fba04f3a43a51c626b2be587c5bde5a90b302bb&scene=58&subscene=0": "CNVD漏洞周报2023年第34期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493761&idx=2&sn=74200ae252e0743fbb393b6c1b383053&chksm=fd74d848ca03515e69520fe0619dadc83d6d7ef59513fe4716014fa667fa65861fc66558470c&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230821-20230827)", "https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247491365&idx=2&sn=52810aeff38a65a8b6bc920141cb26c8&chksm=ec1bfef6db6c77e0974d0e8d362bbf474e34aea742d4af5b799bd6a5231bc8aaa07d592a062f&scene=58&subscene=0": "爬虫漏洞活动,翻倍奖励长期有效", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650178496&idx=1&sn=553331af63986690a2e2ba1b22e3eab8&chksm=f448787cc33ff16ab50d1eb7a4fdcf319eb7dfbe0b244d0a9b9a568a1876cd402a6601fe3754&scene=58&subscene=0": "不是我懒,王者级漏洞真不用修!", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247495205&idx=1&sn=478d16827a5d93cb0471b6771214aae0&chksm=fe26eb24c95162320fd4e30a73e995bfa260d162566931d652aa249e11841879073637c0534b&scene=58&subscene=0": "CVE-2023-38831:RARLAB WinRAR代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247495205&idx=2&sn=2bfbb15158e63bcc9f3fc002bac4435f&chksm=fe26eb24c95162324fd1e3dff521985c96b0556450e3c8469dd20526430cceef9b945d659c1f&scene=58&subscene=0": "CVE-2023-36874:Windows 错误报告服务权限提升漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509634&idx=2&sn=4e60c4c5baa19987a0a12486feeb93da&chksm=ebfae1a2dc8d68b44db885d87cc5a6d1dbd958ebdadfff1993fda4ff826cc464f346e607a022&scene=58&subscene=0": "多省农信社网银存在漏洞,被非法窃取百万条银行卡信息", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247491725&idx=1&sn=e33912dbd54c0fffafe5e97d5fb60e0a&chksm=e8a5eaeedfd263f8c6cbc5d3e358632738c7b5ac8c0a8fa553aab3d6579c4dc09f8b4ad6c602&scene=58&subscene=0": "记一次神奇的垂直越权漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247564239&idx=2&sn=4c1eaabae9f1c620b44292ad4e52fecb&chksm=9f8d6bc7a8fae2d157a2c3d1e3e7331789959e133d3d951c69b13eee36b8b89478543a4d3557&scene=58&subscene=0": "360亮相HITBSecConf 2023,独家揭秘重磅漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247564239&idx=4&sn=b1ddbbacc3c61ef4480c628759e8644e&chksm=9f8d6bc7a8fae2d16844a2963dc13cc0d36dba0395cd30ff7ffe8b261de6f1b4218a0e0ca929&scene=58&subscene=0": "WinRAR被曝0day漏洞,360第一时间全网拦截", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517476&idx=1&sn=0c931ea491e1ceec5bc4d0c6633d9fea&chksm=ea94b44edde33d587886a4ead4f7e7be77d88f83456be4274728de062d3cbe95501c219bff65&scene=58&subscene=0": "Rapid7 2023年中威胁局势回顾:勒索攻击ROI仍高居不下;0day 漏洞利用规模扩大", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247539381&idx=2&sn=234a0391fcc1af16246f3f121beaf17b&chksm=c1e9d6e4f69e5ff283c154a90f31df04bed58548913f20d25b9cb66934221da6b51b6fc85280&scene=58&subscene=0": "WinRAR再爆0 day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498627&idx=2&sn=3afcf636bcffb68fe623e46f26a0fa0a&chksm=973ac8e1a04d41f7590c540c7cca946bc898ec95d7a2d3e4f70521630cbd6cc4b9db896f790e&scene=58&subscene=0": "CNVD漏洞周报2023年第34期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498627&idx=3&sn=b887f4dbaf0453d739c0ed5b4c3aee25&chksm=973ac8e1a04d41f7c53762254b8b3716fd9186533ea311a645f9f57f69d90f3244bab948c5dd&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230821-20230827)", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487948&idx=1&sn=0796075e9677c3c3fd251545998f416f&chksm=fb029c94cc7515825b6f185be93bf0457e1ef928d851d8456db7af2ae353ee20844c84104f34&scene=58&subscene=0": "攻防好工具Java RMI 漏洞扫描器:remote-method-guesser", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785376&idx=1&sn=91f9f423188b48c275fc482dbf36f0e4&chksm=8893b44fbfe43d59bad9020996d8c3dbf17a87a49eed0ffaeb57e5f357e85f57b405c107305d&scene=58&subscene=0": "CVE-2023-36900 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785376&idx=2&sn=2c3ebd6d77c9494ae8b315a6a3a8a6b8&chksm=8893b44fbfe43d59df0c8f1fdaf361acdffc49c04b3eca8d4d1a8115f69f9c1e16cf821fcd63&scene=58&subscene=0": "WinRAR被曝0day漏洞,360第一时间全网拦截", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247488459&idx=1&sn=1d60fe9199f0b617fd6689f71f395a42&chksm=fa5abd26cd2d3430754fa51845e229af40b783653d133c6316db36771ea0c951666c8db470c5&scene=58&subscene=0": ".NET 序列化生成 JavaScriptSerializer Poc", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509655&idx=1&sn=0af44b6f2001ca28def6b10700f8ff04&chksm=ebfae1b7dc8d68a1df22465aed5dd79d57e4e2dc8faecd64abacb80737442d396e3731912cb0&scene=58&subscene=0": "美国政府通过漏洞披露计划修复上千个漏洞,强制漏洞披露成为最佳实践", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517495&idx=2&sn=f20e793a89665c09e42c6341755a3e88&chksm=ea94b45ddde33d4bec3d0c06c238e806e9061130fc138a24354059fe0f857cafc9054fe04e3c&scene=58&subscene=0": "VMware 修复网络监控产品中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785436&idx=1&sn=71d2dcb9c61b5b22ac03a9c8e3d1408f&chksm=8893b433bfe43d25abb0c700484fb3e19c4ad820f2ce502900d73da5855689a2d762fc794b14&scene=58&subscene=0": "【漏洞复现】Typora 远程代码执行漏洞(CVE-2023-2317)", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785436&idx=2&sn=3d2f85e224251932c9b6d433fe75b813&chksm=8893b433bfe43d2539407b83b1193ef3a5792107a7643250e04eb16fa0d4e35528e9f1f639c3&scene=58&subscene=0": "两个漏洞的故事 - 分解 CVE-2023-36884 和感染链", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499456&idx=1&sn=23098ef44ead21565402a43ddbe1fb83&chksm=fe79da58c90e534e28c7d33469f3ee1b546bbabb5a17d59e9f12bc59973ca8173b478bffa53f&scene=58&subscene=0": "VMware Aria Operations for Networks 身份认证绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247495398&idx=1&sn=62f9636ff07e4dd71819f5f2316d350c&chksm=fe26ebe7c95162f1269c3d7b90f7fc0d854cd27ec6f8d4e7e56023b5dca0021936ad6506c9f6&scene=58&subscene=0": "VMware Aria Operations for Networks 身份认证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517509&idx=1&sn=2d5195a93e5a896c8beec87780a35783&chksm=ea94b42fdde33d39b1462cc81add2c73f67959e0e0001bef9b626bf291bd9d747b7ee2e00615&scene=58&subscene=0": "严重的BGP 漏洞可导致长时间断网,一些厂商仍未修复", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487959&idx=1&sn=ec1d60812cbf898ea8c743f7f8a0dc36&chksm=fb029c8fcc7515997ccb91bc75a93ef3bad8d8e3f33c73cc37023cd0a0f804800f9f9f613e40&scene=58&subscene=0": "安全课堂|关于小程序session_key泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539632&idx=3&sn=cae94da59f4b1b679837099232758020&chksm=fa93ed71cde4646774cba06cb3cbeed022747c7b326f32a2a1fdc8d84404bcc91396cebc210f&scene=58&subscene=0": "美国政府通过漏洞披露计划修复上千个漏洞,强制漏洞披露成为最佳实践", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247510768&idx=2&sn=df1c5d6eb7c365fbe715e5e2b6d20de7&chksm=c2d1d654f5a65f420ddea26d5aa093159172858d8596264aee8e7f24344c94db9fc5e57b2acd&scene=58&subscene=0": "Yakit 近期漏洞复盘", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045518&idx=1&sn=1f4188e41cceede9d8bf127f703a5730&chksm=803facd0b74825c652cc1d48108e52b18b0e6f15701ac5189747753ede1a0aa11dded8199ab5&scene=58&subscene=0": "【漏洞预警】HPE Aruba Networking多款交换机跨站脚本漏洞威胁通告", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247491737&idx=1&sn=75751d3af038982c680cf92afaf5d557&chksm=e8a5eafadfd263ecdcc8cfed32c8cd73339d786ecea4e814b3236507ffe19f1f63d7178bc2ec&scene=58&subscene=0": "(SRC漏洞挖掘二)XSS漏洞挖掘下", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247491737&idx=2&sn=5af96c4c8fa061fa1c12d3c0bbd5a7b0&chksm=e8a5eafadfd263ec7de06e879496595d8f09e7eaee9687a3aba34b57253805295eea9c6ced5e&scene=58&subscene=0": "“0元购”支付逻辑漏洞的意外发现", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247515573&idx=1&sn=ff8f4d0d185abbb84acce7fcb02aa30a&chksm=eb70638adc07ea9cd4ae712d235bebe55c86cc7dac6aa5e02de100031253b4077a2d011ced6e&scene=58&subscene=0": "​【火绒安全周报】《原神》服务器曝出严重漏洞∕某男子投放木马致百万台电脑中招", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520433&idx=3&sn=2087097b4ef2616ff0c33aa4e6b29661&chksm=ce461ba1f93192b7b82660730a6cf850d6b224aea56331cc1062721c7026a5fac623c8a2ba65&scene=58&subscene=0": "【漏洞通告】Apache Airflow Spark Provider反序列化漏洞(CVE-2023-40195)", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487974&idx=1&sn=3ad33e9b038d3e6021a84a4e4b7eadb8&chksm=fb029cbecc7515a814ca172281b22e6491043e9a158a5d16f959979d0ce3510b5598c37f03a3&scene=58&subscene=0": "安全课堂|关于小程序AppSecret密钥泄露漏洞官方", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517521&idx=1&sn=4ba48f444fa6833ef1644afc64166e6d&chksm=ea94b43bdde33d2da1972c61341823a26525a31d829f832b0f227f6f2fd3393b3d353e7e0b60&scene=58&subscene=0": "Splunk 修复 Enterprise 和 IT Service Intelligence 中的多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458515993&idx=3&sn=beddac3c601892af9fb977054dea0a80&chksm=b18eca9386f943854a61b88c09a13667c8d2c086038a6131afa6265ca3565dd726d28f2f21b7&scene=58&subscene=0": "即将开课!系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785459&idx=1&sn=196ce1a57fd712decfc32f8e0b620fc6&chksm=8893b41cbfe43d0a85d0150e178e4185666d261ed40063543829e1cfe6d4db1ed7f44e8e9ba1&scene=58&subscene=0": "研究人员发布(CVE-2023-34039 )PoC 漏洞利用代码", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502297&idx=1&sn=131f16b9ea862a7500fcc0c0d49110af&chksm=f2585aaac52fd3bcb94d5e7e27ff5740cb0a318e97b016313781e3dce708d68086d021603e57&scene=58&subscene=0": "雷神众测漏洞周报2023.08.28-2023.09.03", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493795&idx=1&sn=3520cf57be372bdac6880160482470c3&chksm=fd74d86aca03517c62dc09e8e5ea10cb4c08e65e745b04f7378e1fa5c75002d092d0c72f5b06&scene=58&subscene=0": "CNVD漏洞周报2022年第35期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493795&idx=2&sn=f76a8a639484d3dd7b4ebd70b6ecdd83&chksm=fd74d86aca03517cdc6b08216fe67b4d94b6fdd2c276b32b1fe878d703e78a1e43b3bd78124c&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220828-20220903)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520523&idx=2&sn=aa64ea628ca033312f2ff4a0d116d0b3&chksm=ce461a1bf931930da2c2cafd6c73637bbe594966ab497200a53ae907d8276dbf8348e011585c&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20220828-20220903)", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247529637&idx=1&sn=95d4f341231d495b34dfdb67d9a2bd6d&chksm=eb849f05dcf31613fa264f7e40a36b69e35099672f0cdaf0308236e3823e29d4f55733eb083c&scene=58&subscene=0": "漏洞分析|Adobe ColdFusion WDDX 序列化漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247488381&idx=1&sn=0a41751291122c78aae53108dca52008&chksm=fa58b146cd2f38508e30393c4c3f33be0fe03dbb8464138f146fe96bfd40740cfc32c0332e48&scene=58&subscene=0": "从某mail看0day漏洞的防御法则", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785486&idx=1&sn=13b85540aa3b6e83a22f8f4f36aa8867&chksm=8893b4e1bfe43df7cedf83b6f0e795e9d5e6bb4f62eaba2cc87fea33a12d82aa8542c0913a40&scene=58&subscene=0": "匿名研究员发布AtlasVPN Linux 客户端 1.0.3 远程断开连接漏洞POC", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785486&idx=3&sn=95c626d048629578782a21e551dba236&chksm=8893b4e1bfe43df70b96c7b4de9513a8466bb6045a7682c5f35c8066da41ad5a76600a4f176e&scene=58&subscene=0": "EVIL_MINIO 漏洞被用于攻击 MINIO 存储系统", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517551&idx=2&sn=8ffd41e1e450dfc4af6a55aa0de56c8f&chksm=ea94b405dde33d1371b97b39c7238f48c9e1e675f37dbcae210f7f4f982b1f61f702d9f67ba4&scene=58&subscene=0": "黑客利用 MinIO 存储系统漏洞攻陷服务器", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247539505&idx=4&sn=7c5208fb471c80d14c07b365b0930efa&chksm=c1e9d760f69e5e76d80f53447fb932c0f00e1ca65add532eec679a0457232e7cac33ae29efda&scene=58&subscene=0": "影响Windows 和 macOS平台,黑客利用 Adobe CF 漏洞部署恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247566547&idx=3&sn=21dee36e98b195c83d7506adbc15131e&chksm=e91414e9de639dff24123b2b53d07b3e15dc6cea37b30fa9ffe5fb9bceb97fd73b48433f2732&scene=58&subscene=0": "Kinsing恶意软件利用新颖的Openfire漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493801&idx=1&sn=59c75955a8023534a8d10b44b160db02&chksm=fd74d860ca035176bc31c6339a3116ace7c91176a8f1a6f9d96122a8d1f97ad7e10d0f69d309&scene=58&subscene=0": "CNVD漏洞周报2023年第35期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493801&idx=2&sn=afb4189cefc76f9adba268b68e2ad60f&chksm=fd74d860ca035176946fde0d0b1c62347464c53e6957b937deaa49a28d47f2ced391e64c0e9c&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230828-20230903)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517570&idx=1&sn=34fd77e3506951e7f7fd62a7ab442b2c&chksm=ea94b4e8dde33dfe4882db94eae6cfe3f510868509c9e72ccc806d2d65d5c5faaea9897b5af3&scene=58&subscene=0": "华硕路由器易遭多个RCE漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517570&idx=2&sn=7f19eccf19674dfcdf5f6515082f6989&chksm=ea94b4e8dde33dfedce31e414840f4579284cf9589c84909a1efa2bda3cb52dea3b0de2e1433&scene=58&subscene=0": "PHPFusion 开源 CMS 中存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498650&idx=2&sn=5bb3f6cb681b879b3006e51135f7d4f2&chksm=973ac8f8a04d41ee47ae0f05baa37e0aec3a011a526996080ee259c69b519f74180db6593415&scene=58&subscene=0": "CNVD漏洞周报2023年第35期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498650&idx=3&sn=22559e3db536ecef26a290555b01d2e1&chksm=973ac8f8a04d41ee55cdb43a9d85a20ea6672a2e37e1f9efbd20f7a20908588f4d3308ba2e9f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230828-20230903)", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539775&idx=1&sn=ce8cc807903614d6a8a3d6881f00e2a2&chksm=fa93eafecde463e8aec19de23e614955ff700c5518a8164689161c44801ab517ba6510170c7b&scene=58&subscene=0": "Kinsing恶意软件利用新颖的Openfire漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458516883&idx=3&sn=c2a377ecbe89f2aace2bc53887717ed1&chksm=b18ecd1986f9440fe740f39d6566f28f4d81c0a40160eaa84321a5c2343f510111825fb90289&scene=58&subscene=0": "这些华硕路由器存在远程代码执行漏洞,请立即更新固件", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491742&idx=1&sn=488574bf9c2a45cb770a5c7b1b46064a&chksm=96f7fff3a18076e5a14c694cd68207a857902f30d6467b55f1ace2b2e9e8a1dab0d63f4ac8c8&scene=58&subscene=0": "风险提示|致远OA前台任意用户密码修改漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503025&idx=1&sn=05673584c83d016e23f374c12d77d685&chksm=cfcaafa5f8bd26b3103a0815a7ac9c74618a8ec191269e2ea682901785e1efb4351e7bdde59d&scene=58&subscene=0": "8月漏洞人工验真报告合集,看看有漏的没?", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247495733&idx=1&sn=7ee03e359582d2f6b58bedf18e91f839&chksm=fe26f534c9517c22716a2603f20b10982675be92fc9c0de494301f83720c80ffda5316353040&scene=58&subscene=0": "CVE-2023-39361:Cacti 前台SQL注入漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517584&idx=1&sn=37b84a3349271c0f40eb59108b6ebf14&chksm=ea94b4fadde33decfc9df5392f6bb398a7c9f557bfde7dc94564b2459d97d2285e8da38936db&scene=58&subscene=0": "谷歌修复已遭利用的安卓 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247502079&idx=1&sn=b34d8f6a21229ef52fa7fd300e570860&chksm=fa521d41cd259457ed7afdc6a99848e578bb2bd1839b490cd63885537118f956e5c0fc84b6c4&scene=58&subscene=0": "手把手玩转路由器漏洞挖掘系列 - 固件加解密", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247487981&idx=1&sn=7410761fcf0e7c91e2cc39b712dae48b&chksm=fb029cb5cc7515a3b0f7c1a549b3e668330bd8867a8852f6d392e72a4f5ab5c02ad385fe7bb7&scene=58&subscene=0": "风险提示|致远OA前台任意用户密码修改漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247491888&idx=1&sn=91f021155effafedcaec16d2785d75ff&chksm=e8a5eb53dfd26245446b059fd598c3eb4b98c878c2c7db25263aaca4477bc2286409bd849729&scene=58&subscene=0": "一个简单的越权漏洞成功拿下Admin权限", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458516910&idx=3&sn=36ef485c3ceddf4b73be761848b172f9&chksm=b18ecd2486f944327b721d2bf63fa59c910e4e6e262d8937d23f222d742b4357a7a32b97b044&scene=58&subscene=0": "CVSS评分10.0,思科披露其BroadWorks平台身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517599&idx=1&sn=f4c64820b9383523f48091354491d150&chksm=ea94b4f5dde33de3f2f7c7d26b6bc5178d7deb13b62b5e3b5220b9ad188751bce855b427f00b&scene=58&subscene=0": "苹果紧急修复两个已遭利用的 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517599&idx=2&sn=5f9a5852520d96bfe05fa6acf6b1202b&chksm=ea94b4f5dde33de35803a6bed6a97f99decb06ce2f8819f5b903779f2688af79045529facfc3&scene=58&subscene=0": "思科 BroadWorks 受严重的认证绕过漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517599&idx=3&sn=f9b4133a88826774ba2370f315ddb483&chksm=ea94b4f5dde33de31fafd6622cb2b37398ceb935de72fe956bfdb5dc3d1b4a4ae61195437351&scene=58&subscene=0": "Apache Superset 漏洞导致服务器易遭RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499481&idx=1&sn=783c32e2a7ac48f32db61443021e1f52&chksm=fe79da41c90e5357327a96f15ca56ea2cc87eb9e60c5e4a608f19797d739309080906eb0b8d2&scene=58&subscene=0": "Apple多个产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651385555&idx=1&sn=c1343d8ff06694a8de5cd55ca0c4fd31&chksm=8d399f5bba4e164dc91072af86bfcfb9a3be2fe98b21eb90dc6d0f34d2febce9c333127ad467&scene=58&subscene=0": "当攻击队放了个0day,在你的内网穿梭……", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247502096&idx=1&sn=f0cae6b30c368681579ba07cf9997b84&chksm=fa521caecd2595b8564d22c79672401dc9031f5c4d37a4a5943fec5e91a2fee797eca7a1ce96&scene=58&subscene=0": "Android系统内核漏洞利用技术入门", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539832&idx=2&sn=7543abfd32cdc3ce48aeebb50255df11&chksm=fa93eab9cde463af2a2f248f235b23bb4c28d4d6ff76aaa518c991cb6621142116c00b346431&scene=58&subscene=0": "美网军司令部官宣:伊朗黑客利用Zoho、Fortinet漏洞侵入美国航空组织", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520547&idx=1&sn=05d08836a6598ed5160b2ce69f4a60da&chksm=ce461a33f93193252af0afaa8d11b4159cf936bbbdf5acfcba90e3cb2f79be019559db06bdbf&scene=58&subscene=0": "【漏洞通告】致远OA 前台任意用户密码修改漏洞漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652043995&idx=1&sn=cb0b83fc1f7c3b326316b9e1f4ee74c4&chksm=f36fd69bc4185f8d79421136a671017750dd0571fb878f3868cd585831eeec8c4b7173e7e011&scene=58&subscene=0": "【安全圈】苹果被曝2大安全漏洞,用户需尽快更新系统!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652043995&idx=3&sn=0c4d998adbeec85e53c5184506d913eb&chksm=f36fd69bc4185f8d1d67a76df4ac93702c564c8159ad0f25f3ec410c0b4f0345c63551632085&scene=58&subscene=0": "【安全圈】Atlas VPN 曝出漏洞:允许查看用户真实 IP 地址,官方:修复程序正在开发", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247491913&idx=1&sn=04e8abea9b17f7de23fad5de5e48127b&chksm=e8a5eb2adfd2623c57c390aec197613d7247dcc1c20d14dd1f355db9e30743945c1f937a1d22&scene=58&subscene=0": "漏洞挖掘 | 一处图片引用功能导致的XSS", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458516946&idx=2&sn=2089f98886013b2f713e04bf3707b803&chksm=b18ecd5886f9444ea253c26611e2734370834f595bdb1fccf31a7f48a4c539dd7bebaf657708&scene=58&subscene=0": "CVE复现漏洞精讲-从基础到入门", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247488596&idx=1&sn=89cc562414558b6e9ca1543e605be3b8&chksm=fa5abab9cd2d33afb9187c212e8183898b4b38f2987fc9a908fe0fdee28c22d473a5fe0b32e1&scene=58&subscene=0": ".NET 上传web.config文件实现RCE", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520559&idx=1&sn=33d05e383ff9a87b799fdb214ab6ca1d&chksm=ce461a3ff93193292939d8b45be790df0f8cd6fc03c2ed40d71c8e437a632e5ee6feaef46ee3&scene=58&subscene=0": "【漏洞通告】Cacti SQL注入漏洞CVE-2023-39361", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517611&idx=1&sn=28a10f71ab386f9648ee872a42f78f3e&chksm=ea94b4c1dde33dd73d0d676ca01bc8900c89a11ec78ba3a85863ac60159d3e26b2299be914d8&scene=58&subscene=0": "Notepad++ 8.5.6 发布补丁,修复四个漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458517045&idx=3&sn=3057d8a695134cb5d50ae1674db35414&chksm=b18ecebf86f947a91df126fccafec89c93b55de1136ba231cac378b96f00456f2856771d4dfa&scene=58&subscene=0": "入侵系统无需用户交互,苹果针对两个零日漏洞发布紧急安全更新", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247495863&idx=1&sn=45e7fc214031261a9f03e8c92a00ba59&chksm=fe26f5b6c9517ca06be78576038f315a74781d7c396a4122a1ab1aad5baedaa8ed0a049cb87c&scene=58&subscene=0": "致远OA前台任意用户密码重置漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502323&idx=1&sn=e74afe8601d2c50b33acb6b6e863ec94&chksm=f2585a80c52fd39635fa50fb9e3d52c373973434f5987b9fda2a5763fc438aa396b5980545b2&scene=58&subscene=0": "雷神众测漏洞周报2023.09.04-2023.09.10", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493834&idx=1&sn=ede7d18bb68820eca993c826b2091f02&chksm=fd74d803ca035115ae609a5d9d775bb5006b37002cf61c31a9a00658d7e61135bdcaf074aa56&scene=58&subscene=0": "CNVD漏洞周报2023年第36期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493834&idx=2&sn=7a691292ef51f9fe10f24cea12759936&chksm=fd74d803ca035115e52b0111743bc54a16cbf1adf80f14e9b890bb6302d76bf07270e1488066&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230904-20230910)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652044089&idx=3&sn=07a39c75fb543e659e7c0e1fee3ae09a&chksm=f36fd779c4185e6fc7bafc224069d3d77bf4ed50b7d3105ed0e4e110f4fb63d7aabd755c9e34&scene=58&subscene=0": "【安全圈】CISA 警告 Apache RocketMQ 严重漏洞被利用,用户需尽快更新补丁", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499511&idx=1&sn=0a1c182a7517e04185f562823fb91065&chksm=fe79da6fc90e537900a930c7298a7a9c9fc6df855b92f7c0c2ebcf8982f12ba811f31d53c922&scene=58&subscene=0": "Google Chrome 远程代码执行漏洞(CVE-2023-4863)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517626&idx=1&sn=516906d0d9c95466942c198e8b3644eb&chksm=ea94b4d0dde33dc68afa3a330f73b5e599c28832120edd5bd8f61ef250cf8d2ea50d208b5591&scene=58&subscene=0": "谷歌紧急修复已遭利用的 Chrome 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517626&idx=2&sn=921ec378de811403d36c65128b56574f&chksm=ea94b4d0dde33dc6429f65de907a52cf21165252c50d83491901120e4593128fa6804c292269&scene=58&subscene=0": "Socomec UPS产品中存在多个漏洞,可导致设备遭劫持", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458517213&idx=2&sn=a0030b651ac1185fa3a7cb03ae15d999&chksm=b18ece5786f9474168c296678d20e2768d032f45ac1f93b9076eea7297ec3b16dab1e3f703d5&scene=58&subscene=0": "2020强网杯线下-RV110W赛题复现", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247491954&idx=1&sn=c4719882a8574bcf638c6b6fc75f1ef3&chksm=e8a5eb11dfd2620712428adfb71564be16cd653d9f62430c3b8742fe3162fafb2c5416d411b3&scene=58&subscene=0": "(SRC漏洞挖掘四)短信发送功能点", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247566916&idx=1&sn=9a05bc087a39ffc31b9f8c91241a3bdc&chksm=e914167ede639f68ff2ec8f5357d306328e47c5e57e1ec86e0b0f927d263328e2c3e36a2a237&scene=58&subscene=0": "【技术原创】ADManager Plus漏洞调试环境搭建", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458517400&idx=2&sn=18b8f2675ff8fbd623f6115d43cfb828&chksm=b18ecf1286f946041defebbaa98236f645f5ce76a07a7f83502191043f2bef1d57362c2d0534&scene=58&subscene=0": "浏览器漏洞正被利用,谷歌、火狐用户尽快进行更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517643&idx=1&sn=83e85b6b9bf3a9f0cf0c1843c9589950&chksm=ea94b4a1dde33db74b2b9c5ff5da439c9a2169fcab51d215bdc495affe02787d31ab6bcf7b98&scene=58&subscene=0": "补丁星期二:微软、Adobe和Firefox纷纷修复已遭利用的 0day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517643&idx=2&sn=b81972e95b8a5e1e30f65e6b872403c9&chksm=ea94b4a1dde33db74e07a12d23528dc86d8cde056cdf425f2ca09dda6e7986fd8568721afde9&scene=58&subscene=0": "GitHub 严重漏洞导致4000多个仓库易遭repojacking攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488460&idx=1&sn=5327d54823b815f237cf836d7471ac1a&chksm=c2c644c7f5b1cdd19fd9445b9247d92f638e886316ec351b3828a9c71d3a5dff000993061b35&scene=58&subscene=0": "【安全更新】微软9月安全更新多个产品高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488460&idx=2&sn=04cca916932ed8935d247400df9aa8dc&chksm=c2c644c7f5b1cdd1dc1b5a14971b7d4a5e77ab96fd6e59f1e0cdc6a8cb1fd7b230b7c1afea43&scene=58&subscene=0": "【安全通告】Adobe Acrobat与Reader任意代码执行漏洞(CVE-2023-26369)", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247495986&idx=1&sn=4d01091d03c2e68c49a0ea3208feab7d&chksm=fe26f433c9517d259cddf5c379ab3c231dcb845c8a99e4c22bad6ee93df7020bde37b6633462&scene=58&subscene=0": "2023-09 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499519&idx=1&sn=a4857fc7bc5f3c96fd95c50e0e42d0b6&chksm=fe79da67c90e5371cc15b2fef5c7a4762d358099532a67675e42cc7f682b7d11bb80948723a5&scene=58&subscene=0": "微软2023年9月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247515630&idx=1&sn=9cf49353dffc74eddcc7c8e0c3ac60b0&chksm=eb7063d1dc07eac7411829a229f56de268a5488195607be55412c7c83c62eced22bc6f7f8c4d&scene=58&subscene=0": "2023-09微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503076&idx=1&sn=ec81dfe3ad42a54bb8a57ad0c300f67c&chksm=cfcaaff0f8bd26e6dd5c10f65735e2d2f7804b22cc2cd19a939b49a18b5e69aa6dbbedb620e1&scene=58&subscene=0": "漏洞通告|Jeecg Boot SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247489474&idx=1&sn=2e650cca1efdbf63b9a22d1bef721391&chksm=fe2ee849c959615f8a80322b3ae1cedfd9b153dc2063f5ff7a51f245c11d53541692b3ebf81d&scene=58&subscene=0": "南洋理工大学 | 当GPT遇到程序分析:在GPTScan中实现智能合约逻辑漏洞检测", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517654&idx=2&sn=652c4e44e960ea1468d3f6e14aa9ca26&chksm=ea94b4bcdde33daab2669f9abe0ceb5579f5b0531002bffd15cee9657a03daba686913b68c5b&scene=58&subscene=0": "多个Kubernetes 高危漏洞可用于在 Windows 端点执行远程攻击", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650972156&idx=1&sn=7b3be1cb57e460c5128709689684f52f&chksm=8079ddceb70e54d85f401ff78422db21590900951f8bb1437ac876fef5b7ea73558be269bb96&scene=58&subscene=0": "威胁情报 | Konni APT 利用 WinRAR 漏洞(CVE-2023-38831)首次攻击数字货币行业", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247539937&idx=3&sn=36ea22021024f019d24dcd436aab2de2&chksm=fa93ea20cde46336be30b5782476c62216376650fd652d419ef3683b2f891163b73f90a3ce91&scene=58&subscene=0": "GitHub 曝出漏洞,或导致 4000 多个存储库遭受劫持攻击", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247502181&idx=1&sn=2afb11c3982d35262c2ce99c03013e0e&chksm=fa521cdbcd2595cdc5a9cb21d3222bdc8e2d225896d48bcecbf1d4cac582b4b13e0c4f25f6d6&scene=58&subscene=0": "Windows 内核本地提权漏洞 (CVE-2023-38142) 复现分析", "https://mp.weixin.qq.com/s?__biz=MzkwNjMyNzM1Nw==&mid=2247500954&idx=1&sn=95e97816125b76cfa671e17e2be9c6b3&chksm=c0e8a0c8f79f29de7e526847abcf7fc091b48d00490b1e3d45239b1feaaa874e3e6e2efca62c&scene=58&subscene=0": "记一次曲折的exchange漏洞利用-ProxyMaybeShell", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517665&idx=1&sn=81658f5393b8756f823fdc4fce193db9&chksm=ea94b48bdde33d9d1a37b9ab3441a2942eb184e06da7107fc6fd382aa2eecaf8ec0363f8e88f&scene=58&subscene=0": "N-Able Take Control Agent 高危漏洞可用于 Windows 系统提权", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517665&idx=2&sn=c6944a499b07ed9b696150eef9f6a861&chksm=ea94b48bdde33d9dd4a98ebef50e715fca304b2a4552aecf7ac712a3efaea266de2596579c2b&scene=58&subscene=0": "微软发现ncurses 库中的多个漏洞,影响 Linux 和 macOS 系统", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247501119&idx=1&sn=c5c35086abbfe0c7e3383db95ff58ff2&chksm=ec9f1c4cdbe8955aff4e12eba47557275142622a9ed1bb7278943ac173f1cc2e31fc451c3da8&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年8月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484516&idx=1&sn=763f65b626071bfdee432404fcdab291&chksm=c2b10612f5c68f04a17c9031a642b65a8317ee8d9acda1d6ed8719a5f5899870ca7bb27bce66&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年8月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247496150&idx=1&sn=7eb683906dcc35f1292abc42a9fa2a35&chksm=fe26f4d7c9517dc147e73c982ce34132f94f3753012939e09362d53ec08d293f3022e50197f9&scene=58&subscene=0": "CVE-2023-38146:Windows Themes远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247496150&idx=2&sn=6493780b5ab8d32afbfb991dce7fafe6&chksm=fe26f4d7c9517dc160e940bd4fce292f13637c984edf11025cf214b483c0df76df3e70340ecc&scene=58&subscene=0": "CVE-2023-26369:Adobe Acrobat Reader 代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247502301&idx=1&sn=c4529e693497bbaaade727e8d5cbf782&chksm=fa521c63cd259575ec296b835f98f15cafc9e3249c5cf1e7099f83b30b6e921ba3d65903ba2a&scene=58&subscene=0": "微软2023年9月份补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247492520&idx=1&sn=7628fbe63c81c2d2d2ee6e6ae7a3c407&chksm=fa78e2e4cd0f6bf25ea779c19cbb3be877979380fe083c164c272eff5cb255968aadc15ecd54&scene=58&subscene=0": "【众测挑战赛】第6期OPPO终端专场,单个漏洞奖励最高20万!", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520633&idx=1&sn=25a58e0705b8bebec74aad5c03c4e3fe&chksm=ce461a69f931937fd2a78d8d5a7534b6e9f93672af00cb10f1ebce22bc381766f62316e5631a&scene=58&subscene=0": "【漏洞通告】Adobe Acrobat Reader 代码执行漏洞CVE-2023-26369", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520633&idx=4&sn=c580cb132bde5376e19da293b3aa0b16&chksm=ce461a69f931937f5fcfe19abd7e11fc1419e5b4dfca915bf9da13a26daee1af12762c6c3860&scene=58&subscene=0": "【漏洞公告】微软补丁日安全通告|9月份", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499568&idx=1&sn=328532f0f6fca901db6ed02521611382&chksm=fe79dba8c90e52be0b21ac03db610d64e7e652204864d2253d3708d1d64a4427438daa42135a&scene=58&subscene=0": "【已复现】Internet 连接共享(ICS) 远程代码执行漏洞(CVE-2023-38148)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247498838&idx=1&sn=54eaeca9928e59bc8bc527f50b09a666&chksm=ec1dcc7edb6a45682bc40db937dad54f2363692f430e0157305a603718fa3f9ab0637502d2cc&scene=58&subscene=0": "盘点那些漏洞 POC 测试工具", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651125707&idx=2&sn=0ea3a147a314d644ae6d464904fb58c6&chksm=bd1447188a63ce0e4318b3df726bfc839b2282fcc5189a595be3255935a5f058213b268b2772&scene=58&subscene=0": "安全头条 |4项网络安全国家标准获批发布;CNNVD 通报微软多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520676&idx=2&sn=4c968eb0002c1c08c11b4e517e677cfe&chksm=ce461ab4f93193a216afce7077e4c34abab522ac5ec415fe29babd395aca60cec0ce087025bf&scene=58&subscene=0": "【漏洞通告】Windows Themes 远程代码执行漏洞CVE-2023-38146", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503116&idx=1&sn=1c4f5ce34d20061fc86d5bc246620ad7&chksm=cfcaae18f8bd270e3161e7d7bf64249c6aec9a1b1121779e6c6b8a202251cf7c8d83d75b1bc2&scene=58&subscene=0": "漏洞通告|JumpServer未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499573&idx=1&sn=f0d948c23680e04a9ae8a3bd3f49ecf8&chksm=fe79dbadc90e52bb613b41d39eefc515131c30b6fc6de323a094a3d16ad14338dbaa715f0d39&scene=58&subscene=0": "【已复现】JumpServer未授权访问漏洞(CVE-2023-42442)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458518175&idx=2&sn=910124753fdb7255581ed1a1362a6d74&chksm=b18d321586fabb03a42a64d077cbefc9d088d9e22a00dc516a3d67d501ae022625c61ff312c2&scene=58&subscene=0": "CVE-2022-0847复现", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517693&idx=2&sn=ee2f37800cd4fde8239f203b3abcd5d3&chksm=ea94b497dde33d818a22818925aba4c372988566412b75f81318126b467d62a54093436d6e12&scene=58&subscene=0": "Fortinet 修复影响多款产品中的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517693&idx=3&sn=cf7aebe9fc74cea2001da86238add0cb&chksm=ea94b497dde33d81e53986ae709bb0281448e059268e057b632beb1f3589b7d6b28b9dc32158&scene=58&subscene=0": "上万台 Juniper 设备易受未认证RCE漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498683&idx=1&sn=d456d873e3e4d056ffba7fa1d6476d4a&chksm=973ac8d9a04d41cf5b117d1187eb142a31325e46e1ff27179126909a0ca3a15ce3141da49e5e&scene=58&subscene=0": "CNVD漏洞周报2023年第37期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498683&idx=2&sn=c33c92688b866ffbabe3283bda443dbc&chksm=973ac8d9a04d41cf8ae0f655c6f89462cb4b3a03056a3f42a2266302120c425f1fb92f4dddd9&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230911-20230917)", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247496277&idx=1&sn=783a8a6993967e1a0de7b0ec587c1b5d&chksm=fe26f754c9517e42c35e430b50d0666c51e6cbf154b7f59db686d97a26750dd90483fa29a70d&scene=58&subscene=0": "CVE-2023-42442:JumpServer未授权访问漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247540018&idx=3&sn=2e418bd04e341ee7e1a2508673035338&chksm=fa93ebf3cde462e513895cc77467a914a3fcdb941c3e5fb0cc9b55ee50e8f5464da269026c0a&scene=58&subscene=0": "即将被零信任取代?企业VPN屡屡曝安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520687&idx=1&sn=17343a98c9f15166d38a575b8b07d328&chksm=ce461abff93193a9c197221f37896559ee59a2aee2c09cd4899122b50f309f604389e45304d0&scene=58&subscene=0": "【漏洞通告】JumpServer未授权访问漏洞CVE-2023-42442", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499592&idx=1&sn=c551bdbcc671a540cd17514fe8d51092&chksm=fe79dbd0c90e52c607d4521866efdd67a30a094975382361604549b1a25d52503c276ab10c68&scene=58&subscene=0": "【已复现】Windows 内核权限提升漏洞(CVE-2023-35359)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517716&idx=1&sn=f6e084fe97c196160642647dfb778385&chksm=ea94b77edde33e688613beeefc1a659a68506fb10262cdf1c5266f6de10600d6e2b18f022a94&scene=58&subscene=0": "Nagios XI 网络监控软件中存在多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517716&idx=2&sn=bb6c7c66b683c80219cced543e465691&chksm=ea94b77edde33e68252a8d4070bc17761a318bf95afa97399d33bc0b34b28d14817270245968&scene=58&subscene=0": "虚假WinRAR PoC exp 释放恶意软件VenomRAT", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491806&idx=1&sn=473158c10d50b1f5ed9c04231d3e3ff9&chksm=96f7ffb3a18076a54e47cb326c8db62581b6166072fff23a80e475fde4265ab46fc2d7c7101b&scene=58&subscene=0": "风险提示|用友GRP-U8 bx_historyDataCheck.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491793&idx=1&sn=a94f8e3f153fbec41edab599db2d8158&chksm=96f7ffbca18076aac762aa1ba2dfcb5ee18985cbd8c1eb7df066c56f71aa8f9e2d4c45f3bba3&scene=58&subscene=0": "数据泄露风险|JumpServer堡垒机会话回放未授权访问漏洞(CVE-2023-42442)", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247496404&idx=1&sn=3e3317a6dfd5c8c0f7ce3856e6567c9e&chksm=fe26f7d5c9517ec3a7e5f0fe906939b65d4253d0426a6c5f912279c4498048303da57b4dc702&scene=58&subscene=0": "CVE-2023-4998:GitLab 身份认证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650178858&idx=1&sn=c697e46d4cb7a2b1708855e2b0afe56f&chksm=f4487e96c33ff780b9b53c9c2bfbf1c9bb326b4f17e8a5aa697394a113511e1ad6f1023f78b3&scene=58&subscene=0": "手慢会被删,这两个重磅企业被0day攻击", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247567352&idx=1&sn=f8446e3636beb3a17f7630b70a789718&chksm=e91417c2de639ed4e1259e5504463d24139a9e7750517c7132441c566136b959ea06a1b38d79&scene=58&subscene=0": "持续性威胁:新漏洞将数千个GitHub代码库和数百万用户置于险境", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517726&idx=1&sn=6812214f8fc21189da02ba2731b87720&chksm=ea94b774dde33e62737863151185ae158018de3e7f683d689e2a466982db356c57f6d7c1de92&scene=58&subscene=0": "苹果紧急修复已遭利用的3个0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517726&idx=2&sn=fb70a13cea95f2a283f72cea5e804abc&chksm=ea94b774dde33e62ceae3c08c4f637d76f5c3e2592a17823a66b9442cfc21a4a65b04d7edfce&scene=58&subscene=0": "Atlassian 安全更新修复多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503127&idx=1&sn=4ee7b17be9ef988b1bf0469692cc0433&chksm=cfcaae03f8bd2715687d37ca64f5644e4806d22e162b09b3bfc7fb54dec42c6a01fd1dba0c4f&scene=58&subscene=0": "漏洞通告 | 用友GRP-U8 bx_historyDataCheck.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499600&idx=1&sn=60040a01b2d6f613491273a1cae0148e&chksm=fe79dbc8c90e52dee9c9fb56675ef653ae9fa2b3dd3f586ceff1c479a395d50fad70c84487ec&scene=58&subscene=0": "Apple 多产品多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458518475&idx=3&sn=4f8ecfc3f7f13f0ffbf2d085451a03cf&chksm=b18d334186faba57fdc7b868b6dbbe0947d090283a087497aa9bee883f9b22ea001ca403db1a&scene=58&subscene=0": "GitLab存在高严重性漏洞,建议立即更新版本", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458518475&idx=4&sn=fb40adab88dd79ddd26ae61a764bcd6f&chksm=b18d334186faba5759ea5ef5b3b061e1f7f024b58faef58a3f327fe4e6757724b9a4d343de08&scene=58&subscene=0": "已开课!系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg5NjEyMjA5OQ==&mid=2247498691&idx=1&sn=c7c209b008f4fd1e67e21baa9e7f4dbc&chksm=c007565ff770df4982dcd0cef4367179be6640f314f914199ec96e11c6c9a9a65e1b270edfb2&scene=58&subscene=0": "【技术干货】CVE-2023-23638 Apache Dubbo反序列化漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247484636&idx=1&sn=b4693187b796f4d870a2bac92e531d6d&chksm=c1f44014f683c9021721c3be906f74233dc1afca0dd35fdaf8851e96753718e8ccd56ee6884b&scene=58&subscene=0": "「 特别预警」这个新iMessage 0-Click漏洞可能影响你", "https://mp.weixin.qq.com/s?__biz=Mzg3Mzc3NTYyNw==&mid=2247484404&idx=2&sn=2f2886b33d8cc24ca86d340cd4ce901a&chksm=cedb9490f9ac1d86e310a30798a54cbd4e365168521da5cd6fe6f4946e826a5dfe1c001d88f5&scene=58&subscene=0": "韩国科学技术院 | 探索基于LLM的Bug复现", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247539833&idx=3&sn=ed94d382e20e1bf44801bc4214f7f67f&chksm=c1e9d028f69e593e6e8182b3fe30005975727e81da33682acd78aac481b5389bc4cd2bb85bb9&scene=58&subscene=0": "持续性威胁:新漏洞将数千个GitHub代码库和数百万用户置于险境", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488054&idx=2&sn=afdd6204aa61e98c6ff76d60ece5c5fa&chksm=fb029f6ecc751678b49eae3e7bc165e33b62b6dfdd2a87bcacee92780f697f748e32114ea2bc&scene=58&subscene=0": "数据泄露风险|JumpServer堡垒机会话回放未授权访问漏洞(CVE-2023-42442)", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488054&idx=3&sn=2c8fc219310bf8cec14f349a17c0dfc6&chksm=fb029f6ecc751678428c395920d9aea97f5a7b2a81e7acc81f20758828a1f9ed78462a2bf7c4&scene=58&subscene=0": "风险提示|用友GRP-U8 bx_historyDataCheck.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520747&idx=1&sn=58d273e1feba92c281fabb50194f6b64&chksm=ce461afbf93193ed0cd19b78b460e5596858c96115f2d551a70dd572680a3be724e8c0425789&scene=58&subscene=0": "【漏洞通告】GitLab 身份认证绕过漏洞CVE-2023-4998", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520747&idx=2&sn=4c5874640d4b5087864e85ffe0f47125&chksm=ce461afbf93193ed9c1e7154f2b24c5fb22201bc5f7b8daf65b1894c1d5d84569e3789cb352a&scene=58&subscene=0": "【漏洞通告】用友 U8Cloud ServiceDispatcher 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520747&idx=4&sn=5e26e71a327b296170997e7a14c48c5e&chksm=ce461afbf93193ed8c62cef8cc3d9f83d55bf3c90b19020ba221cf2f328c19adc0eb55ff43f6&scene=58&subscene=0": "【漏洞通告】用友GRP-U8 bx_historyDataCheck.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247496465&idx=1&sn=e88e14b6d072a8139457fe760f0e88fb&chksm=fe26f610c9517f067e31fb23159dfe49b35880d29b64f361ce58bc655e151d3431c8d29623e9&scene=58&subscene=0": "CVE-2023-35359:Windows 内核权限提升漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247488736&idx=2&sn=d24aaa297c51eb620ccdf67af513086d&chksm=fa5aba0dcd2d331bbb22f3f5657199d718c90efed42fcb9cb67ec23d342f887c117e4858f1cb&scene=58&subscene=0": ".NET 上传变种.xamlx文件实现RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492027&idx=1&sn=b3103bc423916d000130703a57b2e6e5&chksm=e8a5ebd8dfd262ced8661d5c4d3b144dc09149410c8badb3603ffe39ce2cdc2ed56608ae38e6&scene=58&subscene=0": "如何将LFI漏洞从高危升级为严重", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458518567&idx=3&sn=5845aa88a06560b5666eae7ce4ae039b&chksm=b18d34ad86fabdbb626f57e5bcdf1970f5e157e5d5c7240f8e4793f1fd8bef5c5413deaafa7e&scene=58&subscene=0": "Windows内核漏洞分析与EXP编写技巧", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247498484&idx=1&sn=1f954283553ecf23e6a569a3b6aabd05&chksm=fdde8473caa90d65bfa7c6b118d12a80230d1309463fafd5eb2f1d704959321e9af3b45e267d&scene=58&subscene=0": "慢雾:Fiat-Shamir 冰心漏洞解析", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247489642&idx=1&sn=ba7b22a0b26dc774c88fccf13e5c60cb&chksm=fe2ee7e1c9596ef7bf2a7fbe5bcf58b95298ba984ce102fa149a3bfb7a29b5e72618097d6f8b&scene=58&subscene=0": "兰州大学 | ChatGPT 驱动的漏洞描述映射及评估", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493879&idx=1&sn=8e410c3be2ab1bfab006ff7775f1eb25&chksm=fd74d83eca035128ac4cccbec0de5224326b116e4ee36c8be693f8cffe0aaeebe0c6d136e5d4&scene=58&subscene=0": "2022年度CNVD支撑单位年度工作情况及优秀单位个人表彰名单", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493879&idx=2&sn=013410d4a75c8e621eeee7ce0c31eaca&chksm=fd74d83eca035128df2af53c8185b52b4d04aecf87b8e41ea93acfb0f5d02adbd32d1a472cd4&scene=58&subscene=0": "关于新增贵州泰若数科等八家单位为CNVD支撑单位的公告", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492031&idx=1&sn=a86406f133e36d1f2d34f3cbf05a0c81&chksm=e8a5ebdcdfd262caf2dd04029ebc49b6a2843385c59cd3a2ab9bd214a260e2e5fe2f6f337f0d&scene=58&subscene=0": "【0 day】畅捷CRM SQL注入漏洞获取管理员账号密码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517736&idx=2&sn=3425c61c1f7349910eec3401ed3697cb&chksm=ea94b742dde33e546c960957e2e235031bcb2b96ad0872d9e1a991f1e02bdd4d0b3d8047af3b&scene=58&subscene=0": "CISA “已知已利用漏洞”分类计划加快打补丁速度", "https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247504271&idx=2&sn=66137a03262a79bfd7cf4cb16e267523&chksm=e9d31a6ddea4937b11c6e07c8bcf2af7aa86aaca23aa015afcc11b8a92a18f2775fdcb2cbab7&scene=58&subscene=0": "活动 | 官宣!首届「字节跳动开源OpenDay」报名启动!", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247492577&idx=1&sn=6aa1383a8191bcbe1c89d1e5632f1994&chksm=fa78e2adcd0f6bbbd7cb221e5c491a8d3f46874b661bf10ecea65a302c67f1b051e76f2654c4&scene=58&subscene=0": "OSRCX漏洞盒子,假期双节出击『终极挖洞计划』!", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493915&idx=1&sn=2626cf48031212a2c81491dffd19ef12&chksm=fd74d9d2ca0350c481f41a5422f3f562a835f9c2907a8446bccd37433e6466545fc868ba094f&scene=58&subscene=0": "CNVD漏洞周报2023年第38期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493915&idx=2&sn=ce330d56a1071599bc21ee816aed3f79&chksm=fd74d9d2ca0350c4306b3d1f2a7bf007a6e276c8e8405ff712d8023a0e564a912ff244fc2468&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230918-20230924)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499634&idx=1&sn=15594c846988adb56dfc78259761e74f&chksm=fe79dbeac90e52fc2277e7ffd30b1537c3258fd8bd6afefa0bca5ddf26d4f417e9ba07aeda28&scene=58&subscene=0": "【已复现】Linux Kernel 本地权限提升漏洞(CVE-2023-35001)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517746&idx=1&sn=0075949af101ed923a30865094aa5b5f&chksm=ea94b758dde33e4eed497321fbcde1b5e775602f446cd3c4b5bbc8d0aba92f2bfb4067686bca&scene=58&subscene=0": "严重漏洞可导致TeamCity CI∕CD 服务器遭接管", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509947&idx=1&sn=09953e7d15a512d4e5f35b8a6ce7120a&chksm=ebfae09bdc8d698dd507d6f8426133d3aa57ff977fbca299e4c57a17db17b97cdf7af6f0c1ee&scene=58&subscene=0": "苹果谷歌漏洞披露不完整,让腾讯QQ等数百万应用处于危险之中", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502399&idx=1&sn=3a5cd597e4abbd732b7f1084c01870b1&chksm=f2585accc52fd3da2eae02a72ba5ebbdf771f1fad7f10fd5e1eb8b02324570923700d8ba3fbb&scene=58&subscene=0": "雷神众测漏洞周报2023.09.18-2023.09.24", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650178936&idx=1&sn=5f5fc03115e7264ae38b46c0fc39919b&chksm=f4487ec4c33ff7d22760d43e96fbf7e6b5babf86a6239cda3ebadcfdf0a5aa21a8ae7107d307&scene=58&subscene=0": "漏洞能力再获认可 微步获评CNVD年度最具价值漏洞报送单位", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652045329&idx=2&sn=1950a01895e5d46f0124ce089ce715dd&chksm=f36e2c51c419a547688fe173eee8a74fa41fa403034439b048dd34e1a8c5ff0b1033ee7634fa&scene=58&subscene=0": "【安全圈】JetBrains TeamCity存在安全漏洞,需尽快更新以避免服务器被黑客攻击", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488078&idx=1&sn=31b487d322e4aeb75a6dd492629021aa&chksm=fb029f16cc75160092fa294c31030cfafb59644a075512b2aae682590ea1eeeac2b26f00fcac&scene=58&subscene=0": "风险提示|泛微 e-office 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491814&idx=1&sn=95ee32a443028498e2c6036ebaf8419c&chksm=96f7ff8ba180769d8d74058e8dc8b4f2e77d48d8f7ed0c4c0521cfaa17d492de5f399753b7fc&scene=58&subscene=0": "风险提示|泛微 e-office 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520817&idx=2&sn=6333a0d758fb3ad166bfcf87a812fdd9&chksm=ce461921f9319037dcbd3c96203994fc593d6cca6c5e070612ecad4ed984dba2c9abcd08dac0&scene=58&subscene=0": "【漏洞通告】Linux Kernel 本地权限提升漏洞(CVE-2023-35001)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517756&idx=1&sn=51f2802e3a8b5fda00cf08b818f9cd06&chksm=ea94b756dde33e40594ca15ab1b5e61f5b1a62e5b2ea659626bf64e94987627c8bce596be9e0&scene=58&subscene=0": "黑客利用高危 Openfire 漏洞加密服务器", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247496396&idx=1&sn=33295e50a8b599f2bae10ee92a6091e8&chksm=c063dc15f7145503a6e3aec17d9ddcc4b59e03f1c293e8c63aa923da14b1225011c580cbedd3&scene=58&subscene=0": "G.O.S.S.I.P 阅读推荐 2023-09-27 Android 在野漏洞 Exploit 分析", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247498546&idx=1&sn=ccb1e53141af55703e7effa6a3ad2de5&chksm=cfc55c6df8b2d57bf6f46b31930b904dba1debf39bdc230a2b7297d583e9c90e0b1792ee7bfb&scene=58&subscene=0": "连续上榜!360荣获国家信息安全漏洞共享平台多项荣誉", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247539912&idx=3&sn=c68fe6f4f236f8a8b9e087d876efbae8&chksm=c1e9d099f69e598ffc35e0f780be21f872f234da731341a7cd1daacc03126cf31add88be5365&scene=58&subscene=0": "勒索软件Akira突破思科SSL VPN漏洞,横扫110个组织,攻击持续升级", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650845903&idx=1&sn=4071b4143cc964e996fa56a4401a9512&chksm=80dbd16ab7ac587c205cbd0f76c8758cfd22d2c729810ac89a44b4697cb0d437dd04ffdb74c2&scene=58&subscene=0": "青藤获评国家信息安全漏洞共享平台(CNVD)三项荣誉", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498693&idx=1&sn=9413981ee5f8e20342f2a7685cd2b7da&chksm=973ac8a7a04d41b1413df979d57d60cf4dd685398c8fcddb56e583d8c83302048bc1d0006cb8&scene=58&subscene=0": "CNVD漏洞周报2023年第38期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498693&idx=2&sn=a4cd50df073b34b9a1be5e4bdc5965d9&chksm=973ac8a7a04d41b1666c0765777c727198858c252949fc415a089088748587e70175f13d1894&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20230918-20230924)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664194057&idx=4&sn=b6a0b6675b7ad1ee2ad4f4d7b610ae95&chksm=8b5962f0bc2eebe673ac09eca109c71d0d241bfe93dbc5227eaa5493e510e23ec505e7010080&scene=58&subscene=0": "CNNVD | 关于Linux kernel安全漏洞情况的通报", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499646&idx=1&sn=108425ca60cca1234ab1a1570c24156b&chksm=fe79dbe6c90e52f0ddf1c47c639671d03c53876a670b6ba5ee82e418ee6e8add40be6b6edf56&scene=58&subscene=0": "Google libwebp 代码执行漏洞(CVE-2023-5129)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499646&idx=2&sn=ff9c409795a3d530267b217d1ea1c9c8&chksm=fe79dbe6c90e52f047813994687c6caf9d64bee841993a10610abc7ac58713ec21db5ba847b1&scene=58&subscene=0": "JumpServer 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509959&idx=1&sn=df95626fed63f6efdab3f1ca822d6593&chksm=ebfae0e7dc8d69f1593f7f00157c53f7b2aebe26514143ec43fbb2803b74cc87f9d3d86fb686&scene=58&subscene=0": "又一个基础组件满分漏洞曝光!曾因披露不当引发全球安全社区混乱", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509959&idx=2&sn=402bd2ffdf780bad7af0cb1b4dcbe6d3&chksm=ebfae0e7dc8d69f1a136087bb3c6199a7223405e22d37b79be2ff5c64260a8689fe7f54cb16f&scene=58&subscene=0": "超级软件供应链攻击!MOVEit漏洞受害组织总数超过2000个", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247566562&idx=2&sn=a92542a14dea32976e046336c300e9f9&chksm=9f8d54eaa8faddfc3a6a3edbf698397b247bac2d37ae505678ccd213af8ef2943904c397fec5&scene=58&subscene=0": "连续上榜!360荣获国家信息安全漏洞共享平台多项荣誉", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247496639&idx=1&sn=4a5c3d06978c8149f83d9d59d473ed48&chksm=fe26f6bec9517fa800c1fbc7fdcedd96cbd8f50fa9fe84d0a683696a0c6a1fde465dc82bf6fa&scene=58&subscene=0": "CVE-2023-42820:JumpServer密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247540195&idx=3&sn=6654117073e50b229ed7fb94cd7906a1&chksm=fa93eb22cde46234be7ec1adb1481905e6586ec8ba85176739e7c6ffb7c3b892573e6e6df1d2&scene=58&subscene=0": "苹果谷歌漏洞披露不完整,让腾讯QQ等数百万应用处于危险之中", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247540195&idx=4&sn=74b66c8d5bbb6ee9aff4c436521caeea&chksm=fa93eb22cde462347979077069cbc8ddebb5f25d9061f451b07c28288d488259ec396efb9417&scene=58&subscene=0": "MOVEit漏洞导致美国900所院校学生信息发生大规模泄露", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458520741&idx=3&sn=826451934330bae34d18bac647695ddb&chksm=b18d3c2f86fab53943d04675301a1d7e9608af2fbd360ecf8bfa7c05ee597a31f8760790419e&scene=58&subscene=0": "libwebp图像库漏洞已在攻击中被利用,CVSS评级满分", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491825&idx=1&sn=67c0c76fdd18419ba3eb63998908430d&chksm=96f7ff9ca180768aea6629f52a36ab81fe494550ddf5f5d0a6ab4962d6b09518f0f04e3bb0c6&scene=58&subscene=0": "风险提示|JumpServer 密码重置漏洞(CVE-2023-42820)", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509968&idx=2&sn=900042b1ec3f1cc268d4a6ca855eed0c&chksm=ebfae0f0dc8d69e6d7b2dd781c2c2fa10e8268d270d9ad7b1b8459688103e9f3d675c205af30&scene=58&subscene=0": "CNCERT:关于libwebp开源库存在远程代码执行漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247498566&idx=1&sn=4704a533e2d611522e385b83fa0a9dbe&chksm=cfc55c19f8b2d50fd6daf0b7da2bad219bcc8770051262040fd605921cc7638dff59f538d73b&scene=58&subscene=0": "放假通知|360漏洞云祝您双节快乐!", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247539954&idx=2&sn=d0cf6c1a7b9c1aaafa80eea7fc39942f&chksm=c1e9d0a3f69e59b56b56e125f40103fb0c5b02e6fd899eb04b3ecde27460bde672308c530111&scene=58&subscene=0": "又一个基础组件满分漏洞曝光!曾因披露不当引发全球安全社区混乱", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498705&idx=1&sn=4cf24523d1ecfc7858e893fc80e7af13&chksm=973ac8b3a04d41a57ecf9e3b37cdb6069bd56f19b884e95c2e943d95404aee0f09c46fdefa06&scene=58&subscene=0": "关于libwebp开源库存在远程代码执行漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247496694&idx=1&sn=fc105365a6656dc8a3ea06ddfba18088&chksm=fe26f6f7c9517fe1b36d79b1472fea7de4ffc0892e3ab77faa9663f2a6ada16f7828f3ebd715&scene=58&subscene=0": "CVE-2023-5217:Google Chrome libvpx堆缓冲区溢出漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493917&idx=1&sn=01368fc2e7e6e81bcf3572f1c2898c61&chksm=fd74d9d4ca0350c270badf3f59f28d07e2f922839f0ac3e4371fb811d6300b21b6ea64866f54&scene=58&subscene=0": "关于libwebp开源库存在远程代码执行漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517765&idx=1&sn=b7e9fb5dab86d46b0f3090c81402d31e&chksm=ea94b72fdde33e39a994bc9d7ccbb25cf3b14210ec657c34bea9464755eb08903ebc4e36eb7b&scene=58&subscene=0": "谷歌紧急修复已遭活跃利用的新 0day", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499661&idx=1&sn=0b4c8ebda6db3a193186e67312035efb&chksm=fe79db15c90e52030aea07c17ca1a6191696d528088da92bd2cb4a4ed74431c3a55bac594af8&scene=58&subscene=0": "【已复现】Google libwebp 远程代码执行漏洞(CVE-2023-4863)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499661&idx=2&sn=9ee9d18b547645e7691bbbc656a5b74a&chksm=fe79db15c90e5203a3bc4151f62273fc1d31134c7adf28cee84ec3f7988e2908fb9f3177e6a7&scene=58&subscene=0": "【已复现】Microsoft 流式处理服务特权提升漏洞(CVE-2023-29360)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499661&idx=3&sn=79fd2d0f4ba8cf2a1ca6770d1fe44ca6&chksm=fe79db15c90e52036d6708ce83975dccb2dc960bf0aec53e5baa1582560daf08891bd1ec1fcf&scene=58&subscene=0": "Google Chrome libvpx 堆缓冲区溢出漏洞(CVE-2023-5217)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492047&idx=1&sn=1c7c5d52112cdd69e81eee18f474b459&chksm=e8a5ebacdfd262ba9fbd7ec0137a76b8f13a048fd655e2457fe1a5f9ef02723cadc740aa68c8&scene=58&subscene=0": "一次绕过防火墙获取RCE以及提权到root权限的渗透过程", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247540214&idx=3&sn=f9b2d69631b40ead6b2d89c12538d1fd&chksm=fa93eb37cde462218d7f55786f43588d7c2b1c5dfb94a2d2a0dc212ba90e64c1617b2cd829d0&scene=58&subscene=0": "MOVEit漏洞受害组织总数超过2000个", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247539977&idx=2&sn=b5a3a7e909830b3444c6464ca018d123&chksm=c1e9d158f69e584eefd582373dd5b725cf82ce241a2071085b5329ce2fee8f4fefb5193011f3&scene=58&subscene=0": "关于libwebp开源库存在远程代码执行漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247540229&idx=2&sn=99bcc09b259f176b16670adfc85cf478&chksm=fa93e8c4cde461d278b45e36a5f4ad9f74e2f56186e63a022bdcf66fc74f3206b14ab17ab878&scene=58&subscene=0": "关于libwebp开源库存在远程代码执行漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458520790&idx=2&sn=957e67b97580bf11f4027363d2db9ed5&chksm=b18d3c5c86fab54aefbf5bb78339e79629d90b4a4e9de8747f6e46bee2b4b202c2d5478193d1&scene=58&subscene=0": "国庆充电不停!系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499667&idx=1&sn=34ffd286d7d5848306b8b35b69b4f63f&chksm=fe79db0bc90e521d2434776d7e71acc6310d82bcee73af08216ec90a6e9cbcd024c1fe0a05e3&scene=58&subscene=0": "Atlassian Confluence Data Center and Server 权限提升漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652045959&idx=4&sn=175dfa0d6b5ecf6d5ae8df166a829bb4&chksm=f36e2ec7c419a7d14065b23e4d05b171c8c5bca81071ddf7682a0114aad546a04f65ace47f7d&scene=58&subscene=0": "【安全圈】谷歌为 libwebp 漏洞分配新的 CVE 编号,CVSS 评分 10 分。", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652045975&idx=2&sn=558a7cb28bce8fd763b789ca9f814fa6&chksm=f36e2ed7c419a7c1857ab5ba5942d402de81e46c2ca296fc912801942d6f73b68383c37bb95d&scene=58&subscene=0": "【安全圈】微软更新 Edge、Teams 及 Skype 软件,修复 Chromium 零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652045975&idx=3&sn=b3f8f211d96264d3293877df85add1b1&chksm=f36e2ed7c419a7c16025d43219bbb0b7c8882f2fde68b0737181ef948e341f68e88622e0c5ec&scene=58&subscene=0": "【安全圈】Arm 发布安全公告:修复 Mali GPU 数据泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499672&idx=1&sn=e30ef1f59746163245bb8740445e0291&chksm=fe79db00c90e521621b1351559271226686498a2e28f693b690502e1ef901ac14cfb3b89e93e&scene=58&subscene=0": "TorchServe 服务端请求伪造漏洞(CVE-2023-43654)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517781&idx=2&sn=bb997e52e822a85d9557210284c73b30&chksm=ea94b73fdde33e296eebdd3ed4abe65621d3260c720dc544dd1bf5b285f4673167b913728d31&scene=58&subscene=0": "苹果再次紧急修复两个0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657164861&idx=1&sn=82647f320c8bfe056b3d391169089f8a&chksm=f1d4ecd8c6a365ce9f6e41023e895e42acb6ee793af7d696ae8ca16de0f5d9098e1e1482bf67&scene=58&subscene=0": "CVE-2023-41064一个被严重低估的核弹漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652046064&idx=4&sn=4a15ab8155f38a01162ef9703c111040&chksm=f36e2eb0c419a7a612ee67a9c54b6f98fa613a7bce79d8cdbb77d5497aa01648591c76257874&scene=58&subscene=0": "【安全圈】超微公司的 BMC 固件存在多个高危漏洞,目前并未发现被利用", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247568273&idx=1&sn=992cafe6843523f8e3f6ed8402bfa292&chksm=e9141babde6392bd129d75907b0bd3a326c11a52252c3be2924dbddf59560dca39564d0cf909&scene=58&subscene=0": "Marvin攻击:存在25年的RSA解密漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458521120&idx=4&sn=6e7966a0cab83e1d0f13bf0f191179c9&chksm=b18d3eaa86fab7bc0f6e1875adcbafc8fc08e92e52b12e7a004302278f8f3373a409f9326318&scene=58&subscene=0": "CVE复现漏洞精讲-从基础到入门", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517792&idx=1&sn=2597cf0fcd5b0d3561468663bbc2c62b&chksm=ea94b70adde33e1c4078d399916095b0e03ac6c5af4add39de2897fa077d31d2f2792e844d2e&scene=58&subscene=0": "思科紧急修复 Emergency Responder 系统中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247496825&idx=1&sn=cf059a6bd5005d7167065b29148f619c&chksm=fe26f178c951786e509fd460dec0adc8997d1c41647f9a9d5bf60cabf911f34530c187cfb2de&scene=58&subscene=0": "CVE-2023-42824:Apple iOS∕iPadOS 本地权限提升漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247509990&idx=1&sn=c36ce28db13449761164c60dc93061d8&chksm=ebfae0c6dc8d69d0bc5e592a0d1abf6cd188b4bee7154330731f55addc18afff73c019626167&scene=58&subscene=0": "单个漏洞利用链最高近1.5亿元!零日漏洞采购价格暴涨", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247540015&idx=3&sn=f73cca6dfe3e7dcc208a37c9554ae4c9&chksm=c1e9d17ef69e58680fdf7f52f2a2e795e15f09082d7e191f8708974b692d314a590c746ce210&scene=58&subscene=0": "Marvin攻击:存在25年的RSA解密漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247540272&idx=2&sn=673027138e5ff0063ea2e01881cd7a13&chksm=fa93e8f1cde461e7fc9510dfe1b93606391035adf4dbda497833a9969d1bb90b440a183baa5f&scene=58&subscene=0": "请立即修复!服务器巨头核心固件曝7个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652046152&idx=2&sn=da1221a663adca6e0bc8ac1afa9fd24a&chksm=f36e2f08c419a61e458906a60389012218dbd84eb8bb3c6f68b55597b552cd64c8de1482ef85&scene=58&subscene=0": "【安全圈】最新消息,单个漏洞利用链最高近1.5亿元,零日漏洞采购价格暴涨", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520893&idx=1&sn=08905defcb3946110d0234a17349d464&chksm=ce46196df931907bb497ea294df1d455472c57f0dacfe24cd9dc964561b52a4a8604f18b8d0f&scene=58&subscene=0": "【漏洞通告】GNU C Library缓冲区溢出漏洞CVE-2023-4911", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247489766&idx=1&sn=3eaba020253f23f344e6927a2231500b&chksm=fe2ee76dc9596e7b1f97a6797c65305e199057acc4056d6bed3d2e4fb53c5cd2e4d7bfa7f2d9&scene=58&subscene=0": "弗吉尼亚理工大学 | 利用 ChatGPT 生成漏洞利用代码", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247497587&idx=2&sn=58397db0dcfee2f21f4f25ba42b2f15b": "EasyCVR智能边缘网关未授权访问用户信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247487787&idx=1&sn=04a7a600884e9c7e020b7a267ee02c46": "记一次某项目管理系统SQL注入1day分析", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247510866&idx=2&sn=9e9c37b829ccccbe70f7b99d9874f03f": "实战 | SRC邀请处逻辑越权到组织管理员漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247486762&idx=2&sn=de44cbd09ce7bf1fbbf2c42218e77565": "【漏洞预警】Exim 远程代码执行漏洞CVE-2023-42116", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247486762&idx=1&sn=a4b30953384838ec47b83bf269614de9": "【漏洞预警】Qualcomm Commpute DSP 权限提升漏洞CVE-2023-33107", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247484272&idx=1&sn=17bc0180c8beaa67bceb43501c031203": "​华测监测预警系统 2.2 存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247503514&idx=1&sn=473034bdbe3f8ba6b8bb9abbeb5f50d9": "【代码审计】某安全数据交换系统的多个RCE漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247488619&idx=1&sn=6387a777c63a1c046c125b48a3497c54": "物联网安全3.物联网10大安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649290100&idx=1&sn=a690e926a90a4e2586a1f57a8d8b0829": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247498611&idx=1&sn=1df9aa5d6715e06f9705e2dc8e10e529": "复盘|Balancer 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517813&idx=3&sn=2547a20df3df5050c23af50502f6658d": "开源代码库 TorchServe 中存在多个严重漏洞,影响大量AI模型代码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517813&idx=2&sn=6a3b7d66586da1ad6c1cb57b1db81155": "Atlassian 紧急修复已遭利用的 Confluence 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517813&idx=1&sn=d93b115c2f34ccedd19200ec3263c342": "注意!开源命令行工具Curl 中存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493950&idx=2&sn=62467cea53fea897dbf8e94ecd44896b": "上周关注度较高的产品安全漏洞(20230925-20231008)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247493950&idx=1&sn=39c0a061d14cc864e0b62783462bb5e8": "CNVD漏洞周报2023年第39、40期", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651443373&idx=1&sn=e7e43960ef4ccaa43a973c10b4b2b70f": "信息安全漏洞周报(2023年第39期)", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650930961&idx=1&sn=1a236ddcd4ec82584dd365907252e6db": "记一次内部系统渗透测试:小漏洞组合拳", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499693&idx=1&sn=353cddac7449dc669dc496df10818a4c": "Exim 代码执行漏洞(CVE-2023-42115)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247485645&idx=1&sn=8e1dc5d662b03cef96d57c8419cc8707": "Jumpserver安全一窥:Sep系列漏洞深度解析", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502442&idx=1&sn=7d46ac23554c90f9c94f6b1684234c57": "雷神众测漏洞周报2023.09.25-2023.10.08", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247485252&idx=1&sn=da9eca24384b466d0b265a23f7336bb0": "[YA-20] libcurl 和 curl 中发现高严重性漏洞 (CVE-2023-38545)", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247488121&idx=2&sn=52b4588d77b12148554277467e07384b": "emlog | CVE-2023-44973", "https://mp.weixin.qq.com/s?__biz=MzU5MTc1NTE0Ng==&mid=2247484823&idx=1&sn=cdb09658b155d17297230c7a3676b0af": "【漏洞复现】深信服SG上网优化管理系统catjs.php任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247486798&idx=2&sn=a73254399328ec88dd96d3086930bb75": "【漏洞预警】Microsoft Exchange Server 远程代码执行漏洞(CVE-2023-36778)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247486798&idx=1&sn=66b50e4f369bfbcda300efdc13a13522": "【复现】Confluence Data Center & Server 权限提升漏洞(CVE-2023-22515)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652046395&idx=2&sn=e2db54a1fcbaafd2ec9412f37ba4a3a6": "【安全圈】大更新!微软发布103个漏洞补丁,其中13个为严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785585&idx=2&sn=9e77f7f41451a0eae1ceb30ead074920": "开源软件惊现十级漏洞!涉及数百万应用程序", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785585&idx=1&sn=7adadfc08da12e2548768a377d5b134a": "美国CISA:包括(CVE-2023-21608)在内的五个高危漏洞已被利用", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650931188&idx=1&sn=70443aae0da2f9986920b27d83873a91": "curl∕libcurl 缓冲区溢出漏洞(CVE-2023-38545)", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247532487&idx=1&sn=ff8d80f936a815f66f27b3cdb544e717": "虚惊一场?curl SOCKS5 堆溢出漏洞大可不必惊慌", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517855&idx=2&sn=5ea5455de3ad27bd027a363a4b11a95a": "Adobe Acrobat Reader 高危漏洞加入CISA必修清单", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664194610&idx=3&sn=5ca5d8f413ddd8b704cf4115dfc51a09": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499781&idx=2&sn=30c22df2f8fecb50f60d1e1145b8c7c5": "【已复现】curl SOCKS5 堆溢出漏洞(CVE-2023-38545)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499781&idx=1&sn=4813f16068d1a9f2370fb4b778e29cbe": "【已复现】Microsoft 流式处理代理权限提升漏洞(CVE-2023-36802)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDgwNTA5Ng==&mid=2247487426&idx=1&sn=6a4665dee91fd0be1dfbbc03a5f4dfab": "【高危安全通告】关于curl∕libcurl的SOCKS5堆缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649158851&idx=1&sn=2725d559790c7d539b9ddaba3da08764": "安全跟我学|这些网络安全“漏洞”,你堵好了吗?", "https://mp.weixin.qq.com/s?__biz=MzIxNDU2ODg3Mw==&mid=2247485620&idx=1&sn=44409b077f2432d2ef1778dcc2f2f51b": "【Vidar论文研读分享】理解和提高linux内核堆漏洞利用可靠性", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651443380&idx=2&sn=aed65f0d254407d7da0b7ac177b0b311": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651443380&idx=1&sn=a51f11b70223c8a86ccdff0932a04113": "信息安全漏洞周报(2023年第40期)", "https://mp.weixin.qq.com/s?__biz=MzkwODMzOTA2NA==&mid=2247492135&idx=1&sn=02a2c789e71f88776003e89bd44eacb8": "漏洞复现|深信服SG上网优化管理系统存在文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247540109&idx=2&sn=4118c9375478b7ad632e939ca93bc3d4&chksm=c1e9d1dcf69e58caa873cf6c69b0f3c0bb145775f20e0069aa24b334816ce1b4bad41292c2b3&scene=58&subscene=0": "堪比Log4j?curl曝出迄今最严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247540109&idx=3&sn=2fb238c51e6be2beea053b94cc1ee959&chksm=c1e9d1dcf69e58cacda1e6992b4ddb008d05a548c6b23819955901cd49b816e7915bdf47f887&scene=58&subscene=0": "ShellTorch漏洞影响数万PyTorch模型服务器", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247499458&idx=1&sn=736c797d3df1d6a5f08621c6db80dbd9&chksm=eaf9b68edd8e3f980ec297b3c785046c101b830ccaf8c36dbc839c3087c61758dff74fd78b06&scene=58&subscene=0": "现金大奖| 2023补天通用型漏洞专项活动第四期来啦!", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247499458&idx=2&sn=958122b31b17e66984edb284291beb12&chksm=eaf9b68edd8e3f98d226cf10ff0dbbceeccd04a302da3903333ac515ac6c62cc9ab91232ce2c&scene=58&subscene=0": "2023年通用型漏洞年度证书奖励计划公布!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652046395&idx=4&sn=bdb26c13ece0eeedaefb05505851c841&chksm=f36e287bc419a16d4ea4e55394a228934a54ef170d5e125faadd143630080cf63b04afcb9085&scene=58&subscene=0": "【安全圈】惊现十级漏洞!海量APP处于危险当中,到底是谁的锅?", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247569502&idx=3&sn=13b150d9076b9711464e0c85729505a2&chksm=e9140064de638972565f2ae23d4bf45d1c180f821f45ae8810a15cb1eea5d7879dda0f9b3363&scene=58&subscene=0": "对MOVEit Transfer SQL注入漏洞的最新分析(10月4日更新)", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247540381&idx=2&sn=342c6b9a6ae7e7dbc2e54fbf13ca6fb4&chksm=fa93e85ccde4614a1137f919d76f6a2f088ba3a037aab4834a1edd51e9fba86132224ba6ae5b&scene=58&subscene=0": "利用主流路由器漏洞传播,Mirai DDoS 恶意软件持续活跃", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499786&idx=1&sn=ea7ee004bdb9f6a754d226eed988eb28&chksm=fe79e492c90e6d849bd572ab1df4c4928830168b51cc48ca65fbee568d08f0070d814c9039f6&scene=58&subscene=0": "【已复现】HTTP∕2 协议拒绝服务漏洞(CVE-2023-44487)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU4NTMzNjU4Mw==&mid=2247489977&idx=1&sn=ee9273f587ad27a9512e66790701a5e5&chksm=fd8d4bd1cafac2c74612d7ba84cd3e59ac83c278989c9eb126ce0e1fcdd2e7b95aec634158d0&scene=58&subscene=0": "转转喊你挖漏洞了!", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247497158&idx=1&sn=97044f21cffc51f3b0e0a8781148314c&chksm=fe26f0c7c95179d19838c260cf6b8306cc7a0fcf9cc72f70842b1c3bda157b2f4b9534e266a9&scene=58&subscene=0": "CVE-2023-36802:Microsoft 流式处理代理权限提升漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247540124&idx=3&sn=76a1a4e16621fc6c51c1c693d38826d2&chksm=c1e9d1cdf69e58db192a22ed7e008daf1128d52866bbfbfec84ede1e36b49c9e6adbe86bde97&scene=58&subscene=0": "HTTP∕2协议漏洞被用于实施大规模DDoS攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652046475&idx=3&sn=af1f94489545c2648afb309b9e6717f6&chksm=f36e28cbc419a1dd12682dff5c3844083a50a38237c85f88a32a048f8085016f8c0b84117927&scene=58&subscene=0": "【安全圈】Apple发布iOS 16更新,用来修复CVE-2023-42824在旧设备上的问题", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247496449&idx=1&sn=ba9aa354c1ed47855958890e956947a4&chksm=c063ddd8f71454ce98c39cfcb57956df2111cba0908b7500776c295a41b85189256290056608&scene=58&subscene=0": "G.O.S.S.I.P 阅读推荐 2023-10-13 理解和提高 Linux 内核堆漏洞利用可靠性", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247540415&idx=2&sn=ced5fc6f4c1aab8daa409143cc49034b&chksm=fa93e87ecde46168d6e418c7b4c3fc3bdec5c0234917430abc339960a5c3dee25c6d33bdc340&scene=58&subscene=0": "微软超级修补!一次性修复103个漏洞,3个已遭黑客攻击", "https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651385710&idx=2&sn=381d63093265e9308ace2f64602f5181&chksm=8d399ee6ba4e17f069dd1c9dcbee5f17eb9af23a8a7122b339df23be56c9c3256024ab10cf2e&scene=58&subscene=0": "再获殊荣!长亭科技获评CNVD 2022年度漏洞应急工作突出贡献单位", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247499529&idx=2&sn=10711a8423db7f96c489f14c6b4045a9&chksm=eaf9b745dd8e3e53e82ec6ccf0b9b797cbacba2e91c5cc798b383e28983d17e6fbcd9f180f7d&scene=58&subscene=0": "2023年通用型漏洞年度证书奖励计划公布!", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247499529&idx=3&sn=478913d695915f820ae92442df837e76&chksm=eaf9b745dd8e3e53126fba83e1238bf80da787be89636e189b1a41192343e9a6451a69ef3324&scene=58&subscene=0": "现金大奖| 2023补天通用型漏洞专项活动第四期来啦!", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484608&idx=1&sn=e2a414257451ea83b81e0f6b886dba65&chksm=c2b106b6f5c68fa058be61c95996f9787d08a0615bccf740a4719e7c12a362d456ab670ce6a0&scene=58&subscene=0": "腾讯安全威胁情报中心推出2023年9月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488172&idx=1&sn=6c370f4dd600861adf0b4d825e02a6e7&chksm=fb029ff4cc7516e24130ecafc500959bf5d8f5139e32f357ccb5325a06025b229b686b65b7e6&scene=58&subscene=0": "CVE-2023-22515 Confluence 权限提升漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488172&idx=2&sn=15766fcd628fa746eae11b055423aa6e&chksm=fb029ff4cc7516e2a921b129c0883968c35b25f60202ab58b8f00c26bf3ffbf945a6e0ea0151&scene=58&subscene=0": "风险提示|curl∕libcurl 缓冲区溢出漏洞(CVE-2023-38545)", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247502548&idx=1&sn=971b17225582de2d3a7b71b767cc38dd&chksm=fa521f6acd25967c916cbc03b2b7317558b882d8af36715bb8eb56603bd5c633e4f61044e68c&scene=58&subscene=0": "微软2023年10月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247569687&idx=2&sn=b6686b143563ab25389f75be489352e0&chksm=e914012dde63883b4f2446af0f464fee9abc7321aa81847c4478733d0639be51af2292f1cb73&scene=58&subscene=0": "“快速重置”DDoS攻击利用HTTP∕2漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTI5MTM4OQ==&mid=2247483951&idx=1&sn=99d21c14d121ffe4d9b4d2f62ff1cfea&chksm=fa62033dcd158a2ba4ff040486b23a843933b8ffcb5857751004b735821cdee003a3a513fef1&scene=58&subscene=0": "通达OA <12.4 反序列化漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652102153&idx=3&sn=be44043dd1555c8437149c7d3280234c": "“HTTP∕2 快速重置”零日漏洞被利用发起历史上最大规模的 DDoS 攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247486791&idx=1&sn=0eb7e9f7d6543295a86f1b8d70d7741f": "百绰网关管理平台RCE | CVE-2023-4873", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247052&idx=1&sn=3fd0c3a66b7e9e825863f98a486b0d0a": "Fastjson 漏洞利用技巧", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247511038&idx=1&sn=7aa2351bacaabe4260dd31043cf8f92d": "【漏洞复现】NocoDB任意文件读取(CVE-2023-35843)", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247483992&idx=1&sn=53aed86a29c897ef8a165f65f09ef706": "【新】鸿运主动安全监控云平台任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492261&idx=1&sn=6dbfcc427222545d49afab460b715923": "【0 day】鸿运主动安全监控云平台存在任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1NTQ5MDEwNw==&mid=2247484976&idx=1&sn=d12960b0e52bdb761ba7895eb7fd2b5f": "JumpServer 堡垒机综合漏洞工具分享", "https://mp.weixin.qq.com/s?__biz=MjM5ODQzNTE3NA==&mid=2247485299&idx=1&sn=ce3b786ff7e7a442c8a1e2611edf5d81": "『任何系统都存在漏洞,没有完美无缺的系统』", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247488501&idx=1&sn=7d1ab1353a044bacd9d389e4043a37c5": "RCE进入内网接管k8s并逃逸进xx网-实战科普教程(一)", "https://mp.weixin.qq.com/s?__biz=MzUyOTI5MTM4OQ==&mid=2247483995&idx=1&sn=6306013d788a3ea565c95914eb9e733b": "某路由器RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247520962&idx=1&sn=579a00255f6e2cd25e8785f63894bed0": "【漏洞通告】HTTP∕2协议拒绝服务漏洞CVE-2023-44487", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458523106&idx=1&sn=cda72f7fdac51544a6c24882f5829f02": "2023 SDC 议题预告 | 深入Android可信应用漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485022&idx=2&sn=f45c7cac562a39eb8161e2919b31e010": "【高危漏洞】QQ音乐存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485022&idx=1&sn=e41d3cdf0449bdb0f51e0328d9148fcc": "【严重漏洞】【poc公开】vriteio∕vrite中的服务器端请求伪造(SSRF)", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650931327&idx=1&sn=42ef6a27ddb912379a9bc70dd94b3b11": "一款全面而强大的漏洞扫描和利用工具", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247518620&idx=3&sn=5cd1ed8b7f0e7bcf7dd823a306dcbb5e": "每周安全动向--安全漏洞篇", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDExMg==&mid=2247484096&idx=1&sn=5757df929e13b53df479e318b1ec2cff": "【漏洞复现】GeoServer SQL注入漏洞(CVE-2023-25157)", "https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247512944&idx=1&sn=f10810d0f7e65d3a79f78e6a58b25035": "五个被积极利用的漏洞,允许黑客窃取密码,发起DoS攻击", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650579820&idx=2&sn=5bf0a706bc4325b4178f31e088001807": "HTTP∕2协议漏洞被用于实施大规模DDoS攻击", "https://mp.weixin.qq.com/s?__biz=MzkyODMyODMyOA==&mid=2247487494&idx=1&sn=fb1b8accd8edbd8fe5af97e5ed6e5dd4": "\"PearlSky战队\"拍了拍你,并邀请你一起挖『漏洞』", "https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247493656&idx=1&sn=275a76015da4f363beebbdc4c73c5684": "如何挖通用型漏洞?", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247501813&idx=3&sn=3f24c77e668e24f9faa6c121cfde7ac5": "CVE-2023-45648 和 CVE-2023-42795:Apache Tomcat 中的两个高严重性缺陷", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247501813&idx=1&sn=fc07dc26254202297496abaa5e0564dd": "野外0day - CVE-2023-36802:Microsoft 流服务代理权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499791&idx=1&sn=cb3b91253bb67006ffb0370afa847701": "2023年Q3季度 | 漏洞监测报告", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247486359&idx=1&sn=c112e35e915ccde615276b45116a5a87": "漏洞预警 | Apache ZooKeeper认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247484094&idx=1&sn=4ba228826842dcabe7149517f48705be": "CVE-2023-42820 JumpServer 密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502584&idx=1&sn=486183bb6d025d6ad8d41d7612292d83&chksm=f258598bc52fd09dcc28038467a32ffcea05b5d8543b6470d43e6a350cbf69cea847fa8b4e08&scene=58&subscene=0": "CFS三层靶场复现", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503309&idx=1&sn=df183f5929cfabfebbc6d5c506bb7838&chksm=cfcaaed9f8bd27cf5a74fbb92e7ce8ceb823026094ee0ba71759913cd10f582725c322becb69&scene=58&subscene=0": "漏洞通告 | WPS Office远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503309&idx=2&sn=5433892a6ff5a845f539deb256c5959c&chksm=cfcaaed9f8bd27cfb23ade275167f0239623c95777e609fc8c16595a5700fc1e808296d6faa5&scene=58&subscene=0": "漏洞通告 | 用友 U8 Cloud多处反序列化远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045573&idx=1&sn=bcc5169fcd05251757bd164612d7d4f1&chksm=803fac9bb748258db7fe1ac0abc4697aa66e2bae912e6e6e5ebd5b0e002a54d970fe35f20332&scene=58&subscene=0": "【漏洞预警】Oracle WebLogic Server 10月多个安全漏洞威胁通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247497424&idx=1&sn=db68ad22a55a9d4032df879936a6f3d2&chksm=fe26f3d1c9517ac7f876b9499cc13e6c427c78f9bd157fbec9f291e78e1712a2dd2b0b9e4860&scene=58&subscene=0": "2023-10 补丁日: Oracle多个产品漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247497424&idx=2&sn=9b2f025326716db83c05ac08517c7bb9&chksm=fe26f3d1c9517ac7f0741e89cd974edfdded89a0ca73f1e8e4e196b6acc8986eb665fb259e87&scene=58&subscene=0": "CVE-2023-4966:Citrix NetScaler信息泄露漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499851&idx=1&sn=226f5c243e3305ff0dd1da270d1ee531&chksm=fe79e4d3c90e6dc5f5a655d2d39dd8ff3e357945c4ec0f050e588dce3e90be712f40278e7cf1&scene=58&subscene=0": "NetScaler ADC和NetScaler Gateway 敏感信息泄露漏洞(CVE-2023-4966)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499851&idx=2&sn=8de9e4d9b822dfd18b19b1d0a5bce7c5&chksm=fe79e4d3c90e6dc59f0969e7b2f1b552f18e131ae88508a2a9bd086e5e7fa6cc5ea962a2e84d&scene=58&subscene=0": "Cisco IOS XE Web UI 权限提升漏洞(CVE-2023-20198)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499851&idx=3&sn=a2bd3ef1a2d8afdbe3bf82bc5d64c9b6&chksm=fe79e4d3c90e6dc5dc774b16a02d9456b1506671e786dd6d8fab9c679395280b672265fbcbcb&scene=58&subscene=0": "Oracle 2023年10月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664195071&idx=4&sn=edb858cb308a6b90e2108afe03feffb6&chksm=8b596106bc2ee810bd2e7125913e6963bb43e9eb6505b65e3b1d533535a7b6a8a3dfb16872c0&scene=58&subscene=0": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664195071&idx=5&sn=1fe67ff8e96fc909a2cda03b8f1c81b0&chksm=8b596106bc2ee810502bf7d897be865025ad99ac8888248b7d8f16cbde64a9625e7be78fca21&scene=58&subscene=0": "CNNVD | 关于Cisco IOS XE Software安全漏洞情况的通报", "https://mp.weixin.qq.com/s?__biz=Mzk0NzE4MDE2NA==&mid=2247487756&idx=1&sn=eff63ff4ac80db52506eb423f5ada42b&chksm=c37b96e7f40c1ff1216edecd3ce5cc96083ebd0676eda51a0d5b5797ae511f616a8a9bd43168&scene=58&subscene=0": "CVE-2023-20198在野利用:超过170000台思科设备暴露", "https://mp.weixin.qq.com/s?__biz=Mzg4MDcxNTc2NA==&mid=2247486108&idx=1&sn=60abae499acb582d14ea20ead82f02a9&chksm=cf71b807f806311162432ed24cbb1343b7a44fa6b0d88e405a335ba290044e3eb7a19e2239cb&scene=58&subscene=0": "POC2023,Numen 议题 “Modern Browser Exploit Development” 欢迎关注", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247566939&idx=1&sn=8ec2548b60e5247d4843ce7c756dcd16&chksm=9f8d5653a8fadf4567224079d1bcca003732004bdede1a180a9460790d395a0731ec2428f978&scene=58&subscene=0": "受邀参会、实力霸榜,360漏洞研究能力获谷歌、微软双料认证", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651126035&idx=2&sn=f3c99b86e4cb620e1557b836b02389bd&chksm=bd1449c08a63c0d65838b88ecdb8eaa211f315903123f533ee954b7d9fbd0b0a04e06b1e411b&scene=58&subscene=0": "CNNVD通报Cisco IOS XE Software安全漏洞情况", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650973665&idx=1&sn=ea010521cd122ebabc6484c3180fdfa2&chksm=8079e7d3b70e6ec592c205c01f3b2ff6ed079fa4c61f518a0224fce156eff74d15ee9cc10d56&scene=58&subscene=0": "原创Paper | WPS WebShape 漏洞及利用分析", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247510081&idx=1&sn=af4057f304ed1d92ca7b27f3999a5993&chksm=ebfaef61dc8d66776d7eb6bf8a2bf96434396f9ca8e0ea50414155588b2e04c90ef7b299aa43&scene=58&subscene=0": "超过4万台思科设备被植入后门账号:零日漏洞攻击,暴露即被黑", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521014&idx=1&sn=159d4976908c8f12ff1c7771093b0538&chksm=ce4619e6f93190f0dcc19459c675da669b3898ce43b7a0f4cc8b55f6bc3c5eb86b4878091afe&scene=58&subscene=0": "【漏洞通告】Cisco IOS XE Web UI 权限提升漏洞(CVE-2023-20198)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492315&idx=1&sn=254ce64793273a74788c973067ee5f93&chksm=e8a5e8b8dfd261aef2d3c09d3fac4e078d61152bc7bd74e8a851323ccbdb805df72e8de8fc75&scene=58&subscene=0": "一个价值300美金的逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499861&idx=1&sn=e9451a1b922616ece9fdbbd06ce32f8d&chksm=fe79e4cdc90e6ddb80290d2a7614d67e9021647bddfbe91b6c9f98d536541cd4f8947c3c6b20&scene=58&subscene=0": "Cisco IOS XE Web UI 命令执行漏洞(CVE-2023-20273)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDI5MTQ3OQ==&mid=2247484603&idx=1&sn=7dfee9deb3909c29f30e35d9d90bb6ae&chksm=e91c5f43de6bd6559b62a285598cebba5325aa5a74f7a89a1dd7a1e08050553689c6092f3be7&scene=58&subscene=0": "As-Exploits 1.5更新", "https://mp.weixin.qq.com/s?__biz=Mzg2MTc1NDAxMA==&mid=2247484013&idx=1&sn=6fcb9b42aac7bd86d511f2096c127712&chksm=ce130598f9648c8eead7f6d7fe2f1d78cb3f790e1696b5d2549a230291a9361ca68e88ad658b&scene=58&subscene=0": "As-Exploits 1.5更新", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652047105&idx=4&sn=6577bfdc02d69ba1bad7211e3db0a6cd&chksm=f36e2b41c419a257fe2dcac166b14eb8a6752702e3130701fdb8f28265ab683031b1a787b4ab&scene=58&subscene=0": "【安全圈】iPhone X被黑客找到新漏洞 可恢复已删除照片", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785652&idx=1&sn=bfe3a1a98c0713750ada099d556ff20d&chksm=8893b55bbfe43c4d825a21b4eb03614807f0cd0d9b624853c85eb25bcad2dc2948643b7f193e&scene=58&subscene=0": "八大中间件介绍以及漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785652&idx=2&sn=a08621f4abead0e94d1a1bc43d66e6d0&chksm=8893b55bbfe43c4de86c47d7e6ccffb88964b5ebe07ac02dbef6c5cd43ccebe01902615bb0ca&scene=58&subscene=0": "CVE-2023-42793漏洞被利用,向国防、媒体、IT服务组织等机构发起攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503360&idx=1&sn=29f1738205f8ce6e4c05b868e6596691&chksm=cfcaad14f8bd2402958c119bffaf62c14bbba3b3aa56c2d313c90ba97b419062a27be5aad34d&scene=58&subscene=0": "漏洞通告 | Apache Solr 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494004&idx=1&sn=496dc07793795fe35ec05af465a05031&chksm=fd74d9bdca0350ab46017c924c82a775b41f2d31f9a5455aab2d136a0effa2719aef9fe61cae&scene=58&subscene=0": "CNVD漏洞周报2023年第42期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494004&idx=2&sn=8a126c64ebb0f7282a10b9f7d806c777&chksm=fd74d9bdca0350aba2e2078586fd495e0a5f4676f391443a6f2c6ac2eb0fbf624e7cb21bf96f&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231016-20231022)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247569981&idx=2&sn=9014044dee01b36b3d25aad4d07044be&chksm=e9140207de638b115b4215bb2e2c8bfd30c6ee2f057f17255d2748bdb7b3905284516fc9cd8e&scene=58&subscene=0": "威胁分子通过多条攻击链大肆利用Progress WS_FTP漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMDEyNTkwNA==&mid=2247495907&idx=1&sn=6f02a656e1c35c947cea4dc9ee486c8c&chksm=f9ed9c5cce9a154a40329958321441cbb8613de4fa5f728dfdd253272f129176a804d5b4dcac&scene=58&subscene=0": "神秘组织利用WinRAR最新漏洞,俄方政府再遭网络攻击", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491868&idx=1&sn=865fc8bd109b4ccc903bf7485af9c765&chksm=96f7fe71a1807767f6780baf9891c1dddb0d675b0f3ce7b040267843e19cdb5b791359d957a3&scene=58&subscene=0": "长亭观点|先别急!Apache Solr漏洞情报补充", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785663&idx=1&sn=a85e5da1f24a8e26c6feabdb11000116&chksm=8893b550bfe43c46017a4512234e6dccf322a87ee592b9667d95542c77f079921886344dabca&scene=58&subscene=0": "利用RouterOS(CVE-2022-3496)漏洞,将符号链接作为挂载入口获取代码执行", "https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247489081&idx=1&sn=791eacc81bf8257cf7eb4252f17c41ec&chksm=fad4cb2ecda34238b5cd1d9d5d43ad9ccadfde795777a97b1883bb5db8d746ea896847b635a6&scene=58&subscene=0": "聊聊CS4.5下的CVE-2022-39197 RCE 的修复", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498754&idx=1&sn=1a59fee0690afd01be43831d4725e2d8&chksm=973acf60a04d4676bd1a7d7866083136495444bb099022c2b9c92bb77f04353adb5db638c01a&scene=58&subscene=0": "CNVD漏洞周报2023年第42期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498754&idx=2&sn=fe7c5f40cfbfa6ed532357f9ffb6df1b&chksm=973acf60a04d467629d4b8b0a5a12824201729480060d9682a12fcab2f9027aad7766af7892a&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231016-20231022)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492369&idx=1&sn=73f01a0f25db02cd603a27ad0eae838b&chksm=e8a5e972dfd26064bbe00bbeaf8ce39eb292945db2cf94ff11bfc49bd270a3fac11f2d0fa338&scene=58&subscene=0": "通过文件上传所获取的RCE", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488246&idx=1&sn=3c492823a366ef815a7a89e2df58e778&chksm=fb029faecc7516b87b4210744fad9ea5f2f84e53b1e04c4be41d9f98ad227ba5ce03a9de5c2f&scene=58&subscene=0": "长亭观点|先别急!Apache Solr漏洞情报补充", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785672&idx=1&sn=84ccb360f7e53fb7446035075136f5a2&chksm=8893b527bfe43c31a12373d4033120893143c4cae407120827041cd4eb404ed3204e897c8c5d&scene=58&subscene=0": "“三角测量行动”利用 iOS 0day漏洞(CVE-2023-32434)部署后门", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785672&idx=2&sn=2cb72a8516b3adf6447803f80a7c67b4&chksm=8893b527bfe43c3163ae78d9e275676ff519af7c944f5e55055d5875ddff3c1dec2090b02203&scene=58&subscene=0": "研究人员发布VMware (CVE-2023-34051) POC 漏洞利用代码", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499888&idx=1&sn=39aad3896d585d0886e73a1f656d810d&chksm=fe79e4e8c90e6dfe845e8cd384071ef39fcf973bf1eed73b7ca2e974c0c089491a539eb102a9&scene=58&subscene=0": "VMware vCenter Server 越界写入漏洞(CVE-2023-34048)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458525914&idx=3&sn=bbf3fe2633337cc7af20333e48656406&chksm=b18d105086fa9946ab4ef041cb24a9919ab803e53932ba9cf6b642250b67f38b3c6ed0a4f9d3&scene=58&subscene=0": "系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247497707&idx=1&sn=7b6a98eecb8345186b74ad470e6cb8a6&chksm=fe26f2eac9517bfc408935635d7ce7d0eb6be7f931e7345dc792f01042360d8774274e3441b4&scene=58&subscene=0": "CVE-2023-34051:VMware Aria Operations for Logs身份验证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247497707&idx=2&sn=e353769c0aec6748b37ff47de9e9fc53&chksm=fe26f2eac9517bfc46daa37840008cda093f321abd34be96ed70b0086f9ad602079d8591e8f7&scene=58&subscene=0": "Apache ActiveMQ远程代码执行漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491902&idx=2&sn=bffffa6afba2c62c5446788a2edf669c&chksm=96f7fe53a18077450323e12c0b8fab74a6a289d24ffd58dd0ebbc80721039ed03de62fd36839&scene=58&subscene=0": "在野利用|Apache ActiveMQ远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247489116&idx=1&sn=89343eb8c8936dba78f8afe83ea7f60e&chksm=fad4cb4bcda3425d1c74f1d80d2518b762872893215803ae69317c42d6560bd9fde160bfc4a9&scene=58&subscene=0": "CS4.5: CVE-2022-39197 XSS RCE 修复补充", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247517985&idx=2&sn=bf96d48a8e813b54efe7b49e1d451d91&chksm=ea94b64bdde33f5d32a676ffb901bafbd88a9925b05af28720a33389cee0066b41f2b27046cb&scene=58&subscene=0": "VMware 修复严重的 vCenter Server 代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785685&idx=1&sn=c7b12ccb2db71d947ae3c32cb2360796&chksm=8893b53abfe43c2cd20e59d755c907fcf48447e9c6d2013918c049729fab9283934fa1dfe0c4&scene=58&subscene=0": "Citrix Bleed 漏洞(CVE-2023-4966)POC发布", "https://mp.weixin.qq.com/s?__biz=MzUyMDEyNTkwNA==&mid=2247495978&idx=1&sn=8a091762043b798b016b2cab609456ac&chksm=f9ed9d95ce9a1483408b72227e0d68b68e44783d228c42671ae6ab9996ebb814bc4cdd85e3eb&scene=58&subscene=0": "矛头持续指向印度国防部,Sidecopy加入CVE-2023-38831漏洞利用攻击队列", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499902&idx=1&sn=da1cde89cc5b7bc505481987ae6edb12&chksm=fe79e4e6c90e6df0ace5acb83763aa4e6518df83f6ffbe980bdad2b7082958eda64bcf2ee903&scene=58&subscene=0": "【已复现】Apache ActiveMQ 远程代码执行漏洞(QVD-2023-30790)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499902&idx=2&sn=7af303b10c230745498ef889ede7b3c9&chksm=fe79e4e6c90e6df06f3d1ad2e30c23cef0a3bc7b3f97fe735c12da8521f50d8e434883852e91&scene=58&subscene=0": "【已复现】NetScaler ADC和NetScaler Gateway敏感信息泄露漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499902&idx=3&sn=7516c7e1b06c60c7df2b872f21d9d0f7&chksm=fe79e4e6c90e6df0e6458483cc52515557873caf2daeebc250021ec01454e1add3551b1dba3f&scene=58&subscene=0": "【已复现】Squid 拒绝服务漏洞(QVD-2023-30699)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247535253&idx=1&sn=a63da635da47e36d7a285a69fff6f365&chksm=eb84a135dcf32823c3baa9ffe8764369b8ed1dbda68729cb451512fb86f09740320c78689cd8&scene=58&subscene=0": "技术分享 | 某下一代防火墙远程命令执行漏洞分析及防护绕过", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496509&idx=1&sn=9c793be0e3671f9537234d53ef4a2312&chksm=ce96be03f9e137154e4c5794c4d12daacf947e254f87b3dba839b0b6a46ae26ce0f29f8b0b13&scene=58&subscene=0": "【风险提示】天融信Apache ActiveMQ 远程代码执行漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247502652&idx=1&sn=2c974b82d6183e139c2825ce9d049678&chksm=fa521e82cd259794a051f575cf8f8fc7502e55718ec98e461ef66a0e9e197b7c87a8edf39d29&scene=58&subscene=0": "山石携工控漏洞挖掘实践议题亮相看雪第七届安全开发者峰会", "https://mp.weixin.qq.com/s?__biz=MzkwNzMyNjU0MQ==&mid=2247484177&idx=1&sn=1dbebf382d730e52a797eebdbfc7e967&chksm=c0dba633f7ac2f259f421328a290fe78117cddb8f44f52a3900c5e07f07a3e9c895e6c0fbd5b&scene=58&subscene=0": "Joern In RealWorld (2) - Jumpserver账户劫持漏洞(CVE-2023-42820)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503491&idx=1&sn=0c20967c5a008dea1a0455f154cf7194&chksm=cfcaad97f8bd248165e865d21809181d2f01895d987b1e4c9b7dc5d0c4f002cadc5f2503aaa7&scene=58&subscene=0": "Apache ActiveMQ “超危”漏洞,已捕获大量在野攻击,速修!", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247570174&idx=2&sn=755512d41a1d7facbea23a0bc3d5af49&chksm=e91402c4de638bd228abb97b2f74b51a0740a7b36c423e69ffb89e13b1a17e9fe1963e174591&scene=58&subscene=0": "MacOS“DirtyNIB”漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247510122&idx=2&sn=70d62a3e257057083c8c6387ac3b39fe&chksm=ebfaef4adc8d665c114c1ae8c5d71c2d08391e81fbf96b668ae274c5cf9b6f1e741dc8d3513a&scene=58&subscene=0": "上海一公司员工利用漏洞篡改ETC余额,一年私吞260余万元", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651126225&idx=1&sn=c424262d757996e9543c201ee15f5242&chksm=bd1449028a63c01408784c55633f6953c4f43c5e666c28d6af39ef3308e84b35d0c5f3dd514e&scene=58&subscene=0": "10款热门的漏洞管理工具及特点分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458526796&idx=3&sn=2c44563af28bb19f183f484901b0acaa&chksm=b18d14c686fa9dd067e17c76d16faa125f0de9d3d115822a296ecdacaa680a3ce8f55e1e1efa&scene=58&subscene=0": "10.28已更新:UAF漏洞分析与实操讲解-30小时教你玩转CTF", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502598&idx=1&sn=3c7a3c7437fa59b1191ae738870d8f18&chksm=f25859f5c52fd0e3d0a70cc706d79cd6e941145c370bebc32ebcb7736a16f3feb7164e29ee06&scene=58&subscene=0": "雷神众测漏洞周报2023.10.23-2023.10.29", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494036&idx=1&sn=a38aef6942f70c467575daf9e3300242&chksm=fd74d95dca03504bc60fee66c41231f2648941f14712e39150fff2d353bf22d77cb22aaa0f5b&scene=58&subscene=0": "CNVD漏洞周报2023年第43期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494036&idx=2&sn=d29dc27082c8609e6f20797cbd24bab7&chksm=fd74d95dca03504b20d79ae35e97fd657f94ee848e3c7fa14436c3dd144f5ed183f0c0b2ed31&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231023-20231029)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499933&idx=1&sn=51cd8771f4b40baa3db4b5853e17f896&chksm=fe79e405c90e6d13f3bdafbc8624809ec7eca23fb9b974c4efeac43214bcbaee35449caaa9c7&scene=58&subscene=0": "Atlassian Confluence Data Center & Server 授权不当漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491929&idx=1&sn=56c2476e383ccbcbae5e42a699d942f5&chksm=96f7fe34a180772261e685fab199cefce75e108104da8025763f48eee6184979ac57a13361a1&scene=58&subscene=0": "【原创0day】Atlassian Confluence 远程代码执行漏洞(CVE-2023-22518)", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785729&idx=1&sn=87d830fc6af27a3801b2e1fe9001559a&chksm=8893b5eebfe43cf87d26162dc647772b9cdef0abc53e2b1ec9585daeac82b61f8969b0a33264&scene=58&subscene=0": "Cisco IOS XE CVE-2023-20198:深入分析和 POC", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785729&idx=2&sn=5fc360e2b080454fa0652ee4e234f925&chksm=8893b5eebfe43cf873647d05b813f9bd538f21ca5a50596b782605fef5e830efa5b12dae22eb&scene=58&subscene=0": "Wyze Cam v3 的 RCE 漏洞公开发布,现已修补", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247499926&idx=2&sn=a35bc38d4dc4d0afab983f3bf10b9062&chksm=eaf988dadd8e01ccc5bdbd548963253745179206de40714b1c727da2fe23b2e490208209ce65&scene=58&subscene=0": "2023年“专属SRC”漏洞年度证书奖励计划公布!", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488270&idx=1&sn=ed36bba5615f3ace62ce8ee9646a23f4&chksm=fb029e56cc751740227959b1c20433c96ad416828adf99f1f2449470e9e0f73ef63c9c04ae39&scene=58&subscene=0": "【原创0day】Atlassian Confluence 远程代码执行漏洞(CVE-2023-22518)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521175&idx=1&sn=a3de861709b7d4cc4c27920fdcdf4342&chksm=ce461887f9319191e42c74cb1637dd5e4cc796e1c0041ee46d88115b085647ad38e744335b78&scene=58&subscene=0": "【漏洞通告】Atlassian Confluence远程代码执行漏洞(CVE-2023-22518)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492430&idx=1&sn=c97917fc9cb6fe4d4a8e2dc0987af8b3&chksm=e8a5e92ddfd2603b86a9815680f58de7c73ed35fd8916d15af5849e5432adb35383f4de6c4cf&scene=58&subscene=0": "实战 | 记一次艰难的任意文件下载漏洞挖掘和总结思考", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498769&idx=1&sn=ad075f58cd9651d2b6e756e215f64ee6&chksm=973acf73a04d4665208dbc3c51166fd3237182ca954f3750f6049e12db0bc4555cdb948d440c&scene=58&subscene=0": "CNVD漏洞周报2023年第43期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498769&idx=2&sn=aa431f1d3cb61a9f69122ddabfbdb227&chksm=973acf73a04d4665930b4684efc93eb8189191d7257e10abc1848a3d3ac701f588095c8d1b02&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231023-20231029)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503545&idx=1&sn=71ee45d71edb9d307537c7b33153a0de&chksm=cfcaadadf8bd24bb44a14650cf5fdfbecd8936c7c0d5d5963b7e61899803af45e734c8c8c933&scene=58&subscene=0": "风险提示 | XXL-JOB 默认 accessToken 身份绕过,可导致 RCE", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458527124&idx=2&sn=17cd7eb2332daf172f03dd9c67813013&chksm=b18d151e86fa9c08dddd8c5b60313797a7d49b418cf2773d916ac32d4dd0e9105c63f3209891&scene=58&subscene=0": "白帽访谈 | 挖掘上万个高危漏洞的安全守护者", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247498021&idx=1&sn=ecaf23b88a1467e5e05d8e1b0e69fa89&chksm=fe26fc24c95175325f95d4e2a99c9385e52fcc4d619d3991348abb5e1717b04f93fb5c8ceba6&scene=58&subscene=0": "CVE-2023-22518:Atlassian Confluence身份认证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247502713&idx=1&sn=db01623b954b9c1566f6f803bab1940b&chksm=fa521ec7cd2597d17cfcdd38745cfc99e1b1adacc3bd8fe134382b80aa7d06163419c2d93ab5&scene=58&subscene=0": "手把手玩转路由器漏洞挖掘系列 - SNMP协议分析", "https://mp.weixin.qq.com/s?__biz=MzU5Njg1NzMyNw==&mid=2247487419&idx=1&sn=06badcecbbb46644bb94b50a3f752629&chksm=fe5d173bc92a9e2d2cc61635d2c0fd6f6052ea1c827a871b1d1389deee6f1e6c4d1a8362dd49&scene=58&subscene=0": "一键预约 | AI安全及漏洞分析赛道出题人空降!DataCon2023赛前公开课来袭", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247499969&idx=3&sn=861b355de7f90ad3c233aeb9b5c41b28&chksm=eaf9888ddd8e019bdaba91eee6cb91e9f426a87c5c1f0cba534d7125aa095fcaa6a1e76386ad&scene=58&subscene=0": "2023年“专属SRC”漏洞年度证书奖励计划公布!", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521205&idx=2&sn=fe8329c778763c6dd68d8f3b99ad9485&chksm=ce4618a5f93191b34e6084b1a3d992da787bd4a91cececeb8c66a09d1889104e52b30cb3dec2&scene=58&subscene=0": "【漏洞通告】XXL-JOB 默认accessToken 认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499939&idx=1&sn=c603873f3ea231ce3330fa203dee29a6&chksm=fe79e43bc90e6d2d9e1ca8bcb7e45636c841820f83058dac9f95b6ac0d8c0b6d73c59aa17257&scene=58&subscene=0": "【已复现】Microsoft WordPad 信息泄露漏洞(CVE-2023-36563)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785763&idx=1&sn=acbf76a31544df9c95e9a4a636e381b0&chksm=8893b5ccbfe43cda9b4f3eff8cc4ea4fd7794905e5cc3403364e0856d8089b3341a77c637755&scene=58&subscene=0": "新的CVSS 4.0漏洞严重程度评级标准发布", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458527408&idx=2&sn=a49502e7f63089e80e5c1a83930ede77&chksm=b18d163a86fa9f2cbcdeb327ac7b7ac51aa8da17241c0f5d5d5c4addb11b2c842add526f848c&scene=58&subscene=0": "最新CVSS 4.0漏洞严重性评级标准发布", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458527408&idx=3&sn=c7ba23eff3777f0ed9fa2d97a3d9b77e&chksm=b18d163a86fa9f2c7141c65263fc9b7e44759ad440020c2b5ee7d0d21b9a79415e2332e07c9e&scene=58&subscene=0": "今日更新:堆溢出漏洞分析与实操讲解-30小时教你玩转CTF", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247540469&idx=1&sn=7c63f9dd7f0b202576e68c7a470dc815&chksm=c1e9d2a4f69e5bb2948374cff78ea6ae99699cce812838b9b52748ac639115fb60a08042772c&scene=58&subscene=0": "常见 Web 应用越权漏洞分析与防范研究", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247567321&idx=1&sn=88cea8dbf4ed3aad0d8c20d2bfd01f13&chksm=9f8d57d1a8fadec762a1a2555d1717ec7aa13ecae65d3f6388bd54174d5f42189d1afa83edf8&scene=58&subscene=0": "360获评国家信息安全漏洞库(CNNVD)一级技术支撑单位", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502615&idx=1&sn=f6e671c093d3659050705f08d7244889&chksm=f25859e4c52fd0f2f5851270d599c6347377512685e646863d726f942c58fb42b7a4d6b715ca&scene=58&subscene=0": "雷神众测漏洞周报2023.10.30-2023.11.06", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518068&idx=1&sn=604c9c5bff720e69d48c8a4c67adf491&chksm=ea94b61edde33f08c5b1621f39b640a67e73881625fe41ee1199403eda4c57b6795f42a34e73&scene=58&subscene=0": "ZDI称微软 Exchange 出现4个新0day,可导致RCE和数据被盗", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247510204&idx=1&sn=71ebeabf8164a36ec4d9e593b51359a7&chksm=ebfaef9cdc8d668a4fa9eff12286f26b70fdf6d52d2a8181570ef23bd98e7ff293be75614dcd&scene=58&subscene=0": "Okta被黑溯源:系统设计曝重大漏洞,机器账号未做安全防护", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521230&idx=1&sn=e5c905257172033749470ac4ab4e432c&chksm=ce4618def93191c8bc093b28b251747cc59d7e8e0806643edf256145cea134919c627c6aed3c&scene=58&subscene=0": "他们在韩国最大安全技术峰会,分享了这个Office高危漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494050&idx=1&sn=da2de8e1e567ef480d22b888f025d772&chksm=fd74d96bca03507d8e367b958c38a49692c93065b7f13c0d9af7db8271fe9cd19b789ccb56d1&scene=58&subscene=0": "CNVD漏洞周报2023年第44期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494050&idx=2&sn=c01a35a85f9561ed83c8199ca3c91cdf&chksm=fd74d96bca03507d829f8bd0e5c6d03eeb74ceed36dc783907555fa78a6071d53d3426f69390&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231030-20231105)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458527624&idx=4&sn=f7a11b447d6f295249b17cd7459abf00&chksm=b18d170286fa9e14f5f6afcf135f8e6c54ab0490f96342d8e52d5069fa968f83896849b530bb&scene=58&subscene=0": "今日更新-分析ioctl fuzz,syscall fuzz | 系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247510212&idx=1&sn=c66d2a9c916ef5e8d080814fd3aef3e9&chksm=ebfaefe4dc8d66f294b5c979534b41a8750e674cdbb5de526615ef15166bb1663d591a2008ed&scene=58&subscene=0": "现役美军信息1元∕条可买!美国数据交易产业失控引发国家安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518080&idx=2&sn=71583bf9067a3f7b1848503bf006dce0&chksm=ea94b6eadde33ffcf50e87af86318d2deea11f68e675ee8426e0d50b1d32679ca1c6499c3222&scene=58&subscene=0": "QNAP 修复两个严重的命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518080&idx=3&sn=186f168b319049fd88ec7557cb2458e1&chksm=ea94b6eadde33ffc3b7b219d6a0e6143f28a1c6c166c41882c63ee116d0acffba7acbed4dab3&scene=58&subscene=0": "Veeam ONE 监控平台存在多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498790&idx=1&sn=dd1640dcca3b488f95332e8ba24a21da&chksm=973acf44a04d46529fd6df4abd6aef5efcebc5f34a10d7040606839455c095c40a03cb1ba988&scene=58&subscene=0": "CNVD漏洞周报2023年第44期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498790&idx=2&sn=8e19f8c1ea7bc62dc044a9aede925d1b&chksm=973acf44a04d46529edd47b17c0e67e88ff68bf53e6077cee08c02328b93b2e3a7a90f9fea54&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231030-20231105)", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247502794&idx=1&sn=6b4496ac4e6c5b264a159c8298844738&chksm=fa521e74cd25976262e79a004b50eb894c831a21a35536de94f70ae1a563c724cbc7d0096453&scene=58&subscene=0": "Apache ActiveMQ RCE漏洞 CVE-2023-46604复现分析", "https://mp.weixin.qq.com/s?__biz=MzU5MTExMjYwMA==&mid=2247485659&idx=1&sn=47f1f78d5d2042482c976f06344733ac&chksm=fe32b82cc945313afe7408468863c49060a7ab45ab75755ebda5ceacbfe90375ec8eba627607&scene=58&subscene=0": "burp_crawl_rce复现-从点击劫持到rce", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503754&idx=1&sn=52b2af0607cc37179229b89c2eb42f98&chksm=cfcaac9ef8bd2588267c36c1e9154830883aa7df750f334ac3728b5b877cd7bc6a8c44ba2f06&scene=58&subscene=0": "漏洞通告 | IP-guard WebServer 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247496154&idx=1&sn=e3055e3c499b0dbe05a64b05dc884a6a&chksm=e84c5705df3bde13c38295ecff0e5d08fe814083d4052304da0faf28474a37d47f30d0daf4bf&scene=58&subscene=0": "【顶刊论文分享】The Leaky Web:自动化识别浏览器和Web中跨站信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458527750&idx=2&sn=d409b478da057c37c54d527677a63e02&chksm=b18d188c86fa919a5f6e3f844c7b04b52a356f7ed5172735455519ff3c315bf5af086c8891b5&scene=58&subscene=0": "ZDI研究人员披露四个Microsoft Exchange中的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247540569&idx=2&sn=1763653924e77c3fcbb48763e7d25e19&chksm=c1e9d308f69e5a1e43754e537a2afaa5a35680f661c7157f7250be3c98a2336e8549f88302df&scene=58&subscene=0": "攻击范围扩大促Atlassian 修正漏洞评分-勒索攻击者已摩拳擦掌跃跃欲试", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492520&idx=1&sn=26428be564940ff7e733729fbaa29df9&chksm=e8a5e9cbdfd260dd3f1a6f99856325f31d6c256d7682252b2489382e39f3d4338e178f44c97d&scene=58&subscene=0": "通过分析JS源代码发现api漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491943&idx=1&sn=4361fe3877c793edf25960b3cd9d8c04&chksm=96f7fe0aa180771ce61184a8fcbb3e7d19397cdc975c45a64abac49bb88ce1e642e62643788d&scene=58&subscene=0": "【已复现】 IP-guard WebServer 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247496651&idx=1&sn=2e7ed67add84fa9d9953334f2551f663&chksm=c063dd12f71454047073d53effecd907f96cd10c0f62ccec8cc723dbfa898b00be787a8b12d6&scene=58&subscene=0": "G.O.S.S.I.P 阅读推荐 2023-11-09 基于签名的静态分析检测重复出现的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518099&idx=2&sn=042defdaef2c1342d2ef87dcd4895e6f&chksm=ea94b6f9dde33fefa6b268879b4fdebfe7f61d217d8685b96e7a50ce4970c416edd433698fce&scene=58&subscene=0": "CISA称SLP高危漏洞正遭活跃利用", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247492723&idx=1&sn=584860d9d77c2ef9f1f89a48f590c6dc&chksm=fa78e53fcd0f6c29dccb18ad819deb0cf5a349628990acc27ac6371c70b2d04a9c68be1c358d&scene=58&subscene=0": "漏洞马拉松2023 | OSRC正式加入,赛程已过半,成为纵横榜C位的秘诀都在这里!", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247494254&idx=1&sn=2fa6d94cb26dc9fef8670e74afc8f2d9&chksm=96d8e1b4a1af68a2b487059ec166e18f2eaf41f0ac9290dc21e39e8cfe9ba66bc49193f1fdf0&scene=58&subscene=0": "漏洞情报 | IP-guard WebServer 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247570896&idx=2&sn=b6f8f34b4b7763d45f9c9a641f1069b6&chksm=e91405eade638cfc5431cea8d22a83d5408459f4c1d0315de7ab4dbe4c8fb223a671082bf581&scene=58&subscene=0": "Kinsing恶意软件团伙利用Looney Tunables漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247567430&idx=2&sn=f1915c0f02983250c6a48f43a3dc1fbb&chksm=9f8d584ea8fad15896dff16c4469a9d62b84f0cc140f69826f0263cb0764f707db1ff04010d6&scene=58&subscene=0": "360独家揭秘:警惕Cerber新变种L0CK3D勒索软件借助漏洞多平台传播", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458528170&idx=1&sn=2566a845cd8c4284e09fa7aa51c35f49&chksm=b18d192086fa9036a38e7f0ed066e3972d83f6709cc2f6e29500e1375910480762706f057063&scene=58&subscene=0": "2023 SDC 议题回顾 | 轻舟“难”过万重山——工控漏洞挖掘的探索实践", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518109&idx=1&sn=ea1969d5f6961265242e634ad3228096&chksm=ea94b6f7dde33fe132cc88251eab7c283bd586cce97c1f70e82ba7debd24fd3003e6b9f2f7a9&scene=58&subscene=0": "微软称 SysAid IT 支持软件 0day 遭利用", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521281&idx=2&sn=cf1fece1418234889d7c35582ac72116&chksm=ce461f11f931960755a5c19cc49675d5e4e4cacd6c5c33d9032815bfee0e763eb64e11b4fec1&scene=58&subscene=0": "【漏洞通告】IP-guard view.php 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785872&idx=2&sn=4a5fce4955451b2484758023bee5a076&chksm=8893b67fbfe43f69f8a0a74fc083c0d96cd27641375fea851c7c7a44ae3bf8d4326fecc591a4&scene=58&subscene=0": "美团SRC|漏洞奖励翻N倍!", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502622&idx=1&sn=2c033d3e1f79462c8cee3a5ef3af3ae2&chksm=f25859edc52fd0fb5009d75d1f054b5c4365cc9070c0975a56b7c2d2e3d4ea93cdf0640b3d3c&scene=58&subscene=0": "雷神众测漏洞周报2023.11.07-2023.11.12", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650973681&idx=1&sn=75dc72d0b4b1bbe2ed8d0f702091653b&chksm=8079e7c3b70e6ed5003c8c09521e4246cd96fd6c1f0914d06ca7024320f5260350314e2436de&scene=58&subscene=0": "原创Paper | Cisco IOS XE 系统 WebUI 未授权命令执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247509746&idx=1&sn=7b6100ba39ba3215c22750c8cb388d38&chksm=e89d8e2adfea073cd122af84de4e4fefeadfc20805c14da1b362042899b1952b81583925c582&scene=58&subscene=0": "SonicWall GMS 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494090&idx=1&sn=eccf836ca8e48d9d76f7abe229c22fc2&chksm=fd74d903ca0350153cbeaf8efa2d26f65ce7d75ab92c0a27990aa3b40d01b7435f301ae5db10&scene=58&subscene=0": "CNVD漏洞周报2023年第45期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494090&idx=2&sn=aea65937052946c4460efcbda67f0b63&chksm=fd74d903ca0350158448c542026317bc1c141bc9d983c9cfb3eebd5135c022bb96b59644f7a1&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231106-20231112)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458528496&idx=1&sn=980dcd2b79482d70a7a1c3452c481e97&chksm=b18d1a7a86fa936ccad74aed0cbadf35c6a84b09ea381e5f1f28b984e70093ae1ee4690c12b4&scene=58&subscene=0": "2023 SDC 议题回顾 | 从探索到利用:揭示安卓模拟器漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458528496&idx=3&sn=bc8d3cd0c55ab770344c4821da2aebee&chksm=b18d1a7a86fa936c334ac15ed3ae82c72617f23568e8f82c6c82c6af77c87505df3753ce4a25&scene=58&subscene=0": "本周更新:ioct fuzz原理分析 | 系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498815&idx=2&sn=39165ee49e72012c4b0c3b60176745a5&chksm=973acf5da04d464bf9290779656bf6072323dc6363870a125edd8ade874fb871bcf124e9209a&scene=58&subscene=0": "CNVD漏洞周报2023年第45期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498815&idx=3&sn=07554d673a7afe4543305d4a08e3ffca&chksm=973acf5da04d464bf23e3553b56a318d9192e7754132af130959859fa177298782e753bcdb60&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231106-20231112)", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650973687&idx=1&sn=ff313473debea3d08f4eb45325122156&chksm=8079e7c5b70e6ed3bc8f51c8f0c350ab835a4429f2dc0b70152f15d7e2573641188a92eed8ba&scene=58&subscene=0": "404星链计划 | HaE、GShark、afrog、JYso、vArmor、As-Exploits 项目版本更新", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521391&idx=1&sn=5d2841d92ecd267f0bb53fbc39d5e841&chksm=ce461f7ff931966962d62a69bee9d05e434ac4547d67c789f8818ea8b731e1725e472b2aec76&scene=58&subscene=0": "【漏洞通告】Apache Arrow PyArrow 任意代码执行漏洞CVE-2023-47248", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521391&idx=2&sn=e902b7b05afd84e98731e2bab49083ff&chksm=ce461f7ff931966921156771f37a16e1f16f38585e035e4149fb2cdde21775774bb4bd14965c&scene=58&subscene=0": "【漏洞通告】SolarWinds Network Configuration Manager 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247571115&idx=1&sn=9f15aa9db462a62f42d85ddfcc2a5925&chksm=e9140691de638f87c26351f5d20afa8ba131c348dda3f3e67032d7f17f7f33ed8ec39ce4c62a&scene=58&subscene=0": "Forrester预测:预计明年AI代码漏洞将造成新的攻击", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247571115&idx=3&sn=3ff347f143147e3608198bda2690c4b6&chksm=e9140691de638f87d215dbedfb9ff0b468596aa2eb7e856937fa92180592eecb992bab23f18e&scene=58&subscene=0": "2023年推出12个值得关注的漏洞悬赏项目", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488507&idx=1&sn=dfd59a672c787b3c595d90f2b4e8bffb&chksm=c2c644f0f5b1cde6b8d2b119ce37d21abbd0c771d59d93906f6f9e4a686d65966418d497faf9&scene=58&subscene=0": "【安全更新】微软11月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458528591&idx=4&sn=a8196bdd173bf203019270969a58bfc3&chksm=b18d1bc586fa92d37e16829607f0f62303c2ea387a12549bd1bba4ee1e5744ff21bd0e3dd7f2&scene=58&subscene=0": "初级篇已更新完毕!CVE复现漏洞精讲-从基础到入门", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247510279&idx=1&sn=a8a3f9d6a1d65fe1d5510aa228b40a16&chksm=ebfaee27dc8d67313624efba71126beab41ff911644d6f786e4730fc35c3666e0f3ef32eb00e&scene=58&subscene=0": "英特尔被诉故意销售漏洞处理器,企业不修漏洞和修复不力的界限在哪里?", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247499984&idx=1&sn=b30a31591257c1f01b5b5dafd2f3f84d&chksm=fe79e448c90e6d5eeda3eab56ee03d470def552f9c6711bdba3b23945aedb3f39003d1fd6249&scene=58&subscene=0": "微软2023年11月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503812&idx=1&sn=ce3fe0994d5ee5b240602e945b5a234b&chksm=cfcaacd0f8bd25c607b89b71cec57de0ea1f899d6290805e9f6771067a39752bcf7c6f2b6777&scene=58&subscene=0": "已复现Office RCE!微软11月补丁日重点漏洞解读", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518139&idx=1&sn=941a9da7093fb53ada0f874db9d3ef39&chksm=ea94b6d1dde33fc740734b8dc6fbbcd0d0ea7446e8a8bfa3c8bdb1423e2e2c01536e8adf2960&scene=58&subscene=0": "微软11月补丁星期二需要关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518139&idx=2&sn=4951a6280d077d8cd04309f6629182e3&chksm=ea94b6d1dde33fc71b53f7879454b257d922f83689acde6d310a195b1857f38098ca7685fcca&scene=58&subscene=0": "VMware 披露严重的VCD Appliance认证绕过漏洞,无补丁", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518139&idx=3&sn=201c8852d50131207cce3e7b5695fd44&chksm=ea94b6d1dde33fc7a7b70bcef38d8d9baf5198497a8802fa95ce2c50969d992c0a5990f81547&scene=58&subscene=0": "“奇怪的”高危Reptar CPU 漏洞影响 Intel 桌面和服务器系统", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247489994&idx=1&sn=0bfb41528b63c1ab1f0cf1f81d034da9&chksm=fe2ee641c9596f578d899e82a1c0d92cefc96d7862cde74435c50e24aad9b3c910e9d436d9c4&scene=58&subscene=0": "纽约大学 | 基于大语言模型的零样本漏洞修复研究", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247498677&idx=1&sn=5a7d87c53fd9fcd56e775b4ad672adfc&chksm=fe26feb4c95177a297c2772a06a34931651721f37bbc7c31f00d932aaaf32c49b8c4492691be&scene=58&subscene=0": "2023-11 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247516344&idx=1&sn=744cae500e38b61cd9f9fba65782b498&chksm=eb705e87dc07d7915c6aa4d2266ffd8d095300cabd1efcd3e765e8f9057e770c110d73cf10e2&scene=58&subscene=0": "2023-11微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247571147&idx=1&sn=a91fdd0d7234b5386850a9db0e2dc6cd&chksm=e91406f1de638fe75705843bfdde4c6e2b3351a1369185bd61f84f6e8e0acc49100e96a6cd70&scene=58&subscene=0": "高流量即高漏洞:浏览标题党网站可能遭受攻击风险", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503825&idx=1&sn=35d17687e3fa9ff5c10bd39fa1f20a25&chksm=cfcaacc5f8bd25d32a40d976d21466c92869329b87efe2d0ddef07e0ee6d7c04b650d959593f&scene=58&subscene=0": "漏洞通告 | 金蝶云星空任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247491952&idx=1&sn=73ccc45221ed6cd9ccd66c32812132be&chksm=96f7fe1da180770b893a6b438faf5716fbe5096366a6fafc01587ae73134e913009190ffe3bc&scene=58&subscene=0": "【已复现】金蝶云星空ScpSupRegHandler任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518149&idx=1&sn=915ff8302203c2d80f8010384fe1efd2&chksm=ea94b6afdde33fb9dc7416eef6e9266e5b18d129ef74f31ef2232c486b5dd672568fbec49fc5&scene=58&subscene=0": "ChatGPT 的新代码解释器存在重大漏洞,用户数据可被盗", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247541101&idx=1&sn=92bce236ba184537172b8dc932b57eaf&chksm=fa9397accde41ebaeaf757158b987e5283bd169a57a07b9dd7df91dec12a8a3416a33d44bd61&scene=58&subscene=0": "助攻黑客的严重漏洞?不符合GOOGLE的威胁模型,不予解决!", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247541101&idx=2&sn=b4dea9ba4b18b6aacc7252313ba5bae2&chksm=fa9397accde41eba5685151ff8c9395ce192afb4e3a4df75c0a2ba20cb26f2d6de0d7b51f50c&scene=58&subscene=0": "高流量即高漏洞:浏览标题党网站可能遭受攻击风险", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247536004&idx=1&sn=596409bf8b0963e06b45070ac97bc686&chksm=eb84a624dcf32f32bba6823b7400f88f593cf7c9a6aaca1c455ece8af984cbefa7069a74f149&scene=58&subscene=0": "漏洞调试的捷径:精简代码加速分析与利用", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247510291&idx=2&sn=497ba7072194febbcbc8e25851840364&chksm=ebfaee33dc8d6725dc701cdd5f39522fe9d286b476db1076daa3e618bcd9bf3ca5000f8aa8d5&scene=58&subscene=0": "支付平台漏洞遭利用!犯罪团伙通过AI换脸盗刷他人医保卡", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247571183&idx=1&sn=5cdd8c26dabaf6f8d702df151f3b2147&chksm=e91406d5de638fc3b8c1a557e369eec87306b8849f53112d3b794f77c0998e21134fb6b319ba&scene=58&subscene=0": "ChatGPT新代码解释器曝出重大安全漏洞——黑客可轻松窃取数据", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247500597&idx=3&sn=f6fc3e0e08813b2c264dfbc54413a1ba&chksm=eaf98b79dd8e026fe5cee2006052ac059493ea8dc82b93b76b2cc47106da7ea74a857a58efaa&scene=58&subscene=0": "2023年“公益SRC”漏洞年度证书奖励计划公布!", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458528715&idx=1&sn=627dc9f855b26a2b12023ae265d144bf&chksm=b18d1b4186fa9257155c4abdc5d6c214aaf1d7f02474075971493ddc63a7f153fddf3bfd63f0&scene=58&subscene=0": "2023 SDC 议题回顾 | 深入 Android 可信应用漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500003&idx=1&sn=070006ea4069557ba38ac6b934d604b6&chksm=fe79e47bc90e6d6d8d93f52b4b0ce6707854641fd3a0e37c1015ba5a7070944395a6bc656572&scene=58&subscene=0": "【已复现】Google Chrome 信息泄露漏洞(CVE-2023-4357)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247510298&idx=2&sn=8b3e130711c9d20bc807a48233cba2f2&chksm=ebfaee3adc8d672c5a3fda8b4cfa8a3e1aa719851955a323267cabbfcd766e051c4c81aaf676&scene=58&subscene=0": "金蝶云星空私有云任意文件上传漏洞安全通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503840&idx=1&sn=6d4560f43589878e20910521bedcf0a9&chksm=cfcaacf4f8bd25e23e36ea2bba9879db39881e58987c6cc7367d4e173550c6accb44659275ca&scene=58&subscene=0": "速修!海康威视综合安防RCE已被用于勒索", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518159&idx=1&sn=44370db9677abd274914bebd182e5446&chksm=ea94b6a5dde33fb3b7fce9d16af88a593ad5cafb43671cb75c4eb3e9d6055b3812e8a12d2e68&scene=58&subscene=0": "Fortinet 提醒注意严重的FortiSIEM命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518159&idx=2&sn=b54ed16993cd6811139690c4a436767e&chksm=ea94b6a5dde33fb34588cb467b49254472988636e95f6687a2df98b2030a936b35b451b513f7&scene=58&subscene=0": "CISA必修清单新增三个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247540708&idx=2&sn=d8ec520ad60bdc69b772dc7a29286852&chksm=c1e9d3b5f69e5aa3e5699b11e6ffc911ddadbd5c5838f8ed35321ce10f0f2e758d178a6a8bb4&scene=58&subscene=0": "还是Citrix Bleed漏洞!又一家金融服务公司遭勒索", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247502957&idx=1&sn=041df5d160addae19ff244df2595c3ea&chksm=fa5219d3cd2590c567112ba89794fbbfdb534986a07394369c96190c1ac845c88230b606a3e3&scene=58&subscene=0": "微软2023年11月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664197659&idx=4&sn=b1b0c5252ee1dc098af28551b2b649f3&chksm=8b596ce2bc2ee5f44ccd02f9721f253adbb3bb6511231ebd6a40d7d65f5c802262687601e3de&scene=58&subscene=0": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247541129&idx=1&sn=8c5e76e83847d82fde021f22afcb82d1&chksm=fa939748cde41e5e43959655cca35ad1a7a9708f5ffed620bf7fb505596665e639565c9791ca&scene=58&subscene=0": "ChatGPT新代码解释器曝出重大安全漏洞——黑客可轻松窃取数据", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492614&idx=1&sn=72de6169ff0d6313508631e42d0f5501&chksm=e8a5ee65dfd2677327a6df4ccd67be22019697d63f0e580883d8659a054f64c078fc379be75c&scene=58&subscene=0": "实战 | 记一次简单的漏洞挖掘过程", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492625&idx=1&sn=ad3648d202a3af0352e1527a2f3b0449&chksm=e8a5ee72dfd26764595c57802dd2d5e1967d2f67fb24983bf86faa3a39521ba313648503db96&scene=58&subscene=0": "一个支付逻辑漏洞和一些tips", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488317&idx=1&sn=5ef9fd277c1f354a7910b1413f075174&chksm=fb029e65cc751773d44bec5f0710340b1f72ea51ae74a14752fa9f5ac5e598a70105bffbea0e&scene=58&subscene=0": "还是狠炸裂的!Chromium libxslt XXE漏洞(CVE-2023-435)", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488317&idx=2&sn=7d9d87eb0cb5c5f8aceded9c79950dc3&chksm=fb029e65cc7517733b40b28c2542b91f14824dd3b58a83b6d48173a920ebfe4311d3b0045899&scene=58&subscene=0": "【已复现】金蝶云星空ScpSupRegHandler任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518171&idx=2&sn=0b735261ce924e7e2fb81864f59eaf32&chksm=ea94b6b1dde33fa747181216e79923bfce0fb821a0dc42cb4e1a61fd3f9366b1679db3a75710&scene=58&subscene=0": "人工智能∕机器学习工具中存在十几个可利用漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247498872&idx=1&sn=d49edaf1332012536974f24d29833bf2&chksm=fe26f979c951706f4fc404d039d49f75383f6720bcd0b58e4124dd0a216f246dcc4d60145fd6&scene=58&subscene=0": "CVE-2023-4357:Google Chrome 信息泄露漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521459&idx=1&sn=34d62516e5a64550aa1b27fa768264e4&chksm=ce461fa3f93196b5c18c1896c3bfcef4096f36019d4c6b842f5b0be9178fa5278ab580c9830f&scene=58&subscene=0": "【漏洞通告】Chromium libxslt XXE漏洞(CVE-2023-4357)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521459&idx=2&sn=713ce3ed6c4d965208e3b407c1f3fd21&chksm=ce461fa3f93196b5853deb1ca0b7e932c6a1e6091954d0e7fea9439bb2c2f01ca9c62bcde5f1&scene=58&subscene=0": "【漏洞通告】金蝶云星空ScpSupRegHandler任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492686&idx=1&sn=9cd06605e4bb97e1cb84287c80725c64&chksm=e8a5ee2ddfd2673b9eeefac239f088b8e4ba8a858b5bf0be3edfa8fd63362cc8002c31de8b26&scene=58&subscene=0": "通过分析JavaScript文件寻找漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494108&idx=1&sn=c9d63e31bafef25a82b2032f311a3f80&chksm=fd74d915ca035003672126e6f8761576018ed8943e0178c5c1e4d06231615d1b32d550afac43&scene=58&subscene=0": "CNVD漏洞周报2023年第46期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494108&idx=2&sn=2ef2628e40dd39c363d62d6e39775d37&chksm=fd74d915ca035003cb4513fd5cf0c249eab7a09408810818276395e26d229adcef9ad5bda289&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231113-20231119)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458528916&idx=3&sn=9c6d79154fce3e1e9b24472d9de01f18&chksm=b18d1c1e86fa95087828a42476daeed2f99a72e26a0444ea996032a60733b4647be62405ae27&scene=58&subscene=0": "本周更新:syscall fuzz原理分析 | 系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518185&idx=2&sn=684d4e65a59a982c1fccf9da85df30db&chksm=ea94b683dde33f9598344442a18bda5d0f06f4cadd5c123b32ee44fdb95d5a2b9dec302d1ca9&scene=58&subscene=0": "江森自控修复工业制冷产品中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503881&idx=1&sn=7fa3f08a5517cfd57b047e42538a8849&chksm=cfcab31df8bd3a0b780b282dab43b25278266c8b051a4ce136449f2d2f2fcf640d0a25b73950&scene=58&subscene=0": "漏洞通告 | I Doc View在线文档预览系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521482&idx=2&sn=62b6f912f6a98093dbb4a22bcd78e89b&chksm=ce461fdaf93196ccd8ebed3660d7125e1d691c873b98caedc2a95809768c276a7c0c1a31d5e5&scene=58&subscene=0": "【高级持续威胁追踪】蔓灵花组织投向国产办公软件的目光与winrar漏洞之触", "https://mp.weixin.qq.com/s?__biz=MzkwNzMyNjU0MQ==&mid=2247484214&idx=1&sn=bb2eb8ddb9a1ef223612eea0aa393bec&chksm=c0dba614f7ac2f02c0c7f48d9a28e9c4e5273ce70790b5939912db13eb7995dfab5b6a20e6a1&scene=58&subscene=0": "Joern In RealWorld (3) - 致远OA A8 SSRF2RCE", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498817&idx=1&sn=c37bc5fe04ab8157dec3042f725572eb&chksm=973acf23a04d463536f617c282f27e86f426e84df4e4898f589ed3de0e6bbdef1b1a0dc87923&scene=58&subscene=0": "CNVD漏洞周报2023年第46期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498817&idx=2&sn=64f04ef7c1c51d4e43b8eb2ed6a3cf8b&chksm=973acf23a04d4635ca2c8837742f351cee39bd074109516f35c8a7e157cf2aceb9bd26173944&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231113-20231119)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492704&idx=1&sn=784f78e696ba3ecebb3e4059e6edb3fd&chksm=e8a5ee03dfd2671547b75bddc6b3a38212c7e508461011ac2d3bcf4d7f9677fe91a870bf2f19&scene=58&subscene=0": "SQL注入+RCE|获取学校网站shell", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247494598&idx=1&sn=56c0c638fa8d90a6a45d871f8ad7b23c&chksm=96d8e01ca1af690a92137e54b272ead0555a6419c62094f5045c12958d7ec1740150863a38e5&scene=58&subscene=0": "Reactor Netty HTTP Server 目录遍历漏洞(CVE-2023-34062)", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247490026&idx=1&sn=9b525875d40baf90b49f7473f2be7e5b": "二进制漏洞分析-9.华为TrustZone TEE_Weaver漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247498472&idx=2&sn=eee05eccfadc5e63f2c4ed5f8f57fb7b": "Array VPN任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ5MzM1NA==&mid=2247483952&idx=1&sn=5187477ddd01e30dd934e6805130d75d": "【0day】i Doc View 漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247155&idx=1&sn=d5e0b413e7fdf0c5aa85d78fb9e72bbe": "CFS三层靶场复现", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247512221&idx=2&sn=957370bd45808c4d3c3b7e6360cf72bc": "实战 | 某站点的SQL注入漏洞过程", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5Mzk2OQ==&mid=2247485582&idx=1&sn=ea5f1698e5764dca8f6480563f568686": "POC|SpringKill的IDOC_RCE利用POC", "https://mp.weixin.qq.com/s?__biz=MzU5MTc1NTE0Ng==&mid=2247485326&idx=1&sn=e6681c6e7d3de72246b49a9747bac520": "【漏洞复现】某客户资源管理系统machord_doc.jsp;.js接口任意文件上传 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247505641&idx=1&sn=cf7a98bd2f1c40c0f68af41ed8ff8984": "记一次代码审计中RCE挖掘及POC编写", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247490371&idx=1&sn=061900c0aeb89ff671284020c98f9e44": "红队攻防实战之钉钉RCE", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247487755&idx=1&sn=0493a4ca092558adf58cb02c3bd6f685": "创宇安全智脑 | 用友 U8 Cloud TaskTreeQuery SQL 注入等44个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492750&idx=1&sn=88728aa49441495c5e1546ed3779686a": "由本地文件包含所引起的RCE", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092491&idx=2&sn=61ef8198d70fcb4dc038f5c3907f12f5": "【漏洞通告】Apache Submarine SQL注入漏洞(CVE-2023-37924)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651248672&idx=3&sn=f9db1d6f1525de3e97f108a1ff59d605": "新的指纹传感器漏洞可绕过 Windows Hello 登录", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NjM5MQ==&mid=2247484320&idx=1&sn=8ccc4e99272c62a5e22298a9f7acd1fb": "时空智友企业流程化管控系统文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458529077&idx=3&sn=c99ee453e12a9190e4fe370577f32028": "俄罗斯黑客利用WinRAR漏洞针对大使馆进行网络间谍行动", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458529077&idx=1&sn=98cb8a5611fc09197f554b75274e7db0": "DAS PWN出题思路&CVE-2023-40930的介绍", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503914&idx=1&sn=cdca7a94a9f58ac2e847c7e602e4f307&chksm=cfcab33ef8bd3a28d387ffa64498f607719ab1baf02b7a0ed3c82de90f4db9de709a266e0ad6&scene=58&subscene=0": "不要总想搞大新闻,这个漏洞不是核弹!", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247540829&idx=2&sn=fdb02e160df47ed4c8e0271bc375d274&chksm=c1e9ac0cf69e251ae12b418c0fefd264d4475bb4a8c017f38f149e4d4ddb1a363859de4b1abf&scene=58&subscene=0": "颠覆指纹登录!指纹传感器的漏洞可让攻击者绕过Windows Hello登录", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247503022&idx=1&sn=48f62de07b301f3db4c88674c6fa76b7&chksm=fa521910cd25900606eb30b4f3c71a6a3f0c99a11b0e7b62c98047796c337f75a81d1091141e&scene=58&subscene=0": "MYSQL JDBC反序列化漏洞利用和分析", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488343&idx=1&sn=3a18980ec9c0003fb292d801ebc8560d&chksm=fb029e0fcc7517195d7f8279755ba759a5c6b02e65b301fa7ae793d6bdb13c2da503cf3f55b3&scene=58&subscene=0": "代码审计: I DOC VIEW 前台RCE 分析", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650179468&idx=1&sn=ffb1fba11aa90a117fec459de092b439&chksm=f4487c30c33ff52636a8fd5ff3913416f1dc11a6fad4269d1a9cb3af026e929ac3bcac07a282&scene=58&subscene=0": "抓狂!先修哪个漏洞?(阅后即焚)", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247516424&idx=1&sn=2ab35c25876a0140f49b749aa1d50f58&chksm=c2d1fdacf5a674ba0a4bf7d3b1babc218a5b8d7c2a7c9c2b3432b6c2b10daf684150c25cc166&scene=58&subscene=0": "高效开发:Java 反序列化漏洞 POC", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247571411&idx=1&sn=cb116543209bac1eb837e6607e099c40&chksm=e91407e9de638eff8f65edd5fcb10a2a21a9fc4bf68b1faef1d4a800d92048cf995b85e92e7b&scene=58&subscene=0": "如何有效避免7个常见的身份验证漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247571411&idx=2&sn=b6f5ba400b67298f35601904a3e591bc&chksm=e91407e9de638eff2f607eb93d3f9038330d7f7348c729a474d071f05ea9b9e8b14225973409&scene=58&subscene=0": "CVE-2023-46604 (Apache ActiveMQ)利用加密矿工和rootkit实施系统攻击", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247490061&idx=1&sn=7d05728cc107b418453513eaeee259d6": "二进制漏洞分析-10.华为TrustZone TEE_SERVICE_VOICE_REC漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247156&idx=1&sn=5183b396d420fa4b1a066e058a4bdd60": "原创Paper | Cisco IOS XE 系统 WebUI 未授权命令执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652103140&idx=3&sn=caecd338ff54dea7189615799d8756d1": "英伟达RTX 6000 Ada中文展示,GeForce RTX 4090撤档", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045597&idx=1&sn=533443c7574e2605ca54c888fd0c7b85": "【漏洞预警】Splunk Enterprise远程代码执行漏洞威胁通告", "https://mp.weixin.qq.com/s?__biz=MzkyMTQwNjA4NA==&mid=2247484587&idx=1&sn=c95ae2e769a8638c642e34a4c96249c2": "xxl-jobExploitGUI", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247496765&idx=1&sn=100666169fe6bc4403e941f224e58c18": "G.O.S.S.I.P 阅读推荐 2023-11-24 挑哪个IoT漏洞呢?", "https://mp.weixin.qq.com/s?__biz=MzkwNDM4MjgzMA==&mid=2247494791&idx=1&sn=1ba403b4019f8b077803eafcc39df0ea": "安全通告|I Doc View在线文档预览系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247500215&idx=1&sn=5954acb836e7278bc55fc8d619fd1360": "不要总想搞小新闻,这个漏洞千万不要看!", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247541243&idx=3&sn=79d41f7151b87f6c91fa59b336f1220c": "新的指纹传感器漏洞可绕过 Windows Hello 登录", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652049209&idx=4&sn=743b2de88e7ffa5d958fbd017078e6bd": "【安全圈】最新报告,数以千计的路由器和摄像头容易受到恶意僵尸网络的新 0day 攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652049209&idx=1&sn=0ba3fe604381df3eed79db421e45b825": "【安全圈】程序员利用公司漏洞篡改ETC数据,非法获利260万余元!", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247489770&idx=1&sn=c32fda6bc14ae6661ed3089ad0b98434": "S2-005 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MTY5NDQyMw==&mid=2247502591&idx=1&sn=d9286a42adf591926f1c72dfa7a6905c": "难以想象的芯片UAF漏洞,Zenbleed漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg5NDgzOTAxMQ==&mid=2247484867&idx=1&sn=ae6b5ab96a27d8703a66af97b159e46f": "Yonyou NC6.5 uapim文件上传漏洞分析复现", "https://mp.weixin.qq.com/s?__biz=MzI1MDk3NDc5Mg==&mid=2247485130&idx=1&sn=8d0ec4f00a8f57bce5770816f1b394c3": "华为Auth-Http Serve任意文件读取漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg3Mjg4NTcyNg==&mid=2247488289&idx=1&sn=f68a09752a17be73c58171eff9cf1a84": "喜讯!云起无垠成为国家信息安全漏洞库(CNNVD)技术支撑单位", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487105&idx=1&sn=b72a55338881f22c92c50846334716f2": "【漏洞复现】华为Auth-Http服务存在任意文件读取", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518215&idx=2&sn=0cb6a4efc122aea60b37aa4e6844a905": "僵尸网络利用路由器和NVR中的0day 发动大规模DDoS攻击", "https://mp.weixin.qq.com/s?__biz=MzU5MTc1NTE0Ng==&mid=2247485333&idx=1&sn=d1974b4d9e8cff3ebfa8bca5ce60bbb8": "【漏洞复现】某客户资源管理系统CustomerAction接口任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651130244&idx=1&sn=41f3209e762ad966beda65ef0b07aed8": "全国 Top3!梆梆安全凭借移动APP漏洞挖掘实力荣升「CAPPVD四星级技术支撑单位」", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247503048&idx=1&sn=933dca25910a5c998bfa3cb01b415a64&chksm=fa521976cd2590602d280a9d6e4b6b97df867cd2d0df50ef9ce3a0d80594d2b97beafa04d6a0&scene=58&subscene=0": "如何利用SCA静态代码分析工具快速发现漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521535&idx=1&sn=d6c2acd7cb5778653cabec992a2cb59b&chksm=ce461feff93196f9df38a24c88080f32983fca35c06bcbc0449603bafad69619897f31a6b7b9&scene=58&subscene=0": "【勒索防护】Tellyouthepass利用国内知名视频监控厂商漏洞卷土重来", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247571434&idx=1&sn=e9c108d16f1e3de7784a43343cb5c74c&chksm=e91407d0de638ec619ab79c545f7faa636af63f5c05749da131ab036a7ecf06548bf9173adc5&scene=58&subscene=0": "指纹传感器漏洞可在戴尔、联想、微软上绕过Windows Hello登录", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247510860&idx=1&sn=647de2a12309c10a56d48f1057dbe7e3": "从FlexPaper 2.3.7 安全更新入手反推漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDU5OTg3Mw==&mid=2247484340&idx=1&sn=e9263e44b124f988731dae1f9707bb11": "【Web渗透】SQL注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247484647&idx=1&sn=ebb5271c84d60599929e37bb5ab8f939": "用友NC word.docx接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDExMg==&mid=2247484276&idx=1&sn=6bb53673c769095c8851b165cf9a2f27": "【漏洞复现】通达OA SQL注入漏洞(CVE-2023-6276)", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247500331&idx=1&sn=91f0f731e8793f0466e74e5b6e52f416": "【后门】PHP 8.1.0-dev 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MjcxMTAwMQ==&mid=2247487732&idx=1&sn=2d33dfbfe0175bd0e90559ec0d5758ab": "有手就能捡到的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5OTQyNQ==&mid=2247484283&idx=1&sn=6c04d846e173654d86ac295e4264c259": "CTF干货|babyserialize题目反序列化漏洞思路", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458529430&idx=1&sn=ca811cbbc75e4ef8d98569a58116ca70": "漏洞分析 CVE-2010-0249", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247484582&idx=1&sn=79027a448172e2385d4b35f2d7115474": "从0认识+识别+掌握nacos全漏洞(攻防常见洞)带指纹表和利用工具", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247598105&idx=1&sn=6a54a6cea7a03de7ca7d655ed1376233": "车辆漏洞管理 - 从设计开始有效保护软件定义车辆", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247489869&idx=1&sn=2895bf9342f19a44c7dcce36dd59cb86": "记一次实战逻辑漏洞挖掘-逻辑缺陷", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247486443&idx=1&sn=95a80045f81e76da6892da3bfacc5dbe": "第81篇:JSONP劫持漏洞获取敏感信息原理、复现与坑点总结", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247487432&idx=1&sn=68681e080a9f89ee2578921e0371e3f9": "【漏洞复现】(1day)泛微oa-mobilemode-任意文件上传复现", "https://mp.weixin.qq.com/s?__biz=MzU5Mjk3MDA5Ng==&mid=2247485704&idx=1&sn=8eba18a368e94343c73fe70f09b668e2": "全职挖漏洞达人采访整理", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485332&idx=2&sn=893a772f0e21c57ba424cc9bfa28b75b": "【漏洞未修复】TOTOLINK A3700R命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485332&idx=1&sn=eeedbff4a3816778ec7d3e8d011ab890": "启明星辰-互联网行为管控存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247483912&idx=1&sn=16b807bc9b9bcbd31b82c39ea76177a1": "泛微E-cology9 browserjsp SQL注入漏洞复现 [附POC]", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247512310&idx=1&sn=45a073d169729a28aa2ed488c0d5ec93": "掌握thinkphp全漏洞(超详细看完拿捏tp)文末带工具 | 干货", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247512310&idx=2&sn=f4dc48358ab0edf521b80e57b4523766": "渗透测试之RCE无回显利用方式", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247503028&idx=3&sn=ef7ec853a107d83ca71147c778934af4": "CVE-2023-34212:通过 Apache NiFi 中的 JNDI 组件进行 Java 反序列化", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247503028&idx=2&sn=eee78079438312fd4c69f48ae8b25e1f": "分析 - Microsoft Excel 远程代码执行漏洞 CVE-2023-36041", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247503028&idx=1&sn=a02d9b27ecfa3c04fc5933b5f012f01e": "Steam 中的三个 RCE 链", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247486844&idx=3&sn=a80753ddfe1c9f512e4a6eae85c37e89": "漏洞预警 | OwnCloud敏感信息泄漏漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247486844&idx=2&sn=1a0f557b03a29aba6bb8c8c3bc28f53d": "漏洞预警 | Apache Submarine SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247486844&idx=1&sn=ecd7d0a328fa09c3c25f397d504fa033": "漏洞预警 | 大华智能物联综合管理平台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTU4MDc5Mw==&mid=2247484992&idx=1&sn=1a45796bc4066f32203b861103c9ed4f": "「漏洞复现」华为Auth-Http服务存在任意文件读取", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247484745&idx=1&sn=98c5d18f55ff883a186ce0a5527c2c64": "致远M3-server反序列化RCE漏洞复现(附POC)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDExMg==&mid=2247484302&idx=2&sn=35fd8adfb37fee85f2afd73ad68dab39": "【漏洞复现】通达OA SQL注入漏洞(CVE-2023-6053)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDExMg==&mid=2247484302&idx=3&sn=481ff0a396c29ac5ff92485dbf33475f": "【漏洞复现】通达OA SQL注入漏洞(CVE-2023-6052)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDExMg==&mid=2247484302&idx=4&sn=48071101e7f230709c1a907c43e999e2": "【漏洞复现】通达OA SQL注入漏洞(CVE-2023-5783)", "https://mp.weixin.qq.com/s?__biz=MzkyMzQ5NjYwMw==&mid=2247484099&idx=2&sn=6b8d9ed3d1ffcf21479bfcb5224821a2": "安全情报,DPTech VPN存在任意文件读取漏洞!!", "https://mp.weixin.qq.com/s?__biz=MzkyMzQ5NjYwMw==&mid=2247484099&idx=1&sn=a77ef84e7f1f7231898b13df84e45ec4": "安全情报,万户ezOFFICE协同管理平台SendFileCheckTemplateEdit-SQL注入漏洞!!", "https://mp.weixin.qq.com/s?__biz=Mzg5NjU3NzE3OQ==&mid=2247488765&idx=1&sn=a3580e56af4445f031f958195eb84eeb": "工具 | 无回显变可回显rce", "https://mp.weixin.qq.com/s?__biz=MzU2MDkzMTk3Mg==&mid=2247484848&idx=1&sn=f3329603f40315699e7de02c8d0e946b": "[高危漏洞分享] 神奇的协议文件", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247484768&idx=4&sn=086bd1fdec113c86aae8ac03371a1c02": "漏洞推送|金蝶云星空任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247484768&idx=3&sn=61cc50ed1707a48f7165e7cd23ba3d45": "CVE-2023-40054|SolarWinds Network Configuration Manager 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247484768&idx=2&sn=52cb5c2065e450f57a3f3f66d3b9f979": "CVE-2023-43177|CrushFTP 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247484768&idx=1&sn=9ee377e7c7b4d7d492f783b080479108": "CVE-2023-49103|OwnCloud 敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247503046&idx=2&sn=f97ea452bc9bc8b244513b84c5ba8fd7": "CVE-2023-48796:Apache dolphinscheduler 敏感信息泄露", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247503046&idx=1&sn=ad77ec2634e89a0005fc4ae06eb02103": "CVE-2022-41853 分析:通过 Java 反序列化和远程代码库攻击使用静态函数获取 RCE", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485335&idx=1&sn=e5cd4908caeaaef3c3d91093a050a021": "【高危漏洞】启明星辰-天玥网络安全审计系统存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247533699&idx=1&sn=3a56814d71a0fcfc035c362ab75b3f90": "漏洞分析 | 经典的Shiro反序列化", "https://mp.weixin.qq.com/s?__biz=MjM5NDcxMDQzNA==&mid=2247488034&idx=1&sn=da90d8c3d4b626cd26d5dc34c612da9a": "sqlmap的反制复现?求指点", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247490062&idx=1&sn=f5b234a3a0223dca7d990362dceff5fa": "二进制漏洞分析-11.华为TrustZone TEE_SERVICE_MULTIDRM漏洞(上)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247487445&idx=1&sn=b2110775d0bb0ca1048343a46fcec58f": "【漏洞复现】(nday)Ecshop两个注入复现", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247489882&idx=1&sn=45f98e8733939f5d5d0452fb4cafe710": "第80篇:Weblogic上传漏洞在不知绝对路径情况下拿shell方法", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649789961&idx=1&sn=20a2d489a7dcdaa3fcc2dde3bb7da806": "Lazarus 黑客组织利用 MagicLine4NX 软件中的0day漏洞对韩国目标进行供应链攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651249104&idx=3&sn=9122243d176853e90396896bef9587bf": "基于 Mirai 的僵尸网络利用路由器和 NVR 中的零日漏洞进行大规模 DDoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650582719&idx=3&sn=123271235fb5ff968b74711a35fd21ef": "记一次代码审计中RCE挖掘及POC编写", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247489044&idx=1&sn=ef750eaa44c7666ed1e6cc12726f0203": "JAVA 插件化漏洞扫描器,Gui基于javafx。POC 目前集成 Weblogic、Tomcat、Shiro、Spring等", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247490159&idx=1&sn=f2f4a60a80edd34f15426ccc5d864227": "二进制漏洞分析-12.华为TrustZone TEE_SERVICE_MULTIDRM漏洞(下)", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247498499&idx=1&sn=6850c3e9a3df795e48ba9a10c9772ddd": "华为Auth-HTTP服务器任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247510881&idx=1&sn=6f860b2cf913165c83ca1e43783f18c0": "Apache Jackrabbit RMI 远程代码执行漏洞分析(CVE-2023-37895)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492773&idx=1&sn=1ecf20872f34843e23adecb47aabca8f": "第81篇:JSONP劫持漏洞获取敏感信息原理、复现与坑点总结", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247512357&idx=2&sn=0363f7f7d32db9d2f843bb8b12c7820a": "漏洞分析 | 经典的Shiro反序列化", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247512357&idx=1&sn=533352410d4c48f73a8b6a8c24d63f08": "Web实战 | 一次空白页面的“妙手回春”嘎嘎出严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487116&idx=2&sn=f8355187a76b7fd96f4107210c0ded5d": "【漏洞预警】ownCloud graphapi信息泄露漏洞(CVE-2023-49103)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487116&idx=1&sn=a58962000b0051a7fc5a6ac40e73e20b": "【漏洞预警】Apache DolphinScheduler 敏感信息泄漏CVE-2023-48796", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247484665&idx=1&sn=b21dce8ba3db849560e2c295f31182ac": "易宝OA系统ExecuteSqlForSingle接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092497&idx=2&sn=5d1268a5a7601a6c7d5c1ff05c0e8701": "CNVD漏洞周报2023年第47期", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651249201&idx=2&sn=297f19b0ca857b35f32bac404ce89651": "开源软件又出大事件,ownCloud 曝出三个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247536149&idx=3&sn=74113920eaf2db003ec8095865e6050d": "EISS-2023上海站PPT | 王忠惠 ∕ 基础安全负责人 ∕ 千寻位置网络有限公司(漏洞管理的演进)", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649785877&idx=1&sn=5507b73ab36c64eff027bf59949eda12": "解析RCE:原理、利用条件与受限环境下的探索", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500057&idx=1&sn=10983a457c375bb1438ee1b77e3ab3ea": "【已复现】Windows Cloud Files Mini Filter Driver权限提升漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489111&idx=1&sn=87f1d2f611486b781e6c42edbbdab7bd": "警惕!ownCloud 文件共享程序中曝出三个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458529508&idx=3&sn=5cf7494106c177ce290935570902b491": "实战CVE漏洞分析与防范(第一季)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458529508&idx=2&sn=a461491fb44702efeb0df730e3974817": "ownCloud披露三个严重安全漏洞,可能暴露管理员密码和邮件服务器凭据", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518225&idx=2&sn=0c496ddfdfec8c17e1344333f0c218f6": "英韩:Lazarus 黑客组织利用安全认证软件 0day 漏洞发动供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518225&idx=1&sn=0012c60dceb2dbcc1beeb94a8a38d402": "开源文件共享软件 ownCloud 中存在3个严重漏洞,可导致信息泄露和文件修改", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502642&idx=1&sn=f170ac97513bee7d5e6dcb89b9273863&chksm=f25859c1c52fd0d754d63e43ce1cf0bb0c9e17b0be4bc32f9b7dbe71a0881dd18212c775d429&scene=58&subscene=0": "雷神众测漏洞周报2023.11.20-2023.11.26", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494140&idx=1&sn=af2d9e1ec2901ee37c160b8582586fb2&chksm=fd74d935ca03502330dec2b441288fdb900bf8771e74fc569c6ca3dce5704a15368f8da7dc61&scene=58&subscene=0": "CNVD漏洞周报2023年第47期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494140&idx=2&sn=3aa70a734707d26eb952f9b9a6d11da0&chksm=fd74d935ca035023c23a9e726b1a72171d3c37bdfa461753c02dcd74e7f79705bc1aa2713eee&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231120-20231126)", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488355&idx=1&sn=f18e4e4e83a9c7a16f2a8f4042f03c5a&chksm=fb029e3bcc75172da32f661b5d9f80470b0edc6d04d6d81dd516df3970f310468b1994398ac0&scene=58&subscene=0": "1day:NginxWebUI admin认证绕过(全版本通杀)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247571525&idx=2&sn=055addb3f29eca6c3a2458febca554d3&chksm=e914087fde638169bd819aaf3a464faedb8efa299e9111cf739e6d0f828f66242f7006b3d99f&scene=58&subscene=0": "为何扫描工具无法检测出失效的访问控制漏洞?", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247541275&idx=3&sn=2c720a04028f78af3aeebbd63fd44bf3&chksm=fa9394dacde41dcc4b9afd7f87dec6c4d794d22f3eb731684732c9efbae6bb83d424abdb97a2&scene=58&subscene=0": "基于 Mirai 的僵尸网络利用路由器和 NVR 中的零日漏洞进行大规模 DDoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247490160&idx=1&sn=87338252994b4cb7c410efc68b7c5d64": "二进制漏洞分析-13.华为TrustZone TEE_SERVICE_FACE_REC漏洞(一)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247487531&idx=1&sn=83cfdbdfd76ce2ce34af534756f09f3b": "【漏洞复现】易宝OA ExecuteSqlForSingle SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247493139&idx=3&sn=1ea6b2c52ad2b86c3a63f53b60c327c3": "LockBit 勒索软件利用严重的 Citrix Bleed 漏洞进行入侵", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247510913&idx=1&sn=f330e527506ca15092cfed970c6cbfce": "Bludit cms漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNDU5OTg3Mw==&mid=2247484383&idx=1&sn=be954a08038795af2eab8a23bf74f697": "[Web渗透】XSS漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247512400&idx=2&sn=3c65af2bfc5f620144fc7f75014eb726": "攻防 | 域渗透之Sunday", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247512400&idx=1&sn=dc4158d03d041964ce236e229768bfb7": "浅谈Apache Shiro FORM URL Redirect漏洞(CVE-2023-46750)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247484684&idx=2&sn=35b08ebe54e3f118eab93ea5b18fa009": "​万户协同办公平台ezoffice SendFileCheckTemplateEdit.jsp接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247484684&idx=1&sn=15e1e3dfe72c357fa141e6c55848fc42": "通达OA inc∕package∕down.php接口存在未授权访问漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521563&idx=2&sn=ca9167b51fff1a0887efa413fabd452c": "【漏洞通告】泛微 e-Office10 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487124&idx=2&sn=f941f885d85e17ca488bb104ba3d5c3d": "【漏洞预警】Apache Superset 默认示例数据库权限提升漏洞CVE-2023-40610", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487124&idx=1&sn=125b9b5d5fe1914a14cea8ea47c66561": "【漏洞预警】泛微 e-office10 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492779&idx=1&sn=cb4088b7032e885242006a5c994dab23": "SRC漏洞挖掘之评论区CSRF", "https://mp.weixin.qq.com/s?__biz=MzU1NTQ5MDEwNw==&mid=2247485033&idx=1&sn=3c0faf71988bd3e5509b00806b266912": "OwnCloud graphapi CVE-2023-49103 漏洞POC暴露", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458529810&idx=4&sn=854102192fd34faa912431d32065f7c9": "本周更新第四章:基于反馈的内核fuzz原理讲解 | 系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503932&idx=1&sn=4e0ed6f6d82f763a645bb6a78b39a6fc": "漏洞通告 | 泛微 e-office10 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NjM5MQ==&mid=2247484353&idx=1&sn=5d2fd0e8287aed50ec8aa24d7ede28f6": "​【漏洞预警】SourceCodester免费开源库存管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzQ5NjYwMw==&mid=2247484108&idx=2&sn=6df4f48ec173f7533763c09a55fe6ea7": "安全情报,X友 U8cloud task.TaskTreeQuery SQL注入漏洞!!", "https://mp.weixin.qq.com/s?__biz=MzkyMzQ5NjYwMw==&mid=2247484108&idx=1&sn=7ac5225f61569ac5d9b4d9d8a76751bb": "安全情报,X友NC存在任意文件上传漏洞!!", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247508856&idx=2&sn=386157e5a24b4080a7031dcd50cc2880&chksm=ea66540fdd11dd198cdfe7e81996024f607f53f5c5e6781f53bb6d983e15ff6c5eb602b2a782&scene=58&subscene=0": "【直播预告】漏洞情报运营研讨:走出漏洞处置的泥潭", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498830&idx=1&sn=a9a199e6995f069896ae4ba9fec8aeca&chksm=973acf2ca04d463aa57bbd064afa4385a5bac12b40ff73c07c79b1b80c18af74e0810fa32fd9&scene=58&subscene=0": "CNVD漏洞周报2023年第47期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498830&idx=2&sn=212658fb4c84d16ae2d4d286ac6f4a34&chksm=973acf2ca04d463a6bea7444e4e8f9e41328f8e4951d9c2ad3850b11789af5db6a3eecd45a81&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231120-20231126)", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247484250&idx=1&sn=ed7666b02e9139ee627bf43f6279f8b9": "【漏洞复现】ActiveMQ-Jolokia-远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDU5OTg3Mw==&mid=2247484420&idx=1&sn=aab22aad9a3a38d7f54d5a12db99d283": "【Web渗透】SSRF漏洞原理", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247512492&idx=1&sn=d24650cbe743cfcc68851157a0f98b10": "掌握nacos全漏洞(攻防常见洞)带指纹表和利用工具 | 干货", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247485120&idx=1&sn=991add9e1d60909833c4f89922a47ec1": "JS信息泄露到后台未授权拿下CNVD证书", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487151&idx=2&sn=29c2a6ef08b74acbbc632fe83750d704": "【漏洞预警】MOVEit Transfer<2023.1.0 权限提升漏洞CVE-2023-6218", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487151&idx=1&sn=02913861774ffab66521f4063015758a": "【漏洞预警】Google Chrome Skia整数溢出漏洞CVE-2023-6345", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521574&idx=1&sn=ce6071dc8b69dbe0d4ed05eae5249ec0": "【漏洞通告】Apache ActiveMQ Jolokia 代码执行漏洞(CVE-2022-41678)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247505738&idx=1&sn=83b892c8f3c05e8dfb1e4c675c474d2f": "记一次曲折的exchange漏洞利用-ProxyMaybeShell", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247491731&idx=1&sn=d657412c7b00d52570b4c3b95521c826": "自动化 “信息收集+漏洞扫描” 系统开发", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651249457&idx=1&sn=537fe3915057fcee3b63ca6ac32a332b": "蓝牙曝底层安全漏洞,数十亿设备受影响", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458529889&idx=3&sn=182f805fa76d5cb2d6d1743eb4d9fd5a": "数十亿台设备都可能被劫持,研究人员披露蓝牙架构存在漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247489808&idx=1&sn=7e6ea7b6d875b210b435c1b6e1c4cb36": "S2-007远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488557&idx=1&sn=c5e496466139458251342a074371d11e&chksm=c2c64326f5b1ca30118d9fa93f0a4ca854ea6db4e2c37776b9c02be937fd09597c72a2b45778&scene=58&subscene=0": "【漏洞通告】Apache ActiveMQ Jolokia远程代码执行漏洞(CVE-2022-41678)", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247503120&idx=1&sn=5aa17eda0dc71dbcdbc8ade810528578&chksm=fa5218aecd2591b81a4ba847a648c43d9da5d89c43c6d427e84ee41a72f012bdeee7871cf884&scene=58&subscene=0": "【卫星安全系列一】HAS-beckley赛题复现", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247510984&idx=1&sn=a175acf7b5291428e94e3cf53a3f7a86": "某综合安防系统-任意文件上传漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247505844&idx=1&sn=ce7ee2cee1d6da9ea86f07de1697ac2a": "一次曲折的JDK反序列化到JNDI注入绕过(no forceString)", "https://mp.weixin.qq.com/s?__biz=MzIyMDAwMjkzNg==&mid=2247512523&idx=1&sn=3a23ef761316f7d111fe7b22babb10c5": "我与逻辑漏洞的爱恨情仇", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652049783&idx=1&sn=09114bf5f22125861cfaacb036395202": "【安全圈】谷歌紧急更新Chrome浏览器,修复Skia引擎零日漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458530039&idx=1&sn=90a4c14b2f9377c5533544c9df0659dc": "Windows NTFS本地提权漏洞 CVE-2021-31956", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247495130&idx=1&sn=e4c1aa65fc07a825954c33fdfe0a0b84": "POC管理和漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485363&idx=1&sn=010bcba99b36f79ebda158fcab3739d3": "【高危漏洞】用友GRP-U8内控管理软件存在任意文件(∕servlet∕FileUpload)上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247489956&idx=1&sn=5486683bd2c9a2ac672a4c8e9dc82060": "记一次Oracle注入漏洞提权的艰难过程", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247533917&idx=1&sn=d4e67887715e3b80e2966708c51340dc": "内网环境-actuator漏洞排查与利用", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247490183&idx=1&sn=8f48e27973674803d3d4bb926fdfcd05": "二进制漏洞分析-15.华为TrustZone TEE_SERVICE_FACE_REC漏洞(三)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651249750&idx=2&sn=afcfb44c767d2f6c82ec9e90ec5e912c": "FreeBuf 周报 | 蓝牙曝底层安全漏洞;美国水务局遭遇黑客攻击", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650583088&idx=2&sn=627a4a5cbc04f5505ddb0866df669189": "蓝牙曝底层安全漏洞,数十亿设备受影响", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247486930&idx=3&sn=7cb6ae2ceac58d3a03c5e1e5402960c8": "漏洞预警 | EventON未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247486930&idx=4&sn=35d76fdb2d9dc9171293b1ebf95961f9": "工具 | API-Explorer", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247486930&idx=2&sn=a72cf7471c05daf70583b814e67cd392": "漏洞预警 | Apache Superset跨站脚本攻击漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247486930&idx=1&sn=6860737cc4028ac0722706940ee6c99a": "漏洞预警 | JumpServer未正确校验输入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458530040&idx=2&sn=e3d0ebbb7ad05e2e630c65918c17f09e&chksm=b18d007286fa89641c59f2d072566b8eec9f6b29d54b58dee015de47d8f2f910cc362aa8f57c&scene=58&subscene=0": "实战CVE漏洞分析与防范(第一季)", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488387&idx=1&sn=32b400ebc06e86a5aff1934b6a1a8d38&chksm=fb029edbcc7517cd41bba92028f4152f6652e69a7a0555e09d99473173e692f87d2292e9092a&scene=58&subscene=0": "代码审计:jar-analyzer 分析漏洞 Apache Commons Text RCE", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500107&idx=1&sn=83d62cd6fadf343e52d74656e4d43ba4&chksm=fe79e5d3c90e6cc5928ec787613a9e60151f42106ea88a8fce0cb71bd18dee68bcb001ece4aa&scene=58&subscene=0": "Atlassian Confluence Data Center及Confluence Server远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486284&idx=1&sn=e9d1cafe1ec9fcdcda17e1ba73fe2f70&chksm=ec6fec4cdb18655a3fd63a9c9354e4754fc73b6a53c95e6c336c46db5aeaacdad04aac962fb0&scene=58&subscene=0": "【风险通告】Atlassian Confluence 模板注入代码执行漏洞(CVE-2023-22522)", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247541043&idx=4&sn=4a6ddd3718b4a8ecf051bafc22635ae8&chksm=c1e9ad62f69e24740bffd0ea885c3a73312cafa3a95b10e13b9d37469bac0c6394a61b632927&scene=58&subscene=0": "主流大语言模型集体曝出训练数据泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518290&idx=1&sn=d91434693668c84124da84b0230dcdcf&chksm=ea94b938dde3302eba9ad9dbf6dfa2cd41ee37b5b10d804561f24ef3fab1f52829dbb07d398a&scene=58&subscene=0": "开源库漏洞导致多个NFT集合面临风险", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247501011&idx=1&sn=49820b009507005824649b852aefca80&chksm=eaf98c9fdd8e058971209ed2734d3731e6274bac63dcded4e792a4a392a088118f6741682867&scene=58&subscene=0": "【补天平台助力】漏洞挖掘与实战 | 第12期安全范儿沙龙开启", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488393&idx=1&sn=b79df737302cc75d1c4f40b5714bf694&chksm=fb029ed1cc7517c728cb61819a09c6109f646c5a3a149a923c37bba42d50668398088942eab9&scene=58&subscene=0": "【首发复现】Apache Ofbiz XML-RPC 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492848&idx=1&sn=4fb0eb16740dcfaa309edfc1efc30091&chksm=e8a5ee93dfd267850e74b4debf3ee503b99b6baa7298b26cc3bfc1836c3f01294f0648474666&scene=58&subscene=0": "实战 | 一次敏感信息到接口fuzz-RCE", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247541511&idx=2&sn=5dcf4c4725b2be4d27a005cf264b6bb1&chksm=fa9395c6cde41cd0411de8fdaa522a7196c2852611b23b6f76b56052cbbc5f7acf1452484922&scene=58&subscene=0": "欧盟就《网络弹性法案》达成一致,数字产品该如何落实漏洞报告机制?", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247541511&idx=3&sn=a2c1c1d0ac35c8f7bf94e051f239fc8e&chksm=fa9395c6cde41cd02664f92be87957fc2283bcd136038515e308e9ec2b8a9a66d41b1148ff80&scene=58&subscene=0": "微软警告!黑客大肆利用 Outlook 漏洞劫持 Exchange 账户", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521605&idx=1&sn=d69ad328c91648b4037c48199341a24a&chksm=ce461e55f9319743e3987b17ac0d91b1758ccdbcde674ae5ca80c17eaa3669471b24ae775e23&scene=58&subscene=0": "【漏洞通告】Apache OFBiz XML-RPC 远程代码执行漏洞 CVE-2023-49070", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521605&idx=2&sn=3ec7923176828acbc8ed184c9f42a1ef&chksm=ce461e55f93197435bda371e008ced4b4644c3db69c225f34fe1704aad8a9e56c4dbdef899fd&scene=58&subscene=0": "【漏洞通告】Atlassian Confluence Data Center and Server远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500112&idx=1&sn=3d09660676b3b35476a8ff429da2866d&chksm=fe79e5c8c90e6cde74073a6f553029076df69d4af9118ce5459461d358f5e157855fd39b79c7&scene=58&subscene=0": "【已复现】Apache OFBiz 远程代码执行漏洞(CVE-2023-49070)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518302&idx=1&sn=9ede9c29a5c7c063571222672e754926&chksm=ea94b934dde330222c90b770d277247b3ad535c2b85b8082228c17630922ff9ea123ab19691f&scene=58&subscene=0": "Atlassian 修复多款产品中的多个严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518302&idx=2&sn=cdf6b4ed956472e8f544b57d5e1ea074&chksm=ea94b934dde33022986046f72cc06f57a56d288c1d50adebad5308a072310a717ba8358c1480&scene=58&subscene=0": "Sierra:21 漏洞影响关键基础设施路由器", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247517728&idx=1&sn=b7d083805fa168f1f9a6f4a1437286c4&chksm=c2d1fa84f5a67392dac579806841961c376066321c137597776585dfa715cc6f42b09d294d48&scene=58&subscene=0": "高质量POC编写指南", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492927&idx=1&sn=003adb5aa31c74697a42113312b5cfbe&chksm=e8a5ef5cdfd2664a0b74949583d42362768446f385592607ff59530ebbbbfa1b828eaa322b02&scene=58&subscene=0": "漏洞实战 | 数据泄露", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492021&idx=1&sn=2a2b18a0eb673d32ed54d8fa472871eb&chksm=96f7fed8a18077ce4eb8833d5632275f8736d7cb6462bb3952afae761b973f22b2e81fc1a405&scene=58&subscene=0": "【已复现】关于新的Struts2漏洞,你应该知道的", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247489706&idx=1&sn=9a56169023c8a62a73aa193b772e0e09&chksm=fa5ab647cd2d3f5188a4e76e38649d31a553ed54231dc180edfbcb6803f8c4b4b4090de8d5d9&scene=58&subscene=0": "微软推出Defender漏洞奖励计划", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247572013&idx=1&sn=0840617dc38310d2609ce85138ae3877&chksm=e9140a17de63830102cd0944e0754a6e5fadc4557acc44df60ae47cf6542bd2bc0930f24d941&scene=58&subscene=0": "威胁团伙利用TeamCity CVE-2023-42793漏洞展开攻击", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652103528&idx=4&sn=b427fc580e1b855ea8106e5af1664816": "Chrome 120 修补了 10 个漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652103528&idx=2&sn=1e06d2f8ee3ffa12e03499189c16068b": "LogoFAIL 漏洞绕过硬件和软件安全措施,几乎不可能检测或删除", "https://mp.weixin.qq.com/s?__biz=Mzg5MDg3OTc0OA==&mid=2247485111&idx=1&sn=90f858369fbf62b3e153ac6772741a18": "复现RPC中继NTLM身份验证", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247490978&idx=1&sn=55efec99a765c8f369336fca40e09e51": "红队攻防实战之phpmyadmin-RCE集锦", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247487417&idx=1&sn=5f7da5262f421e0557085fcd0f41ff7f": "一款适用于以APP病毒分析、APP漏洞挖掘、APP开发、HW行动∕红队∕渗透测试团队为场景的移动端辅助分析工具", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247484407&idx=1&sn=43dd39386dda94df9f90612c0b5efd89": "没有什么用的任意上传漏洞-Web漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247489845&idx=1&sn=fe9e1973435934c24b5ef8425ed78116": "S2-013远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247511168&idx=1&sn=3ca8ac31e95a194ef65741c7d296a483": "CVE-2020-9496漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247603758&idx=1&sn=286b81ebbe1230f3576f2b14ba8919d8": "高质量POC编写指北", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247490509&idx=2&sn=4fa2c4bfd20be89e53a76410de0410d6": "​二进制漏洞分析-20.TrustZone Task_Phone_Novelchd漏洞(下)", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247490509&idx=1&sn=a6977ea232543521661cd65ccebf6dea": "二进制漏洞分析-20.TrustZone Task_Phone_Novelchd漏洞(上)", "https://mp.weixin.qq.com/s?__biz=Mzg3Mzg3OTU4OQ==&mid=2247489690&idx=1&sn=7cca28dcad6b5a39d3c27a794d1436c5": "JTopCMS审计之目录穿越漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247487668&idx=1&sn=e991634cbf1847a8178ce71c459f5fb3": "(1day)iDocView在线文档预览系统某接口存在任意文件读取", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247490164&idx=1&sn=c8451fbc39667ba9bc58f4d15a45dd12": "SRC漏洞挖掘技巧之抓包-封包、协议、APP、小程序、PC应用、WEB应用", "https://mp.weixin.qq.com/s?__biz=MzU4MjYxNTYwNA==&mid=2247486965&idx=1&sn=757121c599b0f4f17e1a9d4638dbd9da": "Apache APISIX 默认密钥漏洞(CVE-2020-13945)", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650936387&idx=1&sn=b408c97f6445f950f522ef550a82c36e": "【资讯】WordPress 曝出严重漏洞、特别重大、重大、较大网络安全事件,怎么分?", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651126824&idx=2&sn=e075dc8b632573a1a34015c5a715fe49&chksm=bd144cfb8a63c5ed25f65478226c13227bdd771fd43463791d11f21198fc99ec0a0fd9a8cc10&scene=58&subscene=0": "安全头条 |CNNVD通报Apache Struts2 安全漏洞;国内首个数据资产确认指南施行", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486289&idx=1&sn=2a1ca045522f4a624989ae44310bb7f5&chksm=ec6fec51db1865473113195ab03c96e2f633346543b6b712415b0ea502047d61405a93b19bd6&scene=58&subscene=0": "【风险通告】Apache Struts2 目录遍历漏洞(CVE-2023-50164)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247504042&idx=1&sn=87d121e89fec383a1d850f5417da7bdb&chksm=cfcab3bef8bd3aa842cfcc4da69440e7ece128b92dd9b7ef58f9b788f01a8e0d81e18699b568&scene=58&subscene=0": "漏洞通告 | Apache Struts2文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NjU2NDMwNQ==&mid=2247496532&idx=1&sn=db7a87093e946f53b30591b01b8b283b&chksm=e9bfe7eadec86efca1cc3e4eceacb8f509fc6c22352edb0b1e754cacc1f278921afc90ae3988&scene=58&subscene=0": "学术前沿 | 基于深度学习的漏洞检测研究综述", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247541600&idx=4&sn=055e1b6ac4e2182f5c3992e975c8842b&chksm=fa9395a1cde41cb79dd93cae14d0f9518dddfcb782587cded9537807be624a92f757039fccba&scene=58&subscene=0": "威胁团伙利用TeamCity CVE-2023-42793漏洞展开攻击", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664199583&idx=5&sn=f64ac6d0d0afa3738d7699298b69cf64&chksm=8b597766bc2efe707e0b49f505bd77f877d325803f5625c01b02b3ae9e029c9d9541b0ea39c3&scene=58&subscene=0": "CNNVD | 关于 Apache Struts2 安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494168&idx=1&sn=4a7906923cb93fde83d5a5142b7cbc56&chksm=fd74dad1ca0353c7c63197c30a82e16210102e7cedea001e6157388a924ec3f0726a6b3a93cf&scene=58&subscene=0": "CNVD漏洞周报2023年第49期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494168&idx=2&sn=c3358cee930ba48cc43dd58eb0b4ee51&chksm=fd74dad1ca0353c78bbc719765d99ed1d95dec6baa066fd1158037b3a25d2dd598d3fe297808&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231204-20231210)", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247501040&idx=1&sn=0df5681b256638711e2b2ffaa7a44f25&chksm=eaf98cbcdd8e05aa9d74aca3810a555597eefcb712d4cbc5615ef8c81f4651fd05b2860fb4b7&scene=58&subscene=0": "打响人生第一“有效漏洞”!抛开限制,12月继续全面助力!", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247501040&idx=2&sn=955df6a9e2dd972ed2614ee024f01da4&chksm=eaf98cbcdd8e05aa1c07f5f567f337c90a611b55281ceca434239e565c7896bdcdaafc332a5c&scene=58&subscene=0": "2023年“公益SRC”漏洞年度证书奖励计划公布!", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247501040&idx=3&sn=9f31f72d71ad8b8a2c2314a50903fdf8&chksm=eaf98cbcdd8e05aab3860c8191ec286a85a63525eeecfaaba4f1407c2acfec37fdc3e2a4c72f&scene=58&subscene=0": "2023年“专属SRC”漏洞年度证书奖励计划公布!", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247501040&idx=4&sn=6bf7f9153915cbf647178899bf7edf1d&chksm=eaf98cbcdd8e05aa55598792bbb2e895284222a7b003f2e4329147f368c28a80e0c282c9e054&scene=58&subscene=0": "2023年通用型漏洞年度证书奖励计划公布!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518319&idx=1&sn=5714524d6170f4fef9f36a2a9801b556&chksm=ea94b905dde3301385c1f828c130d4e404acb8a7addf6ed7ea4155f5063d9b70b0d539ec90eb&scene=58&subscene=0": "严重的蓝牙漏洞已存在多年,可用于接管安卓、iOS 和 Linux 设备", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518319&idx=2&sn=bf9d3385f82dcb0430391fbbcdc33479&chksm=ea94b905dde3301371201718a96241ce265211d9fad27ce8635a05f96393e941fcd01d62b4f2&scene=58&subscene=0": "超过56%的内部攻击利用的是提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500154&idx=1&sn=ec92c92688997ba8f8f8ffa6ce082025&chksm=fe79e5e2c90e6cf4ea8036a90bc474dd350918093ab8176682b5d757f8a330b32fd8d51735df&scene=58&subscene=0": "【已复现】Apache Struts 文件上传漏洞(CVE-2023-50164)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247504060&idx=1&sn=88f932c02608fd7326d831ab15c48ae8&chksm=cfcab3a8f8bd3abe6be09ab26c3085a72be25134fbed5a1083d902ad730bdae04b73a039e66d&scene=58&subscene=0": "漏洞通告 | 亿赛通新一代电子文档安全管理系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492041&idx=1&sn=d5001248cf982f34a2ea15ed41503f36&chksm=96f7fea4a18077b23c1db8cdb51f4839feca4a3fe751f991c2c277eaaaf727c18813052808fb&scene=58&subscene=0": "这453个勒索风险漏洞,不会有人还没修复吧!!!!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518338&idx=1&sn=689982ebdcb501d2d9f18440472dfa24&chksm=ea94b9e8dde330fe6d2c5cfd834fb076101c90adb766f55b6d2e4934ea3733a0860595c6b235&scene=58&subscene=0": "【已复现】Apache Struts 文件上传漏洞(CVE-2023-50164)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518338&idx=2&sn=96312d2c4afe9d3b538e5b31737ea131&chksm=ea94b9e8dde330fee2ec38ff56eed8254d07670d10f42e6cf1d605399389a5eaf7cea7c437e4&scene=58&subscene=0": "苹果发布 iOS 17.2 紧急修复多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518338&idx=3&sn=f65c78fb4b08158ecb16fe9bf29bdced&chksm=ea94b9e8dde330fee9837926f772f990574078cc704aa52b93307778f4868abada3375fae3c6&scene=58&subscene=0": "Bitcoin Core 客户端出现漏洞 CVE-2023-50428", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498855&idx=1&sn=feb84123985bafafc6071fa1d6915545&chksm=973acf05a04d46138e9aa4fe1a73c773c5a8d4d30d4df366903df6d9698d4972878058740cb2&scene=58&subscene=0": "CNVD漏洞周报2023年第49期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498855&idx=2&sn=e82135fd9d228901e549477822c9f5f1&chksm=973acf05a04d46139fe8b652bbe7fdd16f5c6628dfdcd508acbfbe6a9bc108dff540e0d4d58b&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231204-20231210)", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247503212&idx=1&sn=fd75ffcb8e95e106c02b0467741e783a&chksm=fa5218d2cd2591c489106be3c76f505a88168357e5807df4e5b2a4d73d8eaef111583d828edb&scene=58&subscene=0": "【卫星安全系列三】Leaky Crypto赛题复现", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247492983&idx=1&sn=94ebc640fde3c4b0a956c66e290f16ff&chksm=e8a5ef14dfd26602daed77295645d26d068e98e2f20b693a97fac2f893245c524b14aeddf75e&scene=58&subscene=0": "全自动白帽漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500159&idx=1&sn=7fbc7dcc01fefaa513c65202d020b8fd&chksm=fe79e5e7c90e6cf1b69398b7a3c5b935086eed207921f57f745c572bcb7a70f46a363143789d&scene=58&subscene=0": "微软2023年12月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492120&idx=1&sn=43e475831fd3c516a6450580b29d43f6&chksm=96f7fd75a1807463f7dad705bf38083d48b9f45f3c090ce55d3022427fbffe502053db0c2332&scene=58&subscene=0": "【已复现】亿赛通电子文档安全管理系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502680&idx=2&sn=3a0441a35fa9450eb1f2c27ba118451c&chksm=f258592bc52fd03d58e689b128912c607151deecf083c1b495acd73d5565a9de21289334495c&scene=58&subscene=0": "雷神众测漏洞周报2023.12.04-2023.12.10", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488589&idx=1&sn=3a67279ac2b79f66c5ee1fa1189fc00b&chksm=c2c64346f5b1ca5053c14f40015a97c490c805ed5224d9063ee229d991ca84536e29aff34651&scene=58&subscene=0": "【安全更新】微软12月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247499949&idx=1&sn=8c7f621cfbd8804ab77c2c2c51eb4913&chksm=fe26c5acc9514cbac3a63e3683d9f94ce0f8bb100da643899a1d3cd7c848e2a893a4c0223e6b&scene=58&subscene=0": "2023-12 补丁日: 微软多个漏洞安全更新通告", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247505930&idx=2&sn=124c829f8d41619ee4aac8efdf79dbac&chksm=c144aab7f63323a152c2bee7361cdac264e1991a4e8b6f66d25ab4821f088020e1a0814899d9&scene=58&subscene=0": "通过Fuzzing技术挖掘Free5GC中PFCP协议的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518349&idx=2&sn=da5a15622c08723ed8cacf81f9a2dd55&chksm=ea94b9e7dde330f1ebb50e99491cbc925e6e932730363f189179878a4dc2b3a4ccb480badb86&scene=58&subscene=0": "备份插件存在严重RCE漏洞,可导致WordPress网站遭接管", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247516731&idx=1&sn=b1bc84582f9e3fb33a57cf477d168b07&chksm=eb705c04dc07d512b8ea1eeebd0bb7856371df4b05263936bb3570d819951b810f70f136e0f9&scene=58&subscene=0": "2023-12微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247541186&idx=5&sn=d6668d24685b0cb7025db94894c057f5&chksm=c1e9ad93f69e2485c81dbb2d4df4c325cfe09fc57b856dc4fd44cd9cf9357e26af53c6ded6fa&scene=58&subscene=0": "WordPress 插件曝出关键漏洞,导致 5 万个网站遭受 RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247501071&idx=2&sn=844ddf727754a2b25a0dbc23442a6bfc&chksm=eaf98d43dd8e0455f0b9dc3511a09f82fc78f0f8e0f023459544eecec72adc8e1954aaf189c5&scene=58&subscene=0": "打响人生第一“有效漏洞”!抛开限制,12月继续全面助力!", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247220&idx=1&sn=65ebf9d3ddd083416e71118bbfc58587": "Shiro从入门到权限绕过漏洞1(保姆笔记)", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247534409&idx=1&sn=7796f853a43ddaf6413b029dba2b5d43": "实战| 任意用户密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMTE0MDQ0OA==&mid=2247492934&idx=2&sn=dc498dcf037391ca9870591d09b48f0e": "打响人生第一“有效漏洞”!抛开限制,12月继续全面助力!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652050722&idx=2&sn=5d24ce039ab3faa04e3ee2290d2d2f6b": "【安全圈】戴尔紧急通报PowerProtect产品中的多个高风险漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247503305&idx=2&sn=255e5ca99d2f15e83c120430f3462211": "Apache Struts2全漏洞扫描利用工具", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247503305&idx=1&sn=8a801b422046350831400b8a5bcc9694": "Apache ofbiz -CVE-2023-49070-RCE-POC", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247603928&idx=1&sn=27d7b28fb59ef7d86ad61d699528014c": "通达 v11.8前台文件上传&命令执行漏洞利用分析", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247490626&idx=1&sn=8257610f0a8ed33e0723423c768e30bd": "二进制漏洞分析-24.华为TrustZone TA_HuaweiWallet漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NjU3NzE3OQ==&mid=2247488780&idx=2&sn=611553a78dbba31b9c1cf495428fcc0b": "实战 | 记一次金融项目的高危漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650583976&idx=4&sn=85c0b909bc968725a94a1dc7bc191b2f": "JumpServer 堡垒机未授权综合漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzI0NDYxMzk1Mg==&mid=2247499763&idx=1&sn=987504b4375e30da2f53f763b37be80c": "小白快速上手 SRC漏洞挖掘科普攻略!", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247484458&idx=1&sn=820fe9f3bce4599303ba2dcf763d9a9a": "最新Nessus2023.12.15.1版本漏洞扫描∕探测工具下载Windows", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487111&idx=3&sn=52ee77294e8031bb1709d4cc8fe76074": "漏洞预警 | MLFlow远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487111&idx=2&sn=def98ee8d270cf6936fb7aa7c56d3c03": "漏洞预警 | 亿赛通电子文档安全管理系统任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487111&idx=1&sn=88f7f980d0a8975f21dd540c9fa77918": "漏洞预警 | Microsoft ODBC Driver远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650936940&idx=1&sn=a875fe7875cb8f3fd0edd55090ee97d1": "Juniper新洞CVE-2023-36845浅析", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653026883&idx=1&sn=cbdc45c4e806c53aaa7e44715db4d586&chksm=7e5487f549230ee35a21de3c1cdf075de9899aafcc40881b9fc7bc1b9bab40964d52e305090a&scene=58&subscene=0": "极客公园 2023 年度「中国创新力量 50 榜单(InnoForce 50)」发布", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247511312&idx=1&sn=b67c3819d00d5c70f4695a0414a9207d": "CVE-2023-6063分析|WordPress WP Fastest Cache 插件导致的SQL注入", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247490645&idx=1&sn=d6f0432bed7c9f59972144d89354a6f1": "二进制漏洞分析-25.华为TrustZone TA_SignTool OOB Read", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092504&idx=2&sn=5198610698897085f48b44804f9a05ce": "2023年,Log4j仍是黑客主要攻击的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652050789&idx=4&sn=9a3c30110a606869df4d96fcb204e0a9": "【安全圈】QNAP VioStor NVR 漏洞被恶意软件利用", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247489906&idx=1&sn=dc7660782baa67a0b867631e7ea45ce5": "S2-032远程代码执行漏洞(CVE-2016-3081)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651251113&idx=1&sn=cc87b9792d006beb7aa4c2c48fb3c230": "Apache告警, Struts 2 开源框架存在严重安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247603962&idx=1&sn=6e61f65d6d34a1040116563d222b36c0": "Android App半自动化静态漏洞挖掘技术分析", "https://mp.weixin.qq.com/s?__biz=MzI1MDk3NDc5Mg==&mid=2247485157&idx=1&sn=f86d2fccd3928536eb5237408783cc1f": "Nuclei脚本:专注于检测WordPress漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247487716&idx=1&sn=4cecdf34deb6e4e276e92c579ec69788": "Logbase思迪福堡垒机漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU3OTA4Ng==&mid=2247483948&idx=1&sn=05040156ccaacdec769e231d9c3299cd": "【1day】万户OA check_onlyfield.jsp sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650583988&idx=1&sn=134e11017f745f6c49eb613414a79031": "查头:通过姓名、身份证号获取人脸信息;|2023年,Log4j仍是黑客主要攻击的漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247222&idx=1&sn=6e66364a11904d4142d6491776c9fa26": "Xstream反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDU5OTg3Mw==&mid=2247484792&idx=1&sn=cb367f8a6890f0086054761f0689710f": "【Web渗透】暴力破解漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247484841&idx=2&sn=1681f784a4bb9e338dcee1853332f0b0": "思福迪Logbase运维安全管理系统test_qrcode_b接口存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247484841&idx=1&sn=570d38fa14051d305e9983c89ee2edb4": "​I Doc View在线文档预览系统存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247513015&idx=2&sn=4b3d04efd5193a39630e219622385f97": "Windows客户端漏洞挖掘(红队角度)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521703&idx=1&sn=f4c0f591f75ce84f22139d03bed9d04b": "【漏洞通告】Apache Dubbo多个漏洞安全通告", "https://mp.weixin.qq.com/s?__biz=Mzg5NDY4NTc4NQ==&mid=2247485699&idx=1&sn=27db883c33613ec20c19b1790423ad1b": "[CTF复现计划]2023强网杯初赛 thinkshop[ping]", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650974659&idx=1&sn=d0acc465bcb9d1fbef791c6676148c97": "原创 Paper | glibc 提权漏洞(CVE-2023-4911)分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518402&idx=3&sn=2287f259ca95d49fdb713843ffc8a1b6": "速修复!开源防火墙软件pfSense 中存在多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247493195&idx=1&sn=e1edee59378f9af7fe255486e84f0ca7": "CVE-2023-25157:GeoServer OGC Filter SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494200&idx=2&sn=e7a7acc73774ebc7bbd56dc31e4d6630": "上周关注度较高的产品安全漏洞(20231211-20231217)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494200&idx=1&sn=504ddd160a643535b2b75ef9e9a1f882": "CNVD漏洞周报2023年第50期", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500191&idx=1&sn=0369f149a043c80852ccf488b9d887f0&chksm=fe79e507c90e6c1184dfa3cfef669d1beccca25b9dfe7648ac89b659a54e24d67cd4d6d8d560&scene=58&subscene=0": "Apache Dubbo多个反序列化漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247495995&idx=1&sn=e9039d791611b9005e6f36152f953443&chksm=fd790dbdca0e84ab8123e077738c716116ea212430a24a5682d3cad610a7296845e7a702f8da&scene=58&subscene=0": "安全验证 | Dubbo CVE-2023-29234 反序列化漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492383&idx=1&sn=8114454fed6fbeecf2d1fcdee9c21563": "漏洞复现 || 奥威亚视屏云平台VideoCover任意文件上传", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247498766&idx=1&sn=6140b9e884b927fb06ed10e4b08783ed": "用友U8 CRM系统help2 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247484582&idx=1&sn=c321ae470108f62e60267b00ff1943b0": "记录一次某SRC的SSRF挖掘-top10漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247223&idx=1&sn=5a08616cb41192c23563cfa9beadda10": "FileUpload1反序列化漏洞(学习笔记)", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NjM5MQ==&mid=2247484463&idx=1&sn=a049b8895609757f7eefdcbc32209952": "【漏洞复现】红帆OA iorepsavexml 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247484853&idx=1&sn=9fbcf2294031937794e392190439d8be": "jeecg-boot∕积木报表系统testConnection接口存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489219&idx=1&sn=1ac11a2409444b6be45ed570383b757c": "微软在 Perforce Helix 核心服务器中发现4个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487251&idx=1&sn=5c111d13d6e2e39d582a1e4e128a876f": "【漏洞预警】Zabbix代码执行漏洞CVE-2023-32727", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484489&idx=1&sn=bba1be0af957203e6eb02c8ea82646e3": "【复现】 金蝶天燕未授权远程代码执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247495666&idx=2&sn=799a4b988e36a601642b57d31c32930f": "任意文件下载漏洞的利用思考", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247498757&idx=1&sn=31b9f476d419b111ebff50c2088d8cae": "云时空社会化商业ERP系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247490036&idx=1&sn=1c7e2282dee4dfbdc272dbf5c5998ca7": "新南威尔士大学 | DeepWukong-基于图神经网络的软件漏洞静态检测方法", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652050844&idx=2&sn=6759ad37b4d1c1f86857d832ecc75635": "【安全圈】微软审查发现Perforce Helix Core Server四个漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247492026&idx=1&sn=a9f04cef8307d05ebdd7adfa9d3b7b04": "「漏洞挖掘实战」PPT来了| 一键领取", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247489915&idx=1&sn=ec5ccb4951ca0b494b49e08e0d4b31f7": "S2-045远程代码执行漏洞(CVE-2017-5638)", "https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247502620&idx=1&sn=6a76375691b7e065cad33aec239b7bac": "未然通讯社:WordPress 插件漏洞影响5万余个网站;80%的泄露数据源自云端", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518431&idx=3&sn=a722a374f04431d859bfff55c29c4e71": "微软:热门源代码管理平台 Perforce Helix Core Server 中存在RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518431&idx=1&sn=66c397add674e554ee4125ccac3a3c7f": "新3年旧3年又3年,堪比 Spring4Shell 的 GWT RCE 漏洞仍无补丁", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247504112&idx=1&sn=c56b580ee76ceba18e178931a5841161&chksm=cfcab3e4f8bd3af2137d9591179838b55ad8f589e6861907cce1039ec82b1155d198ebb7bb50&scene=58&subscene=0": "漏洞通告 | 金蝶Apusic应用服务器远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498866&idx=1&sn=03a70d27006307ed37a7444f8b9df879&chksm=973acf10a04d4606d1158f870915a62a01b8b8f5be39a96d38e75ea1acedfd7970d2ca16c047&scene=58&subscene=0": "CNVD漏洞周报2023年第50期", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500197&idx=1&sn=8272717eb61fd478b19549ebe0f3e0ab&chksm=fe79e53dc90e6c2bbe26583a6b7297a23e673208182d34e46fbf39dc3859bd19d519070f2a15&scene=58&subscene=0": "【已复现】金蝶天燕远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247510624&idx=2&sn=80df212b0bb696b9ee9ad0cc8898caeb&chksm=ebfaed40dc8d6456007d5352307a64669391da655d7c8a27d65ba3398d1c39d1d51858d9352d&scene=58&subscene=0": "CNCERT:关于蓝牙协议存在中间人攻击漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492206&idx=2&sn=ae7fe100201eeb409645ff45a9eb2709&chksm=96f7fd03a180741517d36fcc4978e06049ed8f18440f9304cc8b09f9ecef9bb0a00bd6718c8a&scene=58&subscene=0": "【已复现】金蝶Apusic应用服务器JNDI注入致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247541802&idx=1&sn=0904f96e3531d223f1b02b80d0bd3d20&chksm=fa9392ebcde41bfd5c3ff1a30d534539c27c251263f4e1df1ba1e4a5e4a93f4ad03d39e2a6fa&scene=58&subscene=0": "不靠谱的补丁!补丁再次被绕过-声音文件触发的Microsoft Outlook零点击漏洞链", "https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247492997&idx=1&sn=d16fd8919207a5b38d5cf2f069786c3c&chksm=c1842594f6f3ac8250ed7ddb002b524c4bb18dbf28fe32d609d53df22d9f49d42e40fa81de53&scene=58&subscene=0": "CVE-2023-36025 Windows SmartScreen安全功能绕过漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664200365&idx=3&sn=22665542fe29d32cc20c11da38a28608&chksm=8b597a54bc2ef342474a057267d4306896e4cf1de630ba57bade17586ee3d764ec26b7df20c5&scene=58&subscene=0": "CNNVD | 关于Apache Dubbo 代码问题漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664200365&idx=5&sn=6b65e584299f6dde10fe021e5447aa71&chksm=8b597a54bc2ef34232ccafb0badc048156cdaedc62331722b9544f3ed5bb79d4a135184e7941&scene=58&subscene=0": "观点 | 堵住个人信息泄露的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494202&idx=1&sn=2e2677116981ae7c18a94570a5597dcb&chksm=fd74daf3ca0353e5d1fb714903819ddbb36d7b8a414f98eebab512487b7f3dda2d1076b97b49&scene=58&subscene=0": "关于蓝牙协议存在中间人攻击漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247490887&idx=1&sn=0078594a1236b28769dc8711660bb97b": "二进制漏洞分析-29.Huawei TrustZone HuaweiNfcActiveCard 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247498845&idx=1&sn=fca31c385e9d4bf9a11d637fa742fd7b": "海康威视安全接入网关任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650937830&idx=1&sn=e3ea94dcba59b0372cbd3d0e011d4c32": "域渗透历史漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247484911&idx=1&sn=361fee31526379e410abb324ff4a66ac": "【漏洞复现】CVE-2023-6895(附nuclei poc)", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247250&idx=1&sn=0ce9947cd2d2c25da8a71da6401af1a5": "原创 Paper | glibc 提权漏洞(CVE-2023-4911)分析", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247484648&idx=1&sn=a03f4775b7674af9600f54d27a807e02": "一个*份证后四位的验证思路-逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247500347&idx=1&sn=be54aa3fa9d627bf6b1e1f0975949028": "【成功复现】Ivanti MobileIron Sentry 身份验证绕过漏洞(CVE-2023-38035)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247484941&idx=1&sn=ffcf7ae3a0a5636fcf34edac35063001": "用友NC Cloud soapFormat.ajax接口存在XXE 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNTU2NA==&mid=2247485598&idx=1&sn=6e9337c2169669dc27142cb93524a353": "Log4j2-CVE-2021-44228", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492222&idx=1&sn=0f788810f5b2e25f761719add573f0a0": "【工具发布】2023年100个勒索风险漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487306&idx=2&sn=582db8228ebae2920e8398d7c2fe1290": "【漏洞预警】Sudo ipa_hostname 权限提升漏洞CVE-2023-7090", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487306&idx=1&sn=6589b4176032ec619a50b28100549c87": "【漏洞预警】OpenSSH ProxyCommand命令注入漏洞CVE-2023-51385", "https://mp.weixin.qq.com/s?__biz=MzIyNDkwNjQ5Ng==&mid=2247485921&idx=1&sn=9038c2ad016e56e696a37cf667f4fbeb": "反序列化漏洞之Python篇", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652051068&idx=4&sn=177ed8b82676f0083b87cc8440e3eedb": "【安全圈】多个Windows CLFS 驱动程序0 day漏洞正在被攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247493264&idx=1&sn=c0d418aa919964a07b70cb5d8cb751c5": "QVD-2023-45061:I Doc View在线文档预览系统RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458532610&idx=2&sn=ac74a8cfb3bd29cc84db6379b7005f34": "CVE-2013-0750详细分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458532610&idx=1&sn=6efefdddbbbfb4835b26f87a46925285": "早鸟价限时75折!系统0day安全-二进制漏洞攻防(第二季)火热开课啦", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247504165&idx=1&sn=f8be949ca04473d5cf5b49c9889461e9&chksm=cfcab231f8bd3b27b8fa0118be523d5dbec56e26f1d72c317661463e267795dcce86d1fbe450&scene=58&subscene=0": "漏洞通告 | OpenSSH ProxyCommand命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518495&idx=1&sn=c9f248c5f3f6c32802c76b6b1ed8e247&chksm=ea94b875dde33163ad619a2669636190d521db9292d6b488cb2d39f88259ee0cc20e49d86431&scene=58&subscene=0": "速修复!开源通信框架 FreeSWITCH 受严重漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247510674&idx=1&sn=c6ebd402c03b4018f833325ad5f16761&chksm=ebfaedb2dc8d64a4dbe007dc9cda3ccd17e154f1b86d074c5c391ffb0a05a408617c862951a7&scene=58&subscene=0": "从供水系统被黑看美国关基网络安全保护体系的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498878&idx=1&sn=058dc84d1ba82a88350c5c9fb1345b79&chksm=973acf1ca04d460a77e5374affd3172d3e23b2c8e15350b31db50d5c532ee7c63a26e99cf457&scene=58&subscene=0": "CNVD漏洞周报2023年第51期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498878&idx=2&sn=2fa156398806c6ea89bee62f71ce06e0&chksm=973acf1ca04d460ada26a5b7646db4ae01671c6d430d054d99fae164fe39b0d7c515d013b4c6&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231218-20231224)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521825&idx=1&sn=c788092c8e9a487b511991a1cebf0b61&chksm=ce461d31f9319427ed1520cdf43feea209d1d190768e0a64ee977e121c77fcdcdd9c0dc70907&scene=58&subscene=0": "【漏洞通告】OpenSSH命令注入漏洞CVE-2023-51385", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485030&idx=1&sn=15369d4070c36d0781b19172a26bc593": "【漏洞复现】CVE-2023-49070", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247513512&idx=2&sn=e8acbb88e965db2e2a206f838ff2db54": "实战 | 前端加密的用户名枚举漏洞怎么从低危变为中高危?", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493186&idx=1&sn=229273f92424993671a59a48243fc507": "实战:一次Src越权漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247486106&idx=1&sn=3a26cf544b565557b3d32824de21be7d": "漏洞预警 | 网康NS-ASG应用安全网关源代码泄露漏洞【附POC】", "https://mp.weixin.qq.com/s?__biz=MzI1NTM4ODIxMw==&mid=2247500365&idx=1&sn=33f7d1cf216b18cb8292b83d7a35a1dd": "CVE-2023-51467RCE漏洞(附EXP)", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5Mzk2OQ==&mid=2247485623&idx=1&sn=aec533a2530d34a5eef2a5f79c4de6f0": "CVE-2023-51467|SpringKill的Apache OFBiz RCE代审分析", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247484127&idx=1&sn=fffa5375baf41332c2047c404075a344": "【实战SRC】前端加密的用户名枚举漏洞怎么从低危变为中高危?", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247487810&idx=1&sn=5e5ab59c52a3b951cebea07cab8205f5": "【漏洞复现】(1day)铭飞mcms-shiro反序列化漏洞复现", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651253288&idx=4&sn=22a994c69716add355bba855fdacee9d": "如何使用CVE-Collector快速收集最新的CVE漏洞信息", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487286&idx=2&sn=e9ebe0254925cef30dbe71f60472b33f": "漏洞预警 | Apache Ofbiz远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487286&idx=3&sn=a6ccce90f3748263a05a57319df43c06": "漏洞预警 | 四创科技有限公司综合管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487286&idx=1&sn=3ac716778510dae67b9ad175988f4491": "漏洞预警 | 网康NS-ASG应用安全网关源代码泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652051284&idx=3&sn=06f666a486bd70466649bb3ec7689273&chksm=f36e3b14c419b202cd0fb000b25fef59ac489eedf1462c0d3a22529a85d09eb842d9e5b854da&scene=58&subscene=0": "【安全圈】微软发布补丁,修复 Win10、Win11 关键漏洞:可安装恶意软件", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652051284&idx=4&sn=3bc77baea89be3365a702d06f4f4a8e7&chksm=f36e3b14c419b202c8fd52c607615189aecfd43d527fac7dd187037fa528d5e600a7b5cf96c9&scene=58&subscene=0": "【安全圈】英伟达:生成式 AI 可有效协助网络安全,寻找漏洞预测黑客攻击", "https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247488362&idx=1&sn=8341637b195712f0321860a677fae6e6&chksm=fdeb9714ca9c1e0265d3d3f100e2933bc5d5754e33d006953021340143284ddc02ef111b3516&scene=58&subscene=0": "成果分享|Java反序列化漏洞自动化挖掘和可利用性验证", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458532891&idx=2&sn=c931879ff8deaf3cb5a35ce1915b0e4e&chksm=b18d0c9186fa85876b429cf901d11a30f8e7ae7a4039b3b1b17440647761c519936aa3b5ddf5&scene=58&subscene=0": "限时75折!系统0day安全-二进制漏洞攻防(第二季)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493194&idx=1&sn=547802c2786f3c905e56e0b598b27d84&chksm=e8a5ec29dfd2653f238244880f48032f4647e2503bd73b709dfebd3daf1c5704faa7ff59d826&scene=58&subscene=0": "一次简单的五千赏金漏洞挖掘记录", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652051390&idx=1&sn=de4f687321930d917d620ddf2652434e&chksm=f36e3bfec419b2e8bb6d065c97917c973190f85ece577e1ba9955c8e3a5445b96753f63dc633&scene=58&subscene=0": "【安全圈】谷歌OAuth端点漏洞暴露用户账户,多个黑客团伙滥用漏洞窃取信息", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247503523&idx=1&sn=efd7ca5f1261c67840842c9f2eed3996&chksm=fa521b1dcd25920b82f38d3b0f21311fc02f2c2dd9b96172b311f48f019a4a05619ce74fac6b&scene=58&subscene=0": "CVE-2023-2598 io_uring内核提权分析", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494250&idx=1&sn=67ee171fd21cf92e72de4701c0ef0c3b&chksm=fd74daa3ca0353b5ff2c2fc0ed5b459590c7dc6d166db7235d982bb7403f1881e436b55bbcab&scene=58&subscene=0": "CNVD漏洞周报2023年第52期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494250&idx=2&sn=58783d9b97da65d8bd7a31fd0e21e9e7&chksm=fd74daa3ca0353b5fe5b3262c6f435981f42be1a980d282c8ae62bd1802a70f302287251b69a&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231225-20231231)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247572702&idx=1&sn=5f28d592d178761b6bcc6006b2313839&chksm=e9140ce4de6385f2cf3fb665a7c76b111a4c691fdf0259aa2c99cb38a34268f94d67a41c50a2&scene=58&subscene=0": "Terrapin安全漏洞影响SSH的安全性", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493205&idx=1&sn=e8d481fa0c81c1bd5b7c63ba75944de3&chksm=e8a5ec36dfd265208498319394170c3997759f76499a51f475d3e7851806bafc23ba7a608279&scene=58&subscene=0": "一个支付漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTU4MDc5Mw==&mid=2247485111&idx=2&sn=0c59940d48635c05102e50bb28d68e4d": "【漏洞复现】天融信TOPSEC static_convert 远程命令执行", "https://mp.weixin.qq.com/s?__biz=MzkyNTU4MDc5Mw==&mid=2247485111&idx=1&sn=744f15208fadd99590bc6b664054ff2d": "【漏洞复现】天融信TOPSEC Cookie 远程命令执行", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485603&idx=1&sn=685a482237701483e5a217bd494fe14c": "自动化挖掘未授权访问漏洞工具 - IDT", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247484099&idx=1&sn=d5cf1624411754bc668cfbe3a6e31994": "SSCTF-pwn450 win kernel 漏洞分析 (三)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518558&idx=1&sn=f0c9d4e2fed90fb991a8eb33bf83c83d": "【已复现】Apache OFBiz 远程代码执行漏洞(CVE-2023-51467)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247513647&idx=1&sn=1febddda4f76d24d593516f105ec73bf": "代码审计 | 某CMS系统后台通杀0day-SQL注入", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487349&idx=1&sn=aa5cfe9e29d313523af1723045933a22": "【漏洞预警】Perl for Windows 任意代码执行漏洞 CVE-2023-47039", "https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650446957&idx=1&sn=7b48f1a75f86cac9f602b0e42085a125": "绿盟科技入选IDC MarketScape漏洞管理评估报告“主要参与者”类别", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485204&idx=1&sn=3ae6a084905eabbc631eec79d0de5af8": "【漏洞通告】Apache OFBiz 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247503642&idx=1&sn=94ea1cfc7421e906e56a48692b1fd4be": "手把手玩转路由器漏洞挖掘系列 - UPNP协议安全风险", "https://mp.weixin.qq.com/s?__biz=Mzg4MTUwODQxMw==&mid=2247483989&idx=1&sn=54e5bf83224ef59fcd9c99a740b38bbf": "web测试用例逻辑漏洞瞎扯系列", "https://mp.weixin.qq.com/s?__biz=MzU4MjYxNTYwNA==&mid=2247486992&idx=1&sn=2520f7489c1243d7feb144181ab1180b": "(0day)某友CRM系统存在逻辑漏洞(大量资产存在)", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247542277&idx=4&sn=88e7ae91aa0429be4419e518d0640768": "Terrapin安全漏洞影响SSH的安全性", "https://mp.weixin.qq.com/s?__biz=MzA3MzI5NzY0OA==&mid=2247495444&idx=1&sn=a32f47e739de4ecfd227943d6d961511": "漏洞通告|Apache OFBiz远程代码执行漏洞(CVE-2023-51467)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498890&idx=2&sn=1bf1646471d4b2eca248ed42ad47f84b": "上周关注度较高的产品安全漏洞(20231225-20231231)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498890&idx=1&sn=ee0c512193f727432c8213b73ac64821": "CNVD漏洞周报2023年第52期", "https://mp.weixin.qq.com/s?__biz=Mzg2MjkwMDY3OA==&mid=2247484575&idx=1&sn=3c2eeb6eab8e25e9a2e7ed2d2c83582a": "【漏洞复现】海康威视IP网络对讲广播系统远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY1MDc2Mg==&mid=2247504393&idx=1&sn=9a2125f1d8d34a40bf613c478c65b4a3": "文件上传漏洞知识总结", "https://mp.weixin.qq.com/s?__biz=MzIwODc2NjgxNA==&mid=2247483942&idx=1&sn=16a70c2b4e7ce04fc4031ce5aef1544e": "CVE-2023-50164 Apache Struts RCE 分析", "https://mp.weixin.qq.com/s?__biz=MzkyNDI2NjQzNg==&mid=2247485210&idx=1&sn=4b41b2ac302eda8c53a3b4d820f38f03": "cnvd通用型漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518594&idx=1&sn=42344cd84f041e0bd0049ef5c7bbdf84&chksm=ea94b8e8dde331fe2a1df497c6a9068b0b510c2924d9229f7c28997fee0d5b1c8a1d81cd78aa&scene=58&subscene=0": "严重的Ivanti EPM 漏洞可导致黑客劫持已注册设备", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493264&idx=1&sn=678026cc9d028a1f0e39ec923d1c2758": "如何测试Cache相关的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247496421&idx=1&sn=f6268708334440cba7b8aa10a71a3b30": "【0day】全^程^云*OA之未授权访问+SQL注入", "https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247485184&idx=1&sn=ca21cf67f658ab63b117f09088a81127": "《漏洞战争》修订版说明", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484124&idx=1&sn=7fffed1594092c092d26c0ce99e36cf7": "全程云OA userIdList存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652051622&idx=3&sn=005614118ed253c0439099c981ed616c": "【安全圈】Apache ERP 零日漏洞补丁存在被绕过危险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652051622&idx=2&sn=a83d6eb91fc4633a343c65e4a2000b4c": "【安全圈】​Chrome 2024 开年首更修复 6 个漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458534230&idx=2&sn=ee6ed8900f4f9ab3fc53b56ee351acd6": "限时75折!系统0day安全-二进制漏洞攻防(第二季)", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247485361&idx=1&sn=7cc40fc17aaeb009504108b997bc1dd4": "某网盘逻辑缺陷GetShell0day", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247503632&idx=1&sn=56f2ca3e993d4bf7ca76a124848e355a": "CVE-2024-21633 - \" Apktool 中的任意文件写入漏洞\"", "https://mp.weixin.qq.com/s?__biz=MzI2NTc1ODY0Mw==&mid=2247485777&idx=1&sn=566b578449ed08e3370c308347c77a63": "实战之常规漏洞快速挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg5NzcyNTk3OQ==&mid=2247484061&idx=1&sn=168a14c5ce0e7004e8deea4debd2e0ec": "Apache Ofbiz CVE-2023-51467 图形化利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485452&idx=1&sn=a1fce6925516b98e4135c1afa0b00c07": "U8cloud系统PrintTemplateFileServlet接口泄露敏感信息漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247484860&idx=1&sn=73e5f653747178d26c0d05e05bfa8735": "网康应用安全网关(NS-ASG) SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTQyOTk3Mg==&mid=2247484737&idx=1&sn=666e84a15afa2ef8b21f456bc1fc9b44": "某蝶多接口任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247486456&idx=2&sn=fe2c70f0bdcd38d0d86750be8324261a": "随手挖洞|一次捡的逻辑漏洞 cnvd", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651253930&idx=3&sn=2079e24516d0d61506bfb70238d6e7b9": "Terrapin 漏洞严重影响 SSH 协议的安全性", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650585264&idx=4&sn=7710d69a7fb6bda30457077a241c003d": "POC管理和漏洞扫描集成化工具", "https://mp.weixin.qq.com/s?__biz=MzkyNTU4MDc5Mw==&mid=2247485128&idx=1&sn=f5aac80f3732be96a2b4db7d88d4de94": "【漏洞复现】睿因科技-wavlink-路由器-多处前台RCE", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487362&idx=3&sn=a5588f71bd7594b31d522a7d670c896c": "漏洞预警 | Perl for Windows代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487362&idx=2&sn=69300abb5b39a86e6c26634c73703ae2": "漏洞预警 | DataX-Web命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487362&idx=1&sn=3a9769423b2b16a43a309eb10a1b3e1e": "漏洞预警 | Apache DolphinScheduler远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247484415&idx=1&sn=1615b04927829e42c71b1e488521b415": "禅道”多版本”通用前台RCE利用分析", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650938936&idx=1&sn=c3bdc96b9b41ba91f2577c4e94d8809a": "网站漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=Mzg3MTY4NjUyOQ==&mid=2247485580&idx=1&sn=3700fc4eb7038d6ed97df9038c5347c0": "Win11 RCE漏洞复现CVE-2023-38146", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247507364&idx=1&sn=9ed96c83f35b36f01929425098d4d737": "宝塔渗透手法总结,从常见漏洞 聊到 宝塔维权 再到 bypass disable_functions原理", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247499161&idx=1&sn=da190b71ed15dba790089241c4692149": "【0 day】全程云OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484130&idx=1&sn=0ce0f6b06ed6b6319e8d14d5bacaa93f": "OwnCloud敏感信息泄漏漏洞复现-CVE-2023-49103", "https://mp.weixin.qq.com/s?__biz=MzkwNjUwNTg0MA==&mid=2247491080&idx=1&sn=70314d36d97789f674c9e7ba88895e35": "从Reids漏洞聊到getshell手法,再到计划任务和主从复制原理", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQ0MTI2MQ==&mid=2247484464&idx=1&sn=90756c3a09dc2d4c75839ff510d9940a": "揭秘垂直越权漏洞:某企业后台管理网站的安全隐患", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485605&idx=1&sn=5d71047e92a8ccc2749440cb6bc618ae": "综合性的资产收集和漏洞扫描工具 - Komo", "https://mp.weixin.qq.com/s?__biz=MzU4MjYxNTYwNA==&mid=2247487007&idx=1&sn=c4ab813c21858b856286313c54a7d90f": "美国国防部注入漏洞报告分析", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247489674&idx=1&sn=5dcb9c543fb7d0efecacb59431a8186a": "JS接口提取,漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzkyOTQyOTk3Mg==&mid=2247484749&idx=1&sn=6c6ac776d3239af93e0008a98f522a96": "某捷未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODQ0MDc2Mg==&mid=2247484770&idx=1&sn=1fbdbec38b003f3edb61ba4290cc76e7": "JAVA代码审计-SQL注入漏洞一(配套视频)", "https://mp.weixin.qq.com/s?__biz=MzkwODUxMDUwMg==&mid=2247483775&idx=1&sn=33e195e59fd5d9d2e5c851e93d220022": "深xx日志审计rce", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247484870&idx=1&sn=c8704f12278cdbee0c8baef1c4d4e8cb": "用友CRM存在日志信息泄露-附上POC", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247484418&idx=1&sn=8ea443f75bb15616ecbb0b35499ee892": "天X信TOPSEC Cookie 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzAwNzA4NA==&mid=2247484398&idx=1&sn=8ce500468ce52c32a55571c07844a8f2": "原创-逻辑漏洞之用两种方法在微信登陆openid验证情况下成功刷票", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247491091&idx=2&sn=92a18683c56c85d2399a946ebe902a7d": "二进制漏洞分析-35.Samsung NPU的Reversing与 Exploiting (第一部分下)", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247491091&idx=1&sn=9331aa80e6ffdef99a260f7c8acec73b": "二进制漏洞分析-35.Samsung NPU的Reversing与 Exploiting (第一部分上)", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247486479&idx=2&sn=255d8fda12e58fc5720785047d15da4d": "一款自动化挖掘未授权访问漏洞的信息收集工具", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247490178&idx=2&sn=aa1c9098329f9501f8f91574b0134919": ".NET 分享两个任意文件下载的漏洞场景", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650939558&idx=1&sn=a0f96c345dd5495c66ec7d110e1d1078": "afrog漏洞检测工具的官方PoCs库(1月6日更新)", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485177&idx=1&sn=6bc01d375f45fadbd431bc784eb83169": "[漏洞复现]CVE-2024-21645", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247511829&idx=1&sn=3ff4689f4b45aaa7eebe7b9c3b2b2e60": "Eyoucms的sql注入复现(2019Bversion)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODQ1NzU4MA==&mid=2247484380&idx=1&sn=08f639e90344678441a9d83382a12dd6": "RCE bypass的一些小技巧##", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652052114&idx=1&sn=861d34cc832090425f9e0d6406d18e02": "【安全圈】微软 SharePoint 被曝严重漏洞,黑客可远程执行任意命令", "https://mp.weixin.qq.com/s?__biz=MzkxOTUyNTg2MA==&mid=2247483773&idx=1&sn=597b234c9823cd14adef76d5e5fc436f": "一款常用的API漏洞扫描工具|渗透|简单实用", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489079&idx=1&sn=13e547db4df7a3fb7f602d2c64ded85f": "【二次更新】Gitlab 任意用户密码重置漏洞(CVE-2023-51467)风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247485742&idx=1&sn=30b8e858fd596163cd1ec3dfae11481f": "GitLab 任意用户密码重置漏洞复现(CVE-2023-7028)", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247485058&idx=1&sn=b1ab3f9382e4c137521d30a7226579a5": "恶意软件家族:国家行为者武器化Ivanti VPN零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247604931&idx=1&sn=0f472837caafcb89b659ec82bde4946d": "漏洞复现 | CVE-2023-7028 GitLab 任意用户密码重置", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247490669&idx=2&sn=d8ee079e7b63c4f0903cb8efa25d31c0": "研究人员为Apache OFBiz漏洞CVE-2023-51467创建了一个POC", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247490669&idx=1&sn=a5b38a922a887ff362c6951ab2df28ac": "JUNIPER NETWORKS修复了其防火墙和交换机中的一个关键远程代码执行(RCE)漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4MjYxNTYwNA==&mid=2247487047&idx=1&sn=598bd6f51f8d764181b4650e1875ea99": "ssrf漏洞简单学习解析", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790249&idx=1&sn=da97bd44b1200398721fa6fba27fe3d0": "CISA:Microsoft SharePoint 的关键漏洞已被积极利用", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247490521&idx=1&sn=716777680dde08253775c27f7054c449": "记一次利用wx绑定漏洞的渗透过程", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487441&idx=3&sn=97ae689590f7e484d5663635b52bc512": "漏洞预警 | GitPython代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487441&idx=2&sn=1ad806bbc860c5ed018931c344f8039b": "漏洞预警 | pyLoad远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487441&idx=1&sn=38244c484c5521085d49b15f696ad1c3": "漏洞预警 | 百卓网络Smart多业务安全网关智能管理平台文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247490283&idx=2&sn=de0310b48443b46550819428098a1571&chksm=fa5ab406cd2d3d1007f52bc19ab9938921010b4a3861bb854cad79e00a088ad91506e5b6c01f&scene=58&subscene=0": "使用AspDotNetWrapper复现反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247511863&idx=1&sn=7b66a1a7bceb5c97f3ef1e0ae966f5ec": "ByteCodeDL能找到log4shell(CVE-2021-44228)漏洞吗", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247493719&idx=2&sn=229d4ab72b0f2f074476d9a3b80de162": "漏洞扫描VS渗透测试", "https://mp.weixin.qq.com/s?__biz=MzkxNzQwNDc2OA==&mid=2247484193&idx=1&sn=aa53d085f386ee8f5ea5b76528585509": "某OA系统快速代码审计(0day)", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247513968&idx=2&sn=51a4c7fa70ce0f5e607fbb4831592393": "实战 | 奇怪的万能密码登录漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNjkxMDM4Mg==&mid=2247484480&idx=1&sn=b2d97351fe47b99fdb20e44f418128ab": "【漏洞复现】Gitlab任意用户密码重置", "https://mp.weixin.qq.com/s?__biz=Mzk0NDUxMjAzNw==&mid=2247485231&idx=1&sn=f8e3acc4c823e5419a9420433dae18c8": "【漏洞情报 | 新】用友GRP-U8 ufgovbank XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652052133&idx=3&sn=2bb79dea2d64d92c5a5670cfc17fe1f3": "【安全圈】男子利用网络漏洞刷取游戏金币,非法获利413万", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652052133&idx=2&sn=17dd221e06ead486b0202c346fa2370e": "【安全圈】辽宁一男子与公司发生矛盾利用漏洞致公司200台电脑瘫痪", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247489706&idx=1&sn=4ac7e109cb0f45a036b13eb714cdffad": "统计路由器CVE,便于漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247484964&idx=1&sn=57005357640cc6531ffc21c58ea3c5d7": "最新Invicti Professional v24.12漏洞扫描器下载", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247490677&idx=2&sn=6dd1d20cd90f62cc32ed4fd2d37abfb9": "GitLab修复了一个严重的零点击账户劫持漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwODc2NjgxNA==&mid=2247483963&idx=1&sn=8ca5d1fd9e5b437ec7bbed8db474e791": "CVE-2023-7028 GitLab Account Takeover漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247484259&idx=1&sn=07ab08a8d8344f903112230ec4fd7fe9": "【python专题】poc编写过程万能正则获取字符串", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651254677&idx=1&sn=0b1bce185c0dfe8af942b7c955b227fc": "思科又曝高危漏洞,黑客利用可获取 root 权限", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650585644&idx=4&sn=fa97dfd8cec7570ffa1168f9360e36b2": "Nacos漏洞综合利用GUI工具", "https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjU4NA==&mid=2247485307&idx=1&sn=6ab01704ba47cefea8a8506a7fe473f8": "GitLab任意用户密码重置漏洞验证脚本 CVE-2023-7028", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458535564&idx=2&sn=3b95c8dbe5ab853b62511aef7cc6eca9&chksm=b18d760686faff10b19ab34019a9418e10044fe93b9a2040412d8f82d9bacf24a7e33ca3b4d2&scene=58&subscene=0": "立即更新!GitLab曝满分零点击账户劫持漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518669&idx=1&sn=e9e78678e6c35cd6c0c37b638d5a988c&chksm=ea94b8a7dde331b16bdf8306a2700a04ea240bc5baa204b72ab3c9664a58b77c6fc92b1841f4&scene=58&subscene=0": "GitLab 提醒注意严重的零点击账户劫持漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518669&idx=2&sn=0cbdae2b9be2d7406ffaea5ba7dc47d1&chksm=ea94b8a7dde331b1ffbd02134c098d7117b1af631461588e39a663cd6ee5834bc93977380167&scene=58&subscene=0": "Juniper 提醒注意防火墙和交换机中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494322&idx=1&sn=95f95527d0d6a4c26efaf40c8db7e22a&chksm=fd74da7bca03536d79ffa0ac0e4f107f2459c9593070ebd679839e502de06f3e7270aa637dfd&scene=58&subscene=0": "CNVD漏洞周报2024年第2期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494322&idx=2&sn=91db3d4d3e7008110d0256136ff89d42&chksm=fd74da7bca03536db67fe860e498c07d3ce9d90d7249ff9b8d006cf06b0d4d17cff2e3a9f98a&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240108-20240114)", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247542501&idx=3&sn=d545579a7c31094ce37d7cd5df7bf000&chksm=fa939024cde4193292e882131fa6b28f7d375be866355e706e10736acceef4c3a622c0b7c842&scene=58&subscene=0": "思科又曝高危漏洞,黑客利用可获取 root 权限", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651127391&idx=2&sn=3993191b5ac9da9028f641757bf25bee&chksm=bd144e8c8a63c79aeadf9e898c53abecd36bed19d67a86cbc76e8549671c0a62baa30f545887&scene=58&subscene=0": "CNNVD通报GitLab安全漏洞情况", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500378&idx=1&sn=693abcb97a4f26419a806a6acde76d1a&chksm=fe79e6c2c90e6fd400dbe66c582352ed778297c610ab813e8da020152342974a40e8bb56575d&scene=58&subscene=0": "Google Chrome V8越界访问漏洞(CVE-2024-0519)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500378&idx=2&sn=c1de4bf7ee4b5e028aca97ce5afa3bb0&chksm=fe79e6c2c90e6fd4ec733f500f2ef0157086ca1ae9400540d34f336f48cfbc8f5eb2a527c51b&scene=58&subscene=0": "NetScaler ADC 和 NetScaler Gateway 多个在野漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500378&idx=3&sn=8107c897672c810d8e15a530abae7e28&chksm=fe79e6c2c90e6fd48831b879d1f4047cee23a4a9f041cecf9c62cea185daed1da001dab45c90&scene=58&subscene=0": "Oracle 2024年1月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518689&idx=1&sn=0c28377e9cd188322fb8de2c9b984d4f&chksm=ea94b88bdde3319d66fb2901eac70e83e8071ee933f5b8bdb067917e92e94c9d23efc23f4ea8&scene=58&subscene=0": "Citrix 提醒注意已遭利用的两个 NetScaler 0day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518689&idx=2&sn=f6a9ea96b68970bcf3bac320b9b70aeb&chksm=ea94b88bdde3319d56d7ec033b60e8a4c709203172307dc7eb3aafefc99a51291f6403a28549&scene=58&subscene=0": "Opera 文件共享特性中存在RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247504448&idx=1&sn=2e787622b30dbc6b56009ea820f9f7c8&chksm=cfcab154f8bd38422577416e12c34733faabc259affa02eaba20c796c1d740987093a9261f51&scene=58&subscene=0": "漏洞公告 | Ivanti VPN远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247501421&idx=1&sn=94df57d1f3a9e59fe5c96338bc3e5e52&chksm=fe26c36cc9514a7a55d07097556ac3108682d7601f14e98f71b847b3aff92b43bfa48164dc8c&scene=58&subscene=0": "CVE-2024-0519:Google Chrome V8越界访问漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247521990&idx=1&sn=1bd6f0dfed73ed069ee986d8e92382c5&chksm=ce461dd6f93194c0b383f736e652a52f6abb398ad2295ef5e54b543b7f13ac9f933fcd08618b&scene=58&subscene=0": "【漏洞通告】VMware Aria Automation 访问控制错误漏洞CVE-2023-34063", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247496621&idx=2&sn=065a16a233444256e0d44969744ca292": "CVE-2023-46226 Apache iotdb远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MjgxNjk2NQ==&mid=2247485978&idx=1&sn=7848b370ea79a04ab439ccc88076e454": "叮~你有新的速递!CVE-2024-0305 RCE漏洞(附EXP)", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484513&idx=1&sn=7347c6f5e544e86059272113c40443a5": "【复现】Confluence Data Center & Server 远程代码执行漏洞(CVE-2023-22527)风险通告", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485125&idx=1&sn=c0543de5c0bfc19175d45ca519c77190": "CloudPanel makefile接口存在远程命令执行漏洞CVE-2023-35885 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652052543&idx=1&sn=2b6c3d6ad8e3aea79dfd1ca08d736bcb": "【安全圈】开源TensorFlow机器学习框架存在漏洞,黑客可借此发起供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652052543&idx=3&sn=248cf1a0d5c0ee4c14491f00733fe159": "【安全圈】国家漏洞库CNNVD:关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652052543&idx=2&sn=a148405857433afeaa116eb80ffd4953": "【安全圈】UEFI启动固件曝出大量漏洞,数百万台计算机面临数据泄漏风险", "https://mp.weixin.qq.com/s?__biz=MzkzNzQwNTg3NA==&mid=2247483933&idx=1&sn=5efe694a2e666796055b33ab861d54ea": "因 API 的错误配置导致 PII 泄漏漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247484685&idx=1&sn=fe0b16c77f9ac736c7cf6bca134aadff": "如何拿抓取互联网上的0day???", "https://mp.weixin.qq.com/s?__biz=MzkwNjYzMjc3OQ==&mid=2247483904&idx=1&sn=4294845950b0b7fbda384c679d1698eb": "[1day]泛微系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489102&idx=1&sn=6f4f1799d9d32f7f694e285d8ddc1094": "【二次更新】Atlassian Confluence Data Center and Server存在远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMjg0MjM5OQ==&mid=2247486944&idx=1&sn=62d08cdd25c018c1ce78f643aa62bb0b": "你还不会批量刷漏洞交CNVD?我来教你!", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650586037&idx=4&sn=a37d74510ae8bd4e7ccd78bfd976399f": "统计路由器CVE,便于漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650586037&idx=3&sn=e173323b9b9da130e5ef46989c9afa62": "【Web实战】某头部直辖市攻防演练纪实-如何不用0day打下n个点", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790291&idx=1&sn=fb67c0a642a483346273e266e4214569": "Mandiant报告:APT黑客利用VMware漏洞作为0day漏洞攻击长达两年", "https://mp.weixin.qq.com/s?__biz=MzUyNjk2MDU4MQ==&mid=2247486045&idx=1&sn=cc49e476f7b66ea1e3d1aa7aa68ed0d5": "GB-T 34946-2017 C#语言源代码漏洞测试规范", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485309&idx=1&sn=2395a9f4984536cc3ae8c34dcf1a83db": "CVE-2024-0738漏洞挖掘过程学习", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247485098&idx=1&sn=4eef9be91214dc52f4619a4324bd2dea": "用友portal接口存在任意文件读取漏洞(新)-漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247611421&idx=1&sn=62a533b125e0fbd0ede8344698d8eef9": "知识星球 | 安在新榜· 2024企业网安CSO发展调查报告;新增资料:数安平台神兽方阵、网安漏洞态势、云计算安全等", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484168&idx=1&sn=f40a5290be430019f2d6df27c7b16b74": "华夏ERP getAllList账号密码泄露-CVE-2024-0490", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650586050&idx=1&sn=9041dc3dd535fc7165eab3b6dec8e09f": "新骗术,警惕!|国家漏洞库CNNVD:关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247483889&idx=1&sn=6ab8a6a0d5c555b49a44e46354cd45e4": "【赏金猎人】利用盲ssrf漏洞扫描内部端口", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247485108&idx=1&sn=392c9e58463fdc2b4e87b9b0f763d797": "CISA发布紧急指令:Ivanti产品零日漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODk2OTcxMw==&mid=2247484605&idx=1&sn=06e70b41bc802dde785d5277adae4c6b": "漏洞复现-cellinx 摄像机 uac.cgi 未授权添加用户漏洞(附exp)", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247605216&idx=1&sn=9e1ed450e6d4ee9ffd5cabe323151bbd": "从webpack开始发现的漏洞大礼包", "https://mp.weixin.qq.com/s?__biz=MzI3MzUwMTQwNg==&mid=2247485847&idx=1&sn=d48e9542bea32076760fed6cf06c3da8": "重生第五篇之弱网环境下业务逻辑漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485287&idx=1&sn=a39cfe9bf0a9507b6684a54f332e14d2": "SpringBlade export-user SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247486717&idx=2&sn=26a6ecc9fd4c4a105f2be467413dc9d8": "漏洞扫描神器AWVS又更新了,全新界面,快来下载体验吧!", "https://mp.weixin.qq.com/s?__biz=Mzk0NDQwMDY1Nw==&mid=2247484141&idx=1&sn=752a7dbde19da790f1f5545d4fa90c14": "Burpsuite 与 Chatgpt 联动,AI自动化漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247485087&idx=1&sn=84b6d67167e8270ffeb1c49dff1f1808": "2024最新AWVS∕Acunetix Premium v24.1.24高级版漏洞扫描器Windows∕Linux下载", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247490436&idx=2&sn=2fe805bb24737b18065072b8317d1a2b": ".NET 分享ViewState反序列化漏洞个人总结", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485359&idx=1&sn=6c7fe6f71dde615a6b624a7b9b19510b": "CVE-2024-21642", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247485161&idx=1&sn=ed4a219ecd6fcb7e5ab4205fbf2bb5e8": "广联达企业管理系统DataFile.aspx存在外部实体注入漏洞(新day)-漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487452&idx=2&sn=48a4c68cd8d3dedb142ba8c9b80f464a": "【漏洞预警】GoAnywhere MFT 存在未授权创建管理员风险CVE-2024-0204", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487452&idx=1&sn=5ef3c649a65b858d1377525049c30f87": "【漏洞预警】Spring Framework拒绝服务漏洞CVE-2024-22233", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493360&idx=1&sn=c92275cf5dfd00d278fd9123ad6b8f6a": "实战 | 记一次授权令牌中SQL注入漏洞挖掘​", "https://mp.weixin.qq.com/s?__biz=MzkyNTU3MjA3OQ==&mid=2247484545&idx=1&sn=27464473d82a213d8a11d46812ba2013": "【漏洞复现】Confluence 远程代码执行漏洞(CVE-2023-22527)", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247487883&idx=1&sn=8a007a74708c4c43a9474b1bdde9de2e": "SRC实战 | 任意用户相关漏洞的多个姿势实战", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485172&idx=1&sn=72323ab469c0af887665b042b33b29cf": "Atlassian Confluence存在远程代码执行漏洞(CVE-2023-22527) 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485629&idx=1&sn=96f6651226feb0a1e9c824d90a09b16f": "资产梳理漏洞检测工具 - SiftScan", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5OTQyNQ==&mid=2247484551&idx=1&sn=b87dcec48b8614d74d77e1fdb3b97b8e": "赏金猎人|兜兜转转拿下平台充值漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650274947&idx=1&sn=924465610d5aab79b1ed8c046371cf93": "荣耀加冕丨盛邦安全连续三年入选工信部CAPPVD漏洞库技术支撑单位", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518729&idx=1&sn=022dec20b1d19ed71466fd78c5c9b7c1": "苹果修复2024年遭利用的第1个0day漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MDI0OTQwNw==&mid=2247484370&idx=1&sn=733e31295113c89afa9fe3d2de3574e5": "每日奇葩逻辑漏洞分享之虚假的验证码", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664203823&idx=8&sn=7e6e0a6251080fdf29c2db676a91f28d": "关注|第四期移动互联网APP产品安全漏洞技术沙龙在京成功举办", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458537232&idx=3&sn=f3969f9938f4d236fd9dd63d22a403e1": "本周更新:命令∕代码执行(一)原理和基础知识 | CTF训练营之Web篇", "https://mp.weixin.qq.com/s?__biz=MzkwNjYzMjc3OQ==&mid=2247483914&idx=1&sn=807ae0fad2a5ddd66aa90e165a8118f8": "[1day]用友NC某接口存在任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247509370&idx=1&sn=b11aeebf5de3949a3210c64063d1c1c2": "揭秘LIVE勒索软件利用IP-Guard漏洞的技战术", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500401&idx=1&sn=a4388df0dde63a24c730be991c3f462c": "Apple WebKit 代码执行漏洞(CVE-2024-23222)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247504566&idx=1&sn=b4cffae1d9549f2b6ce8f17e1f310455&chksm=cfcab1a2f8bd38b453dc998e758aac94c128b996be361c68966578e081b72bb5bb89bd9983ef&scene=58&subscene=0": "漏洞通告|亿赛通 新一代电子文档安全管理系统 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485388&idx=1&sn=e2e4ba98d73eaa8d9c490b6b40146600": "CVE-2024-0713", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247485167&idx=1&sn=5f820a812808d46d5d82adc429e327a3": "金和OA-C6JHSoft-WebSQL延时注入漏洞(新接口)-漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487460&idx=2&sn=c02c722bc18d588bd4fb38d1cc5e6229": "【漏洞预警】亿赛通电子文档安全管理系统 文件上传&命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487460&idx=1&sn=11a2f911329871ccc77c39944f39688f": "【漏洞预警】SOFARPC反序列化漏洞CVE-2024-23636", "https://mp.weixin.qq.com/s?__biz=MzIyMjkzMzY4Ng==&mid=2247503305&idx=1&sn=6f84a68af7139a90fa9bd6a0d5a7fe70": "landNFT - Mint权限控制错误漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247535821&idx=1&sn=19db585a619f261069956ba1ee17558d": "JAVA常用组件未授权漏洞解析", "https://mp.weixin.qq.com/s?__biz=Mzk0MzQzNzMxOA==&mid=2247485963&idx=1&sn=280ce428fca96dd216e3ca60abb0f0d8": "爆多个漏洞 | Pwn2Own Automotive 2024 第一天结果", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484191&idx=1&sn=0b87288a6c011f7728235bb7de0c5cf0": "Monitorr 任意文件上传-CVE-2024-0713", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247606564&idx=4&sn=ea07b1244f523036c551194030b8411b": "奇安信应急响应报告:漏洞利用持续上升,主动威胁发现能力亟待加强", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657165325&idx=1&sn=702348e7a7014ec9780644d1c35dfefa": "记一次敏感信息泄露引发的逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518740&idx=1&sn=f97575a3c85c3e1d61c6ede1e31c0f1d&chksm=ea94bb7edde33268c42b5b9a74eb3ee30ceb5c34a906ff95500378175e985f1b8e0554fbcf3d&scene=58&subscene=0": "速修复!Fortra GoAnywhere MFT 中存在严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247490470&idx=1&sn=a38fa2af969ac8dbd8d2d357794fc70b&chksm=fa5ab54bcd2d3c5dcac1f3af6b00d7b0c14db6c545d8a44aeeb72c13341330e440a41d068e84&scene=58&subscene=0": ".NET 分享一款用于命令执行的免杀WebShell", "https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247485230&idx=1&sn=03b8d0163327afd00b879fc7b89daec9&chksm=cfa49cd5f8d315c3cac20e198f8bdb4f93ce737c411c8104fb2b1e7c75cff57646a8da13b934&scene=58&subscene=0": "人工智能供应链安全专题--ChatGPT 中的高级 API 攻击以及AI供应链漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522014&idx=1&sn=0472b9c3e9ff67022262a656ff84fbde&chksm=ce461dcef93194d8f2b2adf5f0c0713e5c9f997ca689ba93fe1075205674e240ee71d85f5fa7&scene=58&subscene=0": "【漏洞通告】GoAnywhere MFT身份认证绕过漏洞CVE-2024-0204", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493375&idx=1&sn=3a85017cca3186595b241a31c6e32cf3&chksm=e8a5ec9cdfd2658a2f5b34e514f2187b54879c86384c11abc5c0eb4387073514119ea2c70684&scene=58&subscene=0": "实战|记录对某网站漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500406&idx=1&sn=e8afb8d60ccf2620798bbb5c0a68e6fc&chksm=fe79e6eec90e6ff8bc4af9b4da1bd592dc2d67675f08af73fcd880cb14ece31efd86c35d6ded&scene=58&subscene=0": "GoAnywhere MFT 身份认证绕过漏洞(CVE-2024-0204)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247501797&idx=1&sn=dde0b853c4020d5c55e9d341e6ae332a&chksm=fe26c2e4c9514bf2d9336c733f3129d875ede4e17197fc69278386d13e069e12d312c6eb9237&scene=58&subscene=0": "CVE-2024-0204:GoAnywhere MFT 身份认证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247493107&idx=1&sn=ebd4144a1a8adea3d08a23a62855025c&chksm=fa78e4bfcd0f6da9d8aa4733894105f12a7caae167574ee1e8667b621e8092be5b53ac3272fa&scene=58&subscene=0": "OPPO正式入驻YES WE HACK漏洞平台", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493382&idx=1&sn=025e6263ffc42bae045be0ed2d37b0f5&chksm=e8a5ed65dfd264739c27260e7f00917910e3cb01fbbf5ff05b87cb335b2978e704afc8ec205f&scene=58&subscene=0": "漏洞挖掘|一次某站点的任意用户密码更改漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247504598&idx=1&sn=fcd3afb47246b1127bb6a7958ad1b98b&chksm=cfcab1c2f8bd38d401712af3a38052994f43758e07a9afa73a296ddcd0666101fd35f5073750&scene=58&subscene=0": "漏洞通告 | Jenkins CLI 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486310&idx=1&sn=a479b9e123d0563c1f280119fb731b2d&chksm=ec6fec66db186570216c5a985ced2ca5becdbfd820a74348c29f832d8c968735f0ee9de370b5&scene=58&subscene=0": "【风险通告】Jenkins CLI 任意文件读取漏洞(CVE-2024-23897)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518760&idx=2&sn=d82d599134c7b2a410f4ccfe05d73d96&chksm=ea94bb42dde33254d6f854bc5b194c69fc4038bdbac099637195d80d4e0b19bd6ede6758ace6&scene=58&subscene=0": "思科提醒注意通信软件中的严重 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500417&idx=1&sn=44bcfd615029cc3d14562f02341f2908&chksm=fe79e619c90e6f0f609c74642a33101eb4177e77f2e0a49b876c133512a437b1bf1e35d5f355&scene=58&subscene=0": "【已复现】Jenkins任意文件读取漏洞(CVE-2024-23897)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652053020&idx=4&sn=21d6238df39ed9cd318723d4cf685a2d&chksm=f36e325cc419bb4ad2a1b1108b7d53e41ce752743dfb172657e104eea3263816ff3bb8e2a6a6&scene=58&subscene=0": "【安全圈】利用特斯拉、电动汽车充电器、信息娱乐漏洞,黑客从中获利130万美金", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488560&idx=1&sn=a62d63df093f1476423b6d012d742db2&chksm=fb029968cc75107ef3b765039cb6eaf1495b3f0d6b1ffdb2a304df3fbaafae4b83d69c3cfd34&scene=58&subscene=0": "【已复现】Jenkins 任意文件读取漏洞(CVE-2024-23897)", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488560&idx=2&sn=6a44ff8ddb477a021b2d3517771bdd25&chksm=fb029968cc75107e248fc49bf24781126e17d974d16970bce6675576c0bf00019e82456ccfab&scene=58&subscene=0": "【原创0day】用友YonBIP ServiceDispatcher远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247498655&idx=1&sn=2d8466decdde612d4588efc1fe004649&chksm=cfc55cc0f8b2d5d644e01132d993deafda46bc085854728343d7bc4a048cf89963e316529eed&scene=58&subscene=0": "平台放假公告|360漏洞云祝大家龙行龘龘,前程朤朤!", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247516377&idx=1&sn=982fc4b418975b1f7889feb2a200b530&chksm=ea83a64cddf42f5a99194ca5e849d05f1cf9cca3746dde2f607197c3f8bedbde3bc6048cbfc5&scene=58&subscene=0": "小米入选2023年移动互联网APP产品安全漏洞治理十大优秀案例", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522025&idx=1&sn=4d3403f704dc5fec1b6e58ff41e425f5&chksm=ce461df9f93194ef46c0cd8afd244b6551f8ccd79057e2677c4b755b84d7b60d3051dd7d44c0&scene=58&subscene=0": "【漏洞通告】用友YonBIP ServiceDispatcher远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247496680&idx=2&sn=fb1a6b611bd304f74d90b859773b84ed": "【1day】EduSoho配置文件泄露,获取数据库账号密码", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247484303&idx=1&sn=22eaa2d3cc532167fbd816a81407217b": "分享挖洞中遇到有趣的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652053041&idx=3&sn=3112678f6a550ee6bba7457a1c591ef4": "【安全圈】因报告漏洞,一德国程序员被判“黑客罪行”罚款 3000 欧元", "https://mp.weixin.qq.com/s?__biz=MzI3NzcxMDQwMg==&mid=2247486996&idx=1&sn=fc3fc8130cd27eb368cdf5118ebd3a1f": "记某项目漏洞挖掘之任意用户登录", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650586450&idx=4&sn=2117b291c50a6ecee04adcb1820d01e1": "CVS v1.1.3!万象通用漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247601425&idx=3&sn=18f161e40f3aa1a8a43ec8b4bf78f66e": "对民用飞行控制系统固件的逆向与漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247601425&idx=1&sn=75fa4c1bbb48eaf5666ccd22a6e7ba96": "基于模拟仿真的蓝牙协议栈漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247484778&idx=1&sn=2aca042a6f0654a76d6dbac74a8475e4": "万户OA text2Html 任意文件读取【漏洞复现】", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522036&idx=1&sn=8eb9708fb1c200d0d1c7de2a69798634": "【漏洞通告】Jenkins任意文件读取漏洞CVE-2024-23897", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247489436&idx=1&sn=4af6fb8e482bdcedb8ac5ca41951c35e": "SRC实战 | 任意用户相关漏洞的多个姿势实战", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651256805&idx=1&sn=d9c38661a372e9e28d705bfaba85e256": "苹果、VMware、Apache等科技巨头漏洞被大量应用", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247486161&idx=1&sn=5966988bc1239cf842e782b9554e8269": "afrog!快速稳定的漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247512637&idx=1&sn=6c487caf474f67097fbfb043ac45ce36": "【已复现】Jenkins 任意文件读取漏洞(CVE-2024-23897)附POC下载", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487611&idx=3&sn=3316f1c27c7ac1133bf94e9791a5b64b": "漏洞预警 | Apache Airflow pickle反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487611&idx=2&sn=af0df8083abc0e417b071175a0fa4ce6": "漏洞预警 | Jenkins任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487611&idx=1&sn=130fa1c69bb30791c53c15abeb4a65d5": "漏洞预警 | 万户ezOFFICE任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NDUxMjAzNw==&mid=2247485675&idx=1&sn=623cc19ff3de50c44486903726e28342": "【漏洞复现】CVE-2024-23897 Jenkins 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650940982&idx=1&sn=bbd999be38ce638c3f3254b344f68bb1": "HVV 溯源实例-从OA到某信源RCE全0day渗透", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458537518&idx=3&sn=d2f22ad186ab59c3d61d767901891dd5&chksm=b18d7ea486faf7b2272baba991754aa2012ec8da745b68668194cf177e6ccce5140326d356b3&scene=58&subscene=0": "3月1日开班!系统0day安全-二进制漏洞攻防(第3期)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493401&idx=1&sn=71957a006a657b5085e465b12d840a66&chksm=e8a5ed7adfd2646c007aca3bbff473ca886ba3fa69d4d9f7b83b95035d70d88bf356e70daab1&scene=58&subscene=0": "赏金猎人|兜兜转转拿下平台充值漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500507&idx=1&sn=00c90111e269c3def86513ff650f38b6&chksm=fe79e643c90e6f55c62bda76d918db3b02f48a9a297a4d933b82e1d7f50e5b54bb995fe67c3b&scene=58&subscene=0": "runc容器逃逸漏洞(CVE-2024-21626)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518800&idx=1&sn=56582bbad34a3a622a7545dbcb33703a&chksm=ea94bb3adde3322cfc0b70bd4e12c7b4ac645128010b8eb2acac4868ef2ea5ba3081b1d09f48&scene=58&subscene=0": "RunC 多个漏洞使攻击者获得主机权限,可实现容器逃逸", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518800&idx=2&sn=81cdaabe53353075dd5badd918a3e0cd&chksm=ea94bb3adde3322ca6046c2aa9cb37dedf686efcdd6be90bd63248f23ad20dcc4015a3007149&scene=58&subscene=0": "Ivanti 披露两个新0day,其中一个已遭利用", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247502110&idx=1&sn=d29f11d8ccb155ae820e7e5e45a0f5f7&chksm=fe26cc1fc9514509343ec0c55bca3cc404398bbe24f972e3186af69412e60480fcd515f4d1fa&scene=58&subscene=0": "CVE-2024-21626:runc容器逃逸漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522072&idx=1&sn=7fb694255868126bb3386f3d2b8c3d64&chksm=ce461c08f931951e90f66b708b87243c19894d8da65ea7e7d995be3ce49f3f693f277e61ec06&scene=58&subscene=0": "【漏洞通告】Glibc syslog堆溢出漏洞CVE-2023-6246", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485486&idx=1&sn=c3e808e0385599d39fd63cd459235e12": "CVE-2024-1061", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247485350&idx=1&sn=c120891a7bf01ca282dd6258a00d7ca2": "某互联网厂商 Apisix绕阿里WAF拿下Rce-漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493433&idx=1&sn=b10945d391be217683a2fd40a3714fac": "赏金猎人|利用nday快速刷分挖洞篇", "https://mp.weixin.qq.com/s?__biz=Mzg3ODk2OTcxMw==&mid=2247484784&idx=1&sn=8053e24a0ea9a0bee08eee61d33ca9ef": "漏洞复现-亿赛通电子文档安全管理系统 uploadfiletocatalog sql注入(附poc)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652053544&idx=1&sn=4e8d9b14ca7a60e206f8517c2607b93c": "【安全圈】谷歌 Bazel 面临命令注入漏洞威胁", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652053544&idx=3&sn=2eca890ca3b32466b244b6697ab35b44": "【安全圈】黑客揭露空客EFB应用漏洞,飞行数据面临风险", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650586915&idx=3&sn=24796ca53e2ad88ca3b93de375d0a7d4": "某国产中间件文件上传漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650611633&idx=1&sn=ed8f116fe5726768f68532147da3c85f": "利用VPN设备漏洞入侵!新型勒索软件CACTUS攻击手法分析", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247486200&idx=1&sn=eab7bd8db934e481e85ac5700b6191d0": "弱口令爆破工具 -- weakpass_exploit", "https://mp.weixin.qq.com/s?__biz=MzkxNDU2ODc0Nw==&mid=2247484012&idx=1&sn=34d21e97a318bce49b3c9381dcbdb25b": "万户 ezoffice wf_printnum.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODQ0MDc2Mg==&mid=2247484797&idx=1&sn=d85fbf2503c89a7cd5f20061459f4a9e": "JAVA代码审计-任意文件上传漏洞(配套视频)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247484886&idx=4&sn=5504d805028add11c786dc51dcbf35ff": "CVE-2024-0402|GitLab文件写入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247484886&idx=3&sn=ad64a62b3a688549829a9d71824f95b9": "CVE-2024-21893|Ivanti Connect Secure服务器端请求伪造(SSRF)漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247484886&idx=1&sn=f1aa4342d9d0934c02214b9d018fd0c6": "CVE-2024-21626|runc容器逃逸漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247484886&idx=2&sn=35809354aeea3d950a85758daf0b157a": "CVE-2024-24747|MinIO权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247605777&idx=1&sn=5a6aa5480c8e15d80b0c7479690f6787": "详细剖析某erp漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MTc1MjY5OQ==&mid=2247485094&idx=1&sn=73719f2fb82ba3c1ed4af1151bce559d": "Shiro反序列化漏洞复现(文末领红包封面)", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485497&idx=1&sn=dcff72e74223345811a8136ee1e65ff0": "达梦启智⼤数据可视化系统(DMQZDV体验版)存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518821&idx=1&sn=8a1a67b87d1bbad6e1c80390fe7c1c61&chksm=ea94bb0fdde33219950ecb20753f8d0ab99b42fbe0e84141e12196184450ccbc041a602bc10b&scene=58&subscene=0": "谷歌修复代码测试工具Bazel 中的严重供应链漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518821&idx=2&sn=ab7b468c60d1a402498cb060f98514fd&chksm=ea94bb0fdde3321961dc3363a64d3659f5e38e1bc56bf5a4d3537def5da2508c1d31b49fb5f8&scene=58&subscene=0": "Mastodon 漏洞可导致攻击者接管任意账号", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458540955&idx=3&sn=98a9d53c173f2ebfbd7a4fc3151ecbd5&chksm=b18d6b1186fae207d5afc82119ae67f5c499eba97dee235ba9a19264202f4fde50be7d0e4227&scene=58&subscene=0": "实战CVE漏洞分析与防范(第一季)", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496094&idx=1&sn=aba1e72c0a1c447ceea898625120f283&chksm=fd790d18ca0e840e57998c4be4c64b5825adf224f2300de44613ea887f28ff01042614a68f26&scene=58&subscene=0": "安全验证 | Runc CVE-2024-21626 容器逃逸漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247573489&idx=1&sn=049a763d7f007d5fedb7481c3f946734&chksm=e9140fcbde6386ddbb9937989840391de4ddd719227c7786d1d1692cc7d83d0e92fa70d148b8&scene=58&subscene=0": "黑客利用易受RCE攻击的Apache RocketMQ服务器", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247542872&idx=5&sn=87ea4cf94229feb92635f96ffc415ab7&chksm=fa939e99cde4178fefdb91452675d19cf9efbcdc4a19c6e35b5eaf3f4e2b041e2546f3ee49ad&scene=58&subscene=0": "影响多个OEM的Android本地漏洞公布", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500524&idx=1&sn=39590d2a0b902c52a6fdc98a3d1f04cb&chksm=fe79e674c90e6f6206e45c5bb00a8714ede95f2831a0561872180e04d1450cbb371c7649a221&scene=58&subscene=0": "【已复现】Oracle WebLogic Server JNDI注入漏洞(CVE-2024-20931)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786179&idx=1&sn=97b8f894d27c670a28cb59ba225c6208&chksm=8893b72cbfe43e3a73a3f27dbfdacbf66b55e6d8a34befe5f29b09977c774fea4e825fb9cb86&scene=58&subscene=0": "安全研究员发现漏洞群,允许黑客逃离 Docker 和 runc 容器", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498947&idx=1&sn=cd9614b87b41df912c2b15fcb84bc20c&chksm=973acfa1a04d46b7e3983545e8dc35e54c2166b8834c149310d5e63fba0b008758085a1ac473&scene=58&subscene=0": "CNVD漏洞周报2024年第5期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498947&idx=2&sn=7c321485dea70784264aee91f2c87fd9&chksm=973acfa1a04d46b7fa355e7f8fca4885359295dedc5e9444692c927122627fbac4676aee3d9e&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240129-20240204)", "https://mp.weixin.qq.com/s?__biz=MzkyMzE5ODExNQ==&mid=2247486872&idx=1&sn=ca795893e92554a7fe304a90b8875b6d&chksm=c1e9fa54f69e7342818dc7d72daa71cddba3beb055187079a0390c1101438901b961d2760c1c&scene=58&subscene=0": "2023 年 GreyNoise 在野大规模漏洞利用报告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542028&idx=2&sn=90b393bbac990d249539718e0da982bb&chksm=b18d6f4686fae650259be58a57d384e02ba465efd924a4f6e8c8e5ff85fd8c0bb03f0fd72d5a&scene=58&subscene=0": "察天下之“大患”,而救之以方 | 2023年华为关注的10个最具“格调”的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247573557&idx=1&sn=f1d03444449cb04402a598f683b4dc99&chksm=e914700fde63f91995436350b45e3112028a3bd6fbc0c1f4535841a23c232fdcf0800f769e76&scene=58&subscene=0": "最新的 Ivanti SSRF 零日漏洞遭到大规模利用", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493496&idx=1&sn=825d358940d4969aef68323e2dfcddd9&chksm=e8a5ed1bdfd2640d98cb652147abd2f63a88e1b196d920666307a6e8a0361f78b7f7f3709d46&scene=58&subscene=0": "实战之常规漏洞快速挖掘", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247542932&idx=1&sn=557fa2997c1992306ee492755f0af0e1&chksm=fa939e55cde41743c9cdcf009379a585b28ff0bee80b4032721992dfd11de219e648a0c62046&scene=58&subscene=0": "最新的 Ivanti SSRF 零日漏洞正在被大规模利用", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485531&idx=1&sn=14024bdf1137cbf67189338b1c81b116": "CVE-2024-1253", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247484958&idx=1&sn=f6b785e72f0a05519726b2fe1cc3bfa4": "2024年最新重磅漏洞,Windows通杀漏洞!!!!!", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247499378&idx=1&sn=377cd6b408fda9eb3256e27ba0425546": "一个不是漏洞但又发不了的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652053917&idx=3&sn=6243d69b0d3eb929183137feff793b8b": "【安全圈】Shim发布安全补丁,以解决六个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652053917&idx=4&sn=83f2f5c98841bf30c9afcf72d91c7d29": "【安全圈】已修复!佳能的最新软件更新能修复部分机型的七个严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247485009&idx=1&sn=9118f87d6181dda43dd460154ae8bf89": "Apktool任意文件写入漏洞分析 CVE-2024-21633", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247484559&idx=1&sn=aff84d90c441906bac2ebc4d2554e91f": "runc 工作目录突破 (CVE-2024-21626)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651258683&idx=2&sn=2da5b21a7af6a12fb83d2762d8798d47": "察天下之“大患”,而救之以方 | 2023年华为关注的10个最具“格调”的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247512212&idx=1&sn=7624875ea345fa3b43e6e737c2a0f726": "Spring综合漏洞的利用工具 -- SpringExploitGUI(2月6日更新)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542078&idx=2&sn=22aca750989aae8fbb450c1e1766314a&chksm=b18d6f7486fae66295e12b94038872a1bf2bf01daefd7bcbcd8d908724482e46cc23b554d1da&scene=58&subscene=0": "CVE-2022-0847 dirtypipe漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485532&idx=1&sn=aae7110c53c73503b7aa1671f669b9ff": "[漏洞复现]CVE-2023-22527", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790421&idx=1&sn=2facd150e2426e3d1fef4c0e52e86e8b": "研究人员称攻击者正在大规模利用新的Ivanti VPN漏洞,Fortinet警告APT 组织在攻击中利用FortiOS漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650942488&idx=1&sn=2949b7460e36e1cfd91f51110c7ae8b3": "渗透测试突破口之常见打点及漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652104768&idx=2&sn=51454074bd878799705659f972e4c7bf": "空客应用程序漏洞引入飞机安全风险", "https://mp.weixin.qq.com/s?__biz=Mzg4MDkyMTE4OQ==&mid=2247484019&idx=1&sn=a64ad748d6a310afd60cf8d331d15a36": "漏洞挖掘JS逆向-Burp自动化加密", "https://mp.weixin.qq.com/s?__biz=MzU1NDg4MjY1Mg==&mid=2247487040&idx=1&sn=6be5a0e1500a2608b60081e8b79abf64": "Sploitus|Exploit 在线漏洞搜索引擎", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247602867&idx=1&sn=6e00c324ecbff1f731e195c6f50bef27": "逆向分析在漏洞挖掘中的应用", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247536520&idx=1&sn=aa289d05c1b2dc2acdde35c494c8adf2": "HTTP请求走私漏洞浅析", "https://mp.weixin.qq.com/s?__biz=MzkyMjYxMDM4MA==&mid=2247483998&idx=1&sn=e9bb0f7ddb39574a6248d80dc6662833": "【漏洞复现】用友NC-Cloud系统uploadChunk存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651258708&idx=2&sn=bbc4b2ff56d91b593b565b74d91af4db": "黑客揭露空客EFB应用漏洞,飞行数据面临风险", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493540&idx=1&sn=32900757e933887812b204940f8f3950": "实战|记录对某网站漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247503957&idx=2&sn=cc83414b41efaa566e4c8e5777060cc1": "谷歌浏览器零日PoC代码CVE-2022-4262发布", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247503957&idx=1&sn=b66468ecc50e935193cf203223055c01": "天府杯 2023”Chrome WebAudio 错误条目中的释放后使用漏洞 (CVE-2023-5996 [1497859])", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542082&idx=1&sn=879f885047e0b5029bd717fc427b1096": "CVE-2023-38902的详细研究", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485533&idx=1&sn=9ee841997275feda8eeef6660d045de3": "CVE-2023-4450", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247606076&idx=1&sn=e52f55e241ffcbe60224d7ff7472c073": "记一次逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247536521&idx=1&sn=68aa0974d065f1168de981c77b2e602f": "漏洞挖掘 | 编辑器漏洞之kindeditor", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650587328&idx=3&sn=0d6066892228256b962928b34a836899": "某cms模板渲染导致rce漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247521215&idx=1&sn=2f44540c78c4118769d1ba9c73085b6e": "利用Android WebView漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542083&idx=1&sn=058feb17f5f0971243fd622d348a85af&chksm=b18d508986fad99f8d89d117b092c869536f30bbd6506e447e03ef0c2da8509597ef81fa0e3d&scene=58&subscene=0": "V8 hole 类型漏洞利用总结", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500531&idx=1&sn=2add6d24dc79496f1c84c78984ea02f0&chksm=fe79e66bc90e6f7d7e02e1d3d9e0d945e9378c7bd4d2d72a2113d0ab455756831ca265883f70&scene=58&subscene=0": "微软2024年2月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247494035&idx=1&sn=2450eafd59dadb3642c781cd16107934": "为什么正确的指标对于漏洞管理很重要", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493550&idx=1&sn=77b2f0df2e969f564a941aa2440aab07": "第80篇:Weblogic上传漏洞在不知绝对路径情况下拿shell方法", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790458&idx=1&sn=fe25df201817e43e412e65727f4d371a": "微软捕获APT组织使用大语言模型(LLM)进行漏洞研究和恶意软件脚本编写的证据", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247502642&idx=1&sn=cfad6570d00c21e8a4de1be6815975b2": "【漏洞预警】 Nginx 0day 漏洞来袭", "https://mp.weixin.qq.com/s?__biz=MzUxMzQ2NTM2Nw==&mid=2247492294&idx=1&sn=c0274415571d8792a11d752d1a1527a8": "记一次有趣的逻辑漏洞挖洞经历", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247503997&idx=1&sn=16b2112942b37aa7a46aa046628bac34": "CVE-2024-21412 APT(Water Hydra)-0 Day 攻击链分析", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247536523&idx=1&sn=31452faca3eafd1a04ca8f8a6dd29cce": "漏洞原理 | CORS跨域学习篇", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247490722&idx=2&sn=c9807daa5548e139a0c67303cb26882a": "精华回顾 | 剖析.NET Remoting远程处理反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650942860&idx=1&sn=e751f6cc518cec07e8403dee730698b0": "15000+POC漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487556&idx=4&sn=df130bc8de4bcd98f11facd13a8933c6": "【漏洞预警】Envoy PROXY协议身份验证绕过漏洞CVE-2024-23324", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487556&idx=3&sn=4d029e0d552896516c5de47d041fbea0": "【漏洞预警】Solr ∕admin∕info∕properties敏感信息泄漏漏洞CVE-2023-50291", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487556&idx=2&sn=d87e8edf67feeafc863d023ba733977b": "【漏洞预警】Solr ConfigSet远程代码执行漏洞CVE-2023-50386", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487556&idx=1&sn=d5c9cf1ca1b3c84cbdc2274a244ad45a": "【漏洞预警】Oracle WebLogic Server 存在JNDI注入漏洞CVE-2024-20931", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485229&idx=1&sn=25b32c046e96773293be14528f1f60df": "金盘移动图书馆系统存在任意文件上传漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542085&idx=2&sn=92c9414fbd2b0e92d803ab949756bf29": "都4202年了,还有人没报名《系统0day安全-Windows平台漏洞挖掘(第2期)》吗?", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247487355&idx=2&sn=278e7a8d4a3acc7a3632d2b85741d2d1": "微信0day漏洞?恶意代码成功执行!附恶意代码构造", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247487355&idx=1&sn=984725ab5da3b33fe97d02931f7ece03": "接近真实世界的web漏洞靶场", "https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247499505&idx=1&sn=aadf0de760a40e369c01b14e3fa45725": "弱网环境下业务逻辑漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzkyNDI2NjQzNg==&mid=2247490581&idx=1&sn=5b95bb723c2e94c4f24a60db8c111eb7": "教育edusrc-证书站挖掘-逻辑漏洞篇", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485242&idx=1&sn=4144bba6c8f989ea3f2b3da8a29f0ea4": "Panalog大数据日志审计系统libres_syn_delete.php存在命令执行漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzkyMDUzMzY1MA==&mid=2247497778&idx=1&sn=07e11ff7b94de691c4361d80e0fff267": "关于网传宝塔漏洞说明", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493570&idx=1&sn=27c75a225a6b78e63274bf8c60c6698d": "API漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484235&idx=1&sn=73d42ab50caab37325d9ee908bce1a44": "smart管理平台多版本任意文件上传-CVE-2024-0939", "https://mp.weixin.qq.com/s?__biz=Mzk0OTM5MTk0OA==&mid=2247495699&idx=1&sn=327a32f9d0c675a56d796aa02bfb0cbc": "宝塔WAF 0day漏洞,可直接获取Root权限", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247512253&idx=1&sn=725756c522875920a53d40ad3a858a05": "漏洞扫描的工具 -- Golden-hooped Rod(2月15日更新)", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247497949&idx=1&sn=dd9856b9e5125f92ec9a3281b0f5fcc5": "【漏洞速递】宝塔最新未授权访问漏洞及sql注入", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247487910&idx=1&sn=2503efcd7b992f738d2a8b15ec9fa591": "宝塔最新未授权访问漏洞及SQL注入", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247484945&idx=1&sn=6f95a3baaed2ca66205fb0d38369b312": "实战案例:记一次利用SpringBoot相关RCE漏洞拿下某数字化平台系统", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247552164&idx=2&sn=140c01ad19fa1557e1ac7f850eeb6e3c": "万象漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485534&idx=1&sn=61ba5c6d95066c0e162b609db6fa1cfa": "CVE-2024-0918", "https://mp.weixin.qq.com/s?__biz=MzkwNjYzMjc3OQ==&mid=2247483972&idx=1&sn=a921d160e9ed94696ff21ca8fd15c987": "SPONIP广播系统某接口存在任意文件下载漏洞【源码公布在圈内】", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247486242&idx=1&sn=a5bd394d1d164396af0926a0e308c6f8": "Sirius:一款功能强大的通用漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzI2NTc1ODY0Mw==&mid=2247485819&idx=1&sn=cbdfdf45bf5f16a0430cf6af7c867be3": "java代码审计之SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652104887&idx=2&sn=7536e3a2c459504196bbbbb44cf4cb84": "Android、佳能漏洞已修复,Fortinet警告零日漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247484152&idx=1&sn=159ab69049a0237509f17c930b0d632a": "【赏金猎人】折扣政策绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247514821&idx=1&sn=3e9ca669101a09eb3caa4f264173eef9": "一款Jenkins的综合漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493575&idx=1&sn=ac7a051872adc5ed2be117565615a291": "漏洞挖掘|日常挖洞之渗透失败经历", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247485473&idx=1&sn=5a49234687dd0d4c9728762e144c5cd9": "Panalog日志代码审计(0Day)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODk2OTcxMw==&mid=2247484803&idx=1&sn=63dbf845dd0b7f9dc58ee5d919a73381": "漏洞复现-WordPress HTML5 Video Player SQL注入漏洞(CVE-2024-1061)附POC", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092574&idx=1&sn=99d424ed50d547cedb04351de7b2850b": "13000多个Ivanti网关因严重漏洞遭受网络攻击", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484242&idx=1&sn=814cfe9ef1b7e122ec1f42d26b8c8064": "Panalog日志审计系统 libres_syn_delete.php命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651258739&idx=2&sn=5928bcff19e15c289e231ee10148239c": "13000 多个 Ivanti 终端易受安全漏洞的影响", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651258739&idx=1&sn=51a6ab2a77aa3e0605ebaa52273f4b31": "SolarWinds 曝出五个严重的 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542106&idx=3&sn=9f4ba426fcbf98ae43796f3cf9f5c8b6": "今日更新:命令∕代码执行(一)原理和基础知识—CTF训练营之Web篇", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542106&idx=2&sn=3ffb128de7e9df308ad8827ecc5fa58a": "一个叹号可导致任意代码执行,Windows生态系统也曝“log4j漏洞”", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247512265&idx=1&sn=918d4cb8e0d78bd980664045215dc2ba": "cve漏洞搜索工具 -- cvemap", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247513300&idx=1&sn=991d8296780af766fa56b631488ae43a": "记一次有趣的逻辑漏洞挖洞经历", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488719&idx=1&sn=20025d64a950621fd3a6d34e7ad04c9d&chksm=fb029997cc751081fd187d93e2e6aa05232fea7d602fbdeb88db5cb92b70de70c079bf4a5b40&scene=58&subscene=0": "JDBC漏洞利用之文件读取", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247573590&idx=2&sn=5e582bdd3c6a288408ade5b874ca881a&chksm=e914706cde63f97a2d2629ed75dbb118085b83785cd8e3dcfc9eeeec9017a036589e72220301&scene=58&subscene=0": "Jenkins RCE 漏洞目前已公布", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247485744&idx=1&sn=86f7579da6aa376775ef1ec22a9d953f": "记一次违法网站的渗透经历-漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247484201&idx=1&sn=5ddfb64d5ad67b8b7742c39e0a8d66e0": "【赏金猎人】商店留言板xss漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485270&idx=1&sn=f4cf6552f69f84f34bf5b0a4ca9105bd": "泛微e-office系统存在敏感信息泄露 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247514872&idx=1&sn=0e25f55d52708114d61279274f7bdd54": "工具 | JumpServer堡垒机综合漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518852&idx=1&sn=118503a8f9ad674c456c7a1beb026af7": "微软2月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092578&idx=2&sn=22a30548a62a5a47a2c943462195f74f": "微软Exchange服务器曝出高危漏洞,近10万台服务器面临风险", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247484906&idx=2&sn=5bb3b85ebc6056e03db104c6135d5a25": "CVE-2024-20931|Oracle WebLogic Server JNDI注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247484906&idx=3&sn=078c39bc7eb2e754acc54a6722a5dbba": "CVE-2024-21413|Microsoft Outlook 远程代码执行漏洞(需结合其他漏洞)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247484906&idx=1&sn=a022a4ad1a3a0f48f737fd0dedc2c33a": "CVE-2024-22234|Spring Security访问控制错误漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247502909&idx=1&sn=f651a0f9af67ab70b2ddc793cd31d7d1": "子域名接管漏洞: 赚钱小技巧", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487578&idx=2&sn=2fb1ac93a1c6e4a837df6f9cf6404e16": "【漏洞预警】Apache Camel JDBCAggregationRepository反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487578&idx=3&sn=97924ea8f28a9a79ec1c87e26f026555": "【漏洞预警】pgjdbc 存在SQL注入漏洞CVE-2024-1597", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487578&idx=1&sn=e90607e7e2e3e63ad556a85f6e55ab1f": "【漏洞预警】Spring Security 访问控制错误漏洞CVE-2024-22234", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489168&idx=1&sn=62ec74275a62a5427d6251b9a8da872f": "【风险通告】Spring Security身份验证绕过漏洞(CVE-2024-22234)", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651443635&idx=1&sn=d87a8a4ee8eb27ec34bce76b3fd1e7e0": "信息安全漏洞周报(2024年第7期)", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651443635&idx=2&sn=ef13f4cea2eeaec556bed5e0435e74c1": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAwODU5NzYxOA==&mid=2247502865&idx=1&sn=34303f20c9756abea189ce483c6a2847": "未然通讯社:SolarWinds曝出五个严重的RCE漏洞;黑客利用新型Dropper在Windows上传播恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092578&idx=1&sn=dff7b76af44daecedd5d9682de41a775": "谷歌称其发现的大多数0 day漏洞背后都是间谍软件供应商", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499167&idx=1&sn=fbcfcb89b1b95d1c7b50eddf5a220efe": "华莱士领券活动漏洞,任意用户可领取免费套餐券,官方已报警", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651258928&idx=2&sn=e5860f75faf1ced0b6548188a53f8f9b": "Bricks WordPress网站生成器中存在RCE漏洞,黑客正在积极利用", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247499219&idx=1&sn=11f120ec24ec9c72a9827ab5e53b2385&chksm=cfc55a8cf8b2d39aa6fb00328440ce6948f47053c3d175ae4fef5f773cab8e3d26271cb5d13e&scene=58&subscene=0": "新年新征程!360漏洞云开工攒劲,百万奖金到账,真金白银等你来战!", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511007&idx=2&sn=e307870483024ee8205b3b9290e0e198&chksm=ebfaecffdc8d65e9c5d0d76def33413444b55fd7cb6c9eba987d336088fe395c81f446ae95e5&scene=58&subscene=0": "微软Exchange服务器曝出高危漏洞,近10万台服务器面临风险", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247504722&idx=1&sn=7579421d53c06f53983e5ea01fec5aaa&chksm=cfcab046f8bd3950c9250c79f073880df9f838cf8ed5ce58a5b04fcbdd67e555051b5be58af2&scene=58&subscene=0": "漏洞通告 | Apache Solr 代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522125&idx=1&sn=6026edacdef01f12c57a755d1f30370c&chksm=ce461c5df931954b346a8800e954d46592d409d46d2be4b17b72eda86aadd82e2f4601bf02e7&scene=58&subscene=0": "【漏洞通告】Apache Solr Backup∕Restore APIs 远程命令执行漏洞CVE-2023-50386", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247485125&idx=1&sn=5f259ebb9db66bf27573cde85128b337&chksm=c1f4420df683cb1bf25b7b728273dc1ecf524ad0ac2ee57b63d08ec6bff688829d0417627d25&scene=58&subscene=0": "「深蓝洞察」2023 年度最野的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247484358&idx=1&sn=d5ee940bfbe066983335cb77801c3fb4": "pgjdbc 存在SQL注入漏洞( CVE-2024-1597)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487583&idx=1&sn=6891f7a65e90e1b8b76ee39eb1a0a5dc": "【漏洞预警】Jira Assets Discovery 组件存在注入漏洞CVE-2024-21682", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485284&idx=1&sn=75ed72facac4b1519831e47ed30606a9": "YouDianCMS友点系统存在任意文件上传漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790482&idx=1&sn=d1c5d04f70f8192a9c22e3df6621ad11": "俄罗斯黑客利用 Roundcube 缺陷(CVE-2023-5631)攻击欧洲政府", "https://mp.weixin.qq.com/s?__biz=Mzg4NzkwMDA5NQ==&mid=2247484374&idx=1&sn=5fa9948712e28bca979601fc691dbc9d": "PyPI供应链攻击之模块替换(含原理和复现)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652054201&idx=1&sn=d2f335b13fb4dd3f74550f35b1b9a979": "【安全圈】系统漏洞致储值套餐券免费领取,华莱士已报案!", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651259054&idx=3&sn=e0c3f907ffc9c26db742bb3a2bb0bf48": "Experian最新报告发布:70%的企业遭遇网络欺诈的频次有所增长", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518869&idx=1&sn=ceb7b148314a0873f976af5bd4f077e9": "速修复!ConnectWise ScreenConnect 中存在多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247486443&idx=1&sn=d4612250a7d648537dbda4097c0d8f66": "2024 想要 0day 多多?我这有份小秘籍!带你手把手挖掘 Java 系统漏洞。", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664205176&idx=3&sn=a13dc78e2c2e45842a31b924bd5f89a5": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484259&idx=1&sn=f2ed5cee173f0b9de810d7b82b421b21": "CrateDB数据库任意文件读取漏洞复现-CVE-2024-24565", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247543017&idx=3&sn=b6dfbd1da673fb01f2de82fc15e9edfa&chksm=fa939e28cde4173e7a4ce942a98942a4e38f7d11a1463799dbf3f81bc0d310153ddd479548d0&scene=58&subscene=0": "Bricks WordPress网站生成器中存在RCE漏洞,黑客正在积极利用", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247485223&idx=1&sn=aec69141f324192c5d6441c7d83e5349&chksm=c1f443eff683caf99f050457edaca75a77adc5d42f718a5f40f6fc1215d6c7f55c14d3d66ce0&scene=58&subscene=0": "2023 年度最𠓗的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247485303&idx=1&sn=1c306d587d334f57d5bac54020f4d276&chksm=c1f443bff683caa92702eea91cf9ae4491e6350da4460c1718b2ab45c83aa9071a926d62c836&scene=58&subscene=0": "「深蓝洞察」2023 年度最多面的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247485335&idx=1&sn=2f97660bf4d4042c2e8c2d351134772d&chksm=c1f4435ff683ca49c9a6c56dda149cd66272fd9b137166c4d97254fa2355a03f614f5c4008a4&scene=58&subscene=0": "「深蓝洞察」2023 年度最名不副实的高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522161&idx=1&sn=a972b86a73c67766c6fbdd8d20d523ee": "【漏洞通告】Microsoft Outlook 远程命令执行漏洞CVE-2024-21413", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247485358&idx=1&sn=a78f49fc08e3654bc528a22c3fcd60d0&chksm=c1f44366f683ca7037d368a423f338cf1b691598bd37b1f07ad3ca83a105e0b3d01267a0e408&scene=58&subscene=0": "「深蓝洞察」2023 年度最死而不僵的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247603565&idx=1&sn=07aebbd878394bb10ac75713d2c62375": "基于模拟仿真的蓝牙协议栈漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzA5MzYzMzkzNg==&mid=2650943724&idx=1&sn=5d17350bc596b4c95bd5021e685825e2": "cve漏洞搜索工具 -- cvemap", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485600&idx=1&sn=edee39bc65baa740cac7d5c26e5f9663": "CVE-2024-22024", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247512769&idx=1&sn=23e8a8e663b18499b765a56f66de9e09": "致远OA rest接口重置密码漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247484241&idx=1&sn=9001ab8958bbc83a3f607ceb3f27c0fa": "全球首个面向 AI∕ML 的漏洞赏金平台", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247514954&idx=1&sn=d88c3110c5bab96bef9e915b174db605": "SQL注入漏洞引起的内网渗透 | 实战", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487613&idx=2&sn=6f02306fd040f0ba94b7cc74e92d2064": "【漏洞预警】ConnectWise ScreenConnect身份验证绕过漏洞(CVE-2024-1709)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487613&idx=1&sn=f906708c4b2a4b5448ec448aecee0dab": "【漏洞预警】Apache DolphinScheduler<3.2.1 任意代码执行漏洞CVE-2024-23320", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485417&idx=2&sn=f58ab180c0cd53f7e1c0ad063b62c37b": "鸿运(通天星CMSV6车载)主动安全监控云平台存在任意文件读取漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485417&idx=1&sn=f3384fa94c4e2e90a466a34564687be7": "鸿运(通天星CMSV6车载)主动安全监控云平台存在敏感信息泄露漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=Mzg3ODg4MDEwMA==&mid=2247483894&idx=1&sn=d79f51bd4cca4bafaef388b286ea8be4": "不同端下的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493641&idx=1&sn=68f9abb2511ce601470f44d299c35092": "记一次逻辑漏洞挖洞经历", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247497376&idx=1&sn=5ad2c914b8458138acd61d8b29c7080f": "G.O.S.S.I.P 阅读推荐 2024-02-26 寻觅文件劫持漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652054638&idx=4&sn=cbc923d693bae84939d05031ec8bc252": "【安全圈】注意!ScreenConnect 漏洞正被广泛利用于恶意软件传播", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649290785&idx=1&sn=ff6839852de21b172bc1024c00069af4": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502807&idx=1&sn=780714c6ab54fb3a6022abf04cc7a68c&chksm=f25858a4c52fd1b2db96d97bd99f054bc776b1483fd7c550b7b20d96177a1badff150f2cfcf1&scene=58&subscene=0": "雷神众测漏洞周报2024.2.19-2024.2.25", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247543098&idx=3&sn=29bdad8e8105d0550fd85561c62739f3&chksm=fa939ffbcde416ed0ad7c94bef562b81e4b9e073a35cf010af76db80541358571de2307004eb&scene=58&subscene=0": "新的 Linux glibc 漏洞可使网络攻击者获得主要发行版 root 权限", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522172&idx=1&sn=ceb01e7da3c6a49105bcfb1eb7830d80&chksm=ce461c6cf931957ad8016f585b1794a712f56fd05e69502204aedd908e7039a943655f0bb1fa&scene=58&subscene=0": "【漏洞通告】WordPress Bricks Builder远程命令执行漏洞CVE-2024-25600", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247485473&idx=1&sn=dac56a776c57366e00cf5b7217c74a4c&chksm=c1f44ce9f683c5ffb68f9b26d16d4ac769e732df0b4d473685d25e15343f40087dfff27749e4&scene=58&subscene=0": "「深蓝洞察」2023 年度最费钱的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494454&idx=1&sn=75b4a10b224fe51a786b909ac6d6fba6&chksm=fd74dbffca0352e9b7416fb9e91e5e7514a4df75efc40d3be50e95796746324e5506dda28140&scene=58&subscene=0": "CNVD漏洞周报2024年第8期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494454&idx=2&sn=a4d3f067c3eb9c32a5da7f88aba9a286&chksm=fd74dbffca0352e958e8c020f9f59df5840aee4264d392cb5d110cc32a6d739fe1e6554af425&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240219-20240225)", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485638&idx=3&sn=2571a60b30be053c871d39c23c450253": "CVE-2024-21732", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485638&idx=1&sn=2b48860dcd6dbc794bc684c187d4ba46": "CVE-2024-1918", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485442&idx=1&sn=1dd5f1210b7a66a5852bde27aafdbc1e": "蓝凌OA wechatLoginHelper存在SQL注入漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487631&idx=3&sn=0fae78df401327af5b374dc3170477cc": "【漏洞预警】LangChain langchain-experimental 任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487631&idx=2&sn=7aeee11867aef09924b163a42a8001ee": "【漏洞预警】Apache James MIME4J HTTP头注入CVE-2024-21742", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487631&idx=1&sn=550af656e44479fb9e6f412efd7db330": "【漏洞预警】Apache Camel ExchangeCreatedEvent 信息泄漏CVE-2024-22371", "https://mp.weixin.qq.com/s?__biz=MzIzMjg0MjM5OQ==&mid=2247487029&idx=1&sn=7c03ed64d656477814b4a3e5b5c620ef": "赏金猎人|从前端JS逆向到发现后端越权漏洞的渗透测试之旅", "https://mp.weixin.qq.com/s?__biz=MzkzNDU5OTg3Mw==&mid=2247485641&idx=1&sn=8b9ae2c21d74cbe4366bfedbc73fb8e4": "【Web渗透】若依框架漏洞合集", "https://mp.weixin.qq.com/s?__biz=Mzk0MDQzNzY5NQ==&mid=2247489950&idx=1&sn=1b26cf9e5cc18c1968b5eadc3e92b391": "【tips】基于tar通配符漏洞的提权方法", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493709&idx=1&sn=f2362aaef667e61c6d81676ff5e0747e": "第79篇:记一次Oracle注入漏洞提权的艰难过程", "https://mp.weixin.qq.com/s?__biz=MzkwNjYzMjc3OQ==&mid=2247484072&idx=1&sn=14a834e08a4faa80c5a9bd9fe993850a": "[未公开]亿赛通某接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzkwMDA5NQ==&mid=2247484401&idx=1&sn=f8b8d9e961e82549b68e8d8e7ef00794": "Windows SmartScreen安全功能绕过漏洞(含CVE-2024-21412复现)", "https://mp.weixin.qq.com/s?__biz=MzAxMzkzNDA1Mg==&mid=2247508946&idx=1&sn=0e89c866ba9ff5411acc44aac6a8bb57": "TangGo|逻辑漏洞测试系列-支付逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518947&idx=2&sn=8758a5f5ef83a075fb61fbed63159da1": "合勤科技修复防火墙产品中的远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518947&idx=3&sn=a79e0235f3e78c2f4980247b4e0a365d": "WordPress 插件 LiteSpeed 漏洞影响500万个站点", "https://mp.weixin.qq.com/s?__biz=MzkyMzQ5NjYwMw==&mid=2247484189&idx=1&sn=ecf40a5ec6ce947d909396892ecca872": "安全情报,aiohttp存在目录遍历漏洞(CVE-2024-23334)!!!", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247501293&idx=1&sn=5da7d1ae387c99b721a1254c2b8e2298&chksm=ec9f1c9edbe8958871db6232bed662715233933d7dc9617edf53a650029ca2f0b3dc1fc32cb4&scene=58&subscene=0": "24年1月必修安全漏洞清单|腾讯安全威胁情报中心", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484910&idx=1&sn=d40e9b8ad7e5f67fd5ac1fc2b0b2548a&chksm=c2b10798f5c68e8ed5d26e6938ad30b8157db94bb71e3e0ccf69127e82251f3d02e173adb7fe&scene=58&subscene=0": "腾讯安全威胁情报中心推出2024年1月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247485551&idx=1&sn=f5a0c42e428b98949ede52267cf21f87&chksm=c1f44ca7f683c5b10b0c7151812e80cdf1d5e2ffb8b343840f10da795f6dd9f22a316795109f&scene=58&subscene=0": "「深蓝洞察」2023 年度最曲折的漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzkyNDI2NjQzNg==&mid=2247491941&idx=1&sn=458bab4081abbb411503d39dea2d6e71": "浅谈js在挖掘CNVD通用漏洞中的思路,附实战案例", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487637&idx=1&sn=2d244e4948384de5466bac28f6ca0c15": "【漏洞预警】Apache OFBiz 路径遍历漏洞CVE-2024-25065", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786205&idx=1&sn=5dd9dc2f0a9d0db0e9d5fe799577d98f": "Hugging Face转换服务存在高风险漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518957&idx=1&sn=8d096042c0c0ab672b2763c4be529085": "热门 WordPress 插件 Ultimate Member 中存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652054869&idx=4&sn=e83c805666be44f52ab80d8d0dc86964": "【安全圈】WordPress 插件存在安全漏洞,500 万网站面临严重风险", "https://mp.weixin.qq.com/s?__biz=MzAxMzkzNDA1Mg==&mid=2247508985&idx=1&sn=b5dc202fd950e94c71e132ab1bcfee7c": "TangGo|逻辑漏洞测试系列-拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651130938&idx=2&sn=a2031d0db458e6e8c1724f1a109bcc9e": "漏洞快报 | ​Spring Framework解析不当漏洞、Node.js 权限提升漏洞......", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542779&idx=3&sn=ca6d34e5d9af9acd1abd46ed43224744": "预售满10人开班!系统0day安全-二进制漏洞攻防(第3期)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542779&idx=2&sn=a51950a2497778688e42d361d47513cc": "AI模型可被劫持,Hugging Face转换服务存在高风险漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247488457&idx=1&sn=efa7116ac3937098d3c9de82384cd3a7": "创宇安全智脑 | 金蝶云星空 ServiceGateway 反序列化远程代码执行等33个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485433&idx=3&sn=4ea67667b657025281bb39914994be23": "【漏洞通告】WordPress Bricks Builder远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485433&idx=2&sn=9eae1b0672deb645a55f3669b42217e1": "【漏洞通告】Microsoft Outlook 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485433&idx=1&sn=d40d1d86b792cda97e1c4a6614cb8a6f": "【漏洞通告】Spring Security 访问控制错误漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247484149&idx=1&sn=dc492b9fb6f20c2af70b2f8e2813d0bf": "Springblade JWT身份伪造漏洞与SQL注入解析", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247485492&idx=1&sn=f37dd0fe2b93e9f52bf7bd099169abd8": "还在学怎么挖通用漏洞吗?一天打10个~", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485455&idx=1&sn=17e77b101b7c0617f0cc9aa550747933": "华天动力OA8000办公系统ntkodownload.jsp存在任意文件读取漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247514998&idx=2&sn=d1c6d069f37dc4720ab7772941446bf3": "甲方让我复现SQL注入绕过复现....我懵了.......", "https://mp.weixin.qq.com/s?__biz=MzkwNjYzMjc3OQ==&mid=2247484080&idx=1&sn=cb62d734d18161d8d5004c16fde55f88": "[1day]用友-UFIDA-NC某接口存在存在任意文件上传", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487652&idx=3&sn=bea76d1b37afdbdfd92249329f07cccd": "【漏洞预警】Apache Ambari 命令注入漏洞(CVE-2023-50379)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487652&idx=1&sn=2b071cbc3bdb1bf15ff887780cf811d8": "【漏洞预警】Dataease jdbc 反序列化漏洞CVE-2024-23328", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487652&idx=2&sn=6b47990e70d2394aee42cb2284ae8cb9": "【漏洞预警】Apache Ambari < 2.7.8 XXE(CVE-2023-50380)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652054959&idx=2&sn=5a67f91dd978d2f2e57a450566bf2730": "【安全圈】Windows 零日漏洞正被黑客利用,以此获得内核权限", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247503138&idx=1&sn=e334a14fb04d75405cc0a1d4539e169f": "CVE-2024-25065:Apache OFBiz目录遍历漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458542842&idx=2&sn=e0b56e24805662155ef9525c0eef338e": "攻击者能够接管任何账户,安全研究员披露Facebook一个零点击漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518970&idx=2&sn=ea8bb2c114507ab3f98fa4427698219b": "Lazarus黑客利用Windows内核0day发动攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518970&idx=1&sn=6962ea177a62fac9410b186624a2cd9a": "思科修复 Data Center OS 中的多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTE4NDAyNA==&mid=2650396319&idx=1&sn=9205385ff32a9ff6509dd706cc6415a6": "Web安全之Nginx常见漏洞解析", "https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247526500&idx=2&sn=11076968af73dab503404da243b1bb31": "荐读丨企业安全态势的七大常见漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzYzODU5NQ==&mid=2247484523&idx=1&sn=14ab8377ce235265249b1249656a5679": "记一次绕过限制进行漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzIzMjg0MjM5OQ==&mid=2247487038&idx=1&sn=0a317f9cec378902ba72d8dbe55b5148": "相对来说还算比较全及时的漏洞库", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652054993&idx=1&sn=358d77ea022408f255e7aac59b39075a": "【安全圈】深圳制造商Eken智能门铃曝安全漏洞,黑客可直接获取摄像头画面", "https://mp.weixin.qq.com/s?__biz=MzUxMzQ2NTM2Nw==&mid=2247492399&idx=1&sn=19aaae05e06dcd966a812d9e6bc796d0": "WordPress 插件存在漏洞,500 万网站面临严重安全风险", "https://mp.weixin.qq.com/s?__biz=MzkwNjYzMjc3OQ==&mid=2247484088&idx=1&sn=e7be4cfccf60278ca3dc1804ccfb5680": "[未公开]用友NC系统某接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247498491&idx=1&sn=8464e1bf6541bd2423cb4822b9ab1bdd": "dedecms之汗流浃背的审计1day", "https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247499543&idx=1&sn=d651a8b62674055e80135a51d4f43357": "漏洞没预测对,老板奖励我重新预测", "https://mp.weixin.qq.com/s?__biz=MzU3OTAyODk4MQ==&mid=2247488698&idx=1&sn=c4365aa1eae19c22294699ca68e9c0ce": "关于顺丰SRC暂停漏洞测试活动的公告", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247536997&idx=1&sn=8d68219b9eb686d5ef380a04674bfade": "记信息泄露到RCE", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247606451&idx=1&sn=265087aae5335565b10e8adc8ed1e46b": "我与逻辑漏洞的爱恨情仇", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247485621&idx=2&sn=54d070b88d4b31511d749efdac0b6241": "五眼联盟警告:Ivanti网关漏洞已被攻击", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247512802&idx=1&sn=70f0404b706864a5a6390ee103a3ed3f": "京东万家APP越权逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247485547&idx=1&sn=50abe494a9fb5ddf98843f2170a0c277": "2024 想要 0day 多多?我这有份小秘籍!带你手把手挖掘Java系统漏洞。", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651260327&idx=2&sn=89097fd738382d17bcf63884b8322f2a": "FreeBuf 周报 | 新WiFi漏洞或影响23亿用户;NIST发布网络安全框架2.0版本", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650588145&idx=3&sn=c156b1c7de8eb05fc30e9aceef95bf15": "Src挖掘-实战中遇到的一些莫名其妙的漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247490881&idx=1&sn=6fe3ac415be0d966b3d19b45245bf598": ".NET 某开源组件反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487854&idx=3&sn=babd094754a727f0f894ee8f6eb44b88": "漏洞预警 | 蓝凌OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487854&idx=2&sn=93c6d1767cc500302e3cee48434276ae": "漏洞预警 | 用友U8Cloud SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247487854&idx=1&sn=7dc0239f6e72b6f78519adddd98ba340": "漏洞预警 | Apache Ambari外部实体注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485836&idx=1&sn=d97a098912253827c4fedf0cf58292de": "CVE-2024-25735漏洞复现(附POC)", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247485576&idx=1&sn=7ac4af5f165050f1df0432d4387ab9a9": "【刻刀】一款java漏洞集合工具-hyacinth", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247494286&idx=3&sn=67227022aed1009f049bd6ab84a2a33b": "海康威视修补安全管理系统中的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247512933&idx=1&sn=a89fb7622167548aee9a37814657ada9": "SolarWinds Security Event Manager AMF 反序列化 RCE (CVE-2024-0692)", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247485210&idx=1&sn=38ab842021329c038b705504ae03dd51": "一次十分详细的漏洞挖掘记录,新思路+多个高危", "https://mp.weixin.qq.com/s?__biz=MzA4NjMwMzI3Mg==&mid=2247498768&idx=1&sn=301521e56dd970e683b20546f30a231e": "【漏洞通告】JetBrains TeamCity 身份验证绕过漏洞(CVE-2024-27198)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487671&idx=1&sn=1d8d71ac6527a733ba8a543d40236dd3": "【漏洞预警】JetBrains TeamCity身份验证绕过漏洞(CVE-2024-27198)", "https://mp.weixin.qq.com/s?__biz=Mzg3Mjc0MDQ2Nw==&mid=2247494359&idx=1&sn=6f2f982b9cfdf5bd1c41d52bc3438368": "浅析常见WEB安全漏洞及其防御措施", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055215&idx=3&sn=f8ad8002df884eee0c23fa1468de8772": "【安全圈】JetBrains TeamCity On-Premises 软件出现新安全漏洞,可被利用控制系统", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055215&idx=1&sn=e45ee18a9d09d2bc39b20c832f073435": "【安全圈】未定期检查网站安全,存在安全漏洞,新乡3家公司被罚!", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5OTQyNQ==&mid=2247484835&idx=1&sn=0639bdc47e6d8efdee0dd947f0e0c5c1": "漏洞挖掘|轻松挖掘某企业某友系统的多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzODQ0ODkyNA==&mid=2247484948&idx=1&sn=739151150c7627264f61e02870f2f012": "【EXP公开】JetBrains TeamCity 身份验证绕过漏洞(CVE-2024-27198)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500571&idx=1&sn=93d2bf14c6eef1d712d4c08f9cad89e4&chksm=fe79e783c90e6e9545858c513efd8da48ed4d8b7bc712b2fadbac9085b14ba37f6993e945bdd&scene=58&subscene=0": "【EXP公开】JetBrains TeamCity 身份验证绕过漏洞(CVE-2024-27198)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458543989&idx=3&sn=ccf1a55ad02e8beee30b6abcd4385f6e&chksm=b18d57ff86fadee97f7955b2db994797714254d6485260df89836bb481ac86f9e776cd16e9c2&scene=58&subscene=0": "更新第六章:代码审计之实战查找微软内核模块漏洞-0day2期欢迎报名", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786224&idx=1&sn=6d3423264fc4b37f945f612460f14354&chksm=8893b71fbfe43e09a0270311f95a8da0671c935932195c68310a6cfc80c3edefd06f82fbc3f0&scene=58&subscene=0": "CI∕CD工具—TeamCity被曝出两个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499000&idx=1&sn=70b6a8501fe6a45115c8fe82a92cba35&chksm=973acf9aa04d468c0a27dc613197e2661895762ecf19461448873c6d72a24263d4a93c2fa037&scene=58&subscene=0": "CNVD漏洞周报2024年第9期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499000&idx=2&sn=4e18df1c9cf530cd4edb224c4e569985&chksm=973acf9aa04d468c9e9f939af916bfd2b2aee1b2a704c62a14c77ebd956a12fd6a595edf9de4&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240226-20240303)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518992&idx=1&sn=7af87c035a996a3b64a0c389013aa003&chksm=ea94ba7adde3336cf762a515bae94e33d55782b3f4e24f46be397a1301e9f26404e7bc16985a&scene=58&subscene=0": "速修复!TeamCity中存在两个严重的漏洞,可触发供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485881&idx=3&sn=0d998a44ce5db8293faa0b83e118406b": "Laykefu客服系统任意文件上传漏洞复现(附POC)", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247485881&idx=1&sn=86bd4a7de91e2609037a4512f44d02e2": "【漏洞复现】CVE-2024-2074", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247494290&idx=2&sn=dc4989c9a204dc1b2af97e9afa3f7356": "网络安全知识:漏洞管理五大原则(英国NCSC)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487682&idx=1&sn=7606313992da8fb504d5b6074c7c3dda": "【漏洞预警】VMware ESXi & Workstation & Fusion释放后使用漏洞(CVE-2024-22252)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487682&idx=2&sn=feff54b01e61188ffd725e7d0c5c52e7": "【漏洞预警】LangChain 远程代码执行漏洞(CVE-2024-28088)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493789&idx=1&sn=cadf3c5c97133e2c0e40d48f0875bd4f": "一次十分详细的漏洞挖掘记录,新思路+多个高危", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247487880&idx=2&sn=1b9c377ba1399ae4a871a92d8960501c": "逻辑漏洞测试系列-水平越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwODc2NjgxNA==&mid=2247483998&idx=1&sn=458260eabdb4ebe9e3c9d30dfd288ee4": "CVE-2023-46805&CVE-2024-21887 Ivanti connect secure RCE分析", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092596&idx=2&sn=5c9cf4659a1e8e93b3c04038038028e1": "【漏洞通告】VMware ESXi & Workstation & Fusion释放后使用漏洞(CVE-2024-22252)", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092596&idx=1&sn=f3425bb19517d429363113b19d99e885": "信息安全漏洞周报(2024年第10期)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651260623&idx=3&sn=bb0d833a9293a9a1744bb5e0c2bc5f19": "苹果曝出两个 iOS 系统 0-Day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055310&idx=1&sn=9cbeda175cf94757508a85ce0ba2024d": "【安全圈】未落实网络安全,存在安全漏洞,北京5家公司被罚!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055310&idx=4&sn=c8c7b9188be8638e89bb2d8f9a9c41db": "【安全圈】苹果推出紧急补丁,以修复iSO平台中的多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMzkzNDA1Mg==&mid=2247509087&idx=1&sn=fbc1e2a2d4c53c467d781fcd58b3996c": "TangGo测试平台|逻辑漏洞测试系列-水平越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjEzOTM3NA==&mid=2247503694&idx=1&sn=940eec278a32df7ee61d69579b271c85": "CVE-2024-27198:JetBrains TeamCity 身份验证绕过漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247493477&idx=1&sn=e17c6ebffcea800822c3ccebc85f1107": "【论文速读】 | AI驱动修复:漏洞自动化修复的未来", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458544969&idx=1&sn=473822d99738dc8c20cf0c7df866adea": "winrar(CVE-2023-38831)漏洞原理", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664711138&idx=1&sn=f02f6ae8c8190627e5bc2499455b5220": "Tomcat系列漏洞之五——AJP协议文件读取漏洞(CVE-2020-1938)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493826&idx=1&sn=947a5ac7d907901aba67f4e2e37b9365": "逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIyNzU2NDIwOA==&mid=2247489417&idx=3&sn=9abc2519c27e2610066eb316e67a729f": "WordPress插件Bricks Builder存在RCE漏洞(CVE-2024-25600)", "https://mp.weixin.qq.com/s?__biz=MzIyNzU2NDIwOA==&mid=2247489417&idx=1&sn=83daeb830777a2a77026cb320249db98": "金蝶EAS ∕easportal∕tools∕appUtil.jsp 任意文件上传∕下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485575&idx=1&sn=bc87a8407d23a47c26feea3d8bcb0e0e": "SpringBlade list接口存在SQL注入漏洞 附POC软件", "https://mp.weixin.qq.com/s?__biz=MzIyMDAwMjkzNg==&mid=2247513094&idx=1&sn=ff09422e025d8e81a9918f9332b6a819": "WatchVuln 高价值漏洞采集与推送", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487714&idx=1&sn=d7c85faa0a10525e265208d206158dc9": "【漏洞预警】Progress OpenEdge身份验证绕过漏洞(CVE-2024-1403)", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485658&idx=1&sn=1c0f92a2bad57e09a329684641377a5b": "WEB漏洞扫描工具 - GHR", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652055686&idx=4&sn=20d85eb25d544dfa3a5563a4cd4efe8f": "【安全圈】因Ultimate Member Plugin出现安全漏洞,10 万个 WordPress 网站遭受攻击", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247498719&idx=1&sn=cadadf8b5bc832c1959933cc7ff0f071": "迅雷客户端被称存在多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499030&idx=1&sn=aa65a60ed1e74c3d290af2870f7514bf&chksm=973ace74a04d4762b964b2c8765d0096420b8e1d56ba3ba5d8811f54c518b66566058c66ab4d&scene=58&subscene=0": "CNVD漏洞周报2024年第10期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499030&idx=2&sn=50cb62e8622432459219e7de61380dbb&chksm=973ace74a04d4762208cdfcbab24355cd2001eb65f90d1fb18d336500357b01fa415313e3632&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240304-20240310)", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247502891&idx=1&sn=58414256162c2eae5a7d0add74ddfe54&chksm=eaf98467dd8e0d71265e6ddce4e0e2da32ffb93e9b59ccd827bd3ff9e059d86940c20c8d4c76&scene=58&subscene=0": "补天平台助力|龙年首场「漏洞攻防安全」第13期安全范儿沙龙开启!", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247502891&idx=2&sn=499431a28fcf3acb0dcd51a1f1415ec4&chksm=eaf98467dd8e0d719b30fdb21758d6747c37a95fa515e09a63aea5180be62bb1bdd2793f2c10&scene=58&subscene=0": "奖金翻倍| 2024补天通用型漏洞专项活动第一期上线!", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522272&idx=2&sn=84da7fcddfdc5de1104b27a9d2d2a677&chksm=ce461cf0f93195e65bfec964da00c9c358eb2f97a316e0e33bef64076d53ddf6a530b5eb16f5&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240304-20240310)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458548735&idx=1&sn=72c81d8050451dd712ca53b73b7b63ba&chksm=b18d497586fac0631ba8e57b8b4043b92a8644d3f1dc7facccbbcc0160b58cbb0f5843e4d421&scene=58&subscene=0": "Chrome v8漏洞 CVE-2021-30632浅析", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247502423&idx=1&sn=b267e37126c3c1551584fb2918328564&chksm=ec9f1324dbe89a32d0b0eaf42cafc557c0df497f0eda36a11c6bb2cd84624b5120694402d195&scene=58&subscene=0": "24年2月必修安全漏洞清单|腾讯安全威胁情报中心", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484931&idx=1&sn=559cde17b20b2437e36eaaf56ef34c62&chksm=c2b10475f5c68d632698c341898ab94cf9ae0f661d0c7c9d155e6835bef47c1d34c2f376b3de&scene=58&subscene=0": "腾讯安全威胁情报中心推出2024年2月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247543605&idx=1&sn=4bed4564c2f6c8e49adce900bb4e7f5b&chksm=fa939df4cde414e2ceb8499874aee461a88532a71f556ac0e1fb9e85e02a41a532095d2790ad&scene=58&subscene=0": "GitHub推出全新AI功能,可自动修复代码漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4OTI0MDk5MQ==&mid=2247491127&idx=1&sn=dfad7037596dbd3add485aa345853935": "【漏洞复现】Ruby On Rails", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486219&idx=1&sn=0c0c81e5ead29522267c451e91977fc4": "CVE-2024-27954", "https://mp.weixin.qq.com/s?__biz=MzIzODE0NDc3OQ==&mid=2247492618&idx=1&sn=807f435f7dd6f5cce1dbd5a6ce15705d": "Bluetooth 0-click code execution CVE-2023-45866", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486286&idx=1&sn=8f480d0ba2f21dc406223e9ccb3b20a4": "商混ERP系统sys接口存在SQL注入漏洞|漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493980&idx=1&sn=dc40cfcd2b0821e72215a20eddc8d24b": "【HackerOne 精品】6000 美金的 XSS 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651264404&idx=4&sn=3e72e0ecbc1e9c6a2a83e2fe7c379a32": "Bugsy:一款功能强大的代码安全漏洞自动化修复工具", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651264404&idx=1&sn=10dbfe89be9ec3f04d973808f5b7e5bb": "可能吗?CISA竟想“彻底终结”SQL漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487814&idx=1&sn=819a1c9e7f41fa8dc9fd7f9d254ff7ae": "【漏洞预警】Adobe ColdFusion任意文件读取漏洞CVE-2024-20767", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492449&idx=1&sn=48ba7e937138d503e8c0e2a488721689": "漏洞复现 || 某智能上网行为管理系统前台RCE", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzc3MTk3Mg==&mid=2247488598&idx=1&sn=cdf765f5c51977504733f815ae5dd64b": "TeamCity身份验证绕过漏洞分析(CVE-2024-23917、CVE-2024-27198、CVE-2024-27199)", "https://mp.weixin.qq.com/s?__biz=MzkxOTUyNTg2MA==&mid=2247483944&idx=1&sn=fd75a1aa06d7a456a690cc52fe951ddf": "【漏洞复现】[0day推送] 宏脉医美行业管理系统 存在中危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519162&idx=1&sn=3872fcc82018e2c561d9e4e7574f0c8e": "开源AI框架 Ray 的0day已用于攻陷服务器和劫持资源", "https://mp.weixin.qq.com/s?__biz=MzUzNTkyODI0OA==&mid=2247525890&idx=1&sn=5de11c033d9376dd8e262841f38814e8": "DSN Injection(CVE-2022-3023)", "https://mp.weixin.qq.com/s?__biz=Mzg5OTY2NjUxMw==&mid=2247511452&idx=1&sn=ee5f8a0178c04cd91338798f792fd9ce": "漏洞图形化GUI一键利用工具(Spring-Core-RCE漏洞)", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247494946&idx=2&sn=02d50f2b437664def333b2a80d7aac2c": "【漏洞通告】Deno socket会话数据污染漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247494946&idx=1&sn=5a3114933a12f61a8d2e21d69b9424db": "【漏洞通告】Adobe ColdFusion任意文件读取漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA3MzI5NzY0OA==&mid=2247495581&idx=1&sn=c4d0144166aa907f162ffcecda20cbbd": "漏洞预警 | 用友UFIDA-NC任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwODc2NjgxNA==&mid=2247484004&idx=1&sn=072a102fa5f979693faaa03d19421aa1": "【更新】Ivanti connect secure RCE 补丁分析", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247543740&idx=3&sn=6097bb49d99b6376cdbba37144870931": "超过 28500 台 Exchange 服务器易遭受漏洞攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505189&idx=1&sn=9fe394a427df211cccf1c6390ce9da51&chksm=cfcab631f8bd3f279dd396be170671433c941a471def299e640590ac31f215a6b4b28dcda809&scene=58&subscene=0": "漏洞通告 | 泛微E-Office10远程代码漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458548995&idx=2&sn=eea5aeafd6e1bb9fb005b7bf21837a38&chksm=b18d4b8986fac29f3176d7a883999b36db65f53416c5640e5e948ffc49298c494ea8fcbe31cc&scene=58&subscene=0": "安全研究员披露AWS Apache Airflow漏洞细节,可导致账户接管", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486230&idx=1&sn=cb33ac0ca58855cb11b9620578142bda": "CVE-2024-29666", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486302&idx=1&sn=e4dbe7cdfe961cb1d5c98146de4de563": "SSRF自动化漏洞检测利用工具|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487820&idx=1&sn=da76d8bfce8c7e9afd1f489221f65146": "【漏洞预警】泛微E-Office10 < 10.0_20240222 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489215&idx=1&sn=562c955dcd4ffdb53aaa530100609392": "泛微E-Office10存在phar反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247493985&idx=1&sn=516d038796221267d699f72ae3ca8338": "SRC漏洞挖掘--并发", "https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247490625&idx=1&sn=5a47ad28e5f4b1f93af3073a3ea406be": "荔枝课堂 | 在 iPad 上用 PDF Expert 3 看书学习是一种什么体验?", "https://mp.weixin.qq.com/s?__biz=MzkxNTU5NjM5MQ==&mid=2247485345&idx=1&sn=3fe33166e30cea5be21ce84626debd5c": "【漏洞复现】通天星CMS安全监控云平台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247488616&idx=1&sn=e8fed40eb8ff25099321e93e40b2c15b": "创宇安全智脑 | Adobe Coldfusion pms 任意文件读取(CVE-2024-20767)等19个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzkyNjMzMTcwOQ==&mid=2247495104&idx=1&sn=56d4debae4349ceadd3510cc50a9c436": "0328-新型僵尸网络感染全球88个国家∕地区-主流AI算力框架漏洞威胁全球数千大模型-印度国防部等机构被黑客打穿", "https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247517622&idx=2&sn=47efee5348d9b9f2085e21ca240808d2": "要闻 | 主流 AI 算力框架漏洞威胁全球数千大模型", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247543768&idx=1&sn=a853ae8ac46fbf500233d3f101949f32": "主流AI算力框架漏洞威胁全球数千大模型", "https://mp.weixin.qq.com/s?__biz=MzkyNjU3NDQ1MA==&mid=2247487883&idx=1&sn=bfef00a76750c743eebe0d8207405d9a": "【漏洞复现】CVE-2023-51385:OpenSSH命令注入", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651131325&idx=2&sn=8459d54436b80fa2fc498b040dcf767f": "3月漏洞快报 | GeoServer 文件上传漏洞、Atlassian Confluence 路径遍历漏洞......", "https://mp.weixin.qq.com/s?__biz=Mzk0MTMzMDUyOA==&mid=2247496453&idx=1&sn=20c7bc4b2233a9b58c5a5aa7c30cee44": "黑客利用 Aiohttp 漏洞寻找脆弱的网络", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485558&idx=4&sn=743bd885a1ce1470ba8d1bde660fecff": "【漏洞通告】章管家-印章智慧管理平台文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485558&idx=3&sn=0af61fddc145a5a1ce5d73d29b9411b7": "【漏洞通告】Adobe ColdFusion 访问控制错误漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485558&idx=2&sn=826669b0b0f740d3651b381d0242a88a": "【漏洞通告】用友NC Cloud runScript SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485558&idx=1&sn=37a0418c8edf9203555603773d3752c6": "【漏洞通告】用友OA IPortalSpecService目录穿越漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247505539&idx=1&sn=ccc26f685a9dc6062dbc10b117d1285c": "小米WiFi路由器漏洞挖掘-WAN 命令注入、LAN 认证后堆栈缓冲区溢出、LAN 身份验证命令注入、WAN 堆栈缓冲区溢出", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247505539&idx=3&sn=62c3a000b7bef18ea4036c8cf9165503": "CVE-2024-2398:HTTP∕2 推送标头内存泄漏", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247505539&idx=2&sn=72a4e1ab4f360bb7cd2f337f9cc54799": "剖析复杂漏洞并在 Ichitaro Word 中实现任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247554593&idx=1&sn=3d4a275472688f91ef388d6c8f9fbb18": "10 大 Web 应用程序漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247538459&idx=1&sn=e374e97e65473d8856accc0efd8b5e67": "漏洞挖掘 | SRC中信息收集姿势分享", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247607300&idx=1&sn=7f70d17047e0819dc42890cc505bebaa": "支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522400&idx=1&sn=8af575b3c82a15d8a57822191d69c208": "【漏洞通告】Adobe ColdFusion任意文件读取漏洞CVE-2024-20767", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247491131&idx=1&sn=4a184451e517b120f4504fe73c03c19d": "谷歌针对PWN2OWN 2024演示的两个Chrome零日漏洞进行了处理", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511311&idx=2&sn=8b9d344600b36db40c81d164df732d03": "2023年零日漏洞在野利用激增,商业间谍软件是主要使用者", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458549131&idx=2&sn=9c4555bf5a8d04009f6bab88e564c52c&chksm=b18d4b0186fac217e252dde4f3c3d7f9d44c2cfcb1497f9e5e4d49f1afe020772601235568da&scene=58&subscene=0": "不取消上百次弹窗就无法正常使用,苹果密码重置功能疑似存在漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519170&idx=1&sn=31612ff9461ff59184a818b76f04c198&chksm=ea94baa8dde333be86a1b2054ea40407dfa5a45d469b948ac55085e5f64e7872f7e2007c90ad&scene=58&subscene=0": "谷歌修复 Pwn2Own 2024大赛发现的两个 Chrome 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519170&idx=2&sn=bbf2c37f65d8ab7122da6825cea54ef3&chksm=ea94baa8dde333bed9f1c3fa01b9fe5132e2e6d1eaf38be56ab90a1500647629f3819d43f19c&scene=58&subscene=0": "CISA称微软 SharePoint RCE 漏洞已遭在野利用", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500654&idx=1&sn=0e9efd6338a68c4c46c4f6f2af38cc04&chksm=fe79e7f6c90e6ee0d161aaa94ec7e06bae37418bd357356715429d4bd59751f128e6fc8a7f7e&scene=58&subscene=0": "【已复现】泛微E-Office10远程代码执行漏洞(QVD-2024-11354)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488965&idx=1&sn=556eb049bdac71a03f7d670be613816e&chksm=fb02989dcc75118be00917391c9080afa4cc49c1d5ce676f2132ecedd618ec0fe218dd74a3c9&scene=58&subscene=0": "【已复现】泛微E-Office10远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519178&idx=1&sn=e03416d8382a0192cc080f67a6f30691&chksm=ea94baa0dde333b655edb3b47d9505cf59acf160659e24e10eff72a4943f2033fac0444c0c3d&scene=58&subscene=0": "Linux “wall” 漏洞已存在十年之久,可制造虚假的SUDO 提示并窃取密码", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786425&idx=1&sn=5830cf62482d6bfc335629be5b0f6606&chksm=8893b856bfe43140f136c1985635028c31250323de6af0a05cef8d515dd816e0ea51b157bb28&scene=58&subscene=0": "NIST 成立新联盟来运营美国家漏洞数据库(NVD)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247574444&idx=2&sn=c7e6ff780300c9434d58561540b5e499&chksm=e9147396de63fa80203f595755d777c9286b4aec11324aa35a4f21d92474139dfb21873beb5b&scene=58&subscene=0": "ScreenConnect 管理员应尽快修补关键的 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247543799&idx=4&sn=9655168f486af863a11547b32a0b2409&chksm=fa939d36cde414202df8d918c7b5de9dbe961c92936825abb8a28780c9b38b11f91b883ca245&scene=58&subscene=0": "黑客披露“万能房卡”漏洞,可秒开全球数百万酒店房间", "https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247488989&idx=1&sn=ee3491ee73099e611baa204ede650ccc&chksm=fa58b7e6cd2f3ef02a46251a49b176df9de4e0664a1e245dc53e1b69044704e1183096b92857&scene=58&subscene=0": "Exchange攻防系列之CVE-2019-1040分析", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500698&idx=1&sn=55b287a54a2234e171ae65f1330ef1b7": "【事件描述修正】XZ Utilѕ 工具库恶意后门植入漏洞(CVE-2024-3094)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486316&idx=1&sn=ce076b31fcc0dd3bf274829e05ed7795": "记一次非法网站资金盘股票基金的渗透-漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247513196&idx=1&sn=89a7a46bd92ca27ac0f0a677cf34f43f": "【核弹漏洞?】XZ Utils供应链投毒事件分析", "https://mp.weixin.qq.com/s?__biz=MzkwNDUxNjg4MA==&mid=2247483861&idx=1&sn=7982bbb4c018d90df91cb344b01ab2f1": "(互联网未公开)海康威视综合安防存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494000&idx=1&sn=dba6edab2fd2c650fc34cd11978c2867": "子域名接管漏洞: 赚钱小技巧", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519193&idx=1&sn=14b16d44e50babd5dd2fa00c4bd1bffd": "XZ Utilѕ 工具库恶意后门植入漏洞(CVE-2024-3094)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652056942&idx=4&sn=eaa8333399a2ce5e9600f453b7943168": "【安全圈】微软重发 Edge 浏览器 123 稳定版:修复兼容性问题和 4 个零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486271&idx=1&sn=9f4aae9666bb716d22442f6bad7b4b51": "CVE-2024-20767", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247485897&idx=1&sn=518fbf058d20c47407c26ccf2db279ab": "大华智慧园区综合管理平台poi任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485971&idx=2&sn=1eb9e5a46400b4cc7397129578694b26": "联达OA UpLoadFile.aspx接口存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247485971&idx=1&sn=1ff418faefa7d29d963287d2dcc9484f": "用友U8-Cloud FileServlet接口存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494007&idx=1&sn=3f9011bbf0046f9d7102ff0daddd29fc": "命令注入漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247493909&idx=1&sn=b3a8b70dcdfa0f216fd30431abf562f8": "xz-utils后门漏洞 CVE-2024-3094 分析", "https://mp.weixin.qq.com/s?__biz=MzU3OTMxNjkzMQ==&mid=2247483986&idx=1&sn=234c883831335ae0330c26fba860d8c8": "Weblogic CVE-2021-2394漏洞复现分析原创", "https://mp.weixin.qq.com/s?__biz=MzkxNTEzMTA0Mw==&mid=2247495018&idx=1&sn=9cb79ea7183c80a36b5f9792911c2baf": "【漏洞预警】JumpServer 多漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247505719&idx=3&sn=5d0fd35d8874bd4fd084291ba94d1fc3": "CVE-2024-3094 一个带有XZ后门的SSH蜜罐", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247505719&idx=1&sn=1f4d6ce8cb103b37b335c82f92b1340b": "深入研究 CVE-2023–46298: Next.js 中的拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649290882&idx=1&sn=baf1bfbcb1b39f3e2cbfe1ad5d12f218": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664209397&idx=6&sn=be9efc82bc65c10ad880920bca6539ca": "评论 | “免密支付”的漏洞亟待填补", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487853&idx=3&sn=2d1fa8fd9300ad894a1f41c71b2b3854": "【漏洞预警】Jumpserver<3.10.7 Ansible Playbook远程代码执行漏洞CVE-2024-29201", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487853&idx=2&sn=35732e7164c81938a5f7d204cde918d5": "【漏洞预警】Jumpserver<3.10.7 Jinja2注入远程代码执行漏洞CVE-2024-29202", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487853&idx=1&sn=dd50d3e37c4d416809685a09f4c58752": "【漏洞预警】XZ-Utils 5.6.0-5.6.1版本存在后门风险CVE-2024-3094", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519204&idx=2&sn=6fc646b9575f6837ef0f55d569c11709": "思科IOS 漏洞可导致未认证的远程DoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzkwOTQ4NDMzOQ==&mid=2247484052&idx=1&sn=f1db0401adfcbf86526acb55808a0dc7": "CVE-2023-38203", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486000&idx=2&sn=12e45cf3af24ebcdc81ccc30d3a8dbf3": "鸿运(通天星CMSV6车载)主动安全监控云平台LoggerManagement∕logIndex.html存在未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486000&idx=1&sn=5d24679dac266958d742b78f30b98de9": "鸿运(通天星CMSV6车载)主动安全监控云平台inspect_file∕upload存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487866&idx=1&sn=f998f19b60ebf8d11943b4411d955266": "【漏洞预警】WordPress LayerSlider插件SQL注入漏洞(CVE-2024-2879)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488660&idx=1&sn=96a5c25bc8f280014e0e70e0ec13cff4": "【分析复现】XZ供应链后门漏洞(CVE-2024-3094)处置手册", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496627&idx=1&sn=0f65a56d67de2ead7f9ee32ff1441632": "XZ Utils(CVE-2024-3094)供应链投毒深度分析", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489024&idx=1&sn=e35e250d13bd0a6c8fdb9625f0554221": "Nginxwebui后台命令执行审计", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519223&idx=2&sn=a927e2b6bd81218102ea07e2de3133d7&chksm=ea94ba9ddde3338bf760ba11cb2fb665b8ad6e728bcc5b21ea7c1c1bf46968a037b5e55499a3&scene=58&subscene=0": "热门Wordpress 插件 LayerSlider 中存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651128989&idx=1&sn=b1ae740d4e11619094d5cf8cc9a55698&chksm=bd15b44e8a623d58acfa9e49102a301d884cf65374356b078a2b911e6fd623157337450c8073&scene=58&subscene=0": "6款较流行的开源漏洞扫描工具推荐及特点分析", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500763&idx=1&sn=36a25dd1e37297d53f703886c53936d8&chksm=fe79e743c90e6e557207868cb9253e5706af7b6524e5578bea2afa581c7669304011d69779e1&scene=58&subscene=0": "Ivanti Connect Secure IPSec组件堆越界写漏洞(CVE-2024-21894)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519250&idx=1&sn=a9eb759176bc25d080dd038567016edc&chksm=ea94bd78dde3346e8571088ffb3e1104df63785be22cebfc4b338fab213de9a5a83aec96d089&scene=58&subscene=0": "Crowdfense 出价3000万美元收购安卓、iOS和浏览器0day利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519250&idx=2&sn=9683638aaf21b4d1d794837ff20dd0ab&chksm=ea94bd78dde3346e88bfadb96c14584c0b4fe336e7c708699ee52db68640ead992388acf139e&scene=58&subscene=0": "Hugging Face 等AI即服务平台易受严重漏洞影响,遭AI供应链攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550068&idx=3&sn=b0b82cb9cf39f1a3443ebf12c2f507f3&chksm=b18d4fbe86fac6a8fe7e5f94f7757b8f756a265271f77305a95e0008a61645c529bbde5c44ec&scene=58&subscene=0": "直播回放更新!《系统0day安全-Windows平台漏洞挖掘(第2期)》", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247543958&idx=4&sn=3c0264c3e19c2bfae69e45f21470e8f1&chksm=fa939a57cde4134105726d648d0e3d8f619fc6878801ea60da7036a36589adb5f54bcc3140fc&scene=58&subscene=0": "五角大楼如何修复军方软件的漏洞?", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247494090&idx=1&sn=6ef2ecf03ef493a5a3737cea4a3983ba": "CVE-2024-24747:MINIO权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486329&idx=1&sn=dc072b8a3dc27a3026f0d52573895bc2": "CVE-2024-25850", "https://mp.weixin.qq.com/s?__biz=Mzg3OTE2MzM3OA==&mid=2247486367&idx=1&sn=5881535399d45d92fb742a0006cce4e5": "从exp反推CVE-2022-0847dirtypipe原理", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486424&idx=1&sn=03255073f7b42f0e9be73b574faf41bb": "一款FastJson反序列化漏洞利用和扫描探测工具|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkzNjM4OTM1Ng==&mid=2247483937&idx=1&sn=c7d9672aa29113677f5568c2fd754db8": "自定义BurpSuite漏洞扫描——BChecks", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487906&idx=2&sn=3b663cd78d143b6d7025d136c7875d51": "【漏洞预警】微软4月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487906&idx=1&sn=31d3975488ea70eaa313a33392d56ed6": "【漏洞预警】Rust命令注入漏洞(CVE-2024-24576)", "https://mp.weixin.qq.com/s?__biz=Mzk0NzM4NzI1MA==&mid=2247486080&idx=1&sn=683d1626ce23f2c41030bd1d7476165a": "RCE 遇到受限 shell 的突破", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486137&idx=1&sn=0458efb9a23f7e3a9d497bd77a4d3c7a": "科荣AIO ReadFile存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494135&idx=1&sn=44c33bdd7690fe2ea031245298bdd126": "一次从子域名接管到RCE的经历", "https://mp.weixin.qq.com/s?__biz=Mzg3NDk1MDczOQ==&mid=2247484796&idx=1&sn=e73164cc96f9e27da353ab7f6908bf01": "[已复现]新视窗新一代物业管理系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247518176&idx=1&sn=90cfa09dbf84357f6a1c4300cffd6c72": "2024-04微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzA5OTk2OTY5MA==&mid=2247485625&idx=1&sn=380b56cb7473293d20228f702cb8cb6e": "Microsoft 4 月 CVE 漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511378&idx=1&sn=cfca32cff1fd0c9419c314d202d200f3": "预算超2亿元,这家经纪公司扩大零日漏洞收购规模", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506149&idx=3&sn=a94dd6d79f3ea2442ace4fd288bc287c": "Jasmin勒索软件Web面板路径遍历PoC", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550115&idx=2&sn=d2aed2de5ebd3bc02bec72a88ef2f7ef": "Rust一个满分漏洞可能允许Windows命令注入攻击", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651443822&idx=2&sn=6f89e00b73cc0ad9aae5c2625e1871cc": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651443822&idx=1&sn=4006b8f450294fe6781b95b25782851e": "信息安全漏洞周报(2024年第15期)", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247490987&idx=1&sn=7ba3a5bc3a14039326a4aa92a6e2869b": "漏洞预警 龙卷风科技 cms 存在文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649786486&idx=1&sn=0b1fe310f847fda664a13e169c44bdaf&chksm=8893b819bfe4310f844dc42f1fb37387854af647c231c2cc99d040138efcc589c256dfb8e2a5&scene=58&subscene=0": "注意 | 声称最安全的编程语言Rust存在严重漏洞,可导致 Windows 命令注入攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519261&idx=1&sn=1f669e17acccbb5f3a974c466686d164&chksm=ea94bd77dde334619c916fa753497a102ad012bb069cba0cc174d147abf2488f2e649f7953f7&scene=58&subscene=0": "微软4月补丁星期二值得关注的漏洞:4个0day及更多", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519261&idx=2&sn=0dedc7825e43786bfe415b3a48661fbe&chksm=ea94bd77dde3346150266a53a373ba5200b6159f9ce9c7df03c128362f69bcfe9acad316e3a6&scene=58&subscene=0": "Rust 严重漏洞可导致 Windows 命令注入攻击", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247505349&idx=1&sn=bc76600ed4fedc1136e7b458d01f16b0&chksm=fa52007bcd25896d4240214ec76a6f9c0908cfa3787f40fcf15612f1cc179c9a0c78d8952558&scene=58&subscene=0": "Windows DWM 核心库信息泄露漏洞 (CVE-2024-26172) 复现分析", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499080&idx=1&sn=8613db53c72860bf4522895b44c696bf&chksm=973ace2aa04d473c112a608c469f020910b862231d26a49c7c7bf1dff1cba44332c233efe9fb&scene=58&subscene=0": "CNVD漏洞周报2024年第14期", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499080&idx=2&sn=7400ea9d589f19c9a6f00a45fb17a2a1&chksm=973ace2aa04d473c7a97867e20df0beb308bdeb35639a62a3444c0272d953b8127f7771c5fdf&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240401-20240407)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500774&idx=1&sn=84281239bf961b4365aa776129d2e847&chksm=fe79e77ec90e6e686d176ffe08d2e74cd7aa270544794f82b0dd2d7d638329cb644094a18263&scene=58&subscene=0": "微软2024年4月补丁日多个产品安全漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247513284&idx=1&sn=2cb391d068c745c8a93a717c283ef2af": "CVE-2024-23897 Jenkins 未授权任意文件读取漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486150&idx=1&sn=9b0138cc0cb06187b6dc752daa33774a": "泛微e-cology ProcessOverRequestByXml接口存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487911&idx=1&sn=c871371a4ba8a8e655c462660a8ef0a4": "【漏洞预警】Fortinet FortiClientLinux远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489252&idx=1&sn=ee1701dbb0ce1a632c358edc2c0de88a": "【风险通告】Rust存在命令注入漏洞(CVE-2024-24576)", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247484400&idx=1&sn=911457d40c9367d65873c93dd19f2c6f": "用友NC saveImageServlet 文件上传漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651268393&idx=2&sn=43a03b00233393e578ae3d272da26acd": "幽灵漏洞进阶版来了,影响 Intel、Linux、AMD......", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652057774&idx=3&sn=a77597c1440f539a9f5a13ff0da2a117": "【安全圈】“幽灵漏洞”阴魂不散,v2 衍生版被发现:影响英特尔 CPU + Linux 组合设备", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664210309&idx=4&sn=b0bb2aca1b0c8db8ba91010ab77ec3e9": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg2MjYxODQ4Mw==&mid=2247484972&idx=1&sn=cfa9f7e367425e2ecd111de8573dfb6e": "CVE-2024-28255 RCE漏洞(附EXP)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550184&idx=3&sn=460ecdad566d58a41244507c95605b30": "二进制系列之Pwn篇-逐步掌握二进制漏洞挖掘的技巧和操作系统底层知识", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506182&idx=2&sn=c527988846019638d3899358e92fab22": "针对 6.4 - 6.5 内核的漏洞利用以及针对 5.15 - 6.5 内核的另一个漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506182&idx=1&sn=cada28147393750a176a8bf29bc2bb36": "Telegram 网传RCE - 官方回应", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506182&idx=3&sn=4dd39f50fd099eb5f7bf07485d9e25b6": "CVE-2024-27980:关键 Node.js 更新修补 Windows 命令注入缺陷", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500805&idx=1&sn=144ae8281feb31c590c9613eaa0bdbed": "Rust 命令注入漏洞(CVE-2024-24576)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486368&idx=2&sn=99df254bffc14e7369ddd4448ff928ee": "CVE-2024-3273", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486185&idx=1&sn=1e454d13e5415d343d126acc74b85954": "魔方网表mailupdate.jsp接口存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247497807&idx=1&sn=34b93137c6b9407cd8803c15eed57b13": "G.O.S.S.I.P 阅读推荐 2024-04-15 爱因斯坦的Exploit之梦", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494257&idx=1&sn=750407a3bb0fb18f096441cb20b2c4f3": "赏金猎人|SRC拿下某后台系统多个高危漏洞思路及试探通用型漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzOTY1MzcyOQ==&mid=2247487056&idx=1&sn=cbfa09b1d08148544bb089999120b43d": "一款对于web站点进行漏洞扫描的打点利器", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487938&idx=2&sn=ccb3a5fd20b1f2e4bd0252e896c30fc5": "【漏洞预警】Telegram Windows客户端可执行文件限制不当RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487938&idx=1&sn=7edfc201ddbb636bb7611bcb81ffba55": "【漏洞预警】MySQL2远程代码执行漏洞(CVE-2024-21508)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487938&idx=3&sn=9325502dd73dd75f5f843823dbaa4182": "【漏洞预警】Apache Solr Operator身份验证凭据泄漏漏洞 CVE-2024-31391", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487938&idx=4&sn=ae9a00e481c1bc444a4e4893065ed782": "【漏洞预警】Apache Zeppelin shell 代码注入漏洞(CVE-2024-31861)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651269825&idx=1&sn=709fcda1e3a1fd566263d13d91b63716": "通过这个0Day漏洞,黑客对Palo Alto防火墙发起后门攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652058066&idx=4&sn=9d8c2d87b8078f7082a560de61e0f86a": "【安全圈】黑客成功利用0day漏洞对Palo Alto Networks的防火墙进行后面攻击", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5OTQyNQ==&mid=2247485208&idx=1&sn=4b5cdb3715bc9f0e21f17e335f07f3cc": "漏洞挖掘|记一次对某杀猪盘的漏洞挖掘(反诈)", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649290944&idx=1&sn=a317a261aecec799b738270b5967137e": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489052&idx=1&sn=905220836ff310a044727cead3c55952": "SnakeYaml 中不安全的反序列化漏洞 (CVE-2022-1471) 有感", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550386&idx=2&sn=aeab9c8b463c21d5814fee418d11d660": "知名防火墙厂商曝满分RCE漏洞,Palo Alto Networks警告漏洞正被利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519289&idx=2&sn=4c3fb5e7519056c3adfbd18c7a6561d3": "Telegram 修复Windows 版中的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519289&idx=1&sn=86e226003b5da9dd0d6867f4b45fcb1a": "Palo Alto:注意!PAN-OS 防火墙 0day 漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500842&idx=1&sn=74014f4c839835122d2fcd5c4b907597&chksm=fe79e0b2c90e69a41eda8e9264cb69bd11571200f6c94b24a7d589f1b458cb4a0d2065dc4128&scene=58&subscene=0": "【在野利用】Palo Alto Networks PAN-OS 命令注入漏洞(CVE-2024-3400)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486326&idx=1&sn=8c1ae944f8944dd4d5df1d7f3805805e&chksm=ec6fec76db18656019a8a522d91c414c9c49790d2e64f14d442071a0381f16d7bfca62a9d9b3&scene=58&subscene=0": "Palo Alto Networks PAN-OS GlobalProtect 命令注入漏洞(CVE-2024-3400)", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544052&idx=2&sn=7e48c5506ae1e7532f386274141b94ed&chksm=fa939a35cde41323ae5907b0136b24ec7aa9100d1083987619093a72ec61e904cf737213a216&scene=58&subscene=0": "英特尔、联想等服务器曝出难以修复的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522475&idx=1&sn=2a02d9b75e8a4b4a91ddd7093ac55368&chksm=ce4613bbf9319aad0cea1a5738f51a9675aabbcc2cc900d5093e108ab229beb1c10aecaef448&scene=58&subscene=0": "【漏洞通告】Palo Alto Networks PAN-OS 命令注入漏洞CVE-2024-3400", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494650&idx=1&sn=bc20d2fda592bce902ff328419c1bd66&chksm=fd74db33ca035225f90c3c008d6b0c56118d8d22b40136905cdc749486580d3bd3704ead78c8&scene=58&subscene=0": "CNVD漏洞周报2024年第15期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494650&idx=2&sn=7b0f9b8ede31b1d52636f9127c953d8d&chksm=fd74db33ca035225c12446a4a7e6babd60693712dd10066b9f20c1f7c619bb7d1be994f1554a&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20240408-20240414)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506392&idx=2&sn=7e269213d1a2f4e406f4047f316af91f": "漏洞解释:针对 Google Chrome 扩展程序的 ZIP 嵌入攻击", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247496&idx=1&sn=0b9f36983b22580c8375187a818728a4": "Palo Alto Networks PAN-OS 命令注入漏洞分析(CVE-2024-3400)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486270&idx=1&sn=42c4ed99574402368042d8c559a9ee64": "SpringBlade dict-biz∕list接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4OTkwMDc1Mg==&mid=2247484667&idx=1&sn=e9e8c1d64e0c5ecebbb8e2c8f8ecf119": "DataCube3 getting_index_data.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247483872&idx=1&sn=2c1f582bbff6fa9723f9588a09ac3762": "1day分享 | Geoserver命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487975&idx=1&sn=f9026f59ec859c6f1872bc065ddfb610": "【漏洞预警】SEMCMS安全漏洞(CVE-2024-30938)", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247484425&idx=1&sn=cf4f01ccf15bf85784b04d7b1948f033": "kkFileView远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652092710&idx=1&sn=c11d456be94b7a688a67aa50f4d66eef": "CNNVD关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664211278&idx=4&sn=e4de21613365aeacdaf08d5da06b5203": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247485249&idx=1&sn=73521e11f5efa433b5d1fd4b47071c05": "NodeJS操作符空格漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458550737&idx=2&sn=6c80e67db097d8326fdc8389b970f672": "西湖论剑2024 IOT赛后复盘及mqtt rce详解", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247536829&idx=2&sn=e58db9d1f93165cc04c561e9ce9124ca": "英特尔和联想存在永久的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519321&idx=1&sn=598d5437db9f0b64d4fa21e3acdace51": "一眼已攻陷:GPT-4仅凭阅读威胁公告即可利用多数漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDE0MzQzMw==&mid=2247487282&idx=1&sn=acf5661894b587fc89ca493f99d611ff": "2024年,还没有 CNVD 证书的朋友赶紧点开看看!", "https://mp.weixin.qq.com/s?__biz=Mzg4MzY2NjEyMQ==&mid=2247485931&idx=1&sn=6abcf5dfe3ce41f62d3fc66bed802a92": "Microsoft Edge 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486565&idx=1&sn=7448a7792682155820ffcdbe4b0e178c": "AppMsg一款适用于以APP病毒分析 APP漏洞挖掘 辅助分析工具|漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486348&idx=1&sn=d432918c3ca047ca2d86b05d23cbe883": "泛微e-office系统UserSelect接口存在未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247515970&idx=2&sn=1b694c92d92ac7ebaf1f63dade463580": "黑客利用 OpenMetadata 漏洞在 Kubernetes 上挖掘加密货币", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506711&idx=1&sn=e31319146e72455d708aa1f71cdc6233": "CVE-2024-21111 Oracle VirtualBox 权限提升(本地权限提升)漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652058573&idx=3&sn=f816d148cccd097b7142bc93e79eb352": "【安全圈】黑客利用 Windows SmartScreen 漏洞投放 DarkGate 恶意软件", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652058573&idx=2&sn=5f3912b3a736fb50ffb5bf29418df333": "【安全圈】GPT-4 会自己发起漏洞攻击,成功率高达87%", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247484150&idx=1&sn=b3a31717b711df154bec08d47d88c9eb": "Oracle VirtualBox 权限提升漏洞 (CVE-2024-21111):PoC 已发布", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651271350&idx=2&sn=dfbabe374f2ba05c3350e1fd1f5fe613": "Palo Alto Networks披露PAN-OS防火墙「满分」漏洞细节", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651271350&idx=1&sn=2c284ab4d95bae42b39325a6c6d3f06b": "GPT-4 竟然会自动实施漏洞攻击,成功率高达87%", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502884&idx=1&sn=d2dab0909dbc08fe8f759a3bbbe482d8": "雷神众测漏洞周报2024.4.15-2024.4.21", "https://mp.weixin.qq.com/s?__biz=Mzg2MTAwNzg1Ng==&mid=2247493362&idx=1&sn=39c9b1c4d709e5ad0babb44995b0e412": "大语言模型(LLM)漏洞爆发,AI模型无一幸免", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485659&idx=2&sn=79d267e7a37b2e78b084060d13a74f6a": "【漏洞通告】Jumpserver Jinja2 模板注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485659&idx=5&sn=924450d5db9ca98fb21fb33de1ffa1bd": "【漏洞通告】IP-guard WebServer权限绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485659&idx=4&sn=c8f4c6419cd568975cf9b99dcb078887": "【漏洞通告】大华智慧园区 ∕portal∕services∕clientServer SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247485659&idx=1&sn=3bbcc137b0ba1eb715c1582ff93409a6": "【漏洞通告】Jumpserver Ansible Playbook远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494688&idx=2&sn=501caaa2aa8922b2e5d4c250f1a4a3e8": "上周关注度较高的产品安全漏洞(20240415-20240421)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494688&idx=1&sn=2c8e62d2dd2c7b0c1aaa7fa9b4ab2dd5": "CNVD漏洞周报2024年第16期", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544184&idx=3&sn=58ebfa81bbbf55fa4d526c3859f8d5ca&chksm=fa939bb9cde412af2df7d6fc049625ccdf98f83a2a0c1721d891d7ab7ed7b21130a7f48c6a1e&scene=58&subscene=0": "多个僵尸网络利用一年前的 TP-Link 漏洞进行路由器攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790976&idx=2&sn=6efd3922f17c003c6fe84975dc8ba4b0": "思科针对“ArcaneDoor”0day攻击 ASA 防火墙平台发出警报", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649790976&idx=1&sn=f54ac35e75e7799b5e65e20e7a61b50e": "重大安全漏洞暴露超过 10 亿中文输入法用户的击键行为", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488003&idx=3&sn=98e268ed0e63e9a37e1bb39bb7cc843b": "【漏洞预警】Apache HugeGraph-Server<1.3.0 Gremlin命令执行漏洞CVE-2024-27348", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488003&idx=2&sn=24b871b27d1d681eb451eeaf79263e40": "【漏洞预警】mysql2<3.9.7 代码注入漏洞【CVE-2024-21511】", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488003&idx=1&sn=b2fd29b66f00e98755386b971fba47f7": "【漏洞预警】OpenMetadata 身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247493759&idx=1&sn=0aed37ae210bde25a6b16a745301b71d": "【论文速读】|大语言模型(LLM)智能体可以自主利用1-day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247511478&idx=2&sn=f343fed3f28e4bdfa0e471c2798fa586": "美国国防工业企业有了统一漏洞奖励计划", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651131946&idx=2&sn=b36fa26bacadfd65ab866b87562e84aa": "4月漏洞快报 | kkFileView任意文件上传导致远程执行漏洞、Apache Zeppelin 命令执行漏洞...", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247503783&idx=1&sn=e2ee9e5deef4500ebe00923511a02f96": "24年3月必修安全漏洞清单|腾讯安全威胁情报中心", "https://mp.weixin.qq.com/s?__biz=MzA3MzI5NzY0OA==&mid=2247495621&idx=1&sn=b84c2ebda979dcca1a78849215c36aa2": "漏洞预警 | PuTTY密钥恢复漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544237&idx=1&sn=1fed7846be19428a184ec5613db82c38": "原创 | 首个国内自主挖掘的RISC-V处理器设计中危漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247484976&idx=1&sn=7871c73733720064ba66d3875ee7a0df": "腾讯安全威胁情报中心推出2024年3月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505597&idx=1&sn=93fa04b43df8ae82cfac664f15622b82": "漏洞通告 | Primeton EOS Platform远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247488920&idx=2&sn=d68de2c4fdef8f150b172d5ecfdc9b63": "学习干货|玄机应急响应-网站被黑客0day攻击如何溯源应急(文末邀请码)", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247492555&idx=1&sn=f5d09c9ac4e0a1f943e620e440e578fe": "kkFileView远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzk0NTI2ODE1Nw==&mid=2247486045&idx=1&sn=7c055cc502e2633b2615772673a3b721": "某世界500强企业|存在通杀漏洞(0day)", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247484868&idx=1&sn=75a1a268f541c19b44c0cc02b71f258f": "CVE-2024-21111 Oracle VirtualBox 权限提升(本地权限提升)漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247486659&idx=1&sn=bc713e6b3b68b0249fc6c08abd67cbc2": "第91篇:shiro反序列化漏洞绕waf防护的方法总结(上篇)", "https://mp.weixin.qq.com/s?__biz=Mzg4OTkwMDc1Mg==&mid=2247484702&idx=1&sn=640525e999262abdbd738315953791cc": "致远互联 OA fileUpload.do 文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MDU5NjI0Mw==&mid=2247489645&idx=1&sn=2a0847aec0003c366cb842147ab3bbac": "沙龙议题揭秘 | 年度TOP白帽高危漏洞挖掘技巧分享", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519350&idx=1&sn=44cdd16335bfd4e16c8f57397e448771&chksm=ea94bd1cdde3340a03401c5d3c557a9d7ed61164d414c3cf30a1707f0002703fe0d7559b1840&scene=58&subscene=0": "WordPress 插件 Forminator 中存在严重漏洞,影响30多万站点", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519350&idx=2&sn=c98c01499f531e3ceed8f1597c30c578&chksm=ea94bd1cdde3340a7c757c539d7f708d85af2ff07df6f7ceeb2c4755fea809a41f36f2e1ab53&scene=58&subscene=0": "微软:APT28 利用由NSA报送的 Windows 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247499776&idx=1&sn=0a911fa45901a5932972e14270858451&chksm=cfc5675ff8b2ee495d846a9b662e33be44a3e19a634da8324603914721bf529c942959628a26&scene=58&subscene=0": "五一漏洞赏金狂欢!假期放肆嗨,出游更痛快,快来领取你的游玩经费!", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247543454&idx=1&sn=1e3e513726127ea179025260a0fba3fc&chksm=c1e9a6cff69e2fd9a94153a4bc4bf5b13ae544619572d63a32b4e01a4f77a12bdb5360349896&scene=58&subscene=0": "原创 | 首个国内自主挖掘的RISC-V处理器设计中危漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247505883&idx=1&sn=bad9d8ba4fab8ab9d675053cea5a82dd&chksm=fa520265cd258b7352f95924e83dd75474ae4714de7258bcb8bf6af41da268cf034bba1c3d7b&scene=58&subscene=0": "浅谈API漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458551587&idx=2&sn=ad2e7ca13d3c5f5590d9e51191f1357d&chksm=b18db5a986fa3cbf4e6bfd3c1c06ae327498f64ee737216f7708c8ea3569e11bd9605f097712&scene=58&subscene=0": "文件传输服务器软件CrushFTP曝0day漏洞,且已被利用", "https://mp.weixin.qq.com/s?__biz=Mzg3Mzg3OTU4OQ==&mid=2247489804&idx=1&sn=1cceae072cda0e60b3d6afab26db516c": "盘点PHP中的变量覆盖漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505621&idx=1&sn=4009baa900f475b0c2c1e5dbf56c01be": "漏洞通告 | 禅道项目管理系统权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651272965&idx=1&sn=1c44ccdf652fad0a6b7ac0407c1557a8": "经验分享 | 记一次通过子域模糊测试识别漏洞并获取高额赏金的经历", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652058956&idx=4&sn=aa4e177beee6b92b43429441df14cbdd": "【安全圈】PuTTY SSH 工具发布紧急更新修复高危漏洞:私钥可被窃取", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247507519&idx=2&sn=6f9e4f56042cbd38da042e13b4b547aa": "漏洞通告|禅道项目管理系统 身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247507519&idx=1&sn=c68eda4b6bc3f008e817782b875b47b7": "漏洞通告|CrushFTP 服务器端模板注入漏洞(CVE-2024-4040)", "https://mp.weixin.qq.com/s?__biz=MzUxNTQxMzUxMw==&mid=2247522012&idx=1&sn=8fd924c0e607e8c955fc083f5279cea2": "安全通告丨网络安全漏洞通告(2024年4月)", "https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247517929&idx=1&sn=948d8b3ae0bb47be9b228e3d59335d55": "GitHub 被曝安全漏洞!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519366&idx=2&sn=ba58720219d831205c58a95b86511516": "19个月之后,博通终于修复了这些 SANnav漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519366&idx=1&sn=10637fa1de24be7f83f126a733409827": "iMessage 零点击RCE利用被曝现身黑客论坛", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488033&idx=4&sn=c4b77244caf7a57b6d7621ffd1f0b09c": "【漏洞预警】metersphere信息泄露漏洞(CVE-2024-32467)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488033&idx=3&sn=9b341b1dec54cfbdbc3ae8ce3aa09333": "【漏洞预警】ThinkCMF安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488033&idx=2&sn=f04d75cad4bc0f1fee02b2c25126adec": "【漏洞复现】禅道项目管理系统身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488033&idx=1&sn=7971ce0cd1d6bba93d3af3c4932bb902": "【漏洞预警】微软最新版RCE,感觉像是钓鱼或者蜜罐", "https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650451310&idx=3&sn=51f8213d34fa1711ff8ae671f2be93f8": "RSAC 2024创新沙盒|VulnCheck:漏洞优先级挑战的解决方案", "https://mp.weixin.qq.com/s?__biz=MzkyNjMzMTcwOQ==&mid=2247495316&idx=1&sn=2bc8b8c66ba1adeac7f36da3241fc530": "0426-蠕虫爆发,PlugX新变种感染250万主机-思科针对“ArcaneDoor”0day 攻击 ASA 防火墙平台发出警报", "https://mp.weixin.qq.com/s?__biz=MzU3MTU3NTY2NA==&mid=2247488541&idx=1&sn=017145d2339f900d70e349ca0bdc9eb7": "CVE-2024-2389 命令执行漏洞(附EXP)", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651129308&idx=2&sn=ab7b28ebfdb85cff7cbc2a0ed943a4a0": "CISA将在今年底前全面部署应用自动化漏洞预警系统", "https://mp.weixin.qq.com/s?__biz=Mzg4OTkwMDc1Mg==&mid=2247484721&idx=1&sn=15ede62d52aca6408d5e643b3b4e432b": "泛微E-Mobile 6.0 client.do 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDY0NjA5MQ==&mid=2247484244&idx=1&sn=a883334dfa0626ee7cef8e9af29d44b5": "微软最新版RCE?别被钓鱼了!!!", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652249870&idx=1&sn=2582fe3f1d512684356b9161fa640ef0": "八大主流中文手机输入法曝出泄密漏洞,仅华为幸免​​", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506962&idx=1&sn=00159dac8c8b98b7945e0089304685d6": "CVE-2024-4040 CrushFTP 中的身份验证绕过和任意文件读取", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506962&idx=3&sn=ab39e93c9e15b3deb21dda4d8ffa6f83": "利用 PUT 方法导致三星远程代码执行 (RCE)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247506962&idx=2&sn=d363f879d49bef207aa747c1905de397": "注意补丁间隙:利用 Ubuntu 中的 io_uring 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247491156&idx=1&sn=167417ce96ccabab7ac09da3db1dcac7": "漏洞预警 hi-bridge 网关 download文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247500966&idx=1&sn=b2381db40cdcfaf82c940940a972b5ad&chksm=fe79e03ec90e6928d188b1786a992f9b14466aac0e739ea372a3d25f4750800b550f9cf189bc&scene=58&subscene=0": "【已复现】禅道项目管理系统身份认证绕过漏洞(QVD-2024-15263)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458551831&idx=3&sn=26870fc59c9acfec110d63021f65be01&chksm=b18db69d86fa3f8b4c234c77f9bcf8a276e7dda896f962ecddfbd0ce4bdaeb541f21f0b714bc&scene=58&subscene=0": "网络性能监控工具Progress Flowmon曝满分漏洞,已公开PoC", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522659&idx=1&sn=d2c921ea1f9ec4eca86cd71d9a04b7f8&chksm=ce461273f9319b65443d3fb596581d35f69aa7a488a3df3bd6cf0dfb9e65e60ef9da7d5f66f8&scene=58&subscene=0": "【漏洞通告】禅道项目管理系统权限绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489096&idx=2&sn=dd6fe65e9394f9e0af1b8808fb5c762d&chksm=fb029b10cc7512061091079f89eb1f5d4a35dbaa46c28dc9008ef2e61be2928185995cc7add5&scene=58&subscene=0": "【已复现】禅道项目管理系统身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247507224&idx=2&sn=72acee11af948b25644325eb7a96baf4": "Moriarty 旨在枚举缺失的 KB、检测各种漏洞并建议 Windows 环境中的权限升级的潜在漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502907&idx=1&sn=fea01b8dfc3f1b952dd084b6a0555372&chksm=f25858c8c52fd1de1a1863e4c1a86c6ad7bab9a3eac19e3b3a5f0685ff6ec423d35df94f6cf1&scene=58&subscene=0": "雷神众测漏洞周报2024.04.29-2024.05.05", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486478&idx=1&sn=e4093cf1f0027aea7d6048dca1dcfbfe": "代码审计-thinkphp历史漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247522724&idx=2&sn=7b1966c054a8a688833907d24c9cbf4f&chksm=ce4612b4f9319ba22013fdbffe0912076cd3736c0d72ec5de7eb49a7a8c02bdb97e665c23f0a&scene=58&subscene=0": "【漏洞通告】Apache Kafka访问控制漏洞CVE-2024-27309", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505705&idx=1&sn=4a0c9a5d7dad3fd53d028b91058d27fa&chksm=cfcab43df8bd3d2b1130f48e5bfcd373c4a7a2abf4d8e96ef3603938fc3af00944eb219a0a37&scene=58&subscene=0": "漏洞通告 | 瑞友天翼应用虚拟化系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzODQ0ODkyNA==&mid=2247485054&idx=1&sn=bd9d245ae2d3a3b6089d774264b091b4": "H3C-CAS虚拟化管理系统文件上传漏洞(QVD-2024-13294)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247484493&idx=2&sn=9e74172262ea4954a9b49638ade83885": "【漏洞复现】国标GB28181摄像头管理平台存在all信息泄露", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488789&idx=2&sn=a098c64f11fba70e34e74e347c1628b1": "漏洞预警 | 畅捷通T+ SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488789&idx=1&sn=0b94571417211f00b0019e88e26f02db": "漏洞预警 | 瑞友天翼应用虚拟化系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488789&idx=3&sn=4713853e30dfde128d1f6825f873b957": "漏洞预警 | 蓝网科技临床浏览系统 SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486823&idx=1&sn=b98dcf65887ec8cf7d49bb9852542048": "那些被遗漏的逻辑漏洞|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzIxOTQ1OTY4OQ==&mid=2247484751&idx=1&sn=3456506083c1476b71024604e926d4bf": "Chrome又现在野0day漏洞,需要升级浏览器", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247497615&idx=1&sn=fe66be6ee521adf29a7f02ea20b22f90": "优卡特脸爱云管理系统存在文件上传漏洞(5月9日更新)", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247485951&idx=1&sn=25db94e669609756f44dd02ff6ed896d": "H3C两个漏洞的划水", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652059654&idx=2&sn=40d0988058143c002ade1d0a40e96b6c": "【安全圈】修复今年第 5 个被黑客利用的零日漏洞,谷歌发布 Chrome 浏览器更新", "https://mp.weixin.qq.com/s?__biz=MzIwMjE2NTM5Mg==&mid=2247484834&idx=1&sn=f5c5d3ca80704c6fcc466f7c24bd71d5": "钓鱼佬永不空军!!看我如何社g搞定学姐继而接管站点全部权限,“严重”漏洞横空出世", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247507637&idx=1&sn=672a2e10502a0798e2d045b6feda6add": "Android Deep Link 问题和 WebView 漏洞利用", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247486836&idx=1&sn=cbca9b7bcee796cdeb72d27a7870f6e9": "联软安全数据摆渡系统任意文件读取漏洞|漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzIxOTQ1OTY4OQ==&mid=2247484773&idx=1&sn=e820ff076aaa80d061e5bd07395d8b44": "从跨省级弱口令到CNVD证书", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488145&idx=1&sn=2f9363ecbd99a73278c916f66c53b9f2": "【漏洞预警】dataease身份认证绕过漏洞(CVE-2024-31441)", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247622628&idx=4&sn=db92c78216a3ff878f9b10d90c8920bf": "TunnelVision漏洞曝光,几乎可监听所有VPN", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291051&idx=1&sn=f5c9b5e8f0a843754c7926582e67a559": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzU4MjYxNTYwNA==&mid=2247487232&idx=1&sn=196e2ea312781c581f3884502e47f724": "通过JavaScript进行漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=Mzg2MTAwNzg1Ng==&mid=2247493743&idx=1&sn=2a3f519da5fa72beb3c1146867476b51": "卡巴斯基:2024年Q1漏洞和利用报告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494740&idx=2&sn=7e4d64b452c43af861d4845fe6268daf": "上周关注度较高的产品安全漏洞(20240429-20240512)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494740&idx=1&sn=1a40e7e45f9deeb5e4262e50bf0e0b74": "CNVD漏洞周报2024年第18、19期", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652502914&idx=1&sn=c7b8d610785521f700a7f26929575d31&chksm=f2585831c52fd1271fbe0f0ef611550df41d5a0c6579ac0d411f403eae1ccedf52b67aa21e30&scene=58&subscene=0": "雷神众测漏洞周报2024.05.06-2024.05.12", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247544558&idx=2&sn=a5cb08a6ef84b0057b2b9edff65748b9&chksm=fa93982fcde41139e2140ea8492eb59dcec26028ffffebd1447b590a365f89aa3dbde82da963&scene=58&subscene=0": "50000多个小型代理服务器容易受到关键的RCE缺陷的影响", "https://mp.weixin.qq.com/s?__biz=MzkzOTY1MzcyOQ==&mid=2247488109&idx=1&sn=8861db4430d3c4d0129a5e56d8381caa": "【重磅更新】Struts2全版本漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247484561&idx=1&sn=ef7f769f144d04b09c8c1505c6b700b5": "CVE-2024-0582 Ubuntu 内核 UAF 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488265&idx=1&sn=0ec576dbad902cff5734eee5a69db5aa": "【漏洞预警】Spring Cloud Data Flow任意文件写入漏洞(CVE-2024-22263)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488265&idx=2&sn=3c0d56bebe3d41abc1ab483d2fbdf6e8": "【漏洞预警】Fortinet FortiSIEM命令注入漏洞(CVE-2024-23108)", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484419&idx=1&sn=3e2349b6c5bd64a5086afa8c85abc924": "「漏洞复现」用友U8 CRM uploadfile 文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247512454&idx=1&sn=6bd25b339ccdbed6cc470c13cdfee6b7": "src-歪门邪道分享+支付漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489287&idx=1&sn=123e28f5c901df0c17447d4893f4e48f": "TP-Link 游戏路由器漏洞使用户面临远程代码攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060737&idx=2&sn=46fe85b6166c5bda4eb62e527782404a": "【安全圈】影响之前所有版本,TP-Link 路由器曝出满分漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060737&idx=3&sn=bcb1e61b20c0aaf8bf3dd485b50dacaa": "【安全圈】AI 平台 Replicate 曝“跨租户攻击”安全隔离漏洞,用户自训练人工智能模型可被黑客入侵", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247486298&idx=1&sn=1d20f46e634bc608b40878ada0c716f2": "CVE-2024-33559", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484363&idx=1&sn=2a63d904b45620c03402db455c1c7c86": "【新】万户协同办公平台 ezEIP success存在反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458555732&idx=3&sn=91263191e590aaec63a2c35401bafd3c": "0day Windows更新7.2:理解符号链接", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247494002&idx=1&sn=34a53e56a063bc9749770e8bfbd14177": "精彩回顾!大模型安全边界:揭秘提示注入攻击、会话共享漏洞与AI幻觉毒化策略分享", "https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247518235&idx=1&sn=f9015c9dd5f2f12a594116038ade6b82": "无限充值、免费使用洗衣机,两名大学生披露洗衣服务中的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501202&idx=1&sn=9552dcc73d874dad2fa88f02d2abdb60": "【已复现】Atlassian Confluence 远程代码执行漏洞(CVE-2024-21683)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247519614&idx=1&sn=9e0519627dc928e416d3ba3de0a1941c": "Citrix 督促 Mac 用户修复 Workspace App 中的提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODU3MzA5OQ==&mid=2247484346&idx=1&sn=363e3dc943352fa10d2fe917f8b48aca": "ICONV,将字符集设置为 RCE:利用 GLIBC 攻击 PHP 引擎", "https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650453090&idx=1&sn=f3c404d540b855257f918728f6591011": "您还在苦恼先修哪个漏洞吗?", "https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650453090&idx=5&sn=45902806e99a835b83f89d32018109c6": "【公益译文】设计安全警报:消灭软件中的SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486539&idx=1&sn=5df6d631ad4cc7dc990e35b46f89fc84": "万户ezEIP企业管理系统success.aspx接口存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247486816&idx=1&sn=5cc940d33e605f9c7f954c275bf6ca7b": "招募精英猎手,“矩阵杯”国产软硬件安全检测赛、原创漏洞挖掘赛等你来秀!", "https://mp.weixin.qq.com/s?__biz=MzI4NTE4NDAyNA==&mid=2650396686&idx=1&sn=0dd5b780834b2b0439fb03b48acc3907": "【安全科普】一文读懂文件上传漏洞(附实战详解)", "https://mp.weixin.qq.com/s?__biz=MzkwNzY4MzE3OQ==&mid=2247483976&idx=1&sn=d9c3495c5209b32cdf443035e9d04b8c": "【攻防实战】某行业hw-如何利用nday拿下n个靶标", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523009&idx=1&sn=b4e6de0624248ba1ac82ee45a70cab5d": "【漏洞通告】Showdoc远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MjI4ODU4Nw==&mid=2247489581&idx=2&sn=915ebfa836f0f29a5331e8b1fce96c36": "使用 Google Dorks 的实例(漏洞、文件、IoTs 等)", "https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247484772&idx=1&sn=1d01eb76b026dee09acd36e1893380c4": "张一峰:重点关注新应用场景衍生的新漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247494847&idx=1&sn=eea65f1956f62693b9cde248a88ead2e": "如何快速找到 RCE", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247485333&idx=1&sn=4525cd1cbebe5e6be2ace25250ebcbdb": "众测项目实战--有趣的xss漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY3OTc5Mw==&mid=2247484223&idx=1&sn=fd507e16329cc99c2c7fc42deff6135c": "【漏洞复现】JEPaaS 低代码平台 accessToTeanantInfo SQL注入漏洞 | 附poc", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652060950&idx=1&sn=5dde8bb0f66f3c492ade995b2ef6914c": "【安全圈】请尽快更新,Linux 内核更新修复高危漏洞:可本地提权至 root 权限", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458557570&idx=2&sn=f48e504bc91da149eebefaf7a20b795d": "0day 2期-最近更新:Windows服务漏洞原理讲解", "https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247485204&idx=1&sn=6a14ff7e2289b72dc943941ccfb5b0ab": "主动利用WordPress插件中未经认证的存储XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484444&idx=1&sn=ecb0b41989d8f16d41e891d2bf45d6e7": "「冷漠安全」五月份0day∕1day∕nday漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247504702&idx=1&sn=758ea48e9b1af4c39fd7fde4f128c367": "Web漏洞扫描神器-Arachni安装及使用", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247485846&idx=1&sn=eec92e52c0164f470a71314ec6c5e57e": "漏洞预警 | 用友NC linkVoucher SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247508698&idx=1&sn=0df74b3562f67b9fec4b35e17105d2cb": "Apache ActiveMQ 漏洞导致隐秘 哥斯拉 Webshel​​l", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247508698&idx=3&sn=3abe5891ab38d0e8f1607d065c765427": "反转 Windows RPC 以查找 CVE(CVE-2024-36036、CVE-2024-36037)", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247484610&idx=1&sn=f2f45bda80a245348ecfe38b476e6e19": "CVE-2024-5035 TP-Link Archer C5400X RCE 漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247484389&idx=1&sn=bf1a36a4d0f2c66ce3a355c634f4889e": "俄罗斯APT TAG-70利用Roundcube Webmail服务器中的XSS漏洞攻击超80家组织", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247503798&idx=1&sn=9176cf67b8e958f661c575c393001634": "补天校园GROW计划升级了,新增“线上导师分享+漏洞挖掘实战”两大板块!", "https://mp.weixin.qq.com/s?__biz=MzkyNDYwNTcyNA==&mid=2247485136&idx=1&sn=3965f2e035360788d3890ac54086e684": "【漏洞情报】万户OA-text2html-存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650593878&idx=4&sn=db53653b7a3ede5d80154ee7b38b85c5": "Hyacinth!一款Java漏洞集合工具", "https://mp.weixin.qq.com/s?__biz=MzU5Mjg0NzA5Mw==&mid=2247492417&idx=1&sn=4299aef6664b56e9b38195c9a11609be": "高危漏洞预警|Check Point Security Gateways 发现漏洞(CVE-2024-24919)", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247485358&idx=2&sn=4e3a13b6798e7b1fe6dc1aeaa3759476": "挖漏洞束手无策?不知道网站是什么OA? 自动探测多方便!", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247510250&idx=1&sn=b041fcc980705fb265b3c27a9067835e": "漏洞通告|SolarWinds Serv-U FTP 目录遍历文件读取漏洞(CVE-2024-28995)", "https://mp.weixin.qq.com/s?__biz=MzU0MjEwNTM5Ng==&mid=2247518513&idx=1&sn=6c2ceb4667460fb290afb76706061704": "无法修复立即删除!谷歌 EmailGPT 曝零日漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448663816&idx=2&sn=c2fa9872f605a749a9ec552a6098a62e": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448663816&idx=3&sn=4f7022124f17c87e45b9179bc193c409": "CNNVD关于PHP 操作系统命令注入漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506053&idx=1&sn=4141854e881c05e2e3a2db88c567e247": "发现在野利用!SolarWinds Serv-U 路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247558351&idx=1&sn=8a3ffe90910388a853ad87f29cb46456": "一个漏洞库", "https://mp.weixin.qq.com/s?__biz=Mzg3MjY1NzI0NA==&mid=2247555202&idx=1&sn=a9228a0db6c8ef3a0d68f4522c1427db": "【漏洞预警】SolarWinds Serv-U FTP 目录遍历文件漏洞(CVE-2024-28995)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499489&idx=1&sn=33286c536824c739d7dbbbca01c9bcb1": "【漏洞通告】SolarWinds Serv-U路径遍历漏洞(CVE-2024-28995)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247499489&idx=2&sn=93d4dced861370620848b6f1af1d1baa": "【漏洞通告】Magento Open Source XXE漏洞(CVE-2024-34102)", "https://mp.weixin.qq.com/s?__biz=MzkyMzAwMDEyNg==&mid=2247544408&idx=3&sn=6e4b374369f279667360a0f32ea9ebb4": "美国削减国家漏洞库预算,或造成全球网络防御基础数据缺失", "https://mp.weixin.qq.com/s?__biz=Mzg5OTU1NTEwMg==&mid=2247484118&idx=1&sn=8a303d41e8af9d83a53fdee42c31d592": "【知道创宇404实验室】CVE-2024-4577从漏洞广告到勒索攻击只用了2天", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247523192&idx=1&sn=6ca1791527fa4182497473aa6b49fe78": "【漏洞通告】SolarWinds Serv-U FTP 目录遍历文件读取漏洞(CVE-2024-28995)", "https://mp.weixin.qq.com/s?__biz=MzI0NDgxMzgxNA==&mid=2247495907&idx=1&sn=156c85967b2cb3b97588df70d28ecc3f": "每周安全速递²⁹⁷|TellYouThePass勒索软件利用最新PHP RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MjkwMDY3OA==&mid=2247485066&idx=1&sn=f3ee0ffd2ac97fce1620c8a63484c3c0": "【漏洞复现】用友分析云存在druid未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MDM2NzkwNg==&mid=2247486427&idx=1&sn=880590a809b3a3030e739f9dd3f49d24": "漏洞预警-CVE-2024-30080", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501312&idx=1&sn=ed5fac2b7c395d524cdfc90d879c5f4c": "【已复现】SolarWinds Serv-U 目录遍历漏洞(CVE-2024-28995)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247539018&idx=2&sn=fb61dfc29dca0727f30739d557a83ad4": "2024HW,必备漏洞库", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247495672&idx=1&sn=8939f5f175f2c7941fcb3c1904c7d273": "【漏洞通告】Composer PHP依赖项管理器命令注入漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247495672&idx=2&sn=4b9adf5639cf8b0622eeabde7aff3355": "【漏洞通告】JetBrains IntelliJ IDE信息泄露漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651130460&idx=2&sn=d446d45d7b01b9ff93a9105910ceb33c": "警惕隐藏在网络社交媒体中的“猎密者”;CNNVD通报PHP 操作系统命令注入漏洞 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247509312&idx=1&sn=aba6932a88e9e0b5b9d0147411a91c45": "没有秘密 || 利用 Veeam CVE-2024-29855", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247509312&idx=2&sn=78e35ecd6707597164c8ce052f31e8ff": "CVE-2024-28995(SolarWinds Serv-U 中的路径遍历 - 概念验证", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247509312&idx=4&sn=1918ef534c9a1668331729941af7fd14": "Wikimedia∕svgtranslate 2.0.1 远程代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NDMwMjEwMg==&mid=2451851743&idx=1&sn=cba2032a7b1538e09f5fdc933b0d31ee": "什么是基于风险的漏洞管理RBVM及其优势", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247522449&idx=1&sn=6f0627e0b24e4397f6b11dc3bf38c46f": "建议立即删除!谷歌 EmailGPT 曝零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247484937&idx=1&sn=3af38f9ce095f455e6e5a0a5bbe468c9": "【未公开】悦库企业网盘存在.html SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODQ2NTY3Ng==&mid=2247486968&idx=2&sn=cab0c79970c27247263649e15ce6ea0f": "CVE-2024-37393 漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzk0MTY5NzYyOA==&mid=2247484814&idx=2&sn=1287dacd604acb9925ad0897019c7de4": "【漏洞复现】电信网关del_file.php存在命令执行", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247484693&idx=3&sn=2d14ce63e5be5c91061a79f887d7a88d": "CVE-2024-21893影响Ivanti产品", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485677&idx=1&sn=ce6e0dab7a0c760f520f97fd1eb354b8": "【高危漏洞】k8sGPT存在多个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247491708&idx=1&sn=416191a03a7d0bf1c7c56ec3ddbe42de": "Google修复了Pixel固件中一个正在被积极利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247491708&idx=2&sn=444a58ecc49ac1f3987b3da2eb5a3c7b": "修复了Fortinet FortiOS中的多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247610122&idx=2&sn=07d4565165579a9c64ffbee8fa837e5b": "车机控车流程分析和漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650609663&idx=1&sn=e166b09ed7bbdd4655b0b44157fe962c": "再度蝉联!安恒信息荣获四个CNNVD接报漏洞奖", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247484570&idx=1&sn=b6d9276024fcb5cbc578c0b5a9d38201": "「漏洞复现」海洋CMS ∕js∕player∕dmplayer∕dmku∕ SQL注入漏洞(CVE-2024-29275)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485428&idx=1&sn=e168a5c05c00d3b3468b6eb316a029ae": "CVE-2024-28995|SolarWinds Serv-U任意文件下载漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485428&idx=2&sn=62f294d16dfe1e70e0c39139416e633e": "CVE-2024-23692|Rejetto HFS 2.x 远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458558929&idx=2&sn=6c08e8fb0faf292cd7ac3fe9ae5c9307&chksm=b18d915b86fa184d125f97a0f3fac1b3e9e18e6a1da88ce11941e4f0270bac69d6826b58c743&scene=58&subscene=0": "卡巴斯基披露中国生物识别门禁系统存在24个漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489205&idx=1&sn=9ece8e646d1f64dfd5d16a16fd940f22&chksm=fb029bedcc7512fb9daaa31f1e0285a58b17a68fa0b01f5277a60303f93fd11ccaf1dd3b8ea3&scene=58&subscene=0": "【已复现】SolarWinds Serv-U FTP 目录遍历致文件读取漏洞(CVE-2024-28995)", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247485358&idx=2&sn=00c27f582d407d8a6ec23a443a83c9ac": "[翻译][AI安全]Probllama:Ollama 远程代码执行漏洞 (CVE-2024-37032)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247510047&idx=2&sn=5f7b8ef16d1d2db7c778e256c67009d4": "使用 MS Windows 打印机通过互联网打印进行持久性∕命令和控制的 PoC", "https://mp.weixin.qq.com/s?__biz=MzkzMzI3OTczNA==&mid=2247487225&idx=1&sn=862f2dff6163c48c9a0db51a1ba1c4bb": "验证码漏洞利用技巧总结", "https://mp.weixin.qq.com/s?__biz=Mzg5MjY0MzU0Nw==&mid=2247484641&idx=1&sn=e3d39f7724b796bf425299c2faddfe34": "【车联网】车载可用摄像头漏洞研究(转载)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247486755&idx=2&sn=b3f25e26de417ca56b78fa5a27c821b2": "CVE-2024-36522 Apache Wicket 存在远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247511512&idx=1&sn=ce84f24cda62f925ee539d9b29b10517": "Apache CloudStack 中标识为 CVE-2024-41107 的严重漏洞的 PoC", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484325&idx=6&sn=91a46b3e826925eafd95d7523f02ccac": "​H3C路由器 userLogin.asp 信息泄漏漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484325&idx=7&sn=017d961b15e2c28dfece9aa8cec1be11": "Nexus Reposity3目录穿越漏洞CVE-2024-4956", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247484325&idx=8&sn=e4ab37c9e6f1fa69e74651a92089d649": "同享人力资源管理系统-TXEHR V15 DownloadTemplate 文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489818&idx=1&sn=6785dff5331b909101c1bba9ede90f69": "【8∕2特辑】今日热点漏洞速速自查!", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247626271&idx=1&sn=e762674a074598fba66b9ee703c5d12f": "对“黑客”而言,合适的漏洞奖励和安全披露", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485038&idx=1&sn=117090c1ceae1ff183980c822908b374": "「漏洞复现」华天动力OA downloadWpsFile.jsp 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484796&idx=1&sn=fd0800bdb984d5e7b0f58ba8c88a6162": "【HW漏洞】致远互联FE协作办公平台apprvaddNew存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486477&idx=1&sn=54a83c97974e7fb5e457266b62643103": "【漏洞预警】用友NC Cloud SQL注入漏洞(CNVD-2024-34169)", "https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650206491&idx=1&sn=59caa4b1dbf256cb10b4fa147d24d145": "安天智甲EDR紧急响应输入法高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247494893&idx=1&sn=c275f1a6092cdabcea407dc6d643602a": "CVE-2024-36401:GeoServer未授权RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247514495&idx=1&sn=427b5b5245aa90ac084055d9371edeb6&chksm=c144cbc2f63342d40c09f9aa55a920fe16a8b32410c601063bb9692809bf53ce63fb1ff7cd24&scene=58&subscene=0": "39个关键硬件漏洞隐患盘点", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247577365&idx=1&sn=5506f540726693de6fca80b15a291e0f&chksm=e9147f2fde63f639f793f28f9c7845956e6dee6f82880dd9c64814ba715dd6f43c594205c5ac&scene=58&subscene=0": "XCon2024议题||挖掘Windows系统组件中的认证前远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247541433&idx=2&sn=d4dc4322a484857f1bbf7f792e5d445e": "攻击 Android Binder:对 CVE-2023-20938 的分析和利用", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492559&idx=1&sn=618b195507e1f05f9bd5dfc0b244220c": "某网关存在漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650276300&idx=1&sn=24894c9b462adc478a0d1a7f300dd093": "警惕!工业企业生产网核心系统接口发现漏洞,生产设备可被操控", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651299267&idx=2&sn=36a62b4f8e3863d1cf623a13e31b4e53": "WPS Office两个严重漏洞曝光,已被武器化且在野利用", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649291517&idx=1&sn=a7c55641594c252438968a098a5dedf5": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzU0MDcyMTMxOQ==&mid=2247487718&idx=1&sn=621ea5c2e0d12c57bf23b830a0e0a842": "「推安早报」0819 | Chrome、Zabbix等漏洞、红队工具更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520517&idx=1&sn=33f6242a7bd079eb73527d2099be7fc1": "SolarWinds Web Help Desk是 0day时或已遭利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520517&idx=2&sn=3f8deb775a5743e1c32954859fa214e4": "Copy2Pwn 0day 被用于绕过 Windows 防护措施", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495185&idx=1&sn=8c176c045374b918076c2febb879acf3": "CNVD漏洞周报2024年第33期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495185&idx=2&sn=d354ae8cef98bedf7086e7d037fea2c3": "上周关注度较高的产品安全漏洞(20240812-20240818)", "https://mp.weixin.qq.com/s?__biz=MzkzOTY1MzcyOQ==&mid=2247489005&idx=1&sn=d5e532b16d44b52960d317738e71e7d0": "【0day】DouPHP 1.7 Release 20220822 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247491415&idx=1&sn=cc1950b3c5ac269c6a749c1ba9fbbf5c": "关于防爬虫及服务器漏洞扫描相关问题的探讨| 总第258周", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485199&idx=1&sn=debea9cdd57778a7491be02f4452c324": "「漏洞复现」用友NC psnImage∕download SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5ODQzNTE3NA==&mid=2247485460&idx=1&sn=9017d9ad1c6181b7a5d1090689da3944": "【hw】2024护网漏洞情报-第十七弹", "https://mp.weixin.qq.com/s?__biz=MzkyOTcwOTMwMQ==&mid=2247484174&idx=1&sn=a14ae7fbb80e442fb8c810cb25622352": "用友U8-CRM的exportdictionary.php接口处存在SQL注入漏洞【漏洞复现|附nuclei-POC】", "https://mp.weixin.qq.com/s?__biz=MzkzODU3MzA5OQ==&mid=2247484795&idx=1&sn=8fa241e5068765c35803cd01db170241": "通过系统调用 (POC) 绕过 AV∕EDR 挂钩", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247577580&idx=1&sn=8dcef7721a5c4c75a0c070945a6b580d": "新的 Webkit 漏洞可让攻击者利用 PS4 和 PS5 游戏机发起攻击", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247500245&idx=1&sn=f2bb116c475af0525a4151bfb87c8377": "最高15万美元!盘点2024年11大漏洞赏金计划", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247486110&idx=1&sn=6327aee7d91a6424192b455311fe6150": "【漏洞复现】某蓝企业管理系统 GetFieldJson SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjU2Nzc1Mg==&mid=2247484377&idx=1&sn=fe1ff52bc97a2ad2cc949bc1a3f68b80": "24HVV漏洞威胁最新情报(全)", "https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247485419&idx=1&sn=991cd93a2cea5cd9820f7b9fd5360022": "长亭科技成为国家信息安全漏洞库漏洞技术研究联盟创始成员单位", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247484873&idx=2&sn=9420b41a15bc3ef264f21bc5aafbbd10": "Windows TCP∕IP 远程执行代码漏洞 CVE-2024-38063", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503043&idx=1&sn=b9b1593023d441304f8686f4a13e29b6&chksm=f2585fb0c52fd6a6912e5aac5e8005aec49a3779bb78c669bd427004ea3aed0ecd8b9eb8b45c&scene=58&subscene=0": "雷神众测漏洞周报2024.08.12-2024.08.18", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501943&idx=2&sn=1ec9ac2abad8584c8efff6a62fe43010&chksm=fe79ecefc90e65f9aeefc1efcc71100ea27711bba70d5c0200319ceae32c618c575f97564ada&scene=58&subscene=0": "安全热点周报:SolarWinds 和 Microsoft 漏洞被在野利用,立即应用补丁", "https://mp.weixin.qq.com/s?__biz=MzUyOTkwNTQ5Mg==&mid=2247489274&idx=1&sn=adf559fccfabbf3476de23dcc4aae866&chksm=fa58b4c1cd2f3dd72ed1fa7c7d8f619f13699414b29cd1e15c635e57a725dc37a35930b1804d&scene=58&subscene=0": "抓不完,根本抓不完的0day,青藤RASP已经接连抓了3个0day", "https://mp.weixin.qq.com/s?__biz=MzAxMDE4MTAzMQ==&mid=2661293107&idx=1&sn=6e2ab0265f496974ed53754baa283eac": "山石网科:关于网传WAF漏洞说明", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488755&idx=2&sn=7ddcd18af4931333cec31b8a9d5d3bfb": "【漏洞预警】山石网科应用防火墙WAF未授权命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488755&idx=3&sn=3b6dd7826189b300fc0168087b2b4495": "【漏洞预警】泛微网络E-cology BlogService 未授权SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247488755&idx=4&sn=f626ef0b801fce922a5e2f71a0fd02c3": "【漏洞预警】Alibaba Nacos Jraft未授权任意文件写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489659&idx=1&sn=a56c7dc54f6a5eefa58ea3898e1f0948": "Google 修复了在野外积极利用的高严重性 Chrome 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247492578&idx=1&sn=d68d3a888c959b2e6374c9f7f0b27082": "某系统任意命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485228&idx=1&sn=b2f516d17addda6cb287e67c514b848a": "「漏洞复现」同享人力资源管理系统-TXEHR V15 SFZService.asmx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651299590&idx=3&sn=39cd6a7a3a2a8abc73e2b3d020b90d83": "Litespeed曝高速缓存漏洞,威胁数百万WordPress网站", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486605&idx=1&sn=f03003b8ef87b5e7f7d1bb450523af08": "【漏洞预警】Google Chrome V8 类型混淆漏洞(CVE-2024-7971)", "https://mp.weixin.qq.com/s?__biz=MzI2NTc1ODY0Mw==&mid=2247485988&idx=1&sn=2a05bc333dc6afdfdda19810bc012c5a": "某户oa sql注入漏洞后续利用(部分)", "https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247512143&idx=1&sn=c5e8fbfcf10f81d6a206cbd6c2a6ef56": "SourceCheck V3.5焕新登场 | 恶意代码检测与组件版本兼容分析能力全面升级", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247542160&idx=2&sn=21dab586dd8ee5e8b7d293ec128d053e": "车载可用摄像头漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzUzNDYxOTA1NA==&mid=2247546551&idx=3&sn=79ee74866eb4a23b91fe85d92e91c789": "苹果macOS版微软应用发现8个漏洞,警惕黑客恶意操作", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247501953&idx=1&sn=132f57d74ad27b44fc64a22b6f3c081b": "【在野利用】Google Chrome V8 类型混淆漏洞(CVE-2024-7971)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650618428&idx=2&sn=24e88e85c231728435325778d2e53a14": "Spring Security@AuthorizeReturnObject权限绕过漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY1MDc2Mg==&mid=2247505550&idx=1&sn=42f7a1fef3697bbde11fc64d377bc6b5": "微软高危漏洞 CVE-2024-38077 EXP", "https://mp.weixin.qq.com/s?__biz=Mzg5OTY2NjUxMw==&mid=2247512830&idx=2&sn=c7fb1361b3d6a229a56af1b45f642049": "漏洞扫描工具 -- SBScan", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651131656&idx=1&sn=c3762dc021361dffbee4680fcbd1b841": "错误展示《黑神话悟空》客服电话,必应被曝AI信息抓取与处理存在缺陷;F5官方通告可导致会话固定与资源耗尽的高危安全漏洞 | 牛览", "https://mp.weixin.qq.com/s?__biz=Mzk0MzU5NTg1Ng==&mid=2247484764&idx=1&sn=d2452739361600d0d9c4b4c7c2d30b57": "帆软报表 channel 反序列化漏洞分析与利用", "https://mp.weixin.qq.com/s?__biz=MzIzOTE1ODczMg==&mid=2247499191&idx=1&sn=704186f41975063e2acf236473a4dbc5": "【中秋团圆,安全相伴】Xray社区PoC悬赏活动邀您共赏月圆之夜!", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247488456&idx=2&sn=5a9b8ad1980b4e8cffa2eff72ed7223d": "iOS 文本字符串错误:几个字符可能会导致 iPhone 崩溃(可以复现成功)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247488456&idx=7&sn=98e52b1d79c1175eb55b04812d03390a": "(CVE-2024-7971) Chrome为0day紧急更新", "https://mp.weixin.qq.com/s?__biz=MzU1Mzk0MjU1OQ==&mid=2247492947&idx=1&sn=f18f0fc7d9410dad99d7abd24ae0fac6": "漏洞预警|浙江大华城市安防监控DSS系统存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247492234&idx=1&sn=8a13492d9298249e5142c6c748519874": "微软Copilot Studio存在严重的信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458569208&idx=4&sn=2e073d782cd9e7f1cc24f56be0c76148&chksm=b18df97286fa7064e68cc34f3d13e1d3afce063f9431544ec6a02c4c1c1f1aef81fae722e9e3&scene=58&subscene=0": "零基础入门Android漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520551&idx=1&sn=72b22e7b3bfacecfe01fb433f02f1aae&chksm=ea94a04ddde3295b9d49a547fc454b8c6ab1e8cf9cd30e413dbe66bb25f427d73270f438b9cb&scene=58&subscene=0": "谷歌紧急修复今年第9个已遭利用0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247520551&idx=2&sn=c7d2ba1175a4c946fe47679b75e3c64e&chksm=ea94a04ddde3295bb0ef7a0d6531fee1957d5a1ffa8ba19cd572a05c40449b1f4706da88b90a&scene=58&subscene=0": "GitHub Enterprise Server 中存在严重的认证漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3ODI4NDM2MA==&mid=2247483961&idx=1&sn=202491658762e108d9ec8cd04cfb3150&chksm=eb58131edc2f9a0825a3d4302a980c2d834911b4028c10b273f142f400d90ca68add338dc563&scene=58&subscene=0": "魔形女再袭?最新Android通杀漏洞CVE-2024-31317分析与利用研究", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182030&idx=1&sn=c63a5aa631c4fde83d9c2c2ec5f45b02&chksm=f4486a32c33fe324e1ccf7a7e40c92dfc4eba19fad7e625332509eda78a2dc0ecda277803a39&scene=58&subscene=0": "攻防过半:最能打的竟然不是0day?", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247495563&idx=1&sn=29a306d2ecca6aa42f7819e516e7dab7&chksm=e8a5e5e8dfd26cfeece89833c8f07ab4c5e0192af0d64016c278aaf988c2fcf94bfdcdfa6dd8&scene=58&subscene=0": "重定向跳转 -> XSS漏洞 -> 升级高危", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650985033&idx=1&sn=eb8264e9eb4f3dec90c22ecb464e5e9e&chksm=8079907bb70e196d58b310e5733e4c9cb0f7a6d4c4d51c3afeca35f73b14cbfc828e2d2afb95&scene=58&subscene=0": "原创 Paper | GL-iNet 路由器 CVE-2024-39226 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485017&idx=1&sn=0d82afe39465840f6dbca7bda7970d56": "漏洞推送|某智能网关 list_service_manage存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MTAzNjYyMA==&mid=2650591992&idx=1&sn=c864d399de568d96bb861535da98b84e": "工信部五所与深信服联合发布《2024上半年网络安全漏洞态势报告》", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650619088&idx=1&sn=aba037115b8cf195b5ece2193bfdce46": "战果公布 | 2024攻防演练0Day难防?亚信安全新一代Web应用防火墙拿捏~", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247491814&idx=1&sn=e9a5c3f0eaac153a710b0841d44ef4d0": "漏洞预警 孚盟云oa ajaxsenddingdingmessage sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3NDIwNTY5Mw==&mid=2247506286&idx=1&sn=7cc617f2f25061b3e76584f635b291a1": "风险突出的100个高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484253&idx=1&sn=73918ad1c49e134c55d9235142d19c07": "警惕!100个突出的高危必修漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247485968&idx=1&sn=76bbc04fdeb26c233408086205be3cde": "某CMS源码RCE审计思路", "https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247487094&idx=1&sn=afd1f27f059fe721edb6a2a9b632d42a": "通过源码文件差异对比审计未公开1day,让你1day拿到手软!", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485567&idx=1&sn=ec186a5e96ced1bd2cecb615ec9fd0bc": "「漏洞复现」誉龙视音频综合管理平台 RelMedia∕FindById SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247505028&idx=1&sn=ef180373655a118916dcd5c643917b71": "【补天训练“赢”】月神:一节课学会游戏漏洞挖掘+手游漏洞挖掘实战!", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247485055&idx=1&sn=ef608575f461f2c519fb89abf20bd9c7": "美国NSA、FBI和DHS联手曝光俄罗斯情报黑客手法:企业需警惕五大漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247543751&idx=1&sn=64df87cf6d7a0a894b82c0f23cebe8ea": "漏洞挖掘 | edusrc挖掘的骚技巧", "https://mp.weixin.qq.com/s?__biz=Mzk0MTUxNzAxMg==&mid=2247484091&idx=1&sn=394f57fdf5234e77d42a990dd9ebb2e0": "苹果IOS端IPA签名工具任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496480&idx=1&sn=066b371fab24bc38622a564b1d44b209": "【漏洞通告】pgAdmin信息泄露漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247496480&idx=2&sn=300df768000858d3045a805459ef7011": "【漏洞通告】Apache HertzBeat SnakeYaml反序列化漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247487693&idx=1&sn=46d3ea0842029029de0369576e75ea82": "【漏洞复现】地大信息-基础信息平台 GetImg 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247500960&idx=2&sn=d7e5dd11a73b45185f533f0e963be1ee": "谷歌:安卓内存安全漏洞大幅下降68%", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247490012&idx=1&sn=c10980ca6a8e965149a85011309281b2": "【Exp】Ivanti 22.2R1∕22.7R2 管理面板身份验证绕过CVE-2024-7593", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247490012&idx=2&sn=671d5f72c7770a814e9c2eb0b1d05ede": "【PoC】SolarWinds Web Help Desk (CVE-2024-28987)严重漏洞的 PoC 已发布", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247490012&idx=6&sn=ba56918b7b91041e18bd7ceadb5ec1f3": "TeamViewer for Windows CVE-2024-7479(8.8)存在提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247490933&idx=2&sn=3c9dd4a35995cc82d69cc61a91303427": "MSF使用教程永恒之蓝漏洞扫描与利用【黑客渗透测试零基础入门必知必会】", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651246399&idx=1&sn=31fea469d77e7f50d12f2db9607e0a05": "你的接口漏洞该补上了……", "https://mp.weixin.qq.com/s?__biz=Mzg2NTg3Njc0Nw==&mid=2247484682&idx=1&sn=fb4b24b3fa8d55246e4ad498301368cc": "Thinkphp5.1.0-Thinkphp5.1. 文件包含漏洞(CNVD-2024-29981)", "https://mp.weixin.qq.com/s?__biz=Mzg5MjgxNTQ1MA==&mid=2247487799&idx=1&sn=3195e599bd0c78132c01b105754033f5": "高危风险突出的100个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247490759&idx=3&sn=7d08183750cd66c2da57267778dfd440": "漏洞预警 | 直播点播系统未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247491217&idx=1&sn=d505976be4891ef903310a3cf8f51277": "CISA 警告 Apache HugeGraph-Server 漏洞遭积极利用", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247516369&idx=1&sn=4dbb4102229f713c411c70ce0dd7a8bf": "记一次有趣的XSS漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247505153&idx=1&sn=1fc2ad5e7d03f26b308b686bdc6878e8&chksm=eaf99d4ddd8e145b4cf0c913f7a9c4c5427525f658cfd12c4fd464a205dcf496953ba17ff237&scene=58&subscene=0": "第四期 | 补天校园GROW计划漏洞挖掘挑战赛,赢白帽大会门票!", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650602174&idx=4&sn=f8e1e08fdbc95ba215a0defd9b538de4": "一款强大的burpsuite漏洞扫描插件", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489107&idx=1&sn=003e85239c88f1b7b1e06a7f93c4df5d": "【漏洞预警】Ollama-大语言模型和机器学习框架多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTY3MTE5MA==&mid=2247485496&idx=1&sn=930c7b4ed564f11ca8e30e60dc04f92b": "Opera 浏览器中的 CrossBarking 漏洞允许恶意扩展程序劫持用户帐户", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247488824&idx=1&sn=c15c613169e507f1bed038f4a567c5e9": "智联云采 SRM2.0 testService SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247521381&idx=1&sn=dda99ba77206503fe0e0b1c0e5a0a35b": "从Naptime到Big Sleep:通过大语言模型捕获真实代码中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487670&idx=1&sn=b20d4df66d776c16ddbeee3ba222d987": "金华迪加现场大屏互动系统mobile.do.php接口存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487670&idx=2&sn=67f1dd6c4672c1c9c27a0d9a8fcb773f": "英飞达医学影像存档与通信系统WebUserLogin.asmx接口存在信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247489925&idx=1&sn=41351ab34def7a147ca00ac52a4c0f65": "近100万台存在高危漏洞的 Fortinet、SonicWall设备正暴露在公开网络中", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485937&idx=1&sn=692ab730702b43ef8b9e93900e17b698": "「漏洞复现」万户 ezOFFICE SignatureEditFrm.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503170&idx=1&sn=91e265599dfb626f8044cf8e272c9db5&chksm=f2585f31c52fd627c80afc48b51c30253d784ebd836a7219240b9eeedcd8b72503daa9ce2fee&scene=58&subscene=0": "雷神众测漏洞周报2024.10.28-2024.11.03", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458580255&idx=2&sn=38be5331e10533fe598ed6c4e0017552&chksm=b18dc59586fa4c83dd9a60dcad13f7e31e4a157563a1bc422b7ae40c80e5aa275edfd719c243&scene=58&subscene=0": "近100万台存在高危漏洞的 Fortinet、SonicWall 设备正暴露在公开网络中", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495439&idx=1&sn=3d4b0d8539489e6517ab1ba9b868bc78&chksm=fd74dfc6ca0356d04f8e6b3b45766c206188be44edeb2b4c91b5a859274d24cd9b7315a80cd7&scene=58&subscene=0": "CNVD漏洞周报2024年第44期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495439&idx=2&sn=a9586d0dcb23602c937ef5fc763fdd5a&chksm=fd74dfc6ca0356d01fe800e64135999297ab610799b08c5e13308ac411819136ab774ba92881&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20241028-20241103)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652065716&idx=3&sn=4ec937a68fa76b1dd2f7886b3dd43d0d&chksm=f36e63f4c419eae26346e5c246903fa5cc2a9c17201ee9dd85aeef72b7c9d75b82527433ca2e&scene=58&subscene=0": "【安全圈】近100万台存在高危漏洞的 Fortinet、SonicWall设备正暴露在公开网络中", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487762&idx=1&sn=a25eeab4481350dc19897a38bb313f5e": "D-Link多款产品account_mgr.cgi接口存在远程命令执行漏洞CVE-2024-10914 附POC", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489147&idx=1&sn=f01f7bac40cd83b54f36d0d3c145a663": "【漏洞预警】kanboard代码执行漏洞(CVE-2024-51747)", "https://mp.weixin.qq.com/s?__biz=MzkwODUxMDUwMg==&mid=2247483802&idx=1&sn=bcda4c000871e19b64bce3bb3edd25aa": "Thinkphp3文件包含(CNVD-2024-39045)", "https://mp.weixin.qq.com/s?__biz=Mzg3MTc0MDYwMg==&mid=2247483857&idx=1&sn=aff0dbf3a61af3559608afafa41f87fa": "Thinkphp5.1.0-Thinkphp5.1. 文件包含漏洞(CNVD-2024-29981)", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247489731&idx=1&sn=97f683773808570599119942d8eb6842": "月神SRC漏洞挖掘第三期新增大招", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651306849&idx=4&sn=9d788c79af176fa94e4c520128f7c219": "GBounty:一款快速可靠高度可定制的Web安全漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247496753&idx=1&sn=9acbb15f399c5e3f678c2519da2e2f73": "CVE-2024-4956:Nexus Repository 3目录穿越漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MzI2NzQ5MA==&mid=2247486582&idx=1&sn=5de8b50ecd1cabb9f744b9e57d6110d9": "nginx-0.7.65_漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485121&idx=1&sn=3d35c41795786b33c9b2eea7c62f385f": "漏洞推送|【未公开】东胜物流软件GetDataListCA存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247513052&idx=2&sn=c0406f40963ecb4c3a9288faee368495": "25家跨国企业数据泄露,MOVEit漏洞引发重大安全危机", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502586&idx=1&sn=0128b8d78adfaf4169f5c1b2a56acceb": "【成功复现】D-Link NAS远程命令执行漏洞(CVE-2024-10914)", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247540646&idx=1&sn=bf698143a44119887ec5b5d887d4cdbd": "马自达 CMU 车机系统曝多项高危漏洞,可导致黑客远程执行代码", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458582134&idx=1&sn=95f5c978ef48c6520c56603e4ddbcdd3": "SDC2024 议题回顾 | 大模型软件生态系统的安全隐患:从传统漏洞到新型威胁", "https://mp.weixin.qq.com/s?__biz=Mzg4MDY1MzUzNw==&mid=2247497878&idx=1&sn=e8ce1d240242653ce95d75420af31b21": "Openssh漏洞修复升级加固", "https://mp.weixin.qq.com/s?__biz=MzAxMjE1MDY0NA==&mid=2247508539&idx=1&sn=5ea965a9da9251282e46633deaa24fb9": "中孚信息入选国家信息安全漏洞库(CNVD)用户组支撑单位!", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247545976&idx=1&sn=05c4213b9879a2b38aa0ac9b54e67c5f": "马自达汽车系统漏洞引发安全危机:黑客可执行任意代码", "https://mp.weixin.qq.com/s?__biz=Mzk0MzQzNzMxOA==&mid=2247487551&idx=1&sn=ac70ab02c53603efeffc9019a9f32702": "Autel MaxiCharger(CVE-2024-23967 ∕CVE-2024-23957解析)", "https://mp.weixin.qq.com/s?__biz=Mzg2MTg2NzI5OA==&mid=2247484703&idx=1&sn=29463d14ba55d7518b19b784ede3957b": "DataGear resolveSql 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247495083&idx=1&sn=a3d2e7cbff665f2502052bc6420a09a5": "【论文速读】| 注意力是实现基于大语言模型的代码漏洞定位的关键", "https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247483989&idx=1&sn=7985faa3d473a22b45989a8e877c3bd4": "工具 | 红队武器库VulToolsKit漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247522613&idx=1&sn=670d350c6894aab9ff3c8f336380528a": "CISA 警告:Palo Alto 重大漏洞已被攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503195&idx=1&sn=faa8d273d6f4a2ef59465190aab36c71&chksm=f2585f28c52fd63e46ac5b0a1bf90c3c68822c350824128b0903e916b35a5b213ee5193692be&scene=58&subscene=0": "雷神众测漏洞周报2024.11.04-2024.11.10", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247579536&idx=2&sn=1030b47bea804c76ef73b7024c115f6c&chksm=e91467aade63eebc7b4573ede6e556bf64ae4d163cb9b7f96241b124b0d0c33fa08861188efc&scene=58&subscene=0": "Synology 紧急发布 Pwn2Own 零日漏洞补丁", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495473&idx=1&sn=287892884ff8399c491816c642847db4&chksm=fd74dff8ca0356ee169b2a6946dcc1009e4f6469d88cf4befc246ab4f49fa5326e730487729b&scene=58&subscene=0": "关于新增快页信息技术有限公司等八家单位为CNVD支撑单位的公告", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486044&idx=1&sn=a388724f830e410cf1647a67efee8f84": "「漏洞复现」全新优客API接口管理系统 index∕doc SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489182&idx=1&sn=43153077f1b12d816a475a87439b5cf7": "用友U8 Cloud service∕approveservlet SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490176&idx=1&sn=f7bc575d9177f5af734456d68f9964ee": "GFI KerioControl 中的严重 RCE 缺陷允许通过 CRLF 注入远程执行代码", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490202&idx=1&sn=916223edf6aa4d18850e2f6f51605d27": "关键的 SimpleHelp 缺陷允许文件盗窃、权限提升和 RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247541404&idx=1&sn=956038fbe9403f2278c40c6f6bf54e64": "海外版本三星 Galaxy S23∕24 手机曝内存越界写入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247488909&idx=1&sn=e2a7822d04927ac12cdb72aaab9a3af2": "【已支持暴露面风险排查】Rsync缓冲区溢出与信息泄露漏洞(CVE-2024-12084∕CVE-2024-12085)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247489993&idx=2&sn=301f142063bd5d8e3cd80673a0be71e8": "记某OA系统Ajax旧服务的0day漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492706&idx=1&sn=764017be0e60cd7249e822c5c3170995&chksm=96f7fb0fa180721915854dff09c2c1dae9b06c957496daa255ab984fedeeea63f951be6dbf23&scene=58&subscene=0": "【风险提示】Rsync 缓冲区溢出与信息泄露漏洞(CVE-2024-12084 ∕ CVE-2024-12085)", "https://mp.weixin.qq.com/s?__biz=Mzk0NDcyMjU2OQ==&mid=2247484541&idx=1&sn=c834b9f4ff672abc3b456507acb31eeb": "T1059.009 命令执行:云API异常调用", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490013&idx=3&sn=87f07e5635337b5920c4f83eaad5eb55": "中间件安全|Tomcat漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652067526&idx=4&sn=b3d1ba063b429d95b1315af7a9713b77": "【安全圈】OWASP 2025 年十大漏洞 – 被利用∕发现的最严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247490479&idx=1&sn=b76d1181cd18599522db4a7428b3590b": "停车场后台管理系统 LaneMonitor∕GetVideo SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247518632&idx=1&sn=e07dbed7c0c52952663773515cadee9b": "【赏金15000美元】通过监控调试模式实现 RCE", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247499766&idx=1&sn=af8f15571a41cf2939dade4adef55a1d": "G.O.S.S.I.P 安全漏洞分析 2025-0220 OpenSSH CVE-2025-26465∕26466", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247496599&idx=1&sn=2b0720e1140e57ea382d3f5756399ed0": "从deepseek未授权探索clickhouse命令执行", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247528379&idx=1&sn=039d179220ec2af803a81af72b4a19f9": "Microsoft Windows KDC 代理中的 RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489050&idx=1&sn=b8a3c83bd1226e6846cf900b6521eb3e&chksm=c2c64111f5b1c8073c8272d5a6a272095297af0cd68edb9cd84c6b972f9c1960d0d457e44ef5&scene=58&subscene=0": "【安全更新】微软3月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488226&idx=1&sn=b8f41c9137270f8c46f58ce34818dcc6": "用友crm客户关系管理ajax∕getufvouchdata.php接口存在SQL注入漏洞 漏洞预警", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485894&idx=1&sn=10f8c9191b8edc1fdad2526bc52fab68": "CVE-2025-30208|Vite任意文件读取漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511578&idx=1&sn=80adefe4c6bed0eab29ed40008ac3bf2&chksm=fa527ba4cd25f2b287568d01ae1dc7d10626cbdb46c34c5547c1c5361b5b5d3b2b376b779c2a&scene=58&subscene=0": "Solr服务器上的“花式”远程代码执行(RCE)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652068822&idx=4&sn=77b1848c9bb8693ceed4d6eb03368eb5": "【安全圈】威胁通告:黑客组织利用WordPress MU插件目录隐匿恶意软件实现远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzIwODc2NjgxNA==&mid=2247485025&idx=1&sn=1299230c1473f418b488bad301d34711": "LLM+MCP=RCE?", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499327&idx=1&sn=9f2ddc6ca9659e3ce1645d9e1cecd7f1&chksm=fb8133978e79bf1f2855cb96fa90c5358ab2ea64469dc947677cdf2b944234d93ffe00bc07c9&scene=58&subscene=0": "突破 .NET 身份认证,上传定制化 web.config 实现RCE", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499341&idx=1&sn=cb761033b98f3a4edd7c5d9e9fbbe305&chksm=fb5698878db56b4c2ad90f9cfcf093af2eb254da7a7ac9428fce23697663798eeecbd4c02998&scene=58&subscene=0": ".NET 四种方法上传 web.config 绕过限制实现RCE", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499353&idx=3&sn=0f223a2b145fa6abb4402be63b82825e": "突破 .NET 身份认证,上传定制化 web.config 实现RCE", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247581991&idx=1&sn=43fdad838ff62d425324be170478ed24&subscene=0": "EncryptHub的双重生活:网络罪犯与Windows漏洞赏金研究人员", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592514&idx=3&sn=41397a15bfe5768e54fd38d4dd2c2ae9&subscene=0": "更新第五章:ASAN原理解析 | 系统0day安全-二进制漏洞攻防(第4期)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069091&idx=4&sn=920ad5ef9331387d612bdb92d6b11baa&subscene=0": "【安全圈】Google Chrome 136 更新,修复 20 年前访问过的链接隐私漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489946&idx=1&sn=4c4527a3fd7117a77e5b3a1b5c3f6568": "【漏洞预警】Microsoft Edge信息泄露漏洞(CVE-2025-29834)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592514&idx=2&sn=9cab10c0a161806a0f3a987edd460ec5&subscene=0": "从披露到被利用仅4小时!WordPress插件漏洞使黑客肆意创建管理员账户", "https://mp.weixin.qq.com/s?__biz=Mzg2MjU2MjY4Mw==&mid=2247484944&idx=1&sn=99b40f9d6766299c4900cae38e359f93": "轻松拿捏的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg5NTMxMjQ4OA==&mid=2247485842&idx=1&sn=d3627088320399b0f00a85064a261c9f": "MCP漏洞利用实例:窃取WhatsAPP历史消息", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503128&idx=1&sn=b4e99839821b08523feb2dedb7430744": "【成功复现】Palo Alto Networks PAN-OS 身份验证绕过漏洞(CVE-2025-0108)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493610&idx=2&sn=9fc5b9a1e2f45ed286478a9009018d7e": "Gladinet漏洞CVE-2025-30406遭在野利用", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489519&idx=1&sn=1b31da256316c28876ecc8e436fefcad": "【Python代码审计】佰阅发卡存在前台RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484852&idx=1&sn=1f9546ac368fdd099bcc61f256b45467": "【复现】Oracle E-Business Suite远程代码执行漏洞(CVE-2025-30727)风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247485280&idx=1&sn=d318aa6058f5fea6d14fbf38f5d78bad": "Oracle E-Business Suite远程代码执行漏洞(CVE-2025-30727)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458515490&idx=1&sn=c87fbf060d1a6a26d411d0caf887c086&chksm=b18ec8a886f941be24e79c3405b74ec5777a2e0bc3281713f8bc3456f496c7d59d800a694135&scene=58&subscene=0": "30小时教你玩转CTF-SQL注入漏洞实战分析入门", "https://mp.weixin.qq.com/s?__biz=MzkwNzMyNjU0MQ==&mid=2247484153&idx=1&sn=baa37dbc98c5671d19a1fdf7e435bc6b&chksm=c0dba7dbf7ac2ecdaf926a8ca8cb08f84bef4b366bb5613ffe7cb069374c4bcd3334c113065b&scene=58&subscene=0": "Joern In RealWorld (1) - Acutators + CVE-2022-21724", "https://mp.weixin.qq.com/s?__biz=MzAxNDM3NTM0NQ==&mid=2657045568&idx=1&sn=19f81fbfc7d82a95e4d822c277db6bf9": "【漏洞预警】libcue内存损坏漏洞威胁通告", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247488256&idx=2&sn=86231b20373d8ea8e145f14e576a1fea&chksm=fb029e58cc75174e1ad551027819bbbb1ba14c986e67eb2034f49d7f2b51bfcf106db43e9fe8&scene=58&subscene=0": "在野利用|Apache ActiveMQ远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247510148&idx=2&sn=272312ec6bbbc9b0710b81afa276510b&chksm=ebfaefa4dc8d66b25f89ff1f5c66f2bb932765d28151952f46d385d0130979b446797bc192e5&scene=58&subscene=0": "开源软件作者要不要为安全漏洞负责?欧盟官方提出监管新方法", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDExMg==&mid=2247484302&idx=1&sn=530ab3a9de98a57821158e5039ed835b": "【漏洞复现】通达OA SQL注入漏洞(CVE-2023-6054)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247503947&idx=1&sn=d946513fd802cf326210117b7c673921&chksm=cfcab35ff8bd3a490f85a4a6383cbdc0d04842a183b213b7a7956cfee0b42d2eb0857499b6ac&scene=58&subscene=0": "漏洞通告 | Apache ActiveMQ 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458531260&idx=2&sn=bf8e40c319909f297d325056426a47e0&chksm=b18d053686fa8c2037dffdc65831564cfc6ccced450f074a2ab28daf6e0f529815d4bed91072&scene=58&subscene=0": "欢迎咨询!系统0day安全-Windows平台漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247518349&idx=1&sn=7d0a830340114bfe063e58557ea01613&chksm=ea94b9e7dde330f1808becf6b96f023942a253bc69753c951113741277557c3cc163d081b25d&scene=58&subscene=0": "微软12月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247599274&idx=2&sn=895ac2c48ef27d4fba8691bfda31df48": "车辆漏洞管理 - 从设计开始有效保护软件定义车辆", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247487246&idx=1&sn=2457b74cc94243f1adb963a1a159e10d": "【高危漏洞预警】Apache Dubbo 反序列化漏洞CVE-2023-29234", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247498866&idx=2&sn=8eb66407058ef886ae62b125b5d849e5&chksm=973acf10a04d46065399aa80a6873759029aff006f8ad8bc4648a97a667fecf8dcc5d6597fce&scene=58&subscene=0": "上周关注度较高的产品安全漏洞(20231211-20231217)", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492206&idx=1&sn=e4062e654512a89f6cae13f6c619005b&chksm=96f7fd03a180741535d4b7757722023f3a3b4269186d2868fbe7f8c977a8605cbda8ef00769c&scene=58&subscene=0": "【已复现】金蝶Apusic应用服务器文件上传致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650587328&idx=1&sn=1918013af6b98dbf10d6959b7212df15": "春节所到之处的流量,别乱“蹭”;|黑客揭露空客EFB应用漏洞,飞行数据面临风险", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458549719&idx=2&sn=fd1549d81da158ca5ba3f18ed8b4f5a4": "熊猫购物API漏洞被利用,黑客泄露130万用户个人信息", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649290954&idx=1&sn=52e9df9273996331926ad73fe428188f": "安全卫士 | 魔方安全漏洞周报", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247489801&idx=1&sn=407ef4f78aff25fe04422085ddc2d9cf": "大华DSS数字监控系统attachment_downloadAtt.action任意文件读取(XVE-2024-34436)", "https://mp.weixin.qq.com/s?__biz=MzAxMzkzNDA1Mg==&mid=2247509107&idx=1&sn=73af37a4ec9626723fcebcd29706830b": "TangGo测试平台|逻辑漏洞测试系列-垂直越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247494631&idx=2&sn=2c5e695296640c48c784e367332e14ec": "上周关注度较高的产品安全漏洞(20240401-20240407)", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484691&idx=1&sn=bbf1c173c704e8057c473fa5b2da0aa3&chksm=c12af892f65d718480fa64f9d19deed60a38d564cb37bfafcdad7ee4eff62535393b4f69deb1&scene=58&subscene=0": "【复现】 WebLogic T3∕IIOP 反序列化漏洞(CVE-2024-21216)风险通告", "https://mp.weixin.qq.com/s?__biz=MzU0MDI1MjUxMg==&mid=2247533359&idx=1&sn=22b5ced3e8df9f8552f02bc17ae314d7": "集结社区之力,助力客户应急不明1day漏洞的PoC验证", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491156&idx=1&sn=2a852a8396fb7d7ed4720a5f4e925968": "安美酒店管理系统∕get_user_enrollment.php接口 sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524374&idx=2&sn=24d48e2ee3b173f5643f49a0fee7c75b": "Windows 11曝权限提升漏洞,攻击者300毫秒内可获取管理员权限", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651318673&idx=2&sn=6c308a78e315c863b95c3517747bb933": "CVSS 10.0!Apache Roller 曝高危漏洞:密码修改后会话仍持续有效", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615870&idx=1&sn=80fc7395ff2955f66c4d863f5422cea4": "赏金故事 | 多个漏洞组合拳拿下PayPal高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489138&idx=1&sn=58546270a15e70e35b0df53dd0523134": "AI挖洞 | 利用无问AI帮助甲方修复漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485067&idx=1&sn=27a151be6342be4a06dbc12d64ca5bc9": "腾讯云安全中心推出2025年3月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=Mzk1NzY1NzMwOA==&mid=2247483823&idx=1&sn=c98665bc09740e7c506487f6c335205c": "【CNVD漏洞挖掘实战训练营】从零到一,拿到属于自己的第一本证书!", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484650&idx=1&sn=07d53cfc0391b2ab96b51ee5cb61bed3": "一文吃透文件上传漏洞!路径遍历、后缀绕过、ZIP炸弹全解析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651318673&idx=1&sn=fc4885839a5fa2d029e0e95474e9432b": "美国国土安全部终止资助,CVE漏洞数据库面临停摆危机", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490721&idx=1&sn=f88cc3bddceac9661f32eff8703532d6": "Chrome 曝高危漏洞:攻击者可窃取数据并获取未授权访问权限", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486298&idx=1&sn=50d5927179f3e71a3153de10e9148058": "某天OA-workFlowService-多处SQL注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788468&idx=1&sn=641942e08bf340932a9292fe6f2fd450": "CVE停摆?全球通用漏洞数据库项目面临资金危机", "https://mp.weixin.qq.com/s?__biz=Mzk1NzMwNTM5NQ==&mid=2247484886&idx=1&sn=55764c035c6101bc2eb944212d447f86": "SRC漏洞挖掘经验+技巧篇", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610287&idx=4&sn=f11fecf214744714bb6f8f2db7890005": "一款全方位扫描工具,具备高效的机器探活,端口探活,协议识别,指纹识别,漏洞扫描等功能", "https://mp.weixin.qq.com/s?__biz=Mzk0ODc1MjYyNA==&mid=2247483877&idx=1&sn=96af6f8a194f5e264a49286ed8c6353b": "【CNVD漏洞挖掘实战训练营】从零到一,拿到属于自己的第一本证书!", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486033&idx=1&sn=8f6ffee6ca1811e4c96dd68c5668f505": "CISA警告:CrushFTP漏洞正遭利用,风险严峻!", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462763&idx=1&sn=7592d085b14be3d4ae63304eec467c14": "信息安全漏洞周报(2025年第15期)", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQ0MTI2MQ==&mid=2247484842&idx=2&sn=afef86708d6cd0d337e80dc62d8d6f7e": "小白黑客成长日记:漏洞勋章与道德电流", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493610&idx=4&sn=3197b14e93c1a19515fade4452c6a7fb": "赫兹租车公司披露数据泄露事件 起因系2024年Cleo系统零日漏洞攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ2NzQ0Ng==&mid=2247485091&idx=1&sn=0f3c783887e861fd52700a5f0ee94d1c": "【CNVD漏洞挖掘实战训练营】从零到一,拿到属于自己的第一本证书!", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503319&idx=1&sn=c50ec2d0659d1177bf4a7569ff7920f6": "Oracle 2025年4月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492188&idx=1&sn=139092231262bccf7250085b05c5402c": "漏洞预警 杭州三X SMG网关管理软件 changelogo.php 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493610&idx=1&sn=25e6396cc5325582f21981eaab54a8ac": "关键Apache Roller漏洞允许在密码更改后仍保留未授权访问权限", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524374&idx=3&sn=17fdb201a629d64e8a1da57513bc7e44": "Chrome曝高危漏洞,攻击者可窃取数据并越权访问", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524374&idx=1&sn=50cfeaad4836761d01355e66a6c3d573": "Apache Roller 漏洞让攻击者获得未经授权的访问", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247485200&idx=1&sn=3ad5a402ff7f574eb9f2acc698a60553": "美国CVE漏洞数据库面临资金枯竭危机", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247488969&idx=1&sn=1c5e9f267446a1663b736442711902cc": "记一次前端js加解密泄露引发的漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNjg3MjczOA==&mid=2247486633&idx=1&sn=256dbdb580c954cfe2700e41a0642144": "攻击者正通过 sourceforge 平台传播一款挖矿程序和 ClipBanker 木马病毒", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484779&idx=2&sn=6bc8aa0d49692d02e6bc00c4d4bf1a94": "【漏洞处置SOP】FasterXML jackson-databind 信息泄露漏洞(CVE-2019-14439)", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484660&idx=1&sn=a1b3e936aca842abd6567cf38e04b6ff": "一次 OAuth 登录背后的隐患:被忽略的 URL 跳转漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096146&idx=2&sn=bf4cb1d0414ed84f43a8a35465bfb419": "Apache Roller 未经授权的访问漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592525&idx=3&sn=0bd3b97b684a64e90ef77a043f82e023": "更新第四章:漏洞分析与利用 | 系统0day安全-IOT设备漏洞挖掘(第6期)", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486682&idx=1&sn=787f6342e330f1a7f7603fb2719a7748": "【漏洞预警】Oracle E-Business Suite远程代码执行漏洞(CVE-2025-30727)", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484318&idx=1&sn=bd193da8dc2151a13202265e75ad2641": "WordPress前台管理员账户创建漏洞(CVE-2025-3102)POC及一键部署环境", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489955&idx=2&sn=304ce7e7ee5e2f47d63bfe0744b35044": "【漏洞预警】Oracle 2025年4月补丁日多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522748&idx=1&sn=743ec5c32d3881143ee9922bbd2be8ef": "Apache Roller CVSS 满分漏洞可用于获取持久性访问权限", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484779&idx=3&sn=310b7297e3017aa319a69b1e7545706d": "入选作品公布|安钥®「漏洞处置标准作业程序(SOP)」征文第三十一期", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500984&idx=1&sn=7a8ba0120ca35ee2de5db79e636b12d5": "【漏洞通告】Oracle Scripting iSurvey模块远程代码执行漏洞(CVE-2025-30727)", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484682&idx=1&sn=a884ddbce998c0cf73f91f28b94b5045": "深入解析 URL 跳转漏洞:审计方法与渗透实战全攻略", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484668&idx=1&sn=8013ce12f108e76a3ed07407e72569b6": "URL 跳转漏洞利用方式详解:不仅仅是钓鱼这么简单!", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489955&idx=1&sn=666cbafe9333001db4200c1df62fb939": "【漏洞预警】Argo Events权限管理不当漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524287&idx=1&sn=484cbe1d38a7bf4fca44fa91b0807798": "【漏洞通告】Oracle E-Business Suite远程代码执行漏洞(CVE-2025-30727)", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484779&idx=1&sn=e17604d10382682ebc5fa5a314c4ab15": "安钥®「漏洞防治标准作业程序(SOP)」征文启示 [2025年第15期,总第33期]", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247491200&idx=1&sn=69ead0eed0446e993d381d454a24a724": "网站安全\"扫描利器\":掌握Gobuster,一键发现隐藏漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503137&idx=1&sn=6d689f441d4a43584fdf2cc7f052c3fc": "【成功复现】Ingress NGINX Controller远程代码执行漏洞(CVE-2025-1974)", "https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247485037&idx=1&sn=ba29027e943fadc9c1b1e07b8168d04b": "啥情况?!想让CVE董事会成员意识到一个重要的潜在问题?!震惊全球最大漏洞库出现危机?!", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652115249&idx=1&sn=35e8d7b146e8632ec58079bf918cee61": "以后是不是0day更多了?由于美国资金不确定性CVE项目面临中断", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484695&idx=1&sn=d143eca68da60a0f23f8dd92fde3710d": "Nashorn:潜伏在Java中的JavaScript命令执行后门", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490961&idx=1&sn=370b326cd8809c431d7a1e1e29ae2d1a": "综合后渗透工具e0e1-config|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492885&idx=3&sn=c61b18065b875af12e531287136b9cbe": "漏洞预警 | 家装ERP管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492885&idx=2&sn=917ee5335324169b6a29f5bd67179013": "漏洞预警 | 安科瑞环保用电监管云平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794860&idx=3&sn=e9e3c6ad09976ada6686f6de7652b00f": "专家发现 Windows 任务计划程序中存在四个新的权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247497936&idx=2&sn=43e60952c4590bf3aa4092c3969857e8": "一张图拆解:CVE漏洞的旅程", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794860&idx=2&sn=816788514b71bb9e5c442ab1e2eb9f7d": "苹果称新发现的0day漏洞针对使用 iOS 的“特定目标个人”", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484714&idx=1&sn=15f840bd4928ac609b037661ef2a00d4": "一文看懂 Java 命令执行的源码审计与防御", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247518664&idx=1&sn=db466d878e78f3c689a3ff976be23842": "CVE编号在招手!23个JS漏洞挖掘技巧!", "https://mp.weixin.qq.com/s?__biz=MzkyMDY1MDI3OA==&mid=2247483954&idx=1&sn=5c783f320db089e1c21d8b3bca0d4b7a": "【CNVD漏洞挖掘实战训练营】从零到一,拿到属于自己的第一本证书!", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526079&idx=1&sn=a0a784d2c6830c4affdd163ae46563d6": "美国国土安全部终止资助,CVE漏洞数据库面临停摆危机", "https://mp.weixin.qq.com/s?__biz=Mzg5NTMxMjQ4OA==&mid=2247485875&idx=1&sn=c64c6db109cc2b60b1653f67b1ced2a5": "MCP TPA漏洞复现,及Deepseek的诡异表现", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492885&idx=1&sn=e153ceb04a965266859dcb0e1570e121": "漏洞预警 | UNA CMS PHP对象注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499467&idx=3&sn=7e48a21432445c03d6096bf6771c4778": ".NET 高级代码审计:一种尚未公开绕过 GZip 实现反序列化漏洞的方法", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487693&idx=1&sn=269f471b38e44b55d405ab959b61c9c3": "全球网络安全警报!CVE漏洞数据库停摆危机,美国为何自毁长城?", "https://mp.weixin.qq.com/s?__biz=MzUyNTUyNTA5OQ==&mid=2247485213&idx=1&sn=0a0df376bfca8f5bbb80fd333850890a": "【云安全】云原生- K8S IngressNightmare CVE-2025-1974(漏洞复现完整教程)", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524412&idx=1&sn=4436ae2957ce929a3136dd12f41bd450": "2个苹果iPhone零日漏洞在高度复杂的攻击中被积极利用", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610292&idx=1&sn=f1898921a6f1b63b3218debbc236497a": "美国国土安全部终止资助,CVE漏洞数据库面临停摆危机;|有部分群众反映收到了领取“五险一金补贴”的通知;", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247497752&idx=3&sn=fc37db46dfed9ffdbfae43780480ce3d": "Erlang∕OTP CVE-2025-32433 (CVSS 10):严重 SSH 漏洞导致未经身份验证的 RCE", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247489078&idx=1&sn=db8a510a6d1129cbde04fd11af8f14bf": "漏洞预警| Windows任务计划程序漏洞可避开UAC执行高权限命令", "https://mp.weixin.qq.com/s?__biz=MzkxOTUyNTg2MA==&mid=2247483972&idx=1&sn=6360f9c266fa41fb14ca0d4131bfdf20": "开发者注意!Vite框架曝高危漏洞,你的项目受影响了吗?(含poc和批量脚本)", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5OTQyNQ==&mid=2247488497&idx=1&sn=1bcaf000a8f3cdd9b219d99594204eee": "渗透测试|柳暗花明(记一次有趣的高危漏洞以及思考修复方案)", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462767&idx=1&sn=9836a1530e7a136b6b846d94dd13df1b": "CNNVD关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486719&idx=4&sn=f8ff16a30c493f6d4635bc6644329de7": "【漏洞通告】D-Link DI-8100 JHTTPD 基于堆叠的溢出(CVE-2025-3538)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491165&idx=1&sn=d57b085af7d7378ba55e6eba7e8e2799": "速达软件 多款产品 doSavePrintTpl.action SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486719&idx=2&sn=6ca139f3e362f10d30dad9af90adce4f": "【漏洞通告】Adianti Framework 安全漏洞(CVE-2025-3590)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486719&idx=3&sn=053b8e4f597e4e325d106e9df51f3dde": "【漏洞通告】AutoGPT 代码问题漏洞(CVE-2025-31490)", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484726&idx=1&sn=c62157f37833ed50540775908f93e406": "Java命令执行审计怎么查?关键词清单来了!(附类型汇总)", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247490950&idx=1&sn=a91633c936b48e68f2e18db9f0348d01": "创宇安全智脑 | Optilink upgrade.php 远程命令执行等61个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503328&idx=1&sn=5b2547c083206cfdcc72084fb45a3894": "【已发现在野利用】Apple iOS 与 iPadOS 多个在野高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247502921&idx=1&sn=88f56da5057f4d6e1686895b4223b08b": "CVE要黄?特朗普认为漏洞数据库与国家安全无关", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499443&idx=2&sn=a6be39e7d6dadaadd087bfe05fb9a29a&subscene=0": ".NET 高级代码审计:一种绕过 GZip 叠加 BinaryFormatter 实现反序列化漏洞的技术", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538513&idx=1&sn=2f03dab7cbc7139e09be0d33a4ddefde": "CVE 漏洞项目及时\"续命\",11个月后生死难料", "https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247498861&idx=1&sn=04cd3572c613fdf4a9515777d4e5d3bd": "【漏洞与预防】畅捷通文件上传漏洞预防", "https://mp.weixin.qq.com/s?__biz=MzkxOTUyOTc0NQ==&mid=2247493320&idx=1&sn=d492128df6d30d2fadcfe488391b3706": "漏洞CVE项目合同今天到期,最后时刻续上,欧盟差点截胡", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664240728&idx=1&sn=2f8f1a14345e6ab93b60b861879d1f7d": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486719&idx=1&sn=1c5a2efc23e829988cfc99335e68f0ad": "【漏洞通告】Oracle E-Business Suite远程代码执行漏洞(CVE-2025-30727)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486719&idx=5&sn=1bc50d3cf6d8af81f6d22833e88d4897": "【漏洞通告】基于 Chromium 的 Microsoft Edge 远程执行代码漏洞(CVE-2025-29834)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651318777&idx=1&sn=1c9c7f2561b2b3ce09438b7f1ff25807": "Windows 11高危漏洞:300毫秒即可提权至管理员", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492645&idx=1&sn=02febcbbf196aab9a0d84b37bcf3f332": "漏洞复现 || Vite import存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247491215&idx=1&sn=c60068d2796fcd7361a287e832d27bf5": "服务器被控的幕后黑手:远程文件包含漏洞深度揭秘", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592604&idx=4&sn=0e7b8ddb4e256cb3f0a166d8b724ffe6": "今日更新 | 系统0day安全-Windows平台漏洞挖掘(第5期)", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488032&idx=1&sn=3033c7b30b6421435668bc58482924d6": "300 毫秒获取管理员权限:掌握 DLL 劫持和 Hook 技术(CVE-2025-24076∕CVE-2025-24994)", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247497389&idx=1&sn=111f630241eeeaa8ed781fcb4d8cd17e": "福利课 | 2025首场SRC漏洞挖掘两日训练营", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489963&idx=1&sn=b8212c62208309044516aebdbc1f8cc5": "【漏洞预警】CrushFTP目录遍历漏洞(CVE-2025-32103)", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247554512&idx=2&sn=2be22f4363413e1bd622083345cf0082": "【免费领】网安从业必备:Web漏洞检测及修复方案大全", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649172570&idx=2&sn=17d3e982b261c007b7157d3e2a96e7ed": "CNNVD通报Oracle多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484005&idx=1&sn=392a43c98adcf9e5f7757138058263b1": "【漏洞预警】Erlang∕OTP 严重 SSH 漏洞允许未认证的远程代码执行(CVE-2025-32433)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069139&idx=2&sn=5fcd14bd8672d24bf7654cecc92d1518": "【安全圈】苹果紧急修复两枚被用于定向攻击iPhone的零日漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc0Mjc3NQ==&mid=2247486682&idx=1&sn=626c19bac989fd3c25e5828d905639c9": "预算展期,CVE 暂免关门,但国内漏洞信息库发展契机仍存", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096157&idx=1&sn=5a01eac9ac111e56ff71ce95fe5b582d": "2 个 Apple Iphone 零日漏洞被利用", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096157&idx=2&sn=41b8c2f79b0bc5bb6f833594bd3d69e9": "Oracle 安全更新 – 针对 378 漏洞(包括远程漏洞利用)的补丁", "https://mp.weixin.qq.com/s?__biz=MzU5Njc4NjM3NA==&mid=2247496507&idx=1&sn=4cdf72a4acbd3b6637ff967a88e2d060": "中科天齐团队发现Apache Roller近年来首个高危漏洞,密码修改后会话仍持续有效", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522769&idx=1&sn=665091a9de4302af67ecf646d9c5bb79": "苹果紧急修复已遭利用的两个0day", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529147&idx=1&sn=37e3df37ceb35cf5a49d2ecff6f3d748": "CVE-2025-0411:因 7-Zip 的 Mark-of-the-Web (MotW) 绕过而导致的恶意软件感染 _", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247499162&idx=2&sn=607bb9252d39d68ae5d8746324310047": "英国政府发布网络安全漏洞调查", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503150&idx=1&sn=603b4c2f2df62b5c6abf6f719b5f4f36": "【成功复现】NUUO Camera远程命令执行漏洞(CVE-2025-1338)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489963&idx=2&sn=a9cfbcf86310f0df04893fe514b19216": "【漏洞预警】Oracle Scripting iSurvey模块远程代码执行漏洞(CVE-2025-30727)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247490965&idx=1&sn=5bb002e942221bc14f55433acdb37cd3": "WEB漏洞扫描器Invicti-Professional-V25.4(自动化爬虫扫描)更新", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247545017&idx=1&sn=b513c15f91d5de7a8fa33c4b3725706a": "【高危漏洞】Windows 11:300毫秒即可提权至管理员", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490093&idx=1&sn=1ae57da449512ecbcde1d4f4e8acc808": "【代码审计】某友云平台远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489172&idx=1&sn=c2fc83def008af0091c1e4f51616defb": "某云盘系统 API 端点无限制上传漏洞解析", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794873&idx=3&sn=9cdecd15fd9f4dd91299ff83d9c1fcd9": "Erlang∕OTP SSH 中的满分RCE漏洞广泛影响电信设备、工控系统", "https://mp.weixin.qq.com/s?__biz=MzA4NzU1Mjk4Mw==&mid=2247492582&idx=1&sn=33a3919850b5cbbd1f435f23a4cf2f89": "若依Vue漏洞检测工具v4更新", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492892&idx=1&sn=8512347baba3264fa31bda77c9c6f6c8": "漏洞预警 | NetMizer日志管理系统远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492045&idx=1&sn=7c2c6f2965fe73be4f2046b0ef28ea92": "某事业单位多处越权漏洞测试", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492892&idx=3&sn=82a4d8973d972459d50d3176a7013777": "漏洞预警 | 科拓全智能停车收费系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247490525&idx=1&sn=bc425a085f59434108bc07b542e02398": "源代码审计常见漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492892&idx=2&sn=c7f073395b25c4f53b24ae3191f5accc": "漏洞预警 | 用友NC SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487925&idx=3&sn=d8a240f7a2f68a49989d34415a3e3ab7": "三千行代码,扫出三万多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610301&idx=1&sn=ed1b5ac664c0595394f5f2186f32bd85": "Windows 11高危漏洞:300毫秒即可提权至管理员;|快递公司负责人导出公民个人信息129000多条 非法获利获刑", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064111&idx=1&sn=c94895f1427df70e394ef8bcaa9f8ae0": "信息安全漏洞周报【第018期】", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484010&idx=1&sn=119764216e6461673a795ffb0733e871": "【已复现】CrushFTP SSRF和目录遍历漏洞(CVE-2025-32102,CVE-2025-32103 )", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247497911&idx=7&sn=777f246e017e1f8d115194492c01a29b": "苹果发布紧急更新,修复被积极利用的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247523670&idx=1&sn=2e26c700923ff59023211d31c80d6ca2": "【全网最全】Struts2终极漏洞合集靶机发布!一次通关,掌握所有高危漏洞利用!", "https://mp.weixin.qq.com/s?__biz=Mzg3NTY0MjIwNg==&mid=2247485980&idx=1&sn=3a4bcd0b5a1a2bba7e7c73399034cedf": "如果没了CVE,我们还有哪些漏洞库可以选择", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484456&idx=1&sn=151af37be75db9ecc780188294a1a831": "OneBlog最新模板注入漏洞(CNVD-2025-06047、CVE-2024-54954)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247497911&idx=5&sn=16f9dc234d68c7b581ac76809236e96f": "再发一次Erlang∕OTP SSH 中被发现 CVSS 10.0 严重性 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3NDM4NTk4NA==&mid=2452946681&idx=1&sn=bd24a85040eb14af4f5f7abbc6b52b9d": "网安人的咯噔文学|CVE-2025-404NotFound?", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247497911&idx=1&sn=43e519f0856018487702bc5d5a3d80ab": "计划任务程序schtasks.exe 的0day漏洞被微软忽略", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492201&idx=1&sn=670b6c5b020543956769ca9df9cc47e0": "漏洞预警 博华X龙防火墙系统 arp_scan文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524436&idx=3&sn=b348515395f006e54dc60ff4fe7aa96e": "Erlang∕OTP SSH远程代码执行漏洞的概念验证(PoC)利用代码已公开", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247903&idx=1&sn=ba2031a750a2783de5150580b5291496": "MCP安全检查清单:AI⼯具⽣态系统安全指南 | Windows 11高危漏洞:300毫秒即可提权至管理员", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524436&idx=2&sn=c0d4fac0c3fc8f1847f9fb73492e9935": "PHP的extract()函数存在严重漏洞,可导致任意代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493626&idx=1&sn=c7f84e7ee0335b5a660dd84ae8b3528b": "苹果发布紧急更新修复正被利用的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247491060&idx=1&sn=dfb3eb88ba58e2116925e1f74dc048bc": "能信安:漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkxMzY0MzAxMw==&mid=2247487531&idx=1&sn=5d96de4bb41f7fbad277e0a4276def4d": "【代码审计】记某次项目前台反序列化RCE漏洞研究", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490128&idx=2&sn=85687dfc8f574b67690a0a9e4b6e87b9": "如果没了CVE,我们还有哪些漏洞库可以选择", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488037&idx=1&sn=cb13be04967b8e02868d4825a06cd220": "CVE-2025-21204: Windows Update Stack 中的不当链接跟随导致的权限提升", "https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247488966&idx=2&sn=c5e33b3deea80e7f01d72f473c927b78": "美国CISA紧急续约CVE项目,确保漏洞披露机制不中断", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247497916&idx=1&sn=54583240e4825a904c7c7538095edc23": "【真0day未修复】Bubble.io平台 0day安全分析:揭露Elasticsearch漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503338&idx=1&sn=156adf75bc9f1344112970fb946cc863": "CVE计划停摆:全球漏洞治理体系面临协同危机", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489544&idx=1&sn=9c91da0de7a094e6745684a3032f1f72": "【代码审计】记某次项目前台反序列化RCE漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247490732&idx=1&sn=511a6335e2ba8dc4d2e726bf3213f86a": "Erlang∕OTP SSH 高危漏洞 CVE-2025-32433:无需认证即可远程执行代码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522791&idx=1&sn=b726626262a08aef9a0f09bf3d3332e0": "速修复!Erlang∕OTP SSH 中存在严重的预认证 RCE", "https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649767610&idx=1&sn=2168feb32477aee7179465fb0683d0fa": "全球首款「原生AI」漏洞挖掘应用——蛙池AI即将上线!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069156&idx=4&sn=b108806bca06e4e6ea54839526d21ed7": "【安全圈】Erlang∕OTP SSH 远程代码执行漏洞 PoC 漏洞利用发布", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522791&idx=2&sn=841f61a29df71610844f2e021c5c9bab": "Atlassian 和思科修复多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529163&idx=3&sn=1b1ed6dc376abc605a00a905096c0469": "CVE-2025-21204:通过 Windows 更新堆栈中的不当链接跟踪进行权限提升", "https://mp.weixin.qq.com/s?__biz=MzkwMzYyNzQ1NA==&mid=2247484950&idx=1&sn=e26cad51797b8e2af84c7383a62c3db8": "Windows 提权漏洞速报:CVE-2025-21204", "https://mp.weixin.qq.com/s?__biz=MzA3NTIyNzgwNA==&mid=2650260085&idx=1&sn=20363c6174d0204eb17ac6ad870fc4ba": "微软产品的漏洞:哪些已得到改进,哪些仍面临风险", "https://mp.weixin.qq.com/s?__biz=MzU0MjExNDkyMQ==&mid=2247485996&idx=1&sn=e442ff61b75275485bf1fbf7552d77a9": "Sapido RB- 1732 路由器命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489974&idx=1&sn=0d23aafb6b01d3d5cd1171a1c48b16bf": "【漏洞预警】F5 BIG-IP命令注入漏洞CVE-2025-23239", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492651&idx=1&sn=1738522915c9bfc54110996360b55ae5": "漏洞复现 || Langflow 远程命令执行", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485300&idx=2&sn=fb51e3139570d30c82c8d85256c6518e": "一文玩转验证码漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651318977&idx=3&sn=0cb3b70f3f20cd13cc269a5eb1500fe0": "Windows漏洞CVE-2025-24054被利用,文件下载可致NTLM凭据被盗", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489974&idx=2&sn=94cc62913f26f413080bf10c5f6de7f2": "【漏洞预警】Jupyter Remote Desktop未授权访问漏洞CVE-2025-32428", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651318977&idx=4&sn=e6b728a815b7412e47ec8aab3709ebb4": "iOS 设备遭定向攻击,苹果紧急修复两枚零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511701&idx=1&sn=7f2360040b4d75447acab62b52e3db78": "IngressNightmare:揭秘CVE-2025-1974 Kubernetes RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492903&idx=3&sn=b6a11269640f9896ffbdbae50442c169": "漏洞预警 | JieLink+智能终端操作平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMzcyMjgwNA==&mid=2247483985&idx=1&sn=cfbade59a9a0c0c5625511c1b1198691": "Wordpress SureTriggers插件漏洞(CVE-2025-3102)创建未经身份验证的管理用户", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492903&idx=2&sn=10cb3a18dd564b6efebfd9d03fda7d73": "漏洞预警 | 家装ERP管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484779&idx=1&sn=ddbfd9581640b2b1c1396bcbdf4e892b": "一文掌握 Java XXE 漏洞原理、利用与防御姿势", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652115297&idx=2&sn=95e3cc9767aa8c0029dfc6a990ad53b7": "安全提醒:Apple 零日漏洞正被利用于攻击", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492903&idx=1&sn=9cb1c25744b59c3b3af147fa26a73101": "漏洞预警 | Oracle Scripting iSurvey模块远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247507002&idx=1&sn=b7f176648f100e6a9efc7fe41f981d92": "【一周安全资讯0419】九部门印发《关于加快推进教育数字化的意见》;Windows11高危漏洞:300毫秒即可提权至管理员", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484761&idx=1&sn=b7d7b5ce940c87fb62bf7552fe8635c5": "Java XXE 防护实战:常见漏洞场景与防御代码全收录", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484881&idx=1&sn=805864c5b7786a3c546c113c19f29daf": "【漏洞复现】Zyxel NAS设备 setCookie 未授权命令注入漏洞(CVE-2024-29973)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494140&idx=1&sn=23280ef663e551ad564d018f7653375a": "AscensionPath一个基于Docker容器化技术的漏洞环境管理系统", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487931&idx=1&sn=9dc4229ef36fc424a9598bbc0e51ae2c": "deepseek分析代码变动推测漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652115297&idx=1&sn=eadad9a8a652142a6075fc06f295b2ca": "2024年微软漏洞数量创新高,超1,300个", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247501378&idx=1&sn=d13931a97f131dc1f6743fc16677ab65": "AD域内网渗透-三种漏洞利用方式", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489564&idx=1&sn=1a0cc6975d8a6582ee297ed357b6cebe": "某短视频矩阵营销系统前台RCE漏洞审计", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247484476&idx=1&sn=32893d59baa275b6b4524535eeef1857": "JS中的漏洞信息", "https://mp.weixin.qq.com/s?__biz=MjM5MDA3MzI0MA==&mid=2650091532&idx=1&sn=279b4351d16c792425d749f26de6f628": "【大佬赋能】1000万漏洞赏金获得者,带你走向SRC漏洞挖掘大师之路!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069169&idx=1&sn=23dcd3fe9618ef29ef7a414b9da625d6": "【安全圈】Windows NTLM 漏洞肆虐,低交互高风险、可提权窃取敏感数据", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498029&idx=2&sn=b4e9a24aeec5af3f5fa95929642d3f1e": "华硕警告称,启用 AiCloud 的路由器存在身份验证绕过漏洞CVE-2025-2492(9.2)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485941&idx=2&sn=246d2f1e20ec25f28e48e4d34c7191e5": "【漏洞复现】CVE-2025-24071|Windows 文件资源管理器欺骗漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529175&idx=2&sn=1346b0d0a341741e51d35bcdea870ba1": "渗透测试,从初学者到专家!这是一份有关 Web 应用程序渗透测试和漏洞赏金搜索的综合指南,涵盖了识别和利用漏洞的方法、工具和资源", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319008&idx=1&sn=41ada316f8b802f5b2ad77d5893fc636": "FreeBuf周报 | CVE漏洞数据库项目面临停摆危机;Apache Roller 高危漏洞改密后会话仍有效", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247572421&idx=1&sn=7fe88022698b4490232ced946fa85265": "某电力公司web.config的RCE之旅", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519064&idx=1&sn=43bde635aaa63ff6034368f8babaa8bc": "Parameter is null引发的一次五千漏洞赏金记录", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485941&idx=1&sn=e18a5c024992733bdae0cff9a00e66f0": "CVE-2025-27218|Sitecore CMS远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247485374&idx=1&sn=ebf0dee4095732e720022d7cf8d4a5f5": "“改密码就能防住?”全网疯传的Meta夺号案,撕开2FA致命漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484893&idx=2&sn=827944d3948a304d05705d851957c406": "rConfig-ajaxEditTemplate.php-后台远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODUzMjA1MQ==&mid=2247485014&idx=1&sn=1dd0782f1c6e77e88e56b004c111e1b6": "汉堡白吃?某连锁餐饮 App 竟藏\"0元购\"漏洞!", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490206&idx=1&sn=5adb6b6ee20a97d0afeac3f4668822ad": "【漏洞复现】CVE-2025-24071|Windows 文件资源管理器欺骗漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492589&idx=1&sn=20a2a65628b7e4552ad7642c3073e9fe": "英国因 2022 年勒索软件漏洞对软件提供商罚款 307 万英镑", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520152&idx=1&sn=68e4a26ee2ab2f0de6a3630ccb40bf7e": "CVE-2024-22243 Spring Web UriComponentsBuilder URL 解析不当漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529175&idx=4&sn=f51dea8cd1acf20d966d1af2aaebad88": "使用 Joern 查找用于利用 Java 中 Unsafe Reflection 漏洞的类", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610311&idx=4&sn=84bfa2b6f0b91c2b693822e8a2821285": "CTF PWN新手的终极利器!一键搞定栈溢出与格式化字符串漏洞!", "https://mp.weixin.qq.com/s?__biz=Mzk0ODc1MjYyNA==&mid=2247483879&idx=1&sn=7a43f60f8c3b35cee5948b6cc2547e06": "代码审计|SpringKill如何用CodeAuditAssistant挖掘0day教程公布", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484893&idx=1&sn=1f12152bb39b871e6f23d4431c3092e0": "rConfig-ajaxArchiveFiles.php-后台远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247484512&idx=1&sn=d08ab2d26d7277a8016c3bd32aafcbda": "SQL注入漏洞实战", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319009&idx=3&sn=ed903a68d0d333dc192cc004c3e78565": "Erlang∕OTP SSH存在CVSS 10.0级高危远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487724&idx=1&sn=fedc52bbbc3985c6945a60718485a072": "Windows 11高危漏洞CVE-2025-24076:300毫秒即可夺取系统权限!速修!", "https://mp.weixin.qq.com/s?__biz=MzIzMDM2MjY5NA==&mid=2247484204&idx=1&sn=f94ec89158fc0db2ba7ed483d2b98bf1": "“脚本小子”-之恶意poc投毒事件", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529216&idx=1&sn=3710dd4b0db6181830980a1eab5843d1": "Windows 任务计划程序漏洞允许提升权限和篡改日志", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247520234&idx=1&sn=dc56bc6ed0dda880d7078934447b943a": "揭秘千万漏洞赏金密码!跟着漏洞挖掘大神解锁 SRC 变现新赛道", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526081&idx=1&sn=40a0f9209566ec11abf8cb7821ff45e8": "某单位软件供应商黑盒下的0day挖掘", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247511702&idx=1&sn=cf6f539d15581b23e00b54cfb765c33c": "利用 API 和硬件漏洞控制数百万台智能称重机", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247496934&idx=1&sn=38b27d1ed7f81318ad25e529f75a48b1": "从Nacos derby RCE学习derby数据库的利用", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247623624&idx=1&sn=957f1e0e22fc7c312e1361285fce2b43": "人工智能自动化模糊测试:如何自主发现汽车软件中的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTMxMjQ4OA==&mid=2247485890&idx=1&sn=47aad52ff56d823d2ec605a0819d22c9": "MCP协议的漏洞扫描器MCP-Scan,半开源", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487711&idx=1&sn=3ec5d1474ad37b929507112101d0e4ef": "紧急预警!CVE-2025-24054漏洞遭主动攻击,文件下载竟成“钓鱼陷阱”!", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247493292&idx=2&sn=0d706a4064111b3e131f24460b2f2c56": "同学,你试过交edu漏洞交两天两夜嘛", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492590&idx=1&sn=a93a3c5c0a237eeb3c7d8a0f72a59ae1": "OpenAI 现向安全研究人员支付了 10 万美元以修补关键漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247491776&idx=1&sn=8fe7433aaae447fe8dc9569ef0f44bc3": "CVE-2024-0012&CVE-2025-0108 PAN-OS 从配置文件中寻找认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247489096&idx=1&sn=ec76200e8fa47661bef0a962982d9cf2": "通杀系统分析 | 某系统前台文件上传漏洞(可Getshell)", "https://mp.weixin.qq.com/s?__biz=MzIxOTM2MDYwNg==&mid=2247513140&idx=1&sn=1ae20e0d9918c0c58a871e2fe81a0bf7": "[网络侦查] 一款使用简单的批量信息收集与供应链漏洞探测工具", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096165&idx=2&sn=e5337ec2a987637a559d007ca79f879e": "Windows NTLM 哈希泄露欺骗漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484902&idx=1&sn=4b9161f654fed2aca8c07f1548882333": "三星-WLAN-AP-WEA453e路由器-远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610318&idx=4&sn=e0a7424d900b911eef8edce6ef27edcf": "SeeMore!一个漏洞挖掘小工具", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529216&idx=2&sn=bcdaf0a759032c1804abfd38699f3555": "严重 Windows 漏洞可窃取 NTLM 哈希值", "https://mp.weixin.qq.com/s?__biz=MzkyOTg3ODc5OA==&mid=2247484902&idx=2&sn=86d9a7f8175196b65bf773a6ab16a9f7": "三星路由器WLAN-AP-WEA453e-未授权RCE等多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDUzMzY1MA==&mid=2247499733&idx=1&sn=2472721727e61daa33f0e6f8794a88c2": "Bottle 框架漏洞攻防实录:从原型链污染到 Flag 获取的完整渗透路径", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491184&idx=1&sn=141b3a7d5aa9cc292c8d18ac7f9fce26": "UNACMS PHP对象注入漏洞(CVE-2025-32101)", "https://mp.weixin.qq.com/s?__biz=MzkzMTY0MDgzNg==&mid=2247484373&idx=1&sn=85275117f19ddcaaeba06cafafdb51df": "MCP漏洞靶场:DVMCP", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494164&idx=1&sn=71adbe1ea5788317977213a100591066": "Spring漏洞扫描工具,springboot未授权扫描∕敏感信息扫描以及进行spring相关漏洞的扫描与验证", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247486216&idx=1&sn=b7358387e35533628c41cabd76af52e7": "【PHP代审】星河留言板存在前台任意文件上传RCE", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610318&idx=3&sn=456674d66829e07f2021bf66d3954dd1": "AI自动化代码审计RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489236&idx=1&sn=73c45ed6d310b9ed2d96e523f3429148": "分享某EDUSRC漏洞挖掘复盘", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499862&idx=1&sn=24ec3a3030f845e4a0a76fc15db41692": "漏洞赏金实战案例分享", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491174&idx=1&sn=48adfa4bb1323e554e262adcdbb55cf1": "CentreStack 反序列化漏洞 (CVE-2025-30406)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493634&idx=1&sn=bb752006e1cdf2ae9b89d547e5487b2a": "搭载AiCloud功能的华硕(ASUS)路由器存在身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492208&idx=1&sn=144092717bb4f42f4184c50743418c1a": "漏洞预警 西部数据 NAS ftp_download.php 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652115330&idx=1&sn=7b6c1320e8d3c6a3a2719da61a23839a": "新的Windows NTLM漏洞被利用进行攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487193&idx=1&sn=aa9c52590c523df026ecadf553f2760b": "Kubernetes CVE-2025-1974 RCE", "https://mp.weixin.qq.com/s?__biz=MzU1NzkwMzUzNg==&mid=2247484486&idx=1&sn=b703890fc5173946b326edd3474a6515": "云对象存储桶写漏洞?模型和数据被投毒、机器沦陷?- AI & 云安全", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484465&idx=1&sn=af78c13de124b66e98fb89b64318144a": "MRCMS(蘑菇建站)跨站脚本漏洞及解决方法(CNVD-2025-05252、CVE-2025-2195)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492919&idx=1&sn=ae262e31be8df4bec3a1959d904c4c44": "漏洞预警 | 神州讯盟芯管家SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNDU5NQ==&mid=2247486224&idx=1&sn=16c2d8234d4b1e73a86d148c172863a4": "【工具分享】ruoyi-Vue-tools-若依Vue漏洞检测工具v4更新", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247486487&idx=1&sn=efbdfc0003e11d709b71dd059c007830": "必备安全工具:推荐一款高效的漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649172609&idx=1&sn=00c15fa3090200ff05c33b60c870efcc": "WinRAR安全漏洞可绕过Windows安全警告 执行恶意软件", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492919&idx=2&sn=1b11e06df8b555668fdc6e5fbea25eb2": "漏洞预警 | 汉塔科技上网行为管理系统命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492919&idx=3&sn=c23d52e3637d24cc5465f0caf33215aa": "漏洞预警 | 用友NC SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486351&idx=1&sn=ee57024144cf2d8ffc6b9fa2e1e803b7": "记一次某大学附属医院漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247484793&idx=1&sn=682b1258b4bfec6f09ee26ed6c5dce98": "DC-1,一台和蔼可亲的靶机。Drupal7,msfcve-2018-7600漏洞利用,隧道建立,SUID提权", "https://mp.weixin.qq.com/s?__biz=Mzk0MTYyNTg3Mg==&mid=2247492776&idx=1&sn=fe141bb901c29d2601599011a526fd9b": "【星闻周报】TP-Link存在严重漏洞,Wi-Fi 凭据面临泄露风险", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260921&idx=1&sn=f9794ff09d0d33cec52606f8b5d586f8": "价值$10,000的PS5内核漏洞!TheFlow再曝索尼系统级缺陷", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251722&idx=1&sn=e88ddfedef90469c15468e4d0a1f96e7": "苹果紧急修复两个“极其复杂”的高危零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1MTE1MjU5Nw==&mid=2247485568&idx=1&sn=8bebed75d5bd1c90ba947f7e628c4385": "WinRAR安全漏洞可绕过Windows安全警告 执行恶意软件", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647690686&idx=1&sn=e8cc8948185a751e5579b489f0ff6e5f": "0036. 我是如何发现一个关键的商店 XSS 漏洞并获得 2,000 美元赏金的——我的挣扎、失败和突破", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520170&idx=1&sn=26f49870544ab1e8f49d6b691538c471": "Wordpress wpdm-premium-packages SQL注入漏洞(CVE-2025-24659)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498083&idx=2&sn=88ce3a7141c996b718e6a760aa593948": "严重 PyTorch 漏洞 CVE-2025-32434 允许远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484933&idx=2&sn=5ee03ca2d1bc1535af946a1ae3629445": "CVE-2025-22457:基于堆栈的远程缓冲区溢出的POC验证脚本", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490249&idx=5&sn=af55886821f067cabe1a01c3e297c462": "记一次某大学附属医院漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582062&idx=3&sn=9272f215924def481a6cc32cf376b140": "安全动态回顾|国家计算机病毒应急处理中心监测发现13款违规移动应用 SonicWall SMA设备存在被积极利用的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDYwMDcyNQ==&mid=2247488979&idx=1&sn=7b9ef6708bf8304dbd64754ff01c14b1": "【漏洞速递】PyTorch模型加载远程代码执行漏洞(CVE-2025-32434)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247489981&idx=1&sn=426a855d81aa7cfdb5d1ac327fbf91c6": "【漏洞预警】PyTorch反序列化远程代码执行漏洞CVE-2025-32434", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069203&idx=2&sn=0a7182f2292919ed49c24fa4779a0b99": "【安全圈】Speedify VPN macOS 漏洞使攻击者能够提升权限", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491203&idx=1&sn=ba2d464072b9e0ed491dae33db0e82e9": "亿华考勤软件 default.aspx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzU5MDMxOA==&mid=2247484356&idx=1&sn=fcae12de7fb60dab9b460c5c42003f8c": "UNA CMS <= 14.0.0(PHP反序列化)命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519070&idx=1&sn=7b36b062917307786a1e64eb81cce87e": "AI自动化代码审计RCE", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491193&idx=1&sn=9560f00aec07906845d2615da9a6855c": "速达软件 多款产品 doSavePrintTpl.action Struts2 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490372&idx=1&sn=9da4423987d87edc2a4f1029419583cb": "【风险通告】PyTorch存在远程代码执行漏洞(CVE-2025-32434)", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520194&idx=1&sn=844636698ed6fa17c2e0bc1f6b086ab8": "Java代码审计之命令执行漏洞详解", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247554571&idx=1&sn=241ebd6994985d4e7d2b6cc19e449ec1": "MIPS栈溢出漏洞实战解析:从DVRF题目看ROP链构造", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503342&idx=1&sn=2e5b04fa739192fac3232716a4ffedda": "安全热点周报:零日漏洞瞄准 iPhone,苹果紧急发布安全补丁", "https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483926&idx=1&sn=e08a8201fa29f7036f0c0217d786c06f": "RAG 受到攻击:LLM 漏洞如何影响真实系统", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495936&idx=1&sn=c82669cf189a7a6a99efa97d8573b7ca": "CNVD漏洞周报2025年第15期", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497471&idx=1&sn=ce0c9ed5daafd29a32f7734381152894": "api漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNjczNzEyMw==&mid=2247484447&idx=1&sn=a00607755678bcf14602f16e7a7abb2f": "【CNVD漏洞挖掘实战训练营】从零到一,拿到属于自己的第一本证书!", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497174&idx=1&sn=72219cdd8b133dbb846d7aa33a131efb": "Spring漏洞扫描工具,springboot未授权扫描∕敏感信息扫描以及进行spring相关漏洞的扫描与验证", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522801&idx=2&sn=92cd7620a74a8d5e609a3bd300ef2a66": "PyTorch 中存在严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491045&idx=1&sn=246a2616f69041145ab7a8b9553ee2bc": "用 AI 自动化渗透测试,PentAGI 打造全新AI安全测试 助力快速发现漏洞与安全隐患|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651135573&idx=1&sn=cbfe68f51f047095f3b9456a5b3ea276": "APP上线安全预警 | 全方位发现应用风险漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495936&idx=2&sn=742898e5475cc58e1b6af719b0bb7fd5": "上周关注度较高的产品安全漏洞(20250414-20250420)", "https://mp.weixin.qq.com/s?__biz=MzUzODYyMDIzNw==&mid=2247518153&idx=2&sn=7f2d17c2f2f0ac67abb161eacb96f64a": "白宫平面图等敏感信息泄露,特朗普政府又一次曝出安全漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592750&idx=2&sn=5ea70dcc58448329bb73d7e44a961078": "华硕AiCloud功能现重大安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484827&idx=1&sn=cfa6c9aaf7aeee7d425cb3b1e72fc5ff": "SpEL 漏洞渗透测试实战:全网最全姿势集合!", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489582&idx=1&sn=5100f47a84033f9064c87d1242592599": "【JAVA代码审计】启航电商ERP2.0漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247638864&idx=2&sn=246010281645170f07ca31e62da3fcbb": "华硕确认AiCloud路由器存在严重漏洞;敦促用户更新固件", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522801&idx=1&sn=be29e21bdd328bab3ee1bbc42562d47e": "华硕:启用AiCloud 的路由器中存在严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485755&idx=1&sn=2b30a7ad1e030fa8c5ff90c415ca61ab": "Vite 任意文件读取漏洞(CVE-2025-30208)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492927&idx=3&sn=57762fb656e4ec55d1541976447ec7ec": "漏洞预警 | 家装ERP管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529226&idx=2&sn=42e09ac65e77b4b22b4a56ac686bfe3e": "Cellebrite Android 零日漏洞 PoC 发布:CVE-2024-53104", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492927&idx=2&sn=3bc814bb89316b5b52f732f5bd2b1f2b": "漏洞预警 | 红帆HFOffice SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494174&idx=1&sn=3a6153eff636034ea528dedd9d8ea7e9": "若依Vue漏洞检测工具更新!V5", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247506096&idx=1&sn=20053963cba0b2b608e4295bb3b754bc": "自动化JS提取与漏洞检测工具 - JSSS-Find", "https://mp.weixin.qq.com/s?__biz=MzU0NDk4MTM0OA==&mid=2247488270&idx=1&sn=515f0a150504459682f9311f5da63168": "科拓全智能停车收费系统(漏洞复现)", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794910&idx=1&sn=04c6128848795aabdac6e12bdba9e074": "Kimsuky APT组织利用 BlueKeep RDP 漏洞对韩国日本发起攻击", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486854&idx=1&sn=1ad8fc3dfdd5d35aef31d0976581b613": "猎洞时刻漏洞挖掘SRC培训第三期塞满干货来袭!", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247511647&idx=1&sn=333f8a029ce85430ff253fdd247bc2f4": "内推 | 漏洞挖掘工程师(iot 方向)", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526096&idx=1&sn=6183f6f580f397f972c4c3dcc14e6c21": "实战|小程序渗透记录 通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486639&idx=1&sn=111732182f523fe12fe65114add3b799": "真的就是RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489254&idx=1&sn=c0c6eedb35c5ce6e2e4716c3f1aa5077": "记一次Druid Monitor漏洞日常渗透", "https://mp.weixin.qq.com/s?__biz=MzA4NzU1Mjk4Mw==&mid=2247492617&idx=1&sn=dc983c01cb50a1f55e988583b0a4f4f7": "Sirius!功能强大的通用漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=MzkxODQzOTYxMQ==&mid=2247483837&idx=1&sn=54a414fda1e893f34de457434359a822": "常见弱口令漏洞的发现与防护(文内送常见字典)", "https://mp.weixin.qq.com/s?__biz=Mzk1Nzg3ODkyNg==&mid=2247484089&idx=1&sn=91bf484f64dfe227798b58b0042e6e2a": "广西金中软件集团有限公司智慧医养服务平台Uploads存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNDU5NQ==&mid=2247486237&idx=1&sn=0e1aa25d806955e6639f0568f18d751d": "【工具分享】Sirius一个强大的通用漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247487950&idx=1&sn=44e2ed673b375dba4e66f99c40711125": "Github中项目的公开漏洞合集", "https://mp.weixin.qq.com/s?__biz=Mzk1NzIyODg2OQ==&mid=2247484424&idx=1&sn=5b6e22be222abbd66136f95c6ca740d9": "faraday好用的开源漏洞管理平台", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484475&idx=1&sn=b08f4ea56144c26950e5291e62aab543": "WP Shuffle plugin SQL注入漏洞及解决办法(CNVD-2025-06478、CVE-2025-28873)", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610374&idx=3&sn=e520da004250b45ee2d8c250f17708ce": "某单位软件供应商黑盒下的0day挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwODE4ODUzMg==&mid=2247486718&idx=1&sn=8214cfe4bd6ff6c2c810843524901a23": "近期部分漏洞预警通报(2025年4月)部分已复现", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490190&idx=1&sn=ea88ac42c28bef19dae65dbcd16b5e94": "【SRC】某选课小程序任意用户登录漏洞深度剖析", "https://mp.weixin.qq.com/s?__biz=MzU3OTYxNDY1NA==&mid=2247485431&idx=1&sn=dfb9402f8c66dce14a159fae3f395703": "Src捡钱5,为什么大佬总能挖到你挖不到的漏洞(CORS)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492927&idx=1&sn=80bb2082eec2876ce2c182a8e5bacccb": "漏洞预警 | 安科瑞环保用电监管云平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497134&idx=2&sn=ce6994a395155e641cd7737259a7ed34": "PHP反序列化漏洞:一场代码炼金术引发的黑客狂欢", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492215&idx=1&sn=afb9e89adc9c13a77c942c21da8d4320": "漏洞预警 锐X eweb ipam.php 文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1Nzg3ODkyNg==&mid=2247484084&idx=1&sn=f39318a4620c5967906bb9aecedd7bf9": "科拓全智能停车收费系统的T_SellFrom.aspx接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487195&idx=1&sn=d36cf642f87b34cbbf95ccf9b56b4aee": "代码审计|SpringKill如何用CodeAuditAssistant挖掘0day教程公布", "https://mp.weixin.qq.com/s?__biz=Mzg4MzA4NTM0OA==&mid=2247493747&idx=1&sn=74c15d327a5f704be441ad3ddc5fc6d4": "披露 DOGE 系统网络安全漏洞和数据泄露,以及对举报人∕证人的恐吓(老毛子?)", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484941&idx=2&sn=be33180668dd869e5eb06feabf0cca36": "prismx:【漏洞扫描器】棱镜开源版", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498122&idx=2&sn=1e9f5daff6b17c238ab90761004cbe03": "CVE-2025-33028:WinZip 再次爆出漏洞通过 MotW 绕过导致用户遭受静默代码执行,目前无补丁", "https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247491038&idx=1&sn=f58f0cbda56371ce83b6b010f29d5cc2": "CVE-2017-3066 深入利用获取命令回显", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489592&idx=1&sn=c2a7895c7be76ad71e98d307995b8f02": "kangle 虚拟面板存在前台XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzUxNTQxMzUxMw==&mid=2247525446&idx=1&sn=3efe3d2b1a08e481658ed165edfdc75a": "安全通告丨网络安全漏洞通告(2025年4月)", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485311&idx=1&sn=779f797318caa0189271e570299adf51": "从代码看Java反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529226&idx=1&sn=04fdb9e880273a88fbebbfdc6be75822": "Cellebrite 零日漏洞攻击塞尔维亚学生活动人士的手机", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY2ODE1NA==&mid=2247485364&idx=1&sn=fdf5e76aff6bc14cd18391d503ac998e": "Windows高危提权漏洞CVE-2025-21204曝光,千万用户需立即修复​​", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522819&idx=2&sn=183839121efb6572f3febfbb1d939f28": "仅有不到一半的可利用漏洞被企业修复,GenAI 漏洞更低", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497475&idx=1&sn=09ed4e87146efd1fd0d05e18d836e479": "Web漏洞挖掘指南 -SSRF服务器端请求伪造", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491213&idx=1&sn=28cb5bc107b3d94a73135dee17a20266": "用友U8 CRM eventsetlist.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522819&idx=1&sn=005966b8a5fb21a2ac90627b6b0075bc": "8天,这个被微软认为“低可利用性”的漏洞即遭利用", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484357&idx=1&sn=57e85783d6b59a3f614a987effb9b745": "Erlang∕OTP SSH 远程代码执行漏洞(CVE-2025-32433)POC及一键部署环境", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507749&idx=1&sn=359c5df2d9430f788eb658213afc05ff": "漏洞通告 | 泛微E-cology前台远程代码执行漏洞(NVDB-CNVDB-2025530957)", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247491269&idx=1&sn=00145cb95476525233d79a2fcb910109": "内存中的幽灵:Linux系统最致命安全漏洞揭秘", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484016&idx=1&sn=6d559734049b892419fba6dcef1e8265": "【漏洞预警】Open WebUI 0.5.16 SSRF漏洞(CVE-2025-29446)", "https://mp.weixin.qq.com/s?__biz=MzkzNzU5MDMxOA==&mid=2247484383&idx=1&sn=5bd16bddd1b8f341448539552fbf9315": "实战分享|Autorize如何让我躺赚接口越权漏洞赏金", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592862&idx=4&sn=1d8b719cda2e840ec89e076c573aae3a": "更新3节:漏洞分析与利用 | 系统0day安全-IOT设备漏洞挖掘(第6期)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069221&idx=3&sn=f624fa8b0ad6844d5bd3d85b2f32c897": "【安全圈】Storm-0558 漏洞后,微软通过 Azure 机密虚拟机确保 MSA 签名安全", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499875&idx=1&sn=3ccc7eddec0e833a3d6c56c51e00f41a": "20 万 POC,直接拿来用,这不是测试,这是拒绝服务!!!", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490000&idx=3&sn=b439e61d98d017db32a9938676568913": "【漏洞预警】OpenCMS任意文件读取漏洞 (CVE-2025-28099)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODU4MjIyNQ==&mid=2247484100&idx=1&sn=88d7e28b9f9f18bc90ee811dc3b25953": "猎洞时刻漏洞挖掘SRC培训第三期塞满干货来袭!", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490000&idx=2&sn=238c5455a252cddab892084b452a2941": "【漏洞预警】Open-WebUI SSRF漏洞 (CVE-2025-29446)", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486245&idx=1&sn=1e8f23b3af67b8e46b21b67136b1d0ef": "Shiro反序列化漏洞综合利用 - ShiroAttack2_Pro", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490322&idx=5&sn=0ae4dd719f79135f775d4fb0c6e0bf32": "Erlang∕OTP SSH 远程代码执行漏洞(CVE-2025-32433)POC及一键部署环境", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462772&idx=1&sn=51cae796b73765425a9c62cb8b32d2ea": "信息安全漏洞周报(2025年第16期)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490322&idx=4&sn=3d3c191874947492b8c2d8113da8bcc2": "20 万 POC,直接拿来用,这不是测试,这是拒绝服务!!!", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490322&idx=6&sn=5f20f5303a8223603444ecc041736eeb": "【漏洞预警】Open WebUI 0.5.16 SSRF漏洞(CVE-2025-29446)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488376&idx=1&sn=1ed56ec22fcf08d960c53303d2d90a62": "泛微移动管理平台E-mobile error接口存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490000&idx=1&sn=731dfc3cf4323232c1323d80cef4a9a1": "【漏洞预警】H3C GR-3000AX代码执行漏洞(CVE-2025-3854)", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQ0MTI2MQ==&mid=2247484846&idx=1&sn=04057d9546256867fbc826a2946cac3d": "小白黑客成长日记:漏洞批发商与罪证算法", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485760&idx=1&sn=f6aedb3b596b0c71adba83ee7d104ac6": "Next.js 中间件鉴权绕过漏洞 (CVE-2025-29927)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492944&idx=2&sn=28891b004d01e2b272286b498ea3b27c": "漏洞预警 | 百易云资产管理运营系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492944&idx=3&sn=5696bc27882be89d2667e520dec9a38c": "漏洞预警 | 汉王e脸通智慧园区管理平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484700&idx=1&sn=a4d12b121ff1208729878bf7662f4c19": "【漏洞复现】锐捷EWEB 路由器多个漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489294&idx=1&sn=63831ba736dd9c79bfae6b7e1340f83c": "针对Nacos漏洞猎杀的各种骚姿势", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503376&idx=1&sn=af71b83f1e0b1cb7bfc91a17bd900c37": "雷神众测漏洞周报2025.4.14-2025.4.20", "https://mp.weixin.qq.com/s?__biz=MzIwMDE5NDg1MA==&mid=2247494324&idx=1&sn=816579242ea18d532fb6173753126952": "讯飞SRC | 重生礼包已到账→ 端午漏洞退散作战启动!", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487750&idx=1&sn=a66836ce9156b8dc5829b66bfe129ef7": "朝鲜黑客组织Kimsuky利用BlueKeep漏洞入侵日韩关键系统,网络间谍活动再升级", "https://mp.weixin.qq.com/s?__biz=Mzk0OTU2ODQ4Mw==&mid=2247487147&idx=1&sn=1724d79131dcf952c79473f31143bbbb": "WordPress插件认证绕过与权限提升漏洞实例分析", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492944&idx=1&sn=9951cc229da02842aacfc0c71b661ffc": "漏洞预警 | UniTalk信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247485230&idx=1&sn=6ec77122dd221daf3390779d00f47dcf": "CVE-2025-21204:Windows更新堆栈权限提升漏洞 附POC及漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610384&idx=4&sn=c9d000fce53e1bb066d7f723433754c8": "AscensionPath一个基于Docker容器化技术的漏洞环境管理系统", "https://mp.weixin.qq.com/s?__biz=MzU0NDk4MTM0OA==&mid=2247488277&idx=1&sn=386c895dfa64222ca50d1c12bce6b4b1": "某通信设备有限公司(漏洞复现)", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490308&idx=1&sn=13924ed91f3727a95211de43d38dfa67": "【PHP代码审计】ZZCMS 2019多个漏洞(附POC)", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247534862&idx=1&sn=ef1658a7f7aa92d25ca76cb76826007d": "【漏洞预警】:紧急!H3C GR-3000AX代码执行漏洞或成内网渗透跳板", "https://mp.weixin.qq.com/s?__biz=Mzg3OTcxMjE2NQ==&mid=2247487311&idx=1&sn=37dd243f936e08dd69d3580bd629da0b": "【漏洞实战研磨】实战 我是如何突破层层限制利用ssrf的", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484419&idx=1&sn=82f9fac62edfafaeb2ce2c61ab7a7794": "【漏洞预警】泛微E-cology前台远程代码执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MDQyMzg3NQ==&mid=2247484807&idx=1&sn=7faa2948e748f6e7186d812d6a7fd7e7": "提示词宝库!NucleiPrompts 助你轻松玩转 Nuclei AI智能漏洞扫描", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493645&idx=3&sn=0a5867f5db7be577766c582626b5155a": "朝鲜黑客组织Kimsuky利用BlueKeep远程桌面漏洞对韩日两国发动攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487264&idx=1&sn=fe956bcda547e80ae6db3e1e0b4f89cd": "CVE-2024-56145:Craft CMS RCE", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582095&idx=2&sn=4fda6a44b68c7b6d9de0aa5841ad3a86": "华硕路由器 AiCloud 发现严重漏洞,官方紧急发布多系列固件补丁", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526102&idx=1&sn=a69f82e7afb477bef35d6c174380838d": "某开源cms 0day挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ5MTM1MA==&mid=2247492916&idx=1&sn=e7ccabe59fdefd807e2bb7d63b7f0738": "《独家揭秘:1000万漏洞赏金白帽,SRC漏洞挖掘通杀思路分享》", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484793&idx=3&sn=d2ca34d5e594924cb54af14da20b1dd3": "入选作品公布|安钥®「漏洞处置标准作业程序(SOP)」征文第三十二期", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136360&idx=2&sn=23e0c9d218254d5ca3376887416cd450": "绿盟科技披露2024年报,营收增长超40%,亏损收窄;漏洞研究新突破:利用ChatGPT快速创建利用代码 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247491314&idx=1&sn=72d1a4da89c99b27249f0955592bf4ad": "隐秘的后门:HTTP参数污染漏洞如何让黑客悄悄获取管理员权限", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522834&idx=1&sn=0a385b06e817fa2780f705f50351603e": "Active! mail 中的RCE 0day漏洞用于攻击位于日本的机构", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497479&idx=1&sn=563bdc63916a36d8a14b7e3836cb555e": "价值$10,000的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQyMzI4Mg==&mid=2247483926&idx=1&sn=e04a689483b4646e7447a28f24ea51b4": "HessianServlet、HessianServiceExporter场景下的Payload", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5Mzk2OQ==&mid=2247486715&idx=1&sn=6f073f8db82d0012b8dae93f8c0edfff": "【CNVD漏洞挖掘实战训练营】从零到一,拿到属于自己的第一本证书!", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489608&idx=1&sn=fcf93096d383ba9b5c4d047a10dbc126": "Funadmin v5.0.2 存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096173&idx=1&sn=f9ddb9b1c4f93375312a1b9853f079dd": "Windows 更新堆栈中存在允许代码执行和权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319257&idx=1&sn=a603c646a53e3a242a2e79faf4f06239": "ChatGPT在公开漏洞利用代码发布前成功生成CVE有效攻击程序", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260929&idx=1&sn=2f8d14dd48df42d04bd14ad8ca9e9b22": "无需交互即可攻破?CVE-2025-24054正被利用绕过Windows身份验证\"", "https://mp.weixin.qq.com/s?__biz=Mzk0ODE5NjE3Mw==&mid=2247483766&idx=1&sn=ed607434f8b281e94ef7991a45e5fbb4": "K8s下的漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486379&idx=1&sn=4e49b9db2247a94600a98e3900c27fe7": "高危证书 | 记一次白盒审计快速拿下RCE漏洞的过程", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491222&idx=1&sn=4995059a69a53dc8ea9a20e5ba371062": "Cleo Harmony ∕Synchronization 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247554590&idx=1&sn=714c46d7c252a19494e5e55f843efe4c": "内存利用:迟来的blindless与逃不掉的exit漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247498846&idx=1&sn=a7f9302b4fd8fe61a5d53c14216c2a36": "CVE-2025-32433 - Erlang∕OTP SSH 中的严重 RCE(CVSS 10)", "https://mp.weixin.qq.com/s?__biz=MzUxODY3MDExMA==&mid=2247490223&idx=1&sn=7d830cd9e8ad3d47f744c6cb698638fd": "[从漏洞挖掘到隐私保卫战!虎符网络安全专家受邀揭秘AI时代安全新攻防]", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529289&idx=1&sn=2e92df89416952c0384fcff23c506a2a": "通过代理实现代码执行——DLL劫持的另一种方式", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486268&idx=1&sn=a24c7995a782a7f9ec68ff929ba2cda8": "XSS与SSRF漏洞联合攻击实验平台 - XSS_SSRF_Attack_Prevention", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484869&idx=1&sn=88c819aa551068b45e14ae20ae239e21": "DNS 一响,漏洞登场!FastJSON 不出网探测全攻略", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485741&idx=1&sn=e79dc8ef31fe1e88b840fdaaa5b963ec": "【翻译】Greenshift WordPress 插件中的任意文件上传漏洞影响 5 万个 WordPress 网站", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484793&idx=2&sn=12a0be10af54c10992c1b3db8b51a4f8": "【漏洞处置SOP】Apache Tomcat远程代码执行漏洞(CVE-2025-24813)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490005&idx=1&sn=3ead08dd9266c53f8fc48809e47b97be": "【漏洞预警】Vmware Spring Security设计缺陷漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDYyOTI1NQ==&mid=2247486809&idx=1&sn=1bd56a972284e9d4dfe357ecdf5ffb9e": "护网行动2024漏洞复盘:这些\"0day漏洞\"为何让企业一夜崩盘?", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519072&idx=1&sn=1a09d970a13668bfe21ae2d9ced66a00": "汉堡白吃?某连锁餐饮 App 竟藏\"0元购\"漏洞!", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488387&idx=1&sn=5f90da110ba5388622ca9b920af79b50": "Cleo Synchronization接口任意文件读取漏洞CVE-2024-50623 附POC", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538573&idx=1&sn=feace6e44af6ca3cabc1d03c46ba84f3": "2025年渗透测试现状报告:关键漏洞不能全靠“随缘”修复", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484793&idx=1&sn=1eed92a39c1b08668eea4450bd56dd45": "安钥®「漏洞防治标准作业程序(SOP)」征文启示 [2025年第16期,总第34期]", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489464&idx=1&sn=5b834d4563f456b706abed80743f4d2a": "渗透测试 | 实战swagger框架漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900455&idx=1&sn=a3b49dbea3c4ce839f336c799c1f5a90": "Windows CVE-2025-24054 漏洞解析:下载即泄 NTLM 哈希,Pass-the-Hash 风险剧增!", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247491940&idx=2&sn=5cf0593750b1ef5a99de9cd8209d9c5e": "自动化JS提取与漏洞检测工具 - JSSS-Find", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247545290&idx=3&sn=6da520f2cadb61a3cbf711ee95d259a0": "2025年渗透测试现状报告:关键漏洞不能全靠“随缘”修复", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484890&idx=1&sn=4eb7e458e5a6efb8b2f78710f8eba955": "渗透测试实战:FastJSON漏洞如何在黑盒场景中精准触发?", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484714&idx=1&sn=19e40a91e637794253c8691d7ffe40c6": "【安全研究】若依4.8.0版本计划任务RCE研究", "https://mp.weixin.qq.com/s?__biz=MzU5ODMzMzc5MQ==&mid=2247486444&idx=1&sn=4bb86e8a3248bba7a468c274d39b46b6": "HFS2.3远程代码执行(CVE-2024-23692 )漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492958&idx=1&sn=0aab85fd08ee207691068d1a999179ea": "漏洞预警 | WordPress Plugin Google for WooCommerce信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492958&idx=3&sn=b2b3087ceba0660a09e289d77bfeef11": "漏洞预警 | 用友NC SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484491&idx=1&sn=885a28707090ba25779a7e4e8c2d60e5": "PHPGurukul Men Salon Management System最新SQL注入漏洞及解决方法", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486357&idx=1&sn=473220fda564f66f63fe3de529e18120": "渗透技巧 | 小白都能会的通用漏洞挖掘技巧", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494186&idx=1&sn=cab477ce8e2b5ad7882c62550f393a66": "可防护0day的智能语义分析防护系统", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499514&idx=3&sn=baac142c545258ae85b3b3b5a07543d6&subscene=0": ".NET 高级代码审计:一种尚未公开绕过 GZip 实现反序列化漏洞的方法", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491231&idx=1&sn=6978b52a136b9d3dc214e99e9646ea6f": "EnGenius usbinteract.cgi 未授权远程命令执行", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610400&idx=4&sn=a09e7d5d5efa700bba4ac8657096b5a0": "Spring漏洞扫描工具,springboot未授权扫描∕敏感信息扫描以及进行spring相关漏洞的扫描与验证", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655276501&idx=7&sn=f590cf3c52d8e6681493ef9f94479f15": "网络安全漏洞态势报告", "https://mp.weixin.qq.com/s?__biz=MzkxODQzOTYxMQ==&mid=2247483850&idx=1&sn=8816fe025700ac2e7c89e91a33a2b7f1": "分享常见的逻辑漏洞挖掘方法(第一部分)", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247485254&idx=1&sn=86fb7226b3b0d1404c9d6dc8dda9ce4d": "可防护0day的智能语义分析防护系统·雷池", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538597&idx=1&sn=ba99158c449c3a565ed63ad403a16da8": "别怪技术不够硬,网络钓鱼拿捏的就是“人性漏洞”", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498191&idx=1&sn=a966c701ce6061ee4f88628695cecb21": "攻击 FastCGI 库:CVE-2025-23016", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498191&idx=2&sn=2f66a3e1f99ea98fae60308efd1dc327": "GitLab 发布安全更新以修复 XSS 和帐户接管漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMDMwNDgwNQ==&mid=2247485823&idx=1&sn=8712bd94384a346119b1be32969df1ab": "Pega Infinity - 绕过身份验证[CVE-2021-27651]", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247920&idx=1&sn=2d4f707cf4d7ef2371731d19101c8e70": "大模型10大网络安全威胁及防范策略 | ChatGPT在公开漏洞利用代码发布前成功生成CVE有效攻击程序", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485313&idx=1&sn=198a3be4357c854dcf4b7a72f6cba9db": "SpEL 表达式注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492958&idx=2&sn=059525cd50a7ab896fa1b74ddaf666e2": "漏洞预警 | 红帆HFOffice SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486062&idx=1&sn=90cdb6b5758ea4edd8dd9cc04d99605b": "微软警示:俄罗斯“沙虫”APT组织借Edge漏洞全球出击", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492222&idx=1&sn=271d0575939c30715dc6a988a89f4f15": "漏洞预警 Netxxxx 日志审计 hostdelay.php 命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319330&idx=4&sn=a2d4ea6741ac9184d5f80cde52f1e9a9": "浏览器加密钱包高危漏洞可致资金遭窃", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096180&idx=2&sn=58874b98f135ceb4184155f4d744dac1": "Synology 网络文件系统漏洞允许读取任何文件", "https://mp.weixin.qq.com/s?__biz=MzkwODE4ODUzMg==&mid=2247486758&idx=1&sn=e5640c78786589edb76374c1e8b2336c": "【代码审计】Emlog存在SQL注入+XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486269&idx=1&sn=be0f4d08f2234fdb76c1956104204e03": "文件泄露、目录泄露漏洞利用工具 - forBy", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490377&idx=1&sn=766ad18b8cbcd36d7a499c41be61887a": "【AI风险通告】NVIDIA NeMo存在多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501013&idx=3&sn=df64e88c62f84227073367a311ab4baf": "【漏洞通告】PyTorch 远程命令执行漏洞(CVE-2025-32434)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319330&idx=3&sn=5ca24153ee938c4148febeb8b4a00bc7": "钓鱼检测机制已失效:为何大多数攻击都像零日漏洞般难以防范", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498243&idx=1&sn=a4d0e5d4e78e0240d96e3c7b2a12c766": "PoC | Commvault 远程代码执行 CVE-2025-34028(9.0)", "https://mp.weixin.qq.com/s?__biz=MzkwNjM5NTkwOA==&mid=2247483905&idx=1&sn=6d69f97abb24d53c884b8c673912c9fb": "从 CVE-2024-0012 到 CVE-2024-9474:Palo Alto 的分析与思考", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458592922&idx=3&sn=c560042d42fba4980bc8dd4a995a051d": "无认证也能入侵?Commvault 现严重漏洞,黑客可借此远程 “掌控” 系统", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk3NjczNQ==&mid=2247485908&idx=1&sn=d4644e4a34651a7f35768ba3ea0f761e": "如何应对攻防演练过程中的逻辑漏洞?", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522841&idx=1&sn=b39cd7520c5b0c63d3c0e807374feeb2": "华硕修复严重的AMI 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247491003&idx=1&sn=c20dd4edf49ed87a46722ce97bc3dec0": "创宇安全智脑 | 时空智友企业流程化管控系统 indexService.notice SQL注入等88个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529299&idx=2&sn=49f7a34017d1d3b85d327b0c68ac08b9": "Rust 中的等待线程劫持。特别感谢 @hasherezade 为了出色的 PoC", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492792&idx=1&sn=5cb94a67c2deab77d9fd1d0db1d0bfe3": "【原创0day】金蝶天燕应用服务器IIOP反序列化远程代码执行漏洞(NVDB-CITIVD-2025865374)", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247572478&idx=1&sn=6929bba0e13fd04ee6dba3ed944e84b0": "漏洞扫描原理和工具", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247484926&idx=1&sn=d6ae57fae602f4315ef2409421719baf": "FastJSON + MQ 实现反序列化漏洞攻击链", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490011&idx=1&sn=4020ceb268c2880dc7c75ab6a9fc25d9": "【漏洞预警】DataEase H2 JDBC远程代码执行漏洞CVE-2025-32966", "https://mp.weixin.qq.com/s?__biz=MzkyMjM0ODAwNg==&mid=2247488506&idx=1&sn=b48b84248cf27ef0eff54422a417e831": "利用 Windows 更新堆栈获取系统访问权限(CVE-2025-21204)附exploit", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490380&idx=2&sn=446486a4658f2a6bd6e87f68737311de": "利用 Windows 更新堆栈获取系统访问权限(CVE-2025-21204)附exploit", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488398&idx=1&sn=7a2c57161e0d2eab963ddada274c4b85": "EnGenius路由器usbinteract.cgi接口存在远程命令漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492974&idx=1&sn=af7da704aa7e9e6e01021f44ceda5524": "漏洞预警 | 信呼OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NDc3NDQ3NA==&mid=2247485081&idx=1&sn=0e1c4533cce261d0dfa49d570e148ed3": "nginxWebui后台任意文件读取漏洞&rce分析-0day&nday", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499531&idx=1&sn=bb741abbff893460d68ff6d3793bad05": "一种利用路径变形绕过权限校验的思路:那些容易被忽视的 .NET 漏洞触发点", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794950&idx=1&sn=6642725c8bcebf170a680f15843e31eb": "Lazarus APT 利用1day漏洞攻击韩国目标", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247485297&idx=1&sn=78d3717fe173bfec11dc4b6902f64845": "CVE-2025-31324 - SAP NetWeaver Visual Composer 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492974&idx=3&sn=33643ead4537eaec9350bad94b4d8fb4": "漏洞预警 | 金盘移动图书馆系统信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486691&idx=1&sn=b7f1947265bcbb4a26c21df66e6100d2": "一个漏洞仓库免费送~", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247485263&idx=2&sn=a075105a69658ee8e406e8b8dc90c0e1": "Redis 漏洞导致服务器遭受拒绝服务攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491135&idx=1&sn=51bcc6a04528afc85db9bee9f064d61c": "AI基础设施安全评估系统|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247485263&idx=1&sn=027919b5c15cc15963221333bb5101d5": "GitLab安全通告 | 修复了XSS 和帐户接管漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247492034&idx=1&sn=c9b965192ea74eb78b3d26380dc60afc": "《存量线上系统安全漏洞管理:从渗透测试到全面收敛》|总第286周", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492974&idx=2&sn=400a40dcd37c5e3a5127c17e35a1307c": "漏洞预警 | Netgear信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492055&idx=1&sn=47ac22e92828d180d7d2891bf4b74a2d": "“脚本小子”-之恶意poc投毒事件", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610410&idx=4&sn=67cc1669623d91c3c67a5fd4a020b105": "Sirius!功能强大的通用漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486063&idx=1&sn=20d68eb6ad60eb7dd5f75e77b90e8099": "警惕!APT组织利用ESET软件漏洞悄然植入恶意软件", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484021&idx=1&sn=38955c1dd2082fff24c7bb3fd7f3a384": "【在野利用】SAP NetWeaver MetadataUploader 文件上传漏洞(CVE-2025-31324)", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490338&idx=1&sn=ab182f520cdb8b37ce1bc45e400d55bc": "攻防实战绕过disable_function命令执行", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526117&idx=1&sn=9bc4ae39186a5946b2be586c51ebc951": "AI自动化代码审计RCE", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247498905&idx=1&sn=24c71b2dfde953a0f3cb43c744bfb43c": "Fortinet FortiSwitch 任意密码重置 CVE-2024-48887", "https://mp.weixin.qq.com/s?__biz=MzkxNDQ5MTQ2Mg==&mid=2247483988&idx=1&sn=60b276108d91599743cf5638eb6006bf": "CVE-2025-0282:Ivanti缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519080&idx=1&sn=f3d7a6c97ae9d25231d5f46e930edd76": "揭秘千万漏洞赏金密码!跟着漏洞挖掘大神解锁 SRC 变现新赛道", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc2MDQyMg==&mid=2247486529&idx=1&sn=1267e92ffa94a2e0550b77a7354abc02": "【漏洞预警】泛微 E-cology 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MDI1MjUxMg==&mid=2247533392&idx=1&sn=8c49c9cf3e1cbea844d0fd2e2a548ec5": "IoT智能设备产品「发售前」安全检验:关乎品牌声誉的漏洞之战", "https://mp.weixin.qq.com/s?__biz=MzAxNjg3MjczOA==&mid=2247486778&idx=1&sn=f6d7a0e2bb42cd607673aaf514dac588": "同步漏洞行动:“ Lazarus 高级持续性威胁组织”再次故技重施", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492229&idx=1&sn=0f01b9d6172eaca7191b991d309fb154": "漏洞预警 福建科X讯通信有限公司指挥调度 命令执行 send_fax.php", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497422&idx=1&sn=25b709157e812df543a96398adb8ee76": "【漏洞通告】金蝶天燕应用服务器IIOP反序列化远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MDQzNzY5NQ==&mid=2247493620&idx=1&sn=30e242892f367e7223a6ec32e9d4e185": "【红队】JNDIExploit 改进版", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNDU5NQ==&mid=2247486275&idx=1&sn=78ef19829aed8e60e9aebaf81ce2988d": "【工具分享】JavaSecLab综合且全面的Java漏洞平台", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497422&idx=3&sn=7015535a8d450e361c17401b7e9af8c1": "【漏洞通告】PyTorch远程命令执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491241&idx=1&sn=dd38869f9c545622339dd36ab905aece": "时空智友 企业流程化管控系统 indexService.notice SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247520332&idx=1&sn=3364d1b0ce7a6e2fbe99dbb7f796f5fe": "浅谈常见edu漏洞,逻辑漏洞,越权,接管到getshell,小白如何快速找准漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490415&idx=1&sn=e9d22f78d17e3470a660700d98aa4709": "【在野利用】SAP NetWeaver MetadataUploader 文件上传漏洞(CVE-2025-31324)", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485346&idx=1&sn=45c65a8cf45b500e29b50de741357c62": "常见EDU漏洞,附实战案例", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489643&idx=1&sn=6cc9549f8edc947cf894866e6906c388": "某GPS定位系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247493177&idx=3&sn=83925203c8af0451f4866346d5e8bb6f": "上周关注度较高的产品安全漏洞(20250414-20250420)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524300&idx=1&sn=61b24316b9f37ce64fe962488a66acd9": "【漏洞通告】Commvault 远程代码执行漏洞(CVE-2025-34028)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319505&idx=4&sn=bf97b7d596686473d85ecf14ad5cf251": "微软悬赏最高3万美元征集AI系统漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497422&idx=2&sn=4aa07a29eb9043fda3afbd8a99158478": "【漏洞通告】Redis输出缓冲区无限增长漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247572488&idx=1&sn=fb46d17acd46d619bb34786240fcaeae": "Top 10 漏洞不懂?这还不手拿把掐吗?", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522855&idx=1&sn=a1bca2956d4fbf963b9b88a083a14e0a": "2025年Q1 遭利用漏洞达159个,开源软件类排名第四", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529330&idx=3&sn=c2b1ae814f79a58ae8aa630f27df0a49": "揭秘 SuperNote Nomad 电子墨水屏平板电脑中的 0-Click RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319505&idx=1&sn=47cfe84c58cbf0a4340300245c458b96": "2025年第一季度159个CVE漏洞遭利用", "https://mp.weixin.qq.com/s?__biz=MzkxODQzOTYxMQ==&mid=2247483853&idx=1&sn=1a087ace4e3172d75778afe88364aaf9": "分享常见的逻辑漏洞挖掘方法(第一部分)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069278&idx=2&sn=1de49835dbc9a027714f7dd639995399": "【安全圈】Kubernetes 集群安全漏洞遭利用,算力资源面临严重危机", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247484760&idx=1&sn=c15ee9e8c3a22263f1d8a84d5be44167": "小程序渗透记录 通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzA5Nzc4Njg1NA==&mid=2247489237&idx=1&sn=220aba54ff373c4fbcccf474a8eacac7": "关于防范Google Chrome沙箱逃逸高危漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MzkzNzQyMDkxMQ==&mid=2247488035&idx=1&sn=274a2f64a5da0da9cbc0677e3f1b79fa": "独家揭秘:1000万漏洞赏金白帽,SRC漏洞挖掘通杀思路分享", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486363&idx=1&sn=2fba6ac5ecaf5f265ba1384fc09400a2": "漏洞预警 | 金和OA文件任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMjE2NTM5Mg==&mid=2247485561&idx=1&sn=01a2762c91f33dedccdbcfff2d38ee16": "二维码功能点SRC漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg4MDcyMDkxNQ==&mid=2247483733&idx=1&sn=c75fad5f7e73656b5342c2f3c63de6ef": "记一次接口导致的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069278&idx=4&sn=65b96c2d3c069f56a8cea6f42de7bddd": "【安全圈】微软的符号链接补丁造成了新的 Windows DoS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069278&idx=1&sn=438c2449a1c0f61060e790d949b847cc": "【安全圈】NVIDIA NeMo 框架三大高危漏洞致远程攻击与数据篡改风险剧增", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529330&idx=1&sn=5273a3d55b47ff1835c54020889f53b0": "Sunder:旨在利用 BYOVD 漏洞的 Windows rootkit", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490439&idx=2&sn=8029c1b6c6cb4fc1169abf3a53ac4447": "最新版 ThinkPHP (8.1.2) 反序列化漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwMzQyMTg5OA==&mid=2247487182&idx=1&sn=8c2b60b3566660b43f205a0b89726616": "最新版 ThinkPHP (8.1.2) 反序列化漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490439&idx=3&sn=7822e78bd1e899c30605c7c609a46f97": "【成功复现】Langflow框架远程命令执行漏洞(CVE-2025-3248)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490016&idx=1&sn=212825e78ccf912c2055b4f72bf76d21": "【漏洞预警】Redis 输出缓冲区无限增长漏洞(CVE-2025-21605)", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064123&idx=1&sn=721f25cefdfacffd7ce62f78013ecd9c": "信息安全漏洞周报【第019期】", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484859&idx=1&sn=52e57dc121dc0387b40b7290e79f2311": "【复现】金蝶天燕应用服务器IIOP远程代码执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520238&idx=1&sn=6c8b09c6d48109abd244d88e0cc4ad70": "emlog2.5.3代码审计(后台文件上传漏洞)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490427&idx=1&sn=27bc97bfd0b09206a6e4b7c06ad6409f": "SyntaxFlow:挖掘 CVE 漏洞必备神器!你还不赶紧了解?", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247528099&idx=1&sn=966bc9b67422d7cc64c8820ab10eb3fd": "SyntaxFlow:挖掘 CVE 漏洞必备神器!你还不赶紧了解?", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788499&idx=1&sn=9a053702b5755c299da17056ceb7ee75": "高达30000美元!微软大幅提升AI漏洞奖金,强化企业级AI安全防线", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096187&idx=1&sn=806c612704119ea11c83967dd85c8a78": "NVIDIA NeMo 框架存在允许攻击者执行远程代码漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490427&idx=2&sn=cc59c6319bf0c47e8b08fd7d7310cb14": "分享常见的逻辑漏洞挖掘方法(第一部分)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593074&idx=1&sn=92500ea77b51003d5cd11a932ce93e18": "基于静态分析的路由器固件二进制漏洞挖掘经验分享", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503169&idx=1&sn=6c2c3a924e8d7e9eb096f5e2703592ff": "【成功复现】Langflow框架远程命令执行漏洞(CVE-2025-3248)", "https://mp.weixin.qq.com/s?__biz=MzkzNDQ0MDcxMw==&mid=2247487722&idx=1&sn=90f89a1a6fbdb5fe671466a3c09d7d96": "分享常见的逻辑漏洞挖掘方法(第一部分)", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484369&idx=1&sn=6264d0cf790e747b8e22bcede8991457": "尽快更新Redis,最新漏洞可导致服务器遭受拒绝服务攻击(CVE-2025-21605)", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489732&idx=1&sn=698bede76a8adebf728d0d33371f0c08": "国外顶级漏洞实战工具推荐(附下载)", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610417&idx=4&sn=6972dd43d82d5f9c4167b7d74cb0b17d": "若依Vue漏洞检测工具更新!V5", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610417&idx=3&sn=bfbff1b7860e42d001a0044c92dc76f5": "某开源cms 0day挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487362&idx=1&sn=ffab6e6499a8203e377311e6ebc5c794": "LFI漏洞攻击技巧", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486771&idx=2&sn=ab22dce138ee1747f457073376df6da6": "一个漏洞仓库免费送~", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492981&idx=3&sn=39816d35194849a0b028af9fc33d2549": "漏洞预警 | 红帆HFOffice SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247486343&idx=1&sn=5d6b5ed29ee6c4cfbb7d1471d61c62b5": "【0day预警】最新版小皮面板(XPanel)组合拳前台RCE", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486856&idx=2&sn=79155121efd595cc94acdb1dff84ae1f": "猎洞时刻漏洞挖掘SRC培训第三期塞满干货来袭!", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487772&idx=1&sn=ffbb3f555dc0c92f7d4788ffe6c9eb41": "日本遭定向攻击!Ivanti ICS零日漏洞被利用部署新型恶意软件DslogdRAT", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492981&idx=1&sn=f0d6ac50be626c0e77dbfafc97dec4a9": "漏洞预警 | Redis拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485347&idx=1&sn=295383c5facaf1c481ac363d502b770e": "拿来即用SQL注入POC,亲测好用", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490449&idx=4&sn=4ad721ff8b9729a350800e29699984d9": "日本遭定向攻击!Ivanti ICS零日漏洞被利用部署新型恶意软件DslogdRAT", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490449&idx=3&sn=e4eb4147d90370d16cdcab66f0e17707": "若依系统 | SQL注入漏洞+druid框架漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MDQzNzY5NQ==&mid=2247493627&idx=1&sn=381529411d515cf131ccedcfaa7470a8": "【红队】一款全方位扫描工具,具备高效的机器探活,端口探活,协议识别,指纹识别,漏洞扫描等功能", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490449&idx=2&sn=cd26d02ff5f914b863c5a673b5e13a80": "【0day预警】最新版小皮面板(XPanel)组合拳前台RCE", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492057&idx=1&sn=90d778ada4d2af36ea7937a4d95fe312": "记一次某大学附属医院漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg3NDc3NDQ3NA==&mid=2247485089&idx=1&sn=44571c1bda12501c01348db5868565f3": "e0e1-wx 2.0版本更新以及关于POC项目和开源的一些想法", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492981&idx=2&sn=ebc9e26c5521a39359b4d6c7994cc6d8": "漏洞预警 | 泛微E-Office SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489476&idx=1&sn=f441418089f78116945e2b8916a6aa6f": "若依系统 | SQL注入漏洞+druid框架漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485765&idx=1&sn=8214658c5313ed015df1891d38335243": "Mitel 企业协作平台 npm-pwg 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247485456&idx=1&sn=4e6e93e88b117526a6f87f5d3815d9e7": "紧急预警!某高校EDU越权漏洞被盯上!我竟在后台改写了百万师生“生死簿”?!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069289&idx=1&sn=16bc1c5c2d7fb83e495c4733c49d8cab": "【安全圈】零日漏洞引发危机:黑客利用 Ivanti VPN 发动 DslogdRAT 恶意攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069289&idx=3&sn=ec5cf76b3bc93780cc966c259505f57d": "【安全圈】NVIDIA NeMo 框架三大高危漏洞致远程攻击与数据篡改风险剧增", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492324&idx=1&sn=494f00f92c293602a05ffbb5b0ae7d45": "PoC攻击暴露Linux安全工具缺陷,以色列厂商称过度依赖eBPF埋隐患", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247639022&idx=2&sn=e5a458cfa9a3dca4c3690cd7e2f241d1": "在看 | 周报:国家部委张某犯重大间谍案;微软新安全功能误判导致全球性账户锁定;华硕确认AiCloud路由器存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247491373&idx=1&sn=bddc643fa7e0e7a9925c0c6033d1a498": "隐藏在菜单外的\"秘密菜品\":我如何通过robots.txt找到管理后台并实现远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498299&idx=4&sn=7fc6a5afafb1dcc87ce8e0bd169e98c9": "SAP NetWeaver 中的关键漏洞受到主动利用的威胁", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247487464&idx=1&sn=e0b566b9dddca36bdf056ad6cd249264": "第120篇:蓝队溯源之蚁剑、sqlmap、Goby反制方法的复现与分析", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497501&idx=1&sn=c783d1b5f731639fcaf36886991d03ac": "通过svg图片所引发的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490471&idx=3&sn=4aa1ab94347fba06d79d95b2c6e25e7f": "e0e1-wx 2.0版本更新以及关于POC项目和开源的一些想法", "https://mp.weixin.qq.com/s?__biz=MzkzMTYyMDk1Nw==&mid=2247483807&idx=1&sn=afa867ab0098d7309f26e8a4e1b41d47": "Clash Verge rev存在提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491250&idx=1&sn=1589cdf95c37135b68060eeea580a1ba": "mojoPortal 路径穿越漏洞 (CVE-2025-28367)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493694&idx=1&sn=af635b142263362a3546be45499fcc08": "某初始访问代理(Initial Access Broker)正在利用SAP NetWeaver的零日漏洞进行攻击", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247490084&idx=1&sn=40aee54b80b075aedd94ffb9eeea2ea8": "分布式自动化信息收集、漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247511837&idx=1&sn=649a9d22890acc1ac0489e67547d8ac7": "浅谈常见edu漏洞,逻辑漏洞-越权-接管-getshell,小白如何快速找准漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247488619&idx=1&sn=f73dc7c836502d7d9d091067c809e3db": "【神器合集】漏洞挖掘效率翻倍!200+BurpSuite插件清单收录", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485277&idx=2&sn=bec458c6ec98af95cb42cc46ca2ec753": "宏景人力资源管理系统 searchCreatPlanList.do SQL注入漏洞(CNVD-2025-6953)", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247486384&idx=1&sn=b6fb6926d5a741f709d143d27b79eaba": "【0day预警】最新版小皮面板(XPanel)绕过随机安全入口前台RCE方法", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247545362&idx=3&sn=aa7972bdc76a510d57709e9f6aba868d": "护网行动2024漏洞复盘:这些\"0day漏洞\"为何让企业一夜崩盘?", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493694&idx=5&sn=49db93550106b05328cf156c1793c8e9": "\"同步漏洞行动\":朝鲜Lazarus APT组织针对韩国供应链发起攻击", "https://mp.weixin.qq.com/s?__biz=MzA5Nzc4Njg1NA==&mid=2247489241&idx=1&sn=1ea2b1e95eae60d541f666bf209182df": "关于防范WinRAR安全绕过漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MzkxODQzOTYxMQ==&mid=2247483866&idx=1&sn=7282798bc74793bf077cebd365095660": "分享常见的逻辑漏洞挖掘方法(第二部分)", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490385&idx=1&sn=4cfdc0b4934024bd105c72784afa70a8": "Spring Boot漏洞总结(文末加技术交流群)", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655276954&idx=1&sn=870030f19adfaab97c56128696974508": "170页 漏洞挖掘总结", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492061&idx=1&sn=64139272d079affc4eb3df7762bf31cf": "【代码审计】Emlog存在SQL注入+XSS漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489615&idx=1&sn=fb03351f755d4563e443004961f44714": "智能汽车安全-漏洞挖掘到控车攻击", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524459&idx=3&sn=231cd7445803c6bab90466a6ef29caac": "Chrome浏览器\"释放后使用\"漏洞已被黑客在野利用", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524459&idx=4&sn=bb673eca55bbe03aae54703463f04026": "黑客利用MS-SQL服务器漏洞部署Ammyy Admin以获取远程访问权限", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490024&idx=2&sn=27f7a3003f330bab03408c0b7de38e21": "【高危漏洞预警】Craft CMS generate-transform反序列化代码执行漏洞(CVE-2025-32432)", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485277&idx=1&sn=293b817116541488409589488335368d": "WordPress未授权任意文件读取_CVE-2025-2294", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486775&idx=3&sn=416f965f0a9a78a97ad6220308ccca8e": "一个漏洞仓库免费送~", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484027&idx=1&sn=d90e95c4319a9fb9c58e06a19a2c8540": "【二次更新已复现】SAP NetWeaver MetadataUploader 文件上传漏洞(CVE-2025-31324)", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524459&idx=5&sn=2fab8c693996300aaa17336b62626cb2": "DragonForce 和 Anubis 勒索软件运营商推出新的联盟模式", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247489111&idx=3&sn=e9d75ee5861c3d5214d11ed7a192e9b4": "谷歌云平台云Composer权限提升漏洞修复:ConfusedComposer", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486083&idx=1&sn=22fe8561c0b5a6e7c5de899debb5e8f1": "注意!朝鲜Kimsuky组织利用BlueKeep漏洞,疯狂攻击日韩", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491260&idx=1&sn=e755a07fdb95a8da29e4d52f916d8bc7": "CrushFtp 权限绕过漏洞 (CVE-2025-31161)", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503192&idx=1&sn=714ca6216b263e65726e7ccad9e77563": "【成功复现】CrushFTP身份认证绕过漏洞(CVE-2025-2825)", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650278191&idx=2&sn=af54521d53c958ca738da98aa135275d": "盛邦安全获评“国家信息安全漏洞库(CNNVD)一级技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486860&idx=2&sn=006ac94da842509758fcd16e3890de95": "猎洞时刻漏洞挖掘SRC培训第三期塞满干货来袭!", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247572516&idx=2&sn=2f22c93716171977e91e54a0780f0d38": "容器镜像安全:安全漏洞扫描神器Trivy", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490024&idx=1&sn=59886c95df43ebe7b2c5e6d30022aaff": "【漏洞预警】Grafana权限管理不当漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490511&idx=2&sn=934a5720e528d15828201864c9501c68": "分享常见的逻辑漏洞挖掘方法(第二部分)", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485392&idx=1&sn=57ef28cc29e3c27486dddbf4b56b3426": "智能汽车漏洞挖掘案例分享", "https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247498989&idx=1&sn=0ef9ce3aa929cc157dc2393e6f8b4dbb": "【文章转载】DragonForce与Anubis再掀风暴:勒索软件“加盟制”全面升级,你的数据还安全吗?", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529349&idx=3&sn=0fced79c14158455ee6b98e3d298eaf6": "BleedingTooth:Linux 蓝牙零点击远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522866&idx=2&sn=5e8614c50bbde8621342a1caffc25b99": "SAP修复已遭利用的0day漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650622118&idx=2&sn=378b487b61b6624a14b17a64b494189d": "CVSS10分!Erlang∕OTP SSH远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247554620&idx=2&sn=48b116a5316e756bade77cd6318bffbd": "【免费领】超400页!Android系统漏洞实战权威指南", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNDU5NQ==&mid=2247486292&idx=1&sn=f953fc8eddfc54310b07d7203a934fef": "【工具分享】SMS_Bomb_Fuzzer漏洞挖掘之短信轰炸辅助绕过插件", "https://mp.weixin.qq.com/s?__biz=MzA3NTIyNzgwNA==&mid=2650260114&idx=1&sn=f6ffb848bca1aeeaeef38f1444723053": "SAP NetWeaver中存在严重漏洞,面临主动利用威胁", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319591&idx=3&sn=bb25fe344d136765f4842ec2635d92b2": "同步漏洞行动:朝鲜Lazarus APT组织针对韩国供应链发起攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522866&idx=1&sn=f8c7ca3a1ba46ce90b3df18909d4b5b4": "Craft CMS RCE利用链用于窃取数据", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484033&idx=1&sn=1b001fdce45c26dae3323b272cf87fb6": "【已复现】Craft CMS generate-transform 反序列化代码执行漏洞(CVE-2025-32432)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069303&idx=4&sn=2be93ee795a859778f6b32285101b8fc": "【安全圈】CVE-2025-3248:Langflow 开源平台严重远程代码执行漏洞威胁 AI 工作流安全", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490523&idx=1&sn=b842c67635f0e5ef41bb3169cc1d5320": "【成功复现】CrushFTP身份认证绕过漏洞(CVE-2025-2825)", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649172696&idx=1&sn=7c590e6c2eac84fac168019dea52ae62": "预警丨防范WinRAR安全绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514261&idx=2&sn=f0875aa740f8b02e3cafb8f0d80e80d3": "工信部:关于防范WinRAR安全绕过漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489658&idx=1&sn=93ac859afef58e956ec55b5a9e03e722": "whisper多商户客服系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247493334&idx=1&sn=7b4e431ce2d3cd74d6067f9a2c5ca5fa": "记一次漏洞复现威胁情报导致的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzNDE0Mzk0NA==&mid=2649595577&idx=1&sn=4be078f0d7364e26e7949c38af820abe": "今天省 1 千漏洞修复费,明天赔 10 万应急款:漏洞沉默成本到底如何算?", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491165&idx=1&sn=0b2ef143b18654783c497a621e4b9f71": "如何利用隐藏功能点发现SQL注入漏洞和注入绕过技巧|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490523&idx=2&sn=415db99a23021d22f8d14d21b31123bc": "今天省 1 千漏洞修复费,明天赔 10 万应急款:漏洞沉默成本到底如何算?", "https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247485060&idx=1&sn=bd3e6ce98f737ab0af86429d7da47278": "Steam 客户端漏洞 &&从csgo角度看待网络安全", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506286&idx=1&sn=70e7a1dd625b3fe2e74b6f59e582870b": "每周网安资讯 (4.22-4.27)|Johnson Controls ICU漏洞预警", "https://mp.weixin.qq.com/s?__biz=Mzg5MjkwODc4MA==&mid=2247486045&idx=1&sn=192941403d7761e2376a9abd54ec6e6f": "2025 年第一季度漏洞利用趋势", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486824&idx=1&sn=1cbafa923a71d33f36de9418d1eeabbe": "浅谈常见edu漏洞,逻辑漏洞、越权、接管、小白如何快速找准漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MDI0NTM2Nw==&mid=2247490591&idx=1&sn=f71356f00e6f6c1da15d31b33fdb715a": "Wazuh监视恶意命令执行", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794968&idx=1&sn=cabaaf154b40170f33f81fd86b639fcc": "DslogdRAT 恶意软件利用 Ivanti ICS 0day漏洞(CVE-2025-0282)攻击日本", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492988&idx=3&sn=21e89154c01f3abb41a02ec5e3d317a7": "漏洞预警 | 金蝶云星空反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506274&idx=1&sn=3ffab272664a528951d8ef6f75cfbeb0": "我如何从已删除的文件中赚取 64 美元 — 一个漏洞赏金故事", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794968&idx=3&sn=308b265cd03edb079a32683a1945d76f": "Planet Technology 工业交换机漏洞可导致设备被接管", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247485274&idx=1&sn=2eb953e29d8005942bd0777eb0596efa": "CVE-2025-43859:Python h11 HTTP 库中的请求走私漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489681&idx=1&sn=4d5880e4037c6120c0eda0af0933b71b": "浅谈常见edu漏洞,逻辑漏洞、越权、接管、getshell,小白如何快速找准漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492988&idx=4&sn=6a70705789bddc11aa1782907cf8cd98": "漏洞环境 | AscensionPath", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247545403&idx=3&sn=feadcaf7742a22330b676d1c9e307aea": "别怪技术不够硬,网络钓鱼拿捏的就是“人性漏洞”", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492988&idx=1&sn=a5738e65a40b5569ed8346029928619a": "漏洞预警 | PyTorch远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485287&idx=2&sn=56cd0ef3de3e2432f7221ca9a22230a2": "核弹级漏洞预警|NUUO监控设备远程沦陷实录(CVE-2025-1338)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492988&idx=2&sn=7234221adadbaab801431495a0911d35": "漏洞预警 | 泛微E-Cology SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484505&idx=1&sn=cf094b4a2ce3feacebb23599aca0d1a5": "StudentServlet-JSP跨站脚本漏洞及解决办法(CNVD-2025-06945、CVE-2025-3036)", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485287&idx=1&sn=63d5a97d15463a1ed0e183a00c8fda38": "Apache Calcite惊现高危漏洞!数据库连接竟成黑客后门?", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491269&idx=1&sn=1270ce233c8220513fadb1a3c69b928c": "时空智友 企业信息管理系统 updater.getStudioFile 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDcyODIzNg==&mid=2247485018&idx=1&sn=8ba2cafe78cf870bfa17f2f821016416": "地理数据的背叛:坐标风暴漏洞讲解", "https://mp.weixin.qq.com/s?__biz=MzIyOTUzODY5Ng==&mid=2247504434&idx=1&sn=0403e4ddf5488d49eec5fb5c51f65548": "攻防演练大考将至,企业如何防范人员安全漏洞?", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492244&idx=1&sn=69fcc88e6c320fb6dc9c59df7eca18b0": "漏洞预警 西部数据 NAS remoteBackups.php 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247935&idx=1&sn=70e053b983cc95611aca67f21cb28eca": "工信部:关于防范WinRAR安全绕过漏洞的风险提示 | 干翻KnowBe4!网安黑马掀起安全培训的AI革命", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495954&idx=1&sn=e478e61075e5eb45188c2a96d63c2c48": "CNVD漏洞周报2025年第16期", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522882&idx=2&sn=dae814c7878a36e517a81042fa236d76": "Ruby 服务器中存在 Rack::Static 漏洞,可导致数据遭泄露", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491278&idx=1&sn=4c7432ffaaf024132c1e31350888201d": "深澜计费管理系统 down-load 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247489095&idx=1&sn=5909aa6be7c2a8b081ec2dc27c706f9a": "记一次某大学附属医院漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyNzc0MzcwMA==&mid=2247484099&idx=1&sn=cfae9707ca8e7526b6c9681f2c5b59de": "面对零日漏洞:如何提高应对能力?", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490402&idx=1&sn=13d411f7fac2b7ae96ecebef4e6b0885": "2024全球高危漏洞预警报告(含POC)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495954&idx=2&sn=275c31884318b2e37e10c7ff773792ca": "上周关注度较高的产品安全漏洞(20250421-20250427)", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247499898&idx=1&sn=c2635faac9b58a5aaa99bb9310c17c6d": "印度阿三安全研究员,欺骗漏洞赏金全过程!", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582167&idx=2&sn=9118e919e74cfe65375cf71142b941b8": "安全动态回顾|“银狐”木马病毒再度来袭 关键Commvault RCE漏洞允许远程攻击者执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247506887&idx=1&sn=d5c4d3be5a2afc1603311d2ad3903fb6": "立即保护好Clash Verge rev! 远程命令执行漏洞公开!", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489747&idx=1&sn=006aa2fbd41bbc31b587cb5d58f022e5": "无法避免的漏洞!认栽?", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498368&idx=2&sn=08e4286762e01e054a6da2bd6b1a0a92": "Craft CMS CVE-2025-32432 exp发布", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503384&idx=1&sn=63cc47226cc79b1cdc81588158ec468b": "雷神众测漏洞周报2025.4.21-2025.4.27", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503347&idx=1&sn=3e8a4766a143c1ac8b60d02ae3610cc2": "安全热点周报:黑客精心设计 Craft CMS 漏洞链,用于零日攻击窃取数据", "https://mp.weixin.qq.com/s?__biz=MzkwNDI0MjkzOA==&mid=2247486038&idx=1&sn=1999461c4d4202a5f08954f84632b0c7": "成为CNNVD漏洞库支撑单位,申请全流程解读,专业团队助您高效通过", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319641&idx=4&sn=9cf8c370c44170ea73c3ec07720ea631": "虚假安全补丁攻击WooCommerce管理员以劫持网站", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524408&idx=2&sn=f78633e4f9b498dcf6eaa57dce9398bb": "【漏洞通告】Craft CMS 远程代码执行漏洞(CVE-2025-32432)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529391&idx=4&sn=12a5422e65182402e873f1d6152292f5": "安全专家提供的 APT38 窃取 0day 漏洞的策略 PoC", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247486223&idx=1&sn=7f6e6fcfaa74e32348aa21471b7c2fd0": "福建科立讯指挥调度管理平台send_fax远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MzA4NTM0OA==&mid=2247493751&idx=1&sn=7620b7b8ed733e049225a65ebd7e3286": "mybb 0day? bf复活?", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524408&idx=1&sn=d6c29a2295cba12b60be9edf535a4b09": "【漏洞通告】SAP NetWeaver 远程代码执行漏洞(CVE-2025-31324)", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247554627&idx=1&sn=3052215a08035935eb1fb8fda08baa31": "无法避免的漏洞,别轻易认栽", "https://mp.weixin.qq.com/s?__biz=Mzg2ODY3NDYxNA==&mid=2247486036&idx=1&sn=bfcb31206d049f5d266f3f676d33a4cd": "限时开放注册-Ai网络安全智能助手 - 漏洞检索、攻防技巧、CVE知识库、代码审计、应急响应 、聊天机器人、安全基础知识等", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490034&idx=1&sn=0a33514a576e3f84a20c7d7ca7daffea": "【高危漏洞预警】基于browser-use的AI Agent应用pickle反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485399&idx=1&sn=838097fded634b952db553b20e918eca": "SSTI 模板注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488409&idx=1&sn=37f4e49b2d10bc4495aaafb5a040b0b7": "XWiki SolrSearch接口存在远程命令执行漏洞CVE-2025-24893 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492763&idx=1&sn=625232d93ac8504b86a7342d408389e2": "Kimsuky 利用 BlueKeep RDP 漏洞入侵韩国和日本系统", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096196&idx=2&sn=1e8d21cd19321f47aedc061df955dce5": "Microsoft 的符号链接补丁创建了新的 Windows DoS 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136458&idx=1&sn=8edda4cb9be93dda140e8cd097cba008": "《2025年提升全民数字素养与技能工作要点》印发,提出营造安全有序数字环境;PoC攻击暴露Linux安全工具核心设计缺陷 |牛览", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490034&idx=2&sn=bb526b3f64729cd3852c66a5747123df": "【漏洞预警】SAP NetWeaver Visual Composer远程代码执行漏洞CVE-2025-31324", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247623928&idx=1&sn=a282f1a835ce7005bdbcc252bd8af2b6": "人工智能自动化模糊测试:如何自主发现汽车软件中的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491200&idx=1&sn=0f6918e34add23928d4cdb7c91127bbd": "告别手动测试!AutoFuzz极速挖掘漏洞BurpSuite插件|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkyNzQxMjQ4Ng==&mid=2247484246&idx=1&sn=290f318476877c50a65c60230f497ee1": "CrushFTP身份认证绕过漏洞(CVE-2025-2825)", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247486405&idx=1&sn=921e30bbc4876f7fef8c66c887e5b41b": "【吾好梦中测站】一次资金盘渗透的源码爬取与0day挖掘实录", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492999&idx=1&sn=9fc9cad4e0eb844bf9f5b4c36da0083c": "漏洞预警 | 昂捷CRM SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk3NTQwMDY1NA==&mid=2247485157&idx=1&sn=65599d4007c0db1a60a54ca2689c1fbe": "工具篇 | 超绝!漏洞盒子一键自动提交脚本,效率飞升秘籍", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489682&idx=1&sn=735e081a2ed55cc54fbb3798d57ae3c3": "针对Spring-Boot漏洞框架的渗透测试", "https://mp.weixin.qq.com/s?__biz=Mzg4NTczMTMyMQ==&mid=2247486227&idx=1&sn=55099f47115fdab70db0ba6e7ba685b9": "CVE-2025-32432(RCE)漏洞被大规模利用,未修复系统可能已遭数据窃取", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485296&idx=2&sn=2d5fcf6719a8a39955fcbfa59aec80f6": "【漏洞复现】Erlang∕OTP SSH远程代码执行漏洞(CVE-2025-32433)环境搭建与POC使用指南", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492999&idx=2&sn=1bf3cb1368c1af55a53dd64fa1eee1f0": "漏洞预警 | NetMizer日志管理系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610449&idx=3&sn=469dc9e1efd0e45b858c92f3730338f4": "浅谈常见edu漏洞,逻辑漏洞,越权,接管到getshell,小白如何快速找准漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260955&idx=1&sn=8df80063ef375c070447ab01a1d1f1c9": "【白帽狩猎日记】一个支付逻辑漏洞,怒赚 $9000 赏金", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491288&idx=1&sn=275b7354dd19725de555f774656952cf": "万户 ezOFFICE selectCommentField.jsp sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615972&idx=1&sn=b479bd671e0e5d76a57af77c75d360b9": "漏洞赏金故事 | 通过已删除的文件赚到 6.4 万$", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487789&idx=1&sn=77aa7afe44d4976e6bdc8705dd411d63": "CVE-2025-32432(RCE)漏洞被大规模利用,未修复系统可能已遭数据窃取", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247492999&idx=3&sn=2ef39580c664372beeefdbf36fcb99ce": "漏洞预警 | 红帆HFOffice SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251777&idx=1&sn=68da761200a8322bd91dc18cc1298bd3": "第一季度159个CVE遭到野外利用,近三成漏洞24小时内被武器化", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493721&idx=1&sn=61208c3a6f1dd07f08a296b7aa05150a": "PoC级Rootkit\"Curing\"突破传统Linux检测机制", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498393&idx=1&sn=c1d865fb4b31e041129afdbc81a38eab": "【PoC】0-Click NTLM 身份验证绕过 Microsoft Telnet 服务器 0day,无补丁", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247520452&idx=1&sn=fac017415e0dc7815a4170b0b6b0eeec": "实战攻防之Nacos漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514274&idx=2&sn=00d8fd9045b8d0ad42afa868edbd33e9": "现代漏洞管理厂商ProjectDiscovery斩获RSAC 2025创新沙盒冠军", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538650&idx=1&sn=7dbd3d3ecaf24c6caccadeb964a1cc64": "最新报告:2024 年网络攻击总量达 3110 亿次,AI API 漏洞成“罪魁祸首”", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498393&idx=2&sn=60397211c87106c7f1e0618e95f8c89a": "BreachForums 显示关于关闭的消息,引用 MyBB 0day 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487400&idx=1&sn=857d68271aceb42921819cb35ec99321": "OttoKit WordPress 插件管理员创建漏洞 CVE-2025-3102", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493721&idx=4&sn=534c3042ecda8f4418c0c8e67cc51c18": "大规模钓鱼攻击瞄准WordPress WooCommerce用户", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247498926&idx=1&sn=245c22236290b9a85ae9ef307e62e465": "CVE-2025-26244 DeimosC2 XSS", "https://mp.weixin.qq.com/s?__biz=Mzg3NDk1MDczOQ==&mid=2247485056&idx=1&sn=5813347be79276600151056ae69fbbbb": "Clash Verge 提取漏洞分析与复现", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490573&idx=2&sn=96a32ecd7173ec089c11b18803bd9fa3": "CVE-2025-32432(RCE)漏洞被大规模利用,未修复系统可能已遭数据窃取", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507755&idx=1&sn=80f46c6c023de56c5d31193cb4e64819": "漏洞通告 | SAP NetWeaver Visual Composer Development Server 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484045&idx=1&sn=e2506204946c5d086b793d05d830bed7": "【已复现】 Commvault SSRF 致代码执行漏洞(CVE-2025-34028)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593244&idx=3&sn=927f267fd5d97e0375b099c5fc39e370": "速升级!Apache Tomcat高危漏洞可致DoS和规则绕过", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk3NjczNQ==&mid=2247485934&idx=2&sn=b5313919518f3648a67191db69d0916f": "漏洞预警|工信部发布关于防范WinRAR安全绕过漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484388&idx=1&sn=26ea776faff7a337ab0c8c94dd458623": "Craft CMS命令执行漏洞POC(CVE-2025-32432)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319699&idx=1&sn=127e9ca1a8d55931beae293a68e3b706": "微软Telnet服务器曝0点击NTLM认证绕过漏洞,PoC已发暂无补丁", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319699&idx=3&sn=7b71152fb35d7895dfea93f15fad09ed": "Apache Tomcat安全更新:修复拒绝服务与重写规则绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522902&idx=2&sn=7fcf319ff464d0f4275a2de94fe854f8": "Planet Technology 工业网络产品中存在多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247501683&idx=1&sn=e439870f953f8529041e66b611840b66": "【CTFer成长之路】SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247496377&idx=1&sn=ddf359203c50bc1f0e7254dad4e79ed5": "【论文速读】| MOS:通过混合专家调优大语言模型实现有效的智能合约漏洞检测", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247499287&idx=2&sn=826c08c902c5030a2b15d76ccb901940": "Linux 内核高危漏洞致系统面临权限提升攻击", "https://mp.weixin.qq.com/s?__biz=MjM5OTc5MjM4Nw==&mid=2457388789&idx=1&sn=76b923c6a7c1f3ab569dc36e76a679b1": "Expect技巧大揭秘:轻松应对脚本中的交互挑战", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529406&idx=3&sn=e26688d22d3d923b7e8329b421c52f64": "CVE-2025-23016:严重的 FastCGI 堆溢出威胁嵌入式设备,PoC 发布", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319699&idx=2&sn=41dc6fe173fda324d053dab436917a9c": "深度剖析 CVE-2025-21756:Linux 内核漏洞触发 Root 提权全流程", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490039&idx=1&sn=e099a4d15d3ebfbf2733573086fd9207": "【漏洞预警】Apache Tomcat 逻辑缺陷漏洞CVE-2025-31651", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529406&idx=2&sn=b03a5942c7c90f70ad49eff3936e922b": "CVE-2025-21756:Linux 内核漏洞如何导致完全 root 权限利用,PoC 发布", "https://mp.weixin.qq.com/s?__biz=MzAwOTczODMxMw==&mid=2651017547&idx=1&sn=a28bcc3c148fe384736137ed48f8c061": "代码里的黄金周,单个漏洞至高奖励3万元!", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490600&idx=2&sn=5f7a34ea48b2d067dffedc763d84e076": "【已复现】 Commvault SSRF 致代码执行漏洞(CVE-2025-34028)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490600&idx=3&sn=68f509cd14844364d6c00e49823c87f9": "Craft CMS命令执行漏洞POC(CVE-2025-32432)", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487401&idx=1&sn=00f2815a0fb59f54f7fab8c249a11d6c": "GLPI 中的预身份验证 SQL 注入到 RCE(CVE-2025-24799∕CVE-2025-24801)", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486375&idx=1&sn=47fe33f6229583275d6ec2dcb753df83": "2024年在野零日漏洞利用分析(上)", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247498932&idx=1&sn=7a060168271d068dd0d9f08511c31d62": "CVE-2025-0411 7-Zip Mark-of-the-Web 绕过", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247545529&idx=2&sn=243c90b00c86349e62d148c81a4c0d95": "微软Telnet服务器曝0点击NTLM认证绕过漏洞,PoC已发暂无补丁", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493015&idx=1&sn=2f83a1123b656d0f9978e81901a63ea1": "漏洞预警 | 维达外贸客户关系管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247499290&idx=1&sn=37b33780bf1ecd484fc16b58f6e778ea": "每周回顾:关键SAP漏洞、AI驱动的网络钓鱼、重大漏洞、新CVE等", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247490156&idx=1&sn=2a0bb274b22bd4f90c60495e3e419b95": "具有资产测绘、子域名枚举、信息泄露检测、漏洞扫描、目录扫描、子域名接管、爬虫、页面监控功能的工具", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649794994&idx=2&sn=13c838688cc26b49be52bdc3b63d884a": "AirPlay 零点击 RCE 漏洞可通过 Wi-Fi 实现远程设备接管", "https://mp.weixin.qq.com/s?__biz=MzU4NDMyODE0NQ==&mid=2247483857&idx=1&sn=6fa6ddf8ab9535be7a20ce8febe93212": "AI 自主调用 BurpSuite 完成漏洞自动化检测", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493015&idx=3&sn=49635bd0cfdd0a3cc9d73e0f566c9a1e": "漏洞预警 | IBOS企业协同管理软件SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610468&idx=1&sn=5c04e7dc15b0749c45e0a6036f723e12": "尽快升级:苹果 AirPlay 漏洞被披露,数百万 iPhone ∕ Mac 等设备安全告急;|既能轻松赚钱,又能享受特殊服务;", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493015&idx=2&sn=34cfea0215cb67f87b794eed31f08ffc": "漏洞预警 | 锐捷EWEB任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522916&idx=1&sn=bd784cba5a2043dfacb33dcf271ed806": "谷歌2024年检测到75个已遭利用0day,44%针对企业安全产品", "https://mp.weixin.qq.com/s?__biz=MzU4OTk0NDMzOA==&mid=2247490070&idx=1&sn=37104beb3e4ef4ccc8acc7c27ca539b5": "某厂商路由器摄像头设备漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493731&idx=2&sn=302b84af285a43c35c8a10c7661a8cb9": "VeriSource数据泄露事件影响400万人", "https://mp.weixin.qq.com/s?__biz=MzkzMzcxNTQyNw==&mid=2247487587&idx=1&sn=165ab7f26fc5ae6b7a7288b39082916b": "【26届实习】安恒实习生招聘,安全运营、培训、服务别错过!二进制漏洞面试题挑战!", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486405&idx=1&sn=b2fdb02b8e1f37bf30eb9596246eee8f": "从Nacos derby RCE学习derby数据库的利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTc2MDE3OA==&mid=2247486597&idx=1&sn=6b0f59a290b6cc24ebe18861ccedc01b": "DeFiVulnLabs靶场全系列详解(三十二)基于闪电贷的价格操纵漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247486542&idx=1&sn=d01daa072b41790df7bb414a85fddca9": "Apache Tomcat发布安全更新,修复两个关键安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247615999&idx=1&sn=cf97bc6d114d072d181391ccef6a50fc": "React Router曝高危漏洞,可导致内容伪造与数据篡改", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522916&idx=2&sn=1292db15893e34108514b0dc4437e9f7": "苹果 “AirBorne” 漏洞可导致零点击 AirPlay RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247945&idx=1&sn=34238c2eca2f5579301a08d4e7fc3084": "深度剖析 CVE-2025-21756:Linux 内核漏洞触发 Root 提权全流程 | 微软Telnet服务器存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NTU3NTY0Nw==&mid=2247489812&idx=1&sn=03167afe5939ad6b67d0afd78fe9ac52": "【技术揭秘】用Bitpixie漏洞破解BitLocker加密!完整流程+深度解读", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247503118&idx=1&sn=741ec90f6857c688ba35215ffe163ad7": "AI本地部署的天坑?RAG曝出重大安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489731&idx=1&sn=c3a5ef01648fad496ecda36b653b6e21": "浅谈src漏洞挖掘中容易出洞的几种姿势", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492086&idx=1&sn=ca804a2b0eefcf97eacc10df5aa0a5bb": "一次漏洞挖掘过程中的SQL注入浅浅绕过记录", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492252&idx=1&sn=535bf293bd992ff4040807da0b0ae040": "漏洞预警 锐X eweb dhcp.php 文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582213&idx=2&sn=f318884bd75b11598eb5ae5992d11c75": "Cookie-Bite攻击PoC使用Chrome扩展窃取会话令牌", "https://mp.weixin.qq.com/s?__biz=MzU3ODc2NTg1OA==&mid=2247492476&idx=1&sn=2a0b1e2b91da8cf4d8c34345955288c3": "CVE-2025-0282复现", "https://mp.weixin.qq.com/s?__biz=MzkzMTYyMDk1Nw==&mid=2247483814&idx=1&sn=e807e75cb4abb8666341054a7f0af412": "【情报】SAP NetWeaver存在RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498540&idx=3&sn=3fd704bd50150f564c954f29b995cd45": "苹果的“AirBorne”漏洞可能导致零点击 AirPlay RCE 攻击", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487802&idx=1&sn=d0c698c69d06501007b2d16fbec67b12": "紧急!苹果AirPlay曝高危漏洞,数千万设备面临攻击风险!速看修复指南", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490629&idx=1&sn=d9b4be31992c135e6f3040544f3411e0": "浅谈src漏洞挖掘中容易出洞的几种姿势", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498540&idx=5&sn=dc579506c68a23389ad4f8b82cc58191": "谷歌威胁情报小组2024年0day漏洞利用分析报告", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc3NzM1OA==&mid=2247484980&idx=1&sn=7ec16b77794560d035a73cf5a2784ac7": "只需写个 .pyc 文件?Python 任意文件写入也能打 RCE!", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488245&idx=1&sn=73ff96bd0f5e2dab0caf9f642b70f53d": "一种非常优雅的获取 Solr 服务器 RCE 的方法", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247485305&idx=1&sn=8dcb6f803f544c6f0706573cecd168a4": "【漏洞情报】SAP NetWeaver存在RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1NzE0ODUyOA==&mid=2247492186&idx=1&sn=ae798bcc8e7a724e9fe6fe371f0e1fb8": "【复现】Chrome V8堆沙箱绕过分析", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582213&idx=1&sn=8836a6cf09badd147c8e20d0dd545e51": "新的iOS关键漏洞仅用一行代码就可禁用iphone", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493731&idx=1&sn=a80af9319eebb5e1f199c51427f74f6c": "谷歌威胁情报小组(GTIG)追踪到2024年有75个被主动利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647690699&idx=1&sn=b3a052f99fd38c5eef0a0582a2fa11ed": "37.漏洞赏金项目中的URL- 掌握 URL:2025 年版", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484816&idx=1&sn=4acb9fae17b16fd88c8ae8dfe8c2fa73": "安钥®「漏洞防治标准作业程序(SOP)」征文启示 [2025年第17期,总第35期]", "https://mp.weixin.qq.com/s?__biz=MzIxODIzNzgwMw==&mid=2654071699&idx=1&sn=b854fd8562f7c626cf98142281cbd2a4": "漏洞盒子助力 | GOGOGO!71SRC限时双倍金币活动开启!", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247491076&idx=1&sn=9a9c97cfa66c7ac05adff672547978ae": "能信安:漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651319938&idx=3&sn=f63f4cdc869cd38d47b8a177ac3ee6f6": "主流AI系统或存在越狱、代码及数据安全漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650260973&idx=1&sn=3f874d1c7dc1d8866ffa548ce2110c46": "右键点击就能窃取 NTLM 密码?- 技术分析与 PoC", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136563&idx=2&sn=a0571e3898f312e173180f22ec47d2fe": "奇安信发布2024年年报,实现营收43.49亿元,同比下降32.49% ;苹果AirPlay协议零点击远程代码执行风险曝光|牛览", "https://mp.weixin.qq.com/s?__biz=Mzg4MDcyMDkxNQ==&mid=2247483740&idx=1&sn=e7646f3df1ee36c13029c3e71f1104e1": "记一次越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462808&idx=1&sn=d5a46430dbd656b19ba0efc4eae3fd60": "信息安全漏洞周报(2025年第17期)", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247491032&idx=1&sn=5f52ed543c07f52a79d6e4ea1168e370": "创宇安全智脑 | 小皮面板 JWT 硬编码认证绕过等71个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247572572&idx=1&sn=0239c40ea95efb55cdb8bffe01622d8e": "某开源cms 0day挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069369&idx=3&sn=ad648277b98ceb64dfd2d2ca0b6a1fca": "【安全圈】CISA 就 Commvault Web 服务器漏洞发布警告,称该漏洞可能被利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069369&idx=2&sn=f7f84aa2b4e350b27918d216e6977bc6": "【安全圈】Apache Tomcat 漏洞可导致攻击者绕过规则并触发 DoS 条件", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514283&idx=1&sn=681c71445b5cfa5f0ab2fde668d4fef8": "2024年至少75个零日漏洞遭滥用,网络与安全产品占比近三成", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490642&idx=2&sn=3c63bc932766f09781474e565e50061b": "记一次越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490045&idx=1&sn=6a8ac602f3c2d561b1738f0292d82d55": "【漏洞预警】Yeswiki远程代码执行漏洞CVE-2025-46347", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489271&idx=1&sn=8d47ee4c8bb63b8265049ea0dcd8ce78": "【漏洞通告】微软Telnet Server(MS-TNAP)身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484816&idx=3&sn=b5673d90eadf3ee6f4dc1bf3c39ab44d": "入选作品公布|安钥®「漏洞处置标准作业程序(SOP)」征文第三十三期", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484816&idx=2&sn=24c18051273a89a9237d6fa7343b76c0": "【漏洞处置SOP】PHP CGI代码注入漏洞(CVE-2024-4577)", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503201&idx=1&sn=51cbcde9c3c7543236c2e0da86236628": "【成功复现】XWiki Platform系统远程代码执行漏洞(CVE-2025-24893)", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487402&idx=1&sn=22205dce2081be628b82861bc0db884e": "CVE-2025-32433 PoC 漏洞利用发布 - Erlang∕OTP 中的严重 SSH 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486087&idx=1&sn=247be08e59f1f83dd714ecf5dd76e900": "紧急!朝鲜Kimsuky组织利用BlueKeep漏洞,疯狂攻击日韩!", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492100&idx=1&sn=18b45884d06bcca22ae4c74964f66c3d": "一次从注册功能隐藏到发现的sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498562&idx=2&sn=627b2b4f0bf40d30aa0679f5febc511c": "vLLM 的 Mooncake 存在严重 RCE 漏洞(10)", "https://mp.weixin.qq.com/s?__biz=Mzk0NDcyMjU2OQ==&mid=2247484713&idx=1&sn=c4477dd9b0ca46b1ae12b8c2c19dd399": "面临困境的漏洞管理生态系统", "https://mp.weixin.qq.com/s?__biz=MzU0MDc5ODM0Mg==&mid=2247485090&idx=1&sn=9c09928204556d838f61e484cd2758c1": "从IBM《2025年X-Force威胁情报指数报告》看安全文化的必要性", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485752&idx=1&sn=d991fdc2d13d3fc422d3148704ff225a": "【情报】CVE出现罕见的10.0评分漏洞,SAP NetWeaver存在RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489679&idx=1&sn=550fcfaa03734416bba06a439cf8a9fc": "CraftCMS 存在前台命令执行漏洞 (CVE-2025-32432)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529482&idx=2&sn=662fdb70e9617d5c291c3f9e1734d2f4": "AirPlay 协议中易受蠕虫攻击的零点击远程代码执行 (RCE) 漏洞使 Apple 和 IoT 设备面临风险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069387&idx=1&sn=15d70e792b5f5150cebe5632890b1182": "【安全圈】苹果隔空播放(AirPlay)协议存在可蠕虫的远程代码执行漏洞 可批量感染大量设备", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610476&idx=2&sn=8ae8a8c200c3ebe2674ec8fff081acc7": "漏洞管理中的四大常见误区及改进方案", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247486407&idx=1&sn=2f1dd6ddef7341493176d84bd03176e3": "CraftCMS 存在前台命令执行漏洞 (CVE-2025-32432)", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516546&idx=1&sn=8be33a9d5654ec195a0db563ba03a514": "Clash Verge rev 本地提权∕远程命令执行漏洞 POC(5月1日更新)", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520278&idx=1&sn=53bc198f82af993deb51f1c332194fff": "一文详述XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064127&idx=1&sn=a38dd5d1388e4f58b34e5f8421e75d80": "信息安全漏洞周报【第020期】", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485948&idx=2&sn=505ec1bf529e57c2ff1977b76ae75eb9": "CVE-2025-32432|Craft CMS反序列化代码执行漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320016&idx=3&sn=8d7946558d40a025b6966fa85983ed39": "网络入侵新态势:凭证窃取与边界漏洞利用激增,钓鱼攻击持续衰退", "https://mp.weixin.qq.com/s?__biz=Mzg2OTU3MzI1OQ==&mid=2247486037&idx=1&sn=09e23379ab2c33e3bdbcfb446add2b30": "从代理到后门:Mihomo Party漏洞直通SYSTEM权限,你的设备已经在裸奔。", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485948&idx=1&sn=48bbbbbc068ec1576230298b3316d386": "CVE-2025-31324|SAP Netweaver代码执行漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247496608&idx=2&sn=88c4a395322118b2aa02ff05b4e6dc71": "微软Telnet服务器曝0点击NTLM认证绕过漏洞,PoC已发暂无补丁", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487810&idx=1&sn=4c895f5ba78e7deb992661ae219a043f": "突发!国家级黑客利用零日漏洞入侵Commvault Azure环境,数据安全再响警报", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320016&idx=2&sn=3bff5977c7a5db49f22446980f1fabaa": "AirBorne漏洞可导致苹果设备被完全劫持", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247496608&idx=3&sn=b3b409e4e057276508705ab28d9ffcdc": "2024年至少75个零日漏洞遭滥用,网络与安全产品占比近三成", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247549683&idx=1&sn=0483a4615004367b1833d6fbae86eb29": "记一次网上阅卷系统漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247484841&idx=1&sn=38c85e5766f3b888aee0dad6c22dd4f5": "用友U8Cloud getReportIdsByTaskId方法-多处SQL注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610481&idx=2&sn=895f476e59c57fee160996e6a3fe3058": "网络入侵新态势:凭证窃取与边界漏洞利用激增,钓鱼攻击持续衰退", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499578&idx=3&sn=79631c9b9920c6e260a7322ef6b0c559": ".NET 四种方法上传 web.config 绕过限制实现RCE", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247506192&idx=1&sn=4fdac5ff836a15b2cb3cdb9386d39196": "若依Vue漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247518825&idx=1&sn=9567d6018102baa464dfea89e4abaa0e": "BurpSuite插件 | 告别手动测试,快速挖掘漏洞!", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487404&idx=1&sn=9a13d535474e6a0c754a8928f4840021": "CVE-2025-33028:WinZip 漏洞通过 MotW 绕过导致用户遭受静默代码执行", "https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650237152&idx=1&sn=b10e2842659aaa2534416d1b9464e8b8": "聊聊对安全漏洞的一些关键认知", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490427&idx=1&sn=9d6943da82f1ddcf2e7cc04d8592e841": "五一福利 | 抽CNVD高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529516&idx=2&sn=303f93eb90c85f6e8d03e927017191ef": "入侵苹果——SQL注入远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487347&idx=1&sn=956ce92cd588cf5c8bf8cb9e6c14d9b5": "『Java代码审计零基础到高阶实战班』正式开班啦!手把手带你从零基础学习到反序列化,内存马以及框架漏洞等实战知识!!!", "https://mp.weixin.qq.com/s?__biz=MzkyNjczNzgzMA==&mid=2247484512&idx=1&sn=23682b51104b29e8288ad6f5df352494": "漏洞挖掘—隐藏资产挖掘SQL注入", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529516&idx=1&sn=eac81d1a8e4ccc214e79d33fac4035f4": "Spring Security CVE-2025-22234 引入用户名枚举向量", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320017&idx=1&sn=4080bb56066bacc31101d91f343dda07": "未修复的Windows快捷方式漏洞可导致远程代码执行,PoC已公布", "https://mp.weixin.qq.com/s?__biz=Mzg3MzkwNTE3MQ==&mid=2247484160&idx=1&sn=a1ff618973c79f180e7821d5de0f274f": "[靶场复现]CyberStrikeLab-Gear", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247554544&idx=2&sn=9056af459358f5328168849972f0deba": "ECU自适应模糊测试:用于增强漏洞检测的模块化测试平台方法", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635693&idx=4&sn=4db1e22c3972712a351689e95f6ec0dc": "AirBorne漏洞可导致苹果设备被完全劫持", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247624024&idx=1&sn=3cbf9efab24cdeec0644851e3c0d3c34": "最佳实践:通过有效的基于风险的漏洞管理加强汽车网络安全", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490757&idx=4&sn=c69172ed23d7eb8304847946e0755fe3": "[靶场复现]CyberStrikeLab-Gear", "https://mp.weixin.qq.com/s?__biz=MzkxNjQyMjcwMw==&mid=2247486984&idx=2&sn=15a6dd1268af9c974c6c4bf10c3c9f31": "第120篇:蓝队溯源之蚁剑、sqlmap、Goby反制方法的复现与分析", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497546&idx=1&sn=5e65d132cee50ec6533c214ebb178613": "$9000 赏金的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490757&idx=3&sn=eb8432565502d9be2990635c73aa02e5": "手把手教你写好一份完整的漏洞报告", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320017&idx=2&sn=0b13fa4fde81305a2a03973d8d456fc0": "一行代码即可让iPhone“变砖”:iOS高危漏洞解析", "https://mp.weixin.qq.com/s?__biz=Mzg4NjY3OTQ3NA==&mid=2247486938&idx=1&sn=788887fb79c89148224afcf4579e3496": "手把手教你写好一份完整的漏洞报告", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487414&idx=1&sn=c942ae99eeb6beee0350a45e2c2022dd": "Next.js CVE-2025–29927 hackinghub", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492768&idx=1&sn=d47f1088aa4c48d4445462cab9f0de2e": "西悉尼大学披露安全漏洞和泄露了 580 TB 数据", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520296&idx=1&sn=3ba29d58a66d78529f704be3c6d5a5ef": "SimpleHelp复现", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900492&idx=1&sn=6c2281952da1439b110f84c51a848774": "SAP NetWeaver RCE 漏洞 (CVE-2025-31324):深度剖析、高级威胁与全方位防御策略", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247503712&idx=1&sn=3aedd26d153b0fa835c0002d815b5a8e": "数字青春,榜样力量!360漏洞云五四特别直播回顾!", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635703&idx=4&sn=3d67251e1067caab5ccecc4d2f163671": "一行代码即可让iPhone“变砖”:iOS高危漏洞解析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069434&idx=2&sn=d5df9c61dfde5337bda54bd34af3c2af": "【安全圈】TensorRT-LLM高危漏洞可导致攻击者远程执行代码", "https://mp.weixin.qq.com/s?__biz=MzkyNTU4OTc3MA==&mid=2247485436&idx=1&sn=28a3a050921bca199f7b8d1e0f90a17d": "7天如何从捡破烂到成功挖出一堆0day", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247496630&idx=2&sn=25f5ebd829c7e4484aeac65832518e9e": "AirBorne漏洞可导致苹果设备被完全劫持", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499771&idx=1&sn=058e197a5164b2ff43ba6e50660596f7": "分享短信轰炸漏洞小窍门", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247499007&idx=1&sn=5c9c1acc054b4a079dffc9c45a06eb2c": "CVE - 2025 - 29927 POC Next.js 存在严重漏洞,可导致黑客绕过授权", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520322&idx=1&sn=e1eb82b0c1dcaa7bdf2d0fe4925b4701": "Java代码审计之命令执行漏洞详解", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490781&idx=2&sn=83846431249d32b3551ab831c080c3d9": "SAP NetWeaver RCE 漏洞 (CVE-2025-31324):深度剖析、高级威胁与全方位防御策略", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497293&idx=1&sn=7970fdd3e428d9e4fd731c1d472ad18a": "小程序渗透记录 通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593264&idx=1&sn=677156abb956ed47c5886b74f930f289": "zyxel路由器CVE-2024-9200漏洞调用链分析", "https://mp.weixin.qq.com/s?__biz=Mzk3NTQwMDY1NA==&mid=2247485175&idx=1&sn=c1bd499d39af1bf38c006d5dfaabd0f1": "漏洞复现篇 | CraftCMS 任意命令执行漏洞,CVE-2025-32432", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485465&idx=2&sn=3a0a86de823f1aac1ef00fd2aa44fbc6": "从代码看任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610492&idx=3&sn=deb0e040e49e9740520182d217d029c1": "实战攻防之Nacos漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485957&idx=1&sn=aa11e3064d2545df051fd19f7f5e8bd0": "CVE-2025-21756|Linux提权漏洞(PoC)", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487415&idx=1&sn=8d3b54fb135adc6712e9afc6d4e41aed": "CVE-2025-27095:JumpServer 中的令牌盗窃漏洞导致 Kubernetes 集群遭受未经授权的访问", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610492&idx=1&sn=e264678369fdc88ca86279ef8a2c86ae": "天津市破获一起“扫码领鸡蛋”个人信息贩卖案;|一行代码即可让iPhone“变砖”:iOS高危漏洞解析", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485957&idx=2&sn=3f11cfc79888e16fa78d309e708d0df0": "CVE-2025-24893|XWiki Platform远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MzI2NTMwNjYyMA==&mid=2247485024&idx=1&sn=2b2884c9a2c66272657ccf4322921247": "【极思】一个伪0day的抓捕实录", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247491559&idx=1&sn=d08ef2ccc066b196128a1a160fa60b5c": "渗透测试实战:永恒之蓝漏洞识别、扫描与Metasploit利用全流程", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247490240&idx=1&sn=3433a7611ddf3328acdef8b5e6646664": "Ingram【网络摄像头漏洞扫描工具】", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486428&idx=1&sn=dba2f9a759218bb795755ba60f6bff9e": "记某医院APP的一次逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487843&idx=1&sn=3f05cfb22255290bf33e9b9b4ccf40b9": "伊朗黑客持续渗透中东关键基础设施:VPN漏洞与恶意软件成长期后门", "https://mp.weixin.qq.com/s?__biz=MzkzNzI2Mzc0Ng==&mid=2247486575&idx=1&sn=d2d394773cde8edaf12cd2425a685ca8": "【极思】一个伪0day的抓捕实录", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247486990&idx=1&sn=3a3329b11e5d92f5947689341d6bad9f": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247501714&idx=1&sn=bba783c21689e9c6fbef317b613df486": "【CTFer成长之路】反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320090&idx=1&sn=cb1b7e4d9fbfa8c98cf0c378da407981": "vLLM框架曝高危远程代码执行漏洞,威胁AI基础设施安全", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487356&idx=1&sn=14b0eb20b4a633044ce2718398120e8f": "SRC漏洞挖掘天花板!千万赏金大神亲授秘籍——跟随顶尖大师,成就巅峰之路!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069446&idx=2&sn=b093a02905ad8999ac398713a11bd267": "【安全圈】微软Telnet服务器被曝0-Click漏洞:无密码即可控制系统", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096204&idx=2&sn=36ef86fdfae7678c600231d2565e9eb6": "Apache Parquet Java 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494224&idx=1&sn=109e61592a775b5cf5c8561d1bd316ba": "基于AWVSapi实现的漏洞扫描网站", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492770&idx=1&sn=6a6458b562a3c751fa4a82d27defd2ac": "Cisco Webex 漏洞可让黑客通过会议链接获取代码执行权限", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484981&idx=3&sn=d8be865f9f42ec55e83975f0d6d59e66": "0day:各种CMS、平台、系统和软件漏洞的EXP和POC合集", "https://mp.weixin.qq.com/s?__biz=MzkwMDMyOTA1OA==&mid=2247484474&idx=1&sn=be5f7017ffd8e72f9541a327e40cc65f": "【※】一个神一般的linux全架构全漏洞提权傻瓜程序", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484981&idx=2&sn=f5668b7d8fe3098326e01f0e4eb85390": "PenetrationTestingPOC:渗透测试相关工具合集", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490812&idx=1&sn=8520bdd56980ae4d855cc0ae66e9112e": "记某医院APP的一次逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491307&idx=1&sn=9716bbe658600defc07b7543db2a46a1": "Commvault SSRF 致代码执行漏洞 (CVE-2025-34028)", "https://mp.weixin.qq.com/s?__biz=MzkwNjY1Mzc0Nw==&mid=2247488540&idx=1&sn=2654424553a85b8901765d5e2b5d1958": "【26届实习】安恒实习生招聘,安全运营、培训、服务别错过!二进制漏洞面试题挑战!", "https://mp.weixin.qq.com/s?__biz=MzkyNjcyODI1OA==&mid=2247484620&idx=1&sn=b6b0dd7fcabe307b78ca52064c885cb1": "JAVA代审之XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493040&idx=2&sn=33b9c4b2ece56597baca567f31cf0b21": "漏洞预警 | 红帆HFOffice SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247545577&idx=2&sn=6a5981d94eadfd34a0b67cd98d4c02a3": "公共场所免费 WiFi 暗藏的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487016&idx=1&sn=1d094190ee9ad522d6f6948544481625": "记一次实战小程序漏洞测试到严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247509642&idx=1&sn=e47bb236dca5ad869d2c3144f90f109c": "新型“自带安装程序”技术突破EDR防护,勒索软件利用SentinelOne升级漏洞发动攻击", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247488043&idx=1&sn=4c6e40b4e869d6fd512bcb12106a1d80": "Vitejs漏洞复现与利用", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491316&idx=1&sn=d01849a1f4cb5884827ad85bf874a437": "CraftCMS 前台命令执行漏洞 (CVE-2025-32432)", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487016&idx=2&sn=defbecd00245fe9baacbe7fb60293a29": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493040&idx=1&sn=0ea53f3c58166c3341a2f83cfc499d7c": "漏洞预警 | NetMizer日志管理系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795004&idx=2&sn=6913095b74da29745a9298d018c002cd": "伊朗黑客利用 VPN 漏洞和恶意软件持续访问中东关键基础设施两年", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493040&idx=3&sn=9ac0075b9e849ad994d643c17f6525e6": "漏洞预警 | 汉王e脸通智慧园区管理平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485515&idx=1&sn=870130074c7b85208eaaa984c41e3cce": "多个高危漏洞挖掘实战", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247493239&idx=2&sn=72b5f2543a2f438b00bedafe9fe65711": "上周关注度较高的产品安全漏洞(20250421-20250427)", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512001&idx=1&sn=98b2fa4a434cd4697a9ca5724fb4b5ba": "AOSP OTA签名验证漏洞——如何绕过Android系统更新包的安全检查?", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650278232&idx=1&sn=324bcdc6416f113bd710b0ca0f971e46": "全场景漏洞扫描“小钢炮”RayScan V8重磅发布", "https://mp.weixin.qq.com/s?__biz=Mzk0ODY1NzEwMA==&mid=2247488623&idx=1&sn=4cb5f4fab0682a40ba11b384b02cd308": "API漏洞挖掘指北-APISandbox靶场通关.1", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493755&idx=6&sn=85aecb939d45af53faeac6a4d3e330fd": "DragonForce黑客组织宣称对Co-op网络攻击事件负责并窃取数据", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655277826&idx=1&sn=04f3f2b3f71b2d442a5d63ff0c3e7b09": "IBM X-Force 2025威胁情报指数报告", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247635713&idx=4&sn=b672bb86a0a8808ab3b047a6b5685a80": "未修复的Windows快捷方式漏洞可导致远程代码执行,PoC已公布", "https://mp.weixin.qq.com/s?__biz=MzkyNzg4NTU0NQ==&mid=2247485482&idx=1&sn=eab009bdddc94441491b0654c51bc264": "域渗透入门-令牌窃取(含复现步骤)", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247485017&idx=1&sn=3fc4ef2fc3f3dcccffdcd5b868fdc4d6": "FastJSON 安全审计简洁实用指南:黑盒免测也能揪出漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529535&idx=2&sn=e9ab35af50364b690d8f888988ca5908": "通过@fastify∕view raw 渲染实现远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487424&idx=1&sn=9f2932094a9e1f69c27ea4d0498353d7": "9万个站点面临风险:Jupiter X Core RCE 漏洞(CVE-2025-0366)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490827&idx=4&sn=42e9dc02c4b652d3a4fde7daa3bae244": "自动化漏洞检测方案-使用AI调用BurpSuite", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247489099&idx=1&sn=50e542e6718a6fdc52586b8328e81c94": "漏洞预警|畅捷CRM存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037674&idx=1&sn=3c2070eabf4535bd48c42976876830a5": "Linux内核高频攻击面与漏洞类型统计研究", "https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247530393&idx=1&sn=f3316b2b06f0372fb279fc9d1e5aad9b": "SSH服务已关,为何还被扫描出漏洞?", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491326&idx=1&sn=1a53b44366e8e8d78ae9fd475c3d7e62": "万户 ezOFFICE selectAmountField.jsp SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582234&idx=1&sn=93a0e5ec10f5fee802cea3b4a1279e89": "苹果“AirBorne”漏洞可能导致零点击 AirPlay RCE 攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5NDU3NDA3OQ==&mid=2247491189&idx=1&sn=8ab999ea264a6356d7f8850f5cb51cf2": "自动化漏洞检测方案-使用AI调用BurpSuite", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491335&idx=1&sn=41fb84356629ac2796bea7209f48d305": "龙腾码支付 curl 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069467&idx=4&sn=82381e377828001cba5f1b8b0cd0bdf1": "【安全圈】CVE-2025-21756:Linux 内核漏洞如何导致完全 root 权限利用,PoC 发布", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491344&idx=1&sn=0ed048d4c639ed8a15eb5222800fd30c": "用友NC ECFileManageServlet 反序列化RCE", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490463&idx=1&sn=aa144f78fd856645a2643cfa6811abfb": "【代码审计】某JAVA酒店管理系统多个漏洞(附源码)", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484996&idx=1&sn=a7399eb56405b375b77e4fa608da1891": "data-cve-poc:此仓库收集了在GitHub上发现的所有CVE漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506314&idx=1&sn=5a420046bf7d15da0d18e5b26275ec01": "每周网安资讯 (4.28-5.6)|DragonForce勒索团伙近期针对英国零售业发动大规模攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593294&idx=2&sn=902d175508a60f0517069a960b940b64": "微软 Telnet 服务器惊现 0Click 重大漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484996&idx=3&sn=6054fbaa4233f094dc34c3aacda32db1": "CVE-2025-21756:linux6.6.75内核自动提权", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593294&idx=3&sn=33defc4d7ed7b60cd6c6a3c15abab69f": "25年夏季班招生啦 | 系统0day安全-IOT设备漏洞挖掘(第6期)", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247484996&idx=2&sn=e8a908d1b9a41a512a57643afd827d9f": "多个公共漏洞知识库集成汇总", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247496385&idx=1&sn=136a4278dd358937e1439af867ed8e16": "【论文速读】| 通过整体神经符号方法实现自动静态漏洞检测", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247949&idx=1&sn=64818f92eb72135007f30fc07f1dd794": "关于对网络安全等级保护有关工作事项进一步说明的函原文 | 2024年至少75个零日漏洞遭滥用,网络与安全产品占比近三成", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247626698&idx=2&sn=ce3504318ade61d17659729c035307ec": "Chrome浏览器惊现高危漏洞!天擎漏洞攻击防护第一时间提供安全保障", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503216&idx=1&sn=aaf7ab33cb743966c0a67ab042249c65": "【成功复现】Next.js中间件认证绕过漏洞(CVE-2025-29927)", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485773&idx=1&sn=e57e9c5f49b3dd80fbb694ec5e14250b": "金和JC6协同管理平台 oaplusrangedownloadfile 任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503352&idx=1&sn=283ef81dee566006f482ac1dc2eaec42": "安全热点周报:邮件远程代码执行漏洞遭利用,用于攻击日本机构", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485528&idx=1&sn=be29d63f30cca17dc28989aedb0ef043": "支付漏洞实战", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096211&idx=2&sn=439ab06d63daa827f1cb7e56be548b51": "Windows 部署服务中发现新漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490830&idx=1&sn=77539c110a925cecffdceeaaf4bccf96": "基于 LNK 快捷方式获取Windows NTLM的 漏洞(无需运行,已复现!)", "https://mp.weixin.qq.com/s?__biz=Mzk0MzY3MDE5Mg==&mid=2247484222&idx=1&sn=513666d7126d02a4b8bdeb0e966ddf3c": "基于 LNK 快捷方式获取Windows NTLM的 漏洞(无需运行,已复现!)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529549&idx=1&sn=f36a6eef31d4ae6c387ae63ffaf720b6": "利用空字节写入攻击Synology DiskStation在 DS1823xs+ NAS 上以 root 身份实现代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320142&idx=4&sn=ed93c0ee495ef976ddc919bd65eef508": "可蠕虫化AirPlay漏洞:公共WiFi环境下可零点击远程控制苹果设备", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488445&idx=1&sn=e9e238c8521aec39f247c6cfbfaf041f": "Craft CMS generate-transform接口存在远程命令执行漏洞CVE-2025-32432 附POC", "https://mp.weixin.qq.com/s?__biz=MzkzNTA0NzgyMA==&mid=2247484263&idx=1&sn=0a6168400765119305f334a310f02c78": "CVE-2017-9769 RZPNK.sys漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490382&idx=1&sn=d16811990ed28de75af79d72d819dae7": "【AI风险通告】vLLM存在远程代码执行漏洞(CVE-2025-32444)", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487854&idx=1&sn=8cab3e5521e4d13010f4321675d51585": "立即更新!Google修复已被攻击者利用的Android高危漏洞(CVE-2025-27363)", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795021&idx=3&sn=879212b268b99fe37554af345c9582c3": "三星MagicINFO漏洞在PoC发布几天后被利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493052&idx=1&sn=4c8b076cc612c8c72d2dc29569bfaef6": "漏洞预警 | Unibox路由器命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247506194&idx=1&sn=9a294a51b942a7e7059b5275e64e3700": "某开源cms 0day挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493052&idx=3&sn=1a3de93e9c0b4807f82189aeb34f9f45": "漏洞预警 | SmartBI任意用户删除漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491238&idx=1&sn=172270b5a7a5a9b0072cdfa4fa8fb57a": "最新Nessus2025.5.7版本主机漏洞扫描∕探测工具Windows∕Linux下载", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247489896&idx=1&sn=5054d99b8fb8531026638de176386ed9": "漏洞挖掘 | 简单的弱口令到垂直越权思路分享", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261002&idx=1&sn=0fa057549bf78b2354de47ae7cd46b59": "价值2500 美元的漏洞:通过供应链攻击实现RCE", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487208&idx=2&sn=5030cae874430a497bb90327e0d61c7a": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247486558&idx=1&sn=0feca183969cee706e0617dcb355632c": "漏洞扫描结果差异背后的评分标准揭秘:国内外主流体系对比", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503359&idx=1&sn=3976329cdddd018ab4307524061b68c0": "Elastic Kibana 原型污染致任意代码执行漏洞(CVE-2025-25014)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2ODg3NzExNw==&mid=2247489175&idx=1&sn=91bc630d46098fc4c831a2176c8f5b49": "审计分析 | 某次.NET源码的前台漏洞审计流程", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503391&idx=1&sn=f8b5ece2bc2ee173a9f4c33b8b2e6ce6": "雷神众测漏洞周报2025.4.28-2025.5.5", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900506&idx=1&sn=b1371143cc39f7a07b516fcb5f941faa": "AirPlay 曝“AirBorne”蠕虫级 0-Click RCE 漏洞!无需交互即可入侵 iPhone∕Mac", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610510&idx=4&sn=9d3f3190409ef7ccce68548f15cfd1cb": "基于AWVSapi实现的漏洞扫描网站", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493763&idx=1&sn=f746ccce6d78fef871390aea0e278eb6": "谷歌修复了已被积极利用的Android漏洞CVE-2025-27363", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247484947&idx=1&sn=35b767bcc73cac5983a53cd1a46af8dd": "若依(RuoYi)框架漏洞战争手册", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493052&idx=2&sn=4905413e0178b6bb2f86a921bf74de38": "漏洞预警 | 用友NC SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795021&idx=1&sn=cb576d2f07bbd6a4dfb8fd8fffc03eb3": "微软 0-Click Telnet 漏洞可导致无需用户操作即可窃取凭证", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247549783&idx=1&sn=f28d088202fd236d66bb8917bac6df62": "出洞如此简单!一次轻松的小程序漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMjg0MjM5OQ==&mid=2247488046&idx=1&sn=4e3163b45b07288c088e3952bdd201ec": "被忽视的暗面:客户端应用漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491366&idx=1&sn=ed90802522084f51539954e091d9b130": "用友NC ncmsgservlet 反序列化RCE", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498692&idx=2&sn=0baa28b11a133d27696fb48799898d9a": "Apache Parquet Java 漏洞 CVE-2025-46762 使系统暴露于远程代码执行攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490851&idx=1&sn=ae092989be7c5a24727ce2506a1d2cf8": "出洞如此简单!一次轻松的小程序漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069467&idx=3&sn=24714661691469cf4a95022a439d1f5f&subscene=0": "【安全圈】iOS 出现新严重漏洞,仅需一行代码即可导致 iPhone 崩溃", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491358&idx=1&sn=25d5069956ba79f8cdaf18aa233bfebd": "用友NC jiuqisingleservlet 反序列化RCE", "https://mp.weixin.qq.com/s?__biz=MzkxMDc0MTc5Mw==&mid=2247483817&idx=1&sn=35e0f3a07599d753c57e63a9773f7363": "紧急预警!微软Telnet惊现\"零点击\"核弹级漏洞,旧系统用户速查!", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498692&idx=3&sn=69326d8c536920e7fa412720fdb23bb2": "PoC | 三星 MagicINFO 9 服务器中的漏洞 (CVE-2024-7399) 被利用", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247616061&idx=1&sn=ba07725e0de0e77761e54fe7fef1fb6b": "Apple及物联网设备面临风险 | 空中传播:AirPlay 协议中的零点击蠕虫式远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490851&idx=3&sn=b2361c95695a8d9de2a17e76a812fc28": "雷神众测漏洞周报2025.4.28-2025.5.5", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484821&idx=1&sn=e819acc8cde570ffdb0afe3ecb1f115d": "安钥®「漏洞防治标准作业程序(SOP)」征文启示 [2025年第18期,总第36期]", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247626707&idx=2&sn=014812173bfbd41a4f5993a72639e999": "Chrome浏览器高危漏洞已被黑客利用,奇安信可信浏览器为企业撑起“安全伞”", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501043&idx=2&sn=f13209a4ac885ea075fdbfedc8ce007a": "【漏洞通告】Kibana 原型污染导致任意代码执行漏洞 (CVE-2025-25014)", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484051&idx=1&sn=bd6349f85a85e09bf31c2c1ba728bee7": "【漏洞预警】Elastic Kibana 原型污染致任意代码执行漏洞(CVE-2025-25014)", "https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247489135&idx=1&sn=1b47ec95f6a9cfeb72702cc7e0e36c85": "若依(RuoYi)框架漏洞战争手册", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320263&idx=4&sn=4eaf9a69ad3ada30bd7aaca67c679eba": "Kibana原型污染漏洞可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522938&idx=1&sn=d6e3777945383ca1a0f8df487903c8e5": "严重的Langflow RCE 漏洞被用于攻击AI app 服务器", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522938&idx=2&sn=d6e089276d9d14177da8b1d1e1d32736": "谷歌修复安卓遭活跃利用的 FreeType 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069486&idx=3&sn=4f5c262b7363fc3d020faaae04c66c05": "【安全圈】未经身份验证的 DoS 漏洞导致 Windows 部署服务崩溃,目前尚无补丁", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486684&idx=1&sn=c6d841b946758cf27ae33baff3e84c79": "【漏洞预警】Kibana 原型污染导致执行任意代码漏洞(CVE-2025-25014)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490387&idx=1&sn=a2bfa25172a3a206f17fa4be6e6d22e7": "【风险通告】Elastic Kibana存在原型污染致任意代码执行漏洞(CVE-2025-25014)", "https://mp.weixin.qq.com/s?__biz=Mzg3MDcxNTkyMA==&mid=2247484572&idx=2&sn=1fce16454055968fb3e2f4aceba81a32": "CVE-2025-24071:通过 RAR∕ZIP 提取和 .library-ms 文件泄露 NTLM 哈希值", "https://mp.weixin.qq.com/s?__biz=Mzg5Mjg4Mjg0MQ==&mid=2247483858&idx=1&sn=0a09908d1d547dd0fd19309035313a63": "Apache OFBiz 路径遍历漏洞(CVE-2024-36104)", "https://mp.weixin.qq.com/s?__biz=Mzk1Nzg3ODkyNg==&mid=2247484094&idx=1&sn=500d0790fdd6f1c97cae965d152f63c9": "WordPress depicter插件SQL注入漏洞(CVE-2025-2011)", "https://mp.weixin.qq.com/s?__biz=MzkyNjcyODI1OA==&mid=2247484683&idx=1&sn=d3e64c62aee2c73abd3a1e044b69d611": "Nacos Derby RCE代码审计", "https://mp.weixin.qq.com/s?__biz=Mzg4OTU4MjQ4Mg==&mid=2247488527&idx=1&sn=17cc9468f596e8a762e8c5ba38f143d6": "星图实验室协助vLLM项目修复多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247486490&idx=1&sn=9815d6f53761ca0d636b6e2ecf4208d2": "一次某info开源系统漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497563&idx=1&sn=ceaea8297e93659498c5576678d85f50": "RCE", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486422&idx=1&sn=3811dd4823e37100c77350dcd6521da5": "一次某info开源系统漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247496394&idx=1&sn=d001c2e4d819caee3d146316286f59e5": "【论文速读】| 漏洞放大:针对基于LLM的多智能体辩论的结构化越狱攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519289&idx=1&sn=1699b806a26022b3a7f1bd3876f20717": "实战攻防之Nacos漏洞一文通", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247488057&idx=1&sn=3f3aeb579ab406fe8f47558d666d502b": "znlinux linux全架构全漏洞提权程序", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593301&idx=1&sn=28d71b01d0207906a35a3882f88828de": "使用区间分析识别智能合约中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247484949&idx=1&sn=c37eaf049f706e55ef603f83649e7e1b": "Dify 组合漏洞获取LLM KEY", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516589&idx=1&sn=82e60d5e426e05d401c4e79eec81d652": "漏洞扫描工具 -- ThinkPHPKiller(5月6日更新)", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247485311&idx=1&sn=6cf446fe3a9deb2ffcb471aaae73cecb": "CVE-2025-2905(CVSS 9.1):WSO2 API 管理器中发现严重 XXE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529605&idx=1&sn=6fa3721d92926efa358777464843d15f": "SysAid 本地预授权 RCE 链(CVE-2025-2775 及其相关漏洞)- watchTowr 实验室", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490864&idx=1&sn=0cb165bed1319669958344fa0fdcd7e8": "【漏洞预警】Kibana 原型污染导致执行任意代码漏洞(CVE-2025-25014)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490864&idx=2&sn=69f3bc42c70c19053f7e3ff730849186": "【论文速读】| 漏洞放大:针对基于LLM的多智能体辩论的结构化越狱攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484444&idx=1&sn=85b9fad1ca755cc210ad963d5e54588f": "超越漏洞修复的安全观", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247485676&idx=1&sn=9f3355d8d47eb5ad5b9ef48c1e7d5659": "OSS漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247490243&idx=1&sn=93258dfb0f3a806e3099ede6fbbd6e43": "Milkyway【具备效的机器探活,端口探活,协议识别,指纹识别,漏洞扫描等功能的全方位扫描工具】", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487228&idx=2&sn=b9686feeabeb4a384bec87e310213972": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493056&idx=2&sn=1cd36807eb2525ca7a869ed2146996c1": "漏洞预警 | 锐捷EWEB远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487228&idx=1&sn=4ea3e89bd548586c3a916e5ac42e0404": "支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484530&idx=1&sn=2d6ab693e8237d9ae98438818ba781f9": "phpIPAM跨站脚本漏洞及解决方法(CNVD-2025-06929、CVE-2024-55093)", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247492052&idx=1&sn=e219ac550df60a2a73d39aa6f6b987b5": "《跨机房漏洞扫描挑战、设备使用人管理优化及审计账号权限分配策略解析》|总第288周", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497440&idx=1&sn=31f4a4d8d75b507676f36e255eab63c3": "【漏洞通告】Kibana原型污染导致任意代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkxOTIzNDgwMQ==&mid=2247484643&idx=1&sn=106862e046fbe8b89cde1ad93413bce3": "【工具推荐】利用Burp Suite 插件进行文件上传Fuzz", "https://mp.weixin.qq.com/s?__biz=MzU0NjU5NDE4Mg==&mid=2247485602&idx=1&sn=f004f26af0ff476bc38a0ad5d35d5976": "EMQX命令执行后渗透", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487859&idx=1&sn=21830632f377e379519f4f69bf29a29b": "紧急!SysAid On-Premise曝高危漏洞,未授权攻击可接管服务器!速修复!", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795032&idx=2&sn=e9e09cc70275edb332e37d3341f2657f": "赛门铁克称,多个勒索软件组织利用了最近修补的 Windows 0day(CVE-2025-29824)", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247506211&idx=1&sn=26660b6abe5fb1714974c19b983a63f0": "AI自动化代码审计RCE", "https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247494567&idx=1&sn=052cbf0cb30bdebf35ee81f84c1b946a": "工具推荐 | MSSQL多功能集合命令执行利用工具", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493056&idx=3&sn=02acc8d19b6d3162024d3a9f48bccc1c": "漏洞预警 | 通达OA远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493056&idx=1&sn=e403ede2a981aa23d95670c6be53a975": "漏洞预警 | 汉王e脸通智慧园区管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493781&idx=2&sn=3ff46263da891e1311e88fecaa375742": "Canary Exploit工具可检测受Apache Parquet漏洞影响的服务器", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493781&idx=4&sn=40dd947a49deeeac2d77c26174e7aa14": "Play勒索软件团伙利用零日漏洞部署恶意程序", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490053&idx=1&sn=4f6e0b57c4d90d911ca3d4d451fd6e53": "【高危漏洞预警】Elastic Kibana需授权代码注入漏洞 (CVE-2025-25014)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490053&idx=2&sn=e1fa7a6beecbecd929a120e00f53677d": "【高危漏洞预警】Microsoft Azure AI Bot Service权限提升漏洞CVE-2025-30392", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486425&idx=1&sn=f0097b5f133b5a4c9bf1ec100e8d6e55": "某CRM系统前台RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484538&idx=1&sn=59f432e51500e860d74ce85acaee3dd1": "命令执行不出网、无回显、连基础工具base64∕xxd都没有?极限生存下的命令执行,怎么打?", "https://mp.weixin.qq.com/s?__biz=MzU0MDI1MjUxMg==&mid=2247533541&idx=1&sn=715a139cafbc35e828ddb3d7abf30c5e": "斗象科技连续4年获国家信息安全漏洞库CNNVD“一级技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487864&idx=1&sn=4238407abb15d947187e4e1829aefd44": "play勒索软件利用Windows零日漏洞入侵美国企业,系统权限遭全面窃取!", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247499063&idx=1&sn=3396c01db284160ff26017eae2990463": "通过代理实现代码执行 - DLL劫持的另一种方式", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491374&idx=1&sn=96d62a86f1515d0b75406b84f40953c2": "用友NC files 反序列化RCE", "https://mp.weixin.qq.com/s?__biz=MzI5MDcyODIzNg==&mid=2247485049&idx=1&sn=44f2debeea4d71c3132e5f8b67b8ade8": "SRC漏洞案例之祝你生日快乐", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493781&idx=3&sn=00dc9443028818fad58e65c958c42e65": "三星MagicINFO漏洞在概念验证利用代码公开数日后遭攻击", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247486564&idx=1&sn=69697bc2be8941f7488755d9c6ad8bce": "警惕|Play Ransomware 利用 Windows CVE-2025-29824实施勒索攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490893&idx=1&sn=230244deecf9efb66a5cbf8858f10871": "某CRM系统前台RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493781&idx=1&sn=9f712f2d6d7e8441f4b26a89e1b38c9c": "专家警告称,针对SAP NetWeaver漏洞CVE-2025-31324的第二波攻击正在袭来", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462844&idx=1&sn=16f905bb023c4905a56d59c04da30a11": "信息安全漏洞月报(2025年4月)", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492658&idx=1&sn=442ddacdf8a9b8cfc22f3177cc5254ba": "漏洞复现 || XWiki Platform系统远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484826&idx=1&sn=0ab9bc7eafadb32a2dce9850874b4ffa": "安全漏洞防治工作的挑战与解决方案:从CVE停更到可信计算环境构建", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492522&idx=1&sn=55381a89501a176cdc954fc4de9c67c9": "无需认证的 DoS 漏洞可致 Windows 部署服务崩溃", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462844&idx=2&sn=e8c11038831948335aa6faced3c458a7": "信息安全漏洞周报(2025年第18期)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489277&idx=1&sn=6c55779812dc46ead6693965106dd9ed": "【漏洞通告】Elastic Kibana原型污染致任意代码执行漏洞(CVE-2025-25014)", "https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247491095&idx=1&sn=8c0720271ea656fc753561a44d768125": "某OA代码审计之挖掘0day,未公开poc", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489715&idx=1&sn=edaedaf50d5c0de6782c8eac9eae3970": "WordPress TargetSMS 插件存在前台代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650622394&idx=2&sn=2bcbe3b2a1581342454f2868b1634978": "CVSS10分!Craft CMS 远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247554773&idx=2&sn=286e5211128b34b989a4a5a82838e9c8": "【免费领】大佬挖洞秘笈:全网最详尽的漏洞挖掘实战技巧大全", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069510&idx=4&sn=13e42b32cf0c000f6d63304e4a836f24": "【安全圈】SonicWall SMA 100系列发现多个漏洞紧急安全更新", "https://mp.weixin.qq.com/s?__biz=MzAxNTQwMjAzOA==&mid=2452514890&idx=1&sn=7e4fb2a49c56b2c6fc17c84b05371b59": "【漏洞赏金计划】—— 提交漏洞,赢取高额奖金!", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519291&idx=1&sn=d35441ef0017e23c68e09e72a45f1183": "浅谈edusrc,逻辑漏洞,越权,接管到getshell,如何快速找准漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491302&idx=1&sn=58eaf1f31c356485e2e041aff9b6a138": "Rscan自动化扫描利器,指纹识别更精准,漏洞扫描更全面|漏洞探测", "https://mp.weixin.qq.com/s?__biz=Mzg2NDcwNjkzNw==&mid=2247487497&idx=1&sn=9ba99fad3e77a68a6ae4c3c91348db3d": "某OA代码审计之挖掘0day,未公开poc", "https://mp.weixin.qq.com/s?__biz=MzA5NzQ0Mjc5NA==&mid=2649768949&idx=1&sn=1ecde373bf55882e9275155658f9e50d": "原力金智SRC上线漏洞盒子 | 「企业SRC」新住客", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497567&idx=1&sn=0abc159207103dccd3e73039c850bf2a": "一次十分详细的漏洞挖掘记录,新思路+多个高危", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520404&idx=1&sn=e8a6e80ecf53ea04e94d8c714c68928e": "AI的攻与防:基于大模型漏洞基因库的威胁狩猎与企业级纵深防御", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499624&idx=1&sn=7c645b1f4a16642c32bafc3802d9582a": "从 .NET 代码审计看 ViewState 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493070&idx=2&sn=c9f99407ce417bc7b5ebd84f2d42edaa": "漏洞预警 | 用友U8CRM SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493792&idx=1&sn=a89a0fa01c39e64a57ad642a05f14904": "思科发布IOS XE无线控制器中的关键漏洞更新", "https://mp.weixin.qq.com/s?__biz=Mzg2MzYzNjEyMg==&mid=2247487203&idx=1&sn=714e8903bd08d274bcaaf0f09d461a65": "栈溢出从复现到挖掘-CVE-2018-18708漏洞复现详解", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247506359&idx=1&sn=397454a7b547b06a7dc384e188d18259": "某云盘系统 API 端点无限制上传漏洞解析", "https://mp.weixin.qq.com/s?__biz=MzIxOTM2MDYwNg==&mid=2247513579&idx=1&sn=7378085d9863deac22e2a37990a499d4": "实战中踩过的坑:我是如何用Ingram搞定摄像头漏洞扫描的", "https://mp.weixin.qq.com/s?__biz=Mzg2NDcwNjkzNw==&mid=2247487495&idx=1&sn=ec1e90a954685b653561732410288e2a": "栈溢出从复现到挖掘-CVE-2018-18708漏洞复现详解", "https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247491097&idx=1&sn=ce5a9d032e7a62b5edd058ea86bc7ff6": "栈溢出从复现到挖掘-CVE-2018-18708漏洞复现详解", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493070&idx=3&sn=7c31151901744fd0b812bb3637f38369": "漏洞预警 | Unibox路由器命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxODQzOTYxMQ==&mid=2247483896&idx=1&sn=6cb883625f1ea191a575188e8f62fe6e": "常见的信息泄露漏洞挖掘(第二部分)", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247549838&idx=1&sn=1589f72d6458104c54add6c222ed1b7b": "Clash Verge rev提权与命令执行分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610538&idx=3&sn=d70828a5aac5511a179d1b11a8ebd633": "实战攻防之Nacos漏洞一文通", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487237&idx=2&sn=5334c3b046990084903fd1c13c72d3c0": "支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490905&idx=2&sn=0ed05b80a5c90ec20ddbdbe592ce7c74": "安全漏洞防治工作的挑战与解决方案:从CVE停更到可信计算环境构建", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487237&idx=3&sn=9f2875a71a76b3c9a2709d340ccedb09": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247490178&idx=1&sn=d10553e8e32bd18524192fa6feba92ad": "若依(RuoYi)框架漏洞战争手册", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247490921&idx=3&sn=d0684326d1fe6ee4aa19ed36bb064268": "栈溢出从复现到挖掘-CVE-2018-18708漏洞复现详解", "https://mp.weixin.qq.com/s?__biz=Mzk0NDcyMjU2OQ==&mid=2247484718&idx=1&sn=e9e372132c647334ed0b8f7b070e2648": "讲好漏洞管理故事,没有指标怎么行", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524506&idx=4&sn=19574fc4946c6ff3485b0ae05a74ae05": "IBM Cognos Analytics 漏洞允许攻击者上传恶意文件", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582281&idx=1&sn=eff71cea21807271925c234b3191e3c9": "超过1200个SAP NetWeaver服务器容易受到主动利用漏洞的攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487427&idx=1&sn=aff15883cfe6cb9c4a41045459db8e4e": "通过@fastify∕view raw 渲染实现远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524506&idx=3&sn=2e2f7135cdec284e7cd6b8d41eca7345": "Apache ActiveMQ 漏洞让攻击者触发 DoS 条件", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484536&idx=1&sn=65fffa821513f4963041e2a504f1d07c": "YzmCMS最新跨站脚本漏洞及解决方法(CNVD-2025-08792、CVE-2025-3397)", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538714&idx=2&sn=d5c3a134feb1803915d85600ad4b9f08": "漏洞管理“扫雷”之动态优先级技术", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490058&idx=1&sn=59824a284d0e7c2b6e5fb5765f62af59": "【高危漏洞预警】F5OS身份认证绕过漏洞(CVE-2025-46265)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069525&idx=4&sn=a0ceb517f0bd46bd1296a5aa917fbf4c": "【安全圈】Cisco IOS XE WLC 中的关键 CVE-2025-20188 (CVSS 10) 缺陷允许远程根部访问", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320545&idx=1&sn=ad3eabe16fc21bfd8a2813c78951fd20": "AI生成虚假漏洞报告污染漏洞赏金平台", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064140&idx=1&sn=d260768ad429a25cbf848cf56cd7d89a": "信息安全漏洞周报【第021期】", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489789&idx=1&sn=77ee0c2a61fd563529f6651f7c785edf": "从靶场到实战:某双一流高校多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593398&idx=2&sn=37e1aae01543dd7d70cdf78802000f93": "思科紧急修复致命漏洞,黑客可借此全面接管设备", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247484976&idx=1&sn=6f68502e14ea7cd7b9cbb0cac874a1e7": "思路清晰,我是菜B,8小时爆肝windows 32位syncbreeze缓冲区溢出漏洞复现", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649172839&idx=2&sn=29e9e937371118efec358a6e7dea8cec": "CFCA联合银联云计算中心发现AI助手安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1NzE0ODUyOA==&mid=2247492196&idx=1&sn=fcfa14e51c4953a578125b94eecc539a": "【原创漏洞】AOSP跨用户资源访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247484984&idx=1&sn=997d6624942661f938be7632e0642bb1": "健康证泄露导致的越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485788&idx=1&sn=bee67e0f5b502534a62a2a4ec99877bd": "亚控科技 KingPortal 开发系统 imgPath 文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491384&idx=1&sn=867c9a3c8083cc415d9de07e67971b98": "electrolink 信息泄露漏洞 (CVE-2025-28228)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493077&idx=2&sn=fa116b649bc919a9bf2172868387fb9a": "漏洞预警 | Tenda AC9命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493077&idx=1&sn=c9e0584a42165249cc7d331513aafd17": "漏洞预警 | SeaCMS海洋影视管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651132902&idx=1&sn=bdfaec57ddc0a69a2a89a2753a0597fa": "公安部发布等保工作说明函,流行AI开发工具曝严重漏洞|一周特辑", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247490200&idx=1&sn=259f1f3bb8b6564d6c207190471fbe85": "JS漏洞挖掘|分享使用FindSomething联动的挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493077&idx=3&sn=6a7285844a60fc2f82971fd2c6b6c225": "漏洞预警 | 锐捷EWEB任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247484990&idx=1&sn=4c6c6e9debbb9597749ac55434d1dc96": "若依(RuoYi)框架漏洞战争手册", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497571&idx=1&sn=9ca2dfab23ac7985bbd0170175c7c154&subscene=0": "实战-漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489726&idx=1&sn=e7e0eb205d84df56195609e87c843a5f": "国外某停车管理系统V1.13存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498775&idx=1&sn=29f2b9e85b1798dd90285f151987a509": "【PoC】威胁行为者在野利用 SAP 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320568&idx=2&sn=4f78388dd0e6383e06bfd44e179712a5": "FreeBuf周报 | 最强防护也难防大语言模型被欺骗;AI生成虚假漏洞报告污染漏洞赏金平台", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526287&idx=1&sn=6b71b0ff47c9db7f74c5d92b44ced3d8": "某OA代码审计之挖掘0day,未公开poc", "https://mp.weixin.qq.com/s?__biz=MzkwNDUwNDU0OA==&mid=2247483765&idx=1&sn=43c35400f383276717ac879629f7db49": "关于小红书SRC暂停漏洞测试活动的公告", "https://mp.weixin.qq.com/s?__biz=Mzg4MTgxNjQwOQ==&mid=2247484866&idx=1&sn=354d8638c29cecc786bb0cb463c2f741": "好用的漏洞复现靶机推荐", "https://mp.weixin.qq.com/s?__biz=Mzk1NzMwNTM5NQ==&mid=2247485682&idx=1&sn=5907f8b6dea30490048f9168c84cc95c": "282G福利大放送!2025黑客、网络安全资料全网最全资料大合集(从0到挖漏洞、打CTF、护网、就业)", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610697&idx=3&sn=ee9f9fefcd9cd42cfca299aa1a8d44da": "浅谈edusrc,逻辑漏洞,越权,接管到getshell,如何快速找准漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610697&idx=2&sn=71bf35dc2d544216c0138f43b22158a1": "AI生成虚假漏洞报告污染漏洞赏金平台", "https://mp.weixin.qq.com/s?__biz=MzIxOTM2MDYwNg==&mid=2247513780&idx=1&sn=8d53faf470573cd7361a1f1ea2f65d70": "电商诈骗平台漏洞挖掘实录:从供应链后台到数据泄露的破局之路", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488287&idx=1&sn=464d2d0e5dc7738859fbed59509f0993": "CVE-2025-29774∕CVE-2025-29775: xml-crypto XML Signature Wrapping", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320568&idx=1&sn=434f968a88b181c31066694c59734bb1": "超越漏洞管理:CVE体系面临哪些挑战?", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499641&idx=3&sn=d7f3a802ba857dfd318ec850e660210b": "从 .NET 代码审计看 ViewState 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096221&idx=1&sn=ac96a88643c60815ce741fbb234b6cee": "研究人员发现 macOS 远程代码执行缺陷漏洞 – CVE-2024-44236", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247490199&idx=1&sn=d001d438287d7b024227d4cffb4a4d4e": "分享云安全浪潮src漏洞挖掘技巧", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247499082&idx=1&sn=89c617281776f78ca93ac1853441b97c": "CVE-2025-24071:通过 RAR∕ZIP 提取和 .library-ms 文件泄露 NTLM 哈希值", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485599&idx=1&sn=3a48cab83ec961c96ff5843d9ebfe0d1": "任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247492026&idx=1&sn=a45585cfb3c85bb1d0d2101a1ff10b41": "CVSS 10 满分漏洞:CVE-2025-32432 Craft CMS RCE 及未公开利用链深度解构", "https://mp.weixin.qq.com/s?__biz=MzU4Mzc4MDQyOQ==&mid=2247484664&idx=1&sn=20614437f6665e2bcb3a7b89fa5a26e1": "Clash verge 漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503235&idx=1&sn=71f55f311c5c308014a3271e92332314": "【成功复现】DocsGPT远程代码执行漏洞 (CVE-2025-0868)", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526293&idx=1&sn=ef18b8e203a13372a4ae6e2e64021d6b": "一张照片、一句简单提示词,就被ChatGPT人肉开盒,深度解析o3隐私漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647690710&idx=1&sn=fc4cae87be57161eff78f17fe0bfcd8b": "0038.我如何在顶级漏洞赏金计划中找到我最喜欢的漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247549854&idx=1&sn=443df06051542ef0a63b806e2c0237ad": "挖洞日记 | 记一次不断FUZZ拿下高危越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497580&idx=1&sn=c77028340ad979d0182045d5796a3826": "命令执行不出网、无回显、连基础工具base64∕xxd都没有?极限生存下的命令执行,怎么打?", "https://mp.weixin.qq.com/s?__biz=Mzg2NTgzMDg1NA==&mid=2247484166&idx=1&sn=ea248bc37355933590a2ccaae38f7eca": "某报表漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247502141&idx=1&sn=f372a42f927527cbe6c164a6df175c6e": "【CTFer成长之路】零元购逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDcwNjkzNw==&mid=2247487502&idx=1&sn=20724856905cdf62df94314268764232": "栈溢出从复现到挖掘-CVE-2018-16333漏洞复现详解", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486927&idx=1&sn=88fd42417284d98b5c427404832afd6f": "Edu双一流证书站 | github密码泄露导致的越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486927&idx=2&sn=8307176025613e1808289ac6b0fba9d2": "猎洞时刻漏洞挖掘SRC培训第三期塞满干货来袭!", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485789&idx=1&sn=aaf909933f3ec246329ed13d7578c3b5": "吉大正元身份认证网关 downTools 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247490216&idx=1&sn=1524e1403cce0c787e3cfa0e4ee24ff6": "src漏洞挖掘之XSS由浅入深", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493809&idx=1&sn=19f2b67e11a82faf3a824db9ddad5420": "网络安全厂商SonicWall修复SMA 100系列设备高危漏洞 攻击者可组合利用执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485602&idx=1&sn=113b5a508399efb0214e5a8dc86e2d21": "多个未授权漏洞深度利用实战", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247624248&idx=3&sn=be8ad60aa7b6c6aa5bfcdde292be12c9": "人工智能自动化模糊测试:如何自主发现汽车软件中的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247498075&idx=1&sn=62f2e4f26c60824d2b53ff900b2481cd": "车机Android系统安全漏洞深入浅出", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493089&idx=1&sn=492f897526e45b0a0d0636778649cf6a": "漏洞预警 | FoxCMS SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529742&idx=1&sn=05006a4350851e5b33b7b94c4b210209": "华硕预装驱动软件中的一键RCE", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247511977&idx=1&sn=3de7d646fcc6d4a410d0d427fc2a83d5": "智能汽车安全-漏洞挖掘到控车攻击", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247616101&idx=1&sn=60bb832f9c2aaec8fa0f28cb4f23f3e4": "赏金故事 | 挖掘Netflix Dispatch中的管理员账户接管漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610719&idx=3&sn=52c48c1babd531fb0f5c8323bc9236e3": "智能汽车安全-漏洞挖掘到控车攻击", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486428&idx=1&sn=8039e2d3e7d267a1787f63dfd9330edb": "猎洞时刻漏洞挖掘SRC培训第三期塞满干货来袭!", "https://mp.weixin.qq.com/s?__biz=Mzk3NTEyMzQzOA==&mid=2247485838&idx=1&sn=ae663c70dc4614970989937a04f57533": "一篇文章带小白从原理到靶场练习搞懂RCE命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247492267&idx=1&sn=c22d03fe3cbbd43b427799d5c2ec6c43": "AI自动化代码审计RCE", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493089&idx=2&sn=47f2633ec008d2ab3925fc14ec4ea6bf": "漏洞预警 | 用友U8CRM SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484544&idx=1&sn=e2b5fc489891d16de507cfc4810b0d43": "迅睿CMS最新SQL注入漏洞及解决方法(CNVD-2025-08495)", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506353&idx=1&sn=b111464761306e4cdef6942d7c25b2e6": "绕过公共漏洞赏金计划中的双重身份验证:6000 美元的旅程", "https://mp.weixin.qq.com/s?__biz=Mzk0MjM1MDg2Mg==&mid=2247504085&idx=1&sn=239026232f4f48370ade47ad2abc16c3": "中国信通院【首批】软件供应链漏洞管理平台能力评估开始报名!", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY2ODE1NA==&mid=2247485370&idx=1&sn=58f7ffdd233dd85a234cc68e79031668": "java代码审计之常见漏洞学习", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486722&idx=1&sn=ffcd556730cb1d6f9b0d41145d828e52": "【漏洞通告】Sourcecodester在线大学图书馆系统 SQL注入(CVE-2025-4504)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582297&idx=1&sn=5904ff9bef31b689ef0b942ff6255ef6": "DragonForce勒索团伙正有计划地扩展其他勒索软件组织", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489747&idx=1&sn=c003b000cda6831904036b5f3de74805": "【0day】Turkey Global全开源9语言交易所审计", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486722&idx=2&sn=1bf1055c7e8f552d6cebc52ac371f067": "【漏洞通告】D-Link DIR-605L 无线路由器缓冲器溢出(CVE-2025-4441)", "https://mp.weixin.qq.com/s?__biz=Mzg3Mzk2MzA3Nw==&mid=2247483873&idx=1&sn=01fb3cb887b2977a4e591ce31def958a": "分享一下我的漏洞挖掘经验", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524522&idx=2&sn=ca11f0d3dad8a00fffcc89d0d8a351d9": "漏洞预警:CVE-2024-26809利用nftables双重释放漏洞获取Root权限", "https://mp.weixin.qq.com/s?__biz=MzkxNjQyMjcwMw==&mid=2247487118&idx=1&sn=db8d31dd45b7f9d811c16cd6ab509875": "智能汽车安全-漏洞挖掘到控车攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247520664&idx=1&sn=044f7d50080beb92c62e88acfc47a74b": "攻防实战之若依(RuoYi)框架漏洞战争手册", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491394&idx=1&sn=566d2e6354be172fb93b1dd559dd9e7a": "WordPress depicter插件 Sql注入漏洞 (CVE-2025-2011)", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247518059&idx=1&sn=3bdb3d148cd8ef8323951728d871fe0a": "MiSRC 端午漏洞活动开启,等你超凡出 “粽”", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247547731&idx=1&sn=0a45937f4a2d32f62eb362020dcd4a15": "谷歌发布《2024年零日漏洞利用分析》:安全产品风险激增", "https://mp.weixin.qq.com/s?__biz=MzA3NTIyNzgwNA==&mid=2650260150&idx=1&sn=cc1d04b8599cef6f24e96a146cf79b33": "SAP NetWeaver漏洞利用进入第二波威胁活动", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495969&idx=1&sn=adbf03473c87e30cb132d3f07d091205": "CNVD漏洞周报2025年第17期", "https://mp.weixin.qq.com/s?__biz=MzU3OTAyODk4MQ==&mid=2247491295&idx=1&sn=2ce93316cb050e3d1f782d51d690f3c2": "【粽情挖洞,安全有礼】端午漏洞征集限时活动", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491404&idx=1&sn=b231b39f572b21cdd7e46610b18945db": "万户OA DocumentHistory.jsp sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503364&idx=1&sn=968cb69c0ddb2c38d3e1d4010982f52d": "安全热点周报:谷歌修复了 Android 上被积极利用的 FreeType 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490063&idx=1&sn=71ddc34040472ba7796d80bbb3c26ded": "【漏洞预警】Docker Desktop信息泄露漏洞(CVE-2025-1696)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503405&idx=1&sn=754e4027a04e293d322951ef9459a759": "雷神众测漏洞周报2025.5.6-2025.5.11", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491413&idx=1&sn=7c487ebccfb80ebbaf53c9b38bc9cd92": "EKing-管理易 FileDownload 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODUzMjA1MQ==&mid=2247485083&idx=1&sn=cb851893d4ab208b12e467f1dfd3fd6c": "一次edu站点从前台sql注入到后台rce", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320651&idx=4&sn=ca11388befebb3d9c7b26b8d6613320c": "CVE-2024-26809利用nftables双重释放漏洞获取Root权限", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484833&idx=1&sn=d32d5cc98dc1fd66b148a04558efefb5": "安全漏洞管理的4个常见误区", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495969&idx=2&sn=09773aee69062908205a5dc12cb4e5d8": "上周关注度较高的产品安全漏洞(20250428-20250511)", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247492098&idx=1&sn=ac0d7ba1223718ba00b4b15d1855f56b": "包教包会包分配项目,单月斩获漏洞赏金2.7W!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069594&idx=2&sn=46d82e1f37361ed9ed403fbd5798d394": "【安全圈】黑客利用微软 SharePoint 版 Copilot AI 漏洞窃取密码及敏感数据", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzg3NTcxNg==&mid=2247484959&idx=1&sn=393434f787d1c695cf4d073bf971946f": "小皮面板从未授权到RCE", "https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247489143&idx=1&sn=a25daaef4ea1b09e23bb13790cd43410": "PHP 静态分析漏洞挖掘:挑战、对策与研究进展综述", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320651&idx=1&sn=a9fab4722bc9ee9e63256b7a44cdc041": "包教包会包分配项目,单月斩获漏洞赏金2.7W!", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484552&idx=1&sn=1ee3c075f613bc32d6e16056d4853c1e": "【1day】⼤华智慧园区综合管理平台⽂件上传(CNVD2024-35419)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493104&idx=2&sn=d019beba15f5c4cfb4373427e44d1aba": "漏洞预警 | 润申企业标准化管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NjA3Mzk2NQ==&mid=2247496223&idx=1&sn=c333f310beb5f436d77f65e17750ebee": "漏洞研究(6):XXL-JOB调度中心默认口令漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493104&idx=1&sn=f96d02a0a9d96ca7ef3f92a4308fe31a": "漏洞预警 | Kibana原型污染漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487330&idx=3&sn=9dadbeba1bf88ec5ad8599ddd24cae70": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484563&idx=1&sn=5f43362f5a4bda2e60b347f22c6f4d46": "【1day】⼤华智慧园区综合管理平台⽂件上传(CNVD2024-35311)", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487330&idx=1&sn=757d1466f645123250afe9ccd77b023c": "【Web实战】一次空白页面的“妙手回春”嘎嘎出严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487893&idx=1&sn=3350628c95693f761c25068994b7e5a6": "紧急!华硕DriverHub曝高危漏洞,请立即更新!—远程攻击者可通过HTTP请求劫持你的主板驱动管理", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493821&idx=1&sn=299f74ef185aadfca5248b900b31e27e": "研究人员发现华硕预装软件DriverHub存在\"一键式\"远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484549&idx=1&sn=07bd4bd7dc024f64a4458af15c61ed8e": "ECShop存在逻辑缺陷漏洞(CNVD-2025-08499)", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795069&idx=3&sn=f635741f0a1de71baccd3ad9cc1a576c": "华硕预装软件DriverHub中存在漏洞,可被利用来执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610735&idx=1&sn=b3aa97fa473bf7318812cad75175f53d": "中标价85万防火墙,网购仅300元?;|苹果自研 5G 基带首个漏洞被修复:可拦截流量,中国安全专家发现;", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492263&idx=1&sn=2f28244d0617723b417f5e4557450c01": "漏洞预警 上海上X信息技术股份有限公司 堡垒机 RepeatSend 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTQ4NzE2Ng==&mid=2247495267&idx=1&sn=b3d1576e090815fc516ba4ae9ea6288f": "【文末抽奖】Springscan+:Spring未授权访问漏洞检测Chrome插件 by Lumns", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247492279&idx=1&sn=3aa15192fd6959ca837f09d0747e9396": "某开源cms 0day挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491423&idx=1&sn=3e9eba64f68f802352b09c54dc4a8beb": "智邦国际ERP GetPrintTemplate.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247491691&idx=1&sn=b1e831380887d4f8d2a9c1ba7e052c76": "【0day】Turkey Global全开源9语言交易所审计", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490068&idx=1&sn=e34c512c1ee126fd554c93c6301ef3f4": "【高危漏洞预警】SAP NetWeaver Visual Composer反序列化漏洞CVE-2025-42999", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524552&idx=2&sn=1b3c78c0c35609db15987d269edcab7a": "黑客利用 Output Messenger 0 Day 漏洞部署恶意负载", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247489233&idx=1&sn=7c50839d28a29f0cf1211fab734eb136": "ASUS DriverHub安全更新修复RCE漏洞,提防隐秘网络攻击", "https://mp.weixin.qq.com/s?__biz=Mzk1Nzk3MjA5Ng==&mid=2247485573&idx=1&sn=6e779f25c9be0d2740147a4ff0ac3ab5": "内存镜像分析实战:破解攻击者入侵路径,全程可复现!", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524552&idx=1&sn=0aea00fc8f9dd7c4665f46226815eb6f": "VMware Tools 漏洞允许攻击者篡改文件以触发恶意作", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484063&idx=1&sn=44021432d8c9dbc0b10b5e7bf7c7051e": "【漏洞复现】F5 BIG-IP IControl REST和TMSH 命令执行漏洞(CVE-2025-31644)", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795069&idx=2&sn=c272b3a0014dac3ee057b9c168a08291": "微软发现针对伊拉克库尔德民兵的间谍活动中存在0day漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524552&idx=4&sn=a17cd506867447841c65790a639c803b": "华硕DriverHub漏洞允许恶意网站以管理员权限执行命令", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512193&idx=1&sn=24be890704a835d114a01064777a9e90": "高危漏洞预警:Apache Tomcat远程代码执行漏洞曝光!", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489815&idx=1&sn=78c595c820698adedb9fc3224de34cbe": "Apache Calcite Avatica 远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzk0MzY1NDc2MA==&mid=2247484298&idx=1&sn=cee5e4998f84342eb302370bbdd76d61": "车机Android系统安全漏洞深入浅出", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136811&idx=2&sn=c04c6f207bc50001a9e2c8ec9bd15d46": "Google因生物识别数据侵权支付创纪录13.75亿美元和解金;华硕驱动管理工具安全漏洞允许恶意网站悄然执行管理员级命令 |牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320691&idx=4&sn=e480396e735465420fa34b4a20378a10": "GNU Screen 多漏洞曝光,本地提权与终端劫持风险浮现", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727845102&idx=1&sn=450421e645d6b694ead1dc90d9a14d79": "客户端漏洞在红蓝对抗中的挖掘与利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522987&idx=2&sn=3a436a07ce8ab28ad783d9d8705ed72a": "苹果修复iOS、macOS 平台上的多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096228&idx=2&sn=d8e4dbd652645003ab441e031634eb89": "VMware Tools 存在允许攻击者篡改文件以触发恶意作漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524436&idx=1&sn=e5b469efdad9cfdb0cad7a69c8e92dd7": "【勒索防护】Mallox新变种再度来袭,正利用产品漏洞对国内企业实施攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069614&idx=4&sn=2cdeb6fe56f376c6209155e17e0eaa4d": "【安全圈】华硕DriverHub漏洞致高危攻击:恶意网站可获取管理员权限", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524436&idx=2&sn=7349fe15ed6d5371de2ad7c1fba70c08": "【漏洞通告】F5 BIG-IP Appliance 模式命令执行漏洞(CVE-2025-31644)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529772&idx=2&sn=d18c032ba92e2e4884a9e3fc32da780d": "PoC 发布:CVE-2025-31644 漏洞利用通过设备模式命令注入授予 F5 BIG-IP 的 Root 访问权限", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484574&idx=1&sn=9b5357394109be2207eae4f312292bb0": "【1day】⼤华智慧园区综合管理平台⽂件上传(CNVD2024-35311)", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486942&idx=2&sn=368c1989a347f75796a39d41037b6173": "猎洞时刻漏洞挖掘SRC培训第三期塞满干货来袭!", "https://mp.weixin.qq.com/s?__biz=MzA4MzgzNTU5MA==&mid=2652038813&idx=1&sn=f6826bf0a4cb730ac784ca575f2ba577": "安卓逆向 -- 分析某库登录逻辑以及协议复现", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503247&idx=1&sn=f725ae48a660d6d5f43b8dee2657652b": "【成功复现】Elestio Memos服务器端请求伪造漏洞(CVE-2025-22952)【SSRF】", "https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247486256&idx=1&sn=6d54c27fcb11601360b8cd9f78378d3b": "客户端漏洞在红蓝对抗中的挖掘与利用", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520475&idx=1&sn=87c556c4efb6fbd6f7aa0aa689808816": "HotSwappableTargetSource+XString利用分析", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491036&idx=2&sn=b28468700c3d8e0143e71992e09f9b46": "客户端漏洞在红蓝对抗中的挖掘与利用", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486540&idx=1&sn=eb91ae30cb0ff0124a21f0cc4971d6ae": "CNVD-2024-22977 金和C6协同管理平台文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247522987&idx=1&sn=dd6c1684116b2d65b1efe7c80afe5945": "华硕修复严重的DriverHub 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320691&idx=3&sn=68ed4c2a830801d5a9cee49cec544119": "macOS远程视图服务沙箱逃逸漏洞PoC公开,攻击者可突破系统限制", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320691&idx=2&sn=de7f2bb1bb8623716a3d0a8af49cf360": "华硕DriverHub漏洞允许恶意网站以管理员权限执行命令", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488457&idx=1&sn=ff9daf871fef4edcfdb100b4990e66ea": "顺景ERP UploadInvtSpFile接口存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI0NjA3Mzk2NQ==&mid=2247496233&idx=1&sn=af205b4221083a7918d52d6f83099538": "漏洞研究(7):XXL-JOB执行器未授权访问漏洞(RESTful API)", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487334&idx=2&sn=103f1eea080d4d9426b63198942ad6db": "【Web实战】一次空白页面的“妙手回春”嘎嘎出严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493115&idx=2&sn=e1899b18ec36c06a4bbd6b924614466c": "漏洞预警 | 上海华测监测预警系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493115&idx=3&sn=29972f15447bee7aada4615991d82681": "漏洞预警 | 灵当CRM任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247509901&idx=1&sn=82924217b6f5f44e7c144b66d583231f": "英特尔处理器“幽灵”漏洞防御机制再遭突破:分支预测竞争条件引发新型攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493832&idx=1&sn=f0357d059b70ff22429fd8d12ffcddfc": "苹果发布安全更新以修复iOS和macOS中的多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484576&idx=1&sn=0e9dde7fb3d64fabc0db98effeacd83d": "【1day】⼤华智慧园区综合管理平台⽂件上传(CNVD2024-34322)", "https://mp.weixin.qq.com/s?__biz=MzIxOTk0ODY0NQ==&mid=2247485467&idx=1&sn=f733e694ff74b3dbb331c09986535628": "【0day漏洞复现】某华智慧园区综合管理平台文件上传漏洞(CNVD2024-35311)", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487334&idx=4&sn=b3346ca5192aa5b3e889435ad246be82": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655278705&idx=1&sn=616ce013a80dd8a9c8492c7fe57592f2": "100页PPT Web漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519305&idx=1&sn=191abe19580685bafe70e3ddb0f2ec74": "【海外SRC实战】一个支付逻辑漏洞,怒赚 $9000 赏金", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247488105&idx=1&sn=7cbab519421b3059382e13368679c7dd": "Yakit + xray联动探测漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNjI2NjUzNw==&mid=2247493271&idx=2&sn=8d284d83c6c6bc83ea7f91e98032b58f": "上周关注度较高的产品安全漏洞(20250428-20250511)", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247503272&idx=1&sn=663644f4dfe72e992ed6a08fef2396a0": "趁乱上位,欧洲漏洞数据库上线", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491432&idx=1&sn=8fc15615f953cb4150cbd4eac04b999c": "昂捷CRM cwsapprove.asmx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNjczNzgzMA==&mid=2247484526&idx=1&sn=122fb57b1d99235f9a53cec6301e1504": "漏洞挖掘—利用查询功能获取敏感信息", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247520719&idx=1&sn=aa96ad3991ce24b9467de17cfacbbf73": "小迪VPC1红队内网渗透靶场-PHPRCE-永恒之蓝-防火墙上线-密码喷射-DC域控提权-weblogic", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247491102&idx=1&sn=400dbb1d0204edf7e84c370d6c2451af": "能信安:漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493115&idx=1&sn=c6eb1e1604d1458fb33d362903411604": "漏洞预警 | 致远OA代码注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497445&idx=1&sn=3869ce186823523050c2ae745032deac": "2025年5月微软补丁日多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503390&idx=1&sn=4dffd20f4e491d1a2f9f00c19b3a6075": "Ivanti Endpoint Manager Mobile 多个漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg4MTA2MTc4MA==&mid=2247493940&idx=1&sn=c57275d60a7e624be71dd6089520a8de": "swagger-api未授权访问漏洞及防治方法", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523008&idx=1&sn=12a019a9d94970b49208b306f026f931": "Ivanti 修复已用于代码执行攻击中的两个 EPMM 0day 漏洞,与开源库有关", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490392&idx=1&sn=10c6648ae3683387f181a5eba7f7d429": "【风险通告】微软5月安全更新补丁和多个高危漏洞风险提示", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485614&idx=1&sn=0d220c2d95b21b9b8d2ec7a23720a22c": "JNDI注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247502210&idx=1&sn=7ac38b3015aa5bd309dadd5a8b9b0681": "【CTFer成长之路】命令执行RCE", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320874&idx=3&sn=65c96cd2b5e47e2dc143515a30adbf3c": "英特尔CPU曝新型漏洞,特权内存敏感数据面临泄露风险", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247525083&idx=1&sn=ad2dc629a1ec0c3a257554084bf70cb4": "2025-05微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320874&idx=4&sn=02300abd352f8d0be63a8220ffeb2a77": "欧盟新漏洞数据库上线,定位CVE计划补充而非竞争者", "https://mp.weixin.qq.com/s?__biz=MzkwMjIzNTU2Mg==&mid=2247484298&idx=1&sn=7b44b97a32416ee337fcdc8d180dee74": "【水文】聚合漏洞情报平台(新增推送服务)", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136834&idx=2&sn=2a8979ba8eb9cbf2c9d9ce1c99d746cc": "迪奥确认中国客户信息遭泄露;欧洲漏洞数据库正式启动,CVE动荡中的新选择 | 牛览", "https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486597&idx=1&sn=1a28d06e49724358ef5ac0e57ab8f234": "美国 CVE 计划深陷混乱,欧盟火速上线新型漏洞数据库", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788563&idx=1&sn=b342ee39e53f84204ba881a7b078f5ed": "“欧洲版CVE”上线,EUVD释放漏洞治理新信号", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523008&idx=2&sn=4dc3d8241d26767577bbed984b1b88b2": "Fortinet修复已遭利用的严重0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523008&idx=3&sn=9a842c823e7d8913c5cc1c0f69a9cda4": "微软5月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486568&idx=1&sn=8ebc60c066a4e4f22aaa4379aaddcde6": "逆向专题分析 - Strcpy缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501065&idx=2&sn=17282f8ef6d8567adc8ad152838beac7": "【漏洞通告】微软5月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524570&idx=3&sn=4d7ba3841ee1fb55e572a55e404156cf": "Microsoft 警告 AD CS 漏洞允许攻击者拒绝通过网络提供服务", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462863&idx=1&sn=8eb58c985548eaa20261e919dcd81bf2": "2025年度(第一期)CNNVD漏洞奖励评选结果公告", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484838&idx=1&sn=709fb77ea9e14db226b4d14226f2ea27": "安钥®「漏洞防治标准作业程序(SOP)」征文启示 [2025年第19期,总第37期]", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489821&idx=1&sn=827c829c0a70cd6f62a3c8cba5135cd9": "3个月测一站!漏洞挖掘纯享版", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462863&idx=2&sn=39d388aa783b02d11da1ec185bf0ee06": "信息安全漏洞周报(2025年第19期)", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499888&idx=1&sn=11b8b60336132398b93d3517060f9f4a": "漏洞挖掘小工具 - SeeMore", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491071&idx=1&sn=44e17b4412591a6d368f8d643463d041": "Yakit + xray联动探测漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490076&idx=2&sn=d434a7266c6894233bf273b980f0df72": "【漏洞预警】F5 BIG-IP IControl REST需授权命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524570&idx=1&sn=a738a378ed2afb2a4d728ca1f3858253": "英特尔CPU新型漏洞可泄露特权内存敏感数据", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524570&idx=2&sn=9fb4955b9ea23730e89e2a02fbed891a": "Windows 远程桌面漏洞允许攻击者通过网络执行恶意代码", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458593996&idx=2&sn=1adc8a5b4dcf09069ae8a01ef9cb1186": "微软修复78个漏洞,5个零日漏洞被利用,Azure惊现满分漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488468&idx=1&sn=0936bafacba6d0e8c19685261ec2c800": "Laravel Framework 8到11版本存在敏感信息泄露漏洞CVE-2024-29291 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492778&idx=1&sn=05a8cc166439396e85322a00a6f68a2c": "严重的 Erlang∕OTP SSH RCE 漏洞现已公开,请立即修补", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320874&idx=2&sn=9bc6fc40d0c509c0f8350ee1b767056c": "FortiVoice零日漏洞遭野外利用,特制HTTP请求可执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490076&idx=1&sn=7657f918594505daaecaa1220c2914f0": "【漏洞预警】Apache IoTDB远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247494605&idx=1&sn=f089ad9b91ff71fc033ef5fc95538d43": "工具推荐 | 最新开源若依Vue漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487375&idx=5&sn=06b1c836ac9f843bad093659c48b3b36": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493126&idx=3&sn=ea590191b96df3c5627f73c6c13e4b59": "漏洞预警 | 泛微E-Office任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485851&idx=1&sn=1c82a0bf8e73ec70b37bb06bd27e8a2b": "欧盟漏洞数据库(EUVD)正式上线:技术架构、协同生态与行业影响深度解析", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493843&idx=2&sn=3928077a391eadb2a6c17a8b0fc91eb1": "Fortinet修复了已被积极利用的FortiVoice零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247512622&idx=1&sn=8973c3c5b0df83394bdf8eabcff59d54": "CVE-2025-4076 BL-Link远程代码执行漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493126&idx=1&sn=a82a65609829035d058046e4297e3e31": "漏洞预警 | 飞企互联FE业务协作平台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493126&idx=2&sn=8b7e76c6216fa0b82a01b16b457bfdf5": "漏洞预警 | 汉王e脸通智慧园区管理平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487375&idx=3&sn=f9346226f0683b32257c788094d72cf8": "【Web实战】一次空白页面的“妙手回春”嘎嘎出严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487908&idx=1&sn=f63da7d2667a17aee320d949035ee354": "Fortinet紧急修复零日漏洞CVE-2025-32756:远程代码执行风险威胁FortiVoice系统", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247616156&idx=1&sn=5d04e1241f313c3afc585df07cd88345": "漏洞赏金故事 | 挖穿全球最大航空与酒店积分平台", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485073&idx=1&sn=05bd26674ee6fec3d58cf76a4ffe52db": "腾讯云安全中心推出2025年4月必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247491695&idx=1&sn=cf4b7e1ba13e9801c14c9e7df8eade2b": "某GPS定位系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247490291&idx=1&sn=7daaec7346e99f780fb344eb656361e2": "突破浅层测试桎梏:多维度漏洞挖掘突破与实践探索", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493843&idx=1&sn=8549e962d265a0c81e4f0979dbe07666": "微软2025年5月\"补丁星期二\"安全更新修复了5个已被积极利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900536&idx=1&sn=bb4f1cb2997f99dce650af738ebb23be": "微软5月安全更新:78漏洞深度透视,5大零日实战利用链及Azure DevOps CVSS 10漏洞攻防策略", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900537&idx=1&sn=573044c78e9776fde63049ccb62fd980": "OttoKit插件CVSS 9.8“幽灵连接”提权漏洞(CVE-2025-27007)遭闪电利用,深度技术剖析与防御指南", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484069&idx=1&sn=699376c17af88ea04131750ccdc81566": "【在野利用】Fortinet 系列产品 未认证远程代码执行(CVE-2025-32756)", "https://mp.weixin.qq.com/s?__biz=MzU3MDA0MTE2Mg==&mid=2247492827&idx=1&sn=56d71af1f4ba16d789e34d7228296643": "安全快报 | 国际APT威胁组织利用SAP NetWeaver严重安全漏洞入侵全球581个关键基础设施系统", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529809&idx=3&sn=8f925e14873beeeee8ef8ac6925c8846": "利用浏览器漏洞绕过 Windows Defender 应用程序控制 (WDAC)", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492271&idx=1&sn=492927911ca4b639d0b7b68767d61ec9": "漏洞预警 Salia PLCC check_req.php 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261079&idx=1&sn=80fafddace85154176f62cf1ec5a1b84": "漏洞挖掘之 FOFA 语法技巧", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529809&idx=1&sn=fec7a393bf95a45338335c5a508b69b3": "CVE-2024-55030:NASA fPrime 队列溢出导致 DoS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTMyOTg4NQ==&mid=2247484565&idx=1&sn=c4cdbb7fa3bd22449b49dc8d0f6a554f": "用友U8 CRM最新SQL注入漏洞及解决方法(CNVD-2025-09018)", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496402&idx=1&sn=3a56b5246cbb92c3c2f1c90631df8e13": "2025年4月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501071&idx=2&sn=aaea46e520b4251f03208f3f8587a564": "【漏洞通告】Apache IoTDB UDF远程代码执行漏洞 (CVE-2024-24780)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320917&idx=1&sn=ae2655402bb29f301a8745613a7758ad": "Bitpixie漏洞攻击路径曝光,5分钟即可绕过BitLocker加密", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487913&idx=1&sn=0db1eec755d8ba897d36b6f2251802ef": "如何从漏洞POC或者EXP代码中学习漏洞原理?", "https://mp.weixin.qq.com/s?__biz=MzU5Njc4NjM3NA==&mid=2247496579&idx=1&sn=2b6a6405c0de361cc29cd59b890bd3d0": "Node.js 高危漏洞警报(CVE-2025-23166):可导致远程系统崩溃", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651320917&idx=4&sn=e813092fa38d4b90bd470e4aeab2cd08": "Windows远程桌面网关曝双高危漏洞,可触发拒绝服务及远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503385&idx=1&sn=e4a89b9ed57857e64d2954baf50808b5": "微软5月补丁日多个产品安全漏洞风险通告:5个在野利用、11个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491441&idx=1&sn=5dabd391edb7a3464fe39024cf3b6287": "原创先锋 后台管理 存在未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNTU1NjYwNA==&mid=2247488052&idx=1&sn=f5105862005e6f09ee6b4eeb447e14aa": "2025攻防演练必修组件漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247554835&idx=2&sn=b9c7cb6e4f22e9ff0ff4a87b68990359": "附下载 | 小米科技杨一帆:智能汽车渗透实战:从漏洞挖掘到控车攻击", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512203&idx=1&sn=261e280f9fb9f188798ae97dfdb7d562": "微软2025年5月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247491061&idx=1&sn=8add20c0788395e325bc41e91aceaa2c": "创宇安全智脑 | 灵当 CRM Playforrecord.php 任意文件读取等107个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503400&idx=1&sn=a3ed07a0c534855161deb71b6a0642e4": "【已复现】Google Chrome 跨源数据泄露漏洞(CVE-2025-4664)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462992&idx=2&sn=8bd082f51f27793a8fcd335bd8be4120": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490084&idx=1&sn=7e06db1fcffc8b5ff6e56d3c33d756d4": "【漏洞预警】Node.Js 异常处理不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503400&idx=2&sn=80467da7de6cbd94b86630f8ee95874a": "Fortinet FortiOS 身份认证绕过漏洞(CVE-2025-22252)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242573&idx=1&sn=4809b1ead0dc8205687720e92040922f": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486686&idx=2&sn=d5c362cb087ced538a1c6b14d7297b3b": "【漏洞预警】Google Chrome 访问控制不当漏洞(CVE-2025-4664)", "https://mp.weixin.qq.com/s?__biz=Mzk0Mjc2MzQ0Ng==&mid=2247484553&idx=1&sn=76ac840bd43c005468a6a364354f7bc0": "F5 BIG-IP rce漏洞 CVE-2025-31644", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490084&idx=2&sn=8eb8b4bc9a85efa06b803690074b1d62": "【漏洞预警】Google Chrome访问控制不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486686&idx=1&sn=3275924bc00806abd77ad46c738de75d": "【漏洞预警】Node.js 异步加密错误处理不当漏洞(CVE-2025-23166)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491410&idx=1&sn=6e5c3611d0e086e67c618589db7a16a9": "WEB漏洞扫描器Invicti-Professional-V25.5(自动化爬虫漏洞扫描)更新", "https://mp.weixin.qq.com/s?__biz=MzkwNjM5NTkwOA==&mid=2247483973&idx=1&sn=05fb82ad7c28fa6a91ebfb193e16535d": "CVE-2025-30406 CentreStack ViewState 反序列化漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242573&idx=2&sn=f1be9e890284eca3672fb480d44410d3": "CNNVD | 关于Fortinet多款产品安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519311&idx=1&sn=6e0d226f8520843b8b9111e1f0d94147": "【SRC实战】一次空白页面的“妙手回春”变严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651462992&idx=1&sn=e9898910f13788c2c16cd5c59071484f": "CNNVD关于Fortinet多款产品安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247554844&idx=1&sn=f29d864ecb40ac7fe2ff282ba1462edb": "从XSS到\"RCE\"的PC端利用链构建", "https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247494623&idx=1&sn=7e704834297972659a95a52b35a944e4": "工具推荐 | 临兵漏洞自动化扫描系统", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493849&idx=1&sn=cb6f29682b6c7c5721e10042cec1eea8": "Ivanti修复了两个在有限攻击中被利用的EPMM漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247492321&idx=1&sn=521382f8a9c33edb1bbd758d080c167a": "某云盘系统 API 端点无限制上传漏洞解析", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247512045&idx=1&sn=ebc266e0342548555e31bca22d7d84e7": "邮件服务器安全检查工具 | 一个用于检查邮件服务器安全配置并识别潜在漏洞的综合工具。", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493142&idx=1&sn=8417737fe3dd9c336408bfecd239c79c": "漏洞预警 | 用友U8Cloud XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037703&idx=1&sn=ee99198595f09647e07a388d40761561": "基于Drozer框架对安卓四大组件的漏洞挖掘总结", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499677&idx=1&sn=b5f2f213d5a79e9f0428f8d073d5f374": "红队视角下的 .NET 安全审计,记一次 .NET 程序的漏洞发现之旅", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487917&idx=1&sn=e50f82713e625ef841448aa09706327a": "紧急预警!新Chrome漏洞(CVE-2025-4664)致跨域数据泄露,请立即更新", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247485315&idx=1&sn=202d3a34420423624dd4749bc04b8710": "当单个ID失败时,成对ID可能通过!越权漏洞就这么简单", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795118&idx=1&sn=ac271afd0d4c9989d955552c446b0add": "俄黑客组织 APT28 利用 MDaemon 0day漏洞攻击Webmail 服务器", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487402&idx=1&sn=483b638ac2cba6a68bcb8633c1375c09": "泥煤的,又一次RCE", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493142&idx=2&sn=1e6477655b8d35c631618cae1a19e496": "漏洞预警 | 帆软报表目录遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491447&idx=1&sn=62d0d1d5d519b3e8110257ee76aa9b05": "【1周年庆】致Nday Poc全体成员的一封信", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610772&idx=3&sn=7cdf87bd56ec29f6bc9408ebd458100d": "攻防实战之若依(RuoYi)框架漏洞战争手册", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524590&idx=4&sn=6fe7ad2714f7e5f2f6ac54bcecda6ae8": "Node.js 高危漏洞警报(CVE-2025-23166):可导致远程系统崩溃", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484595&idx=1&sn=6feefaf85c986e4dfe7b354020d7d52e": "【漏洞预警】某华DSS系统存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247499902&idx=1&sn=92ef5a9638f17d80e724ac3c867101a7": "PHPRCE-永恒之蓝-防火墙上线-密码喷射-DC域控提权-weblogic", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493142&idx=3&sn=47422e3c46960e1f7335a34d5196bbce": "漏洞预警 | 用友NC SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTc2MDE3OA==&mid=2247486659&idx=1&sn=0321d9126f471ded2828af33bd4fe6a2": "DeFiVulnLabs验证——利用Coze进行自动化复现和测试及坑点", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487402&idx=6&sn=c271da6713b076314c2fd474e7365fd3": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247489105&idx=1&sn=4d26a119df5deef7a14e446b93678848": "安全资讯|英特尔CPU曝分支权限注入重大安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503407&idx=1&sn=bc577b527b31ff7b989f2b804f447771": "【已复现】Ivanti Endpoint Manager Mobile 多个漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524590&idx=3&sn=5ce5215f6a03a6bbcbf2bc01760cd628": "利用Bitpixie漏洞(CVE-2023-21563)可在数分钟内绕过BitLocker加密——概念验证揭示高风险攻击路径", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247491697&idx=1&sn=4fc952a1c58793c94def3b994ee657be": "某短视频矩阵营销系统前台RCE漏洞审计", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247490339&idx=1&sn=011dccb887d48892ba1c826730b44ec9": "Webpack源码泄露漏洞批量探测", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489287&idx=1&sn=8c9f37d9f49eabc32f86c61032e9ce2a": "【漏洞通告】Ivanti Endpoint Manager Mobile身份验证绕过与远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524448&idx=1&sn=6217de2f915a55b24e03100e3d3ab00f": "【漏洞通告】Ivanti EPMM 未授权远程代码执行(CVE-2025-4428)", "https://mp.weixin.qq.com/s?__biz=Mzg2NDcwNjkzNw==&mid=2247487509&idx=1&sn=f96c312faca3501d7b93298b6abafab8": "我在马路边,捡到两年前的RCE了", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529836&idx=2&sn=aa217719d6409db30c80beeabeb5bdef": "Jenkins 插件漏洞暴露严重风险:CVE-2025-47889 漏洞 CVSS 评分达 9.8,存在身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489834&idx=1&sn=2419e66fdc2faf39c3bcfcf23bd2e729": "多功能BurpSuite漏洞探测插件—TsojanScan", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491469&idx=1&sn=8e20f6c97b44d8d68781eb1ff4a0fae0": "致远互联FE协作办公平台 addUser.jsp SQL注入(CVE-2025-2030)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490089&idx=1&sn=6b1860a17c9b2a8d1ea405b92acaaa03": "【高危漏洞预警】Fortinet多款产品缓冲区溢出漏洞(CVE-2025-32756)", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484077&idx=1&sn=17a24bab60b34123c63194e6c89eb39f": "【已复现】Ivanti EPMM 认证绕过∕代码执行漏洞 (CVE-2025-4427∕CVE-2025-4428)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664242670&idx=1&sn=ef65bd56ddce36543499892b52b62bc0": "聚焦 | 国家信息安全漏洞库(CNNVD)2024年度工作总结暨优秀表彰大会成功举办", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501079&idx=3&sn=c60869994f50fba08d87b4853de6d126": "【漏洞通告】FortiOS TACACS+身份认证绕过漏洞(CVE-2025-22252)", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524590&idx=1&sn=975a2bbedabadddaa1a9b1328b6c8886": "Windows远程桌面网关漏洞可被攻击者利用触发拒绝服务条件", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY2ODE1NA==&mid=2247485388&idx=1&sn=41c66e99136de139308d373fae0b8957": "Apache Roller高危漏洞CVE-2025-24859深度解析:会话劫持威胁企业安全", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788573&idx=1&sn=3cd1ca51bc4ac24f73596c96d8c28484": "黑客发起全球间谍行动,政府邮箱被利用XSS漏洞入侵", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489287&idx=2&sn=02ea85647c8292cb4410e35f90b12ff8": "【安全更新】微软5月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486688&idx=1&sn=75f519098b5ec8f6c3615719e2290902": "【漏洞预警】Apache IoTDB 远程代码执行漏洞(CVE-2024-24780)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069664&idx=3&sn=ce9e58eb83ca29b12fe8053876e1d3a4": "【安全圈】网络安全事件周报:勒索组织与国家级黑客同时盯上SAP漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069664&idx=2&sn=80a74a8e1cddf0a974dca42fb8b9cc6e": "【安全圈】新Spectre变种攻击曝光:英特尔CPU存在特权分支注入漏洞,内存数据或遭窃取", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651247987&idx=1&sn=29534ea825a239f625eb903a24f1ae7b": "发现网络攻击后立即关闭系统?错!| Bitpixie漏洞攻击路径曝光,5分钟即可绕过BitLocker加密", "https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247491125&idx=1&sn=cc28f1cd5e0286af9d09afab81ab612b": "我在马路边,捡到两年前的RCE了", "https://mp.weixin.qq.com/s?__biz=MzI5MDcyODIzNg==&mid=2247485064&idx=1&sn=d85845f1286127f8a6f52957bef948be": "900人选择的SRC漏洞挖掘课程,带你踏上漏洞挖掘之路,共同成长", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY3OTc5Mw==&mid=2247485059&idx=1&sn=a390ae32a65fad7f877be099a0ef3929": "【免杀现】白加黑也不一定是exe+dll哟", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064153&idx=1&sn=9e81e1a670596fc708f06d33dfceef2a": "信息安全漏洞周报【第022期】", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512206&idx=1&sn=ad2141c2128b2f8528b26d3a1057ee93": "Apache Roller高危漏洞(CVE-2025-24859)曝光,用户需立即采取行动!", "https://mp.weixin.qq.com/s?__biz=MzI0NjA3Mzk2NQ==&mid=2247496246&idx=1&sn=13504d1d456d9883672e9ac62eef522c": "漏洞研究(8):XXL-JOB调度中心后台日志查看SSRF漏洞 CVE-2022-43183", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486125&idx=1&sn=5a77bc1e5cbec31ee8123a012c212633": "突发!APT组织利用零日漏洞,竟对伊拉克库尔德武装展开 “隐秘监视”!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523031&idx=1&sn=40bc8fad7dc229f984420d3f6109a0b9": "Chrome修复已遭活跃利用的0day", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497600&idx=1&sn=1969c3c056630d43062c8ba9092c06da": "一次获取RCE以及提权到root权限的渗透过程", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247491104&idx=1&sn=4d720b1891187d32013cfeafe3970571": "能信安:漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516636&idx=1&sn=b6f314f0ad1fc3ec3d30099af4ec510e": "Nacos Derby命令执行漏洞利用脚本(5月15日更新)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501079&idx=2&sn=0a1737e00deeeeee9536c2f371d6891a": "【漏洞通告】Tornado日志解析器拒绝服务漏洞 (CVE-2025-47287)", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520530&idx=1&sn=2052449f26addaab7e037d9f26b33721": "漏洞预警:CVE-2025-31258 macOS远程视图服务沙箱逃逸漏洞PoC已公开", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651133083&idx=1&sn=aad61191d926b74c39a98c30856badc6": "国安部提醒警惕智能穿戴设备泄密,英特尔CPU曝漏洞|一周特辑", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484411&idx=1&sn=793231a073b0d6a68e7a23f89f0f4f40": "WordPress前台任意文件读取漏洞POC(CVE-2025-2294)", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487459&idx=5&sn=51a05095079246f1e682beaf5a476e5f": "【Web实战】一次空白页面的“妙手回春”嘎嘎出严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487459&idx=2&sn=6bf840a27e811f0e056ff746147d3efd": "泥煤的,又一次RCE", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487459&idx=7&sn=f2d18c5fe0a7872ee25e3377576080cd": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650468640&idx=1&sn=430490ae575574d3530583fedd91f8aa": "绿盟科技荣获国家信息安全漏洞库(CNNVD)多项认可", "https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247493234&idx=1&sn=cdb1e53279f782a48681a06484e23fa5": "2025微软漏洞报告:数量再创纪录,应对更复杂", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503256&idx=1&sn=f7f3674b803a38389694bddfb6e9c62e": "【成功复现】JeeWMS系统SQL注入漏洞漏洞(CVE-2025-0392)", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487459&idx=1&sn=088123af3e042983d3735e1a4da6c61e": "任意用户登录漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247486227&idx=1&sn=a7cb99a790cd4e12144fc49d256a1f3e": "上讯信息技术股份有限公司运维管理系统RepeatSend命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247549991&idx=1&sn=4234354954eb9ecdd3e47fada2c4af6f": "某校园解决方案提供商智慧校园通用漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652115790&idx=1&sn=8da50ee2e0135385f3cec02219d6fbd0": "微软2025年5月份于周二补丁日针对78漏洞发布安全补丁", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247485526&idx=1&sn=2b2f5d8ffbefc83cafbe955e301a1200": "Pwn2Own 2025 柏林赛day2,VMware ESXi被攻破,漏洞价值15W刀", "https://mp.weixin.qq.com/s?__biz=MzI2MDI0NTM2Nw==&mid=2247490619&idx=1&sn=a2db644808c77a0b45b82c37d60e7632": "Centos添加漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458594141&idx=3&sn=dc75ea15ec1eaf8b4e9a86bf5d62e006": "英特尔CPU曝新漏洞:每秒偷走17KB数据!新型芯片漏洞有多可怕", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610790&idx=1&sn=42e4e254f90a15e7869f27de69f90594": "一包包免费纸巾骗走老人们2亿元;|谷歌Chrome曝高危漏洞,可导致账户接管与MFA绕过", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247572783&idx=1&sn=498f1d3073cac37c2bf4439b34edfaae": "一个漏洞挖掘小工具 - SeeMore", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610790&idx=4&sn=2c66c67e34c2642084e2a26e39b55a28": "邮件服务器安全检查工具 | 一个用于检查邮件服务器安全配置并识别潜在漏洞的综合工具。", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491478&idx=1&sn=45307902cab80959cdbf15462748ce9f": "装盟科技-家装ERP管理系统 Public.asmx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096235&idx=2&sn=ce6afa07cb19b00599fa4bde6294c4d5": "多个 Ivanti Endpoint Mobile Manager 存在远程执行代码漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529870&idx=1&sn=f630cffc3eca33694ae38e9cc51b90d6": "CVE-2025-4427∕4428:Ivanti EPMM 远程代码执行 - 技术分析", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491486&idx=1&sn=d76973114389135c7d046bbe6caf0788": "装盟科技-家装ERP管理系统 Budget.asmx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519329&idx=1&sn=2ba90bbfa7582d6ef495b5b3bbf3ef82": "攻防实战之若依(RuoYi)框架漏洞战争手册", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610790&idx=3&sn=92609abd1542c3029ec590f577cba88c": "某OA代码审计之挖掘0day,未公开poc", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247499948&idx=2&sn=2b76d6e4e5a52b74a200b0541969554e": "新漏洞影响过去6年内所有英特尔处理器", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492780&idx=1&sn=9bd9be62e1ba7da954f1cc3396ce9d42": "华硕警告使用 AiCloud 的路由器存在严重的身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321008&idx=1&sn=ae791b0b8818b8c209b687df9a2fd5b1": "2025年Linux内核补丁管理:漏洞防御新策略", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247490318&idx=1&sn=74428d2959f342f6ff6ac261fe9b0a4c": "工具集:Fiora【漏洞PoC框架图形版的Nuclei】", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247490419&idx=1&sn=f6b7aaec4d6701d21a500eb2b6ebbd6e": "ruoyi系统 4.8 后台RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491505&idx=1&sn=84eec4161e98e58aec50bd9fecbf5396": "SysAid On-Prem XML注入漏洞 (CVE-2025-2776)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491496&idx=1&sn=2d48823e684397a854cefe1dd038c7f0": "妖气山视频管理系统 get_media_list_by_filter.json SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247550042&idx=1&sn=604860dbff6fda380161cf44215eec8d": "重生HW之利用邮箱漏洞寻找突破口打穿目标内网", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487437&idx=1&sn=cbff3bf4a41066854aa33d6262681406": "CVE-2025-3102 WordPress 任意用户创建", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486456&idx=1&sn=f64fd15960ac4cab2aa9ba2cf4ae110d": "一次任意文件下载漏洞审计-JAVA", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247486962&idx=1&sn=7d411d01c29567321608375b3e7d1549": "猎洞时刻漏洞挖掘SRC旧一期公开课四节!!", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492106&idx=1&sn=944ae874c1f157a21032f3515b82448e": "一次任意文件下载漏洞审计-JAVA", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069693&idx=3&sn=79db367c018e907ae1f542e9117a3227": "【安全圈】​​Linux 漏洞数量一年激增 967%​", "https://mp.weixin.qq.com/s?__biz=MzI0NjA3Mzk2NQ==&mid=2247496253&idx=1&sn=14e5b2e6452bb240a492d5caa2de3c96": "漏洞研究(9):XXL-JOB调度中心后台任务执行SSRF漏洞 CVE-2024-24113", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491096&idx=4&sn=bb0a679ce027e9696dc5380453a6bb65": "上讯信息技术股份有限公司运维管理系统RepeatSend命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655279104&idx=1&sn=fc0d2ad017e5ed4cbcaa2258802dcc1f": "政府邮箱被利用XSS漏洞入侵;2024年微软披露漏洞增长11%", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491096&idx=3&sn=300469656724bbb606d05dedb933e58d": "重生HW之利用邮箱漏洞寻找突破口打穿目标内网", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491096&idx=1&sn=b4444827d62782ba53af7e8db6a0d40c": "一次任意文件下载漏洞审计-JAVA", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492781&idx=1&sn=12942c4e6827005e4836c231a65a4873": "Windows NTLM 哈希泄漏漏洞被利用来针对政府进行网络钓鱼攻击", "https://mp.weixin.qq.com/s?__biz=MzkxNDM4OTM3OQ==&mid=2247506066&idx=2&sn=e0cf069161dc63c1d309efabe7083b19": "2025年漏洞统计报告附下载", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487486&idx=1&sn=ba311501aea1738fee819c57be6d8fb8": "你来你也能RCE", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499696&idx=1&sn=fe88643789efacfd6935788441f31d33": "XBAP 绕过终端防护,通过 Sharp4XbapShell 实现 PowerShell 命令执行", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487486&idx=2&sn=5f6cc2e7c15eaedaeee640db0de55211": "任意用户登录漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzkyNDYwNTcyNA==&mid=2247487767&idx=1&sn=c108e8c587da407711041361c00a93b4": "【代码审计】命令执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900550&idx=1&sn=526bb13bc04d12e468dddee443750f21": "三星MagicINFO严重漏洞CVE-2025-4632:从路径遍历到Mirai部署的技术细节与企业应对之道", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487486&idx=3&sn=b1a886e267100e64534156c33ef90cf8": "泥煤的,又一次RCE", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247512208&idx=1&sn=fb980855429312b7df8e91c68c4ae82a": "若依(RuoYi)框架漏洞战争手册", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247490438&idx=1&sn=68526a59f2dd824a09143399bb9644d5": "记一次某OA渗透测试有意思的文件上传漏洞挖掘经历以及分析", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487931&idx=1&sn=619675b41f1728c3b4c80174458886fc": "英特尔CPU再曝高危漏洞!新型内存泄漏与Spectre v2攻击卷土重来,全球数亿设备陷风险", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795139&idx=3&sn=b778c50dbe57ec7066741e4845436a97": "英特尔新漏洞:Spectre 和 Meltdown 问题以新面貌重现", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247492334&idx=1&sn=c5ffc39a73e459eb12fe56edc031abd0": "一个漏洞挖掘小工具 - SeeMore", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492284&idx=1&sn=875e75a2f1e03dc7730882f221ffbe21": "漏洞预警 西部数据 NAS chk_vv_sharename.php 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497482&idx=1&sn=9edef1806d3d5a33f39a791c117051b1": "【漏洞通告】Tornado日志解析器拒绝服务漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497482&idx=2&sn=c4323bf9b8cda0593c734ced7ac81e19": "【漏洞通告】FortiOS TACACS+身份认证绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251875&idx=1&sn=9a043be40ff683ba496f06b8b7751a0d": "全球政府邮件系统沦陷:黑客利用XSS漏洞发起大规模间谍活动", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487486&idx=6&sn=ca5cfa1a13553a7ca1e6275272df5480": "【Web实战】一次空白页面的“妙手回春”嘎嘎出严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493151&idx=1&sn=c7bbbfb0fef994b47cac641836483e73": "漏洞预警 | Apache IoTDB远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493151&idx=2&sn=6c55c91bfdbdbe5d7acda8f94b544575": "漏洞预警 | 金和OA XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493151&idx=3&sn=10037ca1fbd8c7838d112015fa3f790a": "漏洞预警 | Tornado日志解析器拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3OTYxNDY1NA==&mid=2247485450&idx=1&sn=dd0751e325f02ecd7aada09b208840e7": "Src捡钱6,为什么大佬总能挖到你挖不到的漏洞(可自定义参数版jsonp、cors)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493865&idx=1&sn=ab72cfaaef6a0440b47f2283c17311d7": "谷歌修复了可能导致账户完全被劫持的Chrome漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503412&idx=1&sn=8f8313d3cfa03a94be6998f6c304de66": "雷神众测漏洞周报2025.5.12-2025.5.18", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506397&idx=1&sn=58e38d3ae77e44376fa837ad9099a059": "入侵我的车,甚至你的车——大众汽车应用程序存在安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247492198&idx=1&sn=cad62031ef7ee2bd2f307232c09abef9": "山东大学 | MiniCAT:了解和检测小程序中的跨页面请求伪造漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247499088&idx=1&sn=c4a90fdea61d8a9d2f7ef91d73d10f06": "poc | Windows 远程桌面网关 (RD Gateway) CVE-2025-21297介绍", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIxNzEzNA==&mid=2247491401&idx=1&sn=fa3e959a55bb17dc4f2084e820af9475": "【漏洞挖掘案例】从XSS到\"RCE\"的PC端利用链构建", "https://mp.weixin.qq.com/s?__biz=MzI0OTIwMjE2NA==&mid=2247485943&idx=1&sn=dbecf68b3773ff21ac6c9ab455ef6eb4": "爱奇艺SRC暂停漏洞测试活动公告", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136889&idx=2&sn=c7432e13630d9efef7be4061833da185": "英特尔CPU曝重大安全漏洞,可导致内存泄露;美国议员以安全为借口呼吁禁售TP-Link网络设备| 牛览", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489846&idx=1&sn=df694489db4ad9de1d2a39ba6c5b3684": "Kali实战:安全漏洞一网打尽", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247548030&idx=1&sn=881b572138f84344fc12533b1b8678a4": "网络安全20年:从漏洞破解到AI防御的生态跃迁", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492550&idx=1&sn=5d99ff16c3e149c4423f1197748e51f1": "Linux 内核补丁管理:漏洞防御新策略", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247492241&idx=1&sn=fa7d625f24c0e34719f1ff525f13ff0e": "推荐一个专为新手打造的漏洞挖掘实战圈", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069708&idx=4&sn=21c7295802162aa16f8b54670e5a4c13": "【安全圈】glibc漏洞使数百万Linux系统面临代码执行风险", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495987&idx=2&sn=e622c43d6da910f8fc0ddd92ba8042f8": "上周关注度较高的产品安全漏洞(20250512-20250518)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529902&idx=2&sn=f713e875bb3bf68bb2fe57894c044751": "Zyxel USG FLEX H 系列 uOS 1.31 权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk3NTEyMzQzOA==&mid=2247485956&idx=1&sn=a9af193167f80c63701522ddd5c41e18": "Jboss反序列化漏洞(CVE-2017-12149)漏洞复现nc与javaDeserH2HC反弹shell", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512208&idx=1&sn=764625667fa8c9d62423b2d8f4ff7c13": "黑客眼中的NFC:Mifare安全漏洞大揭秘", "https://mp.weixin.qq.com/s?__biz=MzkzMTYyMDk1Nw==&mid=2247483832&idx=1&sn=ea46c8f3ea361b02418e27a68c36cfb3": "WHMCS 7.x 存在恶性漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247495987&idx=1&sn=796fe8469ee615c3dd62613886f006b7": "CNVD漏洞周报2025年第18期", "https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247526917&idx=2&sn=52a64842485dfa4957954d7bf7157672": "2025年4月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321137&idx=4&sn=82946ed1a6eb79ec67accaf8a487ab2d": "Windows远程桌面网关UAF漏洞可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503417&idx=1&sn=e3066a86595352998f8e826f3a2435cf": "安全热点周报:Fortinet 修复了 FortiVoice 攻击中利用的关键零日漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458594242&idx=2&sn=a1d093e798d1c33be4ce0d793de7964b": "高危WordPress插件漏洞威胁超1万个网站安全", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506362&idx=1&sn=a448e7af31b543bfe00e841f0a1c708d": "每周网安资讯 (5.13-5.19)| Siemens SIMATIC PCS neo漏洞预警", "https://mp.weixin.qq.com/s?__biz=Mzk0MzYyMjEzMQ==&mid=2247487617&idx=1&sn=5876a6a3fbb1b810133e786da2badaa5": "CVE-2020-1472NetLogon权限提升", "https://mp.weixin.qq.com/s?__biz=MzkyNjcyODI1OA==&mid=2247484765&idx=1&sn=b9a2b63ae4870eaa17509553d1d15a2a": "Java代审&后台计划任务中的RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497614&idx=1&sn=e6277cb245dd6b2a5691854377357140": "逻辑漏洞中一些自己总结关于验证码的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg4NzAwNzA4NA==&mid=2247485216&idx=1&sn=17314e6e6088de7b43fa8fd275de137a": "原创—中国乃至世界进入后门时代,挖漏洞该怎么挖", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516652&idx=1&sn=35138d273cf5a0924a961337315fdb87": "红队资产发现工具 -- ICPAssetExpress(5月19日)", "https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486627&idx=1&sn=e2683b56e8df633164681dd09a46657d": "​​新型 CPU 漏洞曝光!英特尔芯片陷内存泄露风险", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490098&idx=1&sn=904da7408fb841188b7ceee5ba2756f6": "【AI漏洞预警】huggingface transformers拒绝服务漏洞(CVE-2025-2099)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321137&idx=3&sn=4af04e70e04676869165146646aff900": "Pwn2Own大赛:黑客利用JavaScript零日漏洞攻破Firefox的技术细节", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491514&idx=1&sn=2750735b9efbf0d315335bce4609eaf3": "DocsGPT 远程命令执行漏洞 (CVE-2025-0868)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321137&idx=1&sn=85d1a5323f8b408b84356624a99f4290": "推荐一个专为新手打造的漏洞挖掘实战圈", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487577&idx=4&sn=2b3bbda702b95680bb8469041a55a91f": "【Web实战】一次空白页面的“妙手回春”嘎嘎出严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDU5MzY0NQ==&mid=2247484646&idx=1&sn=beff017a744912f0d5e8202ca0494fa8": "当漏洞成为“数字战争”的弹药,谁能改写攻防规则?", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487940&idx=1&sn=ed7c9a4905f62eeeec22d209bba65844": "Firefox紧急修复两大零日漏洞!Pwn2Own柏林大赛黑客斩获$10万奖金", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490098&idx=2&sn=477c546c495a1d59f2a34d685c7e88cc": "【漏洞预警】Invision Community themeeditor远程代码执行漏洞CVE-2025-47916", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503311&idx=1&sn=17cd63a2dc5bb1c0a1bbcf1dc7d0fd9a": "【成功复现】WordPress plugin Kubio AI Page Builder路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493169&idx=3&sn=3651274bf140c0b87299a7ee5ced3a89": "漏洞预警 | 飞企互联FE业务协作平台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247485139&idx=1&sn=3539268a1eb3de11e87f268ebedcbd11": "关于账号相关漏洞的一次测试", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494312&idx=1&sn=fae73d6e67898ee15bb7fb2ba7df7b11": "一个高性能的目录扫描工具,专门检测和验证 Web 中的路径遍历漏洞。通过异步并发扫描和智能 WAF 绕过技术,快速发现漏洞,", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247485691&idx=1&sn=c6cdd8256b68d350a4402fa121501d81": "kafka未授权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzM2MjM0OQ==&mid=2247496619&idx=1&sn=cef5546181d6f6ba22d6e75da46caf4d": "SRC实战案例分享-验证码漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487935&idx=1&sn=0fd72220a31b600e0c52b18be2d3e2eb": "年薪30W+的秘密:网络安全\"挖漏洞\"必备的4类工具与漏洞复现指南", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795151&idx=2&sn=fbe72b2822bdbe8de6113691b2162b1b": "大众汽车应用程序漏洞可致车主信息和服务记录泄露", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795151&idx=3&sn=293aecf04fcabee81298a4fbcda70c1f": "GNU C(glibc)漏洞可以在数百万 Linux 系统执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484612&idx=1&sn=9ad84b9e19875df2e023e58224b89502": "若依4.8.0后台rce漏洞复现及内存马利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493169&idx=1&sn=c05c9a489dc07f3b2ddfdd8da6607b89": "漏洞预警 | FortiOS TACACS+身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493169&idx=2&sn=7541877a92fcd02d5022cd061a332eb4": "漏洞预警 | 泛微E-Office SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247488386&idx=1&sn=b9796901565c32f9f5e18643c53c5977": "PDF 生成器漏洞利用:查找 PDF 生成器中 SSRF 漏洞的完整指南", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487577&idx=6&sn=0d1f02515f463f5488a8ace5e841d877": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655279355&idx=1&sn=48be8d46daba1f043071df066861692a": "2025年4月企业必修安全漏洞清单;Nmap网络安全审计技术揭秘", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650183840&idx=2&sn=0af114301702b4ae7a8abbb1292f6b31": "微步再获评CNNVD“高质量漏洞优秀贡献奖”、“年度优秀技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=MzkzOTIwOTkxMQ==&mid=2247484065&idx=1&sn=80efa6ce84afb40f4fbefc74569e4e41": "Clash Verge 1-Click RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyMDEzMTA2MQ==&mid=2651168480&idx=1&sn=50dcda92c002bd51ea2737f3532de5c6": "印度阿三安全研究员,欺骗漏洞赏金全过程!", "https://mp.weixin.qq.com/s?__biz=Mzg2NDcwNjkzNw==&mid=2247487511&idx=1&sn=26c6c9c168d84586c8478f7b2dedd2d1": "CNVD-2023-04620 金和 OA XXE 漏洞分析复现", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610809&idx=2&sn=186c2134c645104b6d44da9bb54bd25e": "文末赠书|当漏洞成为“数字战争”的弹药,谁能改写攻防规则?", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900559&idx=1&sn=0a7c9fe1e7debd1234cb5693b067a809": "SAP漏洞风暴升级:BianLian、RansomExx及更多团伙利用组合拳攻击NetWeaver", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499864&idx=1&sn=0ac97ac6631f4bed37dc9d65de527d8d": "CNVD漏洞周报2025年第18期", "https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247489110&idx=1&sn=bd7f08bd623117ea3652505c80ba5da9": "英特尔CPU再曝高危漏洞,新型内存泄漏与Spectre v2攻击卷土重来", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247550119&idx=1&sn=c25a8b23e5ef7622e645d208c419b59f": "EDUSRC | 两个证书站小程序漏洞挖掘思路及方法", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247490386&idx=1&sn=69a3eb83c41266c5d0ebd2e3c0558e2e": "IDOR_detect_tool【API越权漏洞检测工具】", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610809&idx=3&sn=d60cac29d0d8c32877b922b55df29182": "高危WordPress插件漏洞威胁超1万个网站安全", "https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247491153&idx=1&sn=b45e5f6c7bba1d0d1d9a973478640211": "CNVD-2023-04620 金和 OA XXE 漏洞分析复现", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493874&idx=1&sn=66206ef8b1b21a6d4d0f75b5f2bb1e87": "Mozilla修复了在Pwn2Own Berlin 2025上公开演示的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582421&idx=2&sn=4d652cfed9e7b0c3f05bb935d717f71f": "安全动态回顾|65款违法违规收集使用个人信息的移动应用被通报 微软5月补丁星期二修复72个漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495058&idx=1&sn=9ba60513d1aedc46385f088671127de5": "2025攻防演练必修高危漏洞集合(1.0版)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069726&idx=4&sn=6e0326f5a7bbfaabc1fb97d20777862b": "【安全圈】CISA最近将Chrome漏洞标记为被积极利用", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501089&idx=2&sn=1ebe4873b80d78327d69e54c096a745c": "【漏洞通告】glibc静态setuid程序dlopen代码执行漏洞 (CVE-2025-4802)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321374&idx=3&sn=6a3bba25915e6ce2b498ef03970fc4e8": "ChatGPT漏洞允许攻击者在共享对话中嵌入恶意SVG与图像文件", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487438&idx=1&sn=ef49a682ff862cf1972a2c7917274ba1": "Ghost Route 检测 Next JS 中间件绕过漏洞 (CVE-2025-29927) 的攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069726&idx=2&sn=c20c0d51d02d13694b5fc4bca2f03dd4": "【安全圈】黑客在Pwn2Own柏林大赛中利用28个零日漏洞斩获107万美元奖金", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136902&idx=2&sn=5c62a5d8b7822d419bd155094dfa73a3": "大众汽车应用程序再曝安全漏洞,泄露车主敏感信息;410GB TeleMessage泄露数据被DDoSecrets收录 | 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321374&idx=1&sn=e9577cbfc42d88f3379443abc9ae10f7": "HackProve国际漏洞狂飙赛来袭!奖金翻倍、积分冲榜,全球开启!", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514384&idx=2&sn=fcfc80f16f102b6fec2c364408384b51": "Pwn2Own 2025柏林黑客大赛:发现28个0day 斩获百万美元奖金", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651135729&idx=1&sn=d51040d6c10c0666031d7f8dcaf25fb4": "行业实践|电力行业数字化转型,应用风险漏洞谁来防?", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489854&idx=1&sn=1e0a63504777786c01f77ea4604a9551": "Mongoose 搜索注入漏洞复现与修复", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458594279&idx=2&sn=bba65c83cfc13e29b1d3bcebbe562ed2": "Pwn2Own 2025柏林赛落幕!29个零日漏洞曝光,百万奖金花落谁家?", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490103&idx=1&sn=432278ec94ada797568108539241ac0b": "【AI漏洞预警】Infiniflow Ragflow账户接管漏洞CVE-2025-48187", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491589&idx=1&sn=24950336ac9f53aa1ec1584c73a58f5c": "BurpAPI越权漏洞检测工具|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502414&idx=5&sn=7162f099562c67bb40635cb4eb23f583": "SysAid SysAid On-Prem 未授权 XML外部实体注入(XXE)漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1NTM4ODIxMw==&mid=2247501349&idx=1&sn=59bf10bba063b60bdb410a2b2227295e": "漏洞速递 | CVE-2025-29927漏洞(附EXP)", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502414&idx=3&sn=edae5292526e0e40d7c0ade7557df90e": "Apache IoTDB 需授权 代码注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497628&idx=1&sn=61a9e680026304bda5658427d781b52b": "RCE", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502414&idx=2&sn=e08d06704ad18be109b3687efc5c973a": "Ivanti Endpoint Manager Mobile 需授权 代码注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502414&idx=1&sn=e436f090f20203dae2788470d2e830f7": "Gnu Glibc 逻辑缺陷漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502414&idx=4&sn=a35a1079fd3a884216dc28f8d3af5297": "Fortinet FortiOS 身份验证缺陷漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497487&idx=1&sn=e40cf31a2c927023db8183d1175e2705": "【漏洞通告】glibc静态setuid程序dlopen代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487591&idx=7&sn=f7d37a10fbe119e782c7c4c2abf36665": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493178&idx=1&sn=0d4028eaae2e2be533e9e2773f0d5df7": "漏洞预警 | Optilink管理系统注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502414&idx=7&sn=72b2561ef284f3206a5cbf4f54eba279": "Google Chrome 访问控制不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487591&idx=5&sn=e28dd77522b9412f1e50fad4a4c40318": "【Web实战】一次空白页面的“妙手回春”嘎嘎出严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493178&idx=2&sn=5c4ca05702c3759560ca3f920b04e29b": "漏洞预警 | 力软敏捷开发框架远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493178&idx=3&sn=e9da86edd858bb077c5e6134e069540a": "漏洞预警 | NetMizer日志管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247487145&idx=1&sn=c089110d0633e7f0798f8191da30eaef": "商用漏洞扫描器的盲区:为什么越权漏洞总被漏检?", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247518934&idx=1&sn=597eb63142bac29bc6e2b8799d93c038": "30个云安全漏洞的发现与利用技巧,非常有用!", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655279619&idx=1&sn=c2e1e6d269e4a7a134eaed7013d7c6fd": "2025 HVV必修高危漏洞集合", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247489290&idx=1&sn=a19bddad3e733eb6b68ee4c010a45571": "Hazy Hawk DNS漏洞攻击:知名机构云资源被劫持,网络安全警报高涨", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491536&idx=1&sn=e08651804979dee3ed4ad293816140a0": "美特CRM upload3.jsp 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502414&idx=6&sn=ff90534f91198265ab19c5d635974345": "SysAid SysAid On-Prem 未授权 XML外部实体注入(XXE)漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTU2ODQ4Mw==&mid=2247487296&idx=1&sn=4a1242ec620fb15daa80efad6cf99ae6": "基于路由转发导致的权限认证绕过漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5NzQzNTc0Ng==&mid=2247502414&idx=8&sn=5608f451446d34b3c8f6f699ea83c692": "Nodejs Node.Js 异常处理不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795169&idx=1&sn=d29b06d7eb3b372dd4945ba1c3820d05": "俄 APT 组织利用0day漏洞和擦除器加强对欧洲的攻击", "https://mp.weixin.qq.com/s?__biz=MzkyMTMwNjU1Mg==&mid=2247492295&idx=1&sn=f6fe03aa31417ece81388366d75a5ef2": "漏洞预警 美特CRM mcc_login.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1NTM4ODIxMw==&mid=2247501350&idx=1&sn=ebf4178a51e69ff7028825f78d0fb3d0": "漏洞速递 | CVE-2025-0868 RCE漏洞(附EXP)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493883&idx=1&sn=7dedce75c1a1e0e52ab06db60c0770a7": "4G通话(VoLTE)漏洞致仅需拨号即可定位任何O2运营商用户", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523071&idx=1&sn=8d8429be1cebb442aaca091ca13012be": "火狐修复Pwn2Own大会上利用的2个0day漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491121&idx=4&sn=15052ca758a156db9fc23f0994da5c90": "30个云安全漏洞的发现与利用技巧,非常有用!", "https://mp.weixin.qq.com/s?__biz=MzkyNTYwOTMyNA==&mid=2247485405&idx=1&sn=beb431317f63213a3b1ce3caf311a704": "当漏洞成为“数字战争”的弹药,谁能改写攻防规则?", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582436&idx=1&sn=12b06818505f402adb0a43d0f8fed169": "黑客在Pwn2Own利用VMware ESXi和Microsoft SharePoint零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463062&idx=2&sn=b4a9cf80bd7a6eebe34ae2ff379c6f1b": "信息安全漏洞周报(2025年第20期)", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261150&idx=1&sn=9f9b5e82296ea4a4ccb98a8c4d178877": "【CVE-2025-40634】缓冲区溢出 EXP 公布", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545758&idx=1&sn=bb67c0afeb1a3252328109616e458ff4": "【漏洞预警】全球数万设备受影响!Clash用户小心:暴露Web控制端口=门户大开!", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247492458&idx=2&sn=d9dee6fdd77f7958e4c1c7017d219fcf": "HackProve国际漏洞狂飙赛来袭!奖金翻倍、积分冲榜,全球开启!", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489294&idx=1&sn=f072386155370c5ef7445d8624b8be07": "【漏洞通告】VMware vCenter Server命令执行漏洞 (CVE-2025-41225)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524452&idx=1&sn=51c19d60867376f7f41d34025b31b63a": "【漏洞通告】VMware vCenter 认证后命令执行漏洞(CVE-2025-41225)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489775&idx=1&sn=3ed3caadde8d55b8bc21e59f7074c953": "某礼品卡电子券收卡系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458594290&idx=1&sn=8c9c75889765c142a9cadf01dc6feaec": "Redis 漏洞分析——lua 脚本篇", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490108&idx=1&sn=437c672c043c061be53714a52ae1cc38": "【漏洞预警】FortiOS TACACS+身份认证绕过漏洞(CVE-2025-22252)", "https://mp.weixin.qq.com/s?__biz=MzIyMDEzMTA2MQ==&mid=2651168499&idx=1&sn=4796889b109dc91d051a195eb002e9c4": "2025年十大最佳漏洞管理工具", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247485022&idx=2&sn=90f73f6b0dac3ec07c2eb4bff9c96f3f": "CVE-2025-47916:Metasploit模块开源", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523082&idx=2&sn=4d5a25d58482d98bdb3b13320e03bb92": "NIST、CISA联合提出漏洞利用概率度量标准", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529982&idx=2&sn=83dfd9aa76d03b4d22e22c2638cad422": "突破限制模式:Visual Studio Code 中的 XSS 到 RCE", "https://mp.weixin.qq.com/s?__biz=MzU2NjI5NzY1OA==&mid=2247513025&idx=1&sn=8995ce6d3df8a1b9090755df52be6729": "OPC UA协议与漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484855&idx=1&sn=fbd0408fe1e921d65adf6f736435cfa6": "安钥®「漏洞防治标准作业程序(SOP)」征文启示 [2025年第20期,总第38期]", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523082&idx=1&sn=1ddbeb4f3e454706eafa9900777eed09": "VMware 紧急修复多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490397&idx=1&sn=d297b27606dab7d510399b202924f348": "【AI风险通告】vLLM存在远程代码执行漏洞(CVE-2025-47277)", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506411&idx=1&sn=f203edbcf801302cc15cf12841f0ab3b": "我的第一个漏洞赏金计划:我如何赚到 1,000 美元", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096252&idx=1&sn=2f0f81d26d721040020ceab8d5bdf46e": "VMware ESXi & vCenter 执行任意命令漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497345&idx=1&sn=ce91a7ca3849f39847a2580b90e00d1d": "一个高性能的目录扫描工具,专门检测和验证 Web 中的路径遍历漏洞,通过异步并发扫描和智能 WAF 绕过技术,快速发现漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491604&idx=1&sn=5c9fdbe2381fa02b0b113c2d4d1946e8": "AboutSSRF一款基于Burpsuite MontoyaAPI的黑盒SSRF漏洞自动化检测插件", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486690&idx=1&sn=1edf88a3285d6b7f9ce75f4029eadb8e": "【漏洞预警】VMware VCenter Server 命令执行漏洞(CVE-2025-41225)", "https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247544884&idx=1&sn=82fe2afa774e253e020af6d28ecf0d9e": "【渗透实战系列】|54-小程序渗透记录 通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzkyNjczNzgzMA==&mid=2247484547&idx=1&sn=6e16e54e1a96a10f763626e990d0c081": "漏洞挖掘—利用查询功能获取敏感信息(2)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247529982&idx=3&sn=cd0ae68d9599ac5c66a1868fa35a2305": "发现与 IXON VPN 客户端相关的三个新漏洞,可导致本地权限提升 (LPE)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492979&idx=1&sn=9a26d330e98f20f99a943d09bff5dbe7": "黑客在柏林 Pwn2Own 漏洞竞赛中凭借 28 个零日漏洞赢得 1,078,750 美元", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321451&idx=3&sn=821456f16440650fb03a4c3b61a55746": "vLLM 曝高危远程代码漏洞,AI 服务器面临攻击风险", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484855&idx=2&sn=8e23287c2d5da0a9ea4574bc7fb17b8f": "【漏洞处置SOP】飞致云DataEase未授权访问控制不当漏洞(CVE-2024-30269)", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247554991&idx=1&sn=349b4d22b12fcd3a515d02f35327005e": "车载网络通信“CAN总线”的安全与漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136952&idx=2&sn=69e69672adb30bdae6830130589359c4": "攻防技术观察| 试验性攻击工具利用Windows系统信任机制屏蔽Defender;可精准预测漏洞被实际利用概率的评估指标体系发布", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488490&idx=1&sn=a31e9acc3c762519b05168b72ae96024": "SpringBlade api∕blade-system∕menu∕list接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900577&idx=1&sn=c7f08fd41d1333cccb324baacf6a8b5d": "Samlify SSO 签名绕过 (CVE-2025-47949):从XML签名本质到纵深防御", "https://mp.weixin.qq.com/s?__biz=MzU0MDI1MjUxMg==&mid=2247533628&idx=2&sn=44ccb79264efbbd0254cff57b4c4a08a": "2025攻防演练必修高危漏洞集合(1.0版)", "https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247494686&idx=1&sn=1e20b9324dc3599560e8064fd4f47aa5": "工具推荐 | RCE命令无回显利用工具", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490120&idx=1&sn=ad898403409d5bc4b04695a8210c42a3": "【高危漏洞预警】VMware VCenter Server 命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MDI1MjUxMg==&mid=2247533628&idx=1&sn=9cc7fec6b77c1987729a9c01de53e3dc": "漏洞安全亦是国家安全|斗象晋级CNNVD国家漏洞库首批“核心技术支撑单位”", "https://mp.weixin.qq.com/s?__biz=Mzg3Mjg4NTcyNg==&mid=2247490453&idx=1&sn=a2248851ef6d20228658802b570c5d56": "漏洞复现|无垠智能模糊测试系统实战复现OpenSSL高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530046&idx=1&sn=2eaab2ebd8595d1d3ddb332557c83a59": "CVE-2025-26147:Denodo Scheduler 中经过身份验证的 RCE", "https://mp.weixin.qq.com/s?__biz=MzU5Njc4NjM3NA==&mid=2247496599&idx=1&sn=9cdd2833b203dbc756228948f6be0fad": "ChatGPT漏洞允许攻击者在共享对话中嵌入恶意SVG与图像文件", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247491702&idx=1&sn=cc0ac523b86b876c52a60d18ec785bc4": "某礼品卡电子券收卡系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523092&idx=2&sn=a5febb5cf97d5b007d31e1d71c58244a": "满分严重漏洞导致 MB-Gateway 设备易受远程攻击", "https://mp.weixin.qq.com/s?__biz=MzkzMTYyMDk1Nw==&mid=2247483853&idx=1&sn=e0efcfaf5be3978ccf6ebc28bde77a73": "代理工具 Clash Verge 客户端出现新的 1-Click 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247499166&idx=1&sn=b24591342347f5a63206029ea9b03872": "Microsoft Telnet 客户端 MS-TNAP 服务器端身份验证令牌漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503322&idx=1&sn=f502a2413a0ef8a73683a55f569d135d": "【成功复现】Gladinet CentreStack反序列化漏洞(CVE-2025-30406)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490402&idx=1&sn=0be91c0559fd74fdaa7e1d690ce0605d": "【风险通告】VMware vCenter存在命令执行漏洞(CVE-2025-41225)", "https://mp.weixin.qq.com/s?__biz=Mzk1Nzg3ODkyNg==&mid=2247484099&idx=1&sn=658a1b6d2a58a76b2c10a229e1596104": "KEDACOM phoenix监控平台upload_fcgi任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490120&idx=2&sn=d9f4eab74bad4582854138a17f05b0a9": "【严重AI漏洞预警】vLLM PyNcclPipe pickle反序列化漏洞(CVE-2025-47277)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523092&idx=1&sn=53658193138b944b76bad2de5c9801f5": "Setuptools 漏洞导致数百万 Python 用户易受RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096259&idx=2&sn=d8d2730e6657e88318f2e82adfe92123": "多个 GitLab 漏洞使攻击者能够发起 DoS 攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497351&idx=1&sn=dbd0b485f6a94cd50d1e7225916730ce": "一款专为安全研究人员和白帽子设计的漏洞赏金工具", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491545&idx=1&sn=15d26045141557b049c60a4f0198973d": "Ivanti EPMM 未授权远程代码执行漏洞(CVE-2025-4428)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491624&idx=1&sn=d3d39952455d901dbe67aa71b6c396da": "渗透工具箱V8 集成Web扫描、漏洞利用、抓包、免杀等等|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501099&idx=2&sn=33695589e4a03b131b18ffb1a4373bdb": "【漏洞通告】VMware vCenter Server认证命令执行漏洞(CVE-2025-41225)", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516677&idx=1&sn=8bd54d9cb3ad82b65bcf77877a9bf7f4": "漏洞赏金工具 -- BBtool(5月21日更新)", "https://mp.weixin.qq.com/s?__biz=Mzg2MjgwMzIxMA==&mid=2247485153&idx=1&sn=df4a9596cf936fe6efbd34bb4cd75520": "JWT原理及常见漏洞详解", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519372&idx=1&sn=50db0c7ee25f800969366f8c73e9e310": "PDF 生成器漏洞利用:查找 PDF 生成器中 SSRF 漏洞的完整指南", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247554886&idx=1&sn=b92b2a11c128532122d5ca74de178e49": "域0day容易利用吗", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497634&idx=1&sn=0365b5a0a464632f064e7d4224b145b7": "src漏洞挖掘必备利器", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247488640&idx=1&sn=41e022b30064dc14da381bd803fe3c13": "前瞻对抗|这大概是首次,AI挖出了Linux内核可利用0day", "https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207157&idx=1&sn=7756328ed7d6b73c0e9d042ccf620f64": "朱雀实验室协助vLLM修复CVSS 9.8分严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484085&idx=1&sn=e447afc95940697dfe60767d5170f6ad": "【漏洞预警】vLLM PyNcclPipe pickle反序列化漏洞(CVE-2025-47277)", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506453&idx=1&sn=1ba9bb6c10d82cb7347e6c5d5f3c4411": "Deep Recon 发现未经身份验证的上传和 IDOR 漏洞 — 获得赏金 $$$", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516684&idx=1&sn=ad218936b1c1986fd8805f5cd5d7c9c6": "某若Y Vue漏洞检测工具(5月16日更新)", "https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647796499&idx=1&sn=b7283c7a51235fe2e3c43d4fe4f742e2": "SAST国标分析︱灵脉AI深度兼容GB∕T 34943∕34944-2017源代码漏洞测试规范", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247500026&idx=1&sn=992c5ad912c8e9fa7a9ddbf86876feeb": "浅谈src挖掘中——文件上传和XSS漏洞的组合拳", "https://mp.weixin.qq.com/s?__biz=MzU4Mzc4MDQyOQ==&mid=2247484786&idx=1&sn=4e9778c996104c01de488b160caa5358": "Clash Verge 客户端 1-Click RCE 漏洞与蜜罐利用分析", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484091&idx=1&sn=3e944b94f1673ef22c24744564aa4aa6": "【漏洞复现】Grafana XSS &SSRF & 账户接管(CVE-2025–4123)", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247491112&idx=1&sn=af7acbe749b1944b9066bcfac6a77e06": "能信安:漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU2MzY1NjU3Ng==&mid=2247485927&idx=1&sn=9db456328bbea7bde15e5f127405dc36": "企业内部安全漏洞修复流程的建立与思考", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064169&idx=1&sn=803b3b6b86b1bf480ceaca8bb9dabf2f": "信息安全漏洞周报【第023期】", "https://mp.weixin.qq.com/s?__biz=Mzg3MTU1MTIzMQ==&mid=2247497184&idx=2&sn=bf66200c70e5ee156d8588806cf02fc6": "等保测评中漏洞扫描:筑牢网络安全防线的关键利器", "https://mp.weixin.qq.com/s?__biz=MzIyMjQwMTQ3Ng==&mid=2247491417&idx=1&sn=91d65e10514e6fcaf5d6ac79e6a89331": "【国际视野】美国国家标准与技术研究院推出识别IT漏洞利用的公式", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490126&idx=1&sn=607c8cc65f9c89318775ac76f0b30de8": "【漏洞预警】Grafana未授权跨站点脚本攻击XSS&SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523102&idx=2&sn=3eb6fe83ca06d69dbd0a16a7c73dcde3": "Grafana 紧急提前修复已被公开的XSS 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514405&idx=2&sn=95d5bbef875789924cf08280da99f6fe": "美国NIST、CISA联合提出漏洞利用概率度量标准", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523102&idx=1&sn=13f091a5db5a8f5cb5088945cf935fee": "BadSuccessor 漏洞究竟有多严重?Akamai 和微软意见不一", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499721&idx=1&sn=05d535e772a6012e657bcb94e57321dd": ".NET WebShell 绕过 EDR 监控,不调用 cmd.exe 也能实现命令执行", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492644&idx=1&sn=e8e146f8565e64702729b69dad2a78f4": "疑似俄罗斯APT28组织在全球攻击活动中利用0Day漏洞——每周威胁情报动态第223期 (05.16-05.22)", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261177&idx=1&sn=73668e9ea66320d7b0d76167ac1dfd2c": "【CVE-2025–4123】:Grafana SSRF 及帐户接管利用", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247488245&idx=1&sn=04eeae4a62701ab731c6f9e5bc6df6c7": "漏洞还是功能:MCP安全与逆向工程实践的权衡", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247490390&idx=1&sn=051b605eb42fcf605c275e5dba3a8d73": "XunFeng【适用于企业内网的漏洞快速应急,巡航扫描系统】", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247485541&idx=1&sn=80f90e21aa20e4e81632597c68ebabe5": "全网震颤!黑客利用文件上传漏洞化身“虚空主宰”,百万服务器集体沦陷!", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247517193&idx=1&sn=94bdf0006218aee0a2723c1c48d159ff": "漏洞预警|Clash Verge 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795216&idx=1&sn=1d1b623d8520b78ff09b21f3fad1d925": "ViciousTrap 威胁组织利用思科漏洞用 5,300 台受感染设备构建全球蜜罐", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487971&idx=1&sn=e1c2e9da1dc3b83253e0ac336a42060c": "ViciousTrap利用思科漏洞构建全球蜜罐网络:5300余台设备沦为监控工具", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487813&idx=8&sn=305b1ec9ee245a70aee3824b0c92a73c": "通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795216&idx=2&sn=d7cde799c6ed900c2698161c0c56e9e6": "因不满漏洞分级,发现者公布WinServer2025 0day细节", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247485423&idx=1&sn=d9bde7cd03a3dc78b49d5fea5db6ef8f": "代码审计| U8 FileManageServlet 文件读取漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520685&idx=1&sn=2148af7e1e40d55f1ed68fc0748a6e17": "Apache Httpd 常见漏洞解析(全)", "https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247507223&idx=1&sn=b55962eb35d5b103d92307f7e2f0b138": "【一周安全资讯0524】《2025年深入推进IPv6规模部署和应用工作要点》印发;英特尔CPU曝重大安全漏洞,可导致内存泄露", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491626&idx=1&sn=f55c457d659713b518df8651942f1537": "渗透工具箱V8 集成Web扫描、漏洞利用、抓包、免杀等等|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530109&idx=1&sn=75ff148b005e2bce0789e1879e64c919": "Linux内核漏洞利用CVE-2025-21756:Vsock 攻击", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487813&idx=6&sn=82b64fad1360284dfe652b3f1df2aea8": "【Web实战】一次空白页面的“妙手回春”嘎嘎出严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491565&idx=1&sn=b56914958f73bce32eb0443897986322": "杭州九麒科技 BigAnt-Admin uploadMultipleFile.html 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYwMTY5MA==&mid=2247522496&idx=1&sn=03908f5716152bca098c167b96452dd1": "翻倍回归,实物好礼。端午挖洞,漏洞必“粽”!", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506454&idx=1&sn=b4531761caf101bef0abf29b9897baca": "Grafana CVE-2025-4123:SSRF 和账户接管漏洞完整解读", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487813&idx=1&sn=c8f2fc003c6b314c308c9b2c966f62db": "全网首发!CVE-2025-24813 Tomcat 最新 RCE 分析复现", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247489320&idx=1&sn=f7ef174c29d419e8e8eb311fe56b09b3": "黑客利用Cisco路由器漏洞建立大规模Honeypot网络,全球感染5300多台设备", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247490577&idx=1&sn=5caabf72c585d8dfee19437414939fee": "【src】SRC漏洞挖掘|优惠券叠加思路分享", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487871&idx=1&sn=931747ed01161c8355ec47b3b1450df2": "经典华为路由器漏洞复现详细分析(包括整个漏洞链)", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485719&idx=1&sn=80c65694743eb5e5397583d0620d9b99": "通过隐藏接口发现ruoyi和druid漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530175&idx=3&sn=ed3f3dfe8ff9ec12404b9144c9d870e5": "Windows Server 2025 漏洞(BadSuccessor)暴露 Active Directory 帐户", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096267&idx=2&sn=8244bc202073633729ee396fd62547de": "Canon 打印机存在获取管理员权限漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520697&idx=1&sn=51ca3d136ea125c1f8234233268645d9": "PHP漏洞在白盒审计中的技巧(1)——PHP弱类型特性", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491575&idx=1&sn=0be139de91d844441cd7997712973fd0": "万户 ezOFFICE govdocumentmanager_judge_receivenum.jsp SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096267&idx=1&sn=d22225f6ef431db6c818763e332e5630": "Apple XNU 内核提权漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321719&idx=3&sn=26247fefa30803d1ea9eb6b0bf5265bf": "GitLab Duo AI编程助手漏洞可让攻击者通过隐藏提示劫持AI响应", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247488480&idx=1&sn=8afdd1d2cfe9f2e9f4658c8ea95d2469": "XXE:高级 XXE 漏洞利用完整指南", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487407&idx=1&sn=b0189ed709faf9ebae19ae93fbff7191": "Java代码审计 | Alibaba Sentinel SSRF漏洞代码审计", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652115887&idx=1&sn=b4d3b673f74438831977b77e70d5fcf1": "汉堡王备份系统RCE漏洞被4000美元售卖", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491658&idx=1&sn=76946720de56c1de24e078e3b915fce0": "从 SSRF 到 RCE:一次众测Fastjson<=1.2.68反序列化RCE过程|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652115889&idx=2&sn=db33013e07459b07eef08fde86cce8db": "某医院小程序系统存在水平越权漏洞被约谈", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491585&idx=1&sn=52371eb8c1d25ba8b609667758a65c0c": "宏景eHR searchCreatPlanList.do SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497458&idx=2&sn=83b3d6b176b026d4e3dd7f6ad53ca91f": "文件包含漏洞:一场网络安全的“谍影重重”?", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526395&idx=1&sn=279a519e4641fc56d846eada10848a35": "BurpSuite插件 | 告别手动测试,快速挖掘漏洞!", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486722&idx=1&sn=2836d5e911cdf2aa4fc1475c3d04ebeb": "漏洞挖掘 | 简单的弱口令到垂直越权思路分享", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247487021&idx=1&sn=5a6ba91dcddd6ea6ee05af338654b86b": "记一次拿下全校信息的漏洞+垂直越权", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497368&idx=1&sn=3601f98d7f63a8be5b429802b5b2d26d": "一款功能强大的通用漏洞扫描器-Sirius!", "https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247494692&idx=1&sn=684617c4357b88abab49bc9ffcaf9a76": "工具推荐 | Swagger API漏洞自动化填充参数利用工具", "https://mp.weixin.qq.com/s?__biz=MzA5NDI0NzY3Mg==&mid=2247484887&idx=1&sn=85b0924c6702a9cdaedf8f3b651a8771": "crAPI - 存在漏洞的API项目", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492983&idx=1&sn=3e2ccbfad6e42c1a2476834c0dce0e29": "英国电信服务提供商 O2 UK 修复了通呼叫定位用户位置的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NDk4MTk5OA==&mid=2247485572&idx=1&sn=f138b97c3132aa5a0806897a72b12cd2": "Ai + burpsuite@漏洞自动化检测搭建", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900583&idx=1&sn=8ebdfbb9576a61b04f7c64facaa10bcb": "APT利用SaaS零日漏洞(CVE-2025-3928)攻陷Azure云!Commvault事件剖析M365数据安全与防御体系", "https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247512147&idx=1&sn=9471a118a3ce4d78f68a22710993cdd9": "一款开源免费的漏洞扫描工具-Sirius", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795228&idx=1&sn=6e01605f34eba5d585ca6b69e0b73160": "APT组织利用 Ivanti 漏洞攻击关键部门", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485756&idx=1&sn=d9a887e689e231310571669ec835b2ff": "任用账号密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493213&idx=1&sn=fbb80feb41193cbffbc16c9aeef6ad20": "漏洞预警 | VMware vCenter Server认证命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493213&idx=2&sn=b03ad893449bbbdba54c70468c32496e": "漏洞预警 | 上讯信息运维管理审计系统注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247487889&idx=2&sn=1fda19011d2dc80b33f1c56c4b52d025": "经典华为路由器漏洞复现详细分析(包括整个漏洞链)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493213&idx=3&sn=0e5148e388ecd76a2f82a33b155dc8bf": "漏洞预警 | 妖气山视频管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610861&idx=4&sn=8d58deaa3f6602b6e48d52bda5f9d2cb": "一款专为安全研究人员和白帽子设计的漏洞赏金工具", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520709&idx=1&sn=676ba7b4e5166fdb4039f80f1288888c": "PHP中的session漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247507055&idx=1&sn=f87c3e85fc53e0b53da2054598728cda": "Web3 漏洞眼: Cetus AMM 2 亿美元被黑事件", "https://mp.weixin.qq.com/s?__biz=MzkzNzQyMDkxMQ==&mid=2247488187&idx=1&sn=e139a99381ec99c5c0ea6edbe1d75512": "【两万字原创长文】完全零基础入门Fastjson系列漏洞(基础篇)", "https://mp.weixin.qq.com/s?__biz=MzkzMTYyMDk1Nw==&mid=2247483863&idx=1&sn=0be008eb5656674456686070d3870748": "AI 赋能漏洞变种分析:从已知到未知,Hacktron 发现 Ivanti EPMM 新攻击向量的启示", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484806&idx=1&sn=be2659279b030eef5e06feca6531b7ad": "【漏洞预警】Grafana未授权跨站点脚本攻击xss和SSRF漏洞(CVE-2025-4123)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496002&idx=2&sn=85d90003c5777cda7d6cdc539c3b982d": "上周关注度较高的产品安全漏洞(20250519-20250525)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069834&idx=1&sn=335db8c1f2b23d140ba49e50ec855ed0": "【安全圈】ViciousTrap 利用思科漏洞操控全球 5,300 台设备构建蜜罐监控网络", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519543&idx=1&sn=1a444807e71915e56cc6ce6ba82aa495": "工具 | 漏洞挖掘小工具-SeeMore", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211870&idx=1&sn=e5eb84aa661afeffb2798381b6d15335": "浅析SpringBoot框架常见未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321761&idx=4&sn=8aa3eb79d0743637147049e31344da8e": "黑客组织ViciousTrap利用思科漏洞入侵84个国家,构建全球蜜罐网络", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506384&idx=1&sn=d41497eacbe57bb1d5fa6beafb7f122a": "每周网安资讯 (5.20-5.26)| Poedit 安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491599&idx=1&sn=165d0ffc3c03a14a2d0a30a5801c2a54": "Pichome 任意文件读取漏洞 (CVE-2025-1743)", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651136993&idx=2&sn=24ab2dba798f4bcf2ce2dab974ee8d55": "地盘战打响,DragonForce争夺勒索软件市场主导权;AI助手DIANNA首次成功识别大语言模型生成的恶意软件 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496002&idx=1&sn=42ceff19e40ee69f47921352b4acc3b9": "CNVD漏洞周报2025年第19期", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247496855&idx=2&sn=19a9d8e0672c21ea10d987febab0d279": "历史首次!o3找到Linux内核零日漏洞,12000行代码看100遍揪出,无需调用任何工具", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507761&idx=1&sn=ef3242ad509ed6a12634f21f802dcd5d": "漏洞通告 | Grafana 开放重定向与服务端请求伪造漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932190&idx=1&sn=c30630174b2223f93458c6ee9e77de2b": "OpenAI大语言模型漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788619&idx=1&sn=7edd031550c18e5bc06975a63cc61a90": "AI首次独立发现Linux内核可利用0Day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492400&idx=1&sn=b6a3819edf4e9dfeb14515aab465825a": "618 领券 | 稍后读软件 Pocket 即将关闭,这个更强的工具能担起重任!", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538917&idx=1&sn=73d4461f6b7ff10643dc088854fec577": "关键基础设施遭受攻击:漏洞成为黑客首选武器", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514421&idx=2&sn=cce953e1f93937d286c85ab93f963865": "首次利用OpenAI o3模型发现Linux内核零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900594&idx=1&sn=49967bc1a632a5d21d61181929a64604": "Windows Server 2025 “BadSuccessor”漏洞解析:dMSA 新特性反成“权限赠予后门”,域控一击即溃", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247488481&idx=1&sn=b98bf997e66b4d0f1196ca7c19b0dfd0": "查找高级文件上传漏洞的完整指南", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491671&idx=1&sn=c5f692e69aee368494586d30ac95d47b": "全新下一代目录爆破扫描工具,一个全方位的目录爆破的解决方案|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490133&idx=1&sn=ddd170b9cadad60d41c6581c82f3c8ac": "【漏洞预警】新华三Gr-5400ax缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503427&idx=1&sn=68e2ee9124e84ee0b05694b0952cec7f": "安全热点周报:Ivanti EPMM 远程代码执行漏洞已被利用于有限的攻击中", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486487&idx=1&sn=3889ebfbd2f4edc0c3901392d6ce9585": "白盒Sign加密到前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTIyMjg0NQ==&mid=2247495770&idx=1&sn=bf9b4d19d561f3a167dd614346a65b4f": "当漏洞成为“数字战争”的弹药,谁能改写攻防规则?", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248030&idx=1&sn=1843664c0aeac8f18ff074f0e9ec2092": "首次利用OpenAI o3模型发现Linux内核零日漏洞 | Palo Alto公布千亿营收冲刺计划,网络安全迈向平台化寡头竞争", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247490772&idx=1&sn=91e17e7d01c13ca1a0cb4f15eccf1d69": "实战SRC挖掘|微信小程序渗透漏洞复盘", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247518969&idx=1&sn=7783174861ed4ff1671378b9289992b8": "等保测评10大高频漏洞:谁将SQL注入挤下神坛?", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795241&idx=1&sn=8c0be31950ee1caba4515bd8c6e78567": "黑客利用 0day 漏洞通过 Commvault 入侵美国云平台", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247550223&idx=1&sn=080537e5dae12585a760656d296060ee": "挖洞日记 | 记一次轻松拿下统一小通杀漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495068&idx=1&sn=0103937e748038484a8b0477280bfba1": "2025攻防演练必修高危漏洞集合(2.0版)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499748&idx=3&sn=f1d9403b08dbf8776ad839cb85b4a94f": "WebShell 绕过 EDR 监控,不调用 cmd 也能实现命令执行", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795241&idx=2&sn=1d6d27a7a4709b3fe42e178e6a36ca8f": "Apache Tomcat 9.8分RCE漏洞曝光,PoC 已经公开", "https://mp.weixin.qq.com/s?__biz=MzkzMTYyMDk1Nw==&mid=2247483869&idx=1&sn=2d72368d0c27aad90b94fc523069a699": "研究者利用OpenAI o3模型发现Linux内核远程零日漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487425&idx=1&sn=b463a6fd6d2a6b341874eeb038c16044": "Java代码审计 | JFinalCMS 5.1,通过反射调用 FastJson 漏洞触发点,有趣。", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251917&idx=1&sn=c14ea2340b3bf7692b029ded8d2084cc": "西班牙汉堡王备份系统遭遇RCE漏洞威胁,黑客4000美元叫卖访问权限。", "https://mp.weixin.qq.com/s?__biz=MzU4OTg4Nzc4MQ==&mid=2247506144&idx=1&sn=0c45651d114b0ae75e3c28b22524ef6a": "漏洞挖掘必备利器推荐", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491219&idx=1&sn=971cf60237ff3d69e0428ef50a39f2fc": "白盒Sign加密到前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491608&idx=1&sn=2dfeb11acdab967374f23e43c25dcc1c": "WordPress Madara 本地文件包含漏洞 (CVE-2025-4524)", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526415&idx=1&sn=99f277b93b1a927837ff376f50d001af": "记一次实战小程序漏洞测试到严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1Nzg3ODkyNg==&mid=2247484110&idx=1&sn=0d12f8dc81d838679c88fcd84e2cad8e": "PagerMaid-Pyro run_sh-rce命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486753&idx=1&sn=3abdaa3b245cc30c92e6322dcc3f1c70": "黑客发起全球间谍行动,政府邮箱被利用XSS漏洞入侵", "https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247499635&idx=1&sn=cca778a3a8b5c545de9edc8d2a4f2c92": "【漏洞与预防】Microsoft Windows 文件资源管理器欺骗漏洞预防", "https://mp.weixin.qq.com/s?__biz=MzkyNzg4NTU0NQ==&mid=2247485589&idx=1&sn=308a44fe96ac6e8ca80a8e1f5d0f5b56": "Zer0 Sec团队-某SRC任意文件读取漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530229&idx=3&sn=70f3209757ed00e0906074d10d488d38": "发现与 IXON VPN 客户端相关的三个新漏洞,可导致本地权限提升 (LPE)", "https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650468805&idx=1&sn=3b1ae29229283c236d11a6e8d149bc7e": "十四年连冠|绿盟漏洞扫描与管理产品再获佳绩", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247492421&idx=1&sn=899c37a36234e4c8668f3f56303615fe": "2个月荣登字节SRC年榜第一,云上漏洞秘籍首公开!", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486382&idx=1&sn=77eaf3570de212554a2bdba0e7f1d755": "若依Vue漏洞检测工具 - ruoyi-Vue-tools", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523124&idx=2&sn=11426f6aaac01c747218a552ac6e5129": "GitLab Duo 漏洞可导致攻击者通过隐藏的提示劫持AI响应", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096281&idx=2&sn=eacfc63c8ed2750785941e88c3fd39d7": "Apache Tomcat 允许远程执行代码漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523124&idx=1&sn=1a8e46e871f1fae51bb1c752be774842": "CISA提醒注意已遭利用的 Commvault 0day漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247521136&idx=1&sn=e6e3e3b78b2343b548d40246af0c841f": "记某众测Fastjson<=1.2.68反序列化RCE过程", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321929&idx=3&sn=06c0967ba8410e5a847655591077514b": "Windows Server 2025 \"BadSuccessor\" 漏洞曝光,可导致域控接管", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321929&idx=4&sn=7c4223920cb17acbc65fb665c7da7365": "Mesh Wi-Fi存在CVSS 9.1分高危漏洞,设计缺陷可被用于数据帧注入攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491246&idx=2&sn=f2821c44d28004e6cdeda1a403564f5f": "雷神众测漏洞周报2025.5.19-2025.5.25", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503419&idx=1&sn=ec858e748fb40bf4b477958bc4ede59b": "雷神众测漏洞周报2025.5.19-2025.5.25", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096281&idx=1&sn=de29f14ed3da4e130ab8507f590898de": "Arm Mali GPU 漏洞允许绕过 MTE 和任意内核代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649173069&idx=3&sn=2d17e34234a8bcc099915e7259d98609": "通报丨ComfyUI存在多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490142&idx=2&sn=1b3a904c690bb5f4b6fcc44d8df3cdca": "【漏洞预警】DedeCMS信息泄露漏洞(CVE-2025-5137)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488502&idx=1&sn=c417e10a497251134c3d81775de5d501": "Panalog大数据日志审计系统sprog_upstatus.php存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137007&idx=2&sn=1aaad1f68d3e1cc0bb3260721d30302c": "量子计算破解RSA加密难度降低20倍,后量子密码学迫在眉睫;国家网络安全通报中心提醒:ComfyUI存在多个高危漏洞 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652115908&idx=2&sn=367490ce902e04506aa0eeed4a4df3ab": "办公平台存在安全漏洞!某国有企业违反《网络安全法》被处罚", "https://mp.weixin.qq.com/s?__biz=MzkyNjczNzgzMA==&mid=2247484564&idx=1&sn=6fb78c41406e38426eb86081c19246cc": "漏洞挖掘—利用查询功能获取敏感信息(3)", "https://mp.weixin.qq.com/s?__biz=Mzg2OTg5NjE5MQ==&mid=2247485290&idx=1&sn=54c83a4634320e1fdb80ed018b00c8c6": "【DDDD二开】修复bug 新增指纹poc 新增功能", "https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247535924&idx=1&sn=6fb1cc1ee15c4e163ede7fc4914209e6": "独家洞察|Mallox勒索团伙疑似继续利用产品漏洞攻击投毒国内数百个资产", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493239&idx=3&sn=e60c83d9ba5b3fa37d698e3f080ff9af": "漏洞预警 | 用友U8Cloud任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493239&idx=2&sn=ea1367c3c4f9cfecdd1cd04ded2ceccb": "漏洞预警 | 智慧校园(安校易)管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247499227&idx=1&sn=73bbfba76dd660bbc59316c7d3bfcd52": "EMQX命令执行后渗透", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247485063&idx=1&sn=4fd13821611ba0fa4db6c3c5dda51a33": "新手也能学会的安卓漏洞!手把手教你查出 App 数据泄露!", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490142&idx=1&sn=208226258cd185a7acfbdbfd55481e6d": "【高危漏洞预警】Wing FTP Server安全漏洞CVE-2025-5196", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247497264&idx=1&sn=a416851315173135e64299b51984541c": "CVE-2024-45436:Ollama ZIP文件解压导致的命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610894&idx=4&sn=a4799ef6807263051f8dcfca295fb4e9": "一款开源免费的漏洞扫描工具-Sirius", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487440&idx=1&sn=008313c2fd51c8b9e0470334e5ac0513": "通达OA OfficeTask前台RCE、SQL注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610894&idx=1&sn=af94a6c952aa9508a50dd00de20f2126": "涉案151人、4300余万元 警方侦破一起侵犯公民个人信息案;|阿迪达斯数据泄露事件:第三方服务商漏洞致客户信息外泄", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497468&idx=2&sn=508b2f0a56e3aeacd8f66a472486cf32": "网络安全漏洞扫描:别再迷信工具,先搞懂这些事儿!", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493937&idx=1&sn=fd643ae0b90716be724efc591b46e96a": "DragonForce操作者利用SimpleHelp漏洞链式攻击某MSP服务商及其客户", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491617&idx=1&sn=6644d7a7e9a8a5e5201ceacfd085c46a": "InvisionCommunity 远程代码执行漏洞 (CVE-2025-47916)", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247490813&idx=1&sn=3d883c634ebd693977d0d5a25a6ec412": "渗透测试 | 分享某次项目上的渗透测试漏洞复盘", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248034&idx=1&sn=e62faedf047a36698e7e4968415855ad": "“开盒”,坚决打击!| Windows Server 2025 \"BadSuccessor\" 漏洞曝光,可导致域控接管", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251924&idx=1&sn=351ee525acf88eca45f1ceefe54feb57": "国家网络安全通报中心提醒:ComfyUI存在多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655280643&idx=1&sn=d29834cc9689633efe690b4732ccb92b": "2025 HVV必修高危漏洞集合2", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463074&idx=1&sn=85acc3cb8d7a6d3136d4804cef124728": "信息安全漏洞周报(2025年第21期)", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247624639&idx=3&sn=8cb76c24e331ca965cf8085ec68d31a0": "人工智能自动化模糊测试:如何自主发现汽车软件中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664243080&idx=2&sn=f3ace9c6fac492cbef8ab21825036bda": "关注 | ComfyUI存在多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247489213&idx=1&sn=d4e4580e77b79aa9d7736bcd79a22ecc": "实战EDUSRC挖掘|微信小程序渗透漏洞及getshell复盘", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493239&idx=1&sn=2ad4c6a9c3df1465a9ebfccfff088411": "漏洞预警 | FoxCMS SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDE5MDI5Mg==&mid=2247509231&idx=2&sn=0a6f372871ff311926ba91a8708e3f2e": "SAST国标分析︱灵脉AI深度兼容GB∕T 34943∕34944-2017源代码漏洞测试规范", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514434&idx=2&sn=19b30608f4a701f991edf166024d4d6f": "北京警方通报:境外黑客组织利用ComfyUI漏洞对我实施攻击", "https://mp.weixin.qq.com/s?__biz=MzA5NDI0NzY3Mg==&mid=2247484912&idx=1&sn=7868ebacb71e9eb162686ab99cf03d8d": "Retire.js - 检测JavaScript依赖漏洞的安全工具", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247538958&idx=2&sn=609ff480e7b89259dea2743f02dd9059": "已公开漏洞的认知“真相”", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488566&idx=1&sn=02dcbc079feef0474efaac6fef9f91fc": "逐帧分析:Kernel Streaming 持续暴露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1NzMwNTM5NQ==&mid=2247486150&idx=1&sn=cfa0a2b0886e123f79b42eb813ba429e": "自学黑客技术多长时间能达到挖漏洞的水平?零基础入门到精通,收藏这篇就够了", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485317&idx=1&sn=0b31c80b87f34af3ab33021b8697920c": "紧急预警!Samlify SSO 签名绕过漏洞(CVE-2025-47949)解析与防御指南​", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530246&idx=3&sn=bf5fc5129373658b9aeb7e2260f705d1": "Mimo 回归:CVE-2025-32432 被用于加密货币挖矿和代理软件活动", "https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664995100&idx=3&sn=3e84ad389f64c458d97638e803adceef": "【业界动态】ComfyUI存在多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485317&idx=2&sn=04447863a12ee6db59848d6d73655902": "Vite开发服务器任意文件读取(CVE-2025-30208)", "https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247600035&idx=2&sn=b9b9043eddaa948747563c1262352a9b": "北京警方通报:境外黑客组织利用ComfyUI漏洞对我实施攻击", "https://mp.weixin.qq.com/s?__biz=MzkzMTY0MDgzNg==&mid=2247484490&idx=1&sn=1108796cd3681ad4d71bf145929026e2": "GitHub MCP Server漏洞:通过MCP访问私有仓库", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137030&idx=2&sn=466072b21f20a9efd87f6114ce1557f8": "NASA开源软件被曝存在多个安全漏洞;提示注入威胁:GitHub MCP服务器漏洞允许攻击者访问私有代码库 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488513&idx=1&sn=bf90fe02d66ceea05dd6891a66f0aff2": "PagerMaid-Pyro run_sh接口存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069865&idx=1&sn=e29ae988e9c671b37c0b95f70beaf6d5": "【安全圈】全球互联网因BGP协议漏洞出现大规模路由震荡", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484860&idx=1&sn=8706853bda9e4ff3820f973f4c1a10af": "安钥®「漏洞防治标准作业程序(SOP)」征文启示 [2025年第21期,总第39期]", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321972&idx=4&sn=e255487c860340a366b40b36be9e271d": "阿迪达斯数据泄露,第三方服务商漏洞致客户信息外泄", "https://mp.weixin.qq.com/s?__biz=MzkxMDcxODg2OQ==&mid=2247483849&idx=1&sn=f364a8c62bb78c55eb2a58bdcbcea380": "AI 安全|DIFY 大模型平台漏洞预警(已复现)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321972&idx=1&sn=a781cae82004337aa46c61fb54bf864c": "GitHub MCP服务器漏洞使攻击者可访问私有代码库", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523133&idx=1&sn=bf9dda6dcef75f6de012aa77866b6072": "DragonForce 勒索团伙瞄准MSP,发动供应链攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NDUxMTI2NA==&mid=2247485130&idx=1&sn=32e88952742937670334c31a559fe750": "【漏洞复现】dify任意密码重置", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247542435&idx=1&sn=eac5973134804eb38d96bdfc769093ab": "官方通报ComfyUI存多个高危漏洞:已被境外黑客利用对我国网络实施攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0NDM1MDkyNw==&mid=2247547141&idx=1&sn=716b2754bca3bbf8cb1051766ccb7350": "MVS系统漏洞检测产品亮相OpenHarmony安全委员会,展示终端安全实践成果", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727845584&idx=1&sn=c13de1d950bf86c3b5650e4f98717c8d": "Netfilter Tunnel 之殇:CVE-2025-22056分析", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932200&idx=1&sn=ead3dc6e3d8a36b05a1a74ecc1ddf4fc": "AI工具ComfyUI惊现多个高危漏洞,已有境外组织发起网络攻击", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492603&idx=2&sn=013df9f9a54c65cd271466572626705e": "Windows Server 2025 \"BadSuccessor\"漏洞可导致域控接管(PoC已公开,暂无补丁)", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484102&idx=1&sn=c379f685fa4de8feb2eae15f399a0df1": "【漏洞复现】vBulletin replaceAdTemplat 远程代码执行漏洞(CVE-2025-48827∕48828)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490153&idx=1&sn=b13f80c9c3dae8d161d3dcdcb7883cfe": "【严重漏洞预警】vBulletin replaceAdTemplat远程代码执行漏洞(CVE-2025-48827)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651321972&idx=2&sn=30484ea29b1059a42eff9d3d3ccddf3a": "2个月荣登字节SRC年榜第一,云上漏洞秘籍首公开!", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485857&idx=1&sn=68c4871e03965c933cea638f4dd70fc0": "英飞达影像存档与通讯PACS系统 WebUserLogin.asmx 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247640068&idx=3&sn=3df2ba81a343350bbe1f28027c22b625": "Salesforce 将以 80 亿美元收购 Informatica", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490153&idx=2&sn=17860b8ad80dd13fe51616ba590c72c2": "【AI高危漏洞预警】LLama-Index CLI命令执行漏洞(CVE-2025-1753)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491712&idx=1&sn=5f83947a4b5ac349589e70690d137f4f": "Windows10 Penetration渗透系统,一套环境通吃内网、Web、APP全渗透,工具包实战指南|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900623&idx=1&sn=994a88126abfed4b2bd10627e80437d3": "【APT与高危漏洞追踪】国家级黑客UNC5221利用Ivanti漏洞,关键基础设施安全再敲警钟", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248038&idx=1&sn=730bfd35d652c9f7d2a1e99a6be3e26b": "北京警方通报:境外黑客组织利用ComfyUI漏洞对我实施攻击 | GitHub MCP服务器漏洞使攻击者可访问私有代码库", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493251&idx=1&sn=01de37e5ce0198bc0d581cb625824c0a": "漏洞预警 | 上讯信息运维管理审计系统注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247624653&idx=1&sn=28db6c14f3591b8196eed1340c58a523": "AI用于软件安全和漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485328&idx=1&sn=7a0a77977a9916697db3f91f6372d3cd": "CVE-2025-24054的漏洞深度解析与 PoC 利用指南", "https://mp.weixin.qq.com/s?__biz=Mzg2OTU3MzI1OQ==&mid=2247486137&idx=1&sn=fee3318906ff4908ee48a1f0dec231eb": "《AI黑客时代:用DeepSeek构建智能渗透机器人,让漏洞验证自动化飞驰》", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247487999&idx=1&sn=7c8f914e1ab77f146c33404799bb8db6": "紧急警报!Mimo黑客利用Craft CMS高危漏洞发动双重攻击:挖矿劫持+流量窃取", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493251&idx=3&sn=b1787bd3b9aea2069a2ce3a456c5aa7d": "漏洞预警 | 满客宝后台管理系统任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493251&idx=2&sn=82ac86f0154f844c3b70f60d2d65ac4a": "漏洞预警 | JEEWMS任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610910&idx=4&sn=2bf195e4c5cd6efeedf8043455f7ed0b": "BurpSuite插件 | 告别手动测试,快速挖掘漏洞!", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519554&idx=2&sn=763611f710fb28ec096e6967fe96f2e9": "ofcms的XXE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484699&idx=1&sn=7a8e7cd8363e5d05fa489ccf54dd75af": "攻防演练连个Nday都扫不出?你只是Nday的打开方式不对!", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486223&idx=1&sn=0e857a26fc61584767ec53eff5c40121": "突发!土耳其关联APT组织利用零日漏洞,监控伊拉克库尔德武装!", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506544&idx=3&sn=36333804dd8cbb762618db1e2489b7e1": "我如何利用错误配置的 CORS 漏洞赚取 $$$", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487445&idx=1&sn=d783a258afbc17943c5187c0cd1efd9b": "CVE-2024-6235 PoC NetScaler 控制台漏洞可导致管理员访问", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490564&idx=1&sn=b21020d985bae3bd807b1e3a8eb8d14a": "成都朗速ERP系统高危漏洞曝光!任意文件上传(附修复方案)", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610910&idx=1&sn=b2d51a5eeaf6c9d65136ea6e51ab56c2": "公安机关将公开通缉台黑客;|全球互联网因BGP协议漏洞出现大规模路由震荡;|苹果五年拦截90亿美元欺诈交易;", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491626&idx=1&sn=ab258a801fb340c4bc6ec9acad02f31e": "申瓯通信 在线录音管理系统 index.php 存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1Nzg3ODkyNg==&mid=2247484116&idx=1&sn=8f852e246034721c5f5767262550e80e": "成都朗速ERP系统WebDwgDefault.aspx任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247488861&idx=1&sn=36092d38e428c6737bfc7a2291f944c2": "逻辑漏洞-使用 SSO 登录进行帐户接管", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485328&idx=2&sn=d8fcb14e80a40517b3c3d4a7f6a9a3be": "​​CVE-2025-21333 漏洞深度解析与 PoC", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247491713&idx=1&sn=35eb54f2e0199e3f7f5de84f67709c3e": "白盒Sign加密到前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzQyMDkxMQ==&mid=2247488205&idx=1&sn=07a9e01c17f5cfb38760b833ca7154e5": "ofcms的XXE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247499234&idx=1&sn=302778f0d6709a3b6ba6e7002fe7ed2a": "EMQX后台插件命令执行", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486510&idx=1&sn=7a0166be0ab7a08b67e8717c0a493179": "端午活动开启!白盒+黑盒双修来袭!知名小朋友(代码审计)联手地图大师(企业SRC漏洞挖掘),端午节限时大放价!", "https://mp.weixin.qq.com/s?__biz=MzA4MzMzOTQ4Mw==&mid=2453672669&idx=1&sn=71417cae2e7bee44452d6b0b59147419": "漏洞致命主义已经结束:为什么身份威胁预防是网络安全的未来", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485328&idx=3&sn=e9f38cccf7a23f748be4b9a79a4fe179": "​​CVE-2025-24813 Apache Tomcat RCE 漏洞深度解析与 PoC", "https://mp.weixin.qq.com/s?__biz=MzkxNjc0ODA3NQ==&mid=2247483959&idx=1&sn=c804f2123e5364505e6d5b5ce8c556c2": "如何通过一个SSRF漏洞挖出百万用户数据", "https://mp.weixin.qq.com/s?__biz=Mzk0MzYyMjEzMQ==&mid=2247489499&idx=1&sn=5c212d09a83dfe975227bc478b0114df": "不容忽视的威胁:探索与JWT相关漏洞(另类的越权)", "https://mp.weixin.qq.com/s?__biz=Mzk0MzYyMjEzMQ==&mid=2247489500&idx=1&sn=59a42b9399b76744b3f91a726a0a112b": "SSRF漏洞详细讲解:攻击者是怎么“骗”服务器发起请求的", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501121&idx=2&sn=50940420fb1e9fde2dce1f8f6a5226ae": "【漏洞通告】Google Chrome V8越界写入漏洞(CVE-2025-5280)", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2MTI1NA==&mid=2247503379&idx=1&sn=88acd40380c32f491190c22bcf675915": "美国宇航局开源软件中爆出大量严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247491176&idx=1&sn=42c85804ebaac536b5d7e05b29a97a4f": "创宇安全智脑 | vBulletin远程代码执行(CVE-2025-48827∕CVE-2025-48828)等84个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=Mzk3NTk1NjM1MQ==&mid=2247487891&idx=1&sn=f5a635e1b59af1e7fa79da35637b1d98": "ByteSRC全域3倍积分!单个漏洞最高15w!送Apple全家桶!", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247489351&idx=1&sn=62a05afe4fae8a7a497cdb2a52eb4047": "微软OneDrive严重安全漏洞:OAuth权限滥用,数据泄露风险高", "https://mp.weixin.qq.com/s?__biz=MzUzNDMyNjI3Mg==&mid=2247487449&idx=1&sn=e45fed21e096e9ff0f6a128f16bf1ef9": "java代码执行(eval)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247503765&idx=1&sn=c91971d705c969009f7e9fd460725ad0": "“粽”享礼金,挖洞必“粽”,端午0DAY竞渡挑战赛开启!", "https://mp.weixin.qq.com/s?__biz=MzI5MDcyODIzNg==&mid=2247485094&idx=1&sn=5e7af24dd9b1174661c3d7553be194bd": "端午活动开启!白盒+黑盒双修来袭!知名小朋友(代码审计)联手地图大师(企业SRC漏洞挖掘),端午节限时大放价!", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530275&idx=4&sn=8a7efa98d4a382f0144297742ff568e2": "入侵我的车,甚至你的车——大众汽车应用程序存在安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487427&idx=1&sn=4e665affb10589b165c61a022f5a37ea": "不同视角学习Java代码审计之文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523149&idx=1&sn=0298267a08369cc3ea9bdbdec81eb788": "看我如何通过 OpenAI o3 挖到 Linux 内核远程 0day", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489911&idx=1&sn=e62b6002552b1ab6dba42242d593c2ed": "线上支付漏洞:开启 “ 0元购 ” ?", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247555294&idx=3&sn=09075eb75bc68c89437d35c5ddb10181": "利用验证框架 JAIST揭示开源自动驾驶系统的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137040&idx=2&sn=3409a0e99c9697da8ecb4c7742ca1399": "恶意软件藏身AI模型,专门针对阿里巴巴AI实验室用户;OneDrive文件选择器漏洞让应用获取用户云存储完整访问权限 | 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651322005&idx=3&sn=d6c7633db1eb521d22d9cebac3887e7e": "留言赠书 | 《攻击网络协议:协议漏洞的发现+利用+保护》免费送", "https://mp.weixin.qq.com/s?__biz=Mzg5MDk4MzkyMA==&mid=2247484579&idx=1&sn=d63ab9b5f7fbe189c2a020ffb04d6e7a": "代码审计Sign加密到前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490158&idx=1&sn=17f120cec84cc5ab344e5298683be964": "【高危漏洞预警】Apache Commons BeanUtils远程代码执行漏洞CVE-2025-48734", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520801&idx=1&sn=bad2cedc1a8020024460f7f56dd36323": "小程序渗透记录:通过细节挖掘漏洞的艺术", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261237&idx=1&sn=5780326bb0e2c921f00c3199b93ec86e": "一处价值 $2500 的 DOM XSS 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491737&idx=1&sn=a4f727ba13cde3a317fdbf6711e10111": "Sirius 一款开源通用漏洞扫描器(Docker版)|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069879&idx=1&sn=2b0d058ac337d26093a5ae849717e3dd": "【安全圈】微软OneDrive文件选择器漏洞曝光:网站可窃取用户全部云存储数据", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247492987&idx=1&sn=971a25f5792cacbcea29955536f4eb2e": "黑客利用 OttoKit WordPress 插件漏洞添加管理员帐户", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485861&idx=1&sn=05f3030231f775fe4410e25733c538c0": "Panalog大数据日志审计系统sprog_upstatus.php存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514445&idx=1&sn=6f6043b769f9bed3eb4ff2904556f776": "美军工巨头押注AI赋能网络攻击,超21亿元收购漏洞利用厂商", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069879&idx=4&sn=457158cecc79f277656b8bad13f79e3f": "【安全圈】WordPress TI WooCommerce Wishlist 插件漏洞使 100,000+ 网站遭受网络攻击", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493266&idx=3&sn=914afcabd8edcc167e4b033e85e3b45e": "漏洞预警 | 万户ezOFFICE SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493266&idx=2&sn=6230f92f0d41acbeee78849f7bcbecf9": "漏洞预警 | 朗速ERP任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NjAzMTk3MA==&mid=2458860603&idx=1&sn=3f138383a35ce7cfbe9c538da4af941e": "在Windows强跑Docker,8GB内存都喂不饱漏洞扫描神器?", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493266&idx=1&sn=de829eb3c1e29e04102463d8eeab8237": "漏洞预警 | 银达汇智智慧综合管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247506513&idx=1&sn=6e00e60bc051e20d313ebd7d41019761": "当漏洞成为“数字战争”的弹药,谁能改写攻防规则?", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795277&idx=3&sn=4946fecf57e0352b5f735171deca723c": "Windows 11 文件资源管理器漏洞(CVE-2025-24071)POC发布", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652251946&idx=1&sn=dcddbfbfeafc956cfe3d93380c79bda2": "Ivanti漏洞被利用进行链式攻击,英国NHS医疗数据面临风险", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247488578&idx=1&sn=1c4b4a1e5f29731aea07d04ad731b665": "任意文件读取&下载漏洞的全面解析及利用", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488525&idx=1&sn=20d1abb7ff5745d3093f6b089f6a4187": "vBulletin replaceAdTemplat接口存在远程代码执行漏洞CVE-2025-48827 附POC", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494388&idx=1&sn=1d26ade4f0031585db8697d373cda55d": "ExploitDB 一款轻量级用于抓取、展示和导出 Exploit-DB中的漏洞数据的工具", "https://mp.weixin.qq.com/s?__biz=MzIzNDIxODkyMg==&mid=2650086413&idx=1&sn=d20c43c1c81c5c2963f188f540ef56a4": "微软OneDrive文件选择器漏洞曝光:网站可窃取用户全部云存储数据", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491645&idx=1&sn=157a465373fcfaf72051bc1154c58206": "金华迪加 现场大屏互动系统 ajax_act_set_bgmusic.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512289&idx=1&sn=48c4fb2f47eec32325185a611bd32558": "IBM Power HMC漏洞披露:受限Shell突破与权限提升", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795277&idx=2&sn=c13a6632f6952677d33342a4e5c8776c": "AyySSHush:利用华硕已修复漏洞组建僵尸网络的间谍技术", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491636&idx=1&sn=9aa9917155b1eedfbe7e73a85b3b0fbf": "用友NC expertschedule SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712266&idx=1&sn=e34c30404d96ca13434abd914eed3a21": "aws漏洞利用框架系列之一:pacu简介", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069908&idx=3&sn=a14a5bbf691eddc51b2cdf4e1f604678": "【安全圈】苹果 Safari 全屏模式曝中间人攻击漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484435&idx=1&sn=34d2645c029628322e82edb23c28b580": "vBulletin远程代码执行漏洞复现(CVE-2025-48827)附POC", "https://mp.weixin.qq.com/s?__biz=MzkxNjc0ODA3NQ==&mid=2247483972&idx=1&sn=a90126cfcc2ef8350d469f7b5f4fcc62": "预接管漏洞挖掘:条件竞争与逻辑缺陷的组合利用", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530309&idx=2&sn=1b87e582acb182c7249a8cd723a9617c": "GitHub MCP 漏洞:通过 MCP 访问私有仓库", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247502501&idx=1&sn=aeaae16a4b401d08bf2af6cfe32bedd6": "【攻防实战】ThinkPHP-RCE集锦", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064186&idx=1&sn=07847eae4bea58c92f7d7b685aa3c998": "信息安全漏洞周报【第024期】", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523160&idx=1&sn=e6700c85073b35c5140da4fff0e4d9f0": "苹果Safari 漏洞使用户易遭全屏中间浏览器攻击", "https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247535985&idx=2&sn=ad6a797aa1ac561e3875afbf6114878f": "聊热点|国家安全部发布使用AI应用保密安全指南、OpenAI o3模型单挑Linux内核,竟揪出一个0-day高危漏洞……", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247554998&idx=1&sn=6691793afdd1d819140ff1e43e7b135a": "指纹识别+精准化 POC 攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069908&idx=2&sn=f99594f728b498a9c7094b2331893ba4": "【安全圈】微软 OneDrive 被曝安全漏洞:文件选择器权限过宽恐致数据泄露", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497667&idx=1&sn=54a41bdf17408e8804207e4246162573": "海外SRC漏洞挖掘|助力成为百万赏金猎人", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247496910&idx=1&sn=584999d1f25820d6025e9c93c55a9392": "GitHub MCP服务器漏洞使攻击者可访问私有代码库", "https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247533384&idx=2&sn=11a6c5fe842ff1ce8e02a9784a1124d9": "荐读丨连锁反应:海上网络的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492652&idx=1&sn=d0f0f05d9d44c122c3ba9b344800665e": "Oracle TNS协议漏洞允许攻击者访问系统内存数据", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651133221&idx=1&sn=3040271f1fd3fc85096d998d0e21c08d": "阿迪达斯曝数据泄露事件,NASA开源软件发现安全漏洞|一周特辑", "https://mp.weixin.qq.com/s?__biz=Mzg5NDU3NDA3OQ==&mid=2247491239&idx=1&sn=b27d7a0f459598f6daba035f0a5afea1": "短信验证码漏洞利用技巧总结&&端午社区活动", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247488614&idx=1&sn=21a4902c98991897ceb84d8be6a3eea1": "突破浅层测试桎梏:多维度漏洞挖掘突破与实践探索", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488620&idx=2&sn=6d2e7297bd61a2b100e43046c8973c60": "Pwn2Own 爱尔兰 - QNAP SQL 注入 RCE", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485965&idx=3&sn=9f0e131ae68dc2c05596c0e8e8b663f6": "CVE-2024-26809|Linux提权漏洞(PoC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485965&idx=1&sn=2c5e56f8ac01bcec1470c9404078f910": "CVE-2025-22252|FortiOS TACACS+身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069919&idx=1&sn=3b5e129ed6ee7e222faa7957c06b833e": "【安全圈】国家网络安全中心发高危漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491654&idx=1&sn=ea4cb7c04e047b1d77707e8f9e5c34d8": "Meteobridge template.cgi 远程命令执行漏洞 (CVE-2025-4008)", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900649&idx=1&sn=718dad314e61f76d421045f8db0b5170": "WordPress热门插件TI WooCommerce Wishlist曝致命漏洞!CVSS 10.0,无需认证即可攻击!", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485965&idx=2&sn=7232cafb03fec2e869598e3a44b90dc9": "CVE-2025-41225|VMware vCenter Server认证命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MzAzMzk3OA==&mid=2247485137&idx=1&sn=a2324f1d887b407e5a5c378699172fa5": "作业四 web安全assert()漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485872&idx=1&sn=e8c6a248f0321285efde17d965c6bf62": "地大信息-基础信息平台 GetImg 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503344&idx=1&sn=47318095da170602a78b16e9007566c9": "【成功复现】Grafana开放重定向&服务端请求伪造漏洞(CVE-2025-4123)", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247502586&idx=1&sn=daab1ab0ddbfd7ec9d7e171b91da3cf1": "【攻防实战】Redis-RCE集锦", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247489309&idx=1&sn=864847316fc192abf5f5e40335561587": "【儿童节快乐】CVE-2025-4664:单个标头泄露敏感数据", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610944&idx=3&sn=9de6823533b7c81787188772ad659886": "记某众测Fastjson<=1.2.68反序列化RCE过程", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610944&idx=1&sn=b65519e4ba185ad6ae0031556576681a": "国家网络安全中心发高危漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247488659&idx=2&sn=098f93f509ee7d88c5c6bda227c86154": "任意文件读取&下载漏洞的全面解析及利用", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900650&idx=1&sn=7482c6fc3609162a06181413aad71af9": "Mimo黑客利用Craft CMS漏洞(CVE-2025-32432)!挖矿、流量劫持,更演变为勒索软件威胁!", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc2MDQyMg==&mid=2247486548&idx=1&sn=c0d672fad264d6de3bc4380097dc7e60": "某校大数据管理后台Docker API未授权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486532&idx=1&sn=9c17c6009d678589e7adc36ae3518748": "某平台白盒JAVA权限绕过到RCE审计流程", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488023&idx=1&sn=761a3beceb05cc041a4a78dcd11befa7": "AI绘图工具ComfyUI爆高危漏洞,境外黑客已发起攻击!", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530349&idx=2&sn=784deada10b94c1531046ed0aa5a15e9": "通过 JScript.dll 中的 UAF 漏洞执行远程代码(CVE-2025-30397)", "https://mp.weixin.qq.com/s?__biz=MzkxNjc0ODA3NQ==&mid=2247484000&idx=1&sn=6209b588e47c15b6bb5648ad0fbf3387": "价值12000美元 的GitLab 中的 Git flag注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247502774&idx=1&sn=f7262ac03c15933af92a0d4a7ac437fd": "【攻防实战】ActiveMQ漏洞集锦", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247515358&idx=1&sn=7685c3953d21b06e259c41e0b8e22ebd": "这12个API漏洞赏金技巧,你一定要在目标上试试!", "https://mp.weixin.qq.com/s?__biz=MzU1NTQ5MDEwNw==&mid=2247485111&idx=1&sn=be23f1163c26c43f14f961394ecc01fc": "Supermap iServer任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516738&idx=1&sn=88872ecc81acaaafa9838d99b3359fa1": "目录浏览漏洞统计脚本 -- web_director_viewer(5月28日更新)", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485877&idx=1&sn=8b1dd823a7b97c930529e2ba76284f93": "Grafana开放重定向&服务端请求伪造漏洞(CVE-2025-4123)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499790&idx=1&sn=91fc65c817ed18dfb8198f2b5af72aa9": "技术精华 | .NET 四种方法上传 web.config 绕过限制实现 RCE", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247485554&idx=1&sn=824dd27c139e49a5431875369685ea03": "【文末护网秘籍】史诗终局:SSRF漏洞撕裂AWS防线!我从Wayback Machine炼出“弑神箭”,一箭射穿黑产帝国命门!", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247485313&idx=1&sn=247d4db6184e4b05b478be78312739d7": "文件上传操作漏洞场景挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247488661&idx=2&sn=934c606c129a3f0d86781aa7963819bd": "任意文件读取&下载漏洞的全面解析及利用", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247510481&idx=1&sn=bda61f971c6f5ebd7e65b379ff4a60a5": "量子安全警钟:外国研究者披露墨子号卫星激光同步漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488028&idx=1&sn=aac796ada6be8ef09722a2370bf46836": "紧急预警!Linux核心转存漏洞曝光,Ubuntu、红帽系统密码哈希可被窃取", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795290&idx=3&sn=38b7ca8cfa5b15a3b60557ca6177ec51": "新的 Linux 漏洞允许通过 Ubuntu、RHEL、Fedora 中的核心内存转储窃取密码哈希值", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247492045&idx=1&sn=4aa5d92ab474e19ac263cf91acdef793": "CVE-2025-31644 F5 BIG-IP iControl TMSH 接口命令注入漏洞深入分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530349&idx=1&sn=7d8850145d9d66641c6ffba5a2c8c7eb": "CVE-2025-5277:AWS MCP 服务器中的命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247550254&idx=1&sn=942bb44202f3367a714ac4391ed57ea7": "简易短信轰炸漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg2NTgzMDg1NA==&mid=2247484205&idx=1&sn=bd0d9135fb8a77ecb1a10a022c3432ca": "某园区0day代码审计", "https://mp.weixin.qq.com/s?__biz=MzIzNDU5NTI4OQ==&mid=2247489373&idx=1&sn=e6f109cf43353dbc8175d922bdedb62a": "Linux系统安全警报:Ubuntu和RHEL发现信息泄露漏洞,CVE-2025-4598被评为Moderate", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530392&idx=4&sn=f69b52a15a10f1ee3d9ee170ba468a0f": "Evertz SDVN 上的远程代码执行 (CVE-2025-4009)", "https://mp.weixin.qq.com/s?__biz=MzkwMzY2MTcwMw==&mid=2247484883&idx=1&sn=5f24f041519c073a4a195cb4e17604d0": "AI 安全 近日大模型推理引擎 vLLM 暴出CVSS 9.8高危rce", "https://mp.weixin.qq.com/s?__biz=MzkzMDY2MDA2Ng==&mid=2247486046&idx=1&sn=ef5ca8771a343763de51286f0d4b13ea": "【两万字原创长文】完全零基础入门Fastjson系列漏洞(基础篇)", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096296&idx=2&sn=e36e823e735c1b506cae71c3c20866d5": "关键 Linux 漏洞暴露了全球数百万个 Linux 系统上的密码哈希", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651322307&idx=1&sn=4063f0cef12989b63bd8d0d3cd998454": "严重Linux漏洞致全球数百万系统密码哈希值泄露", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491664&idx=1&sn=a8865cbc68fb7086352d521ea2eb1119": "WordPress suretriggers 权限绕过漏洞 (CVE-2025-3102) 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491791&idx=1&sn=ff5e4a045c8585d5b404ed420d49d4c0": "突破常规!文件上传漏洞的6大隐蔽攻击面(多个高危场景剖析)|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485884&idx=1&sn=b127b788e9aada865a9653b23919fb67": "国产 Web 框架 Solon v2.5.11 RCE && nginxWebUI RCE", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493973&idx=1&sn=c1c4477aa71c8c5ec31746683788cc6b": "专家发布了关于思科IOS XE WLC漏洞CVE-2025-20188的详细分析", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247488688&idx=2&sn=ce63f1c9f51187b003ff38f7df255576": "突破浅层测试桎梏:多维度漏洞挖掘突破与实践探索", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247490549&idx=1&sn=41c95e54595d2a93aeead92a7d3ccfaf": "分享一款图形化的 .DS_Store文件泄露、.git目录泄露、.svn目录泄露漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493973&idx=4&sn=83f48d8ebe0933c0775806b72338737c": "vBulletin论坛软件曝出两大漏洞正遭活跃攻击", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493280&idx=1&sn=dab2e1d27876d12d5663f0ae1a7d1c4d": "漏洞预警 | Google Chrome V8越界写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493280&idx=2&sn=959893b377b1f9d3bb3d7df38ce51c70": "漏洞预警 | 银达汇智智慧综合管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247485043&idx=1&sn=c1f032c67767a91affd1e7de4abac388": "CVE-2025-40634:TP-Link Archer AX50版本 RCE!", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037738&idx=1&sn=5caed91973ba168620331341c348e949": "openfire鉴权绕过漏洞原理解析", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610951&idx=2&sn=7d6fed8f4199f9bb17e12f1e5fc7043c": "高通Adreno GPU零日漏洞遭利用,全球安卓用户面临攻击风险", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247490976&idx=1&sn=36d7bc9e1e4ac616bb517481181ebcd2": "还在用Wireshark?这款工具直接帮你提取Web攻击+复现请求全过程!", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497531&idx=1&sn=abfa9f975edcef1c644013013123b992": "【漏洞通告】Google Chrome越界读写漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg4Njc1MTIzMw==&mid=2247485855&idx=1&sn=1ee08da0b56a4bc9dc8d8c78f0c32b52": "当漏洞成为“数字战争”的弹药,谁能改写攻防规则?(文末赠书)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503432&idx=1&sn=07b94dac013b6a33369f1c15042d40ae": "【已发现在野利用】Google Chrome 越界读写漏洞(CVE-2025-5419)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247514735&idx=2&sn=5a123dd499cc133d89b213a7ca035950": "稀土掘金 x Trae 夏日寻宝之旅开启:做任务得积分兑大疆pocket3、Apple watch等豪礼", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493280&idx=3&sn=6b5f85b0b92b0523cc7326eeb3074253": "漏洞预警 | PrestaShop tshirtecommerce SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247521231&idx=1&sn=497bf82f8e4dc070256e7da622bae771": "粉丝福利*3《攻击网络协议:协议漏洞的发现+利用+保护》", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795303&idx=3&sn=c9459b810da15cd8177f4838c1d3e015": "高通警告黑客正在利用三个新修补的 Adreno GPU 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486692&idx=1&sn=6cb93ecc909a04b68dfcecff8622eec0": "【漏洞预警】Google Chrome 越界读写漏洞(CVE-2025-5419)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486128&idx=1&sn=f53eee0b5e39100f7c419294e03470f2": "Nacos Derby命令执行漏洞利用脚本", "https://mp.weixin.qq.com/s?__biz=MzUyOTcyNDg1OA==&mid=2247484520&idx=1&sn=b2c7479d43d432ea870909c8e2982c67": "还在用Wireshark?这款工具直接帮你提取Web攻击+复现请求全过程!", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519560&idx=2&sn=188f5e1dd0173385a63281695c542aa3": "简易短信轰炸漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486228&idx=1&sn=ac26bc61a4ca3c9a0877745f4468c114": "突发!朝鲜Lazarus集团突袭韩国多行业,“同步漏洞行动”掀起网络暗战!", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610951&idx=4&sn=e7b9050bc796b2985094177e56102e3a": "ExploitDB 一款轻量级用于抓取、展示和导出 Exploit-DB中的漏洞数据的工具", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261256&idx=1&sn=0a74831dec1e22b0350f5b5428d07f10": "【CVE-2025-20188】思科 RCE 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247487122&idx=1&sn=85d1305a6894dabf8e32db3149494fc0": "Edu实战记录 | 四个漏洞打包提交", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651322416&idx=1&sn=f496ad76672dc84007c77a588480096b": "谷歌Chrome零日漏洞遭广泛利用,可执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490173&idx=1&sn=4f5ff7a32aaddb7668e87502c08b810a": "【高危漏洞预警】YAML-LibYAML信息泄露漏洞(CVE-2025-40908)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491674&idx=1&sn=0f431e61e3429ce89491799a3222c337": "vBulletin replaceAdTemplate 远程代码执行漏洞 (CVE-2025-48827)", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655281264&idx=2&sn=8bfbc105cc225c87951b3fc957ea7e4c": "搭建靶场、Windows∕Linux系统安全、sql注入、XSS、代码审计∕RCE、木马免杀、暴力破解、SSRF、提权", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555006&idx=2&sn=df42accd650c3815dec113c6066fbb05": "【免费领】智能设备安全干货:路由器0day漏洞实战大全", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496018&idx=2&sn=8e0f8b730bf80442638e1ddc4cfaa67d": "上周关注度较高的产品安全漏洞(20250526-20250601)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069983&idx=1&sn=eb2edf37f5fe485f355232db8212e7da": "【安全圈】OneDrive 文件选择器漏洞让应用程序获取用户整个云盘的访问权限", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490173&idx=2&sn=86d636b4d5e7fb36ab9a97507f549c21": "【AI高危漏洞预警】AstrBot路径遍历漏洞CVE-2025-48957", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496018&idx=1&sn=0c204e70771dbe94a5f424a8a21acb78": "CNVD漏洞周报2025年第20期", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523167&idx=1&sn=41ef09229896e2bf881d8508d57c29fd": "高通:速修复这三个已遭利用的 Adreno GPU 漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490407&idx=1&sn=59e92744084604a545c4ba90ce5b5901": "【风险通告】Roundcube Webmail存在反序列化漏洞(CVE-2025-49113)", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247492458&idx=1&sn=f2fd28cb57bd84b198896cf15b300043": "加密算法被破解而导致的漏洞,能按内部已知+通用漏洞忽略吗?", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489807&idx=1&sn=ae168d989a5d57ebb2fc40ba71f045a3": "【1day】某医药系统存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTA0MTY2Mw==&mid=2247485940&idx=1&sn=823869f1102b2f23517af096e86cea71": "Linux崩溃报告漏洞(cve -2025- 5054,4598)暴露密码哈希", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069983&idx=2&sn=aadb9b93aed958142a9ead6975be3334": "【安全圈】谷歌修复导致 AI 概览称“现在是 2024 年”的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499948&idx=1&sn=8d0a50fa3be577710f99f60e0d55b1ea": "CNVD漏洞周报2025年第20期", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497545&idx=2&sn=388a1ddd29a198e2ec0aa94088e91f4f": "SRC漏洞挖掘:别再盯着那些烂大街的姿势了!", "https://mp.weixin.qq.com/s?__biz=MzkxMDY3MzQyNQ==&mid=2247484946&idx=1&sn=d5515e74135ed5faeca4b174483625eb": "SRC实战篇-还在交Druid的低危漏洞?", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247487580&idx=1&sn=c3d1340301f061e448a5c33fcf1e724e": "第125篇:蓝队溯源之burpsuite、zap、AWVS、xray扫描器反制方法与复现", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507765&idx=1&sn=9504084832ca68bdca9d43324f9d7474": "漏洞通告 | llama_Index SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512290&idx=1&sn=59f9e65046dbe616bab36f8cc905751b": "群晖DiskStation漏洞利用:从CVE-2024-10442到远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485889&idx=1&sn=6c577fda35fc0647c190200cce377544": "杭州三一谦成科技车辆监控服务平台 platformSql SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODI1ODgzOA==&mid=2247507104&idx=1&sn=48dabeea7a2f1ec51307204a97523111": "SRC凭什么要为“废物”白帽子的真实漏洞付费?", "https://mp.weixin.qq.com/s?__biz=Mzk0NDU5NTc4OA==&mid=2247484586&idx=1&sn=61cc63ef6e7072a562ffca32d9e0498a": "java审计之下载漏洞获取到的代码如何断点调试", "https://mp.weixin.qq.com/s?__biz=MzkwMzYyNzQ1NA==&mid=2247485477&idx=1&sn=d14d0b13567a89ebdf0c7f7311643b87": "紧急预警:谷歌Chrome高危0Day漏洞(CVE-2025-5419)遭黑客大规模利用!", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650623594&idx=2&sn=120a04c661d02eabd3898c0da6d200f3": "CVSS10分!vBulletin远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900653&idx=1&sn=d8753f3adada1da31a48013b2410f1c3": "小心全屏“障眼法”!苹果浏览器曝BitM攻击漏洞,登录凭证面临失窃风险!", "https://mp.weixin.qq.com/s?__biz=MzU1NTQ5MDEwNw==&mid=2247485116&idx=1&sn=306e44f00e3fa6ac9ef562887dfe241e": "天擎终端安全管理系统getsimilarlist存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491927&idx=1&sn=8ff43a267d390da09bb09964f1c7c522": "后渗透神器AdaptixC2红队渗测试多人协作框架(附带教程)|漏洞探测", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524455&idx=1&sn=7d56f68b4a46168ba93320c07c0c6894": "Chrome 浏览器V8引擎越界读写漏洞(CVE-2025-5419)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523167&idx=2&sn=4249c8e9e0dace01810c665eda52c421": "隐秘的 npm 供应链攻击:误植域名导致RCE和数据破坏", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795315&idx=2&sn=d0015fdb76b856cd4959e7046d09c8a9": "有 10 年历史的 Roundcube RCE 漏洞可让攻击者执行恶意代码", "https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247489052&idx=1&sn=9f2eac8420e7671934b2adb7b5fc7147": "当漏洞成为“数字战争”的弹药,谁能改写攻防规则?", "https://mp.weixin.qq.com/s?__biz=MzI1Mjk2MTM1OQ==&mid=2247485584&idx=1&sn=6342934e6aa5ea24f539787d268c36ad": "硬件安全研究员震惊!STM32漏洞利用实现任意代码执行全过程曝光", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247512556&idx=1&sn=b112e0baa0b36ba161ef60910b3ae0ca": "xxl-job漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499805&idx=1&sn=a79411db28696f519f55efa6370f29fe": "基于 ViewState 反序列化漏洞,通过 Sharp4ViewStateShell 执行命令实现权限维持", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261263&idx=1&sn=509e830ca163d3c541c8824bea2e5592": "【$6,000】Firefox 高危漏洞披露", "https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650480002&idx=2&sn=402cda184dbf54409e5116fdefa8c784": "牟林:没想到,就是漏洞——特洛伊木马对中国的启示", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488038&idx=1&sn=2aef72e57e0086e4305d23d00c35d9a4": "潜伏十年!Roundcube Webmail高危漏洞让黑客随意操控你的邮箱", "https://mp.weixin.qq.com/s?__biz=MzI4NjAzMTk3MA==&mid=2458860633&idx=1&sn=5b6cc0f21b97d658225bc4e366ee3398": "6年旧镜像翻车!手把手教你用Docker部署最新版企业级漏洞扫描工具OpenVAS", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493301&idx=2&sn=f64ceabd513c7af560752897f9bc90f1": "漏洞预警 | JEEWMS SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493301&idx=3&sn=455aa6ff47c1f7ac85e74f8d8b1aba98": "漏洞预警 | 傲发办公通信专家系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247520871&idx=1&sn=0706c2bac7206e0f05fdfa4bca5677e4": "谷歌Chrome零日漏洞遭广泛利用,可执行任意代码", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490611&idx=1&sn=5696e7fcac9c7646ac8fd23c5c37b1ac": "简单好用的漏洞管理工具(附下载链接)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493301&idx=1&sn=964eaacc145b0d78dc3d84aaac8d2df2": "漏洞预警 | PrestaShop tshirtecommerce目录遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497557&idx=2&sn=3e33ffbc2dd2d9b0fdad285363d58325": "网络安全炼金术:短信轰炸漏洞,从逆向到无限可能?", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493984&idx=2&sn=81c758ea9cbb9fea538712b2b954e868": "高通修复了三个在有限针对性攻击中被利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247485369&idx=1&sn=ad3ebcd655dc05dcb2d59189a2c5c626": "源码泄露审计文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487453&idx=1&sn=dd70e73a6be4353a33566c323a73d682": "从 Rebuild 企业级系统代码审计 SSRF 漏洞。", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248052&idx=1&sn=54f78fda5dc9802dddda0d47a5adbc43": "谷歌Chrome零日漏洞遭广泛利用,可执行任意代码 | 顶级大模型向警方举报用户!AI告密排行榜出炉", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247491180&idx=1&sn=b210da06b518e42b574e7a6206c75449": "【src】SRC漏洞挖掘信息收集与挖掘技巧", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493984&idx=1&sn=9ba0403347dc177e4caa30af389f631f": "谷歌修复了今年年初以来第二个被积极利用的Chrome零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795315&idx=3&sn=295593d68ae1db67020a8b1080cca5cc": "2025 年 6 月安卓安全更新修复 30 多个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTU2ODQ4Mw==&mid=2247487354&idx=1&sn=44aee310cb9ef148d0a41a5da713e6c6": "CVE-2024-47575 漏洞分析及三种利用方式", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501135&idx=2&sn=482408cecbddba76f261d8619d97d676": "【漏洞通告】Google Chrome V8引擎越界读写漏洞(CVE-2025-5419)", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486536&idx=1&sn=9a6234de86003dce55ef80148b372a1f": "某园区0day代码审计", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247494371&idx=1&sn=3b7b2922e7fdae49adea80a9e2acc5a7": "java审计之下载漏洞获取到的代码如何断点调试", "https://mp.weixin.qq.com/s?__biz=Mzg3NzU1NzIyMg==&mid=2247485051&idx=1&sn=af7709c22592ba59aa6272659d0f4772": "CVE-2025-48827:vbulletin代码执行POC", "https://mp.weixin.qq.com/s?__biz=Mzg5MDk3MTgxOQ==&mid=2247499910&idx=1&sn=df1de2e9b4b1e20a50c035217bcd298d": "【漏洞预警】llama_index SQL注入漏洞(CVE-2025-1750)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503426&idx=1&sn=115407d3c71a09bb32a1e396ce382f5a": "雷神众测漏洞周报2025.5.26-2025.6.2", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650610964&idx=3&sn=fca50e82f94f682a5a2e622dd3f26c96": "EMQX命令执行后渗透", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524681&idx=3&sn=a29e14d95783cd29e736a3f282efa03a": "谷歌紧急发布安卓安全更新,修复可导致权限提升的多项高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555033&idx=1&sn=8b9eb9d96e81a19e599e4b06d4acd1d8": "Solon框架模板漏洞深度剖析与修复实战", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503353&idx=1&sn=2879dd13e8053ea89d8b73c643cf584c": "【成功复现】ZZCMS系统SQL注入漏洞(CVE-2025-0565)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491684&idx=1&sn=07dbb62f791af15130c9a2bbcdc77c41": "M7s UI open 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524681&idx=1&sn=58d3241abc197e40dd2a48c4e3a4633d": "联发科芯片漏洞:攻击者无需用户交互即可提权", "https://mp.weixin.qq.com/s?__biz=Mzg2NjUzNzg4Ng==&mid=2247484703&idx=1&sn=720816ecc0b5ad2912dd2a40ba854d57": "第125篇:蓝队溯源之burpsuite、zap、AWVS、xray扫描器反制方法与复现", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523177&idx=2&sn=5f49791311ee93aa1acd5a1dd56c0a88": "慧与:注意这个严重的 StoreOnce 认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595168&idx=3&sn=1778f7b154f1be5f2139f7fdca6dc4be": "潜伏10年!Roundcube Webmail 重大安全漏洞曝光,CVSS 评分 9.9", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137085&idx=2&sn=a1068ce13789e6cc3241c9e621774f49": "合规管理公司出现合规问题:Vanta系统漏洞导致客户数据交叉泄露:DevOps安全警报:配置错误成为加密劫持攻击新途径 | 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651322480&idx=4&sn=1305aad8febb12c5f092cba247ab1534": "谷歌紧急发布安卓安全更新,修复多项高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484865&idx=1&sn=8b1d3df35de589153681dbd36d404672": "安钥®「漏洞防治标准作业程序(SOP)」征文启示 [2025年第22期,总第40期]", "https://mp.weixin.qq.com/s?__biz=MzU0NTU5NTA4NQ==&mid=2247491726&idx=1&sn=a620064d4be426858ff4515ad6baa67d": "CVE-2020-11800 Zabbix 命令注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489932&idx=1&sn=ad2b365fc59ff231cc27cb2df0aab090": "NPS之Socks流量分析以及未授权复现", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096308&idx=2&sn=63481e238664f1bde33e4fa50f1ee971": "Splunk Universal Forwarder for Windows 漏洞授予非管理员用户完全内容访问权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652069999&idx=2&sn=31032694ae0b355efabdb89fde5ebc02": "【安全圈】高通紧急发布 5 月补丁,修复 3 个 Adreno GPU 零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247496548&idx=1&sn=80b474dcabbcb2690af97241a091e02e": "【论文速读】| SecVulEval:针对真实世界C∕C++漏洞检测的LLM基准测试", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492623&idx=1&sn=850372f429fe2877e3bc96d0d6f52967": "警惕!境外间谍借系统漏洞,直击党政科研要害!", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096308&idx=1&sn=d4d276386458934743383a476c8c2723": "新的 Safari XSS 漏洞利用 JavaScript 错误处理来执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463091&idx=1&sn=cf5d4e1447040ab6b1b31484430e7834": "CNNVD关于Google Chrome安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491941&idx=1&sn=180a7a72b014cd3156a1f44dee242368": "最新xxl-job综合漏洞检测利用工具|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484462&idx=1&sn=7a2f920a5bd2ec339a782f88f68fa3ed": "llama_Index SQL注入漏洞(CVE-2025-1750)POC及本地复现部署环境", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523177&idx=1&sn=6ead40fb0a70735a161f4ecd984a3f01": "谷歌悄悄紧急修复已遭利用的 Chrome 0day", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503443&idx=1&sn=763f543a4089f1b08833ccbac7059be5": "【新安全事件】vBulletin 远程代码执行漏洞(CVE-2025-48827)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519424&idx=1&sn=d2898555db99efec97a2a0bf0a748284": "CNVD通用型漏洞挖掘-app逻辑缺陷的两个挖掘案例", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491693&idx=1&sn=4f6b2b1ccf9491a261ce9ce50a700534": "M7s UI download 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664243600&idx=1&sn=a254cce915bb8018f5d4620176b69f20": "CNNVD | 关于Google Chrome安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI1NTM4ODIxMw==&mid=2247501362&idx=1&sn=01b71332a9c7c08f19fa2bd90f837ca6": "Vul情报 | CVE-2025-4123 漏洞(附EXP)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490183&idx=1&sn=8796151f4fa121bbb37bd0cbfe9f8b11": "【AI高危漏洞预警】llama_index DuckDBVectorStore SQL注入漏洞CVE-2025-1750", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493312&idx=2&sn=34a6edf72fcd14c1c0603c5e647f1f18": "漏洞预警 | 傲发办公通信专家系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485894&idx=1&sn=c532159a5a85d9939354104532ecd411": "唯德科创 IPEasy 知易通 DownloadFile 任意文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655281545&idx=1&sn=c51dacb03c32e53c22ea3c7ee12da50e": "如何快速挖掘高质量安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247546428&idx=2&sn=6f40163d3d690076a95f75e1becb1dd3": "HVV护网行动 | 分享最近攻防演练HVV漏洞复盘", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493312&idx=3&sn=181705888a549777ca5ddc60469799af": "漏洞预警 | 汉王e脸通智慧园区管理平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652116177&idx=1&sn=b61a279f71e939047cb92a3467d505fe": "维多利亚的秘密由于安全漏洞推迟发布收益报告", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490183&idx=2&sn=26d52c8caaf272e72f132b255994b95a": "【高危漏洞预警】Roundcube Webmail upload.php _from反序列化代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463107&idx=1&sn=a2351a664e2c00776ed72bcaf1b17d5f": "信息安全漏洞周报(2025年第22期)", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247769&idx=1&sn=776c3d134659ab6f035cf673173655f8": "Windows RAR∕ZIP解压缩泄露NTLM哈希漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497569&idx=2&sn=28e157ca89556fd156ed0c012068882e": "你的服务器在裸奔吗?高危漏洞、端口和弱口令,哪个才是压死骆驼的最后一根稻草?", "https://mp.weixin.qq.com/s?__biz=MzkwODMzOTA2NA==&mid=2247494382&idx=1&sn=330fbe9f024f01ab79c0d9b1adb073fb": "0Day漏洞曝光!多媒体综合业务显示系统面临严峻挑战", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512335&idx=1&sn=f2441cd275388321ab2e598a075770f8": "Windows RAR∕ZIP解压缩泄露NTLM哈希漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503451&idx=1&sn=838415cece549ae052cced3f736997b1": "【已复现】DataEase 远程代码执行漏洞(CVE-2025-49001、CVE-2025-49002)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499813&idx=1&sn=6bae33061f883e54798c04b274e0622e": "WebShell 再进化:无需 cmd.exe 实现任意命令执行", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530437&idx=1&sn=267b5a0dabb08b7c42c092b55b72eaf0": "Roundcube ≤ 1.6.10 通过 PHP 对象反序列化进行身份验证后 RCE", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247616341&idx=1&sn=f64a0740ed2b0d209cefae4d1633c3ee": "CVE-2025–4123 | Grafana SSRF和账户接管漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261267&idx=1&sn=9438b6a7fe72e186a534faca70834b0b": "赚取50000美元的5个顶级 XSS PoC", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492805&idx=1&sn=30e47869ddf47a6cb5a92b70c81c266e": "【已复现】DataEase 远程代码执行漏洞(CVE-2025-49002、CVE-2025-49001)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491703&idx=1&sn=6775431a3523ce79579c880215420a9f": "世邦通信SPON-IP网络对讲广播系统 videobacktrackpush.php 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247491229&idx=1&sn=a9c298d3409c3f84537a599c5c171c00": "创宇安全智脑 | Cisco IOS XE 任意文件上传(CVE-2025-20188)等81个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247485866&idx=1&sn=f22b47fb7cbbdb28ea72a878b6f9d8fa": "Jenkins未授权访问-命令执行漏洞复现及修复方案", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490196&idx=1&sn=445a97e63142e9216294ebc4e1bea7ad": "【高危漏洞预警】Dataease JWT认证绕过&H2数据库远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037742&idx=1&sn=e38b2e41abe4ef5de9291947fe02ec0b": "消息中间件RocketMQ命令执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU0NTU5NTA4NQ==&mid=2247491757&idx=1&sn=e18c6ced25ae41c182a5c263e6293df1": "CVE-2024-4956 Nexus Repository 3 路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595183&idx=4&sn=ac565329b10f28fb7e171969a80f9396": "更新:改造模糊测试工具 | 系统0day安全-二进制漏洞攻防(第4期)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497691&idx=1&sn=8a21820aa197e5d11ac115da464d6a5d": "RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494864&idx=1&sn=f82c751d60028bc253ecff7eb70a40f2": "百万奖金池!ByteSRC全域3倍积分!单个漏洞赏金15万!", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497536&idx=1&sn=7318bd01d7d51cb7892c8ac62203bacb": "【漏洞通告】DataEase远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524460&idx=1&sn=7d2b4e4d60276ffcbb0e8a79d51308cf": "DataEase H2数据库远程代码执行漏洞(CVE-2025-49002)", "https://mp.weixin.qq.com/s?__biz=MzIyNDkwNjQ5Ng==&mid=2247486115&idx=1&sn=b606ab44ebe50c4968bb70b369ba0f04": "CVE-2025-49113 Roundcube Webmail反序列化漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486694&idx=1&sn=c0b1408fba02412f21d2e7d5c3078bed": "【漏洞预警】DataEase 远程代码执行漏洞(CVE-2025-49002)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247491943&idx=1&sn=e84dfaf45db4b4d1cc436ecc54f3e8c9": "WEB漏洞扫描器Invicti-Professional-V25.5.1(自动化爬虫漏洞扫描)更新", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519440&idx=1&sn=2c02d7338cb44ac37b0fdcb7466ad272": "突破常规!文件上传漏洞的6大隐蔽攻击面(多个高危场景剖析)|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247488974&idx=1&sn=5b2444dbfe6ced072d11a897895e3fee": "超骚逻辑漏洞-滥用自动邮件回复程序访问内部工作场所", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524699&idx=1&sn=aa6aabfcb1a711cabae2aa5b84c2e4af": "谷歌披露威胁组织攻击方式:伪造Salesforce数据加载器实施钓鱼攻击", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488552&idx=2&sn=943465d2d861698941b2f73fc679ea7f": "Smartded Meteobridg的template.cgi接口存在任意命令注入CVE-2025-4008 附POC", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485776&idx=1&sn=deb484fff8f887811d04f804566d5b5b": "Kindeditor编辑器漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488552&idx=1&sn=778857248586131ae73927608b847830": "Liferay icon.jsp接口存在跨站漏洞CVE-2025-4388 附POC", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070016&idx=3&sn=2f8103c74269e54bf6753a609066de26": "【安全圈】在VMWare NSX中发现多个存储的XSS漏洞-立即修补", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247486915&idx=1&sn=1f9e76e950e746d6c1ab9c1e3312cea4": "【信息收集】ARL灯塔搭建教程-联动vscan自动化漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649793732&idx=1&sn=59278d0b2074a9c856a0700dfac2b83d": "0day漏洞量产?AI Agent“生产线”曝光", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485899&idx=1&sn=376aea6abca97546fc3a44c807047baa": "唯德科创 IPEasy 知易通 WSFM 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MzY1NDc2MA==&mid=2247484313&idx=1&sn=9b71c3e6bcb666505807374ab5dcb14a": "渗透测试与漏洞扫描:有什么区别?", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523184&idx=1&sn=f205e1639e39bac5e3d3496845db4087": "思科提醒注意严重的 ISE 和 CCP 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjY5MDc4Ng==&mid=2247485167&idx=1&sn=ef7026252c6a5848c0eb5555f96dd119": "别让广播出卖你!Android BroadcastReceiver 漏洞排查全流程详解", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493320&idx=3&sn=eb3dea720279ce737c522dec98ba1498": "漏洞预警 | 灵当CRM SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247491258&idx=1&sn=0d0e52dce93ee9f25fe7f5ebce841822": "【漏洞】飞塔防火墙漏洞深度利用及调试环境搭建", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655281664&idx=1&sn=9fb168bdaf2d0e9a644148d8866cd5d5": "中间件常见漏洞详解", "https://mp.weixin.qq.com/s?__biz=MzI4NjAzMTk3MA==&mid=2458860668&idx=1&sn=197d36812e146c81964457d9a5c735c1": "两条命令搞定!Kali原生集成GVM漏洞扫描器,比Docker省5GB空间", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493320&idx=1&sn=23fa59fe6fd3f2dbea3de0de22cd73bb": "漏洞预警 | Elber身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795343&idx=2&sn=4b0bfdc266245ab37bf0d6d95de25dc5": "Wireshark 漏洞可通过恶意数据包注入发起 DoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493320&idx=2&sn=ea00e80355de429de0124a3d84554ccf": "漏洞预警 | 智邦国际ERP SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493320&idx=4&sn=42c264664f00292c9dec894a64c2167a": "工具 | exploitdb", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507774&idx=1&sn=d12eb0b53d048871be85e2a2f8db6bf4": "微步情报局发现DataEase存在多个高危漏洞,可实现RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486151&idx=1&sn=ca31a24918b75ea9220a2ee821b6614d": "工具集:sqlmap Xplus 【基于 sqlmap,对经典的数据库注入漏洞利用工具进行二开】", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499819&idx=3&sn=9c87e28e0dfd967b2d7ae0af1d1eef28": "基于反序列化漏洞,通过 Sharp4ViewStateShell 执行命令实现权限维持", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491712&idx=1&sn=fcd7654701a537eecd4c655d43ada5cf": "PaloAlto-Expedition OS命令注入漏洞 (CVE-2025-0107)", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261279&idx=1&sn=3aef26c9a656d2adf263b8aad5a02852": "【$3,800】Shopify 缓存中毒导致DoS漏洞披露", "https://mp.weixin.qq.com/s?__biz=MzUzMjQyMDE3Ng==&mid=2247488361&idx=1&sn=c11476376033a528ae2ce25bf94c52eb": "2025年离大谱的CVE-2011-10007", "https://mp.weixin.qq.com/s?__biz=MzU2MzY1NjU3Ng==&mid=2247485931&idx=1&sn=7fee859148e33e1eaf8fc15cbb996402": "企业内部安全漏洞修复流程的建立与思考(其三)", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247624932&idx=1&sn=6f75bcca06219e491efdcf1420264980": "小米:车联网安全漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261279&idx=2&sn=34a64379d3eb92a135403a71c42b4635": "CVE-2025-30397 PoC", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247497365&idx=1&sn=4ec899e26e1e52c198d80c9cacdd1184": "记某众测Fastjson<=1.2.68反序列化RCE过程", "https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247489196&idx=2&sn=c6590cb7a9b28def433bd6e8ff26eeb5": "谷歌称黑客利用修改版Salesforce应用窃取数据并勒索公司", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503369&idx=1&sn=61a37e11b0764057323dfc5fb5baf447": "【成功复现】Meteobridge命令执行漏洞(CVE-2025-4008)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503459&idx=1&sn=087027a577be1dc41e697c2c19c5b6d6": "【已复现】Roundcube Webmail 后台代码执行漏洞(CVE-2025-49113)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647796528&idx=1&sn=c28536a9bfd233fe849fe92949b8dd1b": "SBOM风险预警 | pino系列投毒包开展敏感数据窃取及远程代码执行攻击", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524715&idx=4&sn=579700137876da6310dde825aee73f7a": "思科ISE关键漏洞影响AWS、微软Azure及Oracle云基础设施部署", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247515360&idx=1&sn=531525683c50094e1ba7694d49afc477": "警惕!你的 API 正在 \"裸奔\"?Swagger 安全漏洞攻防实战全解析!", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247491129&idx=1&sn=36e96af1e2874ff724083aab84b24592": "能信安:漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651322591&idx=1&sn=fa84e28c57c290ad80544c3a63efd1d9": "Wireshark漏洞可通过恶意数据包注入引发拒绝服务攻击", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096316&idx=2&sn=946a6059e69d462480bd4449cf5bc7d3": "Apple 的 iOS 激活允许注入未经身份验证的 XML 负载漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490206&idx=2&sn=dae3b0028a99377b65374576fd62ad24": "【高危漏洞预警】FreeFloat FTP服务器缓冲区溢出漏洞CVE-2025-5596", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247528265&idx=1&sn=1a27220513edf970c954fd0ed275e10b": "用 IRify 深入探索 WebShell 中的 Source∕Sink 挖掘", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096316&idx=1&sn=f44e5a2873e0615bf2b2c9b4df2bc31c": "VMware NSX XSS 漏洞使系统面临恶意代码注入", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490206&idx=1&sn=5a269eb8ff8e659faabedaa0aa8a4688": "【高危漏洞预警】PHPGurukul Management System代码执行漏洞(CVE-2025-5560)", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900684&idx=1&sn=55b6582945707ce3360fd839dec3374a": "【数字风险警示】从0-Click漏洞到AI“失控”:我们如何应对新兴网络威胁与治理挑战?", "https://mp.weixin.qq.com/s?__biz=MzkzMTYyMDk1Nw==&mid=2247483874&idx=1&sn=7c91c92dce650dbea638effe4cc0b091": "苹果iMessage中的严重零点击 (zero-click) 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137107&idx=2&sn=19c9e45394e4353f7f3b9cd5194b0896": "警惕,恶意伪装缓存插件窃取WordPress管理员凭证;VMware NSX发现多个XSS漏洞,攻击者可注入恶意代码 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247486231&idx=1&sn=e78d0606c0186e03e3dc32258335b8db": "vBulletin replaceAdTemplate 远程代码执行漏洞(CVE-2025-48827)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595409&idx=1&sn=df257ccaa9f3bcd7348174e00218bd92": "Redis漏洞分析,ACL篇", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516756&idx=1&sn=f1267aac6ba91fac591b1b3eb4624126": "xxl-job漏洞综合利用工具 -- xxl-job-attack(6月3日更新)", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495075&idx=1&sn=e10bf05cdb15287868abb611f48db330": "2025攻防演练必修高危漏洞集合(3.0版)", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486697&idx=1&sn=8286bc3f6b40a00154d5b7cd13c4dd8a": "【已复现】Roundcube Webmail 代码执行漏洞(CVE-2025-49113)", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247488934&idx=1&sn=0fa423fe5ba9e56f7d1ebc70b5d65fd4": "JS中的漏洞信息", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651133301&idx=1&sn=448c861d50bcae8305539a7cbca30314": "高通GPU漏洞威胁安卓生态,撞库攻击致北面资料外泄|一周特辑", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795352&idx=1&sn=a6a1439c52339f5b092bf594b17a73bc": "iMessage 零点击漏洞针对美国和欧盟的关键人物", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247485643&idx=1&sn=ec74894c3ce42e4b21fd19a407c54c24": "某景人事管理系统漏洞挖掘与分析", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492226&idx=1&sn=a5a57ba3077ab1eb8f5e4725a95a05fe": "从 SSRF 到 RCE:一次众测Fastjson<=1.2.68反序列化RCE过程|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530523&idx=1&sn=eae1159f200e68098297acb465d5d4c8": "Anthropic MCP 中的漏洞:全模式中毒 + 机密泄露工具攻击(内含 PoC)", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247488976&idx=1&sn=823dff2e68ba60b26f2a7c07d1c136f0": "电商网站 SSTI 漏洞利用:专业攻略", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485975&idx=1&sn=a3a96fcfeca034089636e9a89ae83d48": "CVE-2025-49113|Roundcube Webmail反序列化漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491721&idx=1&sn=bca6974ea87562392f4e4f205edb8ece": "杭州新威数字信息-SMG网关管理软件 9-12ping.php 命令执行漏洞 (CVE-2025-1448)", "https://mp.weixin.qq.com/s?__biz=MzkwMDc1MTM5Ng==&mid=2247484110&idx=1&sn=e7c3b3595ccf8ca433e1a2e4c2b81c46": "【已复现】Dataease JWT 认证绕过漏洞∕远程代码执行(CVE-2025-49001∕CVE-2025-49002)", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247502951&idx=1&sn=fae4b38afc3c1eb2bfbc0e6f0c4db3d2": "【攻防实战】phpmyadmin-RCE集锦", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070055&idx=3&sn=6b9ef71bf3e0c60b87ab26c126ce970f": "【安全圈】热门 Chrome 扩展陷 HTTP 和硬编码密钥双重漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655281741&idx=1&sn=2975bc75e4e224aca1c0bfccb16aaa4e": "2025 HVV必修高危漏洞集合3", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIxNzEzNA==&mid=2247492804&idx=1&sn=5258769e3eb478e47f0d9cb91d055b0a": "【JAVA代审】从0到实战:超全Java SQL注入漏洞全解析与防御指南", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485904&idx=1&sn=88ebe7b12908357268cf7bf6ff26daed": "智联云采 SRM2.0系统接口 autologin 身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485975&idx=2&sn=dbe57e94f20bc9b3f98b334b6267cffc": "CVE-2025-48827|vBulletin远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519442&idx=1&sn=c589daacc1be8e90294d6c18e509d2fb": "赚取50000美元的5个顶级 XSS PoC", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651322725&idx=2&sn=a6d9bad6730f5365d0a54cf5c19b22bf": "6.11北京 | 报名FORCE原动力大会-大模型安全分会场 文末有福利", "https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247491495&idx=1&sn=28a749aa101664e76dd905dfc0081fe3": "网络安全人士必知的 AWVS 漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzI4NjAzMTk3MA==&mid=2458860720&idx=1&sn=700c43def3115706dbdf14b9634c3176": "16核CPU烧到100%!21节点六种漏洞扫描模式实测,这种模式让服务器暴走", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247488992&idx=3&sn=240dba489c13a8cf1abd16a7f09aa981": "JS中的漏洞信息", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503392&idx=1&sn=5292f042bdea8bb3d2fd6e87cb7a2ca2": "【成功复现】vBulletin远程代码执行漏洞(CVE-2025-48827&CVE-2025-48828)", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247491410&idx=1&sn=e4ef9713ca498412d72fd9536077c06b": "【漏洞】PHP代码审计篇 - 信呼OA 前台分析SQL注入", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497601&idx=2&sn=593538deb4ffaacfce66f628dd85cb2b": "当系统崩盘,Busybox 如何成为你的“诺亚方舟”?漏洞排查的另类视角", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247492152&idx=1&sn=9880c257352e81a69012ac2327d46c1b": "潜伏十年的严重漏洞:CVE-2025-49113 Roundcube 反序列化漏洞原理与 gadget 构造深度分析", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247490554&idx=1&sn=a617e5cf9c985ea332307e9cbb40a955": "LazyHunter:自动漏洞扫描的工具", "https://mp.weixin.qq.com/s?__biz=Mzg3NTU3NTY0Nw==&mid=2247489904&idx=1&sn=1b0d39b19089398e5a3f203ac2fcb524": "还在用Wireshark?这款工具直接帮你提取Web攻击+复现请求全过程!", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247488992&idx=1&sn=7cc8813409e77f5eeae632e9d1aefe0d": "文件上传操作漏洞场景挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247624964&idx=1&sn=9fd73dd275e8e53d7e22338456f3503d": "小米:车联网安全漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486547&idx=1&sn=93d9c43f4d2dc8f85deb74ac8a811ba0": "某日志管理系统前台注入(0day)", "https://mp.weixin.qq.com/s?__biz=MzkxMzQyMzUwMg==&mid=2247486627&idx=1&sn=c0d293c64fcb84c997e3635d9f5fc033": "感谢大家的关注与支持 送两0DAY吧", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070072&idx=3&sn=d186f40156a6e7af24a1cba237357ebb": "【安全圈】黑客团伙冒充IT技术支持人员入侵Salesforce与Okta平台", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485909&idx=1&sn=ed87702eca874b67599bdd7fef6b2046": "蜂信物联 FastBee 物联网系统 download 文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070072&idx=2&sn=6568143133dcdce8e806ab5ee4c23088": "【安全圈】Play勒索团伙利用SimpleHelp漏洞实施双重勒索", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611001&idx=4&sn=2dafbc946a12493ed35083385d421118": "一款以Web与全版本服务漏洞检测为核心的辅助性主、被动扫描工具", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530636&idx=3&sn=af09ad52060addc40f7da1e8a83e2391": "CVE-2025-49223 - Billboard.js 中的原型污染", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530636&idx=4&sn=b38767bda29ea9351eaf4b549f97c267": "CVE-2025-32756 的概念证明 - 一个影响多种 Fortinet 产品的严重基于堆栈的缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491732&idx=1&sn=bcd132800c07215aff233df69aadc674": "锐捷EWEB路由器 timeout.php 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247636125&idx=3&sn=7df424bc2d1af6076a707c4e7d7171fd": "Wireshark漏洞可通过恶意数据包注入引发拒绝服务攻击", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647690775&idx=1&sn=4897cf1429401e098228448bec6b6afe": "0041.我是如何接管 Vercel 子域名的", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247492225&idx=1&sn=cbfab9a778a335b827b9c5d1bf80f0c8": "仅靠JS审计就能捡到的漏洞 前端代码中的隐藏利用点|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzU1NzkwMzUzNg==&mid=2247484504&idx=1&sn=6c16443c92cec6973ef0c0f791bfa673": "云安全 - k8s ingress漏洞进一步探索引发的源码层面的文件漏洞利用特性分析(golang、java、php)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493329&idx=1&sn=abb6622d519de74ef513a6d40dfa4e1c": "漏洞预警 | vBulletin远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489000&idx=4&sn=2066a14b4542a331149652d67e458428": "JS中的漏洞信息", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493329&idx=3&sn=e35510fd19234a17cbf9fbd026dc3fa4": "漏洞预警 | 汉王e脸通智慧园区管理平台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489000&idx=3&sn=aa512efe567bc9a4141a808092f7f1df": "文件上传操作漏洞场景挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493329&idx=2&sn=f1e9419c6425a0b7418bc51ebeb5c0d5": "漏洞预警 | DataEase身份认证绕过和远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484814&idx=1&sn=bd0f1048a2f82f6198b6866c03094a2d": "【漏洞复现】Dataease JWT 认证绕过漏洞∕远程代码执行(CVE-2025-49001∕CVE-2025-49002)", "https://mp.weixin.qq.com/s?__biz=MzU2MjU2MzI3MA==&mid=2247484656&idx=2&sn=446b71f98850bef1c255884d2fa0ba8e": "16核CPU烧到100%!21节点六种漏洞扫描模式实测,这种模式让服务器暴走", "https://mp.weixin.qq.com/s?__biz=MzAxOTk3NTg5OQ==&mid=2247493086&idx=2&sn=d147e432ba1c5547cdd9e986306e0e0e": "《LLM大模型越狱攻击预防与框架》第10章:未尽探索 (Unexplored Mist)", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484486&idx=1&sn=0634de519da9dc207551df06c344f951": "Roundcube Mail后台代码执行漏洞复现(CVE-2025-49113)及POC", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611010&idx=3&sn=e7cdd3d1ca22f06dfaf0ee03b2833a62": "突破常规!文件上传漏洞的6大隐蔽攻击面(多个高危场景剖析)|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261285&idx=1&sn=47912aa1ad8f702266e530ee82c6e700": "【$500】存在 2 年之久的 Android 锁屏绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611010&idx=4&sn=718ad8933593d0aa40f4eff70552dd83": "xxl-job漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491742&idx=1&sn=551a2fec606a52006536f6f8f605fe28": "博斯外贸管理软件V6.0 DCreceiveBox.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611010&idx=1&sn=b7ed772938827af615626eee649fe6f0": "“取个快递”,损失数十万!已接连有人中招;|黑客利用iMessage零点击漏洞攻击iPhone用户", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484424&idx=1&sn=70f6858440edbfe773088e62f6236dfb": "【漏洞预警】DataEase 远程代码执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492249&idx=1&sn=3f6513fef2c2e8ffa88734793b5bce3a": "Alibaba Sentinel SSRF漏洞代码审计", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712289&idx=1&sn=fdbee61f6496ed4530412ee877a30890": "MS12-020漏洞利用及复现", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497632&idx=2&sn=8da59ee32e10a2edcda3a779f252f41b": "网络安全攻防:别再傻傻地等漏洞,主动出击,从JS里挖金矿!", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247510739&idx=2&sn=c4732cc4deb2ddd4dc84dd45a2bc3f79": "3比特币叫卖安卓0day,声称已打中以色列国防军目标", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247499478&idx=1&sn=fe921fc1658e176eadc9ea4f497308f2": "近期暗网 0day 售卖预警", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506580&idx=1&sn=4b470d46ed40b7804ed3cd7663e68383": "精品产品系列 | 捷普漏洞扫描系统", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247512691&idx=1&sn=025942d8dc5bd2aac8b53dd2d5897e0c": "某景人事管理系统漏洞挖掘与分析", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507780&idx=1&sn=fa8e5866d2ef385879919442a0d521b3": "漏洞通告 | Roundcube Webmail存在反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496034&idx=1&sn=4e44662436d0787b17b38a989dace356": "CNVD漏洞周报2025年第21期", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487455&idx=1&sn=5ab5a46d96791975f41ea10de851534a": "代码审计之 XXE漏洞场景,及实战讲解!", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490211&idx=1&sn=ed866558cae0c0b4589f32f311e9b6a9": "【高危漏洞预警】VMware Cloud Foundation 信息泄露漏洞(CVE-2025-41230)", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900701&idx=1&sn=057d9271584b457c3a1359732d44af3b": "Chrome插件安全警报:微软、AVG等知名应用曝出重大漏洞,你的隐私或在“裸奔”!", "https://mp.weixin.qq.com/s?__biz=Mzg3MDk0OTc1Nw==&mid=2247488382&idx=1&sn=35b960681e424b4247b5000b170395dd": "支付漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzAwMDQwNTE5MA==&mid=2650247773&idx=1&sn=5d39d0d3b48e9efe0e8c9e3fd6295866": "CVE-2025-26319:FlowiseAI未授权任意文件写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzU5MDMxOA==&mid=2247484411&idx=1&sn=f3e58ba25d5807bf8f0b3d3d2bc0e0b5": "trojan管理平台任意重置管理员密码+命令执行组合漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247487204&idx=1&sn=18346b3e0c1feb3a00b855885c33b875": "记一次实战日穿整个系统getshell-共九个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503433&idx=1&sn=59c967556e7479a42ab082a5237cbcd7": "雷神众测漏洞周报2025.6.3-2025.6.8", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247497483&idx=1&sn=b7885261baace192db72424ec6fb84d2": "CVE-2025-26319:FlowiseAI未授权任意文件写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503464&idx=1&sn=587e0d89f4927447a4241f33a7b911b3": "安全热点周报:Google 修复了在攻击中被利用的新 Chrome 零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647690780&idx=1&sn=77b86e8189faf46562c7d8202b33d93f": "0042.我如何发现 SMTP 注入漏洞并在短短 30 分钟内赚了 800 美元!", "https://mp.weixin.qq.com/s?__biz=MzIxOTQ1OTY4OQ==&mid=2247486724&idx=1&sn=7e6d7cd8bd43497042c7a5694c21b673": "DataEase 远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247500236&idx=1&sn=ba650d156368aa55c4c4830acbfce29d": "G.O.S.S.I.P 阅读推荐 2025-06-09 分享Huntr上的几个大模型框架的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxODUxMzE1Ng==&mid=2247484079&idx=1&sn=cf07fe72a4d1a5c46ee7f9b2a487f44a": "分享Huntr上的几个大模型框架的漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524736&idx=2&sn=e06dcdfe006dcd62bdda2dda950d1827": "Dell PowerScale 漏洞让攻击者能够获得未经授权的文件系统访问权限", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519450&idx=1&sn=6591917ba9a1c6fd2cde9141da32609d": "记一次某大厂csrf漏洞通过蠕虫从低危到高危", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496034&idx=2&sn=77ee859597afa06bf8155980519e08d5": "上周关注度较高的产品安全漏洞(20250602-20250608)", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485914&idx=1&sn=2821f58b6caf44cb106c661980341420": "神州数码云科信息 DCN 防火墙后台 Ping 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNTU2NA==&mid=2247486369&idx=1&sn=33957214471faf3e137bb4a71db83923": "赏金SRC 某开源社区存在水平越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4OTExNTk0OA==&mid=2247485046&idx=1&sn=dfad8a66920758ce8ec4c08d36145120": "DataEase 远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788669&idx=1&sn=a61f1741b0e694b9f3e6c7c1106df246": "全球科技巨头隐秘监视数十亿Android用户,滥用系统漏洞跨端追踪长达八年", "https://mp.weixin.qq.com/s?__biz=MzkxNTY4NTQwMg==&mid=2247484515&idx=1&sn=426da386d99d295b7b7c6fe2618993ce": "Vite漏洞利用指南(文末附工具)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488565&idx=1&sn=125adcaf47829f9e73f5b4fa72c02cc0": "Dataease JWT 认证绕过导致未授权访问漏洞CVE-2025-49001 附POC", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530704&idx=3&sn=59d50955f5f929cb0f489cbe2eb36b04": "利用Reverge自动化工具:提升漏洞赏金 hunting 的速度与效率", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496441&idx=1&sn=b86d8080825684249e954e3890155c70": "2025年5月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247506582&idx=1&sn=dcd5972dc904ed507f28e03f89627aff": "漏洞赏金工具 v1.0", "https://mp.weixin.qq.com/s?__biz=MzI4NTcxMjQ1MA==&mid=2247616371&idx=1&sn=e12ff003aad2f2d456a8d64b1af1d093": "最新分析 | Mirai 利用 CVE-2024-3721 攻击 TBK DVR 设备", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463155&idx=1&sn=b6e6f751cf3e3300734697d8d00109b5": "信息安全漏洞月报(2025年5月)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499968&idx=1&sn=c0a4acf073d44a93066277415a1b8beb": "CNVD漏洞周报2025年第21期", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526479&idx=1&sn=4cca7247d9bb128024ac51c166779b4a": "SRC 漏洞挖掘中的绕过 WAF 技巧", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501170&idx=2&sn=e7ea349dff54c8123a16fa49b1158f9b": "【漏洞通告】Apache Kafka Connect LDAP远程代码执行漏洞(CVE-2025-27818)", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503414&idx=1&sn=ac899c057f0552dd0ecad669c0863b2a": "【成功复现】Roundcube Webmail代码执行漏洞(CVE-2025-49113)", "https://mp.weixin.qq.com/s?__biz=MzkzNTA0NzgyMA==&mid=2247484267&idx=1&sn=9acb4f45d2ea2b3cf8a88262ef691961": "CLFS cve-2022-37969", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137136&idx=1&sn=476cddcaef4be59b5b96cf166775ebf4": "漏洞管理玩法已变,四大常见错误亟待摒弃", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595541&idx=1&sn=ca1223787e388345e955ac4b09a7ffad": "Fuzz挖掘sudo提权漏洞:一次堆溢出如何逆向分析出提权思路", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490219&idx=2&sn=0501ee9f75de1f6f609c9c7c75b2d66e": "【高危漏洞预警】Apache Kafka Client配置造成远程代码执行漏洞CVE-2025-27818", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489303&idx=1&sn=8578d9e5018f2ca8164a6590e29414d1": "【漏洞通告】Apache Kafka任意文件读取与SSRF漏洞(CVE-2025-27817)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247499492&idx=2&sn=151192a329acd78bab79ba17fb067d37": "KAFKA CLIENT 3.9.0 及以下版本存在服务器端请求伪造漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484871&idx=1&sn=93c960e76cecd00e2ac4a5d93e4e12b9": "【复现】Kafka Connect任意文件读取漏洞(CVE-2025-27817)风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247489508&idx=1&sn=0bfab3f39b28fb33bba8abd281d49b07": "Redis未授权漏洞复现汇总", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247496573&idx=1&sn=f701e4ac102fbed8f25d4461e7b75f97": "【论文速读】| VADER:漏洞评估、检测、解释和修复的人工评估基准", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247489961&idx=1&sn=9ceb6db022621cae9f729d0aaecf12d6": "漏洞挖掘实战之弯道超车", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490219&idx=1&sn=acf6dce0f219c2ea5a110199ed4b8a7f": "【高危漏洞预警】Apache Kafka Client 任意文件读取与SSRF漏洞CVE-2025-27817", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555093&idx=1&sn=fd9d6588ba43744ec9add8e7e6f99d9f": "玩转网络漏洞挖掘,实战能力弯道超车", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487457&idx=1&sn=a167e6d3edc69691a44053b8b3e7a302": "实战讲解 Java代码审计之 FreeMarker模版注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTU2ODQ4Mw==&mid=2247487384&idx=1&sn=5ffca9c9cb920ef8ad92e9b37a2cb559": "CVE-2025-49113 漏洞分析与利用方式", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503473&idx=1&sn=46559985ab4d7f8502c1c9f1268ebaac": "Apache Kafka 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484429&idx=1&sn=cb4fd855f8a0f2ad59111e3ef81bcdfb": "【漏洞预警】Apache Kafka Connect任意文件读取漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512431&idx=1&sn=4629ebc541371b4e846c5f90d68b8b42": "2024年度Linux内核漏洞类型及趋势分析", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524758&idx=4&sn=0a68213306cd66c9fb6a4723562c1652": "谷歌账户恢复漏洞致攻击者可获取任意用户手机号", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524465&idx=1&sn=900b4d98a5bc47ffd6eaa0ceca281a07": "【漏洞通告】Apache Kafka Connect 任意文件读取漏洞(CVE-2025-27817)", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486700&idx=1&sn=c4141ed8747a6ddf3958888b71c5899e": "【漏洞预警】Apache Kafka Connect 任意文件读取和服务端请求伪造漏洞(CVE-2025-27817)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501170&idx=3&sn=6eb1c5ad37527cefeda8cb6557e090a2": "【漏洞通告】Apache Kafka Broker JNDI远程代码执行漏洞(CVE-2025-27819)", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485082&idx=1&sn=d864aa242dace84f433eb2fae22e0c69": "2025年5月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484489&idx=1&sn=a947eef1ac5b257d64b7afb09bdcbe3b": "AWS re:Inforce 2025 应用安全议题", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655282214&idx=1&sn=0625914fed042db42421a0970a5166c9": "2024年度全球软件漏洞与威胁情报报告", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530717&idx=3&sn=3dda2acd611a02796d17b6fed3a78683": "利用 CVE-2025-0072 绕过 MTE", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507787&idx=1&sn=1470dd59fd12731195bf46d75d0e856c": "速修!Kafka Connect爆任意文件读取漏洞,无需授权", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463169&idx=1&sn=4657e8043045aba6ecf5bab93e343ee2": "信息安全漏洞周报(2025年第23期)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530717&idx=2&sn=2e039d2ebc04cf71f327eb71ea092dba": "CVE 2024-43570 和 CVE-2024-43535 的报告和 POC", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492814&idx=1&sn=7fbcb92f5cf2e09c7b66163bf13863c7": "【已复现】Kafka Connect 任意文件读取漏洞(CVE-2025-27817)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523260&idx=2&sn=ea145b27a636bc95e9cf0045e0f89d03": "Ivanti Workspace Control硬编码密钥漏洞暴露 SQL 凭据", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651322893&idx=3&sn=acca4bafe06c06c3a0e8756199e46a51": "Windows WebDAV 零日远程代码执行漏洞遭野外利用", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900736&idx=1&sn=f135a3a9968b591ff7263118409a8696": "谷歌修复“幽灵”漏洞:你的手机号是如何被泄露的?", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248079&idx=1&sn=90e56a859ad29dc05f0cc997ae73bcb6": "建行分行因存在多项网络安全问题被罚 | “取个快递”损失数十万 | 黑客利用iMessage零点击漏洞攻击iPhone用户", "https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247494858&idx=1&sn=d1f7cfb96d00c4d43fe42465bd71409f": "工具推荐 | 高效便捷的图形化Nuclei GUI POC管理工具", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650623694&idx=2&sn=e663f63c20fc80cba9fad9941e6903f5": "涉及66个重要漏洞!微软发布2025年6月补丁日安全通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595564&idx=2&sn=9250733f879b47dac40512814fc3dafd": "Microsoft Outlook 曝高危漏洞,仅需低权限就能实施攻击", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247485782&idx=1&sn=b30dd6f630934e592a540fd7f22a5df4": "渗透笔记:如何通过SQL注入漏洞拿到系统的管理员权限", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484900&idx=1&sn=2e1f598f96f292c5ad096f8b86321851": "安钥®「漏洞防治标准作业程序(SOP)」征文启示 [2025年第23期,总第41期]", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070121&idx=3&sn=da1822910fc81c3cd77f0bc83ba3dcd1": "【安全圈】Outlook 高危漏洞曝光:无需用户操作即可远程执行代码,微软紧急应对 CVE-2025-47176", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488578&idx=1&sn=4142428c58764503e46c884b4b84ac1c": "漏洞预警:用友NC loadDoc.ajax接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490412&idx=1&sn=cd8ec73671558d2a81a33033e8f35ac3": "【风险通告】微软6月安全更新补丁和多个高危漏洞风险提示", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516788&idx=1&sn=a8322e64eaf367a40e9b2389e32535fc": "使用异或∕或运算绕过符号过滤 -- RCE-XOR(6月11日更新)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247492338&idx=1&sn=ed081203ba8ce86934247704d9c98cb6": "一个web指纹识别工具,支持多线程、HTTP代理、批量识别、保存结果、截图展示、可自行添加指纹|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490224&idx=1&sn=15d9b3b8964b8455c3fba8dca693f4f8": "【高危漏洞预警】Autodesk Installer权限提升漏洞(CVE-2025-5335)", "https://mp.weixin.qq.com/s?__biz=MzkyMzI3MTI5Mg==&mid=2247485432&idx=1&sn=63e6601ff3509793cf189faf3a909cce": "契约锁电子签章系统RCE简单分析", "https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247527122&idx=2&sn=c1ff1f433717b608b87e76da427bada1": "2025年5月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503484&idx=1&sn=e9cb94f0ad7c963ed06257db90f92834": "【已复现】Apache Kafka 多个高危漏洞安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzkyMjE1NzQ2MA==&mid=2247490708&idx=1&sn=e4f6a9830fda07759f1e6507007bd44a": "CVE-2023-22527复现实录:沉浸式攻防体验尽在CyberStrikeLab靶场", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247548475&idx=1&sn=cf44f1ebf802541d34482ba2178ee40f": "建立一个成熟漏洞管理程序的七个步骤", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497556&idx=1&sn=7208e6194a202ec313700a4769f2d485": "2025年6月微软补丁日多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486164&idx=1&sn=624542896280a113bc18fcfc7be7f903": "工具集:P1soda 【一款渗透场景下的内网漏洞自动化扫描工具】--2025∕6∕08更新", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247525784&idx=1&sn=baee547bc43d6c40c0f3db64c3ca2620": "2025-06微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492822&idx=1&sn=588b95206e8af7e0f4799bf62d24e037": "【已复现】契约锁电子签章系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492651&idx=1&sn=2ecf9cc05b8618697416aaa97d1c10c6": "Windows WebDAV 零日远程代码执行漏洞遭野外利用", "https://mp.weixin.qq.com/s?__biz=Mzg4ODg4NDA2Mw==&mid=2247483849&idx=1&sn=0a3d86cea5da79e418d2a716f77139e9": "深度剖析JSONP注入漏洞:JavaScript回调函数引发的会话弹窗劫持", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070121&idx=4&sn=e69c74fd7874857df6d38295cf981b80": "【安全圈】微软警告:Windows远程桌面服务重大漏洞(CVE-2025-32710)可被远程执行代码,影响多版本服务器系统", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489139&idx=1&sn=ca0f7c5f8d92692e892609d1faed44af": "一次奇妙的降价支付逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795408&idx=1&sn=97ff557b8ea3c77ae4cb7e820b8b3db2": "微软 Copilot 严重漏洞可能引发零点击攻击", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247494376&idx=1&sn=bfac9cacc14a4968dfc10275a87819e9": "DataEase 远程代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484887&idx=1&sn=68c33f216a071877dd2d8f6ee00de324": "【复现】契约锁远程代码执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795408&idx=3&sn=82d287ab28956a7998831567e01e18a8": "Roundcube RCE 漏洞被迅速利用,超过 8 万台服务器受到影响", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493368&idx=1&sn=bbc610df01a58a40f278958a6b06d518": "漏洞预警 | Apache Kafka任意文件读取和远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489139&idx=3&sn=9a7bc479efa9b3428682e5117d7f301c": "智能汽车安全-漏洞挖掘到控车攻击", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493368&idx=3&sn=1d7e3c69c8fecfdf2342b4c2dd4a093f": "漏洞预警 | 金和OA任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523260&idx=1&sn=961b0c000fcef3533fc9754b82415f9a": "微软6月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493999&idx=3&sn=c093f32039ae5e0e02166b94042cc5a2": "SAP 2025年6月安全补丁日修复关键NetWeaver漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493999&idx=1&sn=425510992775377d64d1b80cae9afe43": "随着Roundcube RCE漏洞被快速利用,超过80,000台服务器受到影响", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247486712&idx=1&sn=277f4b4f516792ce44bd7024784afc29": "【PHP代审】记一次某海外酒店管理系统漏洞复现分析+0day挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484805&idx=1&sn=041adf9e2748f03fb2222d934f9fe44f": "【漏洞复现】九思oa漏洞之SQL注入", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497717&idx=1&sn=6efe3ab6e5bb1234ee1fb95dd939bdd6": "一个$1,337的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491780&idx=1&sn=697bf76c965a98ac990b82343f7b9a58": "三汇 SMG网关管理软件 9-13pcap.php 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NjY3OTQ3NA==&mid=2247487000&idx=1&sn=5be4c11c561976988ba5b9f0fff70ccb": "客户端漏洞挖掘方法论在车机系统中的延伸:任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493368&idx=2&sn=701d5c7504e52d022769b7e6343466c1": "漏洞预警 | 百易云资产管理运营系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261302&idx=1&sn=7033acdbf40ec6570633f66664423697": "【CVE-2025-32711】全球首例 AI “零点击”漏洞:黑客可无声窃取Microsoft 365敏感数据​", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530778&idx=3&sn=166519c90934cd8fb3fd232bfae22456": "CVE-2025-33053,Stealth Falcon 和 Horus:中东网络间谍活动传奇", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247489835&idx=1&sn=3fe10ef2932356b3f4289727129e56d3": "国外某数据库管理系统存在前台任意文件上传漏洞 (CVE-2025-5840)", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247487246&idx=1&sn=7a41868625893614f6da1bbdcda23a31": "当漏洞成为“数字战争”的弹药,谁能改写攻防规则?", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484821&idx=1&sn=521d6f7191a4c623b04a751f998a3f05": "【漏洞复现】Kafka Connect任意文件读取漏洞(CVE-2025-27817)", "https://mp.weixin.qq.com/s?__biz=MzU0NTU5NTA4NQ==&mid=2247491785&idx=1&sn=9b23f6b5cbbaf45761d977ee905bed06": "CVE-2024-23897 Jenkins CLI接口 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486566&idx=1&sn=5457ff24c4b0aa16fcca4390504e4aa0": "攻防下帮助学员快速审计NET前台rce漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652252007&idx=1&sn=41b8469177dae3520103786696e7603e": "Salesforce PaaS平台大规模宕机超6小时,众多网站功能受损", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211959&idx=1&sn=51cbfd4fb6f02aadc4647e968539a871": "谷歌账户恢复漏洞致攻击者可获取任意用户手机号:赏金5000美元", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489308&idx=1&sn=06cf92ea68b30f6d5c68df7116644ac7": "【安全更新】微软6月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487487&idx=1&sn=e7017d76417d578514aadbbcd40f83f7": "漏洞预警 |Kafka Connect存在任意文件读取漏洞(CVE-2025-27817)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247493999&idx=2&sn=46385911a4e1601f37064aba5c5a96b9": "漏洞可能导致与任意谷歌账户关联的手机号码遭泄露", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514505&idx=1&sn=df286bcbf807c8444c7f8356b70aef56": "首个AI Agent零点击漏洞曝光:一封邮件窃取企业AI任意敏感数据", "https://mp.weixin.qq.com/s?__biz=MzU5Njc4NjM3NA==&mid=2247496635&idx=1&sn=7389470e1ca637f9aa26ebaabe362b5e": "漏洞管理玩法已变,四大常见错误亟待摒弃", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503477&idx=1&sn=1410a653474bbb82b32dadab97a47c7b": "微软6月补丁日多个产品安全漏洞风险通告:1个在野利用、9个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545790&idx=1&sn=999b6a569025905ded875ba4833d32f6": "【漏洞预警】Apache Kafka Connect高危漏洞(CVE-2025-27817)可致任意文件读取,影响核心数据安全!", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137167&idx=2&sn=90da648f75c3d6d696f4946823f2f495": "突发!奔驰车载系统大面积崩溃;首个已知AI零点击漏洞细节曝光 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247573141&idx=1&sn=9f4853031ae957fa0ace7d99490175bd": "浅谈常见edu漏洞,逻辑漏洞,越权,接管到getshell,小白如何快速找准漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649167173&idx=1&sn=f7421efcbc4b873263935a4954985500": "揭秘最为知名的黑客工具之一:Legion (一款功能强大的自动化网络侦察与漏洞扫描工具)", "https://mp.weixin.qq.com/s?__biz=MzIwNjU0NjAyNg==&mid=2247491258&idx=1&sn=3b2f946e0199496b1cb3e1bc10f3f7b6": "创宇安全智脑 | DataEase 身份认证绕过(CVE-2025-49001)等81个漏洞可检测", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523270&idx=1&sn=34d30246787005440f76867606c6259c": "Microsoft 365 Copilot 中存在零点击AI数据泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTMxMjQ4OA==&mid=2247486106&idx=1&sn=1bea9729146539683a59af9a3d9470e8": "EchoLeak-首个导致 M365 Copilot 数据泄露的零点击 AI 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507799&idx=1&sn=c6c3a09312697bafa11f8e2f5212f32b": "漏洞通告|GeoServer SSRF和XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523270&idx=2&sn=cd319434730e299df36bd4ba219387e2": "Apache CloudStack 严重漏洞可用于执行权限操作", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512435&idx=1&sn=c35c2db0a565cfdacb1cb086e88a4a99": "工业自动化PROFINET协议库P-Net 高危漏洞预警", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651322946&idx=3&sn=289b6e0241356a1bdbb26f4d679825ac": "微软Outlook路径遍历漏洞允许攻击者远程执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492830&idx=1&sn=0a00dece01aa71e8b1e9e3b5066837c7": "【已复现】GeoServer SSRF和XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595569&idx=3&sn=cd7353a8ac4c73d7b9281ece95ec84bd": "Salesforce 行业云曝20+漏洞,含零日漏洞!", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463175&idx=1&sn=e76aec19728e7bf74ec7c039ed40a84b": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487463&idx=1&sn=230ead607780050b503f02a16d4d3a5a": "CVE-2025-24071 - Windows 文件资源管理器欺骗漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247492348&idx=1&sn=441320a8e415c5b15d5bff94373be065": "Mitmproxy GUI用于解决渗透测试加解密的难题 让你的Burp像测试明文这么简单|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247510877&idx=2&sn=96d346ba4108bb4a527b458d08ee33e4": "高危漏洞打包兜售,Palo Alto、Fortinet、Linux等关键系统在列", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485930&idx=2&sn=597b6e0652540813677b77802e4ece5e": "【漏洞预警】Apache Kafka Connect高危漏洞(CVE-2025-27817)可致任意文件读取,影响核心数据安全!", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247636174&idx=4&sn=029142f90dac9e6d869184d8f7e327e0": "首个AI Agent零点击漏洞曝光:一封邮件窃取企业AI任意敏感数据", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503493&idx=1&sn=0810b8ac4e0360b1135b0ff03117cf88": "【已复现】契约锁电子签章系统远程代码执行漏洞(QVD-2025-23408)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490229&idx=1&sn=6b844c89011b2be9e981cc80fce4ad24": "【高危漏洞预警】契约锁电子签章系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNTA0NzgyMA==&mid=2247484271&idx=1&sn=bee4e651a74eda4316b37d8d05f9bda1": "CVE-2023-36802 mskssrv type confusion 提权", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247487122&idx=1&sn=bd894c86e93f53e3fde36b3016e22e07": "重生之网安小FW,某教务一体化系统任意文件写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484816&idx=1&sn=3a4a2007cc0f23f7da750ff52b2ec51f": "【漏洞复现】九思oa之奇怪的sql注入", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795421&idx=3&sn=56fc4b8bea6248a3aa25bf799945dc6f": "GitLab 多个漏洞可导致攻击者完全接管账户", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489167&idx=5&sn=ffc9d9d2742c9eb3dc02b07aa94ffac6": "智能汽车安全-漏洞挖掘到控车攻击", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652252014&idx=1&sn=902715f1ed8dd1c00b55490526da55ad": "SinoTrack GPS设备存在严重安全漏洞,可被远程控制车辆", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655282707&idx=1&sn=170fd31c2ce98adbb314614194200315": "任意文件上传漏洞及常见框架Getshell分析", "https://mp.weixin.qq.com/s?__biz=MzkzMDcxNzg4MA==&mid=2247484577&idx=1&sn=6d8367ef3304610b2fd669d6e843a514": "契约锁最新漏洞补丁分析", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489167&idx=3&sn=a252c3fa99bb3c13eba861594d290b86": "一次奇妙的降价支付逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651133508&idx=1&sn=a1a24531dc07e9cd843152fd14412d8e": "电力安全预警!3.5万台漏洞太阳能设备在公网暴露", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493384&idx=3&sn=ca6593532ba34812bdf9218f754c6a62": "漏洞预警 | 美特CRM XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493384&idx=1&sn=7869f971392716e029fab6b644477314": "漏洞预警 | 银达汇智智慧综合管理平台SQL注入和XML实体注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493384&idx=2&sn=623168715fc93b9909e495f849eab793": "漏洞预警 | 宏景eHR SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494008&idx=1&sn=2c6fff5d5afa1e3e4bd27b375a12d3f8": "Paragon Graphite间谍软件利用零日漏洞入侵至少两名记者的iPhone设备", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524783&idx=1&sn=1230a9c3ec711c744e5355e4a173cd26": "Windows SMB客户端零日漏洞遭利用:攻击者采用反射型Kerberos中继攻击", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491789&idx=1&sn=5885e0ee1c9dd9fab4cb35ea7bbd647e": "B-LINK AC1900 V1.0.2 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247488011&idx=1&sn=db438e2b8d2a2c5a1639aac28411bc32": "漏洞预警 | Apache Kafka Connect任意文件读取与SSRF(CVE-2025-27817)", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247492793&idx=1&sn=f428edcabb86adc4cae7213fe5214e08": "漏洞赏金工具 v1.0", "https://mp.weixin.qq.com/s?__biz=Mzk0NDU5NTc4OA==&mid=2247484640&idx=1&sn=96d9b43f0787deee3e003ab7c1a6a485": "渗透测试-从下载漏洞到前端加解密+签名校验拿下sql注入", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492328&idx=1&sn=877dd3baec6be94332cc460166808bf0": "记一次实战日穿整个系统getshell-共九个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491568&idx=1&sn=35c5311b89a99e2d66e3d557819a5047": "清源SCA社区版每日漏洞情报、新增CVE及投毒情报推送", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524783&idx=2&sn=134520fea73b12fe9966958e6dcf6359": "UEFI安全启动遭突破,高危漏洞CVE-2025-3052威胁数百万PC", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247488300&idx=1&sn=4a32474b0aef6f2773b86d1411080556": "java审计之下载漏洞获取到的代码如何断点调试", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488098&idx=1&sn=e93a71177440f649281a364558f31984": "微软Copilot惊现全球首个零点击AI漏洞,企业敏感数据可被无声窃取!", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492664&idx=1&sn=5c7f88a4510a8d14bd6cd23312251346": "Stealth Falcon组织利用0Day漏洞在中东发动网络攻击——每周威胁情报动态第226期 (06.05-06.12)", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486704&idx=1&sn=1e59b5cc0f1b3b36a82ca5bb0b3457b6": "【漏洞预警】Windows WebDAV 客户端远程代码执行漏洞(CVE-2025-33053)", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788688&idx=1&sn=62fe0c0fe52ec9535f10655b9c217d47": "微软Copilot曝首个零交互AI漏洞:一封普通邮件静默泄露企业敏感数据", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524783&idx=3&sn=945e6becb24f41d4dd077d47e9509f07": "Apache CloudStack漏洞使攻击者可破坏云基础设施系统", "https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247536253&idx=2&sn=afa344b3b17adafcbcd8949ea4943124": "聊热点|国家安全部:“刷脸”时代,安全不容小觑;APT组织利用Windows WebDAV零日漏洞实施远程恶意软件攻击……", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248091&idx=1&sn=c2d0f17071027a75a6bb6b71e565fdcf": "首个AI Agent零点击漏洞曝光:一封邮件窃取企业AI任意敏感数据 | 威胁狩猎入门指南:专家级主动网络安全策略", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582873&idx=1&sn=0b714276ab832a9ba16514a3d8bceb01": "新型Mirai僵尸网络通过命令注入漏洞感染TBK DVR设备", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512480&idx=1&sn=dcf723277dd1aec37f2aa37635844c78": "企业级VPN NetExtender任意文件删除到权限提升漏洞剖析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523281&idx=1&sn=39fe6b4ec8cebc0a362c26c8fffbd2c7": "GitLab 修复高危的账户接管和认证缺失漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523281&idx=2&sn=c4ed265127f77866bb9d4f397428f552": "Palo Alto Networks 修复多个提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489173&idx=4&sn=571a093b587c5833a8ee8be5e53c00ca": "一次奇妙的降价支付逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=Mzk1Nzg3ODkyNg==&mid=2247484121&idx=1&sn=43b7919e71e92bcdd179e089796ce428": "契约锁电子签章系统dbtest远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzA5Nzc4Njg1NA==&mid=2247489260&idx=1&sn=51ba3d6560441abb6d16005aa88ecc6d": "关于防范人工智能绘图工具ComfyUI多个安全漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323069&idx=4&sn=77515d1b0ea03422f212c22ce648451c": "中科GPS设备漏洞曝光,可导致车辆被控制和位置追踪", "https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651733331&idx=1&sn=dd0f9132911285d65530eb73c4223cae": "实战出真知 | 安星智能体赋能实战化运营,高效应对高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497725&idx=1&sn=9acb221e666940eb40092a4f96f6dd25": "RCE再现", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096328&idx=1&sn=9f3ab73cf1559928f01fbf5e1ce41fdf": "Windows 任务计划程序允许攻击者提升权限漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NDgxMzgxNA==&mid=2247496910&idx=2&sn=f9ede51c8a4f7ac0b9b98b076c9d7acc": "每周安全速递³⁴⁵ | Play勒索团伙利用SimpleHelp漏洞实施双重勒索", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595726&idx=2&sn=8c997ac7387fc908b287a6d0d561fe75": "苹果iOS现零点击漏洞,记者遭Graphite间谍软件入侵", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323069&idx=3&sn=e1a2654d1eb8eb944bf1949b9ed09b40": "GitLab曝高危漏洞组合,攻击者可实现完全账户接管", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514513&idx=1&sn=67e663e82b15ccc4fb808170d7a081dc": "工信部:AI绘图工具ComfyUI多个安全漏洞已被用于实施网络攻击", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649173422&idx=4&sn=88e016f3aae3c6c67b79675aa556fc8e": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489173&idx=6&sn=86ac44403dba82e570f2f0f07ff3715f": "智能汽车安全-漏洞挖掘到控车攻击", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247487149&idx=1&sn=c8e2becd3ec6a5c4d7b01692cddc2b6f": "重生之网安小FW,每天蹲一手大佬的漏洞利用分析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323069&idx=2&sn=46c850fbda9bc82352ef57c89fdd96e8": "苹果iMessage零点击漏洞遭间谍软件利用,记者成监控目标", "https://mp.weixin.qq.com/s?__biz=MzU5MTc1NTE0Ng==&mid=2247486069&idx=1&sn=686dff0eb15fbaf6950e19c95f008dba": "【漏洞复现】Kafka Connect任意文件读取漏洞 CVE-2025-27817", "https://mp.weixin.qq.com/s?__biz=MzU3MDg2NDI4OA==&mid=2247491228&idx=1&sn=052a45b2108d847c0ec904a1c3075ce6": "两载光阴,我与0day的两次匿名邂逅", "https://mp.weixin.qq.com/s?__biz=MjM5NjA2NzY3NA==&mid=2448689041&idx=2&sn=726c15b4a0668113a70c2f888efe629b": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490237&idx=1&sn=dfd4f48b27c1593002da37e03645a275": "【高危漏洞预警】GeoServer未授权服务器端请求伪造(SSRF)漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485936&idx=1&sn=c8db53c1a830e5151464c1c31ff2ffd7": "同享人力管理管理平台 UploadHandler 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486410&idx=1&sn=292331c03afb3bcfa68cd2cdd35c0eb7": "漏洞管理工具 - miscan", "https://mp.weixin.qq.com/s?__biz=MzkxNTEzMTA0Mw==&mid=2247496726&idx=1&sn=cb4a63b4ce5095d221332254bd5bbc8e": "CVE-2025-33073 漏洞:NTLM 反射攻击的绕过方法及影响", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488591&idx=1&sn=c235ea6352df7f47f2fc2bd6408c05c1": "Grafan存在url重定向&服务端请求伪造漏洞CVE-2025-4123 附POC", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664244112&idx=2&sn=9428653919db114469090e0ec242111f": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247491678&idx=1&sn=0fb407eb15dc3e950860b1dbc14bb8b1": "渗透测试 | 从jeecg接口泄露到任意管理员用户接管+SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247488984&idx=1&sn=90ec422c5c51bf0061ae125313358ac3": "PHP 类型杂耍漏洞:攻击者如何利用松散比较", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489218&idx=4&sn=fa277c4ca4189e8764162fab696c7a36": "一次奇妙的降价支付逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489218&idx=6&sn=77731b726421696f62ebfb236a653c3c": "智能汽车安全-漏洞挖掘到控车攻击", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488604&idx=1&sn=14924432f473c81796e50ec5cb00b963": "Optilink管理系统gene.php接口存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247625052&idx=1&sn=056754f27003d77ebc178a77ea0b866d": "人工智能自动化模糊测试:如何自主发现汽车软件中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530877&idx=1&sn=43ab9caedb1be5d8bac6e2151506458f": "NTLM反射已死,NTLM反射万岁!——CVE-2025-33073深度分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530866&idx=2&sn=4650a382383462fc8d35a14c62e9f839": "CVE-2025-33073 针对 NTLM 反射 SMB 缺陷的 PoC 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491809&idx=1&sn=baf7f085baf6b7b25c2165be6cc073dc": "会捷通云视讯系统 fileDownload 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323083&idx=2&sn=542afbafc16938bf81c4a6946e67cfef": "FreeBuf周报 | Meta暗中追踪数十亿安卓用户;GitLab 曝高危漏洞组合", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070172&idx=2&sn=338cac5913731b091a4e71b214daf70f": "【安全圈】微软修复9.3分高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485986&idx=1&sn=00a861c9f71787095bc0b4811bb92b1f": "CVE-2025-30220|GeoServer XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323083&idx=1&sn=f8c83096621ff3fb1a6ffdc75cd02146": "Windows磁盘清理工具权限提升漏洞PoC利用代码公开", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247503078&idx=1&sn=dcff53e08a56091f873b1504dbd66a57": "【攻防实战】Weblogic-RCE集锦", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485986&idx=3&sn=067d2ba7017165b5d5a11a0f55a68e26": "CVE-2025-32717|Microsoft Word 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247489318&idx=3&sn=527642d53a41a12fa9035f80384e7bd5": "2025 最佳漏洞赏金书籍和网站", "https://mp.weixin.qq.com/s?__biz=MzIzMDM2MjY5NA==&mid=2247484243&idx=1&sn=dd3f56cb2e113d589d7e8fbdd373b32e": "金融业“解码差异”漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649173428&idx=1&sn=bf293221f360824960d0a350a4d126bc": "存在未授权访问漏洞等问题!北京市网信办依法查处两家违法企业", "https://mp.weixin.qq.com/s?__biz=Mzk1NzIyODg2OQ==&mid=2247484857&idx=1&sn=ce2a1616864a836faf7983e5c412c5b3": "分享一些漏洞挖掘的课程(附网盘直接下载 无广告)", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064203&idx=1&sn=6a9b3f9b1737e370daec30c6d4803d57": "信息安全漏洞周报【第026期】", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247485986&idx=2&sn=7a87bb2da8ae173794e4a4250b47452a": "CVE-2025-32756|Fortinet多款产品存在远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247493926&idx=1&sn=06ac298909e27d0e37fef90f64b205da": "疯狂星期四两本证书漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491800&idx=1&sn=ff9c1b0db7a32c6173824a5580985489": "WIFISKY-7层流控路由器 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247485807&idx=1&sn=f849a548f91e22fee19fce78d3285a8d": "记一次SRC漏洞垂直越权挖掘", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247521021&idx=1&sn=a0226934cfa766a45aeb4c8508e05a13": "热门Selenium库WebDriverManager曝出CVSS 9.3分的严重XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247490650&idx=1&sn=a3cbd318628c02db48d919f8a0c06255": "sqlmap_gui【图形界面化的 SQL 注入漏洞测试工具】", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484848&idx=1&sn=0c246e7c7d0c64ac63f1f953807c0390": "【漏洞复现】契约锁远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMDM2MjY5NA==&mid=2247484254&idx=1&sn=b7b309dbe8f914abcb651cf418eef340": "金融业“解析差异”漏洞后续-POC", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247491705&idx=1&sn=aeeb5d16f0b1511b8d2413c49b170e7a": "【SRC】未授权访问漏洞的利用链:一口气到getshell的实践", "https://mp.weixin.qq.com/s?__biz=MzkwNzM0NzA5MA==&mid=2247509454&idx=2&sn=24ad4abc7b5dbc1d32898c87e37dc3f4": "【分析】以色列空袭伊朗事件暴露的伊朗防空体系漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489318&idx=1&sn=8dc3cbccb099dac80324305cda3f9fe9": "任意文件读取&下载漏洞的全面解析及利用", "https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650561365&idx=1&sn=d2025cd80b7752f6432cb2830b922996": "【分析】以色列空袭伊朗事件暴露的伊朗防空体系漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497402&idx=1&sn=05b670092bd72cf9491c07b871a8aa6f": "Wavely | 高效便捷的图形化Nuclei GUI POC管理工具", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247499691&idx=2&sn=d8c9503412383552934b7d2b0ee8ed7f": "(CVE-2025-3415) 暴露Grafana Alerting中的DingDing API 密钥", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530905&idx=2&sn=d97f508faa27cf71ce0646619e5dfbd6": "CVE-2025-4123:Grafana 中通过开放重定向引发的 XSS", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652116331&idx=1&sn=c5faf7f69c14fa579cd35caa86d683a6": "存在未授权访问漏洞等问题!北京依法查处两家违法企业", "https://mp.weixin.qq.com/s?__biz=Mzk3NTU0OTAwOQ==&mid=2247483847&idx=1&sn=091150b687d6366c68918915aac717c8": "域大杀器 CVE-2025-33073 NTLM反射", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530905&idx=3&sn=e213905f649075f85f3cb74fb755521a": "DanaBleed:DanaBot C2 服务器内存泄漏漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323140&idx=3&sn=45827901940f918a640dfd1f6b37d59a": "Windows SMB高危漏洞分析:Kerberos缺陷导致攻击者可获取SYSTEM权限", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516816&idx=1&sn=5d6d77197ef3850efacbaeceddfe1b44": "内网漏洞自动化扫描工具 -- P1soda(6月7日更新)", "https://mp.weixin.qq.com/s?__biz=Mzk3NTEyMzQzOA==&mid=2247486300&idx=1&sn=324b5ac4e2c2f68d68f44eadbf206fc7": "漏洞复现:CVE-2015-1635、CVE-2017-0144", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485941&idx=1&sn=19933a1c4ce9672ea5adef1f97618da7": "JieLink+智能终端操作平台 GetDataList 敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652116334&idx=2&sn=604c4749c1de5c6874abe3fbb870e5c3": "了解运行时漏洞管理", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247506599&idx=1&sn=15c6bd921ccebd2840f9830c9e0fc2f7": "一个高性能的目录遍历漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247487164&idx=1&sn=70ef1766e7b61541d1cecdce8ff717f1": "重生之网安小FW,攻防不想挖洞怎么躺平捡漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MjgxNTQ1MA==&mid=2247488337&idx=1&sn=5db71361fd2e4da938f507c914565835": "通用型漏洞在企业中的应急响应", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494022&idx=3&sn=bd74afe219a49604d768f1495b3bdc73": "苹果公司证实Messages应用漏洞已遭野外主动利用", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491829&idx=1&sn=f0e1ec63d977fad0aead47ea777d0182": "金华迪加 现场大屏互动系统 redpacket.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxOTk2Mjg1NA==&mid=2247487081&idx=1&sn=e1bd16a8f4cfae77801e7eabd68e18de": "客户端漏洞挖掘方法论在车机系统中的延伸:任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494022&idx=1&sn=a40a759d04a39668dcd25191d5d9a7cd": "Palo Alto Networks修复了多个权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3MTUxNzQxMQ==&mid=2453886078&idx=1&sn=8afe4da7c70f074d8c565ddbe7938c09": "被绕过的防线与救命的配置:ACL 在漏洞攻防中的双重角色", "https://mp.weixin.qq.com/s?__biz=Mzg4NzY5NjgyNw==&mid=2247485531&idx=1&sn=dd9a0891993d265a5c836d740481c563": "CVE-2025-33073:一条命令打穿内网主机的 SYSTEM 提权漏洞【附POC】", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493396&idx=3&sn=e6333cfc3d94d4f6d2e1c601a6b79df2": "漏洞预警 | 用友NC SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1NTEzODc3MQ==&mid=2247487150&idx=1&sn=3337e826144d84e123f6d83c4cffb942": "Beyond REST:一种用于全面API漏洞模糊测试的工具APIF", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491818&idx=1&sn=9a8013bf5005169540c9bc08f03ec77a": "神州数码 DCME-320出口网关 black_list.php 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494022&idx=2&sn=d88428fa371809299b8d83ef2353c7ed": "趋势科技修复Apex Central与TMEE PolicyServer重大漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTc2MDE3OA==&mid=2247486854&idx=1&sn=789805dc2c0ad02645cc3b83fe748f14": "SRC漏洞小技巧——文件上传垃圾漏洞之绕过上传大小", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493396&idx=1&sn=2439c6d5a5f532279cd9a9b7a9053f9d": "漏洞预警 | 云课网校系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493396&idx=2&sn=b54a19f02fe36dad012f5cb1eb4bf157": "漏洞预警 | 宏景eHR SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NDQyNzg1OA==&mid=2247494086&idx=1&sn=fecf324f9ab98512f9702308494b5877": "域内大杀器:CVE-2025-33073 NTLM Reflection攻击", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488112&idx=1&sn=eeb7a6c45256d2804fb041de9ddcdc33": "无需点击就中招!间谍软件利用iMessage漏洞监视记者,苹果紧急修复", "https://mp.weixin.qq.com/s?__biz=MzkxNDQ5MTQ2Mg==&mid=2247484008&idx=1&sn=2ace6d9b83200f6f09158527c68469e0": "若依4.8.0RCE分析", "https://mp.weixin.qq.com/s?__biz=MzkyOTc0NDY2Nw==&mid=2247485188&idx=1&sn=48ce12178a70e5b8f3ea47e79dd57e64": "PE代码执行虚拟机详解&原理&源码", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582888&idx=2&sn=29d6e96277b041d88e3d273ca73f3b6c": "安全动态回顾|FIN6黑客冒充求职者通过后门进入招聘人员的设备中 微软365 Copilot中发现零点击AI数据泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491571&idx=1&sn=24f12d441710a620c5747ca61caa2366": "清源SCA社区每日漏洞提早感知情报、新增CVE及投毒情报推送-20250615", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248095&idx=1&sn=c843b5a9abdd1ba2ce1d374edf1c0124": "工信部:AI绘图工具ComfyUI多个安全漏洞已被用于实施网络攻击 | 北京2家公司个人信息数据遭境外IP窃取被罚5万元", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652252021&idx=1&sn=240b1cc1d52d6bfd65e82f1bb9507c06": "软银13.7万用户数据因外包商漏洞被泄露", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247512801&idx=1&sn=bc1390b991ab475c42a3dcf2072bf910": "记一次AMD漏洞挖掘:从文件权限配置错误到驱动权限提升", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247494380&idx=1&sn=66151c9843ee0ce1f076c7129e9fa929": "域大杀器 CVE-2025-33073 NTLM反射", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247582888&idx=1&sn=02b823aa4fbe49aa681dfd78302faedf": "新型Secure Boot漏洞允许攻击者安装引导工具包恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506602&idx=2&sn=702e08bb812e6fb8a02984fc4116548b": "每周网安资讯 (6.10-6.16)| Adobe Experience_manager存在跨站脚本漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650623761&idx=1&sn=0688a2ffab227267871422c71dffd982": "告别\"一轮游\"!亚信安全发布2025年攻防演练必修高危漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492664&idx=1&sn=34327021796479c56b9f78e1d53f26e3": "Windows SMB 权限提升漏洞(CVE-2025-33073)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523297&idx=2&sn=ea60b085762fef54a56dea85a3150a40": "超4.6万个 Grafana 实例易受账户接管漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503502&idx=2&sn=ffe84150213eff7c9c03e074b80d7c59": "安全热点周报:黑客利用 Windows WebDav 零日漏洞来投放恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516823&idx=1&sn=d8671ca4475900732cf71c35861bbfab": "Nuclei POC 漏洞验证可视化工具 -- Wavely(6月12日更新)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519474&idx=1&sn=27e66a7c83cd189f0b28f274424d0779": "从 Self XSS 到 RCE", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503502&idx=1&sn=0283b5ba91d5d3a06e6aae4bc462be4c": "【已复现】Windows SMB 权限提升漏洞(CVE-2025-33073)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070197&idx=1&sn=2ea19a473759ade49d28c33654512b51": "【安全圈】Windows SMB客户端提权漏洞(CVE-2025-33073)及其在未启用SMB签名环境中的攻击原理", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247493005&idx=1&sn=d8de30626c12b1ff885b2089b6a483b2": "Output Messenger 漏洞被利用作为间谍攻击的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247573270&idx=1&sn=604d3b689ad54f42bc3af950d655e5fb": "若依(RuoYi)框架漏洞战争手册", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490246&idx=1&sn=b8357c865b44476bbafa52f344dc85f5": "【漏洞预警】Grafana访问控制不当漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496056&idx=2&sn=18ef93b8922eb9eac576fc15cd65747f": "上周关注度较高的产品安全漏洞(20250609-20250615)", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247489466&idx=1&sn=3630915a5db00418f1e7b18541bbb73a": "渗透测试 | 从jeecg接口泄露到任意管理员用户接管+SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247488033&idx=2&sn=e559d9f9268e653c143ee78bcc61baef": "漏洞预警 | DataEase JWT认证绕过漏洞(CVE-2025-49001)", "https://mp.weixin.qq.com/s?__biz=MzU2MzY1NjU3Ng==&mid=2247485933&idx=1&sn=881ac470d0f0990bb7dce2c7e0ecb769": "企业内部安全漏洞修复流程的建立与思考(其四)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490417&idx=1&sn=73dca860bb720796610dd88e6c9767a6": "【AI风险通告】MCP Inspector存在远程代码执行漏洞(CVE-2025-49596)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490246&idx=2&sn=e25fdd6dcc4c1c4e4f8529b472db1979": "【AI高危漏洞】MCP Inspector未授权访问致代码执行漏洞(CVE-2025-49596)", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524798&idx=1&sn=6d2fd237a4660e5c5a0c0b6eb2b537c4": "Microsoft Defender for Identity 漏洞可致未授权权限提升", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247488986&idx=1&sn=5ed544bfa806db85622785e6ebe8ff92": "客户端路径遍历(CSPT)——深入探究被忽视的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247535205&idx=1&sn=79c060ff2a09da91f05ed22d90bb8400": "【漏洞预警】:高危警报!微软公司通报多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496056&idx=1&sn=4c39712ac7b32a3338d54e3b32153964": "CNVD漏洞周报2025年第22期", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488619&idx=1&sn=b4140b435210a6e9a18601d49439fcb4": "Apache Kafka Connect接口存在任意文件读取漏洞与SSRF漏洞CVE-2025-27817 附POC", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484451&idx=1&sn=f0448570fff9d24618290b0aad1fd5bf": "【论文速读】|基于大型语言模型的上下文增强漏洞检测", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524798&idx=2&sn=a2dcf508bc426cbf09d35addc83dacf7": "IBM 备份服务漏洞让攻击者能够提升权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070197&idx=4&sn=ec2e30a1b4bdbaba363c267c6b615863": "【安全圈】起亚厄瓜多尔车型钥匙系统存在严重漏洞,数千辆车面临被盗风险", "https://mp.weixin.qq.com/s?__biz=MzAxNjg3MjczOA==&mid=2247486834&idx=1&sn=fb68fb05e911038caec9275525364076": "CVE-2025-33053:立即更新Windows的充分理由", "https://mp.weixin.qq.com/s?__biz=MzkyOTQyOTk3Mg==&mid=2247485324&idx=1&sn=9459be4ffec2530bb9f7315d72100e03": "一款渗透场景下的内网漏洞自动化扫描工具", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247535205&idx=3&sn=638f34099ca5d39a3fe9321aa0629c4e": "数据裸奔遭境外窃取!北京网信办顶格处罚两家“漏洞企业”", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488117&idx=1&sn=3b34f82ff0a524550f1a692cb328f9bc": "高危预警!Windows曝“反射型Kerberos中继攻击”漏洞,攻击者可直取SYSTEM权限(含POC链接)", "https://mp.weixin.qq.com/s?__biz=MzkzNDI5NjEzMQ==&mid=2247484832&idx=1&sn=9a171d184af60ecce4816d36d84c0352": "【漏洞复现】九思oa-XXE", "https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652997858&idx=1&sn=b65195c1a46ab8fa149ea19f95295098": "先知通用软件漏洞收集及奖励计划第八期 正式开始!", "https://mp.weixin.qq.com/s?__biz=MzI3NjUzOTQ0NQ==&mid=2247520768&idx=1&sn=5d38e98a33103bbc9c386a357f878f50": "《2025年攻防演练必修高危漏洞合集》", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611086&idx=4&sn=4dc6be3b6793503ac045fc0d6f0219ac": "Wavely | 高效便捷的图形化Nuclei GUI POC管理工具", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247530953&idx=1&sn=e656629e8557b107087e25b60413ad2c": "【威胁】GreyNoise 发现针对多个国家的Zyxel设备进行 CVE-2023-28771 的漏洞利用尝试", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247499990&idx=1&sn=c8685b8d4471bb413b477e5f76d70b3b": "CNVD漏洞周报2025年第22期", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247519126&idx=1&sn=3eecd2bbc44b7080865122adb5f9b382": "实战攻防之Nacos漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247491786&idx=1&sn=bc3db3144efa9f63df5e052e54ac610f": "月薪1000 两周挖50个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795449&idx=2&sn=404c6ef81f1ab1d5139b13e0918bb13b": "SinoTrack GPS 漏洞可能允许攻击者跟踪和控制车辆", "https://mp.weixin.qq.com/s?__biz=MzIyMjkzMzY4Ng==&mid=2247510724&idx=1&sn=204a1e34d1a77f2c86c9ff3879627d96": "域内大杀器 CVE-2025-33073 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484894&idx=1&sn=ce166fe89794c77dc20e0a9e1cb74fe1": "【复现】泛微E-cology9 前台SQL注入漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512481&idx=1&sn=d403af9b610a2084cd79b961b4835b40": "佳能imageCLASS打印机RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg5NDU3NDA3OQ==&mid=2247491309&idx=1&sn=6178a36525fbb6268e0ad09a12e1a80f": "Docker Registry 5000端口漏洞图形化利用工具实战指南", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490251&idx=1&sn=a80edb0d0a63cff61c6d32b4c7952a9e": "【高危漏洞预警】Apache Tomcat认证绕过漏洞(CVE-2025-49125)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070217&idx=4&sn=24357525bac3eedf8eb46ebe78022a55": "【安全圈】“Grafana Ghost”漏洞曝光,近四成公网实例仍未修复", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096336&idx=2&sn=c3e591e98ec6f4b4800be540858e1ccc": "针对 Windows 磁盘清理提升漏洞的 PoC 漏洞揭晓", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523309&idx=2&sn=d3e035c89c35c26ad0a1cad90861ac97": "CISA 将TP-Link 路由器高危漏洞纳入KEV", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492841&idx=1&sn=35527e48f4ac1c111cbc002aa26d6bb8": "【已复现】泛微 E-cology SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523309&idx=1&sn=50e822ff30e5cc7f931139cb1a288b2c": "华硕 Armoury Crate漏洞可导致攻击者获取Windows 管理员权限", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497741&idx=1&sn=c95ab3ad8c90379ea5e19a191a4afed0": "AI大模型漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494025&idx=1&sn=c65c31ec37d498ceaebb43aa278a3646": "【在野利用】Windows WebDAV 远程代码执行漏洞(CVE-2025-33053)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488631&idx=1&sn=0959127aeca102138d0d93b25dd5dc17": "AstrBot get_file接口存在任意文件读取漏洞CVE-2025-48957 附POC", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070217&idx=3&sn=95c2556df13add7b94e2b92ec3ea503d": "【安全圈】“微软修复 Windows Hello 欺骗漏洞:黑暗中人脸识别功能被禁用”", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247492478&idx=1&sn=f7c44f86be38638134d679e6fb3b8ffd": "ChkApi - API漏洞安全检测自动化工具、解析Swagger规范Bypass未授权检测等|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323227&idx=3&sn=8d510d5113b805e0f18388a6539e982a": "MCP Inspector严重远程代码执行漏洞威胁AI开发环境安全", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485947&idx=1&sn=ba767dba115ee2c0bbfec4ae94498e0c": "CVE-2025-49001 Dataease JWT 认证绕过导致未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501194&idx=2&sn=37f99ddcaa7215ce29f34e62e2ac5eda": "【漏洞通告】Apache Tomcat安全约束绕过漏洞 (CVE-2025-49125)", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247485905&idx=1&sn=bde9c0b7742a30ff31614872d63a3cbd": "【漏洞复现】契约锁远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524812&idx=4&sn=bdd8e81bf4090a9661e5fabf07d8ef15": "CVE-2025-49596:MCP Inspector 严重远程代码执行漏洞威胁AI开发环境安全", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487482&idx=1&sn=29b768458f613dde0a9d156c37581d15": "CVE-2025-33073 针对 NTLM 反射 SMB 缺陷", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524812&idx=1&sn=ea5a04de3ac9f9e781c22bd8c4965af3": "Apache Tomcat 漏洞允许绕过身份验证和 DoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzU4NjY4MDAyNQ==&mid=2247497566&idx=1&sn=7ca3acd12c46d02b2e700204922bc7c2": "【漏洞通告】Apache Tomcat安全约束绕过漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655283293&idx=1&sn=43a759909d993732d05e4f089c10dfbe": "渗透测试工程师(高级)证书(终身有效)靶场+CTF赛题双演练,SQL注入∕XSS∕反序列化漏洞实战,网渗透(隧道∕提权∕免杀)", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNDU5NQ==&mid=2247486337&idx=1&sn=69f06f964a96e30b88d63f2d5a4e5f2e": "【工具分享】OSS漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488122&idx=1&sn=7dd4a081bf219591dd2dbc6b337abe09": "硬编码密码“b”引发重大风险!Sitecore XP漏洞威胁全球企业安全", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493433&idx=2&sn=3fc5387da9750f0124a0ec66bb9729e0": "漏洞预警 | 用友NC任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489430&idx=4&sn=f3902e0390467757e2b77e6939daebb2": "任意文件读取&下载漏洞的全面解析及利用", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247519127&idx=1&sn=ecea8dcd3f921a456ccbddba527c8ba0": "记某众测Fastjson<=1.2.68反序列化RCE过程", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494039&idx=1&sn=d9948d421667300e7aeab6bf61748a1b": "攻击者利用Zyxel远程代码执行漏洞CVE-2023-28771发起攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247491094&idx=1&sn=a014710ea7216eacadbc94c61f81151b": "漏洞管理玩法已变", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795462&idx=2&sn=f95519494af0be8a5c1008929290892b": "Team46 APT组织积极利用 Chrome 0day漏洞(CVE-2025-2783)针对俄罗斯目标", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MjAwNQ==&mid=2247486874&idx=1&sn=1bd11f18b1b91e3584adad042b203501": "漏洞变现金:我的31500美元Facebook漏洞赏金之旅 0x2", "https://mp.weixin.qq.com/s?__biz=MzkxOTIzNDgwMQ==&mid=2247484672&idx=1&sn=5f9214cd934f0842aa5278e163286f38": "契约锁电子签章系统dbtest RCE", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493433&idx=1&sn=cc65bcd8f82f0fd1b46fd746ecbba41e": "漏洞预警 | Windows SMB权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655283404&idx=1&sn=187c7df781065431e5dee9a956eb72ae": "2025年攻防演练必修高危漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493433&idx=3&sn=08058cf5a01e256b72d5aef1908c5172": "漏洞预警 | 四信通信科技有限公司设备管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NjUzOTQ0NQ==&mid=2247520801&idx=1&sn=2013891b7fd924d8bbd7bd68b0992527": "《2025HW必修高危漏洞集合(3.0版)》", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499897&idx=1&sn=649c7f9c9def0da85b8b2c0a01565914": ".NET 基于 MachineKey 一键维持权限,通过 ViewState 反序列化工具实现RCE", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507803&idx=1&sn=86dc1cb7aa276652b00ba6cfc10b35ff": "漏洞通告 | 泛微E-cology9 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247485912&idx=1&sn=b776dcd81faed5bbc387e6e9a4b0332f": "【漏洞复现】Dataease JWT 认证绕过漏洞∕远程代码执行(CVE-2025-49001∕CVE-2025-49002)", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463187&idx=1&sn=b6fce76866b61fca2a9d4d739e5dadc3": "信息安全漏洞周报(2025年第24期)", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491590&idx=1&sn=6bfe24a76d37d4ec6e48d96ef743b047": "清源SCA社区每日漏洞提早感知情报、新增CVE及投毒情报推送-2025年06月17日", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484455&idx=1&sn=8bf8fbd3974c9a431d5598daf4fca49d": "域内大杀器 CVE-2025-33073 漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499890&idx=1&sn=03ae7202852a3f6cd511140924332eac": ".NET 介绍一种新型 RCE 利用点分析与漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492348&idx=1&sn=3459eb764f6bc4eef3a045f28ea47745": "【PHP代审】记一次某海外酒店管理系统漏洞复现分析+0day挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490784&idx=1&sn=03b9839ecd75272e21510ef54162c9c9": "众测攻防技术深度剖析:突破WAF、框架漏洞利用与新型攻击面", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491850&idx=1&sn=db77a285148d62fa2e546f05b9fb823e": "Apache Kafka Connect 任意文件读取漏洞(CVE-2025-27817)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247499832&idx=6&sn=369107d65d8d91b7d758baecb6c1c41a": "Apple:多个操作系统中的安全漏洞正遭受攻击", "https://mp.weixin.qq.com/s?__biz=MzkyNzMyNjcwNQ==&mid=2247488450&idx=1&sn=34b5434a55a02c05bb35ebef8f08aa3c": "CVE-2025-33073!Microsoft SMB 客户端特权提升漏洞 漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611105&idx=3&sn=44818c48fdb0f6d90c788f8898b09b6f": "记一次AMD漏洞挖掘:从文件权限配置错误到驱动权限提升", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247487229&idx=1&sn=0ce71172eb185b6cb55ce2ff4dcbb9f0": "用友NC importTemplate方法XXE漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247488048&idx=1&sn=c22d6a5bbf0f8be3bc37e5f2f52c71ef": "基于OSI模型来挖洞的思想转变来找到那些被忽略的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NzI3ODU0Mg==&mid=2247483899&idx=1&sn=bfa971e99ccf2de2cca3003ba7451dbc": "车联网安全进阶之GB∕T 45496漏洞风险等级计算器发布", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490265&idx=2&sn=fbdfd14e660079cd2400bb3ddf8f2342": "【高危漏洞预警】Windows SMB 权限提升漏洞(CVE-2025-33073)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583016&idx=1&sn=3779c200d5b53c656dd00799324e1aea": "超过84000个Roundcube网络邮件安装受到RCE漏洞影响", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494039&idx=1&sn=9761f150a71b2c5fb70b38b9a089006c": "【已复现】泛微 E-cology9 SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494039&idx=2&sn=434cc36cf0d74dc86fc89af3d189743f": "【已复现】Windows SMB 权限提升漏洞(CVE-2025-33073)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523322&idx=2&sn=347204929358f8a4c82b2634e62774cd": "Veeam RCE漏洞导致域用户入侵备份服务器", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503510&idx=1&sn=709598245f5b6c9c5d897727f106c25b": "【已复现】泛微E-cology9 SQL注入漏洞(QVD-2025-23834)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524831&idx=3&sn=aa81460de131a6a4c34d00340246d498": "XDSpy组织利用Windows LNK零日漏洞窃取敏感信息", "https://mp.weixin.qq.com/s?__biz=Mzg4Njk1NDg5NQ==&mid=2247483900&idx=1&sn=be8d8fa3454a2c1ca471da2c0492a994": "URL跳转漏洞-原理到实战", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247499843&idx=1&sn=4586afaa6722de8983da0a1c104db042": "Chrome 漏洞让攻击者执行任意代码 - 立即更新!", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490265&idx=1&sn=432dd1cb6769a98e401d684226627eb1": "【高危漏洞预警】泛微E-cology9 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484906&idx=2&sn=97b955ee68e3ad6b31a6b5ecc0278dcd": "入选作品公布|安钥®「漏洞处置标准作业程序(SOP)」征文第四十期", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523322&idx=1&sn=33329d3ec49e0f180be0dcedb8cd70a4": "谷歌 Gerrit 代码平台漏洞可用于供应链攻击,18个谷歌项目受影响", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487483&idx=1&sn=3f27f6c0814b247a8d5872fbd336bbb6": "100 个 Web 应用漏洞类型挖掘", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524831&idx=1&sn=fccb308af75d0ed4e6fda2f6f3ffb43d": "Chrome 漏洞让攻击者能够执行任意代码 – 立即更新!", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484906&idx=1&sn=f34099f37ed06bb9ba3ccb49e3fe7bd5": "安钥®「漏洞防治标准作业程序(SOP)」征文启示 [2025年第24期,总第42期]", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490423&idx=1&sn=36a82489f3056c2530dd2906ac91c352": "【已复现】泛微E-cology9存在远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247493007&idx=1&sn=b20a374d3ca3b7006b0efb5ae5029fd5": "英特尔 CPU 新漏洞导致特权内存中的敏感数据泄露", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488643&idx=1&sn=b27e3aba1632dd12bad93e6c83fe107a": "契约锁电子签章系统dbtest接口存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247527275&idx=1&sn=128c0b0612fe1c9346fec2741ef0b702": "上千家政企网站沦为黑产跳板:子域名接管与文件上传漏洞深度分析", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247489365&idx=2&sn=c4c745e3b68fe39fddc6bb157e321d50": "红队终极指南:“A-poc∕RedTeam-Tools”", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247486121&idx=1&sn=0fd01996425ee4db46ec9a675851b9c7": "一次CNVD漏洞挖掘过程", "https://mp.weixin.qq.com/s?__biz=Mzg4Njk1NDg5NQ==&mid=2247483905&idx=1&sn=f5ceef3c62817cf807d41a9890fbaf34": "第六章URL跳转漏洞-原理到实战", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247492488&idx=1&sn=7c1e6f59ac98e6a9ef8a0a714166ab45": "渗透必备工具箱V9(更新) 集成Web扫描、漏洞利用、抓包、免杀等等|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493446&idx=3&sn=36633d2511379f57d133547778a390f8": "漏洞预警 | 月子会所ERP管理云平台任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795477&idx=1&sn=c8cc84db69bc662ea39715896bbf0262": "Qualys 研究人员发现允许 root 权限攻击的严重 Linux 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487467&idx=1&sn=30595cd79fc86138e72e6deec443615d": "代码审计系列-基础篇-SSTI-FreeMarker模版注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655283656&idx=3&sn=641843bbd3df3792d39ce6ef902c63a7": "HVV(红队蓝队资料、威胁情报、技战法)、渗透测试、漏洞、代码审计、APT、DDOS、勒索病毒、CTF、逆向", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247492959&idx=1&sn=9a1942dcd47e3a68c948162ff496ec37": "一个高性能的目录遍历漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488127&idx=1&sn=af0c6e44a295d4d99022dd201048fc66": "紧急!泛微E-cology9高危漏洞来袭,数据库大门洞开!(QVD-2025-23834)", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247546559&idx=2&sn=3e604094846f6639de3d590ec3e75b45": "Windows SMB客户端提权漏洞(CVE-2025-33073)及其在未启用SMB签名环境中的攻击原理", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652116640&idx=2&sn=dc4751da96a5482b4b5684916508100a": "医疗服务公司Episource数据泄露,影响540万人", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493446&idx=2&sn=1cc5b2e1e376e2d93d5bd3bd41d1c1b0": "漏洞预警 | 信呼OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247491912&idx=1&sn=74dd7b8a525955965457628ed711e635": "浅谈常见EDU漏洞,逻辑漏洞、越权、接管、getshell,小白如何快速找准漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494051&idx=2&sn=80bc42dcca795e773ef2680f5648afa7": "Flodrix僵尸网络正攻击存在漏洞的Langflow服务器", "https://mp.weixin.qq.com/s?__biz=MzIzNDIxODkyMg==&mid=2650086501&idx=1&sn=ebe5f79b15dd82355295f3316ec6e9f6": "起亚厄瓜多尔车型钥匙系统存在严重漏洞,数千辆车面临被盗风险", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247546563&idx=2&sn=e3b299fc15a136e45ca0efdd0cbaf3b9": "Windows SMB客户端提权漏洞(CVE-2025-33073)及其在未启用SMB签名环境中的攻击原理", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493446&idx=1&sn=bb7af1bdae0d924f2df258a74cea48e5": "漏洞预警 | Apache Tomcat安全约束绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494051&idx=1&sn=824b2b262ccd14013ff47b1150ee5f2e": "Veeam修复了Backup & Replication产品中的一个新关键漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494051&idx=3&sn=020fd34cd86d6d9c3aca858459a45f32": "医疗保健服务公司Episource数据泄露事件影响540万人", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492350&idx=1&sn=5586252e5859dfb692618f047c00faa2": "攻防下帮助学员快速审计NET前台rce漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499911&idx=3&sn=f75d5f4ae14d450acb3ecd640947682c": ".NET 基于 MachineKey 一键维持权限,反序列化工具实现RCE", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247499903&idx=1&sn=bd4cd23c26aac01c8dcc6ce1bab5ba63": "双漏洞链一击拿下 Root:CVE-2025-6018∕CVE-2025-6019 横扫主流 Linux", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494556&idx=1&sn=c79aa1a66057f879b6885cd60d3cbd62": "Nuclei POC 漏洞验证可视化工具 | 更新V3.0.0", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491859&idx=1&sn=8d77eaf8aac84238abc49fe49e499497": "三汇 SMG网关管理软件 9-2radius.php 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MjE2Mjk3Ng==&mid=2247489255&idx=1&sn=6aeab11cfe4dc3b1215c81d03177d2af": "美国CISA将苹果与TP-Link产品高危漏洞列入已知利用清单", "https://mp.weixin.qq.com/s?__biz=MzkyMjU2Nzc1Mg==&mid=2247484633&idx=1&sn=991d4d622e93851617f7e085b3c8e2b8": "当漏洞成为“数字战争”的弹药,谁能改写攻防规则?", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512487&idx=1&sn=9d79e4b58281b6f0282d45507656343c": "微软2025年6月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486229&idx=1&sn=3a1d73583e193008a7a7c66f522d0567": "工具集:Wavely V3.0【Nuclei POC 漏洞验证可视化工具】--6.19更新", "https://mp.weixin.qq.com/s?__biz=Mzg2NjY2MTI3Mg==&mid=2247500547&idx=1&sn=19b2ea57a06109e6873e5553a867518d": "微软2025年6月份于周二补丁日针对67漏洞发布安全补丁", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247550512&idx=1&sn=600847a31bfec631b59a0c1a2a8073d3": "一次前端泄露密码送来的赏金漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500901&idx=1&sn=2ab5b540e69020a048884ea095ed11a2": "绞尽脑汁的宝塔漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488131&idx=1&sn=47a1bd3f6af2b827fd64537d32891151": "Linux核心转存漏洞:CVE-2025-5054(POC)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494067&idx=1&sn=ea202b33e7e5e356f3c3a9afc1ed2750": "【已复现】Linux 本地提权漏洞(CVE-2025-6018、CVE-2025-6019)", "https://mp.weixin.qq.com/s?__biz=MzkxMzQyMzUwMg==&mid=2247486686&idx=1&sn=cbd68c8179320c42afeb7e4aeb053c20": "看完这篇再挖不到漏洞,请顺着网线来砍我", "https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjkxMg==&mid=2247484021&idx=1&sn=b6f49af4c972818f134a3a18872a4d20": "契约锁RCE分析", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490273&idx=2&sn=905d7c05651aefdf13d886cdeddad3e9": "【高危漏洞预警】 libblockdev权限提升漏洞(CVE-2025-6019)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501204&idx=2&sn=585b4c138848a45286cf7890b854cc55": "【漏洞通告】Veeam Backup & Replication 远程代码执行漏洞 (CVE-2025-23121)", "https://mp.weixin.qq.com/s?__biz=MzkzNjczNzEyMw==&mid=2247484535&idx=1&sn=8820fba10b35b6b69e053beab3552640": "宝塔RCE完整说明", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524855&idx=2&sn=d172a2662ecccc74a4853c320e8e45bf": "串联两个本地提权漏洞获取root权限:多数Linux发行版受影响(CVE-2025-6018、CVE-2025-6019)", "https://mp.weixin.qq.com/s?__biz=Mzg5MDc1MjY5Ng==&mid=2247493030&idx=1&sn=52d68896765ce5a16a09e99d394507b2": "CVE-2025-33073:域内大杀器(附复现环境)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531081&idx=1&sn=52089fe73bfabf713e03710a33a396ce": "CVE-2025-2783 谷歌Chrome零日漏洞(沙盒逃逸)的攻击分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070247&idx=4&sn=a9da49b7c850012e89fbee85c39fe677": "【安全圈】CISA警告攻击者利用Linux漏洞进行攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2NDY2MTQ1OQ==&mid=2247523724&idx=1&sn=ea5d6bc9db61ae096d4660bdf0d5a676": "CVE-2025-33073:域内大杀器(附复现环境)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523333&idx=2&sn=23cefe4214956d3fbac95c79c5396243": "udisks 漏洞可用于获得Linux 主要发行版本的root权限", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458595995&idx=2&sn=74286f4ec1648653625dda192d21c28f": "CVE-2025-6018 & CVE-2025-6019:双漏洞链致 root 权限轻易失守", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484912&idx=1&sn=231332522ccc8edc4d7cd46df1c75b8c": "初识安全漏洞防治SOP", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323331&idx=3&sn=fb387b84ee719ca1c647d97b1ce9fed3": "Linux两大漏洞可串联,无需特殊手段即可获取root权限", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490273&idx=1&sn=d48bf4bef564819f0e7b48beb5277bbd": "【高危漏洞预警】SUSE 15 PAM本地提权漏洞(CVE-2025-6018)", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261308&idx=1&sn=f169299b08c451fc44c011aaa602aaea": "​​iPhone “玻璃笼”:利用两枚零日漏洞的国家级攻击链揭秘​​", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488862&idx=1&sn=672add026f3f250b4406a9a23d277c9e": "CVE-2025-6019: 从 allow_active 到 root 的本地提权漏洞 (LPE)", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg2NTM3NQ==&mid=2247484808&idx=1&sn=5abe422c4016fe5301be0b7b67ce939e": "关于漏洞“宝塔Linux面板存在任意命令执行”的说明", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247485953&idx=1&sn=8c198027b4a8441d92fc0ca20bdcc39d": "CVE-2025-48957 AstrBot get_file接口存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTUwNTU5Nw==&mid=2247489427&idx=1&sn=7f1e28621d60874665996bfed2a5abbb": "关于漏洞“宝塔Linux面板存在任意命令执行”的说明", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247491061&idx=1&sn=3773fa7a546c57d53836cf0d764ac999": "漏洞管理平台VulnArk 紧急删除,备份速下!", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531136&idx=2&sn=71883f588c565f53ef733bcfcb8c5c13": "Linux 内核 OverlayFS 漏洞 (CVE-2023-0386) 被利用来提升 Root 权限", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488656&idx=1&sn=0f20df860f2ce3b09498578185b5795d": "GeoServer TestWFSpost 存在SSRF漏洞CVE-2024-29198 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247492539&idx=1&sn=250730046fc1116e0a28c8ea9e77bbb5": "Burp新利器解决请求包加密问题 CloudX自动化解密AES、SM4、DES等加密方式的接口|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523333&idx=1&sn=7293c7dd1145ab18fd71d834ad208fe0": "BeyondTrust:注意远程支持软件中的预认证RCE", "https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908313&idx=1&sn=87a20fea7a0c6a7945693d4bea825696": "Chrome N-Day漏洞利用工程指南", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524855&idx=1&sn=391abd98577d6ef93a97caf66c01a1b9": "开源项目中的GitHub Actions安全隐患:MITRE与Splunk揭露关键漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxOTIzNDgwMQ==&mid=2247484679&idx=1&sn=ccaffdcd00b07f198b98052823993e9f": "用友nc saveProDefServlet SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488137&idx=1&sn=e07f4a50cf1f03d17bac8b2800bd37b4": "Windows惊现致命权限漏洞!普通员工1分钟变管理员,数亿设备暴露风险(CVE-2025-24286)", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652116672&idx=2&sn=ad75e106efc11a2a208b30168436e7d7": "微软2025年6月份于周二补丁日针对67漏洞发布安全补丁", "https://mp.weixin.qq.com/s?__biz=MzkyMDM4NDM5Ng==&mid=2247492958&idx=1&sn=b73140e1a25acaeb54db8039b0103eeb": "带你走进S3存储桶中的潜在漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491616&idx=1&sn=d9208bcf88762ece0d2666bed4216fed": "清源SCA社区每日漏洞提早感知情报、新增CVE及投毒情报推送-2025年06月19日", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MjAwNQ==&mid=2247486886&idx=1&sn=be075071b89d614263149e7ac7ab9ecb": "从SOAP到Shell:利用SOAP服务实现完全管理员账户接管(近乎RCE的漏洞)", "https://mp.weixin.qq.com/s?__biz=MzkzMDcxNzg4MA==&mid=2247484613&idx=1&sn=81017eb66ae71f551de7318bddcf1826": "fastjson 1.2.80 springboot下rce利用链学习", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493458&idx=1&sn=c23bc486899927649e2245662abfb383": "漏洞预警 | 宏景eHR SQL注入和XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486412&idx=1&sn=be56a747f065aecc4f7aff884f151e2b": "漏洞赏金工具 - BBtool", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493458&idx=3&sn=2cdc99e9e47e8c90eb4982049120fb5b": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247491984&idx=1&sn=754ef28c3e4c30173207a484f66ddf13": "【众测】分享某SRC众测高危逻辑漏洞一枚", "https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908325&idx=2&sn=06326aff0db92eb3b0cf94102cdbec84": "Chrome N-Day漏洞利用工程指南", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493458&idx=2&sn=a9ce4a72601e6e8f80da0bd87561e974": "漏洞预警 | 用友NC SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611124&idx=3&sn=697642233fb6fa80291f9cbac0fbf12b": "记某众测Fastjson<=1.2.68反序列化RCE过程", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900786&idx=1&sn=069433e028f0bbb9d5457c0d6caab415": "Linux内核提权漏洞(CVE-2023-0386)在野利用:从技术原理到业务风险与防御策略", "https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651142691&idx=1&sn=8aa8493bec0e7681c003aaac23cdbeaa": "IoT漏洞分析之模拟环境搭建", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248129&idx=1&sn=b8aaeffedeb8b15bdb3ee6ab715b111d": "MCP服务泄露客户敏感数据,知名企业紧急下线修补| Linux两大漏洞可串联,无需特殊手段即可获取root权限", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491869&idx=1&sn=2af23c0d3c462b35a2bc5c70e4d5fc16": "用友U8 CRM SelectDMJE.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247489083&idx=1&sn=4b87915e617cdedc45e35e07bd5e2862": "一键获取上万资料、漏洞库", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484863&idx=1&sn=b145230e60dec073587ed6e332e57aa7": "【漏洞复现】泛微e-cology 未授权SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611124&idx=4&sn=901103fe591d21c3d77f6cb630a962a4": "Nuclei POC 漏洞验证可视化工具 | 更新V3.0.0", "https://mp.weixin.qq.com/s?__biz=MzU1ODk1MzI1NQ==&mid=2247492274&idx=1&sn=e9ecde35f94e0fc28479875b6aab3b29": "LLM驱动的UEFI固件漏洞智能分析实践", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583172&idx=2&sn=ba838828e94a76da83b0d79076a0969e": "DanaBleed新漏洞使 DanaBot恶意软件即服务平台浮出水面", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247491147&idx=1&sn=96cbaf8867e8cb3d1a5dd586995a4966": "能信安:漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064207&idx=1&sn=fa2366eac8519eb7a23aefb690c81d82": "信息安全漏洞周报【第027期】", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484461&idx=1&sn=d12f4d1f914768b6f6aeb695eca84490": "小团队漏洞管理平台", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488885&idx=2&sn=bb25cb772bed5bb954b079821a9ac205": "NTLM 反射攻击复现 - 滥用 NTLM 进行权限提升 (CVE-2025-33073)", "https://mp.weixin.qq.com/s?__biz=MzAxNDkzNjQ0Mw==&mid=2247483963&idx=1&sn=d4147631169c4f3f4d59a9a061d95188": "SVG 嵌套钓鱼溯源分析:基于可信域名 XSS 漏洞的黑产分发链追踪", "https://mp.weixin.qq.com/s?__biz=MzI4ODQzMzk3MA==&mid=2247490272&idx=1&sn=e976730cb96428843b889f6b33280d58": "美国DARPA宣布将与各军种开展武器系统漏洞红队评估", "https://mp.weixin.qq.com/s?__biz=MzkwMzYyNzQ1NA==&mid=2247485521&idx=1&sn=134e927a37122d16d95fa35deabe69b0": "漏洞扫描神器AWVS最新版2025.4", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488885&idx=1&sn=c956b0f537a856ca365551087420ceee": "NTLM 反射已死,NTLM 反射长存!——深入分析 CVE-2025-33073", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458596037&idx=4&sn=fb4c9bd8a84e95a40a020f981c5e7885": "《CTF训练营-Web篇》更新:反序列化漏洞(四)Laravel反序列化链分析", "https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247533745&idx=2&sn=a176b8fa0297f6d311e87c46b62a9f49": "荐读丨工信部:AI绘图工具ComfyUI多个安全漏洞已被用于实施网络攻击", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524876&idx=4&sn=9d9e9b842c97da2e355156fcff3f36eb": "Apache SeaTunnel 漏洞允许未经授权的用户进行反序列化攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247517234&idx=1&sn=e76c9eba1efc0258f11058f61e600445": "漏洞预警|契约锁电子签章系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523347&idx=2&sn=b6f02b127ba49b7fa05eec183cb4108a": "Sitcore XP中的硬编码密码 “b” 导致企业系统易受RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524876&idx=3&sn=24cefa58e29f9132413362fcfc5c2177": "IBM QRadar SIEM 漏洞允许攻击者执行任意命令", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487488&idx=1&sn=a07090fe47afa7fa1c9bb2f968aadd2a": "CVE-2024-55591 Fortinet FortiOS 身份验证绕过", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247485966&idx=1&sn=502623af4e680d22ab43973a413eee69": "【漏洞复现】Kafka Connect任意文件读取漏洞(CVE-2025-27817)", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652116686&idx=2&sn=6528b7da213e0895a48a14ee1b8e27b4": "Veeam备份和复制中CVSS评级为9.9的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490279&idx=1&sn=444e48ca2685746c17e8e59f2255a436": "【漏洞预警】DedeCMS命令执行漏洞(CVE-2025-6335)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503518&idx=1&sn=09e0cab29a0bf5cf22e300e719f2aab2": "【已复现】Linux 本地提权漏洞利用链(CVE-2025-6018、CVE-2025-6019)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIyNzc3OTMzNw==&mid=2247485927&idx=1&sn=aaae73d34c7eb96d1440870b21c03105": "工具分享 | 一款高价值漏洞情报爬取工具", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247485970&idx=1&sn=1c7e97d2e1a8c9348506e82951046672": "【漏洞复现】泛微e-cology 未授权SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247528323&idx=1&sn=4c2813169468c082a4f51eb8eb6f1c54": "用 IRify 定位某 Admin 目录遍历及反序列化漏洞文件上传", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523347&idx=1&sn=4789a7999ec060d43881b5c1f1b8e576": "思科 AnyConnect VPN 服务器漏洞可用于触发 DoS 条件", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506752&idx=1&sn=a2fd5586e60447195a589c1eab942ce2": "破解 JWT:漏洞赏金猎人指南(第一部分)", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247492002&idx=1&sn=d74d8597c6216303c387838a840cbc56": "【渗透测试】记一次从0到1的逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247519137&idx=1&sn=f34320074a73be0fb12aebfe9de74d94": "记一次实战小程序漏洞测试到严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247521110&idx=1&sn=0b4031953de11bc1668753da586d4e3a": "PHP 静态分析漏洞挖掘:挑战、对策与研究进展综述", "https://mp.weixin.qq.com/s?__biz=Mzk0NTg3ODYxNg==&mid=2247485837&idx=1&sn=8c2e6dd6f88f7ce536eca4c50b85d3c8": "某米路由器漏洞挖掘分享", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484463&idx=1&sn=be78ef79f3a2b6e50fd0c36ea7e5a912": "高价值漏洞采集&推送工具", "https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651142703&idx=1&sn=5c22b3c4912ba8eea137c2328a707b36": "某米路由器漏洞挖掘分享", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNDU5NQ==&mid=2247486368&idx=1&sn=593e0636fcc4db1bee46051ad2903fdf": "【工具分享】BurpSuite新插件-CloudX自动化解密AES、SM4、DES等加密接口助力漏洞探测", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487497&idx=1&sn=56addf0384cd792e5f5a6fa3c00ec142": "Langflow应用程序存在远程代码执行 (RCE)", "https://mp.weixin.qq.com/s?__biz=MzIxOTM2MDYwNg==&mid=2247514353&idx=1&sn=5c7d300ec9d9a430e72c274cd5bb7bac": "漏洞挖掘:巧用查询功能深挖敏感信息的门道", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247573602&idx=1&sn=77224eed21d8cda16951c6625301e580": "一次从0到1的逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491887&idx=1&sn=9ff34f6a8268dc8d3ef275b757095ecd": "用友U8 GRP listSelectDialogServlet SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491878&idx=1&sn=b19405b171f8932d27c8f7da700755cc": "用友U8 GRP obr_zdybxd_check.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1NzMwNTM5NQ==&mid=2247486561&idx=1&sn=e6fe4afab3f974e53e0045291c01109f": "月薪从5K到13.2W,白帽子黑客到底有多赚钱?一文带你如何靠挖漏洞赚取海量收益", "https://mp.weixin.qq.com/s?__biz=Mzg4NDU4OTQ1NA==&mid=2247484712&idx=1&sn=02ff86815b2cb114cbfcea520ff2db51": "内网横行:CVE-2025-33073漏洞分析与攻击复现", "https://mp.weixin.qq.com/s?__biz=MzkxMjYyMjA3Mg==&mid=2247485489&idx=1&sn=fcc1f9e7d998433c8f71cba54982f0d6": "Se8_Sorcery(user部分)", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247492201&idx=1&sn=3a6c575e0bba0f8d05cc8af88125a412": "CVE-2025-27817 Apache Kafka Connect 任意文件读取漏洞分析与复现", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNDU5NQ==&mid=2247486381&idx=1&sn=027accf79c46ae004c1443ec79150b2d": "Laoyue-自动化监控SRC赏金项目,提供多种工具集成和自动化功能,加快漏洞发现和报告流程", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488147&idx=1&sn=b7dcde65044806a8c881b16e905637ee": "高危预警:Linux本地提权漏洞链(CVE-2025-6018、CVE-2025-6019)可秒获Root权限(含POC)", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484465&idx=1&sn=d7f9a4567cfd52ae2a3cd15067b1838c": "【漏洞复现】ActiveMQ中间件漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247550528&idx=1&sn=9e081c065b2c99467ad8f4486d7fe6c6": "记新手小白初挖到的第一个越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497759&idx=1&sn=76d5def436c5e13a8d11a9514cce189b": "一个 $9000 的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491896&idx=1&sn=c52b969d0b012a6773d7ef3681533d09": "畅捷通T+ Load SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491904&idx=1&sn=18ff4be2062e7c1b0a44bbe77e253c32": "畅捷通T+ GLSyncService.asmx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611137&idx=4&sn=c96596b23eeaad179dcc02c1869813a2": "一款专为安全研究人员和白帽子设计的漏洞赏金工具", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900798&idx=1&sn=f544a5fc8f6bc1f5eccb9d9001634c4f": "从LNK到Chrome零日漏洞,揭秘高级间谍组织TaxOff的狩猎进化史", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247485825&idx=1&sn=63bc1d9d12159ac55bcba9ff7c7f35f2": "某证书站邮箱轰炸漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494081&idx=1&sn=a1421640c4cb4056f1d971c7730e3d2f": "Linux漏洞链致使主流发行版均可获取Root权限", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493465&idx=2&sn=9ae4f5cba0b14ebc31b98aebdf846040": "漏洞预警 | 汉王e脸通智慧园区管理平台任意文件读取和任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507810&idx=1&sn=5b5bc67803b368fcd38c1d67a75c6dbd": "双倍奖金!X 夏日漏洞悬赏计划启动!", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247512888&idx=1&sn=070ad5128c82043ed0e7ff0ead954060": "SRC | 一次从0到1的逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzU1NTEzODc3MQ==&mid=2247487193&idx=1&sn=c8a311487502fac2a3ce23003a19ecb1": "BAZZAFL:通过面向漏洞的种子分组将模糊测试活动导向漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493465&idx=1&sn=cecbfaeeb6c4bdf692ee8c983321b6c9": "漏洞预警 | 泛微e-cology9 SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTY1MTIzOA==&mid=2247484688&idx=1&sn=266aba204fedbfcfeb75f0291b0e9cea": "【应急响应】记修复某品牌打印机FTP匿名访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795507&idx=2&sn=81a8c861f8f003d76e97b754da52a2e9": "以色列间谍软件利用WhatsApp新0day漏洞攻击传播", "https://mp.weixin.qq.com/s?__biz=MzkyMTYyOTQ5NA==&mid=2247487241&idx=1&sn=059239f7b395a167f4feb24698627aec": "什么是HOST头部攻击?那个让网站“送错外卖”的危险漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247492040&idx=1&sn=7f72175ba35b8530f51964e1090b84c9": "渗透测试|某单位从敏感三要素泄露到接管管理员的漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247550548&idx=1&sn=5d090a175300dfc30b660bba80a88403": "EDUSRC | 支付类漏洞思路合集(包括证书,小通杀等实例)", "https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247504723&idx=1&sn=c50a22432595f3381a3d022f5f0a8136": "渗透测试-从下载漏洞到前端加解密+签名校验拿下sql注入", "https://mp.weixin.qq.com/s?__biz=MzkxMzQyMzUwMg==&mid=2247486694&idx=1&sn=19f82016f2b04dd34318b52c856da802": "聊聊我眼中的\"Web漏洞挖掘\"", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488154&idx=1&sn=274b1d3fcc232865ba2005697c186e54": "紧急安全通告!RuoYi-AI框架曝任意文件上传漏洞(CVE-2025-6466),可导致服务器沦陷(含POC)", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247485445&idx=1&sn=740e9d7bfd4478e164e11b9f3ded08c2": "分析某oa历史漏洞中捡到CNVD证书", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493465&idx=3&sn=dfdc54e9f0b7b572c6489842ee4ed79c": "漏洞预警 | 宏景eHR SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTQyOTk3Mg==&mid=2247485333&idx=1&sn=40853a58fa3f469387da554b208318a7": "轻量便捷的Nuclei POC漏洞验证可视化管理工具", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261337&idx=1&sn=2603bb64b679c5fdc5abe41a21b86361": "【$10,000】Arc 浏览器:UXSS+本地文件窃取+任意文件写入,路径穿越直通RCE!​​", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247521147&idx=1&sn=091b2248906de288c8b678376f60cf3a": "shiro反序列化漏洞原理分析", "https://mp.weixin.qq.com/s?__biz=MzkwMzYyNzQ1NA==&mid=2247485564&idx=1&sn=d11fe321c143617955c81b04f4a8ad3a": "HTB Artificial 靶场:从AI模型的RCE到NAS备份系统提权", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611143&idx=4&sn=7272666d2f3b722d3e6e8273a0263842": "【攻防利器】Tomcat漏洞批量检测工具", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491618&idx=1&sn=695f849907e60da17dc2e08e2f6e54e4": "清源SCA社区每日漏洞提早感知情报、新增CVE及投毒情报推送-2025年06月20~22日", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501214&idx=2&sn=ec3f0b9a7c46c481e2782ca2c12a04b6": "【漏洞通告】OpenVPN DCO驱动程序缓冲区溢出漏洞 (CVE-2025-50054)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523354&idx=2&sn=8ef63c9db7a5e73748eab7c71b2b5595": "WordPress Motors 主题漏洞被大规模用于劫持管理员账号", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497761&idx=1&sn=73936ace07b08f709da2ace40fdf3933": "由403所发现的SSRF高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247548695&idx=1&sn=a5c45ee0f5d80898eee21d5ee699f031": "Trustwave报告:酒店业成网络攻击重灾区 勒索钓鱼WIFI漏洞齐发", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323631&idx=1&sn=cb216be48b37bb3942f40f1b6f0af4b8": "Python标准库tarfile模块存在任意文件写入高危漏洞,PoC已公开", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323631&idx=4&sn=3fb024a33be11f2119bc8047de77f846": "逾10万个WordPress网站因MCP漏洞面临权限提升攻击风险", "https://mp.weixin.qq.com/s?__biz=MzU4MjYxNTYwNA==&mid=2247487755&idx=1&sn=69879fcde1e30553652dfd6060bc11cb": "今日起,每周更新2+基础学习文章哦!今天是CSRF漏洞学习", "https://mp.weixin.qq.com/s?__biz=MzkyMTQyMzkyMg==&mid=2247484088&idx=1&sn=f13ac7cd62bbe9b5e73a0f561c8dd6f3": "CVE-2020-9484 Tomcat Session 反序列化复现", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500057&idx=1&sn=d9dafaa4313fafd159cc06fb1835f095": "CNVD漏洞周报2025年第23期", "https://mp.weixin.qq.com/s?__biz=MzU4OTExNTk0OA==&mid=2247485051&idx=1&sn=7f9f563780eb545921d68687309b2f00": "利用解析差异复活某凌OA前台RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMDM2MjY5NA==&mid=2247484336&idx=1&sn=be05aaff95bac7ab6b6560a3a207d01c": "chrome “0day”讲解一二", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070304&idx=4&sn=d05ca470ff70ce11963e9e3c7ec01d72": "【安全圈】严重安全警报:OpenVPN Windows 驱动曝缓冲区溢出漏洞,可致系统崩溃", "https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494256&idx=1&sn=bff4aabc6caa8aea8b732f3fbe017516": "窃密器数据如何“点燃”CVE-2025-49113:RoundCube的漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247485256&idx=1&sn=856da5d054aa072ae0a0a8ab75da3390": "记一次另类项目测试经历||近源测绘+知名oa漏洞审计(上)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247492621&idx=1&sn=480d4244338efa136786fb91bf7d0dad": "2025最新AWVS∕Acunetix V25.4高级版更新( AI∕ML预测功能)漏洞扫描器Windows下载", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490284&idx=1&sn=397ddf62437511be1e9a9bb1e49c0d6e": "【高危漏洞预警】Veeam Backup & Replication 远程代码执行漏洞 (CVE-2025-23121)", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247535298&idx=2&sn=ef61c442d5a8cbb8da9894162f54ec2e": "安利:Tomcat漏洞批量检测工具", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655284631&idx=1&sn=0f2b418860e8c2dc075739e21e9ca0cb": "DeepSeek R1技术复现和大模型的治理与安全", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555215&idx=1&sn=6a2811d84935bd770fb0fab5ac10eb48": "渗透进阶,玩转网络漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496070&idx=1&sn=d3362c4570a2fa20dd6265ff8fe16d5a": "CNVD漏洞周报2025年第23期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496070&idx=2&sn=fbbb1aea6d677f06fb7c17d1744a6eb3": "上周关注度较高的产品安全漏洞(20250616-20250622)", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487469&idx=1&sn=969aa08661d0f26aeb3b4f8d5321b200": "代码审计系列-基础篇-SSTI-Thymeleaf模版注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247485985&idx=1&sn=77e197ee7c913ad96cdc2f038191fd99": "【漏洞复现】Apache Tomcat 命令执行漏洞(CVE-2025-24813)", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503434&idx=1&sn=536a6976c1a3e6ceaedfee30301894c3": "【成功复现】GeoServer XXE漏洞 (CVE-2025-30220)", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489509&idx=1&sn=c5820741e13804146977fd7353102d67": "百万POC实时更新", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491620&idx=1&sn=8917170e1628186b772f4eff20c61b8c": "清源SCA社区每日漏洞提早感知情报、新增CVE及投毒情报推送-2025年06月23日", "https://mp.weixin.qq.com/s?__biz=Mzg2MjU2MjY4Mw==&mid=2247485036&idx=1&sn=ee3a749d2edcc53ccbb3bdbbfbb4733f": "hackerone之看着大佬的漏洞流口水", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493483&idx=3&sn=4b001afef13dfb610260d65092c7a22e": "漏洞预警 | 宏景eHR SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499946&idx=1&sn=f6d83334f2b3d76da4e6c8d0a39c7284": ".NET WPF 下的新思路,通过 XAML 实现代码执行", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900800&idx=1&sn=5206926e487bdb80079965ea12d1e150": "AI开发框架成黑客新“肉鸡”:Langflow高危漏洞被利用组建DDoS僵尸网络", "https://mp.weixin.qq.com/s?__biz=MzkxMTY1MTIzOA==&mid=2247484700&idx=1&sn=3975752bd19d84f8561d610262fd94e2": "【技术分享】MQTT未授权访问漏洞利用方式", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247491161&idx=1&sn=040f03ce7d9ec307c99dfa855516ec64": "2025年攻防演练必修高危漏洞合集", "https://mp.weixin.qq.com/s?__biz=Mzg4MTU4NTc2Nw==&mid=2247497672&idx=1&sn=aa31b65773592f3618573abad3603b67": "F5 BIG-IP RCE:重温解析差异导致的身份认证绕过", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247497866&idx=3&sn=d363efd42c49377e2637a4d4a0ddee08": "涉数据安全漏洞与隐私风险 中国医疗设备厂商在美国遭遇诉讼", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247486827&idx=1&sn=a25724a950ba87c0352ab769c3f88bb2": "CVE-2021-41773 漏洞复现:从失败到成功的探索", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247515203&idx=1&sn=aa65a6a18fdb558e811f8b9c1010a23c": "台海热点诱饵!旺刺组织结合 0day 和 ClickOnce 技术开展间谍活动", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491914&idx=1&sn=35337886d7201b34709bbf6689a8a30c": "安科瑞环保用电监管云平台 UpLoadPic 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247521829&idx=1&sn=1169e429efce4626a07be6bb0bae7b52": "一次从0到1的逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493483&idx=2&sn=7928bf75a665a3f3f2320e3eae44f879": "漏洞预警 | JimuReport信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499937&idx=2&sn=be359f4df9c01e75d99bf6c17a5a38c9": ".NET 介绍一种新型 RCE 利用点分析与漏洞挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611158&idx=3&sn=ded70f18ec0a6f9ca8caba82488f97e3": "SRC | 一次从0到1的逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzA3NjU5MTIxMg==&mid=2650575572&idx=1&sn=b474aa1f66643dded82ef017e74f10cc": "上线前还在修漏洞?告别救火模式,试试边开发边找漏洞的国舜方案!", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486298&idx=1&sn=44fa8b1202c28d403d448d9a89a29654": "工具集:泛微E-cology9 SQL 注入漏洞批量检测工具", "https://mp.weixin.qq.com/s?__biz=MzUyMzczNzUyNQ==&mid=2247524896&idx=1&sn=6362d0f2560274fc642f792dcffaf2f6": "黑客据称在黑客论坛上出售Intelbras路由器的0-day漏洞利用", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg2NTM3NQ==&mid=2247484831&idx=1&sn=7375e6ef426b4fd5a0821baee05fcf67": "【CVE‑2025‑49144】Notepad++提权漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NDU4OTQ1NA==&mid=2247484735&idx=1&sn=af7af64dc94f3a3e03211889d55b5fb6": "内网横行:CVE-2025-33073 实战场景利用全流程指南 | 附利用工具", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531265&idx=1&sn=19e218b029466f8e4f24059b96021fae": "Notepad++漏洞 PoC 发布,可提升权限至 NT AUTHORITY\\SYSTEM", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493483&idx=1&sn=9c590617818f23d89234775a6c23dac4": "漏洞预警 | Veeam Backup & Replication远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490297&idx=1&sn=e295cee3d68a7199efefddfb2c56c791": "【高危漏洞预警】Notepad++权限提升漏洞(CVE-2025-49144)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247500027&idx=1&sn=ada8dcbff73f3fb9ecd263cc0d15448f": "Notepad++ 存严重提权漏洞,PoC 已流出", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788722&idx=1&sn=de75400767615e978695a98613796da8": "OpenVPN驱动曝严重漏洞,可致Windows系统崩溃", "https://mp.weixin.qq.com/s?__biz=MzI3ODk3ODE2OA==&mid=2247484447&idx=1&sn=bc4dfbb6ff0e2b7d8cfb9f60918bf17a": "n8n安全:从漏洞利用到防御", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506770&idx=1&sn=b43532f3f972ae1cc74a3ac4cf9c3ff4": "破解 JWT:漏洞赏金猎人指南(第二部分)", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247512932&idx=1&sn=20365ad5978c47084a2fe90b8593d2ca": "威胁情报:Notepad++ 本地提权漏洞 | POC已公开", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503440&idx=1&sn=d8b69e0070a73f607d010c0c6158d535": "雷神众测漏洞周报2025.6.16-2025.6.22", "https://mp.weixin.qq.com/s?__biz=MzI3NDEzMDgzNw==&mid=2247485180&idx=1&sn=67de912aaaff345f53ddce1ec5491e9f": "CVE-2025-33053 网络快捷方式文件远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247492076&idx=1&sn=c161a60e6baa6ab0e5c752b83c22a82c": "EDUSRC-高危漏洞-从信息收集到后台多个越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247625266&idx=1&sn=7d747f1cb8f470b24f724c87fde28ece": "使用 UDS 自动发现 ECU - UDS是否是一个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583238&idx=2&sn=353765459c0cc7e6976ff211a8b1eab9": "超过46000个Grafana实例暴露于账户接管漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490297&idx=3&sn=39b54018862cbe1a46157a367bcf2354": "【AI高危漏洞预警】langchain-ai信息泄露漏洞(CVE-2025-2828)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247500027&idx=2&sn=53f5863b82d57df201da83c7c6919937": "WinRAR 存在目录遍历远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501221&idx=2&sn=4a833bc0c5b81084001551c46f420b29": "【漏洞通告】Notepad++ v8.8.1安装程序特权提升漏洞 (CVE-2025-49144)", "https://mp.weixin.qq.com/s?__biz=MzU3NzY3MzYzMw==&mid=2247500151&idx=1&sn=40e8f6ac31864ee418b3989c986172d5": "威胁情报:Notepad++ 本地提权漏洞 | POC已公开", "https://mp.weixin.qq.com/s?__biz=MzkyOTQ0MjE1NQ==&mid=2247500804&idx=1&sn=90ea09bbfd5425c07de64038416c6ec8": "【紧急补丁】Veeam 12.3.2 发布,修复 CVE‑2025‑23121(9.9分 RCE)及两项高危权限滥用漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458596239&idx=3&sn=d782404acf8421ef63b6789bd3a99a90": "WinRAR现高危漏洞,恶意文件可致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzkyNzQxMjQ4Ng==&mid=2247484252&idx=1&sn=5e962271608318dff0b47a2909cca7ea": "工具 | 泛微E-cology9 SQL 注入漏洞批量检测工具", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490297&idx=2&sn=6153fb97ede112cd135b07c48e91a27f": "【高危漏洞预警】Citrix NetScaler ADC越界读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484380&idx=1&sn=b7fa367d77e1483cb8a5a87d1478e578": "【漏洞复现】一次不一样的逻辑绕过", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247487364&idx=1&sn=744d24f074c71851c7a36876bc42c3bc": "OA系统漏洞审计之用友NC反序列化 UserQueryServiceServlet", "https://mp.weixin.qq.com/s?__biz=MjM5MjEyMTcyMQ==&mid=2651037762&idx=1&sn=e180a260fc140e02cebd898bf1b1fead": "Android系统内核漏洞利用技术入门", "https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908373&idx=1&sn=809508815394b08b8abbad379888a7f0": "微软MSRC的漏洞情报“剽窃”策略", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484473&idx=1&sn=72dbb861fc8336a1ec596800f5ed6f51": "靶场攻防|SSRF漏洞打穿内网(1)", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248146&idx=1&sn=5ef4c9942a320bc7e46b5d456b4ec346": "Notepad++ 存在严重权限提升漏洞,PoC已发布 | 史上最大规模DDoS攻击在短短45秒内传输了37.4TB的恶意流量", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247492096&idx=1&sn=5f497b3d236bb09431d51419bebc6eb2": "【渗透测试】记录某企业存储型XSS漏洞从发现到数据外泄全路径分析", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247546728&idx=2&sn=34353d879640e19ff3199801f635895b": "OpenVPN驱动曝严重漏洞,可致Windows系统崩溃", "https://mp.weixin.qq.com/s?__biz=Mzg2OTU3MzI1OQ==&mid=2247486218&idx=1&sn=aba341fb0b861e5a70d31fb9ebcd8587": "【前沿研究】降维打击!DeepSeek AI 智能体\"碾压\"传统工具,MCP漏洞扫描效率狂飙1000%!", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611176&idx=2&sn=d245aba5b4fef5f22ba543ba93694efb": "Notepad++ 存在严重权限提升漏洞,PoC已发布", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506789&idx=1&sn=ac6c506a103f943a10d3556aaa61cd02": "破解 JWT:漏洞赏金猎人指南(第三部分)", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463199&idx=1&sn=8b9360adb7f25f9377ced0a8e8e8eda8": "信息安全漏洞周报(2025年第25期)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491923&idx=1&sn=0a5aad1317aad151a2b751e12641e71e": "GeoServer XXE漏洞 (CVE-2025-30220)", "https://mp.weixin.qq.com/s?__biz=Mzg4NDU4OTQ1NA==&mid=2247484740&idx=1&sn=efcc3f00d734e8b8bf6e9bf129f586d0": "内网横行:大杀器之实战场景下的 CVE-2025-33073 全流程利用指南 | 附利用工具集", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795533&idx=1&sn=72c3ca5e960d19d7c59bd5ff386a0eca": "WinRAR 目录漏洞允许使用恶意文件执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzIyNzc3OTMzNw==&mid=2247485939&idx=1&sn=03c3ffef5a2ae3b4cd0db6c79534f4a3": "工具分享 | 一款JumpServer堡垒机未授权综合漏洞利用脚本(近期更新)", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247485361&idx=1&sn=1848475721009d2894847479ed3a090c": "Notepad++ 存在严重权限提升漏洞及白加黑", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484471&idx=1&sn=cf743831abccc0a1a5cb46208a1f6ee5": "Springboot图形化漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247535332&idx=5&sn=7700ce5764c969ea25c1b48668b198fb": "多部门联手!未成年人安全漏洞整治风暴征民意", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484510&idx=1&sn=ff6752e79d304c2f0c105cd9d11bacc2": "Langflow远程代码执行漏洞(CVE-2025-3248)POC及一键部署环境", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247546728&idx=3&sn=64a81159f0079c1d782bad8db1000462": "信息安全工程师系列-第13关 网络安全漏洞防护技术原理与应用", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247521312&idx=1&sn=f8ca2494b32db358ea69d4f0570ef6ca": "一次从0到1的逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507815&idx=1&sn=d7d2e2bc59c6884536c20a26dfcbe559": "漏洞通告 | Gogs远程命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NTY0MjIwNg==&mid=2247486111&idx=1&sn=b7d8865b37ec95f6ad4484cd959fc3ea": "Docker API 漏洞成黑客跳板,配合Tor 匿名网络正偷走你的加密货币", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247486005&idx=1&sn=264eaaced170be759dbfc03828c82d65": "【威胁情报】:Notepad++ 本地提权漏洞 | POC目前已公开", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323714&idx=1&sn=84082a15d99ba5d586f57149ae21b103": "小米互联应用曝高危漏洞,设备面临被完全控制风险", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458596252&idx=3&sn=3870fcc4fac639f2b1fa7dc71dcbdf97": "NVIDIA Megatron LM 重大漏洞曝光,攻击者可注入恶意代码,用户需立即升级", "https://mp.weixin.qq.com/s?__biz=MzI2MDk2NDA0OA==&mid=2247533747&idx=2&sn=22b55155a4f85bf20cdba850b24115eb": "荐读丨首个AI Agent零点击漏洞曝光:一封邮件窃取企业AI任意敏感数据", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523373&idx=1&sn=046fdf8814e8311d4a31bd092804a2c2": "思杰修复 NetScaler ADC 和 Gateway 中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531318&idx=1&sn=5495b33965ce946dd8209ec865cc0978": "剖析 CVE-2024-12695:利用 V8 中的 Object.assign()", "https://mp.weixin.qq.com/s?__biz=MzkxOTUyNTg2MA==&mid=2247483982&idx=1&sn=a506515361c892f7d439c4fe16467aa6": "【淮橘AI代码审计工具v2.0】规则+AI双引擎,让漏洞无处遁形", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247550556&idx=1&sn=931c3d818653e765d82fba8af75a5de1": "手把手教你CNVD漏洞挖掘 + 资产收集", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137321&idx=2&sn=3b273292ef01a662bff4e7e856dd6634": "美国遭遇黑客活动分子大规模DDoS攻击,与伊朗轰炸事件相关;小米互联互通应用严重漏洞允许黑客未授权访问用户设备| 牛览", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492665&idx=1&sn=9fbe571d7111030b9c4ceba172cdaa2a": "漏洞复现 || GeoServer XXE漏洞 (CVE-2025-30220)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501227&idx=2&sn=6dd4eb38653a88948107ed6a38964031": "【漏洞通告】WinRAR 路径处理漏洞导致远程代码执行 (CVE-2025-6218)", "https://mp.weixin.qq.com/s?__biz=Mzg4Njk1NDg5NQ==&mid=2247483910&idx=1&sn=213863db5a9b86c813db99bade0660e1": "Java代码审计第七章-任意文件上传漏洞(上)", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247492658&idx=1&sn=083e602f09f084017608fce4fb9b60d5": "VulnCrawler v2.0- 漏洞情报拉取工具 一键抓取最新漏洞|漏洞探测", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555247&idx=1&sn=a7196eceb681af8cdcbd0cb4df87f1b9": "nps之Socks流量分析以及未授权复现", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247489523&idx=1&sn=7a64c5b7c5c623d232ed0a4980cf9f10": "渗透测试|某单位从敏感三要素泄露到接管管理员的漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494089&idx=1&sn=b9ada1dbf29cb740174d1194b7b4262d": "【已复现】Gogs 远程命令注入漏洞(CVE-2024-56731)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490307&idx=2&sn=6df93de7148487ec4029f4396726754d": "【高危漏洞预警】Pterodactyl代码执行漏洞(CVE-2025-49132)", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247489256&idx=1&sn=503b05e22ac55c8acc087c2ad80efcba": "利用 WebView 漏洞:绕过 SOP 访问内部应用程序文件", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247521326&idx=1&sn=eee5b7db26999c41ad137213d0d90a1c": "记录某企业存储型XSS漏洞从发现到数据外泄全路径分析", "https://mp.weixin.qq.com/s?__biz=MzkxNTY0NzgwNA==&mid=2247483980&idx=1&sn=4263cd05489194ff5d3e53a235bf3016": "CRMEB-CVE-2024-52726-任意文件下载漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247641086&idx=2&sn=7947f21af9546a6522db29daeb6323b0": "直播预告 | 攻防演练季应急自救指南-0Day∕NDay来袭,传统防护失效下该如何破局?", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490307&idx=1&sn=bac7469bf34eee680054d677b1c056ec": "【高危漏洞预警】 Gogs内部文件删除致远程命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070352&idx=3&sn=cc4501ba6fd8153a01376bad11487244": "【安全圈】TeamViewer 高危漏洞通报(CVE-2025-36537)", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247573676&idx=1&sn=e886de4de4e7bab19b5e175e478473af": "6款较流行的开源漏洞扫描工具推荐及特点分析", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492852&idx=1&sn=63aa481b46b0e2ccc42748ad0107467f": "【已复现】Gogs 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555247&idx=2&sn=7d638163f3ed98a098b2e44a47e27120": "【免费领】社会工程权威资料:解密安全体系中的人性漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323714&idx=3&sn=e66361c25b0dba9cb07f228b450a60c9": "WinRAR目录遍历漏洞允许通过恶意文件执行任意代码", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247493041&idx=1&sn=518361ee24bc2da2bdc44f947e1046a8": "在全球间谍活动中,政府网络邮件遭 XSS 漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247492046&idx=1&sn=01a742e4329db61125a8bb709a3c781b": "安利一款桌面应用流量拦截神器:InterceptSuite 让加密通信无处遁形", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247511358&idx=1&sn=668ea03605884eaaecd7c4d02890cc31": "Brother、富士等多型打印机曝严重漏洞,核心问题无法通过固件修复", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499955&idx=1&sn=46257e085680fe9947bc90925d324f23": ".NET 介绍一种漏洞挖掘思路,绕过 GZip 实现反序列化", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493513&idx=1&sn=1ccc756f815c32f18e26fef511666ec0": "漏洞预警 | Linux本地提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795544&idx=3&sn=bc7325dfc92703b843ccfc4f662399b4": "CISA 警告:老旧TP-Link 路由器存在严重漏洞可导致黑客攻击", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493513&idx=2&sn=f6b4bc85401b58e71cdb7aa704901f29": "漏洞预警 | 云课网校系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795544&idx=2&sn=c4b3f53fda7cbd38f267401a4b6af0eb": "新漏洞使数百万台 Brother 打印机面临黑客攻击", "https://mp.weixin.qq.com/s?__biz=Mzg2NzkxOTQ0OA==&mid=2247484573&idx=1&sn=aceeff40c7236693b32fabb68ee8ab3b": "XDigo 恶意软件利用 Windows LNK 漏洞对东欧政府发动攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491645&idx=1&sn=6961f6e6b2bf79b4616ac3459e85f91c": "清源SCA社区每日漏洞提早感知情报、新增CVE及投毒情报推送-2025年06月25日", "https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908401&idx=1&sn=e5f24f835066c260946809fee62a5325": "[AI-VA-20250626-001] - Gogs符号链接处理不当导致远程命令执行", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MjAwNQ==&mid=2247486915&idx=1&sn=a2fcd625edc0bfec635fa313d4ad1bff": "200小时狂赚$20,300:我的漏洞赏金黑客挑战实录", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493513&idx=3&sn=e9ebcf261289a95fb9471fcac2883806": "漏洞预警 | 泛微E-Cology SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjY2MTIzMw==&mid=2650623948&idx=1&sn=8e21d9d9ff126d57e4ccec4d7fd6b53f": "CVSS10分!Pterodactyl Panel远程代码执行漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531365&idx=2&sn=eeb68c24e0ebe5b144c992e1b3477757": "TeamViewer 远程管理漏洞 (CVE-2025-36537) 可导致权限提升", "https://mp.weixin.qq.com/s?__biz=MzkwMzYyNzQ1NA==&mid=2247485618&idx=1&sn=0c172c8218bd712fd7319c25ea282f8a": "速速更新!WinRAR 又又又出漏洞了!", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248151&idx=1&sn=757d9ada4ed57f09ef720dcca0cef6a5": "实战:滥用MCP服务攻击企业AI,窃取企业内部数据 | WinRAR目录遍历漏洞允许通过恶意文件执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499953&idx=3&sn=35d070e846b8f01bd8d441b1dae2c836": ".NET 通过 XAML 实现任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247500129&idx=2&sn=690cd25311a206b712e9f82b871929b6": "0day漏洞攻防竞赛:东大与美国的隐秘战争", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503527&idx=1&sn=3aa5f32ac9d5200982fe5a13434d7eb8": "【已复现】Gogs 远程命令注入漏洞(CVE-2024-56731)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583318&idx=2&sn=0ba427effcd76b16d408c7d3116a319a": "Sitecore内容管理系统漏洞链始于在设置硬编码密码时的疏漏", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488924&idx=1&sn=fd5c369c50dfb523c63dab43e94fba98": "你检查过回收站了吗?挖掘 Active Directory 回收站中的权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070375&idx=2&sn=43a610075b530001df1d12c917a221e3": "【安全圈】Realtek 蓝牙协议漏洞允许攻击者通过配对过程发起拒绝服务攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484434&idx=1&sn=fdcc1421f4fe465e4fa8104b5e7ccb6f": "【漏洞预警】Gogs远程命令执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247500337&idx=1&sn=cf1c9b178de58a55c1e8bb36541666c2": "还在为代码安全发愁?这款“漏洞规则库”神器请查收!", "https://mp.weixin.qq.com/s?__biz=MzIyMjQwMTQ3Ng==&mid=2247491568&idx=1&sn=56bef06681cde2ce8161fa8cfaeab4db": "【国际视野】美国网络安全和基础设施安全局与国家安全局联合发布《内存安全语言:减少现代软件开发中的漏洞》指南", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247488427&idx=1&sn=9fc8ecfaa6360e9fbcf4ea5c4618a39d": "“你刷的小红书,其实在裸奔?”——黑客揭秘App开发者模式背后的漏洞发现与利用", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494116&idx=1&sn=5076fd18e8149cf5d4485f4282758220": "思科修复了可能导致 root 级远程代码执行的关键 ISE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTYyMDk1Nw==&mid=2247483880&idx=1&sn=33c146d72d472dd3162c8ead79ed0453": "【情报】Notepad++存在高危提权漏洞CVE-2025-49144", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581004&idx=1&sn=2f71cde362d2e5dec4e3585e1ac450be": "当分公司突遭漏洞通报……如何揪出安全管理“暗礁”?", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531390&idx=1&sn=ea0a1db7611361fced3917c01d483312": "CVE-2025-47934 – 欺骗 OpenPGP.js 签名验证", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247492672&idx=1&sn=7e12184e991333cec5e692eaa1493756": "About基于Python javalang库开发的一款轻量级Java源代码审计工具|漏洞探测", "https://mp.weixin.qq.com/s?__biz=Mzg5OTE4NTczMQ==&mid=2247527416&idx=1&sn=d20cead60a11511749fe247e9b5294e1": "病毒入侵?漏洞暴露?腾讯 iOA 一键封杀安全威胁!", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506828&idx=1&sn=4dcc2055faf8a5122af10eb038e0e5ab": "破解 JWT:漏洞赏金猎人指南(第五部分)", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137338&idx=2&sn=2b54725eb21fda1feeedac82b273d938": "ChainIQ遭网络攻击,影响UBS和KPMG等知名企业;IBM WebSphere高危RCE漏洞允许攻击者完全控制系统 |牛览", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523387&idx=1&sn=d337384a0eacef330ea1c9beaedf7937": "思杰紧急修复已遭利用的NetScaler ADC严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070394&idx=4&sn=aeed87696ea8fe6444b8b1cb9444bf8e": "【安全圈】Open VSX Registry 爆出严重漏洞,数百万开发者面临供应链攻击风险", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323993&idx=4&sn=a39d5181504a9caeda8bbcff989ef625": "IBM WebSphere应用服务器曝高危远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096350&idx=2&sn=ad5be77318cdcb22396bebc1fefd8a71": "NVIDIA Megatron LM 让攻击者注入恶意代码漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MjcwMTgwOQ==&mid=2247492492&idx=1&sn=d6b757afa59be6084717104a39f36dc4": "快去升级!WinRAR 高危安全漏洞现已修复", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523387&idx=2&sn=51d9faa28849e3f10c23498b89c880d0": "CISA和FBI联合发布关于减少现代软件开发中内存安全漏洞的指南", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484925&idx=1&sn=f9370d39499273def1088c384bb7cc88": "安钥®「漏洞防治标准作业程序(SOP)」征文启示 [2025年第25期,总第43期]", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486414&idx=1&sn=0a30583b5f6863c054c3cc7d338ec2c7": "目录遍历漏洞扫描工具 - Directory-Traversal-Scanner", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247519159&idx=1&sn=0ca8c03e95dd58aca687e2d21148721d": "当漏洞成为“数字战争”的弹药,谁能改写攻防规则?", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247494922&idx=1&sn=dae4e1652fe33e93bb6fd09926535156": "抖音生活服务专测上线!单个漏洞奖金15万元!", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490313&idx=1&sn=c59808dd4135c7a6d4d434f5cca727d5": "【高危漏洞预警】Elastic Kibana 原型污染致任意代码执行漏洞(CVE-2025-25012)", "https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484605&idx=1&sn=0e380428ba92aad096e73a4416c9f1b5": "信息收集之WEB页面开发架构识别从而快速发现是否有已知漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490428&idx=1&sn=4b291e73cec6a04e68da263a63257cd4": "【AI风险通告】LLaMA-Factory存在远程代码执行漏洞(CVE-2025-53002)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531421&idx=2&sn=1d5a42294204b71b9c78d6eeb6e30e77": "区块幽灵:以太坊共识漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070394&idx=2&sn=850f2b60427de76cc6c8e91790bc0928": "【安全圈】美国顶级红队黑客竟是 AI?Xbow 机器人登顶漏洞赏金榜单", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523394&idx=1&sn=6155e41bcc07bb70bcdcdd88cc88d8de": "思科提醒注意 ISE 中的满分 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247492693&idx=1&sn=f912973994e379d3c80bed9b2187214b": "中山大学|FORGE:驱动大语言模型自动化构建大规模智能合约漏洞数据集", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247497115&idx=1&sn=4673c140780854d180246684f5bfb049": "WinRAR目录遍历漏洞允许通过恶意文件执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzU3MDM2NzkwNg==&mid=2247486555&idx=1&sn=28d1773e6d7afa6a083204bcfa8f7416": "Brother、富士等多型打印机曝严重漏洞,核心问题无法通过固件修复", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247488952&idx=1&sn=ec5e934481be8b9760d4cf6f099da8d7": "远程 Windows 凭据转储与 Shadow Snapshots(卷影副本)漏洞利用与检测", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489317&idx=1&sn=434916a93c8677e2a4430873276124ea": "【漏洞通告】WebSphere Application Server远程代码执行漏洞(CVE-2025-36038)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523394&idx=2&sn=d589b77eb9be15ec2ad03480d601ade3": "Open VSX Registry中的严重漏洞可用于发动供应链攻击,影响数百万开发人员", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070405&idx=1&sn=afb3be158a42d504cf141b47db4215dc": "【安全圈】兄弟等742款打印机被曝存在安全漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207187&idx=1&sn=f804f0e6e0e4ab61c441089cc007d237": "TSRC盛夏众测开启!4倍奖励+单个漏洞最高10+万赏金,挑战心跳夏天", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247497115&idx=3&sn=228ace9e52b723b17411f2f534d92f5b": "Python标准库tarfile模块存在任意文件写入高危漏洞,PoC已公开", "https://mp.weixin.qq.com/s?__biz=MjM5NDcxMDQzNA==&mid=2247489718&idx=1&sn=726cfebbf94e1c4c60e8c850fb4e3673": "CVE-2025-33053 Poc复现研究细节", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324007&idx=3&sn=ab457bbc0253d3a893c417159d3e4d10": "748款打印机存在不可修复的远程代码执行漏洞,涉兄弟、富士等品牌", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531429&idx=1&sn=bd56f81866330df6dcad06a198ba156a": "CVE-2025-32433:Erlang∕OTP SSH 服务器中的预授权 RCE", "https://mp.weixin.qq.com/s?__biz=MzIxODQ0NDEyNg==&mid=2247483975&idx=1&sn=d8c9debe6b2aa8ce6465872cba70a70e": "【漏洞通告】Apache Tomcat安全约束绕过漏洞 (CVE-2025-49125)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497783&idx=1&sn=f49fc7ca0cb8d8027c5bcdb60b1a2ac4": "$10,000的RCE!​​", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487516&idx=1&sn=0022a5911bd065644f71a5821e3a10df": "WinRAR 缺陷(CVE-2025-6218):通过目录遍历执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788736&idx=1&sn=d928c3059c6a5c78864232be6184cb05": "Open VSX 漏洞重创扩展生态,数百万开发者面临供应链劫持", "https://mp.weixin.qq.com/s?__biz=MjM5NDUxMTI2NA==&mid=2247485168&idx=1&sn=ccdbf7b18e4e2300a6fa0d4f9aafd306": "亲测AIFuzzing与XiaYue逻辑漏洞检测插件的区别:AI赋能的安全检测工具优势解析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324021&idx=3&sn=758ad58f02fcc6eda8eddbd10a0dcc4c": "思科两处高危RCE漏洞可致未授权获取root权限", "https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247499565&idx=1&sn=34fc51e56817b871ded40c91db6234c1": "记一次从登录框到前台rce", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096358&idx=1&sn=a32f0dc44801024ee9a611408348ce40": "IBM WebSphere Application Server 允许执行任意代码漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486060&idx=2&sn=fece77b24bc457dda583f0c57bc5b5ec": "CVE-2025-36038|WebSphere Application Server远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486060&idx=1&sn=83ab8c76ec0db3d5080561c57c2fb5f3": "CVE-2025-4123|Grafana SSRF漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491941&idx=1&sn=1be6e8f7856cb6fcf191a6d1858210d5": "H3C ER2200G2路由器 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247487436&idx=1&sn=be143102d776f443d8512a4f3d8684c6": "如何在日常渗透中实现通杀漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506847&idx=1&sn=4272d6c554696334581739689d4dadd8": "破解 JWT:漏洞赏金猎人指南(第六部分", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487518&idx=1&sn=43c1e5869cec472b93e9aaac6f0fc0ba": "代码审计|SpringKill如何用CodeAuditAssistant挖掘0day教程公布", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489822&idx=1&sn=ac39a8e743ae577a5588eb193172e641": "契约锁电子签章系统RCE简单分析", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493534&idx=1&sn=1c90f3038da9a0abacd8adee20d5b5d9": "漏洞预警 | Notepad++特权提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516893&idx=1&sn=4a4dc60c59e057104bc1dedabf35955f": "漏洞检测工具 -- ecology9_sqli(DVB-2025-9428∕QVD-2025-23834)", "https://mp.weixin.qq.com/s?__biz=MzkxMzQyMzUwMg==&mid=2247486716&idx=2&sn=922373703dcf59975e7e70f3a5ec6934": "看完这篇再挖不到漏洞,请顺着网线来砍我", "https://mp.weixin.qq.com/s?__biz=Mzg2NjczMzc1NA==&mid=2247486744&idx=6&sn=6a59a46fd131c08c41257806d77fa1e2": "【漏洞通告】MIB3整数溢出导致MTU旁路", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611207&idx=1&sn=40ed5bd422bc36c920b02a4fdd6a6c89": "Facebook 要求用户上传手机照片启用 AI 故事功能;|748款打印机存在不可修复的远程代码执行漏洞,涉兄弟、富士等品牌", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247486073&idx=1&sn=01c4536bc2ab3231c17c61e0880f5a5d": "【安全风险通告】vBulletin远程代码执行漏洞 (CVE-2025-48827) 在野利用通告", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491688&idx=1&sn=f34db0c8462b5e66e6157efe6cf31283": "清源SCA社区每日漏洞提早感知情报、新增CVE及投毒情报推送-2025年06月27~29日", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650629923&idx=2&sn=973a47723a6fed8a91a69bf6e1fdce7a": "《2025年攻防演练必修漏洞清单》重磅发布,助您筑牢安全防线", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484532&idx=1&sn=8c5ab3be35fdf036e9844cdeeabada0b": "Notepad++提权漏洞POC及一键部署环境(CVE-2025-49144)", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652252114&idx=1&sn=18ba1076a6a1ad2035075708a6da3c91": "CISA警告D-Link路由器路径遍历漏洞正被积极利用,无补丁可用", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583407&idx=2&sn=35c3e8e7c3d51d50a86d12456ac1b819": "安全动态回顾|工信部对57款存在侵害用户权益行为的APP(SDK)进行通报 Brother打印机在689款型号中存在漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247500308&idx=2&sn=5892f8b52a771f2d914c832127c90ab4": "Synology Active Backup for Microsoft 365 高危漏洞剖析", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496088&idx=1&sn=418faa9a83a09f3cdee7545462a61fa1": "CNVD漏洞周报2025年第24期", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507825&idx=1&sn=c8163fc109580e2fd0b793a34118ae75": "微步情报局再次发现DataEase存在多个高危漏洞,可实现RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494128&idx=2&sn=84fbc29915f49915f2acbdee7c978011": "【已复现】DataEase 多个远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496088&idx=2&sn=06d53998d9241762baedba11484d462b": "上周关注度较高的产品安全漏洞(20250623-20250629)", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788743&idx=1&sn=e35ebfc8a2f78e9033198fdd30536501": "拖拉机也能被黑?全球4.6 万台农机曝远程操控漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486063&idx=2&sn=a3d57d6619d987a8d64a725f1bc82373": "CVE-2025-6218|WinRAR目录遍历远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458596319&idx=1&sn=6ada3aaf69b4180a2d163d1405b5cca5": "最高3倍漏洞奖金,百万奖金等你来挖!华为终端安全奖励计划运营活动已重磅开启!", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492722&idx=1&sn=2eb58866b8e1479105ea7019b94ea417": "多家互联网企业因三大漏洞遭处罚,650万条患者信息裸奔", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494128&idx=1&sn=2db6b38b631e2ab23f15f65f29f75b13": "【已复现】WinRAR 目录遍历漏洞(CVE-2025-6218)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583407&idx=1&sn=3b90b3f97f49200853b4f780d12d0288": "Instagram 广告利用AI换脸漏洞欺骗银行客户", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247486072&idx=2&sn=d8ec0d298fa5cdf2eec24a47363cad59": "网络摄像头漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247546847&idx=2&sn=9b0673dd296bbe07d675025dfa319c78": "蓝牙零日漏洞:数百万耳机变身隐秘窃听站", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506878&idx=1&sn=646896e03d930c8c4ed7eb5db4c3f087": "NASA开放公开的漏洞赏金计划", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247492309&idx=1&sn=971b6609659bdf8e5a1c6cd2c264177b": "SRC 视角下:渗透测试中的逻辑漏洞思路博弈", "https://mp.weixin.qq.com/s?__biz=MjM5ODYwMjI2MA==&mid=2649794356&idx=1&sn=1807d8a8e309d53363046e89b71a51fe": "悟空Agent实战:LLaMA-Factory高危0day漏洞挖掘与修复", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247496737&idx=1&sn=370c593f1bce328f065b2ee3561a83bb": "【论文速读】| FuncVul——基于LLM与代码块的高效函数级漏洞检测模型", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494660&idx=1&sn=aa557759e534cc95f47181c56432377b": "PassGuard是一个轻量级安全工具,专为防护Linux系统中的脏牛(Dirty COW)内核漏洞而设计。", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503538&idx=1&sn=5439ec7c9b1446ac237be77feab8fcd0": "【已复现】WinRAR 目录穿越漏洞(CVE-2025-6218)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499979&idx=1&sn=e62c7b512a2e3f57f702c815e19235da": "实战级权限维持,从配置到命令执行一键部署 ViewState WebShell", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491736&idx=1&sn=c058b634e9bf320f603b91d1de78ff2a": "Chrome在野CVE-2025-6554漏洞poc公布", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489170&idx=1&sn=3748f66988afa0fa303cbba4baa2bc5a": "漏洞通告:Sudo chroot 权限提升漏洞(Elevation of Privilege)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503447&idx=1&sn=2a7f45d6621139fb1c9bb7364fe7dce5": "雷神众测漏洞周报2025.6.23-2025.6.29", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324079&idx=3&sn=23330a41d753210c404f022f9a91115e": "谷歌紧急修复已被利用的Chrome高危零日漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207230&idx=1&sn=be1b2877b624966bf5393397469e9f94": "悟空Agent实战:LLaMA-Factory高危0day漏洞挖掘与修复", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531505&idx=1&sn=ef6e5a16657ad393b2f33a8fd5a20296": "如何在 Django 应用程序中链接目录遍历和 CSV 解析器滥用以进行 RCE", "https://mp.weixin.qq.com/s?__biz=MzIwNDYwMDcyNQ==&mid=2247489022&idx=1&sn=69b96ddf5e6b92e1c401efa186d2f1f4": "【必查漏洞】Sudo Host_Alias 权限提升漏洞 (CVE-2025-32462) 检测手册", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247490104&idx=1&sn=bfc287009021abce228aa120eb7673cc": "【0day】泛微OA前台登录绕过+后台组合拳RCE", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489169&idx=1&sn=12e8f36dd27a550376215017f2cf31bd": "漏洞通告:Sudo Host 选项本地权限提升漏洞(Elevation of Privilege)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523414&idx=1&sn=af483917f833027e64a5dc3b05e6f56a": "谷歌紧急修复已遭利用的 Chrome 0day漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247521959&idx=2&sn=7d995c11b35283ee1e76812768d2151c": "记一次某大厂csrf漏洞通过蠕虫从低危到高危", "https://mp.weixin.qq.com/s?__biz=MzU3MzU4NjI4OQ==&mid=2247517267&idx=1&sn=15af7e76cfcf20622dd19551e3a1bf78": "6款较流行的开源漏洞扫描工具推荐及特点分析", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506883&idx=1&sn=a804d3cfee44d12ed64fb529af00d8f3": "终极漏洞赏金猎人清单:从侦察到报告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070451&idx=4&sn=1ae1f2640c97ff21fa27bdfc9eefb3dd": "【安全圈】危险警告!D-Link 多款路由器曝出严重漏洞,建议立即停用", "https://mp.weixin.qq.com/s?__biz=MzIwNDYwMDcyNQ==&mid=2247489022&idx=2&sn=53623527ace09a34e233e4c555c6c6f8": "【必查漏洞】Sudo chroot 权限提升漏洞(CVE-2025-32463)检测手册", "https://mp.weixin.qq.com/s?__biz=Mzk0MDY2NTY5Mw==&mid=2247485685&idx=1&sn=3291d434ce662ab723d4ae8346bdd9fb": "sudo chroot权限提升漏洞(CVE-2025-32463)", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247516905&idx=1&sn=900d3adbb01a34ee0615ded711105778": "网站API挖掘提取与漏洞探测工具 -- Super-API-Finder(6月30日更新)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501255&idx=2&sn=d6e9b21552f7237cbd8e87489840aae7": "【漏洞通告】Wing FTP Server 远程代码执行漏洞(CVE-2025-47812)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486372&idx=1&sn=acde1e9a58f0d96700cec463b162ab2f": "工具集:z0scan【新发布:Web 与全版本服务漏洞检测的主、被动扫描工具】", "https://mp.weixin.qq.com/s?__biz=MzkyNzg4NTU0NQ==&mid=2247485804&idx=1&sn=aac724da59eb2431e4883e1384ba7310": "重生之hw 0day出自我的cnvd", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488217&idx=1&sn=c37e1bd4e8179e029ebf65dbab89e0b8": "HW(2025-7-2)漏洞信息收集汇总", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501245&idx=2&sn=b69280406515cfaba0f0b36bce7ecbcd": "【漏洞通告】Citrix NetScaler ADC和Gateway拒绝服务漏洞 (CVE-2025-6543)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499989&idx=1&sn=8f5d60702d8764a873e0a41789698fef": ".NET 介绍一种隐蔽的命令执行方式,通过 LINQ 投影执行动态加载", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501255&idx=4&sn=756d8698b6aaf9d39b62171e4a466b15": "【漏洞通告】Google Chrome V8 类型混淆漏洞 (CVE-2025-6554)", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484934&idx=1&sn=d44f4e774becd54bfe1a4ab0577e5e3f": "安钥®「漏洞防治标准作业程序(SOP)」征文启示 [2025年第26期,总第44期]", "https://mp.weixin.qq.com/s?__biz=Mzk1NzMwNTM5NQ==&mid=2247486706&idx=1&sn=b26a94a4d38e3bd58c87867369340cae": "国内白帽子能赚多少钱?有多少白帽子全职挖洞能养活自己?零基础兼职挖漏洞收藏这一篇就够了", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247491980&idx=1&sn=0425e1ac6aba4303cd7fb98b6307bc55": "红帆OA MobileOA.asmx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519515&idx=1&sn=f30efcb700f7338573925ec983993cec": "SRC漏洞挖掘之“嫂子开门,我是我哥”", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324079&idx=1&sn=c11acae8f7897f7fa528977c559d8c05": "Linux高危Sudo漏洞,可提权至root并绕过限制,PoC已公开", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096366&idx=2&sn=0bc84ccadfed7c9c2ab6818255f637c7": "IBM WebSphere Application Server 允许远程执行代码漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0NDI5NTY4OQ==&mid=2247486422&idx=1&sn=1950ae508c495b4f902accb605b1908e": "从0到1大模型MCP自动化漏洞挖掘实践", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503443&idx=1&sn=ac58ea5dade899a4310c5f8e8bdcaf76": "【成功复现】WinRAR目录遍历漏洞(CVE-2025-6218)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490353&idx=1&sn=c5470fd58355538b2dbea6a82e14b61a": "【高危漏洞预警】sudo < 1.9.17p1 host&chroot本地提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712371&idx=1&sn=7f8436b06ea91d58fe0d1e3ca12933f2": "CVE-2025-32462&CVE-2025-32463", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247487449&idx=2&sn=dcd17b82a2b767da4a0245d2549452fc": "如何在日常渗透中实现通杀漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0MDYwMjE3OQ==&mid=2247486896&idx=1&sn=43defdb17bf801bce12e5cc72250945f": "10 米内就能窃听你的耳机!知名音频芯片曝漏洞,索尼、Bose 等大牌耳机受影响", "https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490527&idx=1&sn=38615bfc7507a4ef985d194745d2df4c": "广联达远程代码执行代码审计", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458596362&idx=2&sn=851d02e396bd4ad0b2e18607c221d2cf": "最高3倍漏洞奖金+单漏洞最高价值百万,开源鸿蒙安全守护者即刻集结!", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492002&idx=1&sn=b6880866102aa41c8fbb56a6d73544e8": "Optilink upgrade.php 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247546866&idx=1&sn=efc6e9e0da5cb112c035c0489e1f580c": "Nessus严重漏洞允许覆盖任意本地系统文件", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502397&idx=1&sn=ba68750f81dfaf2beb069dfb38aef163": "Nessus严重漏洞允许覆盖任意本地系统文件", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503550&idx=1&sn=403675d7942468c56b29a05e37f625fc": "【已复现】Google Chrome V8 类型混淆漏洞(CVE-2025-6554)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490802&idx=1&sn=102c4f427b3434196bc45fac750ee05e": "插件前台任意文件读取漏洞复现与分析 (CVE-2025-2294)", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795612&idx=1&sn=bd2ec5afa78de18935e0be3b142b5f54": "Houken 黑客组织利用 Ivanti 0day漏洞安装 Linux Rootkit", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324107&idx=1&sn=f89429997e0347cfe1580cc8ca6e858b": "Nessus严重漏洞允许覆盖任意本地系统文件", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490433&idx=1&sn=6ea78f033857836e66b0fa5bb027102e": "【已复现】Linux sudo存在本地提权漏洞(CVE-2025-32463)", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514631&idx=1&sn=fd5a357122fb4f7943b832c639bc9e1a": "MCP工具链首个严重漏洞?一个钓鱼网页,远程劫持开发者电脑", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484397&idx=1&sn=02ae9d7fb38d1998b6e39568727b16de": "【0DAY漏洞复现】某款网络设备存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499995&idx=3&sn=afa5da2f0b688c70a82e89e06a22e9c4": ".NET 介绍一种隐蔽的命令执行方式,通过 LINQ 投影执行动态加载", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247492212&idx=1&sn=d5b473f62fc06b60c4bf8a71d3bd2de1": "JAVA常见漏洞复现", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261384&idx=1&sn=4f91cc15ac8ab344b7d926dd5c872297": "【星球专享】手把手复现 Apache Airflow 漏洞指南-(CVE-2022–40604)", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650850595&idx=1&sn=372e11108972c7b8fce6574e03d9b7fd": "青藤RASP入选CCIA首批 “网安三新”,攻防演练中抓0day神器再获官方认证", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712380&idx=1&sn=7700a12a66238c5693b4b3853877b1fa": "绿盟网络入侵防护系统users.json敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248176&idx=1&sn=0ecdc3615a9a83848b91db8b1861589a": "德国全面封杀DeepSeek,中欧数据冲突升级 | Nessus严重漏洞允许覆盖任意本地系统文件", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484404&idx=1&sn=210b67f6dbbe6f2f49edb18417cdb516": "【厂商不承认的漏洞】某设备接口未授权实现任意密码修改", "https://mp.weixin.qq.com/s?__biz=MjM5NDE1MjU2Mg==&mid=2649877221&idx=1&sn=d02a91e885c7dfadf6de05fbab190268": "“Sannu, Lagos”(你好,拉各斯)!飞天诚信闪耀Digital PayExpo 2025", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523425&idx=1&sn=d86d65a64846ff68a79a294116423c60": "CISA 提醒注意 Microsens 中的多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY4OTM3Nw==&mid=2247484003&idx=1&sn=6ca85c68883c94d0e914bf8d9fd9fe5f": "夏日狂欢 | 限时漏洞翻倍悬赏活动", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501261&idx=2&sn=b4d3e1f7d10b28534202f323f0507ccc": "【漏洞通告】IBM WebSphere 远程代码执行漏洞(CVE-2025-36038)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523440&idx=1&sn=82defa4f95ee18fec7fd809f7f565f7a": "思科 Unified CM 中存在满分漏洞,可用于获得root权限", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531579&idx=1&sn=8aeb22f983426b00e76b8eb31fada17a": "我如何通过 NGINX Off-By-Slash 配置错误获得远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492743&idx=1&sn=6d15d49d30e47caad5876dd8ce93f3cb": "Google紧急修复Chrome零日漏洞(CVE-2025-6554)", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247489163&idx=1&sn=1e008afd0c76a101b63097cd15c89645": "漏洞预警|多家主流蓝牙耳机曝出可被监视漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484499&idx=1&sn=8990d10a757c9fdb5cfde304a9632624": "【在野利用】Chrome V8 引擎类型混淆漏洞(CVE-2025-6554)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523450&idx=1&sn=fb41027f31142b3eef6b9494edc4b71e": "微软 Edge 修复两个高危RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727846792&idx=1&sn=622536f639aa4976d47ddfc18e65de3e": "LazyValue下的Parcel漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531649&idx=1&sn=64834d89e32ec56e08e86ecd3aafc82b": "攻击者通过滥用暴露的 Java 调试线协议 (JDWP) 接口实现远程代码执行,部署挖矿", "https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908515&idx=1&sn=9dd45778d480828d43ccc3465239a217": "如何调试Microsoft Defender for Endpoint (MDE) 发现 CVE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070509&idx=1&sn=6cf6b923bca528cc5cc03d57ebcc2bf6": "【安全圈】你的耳机在被偷听!20+音频设备曝出漏洞:索尼、Bose、JBL等沦陷", "https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247492633&idx=1&sn=05be5fe8eaa8c8ef60c074abf2f1e958": "伪装成漏洞检测工具样本分析", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247641383&idx=1&sn=3b2c19de6851d8fb8cfd37d6abda9929": "在看 | 周报:南阳某机械有限公司网站遭黑客攻击;742款打印机被曝存在安全漏洞;虚假WPS安装程序暗藏远控木马", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324483&idx=2&sn=7b7840a855c25cff444583b7d7681c6f": "FreeBuf周报 | Linux高危Sudo漏洞可提权至root并绕过限制;Lucee应用服务器曝高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247486277&idx=2&sn=888640822418c3ba152b62a62e185814": "742款打印机存在不可修复的远程代码执行漏洞,涉兄弟、富士、理光等品牌", "https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247507548&idx=1&sn=85978c0c88e548f7680254b6e0af985b": "【一周安全资讯0705】三部门发文:进一步加强电子病历信息使用管理;谷歌紧急修复已被利用的Chrome高危零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDc0MTc5Mw==&mid=2247483878&idx=1&sn=161132aec1e0f816d558679852c2866c": "Notepad++提权漏洞POC及一键部署环境【CVE-2025-49144】", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500923&idx=1&sn=7eb27e3f909442571fa32be3a1dab150": "【2025护网漏洞POC速存】吃苕皮喝挪瓦,HW轻松拿捏", "https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247517899&idx=1&sn=c0642ae4e349fb6d21361b4ffb239b55": "OSCE³认证指南:高阶渗透与漏洞挖掘专家的职业通行证", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247521558&idx=1&sn=8ace6c1b9ba3c75bd1d77c68810fd128": "护网 | xxl-job漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492040&idx=1&sn=a2365a44429fd8ac844dbaefe647210a": "安科瑞环保用电监管云平台 UploadNewsImg 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxOTM2MDYwNg==&mid=2247515053&idx=1&sn=f675480d14e309b4e61f55e56bd32b66": "蓝牙零日漏洞大揭秘", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247487623&idx=1&sn=1d8479b2fa702e596e21d8f2015d7ac4": "第128篇:Struts2全版本漏洞检测工具19.68版本更新", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497813&idx=1&sn=c778ad6a4bffd7a0a72a900144ea90ca": "如何利用ai辅助挖漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTc5MjM4Nw==&mid=2457389175&idx=1&sn=b8a393aea1447997a2db250a2aefcf59": "不容小觑的威胁:CVE-2025-32463 Linux提权漏洞,轻松利用却要紧急修复", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492050&idx=1&sn=25241e12d8fd7b7a7d959aebea062c21": "JieLink+智能终端操作平台 DeleteIpPool SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324483&idx=1&sn=a5a6d0f5b93f52732649237949b05bd9": "夜鹰APT组织利用微软Exchange漏洞攻击国内军工与科技领域", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489900&idx=2&sn=979cd2b43277c825490a986e33c78693": "逆天提权漏洞,CVE-2025-32463,嘎嘎好使,速来复现", "https://mp.weixin.qq.com/s?__biz=MzI3NzcxMDQwMg==&mid=2247487105&idx=1&sn=fc2288177dd8544ef2ccab2411d6bd15": "从路径遍历到远程命令执行(RCE)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531708&idx=1&sn=5eb58ebd3099c52207add98ed4461dce": "[漏洞利用开发] 0A- 与内存守卫共舞:打破 Canaries∕Cookies、DEP∕NX 和 ASLR", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531708&idx=2&sn=4a6933ad20a93e82115716b907fedd14": "利用 DLL PEB 模块结构操作的代码执行∕注入技术", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611281&idx=2&sn=0b13a7fa48b99eb7891098356636b07b": "联想Windows目录可写文件漏洞可隐秘绕过AppLocker防护", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492423&idx=1&sn=11c5751ce8c00ae8ea6046da3c250e20": "QVD-2025-23408:契约锁电子签章系统未授权RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900878&idx=1&sn=0628d7321b119b7ef88e12c8bf037f86": "深度剖析CVE-2025-49596:一次网页浏览,如何让你的AI开发环境彻底沦陷?", "https://mp.weixin.qq.com/s?__biz=Mzg2MTg4NTMzNw==&mid=2247484336&idx=1&sn=a0934eb54b52c4ab1d0f4be169d78a19": "25HVV最新0day更新,各单位自查...", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096374&idx=2&sn=0db1104436ef7e1f9d8ce2148c89f9f2": "Next.js 允许攻击者通过缓存中毒触发 DoS漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494179&idx=1&sn=1997151095977260707894ec476cabe6": "严重Sudo漏洞使主流Linux发行版面临本地提权攻击风险", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247550746&idx=1&sn=7e546ceb9adf9b333ab5ef6388d86387": "EDUSRC | 证书站小程序漏洞挖掘思路及方法", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247546963&idx=2&sn=f6b0b39f61c938cbe033753539c56b22": "紧急!本周【护网】必看3大高危漏洞:Sudo提权漏洞,你中招了吗?", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484501&idx=1&sn=d382e52bf88d07f6596b7426acf7f730": "第128篇:Struts2全版本漏洞检测工具19.68版本更新", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070540&idx=4&sn=6fe8ab50588c2035d0ee523bcf26b3ea": "【安全圈】Cisco 紧急修复 Unified CM 中存在的严重 Root 账户漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490446&idx=1&sn=726652b172d33357d42447129dcee18a": "【7∕7特辑】今日捕获大量漏洞!", "https://mp.weixin.qq.com/s?__biz=MzU5MjgwMDg1Mg==&mid=2247485878&idx=1&sn=a4d4e1f8a75fc5cd7a0ad2c856557a55": "WordPress Forminator插件漏洞暴露60万网站面临完全接管风险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070525&idx=1&sn=7b6337e89711c9e9f413dd1cb303bd76": "【安全圈】Linux“sudo”严重漏洞:任何用户均可接管系统", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247492233&idx=1&sn=6972c3d85da8e41bb31f6f59be71350b": "Prometheus 未授权访问漏洞处理", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491712&idx=1&sn=e2d5206def5474dacc15a2dd6c6969cc": "清源SCA社区每日漏洞提早感知情报、新增CVE及投毒情报推送-2025年07月04~06日", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497824&idx=1&sn=d05e05ef9f38616d66fc34d888663358": "作为一名不具备天赋的普通人,如何在漏洞赏金计划中取得成功", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487547&idx=1&sn=33033a7415fe3aabffa5f5711e51030a": "PHP 漏洞 CVE-2025-1735(SQLi∕崩溃)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500084&idx=1&sn=38b270f2be6c4a876c14b613950e4899": "CNVD漏洞周报2025年第25期", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247492761&idx=1&sn=74dceba6e96dc5542167e58b17b22472": "分享Jeecg-boot中的Nday漏洞汇总打法", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492070&idx=1&sn=a76b100b910f393235352f1b7824dc12": "汉王EFaceGo upload.do 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500929&idx=1&sn=dee2bdaa182554616ea85ceef4775672": "汉王e脸通综合管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247489168&idx=1&sn=931ea8f0161289c6d7003a69fb820de6": "Linux “sudo”关键漏洞允许任何用户控制系统", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503563&idx=1&sn=09169a0ba263b129a115d0fa708b0d02": "【已复现】Redis hyperloglog 远程代码执行漏洞(CVE-2025-32023)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500089&idx=1&sn=34735acc4543857c99268d52e2e5b501": "2025年人工智能大模型产品漏洞众测活动启动公告", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487548&idx=1&sn=7b0fb2f3107df101675679504bbb0c10": "PHP 漏洞 CVE-2025-6491(SOAP DoS)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503557&idx=1&sn=b46dcfec1d66e735b4c53d7ae9633c0c": "安全热点周报:超过 1,200 个 Citrix 服务器未针对关键身份验证绕过漏洞进行修补", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247489664&idx=1&sn=df572e4cbef72a5ed6c4de877b52b935": "【SRC】某选课小程序任意用户登录漏洞深度剖析", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484416&idx=1&sn=d4ca2b0c863b7ac03f1c479a4455648d": "【漏洞复现】锐捷 RG-EW120路由器存在密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526738&idx=1&sn=198681d077860153b253b1e29ce8bede": "Redis hyperloglog 远程代码执行漏洞(CVE-2025-32023)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501277&idx=2&sn=4281534d703a4bbc63efa979f6383778": "【漏洞通告】Redis hyperloglog命令越界写入导致RCE漏洞 (CVE-2025-32023)", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247547053&idx=1&sn=ab425df27b630dfa1c1d59759bf1ad37": "【更!】25HVV热点攻击漏洞含0day,各单位自查...", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503454&idx=1&sn=4a486edbf229f8614fc4bfaa37270d4a": "雷神众测漏洞周报2025.6.30-2025.7.6", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484421&idx=1&sn=5c3724f0c2d78efe44c29769c0a54860": "【漏洞复现】南昊网上阅卷系统∕exam∕monitor∕index.jsp接口未授权访问", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458596945&idx=3&sn=ce5a42d0da3011db31e51a6b4c67cb24": "Redis曝高危漏洞,认证客户端可致服务中断", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324554&idx=1&sn=bdeb8779451111167a89a91cea7654df": "Redis被曝三大严重安全漏洞,PoC代码已公开", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490456&idx=1&sn=d62d1062414385b7f829b9ad9c765da1": "【7∕8特辑】一线最新漏洞情报来袭", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492498&idx=1&sn=3ea95ef3ff9e6b9f97bfcd9b2a1a756b": "用友NC最新SQL注入 | CNVD-2025-06710漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg4Mzg4OTIyMA==&mid=2247485898&idx=1&sn=6159060cdb84760163b161be61b31d42": "【工具推荐】0Day挖掘机-“Rotor Goddess”", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486429&idx=1&sn=1122596685f8cc2619332467ebe13ffc": "Unauthorized-Vul【最全未授权访问漏洞批量检测工具】", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484942&idx=1&sn=baf5d858e68af91f045b6c4cc52c65b5": "Linux单服务器漏洞处置SOP框架——最小化应用系统运行环境安全风险", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651137680&idx=2&sn=44072684925a2b63f6aade28880606fd": "最高奖金可达15万元!2025年人工智能大模型产品漏洞众测活动启动;美国防部因网络安全隐患切断部分NOAA卫星数据连接 | 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324586&idx=1&sn=edaf868c5c5e19239d5ddd9a4a9e7b99": "Linux启动漏洞可绕过现代Linux系统的安全启动保护", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501277&idx=3&sn=3c9b51451f5763c003d384a08f8ec50e": "【漏洞通告】Redis 未认证连接导致拒绝服务漏洞 (CVE-2025-48367)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497828&idx=1&sn=3edecf58ac99722cc6db88b124495ed3": "SRC漏洞挖掘之“嫂子开门,我是我哥”", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496107&idx=2&sn=71bebd5f56bafd09a7b0d3e2b1d3c056": "上周关注度较高的产品安全漏洞(20250630-20250706)", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488244&idx=1&sn=01a64335c638438a54a0ead3790c9789": "HW(2025-7-8)护网漏洞信息收集汇总", "https://mp.weixin.qq.com/s?__biz=MzU2MjU2MzI3MA==&mid=2247484705&idx=1&sn=49fad1f3e7c910efc380ae3f1895f0fc": "漏洞预警 | Redis hyperloglog 远程代码执行漏洞(CVE-2025-32023)", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491716&idx=1&sn=56c0e2eca58ac6a391038825ae1a1e81": "清源SCA社区每日漏洞提早感知情报、新增CVE及投毒情报推送-2025年07月08日", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247641440&idx=1&sn=cd0ded48c2d71cd4e57deae91254b1c9": "「限时免单」安全漏洞防治工作标准化的必要性:抵御不断演变的威胁之盾", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492081&idx=1&sn=894a554f87721dca1ce2c4cbcb622ae2": "信呼OA uploawAction.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247515396&idx=1&sn=cd3c577b9492d4197fee6394c426a21a": "QaFuzz:关于测试域名的漏洞挖掘工具", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490389&idx=1&sn=a4b381c2318fb8f2925676474ebc9324": "【高危漏洞预警】Redis hyperloglog远程代码执行漏洞CVE-2025-32023", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458596966&idx=2&sn=e31bcd83bed515a47986bdc1cb110940": "CISA 将谷歌 Chromium V8 漏洞纳入必修补名单,7月23日前须完成修复", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664245296&idx=1&sn=9a5b71c761dc2b049f6fa30dde2ff1cc": "专题·人工智能安全 | 大型推理模型的安全性:挑战、漏洞与未来", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493665&idx=3&sn=1221ce55fb0740963a6b753ce6508465": "漏洞预警 | WebOne劳动力与考勤管理软件任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493665&idx=2&sn=b13a0fe888ba0def887c35071df5aa2b": "漏洞预警 | 深信服运维安全管理系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxOTUyOTc0NQ==&mid=2247493555&idx=1&sn=4df91360f16f4d814717187b7abce6f8": "蜜罐捕获一个自动化漏洞攻击的机器人程序", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070569&idx=1&sn=6d82b7ddc4c8cc451bc8ab54f4420e78": "【安全圈】Zoom Windows 客户端曝出中危漏洞,可能被用于发起拒绝服务(DoS)攻击", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247486239&idx=1&sn=8e885ab19cba7e27c6d24a33dcb6de17": "某堡垒机 set_port 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494163&idx=1&sn=ef3a94f06cd0f1e50ff400b0fd0c78ba": "【已复现】Redis HyperLogLog远程代码执行漏洞(CVE-2025-32023)", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503452&idx=1&sn=2a1a3a5acd88ac7d56b6249129a61d52": "【成功复现】Pichome路径遍历漏洞 (CVE-2025-1743)", "https://mp.weixin.qq.com/s?__biz=MzI1NTE2NzQ3NQ==&mid=2247487271&idx=1&sn=ca68dccf9a1028de25f8717fd5c4b585": "【工具推荐】听说这个工具挖0day有一手", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484898&idx=1&sn=8398d7bfb2fa31deb03c63d073a09293": "【漏洞复现】汉王EFaceGo upload.do 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490456&idx=2&sn=0f0fc3ed9e30015967af0b71ee9eb511": "【已复现】Redis hyperloglog存在远程代码执行漏洞(CVE-2025-32023)", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652252169&idx=1&sn=47e985b033077e98cd528abb15e1a47f": "国际刑事法院遭零日漏洞网络攻击,敏感数据岌岌可危", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501285&idx=3&sn=b6133575e41cd87ecbd05db8fb74fff0": "【漏洞通告】微软7月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490463&idx=1&sn=1b48b2ce233b26f5a8ec414b28fce49b": "【已复现】泛微E-cology9存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYxMjk0Mw==&mid=2247490818&idx=1&sn=b8b5e7f8dc6be896a96fc042718d0e5f": "【SRC】某平台毕业季开房优惠卷逻辑漏洞(红姐邀请你进房间)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324666&idx=3&sn=ee5583eca517c2e940909cfa2b32ad1e": "Git项目修复三大漏洞:远程代码执行、任意文件写入与缓冲区溢出", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484507&idx=1&sn=bdd96d70bb0af4746b561264f05e1d2c": "【已复现】泛微 E-cology9 SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494211&idx=2&sn=4be1bcd1c4123271a7bf8f72da7e7e4d": "日本制铁解决方案公司遭遇零日漏洞攻击导致数据泄露", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491720&idx=1&sn=18f6d4ace8786e4d6c4f0ed0caf3d0b8": "清源SCA社区每日漏洞提早感知情报、新增CVE及投毒情报推送-2025年07月09日", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523530&idx=1&sn=df2ccc1c3c4a214c1b1a95b51694da62": "微软7月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489945&idx=3&sn=fef11090d9dfd6c566185dcf5f5af6c0": "一个集成的BurpSuite漏洞扫描插件", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795670&idx=2&sn=5a43c62fd78188c6e942755268c937ef": "微软修复 Windows 和服务器中可蠕虫的远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492872&idx=1&sn=90db05effb93a6cd8efb63c5fa4dfa0d": "【已复现】泛微e-cology 前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489945&idx=7&sn=88d1aad32efce95a42eff434157efe29": "逆天提权漏洞,CVE-2025-32463,嘎嘎好使,速来复现", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492090&idx=1&sn=d3730d112f227a6e2220302b76ba7ea4": "金盘移动图书馆图书管理系统 tabShow 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247489945&idx=1&sn=fa39dab26fa7889aa2d78f6bfc2cc882": "一款以Web与全版本服务漏洞检测为核心的辅助性主、被动扫描工具", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523530&idx=2&sn=e19607b9a1bbf6bc70c902e40f0de1d3": "Fortinet 修复FortiWeb 中的严重SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjIxNDQyMQ==&mid=2247498199&idx=1&sn=f4175317ea154b19d2967a61ba9f6778": "【已复现】泛微e-cology 前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247490153&idx=1&sn=f4e566d0f34c146c4e9d3b9d348e2812": "某朋克风NFT数字藏品存在前台文件上传漏洞【0day】", "https://mp.weixin.qq.com/s?__biz=MzkxMjYxODcyNA==&mid=2247486256&idx=1&sn=e695f0ac5253981b19b466c133364824": "【0day挖掘】怎么用“Rotor Goddess”轻松爆出过万资产的漏洞,以及其他小洞的出货方式与流程", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070569&idx=2&sn=190752ffac23d6be9ddec582d3384a58": "【安全圈】Linux启动漏洞可绕过Secure Boot:攻击者仅需物理接触即可植入持久木马", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507834&idx=1&sn=cb2a5fffe56db189abdb84f8cf483df4": "酌情处置 | Redis hyperloglog 命令远程代码执行漏洞利用条件较多", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597040&idx=2&sn=cdca0a3babe6585f09000478395ba7bf": "Windows 系统曝 wormable 级 RCE 漏洞,CVSS 评分 9.8", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484948&idx=1&sn=8a4dc616eb151ed17485aaf84fc0b481": "安钥®「漏洞防治标准作业程序(SOP)」征文启示 [2025年第27期,总第45期]", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503463&idx=1&sn=6ef0546654e72e110fb0e22dc6c2a065": "【成功复现】LlamaIndex SQL注入漏洞(CVE-2025-1750)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664245407&idx=2&sn=13edbb43d857ccee5d8e4bb9ad8106be": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247547132&idx=1&sn=cd484270f0cd9ed5dc17fdeafb2e76dd": "微软紧急修复高危蠕虫级RCE漏洞,威胁全网Windows系统", "https://mp.weixin.qq.com/s?__biz=Mzg3MTY3NzUwMQ==&mid=2247490613&idx=1&sn=bf728f4cff492892dae89570b62f83db": "2025-7-10日漏洞情报汇总", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494180&idx=1&sn=b0353fe95161dbbe5a133dd5fa564d22": "【已复现】Git 远程代码执行漏洞(CVE-2025-48384)", "https://mp.weixin.qq.com/s?__biz=MzI5MDE5NDcxMA==&mid=2650936291&idx=1&sn=c538ba31126da0a3fc74f6d7ae3694e6": "Windows Update 服务权限提升漏洞-CVE-2025-48799", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247539547&idx=2&sn=4c734f8837fb9bb5024190ecd4460790": "资产维度分类之全球操作系统漏洞大盘点", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487556&idx=1&sn=d4ee665f5777a19061830dbb847479f5": "Git 远程代码执行漏洞预警(CVE-2025-48384)", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486434&idx=1&sn=7915ee874f143a14d82291212af62ca0": "Web与全版本服务漏洞检测工具 - z0scan", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489367&idx=1&sn=084efb7db8b14482e6e9abdf2072363b": "CVE-2025-1729 - 使用 TPQMAssistant.exe 进行权限提升", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463249&idx=1&sn=37c15dcc38445d804dd90e07aa94db96": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324737&idx=1&sn=8f0843cf1d51ac50bd1eae4a5f0e4c87": "微软紧急修复高危蠕虫级RCE漏洞,威胁全网Windows系统", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247488444&idx=1&sn=5b0a8866a42e54f258089ecfd7d729f3": "项目推荐 | WebGoat8.X代码审计大全,全文均可复现,适合刚学完JAVASE准备开始代码审计的师傅", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488265&idx=1&sn=5d4f61665320ae84e621d43683817245": "高危警报!mcp-remote漏洞可完全控制你的电脑,43万次下载受影响", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490408&idx=1&sn=e246a7cc4126803185f77f25ef5eab14": "【高危漏洞预警】Git远程代码执行漏洞(CVE-2025-48384)", "https://mp.weixin.qq.com/s?__biz=MzkxNjc0ODA3NQ==&mid=2247484056&idx=1&sn=a9e16c53606bd1cea08b46898a9fd5e2": "逻辑漏洞之皇帝的新衣", "https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247545194&idx=1&sn=f6a13541555121a7cef45a689b02e08d": "清华大学招聘漏洞挖掘工程师(清华大学正式合同)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493681&idx=3&sn=71864d3dda485948b5ca497a40f94e12": "漏洞预警 | 东胜物流软件任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795684&idx=3&sn=af7946160c8fdf6d2793640386d7a4a4": "BlueSDK 蓝牙堆栈存在严重漏洞,可能允许在汽车系统上执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500953&idx=1&sn=616ebafdcd78c30f209b3f5ed9a2a080": "用友U9 DynamaticExport任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493681&idx=2&sn=d49ffc0a79a9d40fdd6d3805e5cfee49": "漏洞预警 | 汉王e脸通智慧园区管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247493241&idx=1&sn=0f2c4d9cbd033f0a5a9761c270351162": "最新Nessus2025.7.10版本主机漏洞扫描∕探测工具Windows∕Linux下载", "https://mp.weixin.qq.com/s?__biz=MzA5MzU5MzQzMA==&mid=2652117073&idx=1&sn=8abdeb5423f80a892f9830ac759cca49": "西门子、施耐德、菲尼克斯电气修复漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247497185&idx=1&sn=5c7e29e397956f997d6e19486e1be0fc": "微软紧急修复高危蠕虫级RCE漏洞,威胁全网Windows系统", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489860&idx=1&sn=a10a66519fd9c578f8c2792f582bdf19": "【已复现】契约锁电子签章系统 pdfverifier 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507841&idx=1&sn=cfa2847a732b4051019158b1f166e27f": "泛微E-cology9 前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489375&idx=1&sn=b195a66251f8d745a9b694d84fc322ca": "滥用 Windows、.NET 特性和 Unicode 规范化漏洞攻击 DNN (DotNetNuke)", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526752&idx=1&sn=323ade965e504a92cfa97f8cd939be3b": "契约锁电子签章系统 pdfverifier 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908542&idx=1&sn=83623032b333f88591df7b0a6e59b3b9": "十年博弈 - ViewState RCE的前世今生", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324803&idx=3&sn=a328e0d32ba8414355872528a04b0823": "Linux内核NFT子系统曝高危\"双重释放\"漏洞可致本地提权", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523555&idx=2&sn=04a84283c9d2100a95736c652525dcd8": "开源项目mcp-remote 中存在严重漏洞可导致RCE", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247492149&idx=1&sn=0049b56198aaeb2be7adf60b3a8a13f4": "某制造业公司:30 分钟速通 2025 高危漏洞排查 + 推修实战", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490470&idx=1&sn=76647e3cbc939582e3fa73101fc442f4": "【已复现】契约锁电子签章系统存在远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247547154&idx=1&sn=ed18dc2a48d5baf054db84d47279fb1b": "【新!】CNNVD通报微软多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488270&idx=1&sn=b758c728658c0d5610a24330df60ebc4": "HW(2025-7-11)护网漏洞信息收集汇总", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490408&idx=2&sn=1ab2864da7b5b373a007528c90bfc21f": "【高危漏洞预警】泛微E-cology9 前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTQ0OTYxOQ==&mid=2247484091&idx=1&sn=b77edc5018db3aeebe5d057fe6020255": "【0day】紧急提醒!你的Telegram私密群组∕频道可能被未授权访问!", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324803&idx=4&sn=f6f6b55650aaba7bab0138c6e9c8c663": "麦当劳AI招聘工具漏洞导致6400万求职者数据泄露", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064273&idx=1&sn=845aeae7b4441413e1363328a4634569": "信息安全漏洞周报【第030期】", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486475&idx=1&sn=47fc16336a3d0170e93bf669cd202a8c": "Struts2VulsScanTools【Struts2全版本漏洞检测工具】", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503591&idx=1&sn=d2d745e2f4f838c527281205db85b1b4": "【已复现】泛微E-cology9 前台SQL注入漏洞(QVD-2025-26680)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512504&idx=1&sn=0443e083b652bc8d4300fa3968d26870": "微软2025年7月补丁日重点漏洞安全预警", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501295&idx=2&sn=1c50a343f89ffc932f66bb703f8abada": "【漏洞通告】Citrix NetScaler 内存泄漏漏洞 (CVE-2025-5777)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494222&idx=1&sn=7cce5793717ad1b863f654e0fdb795ed": "【已复现】契约锁电子签章系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647690866&idx=1&sn=4a721e43a083294d91530414cbf72330": "0046.从图片上传到账户接管——真实渗透测试中上传、存储和 CORS 漏洞的串联", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247547158&idx=1&sn=3cf79ed603597648e4ebc012f1dd387d": "【暴】麦当劳招聘平台 | 安全漏洞致 6400 万份求职申请信息暴露", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247486522&idx=1&sn=a01569e808d3475b13fe5f2b04268a76": "Struts2VulsScanTools【Struts2全版本漏洞检测工具】", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488275&idx=1&sn=7c7debf288cf110429d8a634fb1402b5": "一键入侵你的爱车!PerfektBlue漏洞威胁数百万辆汽车安全", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523555&idx=1&sn=caf9ee84b43c4fc81ee51bfbe2c7d11d": "蓝牙漏洞PerfektBlue 可用于实现RCE,影响多家汽车厂商", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788781&idx=1&sn=148a363ff5ef9b1e0e3fddf8321a100e": "数十亿手机可被监听,eSIM漏洞牵动全球通信生态", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484917&idx=1&sn=af0cf86fe3943f11fba7eb4847c0d2da": "【复现】契约锁文件写入致远程代码执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2MDg0ODg1NQ==&mid=2247547158&idx=2&sn=6590b74b0b9a26bac77f815dfde586e6": "半导体巨头AMD新型漏洞影响多款CPU,计时攻击可导致数据泄露", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497974&idx=2&sn=ed4f47f1e5616b011ef2b5371b1c1566": "你的服务器在裸奔吗?高危漏洞、端口和弱口令,哪个才是压死骆驼的最后一根稻草?", "https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247521456&idx=1&sn=205c24044197361741632e9f3e4f57e4": "JS扫描与漏洞挖掘利器推荐—Rotor Goddess", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247491912&idx=1&sn=17f6f3f0b90b29e022a81ea8c8b28cdb": "如何在日常渗透中实现通杀漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486552&idx=1&sn=41c4e4a40fd104f53e22f5a7143c88ad": "记一次企业src漏洞挖掘连爆七个漏洞!", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247493023&idx=1&sn=33bd188ed20d88bbe2bf0b5dc2b834dd": "某211高校从一个文档到十八万条sfz泄露和命令执行", "https://mp.weixin.qq.com/s?__biz=MzIyMDEzMTA2MQ==&mid=2651168678&idx=1&sn=ca4103b2ea097dfda3fc23c85d5c9f5e": "Linux高危Sudo漏洞,可提权至root并绕过限制,PoC已公开", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489423&idx=1&sn=f3712506893025290c1cd8f1459d5d32": "Win32k 的漏洞利用 - CVE-2023-29336 详细分析", "https://mp.weixin.qq.com/s?__biz=Mzg3MTY3NzUwMQ==&mid=2247490620&idx=1&sn=24772cd1ce3d8e6c26f1f7468208eb76": "2025-7-11日漏洞情报汇总", "https://mp.weixin.qq.com/s?__biz=MzU2MjU2MzI3MA==&mid=2247484711&idx=1&sn=c2c06fac608791fac01832eab95ab674": "紧急预警:Linux曝高危Sudo漏洞,普通用户秒变root管理员!(附POC)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492119&idx=1&sn=5929fda702d2ffc81cd8d0ceb6d517f5": "金蝶云星空 BusinessDataService.BatchLoad.common.kdsvc 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651134313&idx=1&sn=1c8d8e158614cebc484d9e9c60110620": "麦当劳泄露求职者数据,新漏洞威胁大众等汽车品牌安全|一周特辑", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247488451&idx=1&sn=a4ca5878e9febbc5fb079a6dbd862c55": "从Top20开源组件漏洞浅谈开源安全治理困境", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492110&idx=1&sn=5c85ce32f439145754b97e4e8aaafbc6": "锐捷EWEB路由器 ipam.php 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247517301&idx=1&sn=9d85a91e393af6ddcb3b5ea522d72c76": "漏洞预警|银河麒麟桌面操作系统V10本地提权漏洞(CNNVD-2025-28344653∕KVE-2025-0603)", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900919&idx=1&sn=1f4322c0e6cd6bc7effa9d36a0a183f2": "澳航600万用户数据泄露背后的“供应链攻击”与“人类漏洞”", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611404&idx=4&sn=f4ff1d606e1d6f8ff505f82837b16d16": "Struts2全版本漏洞检测工具更新!V19.68", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597083&idx=3&sn=5ed9d81521495a3efbc2a3afe6aedaf8": "PerfektBlue漏洞危及梅赛德斯、大众和斯柯达等多款汽车信息娱乐系统", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611404&idx=1&sn=47775667d01e7eaeee082dd967296fa9": "数十亿手机可被监听,eSIM漏洞牵动全球通信生态", "https://mp.weixin.qq.com/s?__biz=MzIxOTM2MDYwNg==&mid=2247515236&idx=1&sn=fc3c5c6dbf3b2cbc32405070170609d6": "2025某新版诈骗双端APP通讯录前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492135&idx=1&sn=7bcedb196331e9addb1b70f3be0ea04e": "金蝶云星空 InOutDataService.GetImportOutData.common.kdsvc 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324804&idx=3&sn=859f6647543d5b23c0064c147c9cec34": "FreeBuf周报 | Redis被曝三大严重安全漏洞;AMD新型漏洞影响多款CPU", "https://mp.weixin.qq.com/s?__biz=Mzk5MDYxODcwMA==&mid=2247483889&idx=1&sn=49db58752bf20b6e1a322dc5c9a9e614": "东胜物流软件GetDataListCA接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492596&idx=1&sn=a50b7b65f5e4064042180aab1032775c": "分析某oa历史漏洞中捡到CNVD证书", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500966&idx=1&sn=88491b4e0826eff5e55d75c27ea04ec3": "微信出了XSS漏洞???点击自动发送消息", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247503982&idx=1&sn=0b4f5d87ce51350878b046afc4d40c31": "挖SRC必须知道的25个漏洞提交平台", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247493127&idx=1&sn=70d0c3a1f601eb58a3674596ba2aad54": "EDUSRC-高危漏洞-从信息收集到后台多个越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDMyNzk5NQ==&mid=2247484884&idx=1&sn=4db22793b7eb8e943f0dbcbd42102bd1": "【已复现】mcp-remote 远程代码执行漏洞(CVE-2025-6514)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494231&idx=1&sn=108ce757a60b9c8454839dc15a6c7df4": "【已复现】Fortinet FortiWeb SQL注入漏洞(CVE-2025-25257)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503602&idx=2&sn=e1e4339c66bfeef7053ebf82a7b737eb": "【已复现】契约锁电子签章系统 pdfverifier 远程代码执行漏洞(QVD-2025-27432)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247485223&idx=1&sn=7cadef856d0360ed2983ea9bd473a955": "Solrs搜索&Shrio鉴权&Log4j日志&CVE历史漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489439&idx=1&sn=2a7b9da658dc0f6481886eef74bd95ac": "日志中的秘密:利用一个存在 20 年的 NTFS 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247490169&idx=1&sn=1c03eca279db12aecea40a2a46eafd9a": "某新版诈骗双端APP通讯录存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247487647&idx=1&sn=0568c440e430ad84c661d9862760d84d": "漏洞利用 | 用友NC IMetaWebService4BqCloud数据源SQL注入", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247487511&idx=2&sn=8d2f6557da638b43fa93a032bbb453a8": "众测实战 | 一次正负叠加导致的支付漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655286633&idx=1&sn=00bc865514cb320914e0d3d577c2cacf": "渗透测试:漏洞类型、原理、危害、检测思路和利用方式", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486079&idx=1&sn=79828c12688c4daf8723f32f2877dc05": "CVE-2025-5777|Citrix NetScaler ADC和NetScaler Gateway内存泄漏漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493700&idx=2&sn=7a27ce9d8f9c38ab8ded8423985240d6": "漏洞预警 | Git远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488291&idx=1&sn=c43fdc1546c3145467292ca96f853d05": "HW(2025-7-14)上网护网漏洞信息收集汇总", "https://mp.weixin.qq.com/s?__biz=MzkyNTU3MjA3OQ==&mid=2247485148&idx=1&sn=280d1d4f4a5c5819b526819228c350bf": "这是微信XSS漏洞吗?", "https://mp.weixin.qq.com/s?__biz=Mzg2MjIzODI3Mw==&mid=2247493065&idx=1&sn=a81d56cc98a5e170e167459c7a00a7fa": "仲夏狂欢!指定类型漏洞翻倍奖励、加成奖励buff叠满!", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486601&idx=1&sn=c46a906e9e767159a1953d41fbf8e368": "某项目后台RCE漏洞审计分析", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795697&idx=1&sn=d95257c858f5e767abdabe510f3bac8d": "黑客正在利用 Wing FTP 服务器中的关键 RCE 漏洞(CVE-2025-47812)", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247486533&idx=1&sn=12d91dccb932998fec348e17760ef684": "工作中遇到的几个常见场景下的xss漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247492236&idx=1&sn=8d8564b4b92621d0ce1783198a801077": "手把手教你如何挖洞:CVE-2025-25257 Fortinet FortiWeb 匿名 SQL 注入漏洞动态调试实战", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492614&idx=1&sn=2d05e9cc7f905932ff7bd4632366746b": "关于打高版本java,cc6复现", "https://mp.weixin.qq.com/s?__biz=Mzk2NDkyMjUxMA==&mid=2247483689&idx=1&sn=0aa653b5743553d1825b5947385aed22": "一个面板的RCE方式", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494731&idx=1&sn=e8b10030b95eeeb908be3ace5b5a2b04": "xxl-job漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788788&idx=1&sn=c7fa538499e5b03daa0e74f470f92434": "3.5亿辆汽车、10亿设备暴露于一键蓝牙RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070655&idx=3&sn=7ccd92ac4dd522bb9216323ef93d3402": "【安全圈】Google Gemini 被曝安全漏洞:AI 邮件摘要功能可被诱导生成钓鱼信息", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484960&idx=1&sn=758111b66d24a67e66a0aeeab9bb191c": "安全漏洞防治工作标准化的必要性:抵御不断演变的威胁之盾", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324846&idx=4&sn=f1d0bf41e03a0e999487db8bcdacbf1a": "600余个Laravel应用因GitHub泄露APP_KEY面临远程代码执行风险", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487565&idx=1&sn=1f8f19fa59f52f8098ffe19d836e1b57": "JS扫描与漏洞挖掘利器推荐—Rotor Goddess", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501314&idx=2&sn=5e35621925a6305ddbf83e56547a4491": "【漏洞通告】Fortinet FortiWeb Fabric Connector SQL注入漏洞(CVE-2025-25257)", "https://mp.weixin.qq.com/s?__biz=Mzg3MTY3NzUwMQ==&mid=2247490640&idx=1&sn=da5d674ee073569e95a71021aadb5e17": "2025-7-14日漏洞情报汇总", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492144&idx=1&sn=a97ed21e2e7bc3d25299fec618723370": "金蝶云星空 DevReportService.GetBusinessobjectData.common.kdsvc 远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496126&idx=2&sn=ccf97af76f2a431d483b41df127f0530": "上周关注度较高的产品安全漏洞(20250707-20250713)", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506665&idx=1&sn=d776fe3468df87da311794720e5bea05": "每周网安资讯 (7.8-7.14)|Ibm Concert_software存在将系统数据暴露到未授权控制的范围漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491762&idx=1&sn=29ab889867f7d639faaa54a3dfc2ef2e": "清源SCA社区版|每一次漏洞判定皆有代码为证", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247489173&idx=1&sn=3530ac4fe1631d177d454d6c931baebd": "Kigen eSIM 漏洞导致数十亿物联网设备面临恶意攻击​风险", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795710&idx=3&sn=52208912e929c701e1fe746d0a6cbada": "WinRAR 0day漏洞在暗网以 8 万美元的价格出售", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247493266&idx=1&sn=411c7e0604d139facf2cd75ca77cd465": "图形化POC+资产扫描+漏洞验证Yscan让 Web 安全扫描更简单高效|工具分享", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489466&idx=1&sn=646d70b5560716e42a7b10a2c982817a": "SQL 注入到 RCE - Fortinet FortiWeb FabricConnector (CVE-2025-25257)", "https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490678&idx=1&sn=2bc385ae9c50e43f2cb6a1d804168153": "【工具】afrog 高性能Web漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611424&idx=2&sn=7dd51707667ecc850b3d142362d694b3": "投资回报率最高的AI应用:漏洞猎人", "https://mp.weixin.qq.com/s?__biz=Mzg4ODg2MjQ5Mg==&mid=2247484142&idx=1&sn=b7b1520274e05a7c03c144e80761199c": "Fortinet FortiWeb SQL注入 CVE-2025-25257", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247550983&idx=1&sn=ad9b1e11354dac3d5d34a5516f979560": "记一次某学校AKSK泄露拿下中危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488300&idx=1&sn=6a3f92ca1b192c239d2e4cd802c483b3": "HW(2025-7-15)上午护网漏洞信息收集汇总", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523565&idx=1&sn=bb6888cc84ad4eba9d87a3ed0137acd8": "APP_KEYs遭暴露,超600款Laravel应用易遭RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247497998&idx=2&sn=a3695a50b149bb30767ea7822c21c3b0": "漏洞扫描工具:渗透测试的左膀右臂,还是华而不实的鸡肋?", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503607&idx=1&sn=44581e3d24968215d02fb7b63ed254d6": "安全热点周报:Fortinet 公开 FortiWeb 中的严重预身份验证 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247511953&idx=3&sn=7bf0f19feec09a686fcc5fd88fbadc29": "软件定义的无线电可远程刹停火车:一个拖延20年的致命漏洞及其行业警示", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523565&idx=2&sn=3cc3fd02d7bb4c8d993138dce7afa3f6": "Wing FTP严重漏洞已遭在野利用", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507845&idx=1&sn=ba7dab99c2bbcdc4ee180575e33e2add": "漏洞通告 | 用友U9 Cloud 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531762&idx=2&sn=99867009f3948281421488758c28df39": "探索“search-ms” URI 协议漏洞:深入分析复杂网络攻击", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583802&idx=1&sn=c914497a8cef5d31d229e7ce9ad87e00": "蓝牙漏洞可能会让黑客通过麦克风窃取信息", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247490018&idx=1&sn=ec2976fde305b530d4b85fb570f334aa": "【神器合集】漏洞挖掘效率翻倍!武装你的burpSuite", "https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650470013&idx=1&sn=bd91de134dcbad0a5c5482ada536bff4": "配置错误与大模型应用漏洞交织,云上数据安全防线持续承压|全球云上数据泄露风险分析简报 (第六期)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488681&idx=1&sn=409ec540f7d8b3a760b67e55ed9993f1": "用友U9 DynamaticExport.aspx接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494273&idx=1&sn=cfef3d7b85d52177a5027daf3e4fabf8": "【已复现】Linux Kernel AF_UNIX UAF漏洞(CVE-2025-38236)", "https://mp.weixin.qq.com/s?__biz=Mzk1NzE0ODUyOA==&mid=2247492306&idx=1&sn=c92f48d0555e82759ea928557ad0efef": "施耐德EcoStruxure™ IT DataCenter Expert漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324943&idx=2&sn=f92e83da511bb4652e239c42897f2491": "一键获取上万份资料和漏洞情报的资源情报网站", "https://mp.weixin.qq.com/s?__biz=MzA3NDQ0MzkzMA==&mid=2651733722&idx=1&sn=2a5cc95ac03a82d96334bb722b65da1f": "攻防演练利器:启明星辰天镜漏扫精准狙击高危漏洞!", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324846&idx=3&sn=7a22c6935abca7bdf46bf166aa5bb5d8": "技嘉UEFI固件SMM漏洞使系统面临固件植入和持久控制风险", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490480&idx=1&sn=aedd535f601272923435b2dcbc06a9f0": "【已复现】Fortinet FortiWeb存在SQL注入漏洞(CVE-2025-25257)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324943&idx=1&sn=93d35c2bec5a8151f80c28ab1ae8258c": "20年历史漏洞可让黑客远程控制列车制动系统", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247493293&idx=1&sn=3ab43e73480497e2f567c4f022e8754c": "【SRC】分享某单位众测中的一次高危——逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494273&idx=2&sn=b8f964af67c9b2e67292e2498926bc29": "【已复现】用友U9 Cloud远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531762&idx=1&sn=a08fcb7bff9afed48f07cc4dd51fa8df": "漏洞爆料!微软SharePoint又被高手秒杀,Pwn2Own单招就破防!", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503462&idx=1&sn=0f722394919e6b8af1e3bb654383e66c": "雷神众测漏洞周报2025.7.7-2025.7.13", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247484961&idx=1&sn=bfaf22c6ec6cb4e04c5ab3f6f05098dd": "软件依赖似套娃,漏洞修补路在哪?", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490480&idx=2&sn=72f9ba58728459766a57f577c2d117bb": "【已复现】用友U9 Cloud存在远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555471&idx=1&sn=70206928fcf4dcff0f7d8c7eb7aa9e46": "浅谈代码审计+漏洞批量一把梭哈思路", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070668&idx=2&sn=ce0182339a28bea5592baa50de5cc5e7": "【安全圈】起亚车机系统曝安全漏洞!黑客竟能远程操控", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494758&idx=1&sn=799938b39cc81cae7a6738f86eb77758": "Yscan 是一款集 Web 资产扫描、图形化 Nuclei POC 管理、漏洞验证与数据整理于一体的实战型安全工具。", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494290&idx=1&sn=3a91fb3c0b5f85fce1d7dbffc4e55ff9": "【已复现】存在20年的Windows虚拟硬盘权限提升漏洞(CVE-2025-49689)", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489561&idx=1&sn=38afd7424219c9e5561316f486e4cc9f": "Out of Band Exploitation (OOB) 利用技术速查表", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494290&idx=2&sn=a02c958b20179cf6beb420d4491d6a11": "【风险提示】VMware多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583845&idx=1&sn=c90ced34d21a579bc3a5cc0f1a4541ff": "谷歌 Gemini 漏洞劫持电子邮件摘要进行网络钓鱼", "https://mp.weixin.qq.com/s?__biz=MzkxMzYzMTE5OA==&mid=2247484350&idx=1&sn=aa3db900309caf2a179befd3484960f2": "GeoServer存在默认口令admin:geoserver 附POC", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492884&idx=1&sn=06c9c888b83ac5f3d08b8dc4cc2548e0": "【风险提示】VMware ESXi、Workstation、Fusion及Tools多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506998&idx=1&sn=52801a9414af3059d542caf9da05aa53": "我如何在 TikTok 漏洞赏金计划中赚到 3000 美元", "https://mp.weixin.qq.com/s?__biz=MzkwOTQ4MzQ4Ng==&mid=2247484210&idx=1&sn=522f16f64c49ddd7f300f95fd8b33ef4": "【0day挖掘】怎么用“Rotor Goddess”轻松出洞", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494279&idx=1&sn=932e75f14dcf30d997a865d551100152": "CVE-2025-6554标志着谷歌在2025年修复的第五个被主动利用的Chrome零日漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTUwNTU5Nw==&mid=2247489632&idx=1&sn=cfd0fe4074ceae03eff8238fbf7b26ce": "【相关分享】关于网传HVV中的WPS漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531773&idx=2&sn=87c094ebed1fc43d49cbe8426e57d36b": "探索 Node.js 中的零日漏洞:CVE-2025-27210", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484513&idx=1&sn=132993e0a497be205789753df204de55": "【0day挖掘】怎么用“Rotor Goddess”轻松爆出过万资产的漏洞,以及其他小洞的出货方式与流程", "https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247532377&idx=2&sn=8675b7e1c0b2211c3c1b5d4a22d28fa9": "数十亿手机可被监听,eSIM漏洞牵动全球通信生态", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324992&idx=4&sn=202ab52532231d393da9f3e3e9320e01": "Node.js路径穿越与哈希拒绝服务攻击漏洞威胁Windows应用", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503612&idx=1&sn=ad04ed392ff95d7f165eeab36a14bac3": "Oracle 2025年7月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523592&idx=1&sn=399b4d7dd5399d33772e13913c35200b": "思科:满分ISE漏洞可导致未认证攻击者执行root 代码", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490488&idx=2&sn=6c76da8465450c3c79d79e472919de4f": "【风险通告】VMware多产品存在高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526818&idx=1&sn=94387d1e5ab9647a7dd70aa9f62aa3f0": "VMware ESXi、Workstation、Fusion及Tools多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581312&idx=1&sn=16b534f5f8dc330cce051c4c5e419a78": "独家 | 360联合清华大学发布全球首份智能体安全报告,曝光20+漏洞!", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247489680&idx=1&sn=37eee459a55b76471119db69d6b93f58": "【转子女神更新与0day挖掘】浅谈用转子挖掘0day的思路式", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503624&idx=1&sn=efb918e1db57c9ad9b7deb875cb26da5": "【已复现】LaRecipe 服务器端模板注入漏洞(CVE-2025-53833)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496130&idx=1&sn=f9bf39ffb23c2b16744cffcc11b43ccd": "关于Google Chrome V8存在类型混淆漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=Mzk0NzI3ODU0Mg==&mid=2247483901&idx=1&sn=584c0ed15e48cd1b6b2844170a747f22": "【CVE-2024–31317】提权漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg3MTY3NzUwMQ==&mid=2247490661&idx=1&sn=bdb612384cfb0e926f9418a23abe4ea4": "2025-7-17日漏洞情报汇总", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501334&idx=2&sn=c11ce042dbc5e02e25cdeaa2e8f4c5df": "【漏洞通告】VMware VMXNET3整数溢出漏洞(CVE-2025-41236)", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486562&idx=1&sn=a00c80480f832a5f80b14fafdaa68a42": "代码审计-Java项目-组件RCE代码执行漏洞审计", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519526&idx=1&sn=37208f0ff625ea825f473f210671c887": "几个常见场景下的xss漏洞案例", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247488062&idx=1&sn=459cb7ef4a17d8e49db48010e6c6badf": "漏洞预警 | Linux sudo本地提权漏洞(CVE-2025-32462、CVE-2025-32463)", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg2NTM3NQ==&mid=2247485014&idx=1&sn=b1a1d176fc53260b695a2462ac585079": "【吃瓜】内推\"红队\"当内鬼 | 网传wps漏洞为Nday | HV奖励吃大粪", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597312&idx=3&sn=2ffef8173d9075cd1afc387bf35860d1": "谷歌 AI Big Sleep 立大功!成功阻止 SQLite 零日漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzAwNTAxMjUwNw==&mid=2650278663&idx=1&sn=913f8c22fe39ceb1c95a3181faf1b602": "安全自检,快人一步!—— 近期攻防演练热点漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490457&idx=1&sn=65722e141134d410b44b7a3bb6536ff5": "【高危漏洞预警】Oracle WebLogic Server 未授权访问漏洞(CVE-2025-30762)", "https://mp.weixin.qq.com/s?__biz=MzU5Njc4NjM3NA==&mid=2247496792&idx=1&sn=1a89dc1a57debe1bcc662fc35fb66c99": "中科天齐团队参加FSE 2025,提出基于多对象类型状态分析的重复漏洞检测新方法", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597312&idx=2&sn=45995d7633ae08c6ed2c67558e2810f8": "安卓旧系统 OTA 包分析与漏洞提权适配", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531828&idx=3&sn=ec3d214c56ba8b74d11fd852ec1a4271": "CVE-2025-1729 - 使用 TPQMAssistant.exe 进行权限提升", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490457&idx=2&sn=b4484c612e2941a3be416a7542dd457d": "【高危漏洞预警】VMware产品多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486523&idx=1&sn=1690be9fbd7ae4c115ce9cf881fca562": "Windows Exploit Suggester - Next Generation【Windows漏洞检查工具】", "https://mp.weixin.qq.com/s?__biz=Mzg4NDkwMDAyMQ==&mid=2247487706&idx=1&sn=9349f46f0975d7d1ea8b8a818f6e839c": "【转子女神更新与0day挖掘】浅谈用转子挖掘0day的思路式,末尾有免费的交流圈", "https://mp.weixin.qq.com/s?__biz=MjM5NzA3Nzg2MA==&mid=2649872029&idx=1&sn=3f2cad8fa6bfba155a6765e8608d58d1": "高危漏洞预警!私有化部署的WPS云文档系统存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463279&idx=1&sn=ed9a3d6766250120a7b315fdcbf9a117": "CNNVD关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583863&idx=1&sn=247a5ef8a5281ed71aa75625259ef035": "黑客正在利用Wing FTP服务器的关键RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651325085&idx=3&sn=3fdc985551c6f7ef9efd22161d1894bc": "Windows Server 2025黄金dMSA漏洞使攻击者永久获取访问权限", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247526106&idx=1&sn=9781b8699615f28887ac43f49d7bc1a7": "微信安全漏洞复现:无感执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070714&idx=3&sn=bbdd11d7e9a7fce59dacff4dec6304db": "【安全圈】230万次下载面临威胁:LaRecipe漏洞可能让服务器被完全接管", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247488477&idx=1&sn=bfde8c4971f0b8b052a8eb97550e957a": "Hutool路径遍历漏洞(CVE-2018-17297)分析报告", "https://mp.weixin.qq.com/s?__biz=MzA4NTAxMjA5Mg==&mid=2247484495&idx=1&sn=4f565a89e230b4cfbbfb7df78fa9706a": "CVE-2025-23267挖掘报告: GPU容器逃逸再现", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900981&idx=1&sn=7193267d6a1eda3a431e9274ea71b2ad": "一个字符引发的血案:Wing FTP服务器漏洞(CVE-2025-47812)正被全球利用", "https://mp.weixin.qq.com/s?__biz=Mzg2MTg4NTMzNw==&mid=2247484497&idx=1&sn=e16cdc5c6ab692d33c57e2a5ae01e722": "某信RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NDc3NDQ3NA==&mid=2247485298&idx=1&sn=3d314c96442d84fd8ec632d9e5fa0288": "微信3.9 RCE - 补档", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247574036&idx=1&sn=d5ebf7d79a401f316d47e289ace1f87f": "【SRC实战】支付逻辑漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523602&idx=1&sn=3ec9fd59b332276a13eb21d88cdd9217": "Vmware 修复 Pwn2Own 柏林大赛上遭利用的四个 ESXi 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500101&idx=1&sn=b23db40f233deddedec40faa521a9637": "红队视角:.NET Web.config 漏洞实战挖掘与利用", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649173841&idx=3&sn=c3cb03f8fe3770b9b6ce0283b205d676": "CNNVD通报Oracle多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096397&idx=2&sn=e7fec28c9a1dbdde9d1dde9ddb08c222": "NVIDIA 容器工具包允许攻击者执行特权代码漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MTA3Nzk4MQ==&mid=2650211641&idx=1&sn=ff2dc976a59a468983e558afa92a912f": "安天智甲终端防御系统(EDR)产品升级通告:紧急防护微信PC版远程代码执行(RCE)漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070714&idx=2&sn=49209de3fb35fbb8e54342a5c92305c5": "【安全圈】美政府用的“Signal 替代品”TeleMessage SGNL 爆出严重漏洞,堆内存泄露已被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490465&idx=1&sn=798252ff23b627acb67f5d6d67f927ec": "【高危漏洞预警】NVIDIA Container Toolkit 容器逃逸漏洞CVE-2025-23266", "https://mp.weixin.qq.com/s?__biz=Mzg3ODk1MjI5NQ==&mid=2247484806&idx=1&sn=f3f4e653ec05b15bd9f075a811b43f8e": "微信3.9 RCE漏洞 听说已有受害者", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247492628&idx=1&sn=6328dbcbf1e55c176f7181178a068c63": "【吃瓜】今日热传:微信客户端3.9版本 1click RCE的TSRC最终处置结果", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523602&idx=2&sn=c7cc15872799f6b7c9dcee62f1ced6e6": "谷歌AI “Big Sleep” 提前阻止严重的SQLite 漏洞遭利用", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493785&idx=3&sn=91850abc2376b8b501446d5d75e94086": "漏洞预警 | 东胜物流软件SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492816&idx=1&sn=6eb49110f0c5c62383b27221af9580ae": "Oracle云代码编辑器曝RCE漏洞,允许攻击者上传恶意文件", "https://mp.weixin.qq.com/s?__biz=MzU3OTYxNDY1NA==&mid=2247485543&idx=1&sn=27fdaf09140f5ed6a76e8b2a56de657f": "微信安全漏洞,可实现无感上线", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138069&idx=2&sn=535ea85e8092f28f192814ef324c3286": "研究显示:四分之三的美国青少年不顾风险使用AI伴侣;CNNVD关于Oracle多个安全漏洞的通报 | 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NTE0MjQyMg==&mid=2650630794&idx=1&sn=f4129ab9edd27f2f2db8d6ec901dfe84": "微信安全漏洞引关注|安恒终端安全以原生防护筑牢微信 RCE 防线", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247498996&idx=1&sn=a52abe5d42325669cf592bee26abf77a": "2025 Verizon DBIR解读 | 供应链攻击30%+勒索软件44%:边缘设备漏洞与AI滥用催生新风险", "https://mp.weixin.qq.com/s?__biz=Mzg3MzUxNDQwNg==&mid=2247483998&idx=1&sn=1fc9a29ab6682685a8fa8f63c3c5fe97": "手把手教你学会代码审计之命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486091&idx=1&sn=556ca88745998628df79a141223c15f3": "CVE-2025-25257|Fortinet FortiWeb SQL注入漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247491976&idx=1&sn=f20af65d96b6110fb508b76ef107652e": "【吃瓜】今日热传:微信客户端3.9版本 1click RCE的TSRC最终处置结果", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493785&idx=1&sn=ce2b54456146391c0e5277a33022645d": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650184321&idx=1&sn=8e7db09c9c1be0781a68a45bef949c91": "微信3.9版本RCE漏洞,OneSEC紧急缓解、检测方法", "https://mp.weixin.qq.com/s?__biz=MzU4MjYxNTYwNA==&mid=2247487834&idx=1&sn=ab354dd326ae72b7c8f31e4dc3c183e7": "新手练习向——基于文件上传漏洞获得网站shell权限", "https://mp.weixin.qq.com/s?__biz=MzkzNTUyMzUwOQ==&mid=2247483842&idx=1&sn=69c0b569ec4687a0bf953ab0268817eb": "微信 3.9 版本RCE漏洞预警", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651134417&idx=1&sn=1c647891bc2a1a3fc76593fb82274590": "美国铁路关基系统曝漏洞,英国零售商650万数据遭窃取|一周特辑", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651325149&idx=4&sn=def91ead440f78d348db5fd03eb51f18": "SonicWall SMA设备零日RCE漏洞遭利用,部署OVERSTEP勒索软件", "https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247524382&idx=1&sn=b3949b61e1b5f733191292af2213769c": "OSWE = 白盒审计 + 漏洞武器化", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247485850&idx=1&sn=f495ab99b95b02c18a410789c7a25244": "nacos漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzI4MzI4MDg1NA==&mid=2247485300&idx=1&sn=12af35651ea2aa886ca0cb33d243f0b1": "【LYSRC漏洞挖掘大赛】夏日攻坚行动,双倍积分+现金奖励等你拿!", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247493495&idx=1&sn=791bebc6faa651cc3c585c2f5f481d21": "渗透测试 | 分享某次项目上的渗透测试漏洞复盘", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651325149&idx=1&sn=a96d58d36336bf2c82920a7e1f872749": "NVIDIA Container Toolkit漏洞可导致权限提升任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489623&idx=1&sn=35978a7efb9a7ed2dffcccade99bc7e2": "你从未听说过的最流行调查软件中的远程代码执行漏洞 (RCE)", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247501013&idx=1&sn=420fc5b4e581e4d2936021ed3fd6c4ee": "【严重漏洞】微信客户端远程代码执行漏洞,陌生聊天记录不要点击", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494392&idx=1&sn=7ee67506322648e0494c2c8f39467044": "【稳定复现】微信客户端目录穿越漏洞 (可导致远程代码执行)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597375&idx=3&sn=932fa7865bd708b7031df174772567e5": "BIND 9 DNS解析软件漏洞,可能引发缓存投毒与拒绝服务攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486568&idx=1&sn=38979e7c71e92a748fe6c50d174e5ed3": "代码审计-Java项目审计-SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247490046&idx=3&sn=b390a5c60517ade78f56f92d1edb5ea1": "一个实时更新的漏洞裤", "https://mp.weixin.qq.com/s?__biz=Mzk5MDYxODcwMA==&mid=2247483934&idx=1&sn=d5857143ae8cc3a4efc5a0e53ced58cf": "东胜物流软件 WmsZXFeeGridSource.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485894&idx=1&sn=537a76c2aafc5a26acbaa4f8e9d500bf": "【翻译】严重 NVIDIA AI 漏洞:NVIDIA 容器工具包中的三行容器逃逸 (CVE-2025-23266)", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493785&idx=2&sn=b6d7880ae3a645643d60d6269ee37cb3": "漏洞预警 | 汉王e脸通智慧园区管理平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247521940&idx=1&sn=ab4615dac27fd52572ce9863ff1803c9": "麦当劳AI招聘工具McHire漏洞导致6400万求职者数据泄露", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492192&idx=1&sn=2204c560a0d68d9237131513a57b33ab": "汉王EFaceGo updateVisitorMapConfig.do任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531904&idx=1&sn=a6e51b35fcb2e9e06f4f4895864fe053": "预授权 SQL 注入至 RCE - Fortinet FortiWeb Fabric 连接器 (CVE-2025-25257)", "https://mp.weixin.qq.com/s?__biz=Mzk5MDYxODcwMA==&mid=2247483950&idx=1&sn=970c288f654adcdc1315375a64c0b374": "汉王e脸通综合管理平台 exportResourceByFilePath.do 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247518061&idx=1&sn=e5c993ddd41593392c3fadfe8f8fae8a": "OSED = Windows 漏洞利用 + 逆向工程", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070749&idx=2&sn=04105f8ddc32460791073712282f5bbf": "【安全圈】黑客正在利用 Wing FTP 服务器的关键 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581322&idx=1&sn=baf9027c193bf64dd369e81724d98582": "无需升级!360终端安全智能体全面防护微信PC端路径穿越漏洞威胁", "https://mp.weixin.qq.com/s?__biz=MzI2NzAwOTg4NQ==&mid=2649795773&idx=1&sn=f49a825a2f60f834388ce0837639989b": "SharePoint 遭受攻击:微软警告0day漏洞遭野外利用", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650184307&idx=1&sn=7caac1a81cfffb4dba7ed37940420255": "新漏洞又扎堆?AI:已锁定资产!", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519647&idx=2&sn=968500d0280ea39cbb9b9f8288c939b4": "实战 | 记一次某学校AKSK泄露拿下中危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486586&idx=1&sn=a64429cb46676df4b223b1e98cd3ad4b": "代码审计-thinkphp历史漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247487755&idx=1&sn=72978a3fb406810d856d46411a32217c": "Jeecg-boot v2.1.2-v3.0.0 SQL注入漏洞+敏感接口分析", "https://mp.weixin.qq.com/s?__biz=Mzk0NDcyMjU2OQ==&mid=2247484819&idx=1&sn=8cdfd3c0549e4a8395b9b6cc4ba0cca9": "高危!MCP工具曝远程代码执行漏洞,超43万次下载受影响", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506732&idx=1&sn=b6d8eed0bf81bd876e27a35c9f4208b4": "每周网安资讯 (7.15-7.21)|Microsoft SharePoint服务器欺骗漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651325214&idx=4&sn=423efc0dc6144bdfef13a5837b03e1ae": "HPE Instant On设备存在硬编码凭证漏洞,可获取管理员权限", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247490236&idx=1&sn=39ed76d3bfcabdd4def2ba2bd953ba5c": "某诈骗微盘存在前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247549049&idx=1&sn=a9888999b1ca98221bbf60a15eb7564c": "企业最易遭遇的十大IT安全漏洞解析", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487598&idx=1&sn=ea41e76ec767e519046d6ce0caf0f8d1": "FortiWeb CVE-2025-25257", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651325214&idx=2&sn=751d846f97b99cfd0a5db9b0943b2a0c": "全球活跃利用中的微软SharePoint新型零日RCE攻击链", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497483&idx=1&sn=09869705c50afddbeffd230575a11f95": "一款面向安全运维场景的集成化利器,融合了资产管理、资产测绘、漏洞检测、配置核查、弱口令检测、批量运维、漏洞跟踪以及日志审计等功能", "https://mp.weixin.qq.com/s?__biz=MzA3NTIyNzgwNA==&mid=2650260356&idx=1&sn=8c35649fee80bddd9924b08f386bdcaf": "为何必须突破工具漏洞清单思维,照亮安全盲区", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651325214&idx=3&sn=da164a902b33bab2a35b77a492bae665": "7-Zip曝出两个可致内存损坏和拒绝服务的漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247494434&idx=1&sn=f85a9125e3a2b4c7eb1bf4c737ee71d2": "契约锁pdfverifier RCE攻防绕过史", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096406&idx=1&sn=37ee7dab851324ca4ecb1e2e32c41326": "Sophos Intercept X for Windows 支持任意代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247498183&idx=4&sn=c6af42bb31bf4a81149823c3a900f7f1": "微软服务器软件被曝严重安全漏洞 黑客借此在全球发起攻击", "https://mp.weixin.qq.com/s?__biz=MzI1NTE2NzQ3NQ==&mid=2247487287&idx=1&sn=342b33e6f39c88a34c3500ee4986c9c9": "【漏洞速报】联想管家RCE?速速关机下班", "https://mp.weixin.qq.com/s?__biz=MzIwNzAwOTQxMg==&mid=2652252247&idx=1&sn=bf74fd5e8745a26a605f4c8df984203f": "火绒安全:微信 Windows客户端3.9及以下版本存在远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNjczOTQwOA==&mid=2247495401&idx=1&sn=47e2b01157d168775fb74106c8f7523c": "安全测试效率翻倍!自动化资产测绘+漏洞扫描", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247493415&idx=1&sn=0a6c89c645cd322031111cb9ac6001f8": "若依系统前台+后台漏洞总结:RuoYi框架九大高危漏洞攻防指南|挖洞技巧", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484960&idx=1&sn=ad43cab8df06b479660c3c71137eb642": "【漏洞复现】大华智能物联网综合管理平台 receive 命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk3NTE3MjU4Mg==&mid=2247484302&idx=1&sn=42e0113f5e72ddc92f84826671500353": "【JAVA安全笔记】ClassPathXmlApplicationContext利用链 有参构造对象RCE打法", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493794&idx=1&sn=23458646401be62b9d63135180ab883d": "漏洞预警 | LaRecipe服务器端模板注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486588&idx=1&sn=4c73c6313fbabb62e51901d399c7a8e6": "WAF绕过-漏洞利用篇-sql注入+文件上传-过狗", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070764&idx=2&sn=d05638243e08a279721358efe3e21bb0": "【安全圈】英伟达漏洞致AI与机器人平台面临远程代码执行和数据泄露风险", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492737&idx=1&sn=491604d0f55fcdd1d0f55633eaad86d2": "若依前台漏洞总结", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597663&idx=1&sn=34418dc2e46f79efadfa931f71df0600": "CVE-2023-4069:Maglev图建立阶段的一个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484521&idx=1&sn=9ee8b714f11d357e001eb697832c9521": "AI 自主调用 BurpSuite 完成漏洞自动化检测", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488342&idx=1&sn=13c7a552f3f257e728b02b065e002ba2": "HW(2025-7-21)护网漏洞信息收集汇总", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486451&idx=1&sn=f44225b916411ae0b00384f443fafb35": "俄罗斯APT组织加剧欧洲攻击:零日漏洞与数据擦除器齐上阵", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611495&idx=2&sn=3d0e35264169c731d967995d18dd84e9": "7-Zip曝出两个可致内存损坏和拒绝服务的漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MTYyNTg3Mg==&mid=2247493021&idx=1&sn=2986e19ca3445c37cdd06a577ae7faea": "【星闻周报】起亚车机系统曝安全漏洞!黑客竟能远程操控", "https://mp.weixin.qq.com/s/kT3nzepRzYaxzYPRPk3mfA": "记一大型商超小程序漏洞挖掘", "https://mp.weixin.qq.com/s/9NljSSkisfL0hq71Xr0iCA": "漏洞预警 | 红海云eHR SQL注入漏洞", "https://mp.weixin.qq.com/s/gUWKXlRuzIcSMNJldacGBw": "【工具推荐】多云存储桶配置漏洞浏览器检测插件", "https://mp.weixin.qq.com/s/0HWJaupNP-zZRVgdZ1VyrA": "大商创多用户商城系统 SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s/Bhoew2W09ywXd0MgfKxbDA": "476万损失背后的平台漏洞:17岁少年诈骗获刑,电商业务漏洞安全敲响警钟", "https://mp.weixin.qq.com/s/HazuZTizoW5Tk6tWBa1rRw": "【接口漏洞第三章第一节】告别依赖文档!实战演练:无文档API渗透测试入门", "https://mp.weixin.qq.com/s/fjdC-4oZn7oPda9vBw0Xeg": "QNAP修复高危SQL注入和路径遍历漏洞", "https://mp.weixin.qq.com/s/vq6GHn-TgHtEdWN3X0UClw": "手把手CVE漏洞编号获取&漏洞提交", "https://mp.weixin.qq.com/s/E_4D6KLZrzqdIJNu41Sneg": "金融SRC各场景漏洞挖掘技巧", "https://mp.weixin.qq.com/s/cJvGFMCvRPvJh2qmS_C7gw": "内推 | 上海某公司红队方向漏洞挖掘与渗透测试岗火热招聘中", "https://mp.weixin.qq.com/s/qiITLmf2MO8r9_oHnQupwQ": "Shiro漏洞利用工具,更新V0.2!", "https://mp.weixin.qq.com/s/oLyGPOXsK09A4qqK-ummOQ": "漏洞预警 | 东胜物流软件SQL注入漏洞", "https://mp.weixin.qq.com/s/rXV5eumRHNypwY2a9EqQ8w": "CISA提醒注意 WHILL Model C2 电动轮椅中的严重漏洞", "https://mp.weixin.qq.com/s/28gaTuhQkVq09eFfEswPyQ": "Monsta FTP CVE-2025-34299 RCE 浅析", "https://mp.weixin.qq.com/s/ethfaXMXzByAAwIgiG56Rg": "【接口漏洞第三章第一节】告别依赖文档!实战演练:无文档API渗透测试入门", "https://mp.weixin.qq.com/s/zTZHhstJIrgrVX7-CS2GZg": "CVE-2025-66518:Apache Kyuubi 中的高危漏洞暴露本地服务器文件", "https://mp.weixin.qq.com/s/d9qapPG7bDpOPlwg8daAhQ": "《不用漏洞也能拿下 Root?DC-2 靶机完整攻击链实录》", "https://mp.weixin.qq.com/s/5wTYYxE-5wPRygMRaRvirA": "RCE哨兵 - 哨兵系列第一弹", "https://mp.weixin.qq.com/s/AQOiLKFRH1BoIU_fnAw4Hw": "漏洞预警 | RustFS认证绕过漏洞", "https://mp.weixin.qq.com/s/amcK4lonVyG5jWhbcQ9gpw": "存在了五年的 FortiOS SSL VPN 漏洞已在野实际利用", "https://mp.weixin.qq.com/s/t8HcCzLYKDHggG0z8YbMNw": "推广漏洞的特殊思路 | 通杀国内主流互联网厂商的推广漏洞思路分享", "https://mp.weixin.qq.com/s/Sm9IKBikHGTTZ3gP4KIx2Q": "端口扫描 + 指纹识别 + POC 验证|cscan 一站式资产安全扫描平台", "https://mp.weixin.qq.com/s/QdSTNHb3XgCUbyMqo1ucfw": "CVSS 评分 10.0!满分高危漏洞 React2Shell 来袭,你的 Next.js 服务可能正在挖矿!", "https://mp.weixin.qq.com/s/9guK9gL82gdb7nI3FTxVxw": "漏洞复现 | B-LINK AC1900 V1.0.2 命令执行漏洞", "https://mp.weixin.qq.com/s/j9Z-OCPlBxwK0vv_DD_42w": "vCenter图形化漏洞利用工具", "https://mp.weixin.qq.com/s/2AkHznQlN5LfMmQKos561w": "【已复现】jsPDF 曝高危漏洞:可窃取服务器密钥及配置文件 (CVE-2025-68428)", "https://mp.weixin.qq.com/s/n2b-fMLDoy_mQE0WvnY3aA": "SQL Server数据库,漏洞利用与数据勒索风险急剧增加", "https://mp.weixin.qq.com/s/7N0LqDINUbL-32-__fUH_A": "汉王e脸通综合管理平台 getFirstEmp.do SQL注入漏洞", "https://mp.weixin.qq.com/s/R6mb4g1jwcUDZFvju-GEPg": "Shiro漏洞利用工具 -- ShiroEXP(1月4日更新)", "https://mp.weixin.qq.com/s/wh3DzY9jEZIuor4AUNl-NQ": "【高危漏洞预警】Dify API密钥明文暴露漏洞CVE-2025-67732", "https://mp.weixin.qq.com/s/1Tn8oNvlozv9ebsoZbelbQ": "漏洞挖掘实战系列(第2期):Web专项(上) 注入类+文件类漏洞,吃透60%分值", "https://mp.weixin.qq.com/s/cGGJ0ezy1Ee6HhvvkR0lKw": "【首发POC】n8n Python代码节点沙箱绕过导致系统命令执行 (CVE-2025-68668)", "https://mp.weixin.qq.com/s/PgWDOBPchd7uYQvKaWzYPg": "React2Shell 的 CVE-2025-55182 深入技术分析", "https://mp.weixin.qq.com/s/hPnr3ktQtL4VHZ8zAOrHyA": "帆软bi反序列漏洞利用工具", "https://mp.weixin.qq.com/s/adAQQHIeCpBuwzeGAVdeFg": "2025年度十大 Web 应用系统高危漏洞盘点", "https://mp.weixin.qq.com/s/NHyWqcCC9CENaU3rUBnhrA": "CTF Pwn模块系列分享(三):溢出基础与ret2text漏洞利用", "https://mp.weixin.qq.com/s/OAbMbfwecclbLUKizAHJdw": "edu漏洞挖掘:某985证书站挖掘&通杀任意文件读取漏洞", "https://mp.weixin.qq.com/s/ZSUItIm5nopWZcmOVTl9dQ": "JAVA代码审计-XXOA 上传0day挖掘", "https://mp.weixin.qq.com/s/r8QzXm8XsAEsVtK3pnsz5w": "【已复现】jsPDF 本地文件包含∕路径遍历 (CVE-2025-68428)", "https://mp.weixin.qq.com/s/Fy_RRF4nm0Cvtd1vNytQbA": "【论文分享】从噪声到信号:如何在千万级软件包中精准定位漏洞影响?", "https://mp.weixin.qq.com/s/9Fi2WawMDNR48P0rmDs3zA": "CVE-2026-21440 – AdonisJS 高级检测概念验证", "https://mp.weixin.qq.com/s/WK1WhqDW7BtGF8y2p0S25g": "Yakit复现fastjson漏洞", "https://mp.weixin.qq.com/s/7s5OxEG3oBQIsmrlD0_ZKQ": "信息安全漏洞月报(2025年12月)", "https://mp.weixin.qq.com/s/nzCUuMAkdgfcDgtEelAtsg": "AdonisJS 9.2 框架存在严重漏洞,可导致任意文件写入和RCE", "https://mp.weixin.qq.com/s/3wevJhBoQDRSvtq778Ig1Q": "JNPF快速开发平台存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s/OJ1d5fhiQglTYSOXxbRxbw": "【已复现】Apache Kyuubi存在目录遍历漏洞(CVE-2025-66518)", "https://mp.weixin.qq.com/s/BqANmEaByskImgF74an8vg": "赛普EAP企业适配管理平台Download.aspx任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s/_Q8-EcMrlMFC6oz4o3K4aw": "【安全圈】威胁行为者声称泄露 NordVPN Salesforce 数据库及源代码", "https://mp.weixin.qq.com/s/IQ4tVm7C4retnqGZG_CrVQ": "【复现】GNU Wget2 目录穿越漏洞(CVE-2025-69194)", "https://mp.weixin.qq.com/s/xY5WyLnusFNipKEglJdKww": "0113.Java 应用程序中的 ZIP 滑移导致远程命令执行", "https://mp.weixin.qq.com/s/NywdadLoz5K_vCrAuuadBQ": "自证安全,聊聊 Spring Framework 鸡肋漏洞 CVE-2024-38816∕CVE-2024-38819 的破局之道", "https://mp.weixin.qq.com/s/8bv5hyDFkN4SV6F2lHnJnQ": "周六开课!OSCE³ 之 OSED 漏洞利用实战,错过再等半年", "https://mp.weixin.qq.com/s/sA007cm0KmkfpinrXvjXPg": "攻击者利用FortiWeb漏洞部署Sliver C2进行长期访问", "https://mp.weixin.qq.com/s/4_BbRVq7jC-cOrfuaCsTlQ": "Shiro漏洞利用工具,更新V0.2!", "https://mp.weixin.qq.com/s/LNNSpvpz2n8rcGcOKazrSg": "无法修补的漏洞:PS5 BootROM密钥遭泄露,索尼安全防线崩塌", "https://mp.weixin.qq.com/s/cBCBE3Y1HEL_EutIEWwT0Q": "盘点 2025 年度重大安全漏洞", "https://mp.weixin.qq.com/s/I1_2E9OyxySwWy0KqQdJXg": "ComfyUI-Manager 远程代码执行漏洞通告", "https://mp.weixin.qq.com/s/32RDUxdOPp30dZXjbfN4OQ": "盘点 2025 年度重大安全漏洞", "https://mp.weixin.qq.com/s/0zrePFJB2PcKMC9k2AstYA": "edu漏洞挖掘:任意密码重置管理员账户&getshell", "https://mp.weixin.qq.com/s/5hFAYMoPZmJgEd8BqBP41w": "【安全圈】WhatsApp 漏洞泄露用户元数据,包含设备操作系统信息", "https://mp.weixin.qq.com/s/i98edy4KN8qXhAXyTnhSxQ": "【接口漏洞第三章第二节】解锁API漏洞宝藏:从请求方法与内容类型切入", "https://mp.weixin.qq.com/s/7-OzLX5aYHzcriDXh-LTuw": "邀测&直播|安全知识智能体应用与AI 漏洞猎人更新", "https://mp.weixin.qq.com/s/ckKhjpaay-QY1BZlLMTLSQ": "CISA KEV 清单共收录1048个已遭利用漏洞,2025年增长20%", "https://mp.weixin.qq.com/s/253yXeH8FmulA8ay2UI_yg": "【漏洞通告】jsPDF 本地文件包含与路径遍历漏洞(CVE-2025-68428)", "https://mp.weixin.qq.com/s/H1uz4SeNiB-7ME_H2YUAUA": "谷歌在安卓一月更新中修复了杜比解码器的关键漏洞", "https://mp.weixin.qq.com/s/T-P3x8qdqp3SVR596ifiDw": "「赏金」轻松赚外快:一个漏洞带来的500元赏金实录", "https://mp.weixin.qq.com/s/EEmZGosm8vYf_sqoF8ct4g": "2025年十大野外利用的高危漏洞", "https://mp.weixin.qq.com/s/E4GTAs8LTaGti3aGXgyZ0w": "看完本文再也不怕网安通报“明文传输” “TLS版本低”漏洞了", "https://mp.weixin.qq.com/s/fSToZr5YWFFC78f0oCeMlQ": "1day | 东方通TongWeb ejbserver 远程代码执行漏洞", "https://mp.weixin.qq.com/s/LX-j70AqTHn_77iaLjBi0A": "漏洞预警 | LangChain序列化注入漏洞", "https://mp.weixin.qq.com/s/b6ni0QVYvC1CpL2dzUVjXg": "漏洞预警 | 天锐绿盾审批系统fastjson反序列化漏洞", "https://mp.weixin.qq.com/s/aU_lECDINaGEtnVi_ktAlA": "n8n 最新严重漏洞允许攻击者执行任意命令", "https://mp.weixin.qq.com/s/TSsGqGVoaapzGditijepig": "邀测&直播|安全知识智能体应用与AI 漏洞猎人更新", "https://mp.weixin.qq.com/s/7DuolL50JXhmro4SKY0oFg": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s/xDcynTtmWq0z6zs_b0dwiA": "漏洞情报(已验证) | 时空智友企业流程化管控系统formservice 存在 XXE漏洞", "https://mp.weixin.qq.com/s/yHFE8yAi-L_BSx8Or889eA": "如何避免被割韭菜之快速获取0day漏洞详情", "https://mp.weixin.qq.com/s/SPhOwdWh8k1DGQELZW4uKg": "先知通用软件漏洞收集及奖励计划第十期 正式开始!", "https://mp.weixin.qq.com/s/B4zmWyT2OG_VCL22QWoscw": "一次“简单的信息收集”如何挖出了一个微软高危漏洞,并获得 MSRC 漏洞奖金", "https://mp.weixin.qq.com/s/kjqGeqUr0xpstWoIoCQU2A": "信息安全漏洞周报(2025年第53期)", "https://mp.weixin.qq.com/s/fOHrg6yFudYwGUAaH6WhKw": "【已复现】n8n Pyodide 命令执行漏洞(CVE-2025-68668)", "https://mp.weixin.qq.com/s/7SP3D14bsH625rD7Tvm4zA": "挪威Xplora儿童手表曝“万能钥匙”漏洞,黑客可监听通话与篡改定位", "https://mp.weixin.qq.com/s/pOVuTLkag3mgMQs7LnjYzA": "漏洞挖掘实战系列(第3期):Web专项(下) 权限类+新兴漏洞,拿下剩余40%分值", "https://mp.weixin.qq.com/s/vPFMF7IJgp_3Di2wI55mYg": "零日 Chronomaly 漏洞利用可获取易受攻击的 Linux 内核的 root 权限", "https://mp.weixin.qq.com/s/1FZadgK2TOsHh7KknZgqGw": "PHP数组漏洞实战", "https://mp.weixin.qq.com/s/kqxNGA1X0XTdj8SV60UfNg": "ShiroEXP - Shiro漏洞综合利用工具 - 2.0版本发布", "https://mp.weixin.qq.com/s/zoQ2buJoOD-GnsaODbiLqw": "高危漏洞威胁情报合集 (2026-01-05~2026-01-07)", "https://mp.weixin.qq.com/s/z1NfdvfyHk0xilT7n1mkiw": "【免费领】新手必备!Web安全漏洞挖掘实战入门教程", "https://mp.weixin.qq.com/s/1Uehdvvgni1_AyF6mlj-nw": "苹果新型TCC绕过漏洞,macOS面临自动化攻击风险", "https://mp.weixin.qq.com/s/0QccRGPznspVX_qjpTxNrQ": "【接口漏洞第三章第三节】API漏洞挖掘实录:从GET到PATCH,我是如何实现“0元购”的", "https://mp.weixin.qq.com/s/_R_8SRppwuKjsTU2w4xFDQ": "零人工干预!全球首例 AI 智能体锁定 CVSS10 分高危 RCE 漏洞", "https://mp.weixin.qq.com/s/fxONDnqt1O99jrVXBdarKA": "【已复现】jsPDF目录穿越导致本地文件包含漏洞(CVE-2025-68428)", "https://mp.weixin.qq.com/s/obVVDvYaLdOL_s29SHoLbg": "【漏洞通告】Apache Kyuubi 目录访问控制绕过漏洞(CVE-2025-66518)", "https://mp.weixin.qq.com/s/4sAXdiYhp6t1SCDeJtoOQg": "【已复现】ComfyUI-Manager 远程代码执行漏洞(CVE-2025-67303)安全风险通告", "https://mp.weixin.qq.com/s/5oXvc-2_RZ8D1iNjP4GV4g": "全球首例!AI智能体自主发现满级评分RCE漏洞", "https://mp.weixin.qq.com/s/Arbdt-3erdFjj2-dcGxQvw": "攻击面大迁移:从网络漏洞到身份漏洞的变化", "https://mp.weixin.qq.com/s/gcX6BkC-x3f_lNSJ7PhYng": "【安全圈】0Day漏洞Chronomaly可获取Linux内核root权限", "https://mp.weixin.qq.com/s/WvzY4wIJkN8esNhjgMi7ZA": "【安全圈】D-Link 多款老旧 DSL 网关路由器被曝命令注入 0day,已遭野外利用", "https://mp.weixin.qq.com/s/Irh0jVBK_sHmpnRSTLIIMg": "自动化漏洞探测工具 -- MCP-GraphQL(1月5日更新)", "https://mp.weixin.qq.com/s/Wnkc6clygIcIkvU181f-zQ": "【已复现】GNU Wget2存在目录穿越漏洞(CVE-2025-69194)", "https://mp.weixin.qq.com/s/NBEo3GMKdGBxWjeK0oYPDg": "jsPDF 本地文件包含∕目录遍历 (CVE-2025-68428)", "https://mp.weixin.qq.com/s/YW_Mqx_QepBTFMWMjCSEsQ": "D-Link:遗留 DSL 路由器中存在已遭利用漏洞,速修复", "https://mp.weixin.qq.com/s/RQPNqUdLF3_7OlbjS86WEA": "携手护程 感恩有你 | 携程SRC 2025年度漏洞贡献值排行榜奖励揭晓", "https://mp.weixin.qq.com/s/8iMo3jDtX2BHpdeY7fY9-w": "CVE-2025-6389 — WordPress 严重零日漏洞(远程代码执行)", "https://mp.weixin.qq.com/s/Pz5CsfFzKMp7S5pgt_FBJQ": "安卓音频解码组件曝高危漏洞,可致恶意代码执行,谷歌紧急发布补丁", "https://mp.weixin.qq.com/s/M76PZ6lwInelr_bIiRJUBQ": "【接口漏洞第三章第三节】API漏洞挖掘实录:从GET到PATCH,我是如何实现“0元购”的", "https://mp.weixin.qq.com/s/06uaTTcW9QZaNjQqbXA6Xw": "【接口漏洞第三章第二节】解锁API漏洞宝藏:从请求方法与内容类型切入", "https://mp.weixin.qq.com/s/qHwAQd4YXnoSj6y8XZzs6g": "VulnHunter AI - 漏洞猎人:一款颠覆性的AI智能漏洞扫描工具", "https://mp.weixin.qq.com/s/bcaHmWkL7Q5zaoWVBJEYpw": "CVE-2025-55182 - Next.js-Exploit-Tool 图形化综合利用工具", "https://mp.weixin.qq.com/s/LgAI6Ccnk0ZWzecEDzSSJQ": "国内用户需警惕黑客正积极利用老款D-Link DSL路由器中的关键远程代码执行漏洞", "https://mp.weixin.qq.com/s/-nghD_fOJ0cQX6Q4UVOAIA": "【高危漏洞预警】jsPDF本地文件包含漏洞CVE-2025-68428", "https://mp.weixin.qq.com/s/_vYf3RjwlWDXRfklmFXx3w": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s/tN7dMFQtJBZjct4rS6E-CA": "从 JavaScript 到 BurpSuite 的高效漏洞挖掘实战指南", "https://mp.weixin.qq.com/s/6U78YnlP7S8oacRS7bELQg": "漏洞复现 | 东方通TongWeb upload接口存在任意文件上传漏洞", "https://mp.weixin.qq.com/s/RgAsNu94e-QIFmRh-GbnlA": "漏洞预警 | 东胜物流软件SQL注入漏洞", "https://mp.weixin.qq.com/s/7muIh50w79vyXwXT2W02jg": "【高危漏洞预警】ComfyUI-Manager远程代码执行漏洞CVE-2025-67303", "https://mp.weixin.qq.com/s/9fBFQxdUxFoRMJNDe-l2Lw": "安全测试效率翻倍!自动化资产测绘+漏洞扫描", "https://mp.weixin.qq.com/s/MZ6mO1t439N2OM5vbKTUAQ": "漏洞预警 | PublicCMS命令注入漏洞", "https://mp.weixin.qq.com/s/dvh7HGKH_6FVmn03LEQoMg": "「攻防演练」某采购系统1day任意文件下载到RCE", "https://mp.weixin.qq.com/s/oLifiaCiKhBqRT3YQS4N8g": "某次漏洞排查引起的漏洞", "https://mp.weixin.qq.com/s/0ODnsyttQICtXtzakj7DYw": "CVE-2025-60262:H3C无线设备严重配置错误,黑客可控制该设备", "https://mp.weixin.qq.com/s/6Y2Q9oZ9IS9mWTC9iEOQRw": "昂捷CRM系统存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s/J5iqZMu3rYfDynpIKO6QFw": "Ni8mare高危漏洞曝光:n8n自动化平台面临未授权全面接管风险", "https://mp.weixin.qq.com/s/Vufw1SzvJNa9ArLecqnlAQ": "漏洞挖掘实战系列(第 4 期):Pwn 专项(上)——从看懂到 getshell", "https://mp.weixin.qq.com/s/yeH3xhTDwP-s1NzxnUJjkg": "【高危漏洞预警】n8n远程代码执行漏洞CVE-2026-21877", "https://mp.weixin.qq.com/s/PFAwt0BJGitiV6j5Rojk7w": "未授权漏洞渗透技巧总结分享(十)", "https://mp.weixin.qq.com/s/qnXWZ7Dj7arOg5SVG-xBFg": "蓝队利器、溯源反制、NPS 漏洞利用、NPS exp、NPS poc、Burp插件、一键利用", "https://mp.weixin.qq.com/s/NH1SQHsOvlHhtpxOjqegEw": "我是如何发现一个 Windows RCE 的", "https://mp.weixin.qq.com/s/mJtd8lPrU15Pt-aBvmX1UQ": "京东云路由器曝严重漏洞,黑客可直接获取 root 权限", "https://mp.weixin.qq.com/s/hfJGax9hV3BG9dOKIQOqtQ": "D-Link老款DSL路由器被曝在野利用漏洞", "https://mp.weixin.qq.com/s/gCVLDBcv3A6cHnm62pdyTg": "驰骋BPM低代码开发平台 RichUploadFile 任意文件上传漏洞", "https://mp.weixin.qq.com/s/gRI-G36OS3FbAffFnkvCTw": "Veeam 修复备份恢复软件中的一个9分高危RCE漏洞", "https://mp.weixin.qq.com/s/WgT1-3_DfwGOJ-EZx12s4A": "jsPDF 高危漏洞可窃取服务器密钥及配置文件", "https://mp.weixin.qq.com/s/72-wGfQNZT7hmZ_v8ccnQg": "【已复现】CVSS 10.0 满分漏洞,n8n 未授权文件访问漏洞可远程代码执行(CVE-2026-21858)", "https://mp.weixin.qq.com/s/738H_a30VQZJ5fq7V_LoIA": "M-SEC 漏洞社区福利活动重磅来袭!", "https://mp.weixin.qq.com/s/QGJOtU2xDxIG8UZuzdFpsw": "CVE-2026-21877:n8n 存在认证远程代码执行漏洞", "https://mp.weixin.qq.com/s/C0Uy2ebKB7IyGoDQfoTlzg": "Nacos 漏洞利用总结", "https://mp.weixin.qq.com/s/8n4fLjpA7BydcLjPA_bjtA": "【已复现】n8n 远程代码执行漏洞(CVE-2026-21858)安全风险通告", "https://mp.weixin.qq.com/s/E3pSbQBXpa7TVIZwhf-vfw": "网安实验干货每日分享Tomcat任意文件上传(CVE-2017-12615)-0108", "https://mp.weixin.qq.com/s/L64Q_Rf1ZC_vM4U6skeqng": "【扩充版】“任意用户漏洞”全景手册 20+ 实战案例", "https://mp.weixin.qq.com/s/ezMAgrMG82zFRfm1E-MO5Q": "【风险提示】MongoDB高危漏洞爆发!速查!!!", "https://mp.weixin.qq.com/s/Q2siDO0_xGYbvwPzbOaP_Q": "蓝凌OA漏洞利用总结", "https://mp.weixin.qq.com/s/OT_eiXOGfDf2l7D6fq-pIQ": "【已复现】n8n 前台远程代码执行漏洞(CVE-2026-21858)", "https://mp.weixin.qq.com/s/AU9RXBp44RhMTV904AcRKA": "【安全圈】安卓 ∕ Linux 内核高危漏洞 CVE-2025-38352 验证性利用代码已公开", "https://mp.weixin.qq.com/s/NBUe4Dd_wtmcqdx4WBnkJw": "【安全圈】GoBruteforcer 僵尸网络全球攻击 Linux 服务器,5 万台公网服务器面临风险", "https://mp.weixin.qq.com/s/SW0lK1tkMKy4kZp75QCOQg": "自动化平台n8n曝高危漏洞CVE-2026-21858,10万服务器面临接管风险", "https://mp.weixin.qq.com/s/c5B5ZoxefiBiXe508mJUig": "RuoYi-4.6.0代码审计之SQL注入漏洞", "https://mp.weixin.qq.com/s/pJUqfDpIlO2W_EjpsoS0FQ": "指纹识别+精准化 POC 攻击", "https://mp.weixin.qq.com/s/SDB4K0KqBlLAU9XKa45LJQ": "2025年12月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s/Ad6eB5A_OqdHTb5lnI8yPQ": "n8n 满分漏洞 Ni8mare 可导致服务器遭劫持", "https://mp.weixin.qq.com/s/9cJkv84S0QsPngqElYpr3Q": "Veeam 修复备份服务器中的RCE漏洞", "https://mp.weixin.qq.com/s/-N1zflcEp9hrdPxEBk7oIA": "【安全圈】三星 SSD 管理软件曝高危漏洞", "https://mp.weixin.qq.com/s/ZH8WqVbJkrbJdGvD5E_rSQ": "2025年12月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s/uc2NAhKIHqc5XHfcy4U5dg": "【高危预警】Veeam备份软件曝出 CVSS 9.0 远程代码执行漏洞,勒索软件可利用其破坏备份数据", "https://mp.weixin.qq.com/s/RkoaOPT2SHSLU1qLHgO-tg": "黑客利用0Day漏洞工具包在野攻击VMware ESXi实例", "https://mp.weixin.qq.com/s/4Y3mPSZ0hBmlLyni7xjVKQ": "【已复现】ComfyUI-Manager存在远程代码执行(CVE-2025-67303)", "https://mp.weixin.qq.com/s/cJ_wE479L1ASzLrW9ojZWA": "高危漏洞威胁情报合集 (2026-01-08)", "https://mp.weixin.qq.com/s/fXWXAQePehmW8wCHTWIjXA": "ByteSRC开年首测|火山引擎AI业务单个漏洞赏金10万元!", "https://mp.weixin.qq.com/s/xtGFMRLNafQ27jLNRRDPeA": "DLL 劫持复现记录(显式加载)", "https://mp.weixin.qq.com/s/sbqRMy26Ep11ToJpgVV4Ag": "【接口漏洞第三章第四节】进阶实战:如何用 Burp Intruder “暴力推理”出隐藏的API端点?", "https://mp.weixin.qq.com/s/bDfdME5ie6Nmwz2S7Ao_dg": "【附POC及复现环境】n8n双CVE漏洞利用链可致远程代码执行漏洞(CVE-2026-21858+CVE-2025-68613)", "https://mp.weixin.qq.com/s/8XdsB9mCjaoxjL9PtZzYag": "【安全圈】黑客利用0Day漏洞工具包在野攻击VMware ESXi实例", "https://mp.weixin.qq.com/s/5GRQbN_ZqpiiOGKib41FsA": "【论文速读】| 用于软件供应链安全自主防御的Agentic AI:从溯源到漏洞缓解", "https://mp.weixin.qq.com/s/M3euwAuL5jBaPTPTc8RBYg": "【漏洞通告】n8n Webhook 请求处理不当导致未经身份验证的文件访问漏洞(CVE-2026-21858)", "https://mp.weixin.qq.com/s/U8qYF4Y3SmTPARPEJjFSVA": "【已复现】ComfyUI-Manager 远程代码执行漏洞(CVE-2025-67303)", "https://mp.weixin.qq.com/s/jlBpcZBdlq_P_tQZZCQZDA": "【已复现】n8n任意文件读取到沙箱逃逸 RCE(CVE-2026-21858)", "https://mp.weixin.qq.com/s/u5lm3LJFVihrD5LjZy1ASw": "【漏洞通告】n8n 远程代码执行漏洞(CVE-2026-21877)", "https://mp.weixin.qq.com/s/dWmRxao4XEsljlnAy9CTvg": "最新Nessus2026.1.8版本主机漏洞扫描∕探测工具Windows∕Linux下载", "https://mp.weixin.qq.com/s/GPFRhF3sg7RbC8DrGl_uGA": "本地电脑没有PIN密码也可以实现文件窃取? Windows11WinRE权限控制绕过漏洞演示", "https://mp.weixin.qq.com/s/VC9B3Jg5EKFQWV4RhTk3PQ": "JeecgBoot积木报表getDataSourceByPage接口存在敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s/XjIhvLLOTEtWmVeKBMqkYg": "2025年十大高风险漏洞及其在实际攻击中的应用", "https://mp.weixin.qq.com/s/It_8VnOhiNNAYzesd46gdw": "Apt_t00ls:Java 开发的OA设备高危漏洞集成利用工具", "https://mp.weixin.qq.com/s/bPbE8xXw4URxpDUIQiNE0Q": "MongoDB高危漏洞已被积极利用", "https://mp.weixin.qq.com/s/Np_-ztLJOq__mGmJjygvRA": "n8n Ni8mare - 未经认证的任意文件读取到远程代码执行链 (CVSS 10.0)", "https://mp.weixin.qq.com/s/BOVBEHDQRESrN7W4UWcCbw": "详析 n8n 超危漏洞(CVE-2026-21858)如何从文件上传一路打到服务器沦陷", "https://mp.weixin.qq.com/s/iMW2TJ6EBiYZWbh-ryjwqw": "漏洞预警 | 天锐绿盾审批系统fastjson反序列化漏洞", "https://mp.weixin.qq.com/s/n9452S8b-YHHXDgY8BmXQA": "【梆梆安全监测】安全隐私合规监管趋势及漏洞风险报告(1207-1220)", "https://mp.weixin.qq.com/s/ImWkdpZqw_g1FA3HG5k2WA": "【首发POC】n8n Python代码节点沙箱绕过导致系统命令执行 (CVE-2025-68668)", "https://mp.weixin.qq.com/s/AApuS7Q0rehhB0tBYYfTyw": "【已复现】n8n 前台远程代码执行漏洞(CVE-2026-21858)", "https://mp.weixin.qq.com/s/SmuxnPtTdB96ts4DzHYE0A": "黑客利用0DAY漏洞利用工具包攻击 VMware ESXi 实例", "https://mp.weixin.qq.com/s/p38IHTQNF-8KP2Efb7sLJw": "漏洞预警 | Zimbra本地文件包含漏洞", "https://mp.weixin.qq.com/s/448_eq5z7NCC6E08ORpRBA": "如何挖掘SRC中的支付漏洞", "https://mp.weixin.qq.com/s/CMgG-lUg4xwBCsuSbBAyYQ": "漏洞复现 | Samsung MagicINFO 9 Server 路径遍历导致任意文件写入漏洞(CVE-2025-4632)", "https://mp.weixin.qq.com/s/Q2Rdiwgz2bxGEZwtA_HxCg": "东胜物流软件 FileExport.aspx 任意文件读取漏洞", "https://mp.weixin.qq.com/s/jsKOyPq22TGjnSlAb-KvJQ": "n8n Ni8mare - 未经认证的任意文件读取到远程代码执行链 (CVSS 10.0)", "https://mp.weixin.qq.com/s/k8iNMmUY3uVpe-yW0Ns1fw": "最高级别的 n8n 漏洞允许随机用户接管服务器", "https://mp.weixin.qq.com/s/8sOwQ3_-XWC84JOoRQjCuw": "Linux电池实用程序漏洞允许绕过身份验证和篡改系统", "https://mp.weixin.qq.com/s/5GqRvclnjNh67egnYibZGQ": "Linux脏牛提权漏洞复现", "https://mp.weixin.qq.com/s/E-Y5ggi63OBlL9-dQ2YgNQ": "网安实验干货每日分享IIS6.0文件解析漏洞特殊符号\"∕\"–0109", "https://mp.weixin.qq.com/s/Ki-fPXPBNUFWxqQgAD-qcQ": "漏洞预警 | 金和OA SQL注入和XXE漏洞", "https://mp.weixin.qq.com/s/a_2doPRjkA4aB6dsXmRA6g": "【已复现】SmarterMail存在文件上传漏洞(CVE-2025-52691)", "https://mp.weixin.qq.com/s/CiMdkibcYiyYrQ5P_dCBPQ": "某赛通Nday漏洞分析", "https://mp.weixin.qq.com/s/kR7hgM6g1hXU2CS0MtMuMw": "【已复现】SmarterMail 邮件服务器任意文件上传漏洞(CVE-2025-52691)安全风险通告", "https://mp.weixin.qq.com/s/47eKj7vlfpUnzO3-9j5wvw": "【0day预警】ComfyUI-Manager CRLF注入导致远程代码执行漏洞", "https://mp.weixin.qq.com/s/4SngbeUncM3lZ31vbXnt3A": "【一马当先,洞见金甲】微众银行SRC新春专享漏洞挖掘激励计划", "https://mp.weixin.qq.com/s/h2G0STVzVlsv43n_Nw1s7w": "【已复现】ComfyUI-Manager 远程代码执行漏洞(QVD-2026-2759)安全风险通告", "https://mp.weixin.qq.com/s/ic_1TCloI5b8hdGh5zD1Ng": "n8n RCE 101:CVE-2025–68613 漏洞分析", "https://mp.weixin.qq.com/s/G8_DI-HJqe8GuB0zTLDnGg": "Webpack打包js.map泄露导致的通杀0day", "https://mp.weixin.qq.com/s/g0mfL12GusM5L-9dkmcGLQ": "周日20点直播 | FART14秒脱海外加固厂商dexprotector加壳app", "https://mp.weixin.qq.com/s/1MKJ7rDMWKrjjQmTJ7w-hQ": "【玄域靶场】漏洞报告里挖思路,玄域靶场中练实操-实战漏洞报告板块已上线!", "https://mp.weixin.qq.com/s/ZAqKEmc_j1VurL4d-DM1xA": "海湖庄园的秘密:委内瑞拉行动中的国家安全漏洞", "https://mp.weixin.qq.com/s/3N-2AyhPAUa3zckkXXMKGA": "【在野利用】Cursor命令执行漏洞", "https://mp.weixin.qq.com/s/f5bLH6n9V_-oSedvH_QvSA": "攻防场景Cursor实战化挖掘漏洞--从2天到20分钟", "https://mp.weixin.qq.com/s/zKxDRzdWGHHbSWlW1yVfNg": "【附POC及复现环境】SmarterMail未授权任意命令执行漏洞复现(CVE-2025-52691)", "https://mp.weixin.qq.com/s/RBfSscMqiQh4_HsAFrvLXg": "通用 | 春节第三趴,提交几个漏洞能拿万元奖励金∕大疆运动相机?(文末抽奖)", "https://mp.weixin.qq.com/s/xPDUHApz5a82Cq9OmM4JVA": "漏洞通告|n8n远程代码执行漏洞(CVE-2026-21858)", "https://mp.weixin.qq.com/s/VoJOaP_A909qRPBO1Z0s_g": "JWT安全解析:从设计哲学到致命漏洞", "https://mp.weixin.qq.com/s/7fPL8gnvt4X0loaJ1qzPgA": "RuoYi 后台SQL注入漏洞系列2", "https://mp.weixin.qq.com/s/gI-FeyGB6lqjwl_oxCVd8A": "【漏洞通告】n8n 远程代码执行漏洞(CVE-2026-21858)", "https://mp.weixin.qq.com/s/shTMNLrCeSsSopiXlr0gpg": "【已复现】SmarterMail 路径遍历漏洞可导致未授权远程代码执行,EXP 已公开(CVE-2025-52691)", "https://mp.weixin.qq.com/s/XKaWRWSjITR_gAmEicCXNg": "警惕跨境暗雷!韩国漏洞微基站遭改装,悄然流入中国窃隐私", "https://mp.weixin.qq.com/s/T2aLxuN0qYCmEOzvA3kX1Q": "【安服水洞系列】Dify API密钥明文暴露漏洞", "https://mp.weixin.qq.com/s/Rp8EFclSWfusZB_oz6111g": "[漏洞复现]ComfyUI-Manager(CVE-2025-67303)", "https://mp.weixin.qq.com/s/iphfIov5Xh5b9_1jtb7row": "漏洞挖掘实战系列(第6期):Pwn高阶实战 格式化字符串+ROP进阶,拿下CTF高分题", "https://mp.weixin.qq.com/s/o7MKM0mkuwf8-A_HmRbAQw": "用友漏洞综合利用工具", "https://mp.weixin.qq.com/s/RS65vp0q2j0BJo04lYosiw": "【三星】固态硬盘管理软件高危漏洞CVE-2025-57836", "https://mp.weixin.qq.com/s/crn9SrQjYFXTVoNudu4u3g": "ChatGPT“僵尸代理”攻击:新型零点击漏洞如何窃取你的邮件、记忆与一切", "https://mp.weixin.qq.com/s/eR9gg79sMVp29TgI89b3dQ": "【安全圈】思科交换机DNS客户端漏洞事件", "https://mp.weixin.qq.com/s/vYZMkiZTH10OTJENxdbU8w": "n8n远程代码执行高危漏洞-最高严重性漏洞", "https://mp.weixin.qq.com/s/UFsv2FqD2J6kzSZtv7LlKw": "【在野利用】HPE OneView 远程代码执行漏洞(CVE-2025-37164)", "https://mp.weixin.qq.com/s/CAp7sX2hp_uUPucKyAy_gA": "ChatGPT漏洞可致攻击者窃取Gmail、Outlook和GitHub敏感数据", "https://mp.weixin.qq.com/s/G43e90kO_ZHL_xf3cHsAhQ": "GitLab 代码仓库平台中的 XSS 漏洞分析 $35,000", "https://mp.weixin.qq.com/s/ECGxZ46xSlwXJ-LSXwCoVA": "Jeecg综合漏洞利用工具", "https://mp.weixin.qq.com/s/viMlZCrDomoVLS-_fpv5yg": "【原创情报】IDA Pro MCP远程代码执行漏洞(CVE-2025-67117)", "https://mp.weixin.qq.com/s/eyn-2IgbYGj9QirZAkpfhQ": "2025年度十大云∕虚拟化高危漏洞盘点", "https://mp.weixin.qq.com/s/fCqFm2Y1y6Satmi2VYjHxA": "某学院找回密码逻辑漏洞测试案例", "https://mp.weixin.qq.com/s/1aMHuHb2-q_8pCeCn0kDQg": "Apache SIS XML外部实体(XXE)漏洞预警(CVE-2025-68280)", "https://mp.weixin.qq.com/s/xHdEhX88wiKrjfTHpFqnmQ": "漏洞复现 | 东方通TongWeb selectApp.jsp 存在任意文件上传漏洞", "https://mp.weixin.qq.com/s/PoN_pEQ8LjuPga3CjUTanw": "科汛新职教网校系统 checkPayStatus SQL注入漏洞", "https://mp.weixin.qq.com/s/jjUdwk5w2P7vAFHWZ3wPdg": "又是n8n!CVSS 10.0致命漏洞详解:从文件读取到RCE的“一条龙”攻击链", "https://mp.weixin.qq.com/s/hJb_D_r1s1oQwJG0uJOc9Q": "moodleRCE 独特的bypass思路", "https://mp.weixin.qq.com/s/VttDCTBhZUGlyJDh6WzTgQ": "Web篇 | 手把手拆解:小程序∕Web端加密鉴权绕过案例全复现", "https://mp.weixin.qq.com/s/my2C9M_XkSpEiasWVhmpGw": "美军最神秘、最精锐特种部队:三角洲(Delta Force)部队全景解析", "https://mp.weixin.qq.com/s/HlsbSb7qz20y8K71V7g91w": "【AI安全】核弹级漏洞!n8n 曝出“噩梦级”漏洞链 CVSS 10.0 满分", "https://mp.weixin.qq.com/s/Kv4KF5AEOPzQgVCqz0Yyiw": "僵尸网络攻击全球Linux服务器、ChatGPT曝高危漏洞|一周特辑", "https://mp.weixin.qq.com/s/845EVdBSVBJHLNSJT71W-g": "2026年需重点关注的3类高价值漏洞", "https://mp.weixin.qq.com/s/cHl07XF_Tjc-_pERgNJDsw": "Shiro漏洞利用工具,更新V0.2!", "https://mp.weixin.qq.com/s/L0yYNvi0E2o45Q4WGwCSiQ": "复现pgAdmin4 <= 9.10(CVE-2025-13780)漏洞利用", "https://mp.weixin.qq.com/s/2QiGOOH1Szw6YT3cl1qFcA": "Ruoyi单应用版本漏洞合集", "https://mp.weixin.qq.com/s/YnS9HNox5fCx8O-4MPCCrw": "GitLab 代码仓库平台中的 XSS 漏洞分析 $35,000", "https://mp.weixin.qq.com/s/sxctmnTyRF4Zix0mr7LUNg": "TikTok 账户恢复机制中的身份验证绕过漏洞分析 $12,000", "https://mp.weixin.qq.com/s/lpcWYaMZCRQCIoCU_D_1gw": "一个价值7万美刀的谷歌漏洞", "https://mp.weixin.qq.com/s/ahBCyjs25I6W5KqNaLEYCw": "【黑客】App如何抓包?玄域App漏洞靶场实操演示", "https://mp.weixin.qq.com/s/4chQzbF0T_9ta9jiCnWmLQ": "漏洞复现 | 汉王e脸通综合管理平台 uploadMapFile.do 任意文件上传漏洞", "https://mp.weixin.qq.com/s/8DHGJbxxLlReA4LND_7_Rw": "揭秘 SmarterMail 沉寂三个月后才公开的“满分”RCE 漏洞", "https://mp.weixin.qq.com/s/r1spDPzYcMvyE6yvUfNIbg": "【接口漏洞第四章第二节】隐藏参数挖不动?可能是你的 Param Miner 没配置对", "https://mp.weixin.qq.com/s/9D-6Lg91Mb1rx0mGGbhlPA": "CVE-2026-21440|AdonisJS远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s/kp7S_tLBtyWhwJTpWOnuxQ": "2025年微軟Windows系統最為嚴重的十大漏洞回顧", "https://mp.weixin.qq.com/s/sWeCFIPxGL-J6QutTF46dQ": "漏洞挖掘实战系列(第 7 期):跨场景移动端与物联网漏洞挖掘", "https://mp.weixin.qq.com/s/hIMFJhm7vCIoAxMatILLEg": "CVE-2025-54068|Livewire组件远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s/QIXURLRau9_4Si4u33FSMA": "Chrome WebView 漏洞(CVE-2026-0628)可绕过安全限制", "https://mp.weixin.qq.com/s/J0TGMVzeK7dN7Bi3iFAyCw": "2026开年第一漏洞!赶快检查Chrome浏览器(CVE-2026-0628)", "https://mp.weixin.qq.com/s/20H4sC5T2-FcfA4jPh70QA": "每周PDF资源:工业互联网渗透实战记录;12月企业必修安全漏洞;揭秘黑灰产AI的潘多拉魔盒;渗透测试行业术语扫盲", "https://mp.weixin.qq.com/s/LkenoQ5faJgHR-rctXp4jw": "东胜物流 GetDataList sql注入漏洞", "https://mp.weixin.qq.com/s/vz1WAaS17dhkSz6TsxaNfg": "高危漏洞威胁情报合集 (2026-01-11)", "https://mp.weixin.qq.com/s/8s-CXV14Bs_RAJQ5xjVJnQ": "【已复现】IDA-PRO-MCP 远程代码执行漏洞(CVE-2025-67117)", "https://mp.weixin.qq.com/s/80D0SdHgeQyTJGOuPY9IaQ": "Burpsuite插件:autorize实现抓包实时越权漏洞检测", "https://mp.weixin.qq.com/s/6npbcVqeOckA3v3fsl1rYQ": "新的UEFI漏洞使得针对技嘉、微星、华硕和华擎主板的预启动攻击成为焦点", "https://mp.weixin.qq.com/s/s6Lx1HQxSsrnTV756_nLlw": "缓解Web应用程序漏洞从了解OWASP Top 10开始", "https://mp.weixin.qq.com/s/B5GzGbRF9b3wNTNlSMR-Sg": "战报 | 常态化漏洞挖掘演习第一周已结束", "https://mp.weixin.qq.com/s/eJ_u0qKb2REo0LwJhT8pIg": "效率提升90% | 这款资产收集工具让漏洞挖掘更轻松", "https://mp.weixin.qq.com/s/U4gV259Ib4GImp-eqJq5Uw": "2026 年该挖什么漏洞", "https://mp.weixin.qq.com/s/L6E-CNUjVMlv0V43mVHKCw": "0115.意外泄露高危 ASP.NET 漏洞:一次咖啡休息如何导致他人个人身份信息泄露(以及 600 美元赏金)", "https://mp.weixin.qq.com/s/KoRZn7rDK8d1g0GMOaEKUQ": "漏洞预警 | 大华ICC智能物联综合管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s/a8424iGq9NXBjBwi2J3NJw": "企业SRC赏金漏洞挖掘实战-多个奖励条件绕过漏洞", "https://mp.weixin.qq.com/s/z5U8xKmwlWH6OJ3DbJtK2g": "一个功能强大的 Docker 远程 API 漏洞利用工具", "https://mp.weixin.qq.com/s/pdKBJ8xumh3bCOkjm0Xn9Q": "nOAuth风险追踪:漏洞或致Microsoft 365沦陷", "https://mp.weixin.qq.com/s/CAUmWPTKAGgw0kEw90j2Pw": "从入门到“被黑”?Coolify 这一波 Command Injection 教科书式漏洞解析", "https://mp.weixin.qq.com/s/5C8BWSqSDk2ZgEROpRSssg": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s/6ASsRbXNEWaJZ1NaBHXQyQ": "溯源实例-从OA到某信源RCE攻击", "https://mp.weixin.qq.com/s/8pBKz9PNCzi9edMmrwUVVw": "记一次漏洞挖掘经历", "https://mp.weixin.qq.com/s/EAaNPniqFtCuXKGWLVZHIg": "【漏洞专项】存储桶相关漏洞记录", "https://mp.weixin.qq.com/s/jJCueg1erODOlK2yep6Ydg": "漏洞预警 | SmarterMail文件上传漏洞", "https://mp.weixin.qq.com/s/2RoIhsFa20ev6kMjwLuRLg": "【黑客】App如何抓包?玄域App漏洞靶场实操演示", "https://mp.weixin.qq.com/s/560JUOm9pRT-8YKvi0nrtQ": "感谢支持!|地图大师 100+ SRC 靶场漏洞狩猎实录将于本周开课!末尾优惠上车!", "https://mp.weixin.qq.com/s/5W5QNCZL4lKd6yS9mOaDJA": "CVE-2025-68637:Apache Uniffle 严重漏洞使集群易受窃听", "https://mp.weixin.qq.com/s/xwiSH9SFnyWLNaxaoxnkWw": "用友时空 richclient.openForm XXE漏洞", "https://mp.weixin.qq.com/s/v7q1B3YOeTGy9hKcNNYvfw": "漏洞挖掘实战系列(第8期):CTF赛事实战策略 8小时高效得分指南", "https://mp.weixin.qq.com/s/EC64VtTDBHhFnJFF2MoorQ": "AI智能体常见漏洞挖掘与修复方法", "https://mp.weixin.qq.com/s/hBSY_2nwupnmfnwOqyC0AQ": "2025年度十大工业控制系统安全漏洞盘点", "https://mp.weixin.qq.com/s/geQUq3Ur3WqGMgTjqvNL_Q": "漏洞复现 | Letta-ai letta代码注入漏洞(CVE-2025-51482)", "https://mp.weixin.qq.com/s/kErXWJ8b1fKVRCD9TqAe4w": "WEB漏洞扫描工具HCL AppScan Standard", "https://mp.weixin.qq.com/s/e3bFJQodEh8IOg1VsoaJRg": "漏洞通告 | Apache Struts S2-069 XXE漏洞", "https://mp.weixin.qq.com/s/WtRrCRISddbHiKLu8PZvkw": "Ruoyi单应用版本漏洞合集2", "https://mp.weixin.qq.com/s/0ay3PYjDHDDGYN3o7IXgGQ": "GGML_GGUF 文件格式漏洞深度解读与挖掘思路", "https://mp.weixin.qq.com/s/-bzV4JijR9KnLNXIr0Ra1g": "泛微emobile6.5 6.6前台SQL注入漏洞分析", "https://mp.weixin.qq.com/s/YlgEO621i98D1R9foFPrBg": "【已复现】腾讯 WeKnora MCP服务命令注入漏洞(CVE-2026-22688)", "https://mp.weixin.qq.com/s/mKW4_gwhOW4aOphOFmwUeQ": "趋势科技:速修复这个严重的 Apex Central RCE漏洞", "https://mp.weixin.qq.com/s/rBJtZpLLZEvFQdzm5OiFcg": "网安实验干货每日分享IIS6.0文件解析漏洞特殊符号\";\"–0112", "https://mp.weixin.qq.com/s/J5Hm9nv8cJzz0xRfAxdZLg": "漏洞验证-大华ICC智能物联综合管理平台 ars∕list SQL注入", "https://mp.weixin.qq.com/s/7qYw0sxCut5e4EJbh4ujHw": "上周关注度较高的产品安全漏洞(20260105-20260111)", "https://mp.weixin.qq.com/s/-WuhwU3UumBOz7YiW80wgQ": "2644 万美元被盗背后:Truebit Protocol 合约漏洞分析", "https://mp.weixin.qq.com/s/TnBZP_CMD6O6_o9Lxlbk_Q": "CNVD漏洞周报2026年第1期", "https://mp.weixin.qq.com/s/V7HC4tki8NGSGgYTOIpGIw": "Ni8mare高危漏洞来袭 黑客可远程劫持n8n服务器", "https://mp.weixin.qq.com/s/Oo7tNm0Pe18oNjPalp9tJg": "推广漏洞的特殊思路 | 通杀国内主流互联网厂商的推广漏洞思路分享", "https://mp.weixin.qq.com/s/DvGT6wLRI6WI4rhCRUR7eg": "盘点 2025 年度重大安全漏洞", "https://mp.weixin.qq.com/s/3OFcdQi6cKQrvcV2vyKbUQ": "【漏洞分析】LlamaIndex SQL2RCE漏洞分析(CVE-2024-11958)", "https://mp.weixin.qq.com/s/74CNvcldCWskbjUBJF0xdw": "Java Apps 严重漏洞可用于劫持会话", "https://mp.weixin.qq.com/s/EV0ozNPsX5GBNBYp-TtNEA": "CVE-2026-22184 (CVSS 9.3):zlib 严重漏洞导致全局缓冲区溢出", "https://mp.weixin.qq.com/s/EFjLvjF7nPW7ioMDCkEYWg": "一次基础漏洞复现:布尔值篡改与业务参数校验缺失分析", "https://mp.weixin.qq.com/s/svzVjtLzvKpbZqEL-Tl4LA": "注意升级|Struts2曝高危漏洞S2-069(CVE-2025-68493)", "https://mp.weixin.qq.com/s/PDbvdItuv0O2S_MROJfIlA": "CNVD漏洞周报2026年第1期", "https://mp.weixin.qq.com/s/jm38WkUfXDzx6Ng-xhDxPg": "【高危漏洞预警】WeKnora命令注入漏洞CVE-2026-22688", "https://mp.weixin.qq.com/s/O0797gUJdM5e50pPDV3Gmw": "安全热点周报:D-Link 老旧 DSL 路由器曝新漏洞,正遭黑客活跃攻击", "https://mp.weixin.qq.com/s/1023cg9IvJXWb1MY_-TLTw": "撕开edu防线:前端的一次密码判断到3个高危漏洞", "https://mp.weixin.qq.com/s/lA10M7cBWZIEBCX2GJBsvA": "【520】【有靶场】【已复现】n8n双CVE漏洞利用链可致远程代码执行漏洞(CVE-2026-21858+CVE-2025-68613)", "https://mp.weixin.qq.com/s/q3t2ev3NGuQDqELXEpWTPw": "【工具推荐】Shiro漏洞综合利用工具-v2.1版本更新", "https://mp.weixin.qq.com/s/ca1zjXlmUEZIIIn6Oyg0IA": "【案例】通达OA任意文件上传绕过+Udf绕过RCE的故事", "https://mp.weixin.qq.com/s/wB3uv8vnBUcRnlVYTSj_Og": "【敬请期待】记下来会更新几期常见的人性漏洞有哪些", "https://mp.weixin.qq.com/s/egjnrCAH-mtzj_kR1tHFew": "游戏工具变后门?InputPlumber高危漏洞曝光,Linux游戏玩家面临劫持风险", "https://mp.weixin.qq.com/s/gv7k6uDIkciFoAXdlIolQw": "【漏洞通告】Apache Struts XWork 组件 XXE 漏洞(CVE-2025-68493)", "https://mp.weixin.qq.com/s/4bDn2N9oKAgvBMCHqSiZHw": "高危漏洞威胁情报合集 (2026-01-12)", "https://mp.weixin.qq.com/s/bY4X_NbToiE36oXSVFrqPw": "【玄域】App系列漏洞靶场已更新-新增3个App版本的JWT系列靶场", "https://mp.weixin.qq.com/s/zJaHUYFOuo0qs_QAHCks_g": "【接口漏洞第五章第一节】当API“过度热心”:批量赋值漏洞的狩猎笔记", "https://mp.weixin.qq.com/s/-KHeodmYpguuA34OstX4kw": "CVE-2025-68428_PoC", "https://mp.weixin.qq.com/s/_3rgR74lYIoxdgu-RbMuRw": "n8n Ni8mare - 未经认证的任意文件读取到远程代码执行链 (CVSS 10.0)", "https://mp.weixin.qq.com/s/dR-8ycJ3Ws-b9tKgJprNnQ": "漏洞预警 | AdonisJS路径遍历漏洞", "https://mp.weixin.qq.com/s/JQ2OOqsz2jZThLgO0B--vg": "CVE-2025-52694 (CVSS 10):研华 SQL 注入漏洞严重,物联网设备面临风险", "https://mp.weixin.qq.com/s/TDfAcmrHqRDY5aKBJLW8Cg": "黑客利用0Day漏洞工具包在野攻击VMware ESXi实例", "https://mp.weixin.qq.com/s/PJzyTgExzP10ox6NTRKviA": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s/xfUsH8kbI17P6gfzMbpPyg": "ComfyUI-Manager RCE链组合拳", "https://mp.weixin.qq.com/s/1qTDnP6CcY3sud0d0pGJnQ": "Apache Struts 2严重漏洞可能让攻击者窃取敏感数据", "https://mp.weixin.qq.com/s/7kAJRKLVmiONrSCjVZF2vg": "【好靶场】存在逻辑漏洞-导致评论区消失且用户无法评论", "https://mp.weixin.qq.com/s/i7fdsk7xfQz7QEqMGK6TEw": "千万罚款预警!AI安全纳入法治监管,ZoomEye Pro助力企事业单位识别AI资产和漏洞!", "https://mp.weixin.qq.com/s/gI2wDmhiQCv0XJkyBVvz5g": "低成本玩转SDN:实测OpenDaylight资源消耗仅1.1GB,完美纳管华为设备,开源方案真香!", "https://mp.weixin.qq.com/s/0FDgQC5oRj_aakIGDBIsBA": "漏洞预警 | 天锐绿盾审批系统fastjson反序列化漏洞", "https://mp.weixin.qq.com/s/yONzIqDvVGjtOZkiwBpSOw": "2025 龙信杯复现 WP", "https://mp.weixin.qq.com/s/XlUofotbXqt9pIhEKLtwFg": "jeecgBoot漏洞利用工具", "https://mp.weixin.qq.com/s/VOhHgm_Cndza2O1g0w-5CQ": "React Router严重漏洞可用于访问或修改服务器文件", "https://mp.weixin.qq.com/s/qcCts4XcvV8XbHFdyEMdYA": "漏洞挖掘实战系列(第9期):职业进阶篇 从CTF选手到网络安全工程师,技能转化+求职指南", "https://mp.weixin.qq.com/s/eB14Ff6ZYbTZLsVK1gcYZA": "【漏洞预警】Sangfor 运维管理系统 文件上传漏洞", "https://mp.weixin.qq.com/s/oHi69_f0zSwM-pRBGH0hqQ": "jsPDF 本地文件包含∕目录遍历 (CVE-2025-68428)", "https://mp.weixin.qq.com/s/bliXS7yoVPR-tes0HllI1w": "SmarterMail邮件服务器任意文件上传漏洞", "https://mp.weixin.qq.com/s/NSVmnPrjpvTLFhddsf-8Fg": "漏洞复现 | 致远OA ∕seeyon∕sursenServlet 命令执行漏洞", "https://mp.weixin.qq.com/s/DYMoAA3_G33Ee0yB_IXOZQ": "网安实验干货每日分享IIS7.5文件解析漏洞-0113", "https://mp.weixin.qq.com/s/6eULBGWhLPM4ZmQ0vSDeWw": "【重金悬赏】全网白帽集结!金融众测开启,漏洞猎手速来挑战!", "https://mp.weixin.qq.com/s/ZtY6gaTvAl2h3zkOjKrg5w": "Apache Struts 2 严重 XXE 漏洞可用于窃取敏感数据", "https://mp.weixin.qq.com/s/ha6RN_TS-0JGq2V_tE2RdQ": "【已复现】深信服运维安全管理系统 protocol_session 远程代码执行", "https://mp.weixin.qq.com/s/n3NC1i_iN3wGi4OHcd1dPQ": "XML陷阱:Struts 2关键漏洞CVE-2025-68493暴露数据", "https://mp.weixin.qq.com/s/fIhVItQfbmGM2pfo4I909Q": "大华综合漏洞利用工具", "https://mp.weixin.qq.com/s/A9qpwwOtNG1kR61kUSPskA": "Telegram曝隐藏漏洞,1次点击绕过代理暴露用户真实IP, Android和iOS均中招", "https://mp.weixin.qq.com/s/TSn6Sk4UxDPmsWqOCwYGgQ": "CVE-2025-60188-Atarim-插件-漏洞利用", "https://mp.weixin.qq.com/s/Levm38wrO1O5h500bUPCQA": "一款专为安全测试人员打造的 Web 化被动漏洞扫描平台", "https://mp.weixin.qq.com/s/oiySAV0HRvnuVXkSsEyMRg": "Telegram 的一个漏洞即使使用代理也能泄露您的 IP 地址", "https://mp.weixin.qq.com/s/jyEEtCvDxbruvBrcg2k7GQ": "雷神众测漏洞周报2026.1.5-2026.1.11", "https://mp.weixin.qq.com/s/pFEbUmXwcnh08IwNVxP16g": "智能电表远程抄表设备命令注⼊漏洞逆向分析", "https://mp.weixin.qq.com/s/QNnlrSZ8jLheyN8jxQ4FWQ": "DudeSuite 漏洞播报 全网漏洞早知道 20260113", "https://mp.weixin.qq.com/s/tPZg2oQe7OpOP0Iw28tVbQ": "帆软 excel SQL注入漏洞复现", "https://mp.weixin.qq.com/s/Xz_VUYIhYGQSu5QTi7MMGA": "【漏洞预警】Sangfor运维管理系统文件上传漏洞", "https://mp.weixin.qq.com/s/cIm3JQiCYfHysKIYRSRNjA": "【漏洞通告】Apache Struts外部实体(XXE)注入漏洞S2-069(CVE-2025-68493)", "https://mp.weixin.qq.com/s/WX94jMVBNGzryBTSpxHPAA": "SRC漏洞挖掘2", "https://mp.weixin.qq.com/s/qUyq1dq-SUiBgWRDCUJ_AQ": "【已复现】Apache Struts XML外部实体注入漏洞(CVE-2025-68493)安全风险通告", "https://mp.weixin.qq.com/s/hp43SW11A2JjNQiT8O9wgg": "Apache Struts 2曝高危漏洞:攻击者可窃取敏感数据", "https://mp.weixin.qq.com/s/gcntBfKjy-kMGlCkXkwXoA": "《Linux Pwn 番外篇》重磅上线!6大架构全覆盖,异构漏洞利用5h学透", "https://mp.weixin.qq.com/s/ZeTithhtRYzWMzDu3RNVaw": "证书站一个系统八个漏洞:直接getshell !!!", "https://mp.weixin.qq.com/s/L9aD6pvm5li-fOE9_h3UoQ": "回顾 2025:通过漏洞赏金赚到 4300 美元,并参加 SABF(南美商业论坛)", "https://mp.weixin.qq.com/s/Dq2ytIz3qjk5naK4qVX5gw": "Burp Suite 还能这么用?明动插件让漏洞挖掘快人一步!", "https://mp.weixin.qq.com/s/0Bg6aTiSrDTPu8y-zcSOjQ": "【接口漏洞第五章第二节】API批量赋值漏洞实战:以电商折扣参数篡改为例", "https://mp.weixin.qq.com/s/6iQjol9GyDitfNqj-gcZqQ": "漏洞预警|Apache Struts S2-069 XML外部实体注入(XXE)漏洞(CVE-2025-68493)", "https://mp.weixin.qq.com/s/ZCEmaXbbKvCGxyiftrzvgw": "Nginx CRLF注入漏洞解析", "https://mp.weixin.qq.com/s/QFdrMNkQpHUzCv6CuKlNJA": "【已复现】MindsDB 未授权路径遍历漏洞(CVE-2025-68472)", "https://mp.weixin.qq.com/s/viB-17BBXdRJezVWBDgUWg": "SRC漏洞挖掘3", "https://mp.weixin.qq.com/s/grMMYrfGjOIoHLEU5XegpA": "Struts2 S2-069 XXE漏洞 (CVE-2025-68493) 来袭,腾讯云主机安全RASP可自动防护", "https://mp.weixin.qq.com/s/JimFtzbF_y8qYZyEQ-L4bw": "【安全圈】GoBruteforcer 僵尸网络利用弱凭证攻击加密货币项目数据库", "https://mp.weixin.qq.com/s/GW9QZwVLC7WAsZ8aD5wVqA": "2个由注册点导致垂直越权的漏洞案例", "https://mp.weixin.qq.com/s/LnLN0qZoNCzXqTCoPggRdw": "G.O.S.S.I.P 阅读推荐 2026-01-13 十三年零漏洞的密码学算法库,翻车了?", "https://mp.weixin.qq.com/s/c9xsOVTI7ENkB6KXQtULzA": "【高危漏洞预警】Apache Struts外部实体(XXE)注入漏洞S2-069(CVE-2025-68493)", "https://mp.weixin.qq.com/s/2N2uaINgV3fFAKNWu1ConQ": "【复现】n8n表达式注入可导致远程代码执行漏洞(CVE-2025-68613)", "https://mp.weixin.qq.com/s/5ZIYXqljUjGEFCLkIlhXzg": "SRC漏洞挖掘1", "https://mp.weixin.qq.com/s/T3EB0nqxrR-GjClrTOVjhQ": "工具推荐 | 开源Shiro图形化漏洞综合利用工具", "https://mp.weixin.qq.com/s/GbmIyGNB3Gd16n9RCCyPCg": "大华智能物联管理平台evo-apigw∕evo-arsm∕1.0.0∕ars∕list接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s/9bN76uwbuVx6Eubt0eJ4ag": "【安全工具】从底层突破WAF:自动化发现协议级漏洞,绕过Web防火墙", "https://mp.weixin.qq.com/s/x0IfVdTtl1MR0mtui-U7Hw": "SpringBoot-Scan:针对Spring Boot的漏洞扫描和渗透工具", "https://mp.weixin.qq.com/s/1VV5prc9RuR50vofXJm-CA": "【已复现】Apache Struts XML外部实体注入漏洞(CVE-2025-68493)", "https://mp.weixin.qq.com/s/lsolNeaCSoJSBIKjj-RhlA": "黑客利用浏览器内嵌漏洞劫持Facebook账号", "https://mp.weixin.qq.com/s/6BxQCqsuHm7XrmRaFGc9nA": "漏洞预警 | n8n沙箱绕过、请求处理不当和远程代码执行漏洞", "https://mp.weixin.qq.com/s/Qa2ZUsXdbhKPWY7Ynsfy5A": "一款集成各大漏洞检测的burp插件", "https://mp.weixin.qq.com/s/LvHrdh2Qn-oM99O6hzwjCA": "CVE-2026-22718:已停止维护的 Spring CLI 工具(适用于 VS Code)被发现存在命令注入漏洞", "https://mp.weixin.qq.com/s/9LbweukWUB_FJ1WNRukY8Q": "云存储桶漏洞检测浏览器扩展", "https://mp.weixin.qq.com/s/WPqyRdw6Vt1kN9UYyFw00w": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s/ILYftCZzycAe4wW0NFZbdg": "漏洞预警 | 东胜物流软件SQL注入漏洞", "https://mp.weixin.qq.com/s/q8UrZb82gmCQn7F3njNcxA": "Fidelity充电桩AI量化理财系统存在前台任意文件上传漏洞", "https://mp.weixin.qq.com/s/-b-jZJ0FjhdGLc7DwC27iw": "基于代码相似性的软件漏洞检测研究进展", "https://mp.weixin.qq.com/s/4S6_d2xWMTLZ9FIp2X6j2A": "微软1月补丁日多个产品安全漏洞风险通告:1个在野利用、8个紧急漏洞", "https://mp.weixin.qq.com/s/HJRgndF4AQea8RhYWvXT2g": "漏洞挖掘实战系列(第10期):网络安全实战工具包 10款高频工具从入门到进阶用法全解析", "https://mp.weixin.qq.com/s/tiEV8NdyhAY5Z_Pf-Jod5w": "东胜物流软件 DsWebService.asmx sql注入漏洞", "https://mp.weixin.qq.com/s/ykM-IfNtefsG1ECL2Inw_Q": "SBSCAN是一款专注于spring框架漏洞扫描与验证的综合利用工具。", "https://mp.weixin.qq.com/s/zsXdExrrBN4wJeJd2vNrUg": "关于防范MongoDB数据库内存泄露高危漏洞的风险提示", "https://mp.weixin.qq.com/s/kIfa5d6r-MUXJOClfUMBGw": "成果分享 | 智能体漏洞检测 [ASE'25, Security'25∕26, BlackHat EU]", "https://mp.weixin.qq.com/s/NESkaHThfNlTmA-zV2vgfQ": "深入DirtyPipe(CVE-2022-0847):从内核到利用全解析", "https://mp.weixin.qq.com/s/0ED1GHRtViNjD_7FoiLLTQ": "Fidelity充电桩AI量化理财系统存在前台任意文件上传漏洞", "https://mp.weixin.qq.com/s/4wpHbE28_Y2APBgmByXZJA": "【edu实战】记⼀次⼩程序泄露16 W+敏感信息,接管18000+账号的漏洞挖掘", "https://mp.weixin.qq.com/s/lo78rWLUs2Q0sJNONpOUSg": "漏洞复现 | Sangfor 运维管理系统任意文件上传漏洞", "https://mp.weixin.qq.com/s/5uHhl2LMTM84fMCx2m62KA": "CNNVD | 关于Apache Struts安全漏洞的通报", "https://mp.weixin.qq.com/s/4CJS8kU_z3hueNuh7QR4sw": "【已复现】Appsmith Origin 校验不当导致账户接管漏洞(CVE-2026-22794)", "https://mp.weixin.qq.com/s/rzaFtbF5rfwwFrAAJYQF7g": "山石安全能力中心|微软1月份漏洞补丁日安全通告", "https://mp.weixin.qq.com/s/adFfUTGiyzoWxVbJAsf8Yg": "【安全更新】微软1月安全更新多个产品高危漏洞", "https://mp.weixin.qq.com/s/t7QoWPxUp8USgf_Lrecn7w": "Node.js发布安全更新,修复所有维护版本中的7个漏洞", "https://mp.weixin.qq.com/s/glMqepO7E18m6zpd2AGEZg": "查找摄像头漏洞,黑客只需要一步", "https://mp.weixin.qq.com/s/7AvMuFD5SYFbiu-D3hgDgg": "漏洞验证效率翻倍:从碎片化工具链到一体化工作流", "https://mp.weixin.qq.com/s/aPaFNFqlkpXP8aPiCup2wA": "AdonisJS 任意文件写(CVE-2026-21440) 漏洞复现", "https://mp.weixin.qq.com/s/f0yAso4qbjUZCvnduP8cSQ": "信息安全漏洞周报(2026年第2期)", "https://mp.weixin.qq.com/s/6S_SvGnZoUPOXYC9TOmT0Q": "【已复现】OpenCode 命令执行漏洞(CVE-2026-22812)", "https://mp.weixin.qq.com/s/TLmcZCSNqvaijwaNYbA2hA": "灵脉IAST 5.4 | AI漏洞治理 X 业务逻辑漏洞检测", "https://mp.weixin.qq.com/s/RTCyP7zQZt8lHEXp1jXVMg": "src|暴力破解漏洞", "https://mp.weixin.qq.com/s/qk4dy5IGDzkumxnbjXk67g": "OpenSSH 严重漏洞可导致 Moxa 以太网交换机易受RCE攻击", "https://mp.weixin.qq.com/s/esEKHdsK3auQq7EuHPxF1w": "WiFiSRC全新版本正式上线!新年漏洞征集活动同步开启", "https://mp.weixin.qq.com/s/JlNLec35e11XNh0grjYaeA": "【漏洞通告】微软1月多个安全漏洞", "https://mp.weixin.qq.com/s/SRTnftpUsARhmd4XQQziyA": "微软紧急修复DWM组件0-Day信息泄露漏洞(CVE-2026-20805)", "https://mp.weixin.qq.com/s/x8lMF2ne5hmBCTBuO30a-g": "2026-01微软漏洞通告", "https://mp.weixin.qq.com/s/T6-eMbMq9V19BvgNcGfHKw": "智能工业网关:私有协议解析中的栈溢出漏洞深度剖析", "https://mp.weixin.qq.com/s/ThpBkW6ebOXaQUUbjp9fhg": "Nessus插件开发实战:从零开始编写高效漏洞扫描脚本", "https://mp.weixin.qq.com/s/5V8rdB4RbWBZ5RHAtvH8sg": "预警丨防范MongoDB数据库内存泄露高危漏洞", "https://mp.weixin.qq.com/s/eWJKz3VTyWpqdvvIgxpw4Q": "【WordPress专题07】一文搞懂 如何对WordPress进行漏洞探测", "https://mp.weixin.qq.com/s/2rdlLLOe1SSFhQTNU3b7DQ": "微软2026年1月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s/uyorC2UfWcrlTbxumui8jg": "周五20点直播 | 想挖IoT漏洞?这个Tenda 0day案例你不能错过", "https://mp.weixin.qq.com/s/kWa5wNnZz0m982iImR81GA": "【高危漏洞预警】Appsmith Origin验证漏洞(CVE-2026-22794)", "https://mp.weixin.qq.com/s/yyE_wt9dhdhoEACiZ5tITQ": "CNNVD关于Apache Struts安全漏洞的通报", "https://mp.weixin.qq.com/s/g3SgjJUU9JCvTkkfqdUeIQ": "[跟着静师傅学代码审计]九垠赢商业管理系统0day-文件上传和任意文件下载", "https://mp.weixin.qq.com/s/QnyzSIVUuNWYE15IivvDkA": "关键的FortiSIEM漏洞允许攻击者通过TCP数据包执行任意命令", "https://mp.weixin.qq.com/s/03Zc3udyUEiDBIV-A1YhYQ": "【安全圈】微软桌面窗口管理器0Day漏洞遭野外利用", "https://mp.weixin.qq.com/s/rn3OQz6cN9KsXLmWrxem7w": "灵脉IAST 5.4 | AI漏洞治理 X 业务逻辑漏洞检测", "https://mp.weixin.qq.com/s/-qCpu0uhR87pQ_sGUm7smA": "【已复现】OpenCode 命令执行漏洞(CVE-2026-22812)", "https://mp.weixin.qq.com/s/oDKOs6Ee-y5Yjf344oginQ": "从低空到太空:中科数测研究院发现空间通信核心漏洞——直指 NASA 航天加密体系底层安全", "https://mp.weixin.qq.com/s/kF0D21R7rvIFKCqRdbIg9w": "【漏洞通告】Apache Struts XML外部实体注入漏洞(CVE-2025-68493)", "https://mp.weixin.qq.com/s/6gsTRGJNV0Cz1JSMF_u4_Q": "利用不安全的模板格式化在 LangSmith Playground 中实现远程代码执行", "https://mp.weixin.qq.com/s/ldpVaQBuEvmu9wqtJ79xLA": "Struts2 XXE漏洞(CVE-2025-68493)分析及复现", "https://mp.weixin.qq.com/s/OuRt_afnVoQ21XrCIabGYQ": "高危漏洞威胁情报合集 (2026-01-14)", "https://mp.weixin.qq.com/s/urblBuPWzhxefl75bq_Cpw": "【接口漏洞第六章第一节】你以为前端参数可控就安全了?聊聊服务器端参数污染", "https://mp.weixin.qq.com/s/6IlwHMux-32N_F-zk-pc4A": "致命的波塞冬核漏洞", "https://mp.weixin.qq.com/s/vSN5ZYJ6fmravzD3_-kX_Q": "Edusrc 垂直越权通杀漏洞实战 & 985证书站实战案例", "https://mp.weixin.qq.com/s/TMW0L3YuO0zn41uJjcI8ng": "企业SRC赏金漏洞挖掘实战-多个奖励条件绕过漏洞", "https://mp.weixin.qq.com/s/yUzINvq_nFsWHmkDDNcJcA": "1day | Apache Struts XML外部实体注入漏洞(CVE-2025-68493)", "https://mp.weixin.qq.com/s/O25H79ucdyy02eK-c_Qg9w": "漏洞预警 | jsPDF路径遍历漏洞", "https://mp.weixin.qq.com/s/Dpxr8JtdfDxf70JF528Hww": "关于 VulnHunter -AI 漏洞猎人v6.0 版本发布推迟", "https://mp.weixin.qq.com/s/38xOy1EufX7O3hyaPnYpcw": "恶意数据被“合法保存”的那一刻,漏洞已经注定:二次 SQL 注入实战解析", "https://mp.weixin.qq.com/s/V-fZw5b5HRE8wgW45cSyLA": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s/pFh0cr075M0AfeYlbEkAYQ": "记一次SRC支付漏洞实战", "https://mp.weixin.qq.com/s/xHuk0jOWdU8x_0Tk6hVO5w": "Letta 代码执行漏洞 (CVE-2025-51482)", "https://mp.weixin.qq.com/s/eS-FvpSFjOHKXe3N3f1XOw": "命令注入警报:LoadMaster 和 MOVEit WAF 存在高危漏洞", "https://mp.weixin.qq.com/s/JxRtiE-sFNOEXTVr2o4ynw": "漏洞预警 | 东胜物流软件文件删除漏洞", "https://mp.weixin.qq.com/s/oD29J03OgvSV7eJXFoU1BA": "VPN漏洞频发,威努特零信任如何守护企业数字边界?", "https://mp.weixin.qq.com/s/_mydGg7gIcMOzo0sCTAmzg": "Struts2 XXE漏洞(CVE-2025-68493)分析及复现", "https://mp.weixin.qq.com/s/XQQk-7TPy-CcbFdreanKRw": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s/3d0a67AFBIlhNvHPlA8aKA": "微软桌面窗口管理器零日漏洞已被利用", "https://mp.weixin.qq.com/s/DqbvIy7T2ta_He_iujhk_Q": "漏洞预警 | 天锐绿盾审批系统信息泄露漏洞", "https://mp.weixin.qq.com/s/hnKUnmJfbbmtbzeNKPAw2A": "漏洞预警 | Langflow身份验证缺失漏洞", "https://mp.weixin.qq.com/s/-KOr55KBNLuRIL4DOKFLFg": "【玄域】Web∕App靶场 | 面试题库 | 实战漏洞报告 | 体系化学习", "https://mp.weixin.qq.com/s/0FhKQ3o-o0FO13nF1MTuIA": "Shiro漏洞利用工具,更新V0.2!", "https://mp.weixin.qq.com/s/eqjUxhBJpfyiGuN9nL5-8g": "漏洞挖掘实战系列(第11期):漏洞挖掘思维模型 从“没思路”到“稳定挖洞”的完整方法论", "https://mp.weixin.qq.com/s/m7oXfnmFDXr5LQQ0PLjtDQ": "Edusrc 垂直越权通杀漏洞实战 & 985证书站实战案例", "https://mp.weixin.qq.com/s/eVA8QMlPBfaOKb_l5vuyug": "CVE-2025-55182 漏洞检测与利用工具(GUI版)", "https://mp.weixin.qq.com/s/fYbsIINfX9bWrHt3cCy09Q": "【漏洞检测POC】Apache Struts XML外部实体注入漏洞(CVE-2025-68493)", "https://mp.weixin.qq.com/s/lkj2G5HhYyv7-vTiq4A-pA": "【成功复现】Apache Struts XML外部实体注入漏洞(CVE-2025-68493)", "https://mp.weixin.qq.com/s/RLPkb1Uk3h1UoqdPJYxElg": "nuclei POC辅助编写(管理)工具 -- nucssist(1月12日更新)", "https://mp.weixin.qq.com/s/fF6zvYGfgxgXeDBq-bGxtA": "深度强化学习求解虚拟网络映射(Energy efcient resource allocation based on virtual  network embedding for IoT data generation)", "https://mp.weixin.qq.com/s/b44MRFIwb-RbU4fs_2wLeQ": "CVE-2025-64155:Fortinet FortiSIEM 远程 Root 漏洞已存在三年", "https://mp.weixin.qq.com/s/1ZorRKtuEcDa58ZGJULtEw": "CVE-2025-53136 通过竞争条件泄露内核信息", "https://mp.weixin.qq.com/s/xDIpyd0ukxkrhOpOUHYb-Q": "微软桌面窗口管理器0Day漏洞遭野外利用", "https://mp.weixin.qq.com/s/EUrm-RAXteMpR7WgMH4jfg": "Apache Struts XML外部实体注入漏洞复现(CVE-2025-68493)", "https://mp.weixin.qq.com/s/X9dsHKCPfrR0ZxgW28Bkyw": "关于防范MongoDB数据库内存泄露高危漏洞的风险提示;AI安全工具选型指南:企业为何放弃新兴厂商,转投行业巨头?| 牛览", "https://mp.weixin.qq.com/s/Zq4GNRjWh2TOEa1-3lbsNQ": "若依(RuoYi)框架漏洞战争手册", "https://mp.weixin.qq.com/s/aQPGjD_lgc2yeiRvlh21tQ": "src | 奇怪的任意用户重置密码组合拳漏洞", "https://mp.weixin.qq.com/s/NLxdfT9NogTJAfwukKUN0g": "CVE-2026-21858 因不当的 Webhook 请求处理而易受未认证文件访问", "https://mp.weixin.qq.com/s/FRaqBhIadnr7GcY6btWQQA": "TsojanScan-Plus:基于原 Burp 漏洞插件重磅二开,新增多漏洞扫描与权限绕过检测", "https://mp.weixin.qq.com/s/0DQyyxO7cbELzJXbxF4A2g": "Apache Struts XWork XML外部实体注入漏洞CVE-2025-68493 附POC", "https://mp.weixin.qq.com/s/6uySS-_s-aqoFkX_j7WD7A": "【1】深入解析CVE-2025-38352:Android内核漏洞实战分析与PoC", "https://mp.weixin.qq.com/s/aExQGs2gTUkNPVldS9DJqw": "奇安信发布智能网联汽车云平台漏洞报告:九成存漏洞,超七成涉高危风险", "https://mp.weixin.qq.com/s/_qP0F-OWAtX5fs5wBq813Q": "【已复现含payload】Apache Struts XML外部实体注入漏洞(CVE-2025-68493)", "https://mp.weixin.qq.com/s/t6Drg3nMdUZ-L0Oxp019Lw": "高危漏洞威胁情报合集 (2026-01-15)", "https://mp.weixin.qq.com/s/Rc9TkUvxsM7arEZH0xVGwg": "【高危漏洞预警】React Router目录遍历漏洞CVE-2025-61686", "https://mp.weixin.qq.com/s/TRJ79gWpK6ySL8eWSCNlfQ": "0117.我是如何发现 Google 表单漏洞的(重复内部漏洞 - 已修复)", "https://mp.weixin.qq.com/s/UCWuVh9FyPK4UuHDSnQyTw": "Microsoft SQL Server 存在允许攻击者通过网络提升权限漏洞", "https://mp.weixin.qq.com/s/xWXN5qkbYcqzD1CiJw4ZRA": "【接口漏洞第六章第二节】参数污染漏洞挖掘详解:“截断”与“注入”实操手册", "https://mp.weixin.qq.com/s/P7LUgCXPzvgAqnkbVvtwCQ": "Palo Alto Networks 紧急修复高危漏洞,攻击者可致防火墙瘫痪", "https://mp.weixin.qq.com/s/NpWOsqNUORqxRr2mbrBPVg": "【安全圈】Apache Struts 2曝高危漏洞:攻击者可窃取敏感数据", "https://mp.weixin.qq.com/s/El2tuGXioev1OLnh4UAY-g": "【高危漏洞预警】OpenCode AI编码代理未认证HTTP服务器漏洞(CVE-2026-22812)", "https://mp.weixin.qq.com/s/D77FQsOSjOrpWw_iM5ULQQ": "CVE-2026-22688 - 腾讯WeKnora MCP Stdio 命令注入漏洞", "https://mp.weixin.qq.com/s/sDNw3Z-HFEu-uqUVotJxAQ": "CVE-2025-68613 n8n 表达式沙箱逃逸导致远程代码执行漏洞", "https://mp.weixin.qq.com/s/gMApo9A53g1cyOsjEY_3ng": "新款Shiro漏洞利用工具- Y5neKO", "https://mp.weixin.qq.com/s/D6QOwnZyGCABOHqgwoeS0g": "好靶场-n8n-CVE-2026-21858+CVE-2025-68613", "https://mp.weixin.qq.com/s/l8NjnTC6d97KOval3n3Ddg": "[跟着静师傅学代码审计-全网首发]用友U9 V6.6企业版多组织企业互联网应用平台命令执行+SQL+反序列化", "https://mp.weixin.qq.com/s/7BenYewwA8iPYwNxYoSI8Q": "【漏洞通告】Fortinet FortiSIEM phMonitor服务命令注入漏洞(CVE-2025-64155)", "https://mp.weixin.qq.com/s/Emdlk-rzUIlwcDgiBHixwQ": "【已复现】OpenCode 远程代码执行漏洞(CVE-2026-22812)安全风险通告", "https://mp.weixin.qq.com/s/Q5i060kLY4LYTw4GB2NKag": "Spring CLI 存在允许攻击者在用户系统上执行命令漏洞", "https://mp.weixin.qq.com/s/-JJmGsL98vozGSsTsNjzeA": "【已复现】React Router 未授权路径遍历漏洞 (CVE-2025-61686):伪造 Cookie 即可实现任意文件写入", "https://mp.weixin.qq.com/s/b5MKtI8-KE8XnrTRcakwNg": "【安全圈】微软Copilot曝一键式漏洞:攻击者可悄无声息窃取敏感数据", "https://mp.weixin.qq.com/s/ovrVymMdg6P-TJ-kdQnXUw": "奇安信发布智能网联汽车云平台漏洞报告:九成存漏洞,超七成涉高危风险", "https://mp.weixin.qq.com/s/DV2FAygAM4WNVBGqQA_cAQ": "一键化渗透神器,集成20+工具,子域收集、指纹探测、漏洞扫描全搞定!", "https://mp.weixin.qq.com/s/AhppWF4s8JcKkQBzAySbyw": "在线阅读版:《智能网联汽车云平台漏洞分析报告》全文", "https://mp.weixin.qq.com/s/2RZSyd8jifzLyt3GN3HTgA": "天价Android 0day漏洞+POC演示,宣称通杀Android12–16", "https://mp.weixin.qq.com/s/xa1X4R2umUfyvAhf-5XJCQ": "智能网联汽车云平台漏洞分析报告(2025)", "https://mp.weixin.qq.com/s/LJElChbwKhLiE8PdB3zP2Q": "Nacos系列漏洞:风险点与综合利用工具详解", "https://mp.weixin.qq.com/s/mIg6N3wObuep42k4jYlRmA": "【逻辑漏洞】 从应用场景看金融安全— 逻辑为王", "https://mp.weixin.qq.com/s/9hj1H4U6bT4iKFSUV3xTpg": "【漏洞复现】Apache Struts S2-069 XXE漏洞 CVE-2025-68493", "https://mp.weixin.qq.com/s/velZeusv0yDgOI_rFbonpg": "致远OA rce", "https://mp.weixin.qq.com/s/brVPs4QPTMNF4RWtr6ROaQ": "信息安全漏洞周报【第056期】", "https://mp.weixin.qq.com/s/zorOAGoejzYgGjbkQ6oEkA": "shiro反序列化漏洞综合利用,包含(回显执行命令注入内存马)", "https://mp.weixin.qq.com/s/Ylq1fBNXvgtO-7UM10bVng": "【已复现】OpenCode 远程代码执行漏洞(CVE-2026-22812)", "https://mp.weixin.qq.com/s/5nVJwmjV2hKM1G0UUSz4Pw": "React2Shell 图形化漏洞检测利用工具", "https://mp.weixin.qq.com/s/dgwBqMrpBt1VcDjS_r_lxQ": "网安实验干货每日分享XSS跨站脚本-DOM型XSS漏洞挖掘1-0116", "https://mp.weixin.qq.com/s/rkbZdimyIlDEXVVKQiEiPg": "HPE Aruba漏洞致敏感信息遭未授权访问", "https://mp.weixin.qq.com/s/bLbQxfopQOWPcYWK1-u_Mg": "用友NC存在反序列漏洞", "https://mp.weixin.qq.com/s/ImO213-xjBIXInTn5GHI6A": "从PhpmyAdmin getshell到某CMS后台SQL注入漏洞", "https://mp.weixin.qq.com/s/PiYjB2IBUgLYwCVHs5M99w": "2026高危端口漏洞", "https://mp.weixin.qq.com/s/5dSPARFn1uwmuD8s-t_Z-A": "能信安:漏洞通告", "https://mp.weixin.qq.com/s/xWhzRjzUYmoCUZyawBlE3w": "【漏洞复现】致远OA wpsAssistServlet 任意文件上传漏洞", "https://mp.weixin.qq.com/s/ETpsLUR_6oj9Tfo5BDAjfg": "【已复现】FortiClientEMS SQL 注入漏洞可导致远程代码执行(CVE-2025-59922)", "https://mp.weixin.qq.com/s/PZ8ZvUO4_Zee84flXO3v6Q": "【已复现】全程云OA QCHMS.asmx SQL Injection", "https://mp.weixin.qq.com/s/uub9l6ACfdQ8qSYF6Nz0DA": "CVE-2026-20824漏洞:Windows远程协助存在安全功能绕过风险", "https://mp.weixin.qq.com/s/Do8CX__aKjtOPZbpVADeww": "威胁组织利用信息窃取器窃取企业云凭证,多因素认证缺失成最大安全漏洞", "https://mp.weixin.qq.com/s/3QOLtuqu0jX5YbmiAFRSPA": "SOC342 — CVE-2025-53770 SharePoint ToolShell 身份绕过与远程代码执行", "https://mp.weixin.qq.com/s/-LnxpwYw6Lz4ayZ1yywn1A": "致远OA wpsAssistServlet 任意文件上传漏洞(CVE-2025-34040)", "https://mp.weixin.qq.com/s/5j6wHqjHmWvrEh888ybYjQ": "外卖平台惨遭黑手!系 Salesforce 系统数据泄露蝴蝶效应", "https://mp.weixin.qq.com/s/r-i-YsG7aByjODbvz8mQjQ": "漏洞复现 | 大华ICC智能物联管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s/yE0DPZQkxpMrn-dY1IwROQ": "Apache Struts XWork XML漏洞CVE-2025-68493 poc及脚本", "https://mp.weixin.qq.com/s/lVfChUZIiaiW82dSJhh3KA": "你想拥有一个自己开发的漏洞靶场吗?", "https://mp.weixin.qq.com/s/wUIhnvYbUIO9B2lT0En5OQ": "Cisco 0-day RCE 安全邮件网关漏洞在野外被利用", "https://mp.weixin.qq.com/s/Kyl7XigvyllXXe5qcu4jbg": "安全热点周报:微软修复 2026 年 DWM 中首个信息泄露零日漏洞", "https://mp.weixin.qq.com/s/Onp-0m-Z47peRh7zz_OGhg": "漏洞挖掘实战系列(第12期):业务逻辑漏洞挖掘 从“会技术”到“能挖真实漏洞”的关键一步", "https://mp.weixin.qq.com/s/fH2llcfoXD7qtsjXnIUAZg": "Windows远程协助漏洞可绕过安全防护机制", "https://mp.weixin.qq.com/s/M-R_ZaDuPCirHuX2Q7XVGQ": "【漏洞通告】opencode-ai 未认证 HTTP 服务导致任意命令执行漏洞(CVE-2026-22812)", "https://mp.weixin.qq.com/s/R6Z77S_ZfQDVuiKc28ODqA": "从 XSS 到 RCE:Electron 应用中的真实攻击链", "https://mp.weixin.qq.com/s/8cPfjKDIv--UxX-zRRRb8w": "绿盟漏洞情报(2026-01-16)", "https://mp.weixin.qq.com/s/yZEf4aY3Rh7ycxSOz2acjg": "“零点击”数据泄露:企业级AI Gemini Enterprise漏洞如何让AI成为企业安全新威胁", "https://mp.weixin.qq.com/s/_wwFv0e3Ny7aygxs09AZ8w": "【AI漏洞】重磅!微软Copilot存在“Reprompt”攻击", "https://mp.weixin.qq.com/s/PD1mfrZ9G5VBKJA3MtsLyQ": "今晚20点直播 | 想挖IoT漏洞?这个Tenda 0day案例你不能错过", "https://mp.weixin.qq.com/s/UOwZCl-WxvefyRv76t9Z6g": "北京大学 | ContractTinker:基于大语言模型的真实场景智能合约漏洞修复系统", "https://mp.weixin.qq.com/s/P3sWlLs3xrR_bVkO24Kreg": "【附POC及复现环境】Appsmith任意用户密码重置漏洞(CVE-2026-22794)", "https://mp.weixin.qq.com/s/3PMdID0xfTN7iyYRYF9Eug": "OA渗透测试的思维盲区:从漏洞猎人到系统拆解师", "https://mp.weixin.qq.com/s/XV5recnrGHolaTpSJvvJ9g": "人工智能重要漏洞通报(2026年第一期)", "https://mp.weixin.qq.com/s/iH1BrFH9L5jdui29ygz2dw": "【漏洞预警】Fortinet FortiClientEMS SQL注入漏洞CVE-2025-59922", "https://mp.weixin.qq.com/s/HTvxV0A0eZvqEmkCupdRaQ": "美国网络安全和基础设施安全局 (CISA) 命令联邦政府修复 Gogs 远程代码执行漏洞,该 0 day 漏洞已被攻击利用", "https://mp.weixin.qq.com/s/5ghBCECoOHZv98lVUnqD1w": "Android Pixel 9 的零点击漏洞利用链全解析:从发送杜比音频解码到内核提权", "https://mp.weixin.qq.com/s/U69lTph4yYBA2wgfgdFYWA": "密码重置漏洞挖掘指南:从原理到实战的完整路径", "https://mp.weixin.qq.com/s/kcSQCa7NWb2LAnq_7MVPsg": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s/TCoaB2A1Dr59aT9ghWRpSA": "【接口漏洞第六章第三节】隐藏在“&”和“#”背后的秘密:我是如何通过参数污染接管管理员账户的", "https://mp.weixin.qq.com/s/B_Y-QOlz09Y5HEtTG-qO8Q": "OpenCode 远程代码执行高危漏洞", "https://mp.weixin.qq.com/s/QnOXeovju8knRcmjUF6hrw": "漏洞复现 | 安科瑞环保用电监管云平台 UploadNewsImg 接口存在文件上传漏洞", "https://mp.weixin.qq.com/s/IirghiQAjQD92d6nowDvxg": "【工具推荐】通达OA漏洞综合利用工具", "https://mp.weixin.qq.com/s/zVTgKjhE09G-8ztTqXy7CA": "国家漏洞库通报Apache漏洞、西班牙能源巨头1TB数据泄露|一周特辑", "https://mp.weixin.qq.com/s/vgqgGHdxw62OlYArhXhB5Q": "RondoDox 僵尸网络在攻击浪潮中针对 HPE OneView 漏洞", "https://mp.weixin.qq.com/s/cnaokGTQ0-W0jUZmni8cCg": "漏洞挖掘实战系列(第13期):业务逻辑漏洞实战 登录∕支付∕密码重置全解析", "https://mp.weixin.qq.com/s/pNQkwcoOj_dfd22yFJF6lg": "Strix AI驱动的漏洞动态验证能力分析", "https://mp.weixin.qq.com/s/gc6jKK2QuKkiTzHMXsTVTw": "实战中XSS漏洞的挖掘与利用", "https://mp.weixin.qq.com/s/NpYdCE1VqK3Zi25a6RmmMg": "【2】CVE-2025-38352 – 在不打内核补丁的情况下扩展竞争窗口", "https://mp.weixin.qq.com/s/FvjY4VXy2RnktgEzPnrw1A": "通过 AppleKeyStore 引发的 SEP 固件崩溃 - iOS∕macOS 26.x 内核漏洞", "https://mp.weixin.qq.com/s/lO-S_Z5Ih_18k1bR7AUbGw": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s/2uPMY1aXcPbL3m4AH9VtfQ": "CNNVD | 人工智能重要漏洞通报(2026年第一期)", "https://mp.weixin.qq.com/s/3XKSfJTB5yR4XVMLDtw4vg": "渗透测试利器・供应链组件投毒隐患:DNSLog 与 Webhook 平台盘点(无回显漏洞数据外带指南)", "https://mp.weixin.qq.com/s/0WmG2ZUgx8ffmH9g9m_bqA": "【安全圈】男子利用购物平台漏洞窃取用户信息并骗取佣金1878万被判刑", "https://mp.weixin.qq.com/s/OiGevLf5PhkUGZcrDq0ekQ": "【安全圈】AMD Zen 1~5全系CPU曝出StackWarp漏洞", "https://mp.weixin.qq.com/s/rzd1vTKvrVuCpUprR1lwlQ": "Firefox 147发布时修复了16个允许任意代码执行的漏洞", "https://mp.weixin.qq.com/s/11LMAoJ_Vp6swU0esKDMNg": "【接口漏洞第六章第四节】绕过前端限制:浅析REST路径中的服务器端参数污染漏洞", "https://mp.weixin.qq.com/s/mIRWVqNzCk7yoY2bIkLsdQ": "漏洞科普——React Server Components 拒绝服务漏洞(CVE-2025-67779)", "https://mp.weixin.qq.com/s/1LiBtZ-aiY8MLknS81AWRA": "【转载】复盘2025:在WAF的缝隙里开出花来(附EDU通杀0DayPOC)", "https://mp.weixin.qq.com/s/PlmmAvhgmIgFQbdcKkbnrQ": "一次从0到1的逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s/9vO2mNzI0F2qonYIsnGV7w": "【代码审计】CVE-2025-46836", "https://mp.weixin.qq.com/s/7oGpjbtH1DhNqt70HwO5PQ": "漏洞复现 | 用友U8Cloud IPFxxFileService 任意文件上传漏洞", "https://mp.weixin.qq.com/s/_nOsFiJOiTwF7Z0A02J0fQ": "【工具分享】MPET (Multi-Protocol Exploitation Toolkit)一款专业的多协议安全测试工具", "https://mp.weixin.qq.com/s/Pv8z7N78Y2dc1PqmQZhieA": "仿真商城漏洞靶场已上线", "https://mp.weixin.qq.com/s/ALKYJ1dxxrpYBL1vKIQ1Zg": "漏洞挖掘实战系列(第14期):高级SQL注入技巧 WAF绕过+盲注优化+实战案例", "https://mp.weixin.qq.com/s/cFUhkXB_MrB9RX4A6o7bQw": "复盘2025:在WAF的缝隙里开出花来(附EDU通杀0DayPOC)", "https://mp.weixin.qq.com/s/m5fSAgiQPKUgZL0jJD1PJA": "Google Vertex AI漏洞允许低权限用户提升至服务代理角色", "https://mp.weixin.qq.com/s/tzaUxgo2KUBbzKs2UAxAQA": "高危漏洞威胁情报 (2026-01-16)| n8n 任意文件读取漏洞", "https://mp.weixin.qq.com/s/VOCvpGZ4jjSDEZLpkYP5dw": "危险的零点击漏洞", "https://mp.weixin.qq.com/s/zzVML-pKM5_WtGCvqxW_OQ": "美特CRM sendmail.jsp 任意文件上传漏洞", "https://mp.weixin.qq.com/s/KvDgDOWlGNPWV1pKBxaPTQ": "漏洞赏金高达 200 万+RMB 的 0-click 账户接管 MXSS", "https://mp.weixin.qq.com/s/dBHILYO09dGFDcJjxnY7bg": "【接口漏洞第七章第一节】解码vs编码:那个让安全工程师彻夜难眠的JSON处理细节", "https://mp.weixin.qq.com/s/_YiFTKHk_VV9J6DfSL3Qtg": "CVSS满分漏洞:CVE-2025-55182复现,补丁包已发布请尽快升级。", "https://mp.weixin.qq.com/s/hkBcoChdedipM_-fxlnRgw": "第二周战报 | 常态化漏洞挖掘演习", "https://mp.weixin.qq.com/s/_BzHeKPHh9YSZFvwgkVH3Q": "接管AWS核心代码库:供应链劫持漏洞CodeBreach剖析", "https://mp.weixin.qq.com/s/nTfr30OIeCQwgTIcQcplvg": "cve_2025_55182批量漏洞的检测+利用脚本", "https://mp.weixin.qq.com/s/ONPHvG-8sRZOvjC-xn0gFg": "CyberStrikeAI新增fofa_search MCP,自然语言一键搞定靶场发现与漏洞利用", "https://mp.weixin.qq.com/s/eRwnSXNc8nlmOL4Bdn13BQ": "【吃瓜】前男友在某音给女生发约不约是挖漏洞", "https://mp.weixin.qq.com/s/_LqBdT3qaRFzrLYTYUuFpA": "GoBruteforcer僵尸网络新攻势:利用AI生成配置漏洞 瞄准加密货币数据库", "https://mp.weixin.qq.com/s/91BfPYXaxNAC7dh7tddfrg": "Android Pixel 9 的零点击漏洞利用链全解析:从发送杜比音频解码到内核提权", "https://mp.weixin.qq.com/s/IFOTAPxGY6qp66wdFzsKmQ": "漏洞复现 | 泛微e-office dept.wsdl.php 接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s/Hz-zG8YNml4qciVgSVQ2RA": "XXE到Chrome RCE:一次完整的不出网利用实践", "https://mp.weixin.qq.com/s/0mBWLZCuN03TD9zkn_xgrQ": "JShunter | JS 文件终端分析神器 —— 一键提取接口、硬编码密钥与潜在漏洞", "https://mp.weixin.qq.com/s/bmbysdduL2DvagRUJL_vvA": "重塑传统自动化漏洞挖掘的Multi-Agent框架攻防一体化实践", "https://mp.weixin.qq.com/s/x8JBunixigLfS8qVIWR34w": "好靶场-n8n-CVE-2026-21858+CVE-2025-68613", "https://mp.weixin.qq.com/s/J9VVptuaR0MJG1GazP50uA": "来货拉拉SRC,提交任意有效漏洞可得新春礼盒~", "https://mp.weixin.qq.com/s/qqV3bGCkArGJ8xuUOoxkaQ": "漏洞复现 | React Router 未授权路径遍历(CVE-2025-61686)导致任意文件操作漏洞", "https://mp.weixin.qq.com/s/gstdV6rGuKppjiQevwQV0Q": "神农SRC 漏洞挖掘实战课:从 0 到 1 成为赏金猎人", "https://mp.weixin.qq.com/s/8GBueh4NQih0PotdDgWBtQ": "用友NC pkevalset接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s/LVr7_70UBsTxjb67hlS6yw": "短信发送功能点漏洞挖掘", "https://mp.weixin.qq.com/s/ZwxH6FjBYojNeziqjzlzXg": "CVE-2026-0695:ConnectWise PSA 2026.1 中修复了高危 XSS 漏洞", "https://mp.weixin.qq.com/s/3PjV7WIAM1C7Yu7cSLqUcA": "学习干货 | 新手必练!真实复现DMZ区攻防场景与排查思路(附开源环境)", "https://mp.weixin.qq.com/s/gja_iKShxxkPKqOZcZVWEA": "【首发复现】Windows Telephony 服务权限提升漏洞(CVE-2026-20931)", "https://mp.weixin.qq.com/s/yYqal6LytHFRzNX3uROFDA": "漏洞挖掘实战系列(第15期):文件上传绕过全攻略 前端∕后端∕中间件 全场景实战", "https://mp.weixin.qq.com/s/FyzAVvP2d4GqQY0HovzXKA": "森鑫炬水务企业综合运营平台 Instance∕Get 任意文件读取漏洞", "https://mp.weixin.qq.com/s/iin6FnCBls6Og7NxGDcVMg": "黑客目前正利用 Fortinet FortiSIEM 的严重漏洞发起攻击", "https://mp.weixin.qq.com/s/ddILckBmvEjbFRB5U5TvRA": "虚假 Malwarebytes 活动利用 DLL 侧载漏洞植入信息窃取程序", "https://mp.weixin.qq.com/s/RYCEQYwBD6lnJAg_awvkAg": "Apache ActiveMQ Jolokia 后台 RCE (CVE-2022-41678) 漏洞说明", "https://mp.weixin.qq.com/s/w6W91_wpq2ChPGDE7Sa6vg": "知名心理健康服务平台存在SQL注入 - 0day", "https://mp.weixin.qq.com/s/P1wN63buKdNji9qQ8t1kSQ": "AI 辅助逆向之旅:如何从TP-Link摄像头中挖掘漏洞", "https://mp.weixin.qq.com/s/_GK9VRe22Fx2HZ0vH49tpQ": "最新知识库和漏洞库推荐", "https://mp.weixin.qq.com/s/uEv6-WUzjwrPq_rs_PpiiA": "网安实验干货每日分享XSS跨站脚本-DOM型XSS漏洞挖掘2-0119", "https://mp.weixin.qq.com/s/_0LPA70VR76K_MVtCjNLDg": "【已复现】OpenCode 远程代码执行漏洞(CVE-2026-22812)", "https://mp.weixin.qq.com/s/T3vtmueTfcA52xyb5GfI6A": "近期0day+POC|Windows RCE 0day漏洞利用|最后一个宣称通杀Android12–16", "https://mp.weixin.qq.com/s/HApRIpx4CTwGU12DIqvGMg": "Windows SMB 客户端漏洞使攻击者能够控制 Active Directory", "https://mp.weixin.qq.com/s/MSOPSB2DZ06wA26_u6EvYg": "【玄域】web∕app靶场-新增加验证码缺陷&密码重置靶场 | 新增3份实战漏洞报告", "https://mp.weixin.qq.com/s/bLqzhkbXphjnraVR320nKQ": "历时数十年的漏洞与新堆损坏问题,Linux系统关键glibc漏洞曝光", "https://mp.weixin.qq.com/s/czIlh7tQrNqXTdayQqbe1A": "Windows SMB 客户端漏洞使攻击者拥有 Active Directory", "https://mp.weixin.qq.com/s/ILs6qgUtG55kwOuN5LwYOA": "xxl-job 越权漏洞", "https://mp.weixin.qq.com/s/5G4ZzkBBqgNghbSdO6udhg": "工信部网络安全威胁和漏洞信息共享平台发布高危漏洞风险提示", "https://mp.weixin.qq.com/s/irc5ZXTDoJvkAbBURKMwAw": "【接口漏洞第七章第二节】服务器端参数污染漏洞综述:从原理、检测到手动验证指南", "https://mp.weixin.qq.com/s/wm4nZKidPnrlfrCrL3mEHg": "CNNVD:人工智能重要漏洞通报(2026年第一期)", "https://mp.weixin.qq.com/s/WPuHZF38dJqPPssvnhLu9Q": "谷歌蓝牙漏洞危及数亿音频设备", "https://mp.weixin.qq.com/s/vHyPpvfDS2fnXcF-n7z-qw": "横跨数十年的漏洞与新型堆破坏:glibc 重大安全缺陷曝光", "https://mp.weixin.qq.com/s/gdwjni_xpqT1VPO9xmPr-A": "CNVD漏洞周报2026年第2期", "https://mp.weixin.qq.com/s/eKDUqh53is62L0GmJ6GRoQ": "【40万POC???】小场面,看纽克如何拿捏海量POC场景", "https://mp.weixin.qq.com/s/cwNoi8Ad_rCeOuNyD9_VrA": "【漏洞通告】n8n Python 任务执行器沙箱逃逸导致任意代码执行漏洞(CVE-2026-0863)", "https://mp.weixin.qq.com/s/REXQt-uAdwXPzL12TSu_zw": "上周关注度较高的产品安全漏洞(20260112-20260118)", "https://mp.weixin.qq.com/s/KNCcrFOVj_guhGClQ0L15Q": "【安全圈】Deno 曝出高危漏洞(CVE-2026-22863 和 CVE-2026-22864)可导致密钥泄露与任意代码执行", "https://mp.weixin.qq.com/s/HGfePvNmp1BseCZuwrmg8A": "Deno曝出高危漏洞可导致密钥泄露与任意代码执行", "https://mp.weixin.qq.com/s/7T6A0ZDwpu5GfVkvYUPPuw": "【已复现】n8n 沙箱逃逸导致远程代码执行漏洞(CVE-2026-0863)", "https://mp.weixin.qq.com/s/2rCGeQa4s1MwvLnhtpZGXg": "严重的FortiSIEM漏洞已遭利用", "https://mp.weixin.qq.com/s/AYAqm-EsqYeR8l20S4ndPg": "苹果督促用户更新 iPhone 至 iOS 26.2,以修复遭黑客利用的 WebKit 安全漏洞", "https://mp.weixin.qq.com/s/IXC4ipNSzJ9A-hZCluGBYA": "浙江宇视视频管理系统setNatConfig命令执行漏洞", "https://mp.weixin.qq.com/s/ceYfAtd_8nK_R5owDQtV9Q": "Langflow远程代码执行漏洞(CVE-2025-3248)", "https://mp.weixin.qq.com/s/NOQTXLMpKN92wMrcHjteMQ": "【安全资讯】谷歌 Project Zero 披露 Pixel 9 严重 0-click 漏洞利用链!发送音频文件无需交互即可内核提权控制手机", "https://mp.weixin.qq.com/s/Fd3WRAO6All-iKD-kHZZLA": "CNNVD:人工智能重要漏洞通报(2026年第一期)", "https://mp.weixin.qq.com/s/4xs9nkJAsy4HXQ3jCnUZDA": "【高危漏洞预警】Windows电话服务权限提升漏洞CVE-2026-20931", "https://mp.weixin.qq.com/s/L9iCIbEwjAwmyJUXDvUi9w": "【安全圈】苹果督促用户更新 iPhone 高危漏洞", "https://mp.weixin.qq.com/s/d-F4N_YfiGcQ9gjWcRJLog": "【安全圈】全球恶意广告劫持DNS漏洞,日均欺诈百万用户", "https://mp.weixin.qq.com/s/TU8ffnKzKjnOioP4T1Sh_Q": "Glibc 修复高危堆损坏和已存在数十年的信息泄露漏洞", "https://mp.weixin.qq.com/s/sf5k0lXTB3opsp-acSnp8A": "0day漏洞利用合集", "https://mp.weixin.qq.com/s/nflXSF9y7FE0A5n-uHQOHg": "吃瓜现场:前男友用抖音小号约妹,借口竟说在“挖漏洞”?", "https://mp.weixin.qq.com/s/iVj33mTkm1ItEVdExKEprg": "新型 Kerberos 中继攻击利用 DNS CNAME 绕过缓解措施——POC已发布", "https://mp.weixin.qq.com/s/VoDsZmLIKNTLajTPcBi6ZQ": "流量之眼 - 智能被动漏洞扫描平台", "https://mp.weixin.qq.com/s/j_T9iaGY1oq46mSnvK_rOg": "CVE-2026-23745:node-tar 任意文件覆盖", "https://mp.weixin.qq.com/s/IPLwLwa5yhI1srijYff9fQ": "工业警报:AVEVA 软件中存在严重远程代码执行漏洞,CVSS 评级为 10", "https://mp.weixin.qq.com/s/yl_z9z5lORQ0UCt66ltn4A": "Windows SMB 客户端漏洞使组织面临 Active Directory 完全被攻破的风险", "https://mp.weixin.qq.com/s/yoODAYM6m3H1jjMrmThJYA": "Langflow RCE(CVE-2025-3248)", "https://mp.weixin.qq.com/s/h5HuV1AVYZzPmw5WKUpVxw": "Azure RCE漏洞剖析:单一VM沦陷可致整个租户失守", "https://mp.weixin.qq.com/s/lXSKSNtqKNoRvtRrYFHkOA": "此仓库包含针对易受攻击的 Windows 驱动程序的概念验证 (PoC)", "https://mp.weixin.qq.com/s/AnbKnyQkt7sz51zyxTOUiw": "AI自动化代码审计RCE", "https://mp.weixin.qq.com/s/Fl0BlLmiB0SSoqCCxGklFA": "【漏洞复现】Apache Struts S2-069 XXE漏洞 CVE-2025-68493", "https://mp.weixin.qq.com/s/L5Wok7BVFSCgPrg7_InoVg": "【漏洞复现】大华ICC智能物联管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s/y8wYnzM8gR2OvgoM8esnLg": "CVE-2025-60188 Atarim 插件身份验证绕过漏洞", "https://mp.weixin.qq.com/s/IY_4_bIm9DwuipQDiikF1w": "严重程度最高的 Ni8mare 漏洞影响近 60,000 个 n8n 实例", "https://mp.weixin.qq.com/s/5ze4qDmKflvfq5UYnS2JVg": "漏洞情报(已验证) | 深科特LEAN MES系统FileSync.ashx 存在文件读取漏洞", "https://mp.weixin.qq.com/s/z5nDgsjvuL9qP2eMJEdCJw": "泛微e-office dept sql注入漏洞", "https://mp.weixin.qq.com/s/KpOgJqpQC0WpffV2EGj8mw": "漏洞预警 | Apache Struts XXE漏洞", "https://mp.weixin.qq.com/s/2uOAkz5LnPDd-puFfxc2hg": "中国人民公安大学:浅析车联网漏洞挖掘技术", "https://mp.weixin.qq.com/s/52AoQONvgN2nyDVOsfhjtw": "从资产发现到漏洞利用:一款工具搞定渗透测试全流程", "https://mp.weixin.qq.com/s/rslChRVzWdVeTRVkjQN4Tg": "Pixel 9 零点击漏洞利用链可破坏内核", "https://mp.weixin.qq.com/s/id7weKXxCKScue77LcgcHw": "漏洞复现 | 安科瑞环保用电监管云平台 uploadAttachment任意文件上漏洞", "https://mp.weixin.qq.com/s/SkYyUTxHMC2kYYBYoQrL9g": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/PoY5WKNoLMfdL5GrkGTOZA": "「吃瓜」前男友抖音小号约妹,借口:我在挖漏洞?", "https://mp.weixin.qq.com/s/cif79qvGRPaK6r43oN3TBw": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s/nfqg9uJ0yNqTKFZF1xLZfw": "美国首次公开承认对委内瑞拉使用网络武器:几分钟内关闭并恢复电网供电;2026年1月12-18日CNVD漏洞态势研判报告 | 牛览", "https://mp.weixin.qq.com/s/M1TgMzlXZm7PkALEek8ECg": "Fortinet安全监控系统曝高危漏洞遭积极利用,企业核心威胁感知能力面临失效风险", "https://mp.weixin.qq.com/s/mN4xDSfcapBu2WmfiszgWg": "IM即时通讯系统 fileupload.php 任意文件上传漏洞", "https://mp.weixin.qq.com/s/WqpB99Co-UGRm_LkwHaaRA": "从 XSS 到 RCE:Electron 应用中的真实攻击链", "https://mp.weixin.qq.com/s/TVEryh5WJUyEAYNDtGh_8g": "Jeecg-boot常见漏洞汇总(一)", "https://mp.weixin.qq.com/s/X0b_Wk19h3QlI_OyIr_Q4A": "漏洞验证-帆软 FineReport export∕excel远程代码执行", "https://mp.weixin.qq.com/s/eo4h4_1cX-lXZ_T1zBZX4g": "【漏洞分析】Keras 路径遍历漏洞(CVE-2025-12638)", "https://mp.weixin.qq.com/s/7lWgs_TCUzunvEqFzj6UJw": "漏洞挖掘实战系列(第16期):SSRF高级利用 攻击内网+云服务+Redis全解析", "https://mp.weixin.qq.com/s/lnkJYBVafFhfPdGyUSI4Cg": "Langflow远程代码执行漏洞(CVE-2025-3248)", "https://mp.weixin.qq.com/s/z2wbPCa9XDALojaG_I3DFg": "0120.我是如何发现 MCP 服务器中一个罕见漏洞的——漏洞赏金计划", "https://mp.weixin.qq.com/s/HsAwrkMW1j-uXjJcTEGKaw": "【高危漏洞预警】n8n Python沙箱绕过漏洞CVE-2026-0863", "https://mp.weixin.qq.com/s/PjIKdLDFSlbgtngWkkxSKg": "【3】CVE-2025-38352 - Chronomaly 漏洞利用挖掘揭秘", "https://mp.weixin.qq.com/s/iJxKvofjWIF_RF9Mxz13Rg": "神农SRC 漏洞挖掘实战课:从 0 到 1 成为赏金猎人", "https://mp.weixin.qq.com/s/gqF_w3ieZZQIBavX73qCNQ": "男子利用购物平台漏洞窃取用户信息并骗取佣金1878万被判刑", "https://mp.weixin.qq.com/s/QFUmL0wD5RRrbcGHiNw3bA": "ASP.NET ViewState反序列化漏洞介绍", "https://mp.weixin.qq.com/s/0HIsZ-1s-e1RwACm5S9PQg": "谷歌 Gemini 提示注入漏洞可用于暴露私有日历数据", "https://mp.weixin.qq.com/s/wBRO68S7gC8b7eyRQanQdQ": "【已复现】GnuPG任意文件写漏洞", "https://mp.weixin.qq.com/s/nFqIpnmjGciYWWsoCqNbzw": "我是如何在 Ruby 应用中发现一个依赖混淆漏洞并最终导致 RCE 的", "https://mp.weixin.qq.com/s/42sGaV-VRo1B2ri9xABgYw": "Apache bRPC存在关键远程命令注入漏洞,影响1.15.0前所有平台版本", "https://mp.weixin.qq.com/s/KCGwiwMQOESKFRD5ee8o6g": "Livewire Filemanager 漏洞导致web 应用易受RCE攻击", "https://mp.weixin.qq.com/s/_uW8aze4RYFzrxVAkw1B8w": "日均欺诈百万用户,DNS漏洞沦为恶意广告温床?", "https://mp.weixin.qq.com/s/aHJ1oDTdTj8UHvpHoQWiqQ": "JWT漏洞原理、攻击、防御全解析", "https://mp.weixin.qq.com/s/pJYpYZbEvTfK6iPdwR8fgg": "Cloudflare WAF存在高危0day漏洞", "https://mp.weixin.qq.com/s/J_s-jJlO-4VTOoZXbfDqkQ": "从资产发现到漏洞利用:一款工具搞定渗透测试全流程", "https://mp.weixin.qq.com/s/3Ag5JRTOkrt1cEBqENrGHA": "VulnHunter - AI 漏洞猎人v6.0 专业级漏洞扫描与渗透测试工具", "https://mp.weixin.qq.com/s/cXYcHI4IGqKKj1kfuT0a5g": "最新知识库和漏洞库推荐", "https://mp.weixin.qq.com/s/RUypCGbGbqyRgEdAup-IMQ": "诗歌竟成AI安全漏洞;朝鲜远程渗透计划年牟利6亿美元 | 2025网安行业优质播客精选集⑭", "https://mp.weixin.qq.com/s/KEVUeGPbhR3FJoeETnneLw": "新型Kerberos中继攻击利用DNS CNAME记录绕过防护措施,PoC已发布", "https://mp.weixin.qq.com/s/U4OsAdecfnVFUDrqs0tl2A": "Src--支付漏洞实战", "https://mp.weixin.qq.com/s/DuVSYgVFLRYerPuu4ZKsQA": "某环保用电监管平台任意文件上传漏洞", "https://mp.weixin.qq.com/s/f0QCqqDHavilKnQx9cTRNA": "【接口漏洞第八章第一节】挖洞前必修课:一文读懂GraphQL API核心概念", "https://mp.weixin.qq.com/s/yyB_uac5NaT8JxsJJQkNhg": "雷神众测漏洞周报2026.1.12-2026.1.18", "https://mp.weixin.qq.com/s/QKRTVKRmEa1Vp-dTs29eqA": "CVE-2025-61686 React Router∕Remix Run 路径遍历漏洞代码分析", "https://mp.weixin.qq.com/s/T9h433xLkgawItlPxzSDxg": "全球恶意广告劫持DNS漏洞,日均欺诈百万用户", "https://mp.weixin.qq.com/s/VQj7Bnes28GLq9mclxLCpQ": "满10人开班:系统0day安全——车联网安全入门(第8期)", "https://mp.weixin.qq.com/s/6jPm01eFstPD9PoKgPnXvw": "新型Kerberos中继攻击利用DNS CNAME记录绕过防护措施 - PoC已发布", "https://mp.weixin.qq.com/s/gkvY_aG8zNbA8m1yc_Eqcw": "DudeSuite 漏洞播报 全网漏洞早知道【20260120】", "https://mp.weixin.qq.com/s/qvfvhWt0gYesQ7G7fF-I2g": "【玄域】web∕app靶场-新增2个验证码缺陷&密码重置漏洞靶场", "https://mp.weixin.qq.com/s/G0Qb0TnBHugPfBp5XjFeMQ": "灵脉IAST 5.4 升级,AI漏洞治理 X 业务逻辑漏洞检测重磅上线", "https://mp.weixin.qq.com/s/tPk20E0aI9aQeeWIdS1hHw": "流量之眼 - 智能被动漏洞扫描平台", "https://mp.weixin.qq.com/s/n33dKB1d9Lh9OdyoO3Nwag": "WEB漏洞扫描器(新增企业版)Invicti-Professional-V26.10.0(自动化爬虫扫描漏洞)更新", "https://mp.weixin.qq.com/s/cPMFl-eQdH4AnUvKjbCKSA": "东胜物流软件GetPrintInfo接口存在敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s/oV5VMLh5jrnmhSMJgkWcig": "NETGEAR 路由器环境模拟与漏洞分析", "https://mp.weixin.qq.com/s/B3Or_U8bsirv2ncZlyMe5A": "Fortinet漏洞、RedLine Clipjack、NTLM破解、Copilot攻击热门事件", "https://mp.weixin.qq.com/s/qF1TAKWiTC11SS3kGaefkw": "工具推荐 | Swagger API漏洞自动化填充参数利用工具", "https://mp.weixin.qq.com/s/iYyM2y6ucPgfs1PTs6Fpcw": "Cloudflare曝零日漏洞:攻击者可借证书验证路径绕过WAF访问任意源站", "https://mp.weixin.qq.com/s/wXYL-QvkaZHnKKfDxUUOgQ": "DeepAudit——代码漏洞挖掘多智能体ai系统", "https://mp.weixin.qq.com/s/LdVOZQlsZNxV9N-ejmYjkw": "大小写即漏洞:sqli-labs 第 27 ∕ 27a 关通关全解析", "https://mp.weixin.qq.com/s/EoNFdD_FYBgna9jGi1Qxew": "DeepAudit——代码漏洞挖掘多智能体ai系统", "https://mp.weixin.qq.com/s/W05-fdErYbJVg6rHPWR2cA": "CVE-2025-60188 Atarim 插件身份验证绕过漏洞", "https://mp.weixin.qq.com/s/bmCWNdDkgoL9vw_w5ezfzw": "漏洞预警 | 东胜物流软件任意文件上传漏洞", "https://mp.weixin.qq.com/s/DuZr2YjuGRdzfmwHkNZqQQ": "漏洞情报(已验证) | 中成科信票务管理系统 SaleProduct.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s/bTwiDDF_e5AOHVLrwkQTCQ": "CVE-2026-0629:TP-Link VIGI漏洞允许攻击者重置管理员密码", "https://mp.weixin.qq.com/s/xEUHkMqbdsvrSjMOvj1FgQ": "SweetBabyScan,一款轻量级内网资产探测漏洞扫描工具", "https://mp.weixin.qq.com/s/AnQSGEY_O2v53cjdIq57Dw": "复现(CVE-2026-21440)@adonisjs∕bodyparser路径遍历漏洞利用", "https://mp.weixin.qq.com/s/F8RsqiH_3AhDzXy3yt1Tyg": "网安实验干货每日分享XSS漏洞分类-0121", "https://mp.weixin.qq.com/s/JlNw3RDiA3tNYT44DhISDw": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s/zNwv0w0gMmhgaWLA4bgpdw": "一文解析 .NET 分布式事务组件反序列化漏洞", "https://mp.weixin.qq.com/s/2TCqGHaMP-cSwueyZYYZlg": "Cloudflare修复了ACME验证漏洞,该漏洞允许绕过WAF访问源服务器", "https://mp.weixin.qq.com/s/N-C4nOQ9FdPpdmw9teY_OA": "ImageMagick 安全警报 (CVE-2026-23876):“XBM”图像上传触发大规模堆溢出", "https://mp.weixin.qq.com/s/vtypoVflLaesW0nsnY48zw": "【红队】一款专业的多协议漏洞利用与攻击模拟平台", "https://mp.weixin.qq.com/s/4QUyKEmv1qfm9lLQEcJUUg": "CVE-2026-21440 AdonisJS框架的关键路径遍历漏洞", "https://mp.weixin.qq.com/s/E3hZnLfIjpqKSjoVCXJ14w": "Redis远程代码执行漏洞曝光:研究人员详细描述了官方容器中针对“简单”堆栈溢出的漏洞利用方法", "https://mp.weixin.qq.com/s/x2G8z7_PAQ0ASGxFEsSK_Q": "漏洞预警 | ComfyUI-Manager远程代码执行漏洞", "https://mp.weixin.qq.com/s/ijrV5xSRx6a2CzFUrlw_CA": "当 Stack Engine 背叛了 CPU:详解 AMD 最新硬件级漏洞 StackWarp", "https://mp.weixin.qq.com/s/ZfCZJU4lZrZg8BJFdl343w": "ShiroExploit_通过另类手法实现Shiro一把梭", "https://mp.weixin.qq.com/s/1iy0aoBNc0b3dvMC1AzjUg": "流量之眼 - 智能被动漏洞扫描平台", "https://mp.weixin.qq.com/s/wZUjoI-UknD3klfEYeNcLg": "【40万POC???】小场面,看纽克如何拿捏海量POC场景", "https://mp.weixin.qq.com/s/VH4Gvt_pAy3ik0Yfm-6ADw": "【全网首发】2025 0∕1∕N Day漏洞清单(超长版)", "https://mp.weixin.qq.com/s/HOMtm3b2Kh9FqN2LkKd8Uw": "可访问全球任意主机:Cloudflare WAF 0-day漏洞剖析", "https://mp.weixin.qq.com/s/eJU8djVlEW2tnxBksnOdvA": "Cloudflare WAF 零日漏洞:可访问全球任何主机", "https://mp.weixin.qq.com/s/8tpfLLv56fawojZBhnBjvw": "全是高危漏洞?CVSS 4.0 落地指南想帮安全团队挤挤漏洞的水分", "https://mp.weixin.qq.com/s/5oo7b9TJ20ojauenFrfXJw": "Oracle 2026年1月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s/htPJk0Hp4LLl20Is3pf1lg": "旭帆易云视信息科技有限公司 EasyCVR getbaseconfig 信息泄露漏洞(CVE-2025-1595)", "https://mp.weixin.qq.com/s/Kx71tqWUczeSAZB90SLN_w": "教育类SRC漏洞挖掘场景分析", "https://mp.weixin.qq.com/s/sFLHzWAJCCq4d1zxm6Ftbg": "研究显示:GPT-5.2可稳定量产零日漏洞利用", "https://mp.weixin.qq.com/s/4zDilvWzK5g7sogY6YkyPg": "iOS 和 iPadOS 的新漏洞使数百万部 iPhone 面临风险", "https://mp.weixin.qq.com/s/zkp3wzgK9iyxmUedLokYlA": "Cloudflare WAF绕过漏洞:全球任意主机访问", "https://mp.weixin.qq.com/s/wFstbaEeKmaRvN9xGB719Q": "漏洞挖掘实战系列(第17期):反序列化漏洞全解析 PHP∕Java∕Python 三大语言实战", "https://mp.weixin.qq.com/s/zMXlRyesyjnBQiyOK-piUA": "漏洞复现 | React(next.js)存在远程命令执行漏洞(CVE-2025-55182)", "https://mp.weixin.qq.com/s/9fWdC9ymTn3mgtfDI924zQ": "【吃瓜】新年第一个“0day”", "https://mp.weixin.qq.com/s/IbNUWk8P-JOlZdpkdABb3A": "【绕过Bypass】实战waf绕过(文末有edu通杀0day)", "https://mp.weixin.qq.com/s/zT70DLu9h_8-ndCR17SV0w": "微软Copilot AI漏洞争议:安全边界还是已知局限?", "https://mp.weixin.qq.com/s/YJEdNT3MEJyoMNj0G5J2_w": "信息安全漏洞周报(2026年第3期)", "https://mp.weixin.qq.com/s/j1U3OQOI2SatYWq-DZ7qvQ": "UC浏览器一键内存损坏漏洞:利用V8补丁间隙漏洞窃取您的数据", "https://mp.weixin.qq.com/s/mk6LGeOENGoO9jn1iyPdlQ": "zero-day点击远程漏洞攻击链 - 可绕过 iOS 加密信任(已在 iOS 18.4.1 中修复)", "https://mp.weixin.qq.com/s/_igxxjZSKKPSR5u-qqZ4IQ": "智能⻔锁蓝⽛通信模块整数溢出漏洞分析", "https://mp.weixin.qq.com/s/RxXDkelQg8xYN2fcfy0UDw": "[0day]某erp系统存在任意文件上传漏洞", "https://mp.weixin.qq.com/s/zq_XzOyIH9YExeY_nUyhjA": "CNVD漏洞周报2026年第2期", "https://mp.weixin.qq.com/s/HP-e-6eddmzEtr6U3EnaMA": "分享多个EDUSRC&企业SRC中、高危漏洞(已修复)", "https://mp.weixin.qq.com/s/ekoxDuejXY8oCm3uEynu1w": "0121.我如何将存储型 XSS 漏洞转化为账户接管:利用 WebSocket 驱动的应用程序", "https://mp.weixin.qq.com/s/PA5EhntsCyWfQT2kTE1yNA": "【已复现】多款 Linux telnetd服务中招,仅需一个参数即可远程获取 Root 权限,GNU Inetutils telnetd 远程认证绕过漏洞(CVE-2026-24061)", "https://mp.weixin.qq.com/s/olUhcDJP3u5yK85_jZN02w": "百款AI应用集体“裸奔”:云端漏洞引发数据灾难", "https://mp.weixin.qq.com/s/kS6rZDDpz0f6xl5aW1_3BA": "Cloudflare 零日漏洞:可绕过 WAF 访问全球任意后端主机", "https://mp.weixin.qq.com/s/kkLsRsc_IrP8gkmfUe-BBg": "【已复现】GNU InetUtils telnetd 远程身份认证绕过漏洞(QVD-2026-4408)安全风险通告", "https://mp.weixin.qq.com/s/cdWpY8JO9e1cYQ3r-RIVpg": "Redis 远程代码执行漏洞曝光:官方容器现“老式”栈溢出高危风险", "https://mp.weixin.qq.com/s/t4F-x2ojV5-ZhTTH_UoHgQ": "记某edusrc的任意用户密码重置漏洞挖掘", "https://mp.weixin.qq.com/s/ctgdyhvNmaIlnJIMeyWLdw": "东⽅通(TongWeb)应⽤服务器 EJB 反序列化远程代码执⾏漏洞", "https://mp.weixin.qq.com/s/DDpmajusKV6Ul7kCDd7aSw": "WordPress插件AdvancedCustomFields:Extended曝高危漏洞", "https://mp.weixin.qq.com/s/cLkmlGSUgnQHKX-S_grqCA": "【接口漏洞第八章第二节】挖掘GraphQL漏洞第一步:高效发现端口的三大实战技巧", "https://mp.weixin.qq.com/s/6qGhmaD7lpwa1c9xJq66GA": "Cloudflare 0Day漏洞可绕过防护直接访问任意主机服务器", "https://mp.weixin.qq.com/s/Do2tOGIiFqA3vpNX6jwG6A": "Windows SMB客户端漏洞可导致攻击者掌控Active Directory环境", "https://mp.weixin.qq.com/s/TgnsahDlk47F73-kVEg0-w": "Anthropic MCP Git 服务器漏洞可用于访问文件和执行代码", "https://mp.weixin.qq.com/s/P-zBho0S5gxUgX8CVjTVMw": "Cloudflare 修复可绕过 WAF 访问源服务器的 ACM 验证漏洞", "https://mp.weixin.qq.com/s/dhbggM7euhNdc_AHz3sjww": "【安全圈】WordPress 插件漏洞导致 10 万余个网站面临权限提升攻击风险", "https://mp.weixin.qq.com/s/4F2tY7AP-Qyi5Tak7lPVeg": "未来已来:漏洞挖掘智能体VulnAgent 发现两个Suricata 高危漏洞,并获官方致谢!", "https://mp.weixin.qq.com/s/G5gYUhFb9FpBIsyA8-WWiA": "Anthropic官方Git MCP服务器曝链式漏洞,可致文件访问与代码执行", "https://mp.weixin.qq.com/s/hVSCK-VKXjF3gexImuTLjA": "最新高危漏洞威胁情报合集 (2026-01-21)", "https://mp.weixin.qq.com/s/cRPHl0FEL3kDkyQZ7GYo7g": "攻防技巧|快速高效挖掘.net系统漏洞", "https://mp.weixin.qq.com/s/ZORMIVuNYgYPFZbxshGw7Q": "Cloudflare WAF 零日漏洞:可访问全球任何主机", "https://mp.weixin.qq.com/s/678gSaJ-b3f2AgKK1A813Q": "【高危漏洞预警】GNU InetUtils telnetd远程认证绕过漏洞CVE-2026-24061", "https://mp.weixin.qq.com/s/-fxvgoVz5GQU6mOzozYG6w": "缓解Web应用程序漏洞从了解OWASP Top 10开始", "https://mp.weixin.qq.com/s/BMcWmEx-eOHcnxLR7adA9g": "常见OAuth 漏洞:未验证token", "https://mp.weixin.qq.com/s/uvGBBrunRX0YfXPc0tzWJw": "能注入 ≠ 理解漏洞:sqli-labs 第 29 关的真正考点", "https://mp.weixin.qq.com/s/SYJIrOezFBMMmNVoeCPLYw": "Windows Telephony 服务权限提升漏洞(CVE-2026-20931)", "https://mp.weixin.qq.com/s/9_TUGRuTHWbjWV4Iy6reTA": "Webpack打包js.map泄露导致的通杀0day", "https://mp.weixin.qq.com/s/yy93HOymGEFwwmK41wm6qg": "【工具】Hikvision海康威视综合漏洞利用工具", "https://mp.weixin.qq.com/s/rOjZfTamxOosfHA5tWXn8w": "李某以技术手段窃取赌博网站184万余名中国公民个人信息,已扣押其180余个比特币|利用购物平台漏洞窃取用户信息并骗取佣金1878万被判刑", "https://mp.weixin.qq.com/s/Wai-Tb7B3CReHRw3BUPYJw": "【红队】一款专业的多协议漏洞利用与攻击模拟平台", "https://mp.weixin.qq.com/s/dU0G9lyFItVrY2w4QbzflQ": "新Shiro反序列化漏洞一站式综合利用工具", "https://mp.weixin.qq.com/s/fHTgD2xXT5ART3_6iBRFWg": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s/-0zSGpUQHYoSOTuUaxUrHQ": "漏洞预警 | OpenCode远程代码执行漏洞", "https://mp.weixin.qq.com/s/M_HqXbkyI1mS60xhydHzIg": "等保测评人员必备(Golin 弱口令 漏洞 扫描 等保 基线核查工具)", "https://mp.weixin.qq.com/s/q81u9yaeC0rPr8MkS8hkBw": "【已复现】GNU InetUtils telnetd 远程身份认证绕过漏洞(QVD-2026-4408)", "https://mp.weixin.qq.com/s/Xe8wJeKy19NpLcqS_YElIQ": "Vivotek 严重漏洞授予 root 权限 (CVE-2026-22755)", "https://mp.weixin.qq.com/s/fOibkfQKvN8Ics33uLqV9g": "漏洞情报(已验证) | 友数聚科技-CPAS审计管理系统 存在文件读取漏洞", "https://mp.weixin.qq.com/s/XIgbXhuy-8iB6TNHR5QDXg": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/UfQQRjykQEQ8b3daTtgX7w": "CVE-2026-1245:Node.js 二进制解析器存在代码注入漏洞", "https://mp.weixin.qq.com/s/8Qbza74It7C2a3KHd0PjNg": "经典的前端鉴权绕过漏洞", "https://mp.weixin.qq.com/s/akf5Cw9EAuvZ7rvV9XGbJQ": "Apache配置以及漏洞", "https://mp.weixin.qq.com/s/Aserf-XcM_VDo4teW6FDiA": "CVE-2026-21440 AdonisJS框架的关键路径遍历漏洞", "https://mp.weixin.qq.com/s/Q2hUkyEnhDa9GYIbTsVLxg": "如何用AI挖掘帆软表达式注入0day", "https://mp.weixin.qq.com/s/hNfyByebe8NhUzgEPwAWgg": "普华PMS OfficeService存在任意文件读取漏洞【已复现】", "https://mp.weixin.qq.com/s/jG2hBYYv7V9Z9NRis58q8Q": "【AI代码审计】漏洞挖掘多智能体系统", "https://mp.weixin.qq.com/s/mGeC5uOsD9dGqjyyDmORaw": "ShiroExploit_通过另类手法实现Shiro一把梭", "https://mp.weixin.qq.com/s/piPYyb2z20u4jfiy5iyP2w": "【实战】利用 Salesforce ID 格式特性实现用户遍历", "https://mp.weixin.qq.com/s/n6iYKFOJaqDgAGEXGH3YAQ": "网安实验干货每日分享反射型XSS漏洞挖掘-0122", "https://mp.weixin.qq.com/s/ilgelT0vc-_eXKW7ydl5pA": "StealC木马源码泄露后续:安全研究员教你如何通过控制台漏洞反向溯源", "https://mp.weixin.qq.com/s/s-PvYADfibYQTpjdSG_x_Q": "CNNVD关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s/bXIqI7_iO0QfN0Ok48epQQ": "【已复现】易宝OA StockTakeIsPartNumber存在SQL注入", "https://mp.weixin.qq.com/s/K78zZTgQCkGPLt7YbyRwaQ": "针对若依系统nday的常见各种姿势利用", "https://mp.weixin.qq.com/s/l1PQ1YDcUezaMVT1-unQ7Q": "大洞,速修!!!Linux Telnetd 远程代码执行!", "https://mp.weixin.qq.com/s/L8SuzCB00EypG8XKPT5ALw": "【火速排查】Linux Telnet 远程代码执行!", "https://mp.weixin.qq.com/s/r4s3jD2XpSHYZG5h5e8I8Q": "巨洞 CVE-2026-24061 Linux Telnetd 远程代码执行", "https://mp.weixin.qq.com/s/IR1bJGUKWK-edwRF1znjAw": "细一点 你说的没有含金量了从爬虫到特权:SRC路径遍历漏洞的全链路狩猎", "https://mp.weixin.qq.com/s/ozPG8_QVHRBvKPU8aSozfQ": "大洞,必看!Linux Telnet 远程代码执行!", "https://mp.weixin.qq.com/s/iueFrUg7geKBaMprqyyfQg": "GNU InetUtils telnetd 远程认证绕过漏洞(CVE-2026-24061)", "https://mp.weixin.qq.com/s/-MlKa1FijrrsMwoCU5ujBQ": "【红队】Shiro反序列化漏洞一站式综合利用工具", "https://mp.weixin.qq.com/s/hWf6CRlpsZFru7wrdbguaA": "智监・精防・速处——企业漏洞智能防护中枢", "https://mp.weixin.qq.com/s/HTOhttfT0eDCcvFaTpVhYg": "Oracle 2026年1月多产品高危漏洞风险警告", "https://mp.weixin.qq.com/s/3xdkVXVdfX7dazQ32PUUZQ": "Shiro反序列化漏洞一站式综合利用工具 -- ShiroExploit(1月21日更新)", "https://mp.weixin.qq.com/s/Wb6D_-pHQZVjemZti3QGsQ": "安全小知识-第二十期_Redis未授权访问漏洞利用与修复", "https://mp.weixin.qq.com/s/ZYIzxnSoCnDyseN12txeDA": "天锐绿盾审批系统 uploadWxFile.do 任意文件上传漏洞", "https://mp.weixin.qq.com/s/WPd5yUTgPSP3isO2DyepNw": "附排查方法!GNU InetUtils Telnetd 远程认证绕过漏洞(CVE-2026-24061)", "https://mp.weixin.qq.com/s/HETieO2Ts06x3SzcKf-fjw": "Spring Boot Actuator未授权访问漏洞", "https://mp.weixin.qq.com/s/6mm-VK2MRNfk61dVXkTSjQ": "【在野利用】SmarterMail 管理员密码重置认证绕过漏洞", "https://mp.weixin.qq.com/s/aHJdEhJ0wad5jy95H-5BfQ": "严重漏洞WhisperPair曝光:黑客可通过蓝牙音频设备实施追踪与窃听", "https://mp.weixin.qq.com/s/qAJ4jNFQ3lRKmOOOzJ8DJg": "如何在 Anthropic 官方的 Git MCP 服务器中发现代码执行漏洞", "https://mp.weixin.qq.com/s/xGvTLEX8S9tBXKQRp5lchw": "【在野利用】SmarterMail 身份认证绕过漏洞(QVD-2026-4572)安全风险通告", "https://mp.weixin.qq.com/s/7a6T5BzJjQOwa3cx_eEw6A": "【漏洞通告】vLLM auto_map 动态模块远程代码执行漏洞 (CVE-2026-22807)", "https://mp.weixin.qq.com/s/esLnBfTwUWcbs_VqBHv4xA": "【漏洞通告】GNU InetUtils telnetd 存在远程认证绕过漏洞 (CVE-2026-24061)", "https://mp.weixin.qq.com/s/DlItFJYQPLPsypCrYMHB_g": "【556】【有靶场】CVE-2026-24061 GNU Inetutils telnetd 远程代码执行漏洞", "https://mp.weixin.qq.com/s/QtSmkvWeDD9qerLDIXnNpw": "大语言模型驱动的漏洞利用自动化时代来临", "https://mp.weixin.qq.com/s/7VwPrcxgru6SVdi3ISQYuQ": "Jeecg-boot常见漏洞汇总(二)", "https://mp.weixin.qq.com/s/waGpfH8zdgwFBDtumlfBGA": "GNU InetUtils telnetd 远程认证绕过漏洞(CVE-2026-24061)", "https://mp.weixin.qq.com/s/7u29pXtloSrq-d_XBgmQGA": "【漏洞检测POC】GNU Inetutils Telnetd 远程认证绕过漏洞(CVE-2026-24061)", "https://mp.weixin.qq.com/s/9gaJgRZmNDoZBjKb5jXwfA": "【漏洞复现】CVE-2026-24061 直接拿root权限!GNU InetUtils telnetd远程认证绕过漏洞!", "https://mp.weixin.qq.com/s/g6NqBpjmjLnhgvRYr2lUOw": "n8n远程代码执行漏洞简报(CVE-2026-21858)", "https://mp.weixin.qq.com/s/8qEzJlihCm0gUQ6aP2Y1jQ": "漏洞预警 | GNU InetUtils telnetd 远程认证绕过漏洞(CVE-2026-24061)", "https://mp.weixin.qq.com/s/eQQJwaBF3at6iNvkPaVNiw": "从单一 ID 到机密报告披露 —— 打破真实漏洞赏金计划中的模式", "https://mp.weixin.qq.com/s/-GKFC-edSfsZ35oAaMuqmA": "GitLab 多个漏洞允许绕过 2FA 和发起 DoS 攻击", "https://mp.weixin.qq.com/s/IArsd4o_TI2hScRLo6ffCw": "欧盟漏洞数据库正式上线,终结对美国CVE体系的依赖", "https://mp.weixin.qq.com/s/TqPMUdX2Jdc1hKKYIrJJcA": "某edusrc小程序rce漏洞挖掘", "https://mp.weixin.qq.com/s/3NQahaPuHxC6hXxIBgG_Ng": "CVE-2026-24061:GNU telnetd 远程身份验证绕过漏洞(高危)", "https://mp.weixin.qq.com/s/6l0O2PL1a_VnWCHArk-BVg": "【接口漏洞第八章第三节】下一个漏洞赏金:或许就藏在未净化的GraphQL参数里", "https://mp.weixin.qq.com/s/WhtAkCYQ1-hj7tI4weoUxw": "【WordPress专题08】全网首发POC及漏洞分析 CVE-2025-15403权限提升漏洞", "https://mp.weixin.qq.com/s/bNbMgMLMKYnQf8IqhgTuPQ": "【论文速读】|大语言模型在代码漏洞分析中的应用:一项概念验证研究", "https://mp.weixin.qq.com/s/8eCk0AGCaoM4GCyRDhFb1w": "【漏洞通告】GNU InetUtils Telnetd远程身份验证绕过漏洞(CVE-2026-24061)", "https://mp.weixin.qq.com/s/XdIczkpz9cy70ZE2H8lv9g": "漏洞复现 | 昂捷CRM UploadFile 任意文件上传漏洞", "https://mp.weixin.qq.com/s/kjDJPjjzr0mcDcQSk5BZtg": "做了几年安全后才明白:真正危险的不是漏洞,而是系统没人懂", "https://mp.weixin.qq.com/s/I_Pmc2-ZwO6nuaGoE17Org": "【漏洞复现】CVE-2026-24061 GNU InetUtils Telnetd 远程身份验证绕过漏洞", "https://mp.weixin.qq.com/s/XU2KLWLeqT9JE3NtoJ9s2w": "漏洞挖掘实战系列(第18期):高级Pwn技巧 ROP进阶+堆风水+格式化字符串漏洞", "https://mp.weixin.qq.com/s/jtS_cBaS8wcICG99Go18gQ": "【漏洞通告】GNU InetUtils Telnetd 远程认证绕过漏洞(CVE-2026-24061)", "https://mp.weixin.qq.com/s/kgpyns7ixRzulEp-4RaKTQ": "Orval 中存在严重的代码注入漏洞,存在供应链安全风险", "https://mp.weixin.qq.com/s/D2Hj1GqhvDCjrX63sNHD1A": "【安全圈】Cloudflare 零日漏洞:可绕过 WAF 访问全球任意后端主机", "https://mp.weixin.qq.com/s/Q5s1-1YfWoEAERbczsbL6A": "NVIDIA NSIGHT Graphics for Linux 漏洞允许代码执行攻击", "https://mp.weixin.qq.com/s/Uw6C-6LadvG5jzYBholWUQ": "CNNVD | 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s/jY-EmFAb2CX9k_Ws1AStDQ": "【成功复现】Mailpit服务端请求伪造漏洞(CVE-2026-21859)", "https://mp.weixin.qq.com/s/ntrezvylsSZyWHd7rKFrTg": "【高危漏洞预警】SmarterMail身份认证绕过漏洞", "https://mp.weixin.qq.com/s/BJiz2NU5xP6g2ix9BefFHg": "大华智能物联ICC综合管理平台evo-apigw∕evo-cirs∕file∕download接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s/BXrnI0sZM92SATpmUdYkTA": "他们说这不可能,但我用 Claude 聊天就逆向提取了商业扫描器全部漏洞规则", "https://mp.weixin.qq.com/s/4duPcpnWymGGnvYZkrFrgg": "GPT-5.2可规模化开发0Day漏洞利用程序,网络安全攻防格局面临颠覆", "https://mp.weixin.qq.com/s/vgRuAGD7ZCehLka6qOevAw": "漏洞复现 || Mailpit服务端请求伪造", "https://mp.weixin.qq.com/s/cLYZnYwasBNTTzHB82t9Mg": "特斯拉遭黑客攻击,37个零日漏洞在Pwn2Own Automotive 2026大会上被演示。", "https://mp.weixin.qq.com/s/p0W9O4xwN_e1LCRAzg9b9g": "告别手动构造 Payload:Burp 文件上传漏洞测试插件,1000 + 绕过 Payload 全解析|工具分享", "https://mp.weixin.qq.com/s/XGx2PYSS0JK0tleL7tFbPA": "秒获Root权限!CVE-2026-24061 批量扫描工具!", "https://mp.weixin.qq.com/s/8YuFlyeuk-VJAtxO2VYgMw": "漏洞情报(已验证) | 友加畅捷 GetAccountList 存在敏感信息泄露漏洞", "https://mp.weixin.qq.com/s/soxHxzHlonxqtAoJjXiAkg": "逆天漏洞:《明日方舟:终末地》海外首日公测上线就遭遇T0级事故", "https://mp.weixin.qq.com/s/T5BUIkdENVA7q2LI8u_uBQ": "0day?已修复漏洞复活了!P2P安全问题", "https://mp.weixin.qq.com/s/70_DPMJ-pYIddHFdn2uJmQ": "【已复现】用友Bip LoginWithV8存在路径穿越(CVE-2025-66744)", "https://mp.weixin.qq.com/s/l4FxwHNyzZwLPK1QEAEgFQ": "漏洞复现 | 深信服运维安全管理系统 get_all_application_release 敏感信息泄露漏洞", "https://mp.weixin.qq.com/s/D1MCddkEOYAjc86i2iCrlQ": "CVE-2026-24061 telnet远程认证绕过漏洞批量检测工具", "https://mp.weixin.qq.com/s/H4YX04tne4xEY8l2kTS2sw": "漏洞预警 | n8n沙箱逃逸漏洞", "https://mp.weixin.qq.com/s/ZCM2ZmrEu0DAPi8vJ8p0oQ": "新鲜出炉,Shiro 反序列化漏洞一站式综合利用工具", "https://mp.weixin.qq.com/s/RHFXDnrbuC6FBstmuRn9bw": "又是 Prompt 注入!复盘 CVE-2025-68143:如何利用 Git 配置缺陷实现从“对话”到“提权”的跨越", "https://mp.weixin.qq.com/s/Rgqvp9TxKk6w2yzmL9iRUQ": "研究显示:GPT-5.2可稳定量产零日漏洞利用", "https://mp.weixin.qq.com/s/JdFHGnPoYvYeMxx388qnQw": "漏洞管理已死,暴露面管理才是王道!", "https://mp.weixin.qq.com/s/o2uNvo9IR99I5nMosm5wCA": "“尽情享受您的管理员权限”:SmarterMail 关键远程代码执行漏洞在野外被利用", "https://mp.weixin.qq.com/s/yVaRh_6xzV34iiBpWF9KWw": "针对若依系统nday的常见各种姿势利用", "https://mp.weixin.qq.com/s/Im8V9aC0QCyvCYmDDHSeMw": "GNU InetUtils telnetd 存在超过11年的严重漏洞,攻击者可绕过登录并获得 root 权限", "https://mp.weixin.qq.com/s/ccAjrPywlZzMtB8TTkdVnA": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s/1y53-Iu3JEuNqmiZN-OyIQ": "CVE-2026-23837:MyTube 认证绕过漏洞深度解析", "https://mp.weixin.qq.com/s/g9s7GG35kW3vupXjQPOgDQ": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/2RAosh0fuuQEqELTvvkMVg": "Shiro反序列化漏洞一站式综合利用工具 -- ShiroExploit(1月21日更新)", "https://mp.weixin.qq.com/s/jSZGxekaCsf7ouAPbZl8nQ": "【漏洞复现】(国标28181)WVP视频平台存在信息泄露", "https://mp.weixin.qq.com/s/gc7Fy6MnKqAHZ4CqxIStYA": "亿赛通CDG AppExamList.jsp sql注入漏洞", "https://mp.weixin.qq.com/s/T9vh9hb4Qh1Y0i0PTxu_OQ": "医生倒卖逝者信息长达4年?除了堵漏洞,更要用“魔法”打败“魔法”", "https://mp.weixin.qq.com/s/zhsleev4t_IApCt9a7IhRQ": "DudeSuite 漏洞播报 全网漏洞早知道【20260123】", "https://mp.weixin.qq.com/s/0c3wQyBoulHIYSGQF-V9Jw": "2026年SaaS安全13大威胁:从零日漏洞到高级持续性威胁", "https://mp.weixin.qq.com/s/bzKzZvws5oyR-93VtS6ftg": "梆梆安全发布《2025年移动应用安全风险报告》:超80%应用存高危漏洞,隐私合规率不足三成", "https://mp.weixin.qq.com/s/VVpBm5KbFa38kndt0Ghr1A": "【逻辑漏洞】【有靶场】某校*派出现优惠卷无限领取漏洞", "https://mp.weixin.qq.com/s/Elt7ueHfweuw5VlHHdZa7Q": "伪造漏洞的来了", "https://mp.weixin.qq.com/s/9bLUTAz1KmsqpOTvd46AQg": "思科修复已遭利用的 Unified CM RCE 0day漏洞", "https://mp.weixin.qq.com/s/U1GMcISBNQJFY_kn0yPwLA": "SmarterMail 认证绕过新漏洞被用于劫持管理员账号", "https://mp.weixin.qq.com/s/tY6blgq3HeOqSydrmR_HSw": "我们用AI提炼了88636个真实漏洞的\"黑客思维\",现在把方法论开放给所有人", "https://mp.weixin.qq.com/s/joYcyaFX_hjLbBG5d0J7eQ": "【玄域】Web∕App渗透靶场-新增1个web端逻辑缺陷类靶场&5份实战漏洞报告", "https://mp.weixin.qq.com/s/KAqtymxTi4bZEsO-bZ_l4g": "【已复现】CVE-2026-24061 GNU Inetutils telnetd 远程认证绕过漏洞复现与分析", "https://mp.weixin.qq.com/s/dXZvXPjSErLav_6B1ybQgA": "首尔特辑 | 白泽PoC 2025 参会小记", "https://mp.weixin.qq.com/s/Tg0O0GffckqQLtckTUgZsg": "紧急漏洞披露:CVE-2026-24061telnetd身份验证绕过", "https://mp.weixin.qq.com/s/1LuEQTbtF5UJO0Uv6kWJ7w": "信息安全漏洞周报【第057期】", "https://mp.weixin.qq.com/s/rCNYLUTTtikLE6D-gHgG9A": "代码的特洛伊木马:为何AI生成的代码是LLM安全漏洞的“照妖镜”", "https://mp.weixin.qq.com/s/hIS7CA_ZSg2BjU-qvQOFig": "用友YonBIP LoginWithV8接口存在任意文件读取漏洞CVE-2025-66744 附POC", "https://mp.weixin.qq.com/s/hHO8kUdrcu4pcTUJ-hv0ng": "CVE-2026-24061 GNU Inetutils telnetd 命令注入涉及汽车零部件", "https://mp.weixin.qq.com/s/uskS3aS3qLscYBLhmwgsTQ": "安全热点周报:Cisco 修复了 Unified CM 和 Webex 中已被积极利用的零日漏洞", "https://mp.weixin.qq.com/s/KXBzelKEsfpFtATwx2DSkg": "data-cve-poc:近两年的漏洞CVE-POC合集", "https://mp.weixin.qq.com/s/wV547T3xTfYvtTyjjLrvXg": "CVE-2026-22200:osTicket工单直通系统Shell的漏洞剖析", "https://mp.weixin.qq.com/s/vngnc3t2mZfVMflpOhYaYw": "Fortinet 确认 FortiCloud SSO 身份验证绕过漏洞正被积极利用", "https://mp.weixin.qq.com/s/Tn0rMkHBvS73dmj9tRSuZQ": "【已复现】漏洞预警 | GNU InetUtils Telnetd远程认证绕过漏洞(CVE-2026-24061)", "https://mp.weixin.qq.com/s/6CAy2RS8H9K8b5bnhXxSWg": "XML外部实体注入漏洞(XXE)", "https://mp.weixin.qq.com/s/vXPKjS4NYl5BzCVZNEWgFA": "谁在线上?利用 Windows Telephony Service 服务器模式漏洞:从任意文件写入到 RCE", "https://mp.weixin.qq.com/s/t5YYmUlrraGIMGyGisfB1A": "漏洞速递 | CVE-2026-21858 RCE漏洞", "https://mp.weixin.qq.com/s/Qi7ikyen7LqwrdBCwY41_g": "【高危漏洞预警】Azure ARM权限提升漏洞CVE-2026-24304", "https://mp.weixin.qq.com/s/NVEOSga_kTIV5gkvOFBMYQ": "【漏洞通告】Oracle WebLogic Server Proxy Plug-in身份认证绕过漏洞(CVE-2026-21962)", "https://mp.weixin.qq.com/s/eKC2GH7qNRWHD9z_xEkqCw": "利用 WAF 窃取 Salesforce OAuth 令牌", "https://mp.weixin.qq.com/s/wuJbkzB1I9thygskKbQIGg": "Redis官方容器曝出RCE漏洞,研究人员详解\"简单\"栈溢出利用链", "https://mp.weixin.qq.com/s/uMBJv-A77DDCrG35woXwAg": "什么是闪电贷攻击? 3月区块链安全公开课,拆解DeFi协议的10大经典漏洞", "https://mp.weixin.qq.com/s/r3h_R4OAXVuWGz2ddQZCuA": "【已复现】telnet远程认证绕过漏洞(CVE-2026-24061 )", "https://mp.weixin.qq.com/s/G28LqtWBDN9uQEC8rLLlxg": "谷歌Gemini漏洞敲响警钟!AI提示词攻击或成企业致命隐患", "https://mp.weixin.qq.com/s/raMZ9uzpZFh_hKwtFh9onA": "【AI安全】DeepAudit 降临!Multi-Agent 协作击穿代码漏洞防线", "https://mp.weixin.qq.com/s/DND4mvouRPfdwAJtiQSGNg": "【接口漏洞第八章第四节】GraphQL漏洞挖掘实战:找不到参数?用“内省”透视API底层", "https://mp.weixin.qq.com/s/CDpIwGzYg0ErzbqRBNiG8w": "​原来有人靠「找漏洞」每月多赚几万", "https://mp.weixin.qq.com/s/bkfkXy-jRgLyml3PLgNFSA": "【2026漏洞挑战专项第一期V1.0】白帽子集结令!火力全开", "https://mp.weixin.qq.com/s/mgiGbBA6I074gRvkNhKniw": "漏洞复现 | Oracle E-Business Suite远程代码执行漏洞(CVE-2025-61882)", "https://mp.weixin.qq.com/s/fCToUaR-iSciYZ6uu8D3VQ": "CVE-2026-24061:GNU InetUtils Telnetd 身份验证绕过漏洞", "https://mp.weixin.qq.com/s/lsC9ppKpI8Jqcx3WoWHxMg": "高危漏洞威胁情报合集 (2026-01-22~2026-01-23)", "https://mp.weixin.qq.com/s/RqvfzBLB1A47WTJlnu2Jbw": "苹果第二大代工厂立讯精密疑机密数据外泄;GPT-5.2可规模化开发0Day漏洞利用程序 | FreeBuf周报", "https://mp.weixin.qq.com/s/oH2NAXIFssc2e8x63jzfFw": "CVE-2026-24061漏洞快速检测工具", "https://mp.weixin.qq.com/s/CtGHR7RTXWlJOJhLYytBZw": "Web 化被动漏洞扫描平台FlowEye(流量之眼)", "https://mp.weixin.qq.com/s/zftHpC3tmCyYEH-e3eJL8Q": "第153篇:Struts2-069 XXE 实体注入漏洞分析+复现", "https://mp.weixin.qq.com/s/EX-k632VSBWWJsTJY6rpVw": "车联网漏洞挖掘方法及典型案例剖析", "https://mp.weixin.qq.com/s/nbPsxTqg3jG3G8fqqglLbg": "注意:Github上这个CVE-2025-8088工具实为木马下载器", "https://mp.weixin.qq.com/s/jsD0IV6R6Umi7jhHsB7r8w": "零基础入门 EDU SRC 漏洞挖掘!3 个核心技巧,轻松拿高校证书", "https://mp.weixin.qq.com/s/FU4-PHu7HWPYg4A8zmO60g": "【云原生安全】容器环境DIND场景下的漏洞发现与利用", "https://mp.weixin.qq.com/s/xwsVLHHEStbpMPb3cwBZJQ": "Oracle WebLogic惊现满分漏洞:CVE-2026-21962深度解读", "https://mp.weixin.qq.com/s/blWcg3Gdf_mlKTVU68drUQ": "CVE-2026-24061 GNU Inetutils telnetd 命令注入涉及汽车零部件", "https://mp.weixin.qq.com/s/qkWr6CtnlTRpO2kWsrBLSg": "【附POC及复现环境】一个-f参数即可获得root权限?GNU InetUtils Telnetd 远程认证绕过漏洞(CVE-2026-24061)", "https://mp.weixin.qq.com/s/PuTosiWnfW4cR-fPs4cdFA": "7B漏洞检测模型VulnLLM-R,训练数据,过程,模型全开源,效果很好", "https://mp.weixin.qq.com/s/7SinEMKajtsgs7biytJ_1Q": "Linux Telnetd 远程代码执行!靶场镜像", "https://mp.weixin.qq.com/s/A-wQSZ_AwoGeZlLF_h7fDg": "拆解 AI Skills 的五大逻辑漏洞与防御实践", "https://mp.weixin.qq.com/s/m26ce6CYk87l-xBxr4MJ3w": "MindsDB 文件路径处理漏洞预警:未授权信息泄露与拒绝服务风险", "https://mp.weixin.qq.com/s/AuaBvlfbaD2_pOJ51Oit1A": "漏洞挖掘实战系列(终极指南):从入门到精通的完整攻防体系", "https://mp.weixin.qq.com/s/pcTKDQs16Kyz95nn7larYw": "vBulletin远程代码执行漏洞复现(CVE-2025-48827)", "https://mp.weixin.qq.com/s/N3xr4HJsZOK80Bh9C3oCCA": "从工单到Shell:利用PHP过滤器和CNEXT攻击osTicket(CVE-2026-22200)", "https://mp.weixin.qq.com/s/yZYpy7Fx4GEh1FMpOblsTQ": "漏洞扫描神器-xray从入门到放弃", "https://mp.weixin.qq.com/s/pHYh2DSyTyVVn-Mh8pE38w": "Web篇 | 密码重置漏洞挖掘指南:从原理到实战的完整路径", "https://mp.weixin.qq.com/s/TIw8j1MYCHIE5Hsxm7h_MA": "蓝凌EKP系统接口thirdImSyncForKKWebService接口存在任意文件读取漏洞", "https://mp.weixin.qq.com/s/NiruKEIvIlsrGplNF9RzGw": "微软向FBI提供BitLocker恢复密钥:隐私保护的重大漏洞暴露", "https://mp.weixin.qq.com/s/4PMH2yw8JaxTnM0_-YC13w": "CISA更新KEV目录,新增四个正在被积极利用的软件漏洞", "https://mp.weixin.qq.com/s/trgUEzPNgsj8yw463DqL5Q": "XSS 漏洞练习靶场,覆盖反射型、存储型、DOM 型、SVG、CSP、框架注入、协议绕过等多种场景", "https://mp.weixin.qq.com/s/hm2Il1-KceEPg8uVnYxWWg": "快云服务器助手 filemana.aspx∕GetDetail 接口存在任意文件读取漏洞", "https://mp.weixin.qq.com/s/8cI1JjOPms573PRTZwYitQ": "StackWarp漏洞为什么不能影响海光C86", "https://mp.weixin.qq.com/s/4xp8wx7QBNTTmPQErCvrFg": "CVE-2025-68493|Apache Struts 2(S2-069)外部实体(XXE)注入漏洞(POC)", "https://mp.weixin.qq.com/s/zSC_91YlsXBLtGk2gRt-pw": "CVE-2025-61686|React Router未授权目录遍历漏洞(POC)", "https://mp.weixin.qq.com/s/EBJ2iR1LDb0lSJxzv9tleQ": "一个整数溢出引发的全球安全危机:CVE-2022-22822深度解析", "https://mp.weixin.qq.com/s/jBzhPGZkyszNgLtlRl9pMA": "新Shiro反序列化漏洞一站式综合利用工具", "https://mp.weixin.qq.com/s/AZkj7nh8VIeetGQjK957Bw": "黑客利用 telnetd 身份验证绕过漏洞获取 root 权限", "https://mp.weixin.qq.com/s/V-oPrk_3cDM7DHS37BZSWg": "漏洞复现 | itC 中心管理服务器 uploadFileApp.do任意文件上传漏洞", "https://mp.weixin.qq.com/s/BW6dfSR2P-CnAHXEqsg_pw": "构建可扩展的 Windows 驱动漏洞分析器 (第一部分)", "https://mp.weixin.qq.com/s/O4rT0ENFGY-cqKbIrCC0PA": "严重漏洞WhisperPair曝光:黑客可通过蓝牙音频设备实施追踪与窃听", "https://mp.weixin.qq.com/s/Ny2l60b-VSK9bH9NVinneQ": "某次内部行业渗透测试&攻防演练多个系统从资产打点到RCE漏洞", "https://mp.weixin.qq.com/s/lSyVhjNrDvFzf4dYbZrang": "dddd指纹和POC扩展", "https://mp.weixin.qq.com/s/qnOLR3S50FQRiIpkpJeV3w": "【接口漏洞第八章第五节】GraphQL内省探测全流程:从探测、查询到可视化与工具利用", "https://mp.weixin.qq.com/s/iZx-70IkkFgpjGUnDGQMpA": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/1SHrIhS9m9nqtt4OIEvyVQ": "免费,够强!实战使用MonkeyCode审计0day&安全开发", "https://mp.weixin.qq.com/s/K2exIbQDTxCZMQJ1MRwloQ": "黑客在 Pwn2Own Automotive 2026 大会上利用 76 个零日漏洞获得 1,047,000 美元奖金", "https://mp.weixin.qq.com/s/E-g_TKIh-pFpAABuoPNS0Q": "漏洞复现 | GNU InetUtils Telnetd 远程认证绕过漏洞(CVE-2026-24061)【附批量检查脚本】", "https://mp.weixin.qq.com/s/rvKffEWv05fmGgXYskIKWA": "ChatGPT新漏洞可让攻击者窃取谷歌邮箱、微软邮箱及代码托管平台数据", "https://mp.weixin.qq.com/s/T2hArPEuoQxk6Z8hQGKk8g": "CISA警告:VMware vCenter 严重远程代码执行漏洞已被攻击者利用", "https://mp.weixin.qq.com/s/5xJHAkUPkVRozgbRVbpsMg": "工具推荐 | 一款Shiro反序列化漏洞一站式综合利用工具", "https://mp.weixin.qq.com/s/HCTel_peQsxzkOd0X65-5w": "某次内部行业渗透测试&攻防演练多个系统从资产打点到RCE漏洞", "https://mp.weixin.qq.com/s/JH6hYPKtRDlnSUW9shdDuQ": "网安实验干货每日分享目录遍历漏洞-0126", "https://mp.weixin.qq.com/s/48IEzA6K-P407HlKJURCIA": "Laravel Reverb严重漏洞预警:CVSS 9.8高危反序列化RCE深度解析", "https://mp.weixin.qq.com/s/wWM1V6y33V_osSgLLfmZOA": "漏洞预警 | D-Link DIR-868L远程代码执行漏洞", "https://mp.weixin.qq.com/s/oclzSo8dgwS7dbQyc_AshQ": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s/dGmXP12pAojMHe4vXB_rUA": "【漏洞情报】【0day】织梦DedeCMS 0click劫持导致的前台rce getshell", "https://mp.weixin.qq.com/s/W6DzVMzK_qvUs7MJ4X0qww": "CVE-2025-67968 (CVSS 9.9):RealHomes CRM插件严重漏洞使 30,000 个网站面临被接管的风险", "https://mp.weixin.qq.com/s/MK04vNR0Gt2PeK_iCXz7FQ": "思迅商旗收银系统 PayConfig 存在SQL注入漏洞", "https://mp.weixin.qq.com/s/udJiHUHzKXXw_gmL9DAppA": "CISA 将已被积极利用的 VMware vCenter 漏洞 CVE-2024-37079 添加到 KEV 目录中", "https://mp.weixin.qq.com/s/q2nSSGW0Et1X8qFJZesG0Q": "AI Network Security | 某厂商超1.1万台防火墙面临遭自动化漏洞攻击!华为星河AI网络安全已经支持对漏洞攻击检测", "https://mp.weixin.qq.com/s/1H2uL8OG_droMBMRnxVa4Q": "CVE-2025-38352 Part 1 - 在野利用的 Android Kernel 竞争 UAF 分析与 PoC", "https://mp.weixin.qq.com/s/-sP_IDB3lQZtpKUGIV03LQ": "英伟达Linux图形工具曝本地漏洞,开发环境面临代码执行与权限提升风险", "https://mp.weixin.qq.com/s/jnwCqKJ6acqBE84fVc5JqA": "大华ICC智能物联综合管理平台敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s/81ADNkSilnl85esFTP02vQ": "Instagram隐私漏洞:私密账号并不私密", "https://mp.weixin.qq.com/s/QBEuBgLtMEHw4lhqh_Z1tw": "新中大ERP企业管理软件 NGInterface SQL注入漏洞", "https://mp.weixin.qq.com/s/GE5AXK2ut_OfelGAqpUJxQ": "Android APP客户端漏洞挖掘思路(【补天白帽黑客城市沙龙-长沙站】)", "https://mp.weixin.qq.com/s/YIqAU91XfTxk_IRO3WM7pg": "【CVE-2026-23760】SmarterMail 特权账户接管", "https://mp.weixin.qq.com/s/sC21RGnKULmVdHcWmEcotQ": "CVE-2026-24061GNU Inetutils telnetd 远程认证绕过漏洞预警", "https://mp.weixin.qq.com/s/OxsY0XHF8M2Dp3qa3SNJ8A": "神农SRC 漏洞挖掘实战课正式开课,还可以补票上车!", "https://mp.weixin.qq.com/s/zt3kp5jevfqQTdEPR97UPg": "警惕!GNU Inetutils telnetd 9.8分高危漏洞来袭,附批量可视化检测工具", "https://mp.weixin.qq.com/s/Ddpnhu8gyF1wuCya6Jq8hg": "CVE-2026-22686:AI代理沙箱的完美逃逸", "https://mp.weixin.qq.com/s/q1QlzOObcgzkCDfLJj-J8g": "【免费领】全网最详尽的漏洞挖掘实战技巧大全", "https://mp.weixin.qq.com/s/a9mtTzTNbgRrlR40Hc_aFA": "[安全启动链破坏][EL3级任意代码执行]记一次对Nothing Phone手机的漏洞利用链的研究", "https://mp.weixin.qq.com/s/IxrijjH7ybKJxPQ1LXBx7Q": "CISA:四款企业软件中的漏洞已遭利用", "https://mp.weixin.qq.com/s/x4WQc2bc9ARgA_QT7ZI27w": "星图实验室接棒玄武实验室,完成底层密码学库漏洞的最终修复", "https://mp.weixin.qq.com/s/7GLhmogxiYwVSx0Nj2fGGw": "VMware vCenter关键RCE漏洞已遭攻击利用", "https://mp.weixin.qq.com/s/yCzriw2y9a13_GiNLF59UQ": "上周关注度较高的产品安全漏洞20260119-20260125)", "https://mp.weixin.qq.com/s/NZbfQNFcp8tQKJHBidP-Ng": "【接口漏洞第八章第六节】GraphQL端点发现了,然后呢?实战利用自省功能“透视”API", "https://mp.weixin.qq.com/s/ctZMTfUnMAKjnxQ8OAvjOg": "CNVD漏洞周报2026年第3期", "https://mp.weixin.qq.com/s/izrt9LFIav0d-JXyJ8QGFQ": "【高危漏洞预警】Linux内核IP6隧道漏洞CVE-2026-23003", "https://mp.weixin.qq.com/s/ZYvKrB7yBnETCiGzmkZiQA": "CVE-2025-38352 Part 3 - 揭开 Chronomaly:从竞态窗口到 Root 提权", "https://mp.weixin.qq.com/s/0nLaLjwXR4KmwigTEoHxqQ": "Node.js二进制解析库曝高危漏洞可导致恶意代码注入", "https://mp.weixin.qq.com/s/tXjZ8yqnr8i4C4Y5cPfVJg": "Meta低调修复Instagram高危权限漏洞,安全社区质疑其响应透明度", "https://mp.weixin.qq.com/s/Xf5HoteQwbma5sPGXnBjIw": "黑客利用微软 SharePoint 漏洞,绕过多因素验证窃取能源公司员工凭据", "https://mp.weixin.qq.com/s/sfuwtfWCtBygkIBiAFzm4g": "CVE-2026-20931 Windows 电话服务漏洞分析", "https://mp.weixin.qq.com/s/QyGJPErsLR9L-ErekZ4IfQ": "VMware vCenter Server 远程代码执行漏洞安全预警(CVE-2024-37079)", "https://mp.weixin.qq.com/s/QeTajwMfx-Ql-bY5-dR-dg": "CVE-2025-38352 Part 2 - 无需内核补丁延长竞争窗口", "https://mp.weixin.qq.com/s/p_bjUbHdQoIkQDWrbH_5FA": "DudeSuite 漏洞播报 全网漏洞早知道【20260126】", "https://mp.weixin.qq.com/s/mQ3XSZ-tw1ldGrNKCz59vw": "企业管理类系统常见漏洞挖掘指北", "https://mp.weixin.qq.com/s/gkQOfK6TbjYNay4RDXeRuQ": "警惕!GNU Inetutils telnetd 9.8分高危漏洞来袭,附批量可视化检测工具", "https://mp.weixin.qq.com/s/wS-RF_RWWok9W-tjcTcjSA": "CVE-2025-55182 的 POC,可在 Next.js 16.0.6 上运行", "https://mp.weixin.qq.com/s/39O6D7Zey-qWJe_vK98ArQ": "CVE-2026-21962|Oracle WebLogic Server身份认证绕过漏洞(POC)", "https://mp.weixin.qq.com/s/TxdPLkmRvWlDpSzSCqfBKQ": "CVE-2026-20805 PoC Windows 管理器 (dwm.exe)信息泄露", "https://mp.weixin.qq.com/s/joQl8D6Bumr-sb8C8beu_w": "漏洞预警 | 思迅商旗商业管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s/GC-qHMR2Ku5AJA1cXUZBmg": "Instagram 漏洞,私密帖子可被任意访问", "https://mp.weixin.qq.com/s/PQGwxIojFDStyhTMmDYITg": "漏洞利用代码公开:Firefox WebRTC 严重漏洞可导致远程代码执行 (CVSS 9.8)", "https://mp.weixin.qq.com/s/4PkH2XvT5kbzvXEaAOhg2g": "东胜物流软件信息泄露漏洞", "https://mp.weixin.qq.com/s/tYxc4flkEcQtqQq4ZdwDRw": "1.9-监控POC根据指纹自动创建任务", "https://mp.weixin.qq.com/s/Ax_nQBFNY1OrjCcP5JzsvA": "Chainlit AI 框架漏洞导致黑客入侵云环境", "https://mp.weixin.qq.com/s/u-tGrqRQ6J4t31UFpm3fAg": "CVE-2026-24306:Azure Front Door访问控制漏洞深度解析", "https://mp.weixin.qq.com/s/zO1l4B7rZHC_qswDGu69vA": "【全网首发】2025 0∕1∕N Day漏洞清单(超长版)", "https://mp.weixin.qq.com/s/TRFY_tCAOe7NBhuRLZ7yMQ": "旧攻击,新速度:研究人员优化页面缓存漏洞利用", "https://mp.weixin.qq.com/s/kudyPukl1z8uJq-yCqT08w": "工具推荐 | 最新开源GeoServer 综合漏洞利用工具", "https://mp.weixin.qq.com/s/OjAPKz7xCTy54eKhQZt8iA": "微软的补丁修复了被积极利用了 Office 的零日漏洞", "https://mp.weixin.qq.com/s/N4-XpqfwKXAs8bbMrVEU-Q": "门禁系统“全面失守”:研究揭示高端门控系统存在一系列致命漏洞", "https://mp.weixin.qq.com/s/O2IrjCxBzIADNIzpdco0Gg": "漏洞预警 | WSO2任意文件上传漏洞", "https://mp.weixin.qq.com/s/GTaDJ-Y-nqNzgqaMB70Ftg": "某小程序rce", "https://mp.weixin.qq.com/s/1_d-wS11PlgoiYlTfDljmg": "K8s RCE 0-day漏洞剖析:仅需nodes∕proxy GET权限即可接管集群", "https://mp.weixin.qq.com/s/uWmADwNDa3x25OQ88dtBsg": "自动化代码审计,支持PHP、Java、Python、Go、Node.js等多种语言项目环境搭建、漏洞分析、漏洞验证、报告产出", "https://mp.weixin.qq.com/s/m5ePEz5KDI0c9BWrPS2h5w": "漏洞情报(已验证) | 深科特 LEAN MES系统 WarehouseCheck.ashx 存在SQL注入", "https://mp.weixin.qq.com/s/HZGqpH9DaUnxCB_Xjhvzew": "攻击者利用 Mjobtime 应用程序漏洞,通过 MSSQL 和 IIS POST 请求攻击建筑公司", "https://mp.weixin.qq.com/s/-Z2pc8U6mMndmw-0ISIjtg": "CVE-2026-23760|SmarterMail存在身份认证绕过漏洞可实现RCE(POC)", "https://mp.weixin.qq.com/s/KIfpuEdli9I7Xm435zWgVg": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/2yQXFgZdYHYHWovZR6dtsQ": "漏洞复现 | 深信服运维安全管理系统portal_login远程命令执行漏洞", "https://mp.weixin.qq.com/s/-2T1gak48FLEVXABRhbuFw": "【40万POC???】小场面,看纽克如何拿捏海量POC场景", "https://mp.weixin.qq.com/s/Gyy6BL5Z7pdSSwMnjA3k7A": "【紧急补丁】Microsoft Office OLE 缓解绕过漏洞 (CVE-2026-21509) 已发现在野利用", "https://mp.weixin.qq.com/s/GyN4XIH5dxuA_496pD-Vbw": "【在野利用】Microsoft Office 安全功能绕过漏洞(CVE-2026-21509)安全风险通告", "https://mp.weixin.qq.com/s/uUmqvBKRLeTHnb4YCgUAkA": "一款定制 LLM 应用的自动提示注入扫描器(自动找出50+种提示词注入漏洞)", "https://mp.weixin.qq.com/s/wn1wktQwNZnJycplqyQ2rA": "一款集成了H3C,致远,泛微,万户,帆软,海康威视,金蝶云星空,畅捷通,Struts等多个RCE漏洞利用工具", "https://mp.weixin.qq.com/s/Oe2f4itq3-cL9MKIeeNY1A": "React 服务器组件爆出“核弹级”漏洞:CVE-2025-55182 到底有多严重?", "https://mp.weixin.qq.com/s/ZPG8ZNXQnVUYDlMBdPzLRg": "Pwn2Own 2026首日,研究人员凭借37个独特0Day漏洞斩获51.65万美元", "https://mp.weixin.qq.com/s/Hjm6RE5h0OjW3rTJdiUgAg": "网安靶场实战指南(第2期):DVWA靶场从零到精通——环境搭建+基础漏洞全突破", "https://mp.weixin.qq.com/s/oyu-CHhmGZzmyzC3Ms8QvA": "CNVD漏洞周报2026年第3期", "https://mp.weixin.qq.com/s/nAoM_yBliO48aLUgfPOSBA": "腾达路由器敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s/ioW4o8AQANnvDFXWY-arPQ": "CVE-2026-20045 高危漏洞曝光,Cisco 语音系统存在未授权远程执行风险", "https://mp.weixin.qq.com/s/jb1rLB5oi5IQJKUnwjnihA": "常见信息泄露漏洞总结", "https://mp.weixin.qq.com/s/tYIeaVmmXwbzGN_xfu67MQ": "【活动】通用漏洞全年3倍奖励,百万奖金持续悬赏!!!", "https://mp.weixin.qq.com/s/HVaMyw8Gadxk7MPLsuVV3A": "IM即时通讯系统 preview.php 任意文件上传漏洞", "https://mp.weixin.qq.com/s/y7cJ6Aq28kQ1Fg-qlpcdFg": "Chrome V8 CVE-2026-0902 内存读取漏洞简析 & POC纪要", "https://mp.weixin.qq.com/s/CnhHtqc8mVGaCqSsrxn9Vw": "Tomcat CVE-2025-24813远程代码执行漏洞", "https://mp.weixin.qq.com/s/nTKt2muSh2MBMqLShNm5Og": "【漏洞通告】Microsoft Office 安全特性绕过漏洞(CVE-2026-21509)", "https://mp.weixin.qq.com/s/x5VdCVoT_N5NxUjx0jefyQ": "利用一个spel漏洞点测试一下自己内存马查杀工具的强度", "https://mp.weixin.qq.com/s/qemXzyoh9m893qgEFjeJtA": "Radware 披露 “ZombieAgent” 漏洞:一种可实现系统静默接管与云端数据窃取的新型零点击AI智能体漏洞", "https://mp.weixin.qq.com/s/r_j8SXaRUQnb9T1lARrFaw": "雷神众测漏洞周报2026.1.19-2026.1.25", "https://mp.weixin.qq.com/s/iADJW5VlR1oWh5oaP9XaNQ": "EDUSRC-支付类漏洞思路合集(包括证书,小通杀等实例)", "https://mp.weixin.qq.com/s/_ASalqnaZ7RbLDHqdGdPZw": "微软紧急更新修复Office 0Day漏洞", "https://mp.weixin.qq.com/s/BP_vqp8CqTo43gK0b_WlZA": "记某edusrc通杀漏洞思路分享", "https://mp.weixin.qq.com/s/nzbuLKFEZfx6Q8P2XO04jw": "AstrBot任意文件读取漏洞漏洞详细分析及复现(CVE-2025-48957)", "https://mp.weixin.qq.com/s/ZvIrk3cgKs6491cLxYzxgg": "“零点击”实现数据窃取!警惕Superhuman AI漏洞让邮件成为黑客入口", "https://mp.weixin.qq.com/s/xM0p0PGeN5nAA0Odi5dG2A": "Apache Hadoop 漏洞暴露系统,可能导致崩溃或数据损坏", "https://mp.weixin.qq.com/s/BjgTB3SdIrkGup0meLYDKg": "【接口漏洞第八章第七节】赏金猎人实战:如何快速从GraphQL自省中挖出高危漏洞", "https://mp.weixin.qq.com/s/xHwT8bJqGVbRaVR5qmXUlQ": "微软紧急修复已遭利用的 Office 0day 漏洞", "https://mp.weixin.qq.com/s/iz4JRyt5ke_7t-etsHt69A": "漏洞预警| CVE-2026-21962 Weblogic RCE漏洞", "https://mp.weixin.qq.com/s/nd5Gcu3Ju1wqO-HScl4vKw": "GNU Inetutils telnet远程认证绕过漏洞(CVE-2026-24061)分析及自查脚本", "https://mp.weixin.qq.com/s/KYGF8A8dPdThH5RC3-d0wA": "漏洞速递 | CVE-2026-21962 Weblogic RCE漏洞(建议自查)", "https://mp.weixin.qq.com/s/RRgkWtM-3vg8cHOHrRPjCA": "CVSS 9.8高危沙箱逃逸漏洞,vm2缺陷危及数百万应用", "https://mp.weixin.qq.com/s/n0TQiM2C-rDLAWYYCLZ-Gg": "物理访问系统漏洞敞开欧洲大型公司的大门", "https://mp.weixin.qq.com/s/sJxOp93X2bNH8UkCO7Pacw": "初识IO_FILE Exploitation", "https://mp.weixin.qq.com/s/MrxONnewihyYJyAGWMRgRg": "2025年新增漏洞5万个,公开遭到利用的不足千个", "https://mp.weixin.qq.com/s/GBjU__UOBuKazRCqMXnN4Q": "CVE-2026-24061 漏洞检测与利用GUI工具(1月26日更新)", "https://mp.weixin.qq.com/s/R5d_gcewBpWi9q2L56gvUw": "工具推荐 | TsojanScan v2.0:BurpSuite 2026版专属漏洞扫描插件", "https://mp.weixin.qq.com/s/jI5k-Q5rQWULYum_53z0Qw": "【高危漏洞预警】Microsoft Office安全功能绕过漏洞(CVE-2026-21509)", "https://mp.weixin.qq.com/s/zk_Btg9EAZEP0zm0feQMCg": "漏洞预警 | TP-LINK TL-WR940N V6拒绝服务漏洞", "https://mp.weixin.qq.com/s/VnQb3w26nMFetG8Zgtu54g": "Kubernetes 中的 node∕proxy GET 权限漏洞:实现远程代码执行(RCE)", "https://mp.weixin.qq.com/s/za737nF_cxMKW8jdivxFRw": "上传代码即审计:AI 驱动的自动化漏洞挖掘与 POC 验证平台", "https://mp.weixin.qq.com/s/ZShQ39Hme_rDg0AqjvMSmA": "漏洞挖掘 | 绕过日志记录进行敏感操作", "https://mp.weixin.qq.com/s/7S1o1kA5Y3EqT-y-FS3t1A": "门禁系统“全面失守”:研究揭示高端门控系统存在一系列致命漏洞", "https://mp.weixin.qq.com/s/WIEtWZyMqxzgNW1aFF4HDg": "网安实验干货命令执行之DVWA-0128", "https://mp.weixin.qq.com/s/8pyggy-68CTmtE4G3GB9cA": "IM即时通讯系统 fileupload.php 任意文件上传漏洞", "https://mp.weixin.qq.com/s/MDnWcJfQps02tIUOa7BNuw": "漏洞预警 | 金和OA SQL注入漏洞", "https://mp.weixin.qq.com/s/MASvziQWKRixfxih2kKo0Q": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/OoGpounyOGkUMrIY0aaAGg": "NVIDIA CUDA Toolkit 爆出 4 个高危漏洞:命令注入、任意代码执行,AI 服务器也不安全了", "https://mp.weixin.qq.com/s/mpNfcgbpEGgTUtuNFm3_YA": "WinRAR路径遍历漏洞在野利用", "https://mp.weixin.qq.com/s/Ch0sFpFick9QmXesSYkfgg": "CVE-2025-24305 深度解析:一个可植入无法清除后门的固件层缺陷", "https://mp.weixin.qq.com/s/_YGXthMXSd4ch6fM1-crbQ": "GUI | CVE-2026-24061 telnetd 身份验证绕过漏洞检测与利用工具", "https://mp.weixin.qq.com/s/Fbr-OCTwVVxTKkgYmrsqvQ": "路由器入侵:TP-Link Archer MR600 路由器存在高危命令注入漏洞", "https://mp.weixin.qq.com/s/4YRolVCvG_2_GfYkI_vEGw": "漏洞复现 | 深信服运维管理系统 set_port 远程命令执行漏洞", "https://mp.weixin.qq.com/s/7OSxqs48F0O8ytYKgNJFyA": "Telnet漏洞或影响全球80万台设备,IoT∕OT设备会很受伤!", "https://mp.weixin.qq.com/s/CmokvAeRewf4KxpNHJUZiQ": "【项目实战】复盘 Dify 系统的“组合拳”漏洞", "https://mp.weixin.qq.com/s/woNLuGMPrM_5F8HpmO2hcw": "Pwn2Own 2026首日,研究人员凭借37个独特0Day漏洞斩获51.65万美元", "https://mp.weixin.qq.com/s/faKdjbNuYACqb7mjaxnqcg": "Chainlit 被曝访问控制漏洞:已登录用户可非法查看并劫持他人对话线程(CVE-2025-68492)", "https://mp.weixin.qq.com/s/uT4Em7_AHzKYeuLpDaZGYQ": "Kubernetes 中的 node∕proxy GET 权限漏洞:实现远程代码执行(RCE)", "https://mp.weixin.qq.com/s/uHGfjznTkElVsG0iucMkgA": "利用飞塔 FortiCloud SSO 零日漏洞的攻击持续在野,亟待补丁发布", "https://mp.weixin.qq.com/s/ylNJ77YEdlpl-U7gk1IGnA": "CSRC开年首测 | 漏洞奖金翻倍,专享新年礼盒!", "https://mp.weixin.qq.com/s/nuxjYrZbgVTPy58xdx0bEA": "【漏洞速递】CVE-2026-21859漏洞", "https://mp.weixin.qq.com/s/VqpjysrRYKu_1TE4VfRm1A": "泛微E-Mobile 远程命令执行漏洞(RCE)附POC", "https://mp.weixin.qq.com/s/4hZPPjho41RtrSRUzu8kXQ": "基于大模型的代码审计与漏洞挖掘实战项目", "https://mp.weixin.qq.com/s/pEyd5xiKBvWfehwcASx5rA": "【已复现】Node.js 生态主流沙箱组件 vm2 存在逃逸漏洞(CVE-2026-22709),每周下载量近百万", "https://mp.weixin.qq.com/s/YimGNyQ5I0tZw0DQn53D7A": "【CVE-2026-24061】GNU telnetd 致命认证绕过漏洞", "https://mp.weixin.qq.com/s/IaITeh_pR5ok_3Ks5nCa_w": "漏洞验证-铭飞CMS cms∕category∕list接口存在SQL注入(CVE-2022-4375)", "https://mp.weixin.qq.com/s/2aenwppwEtpBzaphxUBKsw": "明源地产ERP MyPub_XMLHTTP.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s/nzoKuqfTNJeUbpKpnAb7yw": "漏洞验证-明源地产ERP存在身份认证绕过漏洞", "https://mp.weixin.qq.com/s/lM0dxCitC2c-Ncq_85j4OA": "Microsoft Office 高危漏洞风险通告", "https://mp.weixin.qq.com/s/l0R0GIMya6BbU5PxxIikpw": "CNNVD关于Microsoft Office安全漏洞的通报", "https://mp.weixin.qq.com/s/Qmw1gRX7uIMGWW-6rtjChA": "自动化代码审计,支持PHP、Java、Python、Go、Node.js等多种语言项目环境搭建、漏洞分析、漏洞验证、报告产出", "https://mp.weixin.qq.com/s/exmxB6xPaw-gmPLiRBMfsA": "存储桶遍历漏洞利用工具", "https://mp.weixin.qq.com/s/pLQvtiJsU7uhrDbOkin93Q": "Pwn2Own Automotive 2026 落幕:76 个零日漏洞被攻破,研究人员斩获百万美元奖金", "https://mp.weixin.qq.com/s/JaE-vEftXIgj5ScCCYycoQ": "vm2沙箱逃逸漏洞分析(CVE-2026-22709)", "https://mp.weixin.qq.com/s/6tC2qMD1gLdMNexaXl-Nfg": "【已复现】SmarterTools SmarterMail 远程代码执行漏洞(CVE-2026-24423)安全风险通告", "https://mp.weixin.qq.com/s/8jTU9WKQ2FSkDGUL-OFIhg": "【在野利用】Fortinet 多款产品身份认证绕过漏洞(CVE-2026-24858)安全风险通告", "https://mp.weixin.qq.com/s/AJwltUhbzov3UGV9zeEunA": "信息安全漏洞周报(2026年第4期)", "https://mp.weixin.qq.com/s/7_MGwnpQeYz0E5PaWiIa_Q": "补天春节快闪!速来⏳10个漏洞轻松赢礼盒,限时掉落!", "https://mp.weixin.qq.com/s/GV480r6WZ767cvFao63gCA": "81%中高危漏洞!360年度漏洞报告出炉:攻防进入AI时代", "https://mp.weixin.qq.com/s/UvrEdy4VviHkdfYaJ3VK9Q": "QVD-2025-44295:东方通TongWeb应用服务器ejbserver远程代码执行漏洞", "https://mp.weixin.qq.com/s/GaLGLoWlfBGS-32KFwV6vQ": "新手学漏洞挖掘(零基础友好):要掌握什么技能?去哪挖?怎么挖?", "https://mp.weixin.qq.com/s/QnUfMGmhb53L0DWOU9uLxA": "【玄域】Web∕安卓∕苹果渗透靶场 | 实战漏洞报告 | 面试刷题 | 企业真实漏洞案例", "https://mp.weixin.qq.com/s/C54Q6HmzJThnc9f_jkgl5A": "热门 NodeJS 库 vm2中存在严重的沙箱逃逸漏洞", "https://mp.weixin.qq.com/s/zAUr-NPGqR6KnmAjHbtOoQ": "重磅!GPT-5.2 可量产零日漏洞,网安再迎大挑战", "https://mp.weixin.qq.com/s/gjjfGp9QVwKHlEDC1l-u-w": "热门包管理器中存在多个漏洞,JavaScript 生态系统易受供应链攻击", "https://mp.weixin.qq.com/s/q_qiAGaENw5_RPqaJPUzQQ": "攻击者利用React2Shell漏洞针对IT行业发起攻击", "https://mp.weixin.qq.com/s/_3CJhF9n2vh9tGWPLmKqBg": "【接口漏洞第八章第八节】攻防升级:实战绕过GraphQL内省防御机制", "https://mp.weixin.qq.com/s/QbtDqF_twQvmPQ1SV2E9nw": "1700 万美元闭源智能合约攻击事件:SwapNet 与 Aperture Finance 的任意调用漏洞", "https://mp.weixin.qq.com/s/QdK2aQiUkhPgO4bAmss1lQ": "周六19点 | 如何绕过路由器的认证机制?D-Link设备漏洞挖掘实战直播", "https://mp.weixin.qq.com/s/mR57nkqrtbqD0G-cXk-izQ": "【漏洞通告】Microsoft Office 安全功能绕过漏洞(CVE-2026-21509)", "https://mp.weixin.qq.com/s/0c7_Ds3Bcgz7PwzME5DNmg": "Microsoft Office 安全功能绕过漏洞预警(CVE-2026-21509)", "https://mp.weixin.qq.com/s/KlPdc9KOnNzKQjPebrEr1w": "【漏洞通告】vm2 沙箱逃逸漏洞(CVE-2026-22709)", "https://mp.weixin.qq.com/s/ud6BcYm9j5Vm3XmHn4w98Q": "【工具分享】VueCrack-检测VUE站点未授权漏洞", "https://mp.weixin.qq.com/s/h5waTEkozhvadR_0-KJS9w": "81%中高危漏洞!360年度漏洞报告出炉:攻防进入AI时代", "https://mp.weixin.qq.com/s/ucMp6VaU3qmXdvasx9W-dA": "【安全圈】Office漏洞正被黑客大量利用!2016、2019、2021、365全中招", "https://mp.weixin.qq.com/s/n4TpIfIF7562iPAqDtzcUQ": "【安全圈】谷歌警告WinRAR必须更新!漏洞正被黑客疯狂利用:已有大量用户中招", "https://mp.weixin.qq.com/s/oCeLE-1uapOWdutX-5Eruw": "警报拉响:WinRAR 高危漏洞正遭全球黑客疯狂利", "https://mp.weixin.qq.com/s/_YnrZtFBW5f4kwm9nwuAaA": "【已复现】SmarterMail存在远程代码执行漏洞(CVE-2026-24423)", "https://mp.weixin.qq.com/s/fe2fFRiNAY92ky95r1mB8A": "CNNVD通报Microsoft Office安全漏洞", "https://mp.weixin.qq.com/s/6LQcnK2c0amgTIphxapOGA": "CNNVD | 关于Microsoft Office安全漏洞的通报", "https://mp.weixin.qq.com/s/vNM0eM8tcxJlxV-X927vDw": "Oracle WebLogic Server Proxy Plug-in身份认证绕过漏洞(CVE-2026-21962)的风险预警", "https://mp.weixin.qq.com/s/bFcBGQbBXe0lxFTaPXsotw": "安全通告丨网络安全漏洞通告(2026年1月)", "https://mp.weixin.qq.com/s/vjQ2lGVNCMhMNWU4pw6U1A": "QVD-2025-44295:东方通TongWeb应用服务器ejbserver远程代码执行漏洞", "https://mp.weixin.qq.com/s/5vYMRLYE_Y3UoxST9DAKZw": "OpenSSL中已修复高危远程代码执行漏洞", "https://mp.weixin.qq.com/s/5CwxcNPSXjUZydxWsVLdPg": "工具推荐 | SwaggerHound自动化检测 Swagger API 接口未授权访问漏洞", "https://mp.weixin.qq.com/s/ytqmfXv4ZiQnvVro0wd4pw": "Windows 电话服务远程代码执行漏洞剖析", "https://mp.weixin.qq.com/s/0ELPiwYJSI_aduU2lly2YA": "腾达Tenda 路由器存在敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s/lnXRMkzdzkUBL25g9HWxjg": "Cloudflare曝零日漏洞:利用证书验证路径可绕过WAF访问任意源站", "https://mp.weixin.qq.com/s/23f7itDcmeDixxIF9ZTtsQ": "注册功能漏洞检查清单", "https://mp.weixin.qq.com/s/EUhJqOlATFvX8EabSTtF9Q": "【漏洞预警】Fortinet多款产品身份认证绕过漏洞(CVE-2026-24858)", "https://mp.weixin.qq.com/s/wJPCkHgw-3hiNsrwkOgIwQ": "Fortinet 修复了 CVE-2026-24858 漏洞,此前检测到 FortiOS SSO 漏洞利用", "https://mp.weixin.qq.com/s/WIg-z4De3SbjYDlXXKHHHA": "网安实验干货每日分享S2-053远程代码执行漏洞-0129", "https://mp.weixin.qq.com/s/07mFCKRNe18Tfc2RDZXNDg": "Chrome 144版本发布:修复10项安全漏洞,并修补V8引擎的危险缺陷", "https://mp.weixin.qq.com/s/Gl8BUqwPnZ-nkJrAvya1lg": "多客圈子论坛系统任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s/I0byVZlQfTfzvhavWqBwJA": "CVE-2025-14988:ibaPDA 工业软件存在严重 9.8 级漏洞", "https://mp.weixin.qq.com/s/1YR6HLXgk4pSrgbfcoGyRg": "【深度解析】VulnHunter - AI 漏洞猎人v6.0漏洞扫描工具:功能全、速度快、操作简,安全测试的终极解决方案", "https://mp.weixin.qq.com/s/miCQivLf_ypq7xFXDFwc6A": "文章点赞漏洞", "https://mp.weixin.qq.com/s/ErjvCAVgjBYuRB3Rt1rQ0A": "台达 PLC 被曝 3 个“9 分级”严重漏洞:真危机,还是被夸大的恐慌?", "https://mp.weixin.qq.com/s/YK1BS7kNg83t35JV8lQk_g": "锐明技术Crocus系统 Upload存在任意文件上传漏洞", "https://mp.weixin.qq.com/s/Iy8Np2aPfREuAuo_xSa_fw": "Telnet漏洞或影响全球80万台设备,IoT∕OT设备会很受伤!", "https://mp.weixin.qq.com/s/xuWr51zaJIBxT3Z_V-M_-Q": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/4GZ9Pj1pm8-ObSbh8OcaxQ": "自动化代码审计,支持PHP、Java、Python、Go、Node.js等多种语言项目环境搭建、漏洞分析、漏洞验证、报告产出", "https://mp.weixin.qq.com/s/QWEx4DuMWJXVuJE5M9DxFw": "漏洞预警 | 英赛特互联网客户服务平台SQL注入漏洞", "https://mp.weixin.qq.com/s/xEvSR7BXqajut0DnzF5U4w": "2025年度网络安全漏洞分析报告", "https://mp.weixin.qq.com/s/xii-VrzNF6wZe84fkdRU-w": "ChatGPT新漏洞可让攻击者窃取谷歌邮箱、微软邮箱及代码托管平台数据", "https://mp.weixin.qq.com/s/Kfn-epmorp1Yz741OdU4gg": "漏洞预警 | vLLM远程代码执行漏洞", "https://mp.weixin.qq.com/s/eUxcfvTsRbed0qJ0cIencg": "Shiro漏洞综合利用工具", "https://mp.weixin.qq.com/s/eI1Gpa6GllOnokinRO9ZeQ": "大华DSS平安城市 login_getPasswordErrorNum.action SQL注入漏洞", "https://mp.weixin.qq.com/s/oHYB4dC3Wf5yTeI_gLGKiw": "漏洞复现 | 百卓Smart管理平台 licence.php 文件上传漏洞", "https://mp.weixin.qq.com/s/HjNCHt-G-XcI9h9u6WF06w": "CyberArk 开源 FuzzyAI:一键自动化检测大模型\"越狱\"漏洞,支持 20+ 攻击手法", "https://mp.weixin.qq.com/s/6-C42MFfxzG8jlJXIpTKiA": "Fortinet 多款产品身份认证绕过漏洞风险提示", "https://mp.weixin.qq.com/s/SB2P0wdu5awWNwHbidMUbg": "Grist-Core 严重漏洞允许通过电子表格公式进行远程代码执行攻击", "https://mp.weixin.qq.com/s/NeNJMvrTvgHMXEgw75hUZg": "年度报告 | 2025年漏洞态势全景复盘!", "https://mp.weixin.qq.com/s/GnNxQ29vqFVV43h0CTz5VQ": "网安靶场实战指南(第4期):OWASP Juice Shop入门——前后端分离架构下的漏洞挖掘", "https://mp.weixin.qq.com/s/mLIvzi12Xq7mosK-FJD8TQ": "国家漏洞库CNNVD:关于Microsoft Office安全漏洞的通报;韩国公共系统全面沦陷:模拟攻击揭示安全防护重大缺陷| 牛览", "https://mp.weixin.qq.com/s/ZyVVh1BQNOO_fEDtc7Qjqw": "谷歌关于多个威胁行为者利用 WinRAR 严重漏洞 CVE-2025-8088 进行攻击分析", "https://mp.weixin.qq.com/s/HQDSxpkZFgmPWlBLMxiEgw": "Redis 远程代码执行漏洞(CVE-2025-49844)", "https://mp.weixin.qq.com/s/iRSKfbWctpUQYg2tmupopQ": "CVE-2025-39566 sql注入漏洞", "https://mp.weixin.qq.com/s/1yPCR92RT33Ce4vWxR6DWA": "SolarWinds再曝重大RCE漏洞,企业安全团队旧伤复发", "https://mp.weixin.qq.com/s/iKSyh5ksFFnH8IzfIlWBGA": "Gemini MCP 曝高危零日漏洞 允许远程攻击", "https://mp.weixin.qq.com/s/_Paf3WYVXDV9gDmQwYdeLg": "Linux 内核攻击:Punch hole (2025 Backdoor skernel 复现)", "https://mp.weixin.qq.com/s/efU2-wd1ZHFH48t3MHp8Gg": "【接口漏洞第八章第九节】一招绕过GraphQL内省防御:实战利用详解", "https://mp.weixin.qq.com/s/4ZNdVVPLk_QwgrFTkJRNzQ": "路由器安全研究|D- Link DIR-823G v1.02 B05 复现与利用思路", "https://mp.weixin.qq.com/s/rBLFnFKwLayQU7fIwoJOaQ": "严重OpenSSL漏洞可使远程攻击者执行恶意代码", "https://mp.weixin.qq.com/s/dkjJDZKQp9zdw7lA8-dAhw": "密码重置漏洞挖掘指南:从原理到实战的完整路径", "https://mp.weixin.qq.com/s/vq41cwGRjiKoATtNMCx03A": "【安全圈】PyTorch \"安全\"模式被严重RCE漏洞攻破,可执行任意代码", "https://mp.weixin.qq.com/s/07vRoWodsj0lNgPPMjk2CQ": "n8n 两个高危漏洞可导致认证RCE", "https://mp.weixin.qq.com/s/5ulg_3lR2wbQ5M3MGvWQXg": "【论文推荐】大模型组队挖掘0day,成功率竟然远超专业工具?", "https://mp.weixin.qq.com/s/pTw1PJuArTmLxnfycTt1UQ": "Chrome安全更新修复Background Fetch API中的严重漏洞", "https://mp.weixin.qq.com/s/sI8BOAyzeLdZ_z5AyINkkQ": "Fortinet 修复已遭利用的严重 FortiOS 漏洞", "https://mp.weixin.qq.com/s/3AbOpNlidTI5KPcfqkEVOA": "CVE-2026-24747:PyTorch模型加载功能曝出8.8分高危漏洞", "https://mp.weixin.qq.com/s/h7uRGRlLnkJuZtINKiZo3A": "【已复现】OpenSSL CMS模块栈溢出漏洞(CVE-2025-15467):可导致拒绝服务或远程代码执行", "https://mp.weixin.qq.com/s/fcDX1r74I8YzIG2WSnU4Wg": "【论文速读】| VulnResolver:一款基于大语言模型的自动化漏洞修复混合智能体框架", "https://mp.weixin.qq.com/s/UgdwoIRiHlXWDa6J_De7wA": "PyTorch安全模式被RCE漏洞攻破,恶意模型可执行任意代码", "https://mp.weixin.qq.com/s/gakjueNgGFU2unY-WuybOg": "【安全圈】Chrome 发布安全更新,修复后台 Fetch API 漏洞", "https://mp.weixin.qq.com/s/5EN6WrqP-AVVuhsnAtz9ow": "WordPress后台存储型XSS 全网首发POC及复现环境(CVE-2025-12067)", "https://mp.weixin.qq.com/s/QPCJeKRVghy2fnNgq_Q4Yg": "【高危漏洞预警】OpenSSL CMS AuthEnvelopedData栈缓冲区溢出漏洞(CVE-2025-15467)", "https://mp.weixin.qq.com/s/Bz_pQpEUUsfVLOBpD9ADgQ": "Burp未授权漏洞自动检测插件 -- Unauthorized_Scan(1月27日更新)", "https://mp.weixin.qq.com/s/Nwnwt8v2OGEBAjOo1GXQkQ": "太阳风 SolarWinds警告称Web帮助台存在严重的远程代码执行和身份验证绕过漏洞", "https://mp.weixin.qq.com/s/WbRrARZWr_wkygZjyTS3TA": "利用 NTLM 反射掌控 Active Directory(CVE-2025-33073)", "https://mp.weixin.qq.com/s/uXCFfguP6LvuoF3nhre_cA": "G.O.S.S.I.P 阅读推荐 2026-01-29 超越答案正确性:揪出大模型推理回复中的“隐性逻辑漏洞”", "https://mp.weixin.qq.com/s/9ReeaEdtnwoWDU4xi4HooQ": "基于 LLM 多 Agent 的全流程漏洞挖掘系统,已挖数十个真实漏洞", "https://mp.weixin.qq.com/s/_TEUKJ3O2Y0ur4Ow7Utacw": "一个基于LLM的多Agent全流程漏洞挖掘项目", "https://mp.weixin.qq.com/s/k2QSNDtAPsU8MqWW2fAVVA": "GitLab警告:存在高危双因素认证绕过和拒绝服务漏洞", "https://mp.weixin.qq.com/s/JMG7EKojGxuERfZce_Perg": "网安圈的PUA话术,比0day漏洞还伤人", "https://mp.weixin.qq.com/s/PIZ9vC4Q7g4u3H8XyGIANg": "九思OA软件jsoa∕wap.do存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s/Wtr3Y-6hrMJT460-Trbb5Q": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/IlOHVkpabmomumtlv2NGXg": "CRMEB开源电商系统SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s/LAI7MSNLfhI7GB8fi6z3nA": "谷歌警告WinRAR必须更新!漏洞正被黑客疯狂利用:已有大量用户中招", "https://mp.weixin.qq.com/s/OtccLZKPZB3Q4mZ0jIlY7A": "漏洞复现 | React Native CLI 远程命令执行漏洞(CVE-2025-11953)", "https://mp.weixin.qq.com/s/4W102UsYVk2AnXmgf8qcJw": "警惕最新高危漏洞n8n 严重缺陷(CVSS 9.9)允许远程代码执行", "https://mp.weixin.qq.com/s/u_x_jDPUFAi3dfxa_G2h0g": "CVE-2026-24061 telnet远程认证绕过漏洞批量检测工具", "https://mp.weixin.qq.com/s/5M5WuRwHItWH-loWaitpvQ": "漏洞预警 | GNU InetUtils telnetd远程身份认证绕过漏洞", "https://mp.weixin.qq.com/s/_HTl4hpNlPQ7I17sQTpxMw": "漏洞预警 | 金和OA XXE漏洞", "https://mp.weixin.qq.com/s/6uJDYa9IlS8EmLz42wTABw": "2025年度网络安全漏洞威胁态势研究报告", "https://mp.weixin.qq.com/s/dzszjP4CamZTBSEek8D_lQ": "网安实验干货每日分享Spring WebFlow 远程代码执行漏洞(CVE-2017-4971)-0130", "https://mp.weixin.qq.com/s/SrH5I6FB-oA8viI-GQJZJg": "红队资产梳理神器:集成50+数据源与9000+POC,实现外部攻击面自动化管理", "https://mp.weixin.qq.com/s/EnLuZC0En6CakfjphUvV6g": "【已复现】Dokploy 命令注入漏洞(CVE-2026-24841)", "https://mp.weixin.qq.com/s/6rLluYeTtz6dr5jP1DVPKA": "网安靶场实战指南(第5期):OWASP Juice Shop进阶——API注入+文件漏洞+第三方组件风险", "https://mp.weixin.qq.com/s/riytASFc-80HU5mOKmEQ_Q": "NestJS Devtools 远程命令执行漏洞(CVE-2025-54782)", "https://mp.weixin.qq.com/s/ParjTWUdruIZtucozNtzpg": "端口没开也能激活+rce?ebpf∕XDP 内核级隐蔽后门原理剖析", "https://mp.weixin.qq.com/s/u86IWqfZSyBpw0UtOEGa6w": "工信部致谢!360荣膺“优秀技术支撑单位”并获颁原创漏洞证书", "https://mp.weixin.qq.com/s/gkTYdxftr88P1QFYF4oPLA": "北京快手招聘:客户端漏洞挖掘工程师(安全蓝军)", "https://mp.weixin.qq.com/s/BQ_ODcsJyCHurVeZl4bR5Q": "GNU Inetutils Telnetd 认证绕过漏洞检测工具(CVE-2026-24061)1月28日更新", "https://mp.weixin.qq.com/s/QekrIfYWGua9XwAfhAketg": "TP-Link Archer MR600 v5 命令注入漏洞预警(CVE-2025-14756)", "https://mp.weixin.qq.com/s/v-ldCqM4B9a7GTgMC-JH4w": "这种漏洞你的服务器存在吗?", "https://mp.weixin.qq.com/s/Ye5xstDmrQVJ1d4o5ZLwzg": "【高危漏洞预警】Dokploy命令注入漏洞CVE-2026-24841", "https://mp.weixin.qq.com/s/6dbH5lmWHEQHOJhivj7lEQ": "信息安全漏洞周报【第058期】", "https://mp.weixin.qq.com/s/4LYxZRiLGu2zrAFLOgvddA": "高危!SolarWinds 紧急修复 Web Help Desk 四大漏洞", "https://mp.weixin.qq.com/s/JQSEeUSpiAg2yrtmGDuuIQ": "Ivanti 提醒注意已遭利用的两个 EPMM 漏洞", "https://mp.weixin.qq.com/s/ccRgt_BuyJ9O0dDai4UIkg": "【成功复现】GNU InetUtils Telnetd远程认证绕过漏洞(CVE-2026-24061)", "https://mp.weixin.qq.com/s/cxomVcO87VA7Pr6UjdHzaw": "安全热点周报:微软 Office 零日漏洞允许恶意文档绕过安全检查", "https://mp.weixin.qq.com/s/BWKv_9AQ7nVNr3Ab19LQzw": "【高危漏洞预警】WinRAR 存在目录穿越漏洞(CVE-2025-8088),CVSS 评分高达 8.4", "https://mp.weixin.qq.com/s/sKpF5ql2hLpILwq9Qr3TNQ": "超干干货!后台未授权访问漏洞实例分享", "https://mp.weixin.qq.com/s/L0AWjlbg7sqQxum0jes6RA": "【免费领】Android系统漏洞实战权威教程", "https://mp.weixin.qq.com/s/SzVM74aihSiJSGP684TChA": "SolarWinds 修复四个严重漏洞,可导致未认证RCE和认证绕过", "https://mp.weixin.qq.com/s/Ue5qSeokPG4SokP7_bBOwA": "奇安信获NVDB-CAVD年度优秀技术支撑单位 10项原创漏洞证书彰显车联网安全实力", "https://mp.weixin.qq.com/s/lWrMvRHJz7XZFILqV-Pvyg": "通过沙箱逃逸在 n8n 上实现远程代码执行 - CVE-2026-1470 和 CVE-2026-0863", "https://mp.weixin.qq.com/s/PM-8fL98qmAVM0c1qJ_hlA": "CVE-2022-4223 pgAdmin = 6.16 未授权命令执行漏洞", "https://mp.weixin.qq.com/s/Qpbw1qQqhEPsoXzfqTklig": "微软Office曝高危漏洞、耐克遭勒索攻击|一周特辑", "https://mp.weixin.qq.com/s/VBedpkwdO40AgzIVwgnUgA": "Kubernetes RCE:利用 nodes∕proxy GET 请求漏洞", "https://mp.weixin.qq.com/s/Mx0inKTIqnXo6Ak1T9-RRw": "渗透测试人员必备武器库:子域名爆破、漏洞扫描、内网渗透、工控安全工具全收录", "https://mp.weixin.qq.com/s/rafYxCOmhsCA8OWIWNp3Dg": "网安靶场实战指南(第6期):从Web漏洞到拿下服务器!VulnHub靶场DC-1通关实录,新手也能学会提权", "https://mp.weixin.qq.com/s/QMFDTMCuCvs2m0weeOlP5w": "EDUSRC实战RCE记录", "https://mp.weixin.qq.com/s/3dBX4ZdJIdvbSJU6Ld_M3Q": "密码重置漏洞检查清单", "https://mp.weixin.qq.com/s/baxGH-fsFdMnNHf8023hxw": "每周漏洞情报速览|2026.1.24–1.30", "https://mp.weixin.qq.com/s/qm0rfJAGrm-f55DvDa6AtQ": "【AI安全】传统漏洞修复已死!VulnResolver给大模型加 BUFF", "https://mp.weixin.qq.com/s/ZZ8YKMKQr8QKI_wGd0IIzw": "漏洞复现 | 致远OA 权限绕过saveExcelInBase任意文件上传漏洞", "https://mp.weixin.qq.com/s/CpmpG4dtfezQuJ8r2ajCBA": "Metasploit 发布 7 个全新漏洞利用模块,涵盖 FreePBX、Cacti 和 SmarterMail", "https://mp.weixin.qq.com/s/yvtaC_GRTHyN7hzrJ7CFPA": "从 Vite 漏洞联想到 Flarum Less RCE", "https://mp.weixin.qq.com/s/CAP2D7-hllhK9dbYFFhxuw": "0day-飞牛 fnOS存在任意文件读取漏洞", "https://mp.weixin.qq.com/s/GygBtFPmOufJghsvw5iTRg": "【漏洞预警】国产飞牛系统 fnOS 出现安全漏洞", "https://mp.weixin.qq.com/s/ymGCtFaI8bU5XLBK1QMpOA": "【安全圈】Metasploit 发布 7 个新漏洞利用模块 覆盖 FreePBX、Cacti 和 SmarterMail", "https://mp.weixin.qq.com/s/S6IEtr56ruwCPpGQWpHPXw": "Metasploit发布7个新漏洞利用模块,覆盖FreePBX、Cacti和SmarterMail", "https://mp.weixin.qq.com/s/8KeefJZn_TVoIVZLbS_kcQ": "今晚7点直播 | 如何绕过路由器的认证机制?D-Link设备漏洞挖掘实战直播", "https://mp.weixin.qq.com/s/jAmkGeE0nCzTyHxNMafv1A": "【安全圈】国产飞牛系统fnOS疑似出现重大安全漏洞 官方已修复但没有发布安全公告", "https://mp.weixin.qq.com/s/dplQXBA3vxFmMm1c8qjc7A": "Kubernetes 通过 nodes∕proxy GET 权限在集群任意 Pod 中执行命令(RCE)", "https://mp.weixin.qq.com/s/jpnS3f2lkmY-NWPM0sDoOQ": "飞牛系统(fnOS)app-center-static 目录遍历导致的任意文件读取漏洞+命令执行漏洞", "https://mp.weixin.qq.com/s/P3Cuo9-veC_U-iq96w85cg": "【接口漏洞第八章第十节】你以为的速率限制真的安全吗?GraphQL这个功能可能让它形同虚设", "https://mp.weixin.qq.com/s/yoilGdO5F2sObg94a6KzgQ": "【CVE-2025-40551】:Solarwinds Web Help Desk又一处反序列化漏洞", "https://mp.weixin.qq.com/s/D1JViErI_G5wntmXTrGRIw": "【限时靶场】网传的飞牛任意文件读取漏洞", "https://mp.weixin.qq.com/s/XN8GbwvZC8Xf747SbYDw7A": "AutoPentestX – Linux 自动化渗透测试和漏洞报告工具", "https://mp.weixin.qq.com/s/OjSn4k6RCSwYSFuh-78Thw": "1day | 飞牛系统(fnOS)app-center-static 目录遍历导致任意文件读取漏洞+命令执行漏洞", "https://mp.weixin.qq.com/s/1hrOpyAOxx-i8kC16MF_ew": "飞牛系统(fnOS)0Day漏洞风险提示", "https://mp.weixin.qq.com/s/haqpTk0I-K6wwXMxmeoD_g": "【红队必备】100+服务识别+CVE匹配漏洞检测工具", "https://mp.weixin.qq.com/s/5BJgLIw693XR9oAioqdxBA": "【限时靶场】【已开启】网传的飞牛任意文件读取漏洞", "https://mp.weixin.qq.com/s/uMa_qYfHGiF8bwZOb9rn1w": "从“打补丁”到“套娃式绕过”:SolarWinds Web Help Desk 的 RCE 漏洞深度复盘", "https://mp.weixin.qq.com/s/4MGC7Xe50eRNFQBvvpJwBg": "【在野利用】金融政府机构需警惕!Ivanti EPMM 爆发未授权远程代码执行漏洞(CVE-2026-1281 & CVE-2026-1340)", "https://mp.weixin.qq.com/s/x-v0Di9qp6cAKe2nDCGojA": "【安全圈】Chrome 发布安全更新,修复后台 Fetch API 漏洞", "https://mp.weixin.qq.com/s/kHev9YGFSGh6YpI8BOJ3ww": "干货 | 网络安全漏洞扫描 10 步走,小白也能上手的实操指南!", "https://mp.weixin.qq.com/s/KP_-QU2c7Rft1g-Zg1gGag": "【Ivanti在野利用】国内外银行金融政府机构受影响!Ivanti EPMM 爆发未授权远程代码执行漏洞(CVE-2026-1281 & CVE-2026-1340)", "https://mp.weixin.qq.com/s/9Zxp7MM_376UnqfCHdVWvg": "第154篇:美国NSA苹果手机硬件级后门漏洞的分析 | \"三角测量\"系列第8篇", "https://mp.weixin.qq.com/s/qGfxbgVgw_T8OT_JcBdLtA": "【安全圈】两个 n8n 高危漏洞可使认证用户远程执行代码", "https://mp.weixin.qq.com/s/cxZCNawyZaB9dyBsgv8b0w": "工具推荐 | 企业级漏洞扫描与资产测绘平台 4引擎协同 Nuclei+Xray+GoPOC+YamlPOC", "https://mp.weixin.qq.com/s/1_SDCs-yDjQXGPXaqIOl6Q": "【接口漏洞第八章第十一节】从理论到操作:GraphQL别名攻击完整流程", "https://mp.weixin.qq.com/s/RcDFZ5x0naZs1gDDLV_bcQ": "基于OpenClaw的Android漏洞PoC自动生成 Agent实战", "https://mp.weixin.qq.com/s/7_fzx9iKJie7YcPsHPZZSg": "飞牛系统FnOS下app-center-static接口存在导致任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s/W7JLiKTHxTdqw8frUqp5rA": "EDU 证书站边缘资产挖掘实战:从.map 泄露到高危漏洞到手全流程", "https://mp.weixin.qq.com/s/j99J_M91dlP0AsB1lpeJKQ": "RCE", "https://mp.weixin.qq.com/s/LWuJbufyL0jf6nmAcZPoWw": "[系统安全] 六十四.漏洞挖掘与利用 (1)WinRAR漏洞在APT攻击中的应用总结", "https://mp.weixin.qq.com/s/1y5qbMnthkg2HrQHIo7pEw": "红队实战:从默认密码到域控权限的OA系统“自杀式”防御漏洞", "https://mp.weixin.qq.com/s/Am29R7R9CMa7ge6fPQGhmA": "【吃瓜】跳蛋级0day~抓任意网站数据包", "https://mp.weixin.qq.com/s/CI4YQn-WMwXUwidgpOX1yQ": "【网络安全】国产飞牛系统 fnOS 出现严重安全漏洞先甩锅用户,再发补丁", "https://mp.weixin.qq.com/s/d2FurWgfrJZeaj3J-jErBA": "Moltbook AI漏洞暴露电子邮件地址、登录令牌和API密钥", "https://mp.weixin.qq.com/s/ICip6oNTW9ZMfS-rzyP8Sw": "飞牛重大安全漏洞", "https://mp.weixin.qq.com/s/gejBwnbKs0hP0kmqiDTTxw": "紧急提醒!立即备份自己的VPS数据 大量VPS提供商面临勒索软件攻击|国产飞牛系统fnOS疑似出现重大安全漏洞 官方已修复但没有发布安全公告", "https://mp.weixin.qq.com/s/XhuJp_Kn8deTBfA5TqkRow": "【攻防演练】某项目管理系统SQL注入1day分析", "https://mp.weixin.qq.com/s/cvtT8EJ-FA-Zszy-TL59PA": "漏洞预警 | SmarterMail身份认证绕过漏洞", "https://mp.weixin.qq.com/s/kH5TeuWFL8ckFQdwKeo-QQ": "复现n8n Ni8mare:从任意文件读取到远程代码执行的全链漏洞利用 (CVSS 10.0)", "https://mp.weixin.qq.com/s/NnOkcX8toxlEANssIEPPiw": "从安全分析视角一文解读 .NET 越权漏洞", "https://mp.weixin.qq.com/s/iKESKQY5qQyPJWnABpvltA": "因被 AI 生成的虚假漏洞报告轰炸,开源网络工具 cURL 宣布本月底停止提供安全赏金", "https://mp.weixin.qq.com/s/43W8bSzBKrlO7SB67zGCdQ": "某国产OS出现严重安全漏洞,甩锅用户再发补丁", "https://mp.weixin.qq.com/s/bJPMUOD6KDi0Ta0mtmft-A": "Python全量漏洞扫描工具 -- Vulnerability-Scanning-tool(1月31日更新)", "https://mp.weixin.qq.com/s/rqmhQSfv8FMfd_YyJQgh0A": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/_zyYdWNK6_wA0HTmxkdQsw": "【网络安全】国产飞牛系统 fnOS 出现严重安全漏洞先甩锅用户,再发补丁", "https://mp.weixin.qq.com/s/gMKE9_LdzA_Oalu5kQsyNA": "CVE-2026-21509|Microsoft Office安全功能绕过漏洞(POC)", "https://mp.weixin.qq.com/s/Wyb0b3hP8psG4WrBPdeDAw": "CVE-2026-24423|SmarterMail未经身份验证的远程命令执行漏洞(POC)", "https://mp.weixin.qq.com/s/VdlmFef6K3ZSCP44lqaAWA": "网络武器平台遭黑:疑ExploitPack全套漏洞利用代码泄露", "https://mp.weixin.qq.com/s/TpN7OIdPOi9cXMqOEKMpzQ": "T0级漏洞", "https://mp.weixin.qq.com/s/a2JQHOl7y6DNRQdRMiX2mg": "【漏洞情报】从php Zend 内核层分析PHP built-in server http请求走私漏洞", "https://mp.weixin.qq.com/s/nJH2oEWLxNF873rSdJBq0w": "漏洞预警 | 金和OA XXE漏洞", "https://mp.weixin.qq.com/s/O_F8ZWr9NANu837U-aW1Pg": "SmarterTools 修复了 允许执行任意代码的严重漏洞 (CVE-2026-24423)", "https://mp.weixin.qq.com/s/-kYXVUm3vOM5yqStp5hnTQ": "网安靶场实战指南(第 8 期):DC-3 靶场封神!MySQL 提权 + 内核漏洞,学会直接拿捏企业服务器", "https://mp.weixin.qq.com/s/ZyHcFo43xzaqIprG75msPQ": "天锐绿盘云文档安全管理 uploadFolder.do 任意文件上传漏洞", "https://mp.weixin.qq.com/s/j-m_9RQ_pr_suKWQW_rKFw": "【红队必备】告别多工具切换!从信息收集到漏洞验证一站式", "https://mp.weixin.qq.com/s/GkOcyjV9YYWipFfzHuiiuw": "大华智能物联综合管理平台justForTest用户登录漏洞 附POC", "https://mp.weixin.qq.com/s/4wXppnido-Gh1FmPBQR7hQ": "漏洞复现 | Flowise AI 系统任意文件上传漏洞(CVE-2025-26319)", "https://mp.weixin.qq.com/s/hlM2IqTBLYfwXuCUSbKUIA": "英国国家网络安全中心NCSC发布“不可原谅”漏洞判定指南", "https://mp.weixin.qq.com/s/aVs_H3PCssHTxakLuYQHZg": "还在手动翻漏洞公告?这款工具自动聚合多源情报并生成Markdown简报", "https://mp.weixin.qq.com/s/oj_iAKCotfrDxCP7G6AYoQ": "Cobra是一款源代码安全审计工具,支持检测多种开发语言源代码中的大部分显著的安全问题和漏洞。", "https://mp.weixin.qq.com/s/MrOy3xrbsVMB9p8uliGNOQ": "SCADA系统中存在的特权文件系统漏洞", "https://mp.weixin.qq.com/s/7O1QfXe2UhTUU_xBss4EoA": "漏洞预警暗网泄露:[exploitpack.com] 所有漏洞利用程序泄露!", "https://mp.weixin.qq.com/s/U8l5fvJC3BaCRLXjUBhsxQ": "漏洞验证-Nps代理工具web管理端认证绕过", "https://mp.weixin.qq.com/s/RRnwzuw1_FbdLPcvzLJxjA": "vm2 Node.js沙箱库曝高危漏洞 可突破沙箱执行任意代码", "https://mp.weixin.qq.com/s/zTiDqtIKWYHKBoxIDP3JQg": "DudeSuite 漏洞播报 全网漏洞早知道【20260202】", "https://mp.weixin.qq.com/s/rvUAp_XRLjeVrHLuRS4HXw": "WordPress Modular DS 插件的严重漏洞已被积极利用以获取管理员权限", "https://mp.weixin.qq.com/s/PoWUy4x8ivGE3Oog3N00jQ": "Ivanti EPMM RCE CVE-2026-1340∕1281完整分析", "https://mp.weixin.qq.com/s/1kWR8KnKFEIxCtJNo5Ak_A": "三菱电机 SCADA 系统曝漏洞,恐引发工业生产中断", "https://mp.weixin.qq.com/s/jLY9wEB2GjGVOoMHBDrFQg": "深度实例分析:攻防视角下的AI框架组件中的注入漏洞", "https://mp.weixin.qq.com/s/ckBSqV-Bdv-PbMSGfX7WbA": "解析2024:Low-latency Virtual Network function Scheduling Algorithm Based on Deep Reinforcement Learning文章", "https://mp.weixin.qq.com/s/pJhZaWxKQTBD4poWn5YKXg": "第155篇:Weblogic反序列化漏洞的多种回显方法总结(上篇)", "https://mp.weixin.qq.com/s/DURhQdhQnrQmri5-Tmrobg": "CISA紧急警告,Office、Linux内核等关键漏洞正被黑客利用", "https://mp.weixin.qq.com/s/Cl-q6CL-V5jKat7DzgWjLA": "【高危漏洞预警】Ivanti Endpoint Manager Mobile代码注入漏洞CVE-2026-1281∕CVE-2026-1340", "https://mp.weixin.qq.com/s/pAhC-DJgcTF3usj6qdQcaQ": "AI社交平台Moltbook曝严重安全漏洞", "https://mp.weixin.qq.com/s/-APYvQBg6HSZi16rj8Z2bg": "无需手动构包!智能填充参数 + 自动化请求:Swagger API自动化漏洞检测工具|ApiHunter", "https://mp.weixin.qq.com/s/UUCNGrQ90V-O2d62XO6t9Q": "漏洞预警 | Advantech SQL注入漏洞", "https://mp.weixin.qq.com/s/yeAzQ0-6f8E3Zz2McRvNBA": "逃离沙箱:CVE-2026-22709 深度复盘,为什么 vm2 总是防不住?", "https://mp.weixin.qq.com/s/h4y1yJ9WtYoW54R1t5yEIg": "CNVD漏洞周报2026年第4期", "https://mp.weixin.qq.com/s/E5E1jHXxytPiLXHrRwkkjw": "无需手动构包!智能填充参数 + 自动化请求:Swagger API自动化漏洞检测工具|ApiHunter", "https://mp.weixin.qq.com/s/WyIyO8UNkGU7e-N4GF3mAQ": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/z67l_pnGp4P7RykbuunuRQ": "第155篇:Weblogic反序列化漏洞的多种回显方法总结(上篇)", "https://mp.weixin.qq.com/s/UYXWBA98AZ_ihdDbBKSx7Q": "Windows 驱动程序漏洞", "https://mp.weixin.qq.com/s/VKorlZqidUeIGXd5D06nqQ": "帆软报表指纹POC集成", "https://mp.weixin.qq.com/s/64P2r10TzPHlfHKtCzI7gg": "5 分钟全自动聚合 Nmap+AWVS+Xray+Rad+Nuclei 等 20+ 引擎,一键完成资产到漏洞的致命闭环!", "https://mp.weixin.qq.com/s/2ttL4Kl0FGi5WC-k7tfOvg": "为什么 JS∕Python 沙箱这么难搞?从 n8n 的两个 RCE 漏洞谈起", "https://mp.weixin.qq.com/s/0fpcTSvaDJWnZXdChnTGcw": "【已复现】Ivanti EPMM存在命令注入漏洞(CVE-2026-1281&CVE-2026-1340)", "https://mp.weixin.qq.com/s/Xj2sdU-sqWvKVer-QMWoYg": "赏金src报告分享&&edu证书站漏洞分享", "https://mp.weixin.qq.com/s/RB1vwJd06k0NCrIJY6gaPw": "分享Fastjson反序列化漏洞原理+漏洞复现+实战案例+POC收集", "https://mp.weixin.qq.com/s/aJfLGAPEwH2XOC69y9UUPA": "任意代码执行的原子狩猎:从漏洞挖掘到系统沦陷的武器化工程", "https://mp.weixin.qq.com/s/uZF-4szzPMPackVsn_A84g": "漏洞预警 | 金和OA XXE漏洞", "https://mp.weixin.qq.com/s/bIjpwn2DdaY8HSJLQsFLwg": "【服务端漏洞-路径遍历-第一章第一节】服务器漏洞解析第一弹:一文读懂路径遍历漏洞", "https://mp.weixin.qq.com/s/cZ1qRSxcA2kyYkIQjA_i4w": "飞牛系统(fnOS)远程代码执行链:认证绕过", "https://mp.weixin.qq.com/s/gZuixfOZHgo7GVSMRxd3Bw": "一键Clawdbot漏洞:启动恶意远程代码执行攻击", "https://mp.weixin.qq.com/s/7bAdr0D8OhCnEkZA48LsvA": "工具推荐 | 自动检测Vue框架 绕过Vue.js 站点路由守卫 一键发现隐藏资产与未授权漏洞", "https://mp.weixin.qq.com/s/Fc0K_vxV2qh90D3HbncwGQ": "俄罗斯黑客利用近期修复的微软Office漏洞发起攻击", "https://mp.weixin.qq.com/s/_tvuiBsGptTQTgnstIu9KA": "漏洞复现 | 汉王e脸通综合管理平台 monadFileUpload.do 任意文件上传漏洞", "https://mp.weixin.qq.com/s/gX7e7ILJTqaPmrMNnpJjog": "CVE-2025-55182 Apache OFBiz SSRF与远程命令执行漏洞", "https://mp.weixin.qq.com/s/ZyHpBENMl56NhsB8NL1x2w": "一键触发漏洞:OpenClaw远程代码执行漏洞分析", "https://mp.weixin.qq.com/s/rJeVEN7fLLKbwiCcdMM0vg": "飞牛OS 漏洞复现", "https://mp.weixin.qq.com/s/BTt4F5qXcPPX6eFWSQER4g": "某通杀漏洞思路分享", "https://mp.weixin.qq.com/s/tG6KD0DBfNXubD3wnElDaw": "俺臻叼,一次逻辑漏洞之登录绕过测试记录", "https://mp.weixin.qq.com/s/iG8vZt_fE5bpZSOYjQXS8g": "【漏洞脚本】安校易智慧校园管理系统 ADTag.ashx SQL注入", "https://mp.weixin.qq.com/s/wbrYHJTfSnbLH2Tf-V91ng": "bsides vancouver 靶场复现", "https://mp.weixin.qq.com/s/hniB2RTXqQDSsnmBTNoeAQ": "漏洞挖掘系列分享(第一期):漏洞挖掘入门——定义、分类与核心流程", "https://mp.weixin.qq.com/s/-X_RzH3vaGJ_VTrNw7sr7Q": "拉大旗出虎皮:Exploit Pack公司泄露数据简要分析", "https://mp.weixin.qq.com/s/GZnKRz7MUump-ByoxXsLLQ": "如何利用 OpenClaw 漏洞一键盗取数据与密钥(CVE‑2026‑25253)", "https://mp.weixin.qq.com/s/gX41gGKxm3xv5Y-SpoPx8g": "Ilevia EVE X1 Server login.php 远程命令执行漏洞", "https://mp.weixin.qq.com/s/T9MZC2XpFltnmbV0xsu5ww": "飞牛系统(fnOS)任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s/BN1-1lelns-ZCK1OzIlMQA": "漏洞预警 | 飞牛-私有云fnOS文件读取漏洞", "https://mp.weixin.qq.com/s/QYOBPePOOWSVJEAWYT8Rhg": "有人把 Bash 玩得太溜了,我们爱死这个漏洞了(Ivanti EPMM 预认证 RCE CVE-2026-1281 & CVE-2026-1340)", "https://mp.weixin.qq.com/s/xA4b5mhAIe5ubEzl5OMUiA": "一个漏洞,控制所有VM:CloudCone事件的技术复盘", "https://mp.weixin.qq.com/s/knjjPkEnjqDioXeLAyekrg": "海康威视无线接入点漏洞可导致恶意命令执行", "https://mp.weixin.qq.com/s/3DIENTnUMZn-mqNZZxracA": "【高危漏洞预警】jsPDF XML注入漏洞(CVE-2026-24043)", "https://mp.weixin.qq.com/s/igY6BVbRwNhwG6IbaEA7-A": "不止于传马:将文件上传漏洞转化为持久性反向Shell通道", "https://mp.weixin.qq.com/s/jfjYxyVhewSrDw3xeWjHMA": "Office 最新高危漏洞遭利用,多国政府机构被定向攻击", "https://mp.weixin.qq.com/s/EaEDZDVjgXlBccRRWE5VbQ": "【复现】Ivanti Endpoint Manager Mobile远程代码执行漏洞(CVE-2026-1281和CVE-2026-1340)", "https://mp.weixin.qq.com/s/PAVexC4X5iEFuHUB-c2jqA": "安全小知识-第二十二期_构建企业级分布式漏洞扫描器", "https://mp.weixin.qq.com/s/epViNNC4e37S4VbTKOU3aw": "分享Fastjson反序列化漏洞原理+漏洞复现+实战案例+POC收集", "https://mp.weixin.qq.com/s/ofrog6_Ru2ake4365B2NZw": "【AI高危漏洞预警】HuggingFace VLM图像获取漏洞CVE-2026-0599", "https://mp.weixin.qq.com/s/yqTx_CeRJaOr2L2SNbPNkQ": "【WordPress专题09】CVE-2026-1056 全网首发漏洞分析!未授权任意文件删除漏洞 POC及代码审计", "https://mp.weixin.qq.com/s/A3iv4c7lUBE5iTgatRC3eQ": "Nacos漏洞指纹POC集成", "https://mp.weixin.qq.com/s/0veSVWzrXajVClmmijCdpQ": "【安全圈】海康威视修复DS-3WAP无线接入点命令注入漏洞(CVE-2026-0709)", "https://mp.weixin.qq.com/s/T7DnYEwclXUKLgoR8tTV_w": "APT28的“Neusploit”行动:俄罗斯黑客利用Microsoft Office零日漏洞展开间谍活动", "https://mp.weixin.qq.com/s/B4yXdQ88zI-PUSaUyG7Brw": "fnOS路径穿越与命令执行漏洞利用分析", "https://mp.weixin.qq.com/s/ke4_1VPr_hZbIR70nbbb2w": "OSEE早鸟价 | 5月香港,EXP-401实战训练", "https://mp.weixin.qq.com/s/Rha5lDQ-ek52jzpVn_kMMA": "【独家复现】用友企业报表iUFO Cloud(U8Cloud)无条件任意文件上传漏洞", "https://mp.weixin.qq.com/s/-RiVPiNgpedpRQV5nnYgtg": "OpenClaw高危漏洞可一键窃取主密钥,攻击者直通上帝模式", "https://mp.weixin.qq.com/s/R08sa34kohr0jL4MVLJhAQ": "Gakido CRLF注入漏洞允许攻击者绕过安全控制", "https://mp.weixin.qq.com/s/HoU35VNA9hUt-VAFOw1xGQ": "SAML认证绕过:Uber的一万美元漏洞复盘学习", "https://mp.weixin.qq.com/s/oU-qw3fjUuJYdtqzZQ11Kw": "从美国CISA KEV看 “主权”合规漏洞清单的价值变迁", "https://mp.weixin.qq.com/s/PsjAV-08i25TN7RczQ-aiw": "关于AI项目OpenClaw存在远程代码执行漏洞(CVE-2026-25253)的风险提示", "https://mp.weixin.qq.com/s/g1dZeV279fvjlPH7mNiX2A": "【服务端漏洞-路径遍历-第一章第二节】不止于原理:路径遍历漏洞的实战利用与敏感信息提取", "https://mp.weixin.qq.com/s/fKf59yeFmqYFxfpMHJUnow": "Burp Suite | Web未授权访问漏洞检测插件", "https://mp.weixin.qq.com/s/_t9kW2le-q6UAaYf6BHz2g": "工具 | ShiroExploit", "https://mp.weixin.qq.com/s/Yx2Y7DfNNKXwsfbcD0Cv1g": "俄罗斯 APT28 黑客利用微软 Office 漏洞发起恶意软件攻击", "https://mp.weixin.qq.com/s/osHj1BKn-Rhw7htjoXrlQA": "漏洞预警 | 东胜物流软件SQL注入漏洞", "https://mp.weixin.qq.com/s/wswvRKHkzh0LLVr46Qphng": "黑客利用 React Native CLI 的漏洞部署 Rust 恶意软件", "https://mp.weixin.qq.com/s/xPa_GQ1piM8Gtl0uDepPqA": "GUI | CVE-2026-24061 telnetd 身份验证绕过漏洞检测与利用工具", "https://mp.weixin.qq.com/s/QY2CDxlsuRJd8su6Rh6uMw": "0day | 飞牛系统(fnOS)远程命令执行漏洞【批量脚本】", "https://mp.weixin.qq.com/s/GS8A4NHhfoBv-qSI3UshTQ": "恶意评论:严重 Orval 漏洞 (CVE-2026-25141) 注入代码", "https://mp.weixin.qq.com/s/caQZ0eN7KxFwMIZxwy46EQ": "针对Nacos漏洞猎杀的各种骚姿势", "https://mp.weixin.qq.com/s/S0N2sEGQ1eTuRJKkjPprhg": "CERT∕CC 警告:二进制解析器漏洞允许 Node.js 特权级代码执行", "https://mp.weixin.qq.com/s/R3uY6J_-4Kewno7zd1uj2g": "Docker修复Ask Gordon AI的关键漏洞,该漏洞允许通过图像元数据执行代码", "https://mp.weixin.qq.com/s/JlT8xj71W074Lh-pw2FF_A": "Cache Deception + CSPT:从“无影响”到账号接管的漏洞链", "https://mp.weixin.qq.com/s/vljnnrlAQeiywkRicosSiA": "与俄罗斯有关联的 APT28 组织利用新披露的微软 Office 漏洞进行定向攻击", "https://mp.weixin.qq.com/s/RXKXxdDH_o9Jx9uZTs27rA": "利用 NTLM 反射控制 Active Directory (CVE-2025-33073)", "https://mp.weixin.qq.com/s/Qh6_fEEfG7F8Skpshp0fYA": "【漏洞挖掘】JS敏感信息泄露导致的系统沦陷", "https://mp.weixin.qq.com/s/JhT_3j9rbgBjDKphABV-Jg": "【服务端漏洞-路径遍历-第一章第二节】不止于原理:路径遍历漏洞的实战利用与敏感信息提取", "https://mp.weixin.qq.com/s/qZaQtmmP18dzvUB7oASFyQ": "CI∕CD安全案例:从PR评论到RCE、AWS管理员密钥泄露", "https://mp.weixin.qq.com/s/026Zp1lM2HZds-yU11i0lw": "漏洞预警 | vm2沙箱逃逸漏洞", "https://mp.weixin.qq.com/s/sVo09MSfTM1NtEffcN_2_w": "React(next.js)漏洞指纹POC集成", "https://mp.weixin.qq.com/s/k51p6S4WVs8a4B7-7fQNTg": "2025年新增漏洞5万个,公开遭到利用的不足千个", "https://mp.weixin.qq.com/s/R_k0GDN0GpfL2QSXV6Fi_Q": "CVE-2025-54100学习有感", "https://mp.weixin.qq.com/s/e1_jk64oB51phqyx1CvPtQ": "漏洞预警 | 金和OA XXE漏洞", "https://mp.weixin.qq.com/s/xK_BjSFHeGLY-oRH2-_N0A": "APT28 黑客利用 Microsoft Office 零日漏洞部署恶意软件", "https://mp.weixin.qq.com/s/-FPQQLC55DHIMCBYgsn8hg": "漏洞扫描工具 -- Vulnerability-scanning(2月3日更新)", "https://mp.weixin.qq.com/s/3cWamDknrPpMIxukHU6G5g": "APT28借助微软Office 0-day漏洞发动“Neusploit”定向攻击", "https://mp.weixin.qq.com/s/9Hx6N56g8GZFlEEL60mR6w": "第1期:漏洞挖掘入门|定义、分类与标准化挖掘流程(附合法靶场清单)", "https://mp.weixin.qq.com/s/_a_iDUzZ5fukOib-I9T93g": "用友NC importCombo XXE漏洞", "https://mp.weixin.qq.com/s/i1OIq6jzb1pRuyop9MnS6A": "SRC高危漏洞狩猎:从“漏洞复现”到“降维打击”的实战引擎", "https://mp.weixin.qq.com/s/_olCaV7VJWGAKLpL5R48Ow": "无法反弹SHELL的RCE利用", "https://mp.weixin.qq.com/s/pcoh03ivOSxEVyyCsINxgw": "紧急预警!俄罗斯APT28锁定中东欧,Office零日漏洞成攻击利器,邮件偷取+远程控制防不胜防", "https://mp.weixin.qq.com/s/FmmnIfSDQp80Nfpw7mu8SQ": "Nacos默认key导致权限绕过登陆漏洞 附POC", "https://mp.weixin.qq.com/s/0r9DRCOmps_tGds6gG_thg": "0126.我是如何通过发现公开漏洞赏金计划中的一个严重 SQL 注入漏洞而获得巨额奖金的。", "https://mp.weixin.qq.com/s/3YA6L_IlCrkzbDbrVDCMrw": "综合漏洞后渗透利用工具", "https://mp.weixin.qq.com/s/bmoOUbydU7Bes-XH0AkopQ": "14.9万星AI个人助手OpenClaw曝高危漏洞", "https://mp.weixin.qq.com/s/N2V5skUr__EJtCZ4PWRdUg": "已复现!大蚂蚁 (BigAnt) 即时通讯系统任意文件上传漏洞", "https://mp.weixin.qq.com/s/EpY0aTJjGrv-qSx9n8wbkA": "CVE-2026-20820 clfs.sys堆溢出", "https://mp.weixin.qq.com/s/dkk1eC6ssn50PnmwhX6eaA": "EDU漏洞挖掘杂谈分享", "https://mp.weixin.qq.com/s/O0fyS4zABq-BOrWw5H5Ptw": "【已复现】大蚂蚁 (BigAnt) 即时通讯系统任意文件上传漏洞", "https://mp.weixin.qq.com/s/OohehXO0-p025as806sTSw": "【已复现】Microsoft Office 安全功能绕过漏洞(CVE-2026-21509)安全风险通告第二次更新", "https://mp.weixin.qq.com/s/odJon0o3LrVXu6jnChV21Q": "【漏洞通告】Google Chrome V8 引擎类型混淆漏洞(CVE-2026-1862)", "https://mp.weixin.qq.com/s/5sO9YbVElCjlMV2a7YStVg": "关于防范Microsoft Office安全功能绕过高危漏洞的风险提示", "https://mp.weixin.qq.com/s/6hV_WHoVXF6VA2lcRiLruw": "漏洞报告加分秘籍,直接套用!", "https://mp.weixin.qq.com/s/X7n9RTlq0H-SxnLJOZGxcA": "【漏洞通告】飞牛系统(fnOS)任意文件读取漏洞", "https://mp.weixin.qq.com/s/WOffLl_h9e-I_qmVV5P6Uw": "【啃啃鸡随便吃】某宝百事肯某鸡逻辑漏洞复现靶场", "https://mp.weixin.qq.com/s/hoi3diJwRtPIY_yeCDXrSA": "OAuth 2.0 安全攻防:从 Portswigger 六大实验看认证漏洞挖掘", "https://mp.weixin.qq.com/s/QHLy5xEAOsmWLHKbRy-MJA": "DJI SRC 新春活动上线(漏洞x情报)奖励值 UP!", "https://mp.weixin.qq.com/s/EIBPWPG4PUU-dVslSUVORg": "【二次更新】预警公告3天后被武器化利用,Microsoft Office 远程代码执行漏洞 (CVE-2026-21509)", "https://mp.weixin.qq.com/s/SUYJ4FM25JS8vXYZMiwpdA": "微软将默认禁用NTLM协议,终结30年高危身份验证漏洞", "https://mp.weixin.qq.com/s/Ht-keV1l2mQELb-R3k2bbA": "【AI安全】OpenClaw 爆出 9.8 分顶级 RCE 漏洞!仅需一个链接", "https://mp.weixin.qq.com/s/lMss5FGUxjyIyIQ4aH-4Mw": "若依常见漏洞一把梭(上)", "https://mp.weixin.qq.com/s/L0sOuBUHC8BoQvVfCp2LTA": "Apache Syncope 存在允许攻击者劫持用户会话漏洞", "https://mp.weixin.qq.com/s/-yHhsQwRv-z2y-7SQKzlYA": "Android组件漏洞学习(一)", "https://mp.weixin.qq.com/s/8Sq5vsMODefXgTcPdySt8g": "[跟着静师傅学代码审计]智慧校园(安校易)管理系统多处0day", "https://mp.weixin.qq.com/s/wEraHfeZh7GiK-1wy_UCcg": "Chrome漏洞允许攻击者执行任意代码并导致系统崩溃", "https://mp.weixin.qq.com/s/EIkOTUrDMjjE31hj1D5LOw": "【已复现】| 大蚂蚁即时通讯系统存在两处任意文件上传漏洞", "https://mp.weixin.qq.com/s/5GEQqkfgMDUg2BpPu65Cpw": "黑客利用React Native CLI漏洞提前部署Rust恶意软件", "https://mp.weixin.qq.com/s/tvTUaafWnH8v1kLPD-AZ7Q": "【服务端漏洞-访问控制缺失-第二章第一节】从验证到越权:访问控制漏洞的“破门”之道(原理篇)", "https://mp.weixin.qq.com/s/jME4unjLCep7WxgkAHc7PA": "Apache Syncope 漏洞可用于劫持用户会话", "https://mp.weixin.qq.com/s/64BCcSAohxoCgFc7_PrVkw": "【安全圈】Fancy Bear 利用微软 Office 漏洞对乌克兰及欧盟发动网络攻击", "https://mp.weixin.qq.com/s/N2LXGZaC9lSMJIYGhQYhsg": "监管通报72款APP违规:告知同意缺失、未成年人信息处理失范、人脸识别滥用等,直指企业合规深层漏洞", "https://mp.weixin.qq.com/s/VcqJzhUXWjUyQjnK1i44wg": "【安全圈】爆火 AI 智能体 OpenClaw 被发现严重漏洞,可传播 ∕ 植入 macOS 病毒", "https://mp.weixin.qq.com/s/OUqumNWCgifIFRYsdmS4PQ": "共建开源生态安全!ByteSRC正式启动开源项目漏洞收录计划!", "https://mp.weixin.qq.com/s/3uStWdd7GnPMfogBWF9KyA": "福昕PDF编辑器漏洞允许攻击者执行任意JavaScript代码", "https://mp.weixin.qq.com/s/7sTcRY_fzP51vEzuSMsTjQ": "AI 助手OpenClaw 易遭一次点击 RCE 攻击", "https://mp.weixin.qq.com/s/0zfbbRmcre5RZZ2zcIRVHw": "存储桶指纹和漏洞POC集成", "https://mp.weixin.qq.com/s/wl8vtaYPlFXE3A9RLzRFzQ": "【已复现】大蚂蚁即时通讯系统存在任意文件上传漏洞", "https://mp.weixin.qq.com/s/pDdCZYjs6EecE4ILb01NMA": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/jDKqfv1BFCdUQNGD5znUhw": "第2期:Web漏洞挖掘实战|SQL注入底层原理与全场景挖掘技巧", "https://mp.weixin.qq.com/s/_lIlPUC7J_HU590bBYqoTw": "APT28 利用微软 Office 漏洞(CVE-2026-21509)实施间谍类恶意软件攻击", "https://mp.weixin.qq.com/s/ItT_-24a4N0eEutvWCnmAg": "爆火 AI 智能体 OpenClaw 被发现严重漏洞,可传播 ∕ 植入 macOS 病毒", "https://mp.weixin.qq.com/s/rw6pQY4nPr_5oByTjBMjZw": "黑客利用 React Native CLI 的漏洞在公开披露前部署了 Rust 恶意软件", "https://mp.weixin.qq.com/s/2M8pvfXQWYCbgyr6LGUFPg": "【代码审计】某财务系统代码审计Jdbc Attack bypass+反序列化漏洞利用", "https://mp.weixin.qq.com/s/IlZqEn0BUdPtZ-lBDYQnIQ": "信息安全漏洞月报(2026年01月)", "https://mp.weixin.qq.com/s/aGKseomBxYsch39H-qCGvA": "CVE-2026-21721 漏洞分析", "https://mp.weixin.qq.com/s/L5AuBW7-2Y5xNzXfTZV4Zg": "工信部:关于防范Microsoft Office安全功能绕过高危漏洞的风险提示;网络攻击新手法:签名合法驱动被利用,59款EDR∕防护软件遭终止| 牛览", "https://mp.weixin.qq.com/s/kHWKA4g06fZ_3VZAEFbCwg": "从补丁到漏洞利用:逆向分析CVE-2026-24127", "https://mp.weixin.qq.com/s/NhLATenw7IHFzMSFSPVgXw": "【在野利用】SolarWinds Web Help Desk 未授权远程代码执行漏洞(CVE-2025-40536&CVE-2025-40551)", "https://mp.weixin.qq.com/s/Y5f9aFQyWG_VjN0Rtnkw_g": "针对Nacos漏洞猎杀的各种骚姿势", "https://mp.weixin.qq.com/s/MlJv1zywQc-TOwzpH86pYw": "信息安全漏洞周报(2026年第5期)", "https://mp.weixin.qq.com/s/lsiR8dG4mZdoQLGUkU0wpw": "Foxit PDF 编辑器漏洞允许攻击者执行任意 JavaScript 代码", "https://mp.weixin.qq.com/s/bocW_99dMANQSuotqiv6Yw": "承影 ChYing:支持 Nuclei POC+JWT 爆破 + 403 Bypass,开源渗透利器", "https://mp.weixin.qq.com/s/QOqBiTc_R2wl37jP9vmzHg": "【代码审计】从日志告警到通用0day的挖掘", "https://mp.weixin.qq.com/s/V2PfbKcxiPJIrsjVrbxMSQ": "锐明技术Crocus系统 MemoryState.do SQL注入漏洞", "https://mp.weixin.qq.com/s/bprS63hvr_6hYoqXeRM8rg": "关于防范Microsoft Office安全功能绕过【高危漏洞】的风险提示", "https://mp.weixin.qq.com/s/eql-mJgut6GOZ7HvIIuIUA": "综合漏洞利用工具 -- FnOS-GUI-Exploit-Tool(2月4日更细腻)", "https://mp.weixin.qq.com/s/RSvICD-zUTYFD0cj_54vdA": "行业资讯:AI智能体挖漏洞靠谱么?或许这场比赛的结果能告诉你答案", "https://mp.weixin.qq.com/s/klLa61WVXgNxEOsXtavXHg": "神农安全SRC漏洞挖掘公开课", "https://mp.weixin.qq.com/s/h_ludVJ6ekdo5buYNK_RCA": "0day | 飞牛系统(fnOS)远程命令执行漏洞【GUI版 + 批量脚本】", "https://mp.weixin.qq.com/s/K5asKJYHwe69iG2EHopIEg": "漏洞预警 | 金和OA XXE漏洞", "https://mp.weixin.qq.com/s/aaxbzbgTukRYI_sZfTTozw": "【实战分享】抽丝剥茧:记一次导致全站用户信息泄露的严重 IDOR 漏洞挖掘", "https://mp.weixin.qq.com/s/Z6VZS95CZ43qlBrdciitYQ": "CISA警告:SolarWinds Web Help Desk远程代码执行漏洞已被攻击者利用", "https://mp.weixin.qq.com/s/HfVhm49R9X7Je6I_lGuVfQ": "【漏洞复现】飞牛私有云 fnOS 0day 漏洞复现:可任意读取文件 + 绕过认证。", "https://mp.weixin.qq.com/s/K4zqJfm0OhJ3NjoGP-ziOw": "漏洞预警 | SmarterMail远程代码执行漏洞", "https://mp.weixin.qq.com/s/Bs9KTXzK4h6CCiG5bcpYdw": "Jeecg-Boot 远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s/g20n1TKgee7TWFuKcfLyCg": "路径遍历+DLL劫持:Meta的11万美元漏洞链复盘", "https://mp.weixin.qq.com/s/QM9jyB_8NEGzZr2obNdoWg": "工业警报:Moxa 开关遭遇严重认证绕过漏洞 (CVSS 9.2)", "https://mp.weixin.qq.com/s/a6382uLO8Q7YnH6GGo6Fdw": "Django 高危漏洞可引发拒绝服务与 SQL 注入攻击", "https://mp.weixin.qq.com/s/LK_FC4z-3lcZ_rzlvmAxOw": "新政策出台,数据安全、风险评估、漏洞管理市场需求或将迎来激增", "https://mp.weixin.qq.com/s/lcz0eEe-I8IMvDehxDmesg": "Chrome 漏洞可导致攻击者执行任意代码并引发系统崩溃", "https://mp.weixin.qq.com/s/dbJhEjVo6RkT82HHY39iew": "【工具】VueCrack-一键检测Vue站点未授权漏洞", "https://mp.weixin.qq.com/s/RYHlkQ3l3-CPIHQQasdDaw": "记一次APP应组件问题引起的连锁漏洞反应!", "https://mp.weixin.qq.com/s/8k-sBYU44CCtoWzVHZ4vtg": "致远OA指纹和漏洞POC集成", "https://mp.weixin.qq.com/s/x7tbBKYj5lbMjegp-j9T3Q": "漏洞预警 | OpenClaw 远程代码执行漏洞(CVE-2026-25253)", "https://mp.weixin.qq.com/s/30ZqYZJP6zf1R_BYIKkqzA": "若依常见漏洞一把梭(下)", "https://mp.weixin.qq.com/s/KxT5k5qWs4SwJC3kGF6iGg": "Web 缓存漏洞扫描器 -- WCVS", "https://mp.weixin.qq.com/s/zKNdrHDv1YeYg6uwefbkag": "工信部:关于防范Microsoft Office安全功能绕过高危漏洞的风险提示", "https://mp.weixin.qq.com/s/_yCmT_xZWhyTOSW3LzYVWw": "CVE-2025-55182", "https://mp.weixin.qq.com/s/PfcP5CAZYNDzgj5QS3G9kQ": "【论文速读】|AgenticSCR:一种用于潜在漏洞检测的自主智能体式安全代码评审方法", "https://mp.weixin.qq.com/s/gVibQpGjpJ1OS6O_AteqZg": "奇安信2025年网络安全漏洞态势报告:高危集中化、攻击智能化", "https://mp.weixin.qq.com/s/AHcMsvFpu0ko_oWKJ8H5rg": "飞牛私有云fnOS远程命令执行漏洞与文件读取漏洞【批量验证脚本】", "https://mp.weixin.qq.com/s/3209bkkay622iJv30ZFpMg": "Chrome漏洞可导致攻击者执行任意代码并引发系统崩溃", "https://mp.weixin.qq.com/s/kfJ0QeU-BlBobNV4zfiN4Q": "高危漏洞!VMware ESXi 漏洞遭勒索软件在野利用", "https://mp.weixin.qq.com/s/r9oPWhMe5SYPqStp12RsIA": "漏洞预警 | 东胜物流软件SQL注入漏洞", "https://mp.weixin.qq.com/s/D50kcwL_ytlaPDwyyv_hJA": "热门平台 n8n 遭遇三重远程代码执行漏洞威胁", "https://mp.weixin.qq.com/s/PIu4zAVq9zgcJe3okRZ20A": "漏洞预警 | OpenSSL栈缓冲区溢出漏洞", "https://mp.weixin.qq.com/s/LQ4_n6NJWFhqtvNbtDBRYg": "FnOS 漏洞利用GUI工具:路径泄露、文件读取、远程执行", "https://mp.weixin.qq.com/s/8V7KcHmF-kOerT6Rexrv3Q": "爆火 AI 智能体 OpenClaw 被发现严重漏洞,可传播 ∕ 植入 macOS 病毒|黑客放出新变种病毒针对fnOS升级!官方紧急通告", "https://mp.weixin.qq.com/s/L5qGM7r03nLVkod9L3Zwrg": "续写三连冠传奇!360勇夺2026天府杯漏洞防护赛独立战队第一名", "https://mp.weixin.qq.com/s/EHk3ilen37_AMTlE8O1kBg": "漏洞预警 | 金和OA XXE漏洞", "https://mp.weixin.qq.com/s/hA7awp6qrUCTveCO5uPddA": "【AI安全】重磅!Google Gemini 爆发“幽灵日历”漏洞", "https://mp.weixin.qq.com/s/neIZUT73kAjzg3KLiNTUgQ": "爆火 AI 智能体 OpenClaw 被发现严重漏洞,可传播 ∕ 植入 macOS 病毒|黑客放出新变种病毒针对fnOS升级!官方紧急通告", "https://mp.weixin.qq.com/s/08uls_k08ED196k-W0LK5Q": "web渗透实战 | js.map文件泄露导致的通杀漏洞", "https://mp.weixin.qq.com/s/_CD849pEIAYS_nA_TaFU3w": "Amaranth-Dragon 威胁组织利用 WinRAR 漏洞获取受害者系统的持久访问权限", "https://mp.weixin.qq.com/s/vFTs4x4HMdSRH4xiRjrQOA": "【新洞速递】CVE-2026-21858远程代码执行漏洞", "https://mp.weixin.qq.com/s/HDWi-CRvI7i094YVwo9PxQ": "Claude新模型4.6:开箱即挖500个0day漏洞,源代码审计即将颠覆", "https://mp.weixin.qq.com/s/vcY1IZaZE0Lrch0C0bjMTA": "吓哭了!天才黑客觉醒!Claude 4.6挖出500个高危0day", "https://mp.weixin.qq.com/s/zEpVqAb2MCabTRvBl1LpPw": "新政策出台,数据安全、风险评估、漏洞管理市场需求或将迎来激增", "https://mp.weixin.qq.com/s/8OfKxOu0RxiehLi9-6aVDA": "2026-使用Ubuntu 24.4打造出一个多元素的黑客漏洞实验室|用于Ai助手训练或者是个人实践—完整版", "https://mp.weixin.qq.com/s/47iSodfkDoXVptNC7FToIg": "n8n漏洞使数十万个企业人工智能系统面临风险", "https://mp.weixin.qq.com/s/LTJvzJSvSpPW78-ZNCgmsQ": "Interlock利用游戏反作弊驱动0day漏洞,精准瘫痪EDR∕AV系统实施双重勒索", "https://mp.weixin.qq.com/s/jyAQ5Igjm9OdYiuRXm_F-g": "疑似俄罗斯背景APT28组织利用最新漏洞及云C2基础设施发起隐蔽攻击", "https://mp.weixin.qq.com/s/BcKrQLcCxqQRY3PMwnWGAA": "ThinkPHP漏洞综合利用工具, 图形化界面, 命令执行, 一键getshell, 批量检测, 日志遍历, session包含,宝塔绕过", "https://mp.weixin.qq.com/s/ok8NxUWwkDwrjQXPyN8SHw": "0day代码审计:某知名OA SQL注入", "https://mp.weixin.qq.com/s/oZRPzfMwicd3glK5MYEYgQ": "CVE-2025-11730:在ZYXEL防火墙中玩\"文字游戏\"通过DDNS配置获取Root权限", "https://mp.weixin.qq.com/s/SzJxSrcScDm6z14jozfmbA": "小品-T0级漏洞", "https://mp.weixin.qq.com/s/u6WcWv0foJcFGjTLJwwL6Q": "安全小知识-第二十三期_Struts2的“幽灵漏洞”:S2-045∕046为何至今仍有警醒意义?", "https://mp.weixin.qq.com/s/3CVrYCSOgBKaNNnJBzwmaA": "快普M6 GetAccountTitleList SQL注入漏洞", "https://mp.weixin.qq.com/s/IlyyCCU-SeusEZBxdPImQg": "漏洞实战:怎么利用 XSS、BAC 和 CSRF 实现平台级接管的", "https://mp.weixin.qq.com/s/GFxgNj6ct8J9qHM9BWfY8g": "叮~你有新的速递!CVE-2026-21509 RCE漏洞(速查)", "https://mp.weixin.qq.com/s/c30Ywg_1PNiPdZ61ex-T0g": "漏洞速递 | CVE-2026-24423 RCE漏洞(建议自查)", "https://mp.weixin.qq.com/s/sY7-Y5nwJle4d9fJkZJF8g": "LookOut:Google Looker 双重漏洞深度技术分析", "https://mp.weixin.qq.com/s/0k1-7u-CxcEKNPke6AOIqA": "漏洞复现 | SmarterTools SmarterMail 远程代码执行漏洞(CVE-2026-24423)", "https://mp.weixin.qq.com/s/qDwcASKl_qgcVOQme94D_g": "Django高危漏洞可引发拒绝服务与SQL注入攻击", "https://mp.weixin.qq.com/s/BJp2EPHfMQ2zjlctQyIFaQ": "飞牛系统(fnOS)远程代码执行链:认证绕过", "https://mp.weixin.qq.com/s/5v2BKlGkO-6jPAvwtYj-ZA": "瑞斯康达-多业务智能网关-任意命令执行漏洞 附POC", "https://mp.weixin.qq.com/s/DYqgzvR-gbshNVrIZpOdtw": "深入剖析GCP Looker漏洞:从RCE到跨租户数据泄露", "https://mp.weixin.qq.com/s/0HChmdRHR-z3Zov8tLNubA": "【已复现】n8n 继CVE-2025-68613后再曝表达式沙箱逃逸漏洞可导致任意代码执行(CVE-2026-25049)", "https://mp.weixin.qq.com/s/mw8sTIA2Cyp134GUpXX_1Q": "第3期:Web漏洞挖掘实战|XSS跨站脚本漏洞原理与绕过技巧", "https://mp.weixin.qq.com/s/kJ1nfNQQzoCcPZaUqRRgAA": "CentOS 9 新漏洞允许攻击者提升至 root 权限——PoC 发布", "https://mp.weixin.qq.com/s/DGlUb5lXHIbWHfUYoKPR0g": "VMware ESXi 中的 CVE-2025-22225 漏洞现已被用于勒索软件攻击", "https://mp.weixin.qq.com/s/UBUvlozD7JNRi4rUYm-a2g": "CVE-2025-8949漏洞复现技术分享", "https://mp.weixin.qq.com/s/EUCyc-y6acIlkK6yEXdovg": "某即时通讯系统缓存投毒->代码注入RCE", "https://mp.weixin.qq.com/s/1kcK8V1NKgZgmvvAi_Hr5Q": "我是如何利用二级上下文漏洞触发后端 API 调用中的 SSRF 和路径遍历攻击的", "https://mp.weixin.qq.com/s/cA_rlI3qQW5THz_LFbkrPA": "利用 LLM 加速漏洞挖掘:我是如何在 Scada-LTS 中发现 Stored XSS 并拿到人生第一个 CVE 的", "https://mp.weixin.qq.com/s/GWjw-3u6XnVV8VQmTqGgWg": "飞牛 FnOS myapp存在目录遍历、文件读取漏洞", "https://mp.weixin.qq.com/s/i-rU2q_ZrcHXlrOhP--IwQ": "【红队武器库】100+款漏洞利用工具合集,从Shiro主流框架到云资产全覆盖", "https://mp.weixin.qq.com/s/wzZT_YT5jY8W4FkLssW7XQ": "关于防范Apache Struts2开源应用框架XML外部实体注入高危漏洞的风险提示", "https://mp.weixin.qq.com/s/Pdmk2xThBcEhXhFzxGqphQ": "【漏洞通告】n8n 表达式执行漏洞导致命令执行(CVE-2026-25049)", "https://mp.weixin.qq.com/s/vSyXocSl_bCxHvlueXMcOg": "洞见AI时代漏洞攻防,天融信发布《2025年网络空间安全漏洞态势分析研究报告》", "https://mp.weixin.qq.com/s/vRFmlvpWELped7WjyoLDbg": "Samstung 第 1 部分:MagicINFO 9 Server 远程代码执行", "https://mp.weixin.qq.com/s/lzft8UrsChCa-g4uFAtQMQ": "JAVA代码审计之Thymeleaf模板注入漏洞", "https://mp.weixin.qq.com/s/p8FCNU22g_YqE4oxBwdZug": "gemini-mcp-tool 命令注入漏洞深度分析(CVE-2026-0755)", "https://mp.weixin.qq.com/s/uRpTMUZVrnevvrB2GyrHKg": "0day速报:棋士AI代码审计又双叒叕发现新漏洞", "https://mp.weixin.qq.com/s/uTLuyDiY03iBLRoj1-dZQg": "Samsung MagicINFO 9 预认证 RCE 漏洞链分析 - TOCTOU 竞争与目录遍历导致认证绕过", "https://mp.weixin.qq.com/s/hN6B5Hnvl-wmXUekNaa4nQ": "信息安全漏洞周报【第059期】", "https://mp.weixin.qq.com/s/e4pM_G3TJakyGj750mmzIw": "Claude新模型4.6:开箱即挖500个0day漏洞,源代码审计即将颠覆", "https://mp.weixin.qq.com/s/VTPMSs-_rL4-qt_b5xW62A": "工具推荐&&SQL注入漏洞检测神器", "https://mp.weixin.qq.com/s/NA40gl6fj3UFuevxwg48Tg": "Cisco 0-Day RCE 安全电子邮件网关漏洞已被实际利用", "https://mp.weixin.qq.com/s/HRfsYKM9TyDHh6kjrAFjjg": "【漏洞通告】n8n 表达式沙箱逃逸导致远程代码执行漏洞(CVE-2026-25049)", "https://mp.weixin.qq.com/s/mT6OwOmpFsvIP4roz3SdIg": "安全热点周报:SolarWinds 严重远程代码执行漏洞已被积极利用", "https://mp.weixin.qq.com/s/h0sTAppUiTNsQRzcKgz7Pw": "两个漏洞可用于攻陷谷歌 Looker 实例", "https://mp.weixin.qq.com/s/0m3JdmA36CrB4bvCBMeMoA": "2026年1月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s/0MHKw8W5fGeo86owr8hC9Q": "2026年1月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s/cOEsDXrelY7xCIrznIxMrg": "网络钓鱼和OAuth令牌漏洞导致Microsoft 365全面入侵", "https://mp.weixin.qq.com/s/J9IC6PzcIgmylIhUSGkbZg": "JerryScript引擎ecma_op_to_index漏洞分析与越界读写利用", "https://mp.weixin.qq.com/s/ezmGOPRRBDLljggC3V8xiQ": "jsPDF库两大漏洞可致代码注入与系统崩溃,千万开发者需立即升级", "https://mp.weixin.qq.com/s/JWWeDFbAIR37yk8fm86FMw": "CVE-2025-48281 SQL注入", "https://mp.weixin.qq.com/s/Wo59F-Hkh8py_3CWfF4JmA": "【靶场复现】Ivanti EPMM Pre-RCE漏洞CVE-2026-1281∕1340", "https://mp.weixin.qq.com/s/zzjpm1Zlcso-zUzcAIkmkA": "【高危漏洞预警】n8n工作流自动化平台远程代码执行漏洞CVE-2026-25049", "https://mp.weixin.qq.com/s/z1iLbcemPe7n9yr9qcVl1w": "【服务端漏洞-访问控制缺失-第二章第三节】找不到敏感路径?试试这招,源码里可能写着答案", "https://mp.weixin.qq.com/s/9Z0gwALP5a4JAWU9m29VPQ": "第4期:Web漏洞挖掘进阶|文件上传与文件包含漏洞组合利用实战", "https://mp.weixin.qq.com/s/eiSig5Jtia_oBpG3U_nxaQ": "网络钓鱼和 OAuth 令牌漏洞导致 Microsoft 365 全面泄露", "https://mp.weixin.qq.com/s/hGQIxEQONC3WhM-K7ZtiCA": "Claude Opus 4.6发现500+高危漏洞:AI漏洞发现技术深度解析", "https://mp.weixin.qq.com/s/eutPSwiU3Tbua8ZTxGXTEQ": "漏洞复现 | 富通天下外贸ERPUploadEmailAttr存在任意文件上传漏洞", "https://mp.weixin.qq.com/s/gb2Qc7AVTC8W11VOknMkvw": "【实战复盘】通过监控调试模式获取 15,000 美元的远程代码执行收益", "https://mp.weixin.qq.com/s/7nk9aQYbBiVsQ8L1epThmQ": "每周漏洞情报速览|2026.01.31–02.06", "https://mp.weixin.qq.com/s/dmrX_LLfEDTV0u8cH_YqVg": "多Agent智能协作+40+工具调用:基于大模型的端到端自动化漏洞挖掘与验证系统", "https://mp.weixin.qq.com/s/GdR_Q6TO6UW_u7AgHXmfAg": "OSV-Scanner:一款专门于发现开源软件漏洞的扫描器", "https://mp.weixin.qq.com/s/y4Lr2nQARZyvPKtOq-kqRg": "【蓝队】一个多源漏洞情报聚合工具", "https://mp.weixin.qq.com/s/aznMhE1yeQaKdniWvHQ9tw": "【安全圈】紧急预警!n8n 曝严重漏洞", "https://mp.weixin.qq.com/s/Jhi_SVgXR-DQKyCqUjBwyw": "快普M6 GetCustomerList SQL注入漏洞", "https://mp.weixin.qq.com/s/5Z81R1hoBFpXbd6LG_n9ug": "Claude新模型4.6开箱即挖500个0day漏洞; OpenClaw高危漏洞可一键直通上帝模式 | FreeBuf周报", "https://mp.weixin.qq.com/s/OaAeOmxfBeENHTETmfKsfw": "2025年网络空间安全漏洞态势分析研究报告", "https://mp.weixin.qq.com/s/zk-LYFz3SAUzX_K8ddX_jw": "黑客利用Windows屏幕保护程序漏洞部署RMM工具,获取远程访问权限", "https://mp.weixin.qq.com/s/E-zLW9Jc_vERUnINyCwgNw": "OSV-Scanner:一款专门于发现开源软件漏洞的扫描器", "https://mp.weixin.qq.com/s/x_O7ppK0FmF0UgNwRw3Z2Q": "豆包ai 命令执行?", "https://mp.weixin.qq.com/s/-3m3_nX_zP4OOhaL_7qHgA": "CentOS 9 安全漏洞可被利用进行权限提升 - PoC已发布", "https://mp.weixin.qq.com/s/IiUsl_OgNTouj85iuPCBbg": "【CVE-2025-3052】信任链条上的又一道裂痕:揭秘另一个安全启动绕过漏洞", "https://mp.weixin.qq.com/s/WA7mHRbFX5OEKMKqaFDSAg": "OSV-Scanner:一款专门于发现开源软件漏洞的扫描器", "https://mp.weixin.qq.com/s/zjULUgMX92bGEHXVTCGs5A": "如何检测 CVE-2026-21509 漏洞利用", "https://mp.weixin.qq.com/s/nsf2XrJkJJL7O4ItPMUdJg": "CVE-2025-13375:IBM 严重加密漏洞(CVSS 9.8)暴露 HSM", "https://mp.weixin.qq.com/s/LaGS8K94rYIx-OmWjDkm7g": "EPSS深度解析:如何利用漏洞预测评分系统优化现代漏洞管理", "https://mp.weixin.qq.com/s/Kw-FGJMiXcAtTAXSoKwRQg": "【已复现】大蚂蚁 (BigAnt) 即时通讯系统任意文件上传漏洞", "https://mp.weixin.qq.com/s/OwwPdHDM-_4HwIeTxxhvew": "漏洞复现 | MetaCRM 客户关系管理系统 mobileupload.jsp 任意文件上传漏洞", "https://mp.weixin.qq.com/s/6TgTyUT_tZHhcpMsqz2uew": "Vulnhub打靶新体验:深入pWnOS_v0的漏洞挖掘之旅", "https://mp.weixin.qq.com/s/6TbmsjBZX9vYV-YboVz5Ng": "【JAVA代审】某OA系统0Day审计过程", "https://mp.weixin.qq.com/s/k8nwUDd6xTuJWeN72j6STQ": "【已复现】锐明技术Crocus HardwareConfig存在SQLl注入", "https://mp.weixin.qq.com/s/KB9GfNmxYrf8U7cLh0EIhw": "【林晓月的新漏洞科普】AMD AutoUpdate 远程代码执行漏洞深度分析(官方无影响忽略)", "https://mp.weixin.qq.com/s/DDm7RAVsv96GZphMnikrBQ": "【在野利用】飞牛OS 未授权命令执行漏洞", "https://mp.weixin.qq.com/s/AaZUEXRODLhYG58nb855fg": "思源笔记存在前台任意文件写入漏洞", "https://mp.weixin.qq.com/s/kddO89c4nCtvlI5dQj8MqQ": "n8n自动化平台再曝6个漏洞,4个可致远程代码执行", "https://mp.weixin.qq.com/s/sz9TXsnzbyrtbuO9Tuq0GQ": "CSRF漏洞的降维打击:从盗取点击到完整账户接管的武器化路径-实战场景案例", "https://mp.weixin.qq.com/s/vHIXdvTJz1LtC248VHCu7w": "Vulnhub打靶新体验:深入pWnOS_v0的漏洞挖掘之旅", "https://mp.weixin.qq.com/s/fylKHOG1HHSOjBKW507Ecw": "入门SRC简单漏洞案例", "https://mp.weixin.qq.com/s/BdpvsY_Xdi8l1tNIrx0Hhg": "【林晓月的新漏洞科普】Arista 下一代防火墙命令执行漏洞科普(CVE-2025-6978)", "https://mp.weixin.qq.com/s/avKOZdsjnOO7aGFi7dqvvA": "OpenClaw高危漏洞可一键窃取主密钥,攻击者直通上帝模式", "https://mp.weixin.qq.com/s/kBvYscEbm9nAKUJjFFLcaw": "漏洞预警 | 金和OA XXE漏洞", "https://mp.weixin.qq.com/s/cMQloheSZdqRvTcKgs5Dmg": "网安每日干货分享之《文件包含漏洞01》-0209", "https://mp.weixin.qq.com/s/OV2z-ShfQi0R94UxpbEaZA": "金和C6 CallSystemShow.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s/0YScfkKjp6TfmdY-WiCktg": "Docker AI助手漏洞:一个标签即可导致RCE与数据窃取", "https://mp.weixin.qq.com/s/SJukanNe_hkHBM6v8t2pDw": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/lEEToVN-F63htipYEyZdqg": "渗透测试|某单位从敏感三要素泄露到接管管理员的漏洞挖掘之旅", "https://mp.weixin.qq.com/s/3rON4iIj8QDG8Lks6pEmDQ": "物理防线的“赛博裂痕”:2026 年仍需警惕的安防系统七大真实 CVE 漏洞", "https://mp.weixin.qq.com/s/f6OE6zgD9i310p1PbIXGmg": "支付类逻辑漏洞挖掘思路与技巧总结|挖洞技巧", "https://mp.weixin.qq.com/s/co-9XSxMeLWEm08V1zh-JQ": "2025-02-08 漏洞攻击分布跟踪", "https://mp.weixin.qq.com/s/JbeI-1PqXatlFrrynbZCAg": "漏洞预警 | Microsoft Office安全功能绕过漏洞", "https://mp.weixin.qq.com/s/KREW5mASyvm2yvZAj_vCIA": "“Metro4Shell”漏洞自12月以来已被广泛利用", "https://mp.weixin.qq.com/s/ALbrjaO9gOuYd3ytghQF5g": "网络安全行业,为什么总是谈“两高一弱”是最危险的安全漏洞?", "https://mp.weixin.qq.com/s/WPBNVpgDv2NpZY_QjO2P_w": "端点暴露:FortiClient EMS 存在严重缺陷(CVSS 9.1),允许未经身份验证的远程代码执行", "https://mp.weixin.qq.com/s/aDanrPZ-pyk_gbFq2-erJw": "jeecg框架漏洞利用工具", "https://mp.weixin.qq.com/s/OIee-HjvdeKVIPpBYMp39g": "大蚂蚁即时通讯系统任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s/14lnajOC5OzlQVfBTIt5TQ": "PHP mail() 命令注入到远程代码执行(RCE)", "https://mp.weixin.qq.com/s/6gwvm9itLBtOpdFKu7iNNA": "漏洞复现 | 汉王e脸通综合管理平台 uploadMeetingFile.do 任意文件上传漏洞", "https://mp.weixin.qq.com/s/5FesYDUZJZ6hNErDQ-KC4Q": "XXE漏洞测试工具 -- go-fake-ftp-server(2月6日更新)", "https://mp.weixin.qq.com/s/GsuG9Z7omLh05POTMivkSw": "【独家复现】用友BIP、NC Cloud、NC无条件任意文件上传漏洞", "https://mp.weixin.qq.com/s/65q9acMEp1VZXvsR_k_fUQ": "【AI高危漏洞预警】OpenClaw PATH命令注入漏洞CVE-2026-24763", "https://mp.weixin.qq.com/s/q0nN2uhC8OfMdRC6kgLi6A": "黑客正积极利用 SolarWinds Web Help Desk 的远程代码执行漏洞部署自定义工具", "https://mp.weixin.qq.com/s/TnARzC04jqnY5oP-uszjoQ": "【AI高危漏洞预警】OpenClaw路径遍历漏洞(CVE-2026-25253)", "https://mp.weixin.qq.com/s/BWvSJ1cHRydaupUEXmZ9UQ": "BeyondTrust 修复了远程支持和 PRA 中的关键身份验证前远程代码执行漏洞", "https://mp.weixin.qq.com/s/H6SKMby9oveZnEnUZuplFg": "libexif 漏洞复现以及eclipse-cdt调试", "https://mp.weixin.qq.com/s/ywYVEGzNybL_80vJM2WRYg": "【渗透测试必备】网安人的漏洞知识库∕漏洞检索神器", "https://mp.weixin.qq.com/s/EGs8IUac267ifzbS_sMstQ": "DudeSuite 漏洞播报 全网漏洞早知道【20260209】", "https://mp.weixin.qq.com/s/yJf7G4OviVcLynHrGWnDhA": "DNN 最新漏洞挖掘与技术复盘:从 Unicode 转换到 SMB 凭证窃取", "https://mp.weixin.qq.com/s/ZCIZk4N8pCtBOUVLkiwp3w": "CVE-2025-30936 SQL注入", "https://mp.weixin.qq.com/s/q2F_027gqq5nNpbbEjUCsQ": "【公告】漏洞盒子服务器升级通知", "https://mp.weixin.qq.com/s/5wGrOyFWN2WDn7q0PB7Q7g": "BeyondTrust 严重漏洞可导致预认证RCE", "https://mp.weixin.qq.com/s/VDW_Wbtj6vaUXMHOHiin8A": "上周关注度较高的产品安全漏洞(20260202-20260208)", "https://mp.weixin.qq.com/s/6A1IcdPpq5gCBdw1udqfEg": "CNVD漏洞周报2026年第5期", "https://mp.weixin.qq.com/s/SFYELOHYYrtusy7GH8V1qg": "【首发复现】用友BIP LoginWithV8存在登录绕过漏洞", "https://mp.weixin.qq.com/s/hPCXzwlL1ASXhma5INu03g": "【安全圈】SandboxJS 四大高危漏洞(CVSS 10.0)可导致宿主系统沦陷", "https://mp.weixin.qq.com/s/XeqYRO-CsF57sbgU7HrJuw": "预警丨防范Apache Struts2开源应用框架XML外部实体注入高危漏洞", "https://mp.weixin.qq.com/s/-ZX2_v0S5h_N5Zt4zwvEbw": "【漏洞预警】Synectix串口转换器CVSS 10.0漏洞", "https://mp.weixin.qq.com/s/1ep9tdFBozEiW4yc5BzUMw": "[跟着静师傅学代码审计]月子会所ERP管理云平台0day审计", "https://mp.weixin.qq.com/s/PAjJjxuUPvfmNP5pdjZKng": "雷神众测漏洞周报2026.2.2-2026.2.8", "https://mp.weixin.qq.com/s/qL8fAPdmRlTaf7ficmnBKA": "CyberStrikeAI | 仪表盘上线:任务、漏洞、工具调用一目了然", "https://mp.weixin.qq.com/s/fmQ_G2eNynbSnUXyTNvwQg": "最新Nessus2026.1.8版本主机漏洞扫描∕探测工具Windows∕Linux下载", "https://mp.weixin.qq.com/s/KJBGGaTwFjRvgAfGqqiLTw": "大蚂蚁BigAnt即时通讯系统DispersedAddin接口存在文件上传漏洞 附POC", "https://mp.weixin.qq.com/s/oP0VlggcnOJUMlojCV1Nyg": "WordPress WC Designer Pro(CVE-2025-6440)分析", "https://mp.weixin.qq.com/s/-hXWVR1jqa4a022d20h-wA": "通过补丁对比分析 N-day 漏洞", "https://mp.weixin.qq.com/s/1QCTBTMXdtq9yplqmi1PMg": "Administrator Protection 安全边界绕过漏洞分析", "https://mp.weixin.qq.com/s/jVLdcQZ6fYHln2cTNC7MQQ": "爱丁堡大学 | 探索人工智能漏洞的赏金政策与披露实践", "https://mp.weixin.qq.com/s/yBQD_hl0c0VuKU-Kh4lKtA": "SRC挖洞的立体化作战:从“撒网捕鱼”到“精准狙击”的工业级漏洞狩猎体系", "https://mp.weixin.qq.com/s/AZdwpP5uqZ2q82KBCgZPyA": "某天第一个RCE记录", "https://mp.weixin.qq.com/s/zkw0S7TRGvXZWwO1mJunCQ": "当我打完 sqli-labs 后,我决定进入文件上传漏洞(附靶场环境搭建)", "https://mp.weixin.qq.com/s/TCCnpbT9Xxe9_78tuJTVHA": "Windows内核溢出漏洞——栈溢出保护(上篇)", "https://mp.weixin.qq.com/s/KEs8CmhejZ_OBwuD_6x7IA": "【已复现】Gogs 远程命令执行漏洞(CVE-2025-64111)", "https://mp.weixin.qq.com/s/nKkUOcb-c_9wzogr8H50Tw": "Everything - Post Exploitation", "https://mp.weixin.qq.com/s/eZPEdHhq7vw1akyvgW067A": "天堂之门:发现谷歌云 Apigee 中的跨租户漏洞", "https://mp.weixin.qq.com/s/IH7pkSLfX8-RWmIvuFfz1w": "殡仪馆 AshesSearch.jsp 存在信息泄露漏洞", "https://mp.weixin.qq.com/s/KjugfvkmbwFQWgKqu_BbaQ": "企业安全神器:一键爆破子域名、秒扫全端口、0day 裸奔可视化——资产漏洞全景地图,十分钟让你“看见”整个互联网攻击面!", "https://mp.weixin.qq.com/s/pu_vHhVPHjEeKqDaUr7pjA": "确认!欧盟委员会遭网络攻击:祸起Ivanti产品漏洞", "https://mp.weixin.qq.com/s/veE6EDZOVw21whPq-ZzyLw": "GOGS 严重缺陷(CVSS 9.3)允许远程代码执行和绕过双因素认证", "https://mp.weixin.qq.com/s/pXsxOm3-AIUPJ45Y0Sgwdg": "漏洞预警 | Google Chrome类型混淆漏洞", "https://mp.weixin.qq.com/s/DXAd1PP_YNz9atDVjbxL8Q": "漏洞预警 | 天地伟业Easy7综合管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s/SDiOpqKX5JESztfDhi2diw": "工具推荐 | JeecgBoot 全场景漏洞检测工具,覆盖 20+ 高危漏洞", "https://mp.weixin.qq.com/s/q1lZQHz6-GvEkPNrpy3KuQ": "【已复现】深信服运维安全管理系统 common.jsp 存在任意文件上传(CVE-2025-15503)", "https://mp.weixin.qq.com/s/iddnJu9A0g6pUt1LrZpZdw": "漏洞预警|GitLab AI Gateway 服务器端模版注入漏洞(CVE-2026-1868)", "https://mp.weixin.qq.com/s/bcvQsHxm0ydF06nncGxo8A": "Stirling PDF SSRF漏洞(CVE-2025-55150)", "https://mp.weixin.qq.com/s/CAtYwxXHEk9m0NpNuO4RBQ": "Claude新模型4.6:开箱即挖500个0day漏洞,源代码审计即将颠覆", "https://mp.weixin.qq.com/s/XmwaOEREqC362FRp4NwpoQ": "【0 day 在野】安科瑞企业微电网能效管理平台存在敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s/jOSEg8Sbom4P-5JJ6S3acw": "漏洞预警 | 用友U8Cloud SQL注入漏洞", "https://mp.weixin.qq.com/s/WTOkoscpF6Frd__Enp-7qQ": "一次JAVA系统三个组合拳RCE代码审计案例", "https://mp.weixin.qq.com/s/7-X0ePw2lsxMwF6aE7S9yA": "Claude暴10分RCE漏洞:AI权力滥用危机再现", "https://mp.weixin.qq.com/s/ChOKqs9yNgdPhM7XkHwvPg": "edu实战之框架漏洞", "https://mp.weixin.qq.com/s/M9_AS_AwXYAzJ8MzC7BzQg": "票友ERP管理系统未授权访问漏洞 附POC", "https://mp.weixin.qq.com/s/yoi7l5KMncILSst4f_IJ3Q": "LLM漏洞发现技术细节", "https://mp.weixin.qq.com/s/ohK8x_KSg93_ebqAP6R57g": "渗透测试|某单位从敏感三要素泄露到接管管理员的漏洞挖掘之旅", "https://mp.weixin.qq.com/s/8j1d4fEgMLGwwRaBDGjlig": "CVE-2025-6978:当防火墙也会\"引火烧身\"", "https://mp.weixin.qq.com/s/PfoAeF-9eoXG6YE7AFU_TQ": "【热点漏洞】——飞牛OS路径穿越、协议认证、命令执行(内附POC)", "https://mp.weixin.qq.com/s/I71ED2Ef481WqRAdpF3oKg": "思科会议管理软件曝高危漏洞,允许认证攻击者上传文件获取root权限", "https://mp.weixin.qq.com/s/uv3EpFEPBcyc1GuKpCSvXw": "Fortinet FortiClientEMS 存在严重漏洞,可远程执行代码", "https://mp.weixin.qq.com/s/me6o045-iaY08MYWvawj_g": "LLM 越来越多地发现零日漏洞,颠覆传统源代码审计方法", "https://mp.weixin.qq.com/s/dBNTz_Qd12cL4ATZvSWv-w": "[跟着静师傅学代码审计]宏景人力资源信息管理系统代码0day审计", "https://mp.weixin.qq.com/s/VQt-hwwjCtBuQSgPCkAwJQ": "【威胁监测】微信 for Linux存在RCE执行风险", "https://mp.weixin.qq.com/s/syhZgd-eonlWBLdG9lY28w": "【小年快乐】某WeCh** linux存在RCE", "https://mp.weixin.qq.com/s/LPchipxRaeBscR872E4lSA": "【高危漏洞预警】Apache Airflow认证绕过漏洞CVE-2026-22922", "https://mp.weixin.qq.com/s/P3dbjpbjhQcYWtI72qGyWA": "【吃瓜】某信W*Cha*RCE任意文件执行", "https://mp.weixin.qq.com/s/eQ9Kq31pArPxxvNF3adNFw": "【高危漏洞预警】Gogs自托管Git服务远程命令执行漏洞CVE-2025-64111", "https://mp.weixin.qq.com/s/4QpTq_P_bLzFR7S6vz4e2g": "【吐槽】Linux&信创微信任意命令执行漏洞-用户少而漏洞多", "https://mp.weixin.qq.com/s/Xs-v_3SjPuS_h1lYmqb_HA": "Linux版本微信存在命令执行漏洞,信创的有吗?", "https://mp.weixin.qq.com/s/Pq3vsB8Caji37EToM-7PeA": "微信 linux最新版 1click RCE 已复现", "https://mp.weixin.qq.com/s/i-OBQqvo9Q83L_PkCGYUtw": "【小年快乐】微信最新版RCE 已复现", "https://mp.weixin.qq.com/s/pCxga_rADV47eKyvVYikBQ": "ctfshow web入门 命令执行2", "https://mp.weixin.qq.com/s/VB2k1yw6jmVsfm6k9MXJWQ": "类型混淆之美:Golang类型混淆到RCE", "https://mp.weixin.qq.com/s/SFFDl1Zh2wVUPcA8uq2SCg": "微信 linux最新版 1click RCE 已复现", "https://mp.weixin.qq.com/s/tJPDDPJYLyWyKYCoEWIUgQ": "WeChat For Linux rce", "https://mp.weixin.qq.com/s/az75ibo1fQ64M_DtKdlKrw": "Weixin for Linux最新版RCE,利用条件简单,已完成复现!!!", "https://mp.weixin.qq.com/s/E9aNEKccVwekgGwu5bPHHA": "Linux版wx出现重大漏洞", "https://mp.weixin.qq.com/s/60C-Z2ndRdgD-dBoBBnUOg": "【已复现】微信Linux版本存在1click远程代码执行漏洞", "https://mp.weixin.qq.com/s/BcUxjvWNDVcexfu_E_zq2Q": "Linux WeChat 漏洞预警", "https://mp.weixin.qq.com/s/PWShlWVDPRjBAa3Lfyr7DQ": "使用 MonkeyCode 发现并修复安全漏洞的一次实践", "https://mp.weixin.qq.com/s/P9YcXS4PL08twU7NP7UBBw": "Claude Opus 4.6 找到主流开源库中的500多个高危漏洞", "https://mp.weixin.qq.com/s/VPLQgcQT80zGoP9YCcaZvw": "GitLab网关RCE漏洞可致服务器沦陷", "https://mp.weixin.qq.com/s/wrtOHZkl-8-PqYbXCtpzpw": "【附POC及复现环境】Linux版微信 1-click任意命令执行漏洞复现", "https://mp.weixin.qq.com/s/RsLTmpcuGrc2kSHZvy8AZw": "Fortinet 修复可导致未认证代码执行的严重 SQLi 漏洞", "https://mp.weixin.qq.com/s/nmU-pXT_Vi646Dy_rbhCVw": "Axios 曝高危漏洞,可致 Node.js 服务崩溃", "https://mp.weixin.qq.com/s/nn9JGmRuHpM1B5ddrvoUIQ": "微信 Linux 版 最新版本 1-Click 命令注入漏洞【已复现】", "https://mp.weixin.qq.com/s/-cdQ1iMzcHPDFgYvu92uFg": "vx Linux版本命令执行漏洞", "https://mp.weixin.qq.com/s/Mr_-_52fL927zR25NBzErA": "微信 Linux 版本命令执行漏洞(QVD-2026-7687)复现与验证", "https://mp.weixin.qq.com/s/Kqkt8nWOW_tm4h6cGQ3_bw": "CTF直播预告:无字母数字命令执行详解", "https://mp.weixin.qq.com/s/BdCHVWckFQWGh8gIOUSUTA": "红队失业倒计时?我用AI在24小时挖出对手三年都找不到的0day", "https://mp.weixin.qq.com/s/Eq3wuIRXL6kb2VeoVAMLaQ": "【网络安全】微信 Linux 版 4.1.0.13 最新版本存在远程命令执行漏洞,信创系统全军覆没,鸿蒙系统逃过一劫", "https://mp.weixin.qq.com/s/HHOdT2wBgdIp1LaKP5tFQg": "10000美元赏金的炼成:在Antigravity中实现远程代码执行", "https://mp.weixin.qq.com/s/0mBloV6QzSZ3ljvo2lW3rQ": "大蚂蚁BigAnt即时通讯系统loginByToken接口存在未授权访问 附POC", "https://mp.weixin.qq.com/s/cdVCxwRXtICcF7xiJ7BOpg": "微信 Linux 版本命令执行漏洞(QVD-2026-7687)复现与验证", "https://mp.weixin.qq.com/s/UlDHG1zVyvzuEqrK75uGhg": "印第安纳大学布卢明顿分校 | 基于掩码图注意力网络的漏洞情报对齐", "https://mp.weixin.qq.com/s/wzHkst0lMeGzD1MAfjf-dQ": "【快讯】Linux版本的微信 1Click RCE 漏洞", "https://mp.weixin.qq.com/s/kAsEy93SDHY2QCzFWtYrPA": "【已复现】漏洞预警 | Linux 版 微信 1-Click 命令注入漏洞", "https://mp.weixin.qq.com/s/bVaaQHOXDHesQE9qEKXuqg": "漏洞复现-微信Linux版1-Click远程代码执行漏洞", "https://mp.weixin.qq.com/s/iiiHJXoZC11qyNj8lnsL4g": "WordPress插件前台RCE漏洞分析审计", "https://mp.weixin.qq.com/s/C3JNDSRV1CzOuNKjcDeUuQ": "漏洞预警 | Fortinet身份认证绕过漏洞", "https://mp.weixin.qq.com/s/JCLxnwwwTaX4KC9V29HNsQ": "470个0day速成秘籍曝光:公开文章+补丁diff=一键EXP生成器", "https://mp.weixin.qq.com/s/sUmmFPFb6wdfq3XkSaVJgw": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/802TeRm98k88wdOTDmYnFA": "upload_forge--专业文件上传漏洞扫描器", "https://mp.weixin.qq.com/s/CFmQ7pnUL0Rfj8FP1S--Dg": "Claude桌面扩展程序中发现零点击远程代码执行漏洞,超过10000名用户面临风险", "https://mp.weixin.qq.com/s/ScZyci9pmvDdeswWO7KcaQ": "比较有意思的几个漏洞挖掘记录", "https://mp.weixin.qq.com/s/oNi3HbOdYhg0BF7ONyK6DA": "【林晓月和段子】小品003-T0级漏洞", "https://mp.weixin.qq.com/s/21Xu1fA2MDO7H8EtZRgQbw": "漏洞复现 | 大蚂蚁 (BigAnt) 即时通讯系统 loginByToken 逻辑错误至权限绕过漏洞", "https://mp.weixin.qq.com/s/lhuJvoD5DSwI7NxAKmhGeQ": "飞塔 FortiSandbox XSS漏洞允许攻击者执行任意命令", "https://mp.weixin.qq.com/s/PmvgmZ4fJdMyJkRHKOBJcg": "CNVD漏洞周报2026年第5期", "https://mp.weixin.qq.com/s/f5KNcsxJMAEN5f821bjhzQ": "GCP Apigee跨租户读写漏洞剖析", "https://mp.weixin.qq.com/s/eYlalO1wCbnJJ2eOWfhwZA": "【网络安全】微信 Linux 版 4.1.0.13 最新版本存在远程命令执行漏洞,信创系统全军覆没,鸿蒙系统逃过一劫", "https://mp.weixin.qq.com/s/rzPPXm2QgKdMjLr1x8mecA": "漏洞预警 | 金和OA SQL注入和XXE漏洞", "https://mp.weixin.qq.com/s/_MW1sXHwmHiyS_Rx4wGysw": "黑客利用 SmarterTools 自身软件中的漏洞入侵其网络", "https://mp.weixin.qq.com/s/m5JJ_Rjb5yjPInDVolFGLA": "漏洞环境 | XSS-Sec", "https://mp.weixin.qq.com/s/MJzdzEVn9PEFebT6cIza2A": "Wechat RCE 复现", "https://mp.weixin.qq.com/s/nWWvf9ZyZL645vs9b-5PVA": "微软2月补丁日多个产品安全漏洞风险通告:5个在野利用漏洞", "https://mp.weixin.qq.com/s/ikU2sSGycRlN-6nDtvmPqA": "渗透测试工具包 | 实战攻防工具 | 漏洞扫描、漏洞利用、后∕域渗透等", "https://mp.weixin.qq.com/s/HXAnqJNivwsXZYplvT_fEw": "微软2026年二补丁日修复了54个漏洞,其中包括6个零日漏洞", "https://mp.weixin.qq.com/s/i7ezw2OE1fmhb3g-A4bgjg": "新政策出台,数据安全、风险评估、漏洞管理市场需求或将迎来激增", "https://mp.weixin.qq.com/s/T5z2PECSc7kKkkXQ0IxnvQ": "ctfshow web入门命令执行3", "https://mp.weixin.qq.com/s/g0_zT5nkOKfBfSvJ6lBZZg": "红队利器|FnOS系统综合漏洞利用框架", "https://mp.weixin.qq.com/s/xQrAwJV84Odzlp5JhQHQdA": "利用钓鱼与OAuth令牌漏洞组合拳,攻击者可全面入侵企业Microsoft 365环境", "https://mp.weixin.qq.com/s/xE3Zo6AzjmFo1r2a3ztEuA": "【网络安全】DeepAudit - 人人拥有的 AI 审计战队,让漏洞挖掘触手可及", "https://mp.weixin.qq.com/s/0v9wMgo7ES9-_uFnNZsY0w": "【动态靶场】一个博客系统,他有一个XSS漏洞-1", "https://mp.weixin.qq.com/s/qw0loSqYDI1wkamASl2L_Q": "信息安全漏洞周报(2026年第6期)", "https://mp.weixin.qq.com/s/RcVHL5KpW3cK0Vlb_fFwmg": "【已复现】CentOS Stream 9 ROOT 提权漏洞(TyphoonPWN 2025比赛漏洞)", "https://mp.weixin.qq.com/s/dSTxZq3seu0ZOuBn84S6ew": "CVE-2025-48118 SQL注入", "https://mp.weixin.qq.com/s/cLDM9IAiWe5DMdQ8FKubJg": "xss_scanner_mix:一款自动化深度XSS漏洞扫描工具", "https://mp.weixin.qq.com/s/Z8pXB1z0oMtDFpht7V0b3Q": "upload_forge--专业文件上传漏洞扫描器", "https://mp.weixin.qq.com/s/W0ycKckn_UQqdGrbEwJj-Q": "【红队必备】Shiro漏洞内存马注入与回显探测综合漏洞利用工具", "https://mp.weixin.qq.com/s/zjjXhkqdYTgH9U23mIaQXQ": "致3月份即将出发的探索者: A LETTER TO WEB3 EXPLORERS", "https://mp.weixin.qq.com/s/_wbdAiaYgofSm6ShDWmJ4g": "新政策出台,安全评估、数据安全、漏洞管理市场需求或将迎来激增", "https://mp.weixin.qq.com/s/CyEDKp_QXuUVFgP7XsiRYw": "【漏洞通告】微软2月多个安全漏洞", "https://mp.weixin.qq.com/s/SH-dcyiFl2cZF71-BjNELA": "山石安全能力中心|微软2026年2月份漏洞补丁日安全通告", "https://mp.weixin.qq.com/s/wgZX8drvbwWmepkK1npicA": "【网络安全】微信 Linux 版 4.1.0.13 最新版本存在远程命令执行漏洞,信创系统全军覆没,鸿蒙系统逃过一劫", "https://mp.weixin.qq.com/s/uyH8XoiOHygvgC_mH4vESw": "开源库 Libpng 漏洞已存在30年,可导致数百万系统遭代码执行攻击", "https://mp.weixin.qq.com/s/i5FZNLdBCd7G9dKQ3diutA": "微软2月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s/OkpO1YkyUBg8xHIHY5oUmQ": "微信Linux版高危漏洞已修复 信创安全防护仍需重点强化", "https://mp.weixin.qq.com/s/Jopoi2JGbbJYhmcRqa6-0w": "【已复现】微信 Linux版本命令执行漏洞(QVD-2026-7687)安全风险通告", "https://mp.weixin.qq.com/s/kYauQVEyBpe0Stq4u33w9A": "【安全圈】CVE-2026-1868:GitLab AI Gateway 严重漏洞(CVSS 9.9),可致远程代码执行", "https://mp.weixin.qq.com/s/XB8PTqlnc1-FPRH4nPaXjw": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s/szIBIyi0sLgzxGrASEbbRQ": "【已复现】最新版微信v4.1出现远程命令执行漏洞:one-click RCE on Linux WeChat", "https://mp.weixin.qq.com/s/JrKaokdFkQpffE0XVcT87Q": "SandboxJS四大高危漏洞可完全突破沙箱控制宿主系统", "https://mp.weixin.qq.com/s/mgdatlRj_WUUKCW8I0VCzw": "已修复 | 微信Linux版本远程命令执行漏洞", "https://mp.weixin.qq.com/s/MurzX4_cyzbOZjJmoJN9Yw": "CNNVD通报微软多个安全漏洞", "https://mp.weixin.qq.com/s/9AAoIbOoMxVTjx9Vvu760w": "985证书漏洞越权成为教授 + EDU∕RCE漏洞实战解析|湘安内部平台月榜 TOP3 案例", "https://mp.weixin.qq.com/s/E0RN27Yr_qDXgh0IZMN_Bw": "【高危漏洞预警】WeChat∕Linux版本命令执行漏洞", "https://mp.weixin.qq.com/s/lEN5pyAiDELFVKpjxkI6Rw": "【漏洞复现】大蚂蚁即时通讯系统存在任意文件读取", "https://mp.weixin.qq.com/s/xhJRCZjGXCp8UshVudmfpA": "【风险通告】微软2月安全更新补丁和多个高危漏洞风险提示", "https://mp.weixin.qq.com/s/TPfP4TuP-X44VeyVyEjpGg": "【网络安全】微信Linux版高危漏洞已修复 信创安全防护仍需重点强化", "https://mp.weixin.qq.com/s/UnCvWFJa4Vt3uwP6m0E4yg": "【成功复现】Redis Lua脚本远程代码执行漏洞(CVE-2025-49844)", "https://mp.weixin.qq.com/s/n1zUYXO1m0d2pb6F8n8WjA": "紧急修复!Windows 记事本漏洞可致远程代码执行", "https://mp.weixin.qq.com/s/90kehAH0b7H1if9CHTVQ9Q": "微信 Linux版本命令执行漏洞", "https://mp.weixin.qq.com/s/_LqIQRUivsTSaN8vNqAjpg": "优秀论文 | 复旦大学陈平:云边端内核竞态漏洞大模型分析方法研究", "https://mp.weixin.qq.com/s/EXXeXmN3nBITr7VZd5MNsg": "AI生成恶意软件利用React2Shell漏洞攻击Docker,低门槛威胁激增", "https://mp.weixin.qq.com/s/P-eRD6vL0XJOgsUFGyYYpA": "漏洞预警 | 用友时空KSOA SQL注入漏洞", "https://mp.weixin.qq.com/s/Ytyc_s-dP_54i4XhYkyQZA": "复现Windows记事本最新漏洞-CVE-2026-20841", "https://mp.weixin.qq.com/s/Mo_RnPed8f6Qj1uQvhJnBw": "利用 Ivanti EPMM 系统零日漏洞的攻击激增", "https://mp.weixin.qq.com/s/uqeunEpeqJEWSC8xv0q85A": "微软表示,黑客正在利用关键0day漏洞攻击 Windows 和 Office 用户", "https://mp.weixin.qq.com/s/_SA0zX9mVEJXHJ_KITXo7g": "必备漏洞挖掘工具!聚合 XRAY∕AWVS∕vulmap,批量搞定漏洞挖掘与验证", "https://mp.weixin.qq.com/s/Dbz9GWqNLxu-6o7neIWtkg": "漏洞预警 | 天地伟业Easy7综合管理平台文件读取漏洞", "https://mp.weixin.qq.com/s/TMdxeHaIZXSw5j_i1rZ6FQ": "CVSS 10.0!Rancher漏洞致K3s集群面临容器逃逸风险", "https://mp.weixin.qq.com/s/ObURslSFAVSOOcz_axIZCw": "伪装成漏洞检测工具样本分析", "https://mp.weixin.qq.com/s/3_OconCSMcLWgesztlUHQw": "必备漏洞挖掘工具!聚合 XRAY∕AWVS∕vulmap,批量搞定漏洞挖掘与验证", "https://mp.weixin.qq.com/s/MYr-IWcFuiLDATOlhXQyvQ": "漏洞预警 | 深信服运维安全管理系统远程代码执行漏洞", "https://mp.weixin.qq.com/s/ljKfH_SRrWnYy0riPvN9bw": "漏洞复现 | 深信服运维安全管理系统 getHis 远程代码执行漏洞", "https://mp.weixin.qq.com/s/NVhjujKg9-UTNQhNIb4Z3A": "韩国加密货币交易所Bithumb因系统漏洞导致出现400亿美元转帐错误", "https://mp.weixin.qq.com/s/KbpR09jITNlCMxWn0xiAbA": "警惕!Ivanti RCE零日漏洞复盘:这是一场针对IT管理者的“外科手术式”打击", "https://mp.weixin.qq.com/s/k3DgMIPfcvLnSo-E-gwHLQ": "扫过万千漏洞与站点,唯独对你一往情深!综合漏洞利用工具-dddd德帝版", "https://mp.weixin.qq.com/s/QCkCaQOOfVB1_DedE-C6Vw": "CVE-2026-26215 - manga-image-translator 中的未经身份验证的远程代码执行漏洞", "https://mp.weixin.qq.com/s/u0i_8unHyha7-FZ_pEr-wg": "手搓漏洞:4种无工具绕过邮箱验证的实战技法", "https://mp.weixin.qq.com/s/VPE39CO8Mtr3l9x6hvr_2Q": "Host头碰撞漏洞揭秘:如何撞出“不存在”的网站", "https://mp.weixin.qq.com/s/v10XhK_vXI5za8YiY3951g": "苹果零日漏洞遭恶意利用,发起复杂攻击,目标直指个人用户", "https://mp.weixin.qq.com/s/nEgpaIP8ooi2FUwhkGZRSw": "【已复现】Microsoft Windows 记事本命令注入漏洞(CVE-2026-20841)", "https://mp.weixin.qq.com/s/i0OI52O3IorUmeCjUHvPIg": "【SRC实战】逻辑漏洞", "https://mp.weixin.qq.com/s/-FQHkd95VMyCX3dpK-7BHQ": "CVE-2026-20841 - Windows 记事本应用程序远程代码执行漏洞", "https://mp.weixin.qq.com/s/dyYofcD5V8k6AnIchSexEQ": "ctfshow web入门 命令执行4", "https://mp.weixin.qq.com/s/Ot5taw_2zs16xTR_VAkjKA": "【已复现】Microsoft Windows 记事本远程代码执行漏洞(CVE-2026-20841)安全风险通告", "https://mp.weixin.qq.com/s/fqrjmoLoXHUuILRe4c7LVg": "【漏洞复现】腾达路由器曝敏感信息泄露漏洞,可直接获取管理密码。", "https://mp.weixin.qq.com/s/ju2v7nRxPEKGlGl69v_yUQ": "【漏洞检测POC】Windows记事本命令注入漏洞(CVE-2026-20841)", "https://mp.weixin.qq.com/s/sbUez7a_xm-3gOMniaWMqw": "2026-02微软漏洞通告", "https://mp.weixin.qq.com/s/rkCl9SwCPyJ9tuI4zQA7eg": "【已验证】Windows 记事本应用程序远程代码执行漏洞", "https://mp.weixin.qq.com/s/UJmwmFPLRgfmqXHCm2hFZg": "SSHStalker僵尸网络利用IRC C2通过旧版内核漏洞控制Linux系统", "https://mp.weixin.qq.com/s/9ZUrKzSgnTQqVwTvnzja1w": "windows记事本命令注入漏洞(CVE-2026-20841)", "https://mp.weixin.qq.com/s/VOBGOe1lCRpNokAHsw49_g": "smartbi token回调获取登录凭证漏洞(二)", "https://mp.weixin.qq.com/s/rtalomS6dyCWbkkYLzaVUQ": "【安全圈】Apple 紧急修复在野零日漏洞:dyld 组件被用于“高度复杂”定向攻击", "https://mp.weixin.qq.com/s/KT2fJcb75o_VvAMICk2Dtg": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s/ebb6fIu67sk0EHO0athEDw": "【高危漏洞预警】Microsoft Windows记事本远程代码执行漏洞(CVE-2026-20841)", "https://mp.weixin.qq.com/s/XungM38kKV8Ptuf4Q5JZew": "【安全圈】“本地回环”成突破口:Clawdbot 默认配置漏洞导致上千实例暴露公网", "https://mp.weixin.qq.com/s/YXi8YfLoz_DgHqEE5fEcZQ": "Microsoft Windows 记事本命令注入漏洞(CVE-2026-20841)", "https://mp.weixin.qq.com/s/NlnpcPAZ0fcwU9bNsTHZWg": "Microsoft Windows 记事本命令注入漏洞附POC(CVE-2026-20841)", "https://mp.weixin.qq.com/s/tkujXpr3mFyY5_hTAgPa3A": "【已复现】Microsoft Windows 记事本远程代码执行漏洞(CVE-2026-20841)", "https://mp.weixin.qq.com/s/3Jk93qkjMfHFCDEigM-Hkw": "俄罗斯黑客利用近期修复的微软Office漏洞发起攻击", "https://mp.weixin.qq.com/s/71IAhYgt4nQuG11sE7Iv-A": "苹果新 0day 漏洞已用于“极其复杂的”攻击", "https://mp.weixin.qq.com/s/wijomzlCZDlhwqGry19A9Q": "【成功复现】Microsoft Windows Notepad 命令注入漏洞(CVE-2026-20841)", "https://mp.weixin.qq.com/s/bvomxPDoWhUnM06ScBBvGw": "用友NC importExcelTemplate 任意文件上传漏洞", "https://mp.weixin.qq.com/s/3eRHWfVZMqooG87KygHtaQ": "Ivanti Endpoint 管理器漏洞可导致远程攻击者泄露任意数据", "https://mp.weixin.qq.com/s/V0U6t5LrA5S_HPqAs0vb6A": "补丁分析|白嫖企业级AI进行漏洞补丁分析", "https://mp.weixin.qq.com/s/4nkALVPfE_qkOITiY_5Mjg": "React2Shell漏洞突袭:漏洞深度剖析与企业防御实践", "https://mp.weixin.qq.com/s/ROj7UdxlSaC9kZ9VPDhojw": "苹果修复动态链接器漏洞:曾被用于针对特定个人的极其复杂攻击", "https://mp.weixin.qq.com/s/R-YKvuSUuJ1y1bXPp8Sk9Q": "Windows记事本漏洞可导致攻击者远程执行代码", "https://mp.weixin.qq.com/s/7K782WkWwpyl-4EBxsGNsw": "CVE-2026-24343:Apache HertzBeat 漏洞导致资源耗尽", "https://mp.weixin.qq.com/s/HFWmAltSQhGnZU7iqC8U-Q": "【AI安全】安全专家要失业?MoCQ 让大模型手搓漏洞挖掘机", "https://mp.weixin.qq.com/s/Lup0QsucsRXqLByyKyKwDA": "微软修复 Windows 与 Office 零日漏洞,黑客可一键绕过安全机制植入恶意软件", "https://mp.weixin.qq.com/s/tWWQnUQMypFrNeSltS68GQ": "AI写病毒首次实战!React2Shell漏洞遭“代码代写”式攻击,91台服务器沦为矿机", "https://mp.weixin.qq.com/s/eiKFGI21HsCgxDPu42vw1w": "漏洞预警 | CVE-2026-20841 Windows记事本 Markdown RCE", "https://mp.weixin.qq.com/s/_Wb2o2WcTgPP1mySYLHUkw": "【复现】Microsoft Windows 记事本命令注入漏洞 CVE-2026-20841", "https://mp.weixin.qq.com/s/CI5KWn2a7VgepHd4BgOe_g": "聊聊如何让自己辛苦挖出的漏洞实现价值", "https://mp.weixin.qq.com/s/SnfZXRgsEU3XARNQk41dzA": "【GLM-5挖洞实测】只花5块钱获得某运维审计系统12个漏洞", "https://mp.weixin.qq.com/s/p4WlX_7JVqD3GvVp-ZyBLQ": "【网络安全】微信 Linux 版 4.1.0.13 最新版本存在远程命令执行漏洞,信创系统全军覆没,鸿蒙系统逃过一劫", "https://mp.weixin.qq.com/s/VyrsqNawUuBzaRahAk8MKg": "苹果修复动态链接器漏洞:曾被用于针对特定个人的极其复杂攻击", "https://mp.weixin.qq.com/s/l94t5KEddfws9UQNvRBfQw": "ctfshow web入门命令执行", "https://mp.weixin.qq.com/s/MAWPCXIeqhU3YOuzlVnEFw": "漏洞预警 | 博硕BGM任意文件上传漏洞", "https://mp.weixin.qq.com/s/mp_x_EDGgBznxCwRSkOhfA": "WordPress备份插件漏洞使80万个网站面临远程代码执行攻击风险", "https://mp.weixin.qq.com/s/AqXOCeMPsZcNJrymj6_GcA": "漏洞复现 | 大蚂蚁 (BigAnt) 即时通讯系统 upload_file 任意文件上传漏洞", "https://mp.weixin.qq.com/s/O3QIEnxMEeBupkzxVXasFQ": "漏洞预警 | 天地伟业Easy7综合管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s/hqv4btDRV28eWqXi99QIpA": "WordPress备份插件漏洞使数十万个网站面临远程代码执行攻击风险", "https://mp.weixin.qq.com/s/V--wYdhmX8wPs4nZsJMGPA": "Windows 记事本 Markdown 功能存在远程代码执行漏洞 (CVE-2026-20841)", "https://mp.weixin.qq.com/s/nJHyJDUAJwjiQBYTdZ8jNg": "【林晓月的新漏洞科普】Roundcube的隐形像素(CVE-2026-25916)", "https://mp.weixin.qq.com/s/ti0SBR9Obr6ywqUrLnqA0g": "春运护航、安全筑牢!全力处置加油站收费系统漏洞攻击事件,守护返乡平安路", "https://mp.weixin.qq.com/s/WtC-2dfGxJ7c3y14EizS4A": "苹果设备重大漏洞遭“复杂”攻击利用,苹果敦促用户尽快升级修复", "https://mp.weixin.qq.com/s/2AmGddhPwwmA2enJEAXkFQ": "Azure DevOps代理通信劫持:从RCE到云权限提升", "https://mp.weixin.qq.com/s/41K84U571pdRoYTdOTrh0Q": "漏洞预警 | n8n表达式执行漏洞", "https://mp.weixin.qq.com/s/Yfr-5Q5jT2-n0mVAaZ-4yQ": "Palo Alto Networks 防火墙漏洞允许攻击者强制防火墙进入重启循环", "https://mp.weixin.qq.com/s/_tc0IoHEttu0yuQfmMl4Ug": "DragonForce勒索软件技术分析", "https://mp.weixin.qq.com/s/mmeMBO-ew3x3j04Biq4Yrg": "CVE-2026-20841 - Windows notepad.exe 远程代码执行漏洞", "https://mp.weixin.qq.com/s/8j3GAnr5B0UygdJGdJ-gxQ": "【已复现】Windows 存储权限提升漏洞(CVE-2026-21508)", "https://mp.weixin.qq.com/s/b01z8-LUtXP8NvOTI5qqBw": "Zimbra 10.1.16 修复了 XSS、XXE 和 LDAP 注入漏洞", "https://mp.weixin.qq.com/s/xyZ6b4fVbcvkReo3fuIjQg": "帆软bi反序列漏洞利用工具", "https://mp.weixin.qq.com/s/Bt8kn2kNFjr3fCmfglQzRw": "恒丰银行AI风险官项目POC测试供应商征集", "https://mp.weixin.qq.com/s/ynkJqDL4KBIme9L9gMrEcw": "【CVE-2026-20841】Windows记事本RCE漏洞", "https://mp.weixin.qq.com/s/0uLl7AVJ_NkamI1x33Nf_A": "Webpack 前端攻防:打包机制下的敏感信息泄露与逻辑漏洞挖掘", "https://mp.weixin.qq.com/s/7GvfJUvjaaysCESYeuwoKQ": "AIxVuln:安研人的漏洞挖掘数字人团队", "https://mp.weixin.qq.com/s/JbgB4xL3UUQUo5Zwk9Uxvw": "黑客利用React Native Metro高危漏洞入侵开发者系统", "https://mp.weixin.qq.com/s/XBC2i-kz--jwfmxpTMTH1w": "能信安:漏洞通告", "https://mp.weixin.qq.com/s/Bqe5fwmEmtWn9jq8D75AxQ": "春节放假通知 | 漏洞盒子祝大家马年大吉!", "https://mp.weixin.qq.com/s/pcE3nsgvt0CoehtlE-skkg": "代码审计 | 朗速ERP漏洞分析", "https://mp.weixin.qq.com/s/jGVzRL8NULVNRHnomVJhCA": "《OWASP TOP 10-2025》发布(附下载)及漏洞赏金榜首", "https://mp.weixin.qq.com/s/xNIW4tPZm12fCmO7bywABA": "美国网络安全和基础设施安全局 (CISA) 警告:Notepad++ 代码执行漏洞已被攻击者利用", "https://mp.weixin.qq.com/s/1gQe_phjDXA-S6GYQSxOrw": "信息安全漏洞周报【第060期】", "https://mp.weixin.qq.com/s/vg__thEjzQryVFVoe2JnYQ": "脏牛漏洞提权全解析", "https://mp.weixin.qq.com/s/2cibUV44CWW9ey87NpDaFQ": "论坛·2025全球网安概览 | 2025年网络安全漏洞态势与治理趋势", "https://mp.weixin.qq.com/s/HnbkYCIuKzr2Mp5vx4EvBA": "思科修复了攻击中利用的统一通信远程代码执行 0 day 漏洞", "https://mp.weixin.qq.com/s/G4IxQITuWEKoyry7fBOiXw": "【安全圈】飞牛 fnOS 漏洞被批量利用", "https://mp.weixin.qq.com/s/avzLG4iOHfRN-f1IF1UpvA": "Chrome紧急发布安全更新,修复多个高危远程代码执行漏洞", "https://mp.weixin.qq.com/s/q3Ev10mQGfQnT45s0WT7bg": "补丁分析|白嫖企业级AI进行漏洞补丁分析", "https://mp.weixin.qq.com/s/301IIMitDMSJQXSOuMBSLA": "Chroma DB未授权信息泄露漏洞", "https://mp.weixin.qq.com/s/8PV1Ky_caKhgOzxhVkA3Yg": "企业SRC中支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s/ZjoPfkTWHmyyKLsRw-GLIw": "【来自电话服务的RCE】解决电话服务中的漏洞", "https://mp.weixin.qq.com/s/wjO6Ejc2Oh0dCxXaHKot2g": "漏洞预警 | 用友U8CRM SQL注入漏洞", "https://mp.weixin.qq.com/s/oeBoYkxaw1EvRSe2VwgSUQ": "漏洞复现 | 深信服运维安全管理系统 getCmd 远程代码执行漏洞", "https://mp.weixin.qq.com/s/CNmjwf_QXLcCoG3jo20xSQ": "CVE-2026-22039:Kyverno授权绕过漏洞深度剖析", "https://mp.weixin.qq.com/s/BeZ6jKVtQHPJZsKlFyJ5Xw": "核弹级 POC 管理 & 扫描桌面工具", "https://mp.weixin.qq.com/s/Q1DmiWqyHpPrnK2uPc9FCA": "漏洞预警 | 用友时空KSOA SQL注入漏洞", "https://mp.weixin.qq.com/s/4gsPMSe3n0BaHWEpI56AZA": "ARL 灯塔平替!集成资产收集∕定时任务∕漏洞扫描等的自动化安全扫描平台", "https://mp.weixin.qq.com/s/Li_4PhTl7B6bam3Nr16rJQ": "漏洞预警 | 金和OA SQL注入和XXE漏洞", "https://mp.weixin.qq.com/s/INNMO2KV7dRZubeLGsSVJw": "《记一次简单的 EDUSRC 上分之旅(1):高校系统漏洞挖掘实录》", "https://mp.weixin.qq.com/s/5GYlrJkNQNF_f5mlwo5FbA": "漏洞扫描不是“点一下”:揭秘安服巡检背后的“硬功夫”", "https://mp.weixin.qq.com/s/Tqc7yQno7_CDD8pIwLwDGw": "漏洞挖掘之利用js挖掘漏洞", "https://mp.weixin.qq.com/s/5IdXMdgtz98_PZTspdkq_Q": "【已复现】谷歌紧急修复!已发现在野利用:Chrome 浏览器 CSS 渲染组件高危 UAF 漏洞", "https://mp.weixin.qq.com/s/GqQco2Ku7kBKFvXmUvsInA": "攻击者火速利用BeyondTrust高危漏洞发起攻击,数千系统面临沦陷风险", "https://mp.weixin.qq.com/s/UJvzdwuYkbPpBlBvVsslEQ": "【在野利用】CVSS 满分,Cisco邮件网关未授权远程命令执行漏洞(CVE-2025-20393)", "https://mp.weixin.qq.com/s/ucU66FGMsAEScEdl5kbU-A": "代码审计 | 朗速ERP漏洞分析", "https://mp.weixin.qq.com/s/N8yy4ZhMRrJQBueCRyRvfw": "【在野利用】CVSS 满分,Cisco邮件网关未授权远程命令执行漏洞(CVE-2025-20393)", "https://mp.weixin.qq.com/s/m5Y5V43qQquLCujz_k0fWA": "多数据库后渗透神器!支持MySQL∕Redis∕MSSQL∕PostgreSQL命令执行与文件读取", "https://mp.weixin.qq.com/s/9_Md2pl0FRemhx3LggWY0A": "MPET——多协议安全测试与漏洞利用工具", "https://mp.weixin.qq.com/s/BQw7wUrAVuW1Y6P0wVEGYA": "【工具】一款图形化Jenkins综合漏洞利用工具", "https://mp.weixin.qq.com/s/bn7SV9o4-vxYzEj9_kW7oQ": "那个被标记为‘中危’的漏洞,让我拿了18000元奖金", "https://mp.weixin.qq.com/s/cbmNOAb2YodydLw_8fkZYg": "Metasploit发布7个新漏洞利用模块,覆盖FreePBX、Cacti和SmarterMail", "https://mp.weixin.qq.com/s/2oXwHStbvp8iBEFuds4VmQ": "CVE-2026-20841(Win11-记事本RCE)复现学习(未果)", "https://mp.weixin.qq.com/s/amkhJ9Xinx7BiyhlfYOycg": "支持10个CVE!Jenkins综合漏洞利用工具覆盖2015-2024全版本", "https://mp.weixin.qq.com/s/OCNdz1QLqMwC-2F7WDKtKg": "漏洞复现 | 爱数AnyShare爱数云盘start_service远程代码执行漏洞", "https://mp.weixin.qq.com/s/Sr7m00Yu6aYC-qdDNTClVw": "北大医疗信息技术有限公司运营管理与决策支持系统存在弱口令漏洞", "https://mp.weixin.qq.com/s/oB0ZN7rmf9zrwg-eGvC7oA": "你的漏洞,都藏在那些异步加载的JS里。", "https://mp.weixin.qq.com/s/d3qPOLz46w46Z82WomfYHQ": "Chroma DB存在swagger敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s/V8vJ_7IwPqJasFk3DdSDFg": "第三方集成崩盘:Salesforce 可预测 ID 枚举 + Zendesk 前端 admin token 泄露 265 万记录", "https://mp.weixin.qq.com/s/ZMW8BxqPu1OqL0j5K-2VzA": "某系统存在Beetl反序列化模板注入RCE漏洞", "https://mp.weixin.qq.com/s/dq04eccy1mB7hMkb-7LEXA": "CVE-2025-40536&CVE-2025-40551|SolarWinds Web Help Desk未授权远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s/L6ICTiU-siNQDAl_O_AZig": "年薪50万还不够?3名大厂员工兼职做黑产被抓|飞牛 fnOS 漏洞被批量利用", "https://mp.weixin.qq.com/s/xsfskiYUocOU6sdiBAdU2w": "在 Firefox 中,将“|”误写为“&”会导致零日远程代码执行漏洞", "https://mp.weixin.qq.com/s/6NqQQ-LzrLYSfAWkwq_t2g": "CVE-2026-24061|Telnetd存在远程认证绕过漏洞(POC)", "https://mp.weixin.qq.com/s/wGYkJawYCfh1JKsKxNL8Cg": "upload_forge:CTF利器-文件上传漏洞扫描工具", "https://mp.weixin.qq.com/s/-f4kBB_5rtd39TIiUjdSlQ": "天工实验室祝您马年大吉,智能挖洞无漏报,0Day自带RCE!", "https://mp.weixin.qq.com/s/FKoOXFT1i85Teo79rLFGOg": "StealC恶意软件面板中的安全漏洞使研究人员能够监视威胁行为者的行动", "https://mp.weixin.qq.com/s/vkn4ns47v4QXKgpQRav7tQ": "云端密码管理器中的25个漏洞允许未经授权的访问和修改", "https://mp.weixin.qq.com/s/wYf8x0loC7oVhTiIMO_jfw": "Windows记事本命令注入漏洞(CVE-2026-20841)【已复现】", "https://mp.weixin.qq.com/s/I_bdJi3A1-fGAwbp8jLc5Q": "【红队必备】自动化管理漏洞扫描工作流(Workflow+Finger+Dir+POC+自动生成Workflow)", "https://mp.weixin.qq.com/s/_FW2bDkc6wUlzdJmXmQAYQ": "渗透测试工具包 | 实战攻防工具 | 漏洞扫描、漏洞利用、后∕域渗透等", "https://mp.weixin.qq.com/s/gb5E44ld_p4a4d-pboPCrw": "OpenClaw日志投毒漏洞可致恶意内容注入", "https://mp.weixin.qq.com/s/4Sj2eXkTzV-a6bj4StrE4A": "VulnCheck获2500万美元融资,强化实时漏洞利用情报平台", "https://mp.weixin.qq.com/s/d8VpMlrFXh_clxDMRDg7cA": "漏洞监控平台|5 分钟搭建、7×24 推送、0 元成本", "https://mp.weixin.qq.com/s/vGbfA8UmBz_-5VXXmxsSlw": "设备漏洞挖掘思路", "https://mp.weixin.qq.com/s/5nqXvTcaEgcZv-WZmajYbQ": "微软零日漏洞风暴来袭 | 金融科技遭遇黑色周 | CVE漏洞全面激增", "https://mp.weixin.qq.com/s/tGECRw03_CNxUEpRXoGUZg": "CVE-2026-20408 高危Wi-Fi芯片漏洞曝光,影响多款联发科及Aruba设备", "https://mp.weixin.qq.com/s/lof90uNMllv0fr7BjgbpUg": "利用MSSQL与ADCS漏洞:攻破域控?", "https://mp.weixin.qq.com/s/7SQViRdF-lUnGAI53HMWtQ": "Super Xray:一款基于 Xray 的漏洞扫描工具", "https://mp.weixin.qq.com/s/anr6iAgJZuYV6DyG_9Mlcw": "Splunk Enterprise for Windows 漏洞允许攻击者劫持 DLL 并获得系统访问权限", "https://mp.weixin.qq.com/s/Xlpd83UZ5snQLS3Apwdlhg": "美国网络安全和基础设施安全局 (CISA) 警告:谷歌 Chromium 零日漏洞已被积极用于攻击", "https://mp.weixin.qq.com/s/_RU3u1kR_Uu_hJW5mUwujQ": "疑似未知国家APT利用RecoverPoint 的一个严重漏洞 (CVE-2026-22769) 发起零日攻击", "https://mp.weixin.qq.com/s/A-QjMZ5lsQVX0HJRsjAAzw": "《记一次简单的 EDUSRC 上分之旅(2):高校系统漏洞挖掘实录》", "https://mp.weixin.qq.com/s/FuB-jLximu6xWf8JuazJhw": "一站式资产测绘与漏洞风险洞察平台 | FOFA + AI + 智能扫描 【一键GetShell】", "https://mp.weixin.qq.com/s/w-doxsDfT3t_WJP2zLhsSg": "upload_forge:CTF利器-文件上传漏洞扫描工具", "https://mp.weixin.qq.com/s/u0scejIAE0SphPE55qv4OA": "Fortinet SSO漏洞已被积极利用,用于入侵防火墙并获取管理员权限", "https://mp.weixin.qq.com/s/mXYRhR4wSpvowfin-93Buw": "Firefox 0Day漏洞:单字符错误引发RCE风险,攻击者可劫持系统", "https://mp.weixin.qq.com/s/VIIKOfKHmQI9FrO91ymU3A": "【红队必备】自动化管理漏洞扫描工作流(Workflow+Finger+Dir+POC+自动生成Workflow)", "https://mp.weixin.qq.com/s/rNA_YZl_2t9KmC8mABbkwg": "配置信息泄露:SRC漏洞挖掘的“金矿脉”与工业化狩猎体系", "https://mp.weixin.qq.com/s/xmU88CJcC7Qw11CTQ6fEuA": "谷歌紧急发布关键Chrome更新,以修复PDFium和V8的严重漏洞", "https://mp.weixin.qq.com/s/AzA7tX6EFuGAQ4SotgZvmA": "SmarterMail 关键远程代码执行漏洞在野外被利用", "https://mp.weixin.qq.com/s/bIPu5F-rsL-wjsahbInXmg": "Jenkins 存在严重漏洞导致建环境易受 XSS 攻击", "https://mp.weixin.qq.com/s/URG8rVQDIpjE0cR3OI5xFQ": "【攻防渗透集锦】漏洞组合拳与JS攻击面的博弈", "https://mp.weixin.qq.com/s/16NaX2RlYumcVYH6n0QOWA": "Tomcat漏洞允许攻击者通过HTTP∕0.9请求绕过安全限制", "https://mp.weixin.qq.com/s/xXfxNJOWRpMyJorhWIWEiA": "OpenClaw AI框架曝出六大高危漏洞,含SSRF与认证绕过风险", "https://mp.weixin.qq.com/s/ejCGba22xZGOQTb8l5rFjQ": "【红队必备】info_scan集成30+工具的集成化漏洞扫描平台(从资产发现到漏洞验证的闭环管理)", "https://mp.weixin.qq.com/s/xEp5-H6_dmbnx5k4YHHRUA": "2026二月网络安全红警拉满!全球多起重大攻击爆发,这些漏洞和陷阱必防", "https://mp.weixin.qq.com/s/a3sgXqyo3PejVLnOre_Bog": "配置信息泄露:SRC漏洞挖掘的“金矿脉”与工业化狩猎体系", "https://mp.weixin.qq.com/s/8l3lF0vjTKToWEqcUHy7Mw": "Web-Check:一款全面的web网站信息和漏洞扫描工具", "https://mp.weixin.qq.com/s/5tvvFbzatQnziaqVv82RSg": "CVE-2026-27199(Werkzeug)研究", "https://mp.weixin.qq.com/s/wq9u7AfbUuS5WeZVEmHw7Q": "记实战中的越权漏洞挖掘案例分享", "https://mp.weixin.qq.com/s/lpvDpb3JPsRz1olUxJ96wQ": "漏洞复现 | Synway SMG网关管理软件 9-13pcap.php 命令注入漏洞", "https://mp.weixin.qq.com/s/bnbugxkdj2bFTzov-T6sXw": "CVE-2026-27199(Werkzeug)研究", "https://mp.weixin.qq.com/s/lm6ULPS6uS7ZaHxt8_xy6Q": "成果分享 | 智能体漏洞检测 [ASE'25, Security'25∕26, BlackHat EU]", "https://mp.weixin.qq.com/s/lsPV-FJ4ZtKPglIVb4dldQ": "CVE-2026-27199(Werkzeug)研究", "https://mp.weixin.qq.com/s/dpZaAASV9L_1Uq-qUbgiIw": "【AI焕新】捷普漏洞扫描系统", "https://mp.weixin.qq.com/s/ebiq708TbwI_Qu6cD_cGeg": "企业 SRC 低投入,高收益漏洞总结", "https://mp.weixin.qq.com/s/-WIFrWr0BTH10WGoDwA43A": "漏洞预警:波及 VS Code 与 Cursor!4款超 1.28 亿安装的插件成黑客攻击跳板", "https://mp.weixin.qq.com/s/LpHBTZ1oURIWCeFN1lc-sQ": "CVE-2025-2294 网关允许未经认证的用户通过 SpEL 注入和执行任意代码。", "https://mp.weixin.qq.com/s/XgfUrJe0ZyoZKizQEH8Tkw": "【严重】CVE-2026-20408 Wifi范围内即可Getshell", "https://mp.weixin.qq.com/s/ZwW8FY0S7dmtOEARAgGNQg": "SRC中CSRF漏洞挖掘技巧", "https://mp.weixin.qq.com/s/TlLh9DiZKw4n35fDqG6SSA": "Google 官方出品,5 秒扫穿项目依赖漏洞", "https://mp.weixin.qq.com/s/gTurMGl0RKa6Oj-1ER37oQ": "严重警报:Chrome 零日漏洞 (CVE-2026-2441) 已被利用", "https://mp.weixin.qq.com/s/04JUVCLuLODDpmHkFHIyxg": "白嫖一支 AI 黑客战队!3 分钟本地部署,自动挖洞 + 沙箱 PoC,0 成本干翻传统审计", "https://mp.weixin.qq.com/s/zysGSE_z0GvlU0N7j-W0Hg": "Go 原生的可视化自动化资产监控与攻击面漏洞扫描平台", "https://mp.weixin.qq.com/s/j6dpdiTw8cXxCo62lt4Y_w": "Go 原生的可视化自动化资产监控与攻击面漏洞扫描平台", "https://mp.weixin.qq.com/s/-rpsSSJNE5oSsqbwqxtiSw": "BeyondTrust高危漏洞遭勒索团伙利用,留给企业的时间不多了", "https://mp.weixin.qq.com/s/lmKRaMajydqD-Gg6TQL-hw": "漏洞复现 | 多客圈子论坛社区系统前台文件上传漏洞", "https://mp.weixin.qq.com/s/CC2s1g-j9tmnd5qMjfjx0Q": "FnOS GUI Exploit Tool:针对 FnOS 系统的综合漏洞利用工具", "https://mp.weixin.qq.com/s/5cQBb9LQ1wBTUeOR8O-hJw": "企业 SRC 低投入,高收益漏洞总结", "https://mp.weixin.qq.com/s/JJtI7BTMmJ1ayFJcIDlAfw": "你的Windows还安全吗?2月6个零日漏洞正在被大规模利用", "https://mp.weixin.qq.com/s/nUC7IPuPHritj2a5YX5oww": "CISA 将两个已被积极利用的 Roundcube 漏洞添加到 KEV 目录中", "https://mp.weixin.qq.com/s/-Ww5NDMB9C7Pb7URNJZeAw": "[CVE-2026-0714] 嵌入式设备上的 TPM 嗅探 LUKS 密钥", "https://mp.weixin.qq.com/s/BhfaxatmTiWpxMZhuukHHQ": "做个\"脚本小子\"--XPOC下载篇", "https://mp.weixin.qq.com/s/h7uNXsxKDj6JaR4A-w-0kw": "Windows记事本RCE漏洞PoC已公开(CVE-2026-20841)", "https://mp.weixin.qq.com/s/bqavfbmDlHutjTb2hQVZ6Q": "总结常见的web安全漏洞(产生原因 ,原理 ,危害 ,防御措施)", "https://mp.weixin.qq.com/s/SyENC7Y9eWi6UciQEwWNeA": "第45天-JavaEE安全探秘:动态代理与反序列化漏洞深度解析", "https://mp.weixin.qq.com/s/v6bW3AwyovI0R2YN7F3viQ": "几个常见漏洞挖掘案例分享", "https://mp.weixin.qq.com/s/OVMUp8YalicS003K06t93A": "Anthropic推出Claude Code Security,用于人工智能驱动的漏洞扫描", "https://mp.weixin.qq.com/s/U-U30eoVQhrH3RoB4OIghg": "CVE-2026-27470(Zoneminder-二阶注入)研究", "https://mp.weixin.qq.com/s/6WIbsMskNo9RE5BXtpHpEQ": "外国安全研究人员眼中的中国两大网络安全漏洞库", "https://mp.weixin.qq.com/s/boSZCgh5xSBA76GawUWf-w": "网络安全新闻周报:PayPal 数据泄露、Chrome 零日漏洞、BeyondTrust 远程代码执行漏洞等", "https://mp.weixin.qq.com/s/g7cGTdl_BotRwvnm7Vvz2Q": "SolarWinds 2026 的关键漏洞", "https://mp.weixin.qq.com/s/7PnJ9zmlT2dC1OA8MH4VoQ": "漏洞复现 | Tosei自助洗衣机network_test.php接口存在远程命令执行漏洞", "https://mp.weixin.qq.com/s/R5iZpTP8e4X0doDivFpXtg": "你的记事本安全吗?微软记事本漏洞实测自查指南", "https://mp.weixin.qq.com/s/H3YKBZ3Ftn5PcWW2mxFe9Q": "春节特刊 | 提示词注入:大模型安全漏洞案例剖析", "https://mp.weixin.qq.com/s/VNy57s2uEevzdJ_q1GDTYQ": "自动化编写SRC报告平台:安全团队编写漏洞报告神器", "https://mp.weixin.qq.com/s/SA3vV8EyIuMpJZ_q-D_Sgw": "超过 41% 的热门 OpenClaw 技能被发现存在安全漏洞", "https://mp.weixin.qq.com/s/_W-CsN6VD0JUYKH6EAQvdQ": "2026年需重点关注的几类高价值漏洞", "https://mp.weixin.qq.com/s/bBCK8qlHR6UEGvQ-Nkekag": "企业攻击面管理:从资产发现到漏洞闭环(资产测绘利器)", "https://mp.weixin.qq.com/s/5sYwSSWvRE18gVHtF4khaA": "跑?Solana 全链资产要完! Rust Bug 实现 Validator RCE 和 Money-Printin", "https://mp.weixin.qq.com/s/-p_VkKcZTvdYg_Cx06sPcg": "跑?Solana 全链资产要完! Rust Bug 实现 Validator RCE 和 Money-Printin", "https://mp.weixin.qq.com/s/-9aSm_2uOF66_NFsx3gAeA": "惊天漏洞!Cline供应链攻击-一个GitHub Issue就能劫持百万开发者的AI编程助手", "https://mp.weixin.qq.com/s/yJwpDyzHLSxei5nf7J_6KQ": "你的记事本安全吗?微软记事本漏洞实测自查指南", "https://mp.weixin.qq.com/s/ZQUqrlHhYhBnIEnwXmiUAg": "谷歌急于发布关键的Chrome更新,以修复严重的PDFium和V8漏洞", "https://mp.weixin.qq.com/s/Hz_7jszd8AM8A2PgT_iImw": "Web中关于AI功能点的漏洞挖掘", "https://mp.weixin.qq.com/s/rrBaGy7fhAb9SqwNjxVbCQ": "从信息收集到后台拿权全记录 SRC 视角下:渗透测试中的逻辑漏洞思路博弈", "https://mp.weixin.qq.com/s/-VstOSf7cD3YjuoCwpu8QQ": "Apache Tomcat 漏洞允许攻击者通过 HTTP∕0.9 请求绕过安全约束机制", "https://mp.weixin.qq.com/s/bQsPYiHIL1UrMv8yOxgs7g": "黑客组织大规模利用OpenClaw漏洞,窃取API密钥并部署恶意软件", "https://mp.weixin.qq.com/s/oMqK4nCnXVBH8IguGzfq3Q": "深度解析:在 Rails 中通过结构化代码消灭 IDOR 漏洞", "https://mp.weixin.qq.com/s/O81bAxS38j7FAEt2GoplpQ": "Nuclei 漏洞扫描图形化工具 | POC 管理、FOFA∕Hunter∕Shodan 资产测绘、AI 辅助分析、漏洞报告生成", "https://mp.weixin.qq.com/s/1NMUA0KBc7If-NNpxnX42w": "渗透测试中常用提权漏洞详解!", "https://mp.weixin.qq.com/s/bNxMRRo77De9YntmtIXtTQ": "红队实战利器:RapidDNS CLI + Nuclei∕Httpx 打造自动化漏洞挖掘流水线", "https://mp.weixin.qq.com/s/CdbIaLuvpuwycl_kMw3UCQ": "【红队必备】长亭科技开源轻量级供应链漏洞漏扫∕应急利器", "https://mp.weixin.qq.com/s/3iNvhP2pesm6dytGE0tn5A": "PayPal代码漏洞导致企业账户安全受损长达六个月", "https://mp.weixin.qq.com/s/2Q7FF22ygEKPSlThzFeCJg": "VPN漏洞使得黑客得以入侵数十家Ivanti客户的账户", "https://mp.weixin.qq.com/s/_paLzPUcg5Vlrt46gRRjaA": "【红队必备】红队批量打点∕Getshell利器(集成百个框架高危漏洞)", "https://mp.weixin.qq.com/s/1FZ4g6E_vCYG2zwGjnxy3Q": "黑客组织大规模利用OpenClaw漏洞,窃取API密钥并部署恶意软件", "https://mp.weixin.qq.com/s/6bmASz5JrN51y8t3jw5Gcg": "终止支持版本无补丁:CISA警告称USR-W610物联网设备存在严重(9.8级)漏洞", "https://mp.weixin.qq.com/s/43sWyLGum2S7QJXy1pQPSA": "漏洞复现 | 东胜物流软件SoftMng∕FileInputHandler∕Upload接口存在任意文件上传漏洞", "https://mp.weixin.qq.com/s/ZNGP-FMl9eMLAM8JWdz1UQ": "黑客利用 BeyondTrust 的严重漏洞,在多个行业部署 VShell 和 SparkRAT", "https://mp.weixin.qq.com/s/yKAupl6Eboj4CIsf_sZtpA": "【已复现】东方通 TongWeb 的 EJB 服务接口存在反序列化远程代码执行漏洞", "https://mp.weixin.qq.com/s/B5Fjxtvv3FTp-O-Wbo0tQA": "H3C路由器敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s/1ivl78BDAcTYYwIYw2IPWA": "GraphQL 渗透测试(面向漏洞赏金猎人):从端点发现到高影响漏洞利用", "https://mp.weixin.qq.com/s/3e0vpcXvltDoS3jmay2pDA": "谷歌Chrome紧急安全更新修复了三个高危漏洞", "https://mp.weixin.qq.com/s/dVm2IlIQOVSjLWjHVMRCvA": "CVE-2026-20817 - Windows错误报告(WER) ALPC权限提升漏洞深度分析", "https://mp.weixin.qq.com/s/oemd5bvgrWhalgYcJhzlyA": "新型变种木马 XWorm 7.2 攻击链深度拆解:Excel漏洞 + 图片隐写 + 进程镂空", "https://mp.weixin.qq.com/s/ZxgnZSrU2s7qIT5KJHuV4Q": "Nuclei 漏洞扫描图形化工具 | POC 管理、FOFA∕Hunter∕Shodan 资产测绘、AI 辅助分析、漏洞报告生成", "https://mp.weixin.qq.com/s/FBS3bRU-bRw3-nKOy6EnuA": "CVE-2025-2011 SQL注入", "https://mp.weixin.qq.com/s/CAl1ko17ZSdAoOfwIIMpgQ": "【0day】大蚂蚁 (BigAnt) 即时通讯系统 plus_get_favicon 任意文件上传漏洞", "https://mp.weixin.qq.com/s/Plo_d9u68vRpKVhXWuh1iQ": "CNVD漏洞周报2026年第6、7期", "https://mp.weixin.qq.com/s/MgzEUGcZ9VgYj7nGQ6GY4A": "上周关注度较高的产品安全漏洞(20260209-20260222)", "https://mp.weixin.qq.com/s/E_ycL3Ab9dPNSdekgJzXQA": "AutoSec 10周年大咖确认 | 一汽大众产品安全与网络安全合规部部长:售后车辆网络安全漏洞全生命周期管理的创新实践", "https://mp.weixin.qq.com/s/Cqllk_2wmwxnyE0OfaFHWg": "漏洞扫描神器!最新版 Invicti 26.2.0", "https://mp.weixin.qq.com/s/MiQE8U55FrArXV5-gpMi9Q": "OWASP 智能合约十大安全风险与漏洞(2026)", "https://mp.weixin.qq.com/s/y_p9GZA1ZjgnlESditgRGw": "【0day】东胜物流软件 IPLimitController SQL注入漏洞", "https://mp.weixin.qq.com/s/yC_LLKHyI8tuXYlZ0iS14w": "H5渗透实战:从复数金额漏洞到签名绕过", "https://mp.weixin.qq.com/s/V77kGVk1DLXp-Fbxx1kVIw": "jsPDF漏洞使数百万开发者面临对象注入攻击风险", "https://mp.weixin.qq.com/s/sp-v2RIUSmDdFZtMAJ1uSg": "【工业控制系统网络安全系列课程】第2课-工业控制系统的网络安全风险-过程控制漏洞利用过程", "https://mp.weixin.qq.com/s/APXbuF060WpRLn1QjyLAXw": "记一次全方位的漏洞挖掘-接管全站数万账号", "https://mp.weixin.qq.com/s/s5DJTxr2zVUdo-vl7CRzQg": "国内某知名AI现严重漏洞,可被绕过生成暴露图片", "https://mp.weixin.qq.com/s/ffLjxji5yklNntEBFeku6w": "stored RCE?:AI代码审计到底怎样?", "https://mp.weixin.qq.com/s/v2racqTw8yPlxXmld4fAqA": "告别命令行!这款 Nuclei GUI 工具,让漏洞扫描效率提升 10 倍", "https://mp.weixin.qq.com/s/HT178IzcaNPEqJopwa9hOA": "JSHunter助你挖掘JS中的漏洞\"宝矿\"", "https://mp.weixin.qq.com/s/HNQ3xv5AjIP21v3IeFuLeQ": "CNVD漏洞周报2026年第6、7期", "https://mp.weixin.qq.com/s/aqxO7fa8Nk-Dl8LCN7EfkQ": "【0day】东胜物流软件 CrmProxyMailListHtmlGridSource.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s/kf5ZHRAjkjpucJxj39ph1A": "【林晓月的AI安全日记-001】你在用AI写代码,AI在帮别人开shell|Windsurf AI编辑器RCE漏洞挖掘实录", "https://mp.weixin.qq.com/s/7V98PV64IZOUyOhTrz7EuQ": "神农SRC 漏洞挖掘实战课:从 0 到 1 成为赏金猎人", "https://mp.weixin.qq.com/s/kiE10srXPLxqEla8Z4-TYw": "美国首次动用《保护知识产权法》:制裁俄罗斯零日漏洞经纪网络", "https://mp.weixin.qq.com/s/-rELIjCVdBgs61a7u4E7KQ": "Java反序列化漏洞Gadget Chain可视化图谱工具", "https://mp.weixin.qq.com/s/gvv57DFBW8nVUPRxwc_caA": "【0day】东胜物流软件 HtmlSearchServiceLCL.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s/Y3QlhEY8NuXNjNdFbbrvQw": "【0day】东胜物流软件 ModuleGridSource.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s/jGofnNOAdxnMMeX0eyYp7Q": "0day 麒麟操作系统 KysecScene D-Bus 服务本地提权漏洞分析 附poc", "https://mp.weixin.qq.com/s/sVUzKIdGcKLpQJzvcMMVwQ": "漏洞复现 | 泛微e-office OfficeServer2.php 文件上传漏洞", "https://mp.weixin.qq.com/s/q7AhFdFCHohoyqV5MLADlA": "【0day】东胜物流软件 CrmProxyMailListGridSource.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s/fyOZZ3x1yxAgOsX6F_ehUw": "美俄0day漏洞对抗简单介绍", "https://mp.weixin.qq.com/s/Fi9hoShBpGhfmfZ9ZyGnqQ": "VMware Aria漏洞使攻击者能够执行远程代码", "https://mp.weixin.qq.com/s/SaZFdVu3o06B5ItFzoyAtQ": "庄荣文:锚定网络强国战略目标推进“十五五”网信事业实现良好开局;OpenAI 工程师因代码漏洞损失 25 万美元加密资产 | 牛览", "https://mp.weixin.qq.com/s/z0zx7p63s2SouR1mJtgZiQ": "实战漏洞挖掘", "https://mp.weixin.qq.com/s/6lklDHVLYXUSCdOQ_LkCpQ": "新手必看|SRC平台漏洞挖掘全攻略(2026 干货版):平台详解+规则必记+实操步骤", "https://mp.weixin.qq.com/s/eUv1kOPIFXB98nOcLZHyQw": "登录框漏洞checklist(三)", "https://mp.weixin.qq.com/s/uC2CHQaB-aQP4RJFe2iBvg": "【0day】大蚂蚁 (BigAnt) 即时通讯系统 PublicController 任意文件读取漏洞", "https://mp.weixin.qq.com/s/ccRaoUpyADs7tEZ03wAk4Q": "PDF.JS任意JS代码执行漏洞踩坑实践", "https://mp.weixin.qq.com/s/hU1a0I9WIdGEgYwBHuqcWw": "【0day】东胜物流软件 MsAnnounceController SQL注入漏洞", "https://mp.weixin.qq.com/s/jba1vz708W7K90gopsxt9A": "GitHub Copilot漏洞可致代码库遭劫持,攻击者利用AI静默窃取敏感令牌", "https://mp.weixin.qq.com/s/KMbHwHEstoh_lSvEDN3CwA": "Apache ActiveMQ漏洞遭利用,LockBit勒索软件批量入侵企业", "https://mp.weixin.qq.com/s/Az2eMxaNcGRfMSMALDyJSw": "漏洞挖掘中的组合拳攻击", "https://mp.weixin.qq.com/s/VdqN_G-hzgikTFCNN_oBsw": "CVE-2026-24061:潜伏11年的致命漏洞深度解析", "https://mp.weixin.qq.com/s/A7rUKKcOf5RccwiFESaySg": "安恒正式推出中国版“Claude Code Security”!恒脑安全智能体漏洞挖掘能力跑出行业加速度", "https://mp.weixin.qq.com/s/6Nk3utyfCDeN7K_sf9VQ4Q": "什么操作魔法?安全漏洞轻松到手", "https://mp.weixin.qq.com/s/i6ZJifWeNNpgDswNgAkqXQ": "【工业控制系统网络安全系列课程】第2课-工业控制系统的网络安全风险-过程控制漏洞利用(一)ICS过程控制漏洞概述", "https://mp.weixin.qq.com/s/BSd_DmVkhLhKh-PS6WiC5g": "ACF插件漏洞使黑客能够获得5万个WordPress网站的管理权限", "https://mp.weixin.qq.com/s/yjsS7Er173vo9hKvhomcwg": "猫头鹰 XSS 平台:一个针对XSS漏洞的测试平台", "https://mp.weixin.qq.com/s/bouwXsLy0QEfsEgh-7x9ww": "'ormar' Python 库中发现严重 SQL 注入漏洞", "https://mp.weixin.qq.com/s/R6eEvS4lrouNvcOpgYFUXQ": "EventLog-in:利用微软Windows事件日志服务进行弱凭证横向移动(CVE-2025-29969)", "https://mp.weixin.qq.com/s/D6z6_0qgpKvrDPQlnde3nw": "【SRC赏金猎人必备】SRC资产扫描利器(集成四测绘引擎+549 POC)", "https://mp.weixin.qq.com/s/FyKg6H4dkoWHddED970u5A": "内鬼、黑客与替罪羊?L3Harris“核武级”漏洞泄露案拷问西方情报供应链安全", "https://mp.weixin.qq.com/s/K1iLP1PsXk3JHAEG88KjXw": "【利用难度极低】CVE-2026-25253 OpenClaw漏洞剖析", "https://mp.weixin.qq.com/s/6uyZO4tLCIBaZKG6_sKQVA": "【SRC赏金猎人必备】一款自动化SRC资产监控与漏洞扫描框架", "https://mp.weixin.qq.com/s/RaQStYpdJfbgjLCrYEue4A": "AI 编程助手安全盲区:Claude Code 漏洞揭示的代码安全新挑战", "https://mp.weixin.qq.com/s/OV332EPC7MpooNb2PB4CJg": "通过js发现的一个信息泄露漏洞", "https://mp.weixin.qq.com/s/l40kqmc674Ej2cZ8dIn5jA": "【网安】参数污染技巧!结合越权漏洞实操演示和讲解!", "https://mp.weixin.qq.com/s/hFAbH6XS0hPN9BW5srKqhA": "Nuclei 漏洞扫描图形化工具 | POC 管理、FOFA∕Hunter∕Shodan 资产测绘、AI 辅助分析、漏洞报告生成", "https://mp.weixin.qq.com/s/0w6_upMKGDtHgtImQTcLCQ": "漏洞复现 | 用友NC importExcelTemplate 任意文件上传漏洞", "https://mp.weixin.qq.com/s/tbqLykoB-wsBFiYfI8u0xg": "从提示注入到RCE:剖析AI智能体中的参数注入攻击", "https://mp.weixin.qq.com/s/HnnpZJHF-OcxAhfafIypdg": "APP漏洞挖掘六脉神剑:组件、存储、证书、生物、Root、动态加载", "https://mp.weixin.qq.com/s/CtqxSsWmOT4D7P7hs4raDw": "近期安全事件一览(全球重大安全事件和CVE-2026-2441)", "https://mp.weixin.qq.com/s/0oqc03vbWiYq2z813CmjGQ": "【漏洞通告】RustFS PostObject 策略验证缺失导致授权绕过漏洞(CVE-2026-27607)", "https://mp.weixin.qq.com/s/5lLbdR_qKVsqdSRCaV8tkA": "SQL 注入漏洞总结", "https://mp.weixin.qq.com/s/JamQgowfqX9LPdjxJS_MzA": "天锐绿盾 findUserPage.do sql注入漏洞", "https://mp.weixin.qq.com/s/2Q9PRKFn8UJhRh9Y7NcKXQ": "Java S2-002 漏洞复现分析", "https://mp.weixin.qq.com/s/11i1r2xaS3Ei_Srkw4ey4w": "你以为的安全,其实漏洞百出:普通人必看的网络安全自查清单", "https://mp.weixin.qq.com/s/b8CR4yagBnUWORg_I9e_yQ": "Check Point帮Claude找了3个漏洞,真没想到引来了...", "https://mp.weixin.qq.com/s/1NCwubHtlNAgvuQaZELTVg": "存储型XSS漏洞checklist", "https://mp.weixin.qq.com/s/cN2OaAyx94JtvbFvA3Nn4Q": "SolarWinds Serv-U 多个严重漏洞可用于提供服务器root权限", "https://mp.weixin.qq.com/s/UJxJUHd55rAHmW0k00sE3A": "黑客工具Fierce:子域名挖掘", "https://mp.weixin.qq.com/s/6TseSqLdLcd9G2WWQIG1rQ": "攻击者利用Apache ActiveMQ漏洞获取RDP权限并部署LockBit勒索软件", "https://mp.weixin.qq.com/s/XIZTAAvqVUakuvVIxg83Tg": "汇业研究 | 从传统EC到AI Commerce再到Agentic Commerce的主要法律合规变迁", "https://mp.weixin.qq.com/s/a4nf4u43EeAJb5cA1ZMZPw": "记edusrc证书站随手捡漏洞", "https://mp.weixin.qq.com/s/HD3DmFnEIBCsLa9h0La3tg": "CVE-2021-1732 内核提权详细分析", "https://mp.weixin.qq.com/s/HZ14MviqIIoXt3DPkEQOwA": "【安全圈】大疆扫地机被曝安全漏洞,6700台设备可被远程控制", "https://mp.weixin.qq.com/s/_G5hdG7VdobX7EWuTT6OFg": "LLM4VFD:基于大语言模型的多源信息融合漏洞修复检测框架", "https://mp.weixin.qq.com/s/-mO_XtiYQxAPOjlCPcyMiQ": "【工业控制系统网络安全系列课程】第2课-工业控制系统的网络安全风险-过程控制漏洞利用(二)典型漏洞利用路径", "https://mp.weixin.qq.com/s/UeNNtqdsIJIAJIDrxZWBNw": "漏洞报告补档补档-知识星球", "https://mp.weixin.qq.com/s/DnVI5NBDC-ldAZuyTUzNqg": "【0day】大蚂蚁 (BigAnt) 即时通讯系统 安装程序二次注入致远程代码执行漏洞", "https://mp.weixin.qq.com/s/HdDlLJTTLI2oguXE54vU6Q": "CTFshow:请求伪造漏洞_CSRF", "https://mp.weixin.qq.com/s/iXbGLS3F6SKmfnFhZoK2iA": "APP漏洞挖掘六脉神剑:组件、存储、证书、生物、Root、动态加载", "https://mp.weixin.qq.com/s/ouyMeqLDUevfVBzHSGSCMA": "解读 | 2026 VulnCheck漏洞利用情报报告", "https://mp.weixin.qq.com/s/PYMZAZ8Tkw4XGH75iDHcTg": "【已复现】RustFS 管理控制台存储型XSS致管理员账户接管漏洞(CVE-2026-27822)", "https://mp.weixin.qq.com/s/x_BegxiS3Zd4YbxZ9VuWEQ": "存储型XSS漏洞checklist", "https://mp.weixin.qq.com/s/PO6a4KOxzr-BnxYhWwAaYA": "黑客利用 Claude AI 漏洞窃取政府数据", "https://mp.weixin.qq.com/s/rKp8tgsMGPYELUF2WjAkMg": "合勤:注意影响十几款路由器的严重RCE漏洞", "https://mp.weixin.qq.com/s/dFFl3ObWNH6jWs7Pf6EjaA": "【0day】东胜物流软件 MsChDuiController 多个SQL注入漏洞", "https://mp.weixin.qq.com/s/_vTWPvk0_kb8-NSFTTiXcg": "大模型隐私泄露攻击技巧分析与复现", "https://mp.weixin.qq.com/s/Zmk-6YWl0vnQ4vTLsAPADQ": "CTFshow:请求伪造漏洞_CSRF", "https://mp.weixin.qq.com/s/m04_h9N4NRNKJi4aPH6UQQ": "【免费领】智能设备安全技术干货:路由器0day漏洞挖掘指南", "https://mp.weixin.qq.com/s/p6R9kWveS0LtbP9IpdqjTQ": "VS Code 高人气预览插件曝出高危XSS漏洞,可窃取本地文件", "https://mp.weixin.qq.com/s/UQsPWFxKDv0bSt2dKnTXGA": "新的沙箱逃逸漏洞使 n8n 实例容易受到远程代码执行攻击", "https://mp.weixin.qq.com/s/-U5hc8-no1AO80v5pz8hcQ": "攻击路径(8):不用漏洞也能打穿内网", "https://mp.weixin.qq.com/s/cpmA2bD3BKPgZtkd53PVaw": "2025年漏洞战场的真相:喧嚣之下,暗流涌动", "https://mp.weixin.qq.com/s/hOqao0-ZLQh3Fxl6fI2taQ": "几款热门的VSCode扩展存在安全漏洞,开发者需警惕", "https://mp.weixin.qq.com/s/ZV1ahGXbqhCmIUNlImJHVQ": "VS Code的Live Server扩展存在漏洞,可被用于窃取本地文件(CVE-2025-65717)", "https://mp.weixin.qq.com/s/kWYv8nNmENO-o2-CHClgRQ": "网安人必看!我做了个漏洞报告生成Skill,效率大幅提升", "https://mp.weixin.qq.com/s/kCGM_7-sHfqAa62J_DA2pw": "安科瑞企业微电网能效管理系统存在默认密码admin:Acrel001 附POC", "https://mp.weixin.qq.com/s/EUsImqPGmsz9h6TzC95b3g": "Markdown Preview Enhanced 打开恶意文件可执行任意 JavaScript(CVE-2025-65716)", "https://mp.weixin.qq.com/s/Ijgxua3JDxH0JGiTAzcM5Q": "Wireshark 4.6.4发布,修复了多项安全漏洞", "https://mp.weixin.qq.com/s/K-6XZbp4CbjrqL5sLNlhpg": "从越权到RCE:深度剖析SolarWinds Serv-U 最新4大致命漏洞", "https://mp.weixin.qq.com/s/zHFcfpLsDsglURY-k5cyhA": "【已复现】深科特LEAN MES系统的MesATEApi.asmx接口存在任意文件上传漏洞", "https://mp.weixin.qq.com/s/4XV0qHt1RiJBaPousddvwg": "大疆扫地机被曝安全漏洞,6700台设备可被远程控制", "https://mp.weixin.qq.com/s/4gnGv8Vrb5DF_qBH2mX30w": "微软 Code Runner 插件爆高危漏洞,配置文件被篡改可导致远程代码执行(CVE-2025-65715)", "https://mp.weixin.qq.com/s/kcsNmlzPC_7oNSu0mVDvhw": "一款专业的文件上传漏洞检测工具,支持263+绕过技术、代理抓包、动态扫描", "https://mp.weixin.qq.com/s/r2U_36RDjIVtOLU6Ttb2XA": "2026年全球漏洞披露预测与安全运营影响", "https://mp.weixin.qq.com/s/0qB4Augj9nYLZ2ZIBHMPzA": "开工特惠 | ApiHunter智能参数填充+自动跑接口: API 接口漏洞检测工具", "https://mp.weixin.qq.com/s/ALE2-VOhrbp9vMiSlNYn9w": "ServiceNow AI平台关键漏洞可实现远程代码执行", "https://mp.weixin.qq.com/s/g2LMt4VKMhRRTZtpTEgoQA": "恶意广告利用新的广告系列平台漏洞绕过谷歌广告审核", "https://mp.weixin.qq.com/s/OEUsOvmJ4JePgHft6adfPA": "IngressNightmare (CVE-2025-1974) 深度解析", "https://mp.weixin.qq.com/s/_Ai4X5zEFyCKAgR_QM6jng": "24小时武器化0day!俄APT28用云存储当C2,欧洲多国军政机构遭精准窃密", "https://mp.weixin.qq.com/s/oDPxY6WDKz_rJTGQC3BHmQ": "EDUSRC-高危漏洞-从信息收集到后台多个越权漏洞", "https://mp.weixin.qq.com/s/DQi4atCfB_hOFQOh6oUHag": "网安工具30天通(第5期)|Metasploit(MSF):漏洞利用&拿Shell一站式框架", "https://mp.weixin.qq.com/s/tYjkheTdMXBdD2I67Yw17Q": "CVE-2026-21962 Weblogic RCE漏洞(复现)", "https://mp.weixin.qq.com/s/mZpMa6fy-wfAbQIvJ461rw": "三星MagicINFO SWUpdateFileUploader 文件上传漏洞(CVE-2025-4632)", "https://mp.weixin.qq.com/s/C4sd8FAAZ5JEWjz7S5f16g": "【已复现】漏洞通告 | RustFS 管理控制台存储型XSS致管理员账户接管漏洞(CVE-2026-27822)", "https://mp.weixin.qq.com/s/eccew9jHZ_IRHZbUGRwWWQ": "【已复现】Langflow CSV Agent 远程代码执行漏洞(CVE-2026-27966)", "https://mp.weixin.qq.com/s/9sRIjKutvqDJjGWvbxuJkw": "漏洞复现 | 汉王e脸通综合管理平台 resourceUploadFile.do 任意文件上传漏洞", "https://mp.weixin.qq.com/s/3Um-DgcIXfX0GIHV1OI6Xw": "八部门新规3月1日实施,网安从业者需筑牢未成年人网络防火墙;120万法国银行账户泄露:公职人员权限成最大安全漏洞 | 牛览", "https://mp.weixin.qq.com/s/E0fgsQN7Xl0R006rWlXLMA": "【红队必备】460+POC内外网资产探测与漏洞检测工具", "https://mp.weixin.qq.com/s/PJpIQXyMxzLuLnStoO-Vew": "2026 SRC漏洞挖掘全攻略|从入门到变现,网安新手必看", "https://mp.weixin.qq.com/s/PEbffbb-N3TsvbDvapEUZg": "2026年1月高危漏洞应急指南:7条措施+15类系统,安全人速查!", "https://mp.weixin.qq.com/s/MebgHxcTwvcw9fp96kPeMg": "信息安全漏洞周报【第062期】", "https://mp.weixin.qq.com/s/A3lpycCUHbYXqpgIqG22xg": "【漏洞复现】高危预警!H3C 多款路由器目录遍历漏洞致敏感信息泄露(附 POC + 修复方案)", "https://mp.weixin.qq.com/s/mbjS5himBugBI_KX8pC68g": "0day 青龙面板 最新版本 鉴权绕过导致 RCE 分析", "https://mp.weixin.qq.com/s/krIV4MyJUrVUa5Yp8oedQA": "多款谷歌应用商店心理健康App曝安全漏洞 超千万用户敏感医疗信息面临泄露风险", "https://mp.weixin.qq.com/s/PXlNp4brg_diSIF72JkdcQ": "EV Energy ev.energy 缺少关键功能的身份验证 (CVE-2026-27772)", "https://mp.weixin.qq.com/s/Kf8AwRy-mYBVPrayuZp6WA": "能信安:漏洞通告", "https://mp.weixin.qq.com/s/EiP0LMo7p7kSPM6CB_sHtg": "DudeSuite 漏洞播报 全网漏洞早知道【202602279】", "https://mp.weixin.qq.com/s/wyK_4e_7dc1WN00tgS87LQ": "某次通用型漏洞挖掘思路分享", "https://mp.weixin.qq.com/s/v92WtlRbqEp7VhbAp1LP_g": "【漏洞通告】Langflow CSV Agent 远程代码执行漏洞(CVE-2026-27966)", "https://mp.weixin.qq.com/s/e91zzOXXoD0oPlPmpeZs0w": "【0day】大蚂蚁 (BigAnt) 即时通讯系统 moveDept SQL注入漏洞", "https://mp.weixin.qq.com/s/2dP76st8l2RUGzcN8dQ81g": "趋势科技:注意这些严重的 Apex One 代码执行漏洞", "https://mp.weixin.qq.com/s/_evFS7pc3dENFZIqfvduqg": "【0day】九佳易管理系统 picHY.ashx SQL 注入漏洞", "https://mp.weixin.qq.com/s/bxmqZDBsD6RpDMB44V5kdw": "CVE-2025-64155:rootFortinet FortiSIEM", "https://mp.weixin.qq.com/s/3LiyL2Zx_iOibk-q1kYgfA": "Claude Code遭入侵,RCE漏洞可窃取组织API密钥", "https://mp.weixin.qq.com/s/WK45CcPnhtbFhE28blfkzQ": "重磅打造 | 0day系列——Web框架漏洞挖掘", "https://mp.weixin.qq.com/s/fwAFzntu5JAHFsZyffhSFQ": "【安全圈】Python 热门 ORM 爆出 9.8 分致命漏洞,数据库或被完全读取", "https://mp.weixin.qq.com/s/DjxQs37SB1arMDMn0JsRPw": "【AI安全】微软AI框架高危漏洞!Semantic Kernel 任意文件写入", "https://mp.weixin.qq.com/s/IBwW4YjWsF4nBk5olv1_AA": "0day 麒麟操作系统 KysecScene D-Bus 服务本地提权漏洞分析 附poc", "https://mp.weixin.qq.com/s/mYYFlYXkfyruSsDbg7v9zg": "【0day】青龙面板最新版v2.20.1 鉴权绕过致RCE漏洞", "https://mp.weixin.qq.com/s/DDa6COeguCxfzOyDwifRIw": "2025年1%的安全漏洞被实际利用,却造成绝大多数网络攻击", "https://mp.weixin.qq.com/s/MdwHLqg2b0LZOOh0hIaqtQ": "2.155亿美元USDT规避冻结:8310条黑名单提案揭示行业合规潜在漏洞", "https://mp.weixin.qq.com/s/8Dm8npmqBHHgV0Pfwns_RQ": "【干货】漏洞挖掘技巧+深层原理分析 前端鉴权绕过(一)", "https://mp.weixin.qq.com/s/ItyPOyPSK5HdMXBjkgishQ": "Juniper Networks PTX严重漏洞可导致路由器遭完全接管", "https://mp.weixin.qq.com/s/42ZKGGysjDQ5wVRuspdz8Q": "安全通告丨网络安全漏洞通告(2026年2月)", "https://mp.weixin.qq.com/s/2MbfPmIuFyTWyowmDStj-Q": "0day | 青龙面板最新版本鉴权绕过导致远程代码执行漏洞", "https://mp.weixin.qq.com/s/Ppk23lhqxT6_e7QWS3hfdA": "渗透测试Payload速查平台 | XSS∕SQLi∕SSRF∕RCE | React+TypeScript", "https://mp.weixin.qq.com/s/EjAedDCOV8rNCtXZvz-nUQ": "2026-02-28 最新CVE漏洞情报和技术资讯头条", "https://mp.weixin.qq.com/s/pO9KhXPe0eGe27dH2-2bMg": "通往内核的七条路:RCE获取服务器权限的完整狩猎指南", "https://mp.weixin.qq.com/s/2npxthv9hdLO4AD9idiMQQ": "0day 青龙面板 最新版本 鉴权绕过导致 RCE 分析", "https://mp.weixin.qq.com/s/Vhy8MgsDaHrmaaBmW1VB4g": "九佳易管理系统picHY.aspx接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s/Kb-0Df_n4veFXO6CbsFl_g": "FreeBSD 漏洞允许攻击者导致整个系统崩溃", "https://mp.weixin.qq.com/s/rk-XGq62qoLkn2zHyZe7wg": "【AI高危漏洞预警】Claude Desktop命令注入漏洞CVE-2026-26029", "https://mp.weixin.qq.com/s/bodNajH4xB3Ix7MuTy8OxQ": "美国防部推进AI网络作战工具 重点锁定中国电网与关键基础设施漏洞", "https://mp.weixin.qq.com/s/6AKuG2tsWo1h4Che0_zJLw": "带 AI 辅助的可视化漏洞扫描工具、支持 POC Nuclei 管理与生成、FOFA∕Hunter∕Shodan 资产搜索", "https://mp.weixin.qq.com/s/j7TdhAvGvSmOpRZGF42hvw": "EverShop严重安全漏洞警报:密码重置令牌直接暴露,CVSS 9.8分", "https://mp.weixin.qq.com/s/fjT9Lh0io1ceU0kB8bD0mA": "青龙面板 v2.20.1 路由重写引发的鉴权绕过与配置写入风险(复现记录)", "https://mp.weixin.qq.com/s/tN16xBSmKDUF2_aGgBpnJQ": "Nuclei 漏洞扫描图形化工具 -- Nuclei_Gui(2月25日更新)", "https://mp.weixin.qq.com/s/bJnwgw2e7YN6gr9fbWFgDQ": "5天,100+ CVE,0误报:我们用自研AI挖掘引擎重新定义了白盒漏洞挖掘", "https://mp.weixin.qq.com/s/8x7MOh0_uYhjltHgD985xA": "【网络安全】JWT缺陷下的越权漏洞详解与实操!", "https://mp.weixin.qq.com/s/dC9Ei9G4z0chPxnKQIR1aA": "安全热点周报:谷歌修复了今年攻击中首个被利用的 Chrome 零日漏洞", "https://mp.weixin.qq.com/s/FTixLrmzIc54nfRWY58vNA": "信息安全漏洞周报(2026年第8期)", "https://mp.weixin.qq.com/s/5fd1nfZvb6Irqrbljj5uZg": "思科Catalyst SD-WAN严重认证绕过漏洞遭长期入侵,可植入恶意节点控制网络", "https://mp.weixin.qq.com/s/5gqqTKlyH8ra8cMRLEZORA": "【新洞速递】CVE-2026-21962 Weblogic RCE漏洞", "https://mp.weixin.qq.com/s/vUyr5vL2luaPJPOIxc8cPw": "RustFS 控制台中的存储型 XSS 漏洞使 S3 管理员凭据面临风险", "https://mp.weixin.qq.com/s/ORvVs_wLFzqaWqKA0r4lvA": "【安全预警】Unitree Go2 机器狗被曝远程代码执行漏洞", "https://mp.weixin.qq.com/s/U_FhbFQ9StnqNM93CPyjaQ": "CNVD公开Apache Continuum命令注入漏洞;谷歌发布 Nano Banana 2,AI 图像生成安全与效率双升级 | 牛览", "https://mp.weixin.qq.com/s/cCNxCrxNN9BY_xPYD9vwLg": "漏洞速递 | 最新0day青龙面板RCE漏洞(建议自查)", "https://mp.weixin.qq.com/s/j8psHJ40oLMyfpxIF4PvCg": "Rust 在预览模式中存在严重存储型 XSS | CVE-2026-27822 复现&研究", "https://mp.weixin.qq.com/s/DLsDZqQSa5MhJXL8O8zCkg": "天清汉马VPN安全网关系统任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s/Yri1rhULGwco5iPCGb5cNg": "天锐绿盘文档安全管理平台 findForPage.do SQL注入漏洞", "https://mp.weixin.qq.com/s/TgfjmR2177I5Y-ye4g7Tkg": "信息安全漏洞周报(2026年第7期)", "https://mp.weixin.qq.com/s/F6ylokgrxYl_Kxpbb2vRBw": "俄系雇佣APT组织Mercenary Akula针对欧洲援乌金融机构展开攻击", "https://mp.weixin.qq.com/s/eNf7ZMrS37vjvjNxEIuGQw": "CVE-2026-1731 BeyondTrust 远程支持预授权远程代码执行漏洞概念验证", "https://mp.weixin.qq.com/s/mqH8TsEPbFNdBMDbFln5vA": "Claude “发现”,MonkeyScan “闭环”:AI 代码漏洞挖掘落地才是真能力", "https://mp.weixin.qq.com/s/dJJ1t7nrCt-6l36bcVcL8w": "Claude “发现”,MonkeyScan “闭环”:AI 代码漏洞挖掘落地才是真能力", "https://mp.weixin.qq.com/s/pgrujScra2J6y4X-BG1nWA": "全网首发 | 基于CORS漏洞示例验证的大模型能力Agent Skills能力从0到1全流程开发解析科普讲解,新手小白也能轻松上手", "https://mp.weixin.qq.com/s/isqOVIUQzWk5sOsActW7hw": "0134.构建虚拟道德黑客家庭实验室——第六部分:系统漏洞利用", "https://mp.weixin.qq.com/s/EUtsKUtoEuBs3TbIdgTumA": "信息安全漏洞预警(2026年2月23日-2月28日)", "https://mp.weixin.qq.com/s/AK7rbvH9yCX_beUy03WH3g": "特斯拉 Model 3 和 Cybertruck 存在多个漏洞,无线连接栈可遭拦截", "https://mp.weixin.qq.com/s/Y67DqZSpC02wuksXdckDFA": "【0day】九佳易管理系统 Ajax_XT.ashx SQL 注入漏洞", "https://mp.weixin.qq.com/s/e6jNnP51lOLROxhHLfFcXQ": "初探漏洞挖掘基础-信息收集", "https://mp.weixin.qq.com/s/nZoOArsN_4XCygXCbNB_tg": "AI Agent安全之风险场景、典型漏洞及体系化防护", "https://mp.weixin.qq.com/s/Qq2gVMnGgdgFlwJL5xsWCw": "紧急预警:OpenClaw惊现\"零点击\"超级漏洞,你的AI Agent可能已被劫持!", "https://mp.weixin.qq.com/s/nb6IvxWBLbefiP5azq2zFA": "Python 热门 ORM 爆出 9.8 分致命漏洞,数据库或被完全读取", "https://mp.weixin.qq.com/s/h3A3V_aVqqQPyDwGx01F8w": "【0day】九佳易管理系统 PrivilegedCodeDestroy.asmx SQL注入漏洞", "https://mp.weixin.qq.com/s/50zwQIY4xONrVdqCOvhsMA": "恒脑安全智能体全面对标Claude Code Security,极速复现3个0day,并横向挖掘10个未知漏洞!", "https://mp.weixin.qq.com/s/avaXE3JQ5l5tHZ-7XnmE5A": "云原生架构下,如何实现供应链安全漏洞的闭环管理?", "https://mp.weixin.qq.com/s/HujLwouK7DDa71NbQK2X-A": "【安全圈】ClawJacked 漏洞曝光:网站可远程劫持 OpenClaw AI 代理,开发者需立即升级", "https://mp.weixin.qq.com/s/l_FToxsAq1duNOWgnEhp2g": "从会话管理模式解读 .NET 身份验证绕过漏洞", "https://mp.weixin.qq.com/s/6SnrFNmFRDD3Nsi35oUoSQ": "青龙面板存在command-run接口存在远程代码执行漏洞 附POC", "https://mp.weixin.qq.com/s/UTMwNEu9-_cVO_MFpQz4EQ": "青龙面板鉴权绕过漏洞 | 文件上传、RCE、密码重置、信息泄露复现&研究", "https://mp.weixin.qq.com/s/Qwwl6KBFUQj2b1SLK_Lvjg": "OpenClaw 0-Click漏洞致恶意网站劫持开发者AI Agent", "https://mp.weixin.qq.com/s/d2ShFyFUXaI501u9QxRxRQ": "漏洞复现 | 青龙面板最新版存在任意重置密码漏洞", "https://mp.weixin.qq.com/s/dRY9NZcWyWqV43jrkdfW_Q": "通过提示注入在LLM大语言模型中制造漏洞", "https://mp.weixin.qq.com/s/FRHzgNZrfjpy-6kEIehsjA": "2025年网络安全漏洞态势报告", "https://mp.weixin.qq.com/s/Q3AHCyRBj9h7-2yatCugEQ": "从安全分析视角一文解读 .NET 越权漏洞", "https://mp.weixin.qq.com/s/IpwnJZOQNPiv1EpcIqPFjw": "【0day】大蚂蚁 (BigAnt) 即时通讯系统 updateLoginName SQL注入漏洞", "https://mp.weixin.qq.com/s/Xjh53tHWneU_imiQ-tdB-w": "【已复现】孚盟云AjaxOthers存在SQL注入", "https://mp.weixin.qq.com/s/DnWDlmrXTgKdpTDh494NZw": "【安全圈】OpenClaw本地网关漏洞导致AI代理成攻击入口", "https://mp.weixin.qq.com/s/UyaHYWlGMU_aiB3mG5Fdww": "OpenClaw 0-Click漏洞致恶意网站劫持开发者AI Agent", "https://mp.weixin.qq.com/s/HToM-uPCrat87GQibX1hbA": "【安全圈】Windows CLFS漏洞PoC公开:普通用户两次API调用即可触发不可恢复蓝屏", "https://mp.weixin.qq.com/s/8IrDtNQDdXYY2pSPIZ5V2g": "【安全圈】黑客利用Claude批量生成漏洞窃取政府数据", "https://mp.weixin.qq.com/s/3vvFTX-82rkiRTpgMV7l1g": "补天 6 群少年实力出圈,横扫 360SRC、阿里云 SRC 高危漏洞", "https://mp.weixin.qq.com/s/1I-sIcjtp8fZxHUQD9LeAQ": "锐明技术Crocus系统 DeviceFileReport.do 任意文件读取漏洞", "https://mp.weixin.qq.com/s/z5qKADtyV8DqbgxT9rX0hA": "[视频]使用Fortify25扫描代码漏洞", "https://mp.weixin.qq.com/s/A_LKJXuBMqzRj6oiBWn0gA": "青龙面板目录大小写鉴权绕过导致rce", "https://mp.weixin.qq.com/s/zxlcq7CdGkauUTQ3t9jZQg": "漏洞管理平台 | 支持Excel格式的漏洞扫描报告导入、智能关联资产、漏洞可视化管理", "https://mp.weixin.qq.com/s/nu928j5rcPphh08EvTTppg": "代审0day-开源图库任意用户登录+getshell", "https://mp.weixin.qq.com/s/ljWhNRHORBdccHMqR7co2A": "【高危漏洞预计】 telnetd组件中存在权限提升漏洞CVE-2026-28372", "https://mp.weixin.qq.com/s/ta_EoeAtDvZTP4Rjt7sH2w": "【已复现】风云再起TELNETD又爆提权漏洞(CVE-2026-28372)", "https://mp.weixin.qq.com/s/_V53IMQHtlcnhrOKfvJFdw": "从入门到“被黑”?Claude Code 底层 MCP 机制与环境注入漏洞全解析", "https://mp.weixin.qq.com/s/IncToIZsGcTqPNaI0GnyzQ": "共启安全年|瓜分微信百万奖池!漏洞赏金翻倍,先到先得", "https://mp.weixin.qq.com/s/NrNFwEfNbqGKd5jUSe-4eA": "springboot环境下的写文件RCE——so劫持篇", "https://mp.weixin.qq.com/s/fsrwZLDviCkn8BbOaufEbw": "友加畅捷管理系统敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s/Q3HFC6dc7n_u-SDDB8x8PA": "CVE-2026-27728 (CVSS 10):OneUptime 探测器中存在严重命令注入漏洞,可导致服务器完全接管", "https://mp.weixin.qq.com/s/rDI7JSZoxop5ciY6D_mQrA": "漏洞预警 | 大蚂蚁即时通讯系统任意文件上传漏洞", "https://mp.weixin.qq.com/s/1JZjwKWe14mI-3up_emc6w": "某国际组织漏洞挖掘记录", "https://mp.weixin.qq.com/s/iNqgNNF_M4XzEN6hJCoaaA": "我如何在 3 天内发现 4 个漏洞 —— 新手成长之路", "https://mp.weixin.qq.com/s/B5oClf6aPE59SWCrQnaEHw": "漏洞预警 | 天地伟业Easy7文件读取、SQL注入和信息泄露漏洞", "https://mp.weixin.qq.com/s/-gQWvIgxFuO4owN_HtZ9Pw": "30天内挖掘100+内核漏洞:Windows驱动安全大危机?", "https://mp.weixin.qq.com/s/ymS6_66BYuQBtV1H9xgpiQ": "高危预警 | CVE-2026-2844:时间同步管理系统现关键认证漏洞,5G、电网、国防基础设施受影响", "https://mp.weixin.qq.com/s/BRvqUiQ1PY0iM8BRRYc2rg": "从一份配置文档到安全漏洞:400美元赏金的实战挖掘之旅", "https://mp.weixin.qq.com/s/J5s1GdzZp6OMLLJyG6b9iQ": "SRC漏洞挖掘思路梳理重制版", "https://mp.weixin.qq.com/s/o06VC91oSN7V0v1PwttK9Q": "2026-03-02 最新CVE漏洞情报和技术资讯头条", "https://mp.weixin.qq.com/s/RtMVgLW0lX4mAONSKaXo9w": "利用WAF窃取Salesforce OAuth令牌", "https://mp.weixin.qq.com/s/k5OoE9OVQk3Znz_Um2n1wA": "Tenda F453路由器高危漏洞", "https://mp.weixin.qq.com/s/DK-LPFTMKHLK_IRYm_IkoA": "工具推荐 | 已发现数十个真实漏洞!AIxVuln自动化漏洞挖掘系统,让安全研究事半功倍", "https://mp.weixin.qq.com/s/caW-S4oLIpwZF02ou5kHGg": "漏洞预警 | Windows记事本远程代码执行漏洞", "https://mp.weixin.qq.com/s/QmDgWyae3JRhD-K3NtQwZg": "2026 年首个0DAY漏洞 (CVE-2026-2441)", "https://mp.weixin.qq.com/s/Q9yArU4z1ZkUVjnx8tP2lw": "警惕“AI 投毒”:Claude Code 项目配置漏洞可致代码执行", "https://mp.weixin.qq.com/s/W2Mbi2MlYVKogcS_ncKb5g": "代码审计-foxcms前台ssrf漏洞", "https://mp.weixin.qq.com/s/DB7Unw5ITuFiuZCUXOubdw": "【漏洞通告】GNU Inetutils telnetd 环境变量注入提权漏洞(CVE-2026-28372)", "https://mp.weixin.qq.com/s/jSjygpzXSkCz6VQnrSdZHQ": "Trail of Bits 开源 Claude Code 安全技能包:甲方安全团队的“漏洞雷达”升级指南", "https://mp.weixin.qq.com/s/FlhMmYf0YNsj2FCzqHiE8g": "OpenClaw近期生态安全事件解读:从RCE漏洞到Skill供应链投毒分析", "https://mp.weixin.qq.com/s/zCrAXsYMj3kU59zq5r0DhA": "某知名院校0元购漏洞", "https://mp.weixin.qq.com/s/A54j5EN7CdiYLmAEIWNXWg": "CNVD漏洞周报2026年第8期", "https://mp.weixin.qq.com/s/2rK8SF6yBr7McnGvqoiDPA": "FlowiseAI 任意文件写入漏洞", "https://mp.weixin.qq.com/s/Ui8fxwYrT-Ha18n2RYW00Q": "【漏洞复现】宏脉医美行业管理系统∕hmcConfig.json存在信息泄露漏洞", "https://mp.weixin.qq.com/s/CL1hzb9QJqEWodl044MGSA": "上周关注度较高的产品安全漏洞(20260223-20260301)", "https://mp.weixin.qq.com/s/ffCl-hv8BmUo2ipGMvWwOA": "【漏洞通告】Microsoft Windows 记事本远程代码执行漏洞(CVE-2026-20841)", "https://mp.weixin.qq.com/s/B2ghhxUCdgNM-tILYRNcmQ": "【0day】深信服运维安全管理系统 change_net 远程命令执行漏洞", "https://mp.weixin.qq.com/s/ILR5FRWLngoM04Uz6vsIJA": "【服务端漏洞-访问控制缺失-第二章第四节】开工大吉!分享一个“朴实无华”的越权思路:从false改到true就够了", "https://mp.weixin.qq.com/s/AjmGwxY7eb_twDKJMUl1rg": "OpenClaw近期生态安全事件解读:从RCE漏洞到Skill供应链投毒分析", "https://mp.weixin.qq.com/s/mQnMvTeWOisG8WTGhGLi8A": "【已复现】风云再起TELNETD又爆提权漏洞(CVE-2026-28372)", "https://mp.weixin.qq.com/s/uXrOP50GCsS3LOmwBVNzeA": "OpenClaw 0-Click漏洞致恶意网站劫持开发者AI Agent", "https://mp.weixin.qq.com/s/eYxaAbPXLxV6OXyDMfn0sg": "从 BeijingCrypt攻击看天珣EDR防护实践,构筑代码漏洞之外的终端安全屏障", "https://mp.weixin.qq.com/s/mQWuxoE8IqMpeTzGjDVL9g": "DudeSuite 漏洞播报 全网漏洞早知道【20260302】", "https://mp.weixin.qq.com/s/oeBnfoo221PuExGkak1rjw": "CVE-2025-6507&CVE-2025-6544 H2O-3反序列化漏洞", "https://mp.weixin.qq.com/s/TZPOUzorOH-_LLnLsBVIIw": "Go2机器狗的远程代码执行(RCE)漏洞", "https://mp.weixin.qq.com/s/rr1FRCZTptXqGgwwvjgztw": "利用Windows映像备份与ADCS漏洞攻陷域控", "https://mp.weixin.qq.com/s/MWug5c7b-QLhLHE8QKeNkA": "Claude Code配置文件藏漏洞,API密钥秒泄露", "https://mp.weixin.qq.com/s/eFaRTkzSIpiWjJwaPPKg_A": "谷歌API密钥安全漏洞曝光:前端暴露密钥可直接访问Gemini并窃取隐私数据", "https://mp.weixin.qq.com/s/PsI6zFu4PVOH7e1_lp69rA": "【漏洞预警】青龙面板正式版v2.20.1存在权限绕过漏洞", "https://mp.weixin.qq.com/s/wsLuaHR7sh7HUrvbUGpA-g": "每周网安资讯 (2.24-3.2)| UNC6201组织利用CVE-2026-22769零日漏洞部署恶意软件", "https://mp.weixin.qq.com/s/LvPOmfiFDGR_nHFShBCbEw": "【已复现】青龙面板身份认证绕过漏洞(QVD-2026-10895)安全风险通告", "https://mp.weixin.qq.com/s/IL_sctIMfjMt42QSVzDEXQ": "汇丰银行加码生成式AI布局,漏洞修复已提速5倍", "https://mp.weixin.qq.com/s/SYV3yXvzXrCnuRo1PaVp8Q": "vm2沙箱逃逸漏洞(CVE-2026-22709)", "https://mp.weixin.qq.com/s/1ngqPGIKLEqmJfr1ptISXA": "从籍籍无名到排行第一:XBOW智能漏洞挖掘的构建", "https://mp.weixin.qq.com/s/7H5AFeSIpYC2LbJliv6HUg": "谷歌人工智能代码编辑器 Antigravity 中的远程代码执行漏洞 - 10000 美元赏金", "https://mp.weixin.qq.com/s/yx2i2c0jEqJK_3up7AsJoQ": "漏洞管理指标:是时候超越指标幻象了", "https://mp.weixin.qq.com/s/LHZPU7pujhzN_Ir-qcvCpw": "点个网页就被接管?爆火AI框架OpenClaw曝出致命漏洞,你的电脑正在裸奔!", "https://mp.weixin.qq.com/s/RN-_gyA1e5TSSAryfESclg": "工具推荐 | 470+漏洞一键检测!专为国内主流OA打造的漏洞检测利器", "https://mp.weixin.qq.com/s/FVS0FhG7I_CHVD5U-TW_Gg": "WEB漏洞扫描器Invicti-Professional-V26.20.0(自动化爬虫扫描漏洞)更新", "https://mp.weixin.qq.com/s/NR3lN2SBQ7B9B1Wo9vB8DQ": "谁在电话线上?利用 Windows 电话服务中的远程代码执行漏洞( CVE-2026-20931)", "https://mp.weixin.qq.com/s/RWmuDVl5cD_jaDshGF8YDQ": "严重漏洞预警 | Microchip TimePictra 存储型 XSS 漏洞影响关键基础设施管理系统", "https://mp.weixin.qq.com/s/MinEjtdmGKoeb0OupcY62w": "从 WebSocket 劫持到间接指令注入:OpenClaw 连环漏洞背后的架构反思", "https://mp.weixin.qq.com/s/_Q4u37bwDlpzAv---8QVoA": "可视化漏洞扫描器Nuclei_Gui、支持POC管理与生成", "https://mp.weixin.qq.com/s/M_l3MdtBtug7o4gn7tYnIQ": "漏洞预警 | Langflow远程代码执行漏洞", "https://mp.weixin.qq.com/s/Fo1GusEly4fEdI4oRXwpHA": "漏洞预警 | 东胜物流软件SQL注入漏洞", "https://mp.weixin.qq.com/s/0rDVlOT7AltZnK0CuSViuQ": "工具 | CVE-2026-24061-GUI", "https://mp.weixin.qq.com/s/q_VUL8a-ZVsULxPlMJJN3Q": "专业的文件上传漏洞检测工具 | 支持263+绕过技术、代理抓包、动态扫描", "https://mp.weixin.qq.com/s/744SDALyf_zgy2TSRP5Wgg": "漏洞预警 | 天地伟业Easy7文件上传漏洞", "https://mp.weixin.qq.com/s/cw1gfQOxe4ZSXgUGuIdIoA": "为了过个上传漏洞,我换了三个环境:一个安全菜鸟的踩坑实录——Upload-Labs 5-8关排坑记", "https://mp.weixin.qq.com/s/PTUKngfyBAlPzef3B4X1mA": "漏洞报告处理平台 - 支持Nuclei∕Xray∕自定义txt报告导入,AI驱动的安全漏洞管理与分析系统", "https://mp.weixin.qq.com/s/D4EitBJ-jhJGwXvnH0HfLA": "2026元宵福利来袭:漏洞奖金翻倍,陌陌SRC邀你共庆佳节!", "https://mp.weixin.qq.com/s/GZ9_4jqRD2mdgrLprhgk4A": "雷神众测漏洞周报2026.2.9-2026.3.1", "https://mp.weixin.qq.com/s/8_wsvlbEW4ss8Z4T8fQPGg": "记一次某大型oa前台0day挖掘", "https://mp.weixin.qq.com/s/kCh7mBZMxehhyIgBI5rU8A": "FastNmap - Nmap告别命令行可视化资产发现 · 漏洞检测 · 报告生成", "https://mp.weixin.qq.com/s/tiR1ZwrmnumeOwm6yctGkA": "从侦察到利用:攻击者如何发现、利用和串联Web应用程序漏洞——以及防御者如何检测和阻止它们", "https://mp.weixin.qq.com/s/4Ceu8kxpf5lKZ1nTJNYPpw": "HSC Mailinspector 路径遍历漏洞(CVE-2024-34470) 附POC", "https://mp.weixin.qq.com/s/9ujiCdBcoIQkknRwj7KLKA": "记一次SRC漏洞挖掘:万能验证码与任意用户密码重置之旅", "https://mp.weixin.qq.com/s/99JxwoFzyn-zl7dFZNA8jA": "那个凌晨,我终于挖到了人生第一个漏洞", "https://mp.weixin.qq.com/s/xi-XEP0V3i1XtXDc91gnqg": "【已复现】漏洞通告 | 青龙面板未授权命令注入漏洞", "https://mp.weixin.qq.com/s/9E8JddipF5-jOCzi1bVO8Q": "【漏洞预警】0day 青龙面板 最新版本 鉴权绕过导致 RCE", "https://mp.weixin.qq.com/s/gBDs3NOYgiSgRrEflYJ4zw": "【在野利用】青龙面板未授权命令注入漏洞", "https://mp.weixin.qq.com/s/7q_bTJ-NsPsOmAPOHZ_yqQ": "【案例分享】某SRC SSRF漏洞分享", "https://mp.weixin.qq.com/s/ru5jPwEt5CX3ndFZKZv2ww": "热网无线监测系统 RealTimeOther.asmx SQL注入漏洞", "https://mp.weixin.qq.com/s/fftGnpspnYeUj66jbiUpUA": "用户名枚举漏洞并可被利用导致账户被恶意封禁算不算漏洞", "https://mp.weixin.qq.com/s/iWqARz5yCFpYKdzV4xpClA": "我如何利用 LLM 多 Agent 工作流挖掘开源项目 0-day 漏洞", "https://mp.weixin.qq.com/s/yF1zeXGPEnDzMosAssqAlQ": "springboot环境下的写文件RCE——so加载篇", "https://mp.weixin.qq.com/s/ghXSVnnqe8B0QiqDXaKp2A": "Chrome 新漏洞允许恶意扩展程序通过 Gemini 面板提升权限", "https://mp.weixin.qq.com/s/0z4Dt5KzOoen9deKwlSCyw": "针对 Windows 错误报告的 ALPC 权限提升漏洞利用程序已发布", "https://mp.weixin.qq.com/s/SbnAGTwI7V5cZOF-7dBdzA": "LLM驱动的多智能体协同漏洞挖掘与PoC验证框架", "https://mp.weixin.qq.com/s/GGfhh7mmy6kNqyychBOelA": "Chrome高危零日漏洞CVE-2026-0628深度分析:恶意扩展如何借AI之势窃取你的本地文件", "https://mp.weixin.qq.com/s/ZEMMRqA1-hr2UZKIh0vQyA": "CVE-2025-30247 | 无界安全成员发现西部数据高危漏洞", "https://mp.weixin.qq.com/s/PME9OXsdCaidSTxCbpE3Xg": "什么是自带漏洞驱动 (BYOVD) 攻击?", "https://mp.weixin.qq.com/s/COJMTSv9xQdb_8mNWUkplQ": "OpenClaw高危漏洞ClawJacked深度解析:当浏览器成为内网渗透的跳板", "https://mp.weixin.qq.com/s/MDAR7vEt0u0QvT-RVj190A": "【论文速读】| FuzzySQL:基于大模型驱动的模糊测试挖掘数据库管理系统特殊功能中的隐藏漏洞", "https://mp.weixin.qq.com/s/KszZ_HT1Mza5DWOqNdQqcA": "Netatalk CVE-2018-1160 复现及漏洞利用思路", "https://mp.weixin.qq.com/s/yk8acwGkXsWBgKcVp-SaTw": "CVE-2026-3042分析:ITSourceCode事件管理系统高危SQL注入漏洞(附poc)", "https://mp.weixin.qq.com/s/wscOQbSSNwdp5Bc9XbI4sw": "漏洞验证-SpringBlade框架JWT认证缺陷(CVE-2021-44910)", "https://mp.weixin.qq.com/s/zTGQOuixh9CgXZ76-7SmZQ": "【高危漏洞预警】青龙面板身份认证绕过漏洞", "https://mp.weixin.qq.com/s/VxuN9ohg3ypwOF6B8HYHXQ": "OpenClaw高危漏洞ClawJacked深度解析:当浏览器成为内网渗透的跳板", "https://mp.weixin.qq.com/s/RBk_5wl1ORq2c7p-P_r2ug": "Chrome Gemini漏洞可致攻击者远程访问用户摄像头和麦克风", "https://mp.weixin.qq.com/s/c4fNfzn2TKA4VA1b9S1IFg": "Windows错误报告服务ALPC提权漏洞,PoC利用代码公开", "https://mp.weixin.qq.com/s/Rcj5yZBfA4XDwyObfBfmLQ": "pocsuites安全工具源码分析", "https://mp.weixin.qq.com/s/BWVJsQI1sPmobRX4y3jDgw": "Chrome 漏洞可导致恶意扩展通过 Gemini 面板提权", "https://mp.weixin.qq.com/s/ct8GBNUKZIOnvqQaqOPbDA": "APT28组织利用MSHTML框架0Day漏洞在微软补丁发布前实施攻击", "https://mp.weixin.qq.com/s/KX8_GgirsfPQt6SvIqBnUQ": "WordPress 安全警报:热门会员插件存在严重权限提升漏洞", "https://mp.weixin.qq.com/s/lDCxmZDuUWvlRRAuJOvdIg": "工具推荐 | OSS存储桶的漏洞扫描工具,目前支持阿里云、腾讯云、华为云、AWS S3", "https://mp.weixin.qq.com/s/exSHealt1J3dmCwd90Cbuw": "天融信-上网行为管理系统代码审计命令执行+任意文件删除+任意文件下载", "https://mp.weixin.qq.com/s/fX9YniapoIj-d0eZYGnZjQ": "记一次加密小程序的支付逻辑漏洞挖取", "https://mp.weixin.qq.com/s/bxuTgsrQLUxYr7WSX1czfw": "记一次差点进编制的漏洞测试", "https://mp.weixin.qq.com/s/PRbBNeGco1kw96fXyKqILQ": "漏洞预警 | 九佳易管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s/RE6ftG589_ZnUTDE3HPC9w": "银河麒麟OS安全检测工具 | 资产清点、合规检查、漏洞扫描和报告生成一体化", "https://mp.weixin.qq.com/s/AH8ZXywWjusa5eHObmEyag": "日益严峻的安全隐患:MCP系统中的提示注入漏洞", "https://mp.weixin.qq.com/s/jmROv3lgDVpv-xF5blHN4Q": "漏洞扫描分析平台 对标商业级漏洞扫描器 | 主机探测、端点梳理、资产测绘、POC验证和自动报告", "https://mp.weixin.qq.com/s/XkBV3_3r6ndiJ0z1NOPEdQ": "漏洞预警 | 大蚂蚁即时通讯系统任意文件读取漏洞", "https://mp.weixin.qq.com/s/S9kfYNRwKrBNrHZj6BvRow": "谷歌确认高通安卓组件中的 CVE-2026-21385 漏洞已被利用", "https://mp.weixin.qq.com/s/-9155GZHeE1x-0bgn4afiQ": "某知名院校0元购漏洞", "https://mp.weixin.qq.com/s/MH3AK4QFRmO7TDlFw9RK9Q": "CVE复现 | CVE-2026-24061复现", "https://mp.weixin.qq.com/s/tqDPiJvZDhlATRAEsS3cug": "[0day] Chrome Blink引擎UAF+渲染器逃逸,全链RCE已在野", "https://mp.weixin.qq.com/s/CP6IhexEASzJ4UlGhJU8hg": "漏洞复现 | 青龙定时任务管理平台dependencies鉴权绕过导致远程命令执行漏洞", "https://mp.weixin.qq.com/s/7l_SjdFgQ5nrzLVeAKc9mQ": "【服务端漏洞-访问控制缺失-第二章第五节】挖掘小众漏洞:平行越权(横向权限提升)的利用与实例", "https://mp.weixin.qq.com/s/xP_PRkltn0yuNOR85NYvXQ": "漏洞预警 | RustFS授权绕过漏洞", "https://mp.weixin.qq.com/s/TD_OhpH3RHOg6Wvu0j9n2Q": "【nday】某知名品牌运维安全管理系统 del_net 远程命令执行漏洞", "https://mp.weixin.qq.com/s/ORmMMbZjLe5eUz2h35SEjQ": "OpenClaw本地AI Agent零交互接管攻击链分析与思考|ClawJacked【CVE-2026-25253】", "https://mp.weixin.qq.com/s/tm8hnsKPhdcJejrqWSc7Yw": "那个凌晨,我终于挖到了人生第一个漏洞", "https://mp.weixin.qq.com/s/LSWsiw10RU0WPkCaaZ_Wjw": "捷报!洞悉安全斩获漏洞盒子全明星擂台赛大魔王擂台区胜利!", "https://mp.weixin.qq.com/s/dhOOJUw4pyI9kMzqo7fJcw": "美以“史诗怒火”联合斩首行动看伊朗安保漏洞对我借鉴与启示", "https://mp.weixin.qq.com/s/rS9xYPGQr2M0BCnJiRhRjg": "JAVA电商系统前台文件上传漏洞审计流程", "https://mp.weixin.qq.com/s/TBl9zFDKGTZpyvbuYBlhSQ": "中国信通院2026【首批】软件供应链漏洞管理平台能力评估报名启动!", "https://mp.weixin.qq.com/s/8AtGriLMM_0PV4yi4L9n7w": "让 AI 像黑客一样思考,已斩获 49 个 CVE 的开源漏洞!全新一代AI代审工具漏洞发现效率提升 10 倍", "https://mp.weixin.qq.com/s/C0fLba9werSVzBuGFSw39w": "五个请求,拿下数据中心管理系统:CVE-2026-28517 三漏洞链式利用分析", "https://mp.weixin.qq.com/s/_DyLCcTsEO9o6OFxVRjkNw": "通杀iPhone的漏洞工具包遭泄露:美国政府级黑客工具流入黑市,你的苹果手机已成提款机!", "https://mp.weixin.qq.com/s/C6fGvi9rK-SWD6jKjGlQnQ": "通杀iPhone的漏洞工具包遭泄露:美国政府级黑客工具流入黑市,你的苹果手机已成提款机!", "https://mp.weixin.qq.com/s/ueEFKrQCKFJpq7QGTe94Dg": "深度分析:Android 短信数据库 SQL 注入高危漏洞 (Bug 388530367)", "https://mp.weixin.qq.com/s/TgKtuskvHUpo9zuVVLBjcA": "H5S视频平台敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s/-bvDl1qJI7Jxi7cKposPsQ": "【漏洞预警】青龙面板 系统未授权远程代码执行漏洞", "https://mp.weixin.qq.com/s/-x7My3r39rLsSSCKN391wg": "信息安全漏洞周报(2026年第9期)", "https://mp.weixin.qq.com/s/0nBZDjvVRxVp54TSiySbaw": "Langflow CSV Agent 远程代码执行漏洞分析(CVE-2026-27966)", "https://mp.weixin.qq.com/s/x3Uc2SlFFgfaL7cc1WWueg": "有时候,你真的能从设计中\"嗅\"出安全问题(Juniper Junos Evolved CVE-2026-21902 无认证RCE分析)", "https://mp.weixin.qq.com/s/RJRSte8fcj8vE3dfgZg6sQ": "代码安全审计模型集群(GGUF)更新!0day复现平台即将上线!", "https://mp.weixin.qq.com/s/QwiyGO9OvdF4Lnt4MYqPvA": "信息安全漏洞月报(2026年02月)", "https://mp.weixin.qq.com/s/FNb8MY6qrjQ8JdDWVw2Qlw": "【1day】青龙面板 网站管理系统 command-run 远程代码执行漏洞", "https://mp.weixin.qq.com/s/HszbwIfSyE15tQCTg-AidA": "DudeSuite 漏洞播报 全网漏洞早知道【20260304】", "https://mp.weixin.qq.com/s/qi0y7bfmD26egsnPvInImg": "《网络安全与数据治理》:基于大模型的深层 Web 越权漏洞检测方法​​", "https://mp.weixin.qq.com/s/xnBT55kFgUvwFbdXCDesEA": "【漏洞预警】青龙面板 网站管理系统 command-run 远程代码执行漏洞", "https://mp.weixin.qq.com/s/NTzLtMqWkaibNmy7ZCuGqQ": "Coruna漏洞利用工具包包含23个漏洞,已入侵数千部iPhone", "https://mp.weixin.qq.com/s/9RSG46cEyAQ58lIQQExKSA": "通杀iPhone的漏洞工具包遭泄露:美国政府级黑客工具流入黑市,你的苹果手机已成提款机!", "https://mp.weixin.qq.com/s/kMS6vP-lsStRJEepX-8JoQ": "OpenClaw本地AI Agent零交互接管攻击链分析与思考|ClawJacked【CVE-2026-25253】", "https://mp.weixin.qq.com/s/xXgaZg_Y-YHroMYiz2IGyg": "Chrome Gemini漏洞可致攻击者远程访问用户摄像头和麦克风", "https://mp.weixin.qq.com/s/Y5AwybGPA4hERuPWZy0Z8A": "WebLogic任意文件读取漏洞", "https://mp.weixin.qq.com/s/ImNkYPfCHt_z3ltOB64FNQ": "Chrome 浏览器漏洞利用 (一):V8 引擎与 JavaScript 内部机制入门", "https://mp.weixin.qq.com/s/4ZKEecCJ-svZi4PNWv-LXQ": "Chrome 浏览器漏洞利用 (三):CVE-2018-17463 分析与利用", "https://mp.weixin.qq.com/s/zyh4L2iQZ6xcP48U_OTKXw": "【漏洞预警】青龙面板 网站管理系统 command-run 远程代码执行漏洞", "https://mp.weixin.qq.com/s/CxFbA576h3jQVaREcjD86g": "【0day】某知名品牌运维安全管理系统 del_route 远程命令执行漏洞", "https://mp.weixin.qq.com/s/wKmAK3f7ZAZ-NFTOWaIpPA": "通杀iPhone的漏洞工具包遭泄露:美国政府级黑客工具流入黑市,你的苹果手机已成提款机!", "https://mp.weixin.qq.com/s/-3E30rKbgWhUO0TKLYsPKA": "Chrome 浏览器漏洞利用 (二): Ignition 解释器、Sparkplug 编译器与 TurboFan JIT 优化详解", "https://mp.weixin.qq.com/s/qefuyPAaCNk_kT6d-e_Rbw": "美以“史诗怒火”联合斩首行动看伊朗安保漏洞对我借鉴与启示", "https://mp.weixin.qq.com/s/Yri_0xcdQwKmwXkxdQdIbQ": "谷歌紧急修复Android 129个漏洞,含正遭利用的0Day", "https://mp.weixin.qq.com/s/erYYn-ybsG-gMtg8G85AOQ": "CISA:VMware Aria Operations RCE漏洞已遭利用", "https://mp.weixin.qq.com/s/qoWLKYYGDt1ODq8N73am9g": "Chrome Gemini 漏洞可被远程利用 访问受害者摄像头和麦克风", "https://mp.weixin.qq.com/s/GfZd_pqoiPhpiCriWaBkCg": "【附POC及复现环境】关于 “Windows记事本命令注入漏洞” 的一些真相(CVE-2026-20841)", "https://mp.weixin.qq.com/s/ZtgHjwUp-LFGYi442FZa0A": "谷歌安卓更新修复已遭利用的高通 0day 漏洞", "https://mp.weixin.qq.com/s/xKcq2Qq1yqEvJqn1U2DBRg": "Android 安全更新——修复 129 个漏洞及一个正在被利用的零日漏洞", "https://mp.weixin.qq.com/s/_9GMsNgc-_KdXl1-t-zRJQ": "谷歌披露iOS漏洞攻击套件Coruna,数千iPhone用户面临威胁", "https://mp.weixin.qq.com/s/EXPK6rmIUkyF-KsxiRFdww": "【高危AI漏洞预警】LLM-Claw缓冲区溢出漏洞", "https://mp.weixin.qq.com/s/KG3Ge_Zcf0dOdhg8U7mYSQ": "记一次有趣的XSS漏洞挖掘", "https://mp.weixin.qq.com/s/Hi3YQ_ytlbRhOu09yvRN6A": "OpenClaw近期生态安全事件解读:从RCE漏洞到Skill供应链投毒分析", "https://mp.weixin.qq.com/s/lpDNPbUlLijmFuz_WVH5PA": "青龙面板存在任意账号密码重置漏洞", "https://mp.weixin.qq.com/s/LHxZY6wN4-GrvGcp9EMCVQ": "Tenda堆栈缓冲区溢出漏洞 (CVE-2024-2986)", "https://mp.weixin.qq.com/s/iIGADRYK9Qyg_SNILMBS5w": "Claude发现了500个你十年都没看见的漏洞——你引以为傲的经验,还值钱吗?", "https://mp.weixin.qq.com/s/yscg3Ibj9-GEeRL1pAVuJA": "漏洞复现 | Western Digital My Cloud NAS multi_uploadify.php 文件上传漏洞", "https://mp.weixin.qq.com/s/bqAE_G91ZK4Pzhm5XydMMA": "安恒已自用|恒脑AI代码审计智能体实战:与专家同台 PK,让逻辑漏洞不再是“运气发现”", "https://mp.weixin.qq.com/s/4dXSD-h6TfIYhYrvpGHylA": "记一次某大型oa前台0day挖掘", "https://mp.weixin.qq.com/s/NmrARuQpEGupVMQvvBEu4A": "漏洞挖掘新利器:LoveJS浏览器插件,一键抓取隐藏接口与敏感信息", "https://mp.weixin.qq.com/s/J6wCB9KG3d-om9dwU83PDw": "Chrome Gemini漏洞可致攻击者远程访问用户摄像头和麦克风", "https://mp.weixin.qq.com/s/bIEoAiSIX9QRb5wFuzy6yQ": "AI速递 | OpenClaw AI代理易受劫持漏洞", "https://mp.weixin.qq.com/s/tQacz0EyRg7uLi-jWvB6_g": "一个\"备份文件名\"引发的满分漏洞:CVE-2026-28409 深度解析", "https://mp.weixin.qq.com/s/Cifob6KvfDMUWpgFBhMdXw": "漏洞预警 | 东胜物流软件SQL注入漏洞", "https://mp.weixin.qq.com/s/RLCLnQLKVys4dUK4jckCyA": "EasyCVR视频管理平台未授权添加用户漏洞 附POC", "https://mp.weixin.qq.com/s/JuZ87Rc0iB32i5bmWkWnAA": "美国网络安全和基础设施安全局 (CISA) 警告:高通芯片组内存损坏漏洞正被攻击者积极利用", "https://mp.weixin.qq.com/s/IbW59TaqLZJjzMRm_JcS0A": "通杀iPhone的漏洞工具包遭泄露:美国政府级黑客工具流入黑市,你的苹果手机已成提款机!", "https://mp.weixin.qq.com/s/JWwPgywQPnhuPA6ZV_ap9w": "漏洞预警 | 天地伟业Easy7综合管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s/MLcgJuahwntKSwCjI4AXUA": "容器逃逸新方法:潜伏20年的Linux漏洞CVE-2025-38617剖析", "https://mp.weixin.qq.com/s/6HNJYi_B4rVi1q1obzeCPQ": "某大型oa前台0day挖掘", "https://mp.weixin.qq.com/s/oPrD0QpowxWsOhnBhQ4JbQ": "渗透测试Payload速查平台 | XSS∕SQLi∕SSRF∕RCE | React+TypeScript", "https://mp.weixin.qq.com/s/wOqglx_EXLQt5cscuD9LWw": "【林晓月的AI安全日记-003】你在用AI看网页,网页在往你电脑写木马|Google Antigravity浏览器扩展RCE漏洞", "https://mp.weixin.qq.com/s/Ev5pAUCuLEVvYA_yR2yRvA": "CVSS 10.0 FreeScout 中的未经身份验证的远程代码执行(公开概念验证)", "https://mp.weixin.qq.com/s/pPrB9a5bi4TknBYREgx68g": "漏洞预警 | GNU InetUtils telnetd提权漏洞", "https://mp.weixin.qq.com/s/ACjsvuckOJwB-wesg5aCrA": "23个IOS漏洞打包的Coruna工具包,已完成从国家级到黑产的三级扩散", "https://mp.weixin.qq.com/s/RuArJUsXdTRtFY-TwB4PjQ": "【漏洞复现】某面板新版本鉴权绕过导致远程代码执行", "https://mp.weixin.qq.com/s/LLAKmMlaQbXIXyIFVzyIug": "Openclaw技术解析:自动审计用友U8C代码漏洞指南", "https://mp.weixin.qq.com/s/CO2coDczUaffYg7BFsY34w": "[RCE] n8n未授权RCE+Chrome UAF 0day,今日双杀", "https://mp.weixin.qq.com/s/5sxG8QzEKQI1Q7_gd40kJg": "【0day】某知名品牌运维安全管理系统 Jwt 密钥硬编码", "https://mp.weixin.qq.com/s/SviX5oH7veHqAbNTXFseHQ": "深度追踪“Coruna”:一款高端 iOS 漏洞武器库的“暗网”漂流记", "https://mp.weixin.qq.com/s/LkhnogIbInb50dG7WWDGqg": "【安全圈】思科修复最高危 Secure FMC 漏洞", "https://mp.weixin.qq.com/s/YpKFmeH8FeulWifXxk3H7Q": "【已复现】Cisco Catalyst SD-WAN 身份验证绕过漏洞(CVE-2026-20127)安全风险通告", "https://mp.weixin.qq.com/s/sTPSTNgl_LDA2poxzHEF_w": "【已复现】Cisco Catalyst SD-WAN 身份验证绕过漏洞(CVE-2026-20127)", "https://mp.weixin.qq.com/s/JmbKRZN3bvsESXjXmM7AgQ": "iOS攻击工具包Coruna利用23个漏洞入侵数千台iPhone设备", "https://mp.weixin.qq.com/s/381ABDm6YjMWK2XxW7ZWZQ": "天锐绿盾审批系统 findTenantPage.do SQL注入漏洞", "https://mp.weixin.qq.com/s/PFU_ObEwY_HD4-O8NV48TQ": "思科提醒注意满分 Secure FMC 漏洞可用于获取 root 权限", "https://mp.weixin.qq.com/s/l5wftMKtuc6Wq4-HashBSA": "Agent时代的Web项目0day代码审计思考与实践", "https://mp.weixin.qq.com/s/ZYMagiAcbEAXIAPRYfYMHw": "MS-Agent漏洞致攻击者可劫持AI Agent获取系统完全控制权", "https://mp.weixin.qq.com/s/4T1iNxSM2tPEs5ade210Jw": "人工智能重要安全漏洞的通报 - Langflow安全漏洞", "https://mp.weixin.qq.com/s/b5ywW9TSBc29OfsBtTsegg": "CVE-2024-45758&CVE-2024-10553 H2O-3反序列化漏洞", "https://mp.weixin.qq.com/s/f1mJyblER5ZpYk29EBSV-g": "FreeScout 严重漏洞可导致服务器遭完全接管", "https://mp.weixin.qq.com/s/R7k1nu5r2f2UsjN81DBDtw": "AI 挖漏洞已经“原地起飞”?别被幻觉骗了:拆解 POC-GYM 的深度降温报告", "https://mp.weixin.qq.com/s/t_VNm95DuDB-zSm60dbI1g": "【漏洞预警】麒麟操作系统V11 KysecScene D-Bus 服务本地提权漏洞", "https://mp.weixin.qq.com/s/AjjCWHAokr2AAfPbqURadw": "恶意盗取Token接管OpenClaw AI Agent(CVE-2026-25253 ClawJacked)漏洞解析与安全加固方法", "https://mp.weixin.qq.com/s/WKFyaWjfrnrm2TxSPBQmKA": "【漏洞预警】天地伟业Easy7 uploadMapServerBgImage 文件上传漏洞", "https://mp.weixin.qq.com/s/JCXLbJQ10qUr49I-597Fqg": "【漏洞预警】天地伟业Easy7 uploadMapServerBgImage 文件上传漏洞", "https://mp.weixin.qq.com/s/W_Msy1NTtUy0JDWzHRB5gw": "Azure DevOps权限提升漏洞分析", "https://mp.weixin.qq.com/s/4ujLQX58e4_wDT8eL1jNjA": "漏洞预警 | 大蚂蚁即时通讯系统SQL注入漏洞", "https://mp.weixin.qq.com/s/AZU0GCqCArUGEvLcsH19tg": "【项目实战】如何用一个漏洞赚两笔钱", "https://mp.weixin.qq.com/s/JbD43ixjfMZIywi9QnZJfg": "【EXP】Cisco Catalyst SD-WAN 身份验证绕过漏洞(CVE-2026-20127)", "https://mp.weixin.qq.com/s/Ex11CFBLvrsb3cV6-R3_lw": "天地伟业Easy7 uploadMapServerBgImage接口存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s/EshGhLL7mIGcvYg94GPo7g": "【高危漏洞预警】Cisco Catalyst SD-WAN 身份验证绕过漏洞CVE-2026-20127", "https://mp.weixin.qq.com/s/3vdborbClBeBYo4SEFbKjg": "用 Claude 把 GitHub 漏洞数据库变成代码审计 Skill", "https://mp.weixin.qq.com/s/mJFJFEdM0GHYcXirUkL3KQ": "一款集资产管理与漏洞扫描于一体的网络安全评估系统|网络安全扫描利器", "https://mp.weixin.qq.com/s/LqJ3xcnXXh1Geq9QvvEuOg": "漏洞情报(已验证) | 0Day泛微云桥e-Bridge系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s/bqKCongVONQLGTg-jHHUVA": "[RCE] 14行JSON,接管你的Langflow工作流引擎", "https://mp.weixin.qq.com/s/VdctSS2QS5pSp5iHkp8dIA": "Chrome Gemini漏洞:可致攻击者远程访问用户摄像头和麦克风", "https://mp.weixin.qq.com/s/wNny08iS1zntkTbPJWXPiA": "第68天-Web攻防实战:文件上传漏洞(JS提取 ∕ 源码审计 ∕ 编辑器利用)深度学习笔记", "https://mp.weixin.qq.com/s/8CEh18Eg54yqcyFs-p4p6g": "紧急预警:青龙面板严重漏洞,一行命令即可接管服务器!", "https://mp.weixin.qq.com/s/eddbW0UqL9Nktq4dZXzEuw": "第67天-Web攻防实战笔记:文件上传漏洞原理、绕过技巧与真实场景复盘", "https://mp.weixin.qq.com/s/O9o2hDkJ7R2y2gdQsvkcuw": "攻防演练神器 | 一键检测Struts2∕Shiro∕Log4j等主流漏洞", "https://mp.weixin.qq.com/s/01A87uDZk2Yu1nM89GJOPA": "AI智能体如何自动化CVE漏洞研究", "https://mp.weixin.qq.com/s/TA5bilWX2phJnMKE6akDjg": "漏洞预警 | WordPress plugin WPNakama SQL注入漏洞", "https://mp.weixin.qq.com/s/qyUBVRHoamkyoph01CryGA": "SRC系列——某高校食堂支付程序惊现“0元购”?SRC支付逻辑漏洞", "https://mp.weixin.qq.com/s/4DSk7IYtsVYeYKAYgzsSQg": "【服务端漏洞-访问控制缺失-第三章第一节】身份验证漏洞攻击指南(基础篇):认证、授权与暴力破解逻辑", "https://mp.weixin.qq.com/s/oxvSmUx_sX3uHSbw2skv3w": "【漏洞预警】青龙面板 网站管理系统 dependencies 远程代码执行漏洞", "https://mp.weixin.qq.com/s/O2z852EaYHnIPUEKUKy5lQ": "漏洞预警 | 青龙面板身份认证绕过漏洞", "https://mp.weixin.qq.com/s/-PnzihRRiyQaL_kVDEB89g": "OpenClaw惊爆\"ClawJacked\"漏洞:AI Agent已被静默接管?", "https://mp.weixin.qq.com/s/fFJ9TRMVTH6DIjIz9As82A": "红队福音:GoExec实现多种Windows远程代码执行方法", "https://mp.weixin.qq.com/s/DEarwnclXxu_0f7Knr3T4Q": "Web安全扫描工具 | JS敏感信息收集、API端点提取、API文档解析、页面爬取、子域名发现、漏洞测试、WAF检测与绕过、JS代码分析", "https://mp.weixin.qq.com/s/3LjH2FGa3niEhv7Z5SpQyg": "专业的文件上传漏洞检测工具 | 支持263+绕过技术、代理抓包、动态扫描", "https://mp.weixin.qq.com/s/cd6CCjVWuKT3kj3soDf3nA": "WatchDogKiller:WatchDog Anti-Malware 驱动漏洞 PoC", "https://mp.weixin.qq.com/s/UHPFxCW9raVKce2eP51siA": "破解云端加密:亚马逊 AWS-LC 库中发现未经身份验证的绕过漏洞", "https://mp.weixin.qq.com/s/Y3XO2y3L6rTVbjmz1E6qYg": "高危预警 | CVE-2026-26713:开源点餐系统存在未授权 SQL 注入漏洞,CVSS 评分 9.8", "https://mp.weixin.qq.com/s/UpQzmRy_F52MlZ4ZbK2b8Q": "TopazTerminator:一款利用漏洞驱动杀进程的黑客工具", "https://mp.weixin.qq.com/s/8jMN-5L1p0tVqxK4Xe1xKA": "这种鸟漏洞不难挖啊", "https://mp.weixin.qq.com/s/cwagi7X9W5TXkZyM1f_YWg": "漏洞复现 | Salia PLCC firmware.php 任意文件上传漏洞", "https://mp.weixin.qq.com/s/OgLBXsfj7hXKo1p5Q3ahUg": "漏洞分析:Juniper Junos Evolved CVE-2026-21902 未授权远程代码执行漏洞剖析", "https://mp.weixin.qq.com/s/aybvsSzizp4U_Bnpe20aHQ": "思科SD-WAN零日漏洞已被利用,PoC漏洞利用程序已发布", "https://mp.weixin.qq.com/s/CjDxq6wpSrDN6Rs4eAbelQ": "人工智能重要漏洞通报(2026年第二期)", "https://mp.weixin.qq.com/s/aO1nKrg43rioipqXQfcTAA": "网安工具30天通(第9期)|Nessus:企业级漏洞扫描神器,资产巡检必备", "https://mp.weixin.qq.com/s/OBl5SyMLksVtxwhD8Ougug": "AC集中管理平台敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s/6MW1rgI5IflYMbPN-fAGlA": "CNNVD关于Cisco Catalyst SD-WAN Manager和Cisco Catalyst SD-WAN Controller 授权问题漏洞的通报", "https://mp.weixin.qq.com/s/uR5rdkaE6L40rZEKHwSNIA": "用友NC doSingUp sql注入漏洞", "https://mp.weixin.qq.com/s/5B_qeZqLKV2Ji3dYzUZb9w": "人人拥有的 AI 审计战队,让漏洞挖掘触手可及", "https://mp.weixin.qq.com/s/rlDOBl-KWVRRqh0UKHFP6Q": "国家信息安全漏洞库发布人工智能重要安全漏洞通报;维基百科遭自传播JavaScript蠕虫攻击,XSS漏洞如何被武器化 | 牛览", "https://mp.weixin.qq.com/s/aya9HdpgMQtjdND_4cDkIQ": "ByteSRC入侵类漏洞限时享高系数奖励,高危额外再奖2w元!新人&伯乐礼同步上线!", "https://mp.weixin.qq.com/s/HxkTwFiK3Sr73Ee6jfVQhA": "山石安全能力中心|青龙面板未授权RCE漏洞通告", "https://mp.weixin.qq.com/s/ZKPlLs3MUiX1zVjermF38g": "仓促集成 AI 的安全隐患集中爆发:ServiceNow 曝出高危 AI 漏洞!BodySnatcher 可创建管理员后门", "https://mp.weixin.qq.com/s/SKu01RemygxCmC9PjMoEjA": "【漏洞复现】某面板最新版存在任意重置密码漏洞", "https://mp.weixin.qq.com/s/BsmqMUNKrby0Pehd0dDvHA": "JAVA漏洞集合工具", "https://mp.weixin.qq.com/s/mz4yhuzfylCk69nNRin7Vw": "AI代码审计(逻辑漏洞方向)", "https://mp.weixin.qq.com/s/3MVFlqU63lCsvOQ_3j-QBQ": "大多数网络攻击的成功只因1%的漏洞导致", "https://mp.weixin.qq.com/s/_2Mzr5mgAiv92KGg56y0tw": "【0day】某知名品牌运维安全管理系统 getLdap 远程命令执行漏洞", "https://mp.weixin.qq.com/s/tCEzegKFvdN3svBXqWRkFg": "Cloudflare 开源代理框架 Pingora 曝严重请求走私漏洞(CVE-2026-2835)", "https://mp.weixin.qq.com/s/ClWJWC45M8S9DK1pGFvHxw": "记一次SSRF+文件上传组合拳:复盘我是如何组合漏洞一步步Getshell的", "https://mp.weixin.qq.com/s/OnDLx6SFIaXxOH9U7RtfDw": "【漏洞预警】青龙面板 网站管理系统 dependencies 远程代码执行漏洞", "https://mp.weixin.qq.com/s/p5tpA265DQzP9LzQp3g0PQ": "信息安全漏洞预警(2026年3月1日-3月6日)", "https://mp.weixin.qq.com/s/9DWE8vqFdNgS3goopdws8w": "官方新漏洞-泛微云桥 e-Bridge系统 sendWxMsg 存在SQL注入漏洞", "https://mp.weixin.qq.com/s/TNhcv5cZeb14ZXEja87ecg": "电动汽车充电网络告警:Everon OCCP 后端系统存在严重漏洞", "https://mp.weixin.qq.com/s/-SBdt9KkSwNKxi3QbELESA": "某运维安全管理系统存在token泄露漏洞", "https://mp.weixin.qq.com/s/O-NH0JVgiFwRgkiZ-X09uw": "安全热点周报:Android 发布了针对高通零日漏洞攻击的补丁", "https://mp.weixin.qq.com/s/lot2n2XJw9MpYjfz9yLKOg": "信息安全漏洞周报【第063期】", "https://mp.weixin.qq.com/s/mh0yU485ImKrPFhc1gXuGQ": "【已复现】 你的文件可能被他人替换,Gogs 跨仓库 LFS 对象覆盖漏洞(CVE-2026-25921)", "https://mp.weixin.qq.com/s/iZxCXEsc8UjIvu61wyi9cw": "如果你能做好这三件事,0基础也能挖到src漏洞!", "https://mp.weixin.qq.com/s/qf_BuU4i-qqB-a_EU0blXA": "由CISA紧急通报海康威视与罗克韦尔漏洞引发的思考", "https://mp.weixin.qq.com/s/9xJwXvP4eJypD392aANggA": "人工智能重要安全漏洞通报:Langflow安全漏洞", "https://mp.weixin.qq.com/s/CNLivUOrSjwu7J18IKQuxQ": "攻击者可删除文件、植入后门:MS-Agent漏洞曝出完整利用链", "https://mp.weixin.qq.com/s/LDBDK7B2ywOr4IEMDWWMuA": "记某edusrc高危漏洞挖掘", "https://mp.weixin.qq.com/s/N7TEytjucnMBH9CWp90_bQ": "企业系统成0Day攻击新靶点,商业监控公司首超国家黑客", "https://mp.weixin.qq.com/s/YO9l3ZrJhB-U7vMTTa-Dug": "先知通用漏洞收集计划AI应用专项报名开启!", "https://mp.weixin.qq.com/s/XnPbAGlNpuqIOL5Ngkg4Aw": "\"没有 EXP 就无法利用\"?那就公开。有种别修。", "https://mp.weixin.qq.com/s/7l2E8uZ5yp1p0LBuCrbUnA": "思科:注意已遭利用的两个 Catalyst SD-WAN 管理器 0day 漏洞", "https://mp.weixin.qq.com/s/WVss1QL8JgjFJtDl6vbduA": "Tenda CH22 多个漏洞分析", "https://mp.weixin.qq.com/s/kL4TVLyC1iGWXbwyGOif9A": "第69天-Web攻防学习笔记:文件包含漏洞(LFI ∕ RFI ∕ 伪协议 ∕ 无文件利用)", "https://mp.weixin.qq.com/s/GQ1bp5KTuYzagkq-NRoh6Q": "【安全圈】Wi-Fi 爆出史上最大安全漏洞!所有路由器无一幸免:HTTPS 加密也没用", "https://mp.weixin.qq.com/s/VSvP_O4x-eapULzcJISzqQ": "WordPress会员插件漏洞允许攻击者创建管理员帐户", "https://mp.weixin.qq.com/s/uou_PsB6hRXTeYl6Cx0vbA": "第70天-Web攻防实战:文件下载、读取与删除漏洞 & 目录遍历与穿越", "https://mp.weixin.qq.com/s/t8x7t1jJZGVB03ZB9TrAeA": "2025年至少90个零日漏洞遭滥用,企业软件及设备占比近一半", "https://mp.weixin.qq.com/s/txVjLO1aaM9jJQ5PXXVxPg": "思科修复了48个防火墙漏洞,其中两个漏洞的CVSS评级为10级", "https://mp.weixin.qq.com/s/53ciKsFfD-OJUz_aXGeE2w": "Cisco SD-WAN 0Day漏洞已被野外利用,PoC已公开", "https://mp.weixin.qq.com/s/uN6e1XbxWeCGaE2R6xJ2Dw": "漏洞速递 | 最新Cisco CVE-2026-20127 漏洞(建议自查)", "https://mp.weixin.qq.com/s/zc1WXrgRJgoUCelrwK6V5w": "【AI安全】AI安全再爆雷!OpenClaw 漏洞全景大揭秘", "https://mp.weixin.qq.com/s/kIacoCRgErbBe04lHe-x8Q": "“价值”500万的逻辑死锁漏洞", "https://mp.weixin.qq.com/s/Pl8HI07Re_o398osEnziUg": "东胜物流软件GetData接口存在SQL注⼊漏洞 附POC", "https://mp.weixin.qq.com/s/BF3zlf2dJA4vvK9UDKmFYA": "人人都能拥有的AI黑客战队!零成本挖洞,漏洞审计从此零门槛", "https://mp.weixin.qq.com/s/gDVWpl1DS9aBbzJarP3aFg": "深度分析:CVE-2026-21509 Microsoft Office OLE 安全功能绕过高危漏洞", "https://mp.weixin.qq.com/s/qyPxlI_uJ09AxYYz67pKzg": "Twenty CRM 远程代码执行 | CVE-2026-26720 复现&研究", "https://mp.weixin.qq.com/s/NvjcXdqkAMwiWBX_JS0NMg": "SRC 漏洞挖掘实战指南 (2026版)", "https://mp.weixin.qq.com/s/VzwjCfbHGESk7RwUMQ44cA": "记一次对母校的漏洞挖掘经历", "https://mp.weixin.qq.com/s/njVDgOiQ-BtqV3ClOgx8lA": "Pull_request噩梦第二弹:如何通过GitHub Actions漏洞实现RCE和供应链攻击", "https://mp.weixin.qq.com/s/Vfu7lvGPgamG1uyZ2mnqGg": "并发漏洞核心场景Checklist", "https://mp.weixin.qq.com/s/5_ErYro-nnL7gmSgB620og": "CISA 紧急令:联邦机构限期修复 Coruna 漏洞利用链相关 iOS 漏洞", "https://mp.weixin.qq.com/s/mljxoln_sVJFVxCOP_VTNQ": "五角大楼和欧洲航天局部署的卫星接收器爆超20项安全漏洞", "https://mp.weixin.qq.com/s/Gzi1cMELQIc3S0r_61TN5Q": "台军空军关键设施被曝存在安全漏洞 紧急斥资2680万加固", "https://mp.weixin.qq.com/s/PfWn7dhq8__NAQU5yLQmkw": "【已复现】青龙面板身份认证绕过漏洞", "https://mp.weixin.qq.com/s/rifObUuyQp-nhtsbcmH53A": "漏洞管理平台 | 支持Excel格式的漏洞扫描报告导入、智能关联资产、漏洞可视化管理", "https://mp.weixin.qq.com/s/N84dkkzp8hT0bp1PiBRdVQ": "记录比较有意思的几个漏洞挖掘事件", "https://mp.weixin.qq.com/s/U6Cuo9O4zv2J2V_Kq8j3NQ": "AI开始自己修漏洞:Codex Security 如何重构软件安全体系", "https://mp.weixin.qq.com/s/cnzkjn-TdqRBRihMHAbCxw": "拆解 Claude 如何利用 CVE-2026-2796 漏洞", "https://mp.weixin.qq.com/s/CiL6aExyGam5MrYCHOs5gA": "两次 HTTP 请求拿下网站管理员权限——CVE-2026-1492 漏洞分析", "https://mp.weixin.qq.com/s/_1bvND_g96tsnnx-Lhgrdw": "漏洞复现 | Cisco Catalyst SD-WAN 身份验证绕过任意文件上传漏洞(CVE-2026-20127)", "https://mp.weixin.qq.com/s/KrZvN9_VA4s5ifA8BmJkMg": "大多数网络攻击的成功只因1%的漏洞导致", "https://mp.weixin.qq.com/s/MztVEjwQWPbeHCJ54lZaxg": "Serein:SRC 发掘漏洞的高效工具", "https://mp.weixin.qq.com/s/jik3V1LPFwnyC3hq1jO1Bg": "Coruna:一个强大iOS漏洞利用工具包的神秘之旅", "https://mp.weixin.qq.com/s/-S2QUMzzY1IRq5rrQ0VQXg": "供应链漏洞挖掘:从“单点突破”到“全网沦陷”的深度狩猎指南", "https://mp.weixin.qq.com/s/3sUgYu0ZJuZJKXbLtUAnIw": "自 2023 年起,思科 SD-WAN 的一个严重漏洞已被用于零日攻击。", "https://mp.weixin.qq.com/s/yULKp_rBI4qcTIq0_o7LyA": "GitHub 开源 AI 框架挖掘:3个月找到80+高危漏洞的秘密", "https://mp.weixin.qq.com/s/b2tGmTl01mgBY5xZHffZww": "获取 TP-Link Tapo C260 摄像头的 Shell (CVE-2026-0651, CVE-2026-0652, CVE-2026-0653)", "https://mp.weixin.qq.com/s/pY4HEgKGFeqwYnlkXaCOmQ": "漏洞复现 | JeeWMS iconController.do 任意文件上传漏洞", "https://mp.weixin.qq.com/s/ZQmsxdECcV5Nnf1J3f74ng": "SQL注入漏洞测试优化流程(1.1)", "https://mp.weixin.qq.com/s/4gpVN_YCXuEiEc-vc9zlDg": "甲方金融科技公司因防火墙漏洞遭受攻击导致数据泄露,防火墙供应商成被告", "https://mp.weixin.qq.com/s/99s0tUDgtrdtClAd8rJ8Jw": "严重漏洞预警 | WordPress Azure AD 单点登录插件存在身份认证绕过漏洞,攻击者无需任何凭证即可冒充管理员", "https://mp.weixin.qq.com/s/93jxgDhiX-fEq9OOoWSyNQ": "如何利用 AI 分析 CVE-2025-20393 思科安全邮件网关 CVSS10 满分复杂匿名 RCE 漏洞", "https://mp.weixin.qq.com/s/TBDTz1-wTYcGcJbKwKjXzQ": "驯服“浏览器特工”:Chrome的一个漏洞让扩展程序劫持了新的Gemini面板", "https://mp.weixin.qq.com/s/qZYMzC5VZdGp48u3GjRpzA": "【服务端漏洞-访问控制缺失-第三章第二节】手把手教学:如何利用登录提示缺陷,高效爆破用户名与密码", "https://mp.weixin.qq.com/s/krNxIj-uX0mwxkC-s8y6hQ": "代码级起底 CVE-2026-0035:如何利用逻辑缺陷实现跨 App 隐私窃取", "https://mp.weixin.qq.com/s/ZXkKaxUgvZY8nBUPojrIZg": "无需任何账户,一条请求接管整站:CVE-2026-2446 技术分析", "https://mp.weixin.qq.com/s/qHJTUMgA89NSC2SQIqLTvA": "某大型oa前台0day挖掘", "https://mp.weixin.qq.com/s/wz7VqzXpWU26LSPSpTREsQ": "WooYun Legacy:88,636个真实漏洞案例构建的安全知识库Skill", "https://mp.weixin.qq.com/s/vK1ww4bik2wHTVaizOpDyA": "第73天-WEB攻防学习笔记:RCE(远程代码执行)漏洞深度解析", "https://mp.weixin.qq.com/s/Zq0b1F-rjI3XFvnDke5ldA": "每周漏洞情报速览|2026.03.01–03.06", "https://mp.weixin.qq.com/s/BthMPgMT0Ay-UmaR6SeWqA": "Write | RCTF2025-auth复现(含环境搭建)", "https://mp.weixin.qq.com/s/S3ZIVtTjXwFkScou5QyTvw": "一个 GET 请求拿下服务器:CVE-2026-29058 AVideo 命令注入漏洞分析", "https://mp.weixin.qq.com/s/FIhZYEKieRRoRR27w-u58A": "Coruna 深度剖析:一次国家级 iOS 漏洞工具包的逆向之旅", "https://mp.weixin.qq.com/s/OD-G9NvUA7UJn3b2XquQ7g": "Coruna:一套强大 iOS 漏洞利用工具包的神秘流转之旅", "https://mp.weixin.qq.com/s/Mq-UEgEfR60nK13QgsDuvA": "云上的ssrf漏洞挖掘技巧", "https://mp.weixin.qq.com/s/xNriR19COmvebQiGvi3uSA": "【0day】某知名厂商运维安全管理系统 csspost∕update 远程命令执行漏洞", "https://mp.weixin.qq.com/s/iRwMW27c9j_Ikwkq2FoteA": "AVideo平台中的关键零点击命令注入漏洞允许流媒体劫持", "https://mp.weixin.qq.com/s/KEwenwr5hx38TTUgg2Ixww": "思科修复两大CVSS 10分Secure FMC漏洞", "https://mp.weixin.qq.com/s/3EfRbvMoLYBbKPPsvFZF5g": "Android GPU Zero-Day 深度研究—CVE-2026-21385 内存破坏漏洞分析", "https://mp.weixin.qq.com/s/IZGjLnMfaBrZY5w2Pmt4Dw": "【安全圈】高危0day突袭!俄APT28借MSHTML漏洞突破防线,政企紧急戒备", "https://mp.weixin.qq.com/s/VLTRXodn4aYYgpQ3wWZYGQ": "针对OpenClaw(龙虾)近期安全漏洞、风险问题的汇总", "https://mp.weixin.qq.com/s/LaUS29G4qWSZVkANhCd99Q": "403∕405 绕过与未授权深度利用合集|多维度漏洞挖掘实战指南", "https://mp.weixin.qq.com/s/KpnFpw_pHsYKesAravYOXA": "【安全圈】紧急!思科发布最高级别预警,一口气修复48个漏洞", "https://mp.weixin.qq.com/s/qJrvrD2I4vbcB0QqlO9Mog": "【安全圈】重磅!IBM X-Force报告:AI驱动攻击狂飙,勒索软件激增49%", "https://mp.weixin.qq.com/s/bp3lKo60JvAd_ChlhN2Ypg": "129 个漏洞齐发!Google 这份三月安全报告,藏着哪些不能说的秘密?", "https://mp.weixin.qq.com/s/OF5itybz5MPy2AnK_gKvUQ": "上篇 | AI挖Java 0day不再靠运气!这套Skill让审计覆盖率100%、幻觉率趋近0", "https://mp.weixin.qq.com/s/hmwFwWHscRDoNdOU2H2_fA": "OpenClaw革新:漏洞挖掘步入流水线时代", "https://mp.weixin.qq.com/s/2P78j-FGm-mwTmiHlNmFQQ": "Burp Suite平替 | 智能代理、强大插件、集成云端虚拟手机,快速定位APP漏洞", "https://mp.weixin.qq.com/s/BtT_KgcklLCNJJ6nG55bAQ": "Nginx UI 严重漏洞 CVE-2026-27944暴露服务器备份信息", "https://mp.weixin.qq.com/s/35TmJ_QmWp4MxzAT1oUBew": "紧急!思科发布最高级别预警,一口气修复48个漏洞", "https://mp.weixin.qq.com/s/TkiePjXVMg1TF55Mv65_1A": "漏洞预警 | 大蚂蚁即时通讯系统SQL注入漏洞", "https://mp.weixin.qq.com/s/LEXHnjNXizOjKDnnOuK3jA": "2026-03-09 最新CVE漏洞情报和技术资讯头条", "https://mp.weixin.qq.com/s/WuG5S6CRvMgLvgfkB-tFqg": "黑客涉嫌出售针对 Windows 远程桌面服务零日漏洞的攻击程序", "https://mp.weixin.qq.com/s/zjFqLxqN2RBtnDNAJkdLbQ": "第75天-【深度解析】PHP反序列化漏洞:从入门到POP链构造", "https://mp.weixin.qq.com/s/10VcfRS1ZEwm3Fv8e29lFQ": "满分漏洞预警:一行POST请求,2亿患者健康档案门户洞开", "https://mp.weixin.qq.com/s/Ky4eBZY151_FTuz5mPi0RQ": "漏洞预警 | XWiki跨站脚本漏洞", "https://mp.weixin.qq.com/s/Gp_YcYYcbOvyVhDF984lhg": "漏洞预警 | 东胜物流软件SQL注入漏洞", "https://mp.weixin.qq.com/s/k2xR0EA4NlhGw-MO0rSMnw": "搜索框漏洞测试checklist", "https://mp.weixin.qq.com/s/ktw8TmbEg5EoM__EKVpzxw": "Intel处理器安全漏洞频发:芯片巨头的信任危机", "https://mp.weixin.qq.com/s/WW2MYSUFOi5NGhNeiAgeOg": "2025年安全漏洞疯长,但仅1%被用于攻击", "https://mp.weixin.qq.com/s/xvbnJaBmljds-hXVqMjd6g": "一键入侵:ZITADEL 存在严重 CVSS 9.3 漏洞,账户面临完全接管风险", "https://mp.weixin.qq.com/s/A5FONjeVYF7WAlZ2hr4qXA": "黑客公开出售针对 Windows 远程桌面服务0day漏洞(CVE-2026-21533)攻击程序", "https://mp.weixin.qq.com/s/4Op1D0XMnNXMKhCrS6OzDg": "H3C-H100路由器敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s/RIvyXIAQ8Csfnx7fy4Tklw": "多款AI开发工具面临ContextCrush漏洞攻击威胁", "https://mp.weixin.qq.com/s/pilvg1Zr-03SnH1z_ji6cQ": "写文章随便打开一个案例就发现了漏洞,真好玩儿!", "https://mp.weixin.qq.com/s/LiWUI78zDswDhtyTwLi4yQ": "利用大模型分析二进制漏洞-从漏洞补丁到获取SYSTEM权限(CVE-2026-20805)", "https://mp.weixin.qq.com/s/7NHj2RZ5GjhTtKmxfto-lA": "漏洞复现 | NUUO摄像机 handle_site_config.php 远程命令执行漏洞", "https://mp.weixin.qq.com/s/khk36ikIXfqPk1xoNva0ig": "[漏洞复现]某资产管理运营系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s/2U16TqpTD7jvTGamfEJRWA": "用友NC importPml XXE漏洞", "https://mp.weixin.qq.com/s/NOHmQ844yLJh1Pr3gxhyqg": "【服务端漏洞-访问控制缺失-第三章第三节】赏金猎人技巧:别在验证码页面死磕,试试直接跳过它", "https://mp.weixin.qq.com/s/38bPVTHUXB69mMCRXasksA": "3月社区投稿活动 | 漏洞挖掘", "https://mp.weixin.qq.com/s/2bvYbGVkLTQe8fwgzQpdBg": "DudeSuite 漏洞播报 全网漏洞早知道【20260309】", "https://mp.weixin.qq.com/s/iqPYKRKoXdYzcRiIWG5taw": "【AI安全】Unstructured.io 爆出严重漏洞:一个路径穿越导致全系统沦陷(CVE-2025–64712)", "https://mp.weixin.qq.com/s/ySg97z_KDqPI2SnCBHnV4g": "CISA提醒用户注意影响macOS和iOS的已被积极利用的漏洞", "https://mp.weixin.qq.com/s/qnHbJBOGF3RpObvAARJBXQ": "腾讯开源项目现严重 RCE 漏洞:两行请求拿下服务器,CVE-2026-30861 详解", "https://mp.weixin.qq.com/s/BeWRm2XPpO62_VrtlDJe7g": "一款老牌漏洞扫描器!AWVS-GUI已上线、免费开源!!", "https://mp.weixin.qq.com/s/DgB-JaD-TeIES6n3hiN2ew": "【已复现】Nginx UI 未授权备份下载与加密密钥泄露漏洞(CVE-2026-27944)", "https://mp.weixin.qq.com/s/vgDA2w2rC2b-nyirvUyDVA": "OpenClaw安全事件全解析:从RCE漏洞到供应链投毒,AI智能体为何频爆安全问题?", "https://mp.weixin.qq.com/s/kL9JNNDwCzQGqm1wO10tuQ": "【漏洞通告】nginx-ui 未授权备份下载与加密密钥泄露漏洞(CVE-2026-27944)", "https://mp.weixin.qq.com/s/n2qra-Fjtw7WU_pONz-k3w": "【高危漏洞预警】Nginx UI信息泄露漏洞CVE-2026-27944", "https://mp.weixin.qq.com/s/fOnSUruGKSy_qie9c7MoJA": "开源 IAM 平台ZITADEL中存在漏洞,可导致用户账户遭完全接管", "https://mp.weixin.qq.com/s/FHshNfTyn_UxJJFOXHaDBg": "CNNVD | 人工智能重要安全漏洞的通报 - Langflow安全漏洞", "https://mp.weixin.qq.com/s/bBWmGmVuBjaoJvh5JodmZA": "OpenAI发布应用安全智能体:可自主发现、验证并修复漏洞", "https://mp.weixin.qq.com/s/SKEzv5hoDlSdkUVUbe3fmg": "OpenClaw 近期安全漏洞、风险问题汇总", "https://mp.weixin.qq.com/s/QqbmA1thll3IObX6TJNrtw": "从漏洞挖掘到风险治理: AI闭环下的代码安全范式变迁与从业者转型", "https://mp.weixin.qq.com/s/3VIBo87kEX-SCRa6vZB6Zw": "Nginx UI 认证绕过漏洞:备份下载与加密密钥泄露(CVE-2026-27944)", "https://mp.weixin.qq.com/s/icgGp-tLITPKby0NNpO5Hw": "【已复现】Nginx UI 信息泄露漏洞(CVE-2026-27944)安全风险通告", "https://mp.weixin.qq.com/s/34Vw_AjWEGCg8HAYGfFUTA": "CNVD漏洞周报2026年第9期", "https://mp.weixin.qq.com/s/LxTrPtSDECpqH56WAxItSw": "【已复现】漏洞通告 | Nginx UI信息泄露漏洞(CVE-2026-27944)", "https://mp.weixin.qq.com/s/Fb2HDfSo8T-d7WiDpR2rHg": "上周关注度较高的产品安全漏洞(20260302-20260308)", "https://mp.weixin.qq.com/s/YT0z0l3YPtv0BulQLDAD4g": "CNNVD | 关于Cisco Catalyst SD-WAN Manager和Cisco Catalyst SD-WAN Controller 授权问题漏洞的通报", "https://mp.weixin.qq.com/s/agG84LZZ2OXj6PbpTEjQyA": "某友漏洞一", "https://mp.weixin.qq.com/s/Crf-bmyNkhFvX8NlMplhZQ": "效率封神!Claude Opus 4.6联合Mozilla,挖出Firefox 22个全新漏洞", "https://mp.weixin.qq.com/s/ieR5hO8v_zgFNdaNnNU8Xg": "论文研读与思考|YURASCANNER:一种基于任务驱动的大语言模型Web漏洞扫描方法", "https://mp.weixin.qq.com/s/tvinLLCtS71zEC48McrlKA": "记edusrc&src任意用户登录漏洞挖掘技巧", "https://mp.weixin.qq.com/s/QPtq8oYrHL6ZzNwnySlSkw": "【漏洞通告】OpenEMR MedEx 未授权访问导致 API 令牌泄露漏洞(CVE-2026-24898)", "https://mp.weixin.qq.com/s/wSOygQ0TNN5cEoe8zhQMTg": "黑客在暗网高价兜售Windows远程桌面服务0Day漏洞利用程序", "https://mp.weixin.qq.com/s/U3kLC4b253v6gGWScMtE9A": "【已复现】Nginx UI 未授权备份下载与加密密钥泄露漏洞(CVE-2026-27944)", "https://mp.weixin.qq.com/s/ZjFybaR6qh8_Vfh5x86LGw": "零日漏洞(0-day):网络世界的\"隐形杀手\"", "https://mp.weixin.qq.com/s/6tMsGOytCk10Edkeet_2DQ": "Nginx UI 权限绕过与备份解密漏洞?可能RCE哦 | CVE-2026-27944 复现&研究", "https://mp.weixin.qq.com/s/xMlfIAoMHbG8dYPgjrDeFg": "最新Nessus2026.3.9版本主机漏洞扫描∕探测工具Windows∕Linux下载", "https://mp.weixin.qq.com/s/yhRDO4t-mp3leQfGf19e6Q": "Nginx UI 信息泄露漏洞(CVE-2026-27944)(内附exp链接)", "https://mp.weixin.qq.com/s/qmDgdQ9jp7PbyRmSm6uXoQ": "漏洞复现 | Nginx UI 未授权备份下载与加密密钥泄露漏洞(CVE-2026-27944)【附GUI解密脚本】", "https://mp.weixin.qq.com/s/0WAUfsKL-U5SJIhf3zIruA": "CL-UNK-1068组织利用网络服务器漏洞和Mimikatz攻击亚洲关键基础设施", "https://mp.weixin.qq.com/s/hbQ2JIK_enKoD_MvKm7zRw": "腾讯开源项目现严重 RCE 漏洞:两行请求拿下服务器,CVE-2026-30861 详解", "https://mp.weixin.qq.com/s/LEGaygaRfKDqQBG80ST6Lw": "后续:黑客发布“实锤”截图,似复现迪莫纳核设施84分钟攻击链", "https://mp.weixin.qq.com/s/ehTqpNazsPeuBfrleznsDw": "漏洞预警 | Cisco Catalyst SD-WAN身份验证绕过漏洞", "https://mp.weixin.qq.com/s/dQLVGtNVd1uxquNhYy9d4Q": "ZeroLogon (CVE-2020-1472)", "https://mp.weixin.qq.com/s/7DRj_aVCQV7qT9yFQE1ZPQ": "20分钟定位 UAF 漏洞!Claude 4.6 深度审计 Firefox 源码,Mozilla 都惊呆了", "https://mp.weixin.qq.com/s/RMcoTEnBq5xhXN_1eZbLNQ": "漏洞预警 | 天地伟业Easy7文件读取漏洞", "https://mp.weixin.qq.com/s/QKCFy3_LjQyiDmuWafGQWA": "别再手动修 Bug 了!OpenAI 推出 Codex Security:自动建模、沙盒验证、PoC 生成“全家桶”", "https://mp.weixin.qq.com/s/hMECSz_atyDW5sZJYzkCBw": "大多数网络攻击的成功只因1%的漏洞导致", "https://mp.weixin.qq.com/s/nSOluqqG4GavnLBcdnRPdw": "CVE-2026-29000:pac4j-jwt 认证绕过漏洞分析", "https://mp.weixin.qq.com/s/D64YIyr5IpmqvltyK09JOg": "【服务端漏洞-访问控制缺失-第四章第一节】服务员为何会帮你偷后厨的秘密?详解“内鬼”漏洞SSRF", "https://mp.weixin.qq.com/s/qAZ8GvruVGnqbzEj_gyr9A": "漏洞预警 | 深信服运维安全管理系统远程代码执行漏洞", "https://mp.weixin.qq.com/s/ROM-Kgi2J6b1OkoiaCfzrg": "Gogs 存在严重 CVSS 9.3 级漏洞,可将存储库变成恶意软件传播途径", "https://mp.weixin.qq.com/s/HRSOqM2-y2ZopSxCo-RI6Q": "Moodle jsmol.php 任意文件包含漏洞(CVE-2025-34031)", "https://mp.weixin.qq.com/s/6pTXhp1mINZb4Q6O8fRLlA": "Nginx-UI 未授权备份下载漏洞(CVE-2026-27944)", "https://mp.weixin.qq.com/s/DRdG3tOgtk9Pm0n6bGN4sA": "华夏ERP敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s/tkph3tGH0Mj7fjaJXhLkhQ": "【已复现】Cisco Catalyst SD-WAN 身份验证绕过任意文件上传漏洞(CVE-2026-20127)", "https://mp.weixin.qq.com/s/BdU6U_1SFpdE0LsIsUixcg": "OpenAI发布应用安全智能体:可自主发现、验证并修复漏洞", "https://mp.weixin.qq.com/s/7C8OIsYsaSXOL8PZaQutQw": "2026-03-10 最新CVE漏洞情报和技术资讯头条", "https://mp.weixin.qq.com/s/vmlQF1pxim5keu2rNPAOqQ": "CNVD漏洞周报2026年第9期", "https://mp.weixin.qq.com/s/iKcaG321S_Y8eXihFmG5vQ": "Budibase 低代码平台高危漏洞预警:一次请求即可窃取平台全部密钥", "https://mp.weixin.qq.com/s/c7fIhZW4S8ug2U_CxFwROA": "银河麒麟OS安全检测工具 | 资产清点、合规检查、漏洞扫描和报告生成一体化", "https://mp.weixin.qq.com/s/WwdZsX9AdR1Ue1RXQxGJfg": "第88天-Web攻防大揭秘:PHP反序列化漏洞的“隐藏核武器”——Phar深度解析与框架实战", "https://mp.weixin.qq.com/s/FTVlif4n8keZdz6Qb8NVcQ": "买“帮助台”,搭售“远程后门”?SolarWinds Web Help Desk 认证前RCE链深度分析", "https://mp.weixin.qq.com/s/9jKeXBOD1p2X5Wk5brVCnQ": "CNNVD | 人工智能重要漏洞通报(2026年第二期)", "https://mp.weixin.qq.com/s/avSunEJYVI2mihiz2i97Lw": "OpenClaw(俗称“龙虾”)近期安全漏洞与风险汇总", "https://mp.weixin.qq.com/s/rqpWDkEKSQ5aZVB7Tc7Gyw": "工控系统高危预警:台达 COMMGR2 栈溢出漏洞(CVE-2026-3630)CVSS 9.8,无需认证可直接远程执行代码", "https://mp.weixin.qq.com/s/A9SWR1B2oqEwFxxIjjuheA": "雷神众测漏洞周报2026.3.2-2026.3.8", "https://mp.weixin.qq.com/s/pumi000j8cimqk2PCHM68A": "OpenClaw(俗称“龙虾”)近期安全漏洞与风险汇总", "https://mp.weixin.qq.com/s/MdWY4c50KOAVF2Y5THGeMA": "抖省省反爬专测上线!漏洞奖金1000元起步!", "https://mp.weixin.qq.com/s/u-XRSHzzY4WcR4z7WE7UXA": "[高危预警]Nginx UI 未授权备份下载与加密密钥泄露漏洞(CVE-2026-27944)", "https://mp.weixin.qq.com/s/pTqgPu0MOHL9ixHBGVm8Ow": "国家信息安全漏洞库(CNNVD)重要漏洞提示 | 人工智能重要安全漏洞的通报-OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s/5k0U1ESVdf6bDEj87DeRYA": "漏洞挖掘拥抱AI,Openclaw开启新时代", "https://mp.weixin.qq.com/s/POS4H8GWE7DRCZ7MKypl7g": "大疆扫地机器人被曝远程控制漏洞影响全球设备", "https://mp.weixin.qq.com/s/jwa1eFBAnFUamgJ_h7juuQ": "国家信息安全漏洞库CNNVD通报OpenClaw82个漏洞", "https://mp.weixin.qq.com/s/r_s14u2I4Nyr8Yv5KI25tw": "人工智能重要安全漏洞的通报-openclaw多个安全漏洞", "https://mp.weixin.qq.com/s/H4Hl3-d-OIva4JhIUQI_Qg": "信息安全漏洞周报(2026年第10期)", "https://mp.weixin.qq.com/s/nPZf-49fYsHhLUDmgjnJ1w": "快速、轻量级的静态应用代码审计(SAST)工具(支持*30+语言*语义搜索与漏洞检测)", "https://mp.weixin.qq.com/s/uWG7VdX3U7YbUE5g81Kpcw": "火热招生中!系统0day安全-Web框架漏洞挖掘(第10期)", "https://mp.weixin.qq.com/s/LGCavLF_FeSG7m7xQLRcZw": "CNNVD通报丨OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s/vFMzIjX_e5ZMy4jPdPKgNw": "【在野利用】Cisco Catalyst SD-WAN Manager 任意文件覆盖漏洞(CVE-2026-20122)", "https://mp.weixin.qq.com/s/s0UdhJXMEd-9tQSAZMCSGQ": "【附POC及复现环境】Nginx UI 敏感信息泄露漏洞复现(CVE-2026-27944)", "https://mp.weixin.qq.com/s/KK9KI207l8oWIGHgPub9sg": "“龙虾”安全漏洞刷屏,CNNVD提示及时确认是否受到漏洞影响,尽快采取修补措施。", "https://mp.weixin.qq.com/s/XVcT4rLDEkcKel35gIUlyA": "谷歌:2025年90个零日漏洞被利用", "https://mp.weixin.qq.com/s/UYelcDU6fwyj7zOfG-0TQQ": "国家信息安全漏洞库(CNNVD)重要漏洞提示 | 人工智能重要安全漏洞的通报-OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s/DQWWxgOQpT_2NSK7zoAhNg": "一款面向漏洞赏金猎人和移动渗透测试人员的综合性 Android 安全研究工具包。", "https://mp.weixin.qq.com/s/55yMpbfu7DT8-Ak31f0EkA": "发现超高危、高危等漏洞82个!养“虾”户要警惕了", "https://mp.weixin.qq.com/s/5djlPU7kmaMbiKlBFmAxZw": "【安全圈】微软已修复:黑客 22 万美元暗网兜售 Win10∕Win11 高危漏洞", "https://mp.weixin.qq.com/s/9QRgW_uarBFC3jx4Hws5Zw": "国家信息安全漏洞库(CNNVD)重要漏洞提示 | 人工智能重要安全漏洞的通报-OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s/uyWL1X43l86Zy1NtcZTKWA": "一款超强上传漏洞综合测试工具 263 + WAF 绕过Payload(2026-03-09)更新", "https://mp.weixin.qq.com/s/bnYLtwBDq83lTPM56uoOPQ": "C++安全编码手册:十大类39个漏洞点,一篇搞定代码审计(建议收藏)", "https://mp.weixin.qq.com/s/MaJNBRSqtNUp1JoKT_m-mg": "OpenClaw 安全警报激增暴露了 GitHub 和 CVE 漏洞跟踪之间的差距", "https://mp.weixin.qq.com/s/Sw6hvtMN0A-0hYeMhwdLLw": "【漏洞通告】Nginx UI 信息泄露漏洞 (CVE-2026-27944)", "https://mp.weixin.qq.com/s/OJpHQ0zZdBEEc5srgkNk5A": "AI挖Java 0day不再靠运气!这套Skill让审计覆盖率100%、幻觉率趋近0(上篇)", "https://mp.weixin.qq.com/s/Nrwe8dSI435zyScVgT2q4w": "CVE-2025-14297:MLflow 追踪服务器的授权绕过漏洞", "https://mp.weixin.qq.com/s/_c2v3nYAsXF-7M7EKFFWuw": "GHCTF 2025 Escape!复现", "https://mp.weixin.qq.com/s/-PGprNnuu7ChDjjp8byHFQ": "一个字符引发的严重漏洞:CVE-2026-28292 simple-git 远程代码执行分析", "https://mp.weixin.qq.com/s/qBUrqSEpHK5KJW1LKHgDhQ": "国家信息安全漏洞库(CNNVD)重要漏洞提示 | 人工智能重要安全漏洞的通报-OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s/xBOzuQBDVNuou37XH_sKlQ": "注意注意!openclaw(小龙虾)爆出多个安全漏洞", "https://mp.weixin.qq.com/s/kZM97wGxzUNnoSeMHSdbuw": "CVE-2026-31900:一个过于宽松的正则表达式如何在 psf∕black 的 GitHub Action 中导致 RCE", "https://mp.weixin.qq.com/s/URKpC-6Oho9qtMy2VmCXvg": "蠕虫式XMRig挖矿攻击借BYOVD漏洞规避检测", "https://mp.weixin.qq.com/s/5qSIzcZykP52Q30deU6cAg": "国家信息安全漏洞库通报多个OpenClaw安全漏洞;问境AIST首发|以AI治理AI,悬镜原创多模态AIST新品发布| 牛览", "https://mp.weixin.qq.com/s/3g3cMbtm9MJKcaTNnyW3Uw": "微软 SQL Server 零日漏洞允许攻击者提升权限", "https://mp.weixin.qq.com/s/uUZtlX5XMYiLSsDV9ox9wA": "山石安全能力中心|微软2026年3月份漏洞补丁日安全通告", "https://mp.weixin.qq.com/s/BGx80FjRVPVzeHwk-kgdXg": "仅 1 小时 首个腾讯超低危漏洞确认了!!!", "https://mp.weixin.qq.com/s/4zdEJza3YElCuFKZ5XrZhw": "漏洞通告 | 2026年3月微软产品漏洞通告", "https://mp.weixin.qq.com/s/IOKGeuhGOp3aCu5CkYSPyA": "第79天-Web安全攻防:轻松掌握越权漏洞,从入门到实战!", "https://mp.weixin.qq.com/s/vrTMjbj3Tt4yxUB_bl1zyA": "【漏洞复现】0day-大蚂蚁(bigant)即时通讯系统存在文件上传", "https://mp.weixin.qq.com/s/SOK0BUmtvpibRGE8_aofOg": "漏洞复现 | 用友NC OAUserQryServlet 反序列化代码执行RCE漏洞", "https://mp.weixin.qq.com/s/OVPsES6LRERT18GLpSVlRA": "2026-03-11 最新CVE漏洞情报和技术资讯头条", "https://mp.weixin.qq.com/s/1j3qyo2ZLgETOuZgHTITyQ": "动态|国家信息安全漏洞库(CNNVD)人工智能重要安全漏洞通报:OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s/0HiOKZexH070AoOXSFAs9A": "【漏洞通告】微软3月多个安全漏洞", "https://mp.weixin.qq.com/s/FdcgX2CC4_5mlQiHAjPbbg": "信息安全漏洞周报【第064期】", "https://mp.weixin.qq.com/s/EQ5uRkR5m3VA2CSSIxk-Ow": "严重级别满分:谷歌 Pixel 手机底层引导程序曝出提权漏洞 CVE-2026-0124", "https://mp.weixin.qq.com/s/n1AtoiLJEzL3kCKfTFVGmg": "ClaudeOpus4.6发现Firefox22个安全漏洞,AI自主漏洞研究实现关键突破", "https://mp.weixin.qq.com/s/jAidtywFPDF0bC6Xo5ViZQ": "电子宠物“龙虾”(OpenClaw 🦞)偷拍,窃密漏洞复现", "https://mp.weixin.qq.com/s/nmEtpXZPU_qjyiLHTK7zBw": "大海捞针:Openclaw如何革新漏洞挖掘新范式", "https://mp.weixin.qq.com/s/TVYPWslWf5Q9uTLmQobC7Q": "注意!OpenClaw(小龙虾)爆 82 个漏洞!", "https://mp.weixin.qq.com/s/SbEWZifIVAAiOwtBw4HGsA": "通报来了 | OpenClaw多个安全漏洞被国家信息安全漏洞库(CNNVD)通报", "https://mp.weixin.qq.com/s/_3PW6p68A29aBRCuodLauA": "安全小知识-第二十七期_潜伏的威胁:深入理解二次注入漏洞的机制与应对", "https://mp.weixin.qq.com/s/ws8jxmAnin7fPCEaJu7MAA": "注意!近期OpenClaw 82个相关安全漏洞通报", "https://mp.weixin.qq.com/s/GACHoO3UaYFzJqaorcpApA": "Java 代码审计 - RCE 漏洞", "https://mp.weixin.qq.com/s/q_pHGc6HBcCwYPsO_DLqsw": "OpenClaw Exposure Watchboard:OpenClaw实例公网暴露安全监控面板", "https://mp.weixin.qq.com/s/odxZ0LO1AOodD7bHFfVAnQ": "2026-03微软漏洞通告", "https://mp.weixin.qq.com/s/4qTtl3eaVV2jJEkgm0FvUg": "pac4j-jwt 身份验证绕过漏洞", "https://mp.weixin.qq.com/s/I89xzWUy0tBSV7iAARRVww": "天地伟业Easy7 loadAllUserBeans接口存在敏感信息泄露 附POC", "https://mp.weixin.qq.com/s/AQ4tDyAUUyq5dxMlxAa6rQ": "微软2026年3月补丁日安全漏洞风险汇总", "https://mp.weixin.qq.com/s/3-IJtDtO05GsNTI5heo7Mw": "OpenClaw安全公告激增,暴露GitHub与CVE漏洞跟踪体系间的鸿沟", "https://mp.weixin.qq.com/s/bqFf9lnNOsvCzUGRVkjwrA": "小程序 wx.cloud 操作文档型数据库的漏洞挖掘点", "https://mp.weixin.qq.com/s/odkVa4wdd40vUZ1f0CWg6Q": "微软3月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s/wLxiTQBmRUNSog7F0jGO-g": "25000 + 指纹、自动化测试 API∕JS∕ 漏洞+信息收集|一体化 Web 扫描利器", "https://mp.weixin.qq.com/s/Z0f8-_s-66gbmT-YJEGGuw": "天锐绿盾审批系统 findOnlineUserForPage.do 信息泄露漏洞", "https://mp.weixin.qq.com/s/x9enXHPuMukXJF2_rjwvyA": "微软Active Directory漏洞允许攻击者提升权限", "https://mp.weixin.qq.com/s/p2VYZyhZXDKHv-k9vEuyxw": "Linux Netfilter 匿名集合 UAF 漏洞 (CVE-2023-32233) 复现与利用分析", "https://mp.weixin.qq.com/s/Zynnwe4VMePpc3mbVPLuyw": "「神医」专家级智能安全助手,一键检修代码漏洞", "https://mp.weixin.qq.com/s/Nqhb2oBrFCbyqFO0rbyVlg": "微软.NET零日漏洞可导致拒绝服务攻击", "https://mp.weixin.qq.com/s/8o3jBs_FjbzlUm8-BN5J0A": "国家信息安全漏洞库(CNNVD)重要漏洞提示 | 人工智能重要安全漏洞的通报-OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s/imtbcFK6yAlmFcY_nVgSAg": "【风险通告】微软3月安全更新补丁和多个高危漏洞风险提示", "https://mp.weixin.qq.com/s/_9T_k_EMZFTjQkR8O3yznw": "26年春季招生中 | 系统0day安全-IOT设备漏洞挖掘(第6期)", "https://mp.weixin.qq.com/s/QgmiFKREMN3l8jQ1yx8h9Q": "258 个漏洞,你的 OpenClaw 真的安全吗?", "https://mp.weixin.qq.com/s/d22ruVZMwD5PUx4Pg3mlCg": "SRC--并发实战漏洞案例分享", "https://mp.weixin.qq.com/s/Rze0qr9ENVktfpRLoMygiA": "HPE:严重的 AOS-CX 漏洞可导致管理员密码重置", "https://mp.weixin.qq.com/s/IYZLlN3tIn97uAGGzvFvFQ": "青龙面板鉴权绕过漏洞:全流程复现与实操细节", "https://mp.weixin.qq.com/s/uDk9UTGiePGsLaHBEolLzA": "支付类漏洞挖掘技巧总结", "https://mp.weixin.qq.com/s/VggFt_ZIe_7fzi0BDFAg-w": "Langflow CSV Agent 远程代码执行漏洞(CVE-2026-27966)", "https://mp.weixin.qq.com/s/1FCG6fl6Cu4oav3mb6x2MA": "高危漏洞&系统命令执行复现", "https://mp.weixin.qq.com/s/Lo5gUgXZQaDxEI6wcvVr9Q": "告别手动排查!这套安卓APK检测流程,从二维码识别到漏洞挖掘(AI+内置规则)一步到位!", "https://mp.weixin.qq.com/s/3TCBLd6oDrvpQ6cxXgtKxQ": "【安全圈】Windows 系统级漏洞开卖:要价超 150 万元!可获系统级权限", "https://mp.weixin.qq.com/s/by4ePq9_Qky6rWBT1cB0rA": "两高一弱漏洞详情∕POC悬赏征集活动", "https://mp.weixin.qq.com/s/ebEtmh5iEy5Ng5qHM90Wlw": "【漏洞复现】高风险预警!大蚂蚁 BigAnt 即时通讯系统曝任意文件上传漏洞", "https://mp.weixin.qq.com/s/sNfHXEOe_MoMFulYqZ1A6w": "9.4分严重漏洞:电动汽车充电桩后台无需任何凭据即可被完全接管", "https://mp.weixin.qq.com/s/eFlc0BuiKsWKow9waIpbZA": "漏洞预警 | OpenEMR未授权访问漏洞", "https://mp.weixin.qq.com/s/PHzRYO3u_yAgYm8WRneZmA": "DeepAudit:革新代码漏洞挖掘的多智能体AI系统", "https://mp.weixin.qq.com/s/a85eAJ23wM4Ro--69b1kRg": "一个 CSRF,让攻击者无需登录就能拿下服务器——CVE-2026-28495 分析", "https://mp.weixin.qq.com/s/cZmMeDXrC8lRJtkcNZkmSQ": "从漏洞挖掘到风险治理: AI闭环下的代码安全范式变迁与从业者转型", "https://mp.weixin.qq.com/s/WainDoUDeLxLIuqJwFN4nw": "漏洞预警 | 深信服运维安全管理系统密钥硬编码漏洞", "https://mp.weixin.qq.com/s/kguemzZ2rBMUzlo-4eIVSw": "Azure AI 语言会话创作SDK反序列化漏洞:CVE-2026-21531分析与PoC", "https://mp.weixin.qq.com/s/EwA1CuteoZA3uBNWfe5vZA": "OpenClaw(龙虾)曝82个漏洞大汇总!", "https://mp.weixin.qq.com/s/8qdYcfUiMIl7vu5TFoaWmQ": "漏洞复现 | MetaCRM美特crm系统sendmail.jsp接口存在任意文件上传漏洞", "https://mp.weixin.qq.com/s/xJEiiRv4hkribHoEMSAaqA": "Microsoft SQL Server 零日漏洞允许攻击者升级权限", "https://mp.weixin.qq.com/s/_lOm6TtFcgraha75s0Ru2Q": "CVE-2026-26117剖析:Azure Arc本地提权&云身份劫持", "https://mp.weixin.qq.com/s/hMb933IQlhM0-9UqlZLA9Q": "漏洞情报(已验证) | 0Day 九佳易管理系统 UploadHanderForShangPin 存在SQL注入漏洞", "https://mp.weixin.qq.com/s/EXAlKw-E_B3jPcUYiCam4Q": "严重告警:OneUptime 监控平台曝出 RCE 漏洞,低权限用户可接管整个集群", "https://mp.weixin.qq.com/s/zLrFyHMHPNPANNmreqHebQ": "“Mail2Shell”:FreeScout 零点击未认证 RCE(CVE‑2026‑28289)补丁绕过分析", "https://mp.weixin.qq.com/s/_eDX-jwUVx8x_DDJgtTp_w": "【漏洞分析】TongWeb EJB 反序列化漏洞", "https://mp.weixin.qq.com/s/BEWCrSxX9c-wojd04OIG5A": "第82天-致命的疏忽:四种常见的密码找回漏洞,你中招了吗?", "https://mp.weixin.qq.com/s/4kvxVLermJ9U3cDZRL32oQ": "3月社区投稿活动 | 漏洞挖掘", "https://mp.weixin.qq.com/s/X5EYzcGNAEyod1S7FlRkNw": "第81天-一键登录的“后门”?OAuth 认证漏洞攻防实战解析", "https://mp.weixin.qq.com/s/8lkjyJoRK6ZcLE363Z8IFw": "258 个漏洞,你的 OpenClaw 真的安全吗?", "https://mp.weixin.qq.com/s/s4-SHWAzs_Bm2MGXqWxGlg": "华磊科技物流SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s/NaXWmR-uPNZ-fQE6gDj1VA": "技术解析:穿刺CVE-2025-40551补丁实现RCE 美国防机构采用公司SolarWinds旧伤复发", "https://mp.weixin.qq.com/s/fRiYVp2pBo1NqLyIEHLCPA": "DataEase CVE-2025-49002 RCE", "https://mp.weixin.qq.com/s/QNMPbiLX0YCWmO10oOaIjQ": "CVE-2026-29793:一枚藏在 WebSocket 里的 NoSQL 注入", "https://mp.weixin.qq.com/s/cx8XwMdGqxV39e8YOJnJTA": "【安全更新】微软3月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s/MV8MHIMJnPSF_Tb7FPuo0Q": "【已复现】Qwik server$ 反序列化未授权远程代码执行漏洞(CVE-2026-27971)", "https://mp.weixin.qq.com/s/jQeFnXLYCsS9WH2vPT1HbA": "从零开始绕过 DexProtector 加固的 Frida 检测", "https://mp.weixin.qq.com/s/ZxAS_wecokkG56v9VDVWXg": "【已复现】Budibase 平台未授权访问漏洞(CVE-2026-31816)", "https://mp.weixin.qq.com/s/eIgWVHKJWRg0FgT8DiGTRQ": "PageJack实战:CVE-2022-0995漏洞利用详解", "https://mp.weixin.qq.com/s/dKcWYZCPUQIAHhB3rT1XeQ": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s/eIQINBCcBc5I4MCOxy8APQ": "【已复现】Budibase 低代码平台未授权访问漏洞(CVE-2026-31816)", "https://mp.weixin.qq.com/s/qMbo9XXX3DjnFz5QlZOSOA": "【联合活动】春锋猎洞全面启动,DSRC邀您共赴漏洞狩猎场!", "https://mp.weixin.qq.com/s/KGl9Z2W7IFQ39lWLVSum3Q": "82个漏洞、1184个恶意插件:你养的“龙虾”可能早已叛变!", "https://mp.weixin.qq.com/s/d5jBK_3rkBS_pBEP6uLL5Q": "涉及数亿设备、可能存在多年!“窃听低语” 高危漏洞惊现 飞天诚信:不存在", "https://mp.weixin.qq.com/s/isnTq0bI8LQMTBUOrJPs5Q": "Zombie ZIP 漏洞披露:让 WinRAR∕7-Zip 解压报错,已伪装绕过 50 款主流杀软", "https://mp.weixin.qq.com/s/ppcZVw7jrKEwsSyuG8Jl6g": "从“人写漏洞”到“模型复制漏洞”:AI 生成代码时代的软件安全反思", "https://mp.weixin.qq.com/s/1qcnUPr-yOAWuy7aUOgrYQ": "【服务端漏洞-访问控制缺失-第四章第三节】SSRF进阶:从“受限访问”到“内网横移”的实战绕过技巧", "https://mp.weixin.qq.com/s/ImqS_7Dyut54-GL1i3qcpw": "Chrome 安全更新 – 修复 29 个允许远程代码执行的漏洞", "https://mp.weixin.qq.com/s/zocABKUtU5dLHlqwawP-rg": "汇业研究 | 在华外企部署及应用中国版Salesforce的主要法律问题(一)", "https://mp.weixin.qq.com/s/RWhS3O4nCzmeYNVnb7TlQw": "微软Office严重漏洞可导致远程代码执行攻击", "https://mp.weixin.qq.com/s/mrBAqrSWKdvrqyFHwy6I0A": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s/bq_tBtmwqsNT98BFWS6a8A": "CVE项目资金危机解除,全球漏洞生态重获稳定", "https://mp.weixin.qq.com/s/oZlZNVzxLJcc4iIbfoyDpg": "Splunk远程代码执行漏洞使系统易受攻击者任意执行shell命令的攻击", "https://mp.weixin.qq.com/s/DaxHYpWlyL2qxQQZ-LGTJg": "【资讯】工信部网络安全威胁和漏洞信息共享平台发布《关于防范OpenClaw(“龙虾”)开源智能体安全风险的“六要六不要”建议》", "https://mp.weixin.qq.com/s/zkJ1B6feAf9hnNxZSop-Ag": "MetaCRM美特crm系统toviewspecial.jsp接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s/tRk9--ejcby-6r3GeeQCcw": "Juniper Networks PTX 系列产品的关键漏洞允许完全控制路由器", "https://mp.weixin.qq.com/s/2hXHkKRwPJ1DJ7OtyStbtA": "【SRC实战】支付漏洞实战案例", "https://mp.weixin.qq.com/s/kFumEDnSU92irduCfNu4QQ": "【成功复现】Cisco Catalyst SD-WAN身份验证绕过漏洞(CVE-2026-20127)", "https://mp.weixin.qq.com/s/gc3oLeZL8BMC-Ui8lMx4cw": "微软2026年3月份于周二补丁日针对78个漏洞发布安全补丁", "https://mp.weixin.qq.com/s/fXKLYz3-Bgc3ZJadzBDC1A": "【AI安全】细思极恐!OpenClaw 82 个漏洞梳理", "https://mp.weixin.qq.com/s/nxDjtUut7Q5cYyEvdoghow": "AK47 | 一款跨平台的漏洞利用与安全评估工具,内置高级引擎与多种安全扩展模块", "https://mp.weixin.qq.com/s/V5jGrxHttqsVZFYBZ2cucg": "漏洞预警 | 大蚂蚁即时通讯系统远程代码执行漏洞", "https://mp.weixin.qq.com/s/y-Z3Odoa7PjE4mA_3NSWhA": "满分漏洞实录:一个缺失的配置项,如何让 Linux 服务器向所有人敞开大门", "https://mp.weixin.qq.com/s/2CeZxhexjEPSBzeptOCFPA": "常见AI助手的安全漏洞", "https://mp.weixin.qq.com/s/URunXg63wKpBAxl2imM_tQ": "注意“龙虾”OpenClaw这82个漏洞", "https://mp.weixin.qq.com/s/aqpzJBwi-Rk5dJK0gboyEA": "GHSA-qrq5-wjgg-rvqw: OpenClaw 龙虾插件安装路径遍历漏洞分析报告", "https://mp.weixin.qq.com/s/TS4J0EZWlDByZmrFIoEm0g": "漏洞预警 | 东胜物流软件SQL注入漏洞", "https://mp.weixin.qq.com/s/XV-VbZ0HfUlz0j4PGAAlSw": "龙虾OpenClaw漏洞高达82个!", "https://mp.weixin.qq.com/s/-MKjTVHQjcoJuDFUsVm-5g": "第83天-支付漏洞大揭秘:从“0元购”到“无限续杯”,黑客如何薅垮一个系统?", "https://mp.weixin.qq.com/s/uDyMORaaxvWTD3kwFYdrJQ": "漏洞复现 | 用友NC OAContactsFuzzySearchServlet 反序列化代码执行RCE漏洞", "https://mp.weixin.qq.com/s/8JtTj74JdGYz3L_7oPBtlQ": "大多数网络攻击的成功只因1%的漏洞导致", "https://mp.weixin.qq.com/s/UsuKsZV80zuqEwgz7he3fg": "OpenSSH 预认证漏洞暴露 Ubuntu 和 Debian 服务器", "https://mp.weixin.qq.com/s/hVpeDntlUGcYpyZd6XOUDw": "严重警告:Winter CMS 后台权限提升漏洞(CVE-2026-27591)深度解析", "https://mp.weixin.qq.com/s/Y-HlMJbGIwMvLGGVcPxewA": "DarkAngel:全自动漏洞扫描工具", "https://mp.weixin.qq.com/s/XlofPeJeD4WM3Q5BQXSZWg": "Apple为旧版iPhone∕iPad发布紧急安全更新,修复被Coruna漏洞包利用的WebKit漏洞", "https://mp.weixin.qq.com/s/69SOhlYYPxdudj58gGbYEg": "天地伟业Easy7 downloadResource 文件读取漏洞", "https://mp.weixin.qq.com/s/M-dVdYRKGEe0TXqRTbeeiQ": "OpenClaw 漏洞:远程接管你的本地AI助手,只需浏览一个网页", "https://mp.weixin.qq.com/s/cKjR41p66VVPmlBjzMw39Q": "CISA警告称,最高严重级别的n8n漏洞正在被恶意利用", "https://mp.weixin.qq.com/s/BR_OYm1ANph9fjUAutnoKg": "N8n 两个关键漏洞可导致服务器被接管", "https://mp.weixin.qq.com/s/vcu0jPkTWm_eTC-QTtPB5A": "漏洞预警 | Ruijie AP180 Series操作系统命令注入漏洞", "https://mp.weixin.qq.com/s/ac0GhDOJaso-lEvGQa36aA": "0元购漏洞", "https://mp.weixin.qq.com/s/VRyRZeHQWpZbXdxckWk3_Q": "跟风“养龙虾”必看!OpenClaw漏洞缠身,已有万人设备被接管、资产被盗", "https://mp.weixin.qq.com/s/UmjxWv3m-0OkCitrAZL0Rw": "没有 Token,没有 Session,也没关系:一个默认 GraphQL 端点如何让我拿到未授权 RCE", "https://mp.weixin.qq.com/s/6fyrEs5XI5rSd3AC1q69tA": "快普M6 GetCallInfo SQL注入漏洞", "https://mp.weixin.qq.com/s/-6TAQ29hzYcBND7d06TTxw": "九年未被发现的漏洞影响1260万个企业级Linux系统", "https://mp.weixin.qq.com/s/o7dQtYVy25Jg9kGzqHO8ew": "CVE-2026-0866 Cisco ClamAV ZIP扫描引擎绕过漏洞", "https://mp.weixin.qq.com/s/q1Kmy1OtZFXZ6UUjYCSUmA": "汇业研究 | 在华外企部署及应用中国版Salesforce的主要法律问题(二)", "https://mp.weixin.qq.com/s/ZBWyBTSKHvgieQhzbJvAMg": "【已复现】漏洞通告 | Budibase 平台未授权访问漏洞(CVE-2026-31816)", "https://mp.weixin.qq.com/s/aw-GA1OE9jF39kJfaymoWw": "大海捞针:用 LLM 进行漏洞研究", "https://mp.weixin.qq.com/s/J7mPp6fkpVjgqmLrpEBqQg": "一行错误函数调用引发的 OpenSSH 预认证漏洞", "https://mp.weixin.qq.com/s/MdsIGFnd7uAQ3_TXKJkaBQ": "OpenSSH GSSAPI漏洞允许攻击者使SSH子进程崩溃", "https://mp.weixin.qq.com/s/c_Xq2Fm_7titReQ_g2s7FQ": "Bastille 2026年度报告披露:无线漏洞激增威胁企业机密与国家安全", "https://mp.weixin.qq.com/s/FB_iHcOZKMBCSNEo0PNk7Q": "能信安:漏洞通告", "https://mp.weixin.qq.com/s/Ffl5jLNWXgfl9sR0NjzfUg": "【漏洞复现】Weblogic 反序列化漏洞(CVE-2020-2555)", "https://mp.weixin.qq.com/s/6yFRWk5TXZ0JbOAIwbccWw": "孚盟云 AjaxMethod.ashx存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s/8DriYsL_kuG7S3MWajqXPg": "信息安全漏洞周报【第065期】", "https://mp.weixin.qq.com/s/YTeHwb_Ke4BaUKChnsp7bg": "速修!泛微Ecology10多个远程代码执行漏洞", "https://mp.weixin.qq.com/s/OF8otz5akkZYNPDgeIgVUg": "3月社区投稿活动 | 漏洞挖掘", "https://mp.weixin.qq.com/s/zf0ySQLGHtZ2rPf8NxPaMQ": "手把手教你学会代码审计之命令注入漏洞", "https://mp.weixin.qq.com/s/uJ8ieJSyJHQTjjGD_g7OOw": "荣耀蝉联!国舜科技入选工信部车联网产品安全漏洞专业库2026技术支撑单位", "https://mp.weixin.qq.com/s/HQTxsKqmg2RyTN4t2UFb6Q": "【已复现】FortiClientEMS 无需认证 SQL 注入漏洞可致远程命令执行 (CVE-2026-21643)", "https://mp.weixin.qq.com/s/oWACmtuekJbKqV-fj8a07Q": "Clawdbot∕Moltbot∕OpenClaw 一键远程代码执行 PoC 🦞 (CVE-2026-25253)", "https://mp.weixin.qq.com/s/xWBVPed0h9a1_fWRWilahA": "【服务继续升级】EnhancerSec第六期漏洞挖掘培训招生啦!(文中抽奖)", "https://mp.weixin.qq.com/s/3c4bnyyQl2TiXk6lvSSpyA": "DudeSuite 漏洞播报 全网漏洞早知道【20260313】", "https://mp.weixin.qq.com/s/jLqXsP_NcPHJ_7YfmIb-1g": "【工具箱梳理】nday利用篇-第一期", "https://mp.weixin.qq.com/s/2jqB1LR8abCzrTERlZ8MoQ": "荣耀邀你「三月争锋」:提交漏洞,赢荣耀500手机!", "https://mp.weixin.qq.com/s/_9tVqFxezy-OXgr1lNf8fw": "AI串联漏洞攻陷招聘平台,伪装特朗普索要数据权限", "https://mp.weixin.qq.com/s/6cofZyvgwoMDvZRMT6rsOQ": "CVE-2026-27944 Nginx UI 权限绕过漏洞复现", "https://mp.weixin.qq.com/s/T54C-EJg2bwgrrTmz8kIIg": "思科修复多个高危 IOS XR 漏洞", "https://mp.weixin.qq.com/s/FD5S9icanZ5ynByYkmEPsA": "叮~你有新的速递!CVE-2026-25253 OpenClaw远程代码执行漏洞(速查)", "https://mp.weixin.qq.com/s/EZNxVSlk8ihwiJ2yWcJYlA": "【复现】OpenClaw远程代码执行漏洞(CVE-2026-28466)", "https://mp.weixin.qq.com/s/Z-eBavXSE5cxRXI3yowgAQ": "Splunk高危RCE漏洞可致服务器被完全控制", "https://mp.weixin.qq.com/s/TvZoFPQRVgt63E2nvOE9AA": "SRC漏洞挖掘经验和技巧分享(一)", "https://mp.weixin.qq.com/s/_SVBWccyLKKl17kVnluF7Q": "Chrome 零日漏洞已被恶意攻击者积极利用,用于执行恶意代码", "https://mp.weixin.qq.com/s/ScUULbE9xRfcwNhDoXTYig": "MCPHub 高危漏洞实录:零凭证访问与授权后命令执行", "https://mp.weixin.qq.com/s/e1S1lU1uRBrNvimioDuC-Q": "黑掉你龙虾(OpenClaw)的竟然是另一个AI?一键RCE漏洞浅析", "https://mp.weixin.qq.com/s/lf7UZ_kOQQpuIjk4tEvZgA": "【服务端漏洞-访问控制缺失-第五章第一节】服务器失陷往往从一个文件开始:文件上传漏洞攻防实战", "https://mp.weixin.qq.com/s/LiiV4KLNxekXgnht-FPrWg": "联发科芯片曝严重安全漏洞:45秒即可窃取手机PIN码与加密资产", "https://mp.weixin.qq.com/s/36y6JLM4wwIzE0XEQMHLng": "OpenClaw | CVE-2026-25253 RCE 漏洞 POC", "https://mp.weixin.qq.com/s/KhCZ0qkNIl7mPbWRzd_mXA": "漏洞速递 | CVE-2026-28466 OpenClaw小龙虾RCE漏洞(建议自查)", "https://mp.weixin.qq.com/s/eGIBIGvlRRzD5hqb_VYe-Q": "n8n 严重漏洞可导致RCE和存储凭据暴露", "https://mp.weixin.qq.com/s/Wbgp4Oq3muPXNKCN1Kpj2w": "【已复现】泛微Ecology10存在未授权远程代码执行漏洞", "https://mp.weixin.qq.com/s/skH3iBOmLiWiUpsBGvkw8g": "信息安全漏洞预警(2026年3月9日-3月13日", "https://mp.weixin.qq.com/s/2QDd_lNpsYjG16wxxWteKg": "记一次企业src漏洞挖掘连爆七个漏洞!", "https://mp.weixin.qq.com/s/lcsXhaBMMe-t6Tuqfp3xZA": "CNNVD通报微软多个安全漏洞", "https://mp.weixin.qq.com/s/13lZ6yeDA0uUd26ySWyR4A": "苹果发布紧急 iOS 15.8.7 更新以阻止“Coruna”漏洞利用工具包", "https://mp.weixin.qq.com/s/ni4sHQS8eoXlO0R3HdAmuA": "新手小白入门SRC漏洞信息收集分享", "https://mp.weixin.qq.com/s/2tKiLXsB9vW-nBDUvJKrsw": "孚盟云CRM AjaxFormDefault.ashx接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s/H8tVgITjIPOzBGp93q1DMA": "【复现】OpenClaw远程代码执行漏洞(CVE-2026-28466)", "https://mp.weixin.qq.com/s/Jm-w0jTDfp_Ibrn7Eaa5cg": "【高危漏洞预警】泛微Ecology10未授权远程代码执行漏洞", "https://mp.weixin.qq.com/s/XAYNNpCwzU3gTS4VkxUqAA": "【漏洞复现】OpenClaw(“龙虾”)远程代码执行漏洞(CVE-2026-28466)", "https://mp.weixin.qq.com/s/eGPlclOdSBj9z8LqsjiovA": "SiYuan 任意HTTP请求漏洞 | CVE-2026-32110 复现&研究", "https://mp.weixin.qq.com/s/dFxGei4ZyZ3h6NB2t0JKoA": "最低权限也能拿下备份服务器:Veeam 高危漏洞 CVE-2026-21708 分析", "https://mp.weixin.qq.com/s/7PdW2uDag3V7ZXr-BXIKfQ": "Windows辅助功能权限提升漏洞CVE-2026-24291分析", "https://mp.weixin.qq.com/s/Um3C72LMcgW0ZCf1lM_bkA": "微软确认 Windows 11 24H2∕25H2 版本漏洞导致无法访问系统盘 C 盘", "https://mp.weixin.qq.com/s/XJbD3-1rQDdPFFT3foe_6A": "未来Esn如何在逆向工程和漏洞研究领域保持技术领先", "https://mp.weixin.qq.com/s/SJjK_gOT9nMBJt1hs983Dw": "CTF和实战可用-文件上传漏洞检测专业工具:UploadRanger", "https://mp.weixin.qq.com/s/y5hb5ynMd8UDeWrHdRALaw": "安全热点周报:n8n 严重安全漏洞已遭利用,仍有 24700 个实例处于暴露状态", "https://mp.weixin.qq.com/s/frmbp0iZz3oF9JLHHDDbfg": "0 Day警报:Android 高通 MSM 内核——自 2025 年 12 月起存在利用漏洞", "https://mp.weixin.qq.com/s/5fOOS_Wr6ATQrK1WtZ23kw": "xingrin:自动化资产发现与漏洞扫描工具", "https://mp.weixin.qq.com/s/Hmn55aV81YkzArQMYi9_Cw": "LeakyLooker:一组允许利用Google Cloud数据的高危Looker Studio漏洞", "https://mp.weixin.qq.com/s/UzktGT1fASGI-hg_WL2Tfg": "SRC漏洞挖掘经验和技巧分享(二)", "https://mp.weixin.qq.com/s/ZNH6rtM4Z6BWRQRa6nBlZg": "第85天-从“盲猜”到“必中”:Fuzzing与并发漏洞的奇袭之道", "https://mp.weixin.qq.com/s/20cGbMdmzDMXZ_m241Z3zg": "两周挖出 22 个 Firefox 漏洞:Anthropic 把 AI 推进了浏览器安全实战", "https://mp.weixin.qq.com/s/jBLcHxq4BnzNUUXnMydYBg": "每周漏洞情报速览|2026.03.07–03.13", "https://mp.weixin.qq.com/s/8EdjLfarhbD7D507AgEpVA": "EnGenius EnShare usbinteract.cgi 命令执行漏洞(CVE-2025-34035)", "https://mp.weixin.qq.com/s/I8TFTKeK1xpgR79LvBDYTA": "国产开源 BI 工具 DataEase 曝高危 SQL 注入漏洞,无需登录即可拖库 CVE-2026-32137", "https://mp.weixin.qq.com/s/lvxJBAgGdTsv1HAkgF_sXA": "楼宇控制系统现高危漏洞,攻击者可无需密码获取设备最高权限CVE-2026-28252", "https://mp.weixin.qq.com/s/KwCcRX1gOoC7ECkINgj4eg": "海外漏洞赏金入门指南:2026初级猎人成长路线图", "https://mp.weixin.qq.com/s/Khu-yn1L3N3BHqer2LXdhQ": "当你打开一个陌生网页,你的代码库密钥可能已经被偷走了CVE-2026-28792", "https://mp.weixin.qq.com/s/-tsHUkzrbitz1tnIS0X1jQ": "【服务端漏洞-访问控制缺失-第五章第二节】漏洞分析:文件上传功能中,那些“想当然”的设计是如何酿成大祸的", "https://mp.weixin.qq.com/s/wyLlS99bpasR83J0a1SPRQ": "漏洞复现 | 用友NC OAUserAuthenticationServlet 反序列化代码执行RCE漏洞", "https://mp.weixin.qq.com/s/oaK2D4KUDIzynzoelSOZbw": "【安全圈】紧急预警!Chrome再曝两个高危漏洞已被在野利用", "https://mp.weixin.qq.com/s/IHweiTB_-tjD45pb5OzzmA": "谷歌紧急发布Chrome浏览器安全更新,修复两个高危零日漏洞", "https://mp.weixin.qq.com/s/Hk80EXyFWsd1ypA3eakxow": "苹果发布iOS 15.8.7紧急更新以抵御\"Coruna\"漏洞利用工具包", "https://mp.weixin.qq.com/s/xEgN3HepCavuRNnWCYMoIA": "Metasploit Pro 5.0.0强化红队攻击能力,直击AD CS漏洞", "https://mp.weixin.qq.com/s/f4xaKqwVt6j4rL76F2F3NA": "HGAME 2026复现", "https://mp.weixin.qq.com/s/VSZeNssieCssedz6Im4eLQ": "苹果紧急发布iOS 15.8.7更新以防御“Coruna”漏洞利用工具包", "https://mp.weixin.qq.com/s/7_irlfOZc6r875ssacXbxw": "【大洞速修】http协议、chrome浏览器等组件严重漏洞披露", "https://mp.weixin.qq.com/s/P6D3qIFOJSMcq0uKRzhZzw": "看见一篇支付宝大厂存在严重漏洞?纯纯搞笑罢了", "https://mp.weixin.qq.com/s/0165k-v2sSdn2xy9uPUndg": "【安全圈】3月漏洞风暴:思科48个洞、微软83个CVE,这个月不太平", "https://mp.weixin.qq.com/s/4H2BJWdfiCUVV_tZz9AOUQ": "CVE推送服务:零成本实现漏洞情报自动化监控", "https://mp.weixin.qq.com/s/X5Cn2GUQnNbDH7kNQ4ZbpA": "【S-SRC培训开课】开局就送0day~", "https://mp.weixin.qq.com/s/0nu0J9f0pKhIINkOGeOQvQ": "谷歌修复了两个在攻击中被利用的Chrome零日漏洞", "https://mp.weixin.qq.com/s/noCqXs9NcfwTzczVbrYD-Q": "微软发布紧急补丁修复 Windows 11 中的关键 RRAS 远程代码执行漏洞", "https://mp.weixin.qq.com/s/SFTs_ZXg4uKwjhkrzi5STg": "WordPress 插件再现高危漏洞:CVE-2026-22193 SQL 注入可致数据库被完全读取", "https://mp.weixin.qq.com/s/RDcmpVNkUQI2yS4tF-EaLA": "Web3安全之我是如何和两百万美金擦肩而过的-VeilCash分析复现", "https://mp.weixin.qq.com/s/C4s0bqtNWlEpArsjmvFPig": "漏洞复现 | Optilink管理系统 gene.php 存在远程命令执行漏洞", "https://mp.weixin.qq.com/s/urt3RHl_aZmviPshOcwo4w": "【复现】OpenClaw远程代码执行漏洞(CVE-2026-28466)", "https://mp.weixin.qq.com/s/Uxc8INFqSLTcuVcmx48Ymg": "微软发布 Windows 11 热修复补丁修复 RRAS 远程代码执行漏洞", "https://mp.weixin.qq.com/s/JAE9EYRzyZzVJ5Z6WqH4Pw": "紧急警报!俄罗斯APT28滥用零日漏洞CVE-2026-21513,MSHTML成攻击突破口,LNK文件藏杀机", "https://mp.weixin.qq.com/s/vEwhAMbP35cj4mh5-QstLQ": "工业网关惊现高危漏洞,全球逾21万台设备面临凭据失窃风险 CVE-2026-25818", "https://mp.weixin.qq.com/s/uuRb5m5h4fuGdyqXN7Xzdw": "万户 ezOFFICE checkSQL_httprequest.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s/9OGta9F1Fczat5JejLZuKA": "沙箱不是保险箱——SandboxJS 连环沙箱逃逸漏洞深度解析(CVE-2026-26954)", "https://mp.weixin.qq.com/s/zq-gIt-WuRS4X6n67838hg": "工业网关高危漏洞预警:CVE-2026-25823 无需认证即可实现远程代码执行", "https://mp.weixin.qq.com/s/HAbGAceFMzwEjKTrqHmaNQ": "紧急预警!OpenClaw(小龙虾)爆高危漏洞,速看修复指南", "https://mp.weixin.qq.com/s/JVZQKSAqnSMfuzo-B6zuwA": "渗透小白必看:10个实战漏洞,一学就会、一测就中", "https://mp.weixin.qq.com/s/yxojaA5Hc6XJmd-igFRZ0A": "实操干货!检测购物网站是否存在支付漏洞", "https://mp.weixin.qq.com/s/R3G_f75biUYOC9slLqqz9Q": "OpenClaw(龙虾)近期高危漏洞&风险大盘点!", "https://mp.weixin.qq.com/s/lkvRW9wFKyUPQUlnHkI3pQ": "【服务端漏洞-访问控制缺失-第五章第三节】从0到1:文件上传漏洞之Content-Type绕过实战解析", "https://mp.weixin.qq.com/s/a7ZuFMiKJV-HrN1flL_cQw": "潜伏二十年:CVE-2025-38617 Linux内核竞态漏洞的极致利用", "https://mp.weixin.qq.com/s/JmRKDKq0GZYTXPtZJ11WZg": "手把手拆解:小程序∕Web端加密鉴权绕过案例全复现", "https://mp.weixin.qq.com/s/6wR0lo_wJ3ZcABqaIxp6Pg": "伊朗Hacker攻击美国:利用文印管控软件PaperCut漏洞", "https://mp.weixin.qq.com/s/hSUIOxEbbIcDMM-QHuJkeA": "Linux AppArmor模块曝九大漏洞,可致提权及绕过容器隔离", "https://mp.weixin.qq.com/s/1Ig16PXYt_g21_S_QI9P3Q": "代码审计 | 九佳易ERP漏洞分析", "https://mp.weixin.qq.com/s/3aUFaPqTswWqCxMq57ritQ": "OpenClaw AI Agent漏洞可导致提示词注入攻击与数据窃取", "https://mp.weixin.qq.com/s/FwT9gwksuumFjtZJxni0iQ": "记一次SSRF+文件上传组合拳:复盘我是如何组合漏洞一步步Getshell的", "https://mp.weixin.qq.com/s/3VjysQ6W--H1alv2tcRACQ": "Zyxel警告称,十几款路由器存在严重远程代码执行漏洞", "https://mp.weixin.qq.com/s/JMQ96xrHaEmx7TPCrz5e5w": "深科特LEANMES系统WarehouseCheck.ashx接口存在SQL注入 附POC", "https://mp.weixin.qq.com/s/tOY4NUdoJmafSaBvJy1iSg": "多个小程序漏洞挖掘与利用思路分享|带你从 0 到 1 挖小程序漏洞", "https://mp.weixin.qq.com/s/duL-47kgsjKv6JyZaiF53g": "Tenable 揭露“LeakyLooker”漏洞,将 Google Looker Studio 变成云端后门", "https://mp.weixin.qq.com/s/XecSE810kfb1YKFV423z0w": "2026-03-16 最新CVE漏洞情报和技术资讯头条", "https://mp.weixin.qq.com/s/lmbPX8bnKrVHf2vnduMWFA": "OpenClaw AI Agent漏洞可导致提示词注入攻击与数据窃取", "https://mp.weixin.qq.com/s/bCXVIy5Tal-17VnPMdX1Ig": "漏洞预警 | 1Panel跨站脚本漏洞", "https://mp.weixin.qq.com/s/AbSNFCnWG-rcMGDs5_hWkg": "为什么你挖不到漏洞?从“无效努力”到“高效出洞”的思维跃迁", "https://mp.weixin.qq.com/s/a3fR9t4d9ypoWl3aEHAjlA": "记一次某EIS办公平台0day挖掘审计过程", "https://mp.weixin.qq.com/s/YOo4H46BlBPYH9pyBm9Kcg": "微软发布 Windows 11 开箱即用热补丁修复 RRAS 远程代码执行漏洞", "https://mp.weixin.qq.com/s/n5Ju61toL8N3ClCTI32Bww": "API Fuzz结合AI实战获取数据库密码漏洞-实战证书站案例", "https://mp.weixin.qq.com/s/ImPWAvO2ri-Op3fMnBAOlQ": "专业的文件上传漏洞检测工具 | 支持263+绕过技术、代理抓包、动态扫描", "https://mp.weixin.qq.com/s/LgmCW93MQZKzBqQyNMFGxw": "LoveJS插件——Web漏洞挖掘的高效信息搜集利器", "https://mp.weixin.qq.com/s/NgRFkweMeJQceQiiCZDOig": "漏洞预警 | 深信服运维安全管理系统远程代码执行漏洞", "https://mp.weixin.qq.com/s/q4P9saf4szvJvRgtb3e7sg": "我是如何利用 AI 实现 Xray POC 自动转换的", "https://mp.weixin.qq.com/s/Pzijdm9pO5ZnvsAAQP6PzQ": "OpenClaw AI Agent漏洞可导致提示词注入攻击与数据窃取", "https://mp.weixin.qq.com/s/LFbpV6n3YVW2vG5S1oII3A": "【服务端漏洞-访问控制缺失-第五章第四节】挖洞实录:一个Content-Type验证缺陷,让我拿到了服务器的敏感信息", "https://mp.weixin.qq.com/s/LI0nV1uKKV2h7rl17FoXVg": "漏洞复现 | 飞企互联OA ChangeBGServlet 存在任意文件上传漏洞", "https://mp.weixin.qq.com/s/iXz1z8TuckMCpkFfHIfcjw": "微软将在发现严重远程代码执行漏洞后阻止 Windows 11 和 Server 2025 的自动安装", "https://mp.weixin.qq.com/s/JOagDCRym8AfRCuCr7CvSA": "我如何用 30 天追逐一个 4 万美元漏洞赏金,以及我用血的教训学到的东西", "https://mp.weixin.qq.com/s/cCx2IDH5KBfpo6oM7ycz7g": "LnkMeMaybe - CVE-2026-25185 深度剖析", "https://mp.weixin.qq.com/s/myHG1YBGZVGKuRT1HioUQQ": "OpenClaw安全防护工具(小龙虾漏洞检测)", "https://mp.weixin.qq.com/s/JowvJWR10G5B2oqlJBkrbQ": "堆叠你的武器库:逻辑漏洞如何变现", "https://mp.weixin.qq.com/s/jp_NtEeIdGF-ea0m-NrnrQ": "3月社区投稿活动 | 漏洞挖掘", "https://mp.weixin.qq.com/s/jnYusEAwGGQpIyOW1lFqwA": "edusrc某学院联奕系统漏洞通过常规测试手段拿下9rank", "https://mp.weixin.qq.com/s/e1vcBZglNIj8NWqC907ZjA": "Claude Code、Gemini实测暴露漏洞,仍在重复十年前安全错误;中国互联网金融协会:关于OpenClaw在互联网金融行业应用安全的风险提示|牛览", "https://mp.weixin.qq.com/s/KxpSqvBI7RsoK_p9siymXw": "快普M6 GetPositionOfStaff sql注入漏洞", "https://mp.weixin.qq.com/s/jv6H39mFH9gglbcCxipd2Q": "将超出漏洞范围的 HTML 注入升级为高危 9.3 分 XSS 漏洞(绕过 WAF)", "https://mp.weixin.qq.com/s/F-PLgFH917jG3JAbjcMgyA": "【复现】泛微 E-cology10 远程代码执行漏洞风险通告", "https://mp.weixin.qq.com/s/h59qNs4zbGVaHUgVcK5obA": "[ 深度洞察 ] 自动驾驶时代的黑客:Shannon 如何将“漏洞扫描”升维为“全自动渗透”?", "https://mp.weixin.qq.com/s/E1zb8_RV3oF5aEU0_Yrw4A": "【已复现】OpenClaw WebSocket共享令牌权限提升漏洞(QVD-2026-13829)安全风险通告", "https://mp.weixin.qq.com/s/1CQiy74TQhtIGTH6ssAhiA": "上周关注度较高的产品安全漏洞(20260309-20260315)", "https://mp.weixin.qq.com/s/kmUUyCTw4kIBgUp4WapOtg": "本月目前的瓜:AI龙虾爆雷、零日漏洞频发、黑产遭重创", "https://mp.weixin.qq.com/s/foNbn5x8HOH2vb4_ERoR3A": "白帽黑客发现Injective中危及5亿美元资产的漏洞,仅获5万美元奖励且尚未支付", "https://mp.weixin.qq.com/s/36x_CgbTO9qJvEG7ZGBKbw": "WatchVuln_Web高价值漏洞采集与推送", "https://mp.weixin.qq.com/s/--iIVURpHM60oJRgs8srYg": "【已复现】泛微 E-cology10 多个远程代码执行漏洞", "https://mp.weixin.qq.com/s/qwvE_nsegyb7EJkP7eXyxQ": "软件系统安全赛-Thymeleaf 3.0.15 视图名注入 + PRNG 逆向:完整 RCE 到 Root 提权", "https://mp.weixin.qq.com/s/M2Yv6hI9yvQiWMh7AFUHIw": "为什么你挖不到漏洞?从“无效努力”到“高效出洞”的思维跃迁", "https://mp.weixin.qq.com/s/ytnp0zEheE7daYx6UPIqug": "【已复现】泛微 E-cology10 多个远程代码执行漏洞", "https://mp.weixin.qq.com/s/Djio84K_H0NHbMT8Xuu2mQ": "【漏洞通告】Google Chromium V8 内存越界代码执行漏洞(CVE-2026-3910)", "https://mp.weixin.qq.com/s/axqS8Tq_4-vC8Q21eVT11A": "某火cai票娱乐城系统存在前台任意文件上传漏洞", "https://mp.weixin.qq.com/s/jNYvo5VzlB_stC6ee09UuQ": "OpenClaw 新型绕过漏洞,上榜企业必修安全漏洞清单", "https://mp.weixin.qq.com/s/fBZWaB8u3LGqnYnD8757VQ": "谷歌2025年发放了近1.2亿元漏洞赏金,单个漏洞最高奖励170万元", "https://mp.weixin.qq.com/s/yYk0iISgFMyT4NiZlml5Fw": "【Web安全】PHP反序列化漏洞", "https://mp.weixin.qq.com/s/LvfU-s775n5ZgDbZ_0IuPw": "CNVD漏洞周报2026年第10期", "https://mp.weixin.qq.com/s/xsLdkar6psjT-rt536JMyw": "OpenClaw node.invoke Rce(CVE-2026-28466)", "https://mp.weixin.qq.com/s/PRLdI60J7e52al730pJbig": "OpenClaw 新型绕过漏洞,上榜企业必修安全漏洞清单", "https://mp.weixin.qq.com/s/j0ZOcjFFK_6sThi4VdX6gA": "JNDI注入攻防全解析:从低版本RCE到高版本绕过分析", "https://mp.weixin.qq.com/s/N_Zw4ij-92O2MeHFRlIoAw": "OpenClaw 满分漏洞:WebSocket 共享认证越权可接管平台", "https://mp.weixin.qq.com/s/N7qGcpZmz_Wj34BrI3B7fg": "一款专业的Web安全扫描工具 | JS敏感信息收集、API端点提取、API文档解析、页面爬取、子域名发现、漏洞测试、WAF检测与绕过、JS代码分析", "https://mp.weixin.qq.com/s/GP0IO9UfMnwsHgNMguKfhw": "Linux AppArmor出现CrackArmor漏洞,未授权用户可提升至root权限", "https://mp.weixin.qq.com/s/WMPLPQiqK4kogMhUq_U75A": "CVSS 10.0 严重缺陷 SandboxJS 漏洞授予完全远程代码执行权限", "https://mp.weixin.qq.com/s/5j_PvWjRUEcEqDo4o53FwA": "《一文讲透:漏洞管理》", "https://mp.weixin.qq.com/s/JUJWTpeENGCqYY1jJDSaXQ": "OpenClaw 权限提升漏洞:基础权限竟能反客为主?你的宿主机可能已被“远程接管”", "https://mp.weixin.qq.com/s/OH6S69pgoWjpiZk6AZP7mA": "记一次edu证书站小程序漏洞挖掘", "https://mp.weixin.qq.com/s/ntvP6M6-LovFzbrjEWpeZg": "【成功复现】Nginx UI信息泄露漏洞(CVE-2026-27944)", "https://mp.weixin.qq.com/s/fPV7gY8igWe5ZwEblKYE6A": "3月社区投稿活动 | 漏洞挖掘", "https://mp.weixin.qq.com/s/KlhzzbKoClw3jGjw6wWt9A": "WatchVuln二开版:Web化管理漏洞情报推送(集成9大漏洞库+支持10+推送渠道)", "https://mp.weixin.qq.com/s/9o0MnwRuYxT3b3S903CS-A": "WordPress sql注入(CVE-2025-1323)", "https://mp.weixin.qq.com/s/iTw2xQq7WvtCuMavSThmCQ": "【重磅福利】升级首月奖励翻倍,漏洞奖励直接加码!速来冲榜!", "https://mp.weixin.qq.com/s/5sxMdxWVmgcL6cwkjVLsTg": "路由器把 IPv6 地址当密码用:Tenda AC8 认证绕过漏洞分析", "https://mp.weixin.qq.com/s/lVWQQUIj7U4AB4c7ZXfAIg": "安全预警|校园小程序高危 SQL 注入漏洞曝光,师生信息安全需警惕!", "https://mp.weixin.qq.com/s/3Z7LIkvVeEUlZB-Ykg9VjQ": "【漏洞通告】OpenClaw WebSocket共享令牌权限提升漏洞", "https://mp.weixin.qq.com/s/k2bJ3e2YN1L-vBt5rWOjOQ": "【附全网首发POC】CVE-2026-1994 WordPress管理员密码修改漏洞 复现及漏洞环境", "https://mp.weixin.qq.com/s/DDb5XYatRTEik_7D-lTIoA": "API安全漏洞挖掘指南:40种真实世界漏洞模型", "https://mp.weixin.qq.com/s/RIKbJTrM0hC0UTRtxuiyig": "安全通告丨网络安全漏洞通告(2026年3月)", "https://mp.weixin.qq.com/s/VTwfSeLy2X8BsWlGSwAnpQ": "CISA:Wing FTP 已遭利用漏洞可泄露服务器路径", "https://mp.weixin.qq.com/s/2XeK9bJ9cGCNTJ2N_x_I0g": "CVE-2026-1312: Django order_by结合FilteredRelation使用导致的SQL注入漏洞", "https://mp.weixin.qq.com/s/HUbkCUNstiF1yUHIe68hrw": "【高危漏洞预警】Libucl UCL输入处理漏洞 (CVE-2026-0708)", "https://mp.weixin.qq.com/s/aeqFZmUUHrL0u3lT3zC9vg": "DriverExplorer:一个面向 Windows 驱动分析与管理的实用工具", "https://mp.weixin.qq.com/s/DmuvQpCwUunHsqJDjGXEgA": "任我行协同CRM系统SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s/xUxIpedjXyiYnSRIeUWokw": "【服务端漏洞-第六章第二节】命令注入总挖不到?那是你没搞懂这些符号的用法(附实战验证)", "https://mp.weixin.qq.com/s/fmmJcpO-w0cjmMOffNzeNQ": "漏洞预警 | Google Chromium V8 内存越界漏洞", "https://mp.weixin.qq.com/s/BFYck8NEH0NyTahJnS1AfA": "【已复现】泛微E-cology10 远程代码执行漏洞(QVD-2026-14149)安全风险通告", "https://mp.weixin.qq.com/s/f1YxrfcFH79sY6rrRcAZbA": "漏洞预警 | 深信服运维安全管理系统远程代码执行漏洞", "https://mp.weixin.qq.com/s/OjwM0zz0V7TdVRKeKat0Bg": "Perfex CRM 高危漏洞分析:未授权反序列化导致远程代码执行", "https://mp.weixin.qq.com/s/YI_N9EUNR4-7x2ZQ9potzA": "一款专业的Web安全扫描工具 | JS敏感信息收集、API端点提取、API文档解析、页面爬取、子域名发现、漏洞测试、WAF检测与绕过、JS代码分析", "https://mp.weixin.qq.com/s/tY7GS1oQukcLHVWZqFCLmQ": "Chrome Gemini AI组件曝高危漏洞,可劫持摄像头与麦克风", "https://mp.weixin.qq.com/s/V2lWrxB2DFf1_ecui3Xo1g": "误报率80%→10%、两周100+0day......安恒这场“AI原生代码审计”直播藏满硬核干货", "https://mp.weixin.qq.com/s/fOqjVNRJzYpsp1qU2LvYuA": "【SRC实战】实名验证接口滥用漏洞", "https://mp.weixin.qq.com/s/N2sbmdfsY7_srqS187XXVA": "畅捷通TPlus FormReportOperateAction.aspx接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s/sPkGyqAVgvU-yyIKhppQYA": "接口删了也能打!群杰印章物联网平台反序列化漏洞修复绕过思路", "https://mp.weixin.qq.com/s/baPljEtfg-hMtS7LAn5aCg": "实战 IoT 漏洞挖掘—小米 C400 摄像头", "https://mp.weixin.qq.com/s/x7XTbPyq-pbLYNJR5qg9MQ": "工具分享 | Java反序列化漏洞Gadget Chain可视化图谱工具", "https://mp.weixin.qq.com/s/_HIk2H3YB1o0kY_0ZD2T9A": "安全小知识-第二十八期_白帽子挖漏洞的思维破壁", "https://mp.weixin.qq.com/s/Hiqkttfy6hNisWR8voF0Yg": "这类漏洞危害有点低,SRC 好像不收录!", "https://mp.weixin.qq.com/s/Jwvt-KVDm8cC3SDa_tL1rA": "【已复现】漏洞通告 | Langflow未授权远程代码执行漏洞(CVE-2026-33017)", "https://mp.weixin.qq.com/s/vTRrpbpdpLkib13WPK6IZA": "从被拒到 RCE:四个月后如何获得一个依赖混淆漏洞的奖励", "https://mp.weixin.qq.com/s/9Pjebqtix6HAp79clo1u_Q": "Omnissa apikeys 路径穿越漏洞(CVE-2025-25231)", "https://mp.weixin.qq.com/s/0UA3jnfhu7-9R1d9G_FK0w": "智能体时代 漏洞管理要跃迁到10.0版本", "https://mp.weixin.qq.com/s/A16aKRKSUd80TY2vbZrx_w": "3月社区投稿活动 | 漏洞挖掘", "https://mp.weixin.qq.com/s/I_-senG5fGP3Zlkw24L8OQ": "嘶吼安全动态|360回应“安全龙虾”私钥泄露:已吊销证书,系发布失误微博Delta工业通信系统曝高危漏洞", "https://mp.weixin.qq.com/s/2McUq9fy2yAjwhQmNR2nhQ": "春日活动开启 漏洞挖掘奖励翻倍!", "https://mp.weixin.qq.com/s/nc7XTVQYs5XYyBL-hsYP9w": "【高危AI漏洞预警】OpenClaw Agent平台远程代码执行漏洞CVE-2026-30741", "https://mp.weixin.qq.com/s/blAB6ifN1i0WD3mrubpUgw": "CVE-2026-30741:OpenClaw远程代码执行漏洞复现详解", "https://mp.weixin.qq.com/s/0uzwKQ7ShKY1py9C-FSdKQ": "预警丨防范思科Catalyst SD-WAN管理软件多个漏洞", "https://mp.weixin.qq.com/s/K2XGRMr0VeG3o-L46fOnhQ": "Ubuntu Desktop 24.04及更高版本存在本地权限提升漏洞,可导致未授权用户获取root权限", "https://mp.weixin.qq.com/s/dQbk0U4tKff9YEWafydQKQ": "网站漏洞源码合集(附链接)", "https://mp.weixin.qq.com/s/dkmSXkbDu3z28swYvLta8A": "某CMS XSS漏洞代码审计", "https://mp.weixin.qq.com/s/FuPbrHpTvqc5avbgVkx_VA": "CVE-2026-25803:3DP-MANAGER 硬编码默认凭据导致 VPN 管理后台完全接管", "https://mp.weixin.qq.com/s/UAyR0_DookhFv7410uG07A": "挖洞实战|接口FUZZ+日志泄漏导致大量密码泄漏漏洞", "https://mp.weixin.qq.com/s/hHkKZaDS307Ba70ECPkjDg": "关于防范思科Catalyst SD-WAN管理软件多个漏洞的风险提示", "https://mp.weixin.qq.com/s/6RRZ2MQ_-XvrcR-qr3roQg": "Linux内核的“贴身保镖”:LKRG 1.0如何让零日漏洞无处遁形", "https://mp.weixin.qq.com/s/f9fMt-fHjroXXkzheRz7Vg": "【WebSocket漏洞漫谈-第一章】别再傻傻只改HTTP包了,WebSocket才是真正的富矿", "https://mp.weixin.qq.com/s/mToIusqcH7pS_vv0r9mNWw": "集成 15 000+ PoC 的“万能扫描怪兽”", "https://mp.weixin.qq.com/s/BNXSFGGtcEqHMZwbxwUjTw": "武装你的浏览器-漏洞检测", "https://mp.weixin.qq.com/s/Nopw3lLbAQXejyIxBOIhTg": "AK47 | 一款跨平台的漏洞利用与安全评估工具,内置高级引擎与多种安全扩展模块", "https://mp.weixin.qq.com/s/WAnamfuN5TwPfg8WcHDDlQ": "Coruna:神秘而强大的iOS漏洞利用工具包分析", "https://mp.weixin.qq.com/s/Ju3JvUI3f7FQtB4iEgi4NA": "快普M6 GetPositionOfStaff接口存在sql注入漏洞 附POC", "https://mp.weixin.qq.com/s/LussY3HOrmqzuhANF6bJag": "漏洞复现 | 用友U8cloud NCCloudGatewayServlet接口存在任意文件上传漏洞", "https://mp.weixin.qq.com/s/SSlNfEl6idiCUrKzdxiocg": "2026-03-19 最新CVE漏洞情报和技术资讯头条", "https://mp.weixin.qq.com/s/TkLVg82qZ_kKiXWMqa1cnA": "3月社区投稿活动 | 漏洞挖掘", "https://mp.weixin.qq.com/s/ZMpgnzx2DHSYw5aIW5tcGg": "OpenClaw\"养虾\"热潮背后的安全隐患:从漏洞分析到企业级防护实践", "https://mp.weixin.qq.com/s/UbJd5BTiU7v43qvedQUB_Q": "Spring框架相关漏洞案例分享", "https://mp.weixin.qq.com/s/1qkE5KVm-sP_-Rli3G8AzA": "实战复现:10 个真实 SRC 逻辑漏洞", "https://mp.weixin.qq.com/s/xkxLbNovX0MJR1iHkJsilg": "记录一套由弱口令拿到超管权限再拿下通用漏洞实战", "https://mp.weixin.qq.com/s/KQOYuzYf6_AL5EkmBuLfFw": "思科防火墙零日漏洞已被恶意利用,用于部署 Interlock 勒索软件", "https://mp.weixin.qq.com/s/x90M9gM7UH5CT3C7skzqIQ": "当 Claude 开始自己挖漏洞,我们该做什么?", "https://mp.weixin.qq.com/s/GG8Bih_lPVBI8g2_IZcr6Q": "某科技物流SQL注入漏洞", "https://mp.weixin.qq.com/s/n5Y3LZYjZ1yTiV12X-sk4Q": "新型 iOS 漏洞利用高级 iPhone 黑客工具窃取个人数据", "https://mp.weixin.qq.com/s/_eOpxzoidToVBz4ffR5chQ": "“暗剑”出鞘:谷歌等公司联合披露新型iOS零点击漏洞利用链", "https://mp.weixin.qq.com/s/XPg9lHi4kJoBe2QF5Qtgdw": "Java 应用漏洞挖掘实战", "https://mp.weixin.qq.com/s/Jh36L3UnvjNrypnM01lTSg": "ComfyUI-Manager RCE(CVE-2026-22777)遭在野利用,数万台设备亟待修复", "https://mp.weixin.qq.com/s/BH45coP-O-dw1zl85ZHSjA": "Apple WebKit 漏洞使恶意网页内容可在 iOS 和 macOS 上绕过安全机制", "https://mp.weixin.qq.com/s/m2Sp7S3Zkkb1hyTo-yVMbg": "美国网络安全和基础设施安全局 (CISA) 警告:微软 SharePoint 漏洞已被攻击者利用", "https://mp.weixin.qq.com/s/_AbUh_jcUJIxKeIOGfNKqw": "严重的 Telnetd 漏洞允许远程攻击者通过 23 端口执行任意代码", "https://mp.weixin.qq.com/s/SUK6JyTGy9WswTehEibpJw": "【安全圈】iOS18 爆高危漏洞!不升危险,升级变卡", "https://mp.weixin.qq.com/s/ZWuQBrCdi5JsHDlI7H5sBg": "【漏洞预警】Langflow 未授权远程代码执行漏洞(CVE-2026-33017)", "https://mp.weixin.qq.com/s/7ynSFvfJvzkViHbjPd9pxA": "【安全圈】CVE-2026-3888:Ubuntu 桌面版 24.04+ 易受提权漏洞攻击", "https://mp.weixin.qq.com/s/uKuRnc81OZgU16_anq_w6Q": "【论文速读】|ChainFuzzer:LLM智能体中工作流级多工具漏洞的灰盒模糊测试", "https://mp.weixin.qq.com/s/FAnDZvbbWM7ah-hAYPed8A": "工信部:关于防范思科Catalyst SD-WAN管理软件多个漏洞的风险提示", "https://mp.weixin.qq.com/s/RcAaRQND2ixd6CtQl27g4A": "【Net_AISec_hunter】基于 Wails + cursor 红队自动化 .NET 白盒漏洞挖掘工具", "https://mp.weixin.qq.com/s/YfGcNBnrT3rUtYqHYuB-mg": "远程运维的“定时炸弹”:四家厂商的 IP KVM 被曝严重漏洞", "https://mp.weixin.qq.com/s/ktmAv3EKBg9Z90axaWnjew": "Solon框架模板漏洞深度剖析与修复实战", "https://mp.weixin.qq.com/s/WPmHCoDfS-cPTRrP-6gnZQ": "AI串联漏洞攻陷招聘平台,伪装特朗普索要数据权限", "https://mp.weixin.qq.com/s/mKiLs2DgG-_wVLdp-zD5ww": "预警丨防范Windows远程桌面服务(RDS)权限提升高危漏洞", "https://mp.weixin.qq.com/s/GyxdEH4tCLOGpinXe3g2BA": "IT 服务管理软件 BMC FootPrints 被曝未授权 RCE 漏洞链(CVE-2025-71257 至 71260)", "https://mp.weixin.qq.com/s/MWInOqfmcoFngNO9YRbAxg": "CVE-2026-2441:Chrome CSSFontFeatureValuesMap 释放后重用漏洞解析", "https://mp.weixin.qq.com/s/xfPLqb_R5_9Xs24QNDWILw": "Windows RCE漏洞EXP - CVE-2025-29969", "https://mp.weixin.qq.com/s/lsJhmUUjdJ_qnMZ1CtXe1Q": "通过攻陷合法网站传播的新型iOS漏洞利用工具包DarkSword", "https://mp.weixin.qq.com/s/nukEly-vS4KNUl5SFu1_Gg": "Jenkins 的严重缺陷使 CI∕CD 服务器面临远程代码执行的风险", "https://mp.weixin.qq.com/s/AX-nvo_bgzgEo7xaEBBI2g": "恒丰银行AI编码助手项目POC测试供应商征集", "https://mp.weixin.qq.com/s/qJVzWz6wtbOfHHgtflxVig": "漏洞预警 | 深信服运维安全管理系统远程代码执行漏洞", "https://mp.weixin.qq.com/s/U_TuD9yZ8MamJ1MH49d56w": "【案例分享】某SRC SSRF漏洞分享", "https://mp.weixin.qq.com/s/WKKqHMW_QzFQAKUmBj7gNw": "漏洞预警 | TOA操作系统命令注入漏洞", "https://mp.weixin.qq.com/s/gda4tQH1l6wD4NJPR4m5jQ": "俄罗斯APT组织利用Zimbra XSS漏洞CVE-2025-66376攻击乌克兰", "https://mp.weixin.qq.com/s/acJRu18qzQ_nJdWtbOCRBA": "OpenClaw AI高危漏洞速查、全自动漏洞安全基线检测工具", "https://mp.weixin.qq.com/s/uzkQMCYHN7oIcYQjeiXIrA": "“ AI 刺客”漏洞披露:小字等方式伪装实现执行恶意代码", "https://mp.weixin.qq.com/s/MUnHA4_jalwGsz2_C5tMBw": "记一次某大型oa前台0day挖掘", "https://mp.weixin.qq.com/s/AWLWH1U6RY8-iwXu_6qMIw": "监控系统反被监控?Glances曝严重凭证泄露漏洞 CVE-2026-32633", "https://mp.weixin.qq.com/s/LrbuTbY9aTMhhqaXUL8RVA": "工信部:关于防范Windows远程桌面服务(RDS)权限提升高危漏洞的风险提示;AI 加持新型社工攻击 浏览器权限滥用致生物信息泄露 | 牛览", "https://mp.weixin.qq.com/s/Hz9X_dmj59luAIlaYOmOhQ": "ChurchCRM SQL注入漏洞(CNVD-2026-12565、CVE-2026-24854)", "https://mp.weixin.qq.com/s/UQjpB35iOt8oltRLiHNlSA": "BMC FootPrints 预认证远程代码执行漏洞链分析", "https://mp.weixin.qq.com/s/Ifz76zCGmlgnHMEZiFF4OQ": "【蓝队】一套面向企业级的漏洞全生命周期管理平台", "https://mp.weixin.qq.com/s/82blCxBUzkpCsxmSUU1cHA": "Langflow 远程代码执行与任意文件写入漏洞 | CVE-2026-33017∕33309已复现", "https://mp.weixin.qq.com/s/eEN_SMBebETV-8mDGK8AJA": "OpenClaw 安全全景分析:从公开漏洞、利用链到最安全安装基线", "https://mp.weixin.qq.com/s/FedbrPsNBO9rpUZCPuvqjw": "【漏洞通告】Spring Boot 认证绕过漏洞(CVE-2026-22733)", "https://mp.weixin.qq.com/s/KLD3svu2RUUC-ACtZZUsZw": "安全热点周报:谷歌修复了两个在攻击中被利用的 Chrome 零日漏洞", "https://mp.weixin.qq.com/s/O6TD0nHPnSQyyArWV5kaQA": "顶级iPhone黑客工具“DarkSword”曝光:六连环漏洞,多国用户数据遭窃", "https://mp.weixin.qq.com/s/zEH372PgAIz9V_TWNJSo_A": "Amazon Bedrock、LangSmith和SGLang的AI漏洞可致数据泄露与远程代码执行", "https://mp.weixin.qq.com/s/PNM5EemF1d70AiRq1iuNYg": "【已复现】Langflow 远程代码执行漏洞(CVE-2026-33017)安全风险通告", "https://mp.weixin.qq.com/s/prty6lNtE5r8St2X2eD-xg": "威胁通缉令 · 方块6丨DragonForce(调整)", "https://mp.weixin.qq.com/s/mvpqQVlOM6OYuwk3F4zT5w": "CNNVD | 人工智能重要漏洞通报(2026年第三期)", "https://mp.weixin.qq.com/s/IFDiovAzxF0SyPVSGpyyrw": "Atlassian Bamboo 高危RCE漏洞威胁 CI∕CD 环境安全", "https://mp.weixin.qq.com/s/54WuHiHsYfJcUjigkWbqdA": "活动邀请 | 2026 FORCE LINK AI 创新巡展(武汉站)", "https://mp.weixin.qq.com/s/Z-JzjkjTYRxwI0fs_73y6A": "别让“养虾”变“养险”:基础环境漏洞有多危险?", "https://mp.weixin.qq.com/s/57V-86JPnQDLzuv8kgV0VA": "OpenClaw最新完整漏洞,实时可查!(附高危列表)", "https://mp.weixin.qq.com/s/R7jIDiG9m6DbB_hrbIYmyw": "【漏洞通告】Langflow 任意文件创建漏洞 CVE-2026-33309", "https://mp.weixin.qq.com/s/G8ORVsB112woiwnc_2No3Q": "俄罗斯APT组织利用Zimbra XSS漏洞,在“幽灵邮件行动”中攻击乌克兰政府", "https://mp.weixin.qq.com/s/H-1a8dxRSJHIvuOpatN1Tw": "信息安全漏洞周报【第066期】", "https://mp.weixin.qq.com/s/iOo55KslDM-YbSZs4-xmXQ": "人工智能重要漏洞通报(2026年第三期)", "https://mp.weixin.qq.com/s/tLwt4cFmsrQkoDPOnXlBrg": "Jenkins 严重漏洞导致CI∕CD服务器易受RCE攻击", "https://mp.weixin.qq.com/s/NzrZtU3VMV3udIkbLr3_uw": "【已复现】Langflow ≤1.8.1 远程代码执行漏洞", "https://mp.weixin.qq.com/s/4MzCSMQlTGU_14UcDpue3w": "【安全圈】请装 3 月 Win11 更新:高危漏洞被修复,黑客利用能掌控你的电脑", "https://mp.weixin.qq.com/s/boaZpS8pf1lawqWlSrUEKw": "CVE-2026-3888:Snap 存在重要漏洞,可导致本地权限提升至 root", "https://mp.weixin.qq.com/s/qBKxpIwDVvmiV0gXUJ79nQ": "【高危AI漏洞预警】Langflow远程代码执行漏洞(CVE-2026-33017)", "https://mp.weixin.qq.com/s/ONH4oamY0YmycruWtfu2Kg": "九年未被发现的漏洞影响1260万个企业级Linux系统", "https://mp.weixin.qq.com/s/KADb3WS7_D09pxvHx7wZiA": "Langflow高危漏洞CVE-2026-33309深度分析:一键拿Token到远程代码执行", "https://mp.weixin.qq.com/s/EB_MFvXyROs8LXbs0tA_-Q": "【已复现】Langflow 远程代码执行漏洞(CVE-2026-33017)", "https://mp.weixin.qq.com/s/C5qIfAuv8-YoCnZBf55q5w": "【已复现】漏洞通告 | Langflow任意文件写入漏洞(CVE-2026-33309)", "https://mp.weixin.qq.com/s/tFg0qaVqGNH2m1u8ATqNdQ": "[漏洞预警]Langflow 远程代码执行与任意文件写入漏洞 | CVE-2026-33017∕33309", "https://mp.weixin.qq.com/s/lefaZES6jJKSW6jGy4OEIw": "Kanboard SQL注入 CVE-2026-33058 漏洞分析", "https://mp.weixin.qq.com/s/qhm5dEgosDaKhL20o7Sj6Q": "第100天-Java安全攻防:从SQL注入到RCE,常见漏洞一网打尽!", "https://mp.weixin.qq.com/s/578hkpnejm0E0Ppfernemw": "不要测无意义的并发漏洞", "https://mp.weixin.qq.com/s/Io5H5vBbGTLCrtgw9QuBxA": "【WebSocket漏洞漫谈-第三章】上集玩转WebSocket XSS,这集直接绕过防火墙!3000元高危漏洞实战复盘", "https://mp.weixin.qq.com/s/RDLbaD-8EFLcOHlrxDp99Q": "每周漏洞情报速览|2026.03.14–03.20", "https://mp.weixin.qq.com/s/reRJ1ciUllW0yhtsmIM_mQ": "Chrome 安全更新修复 26 个漏洞,可导致远程代码执行", "https://mp.weixin.qq.com/s/L36Yk5-ZLa_bHb3I_ek_Hw": "Java 漏洞利用全家桶工具,内置免杀webshell生成Bypass模块,助力实战攻防", "https://mp.weixin.qq.com/s/mpXMzpFWRTYbTz-wbzcqPA": "英伟达发布“安全版龙虾”NemoClaw;DarkSword串联六漏洞攻破iOS | FreeBuf周报", "https://mp.weixin.qq.com/s/QwcIUu6144mQygqn5IFrSg": "pbootcms SQL注入漏洞分析", "https://mp.weixin.qq.com/s/JxyglSZxEBwxEJIfP9yDbQ": "Trivy 漏洞利用中的恶意脚本注入可导致凭证窃取", "https://mp.weixin.qq.com/s/3czRaDI1lNghUxt21UIBzQ": "Oracle 紧急发布安全更新,修复 Identity Manager 和 Web Services Manager 中的关键远程代码执行漏洞", "https://mp.weixin.qq.com/s/IhMZ8IPnnlteg2Ch3BRlpg": "Augustus:专为实战设计的LLM漏洞扫描器,支持210多种攻击手法", "https://mp.weixin.qq.com/s/UoSfDePfvoxwpyoWkDz0hQ": "NDSS 2026杰出论文奖丨复旦大学计算与智能创新学院系统软件与安全实验室研究成果首次系统揭示邮箱别名机制的身份混淆安全漏洞", "https://mp.weixin.qq.com/s/7TrXvOX2eSeGKPM6bd3LyA": "安全预警|校园小程序高危SQL注入漏洞曝光,师生信息安全需警惕!(渗透测试视角)", "https://mp.weixin.qq.com/s/LGl3CQSBFsB8LmjXMtw7Lw": "AI驱动的渗透测试工具Apex,以黑盒模式攻击应用程序发现漏洞", "https://mp.weixin.qq.com/s/YQuXEKZNoehxwiyD-59ANg": "用Agent打败Agent:LLM智能体漏洞,正在进入自动化挖掘阶段(Agentfuzz)", "https://mp.weixin.qq.com/s/UAh9CjgpmAk-k3FoC0Yrmg": "Burp Suite 文件上传漏洞自动化测试插件 1000+ payload", "https://mp.weixin.qq.com/s/TqidPtWAX_Ysxy-t0ICZcg": "Omnissa Workspace ONE UEM存在敏感信息泄漏漏洞(CVE-2025-25231) 附POC", "https://mp.weixin.qq.com/s/krfaBaXqzjFMAX-pEQJIlw": "滥用漏洞驱动 (BYOVD) 实现任意内核读写并绕过 PPL 保护", "https://mp.weixin.qq.com/s/zg6MQCDO-ylywQzTaASqnQ": "开源人工智能开发框架高危漏洞在公开披露数小时后即被利用", "https://mp.weixin.qq.com/s/zCg_9V-WTz7j0Hyni7NO3Q": "0day | 泛微E-cology10 存在远程代码执行漏洞(QVD-2026-14149)", "https://mp.weixin.qq.com/s/7PNzRZMg7Xy59fwMslddgg": "明源地产ERP GetErpDept.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s/ytiq_OjlbQXtMo5i25__mA": "苹果手机国家级黑客工具DarkSword的扩散:iOS漏洞利用链被多个威胁行为者采用", "https://mp.weixin.qq.com/s/p95T1QhmbNH67bnVQ50oaw": "漏洞公开20小时即遭攻击,Trivy安全扫描器一月内两度沦陷", "https://mp.weixin.qq.com/s/PM22Bx6Pnvgj3KSC4gNPJg": "Oracle修复影响身份和Web服务平台的高危远程代码执行漏洞", "https://mp.weixin.qq.com/s/I6l-7dUemwNhQ1lTd1cYAg": "OpenClaw远程代码执行漏洞(CVE-2026-30741)!", "https://mp.weixin.qq.com/s/wBtMqU_knqPFSu3gVUVc4w": "百易云资产管理系统SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s/wgYnN_0NT0_9pM95GxFD9A": "用 GitHub Security Lab 的开源 AI 框架做漏洞扫描,我们发现了什么", "https://mp.weixin.qq.com/s/j8WQLe4JNp9WdLyz1KUjCA": "第101天-Java安全攻防:从SPEL、SSTI注入到SpringBoot框架漏洞,一篇通关!", "https://mp.weixin.qq.com/s/-FS6jJn89xraKydRh4G7Kw": "第102天-Java反序列化漏洞:从入门到精通,一篇带你彻底搞懂!", "https://mp.weixin.qq.com/s/srhONdrYItujLCFzjBNECw": "CrackArmor 严重漏洞使 1260 万台 Linux 服务器面临完全 root 权限被控制的风险", "https://mp.weixin.qq.com/s/-7jLFdeol5MymGZYwWhs8w": "CVE-2026-24291 — Windows提权漏洞BOF", "https://mp.weixin.qq.com/s/2yY7RhOpUkUtDTDM0j-HBQ": "Web常见漏洞合集,420页Web应用安全权威指南(附PDF)", "https://mp.weixin.qq.com/s/s857iqU4L67OhFoWjOu47w": "【提权基础入门第一节】AlwaysInstallElevated:一个常被忽视的Windows提权漏洞", "https://mp.weixin.qq.com/s/det-fCBHTpc_DrLXhJGJdg": "Trivy漏洞扫描器泄露,信息窃取程序通过GitHub Actions推送", "https://mp.weixin.qq.com/s/kjUUAGVKEL4JxvUWC-kQBQ": "800万次请求后,我们发现了一个让SolarWinds攻击看起来像\"业余作品\"的供应链漏洞", "https://mp.weixin.qq.com/s/pxx9oBQ_R_iqROjNz0FlEQ": "[漏洞播报]突发!OpenClaw爆致命0Day漏洞", "https://mp.weixin.qq.com/s/cob4zzuYEw6an2rAxbXNrw": "热搜第一!OpenClaw被360揪出0Day漏洞,创始人回应", "https://mp.weixin.qq.com/s/SQJ_0wKzsuN8SNfNqK7aCQ": "[漏洞播报]突发!OpenClaw爆致命0Day漏洞", "https://mp.weixin.qq.com/s/Dmxu0I_bQL24p6qRJMebQw": "SiYuan SQL漏洞 | CVE-2026-29073复现&研究", "https://mp.weixin.qq.com/s/EjQI8lwxwiFwUcxG601XTQ": "AK47 | 一款跨平台的漏洞利用与安全评估工具,内置高级引擎与多种安全扩展模块", "https://mp.weixin.qq.com/s/7dDD6FJ5GYWKWzr_XowZJQ": "漏洞预警 | 深信服运维安全管理系统远程代码执行漏洞", "https://mp.weixin.qq.com/s/LvglH-z2uEZoaHFnvrbH3Q": "【0day】深科特 LEAN MES系统 ChooseLineAndRes.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s/sArNXjFuoHCh3TQYZ0cqNA": "某火cai票娱乐城系统存在前台任意文件上传漏洞", "https://mp.weixin.qq.com/s/Uk5u5N03_89Hzp2L67j0eQ": "红队实战指南:AI驱动的渗透测试、红队评估和漏洞挖掘", "https://mp.weixin.qq.com/s/PyepoFSuQ63E3RnpQa9nsA": "漏洞复现 | 三汇SMG网关管理软件 9-2radius.php 存在远程命令执行漏洞", "https://mp.weixin.qq.com/s/Xq1nMKhusmwPcePspFoZrg": "【WebSocket漏洞漫谈-第五章】实战|WebSocket-CSRF劫持漏洞从发现到利用,手把手教你复现", "https://mp.weixin.qq.com/s/41KwMKw7Z0cbJIFIevRL-Q": "漏洞预警 | TOTOLINK A7000R命令注入漏洞", "https://mp.weixin.qq.com/s/vGTlvT3kOjaPbNf_UBxYRQ": "2026-03-23 最新CVE漏洞情报和技术资讯头条", "https://mp.weixin.qq.com/s/f8MmkHhkHGgMANz78r7Qqg": "实战:我如何用AI分析Coruna iOS漏洞利用工具包?", "https://mp.weixin.qq.com/s/wa46FgQ5AnYYGsv7OSbAJw": "CVE-2026-22812:我是如何在一个 7.1 万 Star 的 AI 编码工具上实现“零认证 RCE”的", "https://mp.weixin.qq.com/s/T-hht3kxX0WRogDTIDyR0Q": "Docker Remote API未授权访问与逃逸RCE 分析", "https://mp.weixin.qq.com/s/Xh1p9_R2EKNAEotgHBgZHg": "绕过 Tomcat 证书吊销:CVE-2026-24734 详解(含实战 PoC)", "https://mp.weixin.qq.com/s/jIsj7HbpYxkK9MYGcOhOCA": "AI渗透 | 重塑渗透测试与漏洞挖掘新策略!", "https://mp.weixin.qq.com/s/5HfawGWrG4T4oVpRI6GNAg": "2026年AI安全攻防战:从Agent漏洞到深度伪造", "https://mp.weixin.qq.com/s/z2jMS1OyYuGeqrXtLzX85w": "金和OA-C6系统SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s/mKng7Qpf_oeHouYmvybWTw": "孚盟云 upload.ashx showImgss SQL注入漏洞", "https://mp.weixin.qq.com/s/P1aaa10JCsniV2eLf6ojhA": "3月社区投稿活动 | 漏洞挖掘", "https://mp.weixin.qq.com/s/prXa8S7vaDAjsQblfmLgsA": "【漏洞通告】Langflow 未授权远程代码执行漏洞(CVE-2026-33017)", "https://mp.weixin.qq.com/s/J0ju0ftBZOhbt9PzJHrELw": "某盟云AjaxMethod.ashx存在SQL注入漏洞", "https://mp.weixin.qq.com/s/pDK-92iGqKqdALxHUuqaYQ": "【玲珑安全】第八期漏洞挖掘培训,不是“教过就行”,而是实打实“带会”", "https://mp.weixin.qq.com/s/6LRGhtyc6jYlxazYWEfBUw": "【案例分享】某社交平台并发签到漏洞:白帽子如何用一个接口刷21天签到?", "https://mp.weixin.qq.com/s/xi8mVaS37jJq6KWA8WUIxA": "EDU某两个证书站的任意用户覆盖漏洞", "https://mp.weixin.qq.com/s/dvWPswiY2FMK7LdJicRXYw": "DudeSuite 漏洞播报 全网漏洞早知道【20260323】", "https://mp.weixin.qq.com/s/Wh34-IDbQzyNZ2QxzkbBhg": "AI辅助漏洞挖掘:四种方法的实测与挫败", "https://mp.weixin.qq.com/s/PppisO4FOMGayss99h3hWQ": "【高危漏洞预警】SiYuan(思源笔记)桌面发布服务存在任意文件读取漏洞", "https://mp.weixin.qq.com/s/LEg8p-tNyuy_I-6ILQkEOQ": "EDUSRC--985证书站从接口FUZZ到满分漏洞", "https://mp.weixin.qq.com/s/m7IdD6VaOTwkhszwy1GSwQ": "USRC暖春漏洞狂欢|手慢无,挖到就是赚到!", "https://mp.weixin.qq.com/s/nz3vLp5maC1BFRhsmxOG3A": "USRC暖春漏洞狂欢|手慢无,挖到就是赚到!", "https://mp.weixin.qq.com/s/XUZN6YN-AYSxRNpVRh7bJg": "CISA警告:Craft CMS代码注入漏洞已被用于活跃的攻击中", "https://mp.weixin.qq.com/s/Edy27vkih6P8vqtok5YD5w": "【0day】深科特 LEAN MES系统 ∕Handler∕SMTLoadingMaterial.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s/qY75RbrA81mPAib1B7tKfg": "【高危漏洞预警】PyTorch反序列化漏洞 (CVE-2026-4538)", "https://mp.weixin.qq.com/s/-IJ-Z2s-pVbkQJHzNSM26w": "泛微E-cology10存在远程代码执行漏洞(QVD-2026-14149) 附POC", "https://mp.weixin.qq.com/s/NQP8AB4ZMI2wlC1hxiDU1w": "【案例分享】某社交平台并发签到漏洞:白帽子如何用一个接口刷21天签到?", "https://mp.weixin.qq.com/s/h8YVtt13nsWs-1YhhR6udw": "手把手拆解:小程序∕Web端加密鉴权绕过案例全复现", "https://mp.weixin.qq.com/s/bnCDfOr0AF_ARMefF8W41A": "263+上传漏洞检测与绕过工具", "https://mp.weixin.qq.com/s/0K1oqzJZnmVPQJ7GGo2IcA": "【已复现】漏洞通告 | 泛微E-cology10 远程代码执行漏洞", "https://mp.weixin.qq.com/s/80hW-zevE2Tf5-ACEl13PA": "一次渗透测试纪实:利用 AI 发掘 Profile Builder Pro 插件 PHP 对象注入漏洞", "https://mp.weixin.qq.com/s/D0Eq_1CPsQj588D8THW9Lg": "44 天,90 个高危漏洞当 AI 黑客撕开全球软件防线", "https://mp.weixin.qq.com/s/ITWq_FOZzXyVzc7VwrpK3g": "新型AI漏洞“Shadow Escape”曝光:零点击窃取企业核心数据", "https://mp.weixin.qq.com/s/x49g8RuelwDmD3ZJ8iz5jA": "React∕Next.js满分漏洞遭大规模在野利用,数百万Web应用已成攻击者囊中之物", "https://mp.weixin.qq.com/s/YIseUePt6Svi97YxdL37eg": "SolarWinds Serv-U 的关键漏洞可导致服务器获得 root 访问权限", "https://mp.weixin.qq.com/s/PVuNbrbr8xzAu7-UH69D7A": "第106天-Shiro 王国探秘:从反序列化漏洞到攻防实战,守护你的 Java 应用!", "https://mp.weixin.qq.com/s/ucKOBZDxTOcgEbV9CavOvQ": "泛微E-cology10存在远程代码执行漏洞 附POC", "https://mp.weixin.qq.com/s/uDM_bGrC6ax5p6ZUk_kJqw": "Chamilo存在SQL注入漏洞(CNVD-2026-13257,CVE-2025-50190)", "https://mp.weixin.qq.com/s/HsTTkZQpAZPEiqm6e3Wbog": "【赠书2本】红队实战指南:AI驱动的渗透测试、红队评估和漏洞挖掘", "https://mp.weixin.qq.com/s/vRlhXDnBmvPw5xEcet1lBw": "从入门到封神:AI 红队渗透 + 漏洞挖掘完整实战手册", "https://mp.weixin.qq.com/s/Nz-VdwuUXV1AG3jWvVPglw": "langflow 命令执行 无回显小思路", "https://mp.weixin.qq.com/s/AmAWksvws7DIaK3z_kD99w": "2026-03-24 最新CVE漏洞情报和技术资讯头条", "https://mp.weixin.qq.com/s/K4IAbYjSxWWYKjvcn39ajA": "漏洞复现 | 用友NC ContactsQueryServiceServlet 反序列化代码执行RCE漏洞", "https://mp.weixin.qq.com/s/JZ6wXU4XzcmH7HVW-PkWYQ": "嘶吼安全动态|工信部部署2026年信息通信业安全生产和网络运行安全工作 Copilot及Cursor等AI编码助手曝规则文件注入漏洞", "https://mp.weixin.qq.com/s/JyE_8udveXaaPr2AOQ94lg": "Dell Wyse 管理套件:从业务逻辑缺陷到未授权远程代码执行", "https://mp.weixin.qq.com/s/9Fy9nPd2Dz-KnDHSD3utNw": "ComfyUI-Manager远程代码执行分析及概念验证", "https://mp.weixin.qq.com/s/PKoq_xial5QbfJEk3kSIWA": "记录一次edusrc某证书大学漏洞挖掘", "https://mp.weixin.qq.com/s/sMYrklpCaRpDbZKfeNjfDg": "GeoServer WMS GetMap XML 外部实体注入漏洞(CVE-2025-58360)", "https://mp.weixin.qq.com/s/OqS-aKp03ywBJczQmq6BPA": "泛微 E-cology 10 未授权远程代码执行漏洞分析与安全风险解读", "https://mp.weixin.qq.com/s/59sCVVXzG_GA8mfNpczNBA": "孚盟云 upload.ashx deletefile SQL注入漏洞", "https://mp.weixin.qq.com/s/DIeVE7qcwq6bYJovhqKAhA": "雷神众测漏洞周报2026.3.16-2026.3.22", "https://mp.weixin.qq.com/s/P7CzIurhBXGC8oSxrwKgCg": "QNAP QVR Pro 严重漏洞可导致系统遭远程访问", "https://mp.weixin.qq.com/s/bA4QfIlrLyvFjG_n8ZO0Jg": "Langflow 远程代码执行漏洞(CVE-2026-33017) 复现", "https://mp.weixin.qq.com/s/yzJtnx1rEdOVKvFCCco4Yg": "【成功复现】Langflow 远程代码执行漏洞(CVE-2026-33017)", "https://mp.weixin.qq.com/s/yW1ud59ubiztZK-PMKDiBQ": "PHP代码审计Skill 【0day杀手】", "https://mp.weixin.qq.com/s/CB1ABeDSD_2k4UjrVxKJfQ": "如果AI能自动发现漏洞,企业还愿意花高价请安全团队吗?", "https://mp.weixin.qq.com/s/0KBtIJHvDtAWz0uv8v1Pgg": "AI挖洞已是现在时:企业用它跑渗透,白帽用它抢漏洞,你还在手动?", "https://mp.weixin.qq.com/s/wSKnqjgJGhrxyOmv8PRpyQ": "焦糖布丁v4.0:OpenClaw AI安全基线与漏洞检测工具", "https://mp.weixin.qq.com/s/aFBz_Qm6nAOiBIHUFxHqNQ": "二开MDUT-Pro多功能数据库综合漏洞利用工具,助力高效拿下内网权限(2026-03-17)更新", "https://mp.weixin.qq.com/s/gJU7m_XbvfBzGaaVDzsZLg": "手把手拆解:小程序∕Web端加密鉴权绕过案例全复现", "https://mp.weixin.qq.com/s/fJyIpOq2Pu5J8uNOO0dTyA": "Iphone漏洞利用工具包 已公开23个CVE", "https://mp.weixin.qq.com/s/BY8bgFI1cEvLulN49Nu-Ew": "火绒小问答--「个人版」漏洞驱动拦截", "https://mp.weixin.qq.com/s/sjUV0jwPWs09EKuR7Laj4A": "【SRC实战】一文玩转Minio存储桶漏洞挖掘", "https://mp.weixin.qq.com/s/hbcmKhk_PnqPK4gb3xEEBw": "CNVD漏洞周报2026年第11期", "https://mp.weixin.qq.com/s/jO06HSXds2LQm7B-7ZTpQw": "谷歌15年累计发放了8160万美元漏洞赏金", "https://mp.weixin.qq.com/s/PUknAvCV5D6RnfGqb46RiQ": "BeforeDawn 漏洞管理平台 | 致敬每一个在黎明前守夜的安全人员", "https://mp.weixin.qq.com/s/C5TWY9B9pZ-ZQN7DXgeHkQ": "点赞漏洞", "https://mp.weixin.qq.com/s/0h_qwNtOX0PhCtdUOMahWA": "一次从代码审计到利用:Kanboard SQL注入漏洞(CVE-2026-33058)分析", "https://mp.weixin.qq.com/s/0Fe9Fp2Sr3ZMRaC_Mx3C8Q": "Interlock勒索软件利用思科FMC零日漏洞CVE-2026-20131获取Root权限", "https://mp.weixin.qq.com/s/ZebW_MeBbPNqPIGg30n69w": "泛微Ecology10未授权远程代码执行漏洞", "https://mp.weixin.qq.com/s/BUbp9LpDyPUhRAdOdVuiLw": "CVE-2026-22733|Spring Boot存在认证绕过漏洞", "https://mp.weixin.qq.com/s/cdvx5cZsr6LWTZ3KnghLAQ": "PolyShell 警报:Magento REST API 严重漏洞面临大规模全球利用", "https://mp.weixin.qq.com/s/pZEp5NPxMUuvrF7MvHJV-w": "大华ICC智能物联综合管理平台存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s/B_mA0fHXlE2RScURPjVo_Q": "CVE-2026-32051:OpenClaw授权绕过漏洞与复现", "https://mp.weixin.qq.com/s/YLy70EnLub_ehTH_teogOg": "3月社区投稿活动 | 漏洞挖掘", "https://mp.weixin.qq.com/s/LngiSUiMMrTGrNgiDflPUw": "从目录删除到RCE:GCP Looker漏洞剖析", "https://mp.weixin.qq.com/s/cdYEIXL0mNaqBRoIwTc81w": "深度剖析 Node.js 环境下的 SSRF 漏洞:从原理挖掘到防御体系构建", "https://mp.weixin.qq.com/s/1LmbFxfGmTmNnOPO363GLA": "一个综合性的Web安全学习平台 | 涵盖16大类Web安全漏洞,共80+个实战场景", "https://mp.weixin.qq.com/s/Pta7hBxwT6nUrNy3UO_LaA": "深科特 LEAN MES 任意文件上传漏洞分析(从逻辑缺陷到 RCE)", "https://mp.weixin.qq.com/s/ZzfKh9I7GILKdQ7vyi-gGw": "CVE-2026-33371|Zimbra存在XML外部实体(XXE)漏洞", "https://mp.weixin.qq.com/s/4DeGMyiZynCFuPY-1vlsYw": "【漏洞预警】Litellm 2026.3.24 供应链投毒事件", "https://mp.weixin.qq.com/s/k7BAkFlQ4C19aZ_bXVmoHA": "苹果警告旧款iphone易受Coruna和DarkSword漏洞工具包攻击", "https://mp.weixin.qq.com/s/MOouM8QlEOg7U8YFMh7fsQ": "[被忽略的漏洞]sqli-labs之Less-29的另一种玩法", "https://mp.weixin.qq.com/s/FVmbZs3bnfvNfIYFwmAFaQ": "CVE-2026-23673 ReFS 越界读分析", "https://mp.weixin.qq.com/s/aT359r9Ym7VQvBUbG-t0sg": "命令执行:突破Shell命令过滤限制", "https://mp.weixin.qq.com/s/VRT-KXKSzwWupH6JdqQIUA": "基于Firefox的Claude Code Security实测漏洞发掘", "https://mp.weixin.qq.com/s/4xdtc_uGeCtkGuaS01ATxA": "0基础挖src最先要了解的三大经典漏洞详解,东西不多相信你能吃下!", "https://mp.weixin.qq.com/s/foeEgdzYWGhZKb4DZC9Gfw": "【漏洞预警】LiteLLM 投毒、Apifox 后门连发,敲响供应链安全警钟", "https://mp.weixin.qq.com/s/4L2-OpUZg0ywKGssj6kVxQ": "【免费送!】红队实战指南:AI驱动的渗透测试、红队评估和漏洞挖掘", "https://mp.weixin.qq.com/s/zGBOXjoCwRpb2_652tufXg": "【0day】深科特 LEAN MES系统 ∕Handler∕FileSync.ashx 任意文件读取∕上传∕删除∕SSRF等多个漏洞", "https://mp.weixin.qq.com/s/yZ_LVi21yVVvTewMcct3sw": "从靶场到实战--双一流高校多个高危漏洞", "https://mp.weixin.qq.com/s/iNSBQGCm5EwXi0MvWSvw-g": "苹果漏洞利用工具遭公开,数亿台iPhone随时可被静默入侵窃密", "https://mp.weixin.qq.com/s/Bi4jWg_43padms17q26pcQ": "【高危AI漏洞预警】OpenClaw环境变量注入漏洞 (CVE-2026-22177)", "https://mp.weixin.qq.com/s/ZMDSNOwPbwCIj8ARhG3MOQ": "[漏洞复现]全程云OA QCHMS.asmx SQL注入漏洞(VEID-2026-11106)", "https://mp.weixin.qq.com/s/6nYTOkIMBX-04rB9iiJQxg": "OpenSSH漏洞列举及防范建议", "https://mp.weixin.qq.com/s/JCDXK_QtzQelqJtxqCEXRA": "第108天-Shiro安全攻防:从JRMP到CC1,揭秘无利用链下的RCE新思路", "https://mp.weixin.qq.com/s/gwZC9ARf1tgEhemc5Fiydg": "红队实战指南:AI驱动的渗透测试、红队评估和漏洞挖掘", "https://mp.weixin.qq.com/s/2MjqRDp3BHZEn4x5Hpzhjw": "第107天-Shiro 550 漏洞深度解析:无 CC 依赖?CB 链一招制敌!", "https://mp.weixin.qq.com/s/9-dEbCf-fPa8FxjknE9svg": "Kali Code Executor:三层Agent驱动的Kali容器渗透代码执行平台", "https://mp.weixin.qq.com/s/tZvq6vlbDO1_eQHvX-bQbQ": "泛微E-cology10 getEmDsList接口存在敏感信息泄露 附POC", "https://mp.weixin.qq.com/s/aAlGWV4xLj6g8TXmG0k59Q": "漏洞复现 | Langflow 远程代码执行漏洞(CVE-2026-33017)", "https://mp.weixin.qq.com/s/3jfefGCUKUgP8Cua5UeWDg": "OpenClaw 漏洞频发:2026-03-25 再曝权限提升漏洞,可致远程代码执行 | 已复现", "https://mp.weixin.qq.com/s/ofxXtoMWj3srU6qk_zXLZQ": "阿里云 AVD、长亭漏洞库、OSCS、奇安信 |多源实时漏洞监控和推送", "https://mp.weixin.qq.com/s/0SHlg4d0Mw4Eb-32FIL8hw": "九篇技术分析归零后,我决定静音45天——真心期待那句“这不是漏洞”", "https://mp.weixin.qq.com/s/fpgO3evgo-eLogFkEb8sLg": "「SRC新手」burpsuit配置抓特定域名数据包&抓包插件自动收集jsonpXSS漏洞", "https://mp.weixin.qq.com/s/Kne09IbA0z3MhQaMhTP9lA": "安卓逆向第二阶段正式完结!三阶段来了,EXP开发、Frida与AI逆向机器人、算法还原与模拟、设备指纹与游戏分析。木鱼沙箱内测", "https://mp.weixin.qq.com/s/TE_JCOzqMiNlseWHEgCRtA": "从任意文件读取漏洞到getshell", "https://mp.weixin.qq.com/s/pQy-TnSj938BhMY4qd7XQg": "【CVE-2026-26123】微软身份认证器 DeepLink 漏洞", "https://mp.weixin.qq.com/s/5u_lUrv6xlqSfDe1hVzQ7g": "【漏洞通告】NVIDIA SNAP-4 Container存在拒绝服务漏洞(CVE-2025-33215)", "https://mp.weixin.qq.com/s/-Hvk95sUCu22yddrHXU-NA": "【漏洞通告】Ubiquiti UniFi Network Server存在输入验证错误漏洞(CVE-2026-22559)", "https://mp.weixin.qq.com/s/OXt5kzGHhXpyBk1yXGSDSA": "CVE-2026-28466:OpenClaw节点调用批准绕过的RCE精解", "https://mp.weixin.qq.com/s/ITHExJkViE5C8fLdXn2EHA": "这个开源工具能自动检查安全漏洞", "https://mp.weixin.qq.com/s/QtcyJ8ZOS5L_NAeGuKHyTQ": "[漏洞复现]微力同步-Verysync任意文件读取漏洞(VEID-2026-11111)", "https://mp.weixin.qq.com/s/Q54zaXV2Pa2Il-EUdfHlSQ": "漏洞预警 | Apifox 桌面客户端官方 CDN 脚本遭供应链投毒事件", "https://mp.weixin.qq.com/s/Wr9PMMNLDTqqT_BcLkedmg": "【漏洞通告】HCL Traveler存在信息泄露漏洞(CVE-2026-21783)", "https://mp.weixin.qq.com/s/Dz6OXyUqRq3T4808LeQKQw": "Microsoft Authenticator 未认领的 Deep Link:一次完整账号接管的故事(CVE-2026–26123)", "https://mp.weixin.qq.com/s/4TcTXcWzqB0owLgQ9QiwRA": "OpenClaw 近期安全漏洞修复汇总报告", "https://mp.weixin.qq.com/s/xuN7svsI8nuy-Gz7qmX_aw": "【漏洞通告】NVIDIA SNAP-4 Container存在缓冲区溢出漏洞(CVE-2025-33216)", "https://mp.weixin.qq.com/s/is0sxEc7OsQIp8_TpsGTqg": "CSS 也能拿 Shell?解析Chrome在野 0-day 漏洞 CVE-2026-2441", "https://mp.weixin.qq.com/s/E8rEKJRZNNmnKdBaObHGKg": "【0day】深科特 LEAN MES系统 ∕Handler∕MobileAppLogin.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s/Jpd5tmZHv-nOpixIVXkNKQ": "丈八网安技术研究:OpenClaw远程代码执行漏洞深度复现", "https://mp.weixin.qq.com/s/H7SJG_c-RNUsM0F7RLm2EA": "【漏洞通告】sbt存在命令注入漏洞(CVE-2026-32948)", "https://mp.weixin.qq.com/s/Pyp_x6-3-P47tCkSCyJl_Q": "【0day】深科特 LEAN MES系统 DownLoad.aspx 任意文件读取漏洞", "https://mp.weixin.qq.com/s/JEImkQjAbJBA0fUN1BmhRA": "一个远程桌面服务权限提升漏洞暗网22万美元", "https://mp.weixin.qq.com/s/FTUvEsEbw-NoMgxYjDXhsg": "从入门到封神:AI 红队渗透 + 漏洞挖掘完整实战手册", "https://mp.weixin.qq.com/s/SknGzy9tcNL3Yw4R2XbMPg": "信任劫持:ClawHub漏洞让攻击者轻松刷榜,摇身一变成为热门首选技能", "https://mp.weixin.qq.com/s/nM2v5Pm37bZN_AXlLtqJ9w": "某物流软件 MsAnnounceController SQL注入漏洞", "https://mp.weixin.qq.com/s/d7F6boeSpVGMMI8HXIDsYA": "漏洞复现 | 博硕BGM Upload.ashx 存在任意文件上传漏洞", "https://mp.weixin.qq.com/s/Dt0y3O09kCBEiAX3tuKlpg": "漏洞预警 | Langflow远程代码执行漏洞", "https://mp.weixin.qq.com/s/VrbuihpsTm-KIvZfw-0dLg": "漏洞预警 | LEAN MES系统SQL注入漏洞", "https://mp.weixin.qq.com/s/orMOHdDVMko29TMaGB9nxA": "SourceInsight4.0 最新4.00.0150 2026版本 破解分析", "https://mp.weixin.qq.com/s/Mq5QbqtIs8HUv66Zh5ya_Q": "一张图片 = 拿下网站?文件上传漏洞深度解析", "https://mp.weixin.qq.com/s/j7VCXJLAjKnFex9pogUz3g": "【漏洞复现】Langflow CSV Agent 任意代码执行(CVE-2026-27966)", "https://mp.weixin.qq.com/s/oJnKz91e1sHvQhkWDH5LxA": "CVE-2026-20079 - Cisco FMC 身份验证绕过远程代码执行分析", "https://mp.weixin.qq.com/s/py1hnY9cfJw3_smzaJ2uXw": "CVE-2026-20817 - Windows错误报告中缺失授权检查的分析 POC", "https://mp.weixin.qq.com/s/KCnE2dubNtqqbyduSud_DA": "私有内容IDOR漏洞", "https://mp.weixin.qq.com/s/jnk0D6FlxLlVohP2gQ9oDw": "信息安全漏洞预警(2026年3月23日-3月27日)", "https://mp.weixin.qq.com/s/jJrwgDN6rC3q2beEG-LhpQ": "OpenAI 发布AI安全漏洞奖励计划", "https://mp.weixin.qq.com/s/ft8s_vuxIVocovRvyjIEOw": "CVE-2010-1870", "https://mp.weixin.qq.com/s/c8Pr49RGAQcT4gE8PAKImw": "NVIDIA 严重漏洞可导致远程代码执行和拒绝服务攻击", "https://mp.weixin.qq.com/s/ESMm3b6D5ji3U3ABhFxHbQ": "【免费领】全网收录最全:Web漏洞检测及修复方案手册", "https://mp.weixin.qq.com/s/Z0Szj4BBrPIeAHVh0ZucRw": "OpenAI重金悬赏AI滥用漏洞,50%复现即算有效", "https://mp.weixin.qq.com/s/e21rnLoFSnTUmf4WloRqDQ": "当Linux服务器扫出iis漏洞", "https://mp.weixin.qq.com/s/4QPl-M9RnQuufeTdA5FX-A": "AI用户务必关注,Langflow未授权RCE分析(CVE-2026-33017)", "https://mp.weixin.qq.com/s/wtOi3gVf0JYSZ-GIkcjT5Q": "Stackfield 桌面应用任意文件写入导致远程代码执行漏洞分析 (CVE-2026-28373)", "https://mp.weixin.qq.com/s/qOvzcnmIu8NPL-PEcPYJzw": "孚盟云 upload.ashx image SQL注入漏洞", "https://mp.weixin.qq.com/s/WaIPXsW3f201ppHlgvsaSA": "20小时即被武器化!Langflow致命漏洞CVE-2026-33017", "https://mp.weixin.qq.com/s/fhPtLqJLKbzQMhtR-K9yYg": "龙王 claw 自动化审计 0day 挑战直播来袭!", "https://mp.weixin.qq.com/s/ujz2zjQP_hb6drRwCi6i5g": "Claude浏览器扩展漏洞允许通过任意网站实现零点击XSS提示注入", "https://mp.weixin.qq.com/s/4gQuOELNxWHLo839uL37MQ": "信息安全漏洞周报【第067期】", "https://mp.weixin.qq.com/s/FYOdgoWKCIrGWMO4CZja_A": "Burpsuite-MCP,使用大模型挖漏洞做赛题,最详细教学来了", "https://mp.weixin.qq.com/s/iINM32Qqy-AX0CDdTouFIw": "思科安全防火墙漏洞可导致攻击者以root权限远程执行代码", "https://mp.weixin.qq.com/s/IyAA2ODg1nY1u8XQyEdtWA": "新的 Windows 错误报告漏洞允许攻击者升级以获得系统访问权限", "https://mp.weixin.qq.com/s/YLJyJK1IxBYt4PmC4snReQ": "紧急预警!2026 年 3 月这 5 个高危漏洞正在收割你的数据", "https://mp.weixin.qq.com/s/MHsaEIAjpdlSDyrgGsK8Ww": "OpenClaw 近期安全漏洞修复汇总", "https://mp.weixin.qq.com/s/5VrsFyU97ncLC0bXY9dDGg": "漏洞复现 | Tosei自助洗衣机 network_test.php 远程命令执行漏洞", "https://mp.weixin.qq.com/s/fIijPpB5VIKTytqdVO8mCQ": "2026 红队终极渗透指南:漏洞利用 + 权限维持 + EDR 绕过,全程干货 | 打点 | 撕口子 | 渗透测试 | Web安全", "https://mp.weixin.qq.com/s/iuRyip2HuthovZU1gEhCJA": "2026年Q1网络安全威胁深度分析:AI驱动攻击、供应链漏洞与防御策略升级", "https://mp.weixin.qq.com/s/uNiKLvCRAEjtL5KnLn0BsA": "你配置的AI白名单一文不值:CVE-2026-28363让OpenClaw授权控制全面失效", "https://mp.weixin.qq.com/s/3-fMzl70tqasCcq04dikyg": "ClawHub漏洞可致恶意skill登顶;Claude Code允许AI自主选择操作权限 | FreeBuf周报", "https://mp.weixin.qq.com/s/PApTROH77SN3nQSEqSfkXA": "瑞斯康达Raisecom智能网关 list_base_config 远程命令执行漏洞", "https://mp.weixin.qq.com/s/g_9aQ8gTTFotM_z0W09NhQ": "Coruna漏洞工具包升级攻击框架,威胁数百万未打补丁的iOS设备", "https://mp.weixin.qq.com/s/fhjkZZu-Sn5blbytQpDslw": "0142.微软身份验证器中未被认领的深度链接:账户完全被盗用(CVE-2026-26123)", "https://mp.weixin.qq.com/s/wdTqwg12UxwNB6hkfUDfHg": "墨雪飘影漏洞收集平台通过工信部备案", "https://mp.weixin.qq.com/s/iM1sFwRqgXAAyjgLEsdxkA": "威胁通缉令 · 红桃A丨React2Shell RCE漏洞(新增)", "https://mp.weixin.qq.com/s/jT0f-oyFlRjHBTXHBEeuZA": "每周漏洞情报速览|2026.03.21–03.27", "https://mp.weixin.qq.com/s/T4wlMRg5aoMY2_lQ5-kXPQ": "灾难公式:串联EspoCRM脚本引擎实现远程代码执行", "https://mp.weixin.qq.com/s/p0RnEz3kbzArFt-QAz6C2w": "WordPress CMS Commander 插件SQL漏洞 | CVE-2026-3334概念复现&研究", "https://mp.weixin.qq.com/s/r2A63tHTN8z2DulvZ7D9PA": "反思您的分层模型:CVE-2025-33073 和单跳问题", "https://mp.weixin.qq.com/s/ulas1Qk6irDwAGJGSeatEg": "【代码审计】客户端代码执行之WebView JavaScript桥接劫持token账号接管", "https://mp.weixin.qq.com/s/sIoF8S4hq0m39nLz-6hcdA": "二开MDUT-Pro数据库综合漏洞利用工具,新增Redis CVE-2025-49844和CVE-2022-0543利用,Mssql的Godpotato等提权,MongoDB类型数据库利用", "https://mp.weixin.qq.com/s/bHhudgL_P2Fqb9lW8-E2TA": "把小程序当Web测 || 实战案例深度拆解路由跳转中的权限漏洞挖掘", "https://mp.weixin.qq.com/s/RE-omcco3wN8bPOu4FQwpA": "【0day】深科特 LEAN MES系统 TestManagePlatform.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s/wZa2CmQ0JmDB1kaDYmuWpA": "Langflow漏洞披露后数小时即遭实战攻击,CISA将其列入已知被利用漏洞清单", "https://mp.weixin.qq.com/s/PAYwTbzyK0bvNpCRHBMC_w": "CVE-2026-3055|Citrix NetScaler ADC和NetScaler Gateway内存越界读取漏洞", "https://mp.weixin.qq.com/s/6iA6sknfVQhvjKA9HojMJw": "美国网络安全和基础设施安全局 (CISA) 警告:F5 BIG-IP 漏洞已被积极用于攻击", "https://mp.weixin.qq.com/s/KVCBM9ozbhMak8PaXSPsDw": "分享druid通用漏洞nday利用姿势", "https://mp.weixin.qq.com/s/m0LjAX6cVyPs10fQ0BFxgQ": "5200万次下载,三个高危漏洞:你的AI应用正在\"裸奔\"吗?", "https://mp.weixin.qq.com/s/Etpy9YrD-LJ_kyTpA3abhA": "一次奇妙的降价支付逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s/3WcbmoScxykEVR-jj5VLsw": "瞄准即时通讯:DVRTC 漏洞实验室指南", "https://mp.weixin.qq.com/s/TTrtjFmQAgsRsLr_1wJXdg": "Claude 90分钟挖穿20年漏洞!5w星“安全”系统跌下神坛,Linux内核也未能幸免", "https://mp.weixin.qq.com/s/5nCqMadwKlIYtBvGqC86jQ": "CVE-2026-20963|Microsoft SharePoint远程代码执行漏洞", "https://mp.weixin.qq.com/s/FsQrG1IoJ_1YvPJ-W1vkoQ": "卡数据包的并发漏洞", "https://mp.weixin.qq.com/s/B13sKATcVtr_Zx1o0OTM0Q": "【0day】深科特 LEAN MES系统 UploadHander.ashx 文件上传漏洞", "https://mp.weixin.qq.com/s/u70vB0h_qO4Dsbr9xlSnBg": "BIND 9个安全漏洞允许攻击者绕过安全控制并导致服务器崩溃", "https://mp.weixin.qq.com/s/CMTONs0DYNaV3w-KZwfoGg": "Magento PolyShell 漏洞分析:从任意文件上传到远程代码执行", "https://mp.weixin.qq.com/s/6It75fU3zzD6_a6l6bsXHg": "CORS 跨域漏洞攻防实战:靶场复现 + POC 编写 + 防御配置", "https://mp.weixin.qq.com/s/06Wx8xZAZJSBfcrdg2ZktA": "SQL 到 SSH:Grafana 中存在严重 CVSS 9.1 级远程代码执行漏洞,可将监控变成远程劫持", "https://mp.weixin.qq.com/s/00ZeX0Ks8aGMBwcjtvuItw": "Supermap iServer历史漏洞浅析(上)", "https://mp.weixin.qq.com/s/XowWtYcv49e-LVwOLKCxzg": "【漏洞复现】Langflow 未授权远程代码执行(CVE-2026-33017)", "https://mp.weixin.qq.com/s/RVb-ai_ZrfWTyWdY6jjl0g": "手把手CNVD从资产收集到通杀漏洞挖掘", "https://mp.weixin.qq.com/s/cXyy1DJEUyJgoYke87id7w": "【漏洞通告】Citrix NetScaler ADC和NetScaler Gateway越界读取漏洞 CVE-2026-3055", "https://mp.weixin.qq.com/s/6o24iCVMgFntuACVFOLzcg": "苹果 DarkSword 漏洞工具公开,数亿 iPhone 面临窃密风险", "https://mp.weixin.qq.com/s/Q6TKTDQT_zJba4VnysTFrA": "【高危漏洞预警】Grafana SQL表达式任意文件写入导致RCE(CVE-2026-27876)", "https://mp.weixin.qq.com/s/jtGtD-wTgjVM8xjxWbDnxQ": "记母校漏洞测试一次waf绕过经历", "https://mp.weixin.qq.com/s/hyYPCLvVr_1d__jsGa9-lA": "工具推荐 | UploadRanger专业级文件上传漏洞检测:全面支持263种绕过技术、代理抓包与动态深度扫描", "https://mp.weixin.qq.com/s/uV1rgNsk8FuDYRk06ZWsMQ": "AI大模型安全护栏攻防,深挖提示词注入漏洞,拆解多模态绕过手法", "https://mp.weixin.qq.com/s/JCHVW8jnw3cYOLUv2gcoSQ": "亿赛通-电子文档安全管理系统DecryptApplication;Servicelogin接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s/xcrowsWRs10luZsO6TGyXg": "Coruna:针对 iOS 的国家级∕商业级 Web 驱动型漏洞利用工具包,注意看文章细节内容有不同收获", "https://mp.weixin.qq.com/s/9pkBn5-z4CI5J4U42ezoHA": "Anthropic专攻漏洞挖掘的秘密模型Claude Mythos泄露,AI安全攻防格局突变", "https://mp.weixin.qq.com/s/KwFUYDHeleoon4NcZt41AQ": "Telegram零点击0Day官方否认但漏洞当场被验证,你的聊天记录已在别人手里", "https://mp.weixin.qq.com/s/UuGKD7KX4edvboCe9sgqvw": "全球使用最广泛的 AI Agent 编排框架爆三个高危∕严重漏洞|蓝队防御指南", "https://mp.weixin.qq.com/s/-UihXBhOT0TMXRsE5bUHyw": "CNVD发布上周关注度较高的产品安全漏洞;伊朗黑客组织 Handala 宣称入侵 FBI 局长邮箱 | 牛览", "https://mp.weixin.qq.com/s/pH3SgeoeLZl923zZc9Pmig": "【实战复现】常见企业系统漏洞合集——从监控系统到ERP平台", "https://mp.weixin.qq.com/s/HHeGa9WyG7sH5dXygL0Jvw": "Supermap iServer历史漏洞浅析(下)", "https://mp.weixin.qq.com/s/2XAnkq3SxTBCOHgVa0p-Cg": "俄罗斯关联APT TA446利用DarkSword iOS漏洞发起针对iPhone用户的网络钓鱼攻击", "https://mp.weixin.qq.com/s/PFv4b1LA_Ire3gwOkbxbgA": "AI已颠覆漏洞研究:这不是预言,这是正在发生的事", "https://mp.weixin.qq.com/s/qAnRER3wyvAW0pPigwp9XA": "嘶吼安全动态|全国网安标委发布关于征集个人信息保护标准应用实践案例的通知 AI工作流工具Langflow曝未授权RCE漏洞", "https://mp.weixin.qq.com/s/GxEpuuXko9C-LTrNRN8e4g": "OpenAI 紧急修复:ChatGPT 暗藏数据外泄漏洞", "https://mp.weixin.qq.com/s/9cYnq44HEq2P8qbIp9Lqhw": "【安全圈】360漏洞挖掘智能体发现OpenClaw高危漏洞,或波及全球17万实例", "https://mp.weixin.qq.com/s/mN88lh-hIDXWSlT2wrXTgg": "CVE-2025-33073与“一跳”问题:重新审视你的分层模型", "https://mp.weixin.qq.com/s/-IlkOX3V6Lhj_2kyjP3sUw": "Nicholas Carlini:当 AI 比所有人都更擅长找漏洞,安全行业还剩几个月?", "https://mp.weixin.qq.com/s/H7cmOrQrOSS0okqLPRL5Ow": "ChatGPT漏洞允许攻击者静默窃取用户提示和其他敏感数据", "https://mp.weixin.qq.com/s/9wab2S8bha51qXauAohTnQ": "VoidStealer恶意软件利用调试器漏洞窃取Chrome主密钥", "https://mp.weixin.qq.com/s/ZYs0Oqgd3TURi17Df7tmBg": "【高危漏洞预警】vim存在RCE漏洞(CVE-2026-34714)", "https://mp.weixin.qq.com/s/KRKlG578WNRCNmpA8Lua1g": "【已复现】漏洞通告 | Vim 代码执行漏洞(CVE-2026-34714)", "https://mp.weixin.qq.com/s/6AoUwPytQ979s4LptEdfLQ": "WordPress插件漏洞导致超过80万个网站的敏感数据泄露", "https://mp.weixin.qq.com/s/-tZG-IhjSOAfA2L2Dcig4Q": "【零基础可复现】2026 春节 Android 中级题(Java→so→unidbg 全流程)", "https://mp.weixin.qq.com/s/FRj3m8Nqv2x5KNK5pSQadg": "Telegram 惊曝零日漏洞争议:发个贴纸就能控制手机?官方却全盘否认", "https://mp.weixin.qq.com/s/b-Y4JXinfXJZmsJKvBvfpg": "Claude Code 源码:要是能重来 | 聊聊 Source Map 泄露这件小事", "https://mp.weixin.qq.com/s/jDqCPbON8fWbhzJYALrQ4w": "威胁通缉令 · 红桃4丨RDP Client RCE漏洞(新增)", "https://mp.weixin.qq.com/s/QfOixP4umzn0aFVLHG5nHQ": "智能网联汽车漏洞管理实践探索", "https://mp.weixin.qq.com/s/VquumwtaLN9X8gG0Msvl_w": "漏洞预警 | vLLM远程代码执行漏洞", "https://mp.weixin.qq.com/s/B95k1CWe83MZLXUcLHCKkw": "皮皮宋渗透日记17|Shiro 反序列化漏洞:原理、利用与防御全解析", "https://mp.weixin.qq.com/s/gdJj0cmBIp1tOfpSfA9PRA": "EDUSRC越权漏洞通杀30rank实战案例", "https://mp.weixin.qq.com/s/nzeYkCTF6fFOqkhDN-fyRQ": "预警情报:linux的Telnet 服务root 权限远程代码执行编号:CVE-2026-32746附POC", "https://mp.weixin.qq.com/s/IZ1vhbb9uArjysOHlmEYAA": "利用Claude AI挖掘Vim和Emacs 0day漏洞", "https://mp.weixin.qq.com/s/wKzZNcaFmNGzyjk3zlyAXQ": "漏洞环境 | PaperLab", "https://mp.weixin.qq.com/s/67txgBAUTT9F2JmMRKDzmA": "紧急警报:NetScaler 漏洞 CVE-2026-3055 遭攻击者探测,或导致敏感数据泄露", "https://mp.weixin.qq.com/s/lbdEwVQABntk4BBRfKGVaA": "关键 Fortinet FortiClient EMS 漏洞遭利用,可实现远程代码执行", "https://mp.weixin.qq.com/s/euKnHxD0p2cX9fpmmQWxPw": "从模板到提交到管理POC:VSCode 插件简化 POC 全流程", "https://mp.weixin.qq.com/s/r1unqCYMisj-c0RYcvHIsw": "[漏洞复现]点晴MIS管理信息系统login_out.asp存在SQL注入漏洞(VEID-2025-1205)", "https://mp.weixin.qq.com/s/l6s6o284UMMfDQ3a1w4BVA": "漏洞预警 | LEAN MES系统任意文件读取漏洞", "https://mp.weixin.qq.com/s/axP2bHKajuECqkdxib-IUw": "漏洞复现 | 美特CRM sendfile.jsp 存在任意文件上传漏洞", "https://mp.weixin.qq.com/s/9wTCdNYmx7alu_YelzwMyw": "一句话让 AI 挖出两个编辑器零日漏洞", "https://mp.weixin.qq.com/s/hvxxw4AzXAQo-HAZuBZZ7g": "TA446 在针对性鱼叉式网络钓鱼活动中部署 DarkSword iOS 漏洞套件", "https://mp.weixin.qq.com/s/nA6_ieBzRf85s6rCULDHIQ": "因酷教育软件 queryUserById 信息泄露漏洞", "https://mp.weixin.qq.com/s/cWFZTGjWa1kNJ2ZJuT96SA": "新思路!支付漏洞实战案例分享:低价薅高价商品", "https://mp.weixin.qq.com/s/pv7IH5r9BT-FL48oow1tPw": "MAD Bugs:Claude 编写了一个完整的 FreeBSD 远程内核 RCE 漏洞,并获得了 Root Shell 权限 (CVE-2026-4747)", "https://mp.weixin.qq.com/s/zwkRUQjlC1rJ8KgY3chrUw": "威胁通缉令 · 红桃5丨CitrixBleed 2漏洞(新增)", "https://mp.weixin.qq.com/s/AZk9_JfUMYkTQrgvtZ8WWg": "【高危漏洞预警】Vim代码执行漏洞CVE-2026-34714", "https://mp.weixin.qq.com/s/j4x2xrX-8rLDdXC8c9U1_g": "信息安全漏洞周报(2026年第13期)", "https://mp.weixin.qq.com/s/2BVjH31Zy6re8a4cB8p3JA": "泛微ecology 历史漏洞浅析(一)", "https://mp.weixin.qq.com/s/SEZhf7OjWFFYsairfgCD8Q": "畅捷通T+ DownLoadBlockFile 任意文件读取漏洞", "https://mp.weixin.qq.com/s/FQcKOdbFQclYK1kMXqnQsg": "PHP代码审计实战:两个经典漏洞的深度剖析", "https://mp.weixin.qq.com/s/i1AJHN9Kx_a3bHAI41PH2w": "4月社区投稿活动 | 漏洞挖掘", "https://mp.weixin.qq.com/s/K2W-Hfk90VakfG5gMwM5Aw": "利用邮箱漏洞寻找突破口打穿目标内网", "https://mp.weixin.qq.com/s/PUNGfi1A6Y3RP1rO3BihAQ": "【CVE-2026-4747】疯了!Claude 直接写内核 RCE,成功获得 Root Shell!", "https://mp.weixin.qq.com/s/C93W5Hlmn6YWxWDgNZj4Qw": "【在野漏洞预警】Chrome浏览器沙箱逃逸漏洞(CVE-2026-5281)", "https://mp.weixin.qq.com/s/bfHI4LsGicJiSJKGVq9RrA": "【在野利用】Google Chrome Dawn 释放后重用漏洞(CVE-2026-5281)安全风险通告", "https://mp.weixin.qq.com/s/VdSos730ImjZLFc25x-ucQ": "【安全圈】请升级:技嘉控制中心曝 9.2 分高危漏洞,黑客可远程接管电脑", "https://mp.weixin.qq.com/s/44s-ls6WCYqzm36akr3wYw": "【附POC及复现环境】Vim 1-click代码执行漏洞复现 (CVE-2026-34714)", "https://mp.weixin.qq.com/s/Y8lidlMnLlL1uwsEUGaxzw": "Smart Slider 3 WordPress 插件任意文件读取漏洞 | CVE-2026-3098复现&研究", "https://mp.weixin.qq.com/s/336CcmNzC50-mYvAxppZGA": "【登录背后的秘密-第五章】2FA 绕过漏洞详解:半登录状态的致命缺陷", "https://mp.weixin.qq.com/s/LZ_9OruWH0AVSQjLVX6wZQ": "干货 | HOST碰撞漏洞挖掘技巧", "https://mp.weixin.qq.com/s/DrUecwWUSW-A0WTg7vWggw": "权限收了,功能还在漏洞", "https://mp.weixin.qq.com/s/hXPIZ2WYp-m2h5wy5bVxdg": "Ilevia EVE X1 Server login.php 身份认证绕过漏洞", "https://mp.weixin.qq.com/s/E8ixVURFi7PmvOylrkjWEw": "对以前的地图api漏洞做点小补充", "https://mp.weixin.qq.com/s/pM9TF2cSPiBT0T3aNqRrDw": "漏洞复现 | 灵当CRM XlsFileUpload.php 任意文件上传漏洞", "https://mp.weixin.qq.com/s/21Ayr2PuXvT_2O__PfuHLw": "利用 CVE-2025-49825(Teleport 中的身份验证绕过漏洞)", "https://mp.weixin.qq.com/s/9C51UbUnNg2b4Sq-jUri-g": "人工智能重要漏洞通报(2026年第四期)", "https://mp.weixin.qq.com/s/k3eFVjkAgF79v9Uu1AVnwg": "白帽收藏!截至2026 年国内可提交漏洞拿赏金平台大全", "https://mp.weixin.qq.com/s/xrCCuvr2Mngi3SqyGk9XCQ": "Windows MS-RPC 漏洞利用开发", "https://mp.weixin.qq.com/s/S40SDFLeqPlms-lQOPwj0A": "海康威视IP网络对讲广播系统敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s/_6CCau6pMus_QEeSETsK3g": "谷歌修复2026年第四个遭主动利用的Chrome零日漏洞", "https://mp.weixin.qq.com/s/TmjWLJhNSmZvjLsvWOKw2Q": "【漏洞通告】Vim modeline 沙箱绕过命令执行漏洞(CVE-2026-34982)", "https://mp.weixin.qq.com/s/3GE8go841jaSCu6GuoJ8yg": "【漏洞通告】Google Chrome Dawn Use-After-Free漏洞(CVE-2026-5281)", "https://mp.weixin.qq.com/s/r1RdR60LkwR5-i6sFGk1nQ": "【漏洞通告】Google Chrome Dawn 释放后重用漏洞(CVE-2026-5281)", "https://mp.weixin.qq.com/s/aF6CsYKNXC0m9Khs74F2jQ": "JAVA代码审计 | 记录第一次命令执行漏洞", "https://mp.weixin.qq.com/s/bt58jVwrZHn08dSaVDPfqg": "代码钟馗启动AI漏洞雷达,OpenClaw隐秘漏洞浮出水面", "https://mp.weixin.qq.com/s/3crKhu_fmFDh3iWLuWgDew": "国家计算机病毒应急处理中心通报:13 类个人信息违规行为集中曝光;CNNVD 2026年第 13 期漏洞周报:AI 与 WordPress 成重灾区| 牛览", "https://mp.weixin.qq.com/s/l_zFxva3QXHDDmlmQhQTkg": "安全快报 | 东南亚政府机构因TrueConf视频会议软件0day漏洞存在高危安全风险", "https://mp.weixin.qq.com/s/7SHF5tJublgZAWFbv1I9wA": "【已复现】Vim 又一 RCE 漏洞(CVE-2026-34982):利用存在限制条件", "https://mp.weixin.qq.com/s/ho2ScK7cCBbPWGEAyhZmeQ": "Claude Code 30分钟挖出Vim用了三十年的0Day,收到陌生文件先别急着打开", "https://mp.weixin.qq.com/s/jjN4GtZjaxNhqnIf9f6WTg": "Cisco IMC 存在严重漏洞,攻击者可绕过身份验证", "https://mp.weixin.qq.com/s/4fycSuE1mqanf8MFqWlrEQ": "libpng 官方参考库中的这两个严重漏洞已存在30年之久", "https://mp.weixin.qq.com/s/7xvF8PsPGCEZMRPm4W8V-Q": "[漏洞播报]你的电脑主板也在变的不安全,技嘉控制中心曝9.2分高危漏洞", "https://mp.weixin.qq.com/s/KIdRHmMcRrOMjBs4-_V6mQ": "赛门铁克DLP代理漏洞允许攻击者提升权限", "https://mp.weixin.qq.com/s/srC7Md79V2wmLMBg4Dj4CA": "Chrome 0Day漏洞遭野外利用,谷歌紧急更新修复21项高危漏洞", "https://mp.weixin.qq.com/s/7pfSd1RZkB6ZEpchDnCgPg": "Nginx-UI备份漏洞可篡改加密配置,攻击者能注入恶意代码完全控制系统", "https://mp.weixin.qq.com/s/gPB798-neMvv-AsO21JiIg": "【高危漏洞预警】Vim代码执行漏洞CVE-2026-34982", "https://mp.weixin.qq.com/s/7yWR6bqfoaM-gZs1fyCjAQ": "Vim 高危 RCE 漏洞预警:打开文件即执行任意命令(CVE-2026-34714)", "https://mp.weixin.qq.com/s/DvqG__lhTNz8YWouGAwNUw": "请升级:技嘉控制中心曝 9.2 分高危漏洞,黑客可远程接管电脑", "https://mp.weixin.qq.com/s/_7UCIkcTUwXKUMKfXUSq5Q": "Telegram零日漏洞可零点击接管设备,官方否认存在", "https://mp.weixin.qq.com/s/IbQPtCrjUILRzl88R0KjGg": "Vertex AI 漏洞暴露谷歌云数据和非公开制品", "https://mp.weixin.qq.com/s/TO88zsQvbOvSeAyaJ5TCRg": "Joomla! 发布安全补丁:关键文件删除和 Web 服务漏洞暴露", "https://mp.weixin.qq.com/s/NHwvmyrUxU5lR4DXzd8TyA": "思科修复了高危及严重级别的漏洞", "https://mp.weixin.qq.com/s/4z41CoSHRR0StQ2BG8HCvQ": "Chrome 再曝高危0day漏洞:CVE-2026-5281 !", "https://mp.weixin.qq.com/s/VBslJx7PZWnhL7q1qr8nYg": "【登录背后的秘密-第五章第一节】SRC高价值漏洞思路:从2FA绕过到账户接管,仅需一次URL替换", "https://mp.weixin.qq.com/s/8F1C__iMIqun-IwfSiYBSw": "黑客的蜜罐:针对近期 CVE-2026-21962 及其他关键 WebLogic 漏洞在高度交互式 Oracle 蜜罐上的攻击研究", "https://mp.weixin.qq.com/s/PqTzkGsuXoWExXVEbJf6IA": "Chrome 再曝高危0day漏洞:CVE-2026-5281 !", "https://mp.weixin.qq.com/s/lAAppfkpz9Kzm9ivM7oVDg": "使用burpsuite插件如何无脑挖的第一个公益漏洞(小白挖洞)", "https://mp.weixin.qq.com/s/f0xTHde1OM6IysrOZDyW9Q": "白帽挖漏洞,看这1篇就够了,12年老司机的经验", "https://mp.weixin.qq.com/s/PQvOEWHzxckHnsLmowzcXg": "人工智能重要安全漏洞的通报-OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s/wNRCf72FjXkpzxX-TfYEHQ": "【2026最新版】全网最全网络攻防教程(0基础到进阶、漏洞挖掘、CTF比赛、护网行动、就业等等)", "https://mp.weixin.qq.com/s/5VSMKCry4KkYYTusIES7CQ": "PolyShell高危漏洞可致电商Magento系统遭遇未授权远程代码执行", "https://mp.weixin.qq.com/s/BWaW2zk5MtJSFOl5KOfOzw": "苹果扩展iOS 18.7.7更新到更多设备以阻止暗剑漏洞", "https://mp.weixin.qq.com/s/5TAxg8bdfSCmsyKxHSkC0Q": "某米C400智能摄像头的逆向分析与漏洞利用", "https://mp.weixin.qq.com/s/e3Alv9ruS5kHS_A0YOjjug": "信息安全漏洞周报【第068期】", "https://mp.weixin.qq.com/s/HKAIN387haD0C39luHujtA": "CVE-2026-22738 — Spring AI SimpleVectorStore 中的 SpEL 注入远程代码执行漏洞", "https://mp.weixin.qq.com/s/7Sm4XdD-by4z0ijr4cxcPA": "人工智能重要安全漏洞的通报-OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s/jClK3tYOWByjt8997ksO2w": "资产测绘在漏洞挖掘中的应用", "https://mp.weixin.qq.com/s/AFRg4pMmVPr4NPkx1LkYjw": "CVE-2026-5027 - Langflow 路径遍历导致远程代码执行漏洞 (CVSS 8.8)", "https://mp.weixin.qq.com/s/Msagzh8x7ftnUewe_CTXWA": "星巴克漏洞事件", "https://mp.weixin.qq.com/s/hseKSGXo2ZfqwM3eY6IX3Q": "苹果发布iOS 18.7.7更新以防御DarkSword漏洞", "https://mp.weixin.qq.com/s/XEp4P3hxLCny3Ii1FWqP0w": "「AI开源组件安全风险」系列二:VulnAgent发现 NVIDIA 3个AI基础设施漏洞,并获官方致谢", "https://mp.weixin.qq.com/s/et3YPRYda6D2CciWuHXyrw": "安全预警丨OpenClaw 多项高危安全漏洞预警", "https://mp.weixin.qq.com/s/FLJ69EfeBYuFCV5UxwbGVQ": "黑客利用 React2Shell 漏洞入侵了 700 多台 Next.js 服务器", "https://mp.weixin.qq.com/s/Sl224HcVcNLF5Ou9LTCMMQ": "React2Shell漏洞被批量利用:超700台Next.js服务器凭证大规模失窃", "https://mp.weixin.qq.com/s/bUv7mo9dhg-rNUe8ZEyvTA": "安全热点周报:谷歌修复了第四个在 2026 年被利用的 Chrome 零日漏洞", "https://mp.weixin.qq.com/s/VZe-2EuXfVCHlivqLqZrLg": "CNNVD | 通报OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s/Ce-w-wYgWE0MgND9bpDGjw": "「AI开源组件安全风险」系列二:VulnAgent发现 NVIDIA 3个AI基础设施漏洞,并获官方致谢", "https://mp.weixin.qq.com/s/gCiTbTuIfp-HTth53D6fBw": "告别\"假闭环\",看大型央企的漏洞管理真实践", "https://mp.weixin.qq.com/s/Pkn3e0RZ3ZNYV7iPhWPLmw": "TP-Link 多个漏洞使攻击者能够触发拒绝服务攻击并导致路由器崩溃", "https://mp.weixin.qq.com/s/4VRmCfM6um2mRGIe5mSy5w": "BlockSec 安全周报|八起攻击,漏洞都藏在哪?(3.23–3.29)", "https://mp.weixin.qq.com/s/L86RCrNlpz6LGqQSlcCMVw": "【成功复现】OpenCode远程代码执行漏洞(CVE-2026-22812)", "https://mp.weixin.qq.com/s/WIoBr8LWD0Xf_zBQOW1agA": "AI挖洞让赏金模式停摆?——HackerOne暂停漏洞收购的分析", "https://mp.weixin.qq.com/s/fA_UCNfK83JQ6buNmOFf4Q": "[漏洞播报]紧急提醒!!!工信部呼吁立即升级,iphone的这些iOS版本存在高危漏洞", "https://mp.weixin.qq.com/s/AUOkcKImIOcZVI3TEPirQA": "iPhone高危漏洞!立刻升级", "https://mp.weixin.qq.com/s/peVmGxpuyQn5-LSN1QwPJQ": "[漏洞播报]紧急提醒!!!工信部呼吁立即升级,iphone的这些iOS版本存在高危漏洞", "https://mp.weixin.qq.com/s/UF8Yu8O3yuN035kpa2gVtQ": "漏洞复现 | 天地伟业Easy7 uploadCheckImg 文件上传漏洞", "https://mp.weixin.qq.com/s/rymmWmyeE6qiKcHiQusgZg": "思科大震荡:起底ShinyHunters漏洞事件与Trivy供应链崩塌", "https://mp.weixin.qq.com/s/uBXEx-nkeFOdRI3VjTJicw": "Claude Code 源代码泄露数天后发现高危漏洞", "https://mp.weixin.qq.com/s/9gOtnyozYUIeu8um1FNJQw": "iOS 18也未能幸免!暗剑(DarkSword)与Coruna漏洞利用工具链深度剖析", "https://mp.weixin.qq.com/s/wxvBv7UcVvFYQLhsKeerVQ": "Progress ShareFile漏洞深度剖析:一次无需认证的远程代码执行之旅", "https://mp.weixin.qq.com/s/l15wP4FfjqmZ1-WUd06vEQ": "紧急预警!OpenClaw AI 代理框架曝高危漏洞", "https://mp.weixin.qq.com/s/rxI8C7pl9uU3jSpMDSjiQQ": "20小时武器化:Langflow漏洞CVE-2026-33017的深度复盘与个人知识库防御实战", "https://mp.weixin.qq.com/s/ak4mzGRf1HHIDomkJu7yjQ": "关于及时更新iOS特定版本 防范漏洞攻击利用的风险提示", "https://mp.weixin.qq.com/s/D1m21KWpBhZUTCJJoNMP7g": "【漏洞预警】CVE-2026-3502 TrueConf Client 更新代码完整性校验绕过", "https://mp.weixin.qq.com/s/TsMgrmbzHibv5xDnf4OgWg": "苹果用户注意!及时更新iOS特定版本 防范漏洞攻击利用风险", "https://mp.weixin.qq.com/s/WvQCPuwBpNSWi__B6ZzosA": "从小白到“挖洞达人”:SRC漏洞挖掘全流程实战指南(附学习路线和工具)", "https://mp.weixin.qq.com/s/htP3VzHu8jfx-7YQiZx6Pw": "【0day】最新RuoYi-Vue-v3.9.2存储型xss", "https://mp.weixin.qq.com/s/eFopMuxvt0yzVFYN8EFSwg": "威胁通缉令 · 红桃9丨Redis Lua RCE漏洞(新增)", "https://mp.weixin.qq.com/s/4UER9vNsWEmErEh_WR3Hyg": "多维度漏洞挖掘突破与实践探索", "https://mp.weixin.qq.com/s/GMm9Kggk-68BhwVkT0XLqQ": "14000余台F5 BIG-IP暴露,高危RCE漏洞正遭活跃利用", "https://mp.weixin.qq.com/s/4kk8UKGglxXTCOfHI3Rncw": "工信部提醒:苹果用户警惕网络攻击,及时升级版本、修复漏洞", "https://mp.weixin.qq.com/s/tCSZp_u-zQqezbi6Sm74ZQ": "AI漏洞演示:从路径遍历到 Root 夺权 —— Langflow CVE-2026-5027 漏洞全解析", "https://mp.weixin.qq.com/s/sG5deE3tbzja_ok-ulZemA": "WEB安全手册(红队安全技能栈),漏洞理解,漏洞利用,代码审计和渗透测试总结", "https://mp.weixin.qq.com/s/85UkeJBf62NeZKmG2xS0Pw": "苹果用户一定要看看!工信部紧急通报:iOS 13.0-17.2.1 Coruna多漏洞链工具包主动利用路径深度解析", "https://mp.weixin.qq.com/s/OugrJ7T7ue53MMdsU4angQ": "【工具推荐】高危漏洞EXP实用性工具", "https://mp.weixin.qq.com/s/GcID-KzaMoLTF9NhxzZDhg": "中科院:中美网络安全漏洞披露与共享政策研究", "https://mp.weixin.qq.com/s/fJ5n5v1IxYSeRxyfgzJOFw": "从沙箱逃逸到系统主宰:解析 2026 年首个重大 Windows 内核提权漏洞-华盟网", "https://mp.weixin.qq.com/s/vxQUAcVosXJ4ueFDhT_uAg": "漏洞复现 | Arris VAP2500 diag_s 存在命令注入漏洞", "https://mp.weixin.qq.com/s/73ScbKZRzxXxIfoczHbnDg": "手机漏洞无所谓?黑客说:谢了", "https://mp.weixin.qq.com/s/H0-ogtipSCBX0iHpzu4QRg": "Universal-POC Validator || 万能POC验证器", "https://mp.weixin.qq.com/s/IetO3WTgksnLyO3S8nbPZA": "【SRC实战】IOT漏洞挖掘实战", "https://mp.weixin.qq.com/s/yjWkxoJUAoiBzFWy68-M3g": "155个OpenClaw漏洞列表!速看!", "https://mp.weixin.qq.com/s/OMglDUZbVIWn92hWukIaAg": "反向支付漏洞", "https://mp.weixin.qq.com/s/GpHSIDyccZ71fPSbvVy_0g": "Fastjson漏洞复现上", "https://mp.weixin.qq.com/s/4XBkiguahhoy1ma2tRzRgA": "Dgraph 数据库存在严重漏洞,攻击者可绕过身份验证", "https://mp.weixin.qq.com/s/toUWdwleS-4MT-LMKnM9og": "Apache 流量服务器漏洞使攻击者能够触发拒绝服务攻击", "https://mp.weixin.qq.com/s/3VnNNmAzmDz0zyLb7YW3SQ": "图形化未授权访问漏洞扫描器,支持检测 40+种 常见服务的未授权漏洞", "https://mp.weixin.qq.com/s/VPTSmhTbEABYInFZ89HCVg": "漏洞#13 CORS 泄露 Token 结合 CSRF 实现无感账号接管", "https://mp.weixin.qq.com/s/R6Dnc2CW_OlxVTv-t1vg1g": "大模型在漏洞挖掘中的“逻辑跳跃”问题与解决方案", "https://mp.weixin.qq.com/s/_4YOGdCUyrrkAqzG72ovHw": "AI 大模型越狱语句自动化生成,覆盖金融测试 ∕ 底层对抗,精准挖掘模型防御漏洞", "https://mp.weixin.qq.com/s/hhvbv9yEs72Xk6ZgZojkHw": "OpenSSH 10.3 发布,修复 Shell 注入及其他安全漏洞", "https://mp.weixin.qq.com/s/u6ILXE87wjp1d1Kbj0Oo8Q": "今日(2026年4月6日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s/2_iivzfMZppd9n-9r8JyoQ": "FortiClient EMS 重大零日漏洞已被在野利用", "https://mp.weixin.qq.com/s/rULYChYHUKd8TZJW8nBFfQ": "CVE-2026-24291-Windows权限提升漏洞“RegPwn”复现分析", "https://mp.weixin.qq.com/s/z34baGGKsZvnqRf15NEAWw": "CVE-2026-33032|Nginx-UI高危漏洞,MCP端点未做身份验证,攻击者可直接远程接管!", "https://mp.weixin.qq.com/s/qjYH83QoPZZ78b0bMBX-7A": "漏洞预警 | LEAN MES系统文件上传漏洞", "https://mp.weixin.qq.com/s/Jwsz4e0aRIfTV13MEjXqXA": "RAG从元数据Key到RCE:CVE-2026-22738 深度解析Spring AI向量存储中的SpEL表达式注入与逃逸", "https://mp.weixin.qq.com/s/ONVBz36WILWupIL-pLS-ow": "漏洞预警 | Vim代码执行漏洞", "https://mp.weixin.qq.com/s/y9dVYQfxTVWVaeN8-jzfcw": "苹果用户注意!及时更新iOS特定版本 防范漏洞攻击利用风险", "https://mp.weixin.qq.com/s/aHbNtj0vL69vvODLitUwHA": "CVE-2026-35616:Fortinet修复被积极利用的高严重性漏洞", "https://mp.weixin.qq.com/s/27zoS0yf3b5P2xcjY7ZgjQ": "零基础到实战:Java 代码审计从入门到独立挖掘高价值漏洞", "https://mp.weixin.qq.com/s/QtqNTuAU0IEXTmM13jFZeQ": "AI攻防博弈进入“奇点”时刻|Claude4小时攻击警示:漏洞攻防必须AI原生化", "https://mp.weixin.qq.com/s/rjJwKq3qcgxmtzW1dzVGsw": "Cisco修复关键和高严重性漏洞", "https://mp.weixin.qq.com/s/mrdpoDQFZFsaBLzJ3eLUUA": "CVE-2026-1207|Django SQL注入漏洞(POC)", "https://mp.weixin.qq.com/s/3mHXT8nMT3JmsoetyTcl5w": "攻击者利用RCE漏洞,14,000台F5 BIG-IP APM实例仍暴露在线", "https://mp.weixin.qq.com/s/Wedx3iYuT8vq7D5Z6RVyVw": "对用于攻击 CrowdStrike EDR 的 0day 漏洞进行逆向工程", "https://mp.weixin.qq.com/s/_G7VML5rbrw8xsBWjHj6dg": "2026-04-07 最新CVE漏洞情报和技术资讯头条", "https://mp.weixin.qq.com/s/Eyuh_bSLVucsumY2_efy7w": "CNNVD 通报:OpenClaw 高危漏洞集中爆发,未授权可远程控机;ChatGPT 惊现 DNS 隧道数据泄露漏洞,敏感信息可被静默窃取| 牛览", "https://mp.weixin.qq.com/s/qO5x45u9ZzcOhcElTlIIXA": "【威胁情报】CVE-2025-62215 Windows内核本地权限提升 PoC公开(Exploit-DB 52494)", "https://mp.weixin.qq.com/s/ZK8P83J6XmDUI1ar3yVL8A": "“龙虾”再曝安全漏洞,天融信专家对话央视支招如何做好安全防护", "https://mp.weixin.qq.com/s/S7sD1d1VS_ZK-7AjxcZRFQ": "Fortinet发布紧急补丁修复FortiClient零日漏洞", "https://mp.weixin.qq.com/s/Vd0GfbodXmvweO5I8CJp5Q": "攻击者利用 Outlook 365 漏洞强制截获 NTLM 哈希", "https://mp.weixin.qq.com/s/2IpwEFCCgjtkKUV7JmSvAA": "Chamilo存在命令注入漏洞(CNVD-2026-14971、CVE-2025-50196)", "https://mp.weixin.qq.com/s/2T-79_19Orn9ujAukNePRA": "图形化未授权访问漏洞扫描器,支持检测 40+种 常见服务的未授权漏洞", "https://mp.weixin.qq.com/s/sCljuPajewd5FldFBBcGhw": "一次报复式 0day 漏洞披露背后的 MSRC 信任危机", "https://mp.weixin.qq.com/s/ld2uSh1yBMwhdKC30ZN60Q": "先知通用软件漏洞收集及奖励计划第十一期 正式开始!", "https://mp.weixin.qq.com/s/isveVZn78xSRDmjErKp9ug": "DudeSuite 漏洞播报 全网漏洞早知道【20260407】", "https://mp.weixin.qq.com/s/b_udKvis2KisM6rDCQKx5Q": "嘶吼安全动态|工信部NVDB平台发布风险提示:利用苹果iOS漏洞的攻击活动激增 黑客利用React2Shell发起自动化凭证窃取活动", "https://mp.weixin.qq.com/s/b90IOr4CTSQn-LpF7kj3jA": "迅饶科技 X2Modbus网关 GetConfig 信息泄露漏洞", "https://mp.weixin.qq.com/s/Xp9irB7ROI-Ae2xJOMExdw": "【漏洞预警】更新iOS 18.6也逃不掉 DarkSword内核漏洞利用", "https://mp.weixin.qq.com/s/XXbG0AWawSWDyj70-qmG_w": "漏洞复现 | Ilevia EVE X1 Server login.php 存在身份认证绕过漏洞", "https://mp.weixin.qq.com/s/z9hOwdefQptZV1KvpN5LPQ": "一篇文教会你若依漏洞复现", "https://mp.weixin.qq.com/s/us76OZkure7Jzstz7j0M8A": "小白入门网安该从哪下手?吃透这“漏洞三剑客”,你的实战之路就稳了!", "https://mp.weixin.qq.com/s/r82dxrr1n2Pts2_OTPWzzQ": "警惕!iPhone用户危险升级!俄罗斯APT组织TA446用上DarkSword漏洞套件,点开钓鱼邮件直接被攻破", "https://mp.weixin.qq.com/s/8ERLbrc6SZoBWB6L3d-sJQ": "Apache ActiveMQ 中的远程代码执行漏洞 (CVE-2026-34197)", "https://mp.weixin.qq.com/s/gDtYDprqKlMgJrE6kI0W1Q": "CertiK推出AI Auditor:兼顾低误报与高精准,实测锁定88.6%真实漏洞", "https://mp.weixin.qq.com/s/yRMpcDabaiY0gbrak4nmTQ": "【成功复现】Node.js inspect调试远程命令执行", "https://mp.weixin.qq.com/s/FGORx7M58alEdrG9ecvEsQ": "4月社区投稿活动 | 漏洞挖掘", "https://mp.weixin.qq.com/s/G-dMuc1kdclitJX0ITQzBg": "AI掌握零日漏洞:Claude Mythos Preview引领网络安全新时代", "https://mp.weixin.qq.com/s/amsItaDjsr-vaXtu8rfDOw": "第1次挖SRC漏洞,我赚了500元(附XSS漏洞完整报告模板)", "https://mp.weixin.qq.com/s/k5fhjHv0L4A45qmzaukDEg": "攻击者利用 Flowise 严重漏洞 CVE-2025-59528 实现远程代码执行", "https://mp.weixin.qq.com/s/EULyUsWNG-P67dLYlqc6VA": "【1 day 在野】博硕BGM系统存在任意文件读取漏洞 附Payload", "https://mp.weixin.qq.com/s/M27qr99dUFTlymu9YuTiXA": "零基础到实战:Java 代码审计从入门到独立挖掘高价值漏洞", "https://mp.weixin.qq.com/s/By5CaWLXUtkAl0eIHBe0aw": "【已复现】Vite WebSocket 任意文件读取漏洞(CVE-2026-39363)安全风险通告", "https://mp.weixin.qq.com/s/0PbD0c7mSjh5ZKMy-WDY_w": "用100美元谷歌云额度,我找到了华硕驱动的零日漏洞", "https://mp.weixin.qq.com/s/AT7T02mnfCCkn7CYfgAduA": "CVSS 9.8 警告!带你复盘思科无认证提权与RCE漏洞利用路径", "https://mp.weixin.qq.com/s/beBUY1nEQxyNdwngGT4u1A": "与Claude共度的 10 分钟:CVE-2026-34197 的远程代码执行", "https://mp.weixin.qq.com/s/vrhxZnQ72uofsffBw5wZvQ": "【视频】CVE-2026-32746,CVSS 评分高达 9.8", "https://mp.weixin.qq.com/s/dR1rXd7vwVLhHv0cnH8AiQ": "某CMS最新版本前台RCE审计流程", "https://mp.weixin.qq.com/s/oJm4lCZTQ3iNWLXbmfL2WQ": "天地伟业 Easy7 uploadCheckImg 任意文件上传漏洞", "https://mp.weixin.qq.com/s/6lUt1jr6KnNID9af7sE16w": "CNVD漏洞周报2026年第13期", "https://mp.weixin.qq.com/s/spfdvWN9oAomGPwGGEhAlQ": "155个OpenClaw漏洞列表!速看!", "https://mp.weixin.qq.com/s/dHf1AMS1VAHD255mjNIgLA": "雷神众测漏洞周报2026.3.30-2026.4.6", "https://mp.weixin.qq.com/s/sIhngZZP7QqEWBWcrUDEvw": "语音运行时漏洞:一个隐秘的Windows横向移动通道", "https://mp.weixin.qq.com/s/QYRAnhIp8OT1CbLDz6r3zQ": "vscode_tasks_command_execute_poc", "https://mp.weixin.qq.com/s/70eled0DcsbriYlPDb6Svw": "GPUBreach 漏洞利用 GPU 内存位翻转实现完整系统接管", "https://mp.weixin.qq.com/s/3hj4Udc-NZFOnN9m7Kylyg": "Windows Defender 0Day漏洞PoC曝光,攻击者可获取系统最高权限", "https://mp.weixin.qq.com/s/wbodII0aHGqn_I5_V-r7sA": "从 RCE 到全量凭证窃取:深度解析 CVE-2025-55182 攻击利用链", "https://mp.weixin.qq.com/s/CvqMKWhFzuTdhEWVqrQI9g": "【未修复】 漏洞概念验证(PoC)", "https://mp.weixin.qq.com/s/Wxubco1gpR9_ESvdn3g3YA": "CUPS漏洞链使远程攻击者能够以root用户身份执行恶意代码", "https://mp.weixin.qq.com/s/UWMkSyAAoM00d4-SPSV4XQ": "【漏洞通告】Vite WebSocket 任意文件读取漏洞 CVE-2026-39363", "https://mp.weixin.qq.com/s/vT_UWVZBSLn6YgMinZRTjw": "1.2万Flowise实例遭高危RCE漏洞攻击,AI平台面临沦陷风险", "https://mp.weixin.qq.com/s/9oe5k0mR7mkBzFacKzRcdg": "【已复现】OpenAM 预认证反序列化远程代码执行漏洞(CVE-2026-33439)", "https://mp.weixin.qq.com/s/4SbRrtlHO_k9z6m9fe9RLg": "Anthropic的Claude Mythos在主要系统中发现了数千个0day", "https://mp.weixin.qq.com/s/O-67Av9QgLXzdL56rddHUg": "AI攻防博弈进入“奇点”时刻|Claude4小时攻击警示:漏洞攻防必须AI原生化", "https://mp.weixin.qq.com/s/JAHknlm0Vg6xu_0Be-zd4A": "【支付漏洞】金额溢出导致的0元购-网络安全", "https://mp.weixin.qq.com/s/V_g-AuLrA_ouHPjFIFhm5w": "OpenSSL 多个漏洞暴露 RSA KEM 处理中的敏感数据", "https://mp.weixin.qq.com/s/q9ORxsure0LM3CLr-zThIg": "我利用阿里云的JVS Claw自动化完成漏洞发现、利用、验证和专业报告生成", "https://mp.weixin.qq.com/s/63yJUkiNWR_K1eVh1-poyA": "[工具推荐]BurpSuite 多漏洞自动化探测插件xia_tan (瞎探)", "https://mp.weixin.qq.com/s/m_G7JWMM5zxhx8EB0WA4iw": "OpenBSD黑客回应Anthropic发现的漏洞,“往事重现,令人不安”", "https://mp.weixin.qq.com/s/FlHyynSyUwdpVZMIxQiB-A": "Nacos 漏洞大起底:你的微服务可能正在\"裸奔\"!", "https://mp.weixin.qq.com/s/eQqEBMIGW3MNcoGWiuVKEw": "Docker授权绕过漏洞使主机暴露于潜在攻击者之下", "https://mp.weixin.qq.com/s/AM5CJPwUKEyprQzXK4mvJg": "【漏洞通告】Apache ActiveMQ Classic 远程代码执行漏洞 CVE-2026-34197", "https://mp.weixin.qq.com/s/OS0_2yiZBzLXuoiFdjv2pw": "【已复现】漏洞预警 | Apache ActiveMQ 远程代码执行漏洞(CVE-2026-34197)", "https://mp.weixin.qq.com/s/F_iCsZVqUvoTnC4zhB8Y7Q": "【高危漏洞预警】Apache ActiveMQ远程代码执行漏洞(CVE-2026-34197)", "https://mp.weixin.qq.com/s/r5C-C2E0OZZci8BwAQICPw": "【高危漏洞预警】Vite WebSocket任意文件读取漏洞(CVE-2026-39363)", "https://mp.weixin.qq.com/s/3RWtWphVFPpDmYKWmsRoHg": "迅饶科技X2Modbus网关GetConfig接口存在敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s/1244Ya5UrHHuWAs6KXnw2g": "J.a.k.o.b -如何更好的进行漏洞和**研究?", "https://mp.weixin.qq.com/s/397gOgvOHojuVcXDeq-zjA": "Vite 任意文件读取漏洞 | CVE-2026-39363复现&研究", "https://mp.weixin.qq.com/s/5iuI337gGe4VkI0pdyyu7g": "被动式检测水平越权漏洞", "https://mp.weixin.qq.com/s/KP3kOlIuJsaLjW5RNJDogw": "未授权访问漏洞扫描器 -- Unauthorized-vulnerability-tools(4月5日更新)", "https://mp.weixin.qq.com/s/MVXF3ZVU7WFiAXhakiL-hw": "为知笔记 login 弱口令漏洞", "https://mp.weixin.qq.com/s/pK3SdwSJ7XsH9gXktHZScQ": "拿捏1.8万台设备!从CVE-2023-50224看APT组织如何玩转边缘设备渗透", "https://mp.weixin.qq.com/s/huBv9N2DXDkmr9yta1Vr0w": "10分钟,让Claude挖出一个隐藏13年的ActiveMQ严重漏洞(CVE-2026-34197)", "https://mp.weixin.qq.com/s/dO64AcLjKPMlKAgPT6IJEA": "Anthropic发布Claude Mythos模型并启动“玻璃翼计划”强化漏洞防御", "https://mp.weixin.qq.com/s/D-W4UJmQxOpYX3woKJT_PQ": "安卓高通芯片0day漏洞CVE-2026-21385", "https://mp.weixin.qq.com/s/qs0OwDbf46dyPuLRjNcNQA": "Windows Defender 0Day漏洞PoC曝光,攻击者可获取系统最高权限", "https://mp.weixin.qq.com/s/78dDf-e71pr5PGMhpYwG1Q": "Rapid7一线实录:CVE-2025-59718 FortiGate 防火墙入侵事件深度剖析", "https://mp.weixin.qq.com/s/XxAAwg6vI0FiaFpC1-83ng": "2026 年高危漏洞 TOP10 盘点与修复实战指南", "https://mp.weixin.qq.com/s/ySW4KbV_SpLmlTqJS3Bv2A": "Linux和Unix打印系统曝出漏洞链,远程攻击者最终可拿root权限", "https://mp.weixin.qq.com/s/0lJTczDlxa8SpcRCeceHZg": "没有任何漏洞,黑客是如何接管全球数百万开发环境的?——深度拆解 UNC1069 供应链猎局", "https://mp.weixin.qq.com/s/b4ylkD7TMW9IWg3Wr9a1aw": "4月社区投稿活动 | 漏洞挖掘", "https://mp.weixin.qq.com/s/R8jBUcbp2NIJ7cZm4LE-Hg": "【成功复现】Vite WebSocket任意文件读取漏洞(CVE-2026-39363)", "https://mp.weixin.qq.com/s/JTqZMKwLI1a3slzKqC-Kcw": "Claude Mythos 模型:已发现数千零日漏洞,还能自己逃离沙箱", "https://mp.weixin.qq.com/s/8YQq5LvZMRev-1atVQfW3w": "【已复现】Claude Mythos最新发现的Linux内核0day漏洞", "https://mp.weixin.qq.com/s/3W1BpWJNOfAoBoqmqyW41A": "Meta发布Muse Spark,多智能体架构与隐私风险引行业关注;CNNVD 2026 年第14 周漏洞周报:新增 1298 个漏洞,超危 82 个需紧急修复| 牛览", "https://mp.weixin.qq.com/s/K0ZLejy8jTW9PGXKbsMt0Q": "【漏洞通告】Vite Dev Server WebSocket 任意文件读取漏洞(CVE-2026-39363)", "https://mp.weixin.qq.com/s/6s5_ToRJsBk7ucJEgZ8hYQ": "【漏洞通告】WWBN AVideo存在信息泄露漏洞(CVE-2026-35452)", "https://mp.weixin.qq.com/s/k_5PrW1KV1pCdGg9cGgIQQ": "【漏洞通告】Code Extension Marketplace存在目录遍历漏洞(CVE-2026-35454)", "https://mp.weixin.qq.com/s/C1_RMxdY7xLYg758aYfFGg": "【漏洞通告】WWBN AVideo存在访问控制错误漏洞(CVE-2026-35450)", "https://mp.weixin.qq.com/s/nalcvjCOaT3h_WMEwOSGfQ": "关于漏洞学习的一些反思", "https://mp.weixin.qq.com/s/EF1FgSMD2GnrxFUbTg87ZQ": "【漏洞通告】goshs存在目录遍历漏洞(CVE-2026-35471)", "https://mp.weixin.qq.com/s/vnrIlRMeJjwohSfozQ-SSg": "我发现不上班真的会上瘾,今天躺在家挖漏洞,入手500", "https://mp.weixin.qq.com/s/sfcq1xDLLoh5pgujdjs2qg": "飓风安全发现OpenClaw高危漏洞", "https://mp.weixin.qq.com/s/pXUt7ewNu1U1AJj3y3EC4A": "Chrome浏览器存在严重漏洞,攻击者可利用这些漏洞执行任意代码", "https://mp.weixin.qq.com/s/JHouV0jJoh8vg0spDe7tTw": "【已复现】OpenAM 远程代码执行漏洞(CVE-2026-33439)安全风险通告", "https://mp.weixin.qq.com/s/AXG9IXCFNtX7C7lMrS4YIg": "已存在13年的Apache ActiveMQ 严重漏洞可用于远程执行命令", "https://mp.weixin.qq.com/s/Nh8sx89AaMTlhSu4YdtqWA": "发现 33 个 OpenClaw 与 Linux 内核漏洞后,我们也从 Claude Mythos 看到了安全攻防的下半场", "https://mp.weixin.qq.com/s/k3Ako2b9whrKbtuMuxc09g": "【已复现】OpenPrinting CUPS 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s/jg7FxhBvWtr0XEDg2obQCg": "BlockSec 安全周报|九起攻击,从合约漏洞到治理失守(3.30–4.05)", "https://mp.weixin.qq.com/s/wBvlYltxQoV-rNsho9qzlQ": "微软0day-漏洞的之“你们这些天才自己就能搞明白”后续问题········", "https://mp.weixin.qq.com/s/1RbtA-LfqXDATwfqKeCOaA": "威胁通缉令 · 红桃K丨Tomcat RCE漏洞(新增)", "https://mp.weixin.qq.com/s/vV0zHzicF_AGGftp8zqLow": "CISA:须在周日前修复已遭利用的 Ivanti EPMM 漏洞", "https://mp.weixin.qq.com/s/uky7CJGa8fFQy_G3y8pELA": "【论文速读】|RuleForge:面向大规模 Web 漏洞检测的规则自动生成与验证", "https://mp.weixin.qq.com/s/4-ZSjPjUYKG8JqZVbakffQ": "最新Nessus2026.4.9版本主机漏洞扫描∕探测工具Windows∕Linux下载", "https://mp.weixin.qq.com/s/fbQ0WINl2pb-zkOd9UDb6g": "朝鲜黑客组织的分布式运作架构、安全漏洞与加密货币洗钱链路", "https://mp.weixin.qq.com/s/jOUl7XYQ08OUfRYdbwQTgw": "整合型漏洞扫描工具 -- vulnscan(4月6日更新)", "https://mp.weixin.qq.com/s/pnLQRn6XnKFQCdFn6GcX_Q": "漏洞预警 | Vite任意文件读取漏洞", "https://mp.weixin.qq.com/s/Dx7SCle0nY0HaMYgU6R7xA": "黑客利用Flowise关键漏洞攻击数千个AI工作流", "https://mp.weixin.qq.com/s/0NPDcqAVJxewvifn2bbqqw": "【视频】藏在收款机里的“特洛伊木马”:CVE-2026-4583 漏洞如何反向接管你的电脑?", "https://mp.weixin.qq.com/s/jtkxrdR_lMQAbsm4_cnyhw": "400页 生成式AI安全:防御、威胁与漏洞", "https://mp.weixin.qq.com/s/8wrcBarD_WU8sHRLtc6fGA": "深入解析:EngageLab SDK意图重定向漏洞如何击穿安卓沙箱?", "https://mp.weixin.qq.com/s/pA3qKOLhfdMsLETsQdaPLA": "涉密网络管理工作崩溃实录:半米高制度堆成山,检查仍漏高危漏洞!这5个\"隐形坑\"你中了几个?", "https://mp.weixin.qq.com/s/9tBzllkKr6YXnbQRKvZccw": "Spring&SpringBoot框架漏洞检测工具", "https://mp.weixin.qq.com/s/XvbK5_y0P_iOe3HHrov06g": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/evnY8mz7NGtIUopC5hNRtA": "基于LLM的水平越权漏洞白盒实践", "https://mp.weixin.qq.com/s/nJ6h_nPP-l5nXgEwBrj9fw": "【红队】一个检测VUE站点未授权漏洞", "https://mp.weixin.qq.com/s/sdlwUKIUPIcTGcJSugt7Zg": "紧急预警!Apache ActiveMQ 爆出高危 RCE 漏洞 (CVE-2026-34197)", "https://mp.weixin.qq.com/s/I9hb-4ejEMl8c4QTSvKW8g": "注意!中间件IIS是这个版本存在该漏洞", "https://mp.weixin.qq.com/s/oLwkMWuYEnsLFUVcveUSLw": "【登录背后的秘密-第五章第三节】一次真实的赏金狩猎:利用验证码生成与校验分离的漏洞拿下账户", "https://mp.weixin.qq.com/s/yn04i5qZJ89mv_9cOkKE4A": "【漏洞通告】Progress ShareFile 远程代码执行漏洞(CVE-2026-2701)", "https://mp.weixin.qq.com/s/-UG8NexckrCs2BFWKx2cTA": "谷歌不再接受AI提交的漏洞检测报告", "https://mp.weixin.qq.com/s/FJSroX2VyFFxKZ9buhoIBA": "能信安:漏洞通告", "https://mp.weixin.qq.com/s/u2NKG4ZYQM4PUqbu1l2ggA": "WordPress Ditty SSRF漏洞(CVE-2025-8085)", "https://mp.weixin.qq.com/s/tfpLEQDTNvUpr6_nClMytw": "【1 day 在野】WordPressMailMint-CVE-2026-2025-信息泄露 附Payload", "https://mp.weixin.qq.com/s/DedNUBMF2z5NGP89tBS4zw": "【漏洞通告】CUPS 本地令牌泄露漏洞(CVE-2026-34990)", "https://mp.weixin.qq.com/s/u25arhv1_QbP_UVmPmoCFg": "Mythos之后:漏洞挖掘从“找问题”走向“证明漏洞”", "https://mp.weixin.qq.com/s/dTs9aDDuU1DHwNmQ5j19nA": "Progress ShareFile曝新漏洞 可组合实现未认证远程代码执行", "https://mp.weixin.qq.com/s/hDpqHjKnUj4iABQ6OeIs9A": "安全热点周报:Fortinet 发布紧急补丁修复 FortiClient 零日漏洞", "https://mp.weixin.qq.com/s/hj9rI8bmcojZ-Pgbt--axQ": "【安全警示】Claude Mythos隐藏能力曝光:AI发现零日漏洞的震撼一周", "https://mp.weixin.qq.com/s/F33ZNryCujq3IXzEguwGQQ": "Citrix NetScaler 正在积极排查 CVE-2026-3055 (CVSS 9.3) 内存过度读取漏洞", "https://mp.weixin.qq.com/s/YdumXnNsmZqwOgIQ2BmfaQ": "你的WinRAR还在“裸奔”?——近三年高危漏洞大盘点", "https://mp.weixin.qq.com/s/BcNCj5AorloAfZ3EFFTeLQ": "【工业控制系统网络安全系列课程】第2课-工业控制系统的网络安全风险-过程控制漏洞利用(二)典型漏洞利用路径-物理过程影响攻击", "https://mp.weixin.qq.com/s/lsgUtAGI5Uxp6phegasiSg": "CVE-2026-39363:Vite Dev Server WebSocket 任意文件读取漏洞深度剖析", "https://mp.weixin.qq.com/s/aZCyNZxktA4BAeNSDvfezg": "React 服务器组件新漏洞可能使攻击者触发拒绝服务攻击", "https://mp.weixin.qq.com/s/1Yhg0fk3QcZlrCAoqPauWA": "常见Web漏洞攻击分析", "https://mp.weixin.qq.com/s/fMMkx5K6d_Gyo3Ehlkphqg": "代码审计 | FastJson 1.2.24 反序列化 RCE 漏洞分析", "https://mp.weixin.qq.com/s/GP95K87kbflb51_AAVQz8Q": "行业首家!360漏洞挖掘智能体率先完成在野0-day漏洞根因分析与复现", "https://mp.weixin.qq.com/s/Pao6vUWx8uSUnrcJ5vYtCw": "手机“看一眼就死”:CVE-2026-0049 零点击 DoS 实战全复现", "https://mp.weixin.qq.com/s/WUiNfUYkKH9BcJnOc2yfWQ": "信息安全漏洞周报【第069期】", "https://mp.weixin.qq.com/s/PjNXBFe8Eona3ep1vAqm9Q": "行业首家!360漏洞挖掘智能体率先完成在野0-day漏洞根因分析与复现", "https://mp.weixin.qq.com/s/fEVcQ8TxCSZ7_pezbpvJJQ": "【高危漏洞预警】Fortinet FortiClient EMS 访问控制不当漏洞(CVE-2026-35616)", "https://mp.weixin.qq.com/s/OyoFjDa8PeUemzBT9cIv6g": "【高危漏洞预警】OpenAM远程代码执行漏洞(CVE-2026-33439)", "https://mp.weixin.qq.com/s/_d3Ax1ilNzMCpGrpPONYhA": "TP-Link 设备面临风险,多个安全漏洞可能导致设备被恶意控制", "https://mp.weixin.qq.com/s/mGjruZIgG5qREBAyp2a-og": "霍格沃茨漏洞赏金学院开学啦!BBTI分院帽说:戴上我,让我看透你的挖洞之魂。", "https://mp.weixin.qq.com/s/IsZjIGKrO7bjWZjjuGs-eQ": "CNNVD | 关于Apache ActiveMQ安全漏洞的通报", "https://mp.weixin.qq.com/s/hnUC8Facx19hGVjdogZ_zA": "CVE-2026-4747:一个FreeBSD内核高危漏洞的利用复盘", "https://mp.weixin.qq.com/s/ZJ22euGbz0oaxrf4bU5dXA": "攻击大模型的十大方法和漏洞", "https://mp.weixin.qq.com/s/encMZSPfULvMovdLxxBZ3A": "【登录背后的秘密-第六章】高价值的逻辑漏洞往往藏在这里:一次对“记住我”Token的降维打击", "https://mp.weixin.qq.com/s/SZG_nvVa7t_WA-00T-6P9g": "瞻博网络默认凭据漏洞导致未授权完全访问", "https://mp.weixin.qq.com/s/Z61tvmg8WaRkL2h3m60eUA": "从公告到入侵不足十小时:Marimo Python Notebook 预授权 RCE 事件研判", "https://mp.weixin.qq.com/s/EDXVcMd8ruiCL51Gm7mbbw": "没木马、没0day,仅靠一个配置错误,企业SharePoint被洗劫一空", "https://mp.weixin.qq.com/s/v3W227vSupKRxkYpigLh2w": "JWT认证漏洞实战解析", "https://mp.weixin.qq.com/s/iCkibNhvriaRYSUAbqVLPA": "Adobe正式官宣Reader漏洞已被在野利用,打开PDF可执行任意代码", "https://mp.weixin.qq.com/s/7FAz95xtOtj16Lqn7ZikmA": "【成功复现】Apache ActiveMQ远程代码执行漏洞(CVE-2026-34197)", "https://mp.weixin.qq.com/s/2dauQtVxlZVdNAB1VxXRpA": "Claude 编写了一个完整的 FreeBSD 远程内核 RCE 漏洞,并利用了 Root Shell(CVE-2026-4747)", "https://mp.weixin.qq.com/s/foF-51x0z1DQnPgP17Sdhw": "Claude 已经能挖漏洞了,那安全工程师还剩什么?", "https://mp.weixin.qq.com/s/hevULpKLNHXVmy4-2t7djw": "2026挖漏洞小白入门指南:怎么挖、去哪挖?漏洞挖掘零基础入门到精通(超详细),看这一篇就够了!", "https://mp.weixin.qq.com/s/EaFeQ0CPPY1emzIYYDFrAw": "Nginx曝新漏洞,特定配置下可实现任意文件读写", "https://mp.weixin.qq.com/s/xn4X0DDUW5MSILPyu94W5g": "GitLab修复多个可导致拒绝服务和代码注入攻击的漏洞", "https://mp.weixin.qq.com/s/WHdtbiBdWmUYW5SiloIh1Q": "Windows Defender 0Day漏洞PoC曝光;Anthropic拒美军AI武器化遭封杀 | FreeBuf周报", "https://mp.weixin.qq.com/s/DQX6I-a5-DvEQIOaDdRLFA": "【工业控制系统网络安全系列课程】第2课-工业控制系统的网络安全风险-过程控制漏洞利用(三)漏洞利用技术详解", "https://mp.weixin.qq.com/s/GfMl2I7h0Rgou8U1V2rzXw": "AI路由漏洞可被利用注入恶意代码并窃取敏感数据", "https://mp.weixin.qq.com/s/pgtf9R-smm085Jsi3BwbZA": "Storm-1175 高频勒索攻击全链路:从 N-day 漏洞到 Medusa 部署最快仅 24 小时", "https://mp.weixin.qq.com/s/lV3b77o9XjT7PPADKpWy7A": "【工业控制系统网络安全系列课程】第2课-工业控制系统的网络安全风险-过程控制漏洞利用(四)真实案例分析", "https://mp.weixin.qq.com/s/PD2sUcj3NQytfBpAdC67aA": "又一个Confluence倒下了:CVE-2023-22527漏洞导致ELPACO-team勒索软件入侵", "https://mp.weixin.qq.com/s/z-475KDrSnw4tS1-ev7IFA": "工具推荐 | 快速探测可能存在SQL注入漏洞", "https://mp.weixin.qq.com/s/7vwpX9F3fNcS8ux-JJ_cUA": "规模化 SAST & SCA 漏洞修复", "https://mp.weixin.qq.com/s/UDf_TeEs0AhRbHzd2J6bDQ": "AI驱动漏洞海啸来袭:修复窗口从数周压缩到数小时", "https://mp.weixin.qq.com/s/3o_hUBVkb_WqKeB_mvtFdQ": "0day--JeecgBoot v3.9.1 多漏洞审计过程", "https://mp.weixin.qq.com/s/Q_2DOia4fxaVwEaP7Tmnfg": "Src--支付漏洞实战", "https://mp.weixin.qq.com/s/fdoYcbkkZH2jXQ2cjbatGQ": "java内存马之-Spring-Interceptor-手把手投喂内存马", "https://mp.weixin.qq.com/s/-2BwwLCz-Sp1wbBaJaHPQQ": "【视频】React 服务器函数原型污染 (RCE)", "https://mp.weixin.qq.com/s/qKVZPPXZ4WIIDJw0Q0rvrw": "【登录背后的秘密-第六章第二节】什么!Stay-logged-in Cookie没加盐?还有XSS漏洞?那我就不客气了", "https://mp.weixin.qq.com/s/neobyUOjW4Rd0PQ6kxTPyQ": "漏洞预警 | parsl SQL注入漏洞", "https://mp.weixin.qq.com/s/eKJMYCThcMK-sgyhqIdQag": "Adobe 修复了正被积极利用的 Acrobat Reader 漏洞 CVE-2026-34621", "https://mp.weixin.qq.com/s/TiOSLn-Et-hyzQ4-an8Kdg": "实战分析——一起0day附件邮件攻击真实案例的深度技术拆解", "https://mp.weixin.qq.com/s/2N-3lvaPig9eo9S73kVMeg": "与Claude共处的10分钟:深挖Apache ActiveMQ远程代码执行漏洞(CVE-2026-34197)", "https://mp.weixin.qq.com/s/95nd8n2RMWT6JsxcOCozNg": "CVE-2026-39987:Marimo 远程代码执行漏洞在披露后数小时内即遭利用", "https://mp.weixin.qq.com/s/6BpCnXURo5vinZqBkXt9pw": "漏洞预警 | LEAN MES系统SQL注入漏洞", "https://mp.weixin.qq.com/s/OJ9uotBEXlJnPf-oXx-UOg": "Claude Mythos找出27年前大漏洞,网安饭碗保不住了", "https://mp.weixin.qq.com/s/svM2fKlM7TXAItPEKSA27w": "打破K8s命名空间隔离:CVE-2026-4789 Kyverno漏洞详解", "https://mp.weixin.qq.com/s/PLOiAq8Nh2xBzmAHfFNR5A": "漏洞复现 | 中成科信综合管理平台 UploadFile 存在任意文件上传漏洞", "https://mp.weixin.qq.com/s/6YlCwWoHclWGzu_tIpvEZQ": "Fortinet FortiClientEMS 访问控制不当漏洞CVE-2026-35616利用分析及历史漏洞总结", "https://mp.weixin.qq.com/s/vVvsiHE0tfMLBiuofErh-g": "文件上传漏洞总结", "https://mp.weixin.qq.com/s/ifEiawLaPusWlyOuvio-iA": "【自研工具】Zack-AI-Scanner AI智能Web漏洞扫描BurpSuite插件", "https://mp.weixin.qq.com/s/QuaQeQJXu7sOpBHAGYS1aA": "Nginx文件解析漏洞", "https://mp.weixin.qq.com/s/mN3CDNEWSATcRTUp0SF5FQ": "Claude Code源码泄露:一个低危漏洞,暴露了一个大问题", "https://mp.weixin.qq.com/s/oCXmFaAqmbL-Esk_dXJ3jA": "TP-Link路由器一次曝出5个漏洞,家庭和小办公网关再次站上风口", "https://mp.weixin.qq.com/s/BZ9DwQ17qxK-h9JBqcXM0g": "EarthEmbeddingExplorer:零门槛、多模态,像搜图一样探索全球卫星影像", "https://mp.weixin.qq.com/s/Ryuqi4xMPYE0gUdXjcOWwg": "【在野利用】Adobe Acrobat Reader 远程代码执行漏洞(CVE-2026-34621)安全风险通告", "https://mp.weixin.qq.com/s/ALRmxBvIKyttLJqYM7jBOA": "【已复现】Nginx ngx_http_dav_module 堆缓冲区溢出漏洞(CVE-2026-27654)安全风险通告", "https://mp.weixin.qq.com/s/9kK56afE9x_PnFmRSx1odQ": "【漏洞通告】Nginx 缓冲区溢出漏洞 CVE-2026-27654", "https://mp.weixin.qq.com/s/kBZ2X7eEmuTRjLIXkM43HQ": "【成功复现】Nginx溢出文件读写漏洞(CVE-2026-27654)", "https://mp.weixin.qq.com/s/Phc50MWzVus_wrVy0OwKlA": "Axios 双重危机:CVE-2026-40175 漏洞链与 UNC1069 供应链投毒", "https://mp.weixin.qq.com/s/lniu2gT3XXDH0iuJCRCB6Q": "从漏洞到规则:安全知识自动提取的初步探索", "https://mp.weixin.qq.com/s/HP8FmF4yvLpQNfezKUiqpg": "【漏洞通告】Adobe Acrobat 远程代码执行漏洞(CVE-2026-34621)", "https://mp.weixin.qq.com/s/X_Dgl6iGIAZLdAE0x1GL-A": "关键的WordPress插件漏洞让攻击者绕过认证并获得管理员访问权限", "https://mp.weixin.qq.com/s/mfrCvwyr2UigSC6vnjPTTw": "漏洞挖掘 | 一次数据库是Hive的SQL注入", "https://mp.weixin.qq.com/s/ITrqweYv7yKYojiuDEXHhA": "筑牢开源安全防线,360荣膺开源鸿蒙社区漏洞挖掘双料大奖", "https://mp.weixin.qq.com/s/0MPD0zYdT43IM4GCw-7CRg": "“下一代Python笔记本”marimo曝高危漏洞:无需密码,连上WebSocket即可远程控制服务器 (CVE-2026-39987)", "https://mp.weixin.qq.com/s/17LunUtJ4TM5oMNSlz7PIg": "Anthropic新模型颠覆网络安全:美英德政府加急评估影响,传统漏洞或不复存在", "https://mp.weixin.qq.com/s/id7KduNRt00R00JnKT2eFg": "Apache Tomcat 漏洞使加密拦截器绕过成为可能", "https://mp.weixin.qq.com/s/3Dm6vTqVd_cV34sfxNzxxQ": "MyBatis框架SQL注入漏洞深度剖析", "https://mp.weixin.qq.com/s/pbSUX7gtkvSBJWzNQZwIdw": "玲珑安全第八期漏洞挖掘培训,不是“教过就行”,而是实打实“带会”", "https://mp.weixin.qq.com/s/OH0X9hHdRP-8djW-row_0w": "Adobe 紧急修复已遭利用的 0day", "https://mp.weixin.qq.com/s/EWo9rapf7r-NAb9eVVYXnw": "Anthropic新模型颠覆网络安全:美英德政府加急评估影响,传统漏洞或不复存在", "https://mp.weixin.qq.com/s/7PQtfrLnn01YqqNFjgzoHg": "筑牢开源安全防线,360荣膺开源鸿蒙社区漏洞挖掘双料大奖", "https://mp.weixin.qq.com/s/5ML_O5M58UWCvKt8Vc9IGA": "Marimo 高危预认证 RCE 漏洞已遭活跃利用", "https://mp.weixin.qq.com/s/_g_yapCvMyC1KJm0JEhxWw": "Apache ActiveMQ存在远程代码执行漏洞(CVE-2026-34197) 附POC", "https://mp.weixin.qq.com/s/A1QkHjxR-txLHynisXDyiw": "第八期漏洞挖掘培训,不是“教过就行”,而是实打实“带会”", "https://mp.weixin.qq.com/s/ZMZhdhNijO4NaMVWkxpEuQ": "LiteLLM 遭受攻击:三重威胁漏洞使 AI 网关面临全面接管风险", "https://mp.weixin.qq.com/s/RgY94mgqIf7PYnprJ91Wzg": "未修复的RAGFlow漏洞:低权限用户也能远程执行命令", "https://mp.weixin.qq.com/s/xIYctO7IF1zAd2PcjLVFsQ": "【高危漏洞预警】Nginx ngx_http_dav_module堆缓冲区溢出漏洞(CVE-2026-27654)", "https://mp.weixin.qq.com/s/UQxqGB17wWM3ADscgrURGA": "第八期漏洞挖掘培训,不是“教过就行”,而是实打实“带会”", "https://mp.weixin.qq.com/s/TBHmht4qTippf47eFNy3Ww": "Google Chrome WebGL 越界读∕写漏洞允许远程代码执行。", "https://mp.weixin.qq.com/s/KLXxKOaEru0s5VokBWPhIw": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/fPp2xRmsS--Tg3JXgCk5Cw": "漏洞复现 | 畅捷通-畅捷CRM getsort 存在SQL注入漏洞", "https://mp.weixin.qq.com/s/HYI90JMWnIstDQt_mF4lZg": "漏洞预警 | Apache ActiveMQ远程代码执行漏洞", "https://mp.weixin.qq.com/s/70eIhMVueNAIDWPe6dkIfg": "【玲珑安全】第八期漏洞挖掘培训,不是“教过就行”,而是实打实“带会”", "https://mp.weixin.qq.com/s/8tTy8b2cbOnjEXVDDAfMpw": "Axios爆SSRF漏洞,特定条件下可导致RCE", "https://mp.weixin.qq.com/s/okqH_AOcJ3sJtvOnvkwYBw": "“Jenny是我的朋友”——用MCP打造我的AI漏洞猎人", "https://mp.weixin.qq.com/s/RgqSevlBOIK-R3tLhqclow": "第八期漏洞挖掘培训,不是“教过就行”,而是实打实“带会”", "https://mp.weixin.qq.com/s/qErGX3N0zDLbTS2lrzBBEw": "代码审计 一次SQL注入漏洞挖掘", "https://mp.weixin.qq.com/s/bjFaonVAdBJY9ymUu9_lBA": "一次二进制RCE漏洞审计", "https://mp.weixin.qq.com/s/Y2WS-gBz2cTaOcDHbOGx1w": "当网站被黑时,应该怎么排查问题和漏洞", "https://mp.weixin.qq.com/s/8c7UtgaRyWzEEmbEG4A3AA": "[漏洞复现]某华ICC智能物联综合管理平台存在SQL注入漏洞", "https://mp.weixin.qq.com/s/5YD-aW98Fu1VNAlUanuvwA": "【漏洞通告】Marimo WebSocket 认证绕过漏洞(CVE-2026-39987)", "https://mp.weixin.qq.com/s/y0N3ebgcZeQZmMnoCBDLLg": "【安全圈】金山毒霸、360 安全卫士被曝存在内核驱动高危漏洞", "https://mp.weixin.qq.com/s/IZJi7UZiWjocSDBTdCyPZA": "【漏洞通告】Apache ActiveMQ 远程代码执行漏洞(CVE-2026-34197)", "https://mp.weixin.qq.com/s/FtQ_p2gxVHxHQ4Ibwfot-w": "【安全圈】开源监控平台 Grafana 曝漏洞,黑客可诱导 AI 助手泄露企业数据", "https://mp.weixin.qq.com/s/gKYb_GJj_co403nudNvkgQ": "Windows Defender 0day 提权漏洞 【预警】", "https://mp.weixin.qq.com/s/4hkGV7Iqj6ZD-hHXDfVZcg": "Apache Tomcat 紧急修复多个漏洞", "https://mp.weixin.qq.com/s/zkBXYkmDlHMNQtxkdCOwZQ": "Axios 严重漏洞可导致 RCE", "https://mp.weixin.qq.com/s/ljO0hWB4u-NMj25gcDihQA": "NCTF 2026-鸡爪流高手(游戏服务器程序逆向 下溢出漏洞)", "https://mp.weixin.qq.com/s/2tQ27h8o403qrzyeaDBRHQ": "美国网络安全和基础设施安全局 (CISA) 警告:Fortinet SQL 注入漏洞正被积极利用", "https://mp.weixin.qq.com/s/UjP2xir1OEovJigkZWM9qw": "Windows中如何根据systeminfo信息获取需要修复的漏洞列表", "https://mp.weixin.qq.com/s/CsjqffVcf0J1SCmQnJT5yQ": "2026年3月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s/AZZMN6ojyX0-hOEBGxyiCg": "JWT认证漏洞实战解析", "https://mp.weixin.qq.com/s/bJU8T8sILzvZsc68L05mHg": "美英报告称Mythos模型无限压缩漏洞披露到武器化时间窗口", "https://mp.weixin.qq.com/s/4QAet8nXJrFpOiJ1jZmsZQ": "第三方 SDK 重大漏洞曝光:超 3000 万加密货币钱包面临数据泄露风险", "https://mp.weixin.qq.com/s/usrLku0LKmxfO7nOgKKbYw": "【视频】CVE-2025-2563: WordPress 提权", "https://mp.weixin.qq.com/s/NM2vB3U30Lejhpgh3FZhYw": "漏洞预警 | LEAN MES系统任意文件上传∕删除漏洞", "https://mp.weixin.qq.com/s/mXGZpxFyPhEwP5qY-I_qbQ": "攻击者利用CVE-2025-0520漏洞,攻击未打补丁的ShowDoc服务器", "https://mp.weixin.qq.com/s/s78ZiqEKWkNvC__BdEJjGw": "Windows事件日志服务曝内核地址泄露漏洞,影响NVMe存储设备", "https://mp.weixin.qq.com/s/jHtxeaXbEGVLcgGvQ8v8kg": "F5 安全公告:NGINX ngx_http_dav_module 漏洞 CVE-2026-27654", "https://mp.weixin.qq.com/s/Ngu9c1tNIfkCig65sWPLtg": "Claude Mythos预览版,具备强大0Day漏洞发现与利用能力", "https://mp.weixin.qq.com/s/smPgWehyPiWVbWG1G2ULmw": "严重——Orthanc DICOM 服务器中的 9 个漏洞威胁医疗数据完整性", "https://mp.weixin.qq.com/s/2b4AmQ9jeKGxnNsL731gMA": "CVE-2026-34197|Apache ActiveMQ远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s/zsnLoIP31MUWu3WH_olA-g": "【SRC实战】通过报错拿下高危漏洞", "https://mp.weixin.qq.com/s/VKZgd1PZ7gxXktf4ttQ-GQ": "CVE-2026-33439|OpenAM反序列化远程代码执行(POC)", "https://mp.weixin.qq.com/s/1eGd5UQC0_nxZGp1wJIMkQ": "漏洞预警 | OpenAM远程代码执行漏洞", "https://mp.weixin.qq.com/s/6VJlmBRsmtQsTMzfFCGndQ": "Web应用漏洞自动化扫描工具 -- webjc(4月13日更新)", "https://mp.weixin.qq.com/s/0in0EwZm_iJg5Rg7HK4Jng": "明源地产ERP GetErpDept.ashx接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s/3jZJDoa-x6HVEOi197Dzdg": "月神SRC漏洞挖掘课程・第六期全新升级", "https://mp.weixin.qq.com/s/hySfiGzFrxILRvabMCuPIQ": "API漏洞赏金大师班2026:寻找隐藏端点", "https://mp.weixin.qq.com/s/nx_PGgKthCC5gmlAn70WuQ": "GraphQL RCE:通往云身份的攻击链", "https://mp.weixin.qq.com/s/D02Injn3oUbYLBze1i3_Tg": "月神 SRC 漏洞挖掘课程・第六期 全新升级", "https://mp.weixin.qq.com/s/8LFA2CjMBNquMHFSAblNgA": "微软 SharePoint Server 零日漏洞已被攻击者积极利用", "https://mp.weixin.qq.com/s/HJXBIP4ItdZAtWk1lQ2T2Q": "国内两大安全软件内核驱动高危漏洞研判", "https://mp.weixin.qq.com/s/n8Ia5fxTfL4FxGERjJ0gtA": "“漏洞末日”警钟预警:AI批量发现黑客可利用的漏洞", "https://mp.weixin.qq.com/s/41grWGyEYxiV9gGt3byPcw": "0Day漏洞可禁用CrowdStrike EDR,签名驱动成攻击利器", "https://mp.weixin.qq.com/s/GgQah_mZEOgE-sM_InC1xA": "WebStack系统CVE-2026-1555漏洞,支持未授权任意文件上传——RCE POC遭贩卖", "https://mp.weixin.qq.com/s/uexBRD_sVZqMz1dPtW-ApA": "【高危漏洞预警】Apache Tomcat 远程代码执行漏洞(CVE-2026-34486)", "https://mp.weixin.qq.com/s/6F-rbsxIOgNLzoXafgSJNg": "大语言模型驱动的漏洞挖掘:能力机制、场景分析与演进路径", "https://mp.weixin.qq.com/s/ZZMFh2I6FiOAOh80JyhAwg": "【SRC实战】企业SRC中的两次任意用户注册漏洞", "https://mp.weixin.qq.com/s/aQdij4SsQhbE840Nf-hehw": "微软4月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s/oo4bwTWyk4ahcHrj2qhddw": "【风险通告】微软4月安全更新补丁和多个高危漏洞风险提示", "https://mp.weixin.qq.com/s/CndbsWSpVMhSDMeRZEH7FA": "IOT漏洞挖掘初体验-Tenda A15", "https://mp.weixin.qq.com/s/tE1ru0R7FK44-mHo0fF5dQ": "微软确认SharePoint Server关键零日漏洞遭活跃攻击(CVE-2026-32201)", "https://mp.weixin.qq.com/s/CidhE3791Nodwp9CbWNpQw": "【漏洞通告】Apache Tomcat EncryptInterceptor绕过漏洞(CVE-2026-34486)", "https://mp.weixin.qq.com/s/QbPE4MYPikfr0cUfVg0oZA": "Ivanti Neurons for ITSM漏洞允许远程攻击者获取用户会话", "https://mp.weixin.qq.com/s/tY5lmYSa0g-HdNhSe-MsCw": "一个零基础小白,如何从啥都不会到挖到人生第一个漏洞?", "https://mp.weixin.qq.com/s/pjQyfYPpu_jRHM3RqUt_cQ": "论文研读与思考|XSSky:通过局部路径持久模糊测试检测XSS漏洞", "https://mp.weixin.qq.com/s/vqCWhkAK0GECS_SQ-xC5Gg": "【安全更新】微软4月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s/YTfCzsTdF4wZRnnUdQmVPA": "微软Defender零日漏洞可导致权限提升攻击", "https://mp.weixin.qq.com/s/I4knZFuMN6uYTJqscwjHfA": "【安全圈】微软 SharePoint Server 0Day漏洞遭在野利用", "https://mp.weixin.qq.com/s/-42YuZv_nyDrzMx2xaf_mw": "Apache Tomcat 远程代码执行漏洞,附漏洞自查方案", "https://mp.weixin.qq.com/s/VdKJ9WvKpE-x4Rz9buhpEQ": "【免费领】Android系统漏洞实战权威教程", "https://mp.weixin.qq.com/s/LCBNoUxTai6D-nRmE4IW-g": "【安全圈】Adobe 修复 PDF 阅读器零日漏洞,已被黑客利用至少四个月", "https://mp.weixin.qq.com/s/SzeDpY60Ywdg1WxF7-H-bw": "用户名 ∕ 昵称内容注入漏洞", "https://mp.weixin.qq.com/s/Q418HNHiqYF9YMZDchtyAA": "【漏洞通告】微软4月多个安全漏洞", "https://mp.weixin.qq.com/s/YPVIc3MmgbXm2hFoehoFQA": "PHP Composer 多个新漏洞可导致任意命令执行", "https://mp.weixin.qq.com/s/SXpPUvuZOvJuV9HtkL8vTg": "微软2026年4月补丁星期二 – 修复168个漏洞,包括正在被利用的0day", "https://mp.weixin.qq.com/s/zXKubSZz9k9wRA_hW22eTQ": "真实安全漏洞,轻松到手", "https://mp.weixin.qq.com/s/9LwLE43XZ_13KgMhaFoubQ": "博硕BGM Download.ashx接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s/buP-MBrB1T6i8_lv2ZthhQ": "CVE-2026-33032:严重的 nginx-ui 漏洞可导致未授权服务器访问", "https://mp.weixin.qq.com/s/ze4brfkTztUNdltfdxMYBw": "从“全量覆盖”到“风险优先”:NIST收缩CVE漏洞分析范围", "https://mp.weixin.qq.com/s/HVSrYtet7XrB_ds-De5l-g": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/D821bOc6oIzLql4SXclwLQ": "PHP Composer 漏洞可通过 Perforce VCS 实现远程命令执行", "https://mp.weixin.qq.com/s/PxQfirgVtm1fIKSI72Qh4Q": "微软 2026 年 4 月安全更新修复了已被积极利用的 SharePoint 零日漏洞", "https://mp.weixin.qq.com/s/SxtRXUV-L1J1rg42sdr8sw": "漏洞预警 | Progress ShareFile身份认证绕过和文件上传漏洞", "https://mp.weixin.qq.com/s/uiYZZmOxTQXrwmnUzitK0w": "【视频】一键式 NTLM 泄露漏洞", "https://mp.weixin.qq.com/s/6hg0T0RKH3BwVVjcdmBsSQ": "【安全预警】CVSS 8.8!PHP Composer 任意命令执行漏洞原理解析与修复指南", "https://mp.weixin.qq.com/s/rQRss4Ib4gt8aIn_jL7QYQ": "论文研读与思考|ChainFuzzer:LLM Agent中面向工作流级别的多工具漏洞的灰盒模糊测试", "https://mp.weixin.qq.com/s/OIrouZiHOjYq2GzSkmuxCQ": "人工智能重要漏洞 | CNNVD通报新一批OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s/ZRLkJi15du8ceOEoS8JM1Q": "Windows Defender居然爆出重大提权漏洞?杀软反被利用?作者发布两小时的推文后删除?", "https://mp.weixin.qq.com/s/UnI0lIQZOyxJ3Qg4ngcIxw": "EDR漏洞挖掘实战:从模糊测试到拒绝服务攻击框架", "https://mp.weixin.qq.com/s/KWsTNIOfcggyq0JTdzgatQ": "通过“外部文件”功能进行任意文件上传,可实现客户端远程代码执行(RCE)", "https://mp.weixin.qq.com/s/iZG6Ld-xjuEE30o3lTuJfg": "【安全圈】CISA 将微软 SharePoint Server 和 Office Excel 漏洞列入已知被利用漏洞目录", "https://mp.weixin.qq.com/s/J0Wjj_WR1GDyxw9ydBVMDw": "继续干货输出!JWT认证漏洞实战解析(二)", "https://mp.weixin.qq.com/s/5PFLN_7bQvnkUzuFcdvZTw": "IoT僵尸网络发动2Tbps级DDoS攻击,金融科技行业成重点目标;CNNVD通报OpenClaw多个安全漏洞| 牛览", "https://mp.weixin.qq.com/s/JWjfpTJ4FCTLTwwYsBo66g": "【成功复现】Apache Tomcat远程代码执行漏洞(CVE-2026-34486)", "https://mp.weixin.qq.com/s/SOBB01I5NplDSpIbDM5gEA": "【渗透必备】263+ 绕过技术的文件上传漏洞检测平台", "https://mp.weixin.qq.com/s/qEqK1B2-UpAiZDNbR5voDA": "chatgpt-on-wechat存在身份验证漏洞漏洞(CVE-2026-6129)", "https://mp.weixin.qq.com/s/K5sSgIKopsMF-d0jmKhO5A": "【已复现】Cockpit 远程代码执行漏洞(CVE-2026-4631)安全风险通告", "https://mp.weixin.qq.com/s/ZmzubIfkycq-K5Hs3KuqNw": "榨干Intego最后一滴:Windows权限提升漏洞的简单艺术", "https://mp.weixin.qq.com/s/xjweqVcLHF-Q7KXrUrFR0A": "libexif存在整数溢出漏洞漏洞(CVE-2026-40386)", "https://mp.weixin.qq.com/s/GX-eSvSIa6lDhjC_Nk0Iyw": "Mesa存在越界写入漏洞(CVE-2026-40393)", "https://mp.weixin.qq.com/s/5Qpaw3DFKMO-FYlZctds6g": "默连(morelian) 简简单单的webshell管理工具(支持常规的代码执行,文件管理等,默认支持http与socks代理,支持gui与浏览器两种运行方式)", "https://mp.weixin.qq.com/s/A5-MPwPoBJhLLRuXZi-nvQ": "一人SRC公司:月成本237元,我靠挖漏洞养活自己的那点事", "https://mp.weixin.qq.com/s/s4UCtqMKq57MZNtiksMjSA": "Codex 如何利用三星电视内核漏洞实现权限越狱", "https://mp.weixin.qq.com/s/JRZVsbGE8MJqldEIinOJWw": "Axios SSRF漏洞 (CVE-2026-40175)", "https://mp.weixin.qq.com/s/OpJb8PcEQviqh54EuW8NpQ": "针对微软Defender零日漏洞的新型PoC漏洞利用程序已发布", "https://mp.weixin.qq.com/s/8_0CzT8P-QLXeM3ISGdhYg": "CVE-2026-33032 深度分析:nginx-ui MCP端点认证绕过导致 Nginx 服务器完全接管", "https://mp.weixin.qq.com/s/zXjSTIViLbLxgZPOLEx0jA": "【已复现】Windows 截图工具 NTLM 信息泄露漏洞(CVE-2026-33829)安全风险通告", "https://mp.weixin.qq.com/s/642De5kQIVX0XUgIBAt0Jg": "【安全圈】微软 2026 黑客大赛支付 230 万美元:揪出 80+ 个云和 AI 漏洞", "https://mp.weixin.qq.com/s/Jj3nR1RbNa3vnKo9nETQaw": "微信小程序全自动捡洞工具,一键完成解包反编译与敏感信息泄露审计,可视化漏洞报告输出", "https://mp.weixin.qq.com/s/KUPsiUFwLerRwBpgabPTaw": "无条件接管Nginx!Nginx-UI漏洞链发现在野利用", "https://mp.weixin.qq.com/s/G8dP6z2VKhydJVxb9oRSSw": "Nginx-ui漏洞已被攻击者积极利用——可实现服务器完全控制", "https://mp.weixin.qq.com/s/kb8Yuz98NxW135hN3qnmdQ": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s/Eew5YBtO7i__Cw9z265RrA": "itC 中心管理服务器 uploadFileApp.do 任意文件上传漏洞", "https://mp.weixin.qq.com/s/bp_fOl6_xW4kezCMGHf56Q": "CNNVD通报OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s/LOp_Rpv4-lAl1iWNya3gBg": "【红队】一个用于扫描web端漏洞的工具", "https://mp.weixin.qq.com/s/oWX5Xg6BxSDH3fp0DIgEVg": "漏洞预警 | Oracle Identity Manager远程代码执行漏洞", "https://mp.weixin.qq.com/s/WYhN-doMdXETDAuqoU6tpA": "抓紧打补丁!4月Patch Tuesday核心高危漏洞技术深度解析(内附高危漏洞速查清单)", "https://mp.weixin.qq.com/s/WGncNI3qoD9xgZuehrtqHA": "漏洞预警 | LEAN MES系统SQL注入漏洞", "https://mp.weixin.qq.com/s/TyF6pnpDhE_Z7WHlF3aHRg": "天地伟业Easy7 uploadFile接口存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s/dDXBTTz74CUJW0-THbZ8dg": "Windows Defender LPE 0day 漏洞", "https://mp.weixin.qq.com/s/gg1KMQpuHQPWRng-nPxWBA": "Adobe正式官宣Reader漏洞已被在野利用,打开PDF可执行任意代码", "https://mp.weixin.qq.com/s/PLInxZLj89ZkyE9AP0WLcQ": "人工智能重要漏洞通报(2026年第五期)", "https://mp.weixin.qq.com/s/AKoK82PO4L4fAkruS1PkSA": "【安全圈】开源AI中转站现高危漏洞 利用缺陷可以伪造任意金额充值", "https://mp.weixin.qq.com/s/3eQn8-mbJiio8NXepLKxow": "信息安全漏洞预警(2026年4月13日-4月17日)", "https://mp.weixin.qq.com/s/CLXLNRn2xjPiuflugDhHjQ": "三星电子员工利用公司系统漏洞大规模收集个人信息 被起诉", "https://mp.weixin.qq.com/s/9z2bJp0oi-18ZjCF2M90qQ": "C-Lodop打印服务系统存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s/2gA8KuLUpHsivY9SI9X5DA": "免费AI代码漏洞扫描神器!MonkeyScan开放注册,限时速领3000积分", "https://mp.weixin.qq.com/s/7kHtjd2OqAtbTccOn_p7cg": "【漏洞通告】Nginx UI MCP接口绕过认证漏洞(CVE-2026-33032)", "https://mp.weixin.qq.com/s/cgFLiT2A8SpSV3dAySePdw": "UAC-0247 漏洞利用浏览器和 WhatsApp 数据窃取攻击医院和政府机构", "https://mp.weixin.qq.com/s/UcKuAyZow6QhEhCbpX4JDw": "Zack-AI-Scanner 新一代基于AI大模型的Web漏洞扫描器 (文末福利)", "https://mp.weixin.qq.com/s/xIGtww7_iYyzlfBJOS44uw": "Apache Log4j2远程代码执行漏洞详解", "https://mp.weixin.qq.com/s/eAkrurVXmoZY4IPjvlaoxQ": "告别盲审,用Agent skill代码审计定位高危漏洞", "https://mp.weixin.qq.com/s/qyXM7fG98k__pEthxZ3_5A": "Chrome 138完整漏洞利用链——从CVE-2026-5873到远程代码执行", "https://mp.weixin.qq.com/s/DQTx5-O6hnzW0kJyE22fIw": "360发现全球高危漏洞,漏洞挖掘智能体首次披露", "https://mp.weixin.qq.com/s/LdFxutGiQumDDYi8iDxXLw": "覆盖10亿用户!360发现全球高危漏洞 漏洞挖掘智能体首次披露", "https://mp.weixin.qq.com/s/cPULYIBBV9DyVd6x_QzZ3Q": "CVE复现之老洞新探CVE-2021-3156", "https://mp.weixin.qq.com/s/r4fBT0h-jzN8SxTfndggZg": "Chrome隐私漏洞:指纹识别与HTTP头泄露使用户面临风险", "https://mp.weixin.qq.com/s/GgKdQgtdR7g0_uzFZPeEzA": "CNNVD | 人工智能重要漏洞通报(2026年第五期)", "https://mp.weixin.qq.com/s/0yTOZmgF73e67DzwzdNHoA": "Azure Windows 管理中心的一键式远程代码执行漏洞允许攻击者执行任意命令", "https://mp.weixin.qq.com/s/vyvfLkl-NExwWLl78qVlxA": "针对Microsoft Defender零日漏洞的新概念验证利用代码发布", "https://mp.weixin.qq.com/s/D_y6vbBa5KoP65uGwkW3Lg": "覆盖亿级用户!360发现全球高危漏洞 漏洞挖掘智能体首次披露", "https://mp.weixin.qq.com/s/eplDjyND13nyXVufHCWeBA": "[漏洞复现]某科技 X2Modbus网关 GetConfig 信息泄露漏洞", "https://mp.weixin.qq.com/s/P4GmEK8tEwD8MAZZQGLj8w": "[漏洞复现]某科技 X2Modbus网关 GetConfig 信息泄露漏洞", "https://mp.weixin.qq.com/s/TOFhVZjiVT9H5f3HsePOyQ": "Windows截图工具漏洞允许攻击者通过网络执行欺骗操作", "https://mp.weixin.qq.com/s/E0tm5kxWIAqAta_hf2lAeQ": "自2026年1月以来,勒索软件团伙利用思科漏洞发起零日攻击", "https://mp.weixin.qq.com/s/OU34zpXkm4gmpuovd-XrUw": "连续三年!奇安盘古斩获OpenHarmony社区漏洞挖掘双项大奖", "https://mp.weixin.qq.com/s/H_Du3fdmLxJH3kyohEwbCw": "订单总额验证绕过漏洞", "https://mp.weixin.qq.com/s/v7i_Gm983sMIqPjAO9I-Hw": "订单总额验证绕过漏洞", "https://mp.weixin.qq.com/s/mJa5OMViE8FaYzcuD_rFng": "MetaCRM美特crm系统toviewspecial.jsp接口存在任意文件读取漏洞", "https://mp.weixin.qq.com/s/GFXpcPOBKM241zj0tPRv1Q": "广西金融机构“AI辅助精准营销场景建设”项目交流和POC测试公告", "https://mp.weixin.qq.com/s/T6LDO7qFp5SMUWItnV2bbA": "CNNVD通报OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s/E6nQ6B8sBy48TvDSiaQN7A": "【征稿】EXPRESS 2026:从云原生到AI原生,重塑软件系统的可解释性与可靠性", "https://mp.weixin.qq.com/s/tvn1A0Q10joBSF4qBKYbEA": "Windows Defender 高危0day:RedSun漏洞全解析(附代码链接)", "https://mp.weixin.qq.com/s/VxcGuiD0qYlRNxz6YE5V_Q": "一个登录框,我薅了5个高危漏洞——认证机制避坑指南(反向版)", "https://mp.weixin.qq.com/s/Ef_u1QqqbTLK4Yf6uRmhFg": "针对 FortiSandbox 漏洞的 PoC 攻击程序已发布,该漏洞允许攻击者执行命令", "https://mp.weixin.qq.com/s/Ir6yTphzrscU0kFTBHfGEw": "编程助手安全漏洞全景:42种攻击技术详解", "https://mp.weixin.qq.com/s/egGMRcqrD5pfReqQHS4cVQ": "NGINXDAV模块缓冲区溢出漏洞 | CVE-2026-27654原理分析&研究", "https://mp.weixin.qq.com/s/DgB9WnuLxmbAxsu7UbVUsA": "“漏洞末日”警钟预警:AI批量发现黑客可利用的漏洞;OpenAI发布GPT-5.4-Cyber强化网安防御 | FreeBuf周报", "https://mp.weixin.qq.com/s/u_LsN_S-oHdZzaoByjmwhA": "MCP协议架构级漏洞深度分析:STDIO设计缺陷引发大规模AI供应链安全危机", "https://mp.weixin.qq.com/s/g1Caz8sspvWYkGLYVWTaAg": "警惕AI全自动攻击!Claude Opus成功构建Chrome漏洞武器化链路", "https://mp.weixin.qq.com/s/rAdxu94oMra2_FQ2WqEvQw": "苹果AirTag定位系统曝漏洞,攻击者可伪造位置误导追踪", "https://mp.weixin.qq.com/s/ui5r0PUueHitdpd3Q99e6w": "一份文档引发的连锁漏洞、从一个文档到全校三要素泄露和RCE", "https://mp.weixin.qq.com/s/3YN32LgaECyQVeSM9eNTPA": "白宫拟开放Claude漏洞挖掘AI,军方禁令与民用部署冲突激化", "https://mp.weixin.qq.com/s/I1D9Y73nG3SxNnmWUTISbQ": "MetaCRM美特crm系统toviewspecial.jsp接口存在任意文件读取漏洞", "https://mp.weixin.qq.com/s/1mJfEnzqA908kuTntG0sww": "Windows Defender 漏洞 - RedSun EXP 详细分析", "https://mp.weixin.qq.com/s/0L240Zrl3a8S4OxGA6gczQ": "某rce漏洞挖掘等案例分享", "https://mp.weixin.qq.com/s/KI1ABkbj9wUhHF-vsvrxoQ": "Nginx UI MCP接口绕过认证漏洞 | CVE-2026-33032复现&研究", "https://mp.weixin.qq.com/s/0pF7fBHrMWDQNXe3vX8KSw": "榨干 Intego 的最后一滴油——Windows 本地提权漏洞分析", "https://mp.weixin.qq.com/s/P_8Ku5eK2mbn3LIOt77Axw": "网络安全人士必知的20个漏洞库", "https://mp.weixin.qq.com/s/bDP4K7nxwbyxQD64sms51w": "微软Azure Windows Admin Center现一键式RCE漏洞,攻击者可执行任意命令", "https://mp.weixin.qq.com/s/G8_l-vt7UauiQyyJTAddxQ": "BYOVD利用方法论以及AI辅助下的驱动漏洞挖掘", "https://mp.weixin.qq.com/s/nGnS6OLS_dzmmS4yxjkHRA": "漏洞预警 | Axios输入验证不当漏洞", "https://mp.weixin.qq.com/s/d6u1FUxOHllqDex2C8_Zcw": "AI挖洞激增致使NVD不在分析CVE漏洞", "https://mp.weixin.qq.com/s/5gvGhdHlbY69UbGnR_aJaQ": "微软 SharePoint 的一个严重漏洞已被攻击者利用", "https://mp.weixin.qq.com/s/MtB1jUWDEzwTOTBtZ28hoA": "Nexcorium 版 Mirai 恶意软件利用 TBK DVR 漏洞发起 DDoS 攻击", "https://mp.weixin.qq.com/s/tF183VUaoKpSwW0maNMbHA": "内存安全攻防战:从CVE漏洞看Pixel 10如何用Rust彻底封死攻击面", "https://mp.weixin.qq.com/s/T81JkyY0hhoEA90isTKpCA": "Struts2-066上传漏洞原理详解", "https://mp.weixin.qq.com/s/UGwRkXMImp7f81s2W0p8KA": "微软 Defender 遭攻击:三个零日漏洞被利用,其中两个暂未修补,可实现权限提升", "https://mp.weixin.qq.com/s/R_ECu6dg3lVGbyD595ku5Q": "代码审计 yzmcms远程任意命令执行漏洞", "https://mp.weixin.qq.com/s/SJh5wLY6FOZyqNHAqNNVIg": "第三方 SDK 重大漏洞曝光:超 3000 万加密货币钱包面临数据泄露风险", "https://mp.weixin.qq.com/s/SaJ-HzrTxXcWqUnFGxyfVw": "[安全周报] 当NIST都承认追不上了——2026年漏洞管理体系的结构性崩塌已经开始", "https://mp.weixin.qq.com/s/WoktZOpx_GmhDUYgeBmAOw": "敏感信息泄露漏洞总结:深情哥提醒你aksk正在“裸奔”", "https://mp.weixin.qq.com/s/ex-yAN0z5snLgPznva9_Yg": "学员审计JAVA开源系统前台RCE案例", "https://mp.weixin.qq.com/s/2pQYjf9_juh1BMNY7f_PpQ": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/5FyJK6OBGxiVvhJefrnIhg": "NIST突然宣布,漏洞太多,处理不过来了", "https://mp.weixin.qq.com/s/FzpkJ6pYix3Vz7IqIMUbLw": "CVE-2026-33825 解析", "https://mp.weixin.qq.com/s/5tBoZ45oh9bL6zRA0IEICA": "CVE-2026-34621|Adobe Acrobat Reader远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s/XzVxpCSjX3aREh1CsQt83A": "HPE Aruba 私有 5G 平台漏洞导致凭证窃取攻击", "https://mp.weixin.qq.com/s/oBwME2PZXIZZaPgBzEOcCA": "CVE-2026-34486|Apache Tomcat远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s/I3zW_6dS5P8FZLDrBhV2Ig": "渗透测试 | 近期高危逻辑漏洞挖掘实战合集 (越权漏洞 ∕ 支付漏洞 ∕ 账号接管)", "https://mp.weixin.qq.com/s/9_BxezL_kNX4Dy20nCVGSA": "Vercel 居然被假 shinyhunter唬住了!?:-)", "https://mp.weixin.qq.com/s/WC9ArlS-5ieCyOuO4OUMFQ": "Chrome新\"bug\": 恶意网站可以0.5 click窃取用户之前上传的文件,漏洞赏金$1000", "https://mp.weixin.qq.com/s/t8Pi1hhPaNReLwW7BzzTYQ": "pocsuites安全工具源码分析", "https://mp.weixin.qq.com/s/dOVI6-u7_tmO8oleP5wMVw": "我如何通过一次投票使区块链节点崩溃(CVE-2026-40583)", "https://mp.weixin.qq.com/s/DruBxIwIrlEtzFRNZxTw4A": "微软Defender零日漏洞深度分析:从BlueHammer到RedSun,安全工具的攻防博弈", "https://mp.weixin.qq.com/s/gKFTkjLNahOiw-JQ4DVzSQ": "Vercel 入侵溯源到 Context.ai 一个员工的 Roblox 外挂", "https://mp.weixin.qq.com/s/9wp9Sj6kFtOHGLMxFGG8UQ": "9.8分!OpenAM爆严重反序列化漏洞,攻击者无需认证即可RCE", "https://mp.weixin.qq.com/s/vG-eehpeYJTzjlomqu1a7A": "vercel前端AI自动化鼻祖被黑", "https://mp.weixin.qq.com/s/2-qBN2ZgDgEI0JAcj9s2YA": "【公告】漏洞盒子服务器升级通知", "https://mp.weixin.qq.com/s/1GL297s0YLlks8UhZF1reA": "所有缺钱的人,2026年都去挖漏洞,抓住最后的机会!", "https://mp.weixin.qq.com/s/LO91Y3sp2XRSevCWzgeCNQ": "Vercel 被黑!", "https://mp.weixin.qq.com/s/UCJ1kNJntBCG5sjs44b7AA": "主流网页部署平台Vercel遭黑客入侵 第三方AI工具成攻击突破口", "https://mp.weixin.qq.com/s/O1gDtsTNyFMkBgoNNfW-ig": "不只是 0day 盛宴!DEF CON 新加坡站议题公布,藏着 4 个攻防新趋势", "https://mp.weixin.qq.com/s/XjemFAr9QOnw3ShT8cnnHQ": "4月社区投稿活动 | 漏洞挖掘", "https://mp.weixin.qq.com/s/uNhFDirGREraOHzfwMO2OQ": "Nacos 访问控制错误漏洞(CVE-2021-29442) 附POC", "https://mp.weixin.qq.com/s/PvozItKMAA9V5-Wr5_fE4Q": "要价200万美元?前端托管巨头Vercel承认被黑,近600名员工信息遭窃", "https://mp.weixin.qq.com/s/D_9H3keQB-CQlGIwUsj7Lg": "Windows Defender 0day漏洞遭利用,攻击者组合PoC工具发起提权攻击", "https://mp.weixin.qq.com/s/khZpLjWwIB1FvM4jZ_YM8w": "攻击者可利用的FortiSandbox漏洞PoC公开,可执行任意命令", "https://mp.weixin.qq.com/s/l_VPWxlBISmDU2pk0iv-Zg": "CNVD漏洞周报2026年第15期", "https://mp.weixin.qq.com/s/4pIqUfkKTsQcA7-wPOBB-w": "上周关注度较高的产品安全漏洞(20260413-20260419)", "https://mp.weixin.qq.com/s/-rhWYG9xG6N_6e7XbmyeCA": "NIST放弃全面分析CVE,转向优先处理高危漏洞", "https://mp.weixin.qq.com/s/fc_uuz0oe-A3h9hMyqL2MQ": "【安全圈】主流网页部署平台 Vercel 遭黑客入侵,第三方 AI 工具成攻击突破口", "https://mp.weixin.qq.com/s/OoRfZLH7Cp_wFOsPTqdT7w": "Flowise 中存在严重漏洞,可通过 MCP 适配器执行远程命令", "https://mp.weixin.qq.com/s/tK8otlHSvrMtURZB_05nsw": "【安全圈】因漏洞数量激增,NIST 将停止评估非优先级漏洞评级", "https://mp.weixin.qq.com/s/uSyhYV6Sy3KkRRsAYPIp6Q": "ActiveMQ-EXPtools | Apache ActiveMQ全系列漏洞一键支持检测和利用工具", "https://mp.weixin.qq.com/s/yBYaxIj1vOptHpmSM6nkoQ": "EDU证书站边缘资产挖掘实战:从.map泄露到高危漏洞到手全流程", "https://mp.weixin.qq.com/s/80J8fPhGYKcEjVpBSjdK0g": "【高危AI漏洞预警】FlowiseAI远程代码执行漏洞(CVE-2026-41138)", "https://mp.weixin.qq.com/s/M1plPt2E4btU94vrs6yGkQ": "Anthropic MCP 架构曝“设计级”漏洞:影响超 20 万服务器,AI 供应链安全拉响警报", "https://mp.weixin.qq.com/s/G_y44KNW3CafXOWG6o69Aw": "2026 SRC 捡漏洞刷分实战:我不会挖漏洞,但是我捡漏洞很6", "https://mp.weixin.qq.com/s/mQZl-a6PTBajVF52bLVFCw": "NocoBase AI 驱动型无代码平台SSRF漏洞 | CVE-2026-40346原理分析&研究", "https://mp.weixin.qq.com/s/ZtpiJ1Oea5vJDXKm1o1CEw": "2025 “泉城杯” 济南市网络安全大赛 题目复现", "https://mp.weixin.qq.com/s/C-zcQJpZZFK1nTl71K78Ug": "CVE-2023-33538 已遭受持续一年的攻击,但漏洞利用仍未成功", "https://mp.weixin.qq.com/s/0TtAgeG8J2qoxf8N3nesGA": "警惕AI全自动攻击!Claude Opus成功构建Chrome漏洞武器化链路", "https://mp.weixin.qq.com/s/ox9LQJrPESIInPILsE8vmA": "当AI学会自己找漏洞、写Exp:安全行业的\"奇点\"可能真的来了", "https://mp.weixin.qq.com/s/tbhSTbvu2L-23453ehAxpQ": "Flowise 中的严重漏洞可通过 MCP 适配器实现远程命令执行", "https://mp.weixin.qq.com/s/1N2mTExs23pWHwnK-rI3FQ": "T0级漏洞", "https://mp.weixin.qq.com/s/WjpV8xtkXyfIIIi0svzCfw": "Vercel供应链攻击事件深度分析:第三方AI工具成为企业安全突破口", "https://mp.weixin.qq.com/s/bigCHgrNAS5q_iZF3OKrnw": "安全警报 | 暗网流传微信身份验证API漏洞利用工具,警惕KYC大规模绕过风险", "https://mp.weixin.qq.com/s/fnRXy7PSlwPtiFcKxIh19A": "Windows 解除 FAT32 三十年限制,最大分区扩容至 2TB;CNVD发布上周关注度较高的产品安全漏洞| 牛览", "https://mp.weixin.qq.com/s/7Rq5bP2L0-SshLUoZ0O5ig": "一个简单的OTP漏洞如何可能导致账户被完全接管", "https://mp.weixin.qq.com/s/QCpE2q90ynpZmcJ42axwJg": "近期针对 Java 环境下写文件RCE回顾", "https://mp.weixin.qq.com/s/grSZFusVZW4oqPeB-Q9Ojw": "单位做等保、密评、软测、漏洞扫描、渗透测试,找这样的销售让你省时省心省.....", "https://mp.weixin.qq.com/s/yFO9NKuszHzug9QmGJJTnw": "4月社区投稿活动 | 漏洞挖掘", "https://mp.weixin.qq.com/s/L0B4UUWus_0bXlDX6NuJmg": "【AI安全】OpenClaw多阶段网页诱导绕过防护的RCE攻击", "https://mp.weixin.qq.com/s/oJ61gWfgF_gWT7rz1ZlxSA": "Windows 截图工具 NTLM 哈希泄露漏洞的 PoC 漏洞利用程序已发布", "https://mp.weixin.qq.com/s/Xe_pyNwjnz0e10esi3z0QA": "AI会自己找漏洞,网络安全饭碗要保不住了?!", "https://mp.weixin.qq.com/s/wztV-EheR6yBeeN6aSNX-A": "雷神众测漏洞周报2026.4.13-2026.4.19", "https://mp.weixin.qq.com/s/eeNtOPuwd3sVBfo2L18k8Q": "【漏洞通告】OpenClaw沙箱绕过权限提升漏洞(CVE-2026-41329)", "https://mp.weixin.qq.com/s/sJyzNUNNEGER9MjJA9FmXQ": "绕过WAF运行命令执行漏洞的方法", "https://mp.weixin.qq.com/s/6Xf5iH2Y778t6ZcY2BKCeg": "[漏洞报告]从0-1,小白也能学会的实战漏洞报告", "https://mp.weixin.qq.com/s/e4oqf25-EklvillmpHpVnw": "Vite开发服务器任意文件读取漏洞复现", "https://mp.weixin.qq.com/s/IYQHW8VzC3JJCVOnXYYmeg": "【已复现】FortiClientEMS API 身份验证和授权绕过漏洞(CVE-2026-35616)", "https://mp.weixin.qq.com/s/svknIswjlxtMWle4-EcB1w": "Windows截图工具NTLM哈希泄露漏洞PoC利用代码发布", "https://mp.weixin.qq.com/s/yvwbaffXsytaE4d8fi3Q2g": "AI代码审计 | 通过补丁信息分析漏洞生成Poc", "https://mp.weixin.qq.com/s/DSfFwDxQjRHEDO-3B7evdQ": "kernel heap exploit", "https://mp.weixin.qq.com/s/-NZ6V1Z2VzS2QjLyuUSJfQ": "攻击者持续一年攻击TP-Link路由器漏洞CVE-2023-33538仍未得逞", "https://mp.weixin.qq.com/s/rFF93QyC4cpossGe9T2Cxw": "苹果正在开发修复程序以解决与缺失的捷克键盘字符相关的iPhone密码漏洞", "https://mp.weixin.qq.com/s/zvO7JA79mbOKJP8mtfPCuQ": "Claude Code、Gemini CLI 和 GitHub Copilot 存在通过 GitHub 评论注入的漏洞", "https://mp.weixin.qq.com/s/ZrAjye39hq8Olut8hrh5rw": "Anthropic MCP 设计漏洞可导致 RCE,威胁 AI 供应链安全", "https://mp.weixin.qq.com/s/XUChESDyRuFnxGVBiu0_rw": "D-link的漏洞复现", "https://mp.weixin.qq.com/s/t6lUu7fR9YgGOqjWEwIqQQ": "CISA 提醒防御者注意思科 Catalyst SD-WAN 管理器的安全漏洞已被利用", "https://mp.weixin.qq.com/s/0HD680654m8Grim_rh23dQ": "因第三方AI工具受陷,Vercel 内部系统遭未授权访问", "https://mp.weixin.qq.com/s/21t2qeAnAaWbidwusbWYSg": "一次偶然的RCE", "https://mp.weixin.qq.com/s/qtpfYT0r01BI-Ye-QPZGvg": "8.8分!Google紧急修复Chrome第4个0day漏洞,2026年已有4个在野利用", "https://mp.weixin.qq.com/s/1380q6UsW9uq9keXh3kp5w": "CVE-2024-2961 完整 RCE 链详解:1字节 glibc 溢出如何秒杀 PHP(Web手视角)", "https://mp.weixin.qq.com/s/7bpnoHKegCSTKOcsha5avQ": "业务流程绕过漏洞", "https://mp.weixin.qq.com/s/4K_3waULparo5I5xgwN_vQ": "SGLang AI 基础设施的严重 9.8 级远程代码执行威胁", "https://mp.weixin.qq.com/s/0UHxC4cFIP8c_0PNXCROWg": "漏洞预警 | Apache Tomcat远程代码执行漏洞", "https://mp.weixin.qq.com/s/7HmiZw7xiov_qPjVbutZFQ": "Mythos找到了漏洞,但接下来才是噩梦的开始", "https://mp.weixin.qq.com/s/HDeCUeyOVIzmIGVRqy0USQ": "CVE-2026-33032:可实现Nginx服务器完全控制", "https://mp.weixin.qq.com/s/qDNzlIiC-WnA-60BFi3xMQ": "【AI安全】OpenClaw多阶段网页诱导绕过防护的RCE攻击", "https://mp.weixin.qq.com/s/dUQwtjR-OFrxqeq-h67apA": "全程云OA download 存在任意文件读取漏洞", "https://mp.weixin.qq.com/s/hkEwGYOxDe4Z1xRULFiMmQ": "ActiveMQ-EXPtools | Apache ActiveMQ全系列漏洞一键支持检测和利用工具", "https://mp.weixin.qq.com/s/gQhYyh2FrAEA20gAa_YBOg": "JAVA代码审计第一个RCE出货记录", "https://mp.weixin.qq.com/s/sLvWqI3bw3r_E98hXr9vNw": "漏洞挖掘中的host头碰撞", "https://mp.weixin.qq.com/s/zVY8QUpjMVJY0KdjBFjlOA": "漏洞预警 | 天地伟业Easy7 SQL注入漏洞", "https://mp.weixin.qq.com/s/1Qmib_ZpABb1LfkoRDDWAA": "信息安全漏洞周报(2026年第16期)", "https://mp.weixin.qq.com/s/R8r4WSi1eEh0r0Uwxo_5dA": "我们发现了 Hermes Agent 的第一个远程代码执行漏洞,但这已经不重要了", "https://mp.weixin.qq.com/s/89Apxd41BPZleoXWsxeitw": "BYOVD 进阶实战 (第一部分) — 利用存在漏洞的驱动 CVE-2025-8061", "https://mp.weixin.qq.com/s/MBRlWWOMBp0uUpjuBeRcpg": "【利用已复现】一个“!”引发的“血案”(Linux Kernel NF_TABLES模块提权漏洞)", "https://mp.weixin.qq.com/s/Wu7rc0oazqKfg2utBOj5PQ": "【扩充版】“任意用户漏洞”全景手册 20+ 实战案例", "https://mp.weixin.qq.com/s/ZO0rr89UPJI_pJJDgfA9hA": "【漏洞复现】Flowise 中通过 MCP 适配器实现远程代码执行漏洞(CVE-2026-40933)", "https://mp.weixin.qq.com/s/pQcuJDr8dn_W6Tb-YPGOtg": "DudeSuite 漏洞播报 全网漏洞早知道【20260422】", "https://mp.weixin.qq.com/s/kSCTkeStxyj07ceOCiGBiA": "AI大模型安全护栏攻防,深挖提示词注入漏洞,拆解多模态绕过手法", "https://mp.weixin.qq.com/s/tdQdbTMtvwC0SEFNbu-ymg": "CVE-2026-34486 ( Apache Tomcat 集群加密绕过 RCE)", "https://mp.weixin.qq.com/s/aTNjjazUjx5jjccwfWc-Ag": "谷歌修复 Antigravity IDE 漏洞,本可导致提示词注入代码执行", "https://mp.weixin.qq.com/s/pGIDoPJngvNZ8KrOOq7GeA": "【NCC安全守护・第 1 期】视频监控系统漏洞专项挑战开启!", "https://mp.weixin.qq.com/s/DPbXhj28HYklOdZXn2YItg": "超过 1370 台 Microsoft SharePoint 服务器易受欺骗攻击,其安全漏洞已在网上曝光", "https://mp.weixin.qq.com/s/bo1kpWYRcHs-EwG_wvCnuA": "仅花1.5万元,就能把关键漏洞变成直接运行的网络武器", "https://mp.weixin.qq.com/s/izPnODoJVVJ1DclvfEYGXA": "仅花1.5万元,就能把关键漏洞变成直接运行的网络武器", "https://mp.weixin.qq.com/s/BThVw5FJmJUA3gk4nqOO9Q": "漏洞永远修不完,“带洞防护”成必然——奇安信发布Mythos应对白皮书", "https://mp.weixin.qq.com/s/04gLX4WeFHFvqw8FCKDgPw": "某JAVA系统RCE漏洞审计流程", "https://mp.weixin.qq.com/s/psgLzfv78YE0cFEHnQJQZg": "EDUSRC证书站之源码泄露导致的10rank漏洞", "https://mp.weixin.qq.com/s/h_pGDZntBoBxxrSSjw1kVA": "渗透测试 | 近期高危逻辑漏洞挖掘实战合集 (越权漏洞 ∕ 支付漏洞 ∕ 账号接管)", "https://mp.weixin.qq.com/s/qvn4S6jZ0IgDeZlyhZvOpA": "安全419|一周国际网安资讯:AI写漏洞 古典漏洞重燃", "https://mp.weixin.qq.com/s/jXRvAWM5VDJKDZ25fOgdcA": "Flowise fetch-links ssrf漏洞", "https://mp.weixin.qq.com/s/W-aVO1Cx1xAv2C3S3n0Pcw": "记某单位众测项目漏洞案例复盘", "https://mp.weixin.qq.com/s/ds0aLVLxUjtEO4yToA4tMw": "Pack2TheRoot (CVE-2026-41651):跨发行版本地权限提升漏洞", "https://mp.weixin.qq.com/s/A9z6ntDveOrcJaeBZpitcA": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/K8fMT3gMMrGMuEJHirY5zg": "GHSA-xq3m-2v4x-88gg 的 PoC:通过代码注入在 protobuf.js 中实现严重远程代码执行 (CVSS 9.4)", "https://mp.weixin.qq.com/s/fodvOn6B5H1xOsAEKhWcdQ": "Progress ShareFile 远程代码执行漏洞(CVE-2026-2701)", "https://mp.weixin.qq.com/s/NH-odYaB5hMRoTO2uf7trg": "从红队攻击到蓝队防御——Redis 5.0.1 主从复制RCE应急响应实录", "https://mp.weixin.qq.com/s/svPgsM7Q6HWAP6MktacP-g": "仅花1.5万元,就能把关键漏洞变成直接运行的网络武器", "https://mp.weixin.qq.com/s/autnabZybjElezhRKIN94A": "ChatGPT 安全漏洞:仅需一条提示词即可窃取数据", "https://mp.weixin.qq.com/s/pw2MP5cFU8TqzhSFFnKMDg": "漏洞预警 | OpenPrinting CUPS远程代码执行和认证绕过漏洞", "https://mp.weixin.qq.com/s/8Zgin-SeSqgSrDRGXtZQWw": "Spinnaker爆出两大“王炸”级漏洞,直接拿下生产环境", "https://mp.weixin.qq.com/s/V1TCgDNHIZtZRMUoC5KaIQ": "1day:可实现Nginx服务器完全控制", "https://mp.weixin.qq.com/s/4knx5DnwKSTy1CdbImY7Lw": "CVE-2026-40342:Firebird 数据库中的 CVSS 10.0 路径遍历远程代码执行漏洞", "https://mp.weixin.qq.com/s/4FJ2KAG7PFHai_NEy-nzlQ": "Windows 截图工具NTLM哈希泄露漏洞PoC利用代码公开", "https://mp.weixin.qq.com/s/bcDPXaqEcljjQT02qR5qkw": "静态网站中存在的 20 多个漏洞", "https://mp.weixin.qq.com/s/0W-CVjaF3xO7gjDyKI3nKg": "4月社区投稿活动 | 漏洞挖掘", "https://mp.weixin.qq.com/s/9XyhjeatydPrxFyor4VvGA": "【安全圈】Claude Mythos 发现 271 个火狐浏览器漏洞", "https://mp.weixin.qq.com/s/bGPbTDjnYyaB7bH9r0vA2w": "【梆梆安全监测】安全隐私合规监管趋势及漏洞风险报告(0323-0405)", "https://mp.weixin.qq.com/s/teTcVDS5iw-rwO4IgrJ3lQ": "记一次某大学的漏洞挖掘", "https://mp.weixin.qq.com/s/ZRSw0R8mH1tY_7jsYUswRA": "【已复现】FortiSandbox 身份验证绕过漏洞(CVE-2026-39813)", "https://mp.weixin.qq.com/s/i4KL0YoiOOP7c_s6hz4YJw": "2016年至2026年十大最常被利用的漏洞列表", "https://mp.weixin.qq.com/s/qKLGITV0_pYTfSC3j3RIWw": "ByteSRC发布《AI生成漏洞报告提交规范》", "https://mp.weixin.qq.com/s/xZGyvHv_Qh4MuxoAESrkaQ": "高危漏洞预警:Windows TCP∕IP 远程代码执行漏洞(CVE-2026-33827)", "https://mp.weixin.qq.com/s/CE2Bwu3NQUOldJqFY4K9gA": "Pack2TheRoot 的关键漏洞允许攻击者获得 Root 权限或攻破系统", "https://mp.weixin.qq.com/s/qu7PxNEr8iD2uDdiqcmq1w": "Claude Mythos发现271个Firefox漏洞,0Day时代或将终结", "https://mp.weixin.qq.com/s/3PSBLswSHOYb4traQqw4Fg": "360漏洞云关于AI生成漏洞报告的处置公告", "https://mp.weixin.qq.com/s/HkcUWECi3nwUgglYoUoMhw": "GitHub评论可触发Claude Code、Gemini CLI和GitHub Copilot的提示注入漏洞", "https://mp.weixin.qq.com/s/-iaA1fhpv4jx6_yRfg6O_Q": "小鹏汽车SRC发布《AI生成漏洞报告的处置公告》", "https://mp.weixin.qq.com/s/cjUIX5GqnEFV4Oenl2-GnA": "苹果AI令牌漏洞曝光,窃取者可跨设备滥用服务", "https://mp.weixin.qq.com/s/Vj28G9lP8hDJh7yexsZdkQ": "关于AI生成漏洞报告的处置公告", "https://mp.weixin.qq.com/s/XNe2xRx_yVgJtwfMgDxolg": "某211高校从一个文档到全校三要素泄露&RCE", "https://mp.weixin.qq.com/s/HB68pJqjK-IChj3zpprWnQ": "TSRC关于AI辅助漏洞挖掘报告的提交规范:每一份漏洞报告,都值得被认真对待", "https://mp.weixin.qq.com/s/Tb5_9TR-TWm96pGOVMyWbQ": "理想汽车SRC关于AI生成漏洞报告的处置公告", "https://mp.weixin.qq.com/s/7GZgED4pCSwGFicuaQo5xA": "微软紧急修复严重的 ASP.NET 漏洞", "https://mp.weixin.qq.com/s/w1mRvwW2F6UAQHre6DMLwg": "中通SRC关于AI生成漏洞报告的处置公告", "https://mp.weixin.qq.com/s/jvO4_xIs-lHx_cD068kgVw": "小米安全中心关于AI生成漏洞报告的处置公告", "https://mp.weixin.qq.com/s/03XwoW8lYlsO4K23ltAtZA": "【警示】AI首次参与挖出NGINX高危漏洞,安全工程师还剩什么", "https://mp.weixin.qq.com/s/IOjGKzOG-WQDsZLWgcsI7A": "【公告】JSRC关于AI生成漏洞报告提交规范", "https://mp.weixin.qq.com/s/3j9Q5oZlPOZWzYWKussXIg": "浅谈代码审计+漏洞批量一把梭哈思路", "https://mp.weixin.qq.com/s/Mmn48idakM3oW_ey2jEtng": "【警示】FortiSandbox高危漏洞:一条命令获取root权限", "https://mp.weixin.qq.com/s/2F0PSxubSi3kKWAkKkAMbQ": "常见系统漏洞分析", "https://mp.weixin.qq.com/s/CZmoztuvC2mYssA2VVtWgg": "edu漏洞之若依nday漏洞复现(一)", "https://mp.weixin.qq.com/s/HMBYweMEslpzOQ8EURKlcA": "苹果修复了通知隐私漏洞,该漏洞曾允许FBI访问已删除的Signal消息", "https://mp.weixin.qq.com/s/7q46MgR4mOjZtprymtOpoA": "小红书SRC发布《AI生成漏洞报告提交规范》", "https://mp.weixin.qq.com/s/4cEKtpLcK3VbaZ3dv0JzOA": "全新开源 Burp AI 扫描插件、支持 17 类 Web 漏洞检测,自带 WAF 绕过,一键自动化挖掘并智能验证漏洞", "https://mp.weixin.qq.com/s/LRjrEUoutKGQDj2loGBzxw": "全程云OA download.ashx接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s/wpL4ZReyiP3IHdOYDMTeEA": "科大讯飞SRC关于AI生成漏洞报告的处置公告", "https://mp.weixin.qq.com/s/QyLu2yTAiprgZwazDNlT_Q": "Bissa扫描器曝光:AI辅助的大规模漏洞利用与凭证窃取", "https://mp.weixin.qq.com/s/LbOtP2MxhS_1IuYqnvwMmQ": "商品价格篡改漏洞", "https://mp.weixin.qq.com/s/X4uYqXDWxev1JFGxBXWSeA": "CNNVD关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s/CV6Kxvftd0s1RctEclZIWQ": "Apache HttpClient 5.6 中存在严重的身份验证绕过漏洞", "https://mp.weixin.qq.com/s/FMJCUbT79b4Xbu6pQvx_Ww": "仅花1.5万元,就能把关键漏洞变成直接运行的网络武器", "https://mp.weixin.qq.com/s/7rgi1Poke9Oc076fZ71PhA": "国家人工智能安全漏洞库启动运行", "https://mp.weixin.qq.com/s/Qphhumd3O4HrcCyaixXcgw": "雨诺调度客户端 GetFile 存在任意文件读取漏洞", "https://mp.weixin.qq.com/s/BxNitlIlxzaPEhafOGcEew": "iOS 漏洞会导致已删除通知残留,苹果现已推出修复更新", "https://mp.weixin.qq.com/s/gQk8l6ZAPlpFQlgNggh-mw": "网络安全可视化工具集 | FOFA 资产测绘爬取与 Nuclei 漏洞扫描", "https://mp.weixin.qq.com/s/iVWv9lHobQ2qjnCXN-q-rg": "CrowdStrike联合行业巨头成立QuiltWorks联盟,对抗AI暴增的漏洞威胁", "https://mp.weixin.qq.com/s/iUzWMxRnKJnzKPV8jGI7Hw": "【漏洞通告】Apache ActiveMQ 远程代码执行漏洞(CVE-2026-40466)", "https://mp.weixin.qq.com/s/tpPMDxqEnFclHP5gFDLbwg": "【已复现】漏洞通告 | Apache ActiveMQ 远程代码执行漏洞(CVE-2026-40466)", "https://mp.weixin.qq.com/s/vsWF_APpR2OcidXCh4geZg": "躺平送外卖风雨兼程一天七八十,而挖漏洞半小时到手500,你会怎么选?", "https://mp.weixin.qq.com/s/cOq-mjo7jXe6rtIB4y_zEQ": "一天渗透测试,后台RCE+SQL注入+信息泄露,收工", "https://mp.weixin.qq.com/s/AAjxu77yJ5UBTCUg1_-Ctg": "关于AI辅助挖掘漏洞报告提交规范的公告", "https://mp.weixin.qq.com/s/42yvn5LXHYev-R476cdzdQ": "安全热点周报:Windows Defender 被漏洞利用,成了黑客的“帮凶”", "https://mp.weixin.qq.com/s/LL44EOYq8f5whsHcr-YBgg": "【漏洞通告】FortiSandbox目录遍历漏洞(CVE-2026-39813)", "https://mp.weixin.qq.com/s/TDrkxeG2dCq-sAGDjsBHpQ": "CVE-2025-65857:雄迈XM530摄像头硬编码凭据漏洞,数十万监控设备直接裸奔", "https://mp.weixin.qq.com/s/b1FnoITsch__BTu5qswjhw": "【已复现】Apache ActiveMQ 远程代码执行漏洞(CVE-2026-40466)", "https://mp.weixin.qq.com/s/1N5QY453xAWwUM3pvW2Yiw": "Mythos玻璃翼项目证明AI能发现漏洞,但修复工作该由谁来完成?", "https://mp.weixin.qq.com/s/yevKttJQW6jpkg56ejl9Og": "国家人工智能安全漏洞库启动运行", "https://mp.weixin.qq.com/s/RxU0VGboqymFkrzuRHKd1A": "我们发现了 Hermes Agent 的第一个远程代码执行漏洞,但这已经不重要了", "https://mp.weixin.qq.com/s/bDVr6URMeQc8eYmZktdjow": "能信安:漏洞通告", "https://mp.weixin.qq.com/s/zm0TaGzw5QpXPXdkwbLPRQ": "【漏洞通告】Apache ActiveMQ 远程代码执行漏洞(CVE-2026-40466)", "https://mp.weixin.qq.com/s/AgRxUV_Q_BpxXMN50uJS3A": "文件上传操作漏洞场景挖掘思路", "https://mp.weixin.qq.com/s/hb440dIKp9Dsm2CuFzFP5Q": "太初众测平台关于AI生成漏洞报告的处置公告", "https://mp.weixin.qq.com/s/Sj8YUCbO9jxeDaTxsypuPA": "【安全圈】黑客利用 Breeze Cache WordPress 插件文件上传漏洞发动攻击", "https://mp.weixin.qq.com/s/tgFJ7dEiAtOCjkzoVVfHFg": "【火绒安全周报】Vercel遭黑客入侵∕黑客多次入侵美最高法院", "https://mp.weixin.qq.com/s/cBUA4XyFyW2VYe_1Wgifcg": "动态|国家人工智能安全漏洞库启动运行", "https://mp.weixin.qq.com/s/FUw05Cd5cO_Pdnk-L72sGQ": "一个年营收 800 亿的公司,还出现XSS 漏洞到底是谁的责任?", "https://mp.weixin.qq.com/s/OTIq98hhIv_qQzQODaunsg": "新起了一个项目:漏洞扫描(远程安全评估系统)", "https://mp.weixin.qq.com/s/6OKOKCm8ASDjNWBdjm7tmw": "天地伟业Easy7 ∕Easy7∕rest∕file∕delete 文件删除漏洞", "https://mp.weixin.qq.com/s/koP7SY_zhp76Uyz_4rIO2w": "这家中国网安企业达到 Mythos 级的 AI 漏洞挖掘能力", "https://mp.weixin.qq.com/s/WvmXybsgPtQa0Rz_eZ30fA": "黑客利用思科 Firepower 设备的 n day漏洞获取未经授权的访问权限", "https://mp.weixin.qq.com/s/bepB-iX8UCaQF6svtFp4Mg": "思科Webex爆9.8分漏洞:你的会议可能被\"老板\"窃听", "https://mp.weixin.qq.com/s/6nqoI6MYk77KFFvCKTP9WQ": "OpenSSH 10.3升级指南:漏洞修复+新特性,CentOS∕Ubuntu一键脚本", "https://mp.weixin.qq.com/s/0UyGleZ4d_XmktIdAmMjmA": "CVE-2026-21509 补丁差异比较:Microsoft Office OLE 安全绕过", "https://mp.weixin.qq.com/s/h1UJrWW_F_Yt4UYuKJpkAg": "ZIP 炸弹漏洞深度剖析:原理、构造与实战利用", "https://mp.weixin.qq.com/s/2EQYYSa6HEcGEvEtIE4c5Q": "Claude Mythos安全神话:炒作还是名副其实?;白宫拟开放Claude漏洞挖掘AI | FreeBuf周报", "https://mp.weixin.qq.com/s/1YgeRQLViQcY0LVn8sMUcw": "CVE-2026-33824:Windows IKEv2 中的远程代码执行漏洞", "https://mp.weixin.qq.com/s/5IllmhUjFJDP-vocoLhOmw": "孚盟云 AjaxAttachment.ashx sql注入漏洞", "https://mp.weixin.qq.com/s/g7m_PFQNSeqacnrBU0Zq_g": "CVE-2025-70994:雅迪T5电动车弱认证漏洞分析", "https://mp.weixin.qq.com/s/kqJ__HdcyNIbp8dLNFpG7Q": "Oday 提权漏洞 RedSun", "https://mp.weixin.qq.com/s/54o11j2hq8g2B4tM3GYAfQ": "漏洞风暴到来,安全如何应对?", "https://mp.weixin.qq.com/s/333ue1v4BotTYZl_TYmtRA": "【一周安全资讯0425】网安标委技术文件《人工智能应用伦理安全指引》1.0版公开征求意见;Vercel遭第三方OAuth劫持入侵", "https://mp.weixin.qq.com/s/L8xeBZnj39Qty6ntKUwBBg": "CrowdStrike LogScale 存在高危漏洞,可被攻击者利用非法读取服务器文件", "https://mp.weixin.qq.com/s/AYUZ6TtmGVtYWjHVk6745w": "记一次某大学的漏洞挖掘", "https://mp.weixin.qq.com/s/zyOHKhXdIL_xlmy8OOV2nA": "邀请次数限制绕过漏洞", "https://mp.weixin.qq.com/s/Q_X_Xv0ffX_HJjgAZsPfkg": "NVD“撑不住”了:以后NVD的漏洞该咋运营", "https://mp.weixin.qq.com/s/GsZn0E8bW4_PS7-Q0niQ2Q": "[工具推荐]两款最新的shiro反序列化漏洞综合利用工具", "https://mp.weixin.qq.com/s/OcI0Mu9VQqVIa8ucaWH_eQ": "孚盟云 AjaxProductTemplateList.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s/cJ2Y9tEC3zUKrAoOtYs_Yg": "漏洞预警 | Windows截图工具信息泄露漏洞", "https://mp.weixin.qq.com/s/FBeu3Gh8c3vHRfVYNAPfIg": "挖到盲SSRF别急着放弃!这才是RCE的正确打开方式", "https://mp.weixin.qq.com/s/3i8QzA17oITXTxiNjUiEAg": "国家人工智能安全漏洞库正式启动,AI漏洞治理开始进入“基础设施化”阶段", "https://mp.weixin.qq.com/s/l89UO7i5L-6AZaSyI0f6Tg": "实战!快速编写漏洞POC & 批量验证", "https://mp.weixin.qq.com/s/9N7PunFuq6yAsV40SKXloQ": "如何通过漏洞组合链为工控平台CODESYS植入后门", "https://mp.weixin.qq.com/s/51IPZ96leij4ShgvItxzFA": "每周PDF资源:OpenClaw曝重大漏洞;2026高危漏洞TOP10盘点;黑客算改安卓NFC应用窃取支付数据", "https://mp.weixin.qq.com/s/5H6akWNhxIVosCiXm_Gw9A": "记录几个简单的edu漏洞挖掘思路", "https://mp.weixin.qq.com/s/pnuLceAUkgadhjjZn1thAg": "CVE-2026-34621漏洞利用生成器,一个令人不安的“武器级”工具箱", "https://mp.weixin.qq.com/s/IDVgCPTEHXgp2287_IMqYA": "智互联WMS getsyspdaversionlistbyparams SQL注入漏洞", "https://mp.weixin.qq.com/s/76vg9O1K5kr0dynaOgEacA": "漏洞复现 | 用友NC ServletForESBAdaptor 反序列化RCE漏洞", "https://mp.weixin.qq.com/s/97zyDxpP1L2QMq4t2N4SxA": "黑客利用Telegram做“战报系统”,900余家企业遭React2Shell漏洞批量洗劫", "https://mp.weixin.qq.com/s/6ZHb7JPOdw1KaN78148Q6A": "黑客利用 Breeze Cache 插件漏洞(CVE-2026-3844)发起攻击,超 40 万个网站面临安全风险", "https://mp.weixin.qq.com/s/tKLIIESGCYcDNmkaV72TYg": "漏洞爆炸了,NIST停止为不符合标准的漏洞做详细分析", "https://mp.weixin.qq.com/s/yk3Na1rZNQq8d0ck-cs45A": "今日(2026年4月26日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s/oaaVH1DJUCEbdkdxzDw1Yg": "DeepZero:开源的驱动程序漏洞自动化研究引擎,如何改变攻防格局?", "https://mp.weixin.qq.com/s/pYX7ym5MGbopdjjBbZk2JQ": "漏洞预警 | 天地伟业Easy7 SQL注入漏洞", "https://mp.weixin.qq.com/s/jtHe-2ne_ku1_7W0W0MYJw": "PDF漏洞利用工具,看起来像真的!", "https://mp.weixin.qq.com/s/h5VwXQTWWdix-25c5T9UkQ": "莱特币零日漏洞遭利用发起拒绝服务攻击,导致主要矿池瘫痪", "https://mp.weixin.qq.com/s/bprUqeLSDdjBS179mBXcqg": "CVE-2017-12615 Apache Tomcat任意文件上传漏洞说明", "https://mp.weixin.qq.com/s/KBOm1W35utMcRCsvvAGQqA": "拉开渗透差距:从被忽略的细节入手,WebSocket 漏洞测试实操", "https://mp.weixin.qq.com/s/ppbocrTnhKgJIIVN4CoQWQ": "畅捷通T+ FormReportOperateAction 任意文件读取漏洞", "https://mp.weixin.qq.com/s/dSOYqzaeNhDCVlXfgAJOow": "如何骗过 PackageKit 拿到 Root(CVE-2026-41651)", "https://mp.weixin.qq.com/s/-Uf91JkBHe_-gq31ftMvoA": "GraphQL 接口 Mutation别名导致的Hackerone DoS 漏洞", "https://mp.weixin.qq.com/s/D2ZgOupvuJC7GTe2F9R_HQ": "代码审计 某cms任意文件下载漏洞", "https://mp.weixin.qq.com/s/KqEoLc6qc6qKmbJIcrRkEw": "AI漏洞海啸来袭:五步构建Mythos-ready安全体系", "https://mp.weixin.qq.com/s/vetr3EdxDiVH73EnCtWisw": "CVE-2026-34621 回顾:136天的检测谎言", "https://mp.weixin.qq.com/s/pgcRE9IVDtCkF4kVV2-Q7w": "记一次 Fake-POC 投毒项目的追溯", "https://mp.weixin.qq.com/s/xeAs8XNed70mK4cvT7RzDA": "蚁剑爆出1click rce,执行命令即可上线", "https://mp.weixin.qq.com/s/iITNnSNYSWX58Sd3WLDPog": "百度SRC发布《AI生成漏洞报告规范》", "https://mp.weixin.qq.com/s/-I6ePTbfVj8Fw8Y3SN3BCA": "远程挖漏洞|接单中!渗透测试∕等保工具∕攻防比赛都可", "https://mp.weixin.qq.com/s/3xuBkR0gVs9Zp7pgQSJ4Kw": "新的Windows RPC漏洞允许攻击者在所有Windows版本中提升权限", "https://mp.weixin.qq.com/s/1fsYSn2DidY_QPRz3CK5_g": "900余家企业遭自动化攻击,360专家预警:AI正在重塑漏洞利用和攻防体系", "https://mp.weixin.qq.com/s/2_8iU1NxXcNma-XJqy1KVQ": "12年Linux漏洞Pack2TheRoot曝光,本地用户可提权至root", "https://mp.weixin.qq.com/s/yAFDEpfWe6EFm3lnozoVeA": "Python漏洞导致Windows系统越界写入", "https://mp.weixin.qq.com/s/EmFgFMIVXYfy5MFvS6PdLw": "OpenAI重金悬赏GPT-5.5生物漏洞,严防AI被滥用于危险科研", "https://mp.weixin.qq.com/s/rISt6k5t53l3ksz4wV_f4g": "潜伏12年的“幽灵”浮现!Linux 惊现高危提权漏洞,众多主流发行版集体沦陷", "https://mp.weixin.qq.com/s/9h62gsbnad0W_3xvjAJddw": "已存在12年之久的Pack2TheRoot 漏洞可导致攻击者获得 Linux root 访问权限", "https://mp.weixin.qq.com/s/VSdnlmzHQ4k5GaYlO10C2Q": "AI能在15分钟内武器化CVE漏洞么?答案是能", "https://mp.weixin.qq.com/s/OO3VIb2Ko4MORay2pLDiUA": "上周关注度较高的产品安全漏洞(20260420-20260426)", "https://mp.weixin.qq.com/s/HMx0Y-GakKYxFrQk_wi6cA": "【安全圈】潜伏 8 年的漏洞,WPS 365 轻舟 AI 如何从源头免疫?", "https://mp.weixin.qq.com/s/xE9qsfiaRNa2a44P0vnRBg": "CNVD漏洞周报2026年第16期", "https://mp.weixin.qq.com/s/AyBY_zIVYv8nrwl235aZhg": "OpenAI 推出GPT-5.5 生物漏洞奖励计划,最高赏金2.5万美元", "https://mp.weixin.qq.com/s/ZOIw-ddU5YRUo9rm2Ahu9Q": "【高危漏洞预警】Notepad++字符串注入漏洞(CVE-2026-3008)", "https://mp.weixin.qq.com/s/2bRYPweh1tzlqV8JfDwnuA": "【AI安全】别只防输出!AI Agent 的中间流程漏洞百出", "https://mp.weixin.qq.com/s/X7RDgEZs6UiknLMJKM_GlQ": "Vvveb CMS 任意文件上传导致RCE | CVE-2026-6257原理分析&研究", "https://mp.weixin.qq.com/s/K536X2vV09_tmDLScP-mzQ": "漏洞预警 | Adobe Acrobat Reader远程代码执行漏洞", "https://mp.weixin.qq.com/s/0k7hkyH8gNiaUK0FT9VfGg": "2025 “泉城杯” 济南市网络安全大赛 题目复现", "https://mp.weixin.qq.com/s/1YAvYFJ_ywbmsjjloGs-Vw": "【SRC实战】|并发漏洞新手的加油站!", "https://mp.weixin.qq.com/s/LxcaJcZh_ujFPE2rZEVSNw": "盲SSRF实战:用这招“投石问路”,无声漏洞照样拿赏金", "https://mp.weixin.qq.com/s/VtS7CflCTMI9Lkk0y4_n4g": "一次案件前台RCE审计", "https://mp.weixin.qq.com/s/GbC8KYAXswdfqRdL9gKIyA": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/UHsu_MTGV2-9xJObaoKG0A": "蚁剑v2.1.15曝致命漏洞!XSS可直接变RCE,点击即中招...", "https://mp.weixin.qq.com/s/6All2qBlo79FG8KTQCTrmA": "红队神器|Vue 站点未授权漏洞一键挖掘,这款插件太好用了", "https://mp.weixin.qq.com/s/6hcanSlxurPwZfquPPKrDg": "密码重置令牌可预测漏洞", "https://mp.weixin.qq.com/s/nUEiHeVYhn53cJdwnNH2vQ": "黑客利用Telegram做“战报系统”,900余家企业遭React2Shell漏洞批量洗劫", "https://mp.weixin.qq.com/s/d7xALBk9AkhG0Pl_uaAvIQ": "勒索软件与Mirai的狂欢:CISA最新KEV漏洞技术复盘与防护", "https://mp.weixin.qq.com/s/Qx_dOttjDfG9-OBh9-Og9w": "OpenClaw安全实战系列(四):幽灵连通性 — 揭秘CVE-2026-32038沙箱网络隔离绕过与靶标实战", "https://mp.weixin.qq.com/s/Vww-RAutlBTjp4HaJakzUQ": "天地伟业Easy7 queryDataByTypeEx SQL注入漏洞", "https://mp.weixin.qq.com/s/_HIr5MhWIcgO6FHSt5o8WA": "4月社区投稿活动 | 漏洞挖掘", "https://mp.weixin.qq.com/s/vTNq9lFdysw-3Tj9THT2pQ": "[漏洞播报]紧急爆雷!蚁剑 v2.1.15 高危漏洞,XSS 秒变 RCE", "https://mp.weixin.qq.com/s/F5th9WC8nuRuo_vq9G1lxw": "被低估的数据泄密出口:网页上传场景的安全漏洞与防护破局", "https://mp.weixin.qq.com/s/AyNw7_yR_iOA32E-dlODYw": "紧急!蚁剑 v2.1.15 曝致命漏洞。网友:玩一辈子鹰,被鹰啄瞎了眼", "https://mp.weixin.qq.com/s/ybpDMdvecw-bC289Wc1Tig": "CVE-2026–41505:一个两字母的导入如何破坏开源 LMS 的认证安全", "https://mp.weixin.qq.com/s/K0CEuWrxspQdL6xNw4NivA": "OpenSSH 漏洞暗藏 15 年,可致完全 root 权限访问", "https://mp.weixin.qq.com/s/ytNWdqGECo0fmWwPQGqy8A": "LiteLLM SQL注入漏洞可无条件触发", "https://mp.weixin.qq.com/s/hgH1SOCfuetBs-F_aueixQ": "LLM 推理引擎 llama.cpp 零点击 RCE 漏洞:从 Null Buffer 到绕过 PIE∕Full RELRO∕NX 利用链(CVE-2026-34159)", "https://mp.weixin.qq.com/s/AkKjaEkdG5Va1ovA3D7HLw": "RedSun 本地权限提升漏洞分析:滥用 Defender 修复机制", "https://mp.weixin.qq.com/s/gQpvJE8_--8CLXOOzTdSHw": "我在 API Explorer 中发现了一个存储型 XSS 漏洞——以下是我的具体操作步骤", "https://mp.weixin.qq.com/s/zi0YGUvyBmaKjiRHLSJItg": "Nginx UI的未授权远程代码执行", "https://mp.weixin.qq.com/s/_GtsUO1Zw5PrXReh3PTW3A": "漏洞预警 | 天地伟业Easy7文件上传漏洞", "https://mp.weixin.qq.com/s/NOrYKuv6TANitgwxoCUTYw": "【有免费靶场】Java“幽灵比特位” 漏洞原理+复现", "https://mp.weixin.qq.com/s/wHj6IBCWz-v6MSIWToIZBw": "微软修复可导致权限提升的 Entra ID 漏洞", "https://mp.weixin.qq.com/s/pKGAY4LKq_FNOldhIscm-g": "【CVE-2026-22077】OPPO钱包可信域绕过导致敏感信息泄露漏洞的致谢公告", "https://mp.weixin.qq.com/s/_8P7LXulq1k94qo11xzYdQ": "PhantomCore 利用 TrueConf 漏洞入侵俄罗斯网络", "https://mp.weixin.qq.com/s/LV5S2ijsoT-MnVM3rYkptA": "CVSS 9.8!这波无需授权的 RCE 组合拳,是如何拿下 TrueConf 服务器的?", "https://mp.weixin.qq.com/s/Z1nYRTMC3YZBT5T6e12NKw": "CVE-2026-3854:GitHub 存在安全缺陷,攻击者可利用该漏洞发起远程代码执行攻击", "https://mp.weixin.qq.com/s/Dml2Bs63K7PLAj1AEhFrqA": "某SRC不一样的Dify∕Next.js命令执行记录", "https://mp.weixin.qq.com/s/r2qc3-qowgHkqcDMBu-HWw": "漏洞预警 | Cockpit远程代码执行漏洞", "https://mp.weixin.qq.com/s/A7x_ldeAz2kEajkc914cdw": "【高危漏洞预警】llama.cpp无认证远程代码执行漏洞CVE-2026-34159", "https://mp.weixin.qq.com/s/Il0b96xm7kl2sOL_V8eNYA": "安全企业发布iOS漏洞攻击风险检测工具", "https://mp.weixin.qq.com/s/egJBth9FPgK9RcYcO9RmPQ": "关键GitHub 漏洞(CVE-2026-3854)允许远程代码执行", "https://mp.weixin.qq.com/s/PEbh04GR873lOvayH9x39w": "打印服务也犯错!最新CUPS漏洞可攻陷操作系统", "https://mp.weixin.qq.com/s/Z_vob01EPshW17OWrACA2Q": "奇安信SRC 关于AI生成漏洞报告的处置公告", "https://mp.weixin.qq.com/s/aSe-K12DmxPVCYURgrRb6g": "[工具推荐]AI自动化 Web 漏洞扫描Burp插件Zack-AI-Scanner", "https://mp.weixin.qq.com/s/ET6QSQgcWUhEdsUWQHjjrA": "FortiWeb 针对 Java 幽灵比特位(Ghost Bits)漏洞防护策略", "https://mp.weixin.qq.com/s/ba0X89YKQLL8qaU26w1P_A": "[高危漏洞预警] LiteLLM 预认证SQL注入漏洞CVE-2026-42208", "https://mp.weixin.qq.com/s/hVOmXE60RFSlTKsEWw2m3g": "【有免费靶场】Java“幽灵比特位” 漏洞原理+复现", "https://mp.weixin.qq.com/s/X4L3vZe6Vk4qdMV15DT3zg": "Gemini CLI 严重漏洞可触发 RCE 攻击和软件供应链风险", "https://mp.weixin.qq.com/s/hDtM54ZidCt3dUugHiyaIg": "直播更新 | 系统0day安全-IOT设备漏洞挖掘(第6期)", "https://mp.weixin.qq.com/s/W446pdxEzlFNJgAa4zfzqw": "Pipecat 语音代理可遭严重 RCE 漏洞利用劫持", "https://mp.weixin.qq.com/s/k10RyA8TGLrtO4tTa0vlGw": "cPanel被曝惊天高危漏洞,千万级服务器面临“裸奔”,官方紧急发布补丁!", "https://mp.weixin.qq.com/s/igdNc0iIhwoStLeSDGHyMQ": "【论文速读】| 面向高成本效益代码漏洞检测的策略型异构多智能体架构", "https://mp.weixin.qq.com/s/zaDOEbZr9XwJFTFg9RN0pg": "Bonitasoft 认证绕过及RCE漏洞分析及复现", "https://mp.weixin.qq.com/s/uKFJQnQ21x_42dzDrVTHAA": "CVE-2024-38812 深度分析:从堆风水到远程代码执行", "https://mp.weixin.qq.com/s/6U0s1g5xg97_PmmIEJUhTw": "Java“幽灵比特位” 漏洞原理+复现+工具地址(Ghost Bits(幽灵比特)详细分析手册)", "https://mp.weixin.qq.com/s/pli4tkFqDG7koTd2GennMA": "突发!一条命令 github.com 被黑!RCE Made By AI!", "https://mp.weixin.qq.com/s/ZDPoeekcoHDUc-mltalnHg": "攻击者可通过漏洞链在CODESYS应用中植入后门", "https://mp.weixin.qq.com/s/RAbn3W0NNbqbALHktf8U5Q": "分享一个渗透测试必备的POC速查网站", "https://mp.weixin.qq.com/s/eBnlFVk8Q4GQNP6keHuSjQ": "cPanel发布严重身份验证漏洞警告——紧急补丁已发布", "https://mp.weixin.qq.com/s/3BgVRD3ap1MukW8C2kPS2w": "成功复现!一条 git push 即可接管 GitHub 服务器,任意拉取他人私有仓库 (CVE-2026-3854)", "https://mp.weixin.qq.com/s/7HTN5GYNkrQkfFuL2gaVJw": "周三:资讯速递(OpenAI漏洞赏金、安全skills库、OpenClaw漏洞)", "https://mp.weixin.qq.com/s/P4dloFveiPI3jowz1YmLRg": "OpenClaw三大漏洞可致策略绕过与主机劫持", "https://mp.weixin.qq.com/s/p_JO2SGgn63_3gs0cEYgVQ": "【高危漏洞预警】CVE-2026-31431 Linux内核crypto子系统本地提权漏洞", "https://mp.weixin.qq.com/s/Z2dWGAwId9e7H5yXQVsxPA": "MajorDoMo admin.php接口存在远程代码执行漏洞CVE-2026-27174 附POC", "https://mp.weixin.qq.com/s/XKrvtRy5L_hPzY_IO5IvCw": "【已复现】Linux Kernel \"Copy Fail\" 本地权限提升漏洞(CVE-2026-31431)", "https://mp.weixin.qq.com/s/mHwL-41--rUAczfSYaeo_w": "Linux提权漏洞!10行代码直接root", "https://mp.weixin.qq.com/s/-5nohB52WQtD3lV7xInIKg": "【已复现】Linux Kernel \"Copy Fail\" 本地权限提升漏洞(CVE-2026-31431)安全风险通告", "https://mp.weixin.qq.com/s/bWSo1ktSYgWQXCQZvY_DJw": "【漏洞通告】Github-Enterprise远程命令执行漏洞(CVE-2026-3854)", "https://mp.weixin.qq.com/s/r47JuF0ybIxR98W_-qt6qw": "2026 年十大最佳 Linux 服务器漏洞扫描器", "https://mp.weixin.qq.com/s/4l69yVBMxoHh8U7x98VwCQ": "CVE-2026-42208:LiteLLM 漏洞披露后仅 36 小时即遭利用", "https://mp.weixin.qq.com/s/tjO9uXE5mb-KU1IAT5yffg": "所有受支持的 cPanel 版本均受高危认证漏洞影响,目前已完成补丁修复", "https://mp.weixin.qq.com/s/JyA-1ZaIP3R-68bdWcG8pQ": "某园区0day代码审计", "https://mp.weixin.qq.com/s/Q6SqplB6NUzs2_lc5WuQww": "GhostBits-WAF-Bypass-Toolkit——针对 Java 幽灵比特位漏洞的 WAF 绕过辅助脚本", "https://mp.weixin.qq.com/s/Av99-_fZbaXjTiXy2fhOIg": "【已复现】732字节、1秒root、九年无人知——Linux近年最稳定提权漏洞", "https://mp.weixin.qq.com/s/_3AuJPcKpfiuD7JrLlWg_A": "一条 git push 就能拿下 GitHub 服务器?CVE-2026-3854 详解", "https://mp.weixin.qq.com/s/rOY7WfINmemXlV70Rqc9mA": "CVE-2026-31431(Copy Fail)漏洞分析与车联网影响评估", "https://mp.weixin.qq.com/s/ruU7aGSsvZY24ILNi4zkrw": "【漏洞通告】LiteLLM SQL注入漏洞(CVE-2026-42208)", "https://mp.weixin.qq.com/s/-8PO6l29GqRPVSYxR0vGig": "【已复现】cPanel&WHM 身份认证绕过漏洞(CVE-2026-41940)安全风险通告", "https://mp.weixin.qq.com/s/u8bn0-RIKU_PGHOugPj43Q": "人工验真!Linux提权漏洞,影响这么多信创!(附稳定验证PoC)", "https://mp.weixin.qq.com/s/PP9JkK67c1F0XlLd5TK-gw": "Linux内核的“九年代价”:CVE-2026-31431漏洞深度解析与利用", "https://mp.weixin.qq.com/s/JQFPrpOnoX9jqOx0QtdRtw": "【安全圈】cPanel被曝惊天高危漏洞,千万级服务器面临“裸奔”,官方紧急发布补丁!", "https://mp.weixin.qq.com/s/Z1ixOzAzu_Lqtec95zdyUw": "人工智能重要安全漏洞的通报-openclaw多个安全漏洞", "https://mp.weixin.qq.com/s/dlhYnOUdSTp-j-wqVMLQqA": "1秒root、九年无人知——Linux近年最屌提权漏洞", "https://mp.weixin.qq.com/s/rU5gcIueSKPzoK4-OKFGpQ": "Copy Fail: 仅732字节,通杀所有主流 Linux 发行版,隐藏9年的 root 提权漏洞", "https://mp.weixin.qq.com/s/YxhdfUqNCmPm6mXf0pQRSg": "【CVE-2026-22070】ColorOS助手的路径穿越漏洞的致谢公告", "https://mp.weixin.qq.com/s/yi0zyXfGjL5P-5j4M_71mw": "CVE复现 | CVE-2025-55182", "https://mp.weixin.qq.com/s/PYwSeMEa8R0c8kEvrI_vgA": "安全热点周报:LiteLLM 认证路径曝 SQL注入漏洞,披露 36 小时即遭定向攻击", "https://mp.weixin.qq.com/s/xwFEJZ9DUEirje66YPIa5w": "CNNVD通报OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s/fNi4N6zHAQfFDTMk8Lwxmg": "CVE-2026-31431提权复现", "https://mp.weixin.qq.com/s/FaNP5vEzlnHwrS4uoG6MEQ": "CopyFail本地提权漏洞影响主流Linux系统最新版(CVE-2026-31431)", "https://mp.weixin.qq.com/s/SZKmm52Ja7AbGHYwSmGnYw": "[漏洞播报]炸了!Linux高危漏洞Copy Fail来袭,732字节脚本秒提root", "https://mp.weixin.qq.com/s/O6jSPeRQ5szxZX5nr3iOjA": "【高危漏洞预警】cPanel∕WHM认证绕过漏洞CVE-2026-41940", "https://mp.weixin.qq.com/s/__pnQ3YQXKIwoZQyPEH16g": "潜伏9年,732字节即可提权:Copy Fail 漏洞深度解析", "https://mp.weixin.qq.com/s/MfqRs5WFJbAkgo9IVAtJiA": "360漏洞挖掘智能体亮相DEFCON 中国AI安全能力实现关键突破", "https://mp.weixin.qq.com/s/aYUPjfD9X_2rYfE6JeqoPA": "【已复现】Linux内核权限提升漏洞(CVE-2026-31431)", "https://mp.weixin.qq.com/s/8VPckV0VjEWpLu6AsaFULQ": "能信安:漏洞通告", "https://mp.weixin.qq.com/s/K4EDSNjwUjHQlCFG1lqHRw": "人工智能重要漏洞通报(2026年第六期)", "https://mp.weixin.qq.com/s/3NQcTrF_vjO_LnO-QKF_tQ": "【复现】Linux内核通用漏洞 Copy Fail(CVE-2026-31431)", "https://mp.weixin.qq.com/s/qPzFe4bkc1R8glcKmP-RDw": "【已复现】732字节、1秒root、九年无人知——Linux近年最稳定提权漏洞", "https://mp.weixin.qq.com/s/OonRcpU1Lba7T9Spz3615Q": "Copy Fail 不用竞态、不用崩溃——十年来最「优雅」的 Linux 提权漏洞 (CVE-2026-31431)", "https://mp.weixin.qq.com/s/JVrl3-46lVbqOp-XcoTS7A": "连 cat readme.txt 都不安全:iTerm2 SSH 集成协议信任漏洞分析", "https://mp.weixin.qq.com/s/y7lIUNoxBmNEiYbY7Xp-uw": "Linux内核复制失败零日漏洞影响自2017年所有主流发行版", "https://mp.weixin.qq.com/s/XgDQZlrOETG-KZ3JqyWuSg": "漏洞速递|CVE-2026-31431 Linux最新0day提权漏洞(建议自查)", "https://mp.weixin.qq.com/s/V_0VgmHnciZNDnlXg0BhLQ": "Linux 高危漏洞爆发!普通用户可直接提权 root", "https://mp.weixin.qq.com/s/3OYG-rJgU-5ps-5zhYHO9w": "CVE-2026-31431提权【C版本】", "https://mp.weixin.qq.com/s/ndPeFonGLvlPVpacBgsFeA": "【紧急预警】Copy Fail:CVE-2026-31431 Linux内核本地提权漏洞深度解析", "https://mp.weixin.qq.com/s/-9Ch7VDjfmzH_5lSp_YekA": "[高危漏洞通报]COPY FAIL漏洞(CVE-2026-31431)复现及修复建议", "https://mp.weixin.qq.com/s/-G3FS5b8DKy6uPN9lOdj4g": "记某SRC高危漏洞挖掘", "https://mp.weixin.qq.com/s/26VkSyNcULuNoVF5fmBQ9A": "CVE-2026-31431 已复现,最新提权漏洞,通杀过去 9 年所有 linux 主机", "https://mp.weixin.qq.com/s/SiZdlyzT-4_06zanDrzykg": "Linux Copy Fail漏洞预警,丝滑提权不是梦", "https://mp.weixin.qq.com/s/ngZLSfk7P0y_XuuiqtjH9A": "732 字节通杀 Linux内核 近 9 年!100% 稳定获取 root 权限。附Poc。", "https://mp.weixin.qq.com/s/6jm1d98O83bnA2fFha1riA": "网络设备通用漏洞挖掘由黑到白", "https://mp.weixin.qq.com/s/P9TGtLxahLOsptfPu1KRlA": "cPanel 与 WHM 紧急更新修复关键认证绕过漏洞", "https://mp.weixin.qq.com/s/czd3cPe35jX3bK_yCgzsAg": "潜伏9年通杀全版本!Copy Fail 内核提权漏洞分析(CVE-2026-31431)", "https://mp.weixin.qq.com/s/UIRyI_9qDHHHaVNB9cmttw": "【高危漏洞预警】 潜伏近十年,Linux 内核 Copy Fail 漏洞全网爆发", "https://mp.weixin.qq.com/s/JovkXfcqFi1dzUn9XRfNLw": "CNNVD | 人工智能重要漏洞通报(2026年第六期)", "https://mp.weixin.qq.com/s/pjZ6aFXriibIP6J6wK6Swg": "Copy Fail:横扫所有Linux,成为最危险的提权漏洞", "https://mp.weixin.qq.com/s/KHKIExChRMX6ewJk6dTgSw": "逆天 Linux 提权漏洞,大洞速修!!!!!", "https://mp.weixin.qq.com/s/S-furaxYLG43WtgBuCVjEw": "【复现】cPanel & WHM 身份认证绕过漏洞 (CVE-2026-41940)", "https://mp.weixin.qq.com/s/XVyO1h1J1_My9dNjaO2CRg": "[吃瓜速递]“你的头像”好漂亮;漏洞报告P图之我要“举报”你", "https://mp.weixin.qq.com/s/Jvl5MRhQTTlhdSQc9FzLpg": "Linux提权漏洞二进制版CVE-2026-31431", "https://mp.weixin.qq.com/s/4-j-tCQJCPvJElwSIGEqZw": "CVE-2026-33824 cvss 9.8分的IKEv2 double free漏洞简单复现", "https://mp.weixin.qq.com/s/qYCkBHvy2qQAza2nlUlA3g": "微软Windows Shell零点击漏洞已被攻击者利用", "https://mp.weixin.qq.com/s/WYdE1TfsqWwZ3Wqfwf27Aw": "【漏洞预警】Nginx UI 存在未授权备份下载与密钥泄露漏洞", "https://mp.weixin.qq.com/s/rt-cKkSTT77rkHPWHF-CmQ": "过年了过年了,CVE-2026-31431 Copy Fail 一键提权", "https://mp.weixin.qq.com/s/Ybq2miK7ARj4GllpjqfF8g": "人工智能重要漏洞 | CNNVD通报最新一批OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s/U9CtqEm37ejls0O70AHx1A": "恶意机器人占全网流量 40%,AI 驱动攻击暴增 12.5 倍;CNNVD 周报:本周新增漏洞 1447 个,超危 96 个需紧急修复| 牛览", "https://mp.weixin.qq.com/s/YHG0b-P8U_b_FKqc-xtUAA": "【漏洞预警】Linux Copy Fail 本地提权漏洞 (CVE-2026-31431)", "https://mp.weixin.qq.com/s/FvZvivKO8YoyXt79Ew0qMw": "【安全圈】Linux 内核潜伏 9 年漏洞披露:732 字节脚本攻破 Ubuntu 等发行版,提权至 root 最高权限", "https://mp.weixin.qq.com/s/RK-orUtf_OkVQPxqf6PRjg": "关于Linux内核存在本地权限提升漏洞的安全公告", "https://mp.weixin.qq.com/s/7ImIAtZFMl-PWJG-wFgaAg": "CVE-2026-31431 真的只值 7.8 么", "https://mp.weixin.qq.com/s/XsxSBCyV0m6w5dHiPz5M_A": "SEH溢出+Egghunter双剑合璧!SyncBreeze漏洞EXP深度优化", "https://mp.weixin.qq.com/s/9_JXNh6oKFNSzikVepF97A": "烽火狼烟丨Linux Kernel “Copy Fail” 提权漏洞 (CVE-2026-31431) 分析与安全声明", "https://mp.weixin.qq.com/s/BCDnQD0MY5vL_OG-qd0NEA": "【已复现】cPanel 登录流程认证绕过漏洞(CVE-2026-41940)", "https://mp.weixin.qq.com/s/MKa_SLZZhFmlZFpw0yvjEg": "最新通杀全线Linux发行版的CVE漏洞解析", "https://mp.weixin.qq.com/s/igdteCyUJcdNDYjY0IEEVw": "DarkSword漏洞工具泄露:数亿iPhone面临零点击窃密风险", "https://mp.weixin.qq.com/s/OllLjqZcQJK6YAq1oBWPVA": "CVE-2026-42167 允许绕过身份验证并远程代码执行 ProFTPD", "https://mp.weixin.qq.com/s/X1HE9GQHfBKJrFin8aDf8Q": "CNVD:关于Linux内核存在本地权限提升漏洞的安全公告", "https://mp.weixin.qq.com/s/B9xcSm5BGGFA4NQZK6QoIg": "【风险提示】天融信关于Linux Kernel本地权限提升漏洞(CVE-2026-31431)的风险提示", "https://mp.weixin.qq.com/s/rnzu7PL34onKAR1MS7Anow": "新型 Linux 内核提权漏洞 CVE-2026-31431,安芯神甲提供实时检测与防护能力", "https://mp.weixin.qq.com/s/x7Wlh1kOcA-bQOHyXZBIDg": "CNNVD关于cPanel访问控制错误漏洞的通报", "https://mp.weixin.qq.com/s/cFYqAUqjsbVwoNm2B4XCnw": "Copyfail提权漏洞(CVE-2026-31431)临时缓解措施", "https://mp.weixin.qq.com/s/EXpa4Mlvj4jaXPW9fGLRmA": "AI 网关 LiteLLM 曝严重 SQL 注入漏洞", "https://mp.weixin.qq.com/s/5Q_2Gs8PkH67gYsnMxP_dA": "Linux曝出“核弹级”漏洞CVE-2026-31431:攻击者可瞬间提权", "https://mp.weixin.qq.com/s/NGcvLQw38sVQPjZN2rU4fQ": "【漏洞预警】CVE-2026-31431 Linux内核crypto:algif_aead逻辑漏洞 本地权限提升分析", "https://mp.weixin.qq.com/s/V5fn25CICy1eN_LV1omcLA": "Linux曝出“史诗级”本地提权漏洞,奇安信椒图、天擎EDR支持实时检测", "https://mp.weixin.qq.com/s/KI-n1SESpCUA4hqJQ78Oog": "【风险提示】天融信关于Java Ghost Bits 漏洞的风险提示", "https://mp.weixin.qq.com/s/MP8byaCpAvOtoI3nCXnLOg": "CNNVD关于Linux安全漏洞的通报", "https://mp.weixin.qq.com/s/G4hJa4aZNQMlcGOrmwuXKA": "恒丰银行智能客服功能优化项目POC测试供应商征集", "https://mp.weixin.qq.com/s/MMeMCSPJ_IO4peFb94fXbw": "CVE-2026-31431(Copy Fail)漏洞FAQ(上)——漏洞的基本情况、影响范围与处置篇", "https://mp.weixin.qq.com/s/RJG_ZSZGDJj3v2HHPunfog": "WordPress WooCommerce Designer Pro存在任意文件读取CVE-2025-10897 附POC", "https://mp.weixin.qq.com/s/-Q2r9raSwKhD5ST-_iE9cQ": "网络设备通用漏洞挖掘由黑到白", "https://mp.weixin.qq.com/s/cjO8jcq1Nm-t2SxWnoRGhw": "【已复现】CVE-2026-31431 Linux内核本地提权漏洞(Copy Fail)", "https://mp.weixin.qq.com/s/yChwE7QVLGdrTCSi0-jSNg": "Hermes的应用(五):分析CopyFail(CVE-2026-31431)高危漏洞Poc", "https://mp.weixin.qq.com/s/TW7FFvx7SXWsHRrqgY-v4w": "CVE-2026-31431", "https://mp.weixin.qq.com/s/JA5E-ntWCAJfeqdPGdvcSA": "漏洞预警 | Copy Fail本地提权漏洞风险预警 CVE-2026-31431", "https://mp.weixin.qq.com/s/eMCDye1A-LfO6gMsTTvNSQ": "CVE-2026-31431:我用 DeepSeek 复现了 AI 发现Copy Fail 提权的全过程", "https://mp.weixin.qq.com/s/319asU9Eoap0WqfAMGP78A": "CVE-2026-31431:我用 DeepSeek 复现了 AI 发现Copy Fail 提权的全过程", "https://mp.weixin.qq.com/s/Q1O-3buHekCDgJZnhIYglg": "cPanel∕WHM 认证绕过漏洞 CVE-2026-41940 深度分析", "https://mp.weixin.qq.com/s/VaBTuCReDfxOnNIeBgzV7g": "CVE-2026-31431:linux史诗级漏洞,732字节脚本一键拿root", "https://mp.weixin.qq.com/s/CBDpB8AAGr7WoBiFwSL9JQ": "漏洞复现 | 泛微云桥 e-Bridge sendWxMsg 存在SQL注入漏洞", "https://mp.weixin.qq.com/s/MoPAhcJOkZ7pt7_mvmq__Q": "分享我在EDU实战挖到的XSS漏洞合集", "https://mp.weixin.qq.com/s/LA9VHXDJsF-9Am3vVCOgig": "CVE-2026-31431 Copy Fail 通俗解析", "https://mp.weixin.qq.com/s/Y8a1DRVghgg_G9CEqm5M-Q": "2017年至今的提权漏洞,Linux root 管理员权限 CVE-2026-31431", "https://mp.weixin.qq.com/s/z7GVeuSxAWABtCLOMloNmg": "神级漏洞 CVE-2026-41940 cPanel∕WHM 身份验证绕过 RCE", "https://mp.weixin.qq.com/s/7mVx3sKx4SFSXR28Q1fOrA": "人工验真!Linux提权漏洞,影响这么多信创!(附稳定验证PoC)", "https://mp.weixin.qq.com/s/By5ojW_TqWWyz1PuCu2whA": "CVE‑2026‑41940:cPanel∕WHM认证绕过可直接RCE,数百万服务器告急!!!", "https://mp.weixin.qq.com/s/hfJjjPnBT1Cdoo-u7sSE3Q": "WebAssembly 规范类型索引与相对类型索引混淆导致远程代码执行", "https://mp.weixin.qq.com/s/7zxdconouGGdMJZgsgFqjg": "Copy Fail(CVE-2026-31431):关于 Linux 内核权限提升漏洞的常见问题", "https://mp.weixin.qq.com/s/4rLz5duXWLF06A5yPkALRQ": "金万维异速联平台未授权访问漏洞 附POC", "https://mp.weixin.qq.com/s/L0mY8Y8BkhuLf5CR-LVN9A": "紧急预警|Sandworm APT再出手!针对白俄罗斯军方发动攻击,LNK漏洞+Tor隐蔽后门,隐蔽性拉满", "https://mp.weixin.qq.com/s/LmGpBQH7k4z7FNnlSdlSgw": "今日(2026年5月1日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s/NbaNU9h_mf9baX9KNcyuJw": "【CVE-2026-41940】核弹级漏洞 cPanel∕WHM 身份验证绕过 RCE", "https://mp.weixin.qq.com/s/HRPMVRmwiqCBW7v9OXOFyg": "CNNVD | 关于cPanel访问控制错误漏洞的通报", "https://mp.weixin.qq.com/s/TW49tAeIDuqiA8bB4-8DcA": "EnOcean SmartServer漏洞:楼宇管理系统远程代码执行与ASLR绕过技术分析", "https://mp.weixin.qq.com/s/0p44OC5GNHQir6NvdZZjpQ": "CNNVD | 关于Linux安全漏洞的通报", "https://mp.weixin.qq.com/s/v4UszwVZiBzu7XEX4CcWow": "揭露 Lenovo Vantage 权限提升漏洞", "https://mp.weixin.qq.com/s/_qJj85IaZDTTe-k0rnyzCQ": "[SRC]某企业的漏洞复现", "https://mp.weixin.qq.com/s/r8ebtL86TC9uQG7ltZRDhA": "cPanel 0Day认证绕过漏洞遭野外利用,PoC已公开", "https://mp.weixin.qq.com/s/XVjjHP5jfz7uBvNnTaVe0g": "漏洞赏金猎人的“休假调节指南”", "https://mp.weixin.qq.com/s/jttkuPDAOV3-MC2XkOaY2w": "安全警报 | 紧急预警!黑客组织密集发布多款针对我国平台高危漏洞工具,涉及政务、游戏、民生等多个平台", "https://mp.weixin.qq.com/s/kt7LjWlHXAIhUY5d2l_FwA": "白加黑来袭,菜狗安全(代码审计)联手庆尘Src(漏洞挖掘),五一联合活动", "https://mp.weixin.qq.com/s/x7L4X13VnDuORGNcf3FP8g": "OpenClaw 三大高危 RCE 漏洞全解析", "https://mp.weixin.qq.com/s/n8ydL_-lP8WzealSy3L2kw": "安全警报 | 预警!黑客组织发布广东政务服务网漏洞工具,个人信息面临泄露风险", "https://mp.weixin.qq.com/s/T7VT23mc7NdIy6ADinHHFQ": "白加黑来袭,菜狗安全(代码审计)联手庆尘Src(漏洞挖掘),五一联合活动", "https://mp.weixin.qq.com/s/I-dEZ4dydun3EmHNqH5aVA": "src低危漏洞多少钱?", "https://mp.weixin.qq.com/s/f6S9x1G5KL1nP_owZlkfsA": "Linux内核存在本地权限提升漏洞", "https://mp.weixin.qq.com/s/1EWkomo46st3LnE5Je2zTw": "CVE-2026-41940:cPanel∕WHM 认证绕过漏洞深度分析", "https://mp.weixin.qq.com/s/sGMkfyyrOasfmthG0euNrg": "如何通过漏洞组合链为工控平台CODESYS植入后门", "https://mp.weixin.qq.com/s/_e332pf-qS04KPhu0O7Mcg": "模型不是全部:从 Mythos、Hacktron 与 oauth2-proxy 0-day 看自动化漏洞挖掘系统的真实瓶颈", "https://mp.weixin.qq.com/s/ZCt_xDssyPEWVAjxWtMZNQ": "50 元封顶!渗透攻防 + SRC 漏洞星球限时开放!", "https://mp.weixin.qq.com/s/1saHZ_Bt_8z5qojaJ7qJFg": "记某SRC高危漏洞挖掘", "https://mp.weixin.qq.com/s/TXhust1HL_dEtKZPltwyCQ": "【自研工具】Zack-Vulscan 指纹驱动精准匹配Poc的Web漏洞扫描器", "https://mp.weixin.qq.com/s/oZ_19i9sRNdHvATN-X2trA": "深度安全研究报告:基于自动化挖掘引擎的全局漏洞态势与根因分析", "https://mp.weixin.qq.com/s/-Y27Rn8FGQm4iOFiHBHQdQ": "ProFTPD SQL注入漏洞为远程代码执行攻击打开方便之门", "https://mp.weixin.qq.com/s/BcHrYDo5bfzHjxmr96pGuA": "Copy Fail:一个几乎影响所有主流 Linux 发行版的提权漏洞", "https://mp.weixin.qq.com/s/cEe6CNPqRg16OBPVUTuZgA": "警惕,最新LINUX漏洞", "https://mp.weixin.qq.com/s/rokSS7XTAgcr4J6VCbcICg": "【CVE-2026-31431】Linux提权漏洞原理详解", "https://mp.weixin.qq.com/s/SE7TMFaU_3Tcsyc_83GqWg": "CVE-2026-31431:我用 DeepSeek 复现了 AI 发现Copy Fail 提权的全过程", "https://mp.weixin.qq.com/s/GuO9857kVnqYoaVMzrY3-w": "AI 复现Copy Fail漏洞的一些思考?学了这么多年渗透∕代审,会被 AI 一波带走嘛?", "https://mp.weixin.qq.com/s/fAek_68jgXUHaOFh0_harA": "5分钟原理分析,20分钟容器逃逸:ApexEye漏洞研究智能体自主攻破\"Copy Fail\"内核通杀漏洞", "https://mp.weixin.qq.com/s/wT5hFY9_7vIjWQHLPiMR-Q": "今日(2026年5月2日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s/AZGzdmcWJfMxsoJnW2NfLA": "linux史诗级安全漏洞copyfail cve-2026-31431,及修复方案", "https://mp.weixin.qq.com/s/X8EX8pzXtNvEUcj5-AbXcA": "JAVA反序列化漏洞与CC链", "https://mp.weixin.qq.com/s/ghNa_MLRQiCVIO9mG-K7zA": "Vulfocus入门——命令执行漏洞", "https://mp.weixin.qq.com/s/Upi_9mWnFntdpZiIv_I7Qg": "Yakit Ghost Bits Fuzzing 漏洞插件", "https://mp.weixin.qq.com/s/ExSkgScaXbg6Zp6tXPJLNA": "Spring Boot 框架反序列化漏洞", "https://mp.weixin.qq.com/s/gCFqLt0YL3H3cQuqLuGvdQ": "人与AI协同的漏洞分析新范式——Copy Fail发现过程解析", "https://mp.weixin.qq.com/s/pPk6j_IqVpPlaF19jaTfTw": "CVE-2026-31431:我用 DeepSeek 复现了 AI 发现Copy Fail 提权的全过程", "https://mp.weixin.qq.com/s/DiKT3wpwS55K3dMvelXM3Q": "影响Firefox与Tor浏览器的跨会话指纹跟踪漏洞", "https://mp.weixin.qq.com/s/O5CYKKIsJ4R_QrzgiN0w7w": "xia_tan:基于BurpSuite的自动化漏洞探测插件", "https://mp.weixin.qq.com/s/dTnmXzJbrQf6pY9YjZr_2A": "黑客利用cPanel漏洞入侵亚洲政府和军方服务器", "https://mp.weixin.qq.com/s/1ZXcoBIn-Qo7G2wMDUh_0g": "JAVA框架与组件 FastJSON 漏洞分析", "https://mp.weixin.qq.com/s/h4a1xFvqlNH4JMDNq9M-qg": "PHP中潜伏21年的致命漏洞:MAD Bugs详解", "https://mp.weixin.qq.com/s/u7sYV7-Em5KE8u_UZjXFcA": "Shiro 550 RememberMe 反序列化漏洞", "https://mp.weixin.qq.com/s/LHcsmD1EnoDJoVmVkeDHyQ": "漏洞复现 | 全程云OA QCHMS.asmx 接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s/ZMRh1ikVC7Sw19UgMcyAsQ": "漏洞挖掘:众测src测试姿势总结", "https://mp.weixin.qq.com/s/QcKZl74_onTT-jKU0Ur-8Q": "AI大模型网关存在SQL注入漏洞、附 POC 复现、影响版本LiteLLM 1.81.16~1.83.7(CVE-2026-42208)", "https://mp.weixin.qq.com/s/HSEs0UIFLReNbIFfPHJJcg": "Linux 内核史诗级本地提权漏洞 全网深度复现、原理完整分析( CVE-2026-31431)", "https://mp.weixin.qq.com/s/Zn_l-GnWSbj8jIY2dumfnw": "Apache OpenNLP 曝出一组高危漏洞,包括XXE注入", "https://mp.weixin.qq.com/s/Y0pGV45K-COSrPL4DJ7CWA": "如何检测利用CVE-2026-31431漏洞的攻击", "https://mp.weixin.qq.com/s/M5ja0hsBYRaECZiQqgNtxw": "漏洞赏金会消失吗?", "https://mp.weixin.qq.com/s/fNJEJ-eRcfeMxf6_j1GBmg": "孚盟云CRM BusinessPriceListList.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s/Gq8qu_V26Q7Q4tjD-p11IQ": "今日(2026年5月3日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s/YmADnb8uGuZkN-jRmbjprw": "关于Java中反序列化漏洞的思考", "https://mp.weixin.qq.com/s/mEpM48WrSDJ8vsIobtLLnQ": "CISA 将已被积极利用的 Linux Root 访问漏洞 CVE-2026-31431 添加到 KEV 中", "https://mp.weixin.qq.com/s/oVkRDMGS7gR9ZazQQ88Nlw": "实战复现:公交系统未授权登录 + SQL 注入漏洞利用全解", "https://mp.weixin.qq.com/s/orGyVntLp8aM1_BH-R2eug": "【漏洞】RedSun复现", "https://mp.weixin.qq.com/s/8YGRQb2Wy7SlxP5ZLRZMRw": "Bissa扫描器曝光:AI辅助的大规模漏洞利用与凭证窃取", "https://mp.weixin.qq.com/s/msdwMk-QFmStSpWroE1Nhg": "java幽灵比特位(Ghost Bits)漏洞介绍&&相关测试工具推荐", "https://mp.weixin.qq.com/s/DuTi56EjgJxUpOeLBW1URA": "从信息收集到漏洞报告:一款好用的AI Agent 渗透测试skill", "https://mp.weixin.qq.com/s/O5a00ufMvqUZjXekKo2P3w": "【网安周报】:Linux 内核爆史诗级0-Day,cPanel满分漏洞威胁百万实例(4.26 - 5.03)", "https://mp.weixin.qq.com/s/T-iRx7D-OLzF9FVJVR7e7Q": "CVE-2026-31431 \"Copy Fail\" 漏洞深度分析", "https://mp.weixin.qq.com/s/37W5hblic-17zNxshjTDRA": "漏洞复现 | OpenCode 存在远程命令执行漏洞(CVE-2026-22812)", "https://mp.weixin.qq.com/s/I5r5mA3bFGSq-fh9WLHPQA": "2025长城杯vvvmmm复现", "https://mp.weixin.qq.com/s/jr_kj00PPcv8qnDZA2lU5g": "紧急预警 | 黑客组织密集发布高危漏洞工具,某地公安平台、支付平台、短视频平台等多平台数据面临泄露风险", "https://mp.weixin.qq.com/s/tJG1Y-jAKFRAVCYMYGw1oQ": "cPanelSniper:CVSS 10.0的cPanel认证绕过漏洞利用框架", "https://mp.weixin.qq.com/s/waGLYUcPMMttlPZsVDq09w": "Sub2Api 网关平台存在0计费bug漏洞", "https://mp.weixin.qq.com/s/iWoBYhiTP7p-uqhlU5LjZg": "lodash库原型污染漏洞(CVE-2019-10744)", "https://mp.weixin.qq.com/s/cTEC6xbOSexUld25Qo7zTw": "cPanel关键漏洞已被用于攻击政府和MSP网络", "https://mp.weixin.qq.com/s/_m0CXcPN1lRIrTFeardRng": "为什么十年的漏洞检测逻辑编写经验让 Mythos 的漏洞数字显得不那么可怕", "https://mp.weixin.qq.com/s/VF7oeitaGvbLnqfyeC4-qg": "AI中转站存在0元购漏洞", "https://mp.weixin.qq.com/s/4A4MMS9sm0dJLXc7slwHjw": "Apache Camel 远程代码执行漏洞 | CVE-2026-40453复现&研究", "https://mp.weixin.qq.com/s/iERwGEYTYSiryFCqSuqFQQ": "今日(2026年5月4日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s/gUbHfFCH1d1ZR9lYcioesg": "DeepAudit - 人人拥有的 AI 审计战队,让漏洞挖掘触手可及", "https://mp.weixin.qq.com/s/NBFh1Sal713A7PIYff40gg": "用任何模型都能挖出零日漏洞", "https://mp.weixin.qq.com/s/oqD8Pxgauo_ej3QzDYLhQA": "CVE-2026-41940 深度分析影响7000万+量级的cPanel∕WHM认证绕过漏洞:从CRLF注入到匿名RCE", "https://mp.weixin.qq.com/s/TcSg2o__dZ01O-LH8DBKZw": "Windows 11 24H2中近期被披露了一个高危本地权限提升漏洞", "https://mp.weixin.qq.com/s/IuTcWT46FYCUnKwlurt27w": "CISA 警报强调 cPanel 和 WHM 安全漏洞正被积极利用", "https://mp.weixin.qq.com/s/cposzevwdV2rA5GSa6e4tA": "Anthropic推出Claude Security公开测试版,AI直接扫描生产代码漏洞", "https://mp.weixin.qq.com/s/rjYURoSexFUq4FAkv4zB-w": "AI时代的代码审计:既要懂漏洞原理,又要会玩转 AI。关于103节课后,我把课程改名为「AI Java代码审计」这件事。", "https://mp.weixin.qq.com/s/T4iES_vBJkMRrL9BvqIh2Q": "安卓系统零点击漏洞可授予远程 Shell 访问权限", "https://mp.weixin.qq.com/s/mWmqm0m1f8zbaV8xk3vY8g": "Apache HTTP 服务器严重漏洞使数百万台服务器面临远程代码执行攻击风险", "https://mp.weixin.qq.com/s/bShRDQ0voKYTrJ9FeU2dHw": "Claude Security开放公测:Opus 4.7加持,一键实现代码漏洞扫描与补丁生成", "https://mp.weixin.qq.com/s/i35brZ1Xc9LXsJCjHPRudg": "CVE复现 | CVE-2026-21858复现(含环境)", "https://mp.weixin.qq.com/s/i6IBsXxA5qwbgdX6I7TkSA": "DeepZero: 睡梦中自动化挖掘 Windows 内核驱动的 0day", "https://mp.weixin.qq.com/s/qqbuxNFua4wF3ZJlDufewA": "PayloadsAllTheThings:Web漏洞速查表", "https://mp.weixin.qq.com/s/Rr18PKCV5-66T_4u4ZDnkw": "CVE复现 | CVE-2025-55182", "https://mp.weixin.qq.com/s/eX_QIrkLqblUZOubZWiFGg": "受AI影响,Google下调Chrome漏洞赏金十倍", "https://mp.weixin.qq.com/s/wodOGhktItXVlECCvVa9QA": "282G教程放送!2026网络安全资料最全合集(从0到挖漏洞、打CTF、护网、就业)", "https://mp.weixin.qq.com/s/eY3tml4tlhvo64SIVqCHHw": "今日(2026年5月5日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s/9TCQ-kAsTtzTKmbWbBIFfA": "无需API、一键接入|Claude Security公测上线,AI直接扫描生产代码漏洞", "https://mp.weixin.qq.com/s/2zGxkh_JpFiOCXab2vYWDA": "ISC DHCP Server:利用特性链实现未认证的Root远程代码执行", "https://mp.weixin.qq.com/s/RQdexKHvdu5r6nrdyx_oug": "台湾高铁就这安全性?台湾23岁学生用SDR和手持电台瘫痪四列高铁:TETRA无线电漏洞让19年安全体系形同虚设", "https://mp.weixin.qq.com/s/YpmqOkhmcqxYDGP0M_7RQg": "CVE-2026-24291:Windows ATConfig辅助功能本地提权漏洞深度解析", "https://mp.weixin.qq.com/s/cA2QOh2sYuuuVMA9j4R7AQ": "5.5号最新-致命的静默:Android 零点击 RCE (CVE-2026-0073) 攻击全景复现与深度防御", "https://mp.weixin.qq.com/s/X359dJ-FAXUcuRp78brTIQ": "谷歌重构漏洞赏金计划:人工智能时代下安卓赏金上调、Chrome 赏金下调", "https://mp.weixin.qq.com/s/Kf18aHOb_M4DERvmHlTqFQ": "黑客利用高危 cPanel 漏洞 CVE-2026-41940,定向攻击政府机构与托管服务提供商(MSP)", "https://mp.weixin.qq.com/s/N_56HxvfOYJ2s36id8Guhg": "732字节拿root:Linux内核潜伏10年的\"Copy Fail\"漏洞全解析", "https://mp.weixin.qq.com/s/5731YTo52q1vp7LrWzyoLg": "CVE-2026-42167|ProFTPD允许绕过身份验证的远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s/3YT4rP7aJxxxd4sB-zELUg": "OpenCode content 任意文件读取漏洞", "https://mp.weixin.qq.com/s/UipWgZ_ba5Ij2b8jSlqNxg": "CVE-2026-41651|Linux PackageKit TOCTOU本地提权漏洞(POC)", "https://mp.weixin.qq.com/s/WC4EA6rq5iKOqd1ulDehAg": "安卓系统存在严重零点击漏洞,无需交互即可获得远程 Shell 访问权限", "https://mp.weixin.qq.com/s/asi9ZxTIPE4nugul7rmEFg": "漏洞预警 | 天地伟业Easy7 SSRF漏洞", "https://mp.weixin.qq.com/s/IIp-JNOOctdE4g1WOt8aOA": "漏洞预警 | OpenClaw沙箱绕过漏洞", "https://mp.weixin.qq.com/s/GcNu04j1Pck_SzmBN4XNzA": "凌曦安全:从0-1的漏洞挖掘心得", "https://mp.weixin.qq.com/s/y6XgsEHvuoBkT-GQRwTAsw": "Copy Fail漏洞:K8s集群中的AF_ALG可达性验证", "https://mp.weixin.qq.com/s/0gN9W-KYhiuaJbLciI_qPA": "谷歌修复安卓高危漏洞 CVE-2026-0073", "https://mp.weixin.qq.com/s/VT0odsvIP7QwBoEmqkEuYQ": "复制机制漏洞:Linux 新漏洞可利用页缓存损坏实现提权至 Root 权限", "https://mp.weixin.qq.com/s/26KhdrEM5p9r68EEYPFb1Q": "跨系统用户信息混淆漏洞", "https://mp.weixin.qq.com/s/4SLdx_KPpghm3Zo3Ue-R8g": "SonicWall 为 6 代、7 代、8 代防火墙修复 3 个 SonicOS 漏洞,请立即部署补丁", "https://mp.weixin.qq.com/s/cUHeCo207MEqWbuWEQQvfQ": "Milesight IP 摄像头漏洞:5 个关键 CVE 导致全球 14,706 台监控设备暴露于风险之中", "https://mp.weixin.qq.com/s/ZVHFCzIBoD1i1QFtRA5aiA": "安全圈的“降维打击”!VulnPlus:AI驱动全自动漏洞挖掘(文末有福利)", "https://mp.weixin.qq.com/s/n3gChSDS9gtAk1Hpj6U-Og": "安卓零点击 RCE 漏洞(CVE-2026-0073)深度解析:同一 WiFi 下,手机放着不动也会被入侵", "https://mp.weixin.qq.com/s/sAuN1ugzFNE_59cEwQ7NZw": "【已复现】Ollama 内存泄漏漏洞(CVE-2026-7482)安全风险通告", "https://mp.weixin.qq.com/s/F_rC_eOsUvsuLqV9pcUu7g": "全球首例!美国州政府起诉 AI 聊天机器人非法冒充执业医师;CNNVD 发布 AI 漏洞通报:213 个漏洞集中爆发,超危 8 个高危 89 个| 牛览", "https://mp.weixin.qq.com/s/k27h7AAfms33bBqnFOkmsA": "某CMS最新版本前台RCE审计流程", "https://mp.weixin.qq.com/s/mITg4jM2D8IwByt9nUM9eg": "严重漏洞可能导致 30 万个 Ollama 部署面临信息泄露风险", "https://mp.weixin.qq.com/s/gymd7aPTPHPkc1Xcu49diQ": "用Python自动化漏洞狩猎,打造专属工具,让狩猎速度提升10倍!", "https://mp.weixin.qq.com/s/2FbP_KviNwol4rMc4Kil-g": "台湾23岁学生用SDR和手持电台瘫痪四列高铁:TETRA无线电漏洞让19年安全体系形同虚设", "https://mp.weixin.qq.com/s/N9OpLuxge7XVXhmPPlJsbA": "【漏洞通告】Android ADB 认证绕过漏洞(CVE-2026-0073)", "https://mp.weixin.qq.com/s/CVuwSix19RoeoXW0R-wpFA": "【在野利用】Palo Alto Networks PAN-OS 缓冲区溢出漏洞(CVE-2026-0300)安全风险通告", "https://mp.weixin.qq.com/s/THOGDCE80d2RQwDMixwQwQ": "同享人力资源管理系统 TXEHR V15 PeiXun.asmx SQL注入漏洞", "https://mp.weixin.qq.com/s/oQ3S6LWCYRhuolkShzKupg": "关键漏洞可致 30 万 Ollama 部署信息被盗", "https://mp.weixin.qq.com/s/zveO60reYLzH1AWA-A9Tow": "深度解析:OpenAI 的红队测试,如何在发布前找出模型漏洞", "https://mp.weixin.qq.com/s/MErccH5iioHEJsU6RjzFgg": "【立即应急】cPanel & WHM 认证绕过漏洞(CVE-2026-41940)已被大规模自动化利用", "https://mp.weixin.qq.com/s/RUgtM6UMQxAxihbAu-oj2Q": "【论文速读】|生成漏洞验证测试以帮助增强复杂软件的安全性", "https://mp.weixin.qq.com/s/w7bK4SaiqCxoRDSAcQTt6A": "【漏洞预警】核弹级提权漏洞 CVE-2026-31431已复现 含Poc", "https://mp.weixin.qq.com/s/suyeuaKwQSzS5JtMlo_-Hg": "【漏洞通告】Ollama 未授权内存泄露漏洞(CVE-2026-7482)", "https://mp.weixin.qq.com/s/l9R1P96icRMI2EyjCQxsSA": "分析 Mythos:为什么十年检测经验让我觉得漏洞数字没那么可怕", "https://mp.weixin.qq.com/s/Lbr65Cg3EKTCOjRLJjP0lw": "【已复现】Android ADB 认证绕过漏洞(CVE-2026-0073)安全风险通告", "https://mp.weixin.qq.com/s/BDVEi3LzN3A32-ofzXWgng": "高危安卓零点击漏洞可远程获取Shell访问权限", "https://mp.weixin.qq.com/s/VqaBYT8TN6xcERGTqvKi8w": "Palo Alto 提醒注意严重的 PAN-OS RCE漏洞", "https://mp.weixin.qq.com/s/RG9TeSJXxyUwDFD5nFy2ag": "人工智能重要安全漏洞通报Ollama安全漏洞", "https://mp.weixin.qq.com/s/qbVvalyDCVG1GM01LXZxUw": "MCP+BurpSuite 实现AI漏洞挖掘", "https://mp.weixin.qq.com/s/Mz1h3sZza39OfrZxPbCzDQ": "Progress 提醒注意严重的 MOVEit 自动化认证绕过漏洞", "https://mp.weixin.qq.com/s/dnAi9Gz0i6TlBdaZ2YYQBw": "智能体驱动的漏洞挖掘实践", "https://mp.weixin.qq.com/s/1zni52lkAEjK2OW4petsfA": "安卓高危0Day漏洞可远程获取Shell访问权限", "https://mp.weixin.qq.com/s/At9ES_gQJ0ENduntSyvzgA": "中科院:中美网络安全漏洞披露与共享政策研究", "https://mp.weixin.qq.com/s/bYPmZQ7Ld3QNeHTArGX75Q": "AntSword |蚁剑 高危漏洞:XSS 转 RCE 终端注入可执行系统命令", "https://mp.weixin.qq.com/s/DAj0tAzmqtJMqtCB2ADVDQ": "LLM开源方案Ollama曝严重漏洞,30万个部署面临信息失窃风险", "https://mp.weixin.qq.com/s/ecW5RevgLKLSLjNxEVr0sw": "CVE-2026-41940 POC", "https://mp.weixin.qq.com/s/Zlaq3dtlQWGrEliano4yeQ": "CVE-2026-0073 漏洞分析报告", "https://mp.weixin.qq.com/s/-FRSiQKaIalflj2aYpBfZQ": "利用存在漏洞的驱动程序 BYOVD 获取任意内核读∕写权限并绕过 PPL 保护", "https://mp.weixin.qq.com/s/zjD5hHNaNMQvn_Nnj5X2ag": "谷歌Chrome浏览器发布148版本,修复了127个安全漏洞", "https://mp.weixin.qq.com/s/EOCDLZ_n7_QcvOjxkCEtAA": "java幽灵比特位(Ghost Bits)漏洞相关测试工具推荐", "https://mp.weixin.qq.com/s/mCHvxQPDrJ3QKd47kYxkBg": "【漏洞复现】ERPNext存在模板注入(SSTI)漏洞", "https://mp.weixin.qq.com/s/uaZvi2xw2PJksRlLNfrjnQ": "助阵国家级AI漏洞库启动:塞讯科技发布 Langflow 高危漏洞专项研判与复现报告", "https://mp.weixin.qq.com/s/odYzQtIw0mtcm5GNo00U-Q": "cPanel漏洞引发Sorry勒索软件供应链攻击,我们看到了什么?", "https://mp.weixin.qq.com/s/Ovtfxh_RlVJUmrWdgfrZ1g": "LFI 到 RCE:使用 PHP 包装器将文件读取转换为代码执行", "https://mp.weixin.qq.com/s/iVVov5976CuURu1N4VE1yw": "CVE-2026-31431 缓解措施", "https://mp.weixin.qq.com/s/TIANdxyezsJNWFl2QPiamQ": "vm2 沙箱严重漏洞可导致在宿主机执行代码", "https://mp.weixin.qq.com/s/dS-IuF5aVdZPoO2z9kzfdQ": "Palo Alto防火墙高危漏洞遭野外利用,攻击者可一键获取root权限", "https://mp.weixin.qq.com/s/36DjOg0tEEkCLj29fysyFg": "今日(2026年5月7日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s/80l-1CKkG3X_fQnoYGDs-w": "CVE-2026-42231 漏洞分析报告", "https://mp.weixin.qq.com/s/S1Wi0IM-PEoEXopRQ223og": "漏洞通告 | Apache HTTP Server 远程命令执行漏洞", "https://mp.weixin.qq.com/s/F2XvLJne5t783Ul48xrD3g": "【已复现】漏洞通告 | Linux Kernel 本地权限提升漏洞(CVE-2026-31431)", "https://mp.weixin.qq.com/s/t-BYFGh2hGdaSt2jNxUCjw": "5·25漏洞挖掘节|五倍膨胀+首杀8000元,微众银行SRC邀你开“挖”", "https://mp.weixin.qq.com/s/efou4Tc-6p7DsP1B_iPZZQ": "本地文件包含 (LFI) — 从基本漏洞利用到源代码泄露", "https://mp.weixin.qq.com/s/HszbiG_d5FMNuQeWAxSZ7w": "无需认证即可触发 Apache HTTP∕2 双重释放漏洞,特定条件下可导致 RCE", "https://mp.weixin.qq.com/s/1HShyQamhg-gCo_8M-k6eg": "Linux提权漏洞席卷全球,奇安信椒图发布热补丁、无需重启即可拦截", "https://mp.weixin.qq.com/s/QGe2pCwAFWzjsnrqsYe-iw": "《2025∕2026网络安全漏洞调查(教育机构)》报告概况", "https://mp.weixin.qq.com/s/tpiM6oNXjjk_mtzEaRFzJw": "智互联WMS getsyspdaversionlistbyparams接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s/QZeZEgJpfixnzFgeV3OF1g": "Redis安全漏洞使服务器面临远程代码执行风险", "https://mp.weixin.qq.com/s/L3-qQ9PyEz094ffMSVN1Hw": "Apache HTTP∕2 严重漏洞可导致 DoS 和 RCE", "https://mp.weixin.qq.com/s/tyzzhGW6ZMpGcfFkjImnfA": "紧急预警:GitHub 高危 RCE 漏洞(CVE-2026-3854)—— 一条 git push 即可接管服务器", "https://mp.weixin.qq.com/s/RsHUuVUl6SWaOAgrj2wPzw": "26长城杯半决赛IntraBadge复现", "https://mp.weixin.qq.com/s/nrWYL9vyxYPCKa0gXTdWlQ": "CNNVD | 关于人工智能重要安全漏洞通报Ollama安全漏洞", "https://mp.weixin.qq.com/s/bQpCPb16xf-IIcKQXWXcGA": "天地伟业Easy7 ∕Easy7∕rest∕file∕deleteFile 文件删除漏洞", "https://mp.weixin.qq.com/s/wjNOkcCQqwp-wVNZD2tRMg": "利用正当时!Palo Alto防火墙今年首爆0day漏洞", "https://mp.weixin.qq.com/s/ByBNOiOmAreFGgohkopXFw": "【已复现】Apache HTTP Server 双重释放漏洞(CVE-2026-23918)安全风险通告", "https://mp.weixin.qq.com/s/C4LBlY5nBO3GXmG9blLyJw": "我在 30 行 Python 里拿到 LiteLLM 的 root:CVE-2026-30623 实战 + 加固", "https://mp.weixin.qq.com/s/-LmkIjBvXrN0L7BAcYxxzg": "vm2 Node.js 库漏洞可导致沙箱逃逸和任意代码执行", "https://mp.weixin.qq.com/s/qIRUkNmJj7ZY7fRK4q27jQ": "22岁开发者逆天复现Claude Mythos!GitHub狂揽1.1万Star,CTF挑战成功率73%", "https://mp.weixin.qq.com/s/e5M0SF2P6O-gfQAPP9wwKg": "Linux 又爆高危提权漏洞:Dirty Frag", "https://mp.weixin.qq.com/s/8cV-ktNUx3T7e39BRJ7s7g": "【全网告急】Linux内核又现史诗级0day提权漏洞Dirty Frag(无补丁、无CVE编号!)", "https://mp.weixin.qq.com/s/6l20TGclAUgFbXtqJJHM3A": "26软件安全区域赛nodejs复现", "https://mp.weixin.qq.com/s/9YOYEJfnZdbxNfoS9UUb7Q": "[技术深潜] git push 即沦陷:拆解 CVE-2026-3854", "https://mp.weixin.qq.com/s/E0XCgqq6tjeK3DGhEnyomA": "Dirty Frag 漏洞爆发!影响9年Linux内核的“确定性”提权漏洞", "https://mp.weixin.qq.com/s/j2xdrJKyTn3jbzoivGXzhQ": "【已复现】漏洞通告 | Apache HTTP Server 双重释放漏洞(CVE-2026-23918)", "https://mp.weixin.qq.com/s/YT1Nhn1Jli_6-PPnwUWniA": "未授权任意用户密码修改漏洞", "https://mp.weixin.qq.com/s/p_O_Ea7mq7niZ8saZvqpQQ": "快报:Linux 又爆高危提权漏洞:DirtyFrag", "https://mp.weixin.qq.com/s/SdTxshrgbBpra53TCLG6sA": "美国国防部承包商API漏洞致军事课程与军人记录泄露", "https://mp.weixin.qq.com/s/1dy_v8AAzB3pZBxBNiJk_g": "漏洞预警 - Linux内核「Dirty Frag」提权0day", "https://mp.weixin.qq.com/s/Cyg76k5MYhcYlkTbXrzHAg": "【审计】Digital Watchdog VMAX IP Plus 摄像头命令执行漏洞", "https://mp.weixin.qq.com/s/sUa6V_SSch7bczZcVIxS0Q": "最近是怎么了?又一款通杀全线Linux发行版的0Day漏洞", "https://mp.weixin.qq.com/s/uOgD11FbfefnDe16JWcVaA": "墨菲安全联合公安三所、国泰海通证券发布《漏洞及投毒情报应用实践指南》", "https://mp.weixin.qq.com/s/dI588WwNe85p7eA1TvDWag": "Cisco 网络管理组件曝 DoS 漏洞,网络控制面不能只靠“重启恢复”", "https://mp.weixin.qq.com/s/JhLgaJv_g8x-CElM-ctJQQ": "Next.js 和 React 服务器组件中多个严重漏洞已修复", "https://mp.weixin.qq.com/s/OaHLzB9noK7EYGCQLwWsrg": "Linux 新提权漏洞 DirtyFrag", "https://mp.weixin.qq.com/s/pt_AA3zt7Z3wFFmhV6fzRg": "CVE-2026-31431漏洞实测:统信、麒麟、欧拉、Ubuntu 等系统受影响明细", "https://mp.weixin.qq.com/s/vNEEjG1n0p8TzzlXVMPS9A": "Dirty Frag 漏洞:续 Copy Fail 之后,Linux 再曝“核弹级”提权漏洞", "https://mp.weixin.qq.com/s/kGt18bmQSVIXD2yri5fs-A": "Linux LPE通用提权 0day目前没有漏洞编号", "https://mp.weixin.qq.com/s/__nLE1KYSZ2msrFnYxg3nQ": "Linux内核高危0day漏洞Dirty Frag:PoC已公开,暂无补丁(附临时缓解措施)", "https://mp.weixin.qq.com/s/GmjwyUAGC7CFhRaC6NcF_w": "正在被利用!Palo Alto防火墙RCE漏洞CVE-2026-0300,不认证就能拿 root", "https://mp.weixin.qq.com/s/k5iUCouCUVa42ggPcfCHbQ": "【高危漏洞预警】Linux Kernel Dirty Frag 本地权限提升漏洞", "https://mp.weixin.qq.com/s/VrDeblzP4Ge_c7CHdwtA9g": "Dirty Frag:Linux 史诗级通用提权漏洞链,全发行版沦陷", "https://mp.weixin.qq.com/s/hmEISd1Ddb1p0dHjH_e0GA": "(已复现)9年潜伏、无需竞态、失败不崩:为什么 Dirty Frag 今年最危险的 Linux 提权链之一", "https://mp.weixin.qq.com/s/EsqvinVw5_FmVu6R4fF80w": "Dirty Frag Linux提权漏洞的复现和修复建议", "https://mp.weixin.qq.com/s/9AlL8BGlnqxtjdC2eQKSyw": "从 Copy Fail 到 Dirty Frag:Linux 内核「页缓存写」漏洞类的连环披露", "https://mp.weixin.qq.com/s/ub_f17RuqUAZEIELcBmLUw": "Linux内核0day漏洞“Dirty Frag”", "https://mp.weixin.qq.com/s/SykEwIjjQjSPkND3c6xyDA": "【漏洞预警】Linux Kernel Dirty Frag 本地权限提升漏洞", "https://mp.weixin.qq.com/s/MFYtGXlkl0uBbDnuc2DO6A": "突发:史诗级漏洞,732 个字节通杀所有 Linux!", "https://mp.weixin.qq.com/s/v1orNx-MG-ZC8nPeK8_vgA": "【安全警报】Sentry史诗级漏洞:9.1分认证绕过,一行代码接管任意账户", "https://mp.weixin.qq.com/s/33BW98a4Vl6ZUun2ou-Xnw": "Copy Fail 延伸 Dirty Frag 提权漏洞", "https://mp.weixin.qq.com/s/zBA1KTq-w8ZbCuNOSEu5Nw": "【已复现】漏洞预警 | Linux内核本地提权漏洞 Dirty Frag", "https://mp.weixin.qq.com/s/RV_PwuaUnH7_UoJsKaYS4w": "【漏洞预警】安卓零点击RCE漏洞CVE-2026-0073:数亿设备面临无声入侵威胁", "https://mp.weixin.qq.com/s/r1HFilXhqeIdzA71Ze05ug": "Dirty Frag:通用 Linux 本地权限提升漏洞", "https://mp.weixin.qq.com/s/506nbJKRZJ619t8UJXNxtg": "漏洞通告|Universal Linux LPE Dirty Frag权限提升漏洞", "https://mp.weixin.qq.com/s/WKyE3t4e8wNw04k6eQkcQg": "Dirty Frag:Linux 本地提权漏洞", "https://mp.weixin.qq.com/s/WCgLSMpo-vfG1wBPOtcFIg": "【风险提示】天融信关于Linux Kernel本地权限提升漏洞Dirty Frag的风险提示", "https://mp.weixin.qq.com/s/raoHUAGT9xIZTIwL1vMTHg": "Dirty Frag本地提权漏洞存在9年,Linux 4.11起受影响", "https://mp.weixin.qq.com/s/6LzoO1yfUuXARavHpBzRWw": "【安全警报】4个HTTP请求搞定root:cPanel史诗级漏洞殃及150万服务器", "https://mp.weixin.qq.com/s/3-32iS0mEsS3BMsq3K2yZA": "双利用链配合Linux通杀提权0day \"DirtyFrag\"", "https://mp.weixin.qq.com/s/dO4GnFKYIvG8kcSonTBuZA": "能信安:漏洞通告", "https://mp.weixin.qq.com/s/tCFASolhwwhPyByjk_sK2w": "全网紧急!Linux Dirty Frag漏洞POC已流出!", "https://mp.weixin.qq.com/s/ryA8VOmNrhdc9VX9AIvgyQ": "【漏洞通告】Linux内核权限提升漏洞(Dirty Frag)", "https://mp.weixin.qq.com/s/OECvdYrKJgjjuZJ639K4gA": "【安全警报】732字节的\"核弹\":Linux内核Copy Fail漏洞一键Root所有服务器", "https://mp.weixin.qq.com/s/hFRTMcbjYxNwqUe6VjFl9Q": "高危!新一代 “脏管道” 漏洞来袭,几乎所有 Linux 系统秒破 Root", "https://mp.weixin.qq.com/s/e5MqEr-N4_sCFoSZ8LS7zA": "CVE-2026-31431 Copy Fail 通杀版 EXP:动态偏移计算实现任意 ELF 提权", "https://mp.weixin.qq.com/s/cA5ct2-d2qgn2kJgczSXAQ": "【漏洞复现】GitPython 存在命令注入漏洞(CVE-2026-42284)", "https://mp.weixin.qq.com/s/Temwf2rq8XDgnx2DImKPZw": "信息安全漏洞周报(2026年第18期)", "https://mp.weixin.qq.com/s/XmuQn8oRJlFHokw9poKA7A": "页缓存篡改破防!Linux kernel Dirty Frag本地权限提升漏洞安全通告", "https://mp.weixin.qq.com/s/35JeIrZM3E4BR_rLbO5hvA": "Mozilla如何用Claude Mythos修复Firefox 中271个潜伏漏洞", "https://mp.weixin.qq.com/s/Hq3bBSJrBVHPqS6Zj-D1QA": "(2)漏洞复现-Tomcat-upload \"幽灵比特位\"", "https://mp.weixin.qq.com/s/LUshTdBaDa6NYmVWprrM2A": "【Linux+Web渗透】Silver Platter 新手打靶场的一些思路以及最新的CVE-2026-31431和DirtyFrag", "https://mp.weixin.qq.com/s/JXsls0yGh9tyhSB_PG8jJQ": "高危预警|DirtyFrag Linux内核提权漏洞公开!覆盖9年版本,信创系统也受影响", "https://mp.weixin.qq.com/s/cEqITgbvKNtvCWIagFEL9Q": "新的Linux漏洞732 字节通杀Linux内核", "https://mp.weixin.qq.com/s/y1IH1fPjfFda83yWGsC9eg": "Dirty Frag:2026年严重的 Linux 本地提权漏洞深度分析", "https://mp.weixin.qq.com/s/qsj_HjH8bcdrJEZB2av0BQ": "从 Vim Modeline 到 CVE-2026-44656:编辑器里的隐蔽攻击面", "https://mp.weixin.qq.com/s/_iGuAHVlA8WmHxjDzSnicQ": "Dirty Frag 漏洞曝光,影响所有主流 Linux 发行版", "https://mp.weixin.qq.com/s/EnQmMo_UpF-NkZFGRFh8Xw": "信息安全漏洞月报(2026年04月)", "https://mp.weixin.qq.com/s/NhDh5d8A4GWYKv-l8JEFrg": "【安全圈】思科修复高危漏洞,防范 SSRF 与代码执行攻击", "https://mp.weixin.qq.com/s/I5Fgf3Jy_vlp864XImL9tA": "【安全圈】Chrome 148 安全大更新127 个漏洞,立刻升级", "https://mp.weixin.qq.com/s/-ymJXhndZOlGwhZ1pMawkQ": "征求意见稿丨国家标准《网络安全技术 网络安全漏洞分类分级指南》,附下载", "https://mp.weixin.qq.com/s/Uy5Pw0mMsXmEOkiu0uyRXg": "【立即修复】Dirty Frag 漏洞已公开 EXP!一条命令阻断攻击路径", "https://mp.weixin.qq.com/s/OVq7H4MiUBckIG_bHSDdEw": "【已复现】Linux Kernel Dirty Frag 本地权限提升漏洞", "https://mp.weixin.qq.com/s/QtV5NWoPcwddMf5r5Vui7w": "【漏洞通告】Apache HTTP Server mod_http2 双重释放漏洞(CVE-2026-23918)", "https://mp.weixin.qq.com/s/iXD6k9US4xyMI8FQ5qcgvg": "如何使用MCP进行自动化漏洞挖掘", "https://mp.weixin.qq.com/s/qVYvfo0WHJ6RS3QUgX9mlQ": "攻防、SRC必备插件 | 前端资产采集、嗅探、指纹扫描、泄露扫描、漏洞审计与 Vue Router 分析", "https://mp.weixin.qq.com/s/Gt8ov9ZvNiN6_HM6zhfUaw": "Ai+burpsuite插件实现自动化漏洞挖掘图文", "https://mp.weixin.qq.com/s/JlczL70XFc28sWUKjjEDqg": "Blinko < 1.8.4 路径遍历漏洞存在任意文件读取漏洞CVE-2026-23482 附POC", "https://mp.weixin.qq.com/s/rpjXeXGwPHZCjk-pPNoKVg": "26软件安全区域赛pth_attack复现", "https://mp.weixin.qq.com/s/oUtuT1Mb_fSL-mJSovKcMQ": "漏洞复现 | 深科特LEAN MES系统 SMTLoadingMaterial.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s/12IovyzpSpSS3WFmsJw-PQ": "4 个字节,9 年技术债:CVE-2026-31431 ∕ Copy Fail 完整拆解", "https://mp.weixin.qq.com/s/fQe8__x_maBLpSZoeu4dsQ": "富勒仓储管理系统 getDownloadFileAction 任意文件读取漏洞", "https://mp.weixin.qq.com/s/6QG7eFavFLSKz6q70u_bgw": "国家级黑客利用Palo Alto零日漏洞长期潜伏,部署隧道工具窃取凭证", "https://mp.weixin.qq.com/s/EJg9-fa6YaH_wiWXR6gwKg": "Claude Opus写了一个EXP 用了2283美元", "https://mp.weixin.qq.com/s/gLTDPQFN15Eu0MTmkvAeJg": "AI无法给安全运营中心补漏洞,反而会造成漏洞", "https://mp.weixin.qq.com/s/pF287HNTEZRHoiwOw1wwHA": "【梆梆安全监测】安全隐私合规监管趋势及漏洞风险报告(0406-0419)", "https://mp.weixin.qq.com/s/wL3PL7pa5CiN3j7neSfB1g": "SRC实战 | RCE漏洞挖掘合集1", "https://mp.weixin.qq.com/s/M7K5dxFQO5-F8FA7V3E8_Q": "130万次下载的神库爆严重漏洞!Node.js沙箱逃逸PoC已公开,你的代码还在裸奔?", "https://mp.weixin.qq.com/s/lnArkSmsmEFe-Zj47MPlSQ": "Chromium项目史上最大规模:Chrome 148一次性修复127个漏洞", "https://mp.weixin.qq.com/s/PcRXhYSI8RNA9VUVV8R7zQ": "业余挖漏洞月入几千?普通人想靠副业搞钱,到底得练到啥段位?", "https://mp.weixin.qq.com/s/mBilZ4QDI28zGvEXHhxlug": "CNNVD | 重要安全漏洞通报(2026年第二期)", "https://mp.weixin.qq.com/s/qbqw7TMWhH-z_laLUozvnw": "高危Linux内核漏洞Dirty Frag已遭利用,可稳定提权至root", "https://mp.weixin.qq.com/s/l5VFszC-Shi8I3-NFtIjYA": "新型 Linux 内核提权漏洞 DirtyFrag,安芯神甲提供实时检测与防护能力", "https://mp.weixin.qq.com/s/zRvsDn7rW3e17eLyJSs01w": "【安全圈】“Dirty Frag”:一种新的 Linux 提权漏洞已在野外出现", "https://mp.weixin.qq.com/s/ZePv1LOuELmKR1QjQE1Qbg": "国家安全部提醒:某手机芯片厂漏洞被不法分子利用,刷机需谨慎,安全不能丢", "https://mp.weixin.qq.com/s/IwITPnRT_AopujF4Hk8gUw": "cPanel 和 WHM 发布修复程序,修复三个新漏洞 — 立即修补", "https://mp.weixin.qq.com/s/Gom3KdLik0Kl5mrjPUaQ_g": "从客户端加密到签名伪造、支付一分钱买下 32 元服务|金额篡改漏洞完整挖掘实录", "https://mp.weixin.qq.com/s/xieCsQaBoMu0NvvrUAl4nQ": "长用户名UI覆盖漏洞", "https://mp.weixin.qq.com/s/P7tEAhA8PyBpZ7fIfwiXiA": "当提示变成武器:AI Agent框架中的RCE漏洞", "https://mp.weixin.qq.com/s/o_uR2cOuQR6dZ4DpIy4Nyw": "一周回顾:cPanel漏洞被积极利用、DigiCert数据泄露、LinkedIn求职诈骗", "https://mp.weixin.qq.com/s/nGjL-9Ib_jGAWbbbjbnwXQ": "复现完全越狱、开源且预先构建好的iOS 26虚拟机!", "https://mp.weixin.qq.com/s/3EqkdufFiifxcjUakXlbZA": "Mozilla惊爆安全漏洞:Mythos工具几乎零误报", "https://mp.weixin.qq.com/s/E6YAFNJpgTYVj4k4bgYk_Q": "实战逻辑漏洞(短信)利用", "https://mp.weixin.qq.com/s/KJBl0swUDgVWMkXZlIWpOg": "某商城存在前台注入漏洞审计-学员投稿", "https://mp.weixin.qq.com/s/6tLHY_1blbJNFFsgFJCyYg": "12个CVE扎堆引爆:安全研究员一次性披露Next.js∕React全版本高危漏洞", "https://mp.weixin.qq.com/s/TFfiBhcuYk9wHR8pI-hLqQ": "AI自动扫描漏洞,一晚上能干多少事?", "https://mp.weixin.qq.com/s/VzNbuBSkTgFaOHk7jo5yJQ": "今日(2026年5月10日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s/4inUlJkmdEk5GMVIJgGcmA": "【会员下载】人工智能赋能的漏洞发现正在重塑国家网络防御", "https://mp.weixin.qq.com/s/zGBhlQGzQepSbSrDYCwPyQ": "Linux超高危漏洞!网络安全一周新闻速看(20260510期)", "https://mp.weixin.qq.com/s/zUzS4ECOjUkY2nZ5jeU9gA": "WatchVuln_Web高价值漏洞采集与推送工具", "https://mp.weixin.qq.com/s/D8g0GvqZeFYNGMmUBAQbNA": "【已复现】FreeBSD dhclient 远程命令执行漏洞(CVE-2026-42511)", "https://mp.weixin.qq.com/s/ykhIBfKNzNq2mqOQUTEpIA": "Apache HTTP∕2 爆 8.8 分高危漏洞!不仅能 DoS,竟然还能远程执行代码?", "https://mp.weixin.qq.com/s/KpmWR1xn7c_pS8-RmfdOUw": "Cloudflare如何应对“Copy Fail”Linux内核漏洞", "https://mp.weixin.qq.com/s/s73DOAsSfgpVJOzV_yIPXw": "SecLens:面向角色的大模型安全漏洞检测评估", "https://mp.weixin.qq.com/s/39gV9pWj-eW4TeEfre1AVA": "微服务场景下 RCE 和 SSRF 的⼀次组合利⽤", "https://mp.weixin.qq.com/s/qQWaxz-geSHR5gVblgvYyg": "正在被利用:PAN-OS 缓冲区溢出漏洞(CVE-2026-0300)全解析", "https://mp.weixin.qq.com/s/LGirxeP97Yj2sXuMcC2W2g": "漏洞预警 | 天地伟业Easy7 SQL注入漏洞", "https://mp.weixin.qq.com/s/sSKlxEEtUpGAv7mJsbxhhw": "漏洞预警 | Linux kernel权限提升漏洞", "https://mp.weixin.qq.com/s/Yp0tQFX5R7q8aH-48JTuAA": "Adobe Experience Manager (AEM) Dispatcher 绕过完全指南 ($10,000+ 赏金)", "https://mp.weixin.qq.com/s/A2IdTyvZJqIfws-H2-5u0A": "百易云 task.create.php SQL注入漏洞", "https://mp.weixin.qq.com/s/VMA1s57eeinU8kSVXuxKXw": "cPanel 新漏洞可造成文件读取与远程代码执行", "https://mp.weixin.qq.com/s/xZcnjxLwmHadjdgNzhLkng": "【漏洞复现】0day-雨诺调度客户端多项漏洞", "https://mp.weixin.qq.com/s/3oQPKjOsD6y4ud8bNS4NVg": "漏洞复现 | 东胜物流软件 OpSailingDateListHtmlGridSource.aspx 存在SQL注入漏洞", "https://mp.weixin.qq.com/s/h2rifEOygRikkl8cI6CobQ": "数据破坏和内存中毒:Spring AI漏洞威胁LLM完整性", "https://mp.weixin.qq.com/s/PtGU9rZqhEgE0egOPtlAxQ": "Hermes的应用(五):分析CopyFail(CVE-2026-31431)高危漏洞Poc", "https://mp.weixin.qq.com/s/w__uYCDzkNd9jOKgHlkYBg": "白泽成果分享:通过补丁语义分析让“依赖库漏洞传播”看得更准", "https://mp.weixin.qq.com/s/FGH1HjaghckKB_PBTX6rXQ": "荒诞!0day激增,Pwn2Own停止接收漏洞,部分落选者公开漏洞", "https://mp.weixin.qq.com/s/APFaBDWPmdEuc-G8cCA0DQ": "博硕BGM 系统存在默认口令漏洞复现", "https://mp.weixin.qq.com/s/atMxb0sUhE8I0k4mb5CIiQ": "让 AI 用 IDA 去找 IDA 自己的漏洞:一次 clang 参数注入的逆向之旅", "https://mp.weixin.qq.com/s/-74SItKLMbSnjHR8YT3fhw": "一个存在21年没有CVE的漏洞:影响 PHP 自5.1至8.5.6全版本", "https://mp.weixin.qq.com/s/b3Gw6IYg8U-aIDrgNOUO1g": "React2Shell WAF 绕过实录:Vercel 花 100 万美元请黑客找漏洞", "https://mp.weixin.qq.com/s/sNP0A3p_J4pTjpxdSsmFzQ": "睡了个觉+花费2 元,AI挖出我的第一个 IOT RCE 漏洞", "https://mp.weixin.qq.com/s/c30OU3STwWdvcLF0cbeUzA": "【天穹】内核暗渡:Linux Copy Fail 漏洞 CVE-2026-31431 利用分析", "https://mp.weixin.qq.com/s/pPE2eaPvDzntVPpv1elPww": "CVE‑2026‑41940:cPanel∕WHM认证绕过可直接RCE,数百万服务器告急!!!", "https://mp.weixin.qq.com/s/xGp_ssbM95m1TJ1JQShgVg": "上周关注度较高的产品安全漏洞(20260504-20260510)", "https://mp.weixin.qq.com/s/vk5fU91FeZy9wnfnQUCEYA": "今日(2026年5月11日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s/M5YTxIOA6ZU1EVWyNkNM-g": "天地伟业Easy7 ∕Easy7∕rest∕user∕getAuthorityByUserId SQL注入漏洞", "https://mp.weixin.qq.com/s/DNft9VVupw1p2e6m4ZZKLA": "常见未授权访问漏洞总结", "https://mp.weixin.qq.com/s/yDlveLAva4m2YJ-hL1FTEg": "CNVD漏洞周报2026年第18期", "https://mp.weixin.qq.com/s/eb-wgbyPgFwafnOAwYSsUw": "CVE-2026-7458-UserVerificationByPickPlugins-认证绕过漏洞分析报告", "https://mp.weixin.qq.com/s/Y-MeVpGfMNwLZTL8geTnsg": "雷神众测漏洞周报2026.4.27-2026.5.10", "https://mp.weixin.qq.com/s/XB8J58Eh--JnAVefQ7z1jQ": "cPanel高危漏洞可致文件泄露与远程代码执行,数千服务器面临风险", "https://mp.weixin.qq.com/s/FNxwrq5MdzBVTUbWfDgR9A": "Next.js高危漏洞可致SSRF攻击、DoS瘫痪", "https://mp.weixin.qq.com/s/YufKn9BT3T5iHElqTptkdA": "PHP unserialize() 潜伏21年致命Use-After-Free漏洞", "https://mp.weixin.qq.com/s/pERVXxNNWMjZq8glq0FW-g": "从嵌入式基础到真实漏洞挖掘", "https://mp.weixin.qq.com/s/G3nX_Sk5SNhT-JM_uCrEJQ": "Blinko plugins路径遍历漏洞存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s/AbwpUiNtK0Nv5wriDzw57A": "【紧急】Supsystic Contact Form 插件 CVE-2026-4257 漏洞:未经身份验证即可 RCE!", "https://mp.weixin.qq.com/s/zKolcCDj_yH4xs3pkwbYlw": "恒丰银行大模型安全系统建设需求POC测试供应商征集", "https://mp.weixin.qq.com/s/f9IH0K1mGrR_2s6hAF1TMQ": "拿Shell只需后台权限?深度剖析 Ivanti EPMM 最新 RCE 漏洞 (CVE-2026-6973)", "https://mp.weixin.qq.com/s/v_DAPB9d0-_jHTEb2LZLAg": "漏洞挖掘-武器工程化-自动化渗透,AI全自动化攻击时代还是来了!", "https://mp.weixin.qq.com/s/gETwnszuVVuKf5NIgWjAPA": "工具 | ActiveMQ-EXPtools", "https://mp.weixin.qq.com/s/rWPjwlgoK2RFhIKpyTReWQ": "漏洞复现 | 大蚂蚁 (BigAnt) 即时通讯系统 moveDept 存在SQL注入漏洞", "https://mp.weixin.qq.com/s/4lkaU8G4PchnMIAsKnru1w": "“两高一弱”为什么是最危险的网络安全漏洞?", "https://mp.weixin.qq.com/s/lo1rWyvGyORUMu5t73pDAQ": "漏洞预警 | 天地伟业Easy7命令执行漏洞", "https://mp.weixin.qq.com/s/FSgkK2IehfyHyso0O9buSA": "FastGPT NoSQL注入致管理员登录绕过:CVE-2026-40351深度剖析", "https://mp.weixin.qq.com/s/ouZvWPhrsENMXAlrjwjstw": "原型污染+DOM XSS完整利用链:那个多出来的“1”差点毁了我的漏洞", "https://mp.weixin.qq.com/s/xGOq3_-dHbu2c1OZ9Iao2g": "新的“Dirty Frag”Linux漏洞可能在攻击中被利用", "https://mp.weixin.qq.com/s/PkmZzctiOXq6PO2GKikklQ": "【SRC实战】|越权漏洞“默认你不会改参数”", "https://mp.weixin.qq.com/s/OAxcui92lTGTlFQmtLpq5Q": "谷歌首次确认:AI 生成的零日漏洞已被黑客实战利用", "https://mp.weixin.qq.com/s/D-PMrvpJ0NXO7wRXf5gkow": "AI遭劫持:Claude Chrome扩展程序存在严重漏洞,恶意脚本可控制您的AI", "https://mp.weixin.qq.com/s/uXSh1VzswG0xpc_XfSBAYw": "谷歌警告:人工智能正在加速网络攻击和0day漏洞利用", "https://mp.weixin.qq.com/s/CcP_QXQqww280C_lkJfQHQ": "普华PMS OfficeService.aspx 任意文件读取漏洞", "https://mp.weixin.qq.com/s/KKgcaiYm3J2aScouaYKRtA": "漏洞预警 | Android ADB认证绕过漏洞", "https://mp.weixin.qq.com/s/tUD-WT09FYuaxae7V3OrGg": "CVE-2026-43899 打了补丁,但只补了一半:DeepChat Electron RCE 与不完整修复的代价", "https://mp.weixin.qq.com/s/senxqy0qs7eXW3lne-d3jw": "漏洞太多,修不过来,厂商拒收漏洞--大模型挖洞带来的变革和规则重写", "https://mp.weixin.qq.com/s/VfGLmrCmB8F0L77d5k4jIQ": "Apache Tomcat Tribes EncryptInterceptor 故障开放绕过,未经身份验证的远程代码执行 PoC", "https://mp.weixin.qq.com/s/5X_rZOZElBsVqgnltWWF6w": "同一个 URL,两种不同的理解——CVE-2026-42882 s3-proxy 认证绕过的三条路径", "https://mp.weixin.qq.com/s/NoruzlDrfMAu5klw4u-CxA": "OpenAI 发布 Daybreak,从发现漏洞到生成补丁", "https://mp.weixin.qq.com/s/9TcFGZP7cqgvp4lfKJ_CcA": "注释写着\"需要认证\",代码说\"不\"——CVE-2026-42864 未授权 SSRF 导致 AWS 凭据窃取", "https://mp.weixin.qq.com/s/Taru2nAeqEjnQoFtbhFcfA": "越权漏洞挖掘新思路", "https://mp.weixin.qq.com/s/E186F3A-_hDMaO6OvRLPQQ": "通过不安全反序列化导致的远程代码执行:Wazuh XDR∕SIEM(CVE-2026–25769)", "https://mp.weixin.qq.com/s/q6W0t4fsx_SStzcXlXCCKg": "Apache Tomcat Tribes EncryptInterceptor 加密绕过反序列化漏洞分析(CVE-2026-34486)", "https://mp.weixin.qq.com/s/mDp9EC-Pava5CappYuTDiQ": "360发布“龙虾”生态安全报告:23个漏洞覆盖10余款产品,智能体安全风险蔓延全行业", "https://mp.weixin.qq.com/s/GyAx7mJ6GeT1DhL4YbvZtA": "【高危漏洞预警】PHP SOAP扩展内存错误引用漏洞(CVE-2026-6722)", "https://mp.weixin.qq.com/s/JHM9OoEF3h-HDS2wNRk3Ew": "安卓惊现零点击核弹漏洞!远程Shell权限被轻易窃取,PoC已公开", "https://mp.weixin.qq.com/s/ODwNF6DABtS6sioP-OsL7g": "【漏洞复现】0day-迈普多业务融合网关逻辑缺陷导致登录绕过", "https://mp.weixin.qq.com/s/gSvzPB-plzqc452CVoXuUg": "没有凭证?没问题。我们相信你-越权访问漏洞", "https://mp.weixin.qq.com/s/WclheteS7Q_j7Pg2IJ5MYg": "谷歌首次发现利用AI开发“零日漏洞”攻击工具", "https://mp.weixin.qq.com/s/3riLTzU9cRgkB6sdpdKqvw": "今日(2026年5月12日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s/HbXkqDe0-vyHhKaNdHLY5Q": "Linux 内核新增紧急开关,填补 0Day 漏洞修复空窗", "https://mp.weixin.qq.com/s/lHGi9W1fjnrqwgg4bmkXzA": "谷歌首次发现“AI自主开发”0Day漏洞攻击工具", "https://mp.weixin.qq.com/s/2iUEEejnBxRdQWrwTisEPA": "威胁行为者Mr_Rot13积极利用CVE-2026-41940漏洞实施后门部署", "https://mp.weixin.qq.com/s/wB1Nto61yY1wymP3O27sYg": "PHP SOAP 扩展存在严重漏洞,可导致远程代码执行攻击", "https://mp.weixin.qq.com/s/IBV42dfZcRMquHpYOfTMzQ": "黑客利用 CVE-2026-41940 漏洞控制 cPanel 和 WHM 服务器", "https://mp.weixin.qq.com/s/c6VZNFWIDw0h_xuK0G45Yw": "空密码后台 → SQLite 落地 Webshell → 内核 CVE-2026-31431 root", "https://mp.weixin.qq.com/s/6lAzHpefcbFDM3s6a2R0gA": "蚁剑最新高危漏洞分析:为什么一个“终端输出”最后变成了客户端 RCE?", "https://mp.weixin.qq.com/s/mFK47EiAfZTEblT2Mfmw9g": "PHP SOAP扩展漏洞或致远程代码执行", "https://mp.weixin.qq.com/s/fScOkKDIDsdUSyOlYyNkpQ": "Grav CMS 组合拳漏洞| CVE-2026-42613&CVE-2026-42607复现&研究", "https://mp.weixin.qq.com/s/MOnAGljdhFGkh7eGBK-Auw": "一款功能强大的Web 漏洞扫描器(11种检测模块)", "https://mp.weixin.qq.com/s/4OWzmOw1oH11TwmlEmq9jw": "首次发现!AI生成零日漏洞利用工具并实施网络攻击", "https://mp.weixin.qq.com/s/AKyjmlv4vfperRsGS8njsQ": "360发布“龙虾”生态安全报告:23个漏洞覆盖10余款产品,智能体安全风险蔓延全行业", "https://mp.weixin.qq.com/s/A1VK7zrvm93AYwfhl1E1gg": "WAVLINK-WN530HG4 live_api.cgi接口存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s/MY9lKTgrp9GgA7I51AZwMA": "漏洞预警 | cPanel&WHM身份认证绕过漏洞", "https://mp.weixin.qq.com/s/xdlq0hkx_s1_XZcimz4NAg": "离谱,Pwn2Own 因高质量漏洞提交过多而“拒单”", "https://mp.weixin.qq.com/s/lypdJtXadPbZRdzgeINvYw": "GreenPlasma Windows CTFMON 任意创建节提升权限漏洞", "https://mp.weixin.qq.com/s/DD-VNW_zvgaRKKE-I8hKnQ": "OpenAI推出Daybreak,用人工智能做漏洞检测与补丁验证", "https://mp.weixin.qq.com/s/2ErpPdqHXNjmqfCGROj2Cg": "微软5月补丁日多个产品安全漏洞风险通告:14个紧急漏洞、9个重要漏洞", "https://mp.weixin.qq.com/s/1Nep-sTJLyYJCXO3rL6zEw": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/u-7xBVImVEUDwUb3NXW2rQ": "漏洞速递|CVE‑2026‑41940 RCE漏洞(建议自查)", "https://mp.weixin.qq.com/s/55tohPDy_de00jh6Xe5LSA": "CVE-2026-43948 None != None 为 False:一个让授权守卫静默失效的 Python 陷阱", "https://mp.weixin.qq.com/s/glIcbK_uxbaDckf3DSFltw": "西门子 ROS# 存在严重漏洞,可实现任意文件访问和主机接管", "https://mp.weixin.qq.com/s/7fk-Gj2n3DzDbdHrP2WGLw": "AI也会被黑?OWASP Top 10带你看透大模型十大漏洞", "https://mp.weixin.qq.com/s/lZhiWbxa2avLPWeb9VMTjA": "十亿量级IoT设备面临威胁:arduino-esp32 VLA栈溢出漏洞(CVE-2026-42854)技术分析", "https://mp.weixin.qq.com/s/bb7ddbGqmDbUP4XOE54nbw": "我认为——90天漏洞披露政策已死", "https://mp.weixin.qq.com/s/2WMoV1V7Zp3VYtvTVL_WlQ": "针对安卓零点击漏洞的PoC漏洞利用程序已发布,该漏洞可实现远程Shell访问", "https://mp.weixin.qq.com/s/C6flk23xhsVfCu_zEVs-Ng": "cPanel 和 WHM 的新漏洞可导致代码执行和拒绝服务攻击", "https://mp.weixin.qq.com/s/JPF_W-0F2dIvBi8NgJ3wjg": "网络安全史上一个里程碑式事件——攻击者首次使用AI大模型自主发现并武器化了0Day", "https://mp.weixin.qq.com/s/riqjGP7fM6h43B1j8hiDjQ": "OpenAI 推出 Daybreak 平台,用于人工智能驱动的漏洞检测与补丁有效性验证", "https://mp.weixin.qq.com/s/NQ3pxcS6eVneDOKo4E_nOg": "Burp Suite平替 | 强大插件、集成云端虚拟手机,快速定位APP漏洞", "https://mp.weixin.qq.com/s/JMLZFRm6ssIpBlTR9Uy4ng": "抖音专测享3倍积分!重大漏洞奖励20万元!", "https://mp.weixin.qq.com/s/CyecOf2VQmC3sJ1_UX2JnQ": "【梆梆安全监测】安全隐私合规监管趋势及漏洞风险报告(0420-0503)", "https://mp.weixin.qq.com/s/vH73mThC-iYNyD4k4AmRLQ": "又一次挖 SRC 漏洞,我赚了 1000 元(附逻辑漏洞完整报告模板)", "https://mp.weixin.qq.com/s/7aevIEJhok9Xc--Q_wA8-Q": "山石安全能力中心|微软2026年5月份漏洞补丁日安全通告", "https://mp.weixin.qq.com/s/6GBUGydmKah9fqoj_ZyKgg": "漫谈AI安全:当传统漏洞遇上AI——618个漏洞背后的聚类真相", "https://mp.weixin.qq.com/s/WDqcEXO2Y_Soc855EyncqA": "漏洞预警|天融信上网行为管理 PC 存在跨站脚本漏洞", "https://mp.weixin.qq.com/s/tM_41sRvAiTVx_nZ_qmuxA": "通过备案的网络产品安全漏洞收集平台(第1批)", "https://mp.weixin.qq.com/s/E1wcifKl3CcQ0HDpLFt4ew": "【漏洞复现】Apache HTTP Server mod_http2 双重释放漏洞(CVE-2026-23918)", "https://mp.weixin.qq.com/s/d6_TABC7VLtbymCstbBftw": "CVE-2026-42232-n8n原型污染", "https://mp.weixin.qq.com/s/kzKPhDINyxFQpvxwWSgLvQ": "AI安全爆发、酒店数据泄露、Adobe与Apple紧急修补高危漏洞", "https://mp.weixin.qq.com/s/LghjpqnG00xbGXwXKbrXIw": "号称全球最“危险”的AI,Anthropic Mythos实测curl仅找到一个真实漏洞", "https://mp.weixin.qq.com/s/IaBbKIaNWLzJ6xda39Gwqw": "linux提权漏洞喜加一", "https://mp.weixin.qq.com/s/Xzsm48B5vPw5t7NWQkdf6g": "Pwn2Own 2026爆满遭拒,黑客集体公开0day报复厂商", "https://mp.weixin.qq.com/s/7AOjDNkDRfxquCJfKyh2Tw": "孚盟云CRM BusinessPriceReport.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s/Dv295GjxO59yH3-dnbNVGA": "Node-RED EXEC 节点未授权命令执行漏洞复现", "https://mp.weixin.qq.com/s/PB6k-1EdM48BRdnHITe-dQ": "OpenClaw高风险历史漏洞专项分析报告(含POC∕EXP)", "https://mp.weixin.qq.com/s/XT5xvFD4azFi5xwZiq9_oA": "观点丨从波兰能源袭击到工控漏洞暴增——2025攻防态势如何重塑2026安全逻辑", "https://mp.weixin.qq.com/s/CazQkRAVpprC7DMsGx_crw": "【安全圈】苹果修复 macOS 和 iOS 系统数十个漏洞", "https://mp.weixin.qq.com/s/ICFN0Usx_27YuQgfMqKrJw": "犯罪黑客已利用AI构建出可运行的零日漏洞利用程序", "https://mp.weixin.qq.com/s/NQubWOmtdjp6fbj3mAInhQ": "整合分析 | Fortinet 双子星高危漏洞:未认证即可远程代码执行", "https://mp.weixin.qq.com/s/4GYmcw0HhImrm99Ka7tblA": "用友时空KSOA save_folder 存在sql注入漏洞", "https://mp.weixin.qq.com/s/jz2esBqKqwTAu6frORFX9A": "【安全圈】Exim 新 BDAT 漏洞致 GnuTLS 构建面临代码执行风险", "https://mp.weixin.qq.com/s/evx6EPYWV480lhWB9oR83g": "SandboxJS 逃逸漏洞严重,可能导致主机被接管", "https://mp.weixin.qq.com/s/pzRVNuZP6l7TxzPZV0Ta4g": "Microsoft Teams 漏洞可导致黑客实施欺骗攻击", "https://mp.weixin.qq.com/s/G9oSiIyDSGLYm91Su2EvSg": "神秘黑客组织利用Linux服务器运维组件漏洞大量安插后门", "https://mp.weixin.qq.com/s/hU4wszrJganRiAb2bW5haQ": "【安全更新】微软5月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s/OEVmd5wqkQG_6vbuWch0Pw": "漏洞多到\"溢出\"!Pwn2Own 2026被迫\"闭门拒客\"", "https://mp.weixin.qq.com/s/oTvDu7ct1hXG9ccPDZbgAQ": "【漏洞通告】泛微 E-cology10 invoke命令执行漏洞", "https://mp.weixin.qq.com/s/cs8GKRAk6IGzxEpmMs-Y5Q": "【已复现】Linux Kernel Fragnesia 本地权限提升漏洞(CVE-2026-46300)安全风险通告", "https://mp.weixin.qq.com/s/J4NqVdgzZYNId2I2-pUXuQ": "【严重】FlipperCode 插件曝出 CVE-2026-6433:未经身份验证即可通过 eval() 接管系统", "https://mp.weixin.qq.com/s/a1QEQ9CYZ9vt1tnTdWikOw": "nginx Rift(CVE-2026-42945)攻击者可触发 worker 崩溃,特定条件下可远程代码执行", "https://mp.weixin.qq.com/s/fF7WsbsuLBIRVtNNH_p05g": "Pwn2Own被0day狂潮冲垮:一场暴露行业底层逻辑崩溃的安全危机", "https://mp.weixin.qq.com/s/J_ucAitcGtpQb7O2_oDeCw": "神秘的微软漏洞发现者持续公开Windows 0day", "https://mp.weixin.qq.com/s/vn_ve-_IwNGcC3Zmy5ps8g": "Windows权限提升高级利用技术之任意文件读到SYSTEM权限代码执行", "https://mp.weixin.qq.com/s/OoW7oG-z7h8JeYvTddbCSQ": "逻辑漏洞渗透", "https://mp.weixin.qq.com/s/3fklcZ8Sx51BHn0CPFE4fQ": "首次发现!AI生成零日漏洞利用工具并实施网络攻击", "https://mp.weixin.qq.com/s/G--7OVlmwJfe4d506K06sQ": "【已复现】漏洞通告 | Linux 内核 Fragnesia 权限提升漏洞(CVE-2026-46300)", "https://mp.weixin.qq.com/s/tjX-8QPDglISqT-LTM6h7g": "Quest KACE SMA 漏洞 CVE-2025-32975:一个未修复工具漏洞,为 60 家机构敞开入侵大门", "https://mp.weixin.qq.com/s/BtkmHs3kCnSgnkVeAxq5ng": "CVE复现 | CVE-2025-58360漏洞复现", "https://mp.weixin.qq.com/s/jr-bJQ9S_iXJysjSuWURYA": "青之LIMS BatchDownloadPdf接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s/u49Yf_ftvomVOQfY1N13ig": "【漏洞通告】OpenClaw 安全漏洞(CVE-2026-41365)", "https://mp.weixin.qq.com/s/XWNHIKRs_uykWPtT3ekfyA": "Dirty Frag:无需漏洞触发条件的 Linux 本地提权,你的防御控制真的在工作吗?", "https://mp.weixin.qq.com/s/MUT_y00rR7l8gONL5Or1hw": "针对 FortiSandbox 和 FortiAuthenticator 的关键漏洞已修复", "https://mp.weixin.qq.com/s/yDz1UOysRV6zQ_qy7Gg7zg": "2026 年 5 月微软补丁星期二:修复 138 个漏洞,部分漏洞风险极高", "https://mp.weixin.qq.com/s/HfILLgfTU69sJDP7KLusww": "TurboMail mailmain 信息泄露漏洞", "https://mp.weixin.qq.com/s/Q4eugNKoZ7ZdDdmx1PuFZA": "【高危AI漏洞预警】CVE-2026-42203|LiteLLM AI Gateway 服务端模板注入远程代码执行(RCE)", "https://mp.weixin.qq.com/s/SGXV8jxzWWUfZs9Y2CV9sQ": "Google检测到首个AI生成的Zero-Day漏洞利用链", "https://mp.weixin.qq.com/s/9z4hqgJx3y6LwelzXnsaXg": "Dirty Frag的双漏洞组合", "https://mp.weixin.qq.com/s/h7YAlhZGWIZfJHWC4m0dyg": "CVE-2026-44381:MISP 威胁情报平台 ORDER BY 子句 SQL 注入", "https://mp.weixin.qq.com/s/IdcRYetzS9u6gScivEry2g": "CVE-2026-44442:ERPNext 授权检查缺失漏洞", "https://mp.weixin.qq.com/s/DzBEQWostGd0rGg5vluKSA": "泛微ecology 历史漏洞浅析(二)", "https://mp.weixin.qq.com/s/eQj7H3iv-fq9gIfvQmXRmA": "【靶场开源】NGINX 远程代码执行高危漏洞(CVE-2026-42945)", "https://mp.weixin.qq.com/s/k0QCeZfPYCLkuww3z_Z0fA": "漏洞通告|Linux Kernel Fragnesia 本地权限提升漏洞 CVE-2026-46300", "https://mp.weixin.qq.com/s/McJxlZgyHBXqcoGbLVNu-A": "Exim 高危漏洞 CVE-2026-45185", "https://mp.weixin.qq.com/s/aLCyE4L7yucSkDmzidTeLQ": "CNNVD关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s/IgImXvqcmU-ItD8U346ETg": "速修复!Composer 漏洞可暴露 GitHub 密钥", "https://mp.weixin.qq.com/s/rosmbXuVUPRl4EkX3aXxZw": "Web安全之一文搞懂单端点条件竞争漏洞", "https://mp.weixin.qq.com/s/04Nk2TcwRw3zv7djwnrW8A": "CVE-2026-8196-JeecgBoot-mLogin接口授权绕过漏洞报告", "https://mp.weixin.qq.com/s/x07Y0h6hukdgQcZdnuO_dw": "Ivanti 紧急修复暴露敏感数据的严重 Xtraction 漏洞", "https://mp.weixin.qq.com/s/GDn4pBXhg-PvsLxKMYcEVg": "Exim BDAT 严重漏洞可导致内存损坏和代码执行攻击", "https://mp.weixin.qq.com/s/8Q_GrV54Gt1fdBuNbLaWjg": "NGINX爆新漏洞,特定配置下可实现远程代码执行", "https://mp.weixin.qq.com/s/J3MO2FSBKxD--JkK4EG5wA": "VSCode Copilot聊天中的远程代码执行", "https://mp.weixin.qq.com/s/yB6xDRqOxOVBojIQ0heBbQ": "Dirty Frag 漏洞曝光!影响所有主流 Linux 发行版", "https://mp.weixin.qq.com/s/HzDqxxqI24YxLVY-JiQ7Pw": "谷歌首次发现基于AI的0Day漏洞利用", "https://mp.weixin.qq.com/s/HEVTlkM3r7yBC80eRfJB8A": "【已复现】漏洞通告 | NGINX ngx_http_rewrite_module堆缓冲区溢出漏洞(CVE-2026-42945)", "https://mp.weixin.qq.com/s/EDnXoN7psPhkHMamIw3NpQ": "【漏洞通告】LiteLLM模板注入漏洞(CVE-2026-42203)", "https://mp.weixin.qq.com/s/aa3dru8viVfzXNaTzVlZyA": "【高危漏洞预警】NGINX ngx_http_rewrite_module堆缓冲区溢出漏洞(CVE-2026-42945)", "https://mp.weixin.qq.com/s/XNh9mBd7nbPpyZdrwtaMdA": "NGINX Rift:利用18年前的漏洞实现NGINX远程代码执行(CVE-2026-42945)", "https://mp.weixin.qq.com/s/S63NjdDpozz7sEyR5XtOKQ": "关于deepseek最近被“曝出”的用户信息泄露漏洞", "https://mp.weixin.qq.com/s/rF7Ho-CHeRmBcBygTCIilA": "Android零点击漏洞PoC公开,攻击者可远程获取Shell权限", "https://mp.weixin.qq.com/s/mryh7svePY16KX5vsvXZ_g": "【已复现】deepseek疑似出现用户上下文内容泄露", "https://mp.weixin.qq.com/s/5KnUW9vvlMtaeQABAYmgJg": "突发|DeepSeek 现重大漏洞,输入特殊字符可直接泄露他人对话内容", "https://mp.weixin.qq.com/s/hU6lMyw9jl_28hAdETz1KA": "福利 | 任意有效漏洞得货拉拉SRC限定端午礼盒!", "https://mp.weixin.qq.com/s/auEaTJMGrZgLSls7Vv6ijA": "紧急预警!NGINX 曝 18 年老漏洞,CVSS 9.2 分,无需认证直接 RCE,全球数亿服务器受影响", "https://mp.weixin.qq.com/s/XATQ38PUyqouMWTDHKg3DQ": "Fragnesia:Dirty Frag补丁引发了新的Linux内核LPE漏洞(CVE-2026-46300)", "https://mp.weixin.qq.com/s/CQPAqdtJWyh7RKuRF7XgTg": "URL 编码的双重身份:SiYuan Tooltip XSS 与 Electron RCE 深度解析", "https://mp.weixin.qq.com/s/vgdZuggfifXPjY3XQNdHYQ": "CVE-2026-8181-Burst Statistics-身份验证绕过漏洞分析报告", "https://mp.weixin.qq.com/s/_B9aNoR0xBVRX84ODPw5Mg": "【2周年庆】致Nday Poc全体成员的一封信", "https://mp.weixin.qq.com/s/1pEnZhxzFUjAY8bWj4Zhbw": "AI渗透工具 Kali & HexStrike 大量RCE 0day漏洞", "https://mp.weixin.qq.com/s/z1KWGTQ61Zc4IEOq1bPBUg": "JWT 密钥强度为零:Note Mark 满分漏洞与令牌伪造攻击", "https://mp.weixin.qq.com/s/3eRqRxiI9zVAc-irKZEThQ": "漏洞预警 | Copy Failh和Dirty Frag的好兄弟fragnesia来了", "https://mp.weixin.qq.com/s/cAy01n7mC6T9Lr1d3r_E9g": "博通发布 VMware Fusion 安全更新,修复本地提权至 Root 权限漏洞", "https://mp.weixin.qq.com/s/s4fizQHJgSEMm2p-g0UEwg": "NGINX 漏洞预警:18 年老洞可 RCE,PoC 已公开", "https://mp.weixin.qq.com/s/cLvCw_5YgZlQFbcDJSd6og": "NGINX 漏洞 Rift:这款全球部署最广泛的 Web 服务器,一处潜伏 18 年 的漏洞刚刚被曝光", "https://mp.weixin.qq.com/s/eAG0u5SFs6Bon_wt0OL_BA": "web安全之多端点条件竞争漏洞", "https://mp.weixin.qq.com/s/WEKljGmKR1pEaZwF9k0qoQ": "代码审计JAVA源码RCE漏洞记录-学员投稿", "https://mp.weixin.qq.com/s/wa6xjRDidRwpCgr-hhYwQw": "我对一个真实的CRM系统进行了渗透测试,发现了4个关键漏洞——以下是完整的攻击链", "https://mp.weixin.qq.com/s/Z-hV8A4XQ0G5OoN1ptEsNw": "18年积弊:NGINX脚本引擎堆缓冲区溢出可致远程代码执行", "https://mp.weixin.qq.com/s/OnXI-rDV3sgZPW2qgLvLIw": "【安全圈】研究人员公布概念验证,利用 Windows BitLocker 零日漏洞可访问受保护驱动器", "https://mp.weixin.qq.com/s/mCYZZlLjzmGg57_B2MgU0g": "当异常绕过handleException:最新VM2沙箱绕过 CVE-2026-45411 原理分析", "https://mp.weixin.qq.com/s/gIFuEQSBYVxhxkrf0PUk1g": "已存在18年的 Nginx 漏洞可导致 RCE 攻击", "https://mp.weixin.qq.com/s/3nt_kHvQqHDO9E_2YKrgGg": "Chrome沙箱中也能利用,Windows 内核特权提升漏洞(CVE-2026-40369)", "https://mp.weixin.qq.com/s/OudH7CI-wacuf-geG2CgmA": "补丁刚装好,攻击者就进来了:泛微OA未认证RCE漏洞从发现到批量扫描全记录", "https://mp.weixin.qq.com/s/tGCBO7xlYvu7bUqGhND8Hw": "从客户端加密配置到伪造签名:一次支付金额篡改漏洞的挖掘实录", "https://mp.weixin.qq.com/s/jO2KhtHCL8JRE4WIBYaI_Q": "CVE-2026-42945-NGINX-ngx_http_rewrite_module-堆缓冲区溢出分析报告", "https://mp.weixin.qq.com/s/xIAxOnoHt1ZUk5xM_y8ZdA": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s/Qcw1L8-Bx-itLT3NKAg7UA": "OpenAI Daybreak 实现漏洞检测和修补的自动化", "https://mp.weixin.qq.com/s/Fy6ia-3Btlo046Iugn2L0Q": "OpenAI 推出 Daybreak,对标 Anthropic Mythos 发力 AI 网络防御;CNNVD发布关于微软多个安全漏洞的通报| 牛览", "https://mp.weixin.qq.com/s/me40O_2lRabfwNWmT1_HgA": "Linux 内核漏洞 Fragnesia 可被利用实现本地 root 提权攻击", "https://mp.weixin.qq.com/s/Z5bL9bRj-C1ltheUCPtLwQ": "【已复现】Linux内核Fragnesia权限提升漏洞(CVE-2026-46300)", "https://mp.weixin.qq.com/s/k-apBkX76sl_roJ0piyu7Q": "CVSS 10.0 满分恐怖!React2Shell 漏洞爆发,全球数千万网站面临 RCE 威胁", "https://mp.weixin.qq.com/s/vO4Doq0VioQlbVQ0xRjHuA": "【安全圈】微软警告“ Dirty Frag ” Linux 内核漏洞已遭黑客利用", "https://mp.weixin.qq.com/s/GugzE78-TsFkLO7_YbO_ig": "NGINX 模块堆缓冲区溢出漏洞,特定条件下可 RCE", "https://mp.weixin.qq.com/s/7uAwui2L8eCCl8frmKOEXg": "Linux 又爆本地权限提升漏洞—Fragnesia", "https://mp.weixin.qq.com/s/NE3xOJYmcR1zwadeR62FnA": "AI Agent渗透测试必备:结构化知识库和方法论(200+技能、600+漏洞)", "https://mp.weixin.qq.com/s/QtIoNRdUW6t4dQfpzr6OCA": "思科:注意已遭利用的满分 SD-WAN 新 0day", "https://mp.weixin.qq.com/s/dxSq7GoaSDEWy5-6intj3Q": "【高危漏洞预警】Windows 存储空间控制器提权漏洞(CVE-2026-35415)", "https://mp.weixin.qq.com/s/7Tto5H7OxmpTQGkyyVfOuQ": "免杀分析 | PowerShell命令执行、检测与绕过", "https://mp.weixin.qq.com/s/mutmN1nje_x5bZAmQm8I9g": "【漏洞预警】Linux Kernel 越权任意文件读取漏洞,PoC 已公开", "https://mp.weixin.qq.com/s/76y61eknc6G-oD9Qalm0wg": "282G教程放送!2026网络安全资料最全合集(从0到挖漏洞、打CTF、护网、就业)", "https://mp.weixin.qq.com/s/jI4hCcuQWPqcm8IDslVQ0g": "实战逻辑漏洞(短信横向)利用", "https://mp.weixin.qq.com/s/kqLGRhmQa8fs5HifQHqMsQ": "Web Fuzzer 强化:AI自动修改数据包与智能测漏洞", "https://mp.weixin.qq.com/s/SIs8VZVo_vnjeVuBB7NGsA": "【已复现】Linux Kernel ptrace 本地权限提升漏洞(QVD-2026-26977)安全风险通告", "https://mp.weixin.qq.com/s/xzwFu7Khfq50FxnKMXme5Q": "【漏洞通告】NGINX ngx_http_rewrite_module堆缓冲区溢出漏洞(CVE-2026-42945)", "https://mp.weixin.qq.com/s/a0VH9NHrucR7MDvgLPVp8Q": "【漏洞通告】Nginx ngx_http_rewrite_module 缓冲区溢出漏洞(CVE-2026-42945)", "https://mp.weixin.qq.com/s/r2FHhy43tRYoZlBt9OYgcw": "【漏洞通告】Linux Kernel Fragnesia 权限提升漏洞(CVE-2026-46300)", "https://mp.weixin.qq.com/s/rrw4VgmXqxMZgUf8WBzFFw": "一个月内第三起!Linux内核再曝Fragnesia高危漏洞", "https://mp.weixin.qq.com/s/XreczO_mTaQmUlrBUFr9vw": "Windows DNS客户端漏洞可导致远程代码执行攻击", "https://mp.weixin.qq.com/s/Ov5oKKQ1b8UCqYd39v_w8w": "【漏洞通告】Palo Alto Networks PAN-OS身份绕过认证漏洞(CVE-2026-0265)", "https://mp.weixin.qq.com/s/8_gNFJoziWjWjkhD_KGESQ": "Anthropic Mythos AI再出手,发现可绕过苹果安全机制的macOS漏洞", "https://mp.weixin.qq.com/s/mxYkNueI3x4KtDdxPWhvZQ": "微软2026年5月份于周二补丁日针对78个漏洞发布安全补丁", "https://mp.weixin.qq.com/s/0Nn65decO4Tl9_TA34Dwzg": "恐怖如斯!Mythos搞定18个V8漏洞,AI漏洞利用比人类还稳?", "https://mp.weixin.qq.com/s/M58-s1GDTAjSJT1cSI8jeg": "AI 驱动的渗透测试 CLI 工具 — 说人话,打漏洞", "https://mp.weixin.qq.com/s/UOqMD9_OByRHj504ghIzxg": "Mythos在漏洞发现方面表现出色,但是……", "https://mp.weixin.qq.com/s/8gGSgPpLkQ1xtlXvINSzDw": "红队神器|Vue 站点未授权漏洞一键挖掘 -v2.0", "https://mp.weixin.qq.com/s/9pUyo4DPM4zPlpSml9Hx-w": "关键Exchange Server 0day漏洞在野外攻击中被积极利用", "https://mp.weixin.qq.com/s/Coxl5fLG-dGr9Qimlkc6MQ": "天塌了,全球互联网基础设施,nginx爆RCE,利用方式竟如此简单", "https://mp.weixin.qq.com/s/W9P1dFmFXHc9B4xTC9cqpg": "【2周年庆】致Nday Poc全体成员的一封信(第二天)抽奖规则变动", "https://mp.weixin.qq.com/s/mw1m6iKZY1AL1rN31D1QXw": "Next.js曝出高危SSRF漏洞 CVE-2026-44578", "https://mp.weixin.qq.com/s/7XsBXsQAp7lHba8ycOgprQ": "18年潜伏Nginx RCE漏洞曝光 CVE-2026-42945", "https://mp.weixin.qq.com/s/qfELG3imPQpmkD8Cy6waMw": "SRC 每日漏洞复现学习系列(第 2 篇)垂直越权漏洞+漏洞报告模板", "https://mp.weixin.qq.com/s/bdy4PrPmqG6DTBfPcaCUAw": "Hermes的应用(七):分析DirtyFrag(CVE-2026-43284)高危漏洞Poc", "https://mp.weixin.qq.com/s/CHHYlBXin8QlXJ0rwN_vGQ": "并发举报竞争条件漏洞", "https://mp.weixin.qq.com/s/PdUpr8J3aW_kqYsQmRqj_w": "天锐绿盾审批系统findOnlineUserForPage.do接口存在信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s/WdL2QmyngffrLS_jfcZYnA": "新手挖漏洞神器:50 个高危端口完整版清单", "https://mp.weixin.qq.com/s/Oifip77LM0bJP4nINQKhZA": "今日(2026年5月16日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s/Wxqixof2NyhiaNhlVHEa5g": "OpenClaw 曝出四大漏洞,可导致数据窃取、权限提升与持久化攻击", "https://mp.weixin.qq.com/s/6LP7Izufmkq20Es7gNFoPw": "冰蝎 v4.1 被曝 0‑click 高危漏洞,一连接就被反制,可窃取凭据...!", "https://mp.weixin.qq.com/s/pW6ihfvEMa8QBRjymahIqQ": "Pwn2Own柏林2026次日战报:DEVCORE狂揽$405,000领跑,Exchange漏洞引爆全场", "https://mp.weixin.qq.com/s/KO2L3ZRv43BXQMT0E5PSOQ": "“分片失忆”——Dirty Frag补丁如何催生了Fragnesia漏洞", "https://mp.weixin.qq.com/s/Mej9s5_vLeu62bG2Fq4dQQ": "VMware Fusion漏洞可致攻击者获取root权限", "https://mp.weixin.qq.com/s/WJRZRrAaYVwzzo2RaO4vQw": "某厂商安全设备前台RCE", "https://mp.weixin.qq.com/s/MPco5sdyXA2nG0qBAaU59w": "年度渗透测试报告:AI的漏洞比传统软件严重得多", "https://mp.weixin.qq.com/s/8fRMQKdKux7iyAziVvdEcg": "QEMU曝虚拟机逃逸漏洞,可直接控制底层物理机", "https://mp.weixin.qq.com/s/7ndZ8YzLCEd08ixveIGzbw": "【0day】Windows 提权漏洞喜加一", "https://mp.weixin.qq.com/s/7GhGSC5ybgr9PUyvnlnCsg": "在看 | 周报:中行福建省分行因多项违规被罚;谷歌确认黑客利用AI生成零日漏洞发动攻击", "https://mp.weixin.qq.com/s/DEp-k51JvZ5EccMCqLSoLw": "今日(2026年5月17日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s/qUtLLeLkrzsr3gLnMpq4QQ": "[视频]重磅炸弹,6年前的提权漏洞通杀Windows所有版本", "https://mp.weixin.qq.com/s/M-xCURHnR13DR-jajwYI9Q": "漏洞复现 | 朗速ERP ModuleAjaxApi.ashx 存在SQL注入漏洞", "https://mp.weixin.qq.com/s/5GlfjT4usi_mj5HUA6q2ng": "ssh-keysign-pwn:Linux 内核五月第四起本地提权漏洞", "https://mp.weixin.qq.com/s/ftd74RoeATO1GGBv4B0CMA": "用AI提升macOS漏洞研究:一个开源工具与工作流程", "https://mp.weixin.qq.com/s/2_EOgvrcvSiOzHnhr-Flsg": "AI辅助挖洞翻车现场:Mythos改密码锁机,还邀功\"我拿到RCE了", "https://mp.weixin.qq.com/s/keJR9JUMn5_BEmn8Kcn81Q": "CVE-2025-48804|BitUnlocker 把 BitLocker 的脸打了", "https://mp.weixin.qq.com/s/SOxkTjyetuo5El0WZZ1FKA": "OpenClaw 四漏洞链:24.5万个 AI Agent 服务器暴露在攻击之下", "https://mp.weixin.qq.com/s/Hsdo8b1x8O9Tbk4fIuxOaA": "一次一口吃掉大象:PHP中与JPEG相关的内存安全漏洞", "https://mp.weixin.qq.com/s/-JLMLlpVoEyUnV2jQ_s1Fw": "首个公开的针对苹果M5的macOS内核漏洞利用程序,使用Mythos Preview在五天内完成", "https://mp.weixin.qq.com/s/zfKNvJWRTCgGFWkuEZoLig": "AI 挖洞新思路、深度解析两大间接提示词注入漏洞攻防思路,注入也能获得上万美金", "https://mp.weixin.qq.com/s/KSaJfV_qU6iokXy4v8-jLg": "CVE-2015-1328 Overlayfs内核本地提权复现", "https://mp.weixin.qq.com/s/wxXwtTn6epofgw0Cl-D-gA": "【安全圈】黑客利用 Burst Statistics WordPress 插件认证绕过漏洞发动攻击", "https://mp.weixin.qq.com/s/BUzZBnN07Iqe_zyiDwsvtQ": "【安全圈】黑客利用 Burst Statistics WordPress 插件认证绕过漏洞发动攻击", "https://mp.weixin.qq.com/s/tk2Bz1VBEsflw-I9-lrT2g": "Win 内核 LPE 漏洞 PoC 公开,从 Chrome 沙箱也能提权", "https://mp.weixin.qq.com/s/YTL31y_1azZK7fuTV4W5nw": "2026年度(第一期)CNNVD漏洞奖励评选结果", "https://mp.weixin.qq.com/s/DJ8OR2rRfSzpJ8_8lTr_yQ": "2026年国家信息安全漏洞库核心技术支撑单位公告", "https://mp.weixin.qq.com/s/vYNvls7XXg09gTlLytekfg": "Oracle EBS 漏洞余波仍在扩大,大量企业至今仍遭勒索威胁", "https://mp.weixin.qq.com/s/5mJt3XyxKpWGhTje2Irvow": "漏洞复现 | 东胜物流软件 CrmProxyMailListGridSource.aspx 存在SQL注入漏洞", "https://mp.weixin.qq.com/s/lswrUUyJSS10SznRTasCGg": "一款文件上传漏洞检测工具|支持多种文件上传绕过技术", "https://mp.weixin.qq.com/s/ECIj46YdjbbLRRB0zd8HBQ": "SRC 每日漏洞复现学习系列(第 3 篇)文件上传漏洞 + 漏洞报告模板", "https://mp.weixin.qq.com/s/aJRfMZiWcUiepeqUY5KxPw": "不受限的资源调用漏洞实战", "https://mp.weixin.qq.com/s/fssaYRWZnW5kJrw0kvJnvQ": "上邦 电子文档安全管理系统 skins 任意文件读取漏洞", "https://mp.weixin.qq.com/s/v1WWoUTBqfePcajNAUqQeg": "奇安信Qcode Agents重磅升级,正式解锁操作系统级漏洞挖掘能力", "https://mp.weixin.qq.com/s/hADw9UEwBED_oGvooDT3mw": "Linus点名AI漏洞报告!Linux安全列表已被挤爆", "https://mp.weixin.qq.com/s/zYE9gGRUwXx8UMx1lUCeMQ": "WordPress插件存在严重漏洞,使网站易受身份验证绕过攻击", "https://mp.weixin.qq.com/s/x4FBu3eGX-b6n6D4x7fVmw": "雷神众测漏洞周报2026.5.11-2026.5.17", "https://mp.weixin.qq.com/s/4fZ-_28D-qarIqxinuoRvA": "[代码审计] php 命令执行", "https://mp.weixin.qq.com/s/EDwuXkFectYtZhDOoyKBlQ": "代码审计JAVA源码RCE漏洞记录", "https://mp.weixin.qq.com/s/LduTKXqxtx-CTKh8xnZXNQ": "本该在2020年被修复的Windows提权漏洞,现在竟然还存在", "https://mp.weixin.qq.com/s/lj-5p-64VItwUYb6P-0xzg": "282G教程放送!2026网络安全资料最全合集(从0到挖漏洞、打CTF、就业)", "https://mp.weixin.qq.com/s/tRfaJzYeOKfIXdOXTbQsTQ": "Windows“MiniPlasma”新零日漏洞让攻击者获得系统访问权限——概念验证已发布", "https://mp.weixin.qq.com/s/u6d6fAUs_qncuAnW97-qug": "CVE-2026-34621:Adobe Acrobat 2026 原型污染和 JS 注入链 — 研究 PoC", "https://mp.weixin.qq.com/s/G7XdRy8UaiOizL03dd871A": "AI 黑客时代真的来了:漏洞开始不是人找的,而是模型找的", "https://mp.weixin.qq.com/s/hIkmAKL1EhJ62p_x7QWGhA": "【已复现】Windows 内核权限提升漏洞(CVE-2026-40369)安全风险通告", "https://mp.weixin.qq.com/s/cHkq06N8kdFjOHulTNvh6A": "[漏洞分析] Shiro RememberMe 反序列化深度分析", "https://mp.weixin.qq.com/s/YchTiKWTdScwT3TFTQLRIw": "为什么信任你的漏洞扫描器是个坏主意", "https://mp.weixin.qq.com/s/zXB-QnfKeHc3smC0LrmUwA": "SRC实战 | 某公寓SRC漏洞挖掘记录", "https://mp.weixin.qq.com/s/x97x810gB4_vgAjnpQkKkg": "【漏洞通告】Linux Kernel ptrace 权限提升漏洞", "https://mp.weixin.qq.com/s/cPFGoqPSYXPXiBGY1M42xQ": "MAD Bugs:在 PHP 中寻找并利用一个尘封21年的漏洞", "https://mp.weixin.qq.com/s/8cJk1YUVhOBMEfccBAjV8A": "别再硬磕补丁了!这才是漏洞治理的正确方式", "https://mp.weixin.qq.com/s/Tchc9qprT1ILWbYALF49tg": "CVE-2023-32007漏洞复现及利用", "https://mp.weixin.qq.com/s/Qu1MigaPZ-HMRQEXP-RqKA": "集成数千漏洞攻击模块--全流程渗透测试框架MSF", "https://mp.weixin.qq.com/s/mpjz1CQ5daPOfSgFkSzJUw": "东胜物流软件CrmProxyMailListGridSource.aspx接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s/xCOHPjPHnf3Dvy6V3gUDCg": "CNVD漏洞周报2026年第19期", "https://mp.weixin.qq.com/s/Po35jvbH6lGfLRzwzcuH2w": "上周关注度较高的产品安全漏洞(20260511-20260517)", "https://mp.weixin.qq.com/s/dplQJv-CChbWDGMBrJd60g": "复现Copy Fail漏洞(CVE-2026-31431)没环境?云攻防靶场一键开启,深度还原容器逃逸攻击链", "https://mp.weixin.qq.com/s/9K_-87almBWCRYZrT1JBsg": "【高危漏洞预警】Next.js SSRF漏洞(CVE-2026-44578)", "https://mp.weixin.qq.com/s/OnStDyH9PmjXabAKkE9mig": "精品产品 | 捷普漏洞扫描系统", "https://mp.weixin.qq.com/s/Qpo3OshWc19dGjQoDgib_A": "精品产品 | 捷普WEB应用漏洞扫描系统", "https://mp.weixin.qq.com/s/wYEPDBgnE5_OjbN_-cW5Zg": "Mythos漏洞发现能力强,但验证能力弱", "https://mp.weixin.qq.com/s/Dy2PPFHmGsb5YsR4o2ogzw": "紧急!微软Exchange Server新高危XSS漏洞(CVE-2026-42897)已被利用执行攻击", "https://mp.weixin.qq.com/s/tKvLyt_jnkC1Eds8diBvPw": "【已复现】Windows Cloud Files Mini Filter Driver 权限提升漏洞(CVE-2020-17103)安全风险通告", "https://mp.weixin.qq.com/s/Fb9MWPExnhCGNsTKsScSdg": "小红薯可能存在xss漏洞?", "https://mp.weixin.qq.com/s/vX7Y9OkDp3qTkBah8cWDag": "【文末抽奖】21天跑通海外SRC漏洞挖掘闭环!海外漏洞赏金猎人共学营等你来战~", "https://mp.weixin.qq.com/s/grRRPmFUY6TLDIWEHeJdaA": "美国网络安全和基础设施安全局 (CISA) 警告:微软 Exchange 服务器漏洞已被攻击者利用", "https://mp.weixin.qq.com/s/nwhYMH1xYopMdWIh_qezmA": "学员挖掘母校实战案例+4月湘安漏洞库平台优秀实战案例", "https://mp.weixin.qq.com/s/zcKAch-50vHOZre84ggafw": "改变战局!Cloudflare亲测Mythos,AI漏洞审计进入生产", "https://mp.weixin.qq.com/s/NSFBeJYyoVP3niLc8WH1oQ": "CVE-2026-42945,Nginx高危漏洞 | 可致RCE或服务崩溃", "https://mp.weixin.qq.com/s/VFoGmtQ5fEpAoNpgFOvzCg": "n8n 自动化平台惊现三重漏洞链:低权限即可引爆完整 RCE,攻击面已蔓延至供应链核心节点", "https://mp.weixin.qq.com/s/o53e2E3n_dZqRpU7qxAlKA": "白昼信安内部漏洞知识库开放注册", "https://mp.weixin.qq.com/s/wBAoAh1X5znJrfcT9cHxpg": "漏洞预警 | 天地伟业Easy7 SSRF和文件写入漏洞", "https://mp.weixin.qq.com/s/0zRquuwa7xBhKyOS-owhxw": "【src实战】| 业务逻辑漏洞", "https://mp.weixin.qq.com/s/czQxJ27cnJZtqzyit8IptQ": "在野利用确认!带你吃透Ivanti EPMM最新RCE漏洞(CVE-2026-6973)的底层逻辑", "https://mp.weixin.qq.com/s/jg8kSb4afAnmS3-I1AKrnA": "内卷的风还是吹到了漏洞利用:ExploitGym 全自动漏洞利用Agent评估", "https://mp.weixin.qq.com/s/fTSIdjqJmf_yBB1r991PNA": "漏洞预警 CVSS 8.1 【严重】Exchange Server OWA 在野 0day:一封邮件即可劫持会话", "https://mp.weixin.qq.com/s/pmv8kGL1J7dZbugcEacq7A": "Linux ssh-keysign-pwn漏洞在K8s中的影响", "https://mp.weixin.qq.com/s/ykECLyXm582BOfJvzHVyfA": "CNVD漏洞周报2026年第19期", "https://mp.weixin.qq.com/s/jCFVY_RUw6pC_Krb4mLQTw": "SRC每日漏洞复现学习系列(第4篇)目录遍历 ∕ 任意文件读取漏洞", "https://mp.weixin.qq.com/s/no7Y6bEN9XcFjRg0ps3xFw": "2026-05-19 最新CVE漏洞情报和技术资讯头条", "https://mp.weixin.qq.com/s/ynYiD7N1VJt9yx9Q5waUnw": "首款由AI研发的零日漏洞利用程序", "https://mp.weixin.qq.com/s/oKLDfvFTgK1ML4Sbq4eLCg": "MiniPlasma:可在完全修补的 Windows 系统提权【PoC已公开】", "https://mp.weixin.qq.com/s/Sww5vEo2DJ2pNGvC6LsSjQ": "理解 Windows 内核漏洞利用中的整数溢出", "https://mp.weixin.qq.com/s/DXH2BE4TwIN1WKywjEVoBQ": "漏洞预警 | Apache HTTP Server双重释放漏洞", "https://mp.weixin.qq.com/s/fwDm_XiM1_3kmfP-Z1jKLQ": "XXE到Chrome RCE:一次完整的不出网利用实践", "https://mp.weixin.qq.com/s/4otTvtAaqfQg68V0aaa-_A": "关于小程序逻辑漏洞挖掘测试", "https://mp.weixin.qq.com/s/3UB4UrAb8rtEAkXxAKRZ5g": "微软AI安全新突破:MDASH多模型智能体扫描系统,以AI速度重塑漏洞防御格局", "https://mp.weixin.qq.com/s/H_lFDwkGF2K1v317VRUGnA": "AI金矿分化加剧:高额股权 vs 技能贬值,安全从业者面临新挑战;CNVD漏洞周报2026年第19期| 牛览", "https://mp.weixin.qq.com/s/rQKZQmWL2-HTwtVfTxLjDQ": "DudeSuite 漏洞播报 全网漏洞早知道【20260519】", "https://mp.weixin.qq.com/s/y_SnusnFpjiA9CzVkggI0Q": "针对 Nginx CVE-2026-42945 的 PoC", "https://mp.weixin.qq.com/s/o95KZlzNTYn_6rQ9G5Yt4Q": "CVE-2020-17103 显然未修复或补丁已被撤销,无论如何,这是 cldflt.sys 中 LPE 的 PoC", "https://mp.weixin.qq.com/s/-7uDx2VafYdGH78FtcHRRg": "人工智能重要安全漏洞的通报-OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s/zCdlbywODuqMWspBGBJoVQ": "信息安全漏洞周报(2026年第20期)", "https://mp.weixin.qq.com/s/YmHeEd6It-lED_aMwArdBQ": "【漏洞通告】Windows Cloud Files Mini Filter Driver 本地权限提升漏洞(CVE-2020-17103)", "https://mp.weixin.qq.com/s/KLDxXBL1unCcM7qqFbrtVw": "Nginx 致命漏洞 CVE-2026-42945 复现", "https://mp.weixin.qq.com/s/3dYNnSzYJrMiR7kcZznK4g": "vm2沙箱逃逸满分漏洞?AI有点东西", "https://mp.weixin.qq.com/s/wOkzIx_N9sk8uHEul01z8A": "“百密一疏”:轻量TCP∕IP协议栈 lwIP(Lightweight IP)SMTP客户端堆溢出致RCE", "https://mp.weixin.qq.com/s/7aiu0QKC8mg1wo89Vjjx9A": "WordPress插件严重漏洞使网站面临身份验证绕过攻击风险", "https://mp.weixin.qq.com/s/VyE4DgTqcT4j-m6Vcs_fFg": "【已复现】Next.js 服务器端请求伪造漏洞(CVE-2026-44578)安全风险通告", "https://mp.weixin.qq.com/s/Ana0k_NNjTzTY_j_l188mA": "奇安信Qcode Agents重磅升级,正式解锁操作系统级漏洞挖掘能力", "https://mp.weixin.qq.com/s/G5XOCRU31tojEa7xs2jLuw": "【已复现】PostgreSQL pgcrypto 堆缓冲区溢出漏洞(CVE-2026-2005)安全风险通告", "https://mp.weixin.qq.com/s/pVBvm545PMvDAmHTI8DhCA": "【免费领】智能设备安全技术干货:路由器0day漏洞挖掘指南", "https://mp.weixin.qq.com/s/aZ1nOJoi8X3zOyTTZGp_zQ": "实力上榜!众安天下跻身工信部首批网络产品安全漏洞收集备案平台", "https://mp.weixin.qq.com/s/972ZlHq34AWm4DqnTjNySA": "火山引擎安全专测上线!漏洞多倍积分、情报特殊奖励奉上", "https://mp.weixin.qq.com/s/r0SFHbEEZ_H9uLpr_FgutQ": "人工智能重要漏洞通报(2026年第七期)", "https://mp.weixin.qq.com/s/ECLo6bRHiIQETIjhLYllgQ": "威胁日简报 - AN-OS 远程代码执行漏洞(CVE-2026-0300)已在野利用", "https://mp.weixin.qq.com/s/GmINFY9tJ8IVVluqDqunpg": "Windows“MiniPlasma”零日漏洞可使攻击者获得SYSTEM权限——概念验证代码已发布", "https://mp.weixin.qq.com/s/vHLjBK2608i_L1wzS_U59Q": "Linux 本地提权工具 支持多个Linux 内核和 Polkit 漏洞 | AnolisOS、openEuler、统信UOS、openKylin、Ubuntu、CentOS 7", "https://mp.weixin.qq.com/s/VYZ_p9EW9uq45kxVaPg6ug": "CNNVD | 人工智能重要漏洞通报(2026年第七期)", "https://mp.weixin.qq.com/s/qWBz42_US3OBn5gHP41cTg": "CNNVD | 最新OpenClaw多个安全漏洞通报", "https://mp.weixin.qq.com/s/AOji2g77ggCyiZC6lG1WBQ": "【提权漏洞】MiniPlasma-SYSTEM", "https://mp.weixin.qq.com/s/H_IorauDWKypM7Ec_QLRIA": "ShiroExploit:一款Shiro反序列化漏洞一站式综合测试工具", "https://mp.weixin.qq.com/s/BIQ7soODCMNk8og7roM0iA": "Android Pixel 10 零点击漏洞利用链", "https://mp.weixin.qq.com/s/wVtexuoSbtp2CNoMoGWOew": "加密机制、性能与系统安全的“三体”平衡——Linux内核“Dirty 家族”漏洞三连的总结报告", "https://mp.weixin.qq.com/s/BZPg_sQgv8NxG4Ll-i1jcw": "SRC每日漏洞复现学习系列(第5篇)业务逻辑绕过漏洞", "https://mp.weixin.qq.com/s/9YcQUd1Pnlv8_YNdquxnpg": "数字类型解析绕过IDOR校验漏洞", "https://mp.weixin.qq.com/s/8p4_PDk7TIoQjpl5U4n6lQ": "【SRC实战】|两个小程序之间的越权漏洞", "https://mp.weixin.qq.com/s/H8HpOlnpiDGDmi1LZ2D2XQ": "VS命令执行与防御", "https://mp.weixin.qq.com/s/LKIqXRTyAb6rpNhVHDhPMA": "漏洞预警 | 天地伟业Easy7 SQL注入漏洞", "https://mp.weixin.qq.com/s/QUiMkU6qL9kcIJ4hGTPEHA": "PostgreSQL JDBC Driver RCE(CVE-2022-21724)与任意文件写入漏洞利用与分析", "https://mp.weixin.qq.com/s/zPLuxI--B0ddmYm0Ml8PlQ": "【AI安全】5月攻防全景:从模型漏洞到全栈基建防护", "https://mp.weixin.qq.com/s/Uo58p2CFnfqz8bj-7aZYaA": "漏洞预警 | MiroFish命令注入和路径遍历漏洞", "https://mp.weixin.qq.com/s/pTdl96d4YTMa1ZSjaPPjnQ": "CNNVD通报OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s/15jTRMNNSNdndbJc9gpsKA": "【已复现】Linux Kernel PinTheft 本地权限提升漏洞(QVD-2026-27616)安全风险通告", "https://mp.weixin.qq.com/s/MaYVSLqK_-I_AGqKcn68ag": "用友 NC 系统 IMsgCenterWebService SQL注入漏洞", "https://mp.weixin.qq.com/s/o-LPSYdTDLjADaAAVOGSXg": "渗透测试人员针对毒性漏洞组合的方法", "https://mp.weixin.qq.com/s/Q6_a5pTQZ5b2H3470r-0yw": "漏洞挖掘 | 520也不能忘记挖洞分享啊混蛋", "https://mp.weixin.qq.com/s/VMFea4ZUq2g2QF3EIvITAg": "DirtyDecrypt Linux内核漏洞PoC利用代码公开", "https://mp.weixin.qq.com/s/Xr6uVt8HMc4ShYDHnfn4qg": "安全419|一周国际网安资讯:APT与0Day齐袭 AI代理漏洞显现", "https://mp.weixin.qq.com/s/DsbWaOhcq46zcc2KVlFCtg": "【漏洞通告】Linux Kernel RDS零拷贝双重释放本地权限提升漏洞", "https://mp.weixin.qq.com/s/7MAAQ-I97Donlo72j85t9g": "【漏洞通告】Microsoft Exchange Server OWA跨站脚本漏洞(CVE-2026-42897)", "https://mp.weixin.qq.com/s/xrX1vL9Tp3l1fxd1CoO_RQ": "关注丨通过备案的网络产品安全漏洞收集平台(第1批)", "https://mp.weixin.qq.com/s/qJ6ifu-mjkMjSPpqUCLJEg": "微软发布针对 Windows BitLocker 安全绕过零日漏洞的缓解措施", "https://mp.weixin.qq.com/s/JH8A6DaH_09assgP6H2NBQ": "攻防渗透 | 难得的thinkphp5 rce记录", "https://mp.weixin.qq.com/s/yFVNnq-XYQUnX5imZWdiwQ": "【漏洞通告】Next.js 服务器端请求伪造漏洞(CVE-2026-44578)", "https://mp.weixin.qq.com/s/-6lxWZNaolzOMwBZrfmyaA": "【漏洞通告】n8n多个节点远程代码执行漏洞(CVE-2026-44789∕CVE-2026-44790∕CVE-2026-44791)", "https://mp.weixin.qq.com/s/DJ41Rq86j3Lpyd62ddr1HA": "AI 不是让漏洞变多,而是让漏洞更难藏", "https://mp.weixin.qq.com/s/W70QP-2aV0rSh9dO_qrj8Q": "挖洞实战:顺着“改地址”摸到服务端原型污染,这漏洞藏得太深了", "https://mp.weixin.qq.com/s/avofNuALVcCs7oRoiY_Bgg": "友数聚科技CPAS审计管理系统V4 doDownLoadPicFile接口存在文件读取漏洞 附POC", "https://mp.weixin.qq.com/s/UyawPASH1AlJZfqabG7Huw": "[前沿技术] 智能合约常见漏洞审计", "https://mp.weixin.qq.com/s/RdInbMdvVCWVRwi-2qbaSg": "用友NC DocServlet 任意文件读取漏洞", "https://mp.weixin.qq.com/s/GFKDb7xiTr2qk29Y5bmWBw": "【漏洞通告]Linux Kernel ptrace 权限提升漏洞(QVD-2026-26977)】", "https://mp.weixin.qq.com/s/_glf1D-Kd7fiI_02lych0w": "【Next.js 服务器端请求伪造漏洞(CVE-2026-44578)】", "https://mp.weixin.qq.com/s/MD-uP0L73S0wGu6OvhgE9w": "SRC每日漏洞复现学习系列(第6篇)信息泄露漏洞+ 漏洞报告模板", "https://mp.weixin.qq.com/s/qFXVV3_oZ51SPghQZ9hHVg": "疑似Coruna卷土重来:npm包art-template遭供应链攻击沦为iOS漏洞投送工具", "https://mp.weixin.qq.com/s/l6LQ6Qxt0KEGR6AI3GrATg": "【MyBB Timeline Plugin 跨站脚本漏洞(CVE-2021-47934)】", "https://mp.weixin.qq.com/s/-9Kh_zrePiI8FieRLW2v0g": "一个简单的web复现工具", "https://mp.weixin.qq.com/s/PQc3ALOv1l3U6oAiNVy3sw": "Nginx 最新 1.31.0 版本 又有 0day? 是真正的核弹?", "https://mp.weixin.qq.com/s/r-3Mf7R3nKxg-PqXAfmnDg": "又双叒叕 CVE-2026-46333 Linux 内核潜伏6年漏洞:低权限用户一键窃取 SSH 密钥与 Shadow 密码", "https://mp.weixin.qq.com/s/Jg4C4E4krDlg0bI1VTLMLA": "思科:速修复满分 Secure Workload 未授权 API 访问漏洞", "https://mp.weixin.qq.com/s/kBzkyyZr3KBDc387_7aMAQ": "【Open5GS 缓冲区错误漏洞(CVE-2026-8746)】", "https://mp.weixin.qq.com/s/uIosTtJUGi62K6djAkrbXA": "【Microsoft Exchange Server OWA跨站脚本漏洞(CVE-2026-42897)】", "https://mp.weixin.qq.com/s/IztGmUlkHgnEjufgPSigwQ": "AI 武器化里程碑:Google 首次确认攻击者用 AI 生成零日漏洞利用代码", "https://mp.weixin.qq.com/s/8xlCzSJIuZipUfZkLM2tRg": "vm2 沙箱库惊曝\"12连杀\":三个满分漏洞掀起腥风血雨", "https://mp.weixin.qq.com/s/KREBr3NjeQ_OQZu_pyhQBw": "疑似 Nginx 新 0day RCE,无补丁,无上下文", "https://mp.weixin.qq.com/s/rSFhf-j9vEcZrUuMPqPfuQ": "平均每个漏洞约1万美元:DARPA 又发奖金", "https://mp.weixin.qq.com/s/btnA8llcm9oHLJ52WxLG1w": "无条件前台RCE ?影响最新版本 Nginx 漏洞!", "https://mp.weixin.qq.com/s/s9hDc0HgZFDW_hxQSmUVSA": "Next.js 服务器端请求伪造漏洞 | CVE-2026-44578复现&研究", "https://mp.weixin.qq.com/s/nkDKEFApysP_kNEa90pW3g": "初中学历、早年辍学,凭什么能霸榜 SRC,靠挖漏洞开上 BBA?", "https://mp.weixin.qq.com/s/yN0FKhITnBCTwZj0dbRsyA": "【漏洞通告】Linux Kernel PinTheft 权限提升漏洞", "https://mp.weixin.qq.com/s/9lTmEDWuciP536ZOn_lSAA": "黑客利用 CVE-2026-26980 攻陷 Ghost CMS,大量站点沦为 ClickFix 攻击帮凶", "https://mp.weixin.qq.com/s/IFFeSo41KUSeOHRKk6n1MA": "Nginx 最新0day", "https://mp.weixin.qq.com/s/CrdpvVzNKTNRj-1Y0r5RWA": "奇安信蝉联国家信息安全漏洞库CNNVD最高等级技术支撑单位", "https://mp.weixin.qq.com/s/e-6ptPnBm28L0jT4Ll7qAA": "什么??还有人不会AI漏洞挖掘", "https://mp.weixin.qq.com/s/HvTph9ylwEIFCFcVbgNxuw": "【重磅深度】2026威瑞森DBIR安全报告解析:漏洞利用首超凭证窃取,影子AI成为最大内部威胁!", "https://mp.weixin.qq.com/s/rdsK-2f8_bZiY2Kqcs2JUA": "Gitea存在敏感信息泄露漏洞(用户名枚举) 附POC", "https://mp.weixin.qq.com/s/ix43LSr6BnMQNN5pqX4OfQ": "Cisco 安全工作负载中的关键漏洞威胁企业 API 安全", "https://mp.weixin.qq.com/s/zR6hzGnnLan76IIw6AQa8g": "1day CVE-2026-5118 Divi 表单构建器 <= 5.1.2 | 通过角色注入进行未经身份验证的权限提升", "https://mp.weixin.qq.com/s/70EqPfIriYX_z36CvaplOQ": "顶级大厂也成“草台班子”?谷歌误将未修复漏洞公之于众,数百万浏览器面临劫持风险", "https://mp.weixin.qq.com/s/WAmdll1HwytOICUo5iILWA": "SmartBi后台远程代码执行漏洞简单分析", "https://mp.weixin.qq.com/s/0aU9fIxjJLzIBESNPv5z8Q": "Android Pixel 10 零点击漏洞利用链", "https://mp.weixin.qq.com/s/WIXEfyxPSfttZoR9cYGX_w": "Apache Flink 高危漏洞可导致远程代码执行攻击", "https://mp.weixin.qq.com/s/-T4cC7Vx3yeYvifFaDmFIg": "Linux 本地提权工具 支持多个Linux 内核和 Polkit 漏洞 | AnolisOS、openEuler、统信UOS、openKylin、Ubuntu、CentOS 7", "https://mp.weixin.qq.com/s/s4mWHy1z-130O-cr_EXGWw": "潜伏九年的Linux内核漏洞可致攻击者窃取SSH私钥", "https://mp.weixin.qq.com/s/83xZJO4QVgNHKZ7I8PccDg": "【高危漏洞预警】Drupal Core PostgreSQL数据库抽象API SQL注入漏洞CVE-2026-9082", "https://mp.weixin.qq.com/s/qjHb8IDzobpN3s05UdrOYw": "【漏洞预警】 cPanel∕WP2 高危任意文件读取CVE-2026-29205", "https://mp.weixin.qq.com/s/a9veyIqOekhg4g-aTZYkgg": "漏洞报告泛滥!ProjectDiscovery发布Triage自动验证漏洞", "https://mp.weixin.qq.com/s/hncIeoim1rJ3szto2eFcVg": "Cisco修复CVSS 10.0严重漏洞,影响Secure Workload", "https://mp.weixin.qq.com/s/PxrCxZMixYE0EXgoGaQy6w": "CVSS 10.0 【严重】CVE-2026-45829 ChromaDB 爆出未授权 RCE:ChromaToast 横扫 AI 基础设施", "https://mp.weixin.qq.com/s/6wzPutc6oLROtttQJBsSvA": "【漏洞通告】FreeBSD setcred(2) 栈缓冲区溢出漏洞(CVE-2026-45250)", "https://mp.weixin.qq.com/s/yQhU6JcXX6NLGVx7X9pfGg": "安全圈的狼来了:那些\"高危\"漏洞为何最终用不上", "https://mp.weixin.qq.com/s/8EmKtZsBbKTpkeE4OWZmyw": "StubZero:谷歌云生产环境中的RCE漏洞", "https://mp.weixin.qq.com/s/Te8I6NOLjSfa7p1rPc15wA": "一周安全回顾:AI推动漏洞攻防失衡,国际大厂频遭供应链投毒", "https://mp.weixin.qq.com/s/HslC1JtRrrHdsPuu48achw": "cPanel&WHM高危任意文件读取漏洞(CVE‑2026‑29205)", "https://mp.weixin.qq.com/s/WbVDivZkzkQUdncwApaozg": "[SRC]漏洞显现", "https://mp.weixin.qq.com/s/ZQwt43XOwi5RVr9VUa_oFA": "SRC 每日漏洞复现学习系列(第 8 篇):反射型 XSS 漏洞详解与报告模板", "https://mp.weixin.qq.com/s/js1AYhWtrLBCmo7CJGADKw": "GitHub 4000个私有仓库被窃取;Claude Code深度链接解析漏洞可被武器化 | FreeBuf周报", "https://mp.weixin.qq.com/s/z4wthxePisDjY6eYFtHmZg": "Chrome安全漏洞或使攻击者能够远程执行代码", "https://mp.weixin.qq.com/s/mzawD-_crDMa0Awmk-i8eQ": "Microsoft Defender零日漏洞已在野外遭积极利用", "https://mp.weixin.qq.com/s/8HV7g9Os5K8mSy96YrYufg": "【安全圈】趋势科技警告称,Apex One 零日漏洞已被利用", "https://mp.weixin.qq.com/s/BNz1GsAIqR8lxl6vHtjW9w": "PLC逻辑代码漏洞的严重性及隐蔽性分析", "https://mp.weixin.qq.com/s/MI13YFhgSKTDnU9Mutc_Tw": "异步投毒、fork触发的赏金杀招:服务端原型污染RCE拆解", "https://mp.weixin.qq.com/s/2vlzln_L0sEBs-sH66rzSw": "Claude Mythos Preview首月发现超万个0Day漏洞", "https://mp.weixin.qq.com/s/OcmRLBdXEMh0Js1TEa3cHA": "CVSS 9.1 【严重】CVE-2026-46376 FreePBX userman 模块硬编码凭证漏洞:企业电话系统门户全网裸奔", "https://mp.weixin.qq.com/s/-X-mwyVc108HBSOsZwM0Dw": "BYOVD攻击面从漏洞驱动到合法证书的范式转移", "https://mp.weixin.qq.com/s/YiDOhYU80igYUju5gNKD5A": "邮箱密码重置流程的IDOR漏洞", "https://mp.weixin.qq.com/s/_V98j54Vts2evnV-5HU3wQ": "CVE-2026-9082:Drupal的高危SQL注入漏洞已遭活跃攻击", "https://mp.weixin.qq.com/s/JCk4EoK4E2wkt-h2yKgEkQ": "我算了三遍才敢信:Anthropic让AI当黑客,首月1万漏洞修比找更难", "https://mp.weixin.qq.com/s/3MfkVTRU-hoPeihidpROJg": "不用迷信Mythos ,开源AI以更低的成本发现漏洞", "https://mp.weixin.qq.com/s/H26-1SAykG70kUoHHtW1Iw": "Google意外公开未修复Chromium漏洞PoC:你的浏览器可能正在被黑客\"征兵\"", "https://mp.weixin.qq.com/s/A7CbMz5UNGW-hX94qeZ6yA": "Nginx-poolslip 漏洞可导致拒绝服务攻击和代码执行攻击——立即修复!", "https://mp.weixin.qq.com/s/RXkL8sIL15oX-xjS2pHUNw": "StubZero:在 Google Cloud 生产环境中造成 148,337 美元的远程代码执行损失", "https://mp.weixin.qq.com/s/98KYAIFyMCgIAdKj_Olffw": "万级漏洞AI:Anthropic秘密\"Mythos\"模型如何重塑网络韧性", "https://mp.weixin.qq.com/s/eu4KQdjSpJiiQ5vENQ2DZg": "JeecgBoot 指纹与漏洞利用工具", "https://mp.weixin.qq.com/s/0GlPMBMGt7tshTQ4h7JvKA": "OneScan_Expand 1.1.4 更新:Java 21、SQLite 持久化与数据看板重构", "https://mp.weixin.qq.com/s/tfUh6yci2Nuvj_fxUESK5Q": "CVSS 9.8 【严重】CVE-2026-6279 wordpress Avada Builder 未授权RCE漏洞:call_user_func 无过滤直接沦陷", "https://mp.weixin.qq.com/s/7g8KLLciQqZujzGCczy_Nw": "赏金实战|从修改地址到远程代码执行,服务端原型链污染的威力有多可怕?", "https://mp.weixin.qq.com/s/--YqoyfqPOxN6HI3Mkt4yA": "AI渗透的拐点已至?我是如何通过AI纯黑盒挖到通用产品的9.8分RCE 0day漏洞", "https://mp.weixin.qq.com/s/6UVjSi2W_Vj-JDUbqfKLOg": "【通知】华住SRC暂停漏洞测试公告", "https://mp.weixin.qq.com/s/b3jAOox4jV1G9NQ2TgiGEQ": "StubZero:Google Cloud生产环境RCE漏洞,奖金148,337美元", "https://mp.weixin.qq.com/s/C2S4iw7AjvibVhJFHR0-BA": "厦门四信通信 水利信息化平台 index.do 存在SQL注入漏洞", "https://mp.weixin.qq.com/s/-5o6a5aRPaoPVgoGHrMZ6g": "dddd改版:更聪明的资产发现&漏洞扫描工具", "https://mp.weixin.qq.com/s/yFpua0TG3FhLkcVMWc9YHg": "LiteSpeed cPanel 插件漏洞 CVE-2026-48172 遭利用,可获取 root 权限执行脚本", "https://mp.weixin.qq.com/s/IItltbbMPC9tEu01fw6Wfg": "Apache Tomcat Tribes EncryptInterceptor 加密绕过反序列化漏洞分析(CVE-2026-34486)", "https://mp.weixin.qq.com/s/0sR9rFg9YThUWiuHEEIBwg": "漏洞预警 | 天地伟业Easy7 SQL注入漏洞", "https://mp.weixin.qq.com/s/mVAPxYLBauokKWrYUe-o5g": "key泄露利用:高危漏洞一条龙漏洞利用工具", "https://mp.weixin.qq.com/s/sQiHk__-XZoZ06PcyKPBAA": "并发逻辑漏洞靶场案例", "https://mp.weixin.qq.com/s/4WDDPxwlyAnK1-q4pb-Vfw": "漏洞通胀时代:产品安全的三层破局架构思考", "https://mp.weixin.qq.com/s/Bi3Ye6Fd1RqC5gK9xUxyVQ": "0166.从失败到获得 32,000 美元:我的漏洞赏金之旅", "https://mp.weixin.qq.com/s/RpBBkWt-hF5fLf9X-lskAQ": "漏洞预警 | NGINX堆缓冲区溢出漏洞", "https://mp.weixin.qq.com/s/jnQuP2MjYgPa9ZNphKu-Ag": "Mythos挖出上万漏洞,AI正在把网络安全“核爆”提前", "https://mp.weixin.qq.com/s/HOKlBmtIUWfZhZNw_yUQCw": "发现超10000个高危和严重漏洞:Anthropic“玻璃之翼”项目揭示AI网络安全新挑战", "https://mp.weixin.qq.com/s/GYgXnxporQqrmqmmWUqHJQ": "我是如何找到攻击链并获得 CVE-2026-42558 的?", "https://mp.weixin.qq.com/s/f0zo1uc14oy3OtefuAq73g": "【组合拳】某币币期权多语言交易所前台任意文件上传漏洞", "https://mp.weixin.qq.com/s/IbZczLPZUCW2yCWqIsGkNg": "CrewAI-Studio 未授权 RCE:从 JSON 导入到 eval 的任意代码执行", "https://mp.weixin.qq.com/s/1w9d6GAhWw71VLoGsIxt1g": "AI带来的影响初现:互联网漏洞赏金大幅下降", "https://mp.weixin.qq.com/s/tlgsNLVwzYkvhSu7nM1LfQ": "某健康教育平台 ASP.NET前台RCE代码审计", "https://mp.weixin.qq.com/s/aFZ-8EA1crEWGlU3RbeAqA": "组件漏洞学习特辑一 | Bash Shellshock(CVE-2014-6271)漏洞复现全解", "https://mp.weixin.qq.com/s/KRiMF2UI7p4_Iw-1zIpKYw": "CNVD漏洞周报2026年第20期", "https://mp.weixin.qq.com/s/wGRVggdfNW1XsC8tpIhYNw": "Google 42个月未修复的Chromium漏洞被公开 可劫持浏览器变\"僵尸节点\"", "https://mp.weixin.qq.com/s/eJ5WgkGQNN0FyOy1SzB1Bg": "NGINX 爆出堆溢出高危漏洞,可致 RCE!我们开源了一款自查工具", "https://mp.weixin.qq.com/s/o25SNu3ZMUfrNhmt4kv-gw": "上周关注度较高的产品安全漏洞(20260518-20260524)", "https://mp.weixin.qq.com/s/Jov7e07RwiZBFWBuAYZiPA": "发现超10000个高危和严重漏洞:Anthropic“玻璃之翼”项目揭示AI网络安全新挑战", "https://mp.weixin.qq.com/s/g0Ma3QYcTfuRBxLwo4ychw": "安卓安全神器ASec!一站式搞定情报、漏洞、测绘全需求", "https://mp.weixin.qq.com/s/Gm1UiD2N6DqGS0TTtfRomg": "IBM API Connect高危漏洞可使攻击者绕过身份验证", "https://mp.weixin.qq.com/s/zpnghPzPonNtBvLa9oNC_Q": "实战机会难得,在校师生均可参战——常态化漏洞挖掘演习(2026.1.4-2026.5.30)", "https://mp.weixin.qq.com/s/aveuqep0zo9hawdBAQHvVQ": "【接口漏洞第二章第二节】漏洞挖掘手记:一个修改请求,让我拿到了系统的“后门钥匙”", "https://mp.weixin.qq.com/s/z8bYfdG3XZQwZgJOhkPerw": "漏洞复现 | 金蝶EAS autoLogin.jsp 远程代码执行漏洞", "https://mp.weixin.qq.com/s/e4607O2y1ZwcmAaBYJScHg": "安卓安全神器ASec!一站式搞定情报、漏洞、测绘全需求", "https://mp.weixin.qq.com/s/Tl9xu9lWIEPEeQ3KrigFHw": "深度分析MangoBleed(CVE-2025-14847)附利用工具", "https://mp.weixin.qq.com/s/j8uaJfcblrQuFZBYUJY1mg": "全球超万台Fortinet防火墙仍受5年前MFA绕过漏洞威胁", "https://mp.weixin.qq.com/s/cCPRWXx2UcrcQhrScZ2ZUw": "漏洞挖掘|多个海外SRC产商2FA绕过实战", "https://mp.weixin.qq.com/s/8JS9bteh6oEQrSFvt0uR0g": "Hikvision综合漏洞利用工具", "https://mp.weixin.qq.com/s/yZTL3I_-r9Fhtso-XK_Qig": "MongoBleed漏洞影响持续扩大,中美成受攻击最严重国家", "https://mp.weixin.qq.com/s/VXIGFjbMs9YcIrPJLforXw": "【一周安全资讯0103】国家网络身份认证公共服务6项公共安全行业标准获批发布;NutsBot新型僵尸网络利用React2Shell漏洞传播", "https://mp.weixin.qq.com/s/jZro7jverYgKLtOE6ocOZQ": "浅析 CVE-2025-68645 Zimbra 属性覆盖导致本地文件包含漏洞", "https://mp.weixin.qq.com/s/lghOmAXOPZJtWEFhWtWSNQ": "天地伟业Easy7漏洞-浅析", "https://mp.weixin.qq.com/s/O5LRog33jhcuj-OY1uLbzw": "Fastadmin框架任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s/jsRwecy0R7tPPMCMcPLXMA": "DNSLOG、HTTPLOG无回显漏洞测试辅助平台 | 辅助渗透测试过程中无回显漏洞及SSRF等漏洞的验证和利用", "https://mp.weixin.qq.com/s/sURiFV-Fmua1b-7WqQ-mWA": "【接口漏洞第二章第一节】API漏洞狩猎第一步:如何顺藤摸瓜挖出隐藏的接口文档", "https://mp.weixin.qq.com/s/1swWIukYF1Hdbo-CSst7Tw": "基于汽车领域 TARA 的有效漏洞优先级排序", "https://mp.weixin.qq.com/s/v45H9Cad1darbQzMb4RU8Q": "漏洞挖掘|多个海外SRC产商2FA绕过实战", "https://mp.weixin.qq.com/s/rZZpG01efrqpD00WwutVJA": "全球首例!AI智能体自主发现满级评分RCE漏洞", "https://mp.weixin.qq.com/s/Gt792Ha2HjmcYj6ZEOxglw": "GNU Wget2曝高危漏洞", "https://mp.weixin.qq.com/s/3edLG7d6FTvicqfZPR4R7w": "漏洞与补丁管理|安全运维的基础防线", "https://mp.weixin.qq.com/s/i7YqLR4-8q3EhdSiqqTfPA": "Redis 漏洞图形化利用工具", "https://mp.weixin.qq.com/s/UH-SWSyibPtbu1UxhJUAhA": "2025年十大野外利用的高危漏洞", "https://mp.weixin.qq.com/s/d0vSDbnRrU938VURdLc5lw": "Apache StreamPipes曝高危漏洞:攻击者可夺取管理员控制权限", "https://mp.weixin.qq.com/s/PbaKQWNFdhKeXnsfWcWSMA": "威胁分子操纵大语言模型实现漏洞利用自动化", "https://mp.weixin.qq.com/s/mYOck5OaLUw29JudWY4FHA": "Apache NuttX曝内存损坏漏洞(CVE-2025-48769)", "https://mp.weixin.qq.com/s/vj-RjyoEQw6TEO7yKUxZVw": "实战 XSS 漏洞靶场:50+真实场景 + 附赠万级 XSS Payload 库", "https://mp.weixin.qq.com/s/gB0xw_DrfNOI9jf-CgIx7A": "登录框漏洞checklist(一)", "https://mp.weixin.qq.com/s/tuoxUVBGzoCOQVJcLkuhiA": "好靶场存在逻辑漏洞-导致评论区消失且用户无法评论", "https://mp.weixin.qq.com/s/pQ_H9-Qbyl4eYosYgt8ygw": "登录框漏洞checklist(二)", "https://mp.weixin.qq.com/s/yTPehTfk1ufv3RXq6gh1mA": "我用 Claude Code 造了一个代码审计 Skill,它在 20 万行项目中找到了 63 个漏洞", "https://mp.weixin.qq.com/s/8w-sh6WbCYVyeePnLq_Mng": "【SRC实战】SSRF漏洞挖掘实战", "https://mp.weixin.qq.com/s/RbAP7-w9hbVcWGgGLzqCRg": "【神器合集】漏洞挖掘效率狂飙!15款BurpSuite必装插件+工具链,告别无效扫扫扫!", "https://mp.weixin.qq.com/s/0x0JVrzHPLQgusWrZACx4w": "短信验证码高危漏洞案例,不容错过!", "https://mp.weixin.qq.com/s/637OW107MRrxMXAJ43RLNg": "某安全厂商DLL侧载漏洞", "https://mp.weixin.qq.com/s/aJbx0LDLyVkg6K3Hyhllsg": "Wechat for Linux 最新RCE漏洞成功复现", "https://mp.weixin.qq.com/s/jeGUP4XOg6ROx_tnGz9Ikg": "0128.CVE-2025-68613 — n8n 工作流自动化平台中的已认证远程代码执行 (RCE) 漏洞", "https://mp.weixin.qq.com/s/frG_iQeMOZsBeqalAwlN8A": "微信 linux最新版 1click RCE 已复现", "https://mp.weixin.qq.com/s/HcHuxvYb1sZjFNJNAfyLtA": "【已复现】微信 Linux 版 1-Click 命令注入漏洞", "https://mp.weixin.qq.com/s/e1g_KQBU5iOFgRbyg1C94w": "【已复现】微信linux最新版RCE", "https://mp.weixin.qq.com/s/CFVx_yQjr4x4oWzR_DLdmQ": "smartbi token回调获取登录凭证漏洞", "https://mp.weixin.qq.com/s/e-6rnzIMkEGA5wB8VmW_vw": "【靶场限免】【WeCh*t同款】文件上传导致的RCE", "https://mp.weixin.qq.com/s/JFeDjEOQ1LSlHlL4B7N7Vw": "大华ICC智能物联管理平台 file_download 任意文件读取漏洞", "https://mp.weixin.qq.com/s/DoVlmVsTTbEaHV6R66o86w": "9.8分!Oracle被黑客打穿,这波免密RCE实战复盘你必须看", "https://mp.weixin.qq.com/s/bmQ0Q8-WFGZOQEmzHXhBEg": "三项荣誉!360漏洞挖掘智能体登顶华为终端安全贡献榜", "https://mp.weixin.qq.com/s/7hzVtugy9T03RtVG8Qdazw": "AI赋能挖掘&&某edusrc小程序任意用户登录漏洞", "https://mp.weixin.qq.com/s/IICgVSFIHB0ULc0sOK5Upw": "豆包任务模式=无限肉鸡?豆包提示词RCE", "https://mp.weixin.qq.com/s/fZAvg0yrYkK4_-4RjepM9w": "一图读懂《2025年漏洞趋势分析报告》", "https://mp.weixin.qq.com/s/OcaZ66Ej9Te8hc6GpDGLdw": "漏洞预警 | Samba远程代码执行漏洞", "https://mp.weixin.qq.com/s/wq-qDuh26GjuvkTai8PJdg": "最新版Shiro反序列化漏洞综合利用工具 ShiroAttack2 v5.1.1 | 功能依旧强大!", "https://mp.weixin.qq.com/s/IpBDoYRxzuvmcayvmt_maw": "OpenBSD 修复已存在27年的 PPP 协议栈认证绕过漏洞", "https://mp.weixin.qq.com/s/whSHR1tk7HAiRhYDLK7zbg": "Cisco SD-WAN vManage 漏洞遭零日攻击利用", "https://mp.weixin.qq.com/s/lS-ugJSUlHDxQ5-vv2EXaw": "ThrottleStop.sys 驱动漏洞(CVE-2025-7771):BYOVD 技术实现 Windows Ring 0 权限提升", "https://mp.weixin.qq.com/s/5P5budjZGK-CwFf3xXZ9Mg": "LiteLLM漏洞链可致AI网关遭接管,泄露所有密钥与数据", "https://mp.weixin.qq.com/s/hvqG9qGXuHmpyM9Hc6uI3A": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/5H7HMBSY-ZM5DKyjOq-ljA": "微软365 Copilot致命漏洞:点击一次链接即可窃取企业数据", "https://mp.weixin.qq.com/s/iX69qfSFg_bfhMawoEigvw": "MongoDB服务器漏洞浪潮冲击文档数据库", "https://mp.weixin.qq.com/s/GDj-DDcJ-rGcECRBI_9CPQ": "LiteLLM漏洞链:低权限用户即可接管AI网关服务器", "https://mp.weixin.qq.com/s/QgsEnMqTLCsBy8RhX4Z84Q": "思科SD-WAN vManage漏洞遭0Day攻击,可提权至root", "https://mp.weixin.qq.com/s/ie-qH_iMvOmkWYFAEVQdSw": "某2026最新去水印小程序文件上传漏洞组合拳", "https://mp.weixin.qq.com/s/ZeYgY-t6ofjYWvb9meP90Q": "6∕17直播预约 | 手把手教你搭建IoT漏洞挖掘智能体", "https://mp.weixin.qq.com/s/bG3ew5OVTzWmbj8LY9S5UA": "Binary Jiu-Jitsu:一个用道带系统学二进制漏洞利用的神奇网站", "https://mp.weixin.qq.com/s/bE-oEjyn7ClTTNVPeol5bw": "红队自动化企业敏感信息泄露搜集快速修复漏洞点", "https://mp.weixin.qq.com/s/ysOd9B5hIOZZU4xMoZ0Cpw": "LiteSpeed cPanel 插件零日漏洞已被恶意利用", "https://mp.weixin.qq.com/s/01hMsKyTr85ScbP-AQXiTw": "东胜物流软件 YJCX.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s/ZLTNBASyG3jKt3hLG5iThA": "折扣逻辑漏洞", "https://mp.weixin.qq.com/s/YZqOV6X5l-RJw28T564VpA": "别再混淆了!MySQL 恶意服务器读文件与 JDBC 反序列化漏洞全解析", "https://mp.weixin.qq.com/s/JOGwAezjHmAB0hyI7kYPsw": "Cisco SD-WAN 管理器又曝已遭利用漏洞:真正危险的,是管理平面被盯上了", "https://mp.weixin.qq.com/s/UBDrk6z-pRWVwmMN7hCuBQ": "【高危漏洞预警】Oracle PeopleSoft 零日漏洞CVE-2026-35273", "https://mp.weixin.qq.com/s/rd9AN4jERTTy7Gok01YGZQ": "Kernel 新漏洞曝光!多款主流 Linux 发行版存在 Root 本地提权风险", "https://mp.weixin.qq.com/s/X69jKHzCpTmMykqPkbnE0g": "2026上半年你需要关注的高危漏洞合集!", "https://mp.weixin.qq.com/s/JXvEPZoY0YUHeJDMIwiKOA": "一个CRLF注入漏洞,竟能够进行密码重置邮件的操作?", "https://mp.weixin.qq.com/s/d_K08FHmoCsLsNSJQ78nZA": "世界杯官方赛事系统曝漏洞:电视直播流未设置权限,可被任意查看篡改", "https://mp.weixin.qq.com/s/FWZmcFiKSRmFRrqNfWatlg": "美国网络安全和基础设施安全局 (CISA) 发布警报,称 Oracle PeopleSoft 漏洞已被勒索软件组织利用", "https://mp.weixin.qq.com/s/zYfBVcxPBsiTW0kW3i1p-Q": "直播预约|2026 火山引擎 Force 数据智能论坛 全新升级+核心能力抢先看", "https://mp.weixin.qq.com/s/dz8Flgs4YnTj78ZFC3PgWQ": "2026攻防演练必修高危漏洞集合(1.0版)", "https://mp.weixin.qq.com/s/1F_VKdktObwmbE8hlinRrA": "【漏洞通告】Splunk Enterprise 预认证远程代码执行漏洞(CVE-2026-20253)", "https://mp.weixin.qq.com/s/l2bYHN6IOwbh9PqP_q7Afg": "CNNVD | 新一批OpenClaw多个安全漏洞通报", "https://mp.weixin.qq.com/s/kxS_P0elGBsZtXYGnf4qKQ": "Google紧急发布Chrome安全更新,修复可致任意代码执行的关键漏洞", "https://mp.weixin.qq.com/s/wgnYYjGmHUnkJcV7IEafvA": "NVIDIA NeMo曝安全漏洞,系统面临命令注入攻击风险", "https://mp.weixin.qq.com/s/Y7x2um1kBIPiLAPD75Y_Cw": "攻击者正利用FortiSandbox三大漏洞发起攻击,未认证即可获取root权限", "https://mp.weixin.qq.com/s/gLNs9uh7SR1DR70_qEsc4A": "安全审计 Agent 不能只要“报漏洞”,而要证明漏洞", "https://mp.weixin.qq.com/s/lfF4dYWFoKIjl9ayOWBxVA": "一键即破防:M365 Copilot \"SearchLeak\" 漏洞链全解析(CVE-2026-42824)", "https://mp.weixin.qq.com/s/PSwbuuwm-Z1HJ3DTVoqLPA": "我用AI挖了隐藏N年的组合拳漏洞", "https://mp.weixin.qq.com/s/olHCQtG-TdKbjESZyf9rOA": "我用AI挖了隐藏N年的组合拳漏洞", "https://mp.weixin.qq.com/s/RUMEdzHbmk5uAOIkBqQ0LQ": "【漏洞通告】Linux Kernel net_sched act_pedit本地提权漏洞(CVE-2026-46331)", "https://mp.weixin.qq.com/s/r_n49od3-Ts09Fcn0m6Geg": "大蚂蚁 (BigAnt) 即时通讯系统 admin∕secret∕edit SQL注入漏洞", "https://mp.weixin.qq.com/s/sOwonojWvAkFVxdpa9UZsA": "【已复现】Linux Kernel net∕sched act_pedit 本地权限提升漏洞(CVE-2026-46331)安全风险通告", "https://mp.weixin.qq.com/s/JYUMtjUJlhjnOHhjA0URAQ": "我用AI挖了隐藏N年的组合拳漏洞", "https://mp.weixin.qq.com/s/ijLCWBvroVkvtC_X0cdspg": "Apache CXF XXE 外部实体解析漏洞 | CVE-2026-49875复现&研究", "https://mp.weixin.qq.com/s/Hex9ZslEKqdJJ8OBX0IwbQ": "别光查漏洞,换个思路,用 PHP 扩展留后门", "https://mp.weixin.qq.com/s/Cag8qF35yy-xVpshAfeW6A": "【高危漏洞预警】Linux Kernel net∕sched act_pedit本地权限提升漏洞CVE-2026-46331", "https://mp.weixin.qq.com/s/C-g4nMzVf2INSkT6BpJJhA": "FIFA世界杯流媒体后台被曝高危漏洞:公开注册账号即可访问核心直播配置", "https://mp.weixin.qq.com/s/YgGx-09myu2b4vQnuG_WSA": "【漏洞解析】CVE-2026-0257:PAN-OS 身份认证绕过,附最新 IoC 与排查指南", "https://mp.weixin.qq.com/s/1YfCjSq_uRz2eMBiQHq4Aw": "Jinja2 SSTI 漏洞扫描器 -- ssti-scanner", "https://mp.weixin.qq.com/s/tj099pgcLF3C9rKU7bqOqQ": "人工智能重要漏洞通报(2026年第九期)", "https://mp.weixin.qq.com/s/caITBmrfVxpWE3G_GjfNpA": "SSRF漏洞点", "https://mp.weixin.qq.com/s/nJbwF30J-YMO10SOGBgZFw": "智跃人力资源管理系统 zyconfig.txt 敏感信息泄露漏洞", "https://mp.weixin.qq.com/s/cI8hITdDNsIsXC8Zx4H-9g": "DragonForce 潜伏在微软 Teams 内部,长达两个月无人察觉", "https://mp.weixin.qq.com/s/2Ok5UY11i2mLv1PA9xaE4g": "Anthropic海外管制关不上AI造漏洞“魔盒”,人人都需要“零日雷达”", "https://mp.weixin.qq.com/s/uQ28M_q4MzfmqSF9J0XcAA": "Zyxel 修复 GS1900 交换机中的栈缓冲区溢出漏洞(CVE-2026-7273)", "https://mp.weixin.qq.com/s/8DRJdSmNRz_1Rn-VxF8jqQ": "存在漏洞的 PackageKit 使攻击者能够获得 root 权限", "https://mp.weixin.qq.com/s/EtfYkJP6a_I7PIou7JBz5g": "微软确认存在 RoguePlanet Defender 零日漏洞,称修复补丁正在开发中", "https://mp.weixin.qq.com/s/Qfro7jebi3jp4hdO3mm74A": "【已复现】漏洞通告 | Linux Kernel net∕sched act_pedit 本地权限提升漏洞(CVE-2026-46331)", "https://mp.weixin.qq.com/s/hoQIpeIG7tGKmMWRRwUWbg": "CNNVD | 人工智能重要漏洞通报(2026年第九期)", "https://mp.weixin.qq.com/s/H-Z2RAieW4DN7Pt183bkig": "【论文速读】| 守护代码理解:检测代码语言模型中的自然后门漏洞", "https://mp.weixin.qq.com/s/I6ZE9r1ClwI2_CQvVYE5mA": "【成功复现】Gitea未授权信息泄露漏洞(CVE-2026-27771)", "https://mp.weixin.qq.com/s/fIKUI1cihccTAAZabrv-Pw": "高危Chrome漏洞可导致攻击者执行任意代码,无需点击即可中招", "https://mp.weixin.qq.com/s/H8kFhVqIZi_zq-XyVi4rbw": "Splunk AI Toolkit曝高危漏洞:CVSS 9.1,可远程执行任意系统命令", "https://mp.weixin.qq.com/s/0ScVykFvzJnw9Y9WkjQXcQ": "逻辑漏洞之登录模块18种利用方法", "https://mp.weixin.qq.com/s/ZIlyS54lU2bUWaB3Y_Yo3Q": "【漏洞预警】大华智慧园区综合管理平台未授权访问漏洞", "https://mp.weixin.qq.com/s/1NCfwykzgi0z8KRbFDNM4A": "【安全圈】微软 Copilot 被曝高危漏洞:点击一个链接,验证码、邮件全泄露", "https://mp.weixin.qq.com/s/yhVN8zvrlS75Jeypo6m4ow": "伯克利上线「AI漏洞发现排行榜」,这家中国实验室冲到第一?", "https://mp.weixin.qq.com/s/X9xlliFeMxd90MnrNmZvrg": "SearchLeak漏洞:微软365 Copilot如何沦为一键数据窃取工具", "https://mp.weixin.qq.com/s/Hgfm7oDEFsFjLfU-XDdLBg": "2026年漏洞预测:AI推动CVE数量激增至6.6万", "https://mp.weixin.qq.com/s/rNx3yX6gGluZl3kS4J-T5g": "天地伟业Easy7 queryDataByTypeEx接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s/z1yssac_jL8kNwx3uSzSCw": "从源代码到漏洞清单,全程零人工干预-未来已来", "https://mp.weixin.qq.com/s/EX0iX63qfAkdEzvyQ-ta7g": "中危变高危,赏金翻3倍:我用AI改写漏洞报告的话术模板全公开", "https://mp.weixin.qq.com/s/CibPYDSRuZfV1GQRo4kClw": "安全热点周报:Oracle 缓解了 PeopleSoft 零日漏洞在数据窃取攻击中的利用", "https://mp.weixin.qq.com/s/-eu8nZly2SUHrccaov4ELg": "CVE-2026-42530 NGINX 远程代码执行", "https://mp.weixin.qq.com/s/OXo-7q1Gn6gkogcvBcarWg": "[安全工具]JsonExp — Fastjson∕Jackson 反序列化漏洞自动化检测利器", "https://mp.weixin.qq.com/s/3n1C0DY4YE60MQVIzH2tbg": "【$1,600】Shopify帮助中心AI助手XSS漏洞", "https://mp.weixin.qq.com/s/ano7NXK9lidWQBXr5K1npg": "Splunk AI Toolkit漏洞可导致任意操作系统命令执行攻击", "https://mp.weixin.qq.com/s/79LActc4q36d1YYrwoWsOw": "一个月500万:一份最新报告揭示Anthropic的漏洞赏金真相", "https://mp.weixin.qq.com/s/fanoyyyq0cATDulcgy247g": "行业资讯:某网络安全漏洞扫描产品采购项目中标结果显示,绿盟漏扫中标5套", "https://mp.weixin.qq.com/s/fHr-PUpAH6nuuZ0RvaribA": "漏洞分析超越Mythos还不够!微软真正厉害的是知道MDASH还差在哪", "https://mp.weixin.qq.com/s/CwoCkx5C-IUT4_VjhZy3ww": "【成功复现】Linux内核act_pedit本地权限提升漏洞(CVE-2026-46331)", "https://mp.weixin.qq.com/s/A6kIw7wyw7pDzCedBwSHNA": "CVE复现 | CVE-2026-42588漏洞复现", "https://mp.weixin.qq.com/s/VFdTwEOE2_scDdlip_dAwA": "SSL∕TLS 密码套件漏洞分析以及修复方法", "https://mp.weixin.qq.com/s/XvT5NiH_KapaYRpGlQEjlA": "渗透测试实战中url跳转漏洞", "https://mp.weixin.qq.com/s/yJBm6c2Juu9tK9Rapro8xw": "世界杯运营系统严重漏洞 黑客可全面接管世界杯转播", "https://mp.weixin.qq.com/s/k69TSuXmztYYJ1COvkBu-A": "Apache HTTP∕2炸弹漏洞PoC公开,可远程耗尽服务器内存", "https://mp.weixin.qq.com/s/sInx4poFY9pet1C_6gB-hw": "信息安全漏洞周报【第079期】", "https://mp.weixin.qq.com/s/IcSxIInZjTP0pYCm8CWrqw": "hackerone之5000刀的高危burp漏洞", "https://mp.weixin.qq.com/s/xkb7zrRB1roGvWVrJD_yKA": "Node.js发布关键安全更新,修复影响120万站点的12个高危漏洞", "https://mp.weixin.qq.com/s/UUBaddhzpip1QwoIFY8x5w": "PPT 基于大模型Agent的BYOVD漏洞驱动挖掘实践", "https://mp.weixin.qq.com/s/Nph5bsoQ4k1L1Et3m_2mqQ": "CVE-2026-31635 | Linux内核RxGK\"DirtyCBC\"本地权限提升漏洞", "https://mp.weixin.qq.com/s/C4TMWcOt5mGUlTdJgkZ9KQ": "CVE-2026-41940 cPanel∕WHM 认证绕过漏洞复现", "https://mp.weixin.qq.com/s/uu5K1UMDvRHO2B15oVI1Rg": "WordPress关键插件漏洞或致100万个网站遭文件删除攻击", "https://mp.weixin.qq.com/s/dqxTTN52Gfmavr1XFEbyQA": "新型iPhone BootROM漏洞永久性破坏信任链,A12∕A13芯片无法修复", "https://mp.weixin.qq.com/s/NvJ2CrtzY178xBil_FEyZA": "某2026最新去水印小程序文件上传漏洞组合拳", "https://mp.weixin.qq.com/s/k8XNVtK4eAqIGCMe_FtkLg": "CVE-2026-48907|Joomla JCE编辑器扩展未授权远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s/MqklPO57H1Ff302leFQWSg": "CVE-2026-20253|Splunk Enterprise PostgreSQL Sidecar未授权远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s/ka0Da4Wc6ZB57tppsPZXXQ": "FortiBleed 漏洞暴露一场全球性凭证喷洒攻击行动", "https://mp.weixin.qq.com/s/CCiFESTBkXIvMEfWeiVOiQ": "[安全周报] $1000 挖出 21 个 0day + 11.6 亿次撞库破 8.6 万台防火墙——2026 年漏洞的\"发现\"和\"利用\",同周进入量产", "https://mp.weixin.qq.com/s/VmOFXqZWZWC8fHdI7gRsVw": "CVE-2026-54665:Apache NiFi 中的预认证主机头注入漏洞", "https://mp.weixin.qq.com/s/cNFfbZJhBcgJcd2SaE8SVg": "代码执行+模型被盗!盘点谷歌云Vertex AI存储桶抢注Bug的底层前沿姿势", "https://mp.weixin.qq.com/s/FgJfXm5qaBIkTtycQ2qBUw": "usbliter8:苹果 A12∕A13 BootROM 硬件漏洞的完整利用路径", "https://mp.weixin.qq.com/s/18n9iv7uMZ40-WkW63-SnA": "别一条条看了!我把Burp流量全喂给AI,自动标出越权漏洞", "https://mp.weixin.qq.com/s/ZFYqdHDc0lfVX7UiTy2kFg": "[漏洞]CVE-2025-2304:Camaleon CMS 大规模赋值漏洞导致权限提升", "https://mp.weixin.qq.com/s/TtZZ1Syu4yNeVb41FITaKg": "CNNVD通报OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s/hsFCML3EoECqFgnhSighNw": "Chrome扩展程序存在严重漏洞,攻击者可轻松入侵数百万浏览器", "https://mp.weixin.qq.com/s/negrW-wvlejIt_LpjfKtkA": "NGINX Open Source 中存在两个可导致RCE的严重漏洞", "https://mp.weixin.qq.com/s/cqn_J1oFpsJD6NzG6Id2QA": "本周漏洞速递|11个高危漏洞预警+漏洞复现", "https://mp.weixin.qq.com/s/_oSYWilp7b4_fn1C5bN8YA": "漏洞复现 | 东胜物流管理软件 UserInfo.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s/hKnSpfWIod-hnG4DQFm4lg": "豆包的xss漏洞复现(蹭热点版)", "https://mp.weixin.qq.com/s/p6ofAy0btEooWr8G17HTSA": "TongWeb反序列化漏洞场景的图形化检测与利用工具", "https://mp.weixin.qq.com/s/Ao7jqzuTB3iUZG-ZHTfBbQ": "【高危漏洞预警】FreeBSD KTLS本地权限提升漏洞(CVE-2026-45257)", "https://mp.weixin.qq.com/s/keT_CAUl4KZw22uhBWviGA": "phpMyFAQ 权限漏洞提醒:后台账号不是“可信内网”,权限变更也要审计", "https://mp.weixin.qq.com/s/6o6W_hlnMN9QmOs1-NcvHw": "edu某大学的小程序和学生信息系统漏洞挖掘", "https://mp.weixin.qq.com/s/hvYkolfT2yWRd9a77HdV6g": "LiteLLM存在远程命令执行漏洞CVE-2026-42271 附POC", "https://mp.weixin.qq.com/s/9Brj5DXFKOcOfWmFajbwdg": "Cloudflare 如何搭建 AI 漏洞发现流水线", "https://mp.weixin.qq.com/s/2t1Oe78DmA-7jYED-wdORg": "CVE-2026-42824:Copilot SearchLeak 漏洞,AI 化身数据窃密内鬼|Damian 攻防实验室实测", "https://mp.weixin.qq.com/s/nlzZCOD1U5oqeBn0orw6eA": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/voxwOeVo9jTr0iFktBiYgg": "SameSite Cookie绕过 + Web缓存欺骗:一次价值2000美元的漏洞挖掘", "https://mp.weixin.qq.com/s/o4DAgKKx0jbaUuvhflOYgg": "AIScan多Agent分布式协同扫描,兼顾常规漏洞扫描与AI智能分析,自动复盘校验结果,全方位覆盖红队安全评估场景", "https://mp.weixin.qq.com/s/WeopQ-C4xbJpXNLFr4Au-w": "OpenCode CNVD 多 Agent 插件 | 用于授权场景下的 CNVD 漏洞挖掘", "https://mp.weixin.qq.com/s/tmEoOcngfWr3NfxzAtAvKA": "赏金猎人手记:CORS不是漏洞,缝歪了才是", "https://mp.weixin.qq.com/s/JTyNHL3837hd-bvW9Ccuyg": "漏洞预警 | Google Chrome越界读写漏洞", "https://mp.weixin.qq.com/s/O1-5j_SbUpLEH3iN79pSzg": "【漏洞速递】Nginx Proxy Manager远程代码执行漏洞(CVE-2026-40519)", "https://mp.weixin.qq.com/s/8mmWv42TrdMvX3WaDGo1wA": "AnyDesk 预授权零点击远程代码执行【视频】", "https://mp.weixin.qq.com/s/whv4LzJTiJt-i2zHzdG8Eg": "行之:我的大模型黑盒RCE挖掘之路", "https://mp.weixin.qq.com/s/_qURHgV3v7L1E4H6D10NBQ": "安全预警!Fortinet连爆三大9.1分漏洞,黑客竟用AI写Exp?", "https://mp.weixin.qq.com/s/zxXqrsEwwSWOXeONVgaC9w": "edu某大学的小程序和学生信息系统漏洞挖掘", "https://mp.weixin.qq.com/s/CIGuvMCrJYU4qN_lAHU2UQ": "CTF比赛入门第九期:Linux文件包含与路径遍历漏洞", "https://mp.weixin.qq.com/s/QhoCqvWt4Ylg2bQsCkR_5g": "QNAP修补QuMagie漏洞,防止私人媒体文件泄露", "https://mp.weixin.qq.com/s/U8RQR5jxvXw4eFupcliKvA": "Chrome扩展程序存在严重漏洞,攻击者可轻松入侵数百万浏览器", "https://mp.weixin.qq.com/s/-RRX7QoggR3Jw1lCZk3XWA": "Firefox 的 CVE-2026-8971 漏洞", "https://mp.weixin.qq.com/s/Eg2fox1RnCcTs8MwCJj3OQ": "【已复现】漏洞通告 | FreeBSD KTLS 本地权限提升漏洞(CVE-2026-45257)", "https://mp.weixin.qq.com/s/zrSAKXqB1RThAVQLwOm34A": "高危预警!Exchange零日漏洞 CVE-2026-42897,深入解析其漏洞原理、入侵路径、应急处置指南,企业务必自查", "https://mp.weixin.qq.com/s/Q2YsA-jY99BLaZ-4f9pYqw": "CNVD漏洞周报2026年第24期", "https://mp.weixin.qq.com/s/Nr8aUB2yPVxu4ymnHwAqLg": "usbliter8:针对苹果 A12、A13 芯片设备推出无法修复的 BootROM 漏洞利用工具", "https://mp.weixin.qq.com/s/WmcKqoAe_SHdKu5cL7h6rQ": "“乌贼出血”漏洞:已存在29年,由 Mythos Preview 辅助发现", "https://mp.weixin.qq.com/s/J92xTltFF_-WjjE_kDy9jg": "AI 安全三大核心赛道:赋能攻防、内生漏洞、自主系统失控风险详解", "https://mp.weixin.qq.com/s/VmMBhvHaVHaf9g1WkkLvlw": "Joomla! 多个扩展存在未授权RCE漏洞", "https://mp.weixin.qq.com/s/NAcZiXCM5XaktsoMzwaYpw": "14 个开源项目、11 个零权限 RCE——这个 AI 审计系统开放公开挑战了", "https://mp.weixin.qq.com/s/powo7Rvy0JX8IQevZ3O1dQ": "直播预告丨AI赋能的漏洞挖掘与风险管控,公开课第八节开放预约", "https://mp.weixin.qq.com/s/z79RMurKCSyQAIC0ouPKkA": "Groundsource:来自公开的全球洪水事件数据集", "https://mp.weixin.qq.com/s/wXvrIb9uJhHC7NRmucG9Cw": "H5渗透实战:从复数金额漏洞到签名绕过", "https://mp.weixin.qq.com/s/KwAlhq-n4QE8RvF8i1n7gA": "14个开源项目、11个零权限RCE——这个AI审计系统开放公开挑战了", "https://mp.weixin.qq.com/s/24CpFv66uSmVpZU-Kht9Nw": "谷歌拒修 Kubernetes 操作器满分漏洞并拒发赏金", "https://mp.weixin.qq.com/s/fUnhFCG40nZ1Evik1wYz1g": "Joomla JCE Editor 双高危漏洞预警(CVE-2026-48907 ∕ CVE-2026-48908)", "https://mp.weixin.qq.com/s/kskTQ5jSnmDAK47sVuzBkw": "用 AI 挖掘 IDA Pro 任意代码执行漏洞", "https://mp.weixin.qq.com/s/Z-T84ceSUzTF9BoA697AZw": "漏洞预警 | Linux kernel权限提升漏洞", "https://mp.weixin.qq.com/s/fnrsm_ZiyNdY5RO_mSafIQ": "三星 KNOX 内核释放后重用漏洞,数百万 Galaxy 系列手机面临风险", "https://mp.weixin.qq.com/s/bpFxlrCS9IzaAaSTHuTjRQ": "【$5,000】Burp Suite Professional 中的RCE漏洞-PoC及视频演示", "https://mp.weixin.qq.com/s/R5dOY9rgc_iDddVB1vtBHA": "DifyTap:四大漏洞致使超百万个 AI 应用面临安全威胁", "https://mp.weixin.qq.com/s/wT1VgZOaLcQ0dEtwtCNytw": "漏洞产生的五个原因", "https://mp.weixin.qq.com/s/YV6Vlh7EGTXijGmu3rTSUg": "国际足联后台曝出高危漏洞,黑客可随意篡改世界杯直播", "https://mp.weixin.qq.com/s/CnDm2DWTOSZi22ez7el_qw": "Claude Mythos Preview发现潜藏29年的“Squidbleed”漏洞", "https://mp.weixin.qq.com/s/NL2Oa8h__B4pquR5ppN9NQ": "Webmin 2.641 修复三个漏洞,其中包括一个严重的身份验证绕过漏洞", "https://mp.weixin.qq.com/s/Rk9z5dbGcsGAv1wiCpH_VA": "漏洞预警 | 大蚂蚁即时通讯系统任意文件上传漏洞", "https://mp.weixin.qq.com/s/NyKqP_h4lq9qkqW8gVJN0w": "FFmpeg 严重漏洞允许攻击者利用媒体文件进行攻击", "https://mp.weixin.qq.com/s/KDPO1p04xSVJGchnSC-qAQ": "Shannon:Keygraph 开源 AI 渗透测试框架,从源码分析到真实漏洞利用", "https://mp.weixin.qq.com/s/3MEUCzesYJmxq1aHAreM4A": "libssh2 CVE-2026-55200 PoC 和本地 RCE", "https://mp.weixin.qq.com/s/CbxafV85UwNkyL7lSRksrQ": "CVE-2026-41089:Windows Netlogon 通过 CLDAP 堆栈缓冲区溢出进行远程代码执行漏洞", "https://mp.weixin.qq.com/s/WFYj3seeH2_xti7RLU16vQ": "CTF比赛入门第十期:文件上传漏洞全解", "https://mp.weixin.qq.com/s/YEm5YIvDE_8U7EZ4aeqcOQ": "关于规范 AI 辅助漏洞报告提交标准的公告", "https://mp.weixin.qq.com/s/pAhdg_YyZY-pMDA_5-muwg": "Anthropic 的 Mythos 模型在美国政府系统中发现漏洞", "https://mp.weixin.qq.com/s/Kp_lGaMx_tlm7uUbKFup2w": "用友U8 CRM getsrvtemplate.php SQL注入漏洞", "https://mp.weixin.qq.com/s/52YAM_DXiI9hE4eXddOVlw": "邮件服务器预警:Exchange 多个 SSRF 漏洞利用细节已公开", "https://mp.weixin.qq.com/s/Xqd0CHRhVqbhKYXBZwu-Sw": "CVE-2026-8461(PixelSmash) - 分析及复现", "https://mp.weixin.qq.com/s/PfoHqQUojOONl1M4FMe0zw": "“冬虫夏草”供应链漏洞影响数千家组织机构的代码仓库", "https://mp.weixin.qq.com/s/LYqeuFLZr3VoeDQmHGL_PA": "逻辑漏洞之注册模块", "https://mp.weixin.qq.com/s/G9LnlaMKR93T9XGNU81hNQ": "Libssh2 严重漏洞可导致攻击者执行远程代码", "https://mp.weixin.qq.com/s/PX8h51A5vT8nglsayj0_tw": "从命令注入到凭据泄露,手把手教你复现命令行工具高危漏洞", "https://mp.weixin.qq.com/s/ElFbb2djZzUy6npR595KfA": "信息安全漏洞周报(2026年第25期)", "https://mp.weixin.qq.com/s/xPmomLLSLWiU0KFSk1YJ4A": "直播预告丨AI赋能的漏洞挖掘与风险管控,公开课第八节开放预约", "https://mp.weixin.qq.com/s/ERSGCN3tPfRDBx0WZrvUrQ": "【漏洞通告】FFmpeg MagicYUV PixelSmash 解码器堆越界写入漏洞(CVE-2026-8461)", "https://mp.weixin.qq.com/s/d4OV7oOmDfoZhZQPDZ8TJQ": "与AI抢时间:美CISA颁布国家级漏洞防御新规", "https://mp.weixin.qq.com/s/BrEi4W3plsnveOcQotGgIA": "Jenkins综合漏洞利用工具", "https://mp.weixin.qq.com/s/7v-1xbqVmA0-IlDCjkeb6A": "Chrome 149 安全更新——修复可导致代码执行攻击的严重漏洞", "https://mp.weixin.qq.com/s/xsym4OfXmJl3-VUooMVJ3A": "【漏洞通告】Cisco Unified Communications Manager WebDialer 服务器端伪造请求漏洞(CVE-2026-20230)", "https://mp.weixin.qq.com/s/apu4-rIhU8ZqynmvXJIPvQ": "【论文速读】| OpenAnt:通过代码分解、对抗性验证与动态测试的LLM漏洞发现", "https://mp.weixin.qq.com/s/NZYzB9yYMUWKbkXkgzD9nA": "【已复现】Gogs 远程代码执行漏洞(CVE-2026-52813)安全风险通告", "https://mp.weixin.qq.com/s/JI8ZinZ_oXARbjmq2KlZxg": "瑞友天翼应用虚拟化系统SQL注入漏洞", "https://mp.weixin.qq.com/s/swYPy3q5kBiRs4dNGdGiMw": "客户端漏洞挖掘skills", "https://mp.weixin.qq.com/s/G0gY7NxkyEydZmpWVQhlQA": "记一次狗运逻辑漏洞接管前台账号", "https://mp.weixin.qq.com/s/ucH44lrRnMRD_pikAFl8hQ": "【高危漏洞预警】Gogs git rebase参数注入远程代码执行漏洞CVE-2026-52813", "https://mp.weixin.qq.com/s/6u4dLHHFCS7lh6XwYTCsvg": "Microsoft Exchange Server 服务器端请求伪造漏洞(CVE-2026-45504)漏洞", "https://mp.weixin.qq.com/s/KeOsi8UpI_82OZFB4s7l1Q": "CVE-2026-45504:微软Exchange SSRF任意文件读取漏洞,PoC已公开", "https://mp.weixin.qq.com/s/wsj07rjK8uKBDrRusCnJjQ": "【已复现】Gogs 组织名称路径遍历导致 Git hooks 远程代码执行漏洞(CVE-2026-52813)", "https://mp.weixin.qq.com/s/QIFeJC7ddZRRnk0Gq0Pknw": "用AI挖了隐藏N年的组合拳漏洞", "https://mp.weixin.qq.com/s/V64-jpebcR-PATm3S39NqQ": "上个厕所的功夫,漏洞修了?", "https://mp.weixin.qq.com/s/lY6aZKizxPASgfKwfGsy7A": "Apache Kvrocks 修复五个严重漏洞", "https://mp.weixin.qq.com/s/z62WmJj_6fDE0TWd_CkCig": "最新版Jeecgboot后台利用 | 从0写Reina之Jeecgboot-v3.9.2-后台RCE", "https://mp.weixin.qq.com/s/YEHgKpzekLwPqmYMQ55q5Q": "curl 发布史上规模最大的 CVE 公告,修复一个存续长达 25 年的漏洞", "https://mp.weixin.qq.com/s/kN6Jov5sk_NcJitOLa9UeQ": "【CVE-2026-20245】Cisco SD-WAN 零日利用分析", "https://mp.weixin.qq.com/s/4rLmpDaTPnegQYVkVhshOw": "Cisco SD-WAN 0day 被利用数月:边界控制面,不能只等补丁", "https://mp.weixin.qq.com/s/RBu_DWh-K3vU5ZBz8GN7kA": "API配置泄露—浅析api端口配置漏洞及危害", "https://mp.weixin.qq.com/s/bhpHb834XYnWoz-rdVLjfg": "2026浏览器插件推荐 - 漏洞挖掘篇", "https://mp.weixin.qq.com/s/bXLaDshzI1ZbQtMyv9Up-w": "Chrome中的AsmJS漏洞:当WebAssembly信任的代码变得不可信", "https://mp.weixin.qq.com/s/7x4RkvAQ7KWFkbnc9dq1Dg": "思科CUCM高危漏洞PoC公开后24小时内即遭利用", "https://mp.weixin.qq.com/s/x_Sedif_iwHRKUfCY_BWuA": "AI漏洞挖掘:Mythos 48小时挖3000零日", "https://mp.weixin.qq.com/s/CExnledO1G9sA0_jx44CtQ": "未授权到 SQL 子查询:深入分析 Tainacan REST API SQL 注入漏洞(CVE-2026-42740)", "https://mp.weixin.qq.com/s/rRYWzM8Q1hioHG-i7bH80A": "curl 修了 18 个漏洞:一个“低危”mTLS 问题,为什么也值得排查", "https://mp.weixin.qq.com/s/tPN9-s1a2a9BDyMOeDx_pA": "JWT漏洞利用完整指南", "https://mp.weixin.qq.com/s/DddGHEw39sExURlFcOx9Sw": "Cisco CUCM SSRF 漏洞 PoC 公开后遭利用,可通过文件写入提权至 Root", "https://mp.weixin.qq.com/s/DAN_bR1UF8m3Ew6FbouGaQ": "cURL 严重漏洞已存在25年,影响300亿台设备", "https://mp.weixin.qq.com/s/RrlwDTY1WRhGWCKDTd2G_w": "CISA:Lantronix EDS5000 严重漏洞正遭活跃利用", "https://mp.weixin.qq.com/s/9iErEju-T1ae-WFe8v9MxA": "【已复现】漏洞通告 | Gogs 远程代码执行漏洞(CVE-2026-52813)", "https://mp.weixin.qq.com/s/5psMTKFqTFdshtH_NIXyTw": "【已复现】漏洞通告 | Joomla Content Editor 未授权远程代码执行漏洞(CVE-2026-48907)", "https://mp.weixin.qq.com/s/hRQs9wtmkgSWhGPSubHwkw": "Nuclei 漏洞扫描图形化工具 | POC 管理、FOFA∕Hunter∕Shodan 资产测绘、AI 辅助分析、漏洞报告生成", "https://mp.weixin.qq.com/s/zZXEFpxBT8kBf806tmGbUA": "Android跨用户隔离批量漏洞挖掘与利用实践", "https://mp.weixin.qq.com/s/yucaI3MZc8_WgobS1qT-cQ": "【漏洞通告】Gogs 目录遍历漏洞(CVE-2026-52813)", "https://mp.weixin.qq.com/s/Dg1QcxfykVhPNo5p3j8Mig": "信息安全漏洞预警(2026年6月22日-2026年6月26日)", "https://mp.weixin.qq.com/s/t8uwBasBjx1E2W9VJsPMzQ": "手把手教你用 kali 进行渗透测试,含信息收集、漏洞利用、权限提升等", "https://mp.weixin.qq.com/s/rqb5G7wrtgdmwCAvbIvqKA": "CVE-2026-25860 - OpenClinic GA 反射型 XSS 漏洞导致远程代码执行", "https://mp.weixin.qq.com/s/3uepeUGGnQMGIHTggkhw6w": "CISA警告:思科统一配置管理(Cisco Unified CM)漏洞已被攻击者利用", "https://mp.weixin.qq.com/s/nKWR5Sypju9tNsac5zPGgw": "GeoLocate CVE-2025-52465 - GeoServer漏洞利用", "https://mp.weixin.qq.com/s/I0klN0JtPqeTGVs1zJd9Sg": "AI 生成 | Gogs CVE-2026-52813:从组织名路径穿越到 RCE 的复现全记录", "https://mp.weixin.qq.com/s/p6rGDIcUDb56xsw3-a9tfw": "挖洞思路|CORS配置漏洞背后的信任陷阱,赏金猎人如何靠逻辑链破防?", "https://mp.weixin.qq.com/s/bGi5a_ZLKNMmrNaIwmDAFQ": "Cisco CUCM 任意文件写入到RCE:一条被低估的攻击链", "https://mp.weixin.qq.com/s/eFJo2jC_jFcS4j3YkSKQug": "漏洞复现 | 天问物业ERP系统 docfileDownLoad.aspx 文件读取漏洞", "https://mp.weixin.qq.com/s/3IxDbhDRWVzFC-kE4ogi5Q": "消息模板注入漏洞", "https://mp.weixin.qq.com/s/y15izv7ojxCyjrZ7BsswDA": "研究员学习Hyper-V时意外挖出微软隐藏BUG:CVE-2024-21305", "https://mp.weixin.qq.com/s/ZRo8c5NRLpNte0b1JaLtQg": "我用AI挖了隐藏N年的组合拳漏洞", "https://mp.weixin.qq.com/s/cjKao6frX3v2JjmoZWMRjg": "任意文件读取&下载漏洞的全面解析及利用", "https://mp.weixin.qq.com/s/zQiuwFTWRNIYV_uV5c7l4g": "保密手机功能受限反酿安全漏洞:美特勤局人员被迫用私人手机执行保护任务", "https://mp.weixin.qq.com/s/6J6VJ_XGoC4lk-WrdM9N7g": "不会找漏洞 试试Nuclei这款神器", "https://mp.weixin.qq.com/s/Q-Vxgm4rlcbUMSQcuMV9lw": "最新Linux的本地提权漏洞分析", "https://mp.weixin.qq.com/s/HbEIBTCoOElCd_18VfWO-Q": "自动化漏洞扫描器 -- hack_scanner", "https://mp.weixin.qq.com/s/zKBNTIsSQ8qbo0GYK2We9g": "单看都是中低危,组合起来却拿下严重漏洞?赏金猎人都在练的CORS+反射XSS组合拳", "https://mp.weixin.qq.com/s/wNDxXW1HFrVfYEUWFmf2HQ": "用 AI 自动完成渗透测试流程,从发现漏洞到利用漏洞一步到位", "https://mp.weixin.qq.com/s/1NYrbMOPYlyFLQFqrJ8V_A": "AI是阿拉丁神灯? AI漏洞挖掘系统上手教程!", "https://mp.weixin.qq.com/s/wtTS-qK3Yd8vg3Cj_pzF8A": "Lantronix工业设备高危漏洞遭在野利用,暴露OT设备补丁窗口期风险", "https://mp.weixin.qq.com/s/wNZgCl8G7V3S0RMvXyYjhg": "漏洞复现 | 天融信上网行为管理系统 pc.php 接口存在xss漏洞", "https://mp.weixin.qq.com/s/GyPRpnzp7jn5yZWpJJ637g": "【重磅上线】系统0day安全——主流企业防火墙漏洞挖掘", "https://mp.weixin.qq.com/s/al1TIUNMPJ6GZpVL1i5i2A": "小米:车联网-站在研发视角挖漏洞", "https://mp.weixin.qq.com/s/DnqojdKDBdB4u7fOM53uYA": "探索CVE-2026-31431的热补丁修复方案", "https://mp.weixin.qq.com/s/pUt3tAli7UbQlmlSDVdR6w": "打开一个恶意仓库就能偷走你的云账号:Amazon Q 插件高危漏洞分析", "https://mp.weixin.qq.com/s/NIG9PDJ-DUKEV-hSHhaCwA": "JCE 编辑< 2.9.99.5 — 未认证远程代码执行(CVE-2026-48907)扫描器", "https://mp.weixin.qq.com/s/Bx1GqMx-29RSjEtRtL_lCg": "DirtyClone漏洞可致本地用户静默提权至root,绕过监控不留痕迹", "https://mp.weixin.qq.com/s/-dVfp5G0RhMsPU95U-0bQQ": "某34国语言综合GP交易所存在前台SQL注入漏洞 (Java)", "https://mp.weixin.qq.com/s/nqi-9yFYS-oWNEP1A0XOKg": "【安全圈】三星 Galaxy 手机被曝高危安全漏洞", "https://mp.weixin.qq.com/s/icBvY0qLBvHyrRncG_6ubw": "OAuth 2.0 身份验证漏洞--portswigger打靶", "https://mp.weixin.qq.com/s/TH8OoTUHHgUsmCZT7MDXtQ": "【我是如何在一个电商平台上发现一个高危IDOR漏洞的】", "https://mp.weixin.qq.com/s/uuVbj65Lyk9DqZAbehW7Rg": "五月学员优秀edu漏洞挖掘案例分享", "https://mp.weixin.qq.com/s/8YovEBZq2VKNx4lRGfCccA": "一站式 dnslog 漏洞检测平台", "https://mp.weixin.qq.com/s/LoWuMtZzwi9BwO93BIW_kg": "旧漏洞,新规则:不用捷径拿下 CVE-2023-36802", "https://mp.weixin.qq.com/s/HNhBj9K6YtkheqzBk326LA": "DirtyClone:六周内第四起 Linux 内核漏洞,可提权至 Root 权限", "https://mp.weixin.qq.com/s/8p6cbgnf4EtlobdCG9WKcw": "用AI检测“越权漏洞”,更快更灵!", "https://mp.weixin.qq.com/s/7beSUH9PKgLLpWiYoEzwWg": "CVSS 10.0!Joomla内容编辑器JCE漏洞正被积极利用,GitHub公开扫描工具", "https://mp.weixin.qq.com/s/gEE_xUhAQ1eOLWoPwI-jKw": "c-ares TCP Use-After-Free 漏洞深度解析:从 DNS 响应序列到本地 Calculator 代码执行 PoC", "https://mp.weixin.qq.com/s/KCAkSVibPDd0dEn2gtxg7Q": "蓝凌EIS智慧协同平台mobile_define.aspx∕Getmobiles接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s/XiIUKO034OyeZqvp3Hot7A": "CVSS 10 分 Hoppscotch 批量赋值漏洞:服务器完全沦陷", "https://mp.weixin.qq.com/s/TJQ5W9jsM2dEIaH2hO6yJg": "CVE-2026-48907 Scanner", "https://mp.weixin.qq.com/s/foiC9AB5OoD6S4XY3pe5TQ": "【深度技术解析】objdump DLX 后端 Out-of-Bounds 写入导致的本地 ACE PoC 详解", "https://mp.weixin.qq.com/s/GxqFW15BkR0VkzdvI4wQ1A": "蓝凌EIS智慧协同平台 Getmobiles 存在SQL注入漏洞", "https://mp.weixin.qq.com/s/nuI8dhxZZB7TEF_2ll1rWg": "周鸿祎急了:AI挖漏洞时代来了,中国必须有自己的Mythos", "https://mp.weixin.qq.com/s/Sb_ySSfXpkbuEH-kJVolOg": "微信小游戏有漏洞?这个工具让你像调试网页一样透视小程序内部", "https://mp.weixin.qq.com/s/L2Yj8iqgtIjJYTB1qd38BA": "【CVE-2026-43503】DirtyClone 本地用户通过克隆数据包获得 Root 权限", "https://mp.weixin.qq.com/s/bFVWWTVN9Tmw0kdILfa19w": "安全工具丨一款AI安全审计工具。可实现目标准备、审计、漏洞利用构建和执行验证等", "https://mp.weixin.qq.com/s/pCb0O2NUgWEUDx2r0x3h6Q": "Amp Code:通过提示注入实现任意命令执行", "https://mp.weixin.qq.com/s/czp0n7Dx3n5STdj2tZQz9g": "Amazon 的AI编程助手高危漏洞可导致代码执行和敏感云环境访问", "https://mp.weixin.qq.com/s/yzx7066f-PtaLy-2jdzOmw": "内网漏洞--NetNTLMv2泄露", "https://mp.weixin.qq.com/s/gTXk4wbHnKaiLyIHH_zMCg": "【已复现】漏洞通告 | Linux Kernel DirtyClone 本地权限提升漏洞(CVE-2026-43503)", "https://mp.weixin.qq.com/s/0GEooIwnalbuKWgpv9eIqw": "【已复现】Linux Kernel DirtyClone 本地权限提升漏洞(CVE-2026-43503)安全风险通告", "https://mp.weixin.qq.com/s/gJc5C53ba4idS9bI5ifGlQ": "2026攻防演练必修高危漏洞集合(2.0版)", "https://mp.weixin.qq.com/s/Ku2uT0qeYawan026Yz3ukg": "美国恢复Claude Mythos 5部分权限,仅向关键基础设施开放;OpenAI发布GPT-5.6Sol:漏洞分析能力接近MythosPreview | 牛览", "https://mp.weixin.qq.com/s/vv7hNhkH0WiK-qB6a8Maxg": "从0到1渗透测试自动化挖到某SRC漏洞的个人心得", "https://mp.weixin.qq.com/s/fyubodc5SwWNAtvElTdovA": "c-ares TCP Use-After-Free 漏洞深度解析:从 DNS 响应序列到本地 Calculator 代码执行 PoC", "https://mp.weixin.qq.com/s/hBWz_UfaA76F5efiF0MRQA": "Firefox一个月用Mythos发现500个漏洞?真相来了", "https://mp.weixin.qq.com/s/QOTc3Q1iige53JjtpvYCgA": "CVE-2026-40409 UDFS的整数截断漏洞分析", "https://mp.weixin.qq.com/s/Z9n0BzA77wIVB7eC3ink1g": "【高危漏洞预警】Linux内核高危本地提权漏洞CVE-2026-43503(DirtyClone)", "https://mp.weixin.qq.com/s/_awDBmo5hdsBrmpsCZkWaQ": "【深度技术解析】objdump DLX 后端 Out-of-Bounds 写入导致的本地 ACE PoC 详解", "https://mp.weixin.qq.com/s/s-zmVtTIsXPSsgu973fyrg": "Github上有大哥公开多个0day PoC", "https://mp.weixin.qq.com/s/voZerzkRD8Kp8JZQJKWR1g": "DirtyClone: Linux 内核新漏洞,通过克隆的数据包获得根权限", "https://mp.weixin.qq.com/s/n0_vQovyEs0cPGTG0MRKPA": "2026攻防演练必修高危漏洞集合(2.0版)", "https://mp.weixin.qq.com/s/5N6vkJckrlk8XLmAYvE0qA": "攻击面管理系统|AI 驱动资产测绘 + 万条 Nuclei 漏洞库,自动生成漏洞 EXP,内网公网一键扫描利用", "https://mp.weixin.qq.com/s/XF_KDYslbjzpdanq_jhqmQ": "漏洞预警 | 孚盟云SQL注入漏洞", "https://mp.weixin.qq.com/s/BVUDCEwV1c7XQiRbVwF-0w": "CVE-2026-43503 DirtyClone Linux提权漏洞报告", "https://mp.weixin.qq.com/s/Dyx7aksG3wNBawrAV-74jA": "2026攻防演练必修高危漏洞集合(更新)", "https://mp.weixin.qq.com/s/lm-AEYvdMrsQNRNo3DO7QA": "漏洞预警 | libssh2整数溢出漏洞", "https://mp.weixin.qq.com/s/hDCLKEloertyO56QYCgiAA": "安全工具丨一款本地离线可用的可视化渗透测试与漏洞挖掘平台", "https://mp.weixin.qq.com/s/trKsvjYuHl8e9ACUCMlb8Q": "开源企业级主机与容器安全管理平台 | 安全基线、资产管理、漏洞扫描、病毒查杀、EDR 检测与合规审计", "https://mp.weixin.qq.com/s/UvHN_ETX7QI0cJ8pXgPGXg": "FOG getfiles.php 任意文件读取漏洞", "https://mp.weixin.qq.com/s/Lx7gx8xgxGwPshdSA7L97Q": "已入职宇树网络安全岗,这点面试真的水∕网安挖漏洞,日入两千六有多爽,一篇总结所有平台...", "https://mp.weixin.qq.com/s/EdMbFdaDhmEDx4zJTg06nA": "针对 RHEL 10 上 IPV6_FRAG_ESCAPE 漏洞的公开 PoC 与利用细节已发布", "https://mp.weixin.qq.com/s/Bn5UrkFqkvHZD0MaPWpa1Q": "2026攻防演练必修高危漏洞集合(2.0版)", "https://mp.weixin.qq.com/s/JGZFa5JSrcjjpBpl7KCD-w": "AI彻底改写漏洞攻防:N日漏洞变N小时,企业传统防御已全面失效", "https://mp.weixin.qq.com/s/CdDIutoSqe9FE3HekP5jBA": "成为CNNVD漏洞库支撑单位,助力网络安全!申请全流程解读,专业团队助您高效通过", "https://mp.weixin.qq.com/s/BoddBQjCcWeyrWyRzYUOxw": "2026HW必修高危漏洞集合2.0", "https://mp.weixin.qq.com/s/G4JXqTu1wHpBVw-PMW_vCQ": "【热点安全风险】6月30日 | 继DirtyFrag后又一Dirty系列漏洞:DirtyClone(CVE-2026-43503) Linux内核提权漏洞需重点关注", "https://mp.weixin.qq.com/s/JXbjJjLgAPxlAC8hsPS0nw": "CNVD漏洞周报2026年第25期", "https://mp.weixin.qq.com/s/ESnN73pNv9zxhGsv6hAIFw": "【CVE-2026-55200】libssh2 RCE 漏洞(PoC 已公布)", "https://mp.weixin.qq.com/s/dXlT4uDqLoDnl4G-Qgb5xQ": "国安部预警:AR 手游采集 300 亿实景数据,民用地理数据存在军事化泄密风险 ;CNVD2026 第 25 期漏洞周报:零日漏洞占比超八成 | 牛览", "https://mp.weixin.qq.com/s/nxKVyCI5hAuNkq2601sC-Q": "渗透测试|从账号枚举到未授权访问,再到白盒RCE的一次渗透测试实录", "https://mp.weixin.qq.com/s/-pUahaI_I_0nG3XeYVFWTQ": "微步 XGPT 发现 Apple 内核漏洞并获致谢", "https://mp.weixin.qq.com/s/8tGezd4UbB89lPQywQeqGA": "炸场!GitHub公开海量未报送0day PoC,多款常用软件高危", "https://mp.weixin.qq.com/s/rxNHcc9vEJiJczCTSGZ21g": "7月社区投稿活动 | 漏洞挖掘∕AI渗透", "https://mp.weixin.qq.com/s/Dj74mPIXJkatyg-w9Kxiyw": "【无问AI网安模型】二进制漏洞分析挖掘能力实战测评", "https://mp.weixin.qq.com/s/HpSbxmxh3Az9tDhb9V5a6w": "日产:在职离职员工数据遭泄露与 Oracle 0day 攻击有关", "https://mp.weixin.qq.com/s/Pg3K6_-GO45Nw1Dk1qXRvA": "AirDrop 和快速分享的漏洞使附近的攻击者能够触发崩溃并绕过检查", "https://mp.weixin.qq.com/s/HpkT_rS83TVLNvAm1yZyHQ": "苹果修复了iOS、macOS和Safari的30多个漏洞,其中包括人工智能发现的WebKit漏洞", "https://mp.weixin.qq.com/s/rsp2Iyk7e63iyZP9dqVGIg": "Oracle E-Business Suite 漏洞 CVE-2026-46817 已被积极利用", "https://mp.weixin.qq.com/s/LUbinjXR0NLTUxkU8Tg_vw": "AI赋能挖掘&&某小程序任意用户登录漏洞", "https://mp.weixin.qq.com/s/6dku919P2H5xjt-HGKentA": "认证为空的致命接口 AOFAX企钉前台上传漏洞", "https://mp.weixin.qq.com/s/IqKKdvEZmZz_iQ9RX-Bo5g": "AutoCVE:7 天测试期挖出 30 个真实 CVE,国产 AI 漏洞挖掘平台拿出了硬战绩", "https://mp.weixin.qq.com/s/65_6imz9pRd2RpzMx50zSg": "【重磅上线】系统0day安全——主流企业防火墙漏洞挖掘", "https://mp.weixin.qq.com/s/9YbLciU3MBURETqAd5Uc3Q": "提权验证一键搞定:全面集成的内核漏洞测试工具 RootHawkX", "https://mp.weixin.qq.com/s/lzI98GqfRXjXh2_XDtiViw": "Evoke Systems 充电站管理系统存在四个严重漏洞,劫持活动会话干扰充电运营", "https://mp.weixin.qq.com/s/as_MxPI48uLJUHrU-_mq6Q": "第一个edusrc高危漏洞", "https://mp.weixin.qq.com/s/haW9Lh9mMHRD-y9n_rAiUg": "全栈安全工程师实录:自产→自测→自修→自验,高危漏洞闭环全流程", "https://mp.weixin.qq.com/s/oTc4AvyPidJ_OWYopLEzDQ": "【CVE-2026-22078】关于O+互联未对IPC通道进行身份校验导致本地提权漏洞的致谢公告", "https://mp.weixin.qq.com/s/NmqWMF5ALKzk9UJ0kq0D-A": "【已支持检测】预认证即可利用!Kemp LoadMaster 堆内存缺陷导致命令注入远程代码执行漏洞(CVE-2026-8037)", "https://mp.weixin.qq.com/s/IdViLpiWmrSNgSSabjGI6A": "2026攻防演练必修高危漏洞集合(2.0版)", "https://mp.weixin.qq.com/s/3Jn1y65JhrygfAu5nOGqgw": "【高危漏洞预警】CVE-2026-52813|Gogs路径遍历+Git钩子组合RCE", "https://mp.weixin.qq.com/s/xafOq2_btzgEL-cxht5haQ": "新版App应用漏洞扫描,企业级移动安全合规利器,多维检测隐私泄露、权限滥用、高危API调用等常见APP安全隐患", "https://mp.weixin.qq.com/s/1-zGhCv6ymjQg9QrlJJ1GA": "ARL-Next 灯塔二开版 | 企业级自动化资产侦察与漏洞监控“灯塔”", "https://mp.weixin.qq.com/s/sCcDHzouVSVNWLcoND_kJg": "BlueHammer 被勒索团伙盯上:安全软件漏洞,也会变成攻击入口", "https://mp.weixin.qq.com/s/CbcIZ-kB3CgjFiZoJHsYPg": "借助人工智能工具,苹果修复了 iOS 与 macOS 系统中的多项 WebKit 漏洞", "https://mp.weixin.qq.com/s/CAo_YwLi--mgzrum9I6qAQ": "Discuz! X5.0 认证绕过漏洞复现", "https://mp.weixin.qq.com/s/vYtdRsCLrYh2H3OpVEIyWA": "攻击者正在积极利用 Oracle 电子商务套件漏洞 CVE-2026-46817", "https://mp.weixin.qq.com/s/1V94HCwd8kEqUqKoOqQLJQ": "7月1日高危CVE漏洞速报", "https://mp.weixin.qq.com/s/KvrGSCWoqh4POGJByUXWvA": "漏洞通告|Google Chrome Autofill内存错误引用漏洞(CVE-2026-13038)", "https://mp.weixin.qq.com/s/eN-WDkUWHblObvoIfHtNYw": "【AI安全】从0到1渗透测试自动化挖到某SRC漏洞的个人心得", "https://mp.weixin.qq.com/s/kHGlN_K1cVmh-0mvjc8wIg": "Kemp LoadMaster 高危漏洞有 PoC:负载均衡器不是透明设备,它也是边界资产", "https://mp.weixin.qq.com/s/Lrw3uNkg0kvckjxAezz2YA": "紧急提醒:JCE Editor 未授权访问漏洞已致多站点失陷(CVE-2026-48907)", "https://mp.weixin.qq.com/s/gn2kKJaaCoOoYenoWC6-9w": "深信服运维安全管理系统 portal_login 命令执行漏洞", "https://mp.weixin.qq.com/s/TkqL_M3jQX8cQ5wVyz2g3g": "企业技术,壳破而入:Kemp LoadMaster 未初始化堆漏洞分析", "https://mp.weixin.qq.com/s/5NcmIZG3XCQ70ixIme8I2Q": "Langflow RCE 被挖矿活动利用:AI 应用上云,别把调试入口也一起暴露了", "https://mp.weixin.qq.com/s/CqRyqpnw0RrY2QKTpdn3ZA": "【CVE-2026-6307】一石二鸟, Chrome V8 沙箱逃逸漏洞深度解析", "https://mp.weixin.qq.com/s/3cxu4NTZm_Gl_jJ9xXxxxA": "信息安全漏洞周报(2026年第26期)", "https://mp.weixin.qq.com/s/Nc6eyiNSGo48A9T4uTDi9A": "当“信任”成为AI漏洞:你的代码还安全吗?", "https://mp.weixin.qq.com/s/qp_3G_0bZfKDKFlHVxNlBg": "ISSTA 2026 论文解读丨大语言模型离替代人类挖漏洞还有多远?——评 SAGE:基于大语言模型的漏洞检测信号放大引导嵌入方法", "https://mp.weixin.qq.com/s/w2PyU1PXs-QhMnT7TCDZzA": "NTLM反射漏洞可劫持Windows Server SYSTEM权限", "https://mp.weixin.qq.com/s/VVl2Wpq1dlnRy4XC_C1oSA": "不需要0day,不需要逆向: 一条被忽视的CLI攻击链", "https://mp.weixin.qq.com/s/QTl4ILYulvQgU75Yj6HZvA": "RedAmon:串联侦察、漏洞利用与后渗透的 AI 安全工具", "https://mp.weixin.qq.com/s/MdTPfyqdtTZghFdmpDzCug": "基于 Claude Code 构建可控,自我进化的漏洞挖掘系统:架构与实现", "https://mp.weixin.qq.com/s/JRi9d06oTopuaKKTNhko-w": "浙大恩特前台RCE漏洞审计", "https://mp.weixin.qq.com/s/IWOvPWO4ACgiAuxe5lNkeg": "Splunk Enterprise 高危漏洞 CVE-2026-20253(CVSS 9.8)", "https://mp.weixin.qq.com/s/kXs8eSlA98ciO_ilx8RlAA": "USRC夏日探宝营|元气拉满,解锁专属漏洞嘉奖!", "https://mp.weixin.qq.com/s/qDcboGAeu048q1I0jUOz-Q": "匿名登顶中国第一,拆招“扫地僧”Agent记忆中心漏洞挖掘法", "https://mp.weixin.qq.com/s/R6XGBKMw0L8E0Cuu0cPiQg": "企业级开源安全利器,整合漏洞管理、基线检查,威胁狩猎、情报联动,适配政企服务器安全运维", "https://mp.weixin.qq.com/s/M19GRiAPFTXVYsOYlkddSg": "GitHub安全公告数据库处理量创新高,漏洞报告数量远超审核能力", "https://mp.weixin.qq.com/s/EUvgPLzwwHiJ09wCs0Eb0w": "【成功复现】Linux内核Socket Buffer本地提权漏洞(CVE-2026-43503)", "https://mp.weixin.qq.com/s/bsrVm_Tv81rlkN9wiBCIeg": "护网实战:漏洞修不好,网站不能关,杀毒扫不掉?用“秒删”脚本硬刚Webshell", "https://mp.weixin.qq.com/s/3oOBtE_VB9S3Ag-ZNAdOSw": "硬核技术流: 评分9.2!教科书级的整数溢出:深度剖析 libssh2 最新严重漏洞(CVE-2026-55200)", "https://mp.weixin.qq.com/s/l5do18gRhpna2YNscIaVhQ": "AI赋能挖掘&&某edusrc小程序任意用户登录漏洞", "https://mp.weixin.qq.com/s/cL3djMD7CyQc2_YQ8_HTLg": "Cursor 高危漏洞可通过提示注入突破沙箱并执行系统命令", "https://mp.weixin.qq.com/s/qQ824pHMgSUKcqMbldUKxQ": "CVE-2026-6307:V8 JS 到 Wasm 的类型混淆 → Chrome 146 上的远程代码执行漏洞", "https://mp.weixin.qq.com/s/GY0fozsQSlZWgkmOah88hw": "CISA警告:SimpleHelp身份验证绕过漏洞已被攻击者利用", "https://mp.weixin.qq.com/s/4gTnTHIgU8f4MuaLDNev2g": "Citrix(思杰)发布 NetScaler 六款漏洞补丁,漏洞可实现文件读取与拒绝服务攻击", "https://mp.weixin.qq.com/s/213u7JnGhDS6QeGNzqsMTw": "Adobe 发布补丁修复 ColdFusion 与 Campaign Classic 中 7 个 CVSS 满分 10.0 级高危漏洞", "https://mp.weixin.qq.com/s/_Si0oPJ0lyKRSUXPmzZRNw": "漏洞赏金喜报:“大雪深埋”拿下中危,450到手", "https://mp.weixin.qq.com/s/aR8cT7sIsD91lAqtJzeMUw": "DDDD_Viewer - dddd漏洞扫描工具可视化辅助工具", "https://mp.weixin.qq.com/s/qEs9AgNBNUI1rIELX9Vj-w": "CitrixBleed 到无限远:Citrix NetScaler 又爆内存越界读取(CVE-2026-8451)", "https://mp.weixin.qq.com/s/kMgX9WKE-dqw85WCK4wQvg": "我与edu的爱恨情仇之正方系统逻辑漏洞导致高危敏感信息泄露", "https://mp.weixin.qq.com/s/5J9fcHkgeZAJxZxSINyLjw": "Cursor IDE 远程代码执行漏洞允许零点击注入提示符", "https://mp.weixin.qq.com/s/28Wpu4N7TWmhP5MKgveoGQ": "JetBrains 发布补丁,修复影响 1500 万开发者的 CVSS 满分(10)身份验证绕过漏洞", "https://mp.weixin.qq.com/s/yZD9RGtDhQdwghU7Jwx5Yw": "7月社区投稿活动 | 漏洞挖掘∕AI渗透", "https://mp.weixin.qq.com/s/J5V7q5ZUsjfCVe9ziwVg9Q": "libseccomp 修复数个漏洞,可导致绕过seccomp限制", "https://mp.weixin.qq.com/s/0Kt_FKwk9Ud2BIfwCoLR6Q": "GuardFall 漏洞波及 11 款主流开源 AI 智能体中的 10 款", "https://mp.weixin.qq.com/s/_fVJJ8ExSnv6_MO3eq1tyQ": "NTLM反射漏洞拿Windows Server SYSTEM权限,CVE-2025-33073剖析", "https://mp.weixin.qq.com/s/vsF_9d6RGuyhEs9arqOICw": "7天挖出30个真实CVE!国产开源AI漏洞挖掘平台打出硬核实战战绩", "https://mp.weixin.qq.com/s/2yd3bxHbM56uuMCw1vGVNw": "自动化漏洞修复详解:验证体系、PoC证据与可信补丁评估", "https://mp.weixin.qq.com/s/XfPzzlWD2JCjq1X7iS3Gsg": "本周漏洞速递|13个高危漏洞预警+漏洞复现", "https://mp.weixin.qq.com/s/X6rtcoH7fKOntR_XMblwcg": "关于 O+ Connect PC 端漏洞暂停收录的公告", "https://mp.weixin.qq.com/s/kAasLoB6qnrhLmwd2BmCbg": "Anthropic Buffa Rust库0Day漏洞可引发拒绝服务攻击", "https://mp.weixin.qq.com/s/FMR4WBic_bLvRgzn9UYiCA": "普通人也能通过AI几句话就来发现Github 上 46Kstar项目的命令执行漏洞来成为大黑客", "https://mp.weixin.qq.com/s/MmbGg048e-2w0wzL5rFKUA": "未授权漏洞检测工具 - Unauth-Vuln-Scanner", "https://mp.weixin.qq.com/s/x2m6ufscXfKqECLIyaoXUA": "2026年度基础软硬件产品漏洞生态联盟大会成功召开", "https://mp.weixin.qq.com/s/rqIj9J1ORa8Ik6Zj0Hy_vA": "Cursor IDE曝两大高危RCE漏洞,可零点击攻破AI开发环境", "https://mp.weixin.qq.com/s/tTKquKTRgUZTWxwxZgiN5A": "挖了漏洞却被秒拒?80%新手都在瞎忙活,一文讲透挖洞平台规则", "https://mp.weixin.qq.com/s/abXzjO6CVpwnUdX51RpMaA": "工具推荐 | OSS存储桶遍历漏洞自动化利用工具", "https://mp.weixin.qq.com/s/4-b7E_Uk6xodqrpMRd7sFA": "【高危漏洞预警】Gitea act_runner 容器逃逸漏洞CVE-2026-58053", "https://mp.weixin.qq.com/s/LwQRoFuBViY0eHiFGxsOOQ": "SRC-Hunter SKILL AI挖洞技能库,适配SRC众测与漏洞赏金,复刻数千条HackerOne高危漏洞实战案", "https://mp.weixin.qq.com/s/98G_M8Gx5XVON6jkPmim0A": "StoneFly 存储集中器漏洞可导致未经身份验证的 root 访问", "https://mp.weixin.qq.com/s/O3UIFV1CSORMGWKFW6pxEw": "若依 Vue 漏洞检测工具 | 支持若依(RuoYi-Vue)多种安全漏洞", "https://mp.weixin.qq.com/s/1uKl2lsWRe4zHS4_dvTuuQ": "2026漏洞赏金终极侦察清单【纯净版】", "https://mp.weixin.qq.com/s/GVZYA0egDSz3Y_q4mgrSew": "漏洞预警 | 大蚂蚁即时通讯系统文件上传漏洞", "https://mp.weixin.qq.com/s/5iUwY0PIKMm6GMcVCu8J5g": "针对某老OA打了补丁之后再次前台RCE的审计流程", "https://mp.weixin.qq.com/s/MaVeIBC4qbfbapW24punUQ": "漏洞预警 | Gogs路径遍历漏洞", "https://mp.weixin.qq.com/s/YB9TwhsRxgkdYfbkh7k6mQ": "Citrix NetScaler再曝高危漏洞:SAML解析缺陷可泄露服务器内存", "https://mp.weixin.qq.com/s/gtkkp3txJGE_SVYd4k3UAA": "Cisco Unified CM 漏洞确认被利用:企业电话系统,也是关键控制面", "https://mp.weixin.qq.com/s/GUOaO_xcVYwsPPnPW4txXQ": "新的 ChocoPoC RAT 通过虚假 PoC 漏洞利用存储库瞄准漏洞研究人员", "https://mp.weixin.qq.com/s/QYTY5O_RQtUKJffd14kklg": "ChocoPoC 瞄准安全研究员:假的 PoC 仓库,真的是供应链攻击", "https://mp.weixin.qq.com/s/TyLl7teQDW7MqJVYth-EKg": "ArgoCD未认证RCE漏洞剖析", "https://mp.weixin.qq.com/s/s-T_NPMeG6eeQoJmcIVDxg": "SharePoint RCE 被列入 KEV:协作平台,不该成为补丁盲区", "https://mp.weixin.qq.com/s/0PwoBTaZiTRMOoVpsIPK_w": "Adobe修复了ColdFusion和Campaign Classic中的多个最高严重性漏洞", "https://mp.weixin.qq.com/s/tHzQFLmLLxtKtoLxAvOGqA": "聚焦 | 2026年度基础软硬件产品漏洞生态联盟大会成功召开", "https://mp.weixin.qq.com/s/AurYdQ7b9l7xOsFv5mS4ag": "安全工具丨AI驱动的CVE漏洞全自动挖掘平台,一键挖掘CVE漏洞、代码审计、漏洞验证、出报告,全流程自动化!", "https://mp.weixin.qq.com/s/hpnsi8q4ccelIoPZSu5CcQ": "目录遍历漏洞绕过指南:穿越防火墙,直通赏金", "https://mp.weixin.qq.com/s/_3o4g33ybFundhWIPMs35A": "DVWA每日实操系列|第3期命令注入漏洞 Command Injection|四层手把手通关 + 服务器权限接管 + 可直接交SRC高危报告", "https://mp.weixin.qq.com/s/yB3Z_IjRBVu9AK8dSwhvEQ": "红队实战:本地AI如何发现其他工具都漏掉的漏洞", "https://mp.weixin.qq.com/s/CBaMgBhHbSyT2t4na0k5uw": "攻防演练必备单品竟然是它:演练前审代码,演练中验漏洞", "https://mp.weixin.qq.com/s/B_UzIVT-x2jPn5S7ok5_BA": "别再死磕漏洞了:你和顶尖黑客之间,可能只差了这一行API", "https://mp.weixin.qq.com/s/R3D8BFUVxH6ph3ZW__ZZwg": "星球更新:一条 pre-auth 0day 链,从 XSS 到终端 RCE", "https://mp.weixin.qq.com/s/eQNzdFwf_TAahjeCWBzbfQ": "容器隔离的底层防线正在失效?NDSS 2026论文拆解云原生最隐蔽的同步漏洞", "https://mp.weixin.qq.com/s/0mQcoUGa_IL4s6D_eJMVww": "Adobe ColdFusion 多个漏洞细节已公开,可导致远程代码执行", "https://mp.weixin.qq.com/s/6vjFIzy6jTw66xoRmcispg": "Chrome V8 沙箱逃逸漏洞", "https://mp.weixin.qq.com/s/XtR710ZEj7TYzuEyr3y91w": "Win32k回调绕道:滥用合法的内核到用户回调分发进行代码执行", "https://mp.weixin.qq.com/s/QyOBMUaiDf1TPAvoqtTMyA": "7月社区投稿活动 | 漏洞挖掘∕AI渗透", "https://mp.weixin.qq.com/s/kA9sgBnLcko08dWljqAcgg": "【全网首发】Weax与Sorry勒索病毒席卷全国中小企业,深度还原全链路攻击,疑似黑客利用AI挖掘管家婆0day漏洞", "https://mp.weixin.qq.com/s/ikzBT0BpPap4weQnDKCsKg": "安全热点周报:SimpleHelp 高危漏洞遭恶意利用,新型窃取木马借机投放", "https://mp.weixin.qq.com/s/ajj-jgIxb9QIViikNIK9Hw": "【已复现】Adobe ColdFusion 路径穿越漏洞(CVE-2026-48282)安全风险通告", "https://mp.weixin.qq.com/s/g9NUfMN9f2yOB2GWU-ZvvQ": "信息安全漏洞预警(2026年6月29日-2026年7月3日)", "https://mp.weixin.qq.com/s/90Ybq6Lde4ptArS-X4FA1Q": "信息安全漏洞周报【第081期】", "https://mp.weixin.qq.com/s/oeahD6nzVswsVH83dFE3Sw": "7月20日!360 AI漏洞挖掘智能体 “图龙锋” 开放试用", "https://mp.weixin.qq.com/s/Lewk8FZcrFv4umdbw1W_kw": "微软 Exchange SSRF 漏洞详情及公开 PoC 漏洞利用程序已发布", "https://mp.weixin.qq.com/s/V1o2q8CDlZcqOJc8BxC4rA": "开源CVE挖掘利器:AI自动审计并生成CVE报告,7天覆盖14个项目挖出30个漏洞", "https://mp.weixin.qq.com/s/KxyFooqCluGAjHXhaiAJsA": "【安全圈】CISA:Microsoft SharePoint RCE 漏洞现已被积极利用", "https://mp.weixin.qq.com/s/wmLqYbhU8pGvjRGTDeK9mg": "【安全圈】Cisco 确认 Unified CM 漏洞已在野外被利用", "https://mp.weixin.qq.com/s/qGavRNRhfKZiqwhRGFvdJg": "7月20日!360 AI漏洞挖掘智能体 “图龙锋” 开放试用", "https://mp.weixin.qq.com/s/N9ED93sg-sFkZcdKoeKeFw": "信息安全漏洞月报(2026年06月)", "https://mp.weixin.qq.com/s/JsKUFbdw5NRNaNlFRzom4A": "MCP新规范所带来的安全漏洞", "https://mp.weixin.qq.com/s/dqrkCBm-M3bIANfyX8JCSg": "Radware AI Xploit Shield:AI 驱动的定制化防护,为漏洞修复争取时间", "https://mp.weixin.qq.com/s/nbpafQwu4CqMuu-zx-xYyA": "CNVD漏洞周报2026年第26期", "https://mp.weixin.qq.com/s/4Rul6jT95jASfzc-2ENdfA": "炸裂!这款Burp Suite插件让XSS漏洞无所遁形", "https://mp.weixin.qq.com/s/3cC6MXiaBcJi-6uouqQ59w": "[安全周报] 你 clone 的那个 PoC,运行即中招——ChocoPoC 把安全研究员本人变成了猎物", "https://mp.weixin.qq.com/s/RAr6_K_DgcfMjh_z8T5vaA": "7月社区投稿活动 | 漏洞挖掘∕AI渗透", "https://mp.weixin.qq.com/s/Fw2SEOBWYuzlc2ZnWi9Nlw": "零木马、不利用漏洞:我是如何看待这波由AI独立挖掘的Chromium API勒索攻击的?", "https://mp.weixin.qq.com/s/_dE3ZS5cBho8Gjfms2i2zA": "ldap利用工具公开——JNDIexp", "https://mp.weixin.qq.com/s/S4TMmQLkB7x-WAoTA7W-2w": "在Langflow开源软件中发现的严重安全漏洞", "https://mp.weixin.qq.com/s/qsv6yEj5h53-UG7A-HuL0Q": "从规则匹配到大模型推理:DeepX重塑API逻辑漏洞测试", "https://mp.weixin.qq.com/s/ed0yvbZ_rpY6bHidv-AJDQ": "【安全圈】Linux本地权限提升漏洞「Bad Epoll」曝光:CVSS 7.8", "https://mp.weixin.qq.com/s/XJ2izMj4ItbpGxH7iq35Xg": "【安全圈】6 月高危漏洞数量暴涨", "https://mp.weixin.qq.com/s/aKEy2LkClzLdZ8mcbBavkw": "FortiBleed 刷屏:边界设备被攻破,往往不是因为一个新 0day", "https://mp.weixin.qq.com/s/yoENe4EgdO7qEdA-Cz-2sQ": "Synacktiv 公开披露了一个 Kerberos 反射绕过漏洞(CVE-2026-26128),并提供了 PoC 漏洞利用代码", "https://mp.weixin.qq.com/s/w33PbWyml_N-08tOmC8asg": "新的“糟糕的”Linux内核漏洞让非特权用户获得Root,打击Android", "https://mp.weixin.qq.com/s/gp-W7XE9TD8rKLzHAlhaEw": "系统0day安全——主流企业防火墙漏洞挖掘", "https://mp.weixin.qq.com/s/cz30pdIVzLEuGetqypQAnA": "T3MP3ST安全框架将AI编程Agent变0day漏洞猎人", "https://mp.weixin.qq.com/s/KtkTfnQqxf2lzo52M1fjZw": "新型 Linux 内核漏洞 “Bad Epoll” 曝光,普通无权限用户可提权获取最高管理员权限,安卓系统同样受影响", "https://mp.weixin.qq.com/s/B7GziAOqjRSz5CfRWZxJrw": "Apache ActiveMQ Classic 重大 RCE 研究:CVE-2026-34197 及其补丁绕过 CVE-2026-42588 全解析", "https://mp.weixin.qq.com/s/CO6qqlPYprQJddWFbRn48A": "AirDrop 和 Quick Share 被曝漏洞:最顺手的近场分享,也需要安全边界", "https://mp.weixin.qq.com/s/WOAnzLINbAj9n92bj7GG7A": "FatFs漏洞使攻击者可利用特制USB∕SD卡镜像执行代码", "https://mp.weixin.qq.com/s/u5Qre21owKzxSRrCyOkmnA": "CRA 9 月 11 日强制执行!还想瞒漏洞?SRP 全民举报通道专治企业 “摆烂躺平”导语", "https://mp.weixin.qq.com/s/pe93aMfUEkVVs0j6cqeSfg": "Linux再曝“秒提权”0day:一个看不见的6指令窗口,黑客可直通root", "https://mp.weixin.qq.com/s/h9hRAy7ldqZIhcQPZAdnnQ": "上周关注度较高的产品安全漏洞(20260629-20260705)", "https://mp.weixin.qq.com/s/7TmQSYt6AEuxBRGvnryipw": "AI 驱动的漏洞自动发现与修复框架", "https://mp.weixin.qq.com/s/bwIbT1vwu1gCPKpMFHinVA": "存在长达 16 年的 Linux KVM 漏洞,英特尔、AMD x86 平台虚拟机可突破隔离逃逸至宿主机", "https://mp.weixin.qq.com/s/qTyHEGr8hPKmZX68QnoWgA": "Opera GX 浏览器存在漏洞,恶意网站可自动安装扩展模组,窃取用户访问页面中的数据", "https://mp.weixin.qq.com/s/gqsNt22hFQsdHNBnzRrweQ": "DirtyClone:Linux内核 DirtyFrag 漏洞家族新变种分析与利用(CVE-2026-43503)", "https://mp.weixin.qq.com/s/jSfcG19TipPHDU5B0f8W8w": "一周挖掘30个高危漏洞!全流程自动化CVE挖掘、AutoCVE多Agent源码审计实战系统", "https://mp.weixin.qq.com/s/a3_WGgw7J6ZxJV9cX0mLng": "AI安全现状:AI 漏洞风险是传统软件 2.7 倍,修复差距高达 25 倍", "https://mp.weixin.qq.com/s/nXuCJoG7ulb4_KSsmlyiiA": "ColdFusion 高危漏洞被利用:老牌 Web 平台,不能再靠“低调运行”避险", "https://mp.weixin.qq.com/s/4KtTArwoVlOhghworYH_bw": "【CVE-2026-43456】潜伏19年的Linux内核0day漏洞,最终收获超 8 万美元奖励", "https://mp.weixin.qq.com/s/53sL-Vl4fYGvDVqGz3PMgA": "DVWA每日实操系列|第5期 文件包含漏洞 四层手把手通关+SRC高危报告", "https://mp.weixin.qq.com/s/-ZpFN3bAn0bh6JuGcPhGRw": "一文讲透新人如何上手AI漏洞挖掘", "https://mp.weixin.qq.com/s/Y5GARwtAlpPViAqYjO40iQ": "一个潜伏16年的KVM漏洞,如何让虚拟机「越狱」", "https://mp.weixin.qq.com/s/-7Ng2y9wDbAhaGoXmjOB_g": "【热点安全风险】7月7日 |SharePoint Server CVE-2026-45659进入KEV,低权限用户可触发远程代码执行", "https://mp.weixin.qq.com/s/y1jB-TZMiXTBX671ctGvyQ": "AI红队演练详解:如何测试LLM漏洞(2026)", "https://mp.weixin.qq.com/s/6Wt6ayDj7c6tl5aNwsYPfQ": "欧盟CRA重磅红线:漏洞必须官网公开!华为、小米已经做了,大量出海企业还在裸奔", "https://mp.weixin.qq.com/s/aoD4L-k8Y4wD3Jbdi09Deg": "Adobe ColdFusion漏洞CVE-2026-48282现已被利用", "https://mp.weixin.qq.com/s/Gm0N0gwbGo2OcIueayTmEQ": "CitrixBleed Infinity:NetScaler预认证内存越读漏洞(CVE-2026-8451)", "https://mp.weixin.qq.com/s/2J4RL71EPGPWjsg9axZpyA": "FatFs 存在七处漏洞,物联网与嵌入式设备面临安全风险", "https://mp.weixin.qq.com/s/KRlzRzRNwGVcIS_AtFp4dQ": "漏洞 CVE-2026-20896 披露仅 13 天,威胁攻击者已针对 Gitea 容器漏洞开展探测攻击", "https://mp.weixin.qq.com/s/81Hus3Fc1dsnedVfk5J6AA": "CVE-2026-40138 与 CVE-2026-40139:BeyondTrust 未经身份验证漏洞(CVSS 评分 9.2)", "https://mp.weixin.qq.com/s/bWlXwbZGNzjLy6ZpsEkyhQ": "ARL-Next(灯塔资产侦察)自动化资产侦察与漏洞监控平台现代化重构版本", "https://mp.weixin.qq.com/s/VAWEpZSqyvw6MMkspE1uTQ": "黑客现在利用Oracle电子商务系统的关键漏洞发起攻击", "https://mp.weixin.qq.com/s/Yy_snYvM81v1Vpw81ljMVQ": "AI 大幅拉低漏洞挖掘门槛,开源安全守夜人该如何突围?", "https://mp.weixin.qq.com/s/42w7SwtURg97zUnpn2mrxQ": "最新 Linux 内核提权漏洞,获得八万美金,潜伏 19 年+", "https://mp.weixin.qq.com/s/f2PM2yDQhOxsZChjGdwGrg": "《RCE 拾遗》 | 一篇不起眼的技术汇编", "https://mp.weixin.qq.com/s/fyLZ3buRopnXxKLcxV1Aag": "【已复现】漏洞通告 | phpBB认证绕过漏洞(CVE-2026-48611)", "https://mp.weixin.qq.com/s/H0VcYf0mY6mgf7-C0Fuorw": "微软Edge漏洞可致攻击者远程执行任意代码", "https://mp.weixin.qq.com/s/XQhgWbZyhgpkKulRm6owzQ": "6月必修漏洞清单:涵盖Gogs、Vite等多组件高危漏洞,务必速查", "https://mp.weixin.qq.com/s/h__oS3_urFF3uKcCpj-W4Q": "BeyondTrust 修复了远程支持和 PRA 中的关键身份验证绕过漏洞", "https://mp.weixin.qq.com/s/D2m2ZOz9MNtRLIB35DMb7Q": "【代码审计】客户端漏洞之未授权文件上传+dll劫持实现命令执行rce", "https://mp.weixin.qq.com/s/i3fP0yOiJ4_VwLOuWLc_CA": "工具 | ARL灯塔 二开重构版本 自动化资产发现和漏洞监控平台", "https://mp.weixin.qq.com/s/uPtv1Tz2__9fB9P4-xjzYg": "【已复现】Linux FUSE page cache 本地权限提升漏洞(CVE-2026-31694)安全风险通告", "https://mp.weixin.qq.com/s/8z3EhwgnTyTj6Hkq8dDNCQ": "【已复现】Linux FUSE page cache 越界写本地提权漏洞", "https://mp.weixin.qq.com/s/laspFRAYA4OmgojN86YGkQ": "AI会扼杀漏洞赏金产业吗?", "https://mp.weixin.qq.com/s/hB1ujYgFqht99IutS_u3jQ": "工具推荐 | AutoCVE - 一键挖掘 CVE,筛项目、审源码、验漏洞、出报告,全流程自动化", "https://mp.weixin.qq.com/s/jPnioOdeII6xTJkpkXwImQ": "我的PDF分析助手成了内网跳板:WorkBuddy插件SSRF漏洞复盘,顺便送10套企业版给兄弟们", "https://mp.weixin.qq.com/s/schLREA8vWhc3deI7Pa2Fg": "T3MP3ST——ai安全元工具(agent自动化找漏洞)", "https://mp.weixin.qq.com/s/w20ssr3O7Uvo9QOw4P1m3Q": "用友时空KSOA popedom SQL 注入漏洞", "https://mp.weixin.qq.com/s/3DZjdpJhCPZ_6Pt9NvhXnw": "最高罚全球营收 2.5%!做欧盟 CRA 上报,漏洞线索去哪找?全渠道整理好了", "https://mp.weixin.qq.com/s/RxBW807IwVO2BUviAPQsWQ": "正在被恶意利用的 Gitea 容器高危漏洞,可泄露代码仓库与密钥", "https://mp.weixin.qq.com/s/bmxXGrXQYGO0Y6Z8Ff8GuQ": "得到$23000赏金的挖漏洞过程", "https://mp.weixin.qq.com/s/8MJTJS-aCetEZEfJIZ5KIA": "CISA被曝部署Mythos扫描联邦代码库,已发现大量漏洞", "https://mp.weixin.qq.com/s/R4fpQzyEgO7e_IU7RdtUcQ": "高危预警:Linux内核“Bad Epoll”漏洞(CVE-2026-46242)允许本地用户一键提权至Root(影响Linux 6.4+与Android的本地提权漏洞)", "https://mp.weixin.qq.com/s/4w4jlmqlF-4f4JIdOR1yMQ": "新型“Bad Epoll”零日漏洞允许攻击者获取Linux服务器和安卓设备的root权限", "https://mp.weixin.qq.com/s/bAfsWIuRhVac2SmgUvxOlA": "7月8日高危CVE漏洞速报", "https://mp.weixin.qq.com/s/usom_x30ugOFM9LbiUwBAg": "漏洞通告|Huawei HarmonyOS IPC模块竞争条件漏洞(CVE-2026-41982)", "https://mp.weixin.qq.com/s/hlDVe8sqZANVkhyBrV-g5g": "【热点安全风险】7月8日 |BeyondTrust RS∕PRA修复多项漏洞、Gitea Docker镜像CVE-2026-20896出现探测", "https://mp.weixin.qq.com/s/OFokLPFwqsWcVfUZHYH_RQ": "MapTilerTileserver 反射xss漏洞(CVE-2025-44136)", "https://mp.weixin.qq.com/s/yudRSd2hjmEd9TxIoLHKmg": "CNVD 本周漏洞态势研判:零日漏洞占比超八成,政企漏洞事件环比大幅上涨;Microsoft加速采用自研MAI模型,降低对OpenAI依赖| 牛览", "https://mp.weixin.qq.com/s/bAnlw-h1kFtNhYcB3xVohg": "7月社区投稿活动 | 漏洞挖掘∕AI渗透", "https://mp.weixin.qq.com/s/rxFYZyc7tNO2TYz4jQsYPg": "大模型 2025–2026 新CVE 漏洞全景∕技术详情", "https://mp.weixin.qq.com/s/oSNqXiN9cS8V_2xTAPVX-g": "BeyondTrust 远程接入平台四枚高危漏洞全拆解:从认证绕过到\"零信任\"信任崩塌的完整攻击链", "https://mp.weixin.qq.com/s/foMleOiYvmBA-d3hq8ks_g": "大象要一口一口吃:PHP PDO扩展中的NUL字节SQL注入与空指针解引用漏洞", "https://mp.weixin.qq.com/s/3Fdli244PQUuVpG7p5AGAg": "优倍快:注意这个CVSS满分的 UniFi OS 漏洞", "https://mp.weixin.qq.com/s/oM26QWwsbWrzaxsj8Yl7XA": "Apache Shiro 反序列化漏洞利用全解析", "https://mp.weixin.qq.com/s/huX7DXc5K58FgJgjdNktIg": "GhostLock:已存在15年的内核 UAF 漏洞,影响 Linux 所有发行版", "https://mp.weixin.qq.com/s/gcdNGcYMQjblLr_J2SnQyA": "PHP 代码审计进入 AI 时代:40+ Agent 协作挖洞,21 类漏洞全自动覆盖", "https://mp.weixin.qq.com/s/Z0aaoGShq7B1kBajmvUy-A": "安全419|一周国际网安资讯:AI平台漏洞集中爆发 勒索软件向内核演进", "https://mp.weixin.qq.com/s/T60wZJnLEZQdEEC16bcT5A": "【已复现】隐藏15年的 Linux Kernel 提权漏洞 GhostLock(CVE-2026-43499)", "https://mp.weixin.qq.com/s/RH2n5i8uP_lh0JmPjKnD8A": "想靠挖漏洞赚赏金?别只会机械跑工具了!掌握这5大核心技术,进阶SRC实战", "https://mp.weixin.qq.com/s/0dUn1ZJEpeaOb9uKXR5uxA": "【漏洞通告】Linux Kernel rtmutex 本地权限提升漏洞(CVE-2026-43499)", "https://mp.weixin.qq.com/s/CIKNm78KOXbfkO_aXCcgIg": "【已复现】用友U8cloud XChangeServlet SQL注入漏洞(QVD-2026-38848)安全风险通告", "https://mp.weixin.qq.com/s/JpLL8uahfDwGhaTDinUS7g": "【漏洞通告】XWiki Platform Old Core 目录遍历漏洞(CVE-2026-34151)", "https://mp.weixin.qq.com/s/KwXtaKHC8b7PwcbUqvYjcA": "【无问AI网安模型】二进制漏洞分析挖掘能力实战测评", "https://mp.weixin.qq.com/s/MpebdOCePYUPgo-QBzhalA": "【漏洞通告】Linux Kernel GhostLock 权限提升漏洞(CVE-2026-43499)", "https://mp.weixin.qq.com/s/f42pOrBBl7Ft8zmjw-OkZw": "首个一键式Android 17漏洞利用链可使攻击者完全控制手机", "https://mp.weixin.qq.com/s/0W37yYHwlsnqdeK3OD85KA": "SharePoint远程代码执行漏洞PoC及技术细节公开", "https://mp.weixin.qq.com/s/Y_XDIUcv-_zYUg9udkNqkQ": "启明星辰发布天镜AI-PTS,破解漏洞验证自动化难题", "https://mp.weixin.qq.com/s/pFH1fmJfTxweGR91iY3NPQ": "【AI安全】Llm-Vuln-Checker开源!金丝雀悄悄揪出LLM安全漏洞", "https://mp.weixin.qq.com/s/7qFQN--jUsZzd8vQswXS0g": "零日漏洞引爆电信运营商千万级数据泄露事件", "https://mp.weixin.qq.com/s/kU75b2VwHaGfvSmizljhvw": "AI 编程助手中发现了一个名为“GhostApproval”的新漏洞", "https://mp.weixin.qq.com/s/ZW1T-3HlEcXjC-nU-ionNw": "一句话套走你的快递:某电商AI助手提示注入漏洞全复盘,我把别人的订单看了个遍", "https://mp.weixin.qq.com/s/H7El9UmBDr_QPgalT95Ukg": "【安全圈】Google Dialogflow CX 漏洞可让攻击者劫持 AI 对话", "https://mp.weixin.qq.com/s/Qfhjhk-0i_1382cI--Fqwg": "【安全圈】严重漏洞暴露 GitHub Agentic Workflows 面临提示注入风险", "https://mp.weixin.qq.com/s/mT2eOMJYfkcpviZmNbK4sA": "【$7,000】HackerOne 平台最新高危漏洞披露", "https://mp.weixin.qq.com/s/G_RQRM_k_MfkyOzHQW0eTQ": "【高危漏洞预警】GhostLock (CVE-2026-43499):Linux内核15年栈UAF漏洞,本地提权与容器逃逸风险通告", "https://mp.weixin.qq.com/s/6OlwhUOOPQQjJcWvv_sUuQ": "工具推荐 | 重构 ARL 经典版:打造全自动资产侦察与漏洞监控平台,AI 二开友好", "https://mp.weixin.qq.com/s/fbSUAP4M3QwhivkmmovTHA": "OPNsense Root RCE 漏洞(CVE-2026-57155,CVSS 9.9) PoC已公开,建议立即升级!", "https://mp.weixin.qq.com/s/a90b7amdDn_rnyA5cor9Qg": "安全工具丨多功能Web漏洞扫描器,支持80项漏洞自动检测!", "https://mp.weixin.qq.com/s/ddprXb52aj7Oc56ojj874g": "当漏洞猎人成了猎物:ChocoPoC 木马借假 PoC 仓库精准攻陷安全研究员", "https://mp.weixin.qq.com/s/AIVaiUG0iVkSba7UB9rXpA": "【CVE-2026-46215】通过 DRM GEM change_handle 中的UAF功能获得ROOT权限", "https://mp.weixin.qq.com/s/GSbyHVCqWu9c9fQJc1Kwmw": "CVE复现 | CVE-2026-31816漏洞复现", "https://mp.weixin.qq.com/s/2OBKAihOEfR0x59zx8GUcw": "西软云XMS download2 任意文件读取漏洞", "https://mp.weixin.qq.com/s/hRtyUrP23BiNQld_lqL5KQ": "微软修复 Windows Defender RoguePlanet 漏洞 CVE-2026-50656", "https://mp.weixin.qq.com/s/nkL1RyUnL0bkiFucu216Pw": "漏洞复现 | OpenCode content 接口任意文件读取漏洞", "https://mp.weixin.qq.com/s/dfei6JgD1QkIjZ7TjTYPVQ": "锐明技术Crocus系统 DeviceFileUpload 任意文件读取漏洞", "https://mp.weixin.qq.com/s/kXLAXtk5kuVEbXSrnjptDg": "【热点安全风险】7月10日 |Google发布Chrome更新,修复27个安全漏洞,包含多个常用组件中的Critical级别漏洞", "https://mp.weixin.qq.com/s/Bi8JpkH7bBdU80Du5_Utkg": "潜伏逾十年的U-Boot启动漏洞曝光:数十亿设备面临隐蔽固件攻击", "https://mp.weixin.qq.com/s/DEvDjA7yaUSoFo8oTWb2vQ": "ThinkCMF漏洞全解析:从版本识别到Getshell的实战指南", "https://mp.weixin.qq.com/s/b4RRU5wSTl8m-7Z9V9e1SQ": "想靠挖漏洞赚赏金?别只会机械跑工具了!掌握这5大核心技术,进阶SRC实战", "https://mp.weixin.qq.com/s/LepGxY4j_gtwHcT_rm7PSw": "5步带你从0开局拿下漏洞赏金!1700讲透白帽src的所有核心基础和赏金思路!", "https://mp.weixin.qq.com/s/cmNeAPe6Bt7i2-nySnkZSw": "微软SharePoint Server再次被曝出存在可被远程利用的高危漏洞", "https://mp.weixin.qq.com/s/UcysNxT_5d0S-npTJa24aA": "老牌 Shiro550 漏洞为何常年高危?ShiroAttack2 新版工具一键爆破密钥、注入内存马,CLI 批量脚本化渗透", "https://mp.weixin.qq.com/s/08VVWB-4RMKmK7M1XZebtg": "CVE-2026-40860-ApacheCamel-JMS反序列化RCE 漏洞分析报告", "https://mp.weixin.qq.com/s/4zi8UhOhBHv4BVXTOsCvQQ": "fast-mcp-telegram 存在严重漏洞,攻击者无需令牌即可访问 Telegram 会话", "https://mp.weixin.qq.com/s/0ZgpXVvB5hxs43lQ849jPQ": "CVE-2026-54390-JTL-Shop-Smarty-SSTI-远程代码执行", "https://mp.weixin.qq.com/s/Y8g8lMiVDaeHtP9DRpVgjQ": "信息安全漏洞周报【第082期】", "https://mp.weixin.qq.com/s/wrzXpega5E34Y1AmqiOL6w": "关于暂停接收同程旅行旗下子公司业务漏洞公告", "https://mp.weixin.qq.com/s/Qklt1LQMR0hRZtOPnbaPkw": "安全热点周报:Adobe ColdFusion 曝高危漏洞,披露后两小时内即遭利用", "https://mp.weixin.qq.com/s/N55sR2zR2NMDjgDNCwAWIQ": "2026攻防演练必修高危漏洞集合(2.0版)", "https://mp.weixin.qq.com/s/WzVM5cuPnmFm4WZItCRmJw": "Apple Model I∕O再爆USD越界写入漏洞", "https://mp.weixin.qq.com/s/5UpsjWQCLqXIZ5OJct5y-g": "微软修复可获得系统权限的 RoguePlanet Defender 漏洞", "https://mp.weixin.qq.com/s/0dn-AT5dbbDT8d_3ZHMU2Q": "7月10日高危CVE漏洞速报", "https://mp.weixin.qq.com/s/Cilus-EjTwI8jpKowSas8g": "CNNVD | 人工智能重要漏洞通报(2026年第十期)", "https://mp.weixin.qq.com/s/E6CQRxqgImefJn_flh0pYQ": "信息安全漏洞预警(2026年7月6日-2026年7月10日)", "https://mp.weixin.qq.com/s/C9_7F9TnPyiw7oy0gL-JvA": "【高危漏洞预警】Firefox JIT引擎误编译漏洞CVE-2026-10702", "https://mp.weixin.qq.com/s/PW_0zEt8AfcEsIKuNVWPhw": "红队内网渗透实战:CVE-2020-0796 SMBGhost 利用(附 EXP 工具)", "https://mp.weixin.qq.com/s/3t4mKqcMLO7dz-Bf8ccggw": "DVWA每日实操系列|第8期 弱会话ID漏洞 Weak Session IDs", "https://mp.weixin.qq.com/s/LJ2Y62SXF3abgOM-D15b0Q": "攻防演练前,这679个漏洞建议先查一遍", "https://mp.weixin.qq.com/s/paLvBHmYGsZIjH9vy8jgOw": "电子壳里的漏洞:Electron应用如何成为攻击者的后门温床", "https://mp.weixin.qq.com/s/nbUUN3_k5H4rJKUA3GhGfw": "炸裂!这款 BurpSuite 插件让 Web 漏洞探测效率提升十倍", "https://mp.weixin.qq.com/s/DhzyWnex0HDdLtpCMflViQ": "0185.绕过人工智能聊天隐私:BOLA 漏洞如何泄露 Spicychat 上的私人信息(赏金 700 美元)", "https://mp.weixin.qq.com/s/CS9Cb1NtgKcYAWEyFKex8w": "第31篇 全栈AI Web流量分析、冰蝎解密、Java内存马排查与Fastjson漏洞利用全流程", "https://mp.weixin.qq.com/s/JWa9J2xcEmj8JGIZQgAVZA": "PAN-OS 高危缓冲溢出漏洞可导致任意代码执行", "https://mp.weixin.qq.com/s/uirqC0lz2lQDIYiLHAjz8Q": "2026攻防演练必修高危漏洞集合(1.0版)", "https://mp.weixin.qq.com/s/kL39d3vSxc4f0JbrPH1IZw": "CVE-2026-43499 (GhostLock):Linux 内核 rtmutex 子系统的 Stack-UAF 漏洞(存在 15 年)", "https://mp.weixin.qq.com/s/EOMTqw6QBRkPBPILLjZEng": "Linux内核FUSE漏洞", "https://mp.weixin.qq.com/s/lXQDZe66GqnEiV7aCrxVQA": "【成功复现】XWiki Platform目录遍历漏洞(CVE-2026-34151)", "https://mp.weixin.qq.com/s/YwnRBHD5Gg8ioXwElwE3SQ": "从ISP路由器入侵到MediaTek内核0day:一位独立研究者的Linux内核远程代码执行", "https://mp.weixin.qq.com/s/_1JnI5G2U76_3h7RjDlyIA": "WordPress插件漏洞遭大规模武器化", "https://mp.weixin.qq.com/s/H-BZW4cvdDmvbtED7bk_CA": "ChatGPT漏洞可被利用访问系统文件;新型攻击可远程劫持AI编程Agent执行恶意代码 | FreeBuf周报", "https://mp.weixin.qq.com/s/V5d0xAb4WC_nWXIidIexfQ": "Linux内核FUSE漏洞可致攻击者获取Root权限", "https://mp.weixin.qq.com/s/XYrXBlPz6R6pOYTT_faBSg": "紧急预警 | CVE-2026-21053 | 三星自带电子邮件应用任意文件写入漏洞", "https://mp.weixin.qq.com/s/NujKp6tHTIkutAVBVpnWjQ": "紧急安全预警|MCP Server Kubernetes 爆出高危参数注入漏洞(CVE-2026-61459),可导致 Kubernetes 集群完全沦陷", "https://mp.weixin.qq.com/s/JenudlBNUkkHRcydzk-tbA": "毫秒级破解:戴尔BIOS口令为何在XOR加密下不堪一击 (CVE-2026-40639)", "https://mp.weixin.qq.com/s/9XBaIsT6w9sRhgUCLgr7YQ": "深入剖析 CVE-2026-1207:Django RasterField(PostGIS) 栅格查询 SQL 注入漏洞", "https://mp.weixin.qq.com/s/MIdF6e91bLrMyfjSVLhS-A": "首个 一键式 Android 17 漏洞利用链。网络安全一周新闻速看(20260712期)", "https://mp.weixin.qq.com/s/yomDc2224FxsEeU0GcEKmg": "孚盟云 ExportExData.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s/xGJgm7kOmD4N7RMDKkfHSQ": "每周PDF资源:6月必修漏洞清单;全球首例全自动AI勒索攻击曝光;重磅APT预警", "https://mp.weixin.qq.com/s/gisfie_rV-qfUXdstr76JQ": "禁了 system 就安全?六边形靶场 RCE 上篇:从 exec 打到反引号", "https://mp.weixin.qq.com/s/sEk-xaBTBp2ySo_iwUag4w": "从0到1搭建SRC漏洞挖掘自动化工作流:8个脚本直接可跑实战教程", "https://mp.weixin.qq.com/s/EDdSf6XEbuekbWdsjAOC6Q": "暗网泄露:前美国运通(American Express)金融理财部门", "https://mp.weixin.qq.com/s/oYAHM8zq9DLLu9MBQdERYA": "安全工具丨开源的企业级安全管理平台,可视化Web界面,从资产清点到漏洞扫描,从CIS基线到威胁狩猎,一个平台搞定安全运营", "https://mp.weixin.qq.com/s/xHATuNLfFaj5fh3KL4aYdw": "红海云eHR StWasAssessDept.mob SQL注入漏洞", "https://mp.weixin.qq.com/s/SDcNnWXe4BZU7ExTv0tlSg": "7月13日高危CVE漏洞速报", "https://mp.weixin.qq.com/s/s94HNhD-ZNRzRnXEtdJLDA": "研究人员详细介绍了利用 OpenClaw 三个漏洞实现 WhatsApp 到主机攻击链的过程", "https://mp.weixin.qq.com/s/m-UycOqcRINdxTPkyC58FA": "U-Boot 存在高危漏洞,数百万设备的安全启动机制遭到破坏", "https://mp.weixin.qq.com/s/9f_PN8IZuJ9PK3veKHsZKQ": "SharePoint又一个绕过:CVE-2026-33112从XmlValidator限制到低权限RCE", "https://mp.weixin.qq.com/s/fL9jrvLaXAwAPUS-kQberw": "人工智能重要安全漏洞的通报-OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s/K8TPRpg-KAEfjQPvxzYMQw": "7月社区投稿活动 | 漏洞挖掘∕AI渗透", "https://mp.weixin.qq.com/s/9IvhhudhTZGDZVR7jxTlcQ": "立即更新:Zimbra 经典版网页客户端存在高危漏洞,可能导致邮箱数据泄露", "https://mp.weixin.qq.com/s/8p8y7vuchvjJL7jysVWT3A": "CNNVD 发布 2026 第十期 AI 漏洞通报:208 个人工智能漏洞含 32 个超危风险;美国国家安全局恢复核心网络攻击部门编制| 牛览", "https://mp.weixin.qq.com/s/jWN3eHJLb5tE9h-m61QG4Q": "原创—某AI xss漏洞", "https://mp.weixin.qq.com/s/znedPi3oPn2hNCCJ8tBf6Q": "dddd 1.8.3 - 优化检测流程,更智能化的指纹、漏洞检测工具", "https://mp.weixin.qq.com/s/Zk0WrX1Kaucq8a_PSlrnFQ": "研究人员详细介绍了利用 OpenClaw 三个漏洞实现 WhatsApp 到主机攻击链的过程", "https://mp.weixin.qq.com/s/aNwu1NP1vkLYk7YTkwVs-Q": "5步带你从0开局拿下漏洞赏金!1700讲透白帽src的所有核心基础和赏金思路!", "https://mp.weixin.qq.com/s/MZwCjvNEVPtGyLUKWpesOQ": "00Query 发布!基于00信安API的微信公众号∕小程序隐藏资产发现工具,快速扩展SRC漏洞挖掘攻击面!", "https://mp.weixin.qq.com/s/h_ek2fHAQ_nkmmWvNsdRkQ": "白昼信安内部漏洞知识库注册邀请码", "https://mp.weixin.qq.com/s/n4rsvHShD2e7a8n_zD78vQ": "FlowiseAI 任意文件写入漏洞 CVE-2025–26319", "https://mp.weixin.qq.com/s/NVzlUUJKzVC1K_jS_YfeGQ": "00Query 发布!基于00信安API的微信公众号∕小程序隐藏资产发现工具,快速扩展SRC漏洞挖掘攻击面!", "https://mp.weixin.qq.com/s/JaLsyFK2V7jzV8_bI0UM9w": "CNNVD | 最新OpenClaw多个安全漏洞通报", "https://mp.weixin.qq.com/s/YnJ08eUTx1_v2_RxDu7VuA": "Apache su EXEC 日志目录可写导致的 SUID 提权漏洞", "https://mp.weixin.qq.com/s/7zNF8V4ZIAvNpGFi_-sCtw": "安全通告丨网络安全漏洞通告(2026年7月)", "https://mp.weixin.qq.com/s/9q8vP2WF8c-0epOy56LE_g": "Zimbra:速修复这个严重的 Web Client XSS 漏洞", "https://mp.weixin.qq.com/s/yEj8oZe_sDhJBMkRRxK0og": "【高危AI漏洞预警】CVE-2026-56271 Flowise硬编码JWT密钥认证绕过漏洞", "https://mp.weixin.qq.com/s/nDiZgxmuTvQncJH95tlOEw": "【6月29日-7月5日】安全漏洞周报 | 523个高危漏洞急需关注", "https://mp.weixin.qq.com/s/zkHmkKy9VLn_XXe3FgGN0g": "AntiDebug Mcp、AI逆向绕过前端,Hook 加密接口,抓取 Vue 路由漏洞,接入 MCP 让 AI 自动化挖掘前端漏洞", "https://mp.weixin.qq.com/s/nHc4nDwcxHSokkyxTrhhkQ": "Wireshark紧急修复12项漏洞,恶意数据包可致程序崩溃", "https://mp.weixin.qq.com/s/O9P_7xlC1zw9U4btItgCoQ": "紧急安全预警|OpenWrt Samba被曝高危命令注入漏洞(CVE-2026-59260),攻击者可远程获取Root权限", "https://mp.weixin.qq.com/s/s6hhOyoq3xKgy22nJLMAsQ": "聊一聊CORS跨域漏洞的危害", "https://mp.weixin.qq.com/s/JRfwNdzBd-gbW9tO-EkUFA": "0day | 企业信息发送平台 getLicenceDetail 存在任意文件读取漏洞", "https://mp.weixin.qq.com/s/7tjMZKbnQ-3IKMCTHjo2rg": "重磅预警!去中心化黑客集群Scattered Spider来袭:不靠0day,一通电话就能拿下企业全网", "https://mp.weixin.qq.com/s/9qd6fLdPA22kSEAiyltVIA": "Apple起诉OpenAI涉嫌窃取商业机密,AI硬件竞争升级法律战;CNVD周报:本周 85% 收录漏洞为0day,多款CMS、路由设备曝未修复高危漏洞|牛览", "https://mp.weixin.qq.com/s/g88J0mJZXAp59Xj5beZKgw": "Src捡钱12,AI一键自动挖掘小程序漏洞", "https://mp.weixin.qq.com/s/Suse7SDHzmHToDp59O8RvA": "[AI]Claude + Skills 自动漏洞挖掘", "https://mp.weixin.qq.com/s/BBFHM1gaxGrL6LtM51oe4A": "CVE-2026-42989:Windows 10 1607 权限提升漏洞 + POC", "https://mp.weixin.qq.com/s/VuGIzzxWTwwGBPHOdLzSbw": "赏金猎人的SameSite扫盲贴:别再因为看不懂Cookie错失漏洞", "https://mp.weixin.qq.com/s/nCVgM6J_aCcc3pHpTAD8aQ": "派拓CEO:当前安全攻防的关键是抢先发现并修复漏洞", "https://mp.weixin.qq.com/s/tWNzl3mCUkvB03qmzejPBg": "Turla 黑客利用 SharePoint 漏洞访问了数千个法国用户账户", "https://mp.weixin.qq.com/s/ab5lAthSUHY5HsvfJkSYZQ": "【高危AI漏洞预警】n8n令牌验证绕过漏洞(CVE-2026-59208)", "https://mp.weixin.qq.com/s/zc59bWR3OiatN7uIuWyjDw": "AI Agent 与原生速度融合的高保真漏洞扫描器 —— Vigolium", "https://mp.weixin.qq.com/s/VoyGVtkQDGZyGWRN1zAb0w": "本周漏洞速递|9个高危漏洞预警+漏洞复现", "https://mp.weixin.qq.com/s/CfNbH_ZV7nOgeUhW6C1PBg": "微软将三条 Salesforce 攻击路径与 ShinyHunters 一年的活动联系起来", "https://mp.weixin.qq.com/s/bHrmKYB38GkIO73jP9sGhw": "【漏洞通告】Apache Airflow Git provider SSH 主机密钥校验绕过漏洞(CVE-2026-58065)", "https://mp.weixin.qq.com/s/GuW07t2BbduJ5m3bDfdi9g": "雷神众测漏洞周报2026.7.6-2026.7.12", "https://mp.weixin.qq.com/s/1n8RZtRK8p51VyUdPDt8-Q": "Windows HTTP.sys 整数溢出漏洞(CVE-2026-47291)", "https://mp.weixin.qq.com/s/Uf7ZeAqNwgLQH5N9QSumBg": "OSCP百日备考18|Windows提权(上):信息收集+内核漏洞+服务配置错误,从低权用户摸到SYSTEM", "https://mp.weixin.qq.com/s/FiX2Pwt2f90bbapLGN6tUA": "ServiceNow 严重漏洞导致远程攻击者执行恶意代码", "https://mp.weixin.qq.com/s/MTgI75rQ-RcxMywnDT5yWA": "评论 | 堵住“仅退款”规则漏洞", "https://mp.weixin.qq.com/s/Uexad2PrV9u-XFqJ8Exm1A": "WinFsp 竞争条件漏洞允许攻击者获得 Windows 系统级访问权限", "https://mp.weixin.qq.com/s/81skvRTYVKysNO_n32UKfQ": "黑名单不是防火墙 六边形靶场 RCE 中篇:disable_functions、分隔符、空格绕过", "https://mp.weixin.qq.com/s/9GljM5jXaRDKFCxHLyMGPA": "AI漏洞挖掘:我的一些感想", "https://mp.weixin.qq.com/s/6ORZfXD31yoXd1F89Wljgg": "CNNVD通报OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s/ylUhqNEMjPDfS4lul9peig": "Web3智能合约安全漏洞检测工具", "https://mp.weixin.qq.com/s/OX6LBRFhJwuAeTW17sd_7w": "7月社区投稿活动 | 漏洞挖掘∕AI渗透", "https://mp.weixin.qq.com/s/Glwk6X_Akq3BtXaUeSslkQ": "7月15日高危CVE漏洞速报", "https://mp.weixin.qq.com/s/UTmUPTETr9bT-395dX8vEw": "史诗级安全扫描工具降临!4900+漏洞覆盖重新定义安全边界", "https://mp.weixin.qq.com/s/DVNwLvLl4uFB-nhPshsU8A": "“金鹰计划”启动:美国政府依托前沿AI构建漏洞发现与修复协同体系", "https://mp.weixin.qq.com/s/UQzh3uPTGijQy9-lwA2TIA": "【漏洞通告】微软7月多个安全漏洞", "https://mp.weixin.qq.com/s/5ZEAx6XMW-5zS4C7u6ZwmA": "伊朗利用电信漏洞实时监视美军位置,疑似用于作战打击行动", "https://mp.weixin.qq.com/s/4OFzggw7m5k8bBG9yzcsRg": "72小时全球黑客狂欢,APT+勒索+0Day齐炸", "https://mp.weixin.qq.com/s/Kndq5ayLaknllpu48PedcA": "Firefox、Chrome、Adobe 和 VMware 更新修复了多项关键安全漏洞", "https://mp.weixin.qq.com/s/ZHBhcOoiwyZkUCHWuI2ydw": "专题报告 | 恒安嘉新网络安全-APT攻击、勒索病毒及互联网漏洞专题分析报告", "https://mp.weixin.qq.com/s/u3fQutex_-GhLy7GGwk9Fg": "能信安:漏洞通告", "https://mp.weixin.qq.com/s/58zx-0gFT4onX-ll565u-g": "50万+漏洞数据背后,墨菲安全想解决国产大模型的一个关键问题", "https://mp.weixin.qq.com/s/6OWnpcSne6uRX6UJ6ouloQ": "7月17日高危CVE漏洞速报", "https://mp.weixin.qq.com/s/Rf3w_amp_ZxkZ-mCvwKEuw": "漏洞复现 | WordPress WooCommerce Designer Pro存在任意文件读取(CVE-2025-10897)", "https://mp.weixin.qq.com/s/i_ETBHfxzhk7h4Fh0ZQ4Pw": "微软创纪录的漏洞补丁月意味了什么", "https://mp.weixin.qq.com/s/SF0zqSBiMeQuOjfxAnLjjw": "用AI跑赢漏洞攻防战:漏洞自动化挖掘、验证、防御实战框架", "https://mp.weixin.qq.com/s/wLoMxYbYUaEwTgNsZSbAKA": "【漏洞通告】SonicWall SMA1000 SSRF漏洞(CVE-2026-15409)", "https://mp.weixin.qq.com/s/yJ62cKY6jvjWhy6jihtFOw": "AI能发现漏洞,但验证仍需人类知识", "https://mp.weixin.qq.com/s/mIeG9X2DwPIdGgXdi848JA": "报名启动 | “2026工赋砺网”软件供应链安全与漏洞管理实践专场培训", "https://mp.weixin.qq.com/s/oFe4Iv_iKPiI51itrWEowA": "安全热点周报:微软补丁日修复漏洞数量创新高,披露3个零日漏洞", "https://mp.weixin.qq.com/s/insho80kGInoa1BTeJsxIA": "【一周安全资讯0718】《网络安全技术 人工智能应用安全 应急管理》参编单位征集;微软史诗级补丁日:622个漏洞、两个在野0Day", "https://mp.weixin.qq.com/s/sxTXiq6GWi5SZxR-eNDfDA": "CNNVD通报微软多个安全漏洞", "https://mp.weixin.qq.com/s/vUNGR_OBQxLZnWjCSPKGjg": "天融信亮相2026世界人工智能大会,获评人工智能安全漏洞治理联盟首批成员单位", "https://mp.weixin.qq.com/s/YMzECQW84tmHltimRvfZPA": "世界人工智能大会|人工智能安全漏洞治理联盟正式成立", "https://mp.weixin.qq.com/s/NMJr4ODJRhelRJ5jWd07Gw": "2026年攻防比赛中漏洞类型总结(AI改变漏洞挖掘方式)", "https://mp.weixin.qq.com/s/zvBoxczYivm6LbiIiiR_MA": "7-Zip高危漏洞CVE-2026-14266", "https://mp.weixin.qq.com/s/eYQLrvMFAPWGJ-eDhtDLlg": "【已复现】WordPress REST API 批处理路由混淆与 SQL 注入远程代码执行漏洞(CVE-2026-63030)", "https://mp.weixin.qq.com/s/UKxjfVTBysClubWx5qdMgg": "世界人工智能大会 | 人工智能安全漏洞治理联盟正式成立", "https://mp.weixin.qq.com/s/DGxLH0pUpEIidOdEh5jqLQ": "OpenSSL“HollowByte”漏洞:11字节触发DoS攻击", "https://mp.weixin.qq.com/s/JfX-81HT37OrUF13_9MiyQ": "世界人工智能大会|人工智能安全漏洞治理联盟正式成立", "https://mp.weixin.qq.com/s/c8LpSEejoer04N1LiVFeqA": "非插件漏洞,WordPress 未授权 SQL 注入漏洞链可导致RCE", "https://mp.weixin.qq.com/s/1cQX63lsgpFCDm2s2qSJ3w": "WAIC 2026 | 锦岳智慧获评 “人工智能安全漏洞治理联盟” 首批成员单位", "https://mp.weixin.qq.com/s/fztSui3bqoQ9x4rxQCmbFQ": "Fastjson 1.2.83 远程代码执行?rce?", "https://mp.weixin.qq.com/s/AW9HGRnQQTRRF_hH4P2_xA": "中央网信办部署开展“清朗·未成年人网络保护”专项行动;CNVD发布上周漏洞周报:漏洞总量走高,多款海外软件曝高危漏洞 | 牛览", "https://mp.weixin.qq.com/s/o8TeuIpBOcNohYhdQqgzEg": "7月社区投稿活动 | 漏洞挖掘∕AI渗透", "https://mp.weixin.qq.com/s/ebRk1Vrk7r0cUHNyGM-fiw": "世界人工智能大会启幕|华云安跻身人工智能安全漏洞治理联盟首批成员单位", "https://mp.weixin.qq.com/s/fI_wV_n2QRnZ09ygxpI5nA": "CNVD漏洞周报2026年第28期", "https://mp.weixin.qq.com/s/1DDz7VRYfNkmQMPF36xpPA": "【漏洞复现】Fastjson 1.2.83远程代码执行漏洞", "https://mp.weixin.qq.com/s/VORXbD0VvNio7ETVhiGr9w": "新增受影响场景,Fastjson远程代码执行漏洞三次更新", "https://mp.weixin.qq.com/s/HZm_WSiMvObEbLPlCclcBg": "Oracle 2026年7月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s/DVAMYRjIBuVf_4MJc_oYYw": "全网首发|授权渗透测试中围观大佬现场出0day的飘逸身姿", "https://mp.weixin.qq.com/s/hyQ-Zr-AY10q5XGG9znmSQ": "7月社区投稿活动 | 漏洞挖掘∕AI渗透", "https://mp.weixin.qq.com/s/LMbgRdFqa4CxKR3xveDXtA": "Zimbra 修复严重的 SNMP 命令注入和 XSS漏洞", "https://mp.weixin.qq.com/s/v4JCIJNzFb25Nk3JOE8Psg": "危险速查!!!Fastjson 远程代码执行漏洞,这些版本全部受影响!", "https://mp.weixin.qq.com/s/XJVHhJtU27GCPFLTIQCeWA": "【漏洞通告】NGINX map 指令正则匹配漏洞(CVE-2026-42533)", "https://mp.weixin.qq.com/s/FGICc-myx0z_p1nLUpQN9g": "OpenAI 自曝:AI 在测试中“黑”了 Hugging Face,还用了零日漏洞", "https://mp.weixin.qq.com/s/tDTxjxNGrtLpIxAdWpLmEw": "OpenAI安全测试中失控:批量0day入侵Hugging Face生产环境", "https://mp.weixin.qq.com/s/uQJ7jCtP9miiosSXjyUaKQ": "新型 Bit2Watt 攻击,云租户无漏洞亦可扰乱电网", "https://mp.weixin.qq.com/s/fvWnDvAx0aKRKlgW_RR9VQ": "Gemini 3.5 Flash Cyber,可自动化快速完成漏洞挖掘与补丁生成", "https://mp.weixin.qq.com/s/jFglwXUuGUwIxu-Olt7gRQ": "漏洞复现 | 雨诺调度客户端 UserList 存在未授权访问敏感信息泄露漏洞", "https://mp.weixin.qq.com/s/bPDCLx_y_ecRahm1p5XKSw": "【漏洞复现】用友A++V8系列产品selectMaUser接口SQL注入漏洞", "https://mp.weixin.qq.com/s/i69VBFscdZDVKoIshijNpQ": "Android AI Agent现漏洞,隐形文本可执行主机代码", "https://mp.weixin.qq.com/s/jRr9Ydz-9SOsYeyEXV-Z2w": "漏洞复现 | KodExplorer 存在弱口令漏洞", "https://mp.weixin.qq.com/s/psdy-kk9b-Wx-OxdH_QNuw": "600,000个网站面临风险:Ninja Forms存储型XSS漏洞CVE-2026-65048,CVSS评分高达9.3", "https://mp.weixin.qq.com/s/Td5558oH8-x7yMXesBTl-Q": "漏洞挖掘信息收集技巧", "https://mp.weixin.qq.com/s/9V01iepOzB3hGFiqHbEKJw": "安全快报 | 俄罗斯情报部门利用北约国家和乌克兰联防摄像头漏洞监视军事行动", "https://mp.weixin.qq.com/s/B68WNHqi5RiBNiohd04b3w": "Redis身份认证后远程代码执行漏洞通告【已复现】", "https://mp.weixin.qq.com/s/uzZ89X-BG-wExcRo7bdOqg": "零基础如何靠挖漏洞拿下5位数赏金?这份网络安全进阶路线图请收好!", "https://mp.weixin.qq.com/s/YeqxnLoGDB1v6aCDYBgN3w": "Certighost(CVE-2026-54121)", "https://mp.weixin.qq.com/s/QfMB0oA8mvJga20skcbLUA": "【热点安全风险】7月25日 | Clop 勒索团伙正针对互联网暴露的 PTC Windchill 和 FlexPLM 实例开展数据窃取勒索活动", "https://mp.weixin.qq.com/s/vuQ5d_37WtyD0Gkf7-mdhg": "Chrome 150紧急修复四大高危漏洞", "https://mp.weixin.qq.com/s/TIJAWL7rkG4JVEecTlnEMw": "KARR蓝牙漏洞危机:220万辆车陷远程控制风险,共用密钥暴露安全隐患", "https://mp.weixin.qq.com/s/rig5KozDcNQgz-A_sH1K8w": "【成功复现】Linux Kernel XFS Reflink本地权限提升漏洞(CVE-2026-64600)", "https://mp.weixin.qq.com/s/Oa9pVBMLUSGOzg0kV9y4tw": "漏洞复现 | Langflow validate_code 远程命令执行漏洞", "https://mp.weixin.qq.com/s/Oqw4Yq6aSgH0kuQ3kTsXmw": "研究人员公布usbliter8 硬件漏洞越狱iOS 27方案", "https://mp.weixin.qq.com/s/qUY67yfynm9DmpGc6Wm0Ew": "每周PDF资源:云安全漏洞挖掘与利用Skill;一周30个CVE;安卓逆向", "https://mp.weixin.qq.com/s/kX3gnGpTPU06rrJTsEyb6A": "吃透APP逻辑漏洞挖掘思路:汇总越权、信息泄露、重放刷VIP、加固后仍挖出高危逻辑漏洞等真实实战案例", "https://mp.weixin.qq.com/s/YgyhwQm5rPYLQGCBm5b8mw": "Claude Max 20x 订阅漏洞分析", "https://mp.weixin.qq.com/s/OODDmAA5v8Wb0tN1jvUtMQ": "Claude Max 20x 订阅漏洞分析", "https://mp.weixin.qq.com/s/mVz8_Lg6xOkFjzMCExk2Tg": "NodeBB 修复由AI发现的8个漏洞,可暴露管理员访问权限和私密聊天记录", "https://mp.weixin.qq.com/s/PONVOe9ehMxbB86HiVKSQw": "刚升到 Gitea 1.27.0 以为安全了?两个 0day 直接 RCE", "https://mp.weixin.qq.com/s/ueK61lTVaHIWmD86XvyNEQ": "【edu通杀刷分】CVE-2026-63030∕60137-Wp2Shell命令执行+SQL注入", "https://mp.weixin.qq.com/s/-8C2V0a_pNmNfZXhcoxpgw": "智能自动化漏洞挖掘平台 -- AutoHunter", "https://mp.weixin.qq.com/s/1aAYCJ_Wkph4m0T8EV1Nzg": "WAIC|观安信息入选人工智能安全漏洞治理联盟首批成员", "https://mp.weixin.qq.com/s/K9tzMuWWhMA_2Ls9JF4qIg": "【漏洞通告】Fastjson2 AutoType校验绕过远程代码执行漏洞", "https://mp.weixin.qq.com/s/fnuSmqUoRNglZ3tu4ceb6Q": "我做了一个用自然语言挖漏洞的 AI 渗透工具:VulnClaw", "https://mp.weixin.qq.com/s/RgweNfBqPltqeznbjzXsOA": "Web常见漏洞合集,420页Web应用安全权威指南(附PDF)", "https://mp.weixin.qq.com/s/ZZ_s9cBW5Y4QOauvjfgrPA": "Invicti 26.7.0 更新 - 漏洞扫描神器!", "https://mp.weixin.qq.com/s/OAWs3646H1y7W85v9igdYg": "CSA预警| 智能体底层框架级漏洞--通过篡改元数据完美避开提示注入防护", "https://mp.weixin.qq.com/s/Ql8ZFjGRTYDB7jYj4iyG5Q": "CNVD漏洞周报2026年第29期", "https://mp.weixin.qq.com/s/WFL13fBelHczVdQk6u544g": "安天智能体完成Fastjson 2.x RCE漏洞PoC验证", "https://mp.weixin.qq.com/s/wK0twtlscBq_2JDCjOoWjA": "7月社区投稿活动 | 漏洞挖掘∕AI渗透", "https://mp.weixin.qq.com/s/Dkkj_NMNqnc1Ft2NkxiQxQ": "记第一次某大学支付漏洞", "https://mp.weixin.qq.com/s/x7dVk4TbK1vmWH-EzhniCA": "HSRC关于AI生成漏洞报告的处置公告", "https://mp.weixin.qq.com/s/77P3-YR2DHmAj_r35hriAA": "史上最严重的汽车漏洞?数百万辆车可被任意解锁、追踪甚至驾驶中熄火", "https://mp.weixin.qq.com/s/40jjNTlkZWGz7NysOfzAog": "焕新升级!捷普漏洞扫描系统(AI版本)新版本发布!", "https://mp.weixin.qq.com/s/O884mg-JECELA9Wwu6Bb6Q": "【转】Mythos向左,AiPy往右|继Mythos之后,他们又发现100多个漏洞", "https://mp.weixin.qq.com/s/88Q-bNvfrbHUpUg0fGWoLw": "AppScan 10.11.0 - 老牌Web漏洞扫描神器更新", "https://mp.weixin.qq.com/s/A3VyGaxmz8SJFjsvryGbLg": "俄情报部门劫持IP摄像头监视军运:87,000台设备暴露,默认密码是最大漏洞", "https://mp.weixin.qq.com/s/6Ph43vq3XrBj5n3s21Cw_w": "Fastjson2 AutoType 安全问题确认:现有版本尚无正式修复,公开 EXP 到底能走多远", "https://mp.weixin.qq.com/s/SqsGBVNmPUSUQZYdkxTZag": "漏洞通告|Microsoft Office代码执行漏洞(CVE-2026-55022)", "https://mp.weixin.qq.com/s/s1vS1aW6lCzGn1Jd1rKXbw": "VulnFlanker 漏洞监测平台 | WatchVuln 高价值漏洞采集与推送", "https://mp.weixin.qq.com/s/JEvGTDoJwSjmiJ9_6TOJsw": "GPT-5.6自主“破狱”!AI不仅学会了挖掘0-day漏洞,还洗劫了Hugging Face……", "https://mp.weixin.qq.com/s/faKQy_zqQn0UyQakkYz-eA": "7月社区投稿活动 | 漏洞挖掘∕AI渗透", "https://mp.weixin.qq.com/s/qn1BBn5wKtx6gfW0MForbw": "本周回顾:失控AI代理、Check Point漏洞利用、Slopsquatting、ClickFix诱饵及其他事件", "https://mp.weixin.qq.com/s/WuqgVgPAmYCfs3xlv_jaUg": "倒计时3天|第二届OpenHarmony CTF(Capture The Flaw)智能漏洞挖掘赛", "https://mp.weixin.qq.com/s/nnWfsr1tVIhdedn-oUgiSw": "OpenAI开源Codex Security CLI:用于发现、验证和修复安全漏洞", "https://mp.weixin.qq.com/s/wk2hAzMR0SU9CcwIlrp2hA": "OpenAI开源Codex Security CLI:用于发现、验证和修复安全漏洞", "https://mp.weixin.qq.com/s/Bh0mWMFAduJ2w_UZD5i2kg": "漏洞复现 | 大华ICC智能物联管理平台 upper-domains 存在信息泄露漏洞", "https://mp.weixin.qq.com/s/QBN7A8B8BohcTbVbjtHV-g": "如何用 20 年前的漏洞在几分钟内黑掉数千个数据中心", "https://mp.weixin.qq.com/s/birSjBq7p5wjoxnPCUfFow": "一张图片拿下 Rails 服务器,CVSS 9.5 命令执行零门槛", "https://mp.weixin.qq.com/s/j58kM-hmMEnTrGpcoL9CHw": "三大政企基础设施接连爆零日漏洞,企业补丁运维为何全面落后?", "https://mp.weixin.qq.com/s/a0lEf4ToqanL2CkPhZ1WDg": "OpenAI 测试模型突破沙箱逃逸:AI 治理规则无法约束智能体真实攻击路径;CNNVD 周报:漏洞总量大幅回升,Oracle 漏洞占比超四成| 牛览", "https://mp.weixin.qq.com/s/moyCLhDg-kljP4sqlBaqDg": "【安全圈】Unturned开源22天就爆RCE漏洞!创意工坊模组成攻击入口", "https://mp.weixin.qq.com/s/0W1AAi1mQlsl7ubWqS7T5w": "安天智能体完成Fastjson2.x SeeAlso链RCE漏洞PoC验证", "https://mp.weixin.qq.com/s/2ipv6IV_JVxFbJImY8D0og": "史上首次完全自主AI Agent网络攻击;Kimi K3 Agent发现多个Redis零日漏洞 | FreeBuf周报", "https://mp.weixin.qq.com/s/Lguy_F9oFuRPzlLUKMOrWA": "谷歌利用AI Agent发现并修复1072个Chrome安全漏洞", "https://mp.weixin.qq.com/s/RFYLidM4xwEkqwvbygJDrw": "个人常用的POC[福利]", "https://mp.weixin.qq.com/s/Efpf8zLrM6-n-W5a3qlAZw": "常见Web漏洞、CTF、练习、靶机等资源[福利]", "https://mp.weixin.qq.com/s/IngUQCW2yEnQbb_uE_9asg": "工具推荐 | 已发现数十个真实漏洞!AIxVuln自动化漏洞挖掘系统,让安全研究事半功倍", "https://mp.weixin.qq.com/s/VJAsb607kW4byQljFVWfzA": "全国总决赛金奖、领域唯一|恒脑书写AI漏洞治理中国答案", "https://mp.weixin.qq.com/s/A_0Tu4tPPB5F3hFoR20sEQ": "CNVD漏洞周报2026年第30期", "https://mp.weixin.qq.com/s/RrO8-TMOG4sATI5X2xZAyQ": "IBM 2026数据泄露报告:92%的AI安全事件源于缺失访问控制;CNVD发布漏洞周报2026年第30期| 牛览", "https://mp.weixin.qq.com/s/0sgbGrLr7FMa9VI5VjQdUg": "重磅炸弹!这款JNDI漏洞利用工具集大成者,一键穿透所有主流Java反序列化防线", "https://mp.weixin.qq.com/s/zbQk3U7q_UquNiiKogsI2Q": "Apache NiFi 连爆四漏洞,权限失控与内存炸弹问题亟待修复", "https://mp.weixin.qq.com/s/_VrAlxmN-zEhUdtnr3jeZA": "存在22年的 BMC 漏洞使数千个数据中心面临攻击", "https://mp.weixin.qq.com/s/fGYMPITkt2_RpXlQW0QZWw": "CVE-2026-64633 漏洞:Veeam ONE 未授权远程代码执行,CVSS 评分达到满分 10.0", "https://mp.weixin.qq.com/s/8lgWXOihsVT3HSa6pHgMzg": "SharePoint漏洞被用于攻击瑞士联邦信息技术机构", "https://mp.weixin.qq.com/s/u3tTS7PBrRbwCe3kBKrpRA": "当漏洞发现进入“机器速度”,CISO该改什么?", "https://mp.weixin.qq.com/s/mzdFpgDEYH1XriH-C0Xtcw": "赛普EAP企业适配管理平台 AppData.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s/v4kFYfoO4aFhE-pSpnr7qg": "TencentOS 科维斯AI首秀:SCTPhantom——潜伏18年的Linux内核提权与容器逃逸漏洞", "https://mp.weixin.qq.com/s/HzzEouhFhf9i_zlvc82Odg": "关于规范AI辅助漏洞报告提交及违规处置的公告", "https://mp.weixin.qq.com/s/cwHANUxLQE1s-p_5FvCnsw": "连漏洞扫描都不懂就想挖漏洞找工作?!这篇“保姆级”原理拆解别再错过了!", "https://mp.weixin.qq.com/s/lu1ihodwp1bq45U235uT4A": "Linux Kernel SCTP \"SCTPhantom\" 本地权限提升漏洞风险预警", "https://mp.weixin.qq.com/s/56aFr15O4ArqGajRmX3wkw": "【家族介绍】DragonForce,一个将勒索做成企业的家族", "https://mp.weixin.qq.com/s/vbl_dIE10YFmV6qy7ljF5g": "拿赏金必看!超详细漏洞众测与企业SRC平台合集,别再问去哪挖洞了!", "https://mp.weixin.qq.com/s/mgkcM_csmIcAG7U62vJ0mQ": "EDU低危漏洞也可以通杀", "https://mp.weixin.qq.com/s/lUWWqo64VfE4Nix1zNXRsw": "【漏洞通告】NVIDIA Dynamo 越界写入漏洞(CVE-2026-24254)", "https://mp.weixin.qq.com/s/o5h51no5x3Fv1f9IpKf1_Q": "几分钟生成漏洞报告,几天才能验证:AI 正在拖垮开源安全维护者", "https://mp.weixin.qq.com/s/Al6fToGaFI_S_KVhsmretw": "Linux 内核藏了 18 年的漏洞,这次 AI 比所有人先找到", "https://mp.weixin.qq.com/s/00RXUG32GhwIjlzEt4-q-g": "【漏洞预警】Jenkins公告25个漏洞,其中5个涉及本体的漏洞需要重点关注", "https://mp.weixin.qq.com/s/M539ytSX5Lev0YjZBht6lw": "【漏洞通告】Progress MarkLogic Server存在服务器端伪造请求(SSRF)漏洞(CVE-2026-9203)", "https://mp.weixin.qq.com/s/hFBsaaRM9xjNmqQzc3W5BA": "CVE-2026-39868:公开概念验证代码披露 macOS 与 iOS 内核内存损坏漏洞", "https://mp.weixin.qq.com/s/HV_7cwhPtviwPQasAb2JlQ": "负7天:当攻击窗口倒转,防守者还剩多少时间?——漏洞利用平均发生在补丁发布前7天。这句话,正在重写网络安全的时间规则", "https://mp.weixin.qq.com/s/F-JzFCfBLy6QEAD9G2_5tg": "【漏洞通告】Progress MarkLogic Server 中的 SAML 身份验证绕过 (CVE-2026-7557)", "https://mp.weixin.qq.com/s/K0Ki5EJ7TGFTPqF-UpgxYA": "【漏洞通告】Progress MarkLogic Server存在缓存中毒漏洞(CVE-2026-9190)", "https://mp.weixin.qq.com/s/yw8S_pPgPh57Lafqfgogmw": "【漏洞通告】Progress MarkLogic Server存在存在权限提升漏洞(CVE-2026-9193)", "https://mp.weixin.qq.com/s/gYsPKr5QuaotQO018LdtcA": "【漏洞通告】正在进行中的身份验证绕过 MarkLogic Server ODBC 应用程序服务器 (CVE-2026-9192)", "https://mp.weixin.qq.com/s/-gQNyUgJwENdpw6ce7MeqA": "\"中国版Mythos\"图龙锋接入山石网科,AI漏洞挖掘能力拓展至网安产品", "https://mp.weixin.qq.com/s/VcVF1LrtIc2DL-1wgvYtuw": "\"中国版Mythos\"图龙锋接入山石网科,AI漏洞挖掘能力拓展至网安产品", "https://mp.weixin.qq.com/s/cZQMfzJhKPT6AwgjoT2wWw": "CNNVD通报OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s/0BkiOD8GrBTgLsF7InfNIw": "【安全圈】电商平台前员工利用系统漏洞,0元购3000多件家电", "https://mp.weixin.qq.com/s/Fqby_u4cAGcGi_cR578zmA": "漏洞预警: 普华PowerPMS两漏洞组合 无需账号拿下服务器", "https://mp.weixin.qq.com/s/eH9vKnecA8Ajq-4w2nhdsQ": "自动挖上传漏洞,这款工具真的强", "https://mp.weixin.qq.com/s/MlbLQTc0AWo4eIqlANimQw": "“漏洞清零” 从数量合规到结果合规", "https://mp.weixin.qq.com/s/8TeqsZLiR6LlWRVeXFdz7A": "“中国版Mythos”图龙锋开放试用首月:近500家企业申请接入,累计发现近9000漏洞", "https://mp.weixin.qq.com/s/g_pASa1fOVTfsqtFtTigBg": "一套面向 SRC 漏洞挖掘的 Agent 提示词工程与技能知识体系 | 系统级提示词 + 14 个专项技能知识库(Skills)", "https://mp.weixin.qq.com/s/dE2v9q3BdmvRDBme_R5sSg": "如何实现「红牛自由」— 一次 LFI 漏洞挖掘的完整复盘", "https://mp.weixin.qq.com/s/vQxfGlaMPaEC1ZqtMmcUKQ": "【安全圈】SharePoint 漏洞被用于入侵瑞士联邦 IT 机构", "https://mp.weixin.qq.com/s/GDnJe0b5cWPwi3tuZiob2w": "最新网络安全学习整合(挖漏洞、打CTF、护网、就业,工具)", "https://mp.weixin.qq.com/s/k5W2oAbDaAT7-7lAN89-xg": "思科提醒注意多个高危 ClamAV 漏洞", "https://mp.weixin.qq.com/s/yBY_R4VNMnfVie4pkTMxFA": "漏洞通告|正方软件股份有限公司教学管理信息服务平台存在SQL注入漏洞(CNVD-2026-25909)", "https://mp.weixin.qq.com/s/wFdqflfq67hVylV0jYcVAg": "【漏洞通告】Hugging Face Accelerate存在目录遍历漏洞(CVE-2026-69112)", "https://mp.weixin.qq.com/s/GbL6smydBOLXf7IriE7Vug": "黑盒自动化漏洞挖掘平台正式公测", "https://mp.weixin.qq.com/s/qR00vZbeHPlzw01xOZqlxg": "XCon2026 议题||2026年的Apple Webkit漏洞挖掘和利用", "https://mp.weixin.qq.com/s/yUikEW8JF_wNR1uOiQPz3w": "为什么是盛邦安全?香港给出的答案 ——盛邦安全漏洞扫描产品落地香港特区政务场景", "https://mp.weixin.qq.com/s/izdGP3ShkQm8GSge1FJagA": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s/cnN5usoBgcWJk-KHsPvl5w": "信息安全漏洞周报【第087期】", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486658&idx=1&sn=513a1844049ff4243341092a76c9025d": "2025年HVV期间公开披露的漏洞POC和漏洞检测模板", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488782&idx=1&sn=bc804040a26c463667937c7c71c9df4b": "Geoserver Configuration API存在敏感信息泄露CVE-2025-27505 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487664&idx=1&sn=f09b54c735a40a0ee1c2f5ce0f30fa10": "Windows 任意文件读取漏洞如何扩大战果?", "https://www.bleepingcomputer.com/news/security/cisa-open-sources-thorium-platform-for-malware-forensic-analysis/": "CISA open-sources Thorium platform for malware, forensic analysis", "https://www.darknet.org.uk/2025/07/fake-e-commerce-platforms-as-attack-vectors-threats-in-2025/": "Fake E-commerce Platforms as Attack Vectors & Threats in 2025", "https://securityaffairs.com/180630/hacking/attackers-actively-exploit-critical-zero-day-in-alone-wordpress-theme.html": "Attackers actively exploit critical zero-day in Alone WordPress Theme", "https://thehackernews.com/2025/07/experts-detect-multi-layer-redirect.html": "Experts Detect Multi-Layer Redirect Tactic Used to Steal Microsoft 365 Login Credentials", "https://thehackernews.com/2025/07/hackers-exploit-critical-wordpress.html": "Hackers Exploit Critical WordPress Theme Flaw to Hijack Sites via Remote Plugin Install", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664246611&idx=1&sn=5684b290e24b5ca09469bf0cf8177817": "国家网信办就芯片漏洞后门安全风险约谈英伟达公司", "https://www.solidot.org/story?sid=81934": "AI 生成的代码近半包含安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070919&idx=4&sn=ea1daa8dfd291f351912a571bcffd0bc": "【安全圈】WordPress“Alone”主题高危漏洞(CVE-2025-5394)正被大规模利用,攻击者可远程控制站点", "https://infosecwriteups.com/phishing-via-swagger-ui-exploiting-misconfigurations-for-fun-bounties-5442f26a7b81?source=rss----7b722bfd1b8d--bug_bounty": "Phishing via Swagger UI — Exploiting Misconfigurations for Fun & Bounties", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497974&idx=1&sn=c89668312013d0afe75c2eee7608b550": "7个让我赚取漏洞赏金的侦察技巧", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247493825&idx=1&sn=ac66315f3ed2d0c9b97601b016ead61a": "AI 都开始挖洞了:Scan-X 自动识别漏洞还能出报告", "https://mp.weixin.qq.com/s?__biz=MjM5NDA3ODY4Ng==&mid=2247488984&idx=1&sn=2d6858d50a9d3793d434ddd17c3eb78f": "H20被曝存漏洞后门安全风险,英伟达被国家网信办约谈", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488795&idx=1&sn=4d6656d3fcd249b97321264b82c12710": "MetaCRM美特crm系统sendmail.jsp接口存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247485454&idx=1&sn=f07b02079dfcf49628a963a4ff4e2841": "Web开发-PHP应用&TP框架&MVC模型&路由访问&模版渲染&安全写法&版本漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555595&idx=1&sn=e1be2576d6365e1d5f205d232186f172": "vivotek 栈溢出漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070935&idx=1&sn=f56654e6c4bcd4828e14a7520288ac01": "【安全圈】国家互联网应急中心披露:美情报机构滥用微软漏洞持续攻击中国军工网络", "https://mp.weixin.qq.com/s?__biz=MzkyNDYyOTI1NQ==&mid=2247486860&idx=1&sn=d625bbb035b0a699ac78a954a19fde17": "国家级漏洞武器库曝光!一个ANGLE漏洞如何让全球10亿苹果设备“裸奔”?", "https://mp.weixin.qq.com/s?__biz=MzA5NzQxMTczNA==&mid=2649167223&idx=1&sn=3bf2e26bf5d4a3726f4a2e2c71e0a367": "揭秘知名的黑客工具XSStrike:XSS(跨站脚本)漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492307&idx=1&sn=f3e1fe7835f279198090ddb9b0a61af6": "润申信息企业标准化管理系统 AllTableHandler.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486608&idx=1&sn=4e020e47a13375b31aba4f6a95fdadba": "漏洞发现-Xray+Awvs联动-Goby+Xray+Awvs+Vulmap联动", "https://mp.weixin.qq.com/s?__biz=MzkxMjY3MTI4Mg==&mid=2247485156&idx=1&sn=76b29ca5cde0a9ef75ce051fd9421f3a": "美情报机构利用微软Exchange漏洞攻击我军工企业,窃取高层邮件!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523700&idx=1&sn=c577be227514bc132cf60d99a30e4ee9": "黑客利用 WordPress Theme 中的严重漏洞劫持站点", "https://horizon3.ai/attack-research/vulnerabilities/cve-2025-54309/": "CVE-2025-54309", "https://www.malwarebytes.com/blog/news/2025/08/openai-kills-short-lived-experiment-where-chatgpt-chats-could-be-found-on-google": "OpenAI kills “short-lived experiment” where ChatGPT chats could be found on Google", "https://www.bleepingcomputer.com/news/security/pwn2own-hacking-contest-pays-1-million-for-whatsapp-exploit/": "Pwn2Own hacking contest pays $1 million for WhatsApp exploit", "https://securityaffairs.com/180668/hacking/meta-offers-1m-bounty-at-pwn2own-ireland-2025-for-whatsapp-exploits.html": "Meta Offers $1M bounty at Pwn2Own Ireland 2025 for WhatsApp exploits", "https://go.theregister.com/feed/www.theregister.com/2025/08/01/china_us_intel_attacks/": "China says US spies exploited Microsoft Exchange zero-day to steal military info", "https://go.theregister.com/feed/www.theregister.com/2025/08/01/florida_prison_email_blunder/": "Florida prison email blunder exposes visitor contact info to inmates", "https://www.4hou.com/posts/QXpl": "【梆梆安全监测】安全隐私合规监管趋势及漏洞风险报告(0706-0719)", "https://www.4hou.com/posts/KGjR": "黑客利用SAP NetWeaver漏洞部署Linux Auto-Color恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584063&idx=1&sn=05fe960246f7ffb6e260883fd48089a6": "黑客利用SAP NetWeaver漏洞部署Linux Auto-Color恶意软件", "https://www.anquanke.com/post/id/310766": "OAuth2-Proxy 高危漏洞(CVE-2025-54576,CVSS 9.1)可被利用查询参数绕过身份验证", "https://www.anquanke.com/post/id/310770": "ShinyHunters 团伙被指为 Qantas、安联人寿和 LVMH Salesforce 数据泄露事件幕后黑手", "https://www.anquanke.com/post/id/310792": "苹果修复了针对 Chrome 零日攻击的安全漏洞", "https://www.anquanke.com/post/id/310784": "黑客正大肆利用 WordPress Alone 主题中的高危RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597873&idx=3&sn=087d4172aec28fdcb0de0389e5830eb8": "涉及多系列型号!大华摄像头漏洞致远程入侵风险?官方补丁已出,速更新", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247490302&idx=2&sn=6fc73adf3f47bbe30fb91a9083d010d6": "2025 hw中流传的有poc的漏洞集合 pdf", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651325707&idx=3&sn=4b38f7ecddec674a487264dea9f45ce3": "AI Agents漏洞百出,恶意提示等安全缺陷令人担忧", "https://mp.weixin.qq.com/s?__biz=MzkzOTQ5MzY3OQ==&mid=2247484321&idx=1&sn=63a21faf53bb855c026fc7c265da040b": "AI生成代码漏洞检测IDE插件可行性及市场前景评估", "https://mp.weixin.qq.com/s?__biz=MzkyMzI3MTI5Mg==&mid=2247485474&idx=1&sn=ed79edd3bb1dc43acd2fb652ad10f83e": "Easysite反序列化漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488808&idx=1&sn=123bab3dbc64fc7b345926a4814785be": "Sawtooth Lighthouse Studio存在模板注入漏洞CVE-2025-34300 附POC", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070950&idx=2&sn=4f6fb16dbaa08726d8745b5ec9066ce2": "【安全圈】亚马逊 AI 编程助手被曝严重漏洞,近百万用户面临被删库风险", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503486&idx=1&sn=853525805d7873b1bf65c6c79a5ab821": "【成功复现】MojoPortal路径遍历漏洞(CVE-2025-28367)", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247485018&idx=1&sn=58b3045d3f89a09b4e9cc6d4eefb7cf2": "【漏洞复现】爱数AnyShare爱数云盘start_service远程代码执行漏洞", "https://thehackernews.com/2025/08/akira-ransomware-exploits-sonicwall.html": "Akira Ransomware Exploits SonicWall VPNs in Likely Zero-Day Attack on Fully-Patched Devices", "https://thehackernews.com/2025/08/new-plague-pam-backdoor-exposes.html": "New ‘Plague’ PAM Backdoor Exposes Critical Linux Systems to Silent Credential Theft", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070950&idx=3&sn=b2035b38bd54d353f81c9f18d440973a": "【安全圈】联想一体机漏洞被紧急修复,可绕过安全启动植入恶意软件", "https://cxsecurity.com/issue/WLB-2025080001": "Langflow 1.2.x Remote Code Execution (RCE)", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647690895&idx=1&sn=91081768bb3c41b4ea865be614a2a266": "0049. 我是如何发现漏洞赏金项目中最奇怪的漏洞的——它真的值得吗……", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247490304&idx=1&sn=c3a54a6e4a9b2aacb3fa91790edc2fb7": "OAuth2.0劫持账号漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=MzU5Njg5NzUzMw==&mid=2247491699&idx=1&sn=e4dcaf9c5e7da60e62e614a9000f4368": "TikTok DOM XSS 5000刀 漏洞复现代码参考-自己动手研究以下吧!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070961&idx=1&sn=b8c7c8f1988fca2052e2f2bebaeb3c52": "【安全圈】黑客利用 SAP NetWeaver 漏洞部署 Linux Auto-Color 恶意软件", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488820&idx=1&sn=997ac62c6e079c6bfedba66b6c19ee02": "蓝凌EIS智慧协同平台DingUsers.aspx接口存在SQL注入漏洞 附POC", "https://www.exploit-db.com/exploits/52394": "[local] Microsoft Virtual Hard Disk (VHDX) 11 - Remote Code Execution (RCE)", "dump://2025-08-04/Exploit-DB.com RSS Feed_[remote] Microsoft Edge (Chromium-based) 135.0.7049.114_.115 - Information Disclosure.md": "[remote] Microsoft Edge (Chromium-based) 135.0.7049.114_.115 - Information Disclosure", "https://www.exploit-db.com/exploits/52392": "[remote] Swagger UI 1.0.3 - Cross-Site Scripting (XSS)", "https://www.exploit-db.com/exploits/52390": "[webapps] Copyparty 1.18.6 - Reflected Cross-Site Scripting (XSS)", "https://www.exploit-db.com/exploits/52388": "[webapps] Gandia Integra Total 4.4.2236.1 - SQL Injection", "https://www.exploit-db.com/exploits/52391": "[webapps] LPAR2RRD 8.04 - Remote Code Execution (RCE)", "https://www.exploit-db.com/exploits/52393": "[webapps] Ultimate Member WordPress Plugin 2.6.6 - Privilege Escalation", "https://www.bleepingcomputer.com/news/security/attackers-exploit-link-wrapping-services-to-steal-microsoft-365-logins/": "Attackers exploit link-wrapping services to steal Microsoft 365 logins", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496191&idx=1&sn=158df7c86b0123b7fadc5d85fc52e475": "CNVD漏洞周报2025年第29期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496191&idx=2&sn=ddf1d3c7eb8db6f80a6d668da3286e34": "上周关注度较高的产品安全漏洞(20250728-20250803)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651325790&idx=2&sn=e76098f68b88c88230f642e4e085c88e": "Python隐藏漏洞通过超14.5万个软件包传播", "https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484667&idx=1&sn=eeda4c78d0cd30c870e455b5f4180f12": "XML 外部实体 (XXE) 注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494485&idx=1&sn=4ce3b069b4789b766b9043467d6bb061": "【AI漏洞复现】Cursor IDE 远程代码执行漏洞(CVE-2025-54135)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490509&idx=2&sn=8a2809861a4968889f3a72a8de2aea59": "【风险通告】用友U8+渠道管理(高级版)存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488833&idx=1&sn=f8ea1de022b34eaec6b9239fbdf8327c": "东胜物流软件WorkFlowGridSource.aspx接口存在SQL注⼊漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247491230&idx=1&sn=7deb5f1c86f0c69e2a4df7550c2a7aaf": "大洞,速修,1Panel 面板 RCE 任意命令执行", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523728&idx=2&sn=aad4c0c2134f9c42dc0e73f20720114c": "微软扩展.NET漏洞计划 最高赏金提至$4万", "https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207332&idx=1&sn=a07696b69167b990c15901ec87fd310f": "悟空AI Agent再进化:连斩魔搭社区SWIFT框架RCE 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247557921&idx=1&sn=54e8b81cbf8a279be6f8d5b52806033a": "沃尔沃安全神话破灭,软件漏洞导致刹车失灵", "https://techcrunch.com/2025/08/04/perplexity-accused-of-scraping-websites-that-explicitly-blocked-ai-scraping/": "Perplexity accused of scraping websites that explicitly blocked AI scraping", "dump://2025-08-05/Qualys Security Blog_From Exposure Whack-a-Mole to Autonomous Cyber Risk Management_ Meet Agentic AI on the Qualys Platform.md": "From Exposure Whack-a-Mole to Autonomous Cyber Risk Management_ Meet Agentic AI on the Qualys Platform", "https://securityaffairs.com/180748/breaking-news/lovense-flaws-expose-emails-and-allow-account-takeover.html": "Lovense flaws expose emails and allow account takeover", "https://securityaffairs.com/180760/malware/playpraetor-android-rat-expands-rapidly-across-spanish-and-french-speaking-regions.html": "PlayPraetor Android RAT expands rapidly across Spanish and French-speaking regions", "https://www.tenable.com/blog/how-exposure-management-moves-beyond-vulnerability-scans-to-a-unified-view-of-risk": "How Exposure Management Moves Beyond Vulnerability Scans to A Unified View of Risk", "https://xz.aliyun.com/news/18573": "CVE-2025-54424 1Panel远程命令执行漏洞详细分析及复现(附验证脚本)", "https://www.anquanke.com/post/id/310863": "Akira 勒索软件疑似利用零日漏洞攻击已打补丁的 SonicWall VPN 设备", "https://www.anquanke.com/post/id/310852": "Cursor 代码编辑器遭遇关键多级权限控制漏洞(CVE-2025-54135 和 CVE-2025-54136)", "https://www.anquanke.com/post/id/310849": "NestJS DevTools 存在严重RCE漏洞(CVE-2025-54782)", "https://www.anquanke.com/post/id/310855": "Squid严重漏洞(CVE-2025-54574):造成RCE以及数据泄露风险", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788902&idx=1&sn=fc500323dda78989fef066dc7fe6ce41": "AI 编程神器Cursor现高危漏洞,一条提示即可RCE", "https://mp.weixin.qq.com/s?__biz=MzIwNjYwMTMyNQ==&mid=2247493422&idx=1&sn=ff38a0cc321c8fcab27a376c454aa06f": "深度:智能体的安全威胁、漏洞与潜在影响分析", "https://mp.weixin.qq.com/s?__biz=MzkzNTgzOTg4Mg==&mid=2247485916&idx=1&sn=59df3e159d3519dda972af046c8835a1": "1Panel 面板 RCE 任意命令执行", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458598039&idx=3&sn=a2af4de74ce4915e27431dc2678d65a8": "NVIDIA Triton 曝多个高危漏洞,AI 服务器面临远程接管风险", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492917&idx=1&sn=2430a9e6c43bf37ab229c60fa50a0946": "NVIDIA Triton 服务器漏洞允许未授权攻击者执行代码并劫持AI服务器", "https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484675&idx=1&sn=a064a24411b1b46067d26538da600ce5": "PHP、Java、JavaScrip、python反序列化漏洞大盘点 - PHP漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247497637&idx=1&sn=7aece53e59e97f6fb2cdd586f4047b24": "TimelineSec助力安全范儿实战教学局,安全专家开讲LLM安全漏洞攻防全攻略", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247628534&idx=1&sn=57c6f32cc5de9222fa44ffc91ef9794f": "《2025年中漏洞态势研究报告》:漏洞呈现数量增、威胁大、攻击快三大特征", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490517&idx=1&sn=5a2e0223e0e1325bee768bddf04909c4": "【AI风险通告】Cursor存在远程代码执行漏洞(CVE-2025-54135)", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247501095&idx=1&sn=0a1d3ba1b42d5fea7b78d061de92c75d": "【CVE-2025-54135】Cursor远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070994&idx=3&sn=773848767f69aa67d2833d13f9100422": "【安全圈】潜伏危机:Android系统漏洞让数亿设备陷入远程控制风险", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524477&idx=2&sn=8311617388b65ca312470b2ec3329a64": "【漏洞通告】Claude Code命令执行漏洞(CVE-2025-54795)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490555&idx=1&sn=b61eb8771cc90524d7cf3b2212f10ecf": "【高危AI漏洞预警】Cursor远程代码执行漏洞 CVE-2025-54135", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490555&idx=2&sn=2ffb4659bea077b96d304a44cea8b44d": "【高危漏洞预警】Triton Inference Server 越界内存写入致代码执行漏洞CVE-2025-23319", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247574349&idx=1&sn=578f72b03a30178953dfa61417356abb": "一次奇妙的降价支付逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247636849&idx=4&sn=c8fc60e5dc55f0da8a2d349e7dcd0b24": "利用NVIDIA Triton服务器漏洞链可实现AI系统远程接管", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650850660&idx=1&sn=5962f26097ab8f2c5e84132b3463749d": "卫生健康行业新防线:青藤专家分享防勒索和漏洞防护实战攻略", "https://mp.weixin.qq.com/s?__biz=MzkzMjQzNjg1Nw==&mid=2247484837&idx=1&sn=dc33ab29dfd4060480fc026093af17b9": "攻防实战从代码审计到rce之另类绕过waf创宇d(内含抽奖)", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247489575&idx=1&sn=adc5f473a05b462af8d3044fd049a8f6": "简单说说智能合约漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488845&idx=1&sn=ac1a2568157822f074e11fc68dae6422": "金和OA TaskTreeJSON.aspx接口存在sql注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503488&idx=1&sn=cff7a369cad521795d820fe2c43a4cba": "雷神众测漏洞周报2025.7.28-2025.8.3", "https://www.malwarebytes.com/blog/news/2025/08/unexpected-snail-mail-packages-are-being-sent-with-scammy-qr-codes-warns-fbi": "Unexpected snail mail packages are being sent with scammy QR codes, warns FBI", "https://techcommunity.microsoft.com/blog/microsoftsecurityexperts/elevate-your-protection-with-expanded-microsoft-defender-experts-coverage/4439134": "Elevate your protection with expanded Microsoft Defender Experts coverage", "https://www.bleepingcomputer.com/news/security/adobe-issues-emergency-fixes-for-aem-forms-zero-days-after-pocs-released/": "Adobe issues emergency fixes for AEM Forms zero-days after PoCs released", "https://www.bleepingcomputer.com/news/security/android-gets-patches-for-qualcomm-flaws-exploited-in-attacks/": "Android gets patches for Qualcomm flaws exploited in attacks", "https://www.bleepingcomputer.com/news/security/pandora-confirms-data-breach-amid-ongoing-salesforce-data-theft-attacks/": "Pandora confirms data breach amid ongoing Salesforce data theft attacks", "https://securityaffairs.com/180793/security/chaining-nvidias-triton-server-flaws-exposes-ai-systems-to-remote-takeover.html": "Chaining NVIDIA’s Triton Server flaws exposes AI systems to remote takeover", "https://thehackernews.com/2025/08/clickfix-malware-campaign-exploits.html": "ClickFix Malware Campaign Exploits CAPTCHAs to Spread Cross-Platform Infections", "https://thehackernews.com/2025/08/cursor-ai-code-editor-vulnerability.html": "Cursor AI Code Editor Vulnerability Enables RCE via Malicious MCP File Swaps Post Approval", "https://thehackernews.com/2025/08/google-fixes-3-android-vulnerabilities.html": "Google’s August Patch Fixes Two Qualcomm Vulnerabilities Exploited in the Wild", "dump://2025-08-06/The Register - Security_Hacker summer camp_ What to expect from BSides, Black Hat, and DEF CON.md": "Hacker summer camp_ What to expect from BSides, Black Hat, and DEF CON", "https://xz.aliyun.com/news/18583": "基于codeql的litemall漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500230&idx=1&sn=409a1804b8085db7139ace41d7d180f1": "CNVD漏洞周报2025年第29期", "https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247495774&idx=1&sn=00d89ebc672f70745d15c9e50b26ab12": "白泽漏洞治理智能体——LLM项目级代码安全能力探索(一):安全代码生成能力测评框架", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484548&idx=1&sn=cbae0990ad6e20de7059c90434207837": "揭秘知名的黑客工具XSStrike:XSS(跨站脚本)漏洞扫描器", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503745&idx=1&sn=98be8f3e0b8519df05aab1493fbd19f7": "2025年中漏洞态势研究报告", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247515529&idx=1&sn=356d6df64619a3168decce0ac59734af": "2025年中漏洞态势研究报告", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247495291&idx=1&sn=b5de8094b0e4f2118c84fccd3c73edf3": "实战教学局|字节、百度、蚂蚁安全专家云端开讲LLM安全漏洞攻防全攻略", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514786&idx=1&sn=2621e09b8d4bee5f1bb70f886175a5f1": "故意向政府销售有漏洞的数字产品,行业巨头被罚7000万元", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524477&idx=1&sn=8e37f93b9ea44824b2ca3e198eb2f49b": "【漏洞通告】1Panel 远程命令执行漏洞(CVE-2025-54424)", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492904&idx=1&sn=ee3ecdf6ed544c8eda98e5a18ab86c9c": "【已复现】1Panel 远程命令执行漏洞安全通告(CVE-2025-54424)", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247522559&idx=1&sn=de562d4da857c5a0c3fca3fda205e83d": "1Panel未授权RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651325894&idx=2&sn=a959e80e76fb1a1893f6c6726348c341": "20W+漏洞赏金实录:499元课程如何批量制造“万元户”", "https://mp.weixin.qq.com/s?__biz=MzkzODU3MzA5OQ==&mid=2247484926&idx=1&sn=f3b9683ec3da3fb73187bc542aa7fa0f": "Amp Code:通过Prompt Injection实现任意命令执行", "https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484679&idx=1&sn=91bd4c1f2b100a5088fd863d6270d3d3": "PHP、Java、JavaScrip、python反序列化漏洞大盘点--Java漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488857&idx=1&sn=3f35d255da58b400fcfb36504529a426": "jeecg-boot getDictItemsByTable接口存在SQL注入漏洞CVE-2024-48307 附POC", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071012&idx=1&sn=2ec7f4a87b9894bfaf527ef0e14e2ec7": "【安全圈】Dell百万笔记本重大漏洞:恶意攻击者可永久控制设备并窃取生物识别数据", "https://mp.weixin.qq.com/s?__biz=MzUzODU3ODA0MA==&mid=2247490744&idx=1&sn=e58e393073bcad5caadcbcaabeb750ee": "【工具】NacosExploit:Nacos 漏洞检测", "https://mp.weixin.qq.com/s?__biz=Mzk5MDYxODcwMA==&mid=2247484086&idx=1&sn=a20516e04e0e843669a9485a1c0c564f": "【已复现】金和OA TaskCreate.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490560&idx=1&sn=e908e0ac9513290f60205ff8cf445a18": "【高危漏洞预警】React Native Bottom Tabs任意代码执行漏洞CVE-2025-54594", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488442&idx=1&sn=2c7bec333a187af4b1dcd506d225cbfb": "安卓高危漏洞紧急修复!谷歌8月更新修复两个已被利用的高通GPU漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651325894&idx=3&sn=7a69a9e819b4bd1ec662397d1cbbcf02": "模型上下文协议(MCP)十大安全漏洞解析", "https://www.bleepingcomputer.com/news/security/trend-micro-warns-of-endpoint-protection-zero-day-exploited-in-attacks/": "Trend Micro warns of Apex One zero-day exploited in attacks", "https://securityaffairs.com/180847/security/google-fixed-two-qualcomm-bugs-that-were-actively-exploited-in-the-wild.html": "Google fixed two Qualcomm bugs that were actively exploited in the wild", "https://securityaffairs.com/180856/hacking/trend-micro-fixes-two-actively-exploited-apex-one-rce-flaws.html": "Trend Micro fixes two actively exploited Apex One RCE flaws", "https://securityaffairs.com/180833/security/u-s-cisa-adds-d-link-cameras-and-network-video-recorder-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds D-Link cameras and Network Video Recorder flaws to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2025/08/cisa-adds-3-d-link-router-flaws-to-kev.html": "CISA Adds 3 D-Link Vulnerabilities to KEV Catalog Amid Active Exploitation Evidence", "https://thehackernews.com/2025/08/trend-micro-confirms-active.html": "Trend Micro Confirms Active Exploitation of Critical Apex One Flaws in On-Premise Systems", "https://go.theregister.com/feed/www.theregister.com/2025/08/06/google_salesforce_attacks/": "Google says the group behind last year's Snowflake attack slurped data from one of its Salesforce instances", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500242&idx=1&sn=8379312f9f5cdaf6afc3e2372b32e5c7": "ViewState 演化简史,从结构性缺陷到触发RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727849788&idx=1&sn=d3d3013732b7deda933d294d5c0bc55d": "V8中WASM类型混淆漏洞CVE-2024-2887的来龙去脉", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523749&idx=2&sn=107431463b8a59e595bc603cdfbdaa98": "Adobe 紧急修复 AEM Forms 中的两个0day漏洞", "https://xz.aliyun.com/news/18584": "php 文件上传不含一句 php 代码 RCE 最新新姿势", "https://www.4hou.com/posts/6Mqn": "沙场秋点兵!RayScan 新锐引擎利刃出鞘,开启漏洞“全方位检阅”", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503752&idx=1&sn=2ad8f29e84fc6b44b85556378931275d": "【已复现】Cursor 远程代码执行漏洞(CVE-2025-54135)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071012&idx=3&sn=462702952ea80abd857a3e185b8c9fe0": "【安全圈】Trend Micro Apex One 关键 RCE 漏洞遭在野利用,企业需紧急修复", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247539786&idx=1&sn=0cc242f706003fbe4eeebd0a02ff1bbb": "CTEM、ASM与漏洞管理,三者有何区别?", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458598044&idx=2&sn=a0956ad09255348c0b1ff93e832ed545": "手机平板等你挖!荣耀 “秋天的第一个漏洞” 活动开启", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489323&idx=1&sn=c4d72b4b6396266a676f50a2545641ec": "【漏洞通告】Cursor远程代码执行漏洞(CVE-2025-54135)", "https://infosecwriteups.com/exploiting-cross-site-scripting-xss-to-capture-passwords-371670c3dc03?source=rss----7b722bfd1b8d--bug_bounty": "Exploiting Cross-Site Scripting (XSS) to Capture Passwords", "https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484683&idx=1&sn=92da994afa331806cf5e03d68b2ac9b4": "PHP、Java、JavaScrip、python反序列化漏洞大盘点--JavaScript漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYwMTY5MA==&mid=2247522603&idx=1&sn=1bf25c74f4b62ed9d64c9bdcb18ed613": "QAXSRC漏洞评级标准更新啦!", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYwMTY5MA==&mid=2247522603&idx=2&sn=904d6c4d3c1367a91e3a041918c71ae3": "《奇安信SRC产品漏洞评级标准V3.0》", "https://mp.weixin.qq.com/s?__biz=Mzg5OTYwMTY5MA==&mid=2247522603&idx=3&sn=57a14a5c05cf1a95fc01be9931c20460": "《奇安信SRC隐私合规漏洞评级标准V1.0》", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071032&idx=1&sn=efa9a12605c9b49d42914a90e85da8ee": "【安全圈】谷歌遭UNC6040黑客组织钓鱼攻击:Salesforce数据泄露敲响企业安全警钟", "https://mp.weixin.qq.com/s?__biz=Mzk0MDczMzYxNw==&mid=2247484349&idx=1&sn=da54297121e874547f81f1fda3aed3bb": "【工具推荐】z0scan-用于 Web 漏洞检测和红队的安全工具", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490567&idx=1&sn=981b8d08db5aa6421e37596950a746a0": "【高危漏洞预警】Adobe Experience Manager配置错误可致RCE", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488447&idx=1&sn=b47c8b8732b9c4c18bde45434f2d9107": "紧急警报:高危漏洞CVE-2025-3770威胁EDK2安全根基,供应链防线面临瓦解!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523757&idx=1&sn=a85850b7ce1813e05057454b25b4afe7": "谷歌8月修复两个已遭在野利用的高通漏洞", "https://www.malwarebytes.com/blog/news/2025/08/how-google-adidas-and-more-were-breached-in-a-salesforce-scam": "How Google, Adidas, and more were breached in a Salesforce scam", "https://securityaffairs.com/180923/security/cisa-microsoft-warn-of-critical-exchange-hybrid-flaw-cve-2025-53786.html": "CISA, Microsoft warn of critical Exchange hybrid flaw CVE-2025-53786", "https://securityaffairs.com/180883/hacking/over-100-dell-models-exposed-to-critical-controlvault3-firmware-bugs.html": "Over 100 Dell models exposed to critical ControlVault3 firmware bugs", "https://thehackernews.com/2025/08/6500-axis-servers-expose-remoting.html": "6,500 Axis Servers Expose Remoting Protocol; 4,000 in U.S. Vulnerable to Exploits", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247528501&idx=1&sn=8dac080ef1c527ffe1ac8d661d9083ef": "0 基础也能挖出高危漏洞!IRify 代码审计全过程", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500250&idx=3&sn=f3c0a4965d849ef95d344c3cea2df3f4": "ViewState 演化简史,从结构性缺陷到触发RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523757&idx=2&sn=a7158cc27029a29dc4b1bc6553c14569": "趋势科技证实本地系统中的两个严重 Apex One 漏洞已遭利用", "https://www.4hou.com/posts/gyq3": "思科:身份服务引擎中存在严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584176&idx=1&sn=91f74988bdab62d8e39a9abbe26f1df3": "思科:身份服务引擎中存在严重的RCE漏洞", "https://cxsecurity.com/issue/WLB-2025080006": "henzhen Aitemi M300 Wi-Fi Repeater Unauthenticated RCE", "https://mp.weixin.qq.com/s?__biz=MzI0NDgxMzgxNA==&mid=2247497003&idx=2&sn=936a9d8dbd5fcee9e5302581e8507d5d": "CNVD漏洞周报2025年第29期", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555660&idx=1&sn=2e2c4c7184b3a21c67c58902c5fb392a": "Jeecg漏洞总结及tscan poc分享", "https://mp.weixin.qq.com/s?__biz=MzkzMDg1MzIwNA==&mid=2247487680&idx=1&sn=4f22aa55943349ed5855123153cb92ec": "NextCyber学习记录—CVE-2021-21311复现", "https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484688&idx=1&sn=ce3e0a7d3a9cc8643f541a20609846f1": "PHP、Java、JavaScrip、python反序列化漏洞大盘点--python漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523765&idx=2&sn=da938603464c063e605ea39f485ae1be": "SonicWall 证实并无 SSL VPN 新0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071050&idx=4&sn=e78537d84b65338436d031bd419c5277": "【安全圈】ReVault 漏洞使攻击者可绕过戴尔笔记本电脑的 Windows 登录验证", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071050&idx=1&sn=1fba66feac71cf39d1e7eea6dba43655": "【安全圈】谷歌证实遭遇钓鱼攻击:ShinyHunters团伙通过语音诈骗入侵Salesforce数据库", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247526957&idx=1&sn=719c8076a4518e611633b9e46e691cf4": "【已复现】Jenkins Git Parameter 远程命令执行漏洞(CVE-2025-53652)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490576&idx=1&sn=0696f261866fbdf470f69dc7075f8600": "【高危漏洞预警】Jenkins Git Parameter远程命令执行漏洞CVE-2025-53652", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447901096&idx=1&sn=fba1610a72723009204f4d01d91f2258": "你身边的“天眼”已成黑客的“直播间”?Axis曝出核弹级漏洞,全球6500台服务器在“裸奔”!", "https://mp.weixin.qq.com/s?__biz=MzUzMDgwMjY1Mg==&mid=2247485761&idx=1&sn=da5bea110a5c4668a50486407e009b64": "网站及OA系统常见漏洞及处置措施", "https://mp.weixin.qq.com/s?__biz=MzkxNDY0MjMxNQ==&mid=2247537345&idx=1&sn=968f51d4fb800fa8158aba8a6724967b": "聊热点|我国部署深入实施“人工智能+”行动;AI Agents漏洞百出,恶意提示等安全缺陷令人担忧……", "https://mp.weixin.qq.com/s?__biz=Mzk0NTc2MTMxNQ==&mid=2247484054&idx=1&sn=57963793e26db5f4c2ca80b3f4bcadc8": "记一次简简单单越权漏洞的挖掘", "https://www.bleepingcomputer.com/news/security/winrar-zero-day-flaw-exploited-by-romcom-hackers-in-phishing-attacks/": "WinRAR zero-day flaw exploited by RomCom hackers in phishing attacks", "http://sites.libsyn.com/18678/sonicwall-informants-exposed-cisco-vishing-perplexity-gpt5-josh-marpetswn-501-swn-501": "SonicWall, Informants Exposed, Cisco Vishing, Perplexity, GPT‑5, Josh Marpet–SWN #501 - SWN #501", "https://blog.trailofbits.com/2025/08/08/buttercup-is-now-open-source/": "Buttercup is now open-source!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523765&idx=1&sn=21f30d2ddf03cfb189da78719e99ede7": "速修复!Exchange Server新高危漏洞可用于提权", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503763&idx=1&sn=cf0b071b6e7de36e6b60efe640b9f8bf": "【已复现】Jenkins Git Parameter 远程命令执行漏洞(CVE-2025-53652)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247495297&idx=1&sn=dbbe5db0da13892967b21819f596fbbd": "正在直播|LLM安全漏洞挖掘沙龙,互动抽奖送Apple watch等好礼!", "https://www.anquanke.com/post/id/310946": "CISA紧急命令:全美联邦机构须在周一前修复Exchange高危漏洞", "https://www.anquanke.com/post/id/310944": "ReVault 漏洞使攻击者可绕过戴尔笔记本电脑的 Windows 登录验证", "https://www.anquanke.com/post/id/310953": "趋势科技Apex One曝零日漏洞,已遭在野利用发起攻击", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512565&idx=1&sn=3fbf20cc59a55ad473dd3555c44dcb18": "SonicWall SMA 500设备漏洞深度剖析", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247510698&idx=1&sn=97a6e70a14750a7c67aadf8bcc521305": "Cursor 远程代码执行漏洞简报(CVE-2025-54135)", "https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960176&idx=1&sn=52d71cd523fb366fdd6f880a381990b0": "玄武在BlackHat USA揭示劫持智能体达成RCE的新方法", "https://infosecwriteups.com/single-api-key-from-a-chrome-extension-led-to-5-2-million-exposed-customer-records-0cc81545a7a8?source=rss----7b722bfd1b8d--bug_bounty": "Single API Key from a Chrome Extension Led to 5.2 Million Exposed Customer Records", "https://soatok.blog/2025/08/09/improving-geographical-resilience-for-distributed-open-source-teams-with-freon/": "Improving Geographical Resilience For Distributed Open Source Teams with FREON", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247522642&idx=1&sn=942e4b42c67643cf5f370fc4897ad3ff": "45分钟修复 1漏洞!冠军400万美金!", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484556&idx=1&sn=6a5389ac78e85496238da08e1409ed8a": "JavaSecLab 综合Java漏洞平台搭建", "https://mp.weixin.qq.com/s?__biz=MzkzMDg1MzIwNA==&mid=2247487716&idx=1&sn=43565d7d586e37067ef3ae3d1febe2fa": "NextCyber学习记录—CVE-2021-43008复现", "https://mp.weixin.qq.com/s?__biz=Mzk2NDI0MjUyNQ==&mid=2247485302&idx=1&sn=a565bd88cdae1aec349fb3876d0082bd": "RCE漏洞(二)", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247485826&idx=1&sn=8aa6f84ced1ad531b409df4b19f55816": "SRC漏洞挖掘培训第四期来袭—小白也能学!", "https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247507790&idx=1&sn=c11fa1a7d7ac03eddfc1fbb6dbcad8d5": "【一周安全资讯0809】《网络安全技术 网络安全运维实施指南》等7项网络安全国家标准获批发布;戴尔上百款笔记本曝严重安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485830&idx=1&sn=365d1ebf993a16d281c1fb7f571d7a69": "【严重】用友-U8渠道管理高级版存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494506&idx=1&sn=80de630c1bf02b27ec661bf997a555fa": "【安全资讯】45分钟修复 1漏洞!AIxCC大赛冠军狂揽 400万美金!", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247494621&idx=1&sn=a7b114611aa3ad7a0527f47e53521481": "【渗透测试】手把手带你玩转SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODc1NTgyMg==&mid=2247487607&idx=1&sn=13f4fae09cb2790931fc318a912a322c": "一次实战中命令执行回显绕过", "https://mp.weixin.qq.com/s?__biz=MzUzMDgwMjY1Mg==&mid=2247485766&idx=1&sn=144b66f29635a0cbecdd374e930744e4": "哪些网络安全漏洞难以修复,该怎么办", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611747&idx=4&sn=38b788772f29a8ae2f9d4bc3acb6a028": "最新用友NC漏洞批量检测工具,支持POC显示、单一检测、批量检测、结果导出、AI交互等", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492777&idx=1&sn=2e6860b4a78cb4c806b6ee5a004ea7cb": "某项目PHP代码审计到前台RCE审计流程", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247494082&idx=1&sn=6d1cc92a049d28b5395d417e0a5203a5": "空白页面引起的高危src漏洞-再次绕过", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247493684&idx=1&sn=cfb0e1ee45715b84e11ab2be5255725f": "红队必备!TscanPlus 正版Key免费送激活码,2300+POC全解锁!", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247490460&idx=2&sn=fe9bf2a1ec6f847d706e6eeda4dccb34": "绑定微信功能挖掘的 0-Click 任意账号接管漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498017&idx=1&sn=48c354977b8d2743b376fb6bd0e02510": "通过挖掘隐藏参数到命令执行", "https://securityaffairs.com/180967/hacking/phishing-attacks-exploit-winrar-flaw-cve-2025-8088-to-install-romcom.html": "Phishing attacks exploit WinRAR flaw CVE-2025-8088 to install RomCom", "https://thehackernews.com/2025/08/linux-based-lenovo-webcams-flaw-can-be.html": "Linux-Based Lenovo Webcams’ Flaw Can Be Remotely Exploited for BadUSB Attacks", "https://thehackernews.com/2025/08/researchers-uncover-gpt-5-jailbreak-and.html": "Researchers Uncover GPT-5 Jailbreak and Zero-Click AI Agent Attacks Exposing Cloud and IoT Systems", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071062&idx=3&sn=1bc950d1ab2170512b2889b5d00f61ed": "【安全圈】ChatGPT 连接器漏洞曝光:无需用户交互,可毒化文档窃取敏感数据", "https://infosecwriteups.com/third-party-google-dorking-e90c2126a3dc?source=rss----7b722bfd1b8d--bug_bounty": "Customer Transaction PII Data Exposed via Google Dorking", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247522715&idx=1&sn=ba7e78f560cf7ddac8c3159a556dd01e": "Android四大组件常见漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxOTM2MDYwNg==&mid=2247517434&idx=1&sn=3546a39024419c67103a55623104b861": "XSS 钓鱼与文件上传漏洞全解析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651326054&idx=1&sn=c90b6d2031164252b89ef772ea683c6f": "新型Linux内核漏洞可直接通过Chrome渲染器沙箱发起攻击", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247488334&idx=1&sn=f373826f0f28610cfa62f8492dd400d7": "渗透测试中的逻辑漏洞思路博弈(一)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247532178&idx=1&sn=4ebc9a913fe0621b9db6b5acc0bfa616": "通过 Git 参数在 Jenkins 中注入命令(CVE-2025-53652)", "https://securityaffairs.com/181017/data-breach/google-confirms-salesforce-crm-breach-faces-extortion-threat.html": "Google confirms Salesforce CRM breach, faces extortion threat", "https://thehackernews.com/2025/08/researchers-detail-windows-epm.html": "Researchers Detail Windows EPM Poisoning Exploit Chain Leading to Domain Privilege Escalation", "https://go.theregister.com/feed/www.theregister.com/2025/08/10/infosec_in_brief/": "Trend Micro offers weak workaround for already-exploited critical vuln in management console", "https://vipread.com/library/topic/4004": "如何训练AI帮我调漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496213&idx=1&sn=4f18303591ad20120bf0bb77a60cf801": "CNVD漏洞周报2025年第30期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496213&idx=2&sn=51a77ac2248dc327d0b5184f5b7b1442": "上周关注度较高的产品安全漏洞(20250804-20250810)", "https://mp.weixin.qq.com/s?__biz=MzI3NjM2ODA2Mg==&mid=2247485983&idx=1&sn=63acfb00a98f2ec5956b89e6571970b4": "BypassUAC提权漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651326073&idx=4&sn=b036d32b93988932ad6c53a2110b8913": "DEF CON安全大会披露新型零点击漏洞,Windows终端变僵尸网络", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498025&idx=1&sn=c6221ce014576cac8edd8a4db67ae347": "H1上15000美元奖励的一个漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247501136&idx=1&sn=c45155ff374b39bae01af16a9c19943f": "【Brup插件推荐】漏洞挖掘利器", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494520&idx=2&sn=2bc7eadf48518eb58a935659aee3de58": "【已复现】用友 NC importCombo XML外部实体注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503542&idx=1&sn=0c86e29efbc62dc73a028247c8438b9d": "【成功复现】Fortinet FortiWeb SQL注入漏洞(CVE-2025-25257)", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555676&idx=2&sn=04dbe067b52a936df8470b62e948ab0d": "从菜鸟到黑客,账户操控漏洞全揭秘", "https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652997962&idx=1&sn=a0e6bf54e770f206afc4ac49fb4aa2d5": "再获国际认可!阿里云发现深度学习框架PyTorch高危漏洞,入选全球顶会Black Hat", "https://mp.weixin.qq.com/s?__biz=Mzg3NzIxMDYxMw==&mid=2247504793&idx=1&sn=4f5b6715aa610240632cfb96e2b92fc2": "利用解析差异复活某凌OA前台RCE", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247488586&idx=1&sn=8452e8aa92d0e36821374cb3b879981c": "大华智能物联管理平台1day分析", "https://mp.weixin.qq.com/s?__biz=Mzg4NDU4OTQ1NA==&mid=2247484757&idx=1&sn=cae3b6657e56863bd9acc35e04cee112": "自动化 XSS 漏洞挖掘的艺术实践(一):高效优雅的爬虫实现", "https://www.exploit-db.com/exploits/52399": "[local] Microsoft Windows - Storage QoS Filter Driver Checker", "dump://2025-08-12/Exploit-DB.com RSS Feed_[remote] Belkin F9K1009 F9K1010 2.00.04_2.00.09 - Hard Coded Credentials.md": "[remote] Belkin F9K1009 F9K1010 2.00.04_2.00.09 - Hard Coded Credentials", "https://www.exploit-db.com/exploits/52397": "[remote] Cisco ISE 3.0 - Authorization Bypass", "https://www.exploit-db.com/exploits/52396": "[remote] Cisco ISE 3.0 - Remote Code Execution (RCE)", "dump://2025-08-12/Exploit-DB.com RSS Feed_[remote] Citrix NetScaler ADC_Gateway 14.1 - Memory Disclosure.md": "[remote] Citrix NetScaler ADC_Gateway 14.1 - Memory Disclosure", "https://www.exploit-db.com/exploits/52405": "[remote] Microsoft SharePoint Server 2019 (16.0.10383.20020) - Remote Code Execution (RCE)", "https://www.exploit-db.com/exploits/52404": "[remote] Tigo Energy Cloud Connect Advanced (CCA) 4.0.1 - Command Injection", "https://www.exploit-db.com/exploits/52408": "[webapps] Ghost CMS 5.42.1 - Path Traversal", "https://www.exploit-db.com/exploits/52409": "[webapps] Ghost CMS 5.59.1 - Arbitrary File Read", "https://www.exploit-db.com/exploits/52402": "[webapps] Grav CMS 1.7.48 - Remote Code Execution (RCE)", "https://www.exploit-db.com/exploits/52411": "[webapps] JetBrains TeamCity 2023.11.4 - Authentication Bypass", "https://www.exploit-db.com/exploits/52403": "[webapps] Microsoft Edge Renderer Process (Mojo IPC) 134.0.6998.177 - Sandbox Escape", "https://www.exploit-db.com/exploits/52410": "[webapps] ServiceNow Multiple Versions - Input Validation & Template Injection", "https://www.exploit-db.com/exploits/52406": "[webapps] VMware vSphere Client 8.0.3.0 - Reflected Cross-Site Scripting (XSS)", "https://www.exploit-db.com/exploits/52400": "[webapps] atjiu pybbs 6.0.0 - Cross Site Scripting (XSS)", "https://www.exploit-db.com/exploits/52398": "[webapps] projectworlds Online Admission System 1.0 - SQL Injection", "https://horizon3.ai/attack-research/vulnerabilities/cve-2025-8356/": "CVE-2025-8356", "https://www.malwarebytes.com/blog/news/2025/08/online-portal-exposed-car-and-personal-data-allowed-anyone-to-remotely-unlock-cars": "Online portal exposed car and personal data, allowed anyone to remotely unlock cars", "https://www.bleepingcomputer.com/news/security/north-korean-kimsuky-hackers-exposed-in-alleged-data-breach/": "North Korean Kimsuky hackers exposed in alleged data breach", "https://securityaffairs.com/181045/hacking/smart-buses-flaws-expose-vehicles-to-tracking-control-and-spying.html": "Smart Buses flaws expose vehicles to tracking, control, and spying", "https://www.tenable.com/blog/how-tenables-security-team-went-from-thousands-of-alerts-to-a-handful-of-tickets-with-exposure": "How Tenable’s Security Team Went from Thousands of Alerts to a Handful of Tickets with Exposure Management", "https://thehackernews.com/2025/08/new-tetra-radio-encryption-flaws-expose.html": "New TETRA Radio Encryption Flaws Expose Law Enforcement Communications", "https://thehackernews.com/2025/08/winrar-zero-day-under-active.html": "WinRAR Zero-Day Under Active Exploitation – Update to Latest Version Immediately", "https://go.theregister.com/feed/www.theregister.com/2025/08/11/russias_romcom_among_those_exploiting/": "Russia's RomCom among those exploiting a WinRAR 0-day in highly-targeted attacks", "https://www.4hou.com/posts/2XmK": "80% 案例显示:恶意活动激增时极大可能出现新安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503769&idx=1&sn=f6d7391cbf47b90775ba7517271f948c": "安全热点周报:AI 编辑器 Cursor 漏洞致远程代码执行,软件供应链面临威胁", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514820&idx=1&sn=3d427152300194dd252c1c51ba218fb7": "微软2025财年发放了超1.2亿元漏洞赏金,单个漏洞最高奖励143万元", "https://www.anquanke.com/post/id/311030": "CVE-2025-5095(CVSS 9.8):ARC Solo广播设备存在严重漏洞,可被未认证攻击者完全控制", "https://www.anquanke.com/post/id/311109": "WinRAR 更新:零日路径遍历漏洞(CVE-2025-8088)被大肆利用投递恶意软件", "https://www.anquanke.com/post/id/311064": "基于Linux系统的联想网络摄像头漏洞可被远程利用发起BadUSB攻击", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512597&idx=1&sn=0a7b543b616720275a771dd7a24aaa4b": "发现废弃硬件中的0Day漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524487&idx=1&sn=1715268ae74041049ca916f2777014a9": "【漏洞通告】WinRAR 目录遍历漏洞(CVE-2025-8088)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651326116&idx=2&sn=9019dad09ce3a088899541872bd8f8cf": "Apache bRPC 漏洞(CVE-2025-54472)可导致远程拒绝服务攻击", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490588&idx=1&sn=b453c208e623f4828d0f019f41efac5c": "【AI高危漏洞预警】Cherry Studio命令注入漏洞CVE-2025-54074", "https://mp.weixin.qq.com/s?__biz=Mzg5MjY0MzU0Nw==&mid=2247484935&idx=1&sn=237e2a1490244bf2ef26897d26bb9b73": "【IoT安全】洋垃圾路由器渗透到RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071124&idx=4&sn=9071d3e4896fe5db0071478b0449ea96": "【安全圈】智能公交系统曝出严重漏洞 可被远程跟踪与控制", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492912&idx=1&sn=ddc14a0f8fed2d144b2a7e1de430da9b": "【已复现】Cherry Studio 命令注入漏洞安全通告(CVE-2025-54074)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488882&idx=1&sn=5d352153e3641cf3a74c15255832b442": "泛微 e-office block_content.php接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651326116&idx=3&sn=f2fd2f85d1f722442127cbfc3ba54d54": "知名车企门户漏洞或致攻击者远程解锁汽车并窃取数据", "https://www.malwarebytes.com/blog/news/2025/08/winrar-vulnerability-exploited-by-two-different-groups": "WinRAR vulnerability exploited by two different groups", "https://techcrunch.com/2025/08/12/hackers-breach-and-expose-a-major-north-korean-spying-operation/": "Hackers breach and expose a major North Korean spying operation", "https://www.bleepingcomputer.com/news/security/hackers-leak-allianz-life-data-stolen-in-salesforce-attacks/": "Hackers leak Allianz Life data stolen in Salesforce attacks", "dump://2025-08-13/Security Through Education_The Voice of Deception_ How Vishing Exploits Human Emotion.md": "The Voice of Deception_ How Vishing Exploits Human Emotion", "https://www.tenable.com/blog/microsofts-august-2025-patch-tuesday-addresses-107-cves-cve-2025-53779": "Microsoft’s August 2025 Patch Tuesday Addresses 107 CVEs (CVE-2025-53779)", "https://thehackernews.com/2025/08/cybercrime-groups-shinyhunters.html": "Cybercrime Groups ShinyHunters, Scattered Spider Join Forces in Extortion Attacks on Businesses", "https://thehackernews.com/2025/08/dutch-ncsc-confirms-active-exploitation.html": "Dutch NCSC Confirms Active Exploitation of Citrix NetScaler CVE-2025-6543 in Critical Sectors", "https://thehackernews.com/2025/08/fortinet-ssl-vpns-hit-by-global-brute.html": "Fortinet SSL VPNs Hit by Global Brute-Force Wave Before Attackers Shift to FortiManager", "dump://2025-08-13/The Register - Security_Microsoft's Patch Tuesday baker's dozen_ 12 critical bugs plus a SharePoint RCE.md": "Microsoft's Patch Tuesday baker's dozen_ 12 critical bugs plus a SharePoint RCE", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500290&idx=1&sn=9677b0a0db1d0fe2172f1fbeda3a2608": "实战组合拳:剖析 SharePoint 和 Exchange 两个产品漏洞攻击链", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523781&idx=2&sn=3822150bbecbbd2b1b8c78685ff064b8": "施乐紧急修复两个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523781&idx=1&sn=32870c4fb49a2a2cc744798fa5c6f81e": "速修复!WinRAR 0day已遭活跃利用", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500248&idx=1&sn=5fa7317c15a00db1d0b5abfe1e962dd7": "CNVD漏洞周报2025年第30期", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503782&idx=1&sn=a842b14f1d1a18728ed670429238f871": "【已复现】Cherry Studio 命令注入漏洞(CVE-2025-54074)安全风险通告", "https://forum.butian.net/share/4490": "maku-boot未授权任意文件下载漏洞分析", "https://www.solidot.org/story?sid=82017": "高危 WinRAR 0day 正被利用", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492721&idx=1&sn=d54a9983cee148ea82d3a14a1f11273a": "疑似俄罗斯黑客利用WinRAR软件0Day漏洞展开攻击活动", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458598495&idx=1&sn=890d51b1b793f064d3019e30c2c3ce2b": "CVE-2014-0038内核漏洞exp分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458598495&idx=3&sn=71e1e59f5efa8907050aad228ec5631d": "Windows内核漏洞分析与EXP编写技巧", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458598495&idx=2&sn=e1fe2ff3a12bf7b2376270606c12d860": "智能公交系统漏洞曝光:攻击者可远程操控车辆", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096455&idx=2&sn=4c911e620aa415a4b1b8ff7540c49ba1": "Apache bRPC 存在允许攻击者通过网络远程崩溃服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247532229&idx=2&sn=0d737b525be8323b61f5feb3dc7b3899": "CVE-2025-6759:Citrix Virtual Apps and Desktops 中的本地权限提升", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458598511&idx=3&sn=69f9809b93ee3ed21348fc7364a759bb": "Chrome 紧急修复多个高危漏洞,攻击者可执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247495337&idx=1&sn=98cdb0b89d63d1cb8aae80189094a688": "LLM安全漏洞挖掘专场沙龙,PPT+回放来啦!", "https://mp.weixin.qq.com/s?__biz=MzkzMDg1MzIwNA==&mid=2247487777&idx=1&sn=7f7c589abd1db04e89f110454e1c034e": "NextCyber学习记录—Apache Druid 代码执行漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514833&idx=1&sn=266c84ecf7768b937e62da772111b130": "VMware ESXi严重漏洞威胁全球大量服务器,国内超1700台受影响", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247490298&idx=1&sn=6fcb6ace909bf34109b3d8bda6441784": "cisco设备信息泄漏漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247642564&idx=1&sn=6ffc16b9733942f701779d9b4832fbb6": "「限时免单」安全漏洞防治双螺旋演进:标准化打基础,自动化护成果", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458598511&idx=1&sn=18d2039f19dd43eb2838c1b57ed171b7": "『新课首发』最强代码审计课程!3个月掌握高危漏洞挖掘技巧,达到企业中级用人水平", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498033&idx=1&sn=25fdd7aea48b9500406ed05395833130": "如何将 Self-XSS 升级为真正可利用的 XSS 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138294&idx=1&sn=cb5e87e40607e1fef8a725d86289725a": "如何成为一名“漏洞赏金猎人”?新人入门指南", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247558326&idx=1&sn=83634f24763114f732fdccbd7b3ce3ee": "智能公交系统漏洞曝光:攻击者可远程操控车辆", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492433&idx=1&sn=41cb8c410d092138d62b27b8e21f41ba": "月子会所ERP管理云平台 BindRoomListData.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247535997&idx=4&sn=09eb04cb820e9b418f97d20d3436e916": "未授权访问漏洞检测神器!集成 40 + 常见漏洞,批量检测一步到位", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247574500&idx=1&sn=f9b85963b1fda24717525c48e2f872af": "某电力公司web.config的RCE之旅", "https://mp.weixin.qq.com/s?__biz=MzUyOTcyNDg1OA==&mid=2247484543&idx=1&sn=ede434a27a423b6e8b2ccb9ebfed8019": "第128篇:Struts2全版本漏洞检测工具19.68版本更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523797&idx=1&sn=e423419f8c63314f31423493071d25b4": "经销商网站存在严重漏洞,可导致黑客远程解锁汽车", "https://mp.weixin.qq.com/s?__biz=MzU0NDkyNTQ2OA==&mid=2247486130&idx=1&sn=2181648a591f377ee96e5c6369129c9f": "网络安全漏洞:这些潜在风险要留意", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650261549&idx=1&sn=4af9facf60a9cb9c8011b02ffa056931": "群晖 DiskStation 空字节写入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485918&idx=1&sn=4bfdea3e3453cea1dc60de8aff133e6c": "走进“乌云”教科书书里的漏洞-短信验证码回显【好靶场逻辑漏洞】", "https://mp.weixin.qq.com/s?__biz=MzkzMzkyNTQ0Ng==&mid=2247484541&idx=1&sn=ec356668f2f4ac02174057bff8582ee6": "黑客挖漏洞超详细攻略!一口气给你讲清楚挖漏洞要学什么?怎么练?去哪挖?", "https://www.bleepingcomputer.com/news/security/fortinet-warns-of-fortisiem-pre-auth-rce-flaw-with-exploit-in-the-wild/": "Fortinet warns of FortiSIEM pre-auth RCE flaw with exploit in the wild", "https://www.securityinfo.it/2025/08/12/ondata-di-attacchi-brute-force-contro-le-vpn-fortinet-poi-fortimanager/": "Ondata di attacchi brute-force contro le VPN Fortinet, poi FortiManager", "https://securityaffairs.com/181104/hacking/critical-fortisiem-flaw-under-active-exploitation-fortinet-warns.html": "Critical FortiSIEM flaw under active exploitation, Fortinet warns", "https://securityaffairs.com/181093/data-breach/hackers-leak-2-8m-sensitive-records-from-allianz-life-in-salesforce-data-breach.html": "Hackers leak 2.8M sensitive records from Allianz Life in Salesforce data breach", "https://thehackernews.com/2025/08/fortinet-warns-about-fortisiem.html": "Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code", "https://thehackernews.com/2025/08/zoom-and-xerox-release-critical.html": "Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE Flaws", "http://blog.recurity-labs.com/2025-08-13/CVE-2025-54576": "CVE-2025-54576 - Bypassing Cluster Authentication", "https://go.theregister.com/feed/www.theregister.com/2025/08/13/fortinet_discloses_critical_bug/": "Fortinet discloses critical bug with working exploit code amid surge in brute-force attempts", "https://go.theregister.com/feed/www.theregister.com/2025/08/13/uk_expands_police_facial_recognition/": "UK expands police facial recognition rollout with 10 new vans heading to a town near you", "https://www.troyhunt.com/get-pwned-get-local-advice-from-a-trusted-gov-source/": "Get Pwned, Get Local Advice From a Trusted Gov Source", "https://www.bellingcat.com/resources/2025/08/13/the-open-source-tool-that-has-preserved-150000-pieces-of-online-evidence/": "The Open Source Tool That Has Preserved 150,000 Pieces of Online Evidence", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523797&idx=2&sn=061e82e2169f7942ad99500891b5f57f": "微软8月补丁星期二值得关注的漏洞", "https://www.4hou.com/posts/vw4m": "WinRAR 零日漏洞被利用在解压档案时植入恶意软件", "https://forum.butian.net/share/4515": "【补天白帽黑客城市沙龙-杭州站】.NET反序列化漏洞全链路攻防", "https://forum.butian.net/share/4517": "【补天白帽黑客城市沙龙-杭州站】如何训练AI帮我调漏洞", "https://www.anquanke.com/post/id/311142": "FortiSIEM CVE-2025-25256(CVSS 9.8):远程未授权命令注入漏洞,野外已出现利用代码", "https://www.anquanke.com/post/id/311136": "Microsoft Teams RCE漏洞允许攻击者读取、修改及删除消息", "https://www.anquanke.com/post/id/311147": "逾3000台 NetScaler 设备仍暴露于“CitrixBleed 2”高危漏洞风险", "https://www.anquanke.com/post/id/311161": "黑客公布安联人寿 280 万条敏感数据,疑与 Salesforce 平台攻击有关", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524498&idx=1&sn=30bbed321189cfc185c291f91a4ad71b": "【漏洞通告】Cherry Studio 命令注入漏洞(CVE-2025-54074)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489328&idx=1&sn=4351e7e3fcf155a439e6abe8ab10b3c4": "【安全更新】微软8月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496587&idx=2&sn=22ec1fef4b664fa4ae5d13795c3a6de3": "2025年6月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649174162&idx=3&sn=04efdaa579506992ff058780e802caa0": "CNNVD通报微软多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODU3MzA5OQ==&mid=2247485007&idx=1&sn=9e0fbcdb9fe775d2eb0129ba7dba24a3": "Google Jules:存在多种数据泄漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5Njc4NjM3NA==&mid=2247496821&idx=1&sn=d9e347c4bec30c611c0e41617bacacfd": "VMware ESXi严重漏洞威胁全球大量服务器,国内超1700台受影响", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247574509&idx=2&sn=14f3fbcc7d5a7cd43f5c60c1f57a90b9": "Web常见漏洞合集,420页Web应用安全权威指南(附PDF)", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514839&idx=2&sn=c84b72a9450b6757a27125e9f170a97f": "主流智能公交系统曝严重漏洞:攻击者可远程操控车辆", "https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247600984&idx=1&sn=156669b767d698b645e38fa0f6dbd4e3": "北约撒钱筑墙×美建零信任堡垒×英招漏洞猎人|纵览7月全球网络安全十大事件", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247488123&idx=1&sn=52358f0acc2bfa958a49fb9a87cd5b4b": "记一次企业SRC之MSSQL报错注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523808&idx=2&sn=e620e1e18eef2958bd819150d13d684d": "这个严重的 Chrome 漏洞价值25万美元", "https://www.bleepingcomputer.com/news/security/cisa-warns-of-n-able-n-central-flaws-exploited-in-zero-day-attacks/": "CISA warns of N-able N-central flaws exploited in zero-day attacks", "https://securityaffairs.com/181110/hacking/u-s-cisa-adds-microsoft-internet-explorer-microsoft-office-excel-and-winrar-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Microsoft Internet Explorer, Microsoft Office Excel, and WinRAR flaws to its Known Exploited Vulnerabilities catalog", "https://securityaffairs.com/181135/security/u-s-cisa-adds-n-able-n-central-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds N-able N-Central flaws to its Known Exploited Vulnerabilities catalog", "https://www.tenable.com/blog/how-tenable-one-helps-canadian-orgs-set-up-exposure-management-programs-and-meet-compliance": "How Tenable One Helps Canadian Orgs Set Up Exposure Management Programs and Meet Compliance Demands", "https://thehackernews.com/2025/08/cisa-adds-two-n-able-n-central-flaws-to.html": "CISA Adds Two N-able N-central Flaws to Known Exploited Vulnerabilities Catalog", "https://thehackernews.com/2025/08/researchers-warn-crossc2-expands-cobalt.html": "Hackers Found Using CrossC2 to Expand Cobalt Strike Beacon’s Reach to Linux and macOS", "https://thehackernews.com/2025/08/new-android-malware-wave-hits-banking.html": "New Android Malware Wave Hits Banking via NFC Relay Fraud, Call Hijacking, and Root Exploits", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496587&idx=1&sn=cbc7111f9b76517541ab8ba94a7f1c1b": "2025年7月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523808&idx=1&sn=ef2a5d044fa1a9c53dc3920c5ce650d5": "Fortinet:注意这个严重的 FortiSIEM 预认证 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484566&idx=1&sn=c3b61ed80f5e49d7699231c661a941a2": "记一次在nginx上修复host头攻击漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485084&idx=2&sn=b0a406f7f5466e6c51ce35a8a22c9378": "2025年6月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485084&idx=1&sn=28aa909a2b6ab85eae2888baf7634a5f": "2025年7月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492725&idx=1&sn=ea5d41fbbb15f4f448fcf26a45356333": "国内知名厂商网络摄像头存在新漏洞,可被远程利用进行攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458598570&idx=4&sn=3b5d8ad9e5625e660609c969f3a050b3": "西门子 SIMATIC RTLS 管理器曝高危漏洞:CVSS 9.1,尽快升级", "https://infosecwriteups.com/advanced-http-request-smuggling-hrs-exploitation-guide-53ceadd5ac19?source=rss----7b722bfd1b8d--bug_bounty": "Advanced HTTP Request Smuggling (HRS) Exploitation Guide", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247489317&idx=1&sn=95b37e3b4e2460facc5a19d32914ee37": "LLM安全漏洞挖掘初学者指南", "https://mp.weixin.qq.com/s?__biz=MzkwMTc2MDE3OA==&mid=2247487079&idx=1&sn=5cdc17e8285ac43fc9600f3cba62a828": "Web3 DAPP的一个安全超高危漏洞的发现", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247490312&idx=1&sn=6e29cfff93ba23ca37d829c1d45e77b0": "cisco设备信息泄漏漏洞案例(二)", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490533&idx=2&sn=a7cc34ca8df4057e64125bc9446dc37b": "【风险通告】用友NC Cloud fip存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490533&idx=3&sn=052dfa01f4831d78ef2449ede4164ec4": "【风险通告】用友NC portal端存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498045&idx=1&sn=44dd934c15474963d1e4203cc74009e1": "价值1.4 W人民币漏洞!骚!", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247485077&idx=1&sn=8e4954d7407ce53d9e1ac91da37c2fb2": "安全漏洞防治双螺旋演进:标准化打基础,自动化护成果", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247494471&idx=1&sn=a52aba57a44aeecb52a0ecf76d854b86": "实战权限维持,从配置到命令执行一键部署 ViewState WebShell", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555899&idx=1&sn=c0864e3bd3875720a812e3d7505e3683": "意外搞出的免杀 webshell 实战之织梦 cms 到 RCE(代码审计思路讲解)", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247494408&idx=2&sn=a4af137beaab894adcc3f1505b5c6e04": "【CVE-2025-27388】OPPO健康APP存在Webview任意URL加载导致Token泄露风险的致谢公告", "https://securityaffairs.com/181155/hacking/hackers-exploit-microsoft-flaw-to-breach-canada-s-house-of-commons.html": "Hackers exploit Microsoft flaw to breach Canada ’s House of Commons", "https://thehackernews.com/2025/08/taiwan-web-servers-breached-by-uat-7237.html": "Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools", "https://go.theregister.com/feed/www.theregister.com/2025/08/15/cisco_secure_firewall_management_bug/": "Cisco's Secure Firewall Management Center now not-so secure, springs a CVSS 10 RCE hole", "dump://2025-08-16/The Register - Security_Should UK.gov save money by looking for open source alternatives to Microsoft_ You decide.md": "Should UK.gov save money by looking for open source alternatives to Microsoft_ You decide", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523819&idx=2&sn=1b0afcc966abc228069d1a16b3581db5": "Apache Tomcat 多个漏洞可导致攻击者触发DoS攻击", "https://vipread.com/library/topic/4009": "LLM 间接提示注入 漏洞解析与防御路线", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247495355&idx=1&sn=b6db08954f268506408cf59a9ecfc1c4": "ByteSRC AI安全专测起航!单个漏洞赏金10w+元!", "https://www.anquanke.com/post/id/311245": "CISA警告:N-able N-central 平台漏洞被用于零日攻击", "https://www.anquanke.com/post/id/311249": "WordPress 插件曝RCE高危漏洞(CVE-2025-7384,CVSS 9.8),逾 7 万网站面临数据泄露与破坏风险", "https://www.anquanke.com/post/id/311204": "思科披露重大RCE漏洞(CVE-2025-20265,CVSS 10):未认证攻击者可劫持防火墙", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498049&idx=1&sn=aab638b3a285214481b6c01ccc98e1ea": "200小时狂赚$20,300:漏洞赏金黑客挑战实录", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247493316&idx=1&sn=af1b36ec1165a05c02593509dd2fc469": "CISA 将 PaperCut RCE 漏洞标记为攻击利用,请立即修补", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247532288&idx=2&sn=26c7d7d34622319e10482fe0ed54cf29": "CVE-2025-49113——Roundcube 远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247488555&idx=1&sn=865a054cc99532c629b64d327f52b145": "MySQL JDBC反序列化漏洞(CVE-2017-3523)分析报告", "https://mp.weixin.qq.com/s?__biz=MzkzMDg1MzIwNA==&mid=2247487819&idx=1&sn=7c6f51ca8377945bf9e067080a0c214e": "NextCyber学习记录-Mysql 身份认证绕过漏洞(CVE-2012-2122)", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611867&idx=4&sn=6c925b6ae7fec252580c1e726c9d0e8f": "Thinkphp(GUI)漏洞利用工具,支持各版本TP漏洞检测,命令执行,Getshell", "https://mp.weixin.qq.com/s?__biz=Mzk2NDI0MjUyNQ==&mid=2247485353&idx=1&sn=3f3ec8cdce917b19699ea94c66ef529f": "Weblogic反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247501732&idx=1&sn=32fc7596f7447afeff32914bc01c1b68": "sap-netweaver-0day-CVE-2025-31324", "https://mp.weixin.qq.com/s?__biz=Mzk5MDYxODcwMA==&mid=2247484117&idx=1&sn=cd70d24212640d11a116b42d65d9156d": "【0day】某能源系统存在RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492800&idx=1&sn=ea208f37d47236041ca4dc9ceed6a298": "星巴克漏洞挖掘-从bypass WAF到上亿客户信息泄露", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247486861&idx=1&sn=97c73174f2c4415ac158fbc56a2717b2": "菜狗安全《代码审计培训》手把手教学的0day挖掘之旅", "https://www.bleepingcomputer.com/news/security/researcher-to-release-exploit-for-full-auth-bypass-on-fortiweb/": "Researcher to release exploit for full auth bypass on FortiWeb", "https://securityaffairs.com/181203/cyber-crime/encrypthub-abuses-brave-support-in-new-campaign-exploiting-msc-eviltwin-flaw.html": "EncryptHub abuses Brave Support in new campaign exploiting MSC EvilTwin flaw", "https://thehackernews.com/2025/08/ermac-v30-banking-trojan-source-code.html": "ERMAC V3.0 Banking Trojan Source Code Leak Exposes Full Malware Infrastructure", "https://thehackernews.com/2025/08/russian-group-encrypthub-exploits-msc.html": "Russian Group EncryptHub Exploits MSC EvilTwin Vulnerability to Deploy Fickle Stealer Malware", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484570&idx=1&sn=553c7aad3fb835183e6fe5ba1b9b799f": "CVE-2025-49113 Roundcube Webmail反序列化漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071203&idx=3&sn=3763540d68e06c4ef3f58ec16e4c1736": "【安全圈】【高危预警】1Panel管理面板惊现供应链级RCE漏洞!", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247488568&idx=1&sn=ce076db5d5640a2859d89a7425c39e3d": "MySQL JDBC反序列化漏洞(CVE-2017-3523)分析报告", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492802&idx=1&sn=b6caca432f0622d73695a349ef5c5173": "RCE漏洞(二)", "https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247491871&idx=1&sn=bfbf1d20ba3e4b9cf7a88a7b00f425fe": "安全产品不安全?某安全厂商SIEM存在超危漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447901145&idx=1&sn=70da6e8c8eeab7a5fca534dc8d90bd92": "山雨欲来!全球飞塔(Fortinet)设备正遭疯狂攻击,背后或隐藏惊天0-day漏洞!", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247532303&idx=1&sn=e6660ccf62c0c42490be7de4ceba632c": "当防御者变成攻击者:Elastic EDR 0-Day(RCE + DoS)", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447901121&idx=1&sn=2283d6582e6560b8ed8ccb1b787de04f": "所有安卓用户:立即检查更新!你的手机芯片曝出“在逃”0day漏洞,黑客或已在利用!", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247488144&idx=2&sn=bfea9570c614c1b8f2e23b7a65db72e7": "记一次企业SRC之MSSQL报错注入漏洞", "https://securityaffairs.com/181217/uncategorized/ermac-3-0-source-code-leak-reveals-expanding-threat.html": "ERMAC 3.0 Source Code Leak Reveals Expanding Threat", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071217&idx=3&sn=5a8bb9cfe3a4cd7c3f48d25a74aa349e": "【安全圈】Cisco Secure Firewall 管理中心软件 RADIUS 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496231&idx=1&sn=82c462da1da9c2618d21e0b001a18086": "CNVD漏洞周报2025年第31期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496231&idx=2&sn=90b17ce5434b08dbbeb7f128aedb5cb5": "上周关注度较高的产品安全漏洞(20250811-20250817", "https://mp.weixin.qq.com/s?__biz=Mzk5MDYxODcwMA==&mid=2247484129&idx=1&sn=4159fa6c3b71d64b9d4469c07f813a77": "【0day】某物联网系统存在任意用户注册漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484927&idx=1&sn=74121441d711a2028471851b7e19adb0": "【复现】SmartBi远程代码执行漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071237&idx=4&sn=697e0a6986a00b808ad82f4ab9ee0a33": "【安全圈】俄罗斯黑客组织 EncryptHub 利用 MSC EvilTwin 漏洞部署 Fickle Stealer 恶意软件", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247522821&idx=1&sn=dc33f4172b8f7601e4b19ba73f33efac": "禅道各版本漏洞复现汇总上篇", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488906&idx=1&sn=04255613945c0ee8bc6988cc8167974d": "西部数码NAS modUserName.php接口存在命令执行漏洞 附POC", "https://www.exploit-db.com/exploits/52415": "[remote] Microsoft Windows 10.0.19045 - NTLMv2 Hash Disclosure", "https://www.exploit-db.com/exploits/52414": "[remote] PHPMyAdmin 3.0 - Bruteforce Login Bypass", "https://www.exploit-db.com/exploits/52418": "[remote] Tenda AC20 16.03.08.12 - Command Injection", "https://www.exploit-db.com/exploits/52412": "[webapps] BigAnt Office Messenger 5.6.06 - SQL Injection", "https://www.exploit-db.com/exploits/52417": "[webapps] Lantronix Provisioning Manager 7.10.3 - XML External Entity Injection (XXE)", "https://www.exploit-db.com/exploits/52413": "[webapps] RiteCMS 3.0.0 - Reflected Cross Site Scripting (XSS)", "https://www.exploit-db.com/exploits/52416": "[webapps] Soosyze CMS 2.0 - Brute Force Login", "https://www.bleepingcomputer.com/news/security/ermac-android-malware-source-code-leak-exposes-banking-trojan-infrastructure/": "ERMAC Android malware source code leak exposes banking trojan infrastructure", "https://www.bleepingcomputer.com/news/security/hr-giant-workday-discloses-data-breach-amid-salesforce-attacks/": "HR giant Workday discloses data breach amid Salesforce attacks", "https://www.darknet.org.uk/2025/08/veles-googles-open-source-secret-scanner-for-gcp-key-detection/": "Veles – Google’s Open Source Secret Scanner for GCP Key Detection", "https://www.darknet.org.uk/2025/08/xsshunter-express-self-hosted-blind-xss-payload-capture-and-analysis/": "xsshunter-express – Self-Hosted Blind XSS Payload Capture and Analysis", "https://securityaffairs.com/181271/data-breach/human-resources-firm-workday-disclosed-a-data-breach.html": "Human resources firm Workday disclosed a data breach", "http://sites.libsyn.com/18678/rethinking-risk-based-vulnerability-management-black-hat-expo-insights-and-the-news-snehal-antani-esw-420": "Rethinking risk based vulnerability management, Black Hat expo insights, and the news - Snehal Antani - ESW #420", "https://www.tenable.com/blog/how-tenable-moved-from-siloed-security-to-exposure-management": "How Tenable Moved From Siloed Security to Exposure Management", "https://thehackernews.com/2025/08/malicious-pypi-and-npm-packages.html": "Malicious PyPI and npm Packages Discovered Exploiting Dependencies in Supply Chain Attacks", "https://thehackernews.com/2025/08/microsoft-windows-vulnerability.html": "Microsoft Windows Vulnerability Exploited to Deploy PipeMagic RansomExx Malware", "https://thehackernews.com/2025/08/noodlophile-malware-campaign-expands.html": "Noodlophile Malware Campaign Expands Global Reach with Copyright Phishing Lures", "https://www.4hou.com/posts/kg4X": "WinRAR零日漏洞攻击的分析详解", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584284&idx=1&sn=a1499ea1c90b5c328f983e2150ad1689": "WinRAR零日漏洞攻击的分析详解", "dump://2025-08-19/复旦白泽战队_成果分享 _ [USENIX Security 2025] Web应用漏洞检测新突破:基于导向式模糊测试的高效漏洞检测技术.md": "成果分享 _ [USENIX Security 2025] Web应用漏洞检测新突破:基于导向式模糊测试的高效漏洞检测技术", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503815&idx=1&sn=749e5d185d7a30d414775a90514bb538": "【已复现】Fortinet FortiSIEM 远程命令执行漏洞(CVE-2025-25256)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247495380&idx=1&sn=d2e309e34ea2e3a88ee3e578e11d8197": "研究了200天LLM,越权漏洞检测准确率才提升这点点?", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458598646&idx=3&sn=72ad83686c87aabd4830e62bc1901b28": "最强代码审计课程!掌握高危漏洞挖掘技巧,达到企业中级用人水平", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492922&idx=1&sn=4cf68dd55182abe9c0afa582e478a474": "【已复现】Smartbi 远程代码执行漏洞安全通告", "https://mp.weixin.qq.com/s?__biz=MjM5NDUxMTI2NA==&mid=2247485174&idx=1&sn=4fa2aa68828148098914e5b01e0ffd68": "AI驱动的黑盒漏洞自动审计系统:从人工复现到智能判断的技术实践", "https://mp.weixin.qq.com/s?__biz=MzA3NDE0NTY0OQ==&mid=2247488147&idx=1&sn=7c37bb551b016e3335f2392189470f29": "Day26 Web漏洞-XSS跨站脚本", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651326444&idx=2&sn=a79486f76e901befa352cfe5b960079a": "Linux内核netfilter漏洞可导致攻击者权限提升", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519671&idx=1&sn=54b8e860cdd344a2ba716ee43a0855ca": "OAuth2.0劫持账号漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=MzIxMTczNzM1Ng==&mid=2247485629&idx=1&sn=a3db496ecd85cfe8cac675ff54bddac2": "VulnMain开源漏洞管理平台更新:新增LDAP目录同步", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490549&idx=1&sn=8615d06eaebcba21b0a4f665651c3e7e": "【已复现】Smartbi存在未授权远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMDc0MTc5Mw==&mid=2247483888&idx=1&sn=6b0d642c903ac8d713f2b2528b247047": "【漏洞复现】特斯拉车主敏感数据因配置错误大规模暴露,GPS与驾驶习惯均可被获取。", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490623&idx=1&sn=037d1f9e0610150aefe6cb7ccb826640": "【高危漏洞预警】Smartbi远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494574&idx=1&sn=191862f53e7dc30fabf69f74a7de133f": "职等你来!360漏洞研究院招聘火热进行中", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488934&idx=1&sn=02b3c680f9d546b099f4b45442189833": "西部数码NAS ftp_download.php接口存在命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503502&idx=1&sn=6cbae1afdb58d433ca36348210ddc626": "雷神众测漏洞周报2025.8.11-2025.8.17", "https://seclists.org/fulldisclosure/2025/Aug/15": "CSV Injection in nopcommerce v4.10 and 4.80.3", "https://seclists.org/fulldisclosure/2025/Aug/16": "Insufficient Resource Allocation Limits in nopCommerce v4.10 and v4.80.3 Excel Import Functionality", "https://www.bleepingcomputer.com/news/security/elastic-rejects-claims-of-a-zero-day-rce-flaw-in-defend-edr/": "Elastic rejects claims of a zero-day RCE flaw in Defend EDR", "https://www.bleepingcomputer.com/news/security/okta-open-sources-catalog-of-auth0-rules-for-threat-detection/": "Okta open-sources catalog of Auth0 rules for threat detection", "https://blog.doyensec.com/2025/08/19/trivial-exploit-on-C-random.html": "Trivial C# Random Exploitation", "https://www.schneier.com/blog/archives/2025/08/zero-day-exploit-in-winrar-file.html": "Zero-Day Exploit in WinRAR File", "https://securityaffairs.com/181283/hacking/u-s-cisa-adds-trend-micro-apex-one-flaw-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Trend Micro Apex One flaw to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2025/08/apache-activemq-flaw-exploited-to.html": "Apache ActiveMQ Flaw Exploited to Deploy DripDropper Malware on Cloud Linux Systems", "https://thehackernews.com/2025/08/public-exploit-for-chained-sap-flaws.html": "Public Exploit for Chained SAP Flaws Exposes Unpatched Systems to Remote Code Execution", "https://thehackernews.com/2025/08/pypi-blocks-1800-expired-domain-emails.html": "PyPI Blocks 1,800 Expired-Domain Emails to Prevent Account Takeovers and Supply Chain Attacks", "https://go.theregister.com/feed/www.theregister.com/2025/08/19/critical_thinking_and_sovereign_cloud/": "More customers asking for Google's Data Boundary, says Cloud Experience boss", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500328&idx=1&sn=e66fa07cfe55feb135a89b9f131511d8": ".NET MVC 漏洞挖掘,通过匿名访问实现权限绕过", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523839&idx=2&sn=7eda1a64dd8447af46435bb0a2477ef2": "PostgreSQL 紧急修复Core Utilities 中的多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523839&idx=1&sn=e417e55b90ede28fbc35dfca8a455248": "思科提醒注意Firewall 管理中心满分漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500276&idx=1&sn=49c0b066094f9357ae8a61cd8c15ca40": "CNVD漏洞周报2025年第31期", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503823&idx=1&sn=29633740671761e62a63e50193c6c725": "【已复现】Smartbi 远程代码执行漏洞(QVD-2025-31926)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5MTExMjYwMA==&mid=2247485727&idx=1&sn=723dfa85723a820f673343d1d587c622": "BlackHat_USA_2025 PPT分享", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096471&idx=1&sn=782fdcca143f6d312cdda073448ee766": "Chrome 高严重性漏洞允许攻击者执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzkzODU3MzA5OQ==&mid=2247485030&idx=1&sn=d2b196bffd1b9063b73dca9360e3367f": "Google Jules存在不可见提示词注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523844&idx=1&sn=25a47e194f18b102314d9bab459cda61": "Plex 修复神秘漏洞,提醒用户立即升级", "https://mp.weixin.qq.com/s?__biz=Mzk1NzE0ODUyOA==&mid=2247492356&idx=1&sn=22027af77659ff88db0fe80cbb36b667": "【ADLab原创漏洞】微软Prompt flow远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071280&idx=2&sn=9b6dec0ed6e57c86d2ed7598c3ab24cd": "【安全圈】特斯拉车辆数据因配置漏洞遭大规模泄露", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494581&idx=1&sn=260ff2ef3a195ccb509ceb32c5c4bbfb": "【首发复现】高通Adreno GPU微码指令校验绕过漏洞(CVE-2025-21479)", "https://mp.weixin.qq.com/s?__biz=MzkzODU5MTkyNQ==&mid=2247485741&idx=1&sn=7804476177be08f45f1f58079e24b54c": "为什么黑客网安人都爱挖src?挖漏洞到底有多香?!", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247485095&idx=1&sn=bb461c19aaf6e88e81189f6115d98395": "关于开展「安全漏洞防治SOP征集活动」通知", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488946&idx=1&sn=73d6cffb0c4e637cbfe259c8eae46192": "孚盟云CRM GetIcon.aspx接口存在SQL注入漏洞 附POC", "dump://2025-08-21/Doonsec's feed_成果分享 _ [USENIX Security 2025] XSSky:融合动静态分析,精准狙击XSS漏洞的新一代“利剑”.md": "成果分享 _ [USENIX Security 2025] XSSky:融合动静态分析,精准狙击XSS漏洞的新一代“利剑”", "https://mp.weixin.qq.com/s?__biz=MzkzOTYzMzY3MQ==&mid=2247483993&idx=1&sn=40eca9b734cd7022fdd13fc74a257e07": "漏洞复现-小皮面板JWT Token伪造到RCE", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514867&idx=1&sn=308bc09fc76b087d1acc66c4d984b3d2": "研究员发现5G网络安全漏洞:可实时嗅探流量、拒绝服务、网络降级", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247642818&idx=1&sn=97621d0a67e7f125bc03059f6e70dc6e": "藏在身边的“泄密者”:别让打印机成为漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247519659&idx=2&sn=749da80c4e9e962e9cd61c2be524e0fe": "记一次小程序漏洞挖掘:从越权登录到信息泄露(轻松易上手)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651326507&idx=3&sn=40b96b8b514f838661cdeaf216deba30": "麦当劳系统漏洞事件:从免费鸡块漏洞到高管数据泄露", "https://arstechnica.com/security/2025/08/adult-sites-use-malicious-svg-files-to-rack-up-likes-on-facebook/": "Adult sites are stashing exploit code inside racy .svg files", "https://securityaffairs.com/181325/security/exploit-weaponizes-sap-netweaver-bugs-for-full-system-compromise.html": "Exploit weaponizes SAP NetWeaver bugs for full system compromise", "https://thehackernews.com/2025/08/dom-based-extension-clickjacking.html": "DOM-Based Extension Clickjacking Exposes Popular Password Managers to Credential and Data Theft", "https://thehackernews.com/2025/08/experts-find-ai-browsers-can-be-tricked.html": "Experts Find AI Browsers Can Be Tricked by PromptFix Exploit to Run Malicious Hidden Prompts", "https://thehackernews.com/2025/08/fbi-warns-russian-fsb-linked-hackers.html": "FBI Warns FSB-Linked Hackers Exploiting Unpatched Cisco Devices for Cyber Espionage", "https://go.theregister.com/feed/www.theregister.com/2025/08/20/amazon_quietly_fixed_q_developer_flaws/": "Amazon quietly fixed Q Developer flaws that made AI agent vulnerable to prompt injection, RCE", "https://go.theregister.com/feed/www.theregister.com/2025/08/20/commvault_bug_chains_patched/": "Commvault releases patches for two nasty bug chains after exploits proven", "dump://2025-08-21/The Register - Security_FBI_ Russian spies exploiting a 7-year-old Cisco bug to slurp configs from critical infrastructure.md": "FBI_ Russian spies exploiting a 7-year-old Cisco bug to slurp configs from critical infrastructure", "https://go.theregister.com/feed/www.theregister.com/2025/08/20/mcdonalds_terrible_security/": "McDonald's not lovin' it when hacker exposes nuggets of rotten security", "dump://2025-08-21/Trend Micro Research, News and Perspectives_Warlock_ From SharePoint Vulnerability Exploit to Enterprise Ransomware.md": "Warlock_ From SharePoint Vulnerability Exploit to Enterprise Ransomware", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500335&idx=3&sn=09a6c8466ce69485040ad519d6e57b89": ".NET MVC 漏洞挖掘,通过匿名访问实现权限绕过", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500335&idx=1&sn=27762be83e6fbcd1a16e50c46d60036c": ".NET 旧威胁新挑战:2025年 SQL 注入漏洞攻与防", "https://www.anquanke.com/post/id/311338": "CVE-2025-54336(CVSS评分9.8):Plesk Obsidian关键漏洞使服务器面临完全被控风险", "https://www.anquanke.com/post/id/311378": "超过800台 N-able 服务器未修补关键漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzOTYzMzY3MQ==&mid=2247484007&idx=1&sn=aba9231553a8a0c8aff39c71150c56f4": "CVE-2024-23897-Jenkins任意文件仅一行回显下的后利用思路", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247490065&idx=1&sn=ffd8c09d53d8beb89d16d141b989b994": "CVE‑2025‑29824 Windows 提权漏洞深入分析", "https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247491891&idx=1&sn=ce4a70ec36883c57fca3c31b0c7e7856": "OKSCAN:网络安全运营中的漏洞扫描神器", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071298&idx=3&sn=f9e6ee58e845fd627ca3c177a4a381b1": "【安全圈】俄黑客利用思科7年前漏洞入侵关键基础设施", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490633&idx=1&sn=6a601fac7075ae3ef9c0b5a7c598b230": "【高危漏洞预警】Cisco FMC RADIUS远程代码执行漏洞CVE-2025-20265", "https://mp.weixin.qq.com/s?__biz=Mzg4NjY3OTQ3NA==&mid=2247487095&idx=1&sn=a5f3b193f2213f2c28a2de1d26863fa2": "一次 2FA 绕过漏洞的发现与复测案例分析", "https://mp.weixin.qq.com/s?__biz=MzkzMzkyNTQ0Ng==&mid=2247484562&idx=1&sn=1f79f956c86b31b0d2a2e96ca689f422": "为什么黑客网安人都爱挖src?挖漏洞到底有多香?!", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651326554&idx=1&sn=13b2e7f9834d1401ac0b7dee3d2f573d": "十年渗透:俄罗斯APT组织如何长期利用思科设备漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556102&idx=1&sn=944becb544a975e3c38bb9f9d6e1c678": "漏洞利用,一键接管目标机器", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247542886&idx=1&sn=7eacf81992d08bc56a2414658f8efc4c": "立即更新!苹果紧急修复高危漏洞,已被黑客利用发起攻击", "https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247493924&idx=2&sn=af01328cacbe1fb5c29a08e52a26457a": "美团安全应急响应中心漏洞测试高压线V2.0", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523850&idx=1&sn=292ce2473690739e7a9c0cd1dbafe137": "苹果紧急修复已遭利用的新 0day", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651326554&idx=3&sn=337e2dd998943f1bf6784d5646a89910": "黑客组织涉嫌在暗网兜售Windows零日远程代码执行漏洞", "https://www.bleepingcomputer.com/news/security/fbi-warns-of-russian-hackers-exploiting-cisco-flaw-in-critical-infrastructure-attacks/": "FBI warns of Russian hackers exploiting 7-year-old Cisco flaw", "https://techcrunch.com/2025/08/21/hackers-who-exposed-north-korean-government-hacker-explain-why-they-did-it/": "Hackers who exposed North Korean government hacker explain why they did it", "https://securityaffairs.com/181394/security/apple-addressed-the-seventh-actively-exploited-zero-day.html": "Apple addressed the seventh actively exploited zero-day", "https://thehackernews.com/2025/08/apple-patches-cve-2025-43300-zero-day.html": "Apple Patches CVE-2025-43300 Zero-Day in iOS, iPadOS, and macOS Exploited in Targeted Attacks", "https://thehackernews.com/2025/08/pre-auth-exploit-chains-found-in.html": "Pre-Auth Exploit Chains Found in Commvault Could Enable Remote Code Execution Attacks", "https://go.theregister.com/feed/www.theregister.com/2025/08/21/microsoft_cuts_chinas_early_access/": "Microsoft reportedly cuts China's early access to bug disclosures, PoC exploit code", "https://go.theregister.com/feed/www.theregister.com/2025/08/21/orange_belgium_breach/": "Orange Belgium mega-breach exposes 850K customers to serious fraud", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500341&idx=3&sn=435d7f05bb9e8a523d92cbcfa4a297ce": ".NET 旧威胁新挑战:2025年 SQL 注入漏洞攻与防", "https://www.4hou.com/posts/RXGR": "面对域名过期漏洞,PyPI阻断了账户劫持与攻击风险", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584348&idx=1&sn=6d1432bd4fca14a647832a914daae622": "面对域名过期漏洞,PyPI阻断了账户劫持与攻击风险", "dump://2025-08-22/复旦白泽战队_成果分享|[USENIX Security 2025] LinkZard_ LFVulns漏洞自动化检测与利用框架.md": "成果分享|[USENIX Security 2025] LinkZard_ LFVulns漏洞自动化检测与利用框架", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484578&idx=1&sn=c7566697c939d878ee985fb93b6eaf74": "Swagger UI 的隐藏陷阱,XSS 注入一击即中(CVE-2025-8191)", "https://blog.xlab.app/p/70dc71dc/": "Claude Code Router远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524548&idx=1&sn=dbcaf48999dd7953424a331e925d3633": "【漏洞通告】Commvault 未授权远程代码执行漏洞(CVE-2025-57790)", "https://infosecwriteups.com/xss-exploit-via-richtext-parser-352e1b39603b?source=rss----7b722bfd1b8d--bug_bounty": "XSS Exploit via RichText Parser", "https://mp.weixin.qq.com/s?__biz=MzkyNzMyNjcwNQ==&mid=2247488803&idx=1&sn=475878fd84419d0815410886c3acbf28": "CVE-2024-21762 FortiOS RCE 复现与分析", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3MjkyOA==&mid=2247485110&idx=1&sn=b1b70e9f09c2ff8386bff470515bfb89": "DLL劫持漏洞挖掘以及实现白+黑", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611952&idx=3&sn=46253be4b3aa169c358cdcd799cc154e": "Linux内核netfilter漏洞可导致攻击者权限提升", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247488557&idx=1&sn=c0fde2a563e2e3df0f90eb7df494dea4": "【实战SRC】漏洞挖掘之XSS漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247485862&idx=1&sn=7f0f15f5d4a9884a1b331ed8a461787f": "健身 APP 惊现漏洞链,500 万邮箱数据岌岌可危!!!", "dump://2025-08-23/Doonsec's feed_幻影_一款漏洞挖掘的辅助工具_收集中的隐藏接口和敏感信息.md": "幻影_一款漏洞挖掘的辅助工具_收集中的隐藏接口和敏感信息", "https://mp.weixin.qq.com/s?__biz=Mzg4ODg4NDA2Mw==&mid=2247483926&idx=1&sn=ab0b20a013f81d5d5360b1638866479d": "空白页面到未授权获取token在到垂直越权漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494578&idx=3&sn=38ffa062456e79f00f6c33dd26f413d9": "美国联邦调查局披露:俄罗斯关联组织Static Tundra利用旧版思科漏洞实施网络间谍活动", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494578&idx=1&sn=2ce6cdd60e79944a30aaeaaa10eac016": "苹果修复了第七个被主动利用的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247574605&idx=1&sn=9f8db0eca6b2c22c6eb76b856ef63bbe": "麦当劳系统漏洞事件:从免费鸡块漏洞到高管数据泄露", "https://mp.weixin.qq.com/s?__biz=Mzg3OTc0NDcyNQ==&mid=2247494578&idx=2&sn=f87a13c12b66b41a5db7c36b8944bc16": "黑客利用Apache ActiveMQ漏洞部署DripDropper恶意软件,请及时修补系统以规避检测风险", "https://securityaffairs.com/181430/security/after-sharepoint-attacks-microsoft-stops-sharing-poc-exploit-code-with-china.html": "After SharePoint attacks, Microsoft stops sharing PoC exploit code with China", "https://securityaffairs.com/181406/security/u-s-cisa-adds-apple-ios-ipados-and-macos-flaw-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Apple iOS, iPadOS, and macOS flaw to its Known Exploited Vulnerabilities catalog", "https://lab.wallarm.com/exploiting-api4-real-world-unrestricted-resource-consumption-attack-scenarios-how-to-stop-them/": "Exploiting API4 — 8 Real-World Unrestricted Resource Consumption Attack Scenarios (and How to Stop Them)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500352&idx=3&sn=c4539cf2099c369f41644cb638b5d953": ".NET MVC 漏洞挖掘,通过匿名访问实现权限绕过", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523861&idx=1&sn=d7b88fdc84ab443ced7ac3c7ee6786b6": "Commvault 预认证利用链可用于实施RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503830&idx=1&sn=99d1c79a77988821bcf94a3f4fd13498": "【已复现】Docker Desktop 未授权访问漏洞(CVE-2025-9074)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514884&idx=1&sn=5cd4226955120777c874071a82aa3564": "一套利用链报价超1.4亿元!这家公司战略储备零日漏洞", "https://www.anquanke.com/post/id/311421": "CVE-2025-55746漏洞预警:Directus高危漏洞曝出 未授权文件上传可致服务器沦陷", "https://www.anquanke.com/post/id/311424": "CVE-2025-9288安全警报:热门JS库曝关键漏洞 全球网络安全受严重威胁", "https://www.anquanke.com/post/id/311428": "新型QUIC-LEAK漏洞曝光 攻击者可耗尽服务器内存引发拒绝服务攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498084&idx=1&sn=d2e8070514f4eaf7b4ac884804facfe6": "价值1.4 W人民币漏洞!骚!", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492932&idx=1&sn=b4f9abb7a784d419f0a0ce226e3cee57": "【已复现】Docker Desktop Engine API 未授权访问漏洞安全通告(CVE-2025-9074)", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611962&idx=3&sn=7b31396172279e11785ad4aa11757279": "20个网站备份泄漏漏洞挖掘技巧!", "https://mp.weixin.qq.com/s?__biz=MzIxOTM2MDYwNg==&mid=2247517712&idx=1&sn=aed7f90b75de9adac5211837b7477f31": "Web Exploit Tool【图形化综合Web漏洞利用工具】", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247490303&idx=1&sn=2d39c88f9338a42004e16f8cccc107bc": "WordPress Cloudflare Image Resizing 插件存在前台代码执行漏洞(RCE)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071344&idx=3&sn=56c8e0d0ac4d914dd76ed35a22fd6a7b": "【安全圈】1Password 等 6 款主流密码管理器曝严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247488581&idx=1&sn=4b9ca116f0413f9ffcb4a6554e8c1b92": "【实战SRC】漏洞挖掘之docker未授权", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247494171&idx=1&sn=0d589d01dfbb068e53f9ad9c22676d7a": "从js逆向到sql注入waf绕过到net审计-edu证书漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODU5MTkyNQ==&mid=2247485772&idx=1&sn=1fd950aee6aba6a369e47cdd28d6c6bd": "挖src漏洞入门教程(非常详细)从零基础入门到精通,看完这一篇就够了", "https://mp.weixin.qq.com/s?__biz=Mzk0MDczMzYxNw==&mid=2247484462&idx=1&sn=932a72221a604cdea9d9a5a8e47513e5": "某盾信息安全管理审计系统RCE漏洞(1day)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500357&idx=1&sn=20aa619c6b117f6b43119d4953a21aef": ".NET内网实战:通过 VisualUiaVerifyNative 反序列化漏洞执行命令", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487789&idx=1&sn=7f1b94513ef2cb92bbafa4ffc69b9c73": "从一次waf绕过来学习.Net JavaScriptDeserialize反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzMxODkzMw==&mid=2247486026&idx=1&sn=29e407b3a4da314e9cd18e4175edceb0": "汉王e脸通综合管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486488&idx=1&sn=6bcda11b406fc8e3f7951dcdb8962a67": "流量管理、漏洞探测插件 - Brup_TLA", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247488657&idx=1&sn=3b4362005b252ac4f44bb2e1c56209fa": "浏览器存储桶配置漏洞检测插件BucketTool", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247488580&idx=1&sn=bf79f98733b8b2969e26e5a01064f6ca": "逻辑漏洞渗透商场平台技巧分享(二)", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486506&idx=1&sn=30ddc2dca3f566977b3828c62fbfdc33": "零日漏洞经纪人“先进安全..”为远程攻破iPhone手机提供2000万美元", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247495954&idx=1&sn=77b026fc821549943594fca3168ac939": "麦当劳系统漏洞事件:从免费鸡块漏洞到高管数据泄露", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247637065&idx=3&sn=7eb02e143a502fcb8d7eaee6646a8aeb": "黑客仅需简单短语即可绕过AI防护:ChatGPT-5降级攻击漏洞曝光", "https://maskray.me/blog/2025-08-24-understanding-alignment-from-source-to-object-file": "Understanding alignment - from source to object file", "https://thehackernews.com/2025/08/malicious-go-module-poses-as-ssh-brute.html": "Malicious Go Module Poses as SSH Brute-Force Tool, Steals Credentials via Telegram Bot", "dump://2025-08-26/Bug Bounty in InfoSec Write-ups on Medium_“Day 10_ Defending the Digital Gateway — A White Hat’s Exploration of Chrome’s Security….md": "“Day 10_ Defending the Digital Gateway — A White Hat’s Exploration of Chrome’s Security…", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496251&idx=1&sn=b98713b85ea2b1fb114a24695dc50978": "CNVD漏洞周报2025年第32期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496251&idx=2&sn=01ce63ed042a94bde7e31b9ca7ce7873": "上周关注度较高的产品安全漏洞(20250818-20250824", "https://mp.weixin.qq.com/s?__biz=Mzk0NTQyMjk4Ng==&mid=2247484370&idx=1&sn=be428ab626a8dfdf968d1dc50aab0c27": "Smartbi 最新认证绕过导致RCE漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247522858&idx=1&sn=e71b281b21a01cfe728ae5467102c04b": "【实战】文都 OA 云协同系统分析+漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247495956&idx=1&sn=cd8d29b7a91a11cac66ecb4396dbcf14": "【若依专题】超详细的环境搭建教学+SQL注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247497386&idx=1&sn=983e5eb6c44a53a65b926e588d5e2c0d": "一套利用链报价超1.4亿元!这家公司战略储备零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488959&idx=1&sn=f96b16f17949a4e5377b13388c0f203f": "东胜物流软件UploadMailFil接口存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkwMzY5NTg0Mg==&mid=2247484083&idx=1&sn=c5a02123a13bafe9cdce1dd92bd0a810": "天锐绿盾审批系统 findUserPage 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247488596&idx=1&sn=203ed927927f826bfd45bee35eb47507": "未授权漏洞渗透技巧总结分享(六)", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492745&idx=1&sn=bfec93cbb249dace19bb6c2b554f7982": "警惕!IPv6默认配置成为黑客入侵企业内网的新“漏洞”", "https://mp.weixin.qq.com/s?__biz=MzkyNDUyNzU1MQ==&mid=2247488353&idx=2&sn=443b5d77aff816f227b629efe4043498": "长亭解决方案|СТЕМ-漏洞运营解决方案", "https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247533088&idx=2&sn=5cd3528e3b903914a66f5936c51e0353": "黑客仅需简单短语即可绕过AI防护:ChatGPT-5降级攻击漏洞曝光", "https://thehackernews.com/2025/08/docker-fixes-cve-2025-9074-critical.html": "Docker Fixes CVE-2025-9074, Critical Container Escape Vulnerability With CVSS Score 9.3", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496643&idx=1&sn=e42e6880c327cf1c2a86d1023d6cc1f3": "熵裂·弥合丨腾讯2025上半年漏洞态势报告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523874&idx=2&sn=b22dbc00b0eba38c857fdab5fc4fe7a7": "Apache Tika PDF 解析器严重漏洞可导致攻击者访问敏感数据", "https://xz.aliyun.com/news/18698": "DLL劫持漏洞挖掘以及白+黑的实现", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503836&idx=1&sn=252514050cd2b43657a5243f118cd149": "【已复现】Apple DNG图像处理越界写入漏洞(CVE-2025-43300)安全风险通告", "https://www.anquanke.com/post/id/311434": "CVE-2025-26496漏洞预警(CVSS 9.6):Tableau服务器曝关键漏洞 企业面临RCE风险", "https://www.anquanke.com/post/id/311445": "IBM发布紧急补丁修复Jazz Team Server高危漏洞(CVE-2025-36157)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507897&idx=1&sn=f70df7fb3c586dcb874ee9814357851e": "已复现!Apple ImageIo 越界写入漏洞,影响macOS、iOS、iPadOS", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458598876&idx=3&sn=331f087e7f795eec0466a41fa19ccba2": "点开图片就中招?苹果曝高危漏洞,推送紧急更新", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247499078&idx=1&sn=0a5c09a852baac4df8e8f06d72b58656": "提示词注入:近期大模型安全漏洞案例剖析", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247510785&idx=1&sn=8cddb09dfb3e6ee2a3820c7c5780c878": "Google Chrome V8 越界写入漏洞简报(CVE-2025-9132)", "https://mp.weixin.qq.com/s?__biz=Mzg3MTY4NjUyOQ==&mid=2247485679&idx=1&sn=584c77e0621cf58fe5350370e8d01b65": "AI译文 思科 IOS XE WLC 任意文件上传漏洞 (CVE-2025-20188) 分析", "https://mp.weixin.qq.com/s?__biz=MzkzODU3MzA5OQ==&mid=2247485059&idx=1&sn=2d46baefd49fa9cc3c008dca41177915": "Amazon提示词注入导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651326728&idx=3&sn=9dae5102af59ec7895e18b381d48fa40": "CISA将Citrix和Git漏洞列入被利用目录,全球厂商应迅速修补", "https://mp.weixin.qq.com/s?__biz=MzU2NzMwNTgxNQ==&mid=2247491921&idx=1&sn=826d3f705d88bcac3f5dde23992e3486": "JAVA代码审计之越权漏洞、前端代码之5分钟安全漏洞审计", "https://mp.weixin.qq.com/s?__biz=MzAxNjg3MjczOA==&mid=2247486989&idx=1&sn=7f6371bfa680c9b6722211634dc7163b": "PipeMagic后门的演化:从 RansomExx 攻击事件到 CVE-2025-29824漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492556&idx=1&sn=1d2805c6aad6251fbb963494b052a452": "SysAid On-Prem XML漏洞(CVE-2025-2775)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519714&idx=1&sn=dfa23db3ac214f2d9435b3c48c24faf5": "【SRC实战】CSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTMyMDQ3Mw==&mid=2247601137&idx=2&sn=2ee279c40b6e91fe7707064f5b9c134c": "一文揭秘|什么是零日漏洞?如何防范它带来的危害?", "https://mp.weixin.qq.com/s?__biz=Mzg5MDQyMzg3NQ==&mid=2247484947&idx=1&sn=0437ff1745a0ae6d99e7d378290dc5d0": "同样是写POC,为什么别人比你快100倍?", "https://mp.weixin.qq.com/s?__biz=MzkyMTQzNTM3Ng==&mid=2247484193&idx=1&sn=f77a4dbe73b069585e448ad4473e1d7a": "幻影(Phantom)SRC漏洞挖掘辅助工具", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247488247&idx=1&sn=111f0b37a0f621469695ac997a8e78ee": "微软不提供0day预警,还需靠大家努力", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247642972&idx=1&sn=e1097666c76c03c7c09bc30cf8251f40": "微软限制中企获取漏洞提前预警权限意欲何为?", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488973&idx=1&sn=8525b9fb1757aea6b0df6a8580a7bb21": "用友NC importExcelTemplate接口存在任意文件上传漏洞 附POC", "https://www.exploit-db.com/exploits/52423": "[local] GeoVision ASManager Windows Application 6.1.2.0 - Credentials Disclosure", "https://www.exploit-db.com/exploits/52424": "[remote] GeoVision ASManager Windows Application 6.1.2.0 - Remote Code Execution (RCE)", "https://www.exploit-db.com/exploits/52421": "[remote] Ivanti Endpoint Manager Mobile 12.5.0.0 - Authentication Bypass", "https://www.exploit-db.com/exploits/52419": "[webapps] Birth Chart Compatibility WordPress Plugin 2.0 - Full Path Disclosure", "https://www.exploit-db.com/exploits/52420": "[webapps] Lingdang CRM 8.6.4.7 - SQL Injection", "https://www.exploit-db.com/exploits/52422": "[webapps] StoryChief Wordpress Plugin 1.0.42 - Arbitrary File Upload", "https://securityaffairs.com/181567/hacking/citrix-fixed-three-netscaler-flaws-one-of-them-actively-exploited-in-the-wild.html": "Citrix fixed three NetScaler flaws, one of them actively exploited in the wild", "https://securityaffairs.com/181551/uncategorized/u-s-cisa-adds-citrix-session-recording-and-git-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Citrix Session Recording, and Git flaws to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2025/08/cisa-adds-three-exploited.html": "CISA Adds Three Exploited Vulnerabilities to KEV Catalog Affecting Citrix and Git", "https://thehackernews.com/2025/08/citrix-patches-three-netscaler-flaws.html": "Citrix Patches Three NetScaler Flaws, Confirms Active Exploitation of CVE-2025-7775", "https://thehackernews.com/2025/08/hook-android-trojan-adds-ransomware.html": "HOOK Android Trojan Adds Ransomware Overlays, Expands to 107 Remote Commands", "https://thehackernews.com/2025/08/shadowcaptcha-exploits-wordpress-sites.html": "ShadowCaptcha Exploits WordPress Sites to Spread Ransomware, Info Stealers, and Crypto Miners", "https://torrentfreak.com/sci-hub-blocked-in-india-founder-tells-plaintiffs-to-expect-disappoinment-250826/": "Sci-Hub Blocked in India, Founder Tells Plaintiffs to Expect Disappointment", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523889&idx=1&sn=baef786161ffa4ee81a4cb94db27cd5f": "Tableau 服务器中严重漏洞可导致攻击者上传恶意文件", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500066&idx=1&sn=7503b548d22c0485b1d9d3f0617b4f89": "分享几个关于路径穿越漏洞的真实案例", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500294&idx=1&sn=f541162fb71587ca9fbeef21ada6bc5b": "CNVD漏洞周报2025年第32期", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071388&idx=2&sn=73678592bffb2707d1938193f9c6ec31": "【安全圈】Docker Desktop曝高危漏洞:恶意容器可劫持Windows主机", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788976&idx=1&sn=b2160a1d5716028aa5743d0801f18ee7": "网络安全脱钩!微软停止向中国网络安全公司发送漏洞预警情报", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503509&idx=1&sn=9a1e062039b116955669eb29e45b656a": "雷神众测漏洞周报2025.8.18-2025.8.24", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932601&idx=2&sn=9de4e584b0a7155b5f05210d304adfc4": "AI快讯:中国平安将实现“AI in ALL”,AI浏览器被曝重大安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523897&idx=2&sn=a9f209d80ecb2cb20899f31b1b931255": "CISA 提醒注意已遭活跃利用的 Git 代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651326763&idx=1&sn=796f7326ec14635b627337fa18948c42": "Chrome浏览器高危零日漏洞PoC公开,已被用于野外攻击", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488986&idx=1&sn=263f1b2004456001a8c7f189ba66bc79": "MetaCRM美特crm系统sendsms.jsp接口存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzk0MDQzNzY5NQ==&mid=2247493832&idx=1&sn=cb10b94449d98dce6e9d416d4d082b20": "SRC漏洞挖掘辅助工具-Phantom", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484592&idx=1&sn=83d8bd964224df21f163a4f056a801d5": "VS Code Copilot 提示词注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzAwMjc0NTEzMw==&mid=2653589096&idx=1&sn=6c9c4ce08ec837ca9499d02f790d29d6": "ssrf漏洞结合redis渗透linux主机", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247486028&idx=1&sn=5de99b5c36af6f971c1c756922f4c65f": "【严重】Dataease DB2 Aspectweaver 反序列化任意文件写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071405&idx=4&sn=c0434c93832c33a5e2732eb4db9d6fb3": "【安全圈】黑客通过OAuth令牌漏洞,入侵多家企业", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247637104&idx=3&sn=d6da1587ec0d12550820272d6843d4cd": "一文揭秘|什么是零日漏洞?如何防范它带来的危害?", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556164&idx=1&sn=1f1ee93256374d943bbd8dc9d465a77a": "二进制漏洞挖掘过程", "https://mp.weixin.qq.com/s?__biz=Mzk0MzY1NDc2MA==&mid=2247484461&idx=1&sn=bdc29b3968cb0827199ede78b31f6f94": "人工智能与软件漏洞生命周期", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247488603&idx=1&sn=108ddc32df3e0264e04b344fd2fcb3b0": "企业SRC简单漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463386&idx=1&sn=ae16bd4b49827c60204915736e81d8fa": "信息安全漏洞周报(2025年第34期)", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247489631&idx=1&sn=ea636433fb8ddca37ac12d22ae46f592": "漏洞侦查圣经", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247626950&idx=2&sn=9deddd3b83f40621e00c6c8a30f13401": "面向智能汽车的信息安全漏洞评分模型", "https://horizon3.ai/attack-research/vulnerabilities/cve-2025-7776/": "CVE-2025-7776", "dump://2025-08-28/Intigriti_August CTF challenge_ Exploiting SSRF via NextJS Middleware.md": "August CTF challenge_ Exploiting SSRF via NextJS Middleware", "dump://2025-08-28/Intigriti_What is the pattern that can be expected after going public with a bug bounty program_.md": "What is the pattern that can be expected after going public with a bug bounty program_", "https://www.malwarebytes.com/blog/news/2025/08/more-vulnerable-stalkerware-victims-data-exposed-in-new-thetruthspy-flaw": "More vulnerable stalkerware victims’ data exposed in new TheTruthSpy flaw", "https://www.darknet.org.uk/2025/08/cybersecurity-workforce-trends-in-2025-skills-gap-diversity-and-soc-readiness/": "Cybersecurity Workforce Trends in 2025 – Skills Gap, Diversity and SOC Readiness", "https://securelist.com/vulnerabilities-and-exploits-in-q2-2025/117333/": "Exploits and vulnerabilities in Q2 2025", "https://securityaffairs.com/181614/hacking/over-28000-citrix-instances-remain-exposed-to-critical-rce-flaw-cve-2025-7775.html": "Over 28,000 Citrix instances remain exposed to critical RCE flaw CVE-2025-7775", "https://securityaffairs.com/181615/security/u-s-cisa-adds-citrix-netscaler-flaw-to-its-known-exploited-vulnerabilities-catalog-2.html": "U.S. CISA adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2025/08/salesloft-oauth-breach-via-drift-ai.html": "Salesloft OAuth Breach via Drift AI Chat Agent Exposes Salesforce Customer Data", "https://thehackernews.com/2025/08/storm-0501-exploits-entra-id-to.html": "Storm-0501 Exploits Entra ID to Exfiltrate and Delete Azure Data in Hybrid Cloud Attacks", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500396&idx=3&sn=6aa7fa0dfd430326fedd9b3f6d4c19f4": ".NET MVC 漏洞挖掘,通过匿名访问实现权限绕过", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523897&idx=1&sn=e11d4a106337143972fe49dc8aee936b": "Citrix 紧急修复已遭利用的 NetScaler RCE 0day漏洞", "https://xz.aliyun.com/news/18711": "CVE-2025-6715 WordPress Latepoint 文件包含漏洞分析", "https://xz.aliyun.com/news/18712": "万户OA代码审计与0day挖掘", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503847&idx=1&sn=3adb444bbcb1ac6ce14501ee51e12668": "【在野利用】Citrix NetScaler 内存溢出漏洞(CVE-2025-7775)安全风险通告", "https://www.anquanke.com/post/id/311567": "CISA紧急警告:Git代码执行漏洞正遭黑客利用", "https://www.anquanke.com/post/id/311559": "Citrix NetScaler曝零日漏洞(CVE-2023-6548)黑客正利用RCE漏洞发动攻击", "https://www.anquanke.com/post/id/311513": "谷歌Chrome紧急发布ANGLE高危补丁,人工智能安全研究员Big Sleep发现零日漏洞(CVE-2025-9478)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524553&idx=1&sn=e3d9d6b4cce8ffb39461980f2feab9a7": "【漏洞通告】NetScaler ADC和NetScaler Gateway内存溢出漏洞(CVE-2025-7775)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599037&idx=3&sn=92ae50e75a40d302a6d812176bb7e7d9": "3个月直通大厂高新岗位!全程实战案例解析,掌握高危漏洞攻防技巧", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247523320&idx=1&sn=a87ad3b28e5bb2ffb2d6ab2e5392542a": "DC-8靶机复现", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556171&idx=2&sn=904d10eae6ca1d364b9cfd89dc9ffa88": "【免费领】智能设备安全干货:路由器0day漏洞实战大全", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071426&idx=1&sn=28a54bc37540f152d54801c177828c73": "【安全圈】腾讯云曝严重安全漏洞重要长期暴露公网", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503578&idx=1&sn=60ffc56465256fafbc8fcbd788338bc6": "【成功复现】Apache Druid服务端请求伪造漏洞(CVE-2025-27888)", "https://mp.weixin.qq.com/s?__biz=MzI3NzA5NDc0MA==&mid=2649292387&idx=1&sn=e72204072b9ad4fab171bb951e91c00a": "大模型驱动漏洞运营智能化,打造漏洞管理新标杆", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247574690&idx=1&sn=afa8a60b226c4d0ba2a2190ff66b3b48": "某景人事管理系统漏洞挖掘与分析", "https://www.bleepingcomputer.com/news/security/shadow-it-is-expanding-your-attack-surface-heres-proof/": "Shadow IT Is Expanding Your Attack Surface. Here’s Proof", "https://thehackernews.com/2025/08/salt-typhoon-exploits-cisco-ivanti-palo.html": "Salt Typhoon Exploits Cisco, Ivanti, Palo Alto Flaws to Breach 600 Organizations Worldwide", "https://thehackernews.com/2025/08/us-treasury-sanctions-dprk-it-worker.html": "U.S. Treasury Sanctions DPRK IT-Worker Scheme, Exposing $600K Crypto Transfers and $1M+ Profits", "dump://2025-08-29/The Register - Security_16 billion credentials exposed_ why your business needs a password manager now.md": "16 billion credentials exposed_ why your business needs a password manager now", "https://go.theregister.com/feed/www.theregister.com/2025/08/28/lawyer_coe_email_blunder/": "Law firm email blunder exposes Church of England abuse victim details", "https://www.trendmicro.com/en_us/research/25/h/taoth-campaign.html": "TAOTH Campaign Exploits End-of-Support Software to Target Traditional Chinese Users and Dissidents", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500408&idx=3&sn=8c294d50405a8fc6d6dfc861deb4dbfe": ".NET 旧威胁新挑战:2025年 SQL 注入漏洞攻与防", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523916&idx=1&sn=e9561ce876240837e936311754b23231": "AI 代理发现 Chrome 中的严重 UAF 漏洞,可导致任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523916&idx=2&sn=5b0a37aabe728c201d0b631da5643773": "FreePBX服务器紧急修复已遭利用0day", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500087&idx=1&sn=785931699077d159e005b13c701e1c23": "价值 7500$ 的账号接管漏洞案例", "https://forum.butian.net/share/4537": "Smartbi 最新漏洞+后利用打入内存马(手把手叫你如何仅仅从漏洞消息到分析 0day)", "https://mp.weixin.qq.com/s?__biz=MzI0Mzc5NzM5Mw==&mid=2247483842&idx=1&sn=f43feb9699a4f64ceac25546710cad54": "CVE-2025-29927漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247574702&idx=1&sn=4be045f1dcde9e72532f6b69bd668e36": "Chrome浏览器高危零日漏洞PoC公开,已被用于野外攻击", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556178&idx=2&sn=5e6bcb198cd885cc60a46cbd9f799380": "【免费领】新手必备!Web安全漏洞挖掘实战入门教程", "https://mp.weixin.qq.com/s?__biz=MzI0Mzc5NzM5Mw==&mid=2247483842&idx=3&sn=4ecb5a4638c4d6090e877774ec0562af": "【漏洞复现】CVE-2025-53547 helm恶意代码执行漏洞复现&分析", "https://mp.weixin.qq.com/s?__biz=MzI0Mzc5NzM5Mw==&mid=2247483842&idx=2&sn=8476b26801a820fc53c049e6e19b1a93": "【漏洞复现】SpringGatewayRCE漏洞复现", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651326925&idx=4&sn=73e696c14f6657c66907d2aa2c7207d2": "卡巴斯基第二季度全球漏洞分析:数量翻倍,攻击手段更激进", "https://mp.weixin.qq.com/s?__biz=MzUxNTQxMzUxMw==&mid=2247526186&idx=1&sn=76fd28d4fb87ab8be7256e600eabb257": "安全通告丨网络安全漏洞通告(2025年8月)", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514924&idx=2&sn=d9f7c77b9619aa1f5b3e8a4fae091ca6": "工信部:关于防范Cursor代码编辑器远程代码执行高危漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650612051&idx=4&sn=bf45681b3f02badd08fe0a3e7920201c": "收录了GitHub上的一些优质漏洞库,并提供一键下载与更新功能", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651326925&idx=2&sn=3a3066b909411e9817136c4d0c509189": "研究人员发现VS Code漏洞:攻击者可重新发布同名已删除扩展", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556178&idx=1&sn=2803418498390118e0ff2b870f60077c": "记一次springboot项目漏洞挖掘", "https://securityaffairs.com/181693/hacking/experts-warn-of-actively-exploited-freepbx-zero-day.html": "Experts warn of actively exploited FreePBX zero-day", "https://securityaffairs.com/181714/intelligence/new-zero-click-exploit-allegedly-used-to-hack-whatsapp-users.html": "New zero-click exploit allegedly used to hack WhatsApp users", "https://thehackernews.com/2025/08/google-warns-salesloft-oauth-breach.html": "Google Warns Salesloft OAuth Breach Extends Beyond Salesforce, Impacting All Integrations", "https://thehackernews.com/2025/08/researchers-warn-of-sitecore-exploit.html": "Researchers Warn of Sitecore Exploit Chain Linking Cache Poisoning and Remote Code Execution", "dump://2025-08-30/Trend Micro Research, News and Perspectives_Operation Serengeti 2.0_ Trend Micro Helps Law Enforcement Fight Cybercrime in Africa.md": "Operation Serengeti 2.0_ Trend Micro Helps Law Enforcement Fight Cybercrime in Africa", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500438&idx=1&sn=9dbc708e9eddec973f4b0e63059df836": "[ .NET 安全代码审计 ] 从零基础到高阶实战,开启您的漏洞赏金之路", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523927&idx=1&sn=f6c3c875a12b2af4c8e6c00c06bc60d9": "思科 Nexus 交换机中存在高危DoS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523927&idx=2&sn=faa4786f6b1af9ea97fdc470c96e5384": "速修复Passwordstate 中的这个认证绕过漏洞", "https://www.anquanke.com/post/id/311702": "CISA 警告:Citrix NetScaler 零日远程代码执行漏洞正遭广泛利用", "https://www.anquanke.com/post/id/311709": "CrushFTP零日漏洞(CVE-2025-54309)遭野外利用:概念验证代码已公开", "https://www.anquanke.com/post/id/311725": "FreePBX 服务器遭零日漏洞攻击,官方紧急发布修复方案", "https://www.anquanke.com/post/id/311697": "Google 警告:Salesloft 漏洞波及部分 Google Workspace 账户", "https://mp.weixin.qq.com/s?__biz=Mzg4NTY0MDg1Mg==&mid=2247485771&idx=1&sn=50de196577c1f5c29ab9fab63be5fe82": "深度复现CVE-2025-50154获取NTLM哈希", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247486033&idx=1&sn=6658b55a0c4d8b7ae56912221afce760": "【严重】Apache Tika XML外部实体注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247527152&idx=1&sn=2844ce4d62b405cab7a934b2c77854f4": "一个功能强大BurpSuite漏洞扫描与指纹识别插件", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489020&idx=1&sn=61d0ca7112e05cc88e863476535d8cc6": "泛微e-cology jqueryFileTree.jsp接口存在敏感信息泄露 附POC", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247574714&idx=2&sn=de12b13ed3956eb17d5c963f4501bcfb": "网络安全脱钩!微软停止向中国网络安全公司发送漏洞预警情报", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650612056&idx=4&sn=ee7a008375ed40925aeced70a2ff62bb": "让Deepseek帮你写POC,又快又准确!", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492594&idx=1&sn=6ea83062528df2abc06b4ac293ad60a3": "金华迪加 现场大屏互动系统 qiandao.php SQL注入漏洞", "https://torrentfreak.com/iptv-piracy-is-booming-in-norway-as-legal-access-becomes-more-expensive/": "IPTV Piracy is Booming in Norway as Legal Access Becomes More Expensive", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071454&idx=3&sn=a2347c2c70f78c9cdd8b34541194b316": "【安全圈】FreePBX零日漏洞遭利用,官方通告:请立即锁定管理员访问", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650612070&idx=3&sn=8964b945e4080080dd03a5d2c1a4db21": "Chrome浏览器高危零日漏洞PoC公开,已被用于野外攻击", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNDU5NQ==&mid=2247486533&idx=1&sn=8f9e73d3819c2452634bad8989175680": "【渗透测试】逻辑漏洞挖掘思路图", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651326943&idx=1&sn=d77b1b37efbeec4c416fd580e827a20c": "攻击者利用Windows与Linux漏洞实施系统入侵的实战分析", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491889&idx=1&sn=87c83e1a8f5b1ec5aa8d4a1fbdad4bb8": "突发重磅!腾讯云惊爆严重安全漏洞,大量用户数据面临风险!", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247486651&idx=1&sn=308e6b0a148f7a61583a9964ccf8842b": "紧急警报!俄罗斯黑客借思科漏洞,猛攻全球关键基础设施", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498127&idx=1&sn=a964b55dfb2c2d356a30f12759202075": "通过URL参数传递所引发的SQL注入漏洞", "https://infosecwriteups.com/how-i-exploited-a-jwt-misconfiguration-for-account-takeover-and-admin-access-in-5-minutes-c2974899f4ec?source=rss----7b722bfd1b8d--bug_bounty": "How I Exploited a JWT Misconfiguration for Account Takeover and Admin Access in 5 Minutes", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496271&idx=1&sn=9f30d6c73cb74721d1f294706cac7afe": "CNVD漏洞周报2025年第33期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496271&idx=2&sn=26f14c065dfeaf828ea111a8f4489926": "上周关注度较高的产品安全漏洞(20250825-20250831)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498131&idx=1&sn=157bfa81face94619be939af49ae02c4": "接口越权漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492604&idx=1&sn=5a8a6bf06a60a89c0b19a8c47dc581f0": "朗速ERP WebDwgDefault.aspx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492613&idx=1&sn=db15f4d282385b18e7f723d3c97f9f1a": "泛微E-Office SignatureDel.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649174307&idx=2&sn=ed19163c4d329db1e9889ec3cbec415c": "预警丨防范Cursor代码编辑器远程代码执行高危漏洞", "https://www.bleepingcomputer.com/news/security/zscaler-data-breach-exposes-customer-info-after-salesloft-drift-compromise/": "Zscaler data breach exposes customer info after Salesloft Drift compromise", "https://securityaffairs.com/181789/malware/crooks-exploit-meta-malvertising-to-target-android-users-with-brokewell.html": "Crooks exploit Meta malvertising to target Android users with Brokewell", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500460&idx=2&sn=095384fa3a5d570fc89c53145c201065": "[ .NET 安全代码审计 ] 从零基础到高阶实战,开启您的漏洞赏金之路", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523936&idx=2&sn=5b38722e26ddd857f8833d5e4a8890d8": "WhatsApp 修复用于0day 攻击中的零点击漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523936&idx=1&sn=9a2aacdd406648e8b6306b984dacece0": "注意:Sitecore 利用链可导致缓存投毒和RCE", "https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247500837&idx=2&sn=a681552bb5f2ea5b58ee90961952f9ce": "警惕!银狐APT黑客组织利用驱动漏洞攻击Windows系统", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503879&idx=1&sn=550b2cdc0e0b1afff444842dd891152d": "【已复现】Gitblit 身份认证绕过漏洞(CVE-2024-28080)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247515893&idx=1&sn=5e3109330100918dcafdc9a7102fa274": "Citrix NetScaler 实战漏洞演变:从目录遍历到内存溢出的技术剖析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071481&idx=1&sn=5cc860ca0c94a6a037cee7f354d3a45a": "【安全圈】重大安全漏洞曝光,WhatsApp与Apple紧急发布补丁", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247488589&idx=1&sn=8562c738a87f925808ec509c954b6dcb": "Docker Desktop逃逸漏洞(CVE-2025-9074)分析报告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599192&idx=3&sn=39b1312fb0f5687dcccb3fbb65cf5106": "WhatsApp 修复针对 iOS 和 macOS 的零点击漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503537&idx=1&sn=cd9c5dc26c1a32c999552a319d1d9e66": "雷神众测漏洞周报2025.8.25-2025.8.31", "https://a13xp0p0v.github.io/2025/09/02/kernel-hack-drill-and-CVE-2024-50264.html": "Kernel-hack-drill and a new approach to exploiting CVE-2024-50264 in the Linux kernel", "https://mp.weixin.qq.com/s?__biz=MzU2NzIzNzU4Mg==&mid=2247491135&idx=1&sn=34b805830dfc5750d1d7b8347135dc6e": "AI漏洞风暴:CTF中漏洞智能挖掘技术全解析", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247532551&idx=1&sn=dcd6a0a9c86da6dee10cd8d58fbc615a": "Windows 版 Google Web Designer 中通过 CSS 注入实现客户端 RCE", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489338&idx=1&sn=c919a77e674ed3860d5ae3225a7a1d59": "【漏洞通告】Gitblit身份验证绕过漏洞(CVE-2024-28080)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498133&idx=1&sn=3802d190f44314ebb4a1a5b5cdbf284d": "【赏金15000美元】通过监控调试模式实现 RCE", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490679&idx=1&sn=af7871efc77d77861bb91acc5dd3eacf": "【高危漏洞预警】用友U8Cloud 文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMDIwODM2MA==&mid=2653932630&idx=3&sn=2916e2ada0b4b861d0c767adf4042b7a": "中信金融资产AI安全大模型POC测试厂商征集", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514942&idx=1&sn=d8811ab98602fa820cb64f9233b6bcfa": "国内知名送餐机器人曝安全漏洞:可监控机器人 任意修改任务", "https://mp.weixin.qq.com/s?__biz=MzU0NDk0NTAwMw==&mid=2247628850&idx=1&sn=afc0efe2b8390499f309c8117c2f4bf2": "微软限制中国安全厂商获取漏洞信息,政企机构当如何应对?", "https://www.bleepingcomputer.com/news/security/palo-alto-networks-data-breach-exposes-customer-info-support-cases/": "Palo Alto Networks data breach exposes customer info, support cases", "https://www.bleepingcomputer.com/news/security/palo-alto-networks-data-breach-exposes-customer-info-support-tickets/": "Palo Alto Networks data breach exposes customer info, support tickets", "https://thehackernews.com/2025/09/lazarus-group-expands-malware-arsenal.html": "Lazarus Group Expands Malware Arsenal With PondRAT, ThemeForestRAT, and RemotePE", "https://thehackernews.com/2025/09/silver-fox-exploits-microsoft-signed.html": "Silver Fox Exploits Microsoft-Signed WatchDog Driver to Deploy ValleyRAT Malware", "https://thehackernews.com/2025/09/ukrainian-network-fdn3-launches-massive.html": "Ukrainian Network FDN3 Launches Massive Brute-Force Attacks on SSL VPN and RDP Devices", "https://go.theregister.com/feed/www.theregister.com/2025/09/02/stolen_oauth_tokens_expose_palo/": "Stolen OAuth tokens expose Palo Alto customer data", "https://go.theregister.com/feed/www.theregister.com/2025/09/02/zscaler_customer_data_drift_compromise/": "Zscaler latest victim of Salesloft Drift attacks, customer data exposed", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500466&idx=1&sn=21719375b95aa5d62e139d2fcf4464f3": ".NET 会话安全漏洞:代码层面的审计与防御", "https://www.4hou.com/posts/omzK": "Docker Desktop严重漏洞可让攻击者劫持Windows主机", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584444&idx=1&sn=58e0876e5b1ed3ea18e91922966a5448": "Docker Desktop严重漏洞可让攻击者劫持Windows主机", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503892&idx=1&sn=b61c254b5af85945e39f574dd1afa290": "【已复现】用友U8Cloud 文件上传漏洞(QVD-2025-33710)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247515942&idx=1&sn=b182046c3f2f875e388c089edcf66be7": "精准网络狙击王炸入口 WhatsApp 历史重要漏洞利用梳理", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071500&idx=4&sn=237a92444d4dd66c6a163c4b26dc7d37": "【安全圈】HashiCorp Vault 爆出高危漏洞:攻击者可致服务器宕机", "https://www.anquanke.com/post/id/311771": "CVE-2025-58158:Harness Gitness曝高危漏洞 允许攻击者任意文件写入", "https://www.anquanke.com/post/id/311758": "CVE-2025-6203:HashiCorp Vault拒绝服务漏洞可致服务器崩溃", "https://www.anquanke.com/post/id/311781": "WhatsApp漏洞与苹果零日漏洞遭组合利用,间谍软件攻击复杂度升级", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599303&idx=3&sn=9a8c84b709815d0fbf64fda42f6d1680": "CVSS 评分9.8!高通两严重漏洞或致设备远程被控", "https://mp.weixin.qq.com/s?__biz=MzkwOTY3Njg4Nw==&mid=2247484400&idx=1&sn=09af1f11fe1afd6d3959a6de03b2383f": "CVE-2021-21972 批量漏洞检测脚本poc exploit", "https://mp.weixin.qq.com/s?__biz=MzkxMjY3MTI4Mg==&mid=2247485243&idx=1&sn=917ad8f7f1894afc511ca58211bc3f3d": "Google澄清:Gmail 并未发生任何重大安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIxNzEzNA==&mid=2247492991&idx=1&sn=44128e199a58e5d64e71b5b1b7b2f2da": "【Java安全】保姆级shiro+spring环境分析并复现spring内存马注入", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490573&idx=1&sn=e0f7f822888234baff190859f4c82b18": "【已复现】用友U8Cloud存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247486269&idx=1&sn=f9de7f032e013dfa1576f67472077137": "从图片 URL 到 存储桶完全控制权:10 分钟拆解某企业云存储桶的致命配置漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247485104&idx=1&sn=562e78ac7f876ccc13f9a9c1eec5de4d": "关于开展「安全漏洞防治SOP征集活动」通知", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492632&idx=1&sn=599c0119126f9bd00afd3163110b5407": "星网锐捷 DMB-BS-taskexport.jsp 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523952&idx=1&sn=2bc84253019e6c2525bcf928eaed696c": "第三方集成应用 Drift OAuth 令牌被用于攻陷 Salesforce 实例,全球700+家企业受影响", "https://mp.weixin.qq.com/s?__biz=Mzk5MDg2NTQyOA==&mid=2247483676&idx=1&sn=191fafe4569f471049509314d3f020be": "验证码防的住hacker吗?总结最全验证码漏洞", "https://www.bleepingcomputer.com/news/security/google-fixes-actively-exploited-android-flaws-in-september-update/": "Google fixes actively exploited Android flaws in September update", "https://www.bleepingcomputer.com/news/security/hackers-use-new-hexstrike-ai-tool-to-rapidly-exploit-n-day-flaws/": "Hackers use new HexStrike-AI tool to rapidly exploit n-day flaws", "https://cyble.com/blog/chinese-state-sponsored-group/": "How Chinese State-Sponsored APT Actors Exploit Routers for Stealthy Cyber Espionage", "https://www.bleepingcomputer.com/news/security/saas-giant-workiva-discloses-data-breach-after-salesforce-attack/": "SaaS giant Workiva discloses data breach after Salesforce attack", "https://www.bleepingcomputer.com/news/security/us-sues-robot-toy-maker-for-exposing-childrens-data-to-chinese-devs/": "US sues robot toy maker for exposing children's data to Chinese devs", "https://securityaffairs.com/181871/security/google-addressed-two-android-flaws-actively-exploited-in-targeted-attacks.html": "Google addressed two Android flaws actively exploited in targeted attacks", "https://securityaffairs.com/181863/hacking/u-s-cisa-adds-whatsapp-and-tp-link-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds WhatsApp, and TP-link flaws to its Known Exploited Vulnerabilities catalog", "https://www.tenable.com/blog/tenable-response-to-salesforce-and-salesloft-drift-incident": "Tenable Response to Salesforce and Salesloft Drift Incident", "https://thehackernews.com/2025/09/cisa-adds-tp-link-and-whatsapp-flaws-to.html": "CISA Adds TP-Link and WhatsApp Flaws to KEV Catalog Amid Active Exploitation", "https://thehackernews.com/2025/09/iranian-hackers-exploit-100-embassy.html": "Iranian Hackers Exploit 100+ Embassy Email Accounts in Global Phishing Targeting Diplomats", "https://thehackernews.com/2025/09/malicious-npm-packages-exploit-ethereum.html": "Malicious npm Packages Exploit Ethereum Smart Contracts to Target Crypto Developers", "https://thehackernews.com/2025/09/threat-actors-weaponize-hexstrike-ai-to.html": "Threat Actors Weaponize HexStrike AI to Exploit Citrix Flaws Within a Week of Disclosure", "https://go.theregister.com/feed/www.theregister.com/2025/09/03/android_patch_september/": "Android drops mega patch bomb - 120 fixes, two already exploited", "https://forum.butian.net/share/4529": "记一次攻防演练通过SQL注入和RCE拿下靶标的故事", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071517&idx=3&sn=c67131ade5f5252562e8dbb2d25301f7": "【安全圈】Cloudflare 确认 Salesforce 与 Salesloft Drift 相关数据泄露事件", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071517&idx=2&sn=1eea92c7335a3080ffc2ddc93a29e68e": "【安全圈】IIS Web Deploy 存在远程代码执行风险(CVE-2025-53772)", "https://www.anquanke.com/post/id/311824": "Android安全公告:2025年9月更新修复两个已被主动利用的漏洞(CVE-2025-38352与CVE-2025-48543)", "https://www.anquanke.com/post/id/311845": "CVE-2025-57808:ESPHome Web服务器认证绕过漏洞曝光", "https://www.anquanke.com/post/id/311842": "CVE-2025-6507高危漏洞预警(CVSS 9.8):H2O-3机器学习框架存在重大安全风险", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492940&idx=1&sn=1b650cecefe905020b49b313ab90c18e": "【已复现】用友 U8 Cloud 文件上传绕过漏洞安全通告", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247581917&idx=1&sn=0f8138df75c200e73c0e9a01dcdef347": "微软漏洞情报“断供”危机何解?360大情报体系领航破局", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489044&idx=1&sn=6314169b063e10268f684c022991de6f": "MetaCRM美特crm系统download-new.jsp接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490698&idx=2&sn=17d43602dfc42418fa0c5304ffc032d4": "【高危漏洞预警】XWiki路径遍历漏洞(CVE-2025-55747-CVE-2025-55748", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490698&idx=1&sn=1af7a1c354e94ddcfad22bea3202b7b6": "【高危漏洞预警】百度网盘Windows客户端远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247542944&idx=1&sn=d6542ae81fd4ce81a37c9b15db52711f": "安全公司曝光微软 VS Code 市场漏洞,黑客可冒充已移除项目", "https://mp.weixin.qq.com/s?__biz=MzkxNzY0MzE2NQ==&mid=2247484054&idx=1&sn=716a3a3b5b38a2d8648bea6a640d4e3c": "某漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkyMDc0NDEzOA==&mid=2247483877&idx=1&sn=9fd4cbe0f29574618f7a07a46a4b9211": "某盘rce简单点评", "https://mp.weixin.qq.com/s?__biz=MzA3NTIyNzgwNA==&mid=2650260458&idx=1&sn=9c11eb205f6c3c8a1a81842c4bde8836": "网络安全漏洞暴露快速修复的五大措施", "dump://2025-09-05/Instapaper_ Unread_Hackers Leverage Hexstrike-AI Tool to Exploit Zero Day Vulnerabilities Within 10 Minutes.md": "Unread_Hackers Leverage Hexstrike-AI Tool to Exploit Zero Day Vulnerabilities Within 10 Minutes", "https://www.bleepingcomputer.com/news/security/hackers-exploited-sitecore-zero-day-flaw-to-deploy-backdoors/": "Hackers exploited Sitecore zero-day flaw to deploy backdoors", "https://www.bleepingcomputer.com/news/security/new-tp-link-zero-day-surfaces-as-cisa-warns-other-flaws-are-exploited/": "New TP-Link zero-day surfaces as CISA warns other flaws are exploited", "https://www.bleepingcomputer.com/news/security/texas-sues-powerschool-after-massive-data-breach-hit-62-million-students/": "Texas sues PowerSchool over breach exposing 62M students, 880k Texans", "dump://2025-09-05/Qualys Security Blog_Operationalizing Threat Exposure with Agentic AI_ Meet Agent Nova.md": "Operationalizing Threat Exposure with Agentic AI_ Meet Agent Nova", "https://securityaffairs.com/181886/hacking/u-s-cisa-adds-tp-link-archer-c7eu-and-tl-wr841n-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds TP-Link Archer C7(EU) and TL-WR841N flaws to its Known Exploited Vulnerabilities catalog", "https://blog.silentsignal.eu/2025/09/04/Exploit-development-for-IBM-i/": "Exploit development for IBM i", "https://thehackernews.com/2025/09/cisa-flags-tp-link-router-flaws-cve.html": "CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited", "https://thehackernews.com/2025/09/cybercriminals-exploit-xs-grok-ai-to.html": "Cybercriminals Exploit X’s Grok AI to Bypass Ad Protections and Spread Malware to Millions", "dump://2025-09-05/dotNet安全矩阵_[80]个反序列化漏洞全景合集 (2) _ 回答一个 .NET 反序列化漏洞载荷的问题.md": "[80]个反序列化漏洞全景合集 (2) _ 回答一个 .NET 反序列化漏洞载荷的问题", "dump://2025-09-05/dotNet安全矩阵_[80]个反序列化漏洞全景合集 (3) _ 介绍一个 ViewState 反序列化不常见的知识点.md": "[80]个反序列化漏洞全景合集 (3) _ 介绍一个 ViewState 反序列化不常见的知识点", "https://www.rtl-sdr.com/decoding-ads-c-with-a-cheap-aliexpress-lnb-and-sdrplay-rsp1b/": "Decoding ADS-C with a Cheap Aliexpress LNB and SDRplay RSP1B", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523957&idx=2&sn=288b0d14a657b13c7f1a6b14705a44e8": "Frostbyte10:威胁全球供应链的10个严重漏洞", "https://www.4hou.com/posts/OGxN": "【梆梆安全监测】安全隐私合规监管趋势及漏洞风险报告(0720-0802)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503904&idx=2&sn=de6650b160170287c76cea1d44a1a5cf": "【已复现】XWiki 路径遍历漏洞(CVE-2025-55747、CVE-2025-55748)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071536&idx=3&sn=3693502529619e5f62dcd33606707e69": "【安全圈】安全公司曝光微软 VS Code 市场漏洞,黑客可冒充已移除项目", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071536&idx=2&sn=a510936da763db6a1000b078f06aa2c4": "【安全圈】微软承认 Win11 兼容性问题:TLS 1.3 导致 IIS Express 验证故障", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599343&idx=2&sn=0f8f48f36ca1da8eebf8aa0a4d440213": "HexStrike AI安全工具遭滥用,零日漏洞攻击时间缩短至10分钟", "https://blog.nsfocus.net/cve-2024-28080/": "Gitblit身份验证绕过漏洞(CVE-2024-28080)", "https://blog.nsfocus.net/h2o-3-jdbc/": "H2O-3 JDBC反序列化漏洞(CVE-2025-6507)", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247510819&idx=1&sn=4a5488a7fad0c527df3a6f46d6726ed7": "H2O-3 远程代码执行漏洞简报(CVE-2025-5662)", "https://infosecwriteups.com/django-unauthenticated-0-click-rce-and-sql-injection-using-default-configuration-059964f3f898?source=rss----7b722bfd1b8d--bug_bounty": "Django Unauthenticated, 0 click, RCE, and SQL Injection using default configuration.", "https://infosecwriteups.com/intercepting-thick-client-tcp-and-tls-traffic-72fab07fffe7?source=rss----7b722bfd1b8d--bug_bounty": "Intercepting Thick Client TCP and TLS Traffic", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556227&idx=1&sn=1eed363f6eefee6dfe9d5070dafe4b73": "Tenda AC20(≤ V16.03.08.12)路由器缓冲区溢出漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492641&idx=1&sn=4c69e53041602e7a9f9dffc45967ba70": "WordPress Relevanssi插件 Sql注入漏洞(CVE-2025-4396)", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064341&idx=1&sn=1deb1317f0a2672a8d0268db9fc635b3": "信息安全漏洞周报【第038期】", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247488670&idx=1&sn=b6314dff05e8de9fa459dc31c095efa0": "未授权漏洞渗透技巧总结分享(八)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651327237&idx=2&sn=1c1420a6a9139d026a692974935f0098": "模型命名空间复用漏洞可劫持谷歌微软平台AI模型", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247486263&idx=1&sn=45cab229039ca98cced2d7f2b6c0bf75": "百度网盘客户端YunDetectService服务 OpenSafeBox 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247545547&idx=1&sn=4119da558ff69fd5b629c971330ef09b": "赶快升级!百度网盘命令漏洞的安全警示(CNVD-2025-20395)", "https://mp.weixin.qq.com/s?__biz=MzkzODU5MTkyNQ==&mid=2247485999&idx=1&sn=cebce1ddc53933c37858be26ed48ba2c": "黑客技术这样学,3个月开始挖漏洞!", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545814&idx=1&sn=5a7ebf543d84032572d74f830ac4a6bd": "开发者别大意!Node.js 未授权安全漏洞,你的服务器可能正在被攻击者远程操控。", "https://www.bleepingcomputer.com/news/microsoft/microsoft-now-enforces-mfa-on-azure-portal-sign-ins-for-all-tenants/": "Microsoft now enforces MFA on Azure Portal sign-ins for all tenants", "https://www.darknet.org.uk/2025/09/tagnabit-aws-cloud-resource-enumeration-via-metadata-tags/": "TagNabIt – AWS Cloud Resource Enumeration via Metadata Tags", "dump://2025-09-06/Qualys Security Blog_CVE-2025-8088 WinRAR Exploit_ From Zero-Day to Zero-Risk with TruRisk™ Eliminate.md": "CVE-2025-8088 WinRAR Exploit_ From Zero-Day to Zero-Risk with TruRisk™ Eliminate", "https://securityaffairs.com/181924/breaking-news/u-s-cisa-adds-sitecore-android-and-linux-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Sitecore, Android, and Linux flaws to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2025/09/cisa-orders-immediate-patch-of-critical.html": "CISA Orders Immediate Patch of Critical Sitecore Vulnerability Under Active Exploitation", "https://thehackernews.com/2025/09/tag-150-develops-castlerat-in-python.html": "TAG-150 Develops CastleRAT in Python and C, Expanding CastleLoader Malware Operations", "dump://2025-09-06/The Register - Security_Critical, make-me-super-user SAP S_4HANA bug under active exploitation.md": "Critical, make-me-super-user SAP S_4HANA bug under active exploitation", "https://www.4hou.com/posts/QXzY": "SaaS巨头Workiva在遭遇Salesforce攻击后用户数据被泄露", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584506&idx=2&sn=a5bfcceba2484a932bf3a7b172dfcfd2": "SaaS巨头Workiva在遭遇Salesforce攻击后用户数据被泄露", "https://www.anquanke.com/post/id/311900": "CVE-2025-56752:锐捷网络设备曝高危漏洞 远程攻击者无需认证即可获取完全管理员权限", "https://www.anquanke.com/post/id/311929": "macOS漏洞可无需密码读取Keychain及解密iOS应用", "https://www.anquanke.com/post/id/311924": "微软漏洞情报“断供”危机何解?360大情报体系领航破局", "https://www.anquanke.com/post/id/311903": "黑客利用Sitecore零日漏洞部署后门程序", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599469&idx=4&sn=bb83808e2e91c526d4790cd5585688ed": "未修补!TP-Link路由器零日漏洞影响多款热门型号", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599470&idx=2&sn=35e65a2707399ec19a9c42bf7d12ef17": "3个月直通大厂高新岗位!全程实战案例解析,掌握高危漏洞攻防技巧", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247491855&idx=1&sn=2a056ef14fbc2bb7832ba3c29dd70f84": "【Java安全】万字保姆级shiro+spring环境分析并复现spring内存马注入", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247486081&idx=1&sn=8598f845150447e605feecc53d5f64d8": "【好靶场】某windwos存储软件存在命令执行漏洞场景模拟", "https://mp.weixin.qq.com/s?__biz=MzkwMTQyODI4Ng==&mid=2247497403&idx=3&sn=f59c47882972ca85f7c5a284784303e1": "【已复现】百度网盘Windows客户端存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxOTM2MDYwNg==&mid=2247518106&idx=1&sn=5bedc64525c5983e0c06976181b88ee7": "一个HTTP头引发的“数字雪崩”:Next.js中间件漏洞深度剖析与应对策略", "https://mp.weixin.qq.com/s?__biz=MzU0NDI5NTY4OQ==&mid=2247486455&idx=1&sn=c0efd806ffcd36d29c881977e0a80737": "大模型LLM自动化挖掘密码逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY0MzE2NQ==&mid=2247484067&idx=1&sn=d79150d2aa386ec5b641bafeb32f0ebd": "月下载量千万级Python库 “ DeepDiff ” 存在原型链污染致RCE", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492862&idx=1&sn=a415d3cc03cfd814deca8e17784a2467": "某CMS组合拳导致前台RCE审计流程", "https://mp.weixin.qq.com/s?__biz=MzU2MDQ0NzkyMw==&mid=2247484903&idx=1&sn=351a14069d98c91e4a07dd477738a8b1": "百度网盘7.59 Windows客户端存在命令注入漏洞完整复现", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484576&idx=1&sn=f6b4e173cffb2510bf717b891dbdd00b": "黑客入侵麦当劳系统获取免费鸡块,发现漏洞价值数百万美元", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071567&idx=2&sn=db336f530a7d929a9532badeac71811a": "【安全圈】谷歌紧急修复安卓0day漏洞!", "https://mp.weixin.qq.com/s?__biz=Mzg4NjY3OTQ3NA==&mid=2247487101&idx=1&sn=eee3fcb277c3acf137f88490aa62bfee": "Facebook 服务器上的远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492659&idx=1&sn=8079ff9c8f539fb82fb6f3dacf202474": "RicohWebImageMonitor 反射xss漏洞(CVE-2025-41393)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492650&idx=1&sn=21a0386432982d552e149918aa268bd5": "Tosei network_test.php 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MDc0NTIxOQ==&mid=2247484768&idx=1&sn=ac6b9e7253316481dee1e322f8e89903": "android新漏洞:一行命令打开任意activity", "https://mp.weixin.qq.com/s?__biz=MzkwOTY3Njg4Nw==&mid=2247484418&idx=1&sn=cc4c9b54043010a355272565b29a04db": "xmind electron rce 复现", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498155&idx=1&sn=840ae3e00fe1397ef4262cb8f8cb39dd": "实战之常规漏洞快速挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492668&idx=1&sn=1d86b9052608992438874d4756d690d5": "西部数据 chk_vv_sharename.php 远程命令执行", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247492335&idx=1&sn=cc5f8d6f3d07b361d81bfabbfbf838e9": "手把手教你如何挖洞:CVE-2025-53772 IIS Web Deploy 反序列化漏洞调试分析", "https://infosecwriteups.com/chaining-path-traversal-vulnerability-to-rce-metas-111-750-bug-a98a473c6a05?source=rss----7b722bfd1b8d--bug_bounty": "Chaining Path Traversal Vulnerability to RCE  — Meta’s 111,750$ Bug", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496291&idx=1&sn=7b6a5d4530c451528ab3ed1dcc64e5d3": "CNVD漏洞周报2025年第34期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496291&idx=2&sn=ce431917926d00cc9c084a9a85e85aea": "上周关注度较高的产品安全漏洞(20250901-20250907)", "https://mp.weixin.qq.com/s?__biz=MzE5MTc4OTc1Ng==&mid=2247483949&idx=1&sn=62b44dc9fc59f3f7bd832dcac7faf9a8": "1Day 复现 金和OA SQL注入漏洞 (CVE-2025-10090)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651327271&idx=4&sn=99f169509efe591315edea1fb176bfb1": "Apache Jackrabbit最新漏洞可导致JNDI注入与远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494719&idx=1&sn=7f33e6e87496d9bb8c0da8e63cf50275": "【独家分析】2025年8月度网络安全漏洞分析报告", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247493062&idx=1&sn=bbba39014b9dd77a7e688109781e3d09": "太原某公司因网络安全存漏洞被行政处罚", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651327271&idx=3&sn=69187752e0b7f01602e157d39a1ea6ef": "每日5万封钓鱼邮件:亚马逊云服务漏洞助长大规模网络钓鱼活动", "https://mp.weixin.qq.com/s?__biz=Mzg3MDgyMzkwOA==&mid=2247491974&idx=1&sn=5586a5713cd49cb757e5d677825fd2f1": "清源SCA社区版更新(V4.2.0)|漏洞前置感知、精准修复、合规清晰,筑牢软件供应链安全防线!", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498159&idx=1&sn=11e143d97d6c957f253e276a6bdd4555": "轻松拿捏的漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500538&idx=2&sn=5834a2a5de49c475c3301b358c4671b0": ".NET 会话安全漏洞:代码层面的审计与防御", "https://www.4hou.com/posts/RXAR": "黑客利用Sitecore零日漏洞部署WeepSteel侦察恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584522&idx=1&sn=b9797f9cb42a1102dfa59c735fcc2066": "黑客利用Sitecore零日漏洞部署WeepSteel侦察恶意软件", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503922&idx=1&sn=a11db7d1e041143b7dd88fcd2dac8fed": "安全热点周报:黑客利用 Sitecore 零日漏洞部署 WeepSteel 侦察恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514969&idx=1&sn=0bd387169aae74c2ae5711236e36addd": "AI驱动漏洞挖掘!利用智能体发现57个安卓APP未知漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071603&idx=2&sn=393fe1505e5cbe749d048f98028c0586": "【安全圈】紧急安全通告:Django高危漏洞可使攻击者在Web服务器执行恶意SQL指令", "https://www.anquanke.com/post/id/311969": "CVE-2025-57052:cJSON存在严重JSON解析漏洞(CVSS 9.8),POC已公开", "https://www.anquanke.com/post/id/311959": "CVE-2025-58179:Astro Cloudflare适配器漏洞可导致服务器端请求伪造(SSRF)", "https://www.anquanke.com/post/id/311955": "Progress修复OpenEdge AdminServer远程命令执行漏洞(CVE-2025-7388)", "https://www.anquanke.com/post/id/311965": "每日5万封邮件:云服务漏洞如何为钓鱼攻击“添薪加柴”", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599489&idx=1&sn=115224a7dffde0f5cfef7ef278668ec6": "专访|riusksk(泉哥)的跨界人生:近百 CVE 致谢、《漏洞战争》作者", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490711&idx=1&sn=225b2f20339820e525b60f2a358418a8": "【高危漏洞预警】SAP NetWeaver Java反序列化漏洞CVE-2025-42944", "https://mp.weixin.qq.com/s?__biz=MzIxNzA2NzY1Nw==&mid=2655267783&idx=1&sn=5fb14bc7f9ca79fe5965a6a81991042e": "从 “网红高管” 到被辞退:小米王腾泄密事件撕开科技巨头的安全漏洞u200b", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492697&idx=1&sn=2f566f86a64a80d480e5ac08653e7d9f": "智邦国际ERP RecordPrint.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492707&idx=1&sn=73b4234fe8c03e482bde82141b682b18": "汉王e脸通综合管理平台 resourceUploadFile.do 任意文件上传漏洞", "https://www.bleepingcomputer.com/news/security/adobe-patches-critical-sessionreaper-flaw-in-magento-ecommerce-platform/": "Adobe patches critical SessionReaper flaw in Magento eCommerce platform", "https://www.bleepingcomputer.com/news/security/hackers-hide-behind-tor-in-exposed-docker-api-breaches/": "Hackers hide behind Tor in exposed Docker API breaches", "https://www.bleepingcomputer.com/news/microsoft/microsoft-testing-new-ai-features-in-windows-11-file-explorer/": "Microsoft testing new AI features in Windows 11 File Explorer", "https://securityaffairs.com/182030/security/supply-chain-attack-targets-npm-2-billion-weekly-npm-downloads-exposed.html": "Supply chain attack targets npm, +2 Billion weekly npm downloads exposed", "https://www.tenable.com/blog/microsofts-september-2025-patch-tuesday-addresses-80-cves-cve-2025-55234": "Microsoft’s September 2025 Patch Tuesday Addresses 80 CVEs (CVE-2025-55234)", "https://thehackernews.com/2025/09/45-previously-unreported-domains-expose.html": "45 Previously Unreported Domains Expose Longstanding Salt Typhoon Cyber Espionage", "https://thehackernews.com/2025/09/tor-based-cryptojacking-attack-expands.html": "TOR-Based Cryptojacking Attack Expands Through Misconfigured Docker APIs", "https://go.theregister.com/feed/www.theregister.com/2025/09/09/npm_supply_chain_attack/": "More packages poisoned in npm attack, but would-be crypto thieves left pocket change", "https://go.theregister.com/feed/www.theregister.com/2025/09/09/gym_audio_recordings_exposed/": "No gains, just pains as 1.6M fitness phone call recordings exposed online", "https://www.blackmoreops.com/best-open-source-security-tools/": "Best Open Source Security Tools for Modern Cybersecurity", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500548&idx=1&sn=11e8a82d3901209654c83811e7d0c58a": "CVE-2025-53772 IIS Web Deploy 系统反序列化漏洞深度剖析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523972&idx=1&sn=7b06c31940ea7576d0236d9310886b39": "十几家安全大厂信息遭泄露,谁是 Salesforce-Salesloft 供应链攻击的下一个受害者?", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500353&idx=1&sn=f3b0d85167b0f28f6c298d5178ea9af1": "CNVD漏洞周报2025年第34期", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599587&idx=3&sn=5fcc3f8af58149e854a916d267d6fd74": "Magento 现史上最严重漏洞之一,Adobe 火速推补丁", "https://infosecwriteups.com/how-i-found-an-exposed-user-database-via-an-unprotected-api-and-how-to-prevent-it-in-a-private-77dd95a1101c?source=rss----7b722bfd1b8d--bug_bounty": "How I Found an Exposed User Database via an Unprotected API (And How to Prevent It) in a private…", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496295&idx=1&sn=8a2e7cf0999da238363e4b5b00155a7e": "Microsoft发布2025年9月安全更新", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492716&idx=1&sn=c750f4c167120bf508ad4457baba51db": "AstrBot get_file 任意文件读取漏洞(CVE-2025-48957)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490717&idx=1&sn=2024009ef9cb8324778c701ae691300e": "【高危AI漏洞预警】MCP Inspector跨站脚本漏洞CVE-2025-58444", "https://mp.weixin.qq.com/s?__biz=Mzg5NjUxOTM3Mg==&mid=2247490749&idx=1&sn=693f371b08d8085e8c834c0a29df721b": "文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489120&idx=1&sn=43bff3d316dd39334d4ec8ffd058cc56": "用友UFIDA ERP-NC 5.0 多接口存在跨站脚本漏洞(CVE-2025-2709) 附POC", "https://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655291105&idx=1&sn=0939321f6adf64c7a74be76301172c7a": "网络安全中的大语言模型:应用、漏洞和防御技术", "https://cyble.com/blog/acsc-warns-of-cve-2024-40766/": "Australian Cyber Authorities Warn of Active Exploitation of SonicWall SSL Vulnerability (CVE-2024-40766)", "https://securityaffairs.com/182075/security/critical-flaw-sessionreaper-in-commerce-and-magento-platforms-lets-attackers-hijack-customer-accounts.html": "Critical flaw SessionReaper in Commerce and Magento platforms lets attackers hijack customer accounts", "https://thehackernews.com/2025/09/adobe-commerce-flaw-cve-2025-54236-lets.html": "Adobe Commerce Flaw CVE-2025-54236 Lets Hackers Take Over Customer Accounts", "https://go.theregister.com/feed/www.theregister.com/2025/09/10/birmingham_school_data_blunder/": "Flu jab email mishap exposes hundreds of students' personal data", "https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/not-all-cyberattacks-begin-with-a-phishing-attack-hack-or-exploited-vulnerability/": "Not All Cyberattacks Begin with a Phishing Attack, Hack or Exploited Vulnerability", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523980&idx=2&sn=1e726413f895d0c82f9817dde7abb01b": "Adobe 修复史上最严重的 Magento 漏洞之一", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523980&idx=1&sn=eb82e8a719350c70185abd2a1f39cb79": "微软9月补丁星期二值得关注的漏洞", "https://www.4hou.com/posts/YZ8p": "TP-Link确认路由器存在未修复零日漏洞", "https://www.4hou.com/posts/PGyn": "黑客借助HexStrike-AI工具可快速利用新型漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584550&idx=2&sn=30f0b46bb6738c8c47a83ad35b7630de": "TP-Link确认路由器存在未修复零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584550&idx=1&sn=a123655dde31f91bb09a603de668234d": "黑客借助HexStrike-AI工具可快速利用新型漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503926&idx=1&sn=5c026d832d6bc217ce4a7b5fcd027788": "微软9月补丁日多个产品安全漏洞风险通告:7个紧急漏洞、7个重要漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071636&idx=3&sn=6ea8b60ef7c7e99ad37f8ddfd4f3f9bf": "【安全圈】Sophos无线AP曝高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071636&idx=4&sn=aa84de58c5eab703fb2d2ced31a97af3": "【安全圈】微软Office被曝高危漏洞:可远程执行恶意代码", "https://www.anquanke.com/post/id/312015": "Hiawatha Web服务器曝严重漏洞:可导致身份认证绕过与远程代码执行", "https://www.anquanke.com/post/id/312056": "Sophos修复AP6系列无线接入点严重认证绕过漏洞(CVE-2025-10159)", "https://www.anquanke.com/post/id/311999": "西门子SIMATIC虚拟化即服务平台曝严重漏洞(CVE-2025-40804):网络共享资源无需认证即可访问", "https://mp.weixin.qq.com/s?__biz=MzU5MTExMjYwMA==&mid=2247485732&idx=1&sn=b692f7c90b39c0fe59121ccd738267c6": "如何利用vps远程pull镜像", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599698&idx=3&sn=8c3b091297949a294055db5203184e05": "BitLocker 曝两提权漏洞,微软紧急打补丁", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509332&idx=1&sn=b5d3da30d85c5ca2e0488489bada74f2": "补天中秋快闪!速来⏳10个漏洞轻松赢礼盒,限时掉落!", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503544&idx=1&sn=0d58c30570367608d168ba1a4c35a51f": "雷神众测漏洞周报2025.9.1-2025.9.7", "https://infosecwriteups.com/advanced-free-resources-for-bug-bounty-hunters-b830c4a99e2f?source=rss----7b722bfd1b8d--bug_bounty": "Advanced Free Resources for Bug Bounty Hunters", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489132&idx=1&sn=db106fe66973d49ac690ed03e1913096": "XWiki WebHome接口存在任意文件读取漏洞CVE-2025-55748 附POC", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490725&idx=1&sn=26821f2ee9484a56dd74a12da7d1ee33": "【高危AI漏洞预警】Claude Code代理编程工具远程代码执行漏洞CVE-2025-59041", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490725&idx=2&sn=1d48894b798aac40177d3894343cc3dd": "【高危漏洞预警】1panel OS命令注入漏洞(CVE-2025-56413)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODU4MjIyNQ==&mid=2247484144&idx=1&sn=6146b7e5688b0376483e4fb5bceaa40d": "一个提供各类N-day漏洞在线查询的网站!!!Wiki漏洞库管理系统&网络安全知识库", "https://mp.weixin.qq.com/s?__biz=MzkzNzM0OTcyOQ==&mid=2247484803&idx=1&sn=45b46bfa6b89e830323c0f2165699b2e": "小记一次Fastjson漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247488322&idx=2&sn=17e1c11d27abfaffc347fd9a05a7e832": "某985证书站跨平台、跨IP的通杀漏洞", "https://horizon3.ai/attack-research/vulnerabilities/cve-2025-57819/": "CVE-2025-57819", "https://www.bleepingcomputer.com/news/security/akira-ransomware-exploiting-critical-sonicwall-sslvpn-bug-again/": "Akira ransomware exploiting critical SonicWall SSLVPN bug again", "https://securityaffairs.com/182112/cyber-crime/akira-ransomware-exploits-year-old-sonicwall-flaw-with-multiple-vectors.html": "Akira Ransomware exploits year-old SonicWall flaw with multiple vectors", "https://thehackernews.com/2025/09/asyncrat-exploits-connectwise.html": "AsyncRAT Exploits ConnectWise ScreenConnect to Steal Credentials and Crypto", "https://thehackernews.com/2025/09/sonicwall-ssl-vpn-flaw-and.html": "SonicWall SSL VPN Flaw and Misconfigurations Actively Exploited by Akira Ransomware Hackers", "https://go.theregister.com/feed/www.theregister.com/2025/09/11/concern_and_sympathy_as_experts/": "Experts scrutinized Ofcom's Online Safety Act governance. They're concerned", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500561&idx=1&sn=4716d9f6298645f758b42436ede8f905": "从 CVE-2024-43485 审计 .NET 隐式依赖的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523990&idx=1&sn=ad9957a5c3d054d4a0bf32250bceb556": "捷豹路虎数据遭泄露生产仍未恢复,幕后黑手或与 Salesforce-Salesloft 供应链攻击有关", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500174&idx=1&sn=ea183d31d07c3e1d5ad1abbf71ef1e99": "一个文件上传的功能,可能出现哪些类型的漏洞?", "https://www.4hou.com/posts/gy06": "【梆梆安全监测】安全隐私合规监管趋势及漏洞风险报告(0803-0816)", "https://forum.butian.net/share/4540": "记一次通用.NET系统通杀漏洞挖掘:从登录旁路到敏感信息泄露", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071657&idx=1&sn=01e4627a8b409aa7c0172e4c296a0d28": "【安全圈】微软 9 月安全更新修复 80 个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247526394&idx=1&sn=1755737f404c05de47f40938770ed109": "2025-09微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489345&idx=1&sn=7b792a8bcade52258c5ff49c597c22ff": "【安全更新】微软9月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247503819&idx=1&sn=0c6b04781d09473bfdc8314c6014cda9": "【360漏洞云】邀您共度中秋,海量福利来袭!", "https://infosecwriteups.com/13-my-first-private-program-experience-and-mistakes-i-made-a5d8d6b325a7?source=rss----7b722bfd1b8d--bug_bounty": "13. My First Private Program Experience (and Mistakes I Made)", "https://mp.weixin.qq.com/s?__biz=Mzg2Mjc3NTMxOA==&mid=2247517487&idx=1&sn=f068877ed3a371134c727476b83d9560": "GitLab Webhook SSRF漏洞(CVE-2025-6454)", "https://mp.weixin.qq.com/s?__biz=MzAwNTc5MTMyNg==&mid=2247500547&idx=1&sn=bc6f60a08f7641203d89ccbbfb0ab1be": "JSONP劫持漏洞挖掘与实战利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651327519&idx=4&sn=152908a57fd56b3b97a306765b461681": "PyInstaller工具漏洞预警,可致攻击者执行任意Python代码", "https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651143022&idx=1&sn=e620d0a75b25b75f0323877c2c569600": "WinRAR之CVE-2025-6218漏洞复现与分析", "https://mp.weixin.qq.com/s?__biz=MzA4NTAxMjA5Mg==&mid=2247484524&idx=1&sn=e59c805a90049e5428c254d082fe714b": "nvidia-container-toolkit CVE-2025-23266 缓解措施绕过", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071673&idx=1&sn=bfb5492139bfe15915368784d4448c1a": "【安全圈】Windows防火墙曝出提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490733&idx=2&sn=a2652b6dd020b561f212a143eaa4e0f4": "【高危AI漏洞预警】Visual Studio Code Agentic AI 命令注入漏洞 (CVE-2025-55319)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490733&idx=1&sn=e99569970118236db564f31e2c43f93e": "【高危漏洞预警】Zabbix代码执行漏洞(CVE-2025-27240)", "https://mp.weixin.qq.com/s?__biz=Mzg4NjY3OTQ3NA==&mid=2247487159&idx=1&sn=22d3c97fed4c43c6ee06e8c4b1fb296e": "从SSRF到命令执行惨案(转载)", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247494284&idx=3&sn=fb64bc089e6564478be02ce6624fdb18": "从js逆向到sql注入waf绕过到net审计-edu证书漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDc0MzgyOA==&mid=2247485912&idx=1&sn=7f3c17b3f2a76f872f86b63b55c21e81": "实操漏洞挖掘之某平台不完善的认证流程导致账号接管!(已修复)", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247494284&idx=4&sn=51d44c217dda3d0d6d77a41c2fcd0f5a": "空白页面引起的高危src漏洞-再次绕过", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651327519&idx=1&sn=dab9eea27770347eba581e1392267a6f": "脚本小子必看,4 款漏洞扫描工具测评", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651327519&idx=3&sn=279692f1af43aa4b3c4a3b420efe4e17": "英特尔与AMD最新CPU隔离缺陷漏洞可使虚拟机突破隔离", "https://www.bleepingcomputer.com/news/security/cisa-warns-of-actively-exploited-dassault-rce-vulnerability/": "CISA warns of actively exploited Dassault RCE vulnerability", "https://www.bleepingcomputer.com/news/security/samsung-patches-actively-exploited-zero-day-reported-by-whatsapp/": "Samsung patches actively exploited zero-day reported by WhatsApp", "https://securityaffairs.com/182135/hacking/samsung-fixed-actively-exploited-zero-day.html": "Samsung fixed actively exploited zero-day", "https://securityaffairs.com/182120/hacking/u-s-cisa-adds-dassault-systemes-delmia-apriso-flaw-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Dassault Systèmes DELMIA Apriso flaw to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2025/09/critical-cve-2025-5086-in-delmia-apriso.html": "Critical CVE-2025-5086 in DELMIA Apriso Actively Exploited, CISA Issues Warning", "https://thehackernews.com/2025/09/new-hybridpetya-ransomware-bypasses.html": "New HybridPetya Ransomware Bypasses UEFI Secure Boot With CVE-2024-7344 Exploit", "https://thehackernews.com/2025/09/samsung-fixes-critical-zero-day-cve.html": "Samsung Fixes Critical Zero-Day CVE-2025-21043 Exploited in Android Attacks", "https://www.4hou.com/posts/l016": "75W次漏洞拦截!CACTER MAF以协议层防护破68%企业邮件入侵困局", "https://www.4hou.com/posts/0MKX": "大规模网络扫描瞄准思科ASA设备或预示新漏洞即将出现", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584580&idx=2&sn=3d182b2b9bcc2a01b85fee2e7a91e859": "大规模网络扫描瞄准思科ASA设备或预示新漏洞即将出现", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486514&idx=1&sn=f92d3cbff26db6994d814627aea539be": "美国政府漏洞经纪人称“苹果最新的iPhone安全特性让间谍软件制造商的生活更加艰难”", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484588&idx=1&sn=fdc6641905b1ad8865c9f2341cbd1229": "CVE-2025-32463:Linux sudo chroot 本地提权", "https://forum.butian.net/share/4542": "漏洞挖掘-业务响应状态码攻击面新思路", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247495601&idx=1&sn=ea61b323d6520a5168d94853114841ba": "抖音生活服务反爬专项上线!漏洞赏金1000元起步!", "https://www.anquanke.com/post/id/312100": "Angular SSR漏洞允许攻击者访问敏感数据", "https://www.anquanke.com/post/id/312096": "CoreDNS漏洞允许攻击者固定DNS缓存并拒绝服务更新", "https://www.anquanke.com/post/id/312071": "PyInstaller漏洞:您的Python应用是否面临劫持风险?", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486170&idx=2&sn=bb1988be1ba6abd51bd408ef178db488": "CVE-2025-53772|Web 部署远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486170&idx=1&sn=794720918704c683160b7a21be5b7abb": "CVE-2025-57833|Django SQL 注入漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MzkzMDQ0NzQwNA==&mid=2247487300&idx=1&sn=92e42aed3546e9e6c8b2944f7849128e": "CVE-2025-8088 WinRAR 概念验证(PoC 漏洞利用)", "https://mp.weixin.qq.com/s?__biz=MzU2MDE2MjU1Mw==&mid=2247486703&idx=1&sn=594fa79e59dbc4e0f2cbb12270ff9b54": "ETH Zurich 披露 VMSCAPE 漏洞:AMD 与 Intel CPU 存在虚拟化隔离缺陷", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096503&idx=1&sn=f994f7e1803d0b49b72c01a675517002": "Microsoft Windows Defender 存在防火墙允许权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096503&idx=2&sn=514494383b92b3a0edbe15d65cf90ab5": "NVIDIA NVDebug工具存在漏洞,攻击者可借此实现系统权限提升", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498181&idx=1&sn=1f1fa5d85568bd16a7758a1802a0b003": "RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247486149&idx=1&sn=0b65216060cc21c4de2f7e50c4987166": "【好靶场逻辑漏洞】优惠卷只能领取一次?你OUT了", "https://mp.weixin.qq.com/s?__biz=MzI5MTIwOTQ5MA==&mid=2247488271&idx=1&sn=8ac81a595f8ecf0e990dddfae29f6e4a": "【报告】2024年度网络安全漏洞态势威胁研究报告", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247485685&idx=1&sn=88fd95d06126e745aa0786d47e56855a": "代码审计-PHP专题&原生开发&SQL注入&1day分析构造&正则搜索&语句执行监控&功能定位", "https://mp.weixin.qq.com/s?__biz=MzkwMDcyMjQxOQ==&mid=2247484537&idx=1&sn=160b48e8468b839e4ad419703f5aa3e2": "别让 JDBC 成为后门:DataEase 多处 RCE 漏洞解读与加固清单(CVE-2025-(53004-53006))", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247552019&idx=1&sn=0c36e6520861e7cc80a71fa05eb3d2d8": "存储桶配置不当的漏洞挖掘:以某EDU证书站为例", "https://mp.weixin.qq.com/s?__biz=MzkyMzI3OTY4Mg==&mid=2247486975&idx=1&sn=7d3b665a5a449a22058dfba09ffceac5": "开源|如何通过AI挖掘浏览器漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651327564&idx=3&sn=fc5c50e3e2eb476c5df7d47b09176a12": "新型HybridPetya恶意软件利用UEFI漏洞绕过老旧系统的安全启动机制", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247486082&idx=1&sn=112342e8d2dc8f70634c6df7c9ea37c8": "某 oa 1day分析", "https://securityaffairs.com/182159/cyber-crime/fbi-warns-of-salesforce-attacks-by-unc6040-and-unc6395-groups.html": "FBI warns of Salesforce attacks by UNC6040 and UNC6395 groups", "https://thehackernews.com/2025/09/fbi-warns-of-unc6040-and-unc6395.html": "FBI Warns of UNC6040 and UNC6395 Targeting Salesforce Platforms in Data Theft Attacks", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247493545&idx=1&sn=78b737a3e3c510ad39db1a4c3e4c954b": "美国保险巨头Farmers Insurance 遭 Salesforce 攻击导致数据泄露,影响 110 万人", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489152&idx=1&sn=f2d981658d887c54ed0d4326e0099936": "预警:大华智能物联管理平台GetClassValue.jsp接口存在远程命令执行漏洞", "https://www.bleepingcomputer.com/news/security/fbi-warns-of-unc6040-unc6395-hackers-stealing-salesforce-data/": "FBI warns of UNC6040, UNC6395 hackers stealing Salesforce data", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071707&idx=2&sn=cfafef0e8f5d3b121b52cd5b5bda2de1": "【安全圈】Zabbix代码执行漏洞(CVE-2025-27240)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498185&idx=1&sn=7f4997696fa4cbce0300a9208ccbf610": "如何通过AI挖掘浏览器漏洞", "https://blog.upx8.com/4854": "OuonnkiTV:一键搭建个人影视站,支持多源导入与Vercel自动部署", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496342&idx=1&sn=59c279280c0f0af501d57e3bd719ebd1": "CNVD漏洞周报2025年第35期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496342&idx=2&sn=ba1bd5010a5260636780b37d85159fd2": "上周关注度较高的产品安全漏洞(20250908-20250914)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490739&idx=1&sn=fed14843d54269cfdbbf60dca085594a": "【高危漏洞预警】Gotac Statistical Database System身份认证绕过漏洞CVE-2025-10452", "https://www.bleepingcomputer.com/news/security/google-confirms-fraudulent-account-created-in-law-enforcement-portal/": "Google confirms fraudulent account created in law enforcement portal", "https://www.bleepingcomputer.com/news/security/google-confirms-hackers-gained-access-to-law-enforcement-portal/": "Google confirms hackers gained access to law enforcement portal", "https://www.bleepingcomputer.com/news/microsoft/microsoft-to-force-install-the-microsoft-365-copilot-app-in-october/": "Microsoft to force install the Microsoft 365 Copilot app in October", "https://www.tenable.com/blog/exploring-the-exposure-management-maturity-model": "Exploring the Exposure Management Maturity Model", "https://thehackernews.com/2025/09/hiddengh0st-winos-and-kkrat-exploit-seo.html": "HiddenGh0st, Winos and kkRAT Exploit SEO, GitHub Pages in Chinese Malware Attacks", "https://torrentfreak.com/revanced-complies-with-spotify-takedown-but-explores-options-to-fight-back/": "ReVanced Complies With Spotify Takedown But Explores Options to Fight Back", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500588&idx=3&sn=a90c8092305773fdd4cfe028259342a1": "从 CVE-2024-43485 审计 .NET 隐式依赖的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524006&idx=2&sn=7d834750d24e4c7125f06fe6c19d570e": "Palo Alto Networks User-ID 凭据代理漏洞以明文形式暴露密码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524006&idx=1&sn=ba91a938a6e32f6aa930b60c3bb51608": "三星修复已遭活跃利用的 0day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071725&idx=4&sn=24cdeec2f861c8e6a7adf0b24d6f7c61": "【安全圈】三星修复被黑客利用的图像解析漏洞,影响安卓设备", "https://www.anquanke.com/post/id/312119": "CISA警告有人积极利用达索RCE漏洞", "https://www.anquanke.com/post/id/312137": "CVE-2025-58754:Axios漏洞使Node.js 进程面临DoS攻击风险", "https://www.anquanke.com/post/id/312123": "三星RCE零日漏洞遭积极利用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458599857&idx=3&sn=29fa3244e23e71fc824edf596d0b9a85": "速更9月补丁!三星设备遇图像漏洞,不点开图片也能被入侵", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496343&idx=2&sn=7af01a017652b3c33d626ddb53e88cc0": "2024年度CNVD优秀单位(个人)表彰名单", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496343&idx=1&sn=4e70a07452ff03fad1d09c995dd69a75": "关于新增金盾检测技术股份有限公司等八家单位为CNVD支撑单位的公告", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247488777&idx=1&sn=cecbaee3194b03513f55393111c3a2e5": "3.4k下载量的VscanPlus - 内外网漏洞扫描工具更新归来!", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484666&idx=1&sn=131e075be20e59b4368f32ba2db6892f": "DELMIA Apriso CVE-2025-5086 反序列化远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096511&idx=2&sn=ee967a7301a8199588db46d725d68e4e": "LangChainGo 存在允许恶意提示注入访问敏感数据漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096511&idx=1&sn=1b5e3be5de3d153e8895153097f9b17c": "Linux CUPS 存在允许攻击者远程 DoS 并绕过身份验证漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519775&idx=1&sn=8025a8f641b2069a1fea95436109a58d": "Nuclei 配合 AI 快速发现漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247489869&idx=1&sn=97bd1618e3ae4262fb69f3ac6c844603": "Zabbix漏洞复现汇总", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489165&idx=1&sn=2d82103234b65a44b2395d861c30af7f": "dify upload存在SSRF漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490746&idx=1&sn=ff87f7f4916d885d20523cc2858100f4": "【AI高危漏洞预警】Flowise任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071744&idx=4&sn=5c6d7a66422ea4fa10a8b50c5c8e8bfd": "【安全圈】企业级聊天机器人漏洞暴露用户会话风险:Yellow.ai平台现重大XSS隐患", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463614&idx=1&sn=65bc2637b549a0d4da74bbbcc65b913b": "基础软硬件产品漏洞治理生态大会成功举办", "https://securityaffairs.com/182266/security/cybercrime-group-accessed-google-law-enforcement-request-system-lers.html": "Cybercrime group accessed Google Law Enforcement Request System (LERS)", "https://securityaffairs.com/182222/data-breach/insider-breach-at-finwise-bank-exposes-data-of-689000-aff-customers.html": "Insider breach at FinWise Bank exposes data of 689,000 AFF customers", "https://www.tenable.com/blog/idc-ranks-tenable-1-in-ww-device-vulnerability-and-exposure-management-market-share": "IDC Ranks Tenable #1 in WW Device Vulnerability and Exposure Management Market Share", "https://thehackernews.com/2025/09/apple-backports-fix-for-cve-2025-43300.html": "Apple Backports Fix for CVE-2025-43300 Exploited in Sophisticated Spyware Attack", "https://thehackernews.com/2025/09/chaos-mesh-critical-graphql-flaws.html": "Chaos Mesh Critical GraphQL Flaws Enable RCE and Full Kubernetes Cluster Takeover", "https://thehackernews.com/2025/09/slopads-fraud-ring-exploits-224-android.html": "SlopAds Fraud Ring Exploits 224 Android Apps to Drive 2.3 Billion Daily Ad Bids", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524015&idx=2&sn=8e56116e65e31eb6415e8bd633b8ce1b": "CISA 提醒注意已遭利用的 Dassault RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524015&idx=1&sn=ef56ae8b6ab01b82d74070df472e8945": "LangChainGo 中存在严重漏洞,可用于访问敏感文件", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503941&idx=1&sn=cebdea5b5a3b9ae48caf7cbc3c905852": "【已复现】Flowise 任意文件读取漏洞(QVD-2025-35890)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647691010&idx=1&sn=a5bff5994079a5fe188da9ef8491e8f1": "58.Recon 如何帮助我获得 50,000 美元的漏洞赏金 - 无需漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzI5MjY4MTMyMQ==&mid=2247492445&idx=1&sn=c42c21e5ee6754810ba6c0c6cc1c9ec8": "Linux 渗透技巧:那些藏在系统深处的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651327803&idx=3&sn=300c967966393d666629d8b611362acd": "Linux内核KSMBD子系统漏洞可致远程攻击者耗尽服务器资源", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494773&idx=1&sn=afabac315dace9fe640081e40afaaf93": "【首发复现】U8cloud IPFxxFileService任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247485757&idx=1&sn=48cfe2ce5a23d2f67b8ace209ba05e8c": "代码审计-PHP专题&MVC开发&控制视图&URL路由&文件定位&SQL注入&文件安全&1day分析", "https://mp.weixin.qq.com/s?__biz=MzUzNjg1OTY3Mg==&mid=2247492261&idx=1&sn=8747bb4fb5d2791886d31097dd6138dc": "华顺信安创始人赵武出席“基础软硬件产品漏洞治理生态大会”并发表演讲", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489191&idx=1&sn=8ce0ede2a4e004db25fb0f0815736239": "预警:锐明Crocus系统RepairRecord.do接口存在任意文件上传漏洞 附POC", "dump://2025-09-18/Instapaper_ Unread_Exposing Pegasus How the State Spies on You.md": "Unread_Exposing Pegasus How the State Spies on You", "dump://2025-09-18/Instapaper_ Unread_Google confirms hackers gained access to law enforcement portal.md": "Unread_Google confirms hackers gained access to law enforcement portal", "dump://2025-09-18/Instapaper_ Unread_Hackers Can Exploit Bitpixie Vulnerability to Bypass BitLocker Encryption and Escalate Privileges.md": "Unread_Hackers Can Exploit Bitpixie Vulnerability to Bypass BitLocker Encryption and Escalate Privileges", "https://securityaffairs.com/182283/security/apple-backports-fix-for-actively-exploited-cve-2025-43300.html": "Apple backports fix for actively exploited CVE-2025-43300", "https://www.tenable.com/blog/how-tenable-bypassed-patch-for-bentoml-ssrf-vulnerability-CVE-2025-54381": "How Tenable Found a Way To Bypass a Patch for BentoML’s Server-Side Request Forgery Vulnerability CVE-2025-54381", "https://thehackernews.com/2025/09/chinese-ta415-uses-vs-code-remote.html": "Chinese TA415 Uses VS Code Remote Tunnels to Spy on U.S. Economic Policy Experts", "https://thehackernews.com/2025/09/from-quantum-hacks-to-ai-defenses.html": "From Quantum Hacks to AI Defenses – Expert Guide to Building Unbreakable Cyber Resilience", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500604&idx=2&sn=e319c7f7bf4864cfb19fa6e576c4693c": ".NET内网实战:通过 VisualUiaVerifyNative 反序列化漏洞执行命令", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496798&idx=1&sn=9868e9d47c407a0711e9d0187b58d1d6": "2025年8月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524024&idx=2&sn=68014917de08e5a4246bcb4e4524ee85": "Chaos Mesh中存在多个严重漏洞,可导致RCE和K8s 集群遭完全接管", "https://www.anquanke.com/post/id/312207": "KSMBDrain(CVE-2025-38501):Linux内核漏洞允许远程DoS攻击,PoC已公开", "https://www.anquanke.com/post/id/312211": "Kubernetes C#客户端漏洞使API面临MITM攻击风险(CVE-2025-9708)", "https://www.anquanke.com/post/id/312192": "WordPress插件漏洞允许攻击者通过社交登录绕过身份验证", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485088&idx=1&sn=726d198b93728d5b4637883929f3d6db": "2025年8月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458600104&idx=3&sn=530f3719401aa7a3f8e3c19ca36e1560": "Linux KSMBD子系统漏洞可让服务器资源被耗尽", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498199&idx=1&sn=b1d87d14a3f941538c123108dc0ed2a0": "Electron客户端RCE", "https://infosecwriteups.com/default-page-to-admin-paths-exposure-1d5709b3725b?source=rss----7b722bfd1b8d--bug_bounty": "Default Page to Admin Paths Exposure", "https://infosecwriteups.com/penetration-testing-beginners-to-expert-8378f9169160?source=rss----7b722bfd1b8d--bug_bounty": "Penetration Testing, Beginners To Expert!", "https://infosecwriteups.com/web-cache-poisoning-to-exploit-a-dom-vulnerability-via-a-cache-with-strict-cacheability-criteria-a357c62bba7d?source=rss----7b722bfd1b8d--bug_bounty": "Web Cache Poisoning to Exploit a DOM Vulnerability via a Cache With Strict Cacheability Criteria", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498203&idx=1&sn=74ca9182c88008204366ede75e8bcad0": "6位数赏金rce", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490759&idx=1&sn=64ac52d97b0084ee86861be8a624d99b": "【高危漏洞预警】Wondershare Repairit身份认证绕过漏洞(CVE-2025-10644)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490759&idx=2&sn=c544731edb42d1ac1b78f6c60a4882f8": "【高危漏洞预警】用友U8Cloud IPFxxFileService文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk4ODg5MTY3Mw==&mid=2247483834&idx=1&sn=c3a6fe73bf0fca2d94d4094ee3fee1cb": "响应云安全漏洞推送", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247492866&idx=1&sn=8411c329922410d5528ca78b41614b08": "某CMS最新版本鉴权绕过审计(0Day)", "https://mp.weixin.qq.com/s?__biz=MzkyMDc0NDEzOA==&mid=2247483929&idx=1&sn=1f312519807ab81df8505faa320d10aa": "某客户端rce分析", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247493549&idx=1&sn=10dc30a01f3af4a0d501e74a91afbfcc": "超过 28,000 台 Citrix 设备易受新 RCE 漏洞攻击", "https://www.bleepingcomputer.com/news/security/google-patches-sixth-chrome-zero-day-exploited-in-attacks-this-year/": "Google patches sixth Chrome zero-day exploited in attacks this year", "https://securityaffairs.com/182322/uncategorized/cve-2025-10585-is-the-sixth-actively-exploited-chrome-zero-day-patched-by-google-in-2025.html": "CVE-2025-10585 is the sixth actively exploited Chrome zero-day patched by Google in 2025", "https://securityaffairs.com/182329/data-breach/sonicwall-warns-customers-to-reset-credentials-after-mysonicwall-backups-were-exposed.html": "SonicWall warns customers to reset credentials after MySonicWall backups were exposed", "https://www.tenable.com/blog/how-top-cisos-approach-exposure-management-in-the-context-of-managing-cyber-risk": "How Top CISOs Approach Exposure Management in the Context of Managing Cyber Risk", "https://thehackernews.com/2025/09/google-patches-chrome-zero-day-cve-2025.html": "Google Patches Chrome Zero-Day CVE-2025-10585 as Active V8 Exploit Threatens Millions", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500612&idx=1&sn=5d9a7fbad897698552395e7ef951988d": "从.NET审计视角剖析 IDOR,发现高危的越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524032&idx=1&sn=5423164d917da366fc14c1927b4144cf": "Chrome 紧急修复已遭利用的 V8 0day漏洞", "https://www.4hou.com/posts/wx1J": "【梆梆安全监测】安全隐私合规监管趋势及漏洞风险报告 (0817-0830)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503951&idx=1&sn=8ba8b1b56d284b94810bb49ef7d4c1f6": "【在野利用】Google Chrome V8 类型混淆漏洞(CVE-2025-10585)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503951&idx=2&sn=43a1e70fb100e322bf9da5d5257f9d7a": "【已复现】用友U8Cloud IPFxxFileService 文件上传漏洞(QVD-2025-36405)安全风险通告", "https://forum.butian.net/share/4541": "CNVD-2025-18743-Tenda-AC6V2.0_V15.03.06.23栈溢出漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071775&idx=4&sn=6be62142790ec120e1dc2dd9363bc775": "【安全圈】Jenkins 修补多个可被利用导致拒绝服务的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650184669&idx=1&sn=08ca9f6beeaabefadd23b7256631becd": "连续3年!微步荣获CNVD“年度最具价值漏洞”奖!", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484937&idx=1&sn=e8ce60d2db3fb999aa7309e51871c652": "【复现】Chaos-Mesh命令注入漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492947&idx=1&sn=bc92f12f3d90bcd06f0abd74be0a7be4": "【已复现】用友 U8 Cloud IPFxxFileService 任意文件上传漏洞安全通告", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650850700&idx=1&sn=1107480f5a4456458f977a4805e53ce4": "再获认证!青藤荣获2025年度CNNVD基础软硬件漏洞优秀报送企业", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524042&idx=1&sn=072f62611d5d3d6075e9d7b8e95d9881": "ChatGPT 代理中的零点击漏洞可导致Gmail敏感数据被盗", "https://mp.weixin.qq.com/s?__biz=Mzk2ODExMjEyNA==&mid=2247486569&idx=1&sn=5e51dd0d6702848a5370e83fbf16f77d": "ChatGPT 修复 ShadowLeak 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTM3ODg3Mw==&mid=2247483982&idx=1&sn=f6f318eb7ffab65773a5ca1c3e545822": "Chrome V8 引擎漏洞(CVE-2025-10585)已在野外被利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651327923&idx=3&sn=81f6090d714734f7afe7db9ef2f0cf90": "Cloudflare API服务中断事件分析:React useEffect漏洞引发级联故障", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524710&idx=1&sn=e4bd23b3a45c999f525b67b3998dc93b": "Google Chrome V8 类型混淆漏洞(CVE-2025-10585)", "https://mp.weixin.qq.com/s?__biz=MzI5NDg0ODkwMQ==&mid=2247486626&idx=1&sn=98e8391d23642edcb9e688e20e6fefde": "【漏洞分析】某度网盘存在rce详解及利用过程", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501593&idx=2&sn=1cb4fa2aab1f8ed13c56c308adcd9393": "【漏洞通告】Chrome V8 类型混淆远程执行漏洞(CVE-2025-10585)", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064353&idx=1&sn=03de0213e4e920d21b8210154be48778": "信息安全漏洞周报【第040期】", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500560&idx=1&sn=63b54eb5ad49fb3819c9bbd217d8ee73": "关于AI大模型产品众测活动典型漏洞风险的通报", "https://mp.weixin.qq.com/s?__biz=MzYyNTA2MTY3NQ==&mid=2247483771&idx=1&sn=4c0fdb5bd199605a4b9318f3fa79b987": "某中心管理器文件上传漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI1MTYzMjY1OQ==&mid=2247491294&idx=1&sn=572e95349b4af59efb9d2632e1cab695": "能信安:漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247536193&idx=2&sn=9f70ad47ff9fe146984ce1f75b73fcd7": "警惕!当AI 开始 “自主钻漏洞”,传统防火墙正在失效?", "https://www.hexacorn.com/blog/2025/09/19/rundll-exporters/": "RunDll Exporters", "https://www.bleepingcomputer.com/news/security/cisa-exposes-malware-kits-deployed-in-ivanti-epmm-attacks/": "CISA exposes malware kits deployed in Ivanti EPMM attacks", "https://www.bleepingcomputer.com/news/artificial-intelligence/openais-4-gpt-go-plan-may-expand-to-more-regions/": "OpenAI's $4 GPT Go plan may expand to more regions", "https://thehackernews.com/2025/09/cisa-warns-of-two-malware-strains.html": "CISA Warns of Two Malware Strains Exploiting Ivanti EPMM CVE-2025-4427 and CVE-2025-4428", "https://www.anquanke.com/post/id/312280": "CISA 警告两种恶意软件正利用 Ivanti EPMM CVE-2025-4427 和 CVE-2025-4428", "https://www.anquanke.com/post/id/312285": "Nokia 修复 CloudBand 与 NCS 中的严重漏洞:CVE-2023-49564 与 CVE-2023-49565", "https://www.anquanke.com/post/id/312268": "ShinyHunters 声称通过 Drift 攻击窃取 15 亿条 Salesforce 记录", "https://www.anquanke.com/post/id/312257": "WatchGuard 警告 Firebox 防火墙存在严重漏洞", "https://www.anquanke.com/post/id/312263": "谷歌修复今年第六个被利用的 Chrome 零日漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NzQ0MjA1OA==&mid=2247485072&idx=1&sn=7ef1a8c2da4081316eeaeece09ca2d08": "CISA 警告 Dover Fueling Solutions 的 ProGauge MagLink LX 存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484704&idx=1&sn=866355da2312e9272a6e8be013b46899": "Chrome 紧急修复 V8 引擎类型混淆漏洞(CVE-2025-10585)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247502924&idx=1&sn=a02eb00476f661ec298af2016b9e5db7": "HubSpot 的 Jinjava 引擎漏洞导致数千个网站遭受 RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247488803&idx=1&sn=1496ca7c6b6d38545c07fee48ad3fc71": "ProjectDiscovery漏洞挖掘工具链浅析 - 自动化工作流", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500621&idx=1&sn=ee6ce0e39a3c4cd797deb921494319be": "[ .NET 安全代码审计 ] 从零基础到高阶实战,开启漏洞赏金之路", "https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247508034&idx=1&sn=9a6571e16b83af332c3df21712a7f0b1": "【一周安全资讯0920】国家网信办发布《国家网络安全事件报告管理办法》;Chrome紧急更新:V8引擎零日漏洞已被野外利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071806&idx=2&sn=9da9a6fe06fc31226c5251aa5084ecce": "【安全圈】TP-Link路由器曝高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489218&idx=1&sn=938020c53245965b3d72a9c6c8794c34": "孚盟云CRM AjaxAttachment.ashx接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651327930&idx=1&sn=411eecd58f84da55dd0287bdffc110f5": "微软Entra ID漏洞暴露云身份信任模型缺陷", "https://mp.weixin.qq.com/s?__biz=Mzg5NjUxOTM3Mg==&mid=2247490864&idx=1&sn=0a8f32e35bc51c427d38db133974cf05": "文件包含漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMzQyMzUwMg==&mid=2247486772&idx=2&sn=17c379dec56eee08e0a908cb7d3f72b5": "看完这篇再挖不到漏洞,请顺着网线来砍我", "https://torrentfreak.com/laliga-seeks-googles-help-to-expose-notorious-pirate-streaming-service-flujotv/": "LaLiga Seeks Google’s Help to Expose ‘Notorious’ Pirate Streaming Service FlujoTV", "https://mp.weixin.qq.com/s?__biz=MzUzMDUxNTE1Mw==&mid=2247512732&idx=1&sn=fd414bbf394b51f4141e4313ba18fb28": "山石网科荣获国家信息安全漏洞库CNNVD多项荣誉", "https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247486003&idx=1&sn=82d1280ff69952f09d94eb5f9ff2d59a": "软件测试顶会ISSTA 2025 论文清单与摘要(补遗)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486184&idx=2&sn=7fda1f7d0eaf073014bd1b814048caef": "CVE-2023-24205|Clash for Windows远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486184&idx=1&sn=818c46395bce6642d2abdff6bd2c71ac": "CVE-2025-54236|Adobe Commerce存在安全绕过漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651327944&idx=3&sn=683ee038f20b6cfed2d55487241b3d6e": "TP-Link路由器零日漏洞遭利用,攻击者成功绕过ASLR防护机制", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247491947&idx=1&sn=b2b81e5c17857cd1ebb08cb7bb78d8c9": "[CVE-2025-41243] Spring Cloud Gateway:复杂化评估上下文带来的安全风险", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498218&idx=1&sn=77b833f75365452424ef9f2b8b5a95a2": "某系统RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496364&idx=1&sn=8fc0f22bfd44ac46b6c898f4cccd2e1a": "CNVD漏洞周报2025年第36期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496364&idx=2&sn=61f89210e1ad9eccce74500049605c23": "上周关注度较高的产品安全漏洞(20250915-20250921)", "https://mp.weixin.qq.com/s?__biz=MzkwMDcyMjQxOQ==&mid=2247484597&idx=1&sn=1013a260ac0c3298e25ef9dd7e9955fb": "03.用 PyTorch 复现 LeNet —— CIFAR-10 图像分类", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247532858&idx=1&sn=725de8e3f1c268a1efa105a32ac8fd49": "CVE-2025-10585:Chrome V8 类型混淆零日漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071837&idx=4&sn=3687cc3fd7ed7a4e2d5cd9eca6c32256": "【安全圈】CVE-2025-55241:微软补丁堵住 Entra ID 全局管理员伪造缺陷", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490772&idx=1&sn=bebe0bb6fdd5db87fc33a63484f4b9bc": "【高危漏洞预警】Spring Cloud Gateway 环境属性修改漏洞(CVE-2025-41243)", "dump://2025-09-23/Doonsec's feed_水漏洞这一块._.md": "水漏洞这一块._", "https://www.bleepingcomputer.com/news/security/american-archive-of-public-broadcasting-fixes-bug-exposing-restricted-media/": "American Archive of Public Broadcasting fixes bug exposing restricted media", "https://www.bleepingcomputer.com/news/security/automaker-giant-stellantis-confirms-data-breach-after-salesforce-hack/": "Automaker giant Stellantis confirms data breach after Salesforce hack", "https://securityaffairs.com/182433/malware/researchers-expose-malterminal-an-llm-enabled-malware-pioneer.html": "Researchers expose MalTerminal, an LLM-enabled malware pioneer", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524046&idx=1&sn=7502c8cfcdc19a772de84f1852ce2653": "Forta 提醒注意 GoAnywhere MFT 中的满分漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503956&idx=1&sn=652d931176dff7be2bb4fdeb5025eb67": "安全热点周报:谷歌修复今年第六个被利用的 Chrome 零日漏洞", "https://www.solidot.org/story?sid=82379": "微软的 Entra ID 漏洞可能造成灾难性的后果", "https://www.anquanke.com/post/id/312297": "BiDi Swap:存在十年的Unicode漏洞仍可实现URL欺骗", "https://www.anquanke.com/post/id/312294": "CVE-2025-55241:CVSS评分10.0的Microsoft Entra ID漏洞可能危及全球所有租户", "https://www.anquanke.com/post/id/312309": "CVE-2025-9961:TP-Link路由器漏洞可被利用实现远程代码执行,PoC已发布", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458600323&idx=3&sn=8ba3d1ed15eacbe75e5f2fcbfa86b066": "Unicode漏洞“BiDi Swap”十年未修复,仍被用于实施网址欺骗", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247532860&idx=1&sn=a9a97187765c86c143eaf0fc1608a3aa": "CVE-2025-10585:Chrome V8 类型混淆零日漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490778&idx=1&sn=c36960ec70fe0af0595598672eee58eb": "【高危漏洞预警】Linux内核drm漏洞CVE-2025-39882", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489244&idx=1&sn=58c72eb6f0a3b38d32aa56fcaa623d6b": "东胜物流软件WmsZXFeeGridSource.aspx接口存在SQL注⼊漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524053&idx=1&sn=2b843932ebd4eeeb17b6935b08be82f8": "受 Salesforce 供应链攻击影响,全球汽车巨头 Stellantis 数据遭泄露", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519801&idx=1&sn=59c78870090cfdb2a7b73699a36511d3": "漏洞挖掘-业务响应状态码攻击面新思路", "https://www.bleepingcomputer.com/news/security/cisa-says-hackers-breached-federal-agency-using-geoserver-exploit/": "CISA says hackers breached federal agency using GeoServer exploit", "https://cyble.com/blog/vulnerabilities-under-attack/": "Cyble Honeypots Detect Exploit Attempts of Nearly Two Dozen Vulnerabilities", "https://www.bleepingcomputer.com/news/security/libraesva-esg-issues-emergency-fix-for-bug-exploited-by-state-hackers/": "Libraesva ESG issues emergency fix for bug exploited by state hackers", "https://www.bleepingcomputer.com/news/security/solarwinds-releases-third-patch-to-fix-web-help-desk-rce-bug/": "SolarWinds releases third patch to fix Web Help Desk RCE bug", "https://www.schneier.com/blog/archives/2025/09/apples-new-memory-integrity-enforcement.html": "Apple’s New Memory Integrity Enforcement", "https://securityaffairs.com/182476/security/150k-awarded-for-l1tf-reloaded-exploit-that-bypasses-cloud-mitigations.html": "$150K awarded for L1TF Reloaded exploit that bypasses cloud mitigations", "https://securityaffairs.com/182509/security/u-s-cisa-adds-google-chromium-flaw-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Google Chromium flaw to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2025/09/shadowv2-botnet-exploits-misconfigured.html": "ShadowV2 Botnet Exploits Misconfigured AWS Docker Containers for DDoS-for-Hire Service", "https://thehackernews.com/2025/09/solarwinds-releases-hotfix-for-critical.html": "SolarWinds Releases Hotfix for Critical CVE-2025-26399 Remote Code Execution Flaw", "https://go.theregister.com/feed/www.theregister.com/2025/09/23/rapid7_oneplus_android_bug/": "OnePlus leaves researchers on read over Android bug that exposes texts", "https://go.theregister.com/feed/www.theregister.com/2025/09/23/openssf_open_source_infrastructure/": "OpenSSF warns that open source infrastructure doesn't run on thoughts and prayers", "dump://2025-09-24/The Register - Security_Third time's the charm_ SolarWinds (again) patches critical Web Help Desk RCE.md": "Third time's the charm_ SolarWinds (again) patches critical Web Help Desk RCE", "https://www.trendmicro.com/en_us/research/25/i/ai-powered-app-exposes-user-data.html": "AI-Powered App Exposes User Data, Creates Risk of Supply Chain Attacks", "https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650562247&idx=2&sn=cee66591f76fe76dec8e92b3dc65efc9": "尼日利亚我同胞车队遇袭事件:海外安全漏洞、应急机制与中非安保战略分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458600573&idx=2&sn=2de0e2b92bb4b80276807cc3925f3b3e": "CVE-2018-0798相关恶意文档分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524063&idx=1&sn=bbbe6b07384696379e2020d8ea0e3c24": "SolarWinds 第三次修复 Web Help Desk RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071867&idx=4&sn=a8c18afabd3ccd7093dcb2d004048ea8": "【安全圈】CISA警告:Chrome零日漏洞CVE-2025-10585遭在野利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071867&idx=3&sn=2fba1a44420525dcfd6f3b3ff6cca2fc": "【安全圈】黑客利用Pandoc SSRF漏洞瞄准AWS EC2凭证", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492955&idx=1&sn=16b38de2e215d8c2866b501a9545db06": "【已复现】用友 U8 Cloud NCCloudGatewayServlet 命令执行漏洞安全通告", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490786&idx=1&sn=897b74f67e004c597e75ec85734448c3": "【高危漏洞预警】H2O-3 JDBC参数绕过引发反序列化RCE漏洞(CVE-2025-6544)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651328077&idx=1&sn=bd0afa205f7da816369d2cf42c3a56bf": "一加手机OxygenOS存在权限绕过漏洞,攻击者可窃取短信并绕过MFA保护", "https://mp.weixin.qq.com/s?__biz=Mzg5NjUxOTM3Mg==&mid=2247490884&idx=1&sn=e554dba5496070c77be9b5c13d7872a8": "文件下载漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk2NDIzNTYwOA==&mid=2247490286&idx=1&sn=d139dbb530555a6dd8bbb6ceb06b68a8": "欧洲机场遭遇重大网络攻击暴露供应链安全漏洞 电信安全呼吁构建关键基础设施韧性防线", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524063&idx=2&sn=015628b01b153a9c714e3c5ce779bbf1": "超微公司两个新漏洞可导致恶意固件逃避信任根安全机制", "dump://2025-09-25/Instapaper_ Unread_Exploring GrapheneOS secure allocator Hardened Malloc.md": "Unread_Exploring GrapheneOS secure allocator Hardened Malloc", "https://www.bleepingcomputer.com/news/security/cisco-warns-of-ios-zero-day-vulnerability-exploited-in-attacks/": "Cisco warns of IOS zero-day vulnerability exploited in attacks", "https://securityaffairs.com/182532/hacking/how-threat-actors-breached-u-s-federal-civilian-agency-by-exploiting-a-geoserver-flaw.html": "How threat actors breached a U.S. federal civilian agency by exploiting a GeoServer flaw", "https://securityaffairs.com/182552/hacking/nation-state-hackers-exploit-libraesva-email-gateway-flaw.html": "Nation-State hackers exploit Libraesva Email Gateway flaw", "https://securityaffairs.com/182545/security/solarwinds-fixed-a-critical-rce-flaw-in-its-web-help-desk-software.html": "SolarWinds fixed a critical RCE flaw in its Web Help Desk software", "http://sites.libsyn.com/18678/rearchitecting-systems-for-privacy-as-ai-agents-force-you-to-rethink-security-guillaume-jaulerry-bsw-414": "Rearchitecting Systems for Privacy as AI Agents Force You to Rethink Security - Guillaume Jaulerry - BSW #414", "https://thehackernews.com/2025/09/hackers-exploit-pandoc-cve-2025-51591.html": "Hackers Exploit Pandoc CVE-2025-51591 to Target AWS IMDS and Steal EC2 IAM Credentials", "https://thehackernews.com/2025/09/state-sponsored-hackers-exploiting.html": "State-Sponsored Hackers Exploiting Libraesva Email Security Gateway Vulnerability", "https://thehackernews.com/2025/09/two-critical-flaws-uncovered-in.html": "Two Critical Flaws Uncovered in Wondershare RepairIt Exposing User Data and AI Models", "https://blog.trailofbits.com/2025/09/24/supply-chain-attacks-are-exploiting-our-assumptions/": "Supply chain attacks are exploiting our assumptions", "https://torrentfreak.com/italy-expands-piracy-shield-to-live-tv-begins-with-the-x-factor-250924/": "Italy Expands Piracy Shield to Live TV, Begins With ‘The X Factor’", "https://xz.aliyun.com/news/18994": "CodeQL中Source点的实现逻辑与Spring框架污点源分析", "https://www.4hou.com/posts/PGxz": "【梆梆安全监测】安全隐私合规监管趋势及漏洞风险报告(0831-0913)", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484652&idx=1&sn=8b6e508fd09dd386635136cd5e7239f7": "银狐APT组织利用未公开漏洞驱动攻击Windows系统,可绕过EDR与杀软防护", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247495667&idx=1&sn=801ea399681b4663aa4a55b93fa6e7e2": "正式发布|ByteSRC AI业务收录全景图及漏洞定级标准", "https://www.anquanke.com/post/id/312347": "CISA称黑客利用GeoServer漏洞成功入侵一联邦机构", "https://www.anquanke.com/post/id/312366": "Chrome浏览器存在高危漏洞,可致攻击者窃取敏感信息并引发系统崩溃", "https://www.anquanke.com/post/id/312357": "SolarWinds紧急发布补丁,修复高危远程代码执行漏洞CVE-2025-26399", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458600800&idx=3&sn=ca701f142edf4b64d8bb41855e141526": "一加 OxygenOS 漏洞曝光,短信数据可被任意读取", "https://infosecwriteups.com/18-secrets-of-rate-limiting-and-bruteforce-6dbb17e1a951?source=rss----7b722bfd1b8d--bug_bounty": "18. Secrets of Rate Limiting and Bruteforce", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490791&idx=1&sn=ad5cc1117e6d1c8501e0e171e332db07": "【高危漏洞预警】用友U8Cloud NCCloudGatewayServlet命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492855&idx=1&sn=953266622cb2a4b84518d255659637c3": "宏景EHR HrChangeInfoService sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489260&idx=1&sn=d4a65bf39b22a0cfd961069bc51b1095": "预警:华天软件Inforcenter PLM uploadFileTolls接口存在任意文件上传漏洞", "https://www.bleepingcomputer.com/news/security/cisa-orders-agencies-to-patch-cisco-flaws-exploited-in-zero-day-attacks/": "CISA orders agencies to patch Cisco flaws exploited in zero-day attacks", "https://www.bleepingcomputer.com/news/security/cisco-warns-of-asa-firewall-zero-days-exploited-in-attacks/": "Cisco warns of ASA firewall zero-days exploited in attacks", "https://securityaffairs.com/182564/hacking/cisco-fixed-actively-exploited-zero-day-in-cisco-ios-and-ios-xe-software.html": "Cisco fixed actively exploited zero-day in Cisco IOS and IOS XE software", "https://securityaffairs.com/182593/hacking/u-s-cisa-adds-cisco-secure-firewall-asa-and-secure-ftd-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds CISCO Secure Firewall ASA and Secure FTD flaws to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2025/09/cisco-warns-of-actively-exploited-snmp.html": "Cisco Warns of Actively Exploited SNMP Vulnerability Allowing RCE or DoS in IOS Software", "https://thehackernews.com/2025/09/salesforce-patches-critical-forcedleak.html": "Salesforce Patches Critical ForcedLeak Bug Exposing CRM Data via AI Prompt Injection", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524071&idx=1&sn=31248d9d535baaa71b2ec67ceef617e8": "思科修复影响路由器和交换机的 0day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503969&idx=1&sn=60929581746c605f9b3ef158818ec710": "【已复现】用友U8Cloud NCCloudGatewayServlet命令执行漏洞(QVD-2025-37484)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071881&idx=2&sn=406dfc031f40e7f6101451d618408e04": "【安全圈】思科警告SNMP漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071881&idx=1&sn=a3b2f5e5428e3d6a16cebdd4ad3598f8": "【安全圈】海康威视摄像机漏洞遭利用", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540372&idx=1&sn=da01302c61d355fc04c431060c42210c": "无代码测试工具能发现常见安全漏洞吗?", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524715&idx=1&sn=229aecfeb03f2d001ffd4b477e4ad3f8": "【漏洞通告】Spring Cloud Gateway SpEL表达式注入漏洞(CVE-2025-41243)", "https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207420&idx=1&sn=1812b287bd51b42977e82a64ea681377": "盘点2025年十大MCP漏洞:风险、案例与检测", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498276&idx=1&sn=0d835ab22d43a106e18e61e17599c391": "漏洞挖掘-逻辑漏洞挖掘中的一些新思路", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651328148&idx=4&sn=448221c674e1bd99361e90dd14d67bbc": "NVIDIA修复Megatron-LM AI框架中的高危代码注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524078&idx=2&sn=e6d2b91dedf49a963971709b2ead7110": "Salesforce 修复严重的 ForceLeaked 漏洞,通过AI提示注入暴露 CRM 数据", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489272&idx=1&sn=fe19907b1ac2ab04a67854e703846d11": "Sim Studio image接口存在任意文件读取漏洞CVE-2025-9805 附POC", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071897&idx=3&sn=de5284fc89ef7ff00ef7724fb32e0f7f": "【安全圈】Cloudflare CDN 节点 0day 漏洞现身暗网,引发全球安全担忧", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503623&idx=1&sn=a0a03137b9df5313e408854649c12b78": "【成功复现】SimStudioAI服务端请求伪造漏洞(CVE-2025-9805)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490796&idx=1&sn=455ec8870282730b204e1a6b44397321": "【高危漏洞预警】GitLab多款产品代码执行漏洞CVE-2025-9642", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492865&idx=1&sn=8148c29bae271489c0a8951297df2a43": "三汇网关管理系统 8-1-1userAdd 任意用户创建漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064357&idx=1&sn=f7bc7fc7e9366c6ce1f58a0697e995f1": "信息安全漏洞周报【第041期】", "https://mp.weixin.qq.com/s?__biz=Mzk0NTYwNzY3NQ==&mid=2247483908&idx=1&sn=ecd2a878ca523f458155f26b67f453f3": "前端限制?黑客是如何绕过付费限制的-实战漏洞案例讲解", "https://mp.weixin.qq.com/s?__biz=Mzg5NjUxOTM3Mg==&mid=2247490905&idx=1&sn=bd00002f4135e34aa27f79b5a5030478": "目录索引、目录穿越漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524078&idx=1&sn=a668c49a8bfda90e1da60201307dc79b": "速修复!思科ASA 两个0day漏洞已遭利用,列入 CISA KEV 清单", "https://www.bleepingcomputer.com/news/security/maximum-severity-goanywhere-mft-flaw-exploited-as-zero-day/": "Maximum severity GoAnywhere MFT flaw exploited as zero day", "dump://2025-09-27/Private Feed for M09Ic_niudaii starred jd-opensource_JoySafety.md": "niudaii starred jd-opensource_JoySafety", "https://securityaffairs.com/182647/hacking/hackers-exploit-fortra-goanywhere-flaw-before-public-alert.html": "Hackers exploit Fortra GoAnywhere flaw before public alert", "https://securityaffairs.com/182639/hacking/uk-ncsc-warns-that-attackers-exploited-cisco-firewall-zero-days-to-deploy-rayinitiator-and-line-viper-malware.html": "UK NCSC warns that attackers exploited Cisco firewall zero-days to deploy RayInitiator and LINE VIPER malware", "https://thehackernews.com/2025/09/cisco-asa-firewall-zero-day-exploits.html": "Cisco ASA Firewall Zero-Day Exploits Deploy RayInitiator and LINE VIPER Malware", "https://thehackernews.com/2025/09/fortra-goanywhere-cvss-10-flaw.html": "Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure", "https://thehackernews.com/2025/09/researchers-expose-svg-and-purerat.html": "Researchers Expose SVG and PureRAT Phishing Threats Targeting Ukraine and Vietnam", "https://go.theregister.com/feed/www.theregister.com/2025/09/26/salesforce_agentforce_forceleak_attack/": "Prompt injection – and a $5 domain – trick Salesforce Agentforce into leaking sales", "https://go.theregister.com/feed/www.theregister.com/2025/09/26/salesforce_class_actions/": "Salesforce facing multiple lawsuits after Salesloft breach", "https://go.theregister.com/feed/www.theregister.com/2025/09/26/cisco_firewall_flaws/": "UK and US security agencies order urgent fixes as Cisco firewall bugs exploited in wild", "dump://2025-09-27/The Register - Security_‘An attacker's playground_’ Crims exploit GoAnywhere perfect-10 bug.md": "‘An attacker's playground_’ Crims exploit GoAnywhere perfect-10 bug", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500693&idx=2&sn=d76a91844c2376e4dda8f83efa57fb27": "[ .NET 安全代码审计 ] 从零基础到高阶实战,开启漏洞赏金之路", "https://infosecwriteups.com/a-simple-explanation-of-a-complex-2fa-bypass-technique-de8b1db064a0?source=rss----7b722bfd1b8d--bug_bounty": "A Simple Explanation of a Complex 2FA Bypass Technique", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712513&idx=1&sn=d92d0b9660b58fc1e2cf2b56effe31af": "Nacos 漏洞利用总结", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071914&idx=2&sn=86d304cc99574054f117c3198c848b5d": "【安全圈】曝一加氧 OS 12 - 15 系统存严重漏洞,10 月中旬修复", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492874&idx=1&sn=09837b8a01d357546c39558ccccf7352": "用友NC changeEvent sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489286&idx=1&sn=810c0818ea26eb356c0f6e1730378cca": "用友U8 Cloud NCCloudGatewayServlet接口存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247485521&idx=1&sn=5bd12e2ee5a025e14e00b0013bf7363a": "用友U8cloud-NCCloudGatewayServlet 反射漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712488&idx=1&sn=d66f414b83f976592ff46caa38e24b0c": "若依(RuoYi)系统常见漏洞整理", "https://securityaffairs.com/182676/hacking/forcedleak-flaw-in-salesforce-agentforce-exposes-crm-data-via-prompt-injection.html": "ForcedLeak flaw in Salesforce Agentforce exposes CRM data via Prompt Injection", "https://xz.aliyun.com/news/19048": "U8cloud 所有版本 NCCloudGatewayServlet 远程命令执行和任意文件上传(基于该漏洞的变种)", "https://mp.weixin.qq.com/s?__biz=MzkwMzYyNzQ1NA==&mid=2247485876&idx=1&sn=20b1575d424c67a3f172b3608b6e403e": "HTB 第九赛季Imagery靶机:XSS+LFI+RCE三洞结合getshell", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524087&idx=1&sn=83bb93f4f75fdef8ddfbad2959a7e7d1": "Libraesva ESG 紧急修复已遭国家黑客利用的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490802&idx=1&sn=00575a4d7b745e06fa25758e69407bb7": "【高危漏洞预警】PHPGurukul Small CRM信息泄露漏洞CVE-2025-11053", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247494406&idx=1&sn=0ac56c8f16e11a6f1b6e3b0f38286334": "深情版公开课之如何快速挖掘低微漏洞", "https://mp.weixin.qq.com/s?__biz=MzYyNTcyMTE5NQ==&mid=2247483727&idx=1&sn=33402a3835da888bfd4521d93a4c2578": "记一次不需要抓包的实战逻辑漏洞", "https://xz.aliyun.com/news/19063": "继CVE-2025-30065和46762的Apache Parquet 1.15.2绕过反序列化命令执行分析", "https://forum.butian.net/share/4564": "漏洞挖掘从黑盒到白盒-上篇", "https://forum.butian.net/share/4569": "漏洞挖掘从黑盒到白盒-下篇", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653087504&idx=1&sn=34faf891cc5589c4ce4e7806a7d160b1": "记录生生不息的创新力量|2025 年度「InnoForce 50」启动", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458601375&idx=3&sn=b0f30af711d750a6a1461954a03888ca": "GitLab 紧急发布补丁,修复高危 DoS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498324&idx=1&sn=32b9de49b9e9ba29c2937d1cffa3804b": "不一样的漏洞挖掘思路", "https://xz.aliyun.com/news/19081": "某次内部行业渗透测试&攻防演练多个系统从资产打点到RCE漏洞", "https://xz.aliyun.com/news/19087": "深入CVE-2025-41243: Spring Cloud Gateway SpEL 从任意属性访问到任意文件下载", "https://xz.aliyun.com/news/19082": "用友NCCloudGatewayServlet 反射调用命令执行漏洞", "https://www.anquanke.com/post/id/312457": "Apache Airflow 存在权限漏洞,可导致只读用户获取敏感信息", "https://www.anquanke.com/post/id/312451": "Formbricks 存在高危漏洞 (CVE-2025-59934),攻击者可通过伪造JWT令牌导致未授权的密码重置", "https://www.anquanke.com/post/id/312444": "Morte僵尸网络被披露:正利用路由器与企业应用漏洞,迅速扩张其“加载器即服务”活动", "https://www.anquanke.com/post/id/312448": "Notepad++ 中存在DLL劫持漏洞(CVE-2025-56383),可导致任意代码执行,且POC已公开", "dump://2025-10-26/Private Feed for M09Ic_joaoviictorti starred InterceptSuite_InterceptSuite.md": "joaoviictorti starred InterceptSuite_InterceptSuite", "dump://2025-10-27/Private Feed for M09Ic_lz520520 starred moiz-2x_CVE-2025-24990_POC.md": "lz520520 starred moiz-2x_CVE-2025-24990_POC", "dump://2025-10-27/The Register - Security_Researchers exploit OpenAI's Atlas by disguising prompts as URLs.md": "Researchers exploit OpenAI's Atlas by disguising prompts as URLs", "dump://2025-10-27/安天AVL威胁情报中心_告别终端安全盲区!MVS终端漏洞检测系统安卓版正式开放试用.md": "告别终端安全盲区!MVS终端漏洞检测系统安卓版正式开放试用", "dump://2025-10-27/赛博昆仑CERT_【复现】Windows Server Update Service远程代码执行漏洞(CVE-2025-59287)风险通告.md": "【复现】Windows Server Update Service远程代码执行漏洞(CVE-2025-59287)风险通告", "dump://2025-10-28/Private Feed for M09Ic_Teach2Breach starred MalwareTech_ExifSmugglingPoC.md": "Teach2Breach starred MalwareTech_ExifSmugglingPoC", "dump://2025-10-28/Private Feed for M09Ic_Y4er starred lepoco_wpfui.md": "Y4er starred lepoco_wpfui", "dump://2025-10-28/希潭实验室_第139篇:美国苹果手机_三角测量_验证器后门样本及0day漏洞是如何被捕捉到的 _ _三角测量_系列第5篇.md": "第139篇:美国苹果手机_三角测量_验证器后门样本及0day漏洞是如何被捕捉到的 _ _三角测量_系列第5篇", "dump://2025-10-29/Full Disclosure_Re_ [FD]_ _Glass Cage_ – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 _ 24201, CNVD-2025-07885).md": "Re_ [FD]_ _Glass Cage_ – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 _ 24201, CNVD-2025-07885)", "dump://2025-10-29/Private Feed for M09Ic_gh0stkey starred jd-opensource_JoySafety.md": "gh0stkey starred jd-opensource_JoySafety", "dump://2025-10-29/The Register - Security_EY exposes 4TB+ SQL database to open internet for who knows how long.md": "EY exposes 4TB+ SQL database to open internet for who knows how long", "dump://2025-10-29/复旦白泽战队_成果分享|[ASE 2025] 在智能体应用的漏洞缓解中,开发者将面临怎样的艰难权衡?.md": "成果分享|[ASE 2025] 在智能体应用的漏洞缓解中,开发者将面临怎样的艰难权衡?", "dump://2025-10-29/希潭实验室_第140篇:美国NSA苹果手机_零点击_漏洞入侵中国国家授时中心的流程图梳理和分析 _ _三角测量_系列第6篇.md": "第140篇:美国NSA苹果手机_零点击_漏洞入侵中国国家授时中心的流程图梳理和分析 _ _三角测量_系列第6篇", "dump://2025-10-29/迪哥讲事_命令执行.md": "命令执行", "dump://2025-10-30/Instapaper_ Unread_PolarEdge Botnet Infected 25,000+ Devices and 140 C2 Servers Exploiting IoT Vulnerabilities.md": "Unread_PolarEdge Botnet Infected 25,000+ Devices and 140 C2 Servers Exploiting IoT Vulnerabilities", "dump://2025-10-30/Qualys Security Blog_What Security Teams Need to Know as PHP and IoT Exploits Surge.md": "What Security Teams Need to Know as PHP and IoT Exploits Surge", "dump://2025-10-30/The Register - Security_Proton trains new service to expose corporate infosec cover-ups.md": "Proton trains new service to expose corporate infosec cover-ups", "dump://2025-10-30/白泽安全实验室_新的ChatGPT Atlas浏览器首个漏洞让攻击者可以植入恶意代码.md": "新的ChatGPT Atlas浏览器首个漏洞让攻击者可以植入恶意代码", "dump://2025-10-31/Doonsec's feed_小红薯rce.md": "小红薯rce", "dump://2025-10-31/Exploit-DB.com RSS Feed_[webapps] Flowise 3.0.4 - Remote Code Execution (RCE).md": "[webapps] Flowise 3.0.4 - Remote Code Execution (RCE)", "dump://2025-10-31/Private Feed for M09Ic_0xbug starred mcw0_PoC.md": "0xbug starred mcw0_PoC", "dump://2025-10-31/The Register - Security_Attackers dig up $11M in Garden Finance crypto exploit.md": "Attackers dig up $11M in Garden Finance crypto exploit", "dump://2025-11-02/Private Feed for M09Ic_0xbug starred The-Pocket_PocketFlow.md": "0xbug starred The-Pocket_PocketFlow", "dump://2025-11-03/Private Feed for M09Ic_gh0stkey starred JaimePolop_RExpository.md": "gh0stkey starred JaimePolop_RExpository", "dump://2025-11-04/TG Soft Software House - News__strong_Vir.IT eXplorer PRO__strong__strong_ __strong_supera con il massimo risultato, l'ultimo _strong_test__strong_ effettuato a_strong_ Settembre 2025__strong_ da _strong_AppEsteem __strong_pe.md": "_strong_Vir.IT eXplorer PRO__strong__strong_ __strong_supera con il massimo risultato, l'ultimo _strong_test__strong_ effettuato a_strong_ Settembre 2025__strong_ da _strong_AppEsteem __strong_pe", "dump://2025-11-06/Private Feed for M09Ic_niudaii starred jiansiting_CVE-2025-59287.md": "niudaii starred jiansiting_CVE-2025-59287", "dump://2025-11-06/The Register - Security_Cisco warns of 'new attack variant' battering firewalls under exploit for 6 months.md": "Cisco warns of 'new attack variant' battering firewalls under exploit for 6 months", "dump://2025-11-07/Private Feed for M09Ic_su18 starred h0ny_NacosExploit.md": "su18 starred h0ny_NacosExploit", "dump://2025-11-07/The Register - Security_Bank of England says JLR's cyberattack contributed to UK's unexpectedly slower GDP growth.md": "Bank of England says JLR's cyberattack contributed to UK's unexpectedly slower GDP growth", "dump://2025-11-08/Instapaper_ Unread_2 Billion Email Addresses Were Exposed, and We Indexed Them All in Have I Been Pwned.md": "Unread_2 Billion Email Addresses Were Exposed, and We Indexed Them All in Have I Been Pwned", "dump://2025-11-10/The Register - Security_Microsoft teases agents that become ‘independent users within the workforce’.md": "Microsoft teases agents that become ‘independent users within the workforce’", "dump://2025-11-12/Instapaper_ Unread_Fuji la soluzione open source per la copia forense dei Mac con processori Intel e Apple Silicon.md": "Unread_Fuji la soluzione open source per la copia forense dei Mac con processori Intel e Apple Silicon", "dump://2025-11-12/Private Feed for M09Ic_niudaii starred InterceptSuite_ProxyBridge.md": "niudaii starred InterceptSuite_ProxyBridge", "dump://2025-11-12/Private Feed for M09Ic_uknowsec starred D4m0n_CVE-2025-50168-pwn2own-berlin-2025.md": "uknowsec starred D4m0n_CVE-2025-50168-pwn2own-berlin-2025", "dump://2025-11-12/The Hacker News_[Webinar] Learn How Leading Security Teams Reduce Attack Surface Exposure with DASR.md": "[Webinar] Learn How Leading Security Teams Reduce Attack Surface Exposure with DASR", "dump://2025-11-12/The Register - Security_Attackers turned Citrix, Cisco 0-day exploits into custom-malware hellscape.md": "Attackers turned Citrix, Cisco 0-day exploits into custom-malware hellscape", "dump://2025-11-13/赛博昆仑CERT_【复现】TongWeb ejbserver反序列化漏洞风险通告.md": "【复现】TongWeb ejbserver反序列化漏洞风险通告", "dump://2025-11-14/The Register - Security_Fortinet finally cops to critical make-me-admin bug under active exploitation.md": "Fortinet finally cops to critical make-me-admin bug under active exploitation", "dump://2025-11-15/Qualys Security Blog_Unauthenticated Authentication Bypass in Fortinet FortiWeb (CVE-2025-64446) Exploited in the Wild.md": "Unauthenticated Authentication Bypass in Fortinet FortiWeb (CVE-2025-64446) Exploited in the Wild", "dump://2025-11-17/Private Feed for M09Ic_LloydLabs starred nats-io_prometheus-nats-exporter.md": "LloydLabs starred nats-io_prometheus-nats-exporter", "dump://2025-11-17/纽创信安_相约蓉城・共话前沿|OSR与您在2025 ICCAD-Expo 不见不散.md": "相约蓉城・共话前沿|OSR与您在2025 ICCAD-Expo 不见不散", "dump://2025-11-18/Doonsec's feed_发几个POC.md": "发几个POC", "dump://2025-11-18/The Register - Security_Google Chrome bug exploited as an 0-day - patch now or risk full system compromise.md": "Google Chrome bug exploited as an 0-day - patch now or risk full system compromise", "dump://2025-11-20/The Register - Security_LLM-generated malware is improving, but don't expect autonomous attacks tomorrow.md": "LLM-generated malware is improving, but don't expect autonomous attacks tomorrow", "dump://2025-11-20/The Register - Security_Salesforce-linked data breach claims 200+ victims, has ShinyHunters’ fingerprints all over it.md": "Salesforce-linked data breach claims 200+ victims, has ShinyHunters’ fingerprints all over it", "dump://2025-11-21/Private Feed for M09Ic_DVKunion starred Esonhugh_ingressNightmare-CVE-2025-1974-exps.md": "DVKunion starred Esonhugh_ingressNightmare-CVE-2025-1974-exps", "dump://2025-11-21/The Register - Security_ShinyHunters 'does not like Salesforce at all,' claims the crew accessed Gainsight 3 months ago.md": "ShinyHunters 'does not like Salesforce at all,' claims the crew accessed Gainsight 3 months ago", "dump://2025-11-21/纽创信安_直击ICCAD-Expo!纽创信安深度解析PQC IP防御之道,后量子安全新品引关注.md": "直击ICCAD-Expo!纽创信安深度解析PQC IP防御之道,后量子安全新品引关注", "dump://2025-11-23/Instapaper_ Unread_Explainer .DS_Store files.md": "Unread_Explainer .DS_Store files", "dump://2025-11-24/Qualys Security Blog_From Vision to Value_ Gartner® Identifies Qualys as 2025 Magic Quadrant™ Leader in Exposure Assessment Platforms.md": "From Vision to Value_ Gartner® Identifies Qualys as 2025 Magic Quadrant™ Leader in Exposure Assessment Platforms", "dump://2025-11-24/The Register - Security_Years-old bugs in open source tool left every major cloud open to disruption.md": "Years-old bugs in open source tool left every major cloud open to disruption", "dump://2025-11-27/Doonsec's feed_高质量漏洞库.md": "高质量漏洞库", "dump://2025-11-27/The Register - Security_OpenAI cuts off Mixpanel after analytics leak exposes API users.md": "OpenAI cuts off Mixpanel after analytics leak exposes API users", "dump://2025-11-28/Private Feed for M09Ic_ManassehZhou starred pocket-id_pocket-id.md": "ManassehZhou starred pocket-id_pocket-id", "dump://2025-11-30/Doonsec's feed_RCE安全(一).md": "RCE安全(一)", "dump://2025-12-01/The Register - Security_South Korea's answer to Amazon admits breach exposed 33.7M customers.md": "South Korea's answer to Amazon admits breach exposed 33.7M customers", "dump://2025-12-02/Exploit-DB.com RSS Feed_[webapps] Piwigo 13.6.0 - SQL Injection.md": "[webapps] Piwigo 13.6.0 - SQL Injection", "dump://2025-12-02/Exploit-DB.com RSS Feed_[webapps] YOURLS 1.8.2 - Cross-Site Request Forgery (CSRF).md": "[webapps] YOURLS 1.8.2 - Cross-Site Request Forgery (CSRF)", "dump://2025-12-02/Exploit-DB.com RSS Feed_[webapps] phpIPAM 1.5.1 - SQL Injection.md": "[webapps] phpIPAM 1.5.1 - SQL Injection", "dump://2025-12-02/Exploit-DB.com RSS Feed_[webapps] phpIPAM 1.6 - Reflected Cross-Site Scripting (XSS).md": "[webapps] phpIPAM 1.6 - Reflected Cross-Site Scripting (XSS)", "dump://2025-12-02/Exploit-DB.com RSS Feed_[webapps] phpIPAM 1.6 - Reflected-Cross-Site Scripting (XSS).md": "[webapps] phpIPAM 1.6 - Reflected-Cross-Site Scripting (XSS)", "dump://2025-12-02/Exploit-DB.com RSS Feed_[webapps] phpMyFAQ 3.1.7 - Reflected Cross-Site Scripting (XSS).md": "[webapps] phpMyFAQ 3.1.7 - Reflected Cross-Site Scripting (XSS)", "dump://2025-12-03/Exploit-DB.com RSS Feed_[webapps] Django 5.1.13 - SQL Injection.md": "[webapps] Django 5.1.13 - SQL Injection", "dump://2025-12-03/Exploit-DB.com RSS Feed_[webapps] MaNGOSWebV4 4.0.6 - Reflected XSS.md": "[webapps] MaNGOSWebV4 4.0.6 - Reflected XSS", "dump://2025-12-03/Exploit-DB.com RSS Feed_[webapps] MobileDetect 2.8.31 - Cross-Site Scripting (XSS).md": "[webapps] MobileDetect 2.8.31 - Cross-Site Scripting (XSS)", "dump://2025-12-03/Exploit-DB.com RSS Feed_[webapps] OpenRepeater 2.1 - OS Command Injection.md": "[webapps] OpenRepeater 2.1 - OS Command Injection", "dump://2025-12-03/Exploit-DB.com RSS Feed_[webapps] PluckCMS 4.7.10 - Unrestricted File Upload.md": "[webapps] PluckCMS 4.7.10 - Unrestricted File Upload", "dump://2025-12-03/Exploit-DB.com RSS Feed_[webapps] RosarioSIS 6.7.2 - Cross Site Scripting (XSS).md": "[webapps] RosarioSIS 6.7.2 - Cross Site Scripting (XSS)", "dump://2025-12-03/Exploit-DB.com RSS Feed_[webapps] RosarioSIS 6.7.2 - Cross-Site Scripting (XSS).md": "[webapps] RosarioSIS 6.7.2 - Cross-Site Scripting (XSS)", "dump://2025-12-03/Exploit-DB.com RSS Feed_[webapps] openSIS Community Edition 8.0 - SQL Injection.md": "[webapps] openSIS Community Edition 8.0 - SQL Injection", "dump://2025-12-03/Exploit-DB.com RSS Feed_[webapps] phpIPAM 1.4 - SQL-Injection.md": "[webapps] phpIPAM 1.4 - SQL-Injection", "dump://2025-12-03/Exploit-DB.com RSS Feed_[webapps] phpMyAdmin 5.0.0 - SQL Injection.md": "[webapps] phpMyAdmin 5.0.0 - SQL Injection", "dump://2025-12-03/Exploit-DB.com RSS Feed_[webapps] phpMyFAQ 2.9.8 - Cross-Site Request Forgery (CSRF).md": "[webapps] phpMyFAQ 2.9.8 - Cross-Site Request Forgery (CSRF)", "dump://2025-12-03/Exploit-DB.com RSS Feed_[webapps] phpMyFAQ 2.9.8 - Cross-Site Request Forgery(CSRF).md": "[webapps] phpMyFAQ 2.9.8 - Cross-Site Request Forgery(CSRF)", "dump://2025-12-03/Exploit-DB.com RSS Feed_[webapps] phpMyFaq 2.9.8 - Cross Site Request Forgery (CSRF).md": "[webapps] phpMyFaq 2.9.8 - Cross Site Request Forgery (CSRF)", "dump://2025-12-03/Private Feed for M09Ic_joaoviictorti starred ejpir_CVE-2025-55182-poc.md": "joaoviictorti starred ejpir_CVE-2025-55182-poc", "dump://2025-12-03/The Register - Security_'Exploitation is imminent' as 39 percent of cloud environs have max-severity React hole.md": "'Exploitation is imminent' as 39 percent of cloud environs have max-severity React hole", "dump://2025-12-04/Private Feed for M09Ic_ManassehZhou starred vercel_next.js.md": "ManassehZhou starred vercel_next.js", "dump://2025-12-04/Private Feed for M09Ic_Rvn0xsy starred Ashwesker_Blackash-CVE-2025-55182.md": "Rvn0xsy starred Ashwesker_Blackash-CVE-2025-55182", "dump://2025-12-04/Private Feed for M09Ic_safedv starred ejpir_CVE-2025-55182-research.md": "safedv starred ejpir_CVE-2025-55182-research", "dump://2025-12-04/Qualys Security Blog_Active Exploitation of 7-Zip RCE Vulnerability Shows Why Manual Patching is No Longer an Option.md": "Active Exploitation of 7-Zip RCE Vulnerability Shows Why Manual Patching is No Longer an Option", "dump://2025-12-05/360威胁情报中心_APT-C-53(Gamaredon)利用CVE-2025-8088进行网络钓鱼攻击活动.md": "APT-C-53(Gamaredon)利用CVE-2025-8088进行网络钓鱼攻击活动", "dump://2025-12-05/Doonsec's feed_CVE-2025-55182 的解释和完整的 RCE PoC.md": "CVE-2025-55182 的解释和完整的 RCE PoC", "dump://2025-12-05/Doonsec's feed_CVE-2025-55182:React Server Components.md": "CVE-2025-55182:React Server Components", "dump://2025-12-05/Doonsec's feed_CVE-2025-55182:React_Next.js RCE漏洞验证与分析.md": "CVE-2025-55182:React_Next.js RCE漏洞验证与分析", "dump://2025-12-05/Doonsec's feed_Next.js RCE(CVE-2025-55182) POC和EXP(凑个热闹).md": "Next.js RCE(CVE-2025-55182) POC和EXP(凑个热闹)", "dump://2025-12-05/Doonsec's feed_Next.js无条件RCE漏洞 - 浏览器插件.md": "Next.js无条件RCE漏洞 - 浏览器插件", "dump://2025-12-05/Doonsec's feed_REACT RCE CVE-2025-55182 复现.md": "REACT RCE CVE-2025-55182 复现", "dump://2025-12-05/Doonsec's feed_React CVE-2025-55182 漏洞介绍与 AWD 靶场复现环境.md": "React CVE-2025-55182 漏洞介绍与 AWD 靶场复现环境", "dump://2025-12-05/Doonsec's feed_React Server Components 远程RCE利用工具.md": "React Server Components 远程RCE利用工具", "dump://2025-12-05/Doonsec's feed_React漏洞有感.md": "React漏洞有感", "dump://2025-12-05/Doonsec's feed_WebXR漏洞影响40亿Chromium用户,请立即更新浏览器.md": "WebXR漏洞影响40亿Chromium用户,请立即更新浏览器", "dump://2025-12-05/Doonsec's feed_【已复现】CVE-2025-55182:Next.js RCE漏洞.md": "【已复现】CVE-2025-55182:Next.js RCE漏洞", "dump://2025-12-05/Doonsec's feed_【已复现】Next.js 无条件RCE,回显Payload+内存马Payload.md": "【已复现】Next.js 无条件RCE,回显Payload+内存马Payload", "dump://2025-12-05/Doonsec's feed_学员分享 _ 我的 OSED 漏洞利用实战备考历程.md": "学员分享 _ 我的 OSED 漏洞利用实战备考历程", "dump://2025-12-05/Doonsec's feed_新鲜出炉 _ CVE-2025-66478打了一个小鬼子的站.md": "新鲜出炉 _ CVE-2025-66478打了一个小鬼子的站", "dump://2025-12-05/Doonsec's feed_极危!覆盖面广!有关CVE-2025-55182漏洞分析与检测.md": "极危!覆盖面广!有关CVE-2025-55182漏洞分析与检测", "dump://2025-12-05/Doonsec's feed_满分RCE漏洞__Next.js!!poc全.md": "满分RCE漏洞__Next.js!!poc全", "dump://2025-12-05/Doonsec's feed_紧急|已复现|CVE-2025-55182漏洞全景分析.md": "紧急|已复现|CVE-2025-55182漏洞全景分析", "dump://2025-12-05/Doonsec's feed_高危级Splunk漏洞:Windows文件权限配置错误导致本地提权.md": "高危级Splunk漏洞:Windows文件权限配置错误导致本地提权", "dump://2025-12-05/Private Feed for M09Ic_ZeddYu starred lachlan2k_React2Shell-CVE-2025-55182-original-poc.md": "ZeddYu starred lachlan2k_React2Shell-CVE-2025-55182-original-poc", "dump://2025-12-05/The Register - Security_UK pushes ahead with facial recognition expansion despite civil liberties backlash.md": "UK pushes ahead with facial recognition expansion despite civil liberties backlash", "dump://2025-12-05/赛博昆仑CERT_【复现】React Server Components远程代码执行漏洞(CVE-2025-55182)风险通告.md": "【复现】React Server Components远程代码执行漏洞(CVE-2025-55182)风险通告", "dump://2025-12-06/Instapaper_ Unread_2025 Year in Review Open Source DFIR Tools and Malware Analysis Projects.md": "Unread_2025 Year in Review Open Source DFIR Tools and Malware Analysis Projects", "dump://2025-12-06/Instapaper_ Unread_mesquidarForensicsTools A list of free and open forensics analysis tools and other resources.md": "Unread_mesquidarForensicsTools A list of free and open forensics analysis tools and other resources", "dump://2025-12-08/Doonsec's feed_[CVE code Trace]CVE-2025-55182 react code sink trace.md": "[CVE code Trace]CVE-2025-55182 react code sink trace", "dump://2025-12-08/Exploit-DB.com RSS Feed_[webapps] Pluck 4.7.7-dev2 - PHP Code Execution.md": "[webapps] Pluck 4.7.7-dev2 - PHP Code Execution", "dump://2025-12-08/Private Feed for M09Ic_lz520520 starred D4m0n_CVE-2025-50168-pwn2own-berlin-2025.md": "lz520520 starred D4m0n_CVE-2025-50168-pwn2own-berlin-2025", "dump://2025-12-08/The Register - Security_China’s first reusable rocket explodes, but its onboard Ethernet network flew.md": "China’s first reusable rocket explodes, but its onboard Ethernet network flew", "dump://2025-12-09/Instapaper_ Unread_Percezione, inazione e reazione. Come combattere nella battaglia (dis)informativa.md": "Unread_Percezione, inazione e reazione. Come combattere nella battaglia (dis)informativa", "dump://2025-12-09/Instapaper_ Unread_Spyware Vendor Intellexa Used 15 Zero-Days Since 2021, Deploying Predator via “smack” iOS Exploit Chain.md": "Unread_Spyware Vendor Intellexa Used 15 Zero-Days Since 2021, Deploying Predator via “smack” iOS Exploit Chain", "dump://2025-12-09/The Register - Security_Researchers spot 700 percent increase in hypervisor ransomware attacks.md": "Researchers spot 700 percent increase in hypervisor ransomware attacks", "dump://2025-12-10/Instapaper_ Unread_Home automation and IoT as a source of evidence Forensic analysis of Home Assistant.md": "Unread_Home automation and IoT as a source of evidence Forensic analysis of Home Assistant", "dump://2025-12-10/The Register - Security_Microsoft won’t fix .NET RCE bug affecting slew of enterprise apps, researchers say.md": "Microsoft won’t fix .NET RCE bug affecting slew of enterprise apps, researchers say", "dump://2025-12-10/Trend Micro Research, News and Perspectives_CVE-2025-55182_ React2Shell Analysis, Proof-of-Concept Chaos, and In-the-Wild Exploitation.md": "CVE-2025-55182_ React2Shell Analysis, Proof-of-Concept Chaos, and In-the-Wild Exploitation", "dump://2025-12-11/Instapaper_ Unread_Tool 4n6pi - A lightweight, open source, forensic disk imager.md": "Unread_Tool 4n6pi - A lightweight, open source, forensic disk imager", "dump://2025-12-11/Private Feed for M09Ic_Ridter starred BeichenDream_CVE-2025-55182-GodzillaMemoryShell.md": "Ridter starred BeichenDream_CVE-2025-55182-GodzillaMemoryShell", "dump://2025-12-11/Qualys Security Blog_React2Shell_ Decoding CVE-2025-55182 – The Silent Threat in React Server Components.md": "React2Shell_ Decoding CVE-2025-55182 – The Silent Threat in React Server Components", "dump://2025-12-12/360威胁情报中心_APT-C-26(Lazarus)组织利用WinRAR漏洞部署Blank Grabber木马的技术分析.md": "APT-C-26(Lazarus)组织利用WinRAR漏洞部署Blank Grabber木马的技术分析", "dump://2025-12-12/Private Feed for M09Ic_gh0stkey starred pocketbase_pocketbase.md": "gh0stkey starred pocketbase_pocketbase", "dump://2025-12-12/The Register - Security_Half of exposed React servers remain unpatched amid active exploitation.md": "Half of exposed React servers remain unpatched amid active exploitation", "dump://2025-12-12/The Register - Security_Microsoft RasMan DoS 0-day gets unofficial patch - and a working exploit.md": "Microsoft RasMan DoS 0-day gets unofficial patch - and a working exploit", "dump://2025-12-15/Doonsec's feed_[SWPUCTF 2021 新生赛]babyrce.md": "[SWPUCTF 2021 新生赛]babyrce", "dump://2025-12-15/Doonsec's feed_[SWPUCTF 2021 新生赛]easyrce.md": "[SWPUCTF 2021 新生赛]easyrce", "dump://2025-12-15/Private Feed for M09Ic_timwhitez starred myzxcg_NoNameExploit.md": "timwhitez starred myzxcg_NoNameExploit", "dump://2025-12-15/The Register - Security_Apple, Google forced to issue emergency 0-day patches.md": "Apple, Google forced to issue emergency 0-day patches", "dump://2025-12-16/Exploit-DB.com RSS Feed_[webapps] Summar Employee Portal 3.98.0 - Authenticated SQL Injection.md": "[webapps] Summar Employee Portal 3.98.0 - Authenticated SQL Injection", "dump://2025-12-16/Exploit-DB.com RSS Feed_[webapps] esm-dev 136 - Path Traversal.md": "[webapps] esm-dev 136 - Path Traversal", "dump://2025-12-16/TG Soft Software House - News__strong_Vir.IT eXplorer PRO__strong__strong_ __strong_supera con il massimo risultato, l'ultimo _strong_test__strong_ effettuato a_strong_ Ottobre 2025__strong_ da _strong_AppEsteem __strong_per.md": "_strong_Vir.IT eXplorer PRO__strong__strong_ __strong_supera con il massimo risultato, l'ultimo _strong_test__strong_ effettuato a_strong_ Ottobre 2025__strong_ da _strong_AppEsteem __strong_per", "dump://2025-12-16/The Register - Security_Analytics provider_ We didn't expose smut site data to crims.md": "Analytics provider_ We didn't expose smut site data to crims", "dump://2025-12-17/Private Feed for M09Ic_su18 forked su18_jolokia-exploitation-toolkit from laluka_jolokia-exploitation-toolkit.md": "su18 forked su18_jolokia-exploitation-toolkit from laluka_jolokia-exploitation-toolkit", "dump://2025-12-17/Private Feed for M09Ic_su18 starred laluka_jolokia-exploitation-toolkit.md": "su18 starred laluka_jolokia-exploitation-toolkit", "dump://2025-12-17/Qualys Security Blog_Navigating Change_ Evolving Your Exposure Management Strategy in a Post-Kenna World with Qualys.md": "Navigating Change_ Evolving Your Exposure Management Strategy in a Post-Kenna World with Qualys", "dump://2025-12-17/The Register - Security_England keeping pen and paper exams despite limited digital expansion.md": "England keeping pen and paper exams despite limited digital expansion", "dump://2025-12-18/The Register - Security_Another bad week for SonicWall as SMA 1000 zero-day under active exploit.md": "Another bad week for SonicWall as SMA 1000 zero-day under active exploit", "dump://2025-12-18/The Register - Security_React2Shell exploitation spreads as Microsoft counts hundreds of hacked machines.md": "React2Shell exploitation spreads as Microsoft counts hundreds of hacked machines", "dump://2025-12-19/Private Feed for M09Ic_mgeeky starred BaffledJimmy_NebulaPOC.md": "mgeeky starred BaffledJimmy_NebulaPOC", "dump://2025-12-19/The Register - Security_China turns on a vast experimental network it says is an heir to ARPANET.md": "China turns on a vast experimental network it says is an heir to ARPANET", "dump://2025-12-19/The Register - Security_HPE tells customers to patch fast as OneView RCE bug scores a perfect 10.md": "HPE tells customers to patch fast as OneView RCE bug scores a perfect 10", "dump://2025-12-21/Doonsec's feed_GitHub上所有CVE漏洞利用合集-并持续更新.md": "GitHub上所有CVE漏洞利用合集-并持续更新", "dump://2025-12-21/Doonsec's feed_详解MagicDot漏洞及其利用手段.md": "详解MagicDot漏洞及其利用手段", "dump://2025-12-21/Private Feed for M09Ic_Ridter starred exo-explore_exo.md": "Ridter starred exo-explore_exo", "dump://2025-12-22/Private Feed for M09Ic_Ridter starred pr0v3rbs_CVE-2025-32463_chwoot.md": "Ridter starred pr0v3rbs_CVE-2025-32463_chwoot", "dump://2025-12-24/Doonsec's feed_东胜物流软件 WorkFlowGridSource.aspx SQL注入漏洞.md": "东胜物流软件 WorkFlowGridSource.aspx SQL注入漏洞", "dump://2025-12-24/Doonsec's feed_服务号存在注入之有意思的edu漏洞.md": "服务号存在注入之有意思的edu漏洞", "dump://2025-12-24/Doonsec's feed_浙江宇视视频管理系统VM.php接口存在远程命令执行漏洞 附POC.md": "浙江宇视视频管理系统VM.php接口存在远程命令执行漏洞 附POC", "dump://2025-12-24/Doonsec's feed_读懂《GB_T 30279-2020 信息安全技术 网络安全漏洞分类分级指南》.md": "读懂《GB_T 30279-2020 信息安全技术 网络安全漏洞分类分级指南》", "dump://2025-12-25/Exploit-DB.com RSS Feed_[webapps] Chained Quiz 1.3.5 - Unauthenticated Insecure Direct Object Reference via Cookie.md": "[webapps] Chained Quiz 1.3.5 - Unauthenticated Insecure Direct Object Reference via Cookie", "dump://2025-12-25/Exploit-DB.com RSS Feed_[webapps] FreeBSD rtsold 15.x - Remote Code Execution via DNSSL.md": "[webapps] FreeBSD rtsold 15.x - Remote Code Execution via DNSSL", "dump://2025-12-25/Exploit-DB.com RSS Feed_[webapps] WordPress Quiz Maker 6.7.0.56 - SQL Injection.md": "[webapps] WordPress Quiz Maker 6.7.0.56 - SQL Injection", "dump://2025-12-30/The Register - Security_An early end to the holidays_ 'Heartbleed of MongoDB' is now under active exploit.md": "An early end to the holidays_ 'Heartbleed of MongoDB' is now under active exploit", "dump://2025-12-30/The Register - Security_Korean telco failed at femtocell security, exposed customers to snooping and fraud.md": "Korean telco failed at femtocell security, exposed customers to snooping and fraud", "dump://2026-06-01/www.theregister.com - Articles_Palo Alto VPN bug graduates from advisory to active exploitation.md": "Palo Alto VPN bug graduates from advisory to active exploitation", "dump://2026-06-01/www.theregister.com - Articles_Password manager Dashlane suspends customer accounts amid brute-force attacks.md": "Password manager Dashlane suspends customer accounts amid brute-force attacks", "dump://2026-06-03/360威胁情报中心_APT-C-26(Lazarus)组织利用CVE-2025-55182与Copperhedge组件的攻击行动分析.md": "APT-C-26(Lazarus)组织利用CVE-2025-55182与Copperhedge组件的攻击行动分析", "dump://2026-06-03/Private Feed for M09Ic_zsxsoft forked zsxsoft_opensrc from vercel-labs_opensrc.md": "zsxsoft forked zsxsoft_opensrc from vercel-labs_opensrc", "dump://2026-06-03/www.theregister.com - Articles_Another bug hunter leaks Microsoft exploits in defiance of company’s handling of vulnerability disclosures.md": "Another bug hunter leaks Microsoft exploits in defiance of company’s handling of vulnerability disclosures", "dump://2026-06-03/www.theregister.com - Articles_UK banks offered access to OpenAI’s GPT-5.5 amid exclusion from Anthropic’s Glasswing expansion.md": "UK banks offered access to OpenAI’s GPT-5.5 amid exclusion from Anthropic’s Glasswing expansion", "dump://2026-06-03/安全419_安全419|一周国际网安资讯:供应链攻击肆虐 AI驱动漏洞成常态.md": "安全419|一周国际网安资讯:供应链攻击肆虐 AI驱动漏洞成常态", "dump://2026-06-04/www.theregister.com - Articles_Nobody needs Mythos or 0-days to build a chaos-causing computer worm – free open source models work just fine.md": "Nobody needs Mythos or 0-days to build a chaos-causing computer worm – free open source models work just fine", "dump://2026-06-05/Exploit-DB.com RSS Feed_[webapps] WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection.md": "[webapps] WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection", "dump://2026-06-05/Private Feed for M09Ic_0xbug starred expo_expo.md": "0xbug starred expo_expo", "dump://2026-06-05/Private Feed for M09Ic_b1nhack starred farazsth98_exploit-CVE-2025-39946.md": "b1nhack starred farazsth98_exploit-CVE-2025-39946", "dump://2026-06-05/www.theregister.com - Articles_World Food Programme breach exposes data of 600k vulnerable Gazan families.md": "World Food Programme breach exposes data of 600k vulnerable Gazan families", "dump://2026-06-06/Private Feed for M09Ic_TideSec starred strivepan_ActiveMQ-cve-2026-42588-scanner-gui.md": "TideSec starred strivepan_ActiveMQ-cve-2026-42588-scanner-gui", "dump://2026-06-07/Private Feed for M09Ic_WAY29 starred mattpocock_skills.md": "WAY29 starred mattpocock_skills", "dump://2026-06-08/Exploit-DB.com RSS Feed_[webapps] OpenEMR 7.0.2 - Arbitrary File Read.md": "[webapps] OpenEMR 7.0.2 - Arbitrary File Read", "dump://2026-06-08/Private Feed for M09Ic_Mel0day starred areal-project_AReaL.md": "Mel0day starred areal-project_AReaL", "dump://2026-06-08/Private Feed for M09Ic_Mel0day starred jingyaogong_minimind.md": "Mel0day starred jingyaogong_minimind", "dump://2026-06-09/Private Feed for M09Ic_Mel0day starred nexu-io_html-anything.md": "Mel0day starred nexu-io_html-anything", "dump://2026-06-09/Private Feed for M09Ic_Mel0day starred verl-project_verl.md": "Mel0day starred verl-project_verl", "dump://2026-06-09/Private Feed for M09Ic_zema1 starred exploits-forsale_prefetch-tool.md": "zema1 starred exploits-forsale_prefetch-tool", "dump://2026-06-09/www.theregister.com - Articles_Chrome's zero-day Whac-A-Mole continues with fifth exploited bug of the year.md": "Chrome's zero-day Whac-A-Mole continues with fifth exploited bug of the year", "dump://2026-06-09/www.theregister.com - Articles_Miasma worms its way onto GitHub as attack kit goes open source.md": "Miasma worms its way onto GitHub as attack kit goes open source", "dump://2026-06-10/Instapaper_ Unread_BitLocker Decryption Today YellowKey Explained And Where Passware Steps In.md": "Unread_BitLocker Decryption Today YellowKey Explained And Where Passware Steps In", "dump://2026-06-10/Instapaper_ Unread_New Software Perceptor.md": "Unread_New Software Perceptor", "dump://2026-06-11/Instapaper_ Unread_GreatXML BitLocker Bypass 0-Day Exploited Via Windows Defender Offline Scan.md": "Unread_GreatXML BitLocker Bypass 0-Day Exploited Via Windows Defender Offline Scan", "dump://2026-06-11/Private Feed for M09Ic_CHYbeta starred BishopFox_CVE-2026-34908-check.md": "CHYbeta starred BishopFox_CVE-2026-34908-check", "dump://2026-06-11/www.theregister.com - Articles_ShinyHunters hacked 100+ orgs by exploiting an Oracle PeopleSoft 0-day.md": "ShinyHunters hacked 100+ orgs by exploiting an Oracle PeopleSoft 0-day", "dump://2026-06-12/Private Feed for M09Ic_CHYbeta starred vercel-labs_deepsec.md": "CHYbeta starred vercel-labs_deepsec", "dump://2026-06-12/TG Soft Software House - News__strong_Vir.IT eXplorer PRO__strong__strong_ __strong_supera con il massimo risultato, l'ultimo _strong_test__strong_ effettuato ad_strong_ aprile 2026__strong_ da _strong_AppEsteem __strong_per i _st.md": "_strong_Vir.IT eXplorer PRO__strong__strong_ __strong_supera con il massimo risultato, l'ultimo _strong_test__strong_ effettuato ad_strong_ aprile 2026__strong_ da _strong_AppEsteem __strong_per i _st", "dump://2026-06-12/www.theregister.com - Articles_Plymouth council exposes hundreds in latest local government email gaffe.md": "Plymouth council exposes hundreds in latest local government email gaffe", "dump://2026-06-14/Private Feed for M09Ic_Rvn0xsy starred h4ckf0r0day_obscura.md": "Rvn0xsy starred h4ckf0r0day_obscura", "dump://2026-06-16/Private Feed for M09Ic_TideSec starred adysec_nuclei_poc.md": "TideSec starred adysec_nuclei_poc", "dump://2026-06-17/安全419_安全419|一周国际网安资讯:AI漏洞频发 供应链攻击持续升级.md": "安全419|一周国际网安资讯:AI漏洞频发 供应链攻击持续升级", "dump://2026-06-18/Instapaper_ Unread_Explainer Disk encryption.md": "Unread_Explainer Disk encryption", "dump://2026-06-18/Trend Micro Research, News and Perspectives_PeopleSoft PeopleTools Pre-Authentication RCE_ A PSIGW SSRF Chain That Executes Inside the JVM.md": "PeopleSoft PeopleTools Pre-Authentication RCE_ A PSIGW SSRF Chain That Executes Inside the JVM", "dump://2026-06-20/Doonsec's feed_[安全工具]JsonExp — Fastjson_Jackson 反序列化漏洞自动化检测利器.md": "[安全工具]JsonExp — Fastjson_Jackson 反序列化漏洞自动化检测利器", "dump://2026-06-20/Instapaper_ Unread_New iPhone BootROM Vulnerability Exposes Apple SoCs to Full Chain-of-Trust Compromise.md": "Unread_New iPhone BootROM Vulnerability Exposes Apple SoCs to Full Chain-of-Trust Compromise", "dump://2026-06-23/Private Feed for M09Ic_timwhitez starred vercel_eve.md": "timwhitez starred vercel_eve", "dump://2026-06-23/Trend Micro Research, News and Perspectives_From Langflow to Monero_ Inside CVE-2026-33017 Cryptominer.md": "From Langflow to Monero_ Inside CVE-2026-33017 Cryptominer", "dump://2026-06-25/Private Feed for M09Ic_Mel0day starred modelscope_easydistill.md": "Mel0day starred modelscope_easydistill", "dump://2026-06-26/表图_[译苑雅集Vol. 12]高强度使用 Mythos 两个月后,Cloudflare 打造了一套不依赖单一模型的企业级漏洞发现工程系统.md": "[译苑雅集Vol. 12]高强度使用 Mythos 两个月后,Cloudflare 打造了一套不依赖单一模型的企业级漏洞发现工程系统", "dump://2026-06-27/Instapaper_ Unread_Explainer sysdiagnose and logarchives.md": "Unread_Explainer sysdiagnose and logarchives", "dump://2026-06-27/Instapaper_ Unread_Thumbcache Explained A Digital Investigator’s Guide to Windows Caching Artifacts.md": "Unread_Thumbcache Explained A Digital Investigator’s Guide to Windows Caching Artifacts", "dump://2026-06-28/Private Feed for M09Ic_FunnyWolf starred mattpocock_skills.md": "FunnyWolf starred mattpocock_skills", "dump://2026-06-29/Private Feed for M09Ic_Mel0day starred datacurve-ai_deep-swe.md": "Mel0day starred datacurve-ai_deep-swe", "dump://2026-06-29/Private Feed for M09Ic_Mel0day starred deepseek-ai_DeepSpec.md": "Mel0day starred deepseek-ai_DeepSpec", "dump://2026-06-30/安全419_安全419 _ 一周国际网安资讯:Cisco曝9.8分漏洞 VulnGPT提升3倍漏洞挖掘效率.md": "安全419 _ 一周国际网安资讯:Cisco曝9.8分漏洞 VulnGPT提升3倍漏洞挖掘效率", "https://isc.sans.edu/diary/rss/32196": "CVE-2017-11882 Will Never Die, (Wed, Aug 13th)", "https://y4tacker.github.io/2025/08/18/year/2025/08/%E6%B5%85%E6%9E%90SmarBI%E6%9C%80%E6%96%B0%E6%9D%83%E9%99%90%E7%BB%95%E8%BF%87%E8%87%B4RCE/": "浅析SmarBI最新权限绕过致RCE", "https://isc.sans.edu/diary/rss/32296": "Exploring Uploads in a Dshield Honeypot Environment [Guest Diary], (Thu, Sep 18th)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496464&idx=1&sn=4ae989f66cbc49dad8bf3659e733c8ec": "CNVD漏洞周报2025年第42期", "https://forum.butian.net/share/4634": "密码重置漏洞挖掘指南:从原理到实战的完整路径", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496500&idx=1&sn=c2569737ef72fd1453f5a16e699d6288": "CNVD漏洞周报2025年第44期", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585513&idx=2&sn=a34446a3dfe4b71cba0efc8ebea28195": "高危runC漏洞曝光 黑客可突破Docker容器逃逸", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496518&idx=1&sn=b8a554dcbd1edea242fbdc5d6ad712a5": "CNVD漏洞周报2025年第45期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496556&idx=1&sn=950c38b98041331ffc86f75d2b526067": "CNVD漏洞周报2025年第47期", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247515718&idx=2&sn=9593f238015810c1f1f3ad14b678f530": "【安全工具更新】CVE-2025-55182 批量检测工具,已适配哥斯拉内存马注入连接。", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497069&idx=1&sn=ba34ac75cc3c9a86a1906196d7c90d66": "2025年11月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496571&idx=1&sn=cc5d16d7609a4315335ae839fff90ab8": "CNVD漏洞周报2025年第48期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496585&idx=1&sn=a03ad373f60885db1914f8b180dcc7d2": "CNVD漏洞周报2025年第49期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496602&idx=1&sn=e818fe3c71e6be4b1bed1d304c101eb2": "CNVD漏洞周报2025年第50期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496982&idx=1&sn=7690d642293464e9f42ce580882a52f3": "CNVD漏洞周报2026年第21期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497001&idx=1&sn=1223fec580286cca1053f468d07327da": "CNVD漏洞周报2026年第22期", "https://mp.weixin.qq.com/s/erke6MzJ5p2kwqbGKzJEVw": "【报名开启】「智弈」AI智能体攻防实战沙龙议程抢先看", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497044&idx=1&sn=119e670ee5cdceeda5e2f9cd8c1660b0": "CNVD漏洞周报2026年第24期", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495497&idx=1&sn=33725ee0f54802215be2a6e133622545": "2026攻防演练必修高危漏洞集合(2.0版)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497061&idx=1&sn=3c4c3448f4b0231181a184a26520c420": "CNVD漏洞周报2026年第25期", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494464&idx=1&sn=59ebc02c5418d2dc488f00c279041d2b": "【技术细节已公开】Cisco ISE / ISE-PIC 未授权远程代码执行漏洞(CVE-2025-20281)", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138185&idx=2&sn=cd47783459bb653814541e702f4559e9": "国家网信办约谈英伟达!要求说明H20芯片漏洞后门安全风险;史上最离谱的“安全漏洞”,黑客可远程控制成人玩具造成现实伤害 | 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651207302&idx=1&sn=ff295aba92aaf5e30ee1fe494c285cd7": "【TSRC盛夏加测令】部分业务延长测试时间|4倍赏金/10万+漏洞持续解锁!", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247495266&idx=1&sn=b41014368afd3e192c46fd604881d3ca": "如何挖掘大模型漏洞?字节/百度/蚂蚁安全专家分享实战技法", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247539741&idx=1&sn=31425a5d2aaf37bdc772f0d33d0b7d2e": "工控漏洞 | 霍尼韦尔PKS 系统漏洞可远程“操控”生产过程", "https://cyble.com/blog/the-week-in-new-vulnerabilities-exploited-quickly/": "The Week in Vulnerabilities: 1 in 5 New Vulnerabilities Exploited Quickly", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493957&idx=3&sn=4a3c229aca47cb40afa7530c66c1fc7b": "漏洞预警 | 汉王e脸通智慧园区管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247493957&idx=2&sn=2ca4c9c2c6fb83b363704f72385ec49f": "漏洞预警 | 票友ERP管理系统信息泄露漏洞", "https://medium.com/@jankammerath/tea-app-hack-disassembling-the-ridiculous-app-source-code-bc585e15bf4f": "Tea App Hack: Disassembling The Ridiculous App Source Code", "https://mp.weixin.qq.com/s?__biz=MzU0NDI5NTY4OQ==&mid=2247486442&idx=1&sn=3aeb36e812bd9139ea5205470cb42d23": "LLMxCPG:代码属性图与大语言模型漏洞检测框架", "https://isc.sans.edu/diary/rss/32168": "ISC Stormcast For Monday, August 4th, 2025 https://isc.sans.edu/podcastdetail/9554, (Mon, Aug 4th)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584076&idx=2&sn=8182a7dc58b0b2aac9a7acf838b6e36d": "安全动态回顾|工业和信息化领域人工智能安全治理标准体系发布 网信办就H20算力芯片漏洞后门安全风险约谈英伟达公司", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507860&idx=1&sn=ecc26b8161180e4ebc644a0602099118": "漏洞通告 | 1Panel远程命令注入漏洞", "https://infosecwriteups.com/day-1-recon-manual-reconnaissance-how-i-explore-targets-like-a-hacker-but-with-good-intentions-04b61864d1ea?source=rss----7b722bfd1b8d---4": "DAY 1 Recon: Manual Reconnaissance: How I Explore Targets Like a Hacker (But With Good Intentions)", "https://www.eff.org/deeplinks/2025/08/eff-court-chatbot-output-can-reflect-human-expression": "EFF to Court: Chatbot Output Can Reflect Human Expression", "https://mp.weixin.qq.com/s?__biz=Mzg2NDcwNjkzNw==&mid=2247487705&idx=1&sn=dfffb8fe36768a26ba5bb4afc776d565": "断点调试 | 打碎双层加密,进入后台直接拿下多个漏洞,发现竟是通用系统", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507864&idx=1&sn=ef9edaf096b2ebe27f269f655ef5865d": "漏洞通告 | Cursor远程代码执行漏洞", "https://portswigger.net/blog/http-request-smuggling-explained-with-seasoned-bug-bounty-hunter-nahamsec-and-world-class-researcher-james-kettle": "HTTP Request Smuggling Explained: with seasoned bug bounty hunter NahamSec and world-class researcher James Kettle", "https://securityaffairs.com/180813/security/exposed-without-a-breach-the-cost-of-data-blindness.html": "Exposed Without a Breach: The Cost of Data Blindness", "https://www.blackhillsinfosec.com/offensive-tooling-cheatsheets/": "Offensive Tooling Cheatsheets: An Infosec Survival Guide Resource", "https://infosecwriteups.com/cisco-vpn-bug-bounty-path-traversal-and-xss-via-saml-endpoint-exploitation-2b615249b31f?source=rss----7b722bfd1b8d---4": "Cisco VPN Bug Bounty: Path Traversal and XSS via SAML Endpoint Exploitation", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247522524&idx=1&sn=83c9836d881713c6dc45c3cbce2056d9": "黑客工具 | jeecg综合漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247522491&idx=1&sn=870ce59f49f5e77e75aec2fc78775615": "黑客工具 | xxl-job漏洞综合利用工具", "https://www.tenable.com/blog/faq-cve-2025-54135-cve-2025-54136-vulnerabilities-in-cursor-curxecute-mcpoison": "CVE-2025-54135, CVE-2025-54136: Frequently Asked Questions About Vulnerabilities in Cursor IDE (CurXecute and MCPoison)", "https://www.tenable.com/blog/cve-2025-54987-cve-2025-54948-trend-micro-apex-one-command-injection-zero-days-exploited": "CVE-2025-54987, CVE-2025-54948: Trend Micro Apex One Command Injection Zero-Days Exploited In The Wild", "https://www.tenable.com/blog/introducing-tenable-ai-exposure-stop-guessing-start-securing-your-ai-attack-surface": "Introducing Tenable AI Exposure: Stop Guessing, Start Securing Your AI Attack Surface", "https://blog.trailofbits.com/2025/08/06/prompt-injection-engineering-for-attackers-exploiting-github-copilot/": "Prompt injection engineering for attackers: Exploiting GitHub Copilot", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138243&idx=2&sn=5e4dfe20da737ef445093a70b963ac3b": "英伟达深夜再发文:芯片没有后门、终止开关和监控软件;戴尔上百款笔记本曝严重安全漏洞,可被植入持久性后门 | 牛览", "https://infosecwriteups.com/picture-perfect-exploit-how-image-uploads-turned-into-shell-access-473659d49020?source=rss----7b722bfd1b8d---4": "Picture Perfect Exploit: How Image Uploads Turned Into Shell Access", "https://www.tenable.com/blog/cve-2025-53786-frequently-asked-questions-about-microsoft-exchange-server-hybrid-deployment": "CVE-2025-53786: Frequently Asked Questions About Microsoft Exchange Server Hybrid Deployment Elevation of Privilege Vulnerability", "https://thehackernews.com/2025/08/webinar-how-to-stop-python-supply-chain.html": "Webinar: How to Stop Python Supply Chain Attacks—and the Expert Tools You Need", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138253&idx=2&sn=ca86bfa70766c461a3583946c05454a5": "美国参议员要求调查DeepSeek数据安全风险;趋势科技Apex One曝严重命令注入漏洞;东方通董事长被立案调查 | 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458598226&idx=3&sn=0a93274a7e19b1a53543777a006dc8e9": "HTTP/1.1 漏洞致数百万网站遭恶意接管", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651326034&idx=4&sn=aea069984c69d21aef30c958d8d00c18": "HTTP/1.1致命漏洞致数百万网站面临恶意接管风险", "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/echoes-in-the-shell-legacy-tooling-behind-ongoing-sharepoint-toolshell-exploitation/": "Echoes in the Shell: Legacy Tooling Behind Ongoing SharePoint ‘ToolShell’ Exploitation", "https://www.bellingcat.com/news/2025/08/08/strongwhat-can-open-sources-reveal-about-beijings-deadly-floods-strong/": "What Can Open Sources Reveal About Beijing’s Deadly Floods?", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507871&idx=1&sn=b1408af7193dcdb312f0ddcac08e87de": "漏洞通告 | Jenkins Git Parameter插件远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611747&idx=2&sn=55829972de81c2cac63cf9ef037495c5": "CTEM、ASM与漏洞管理,三者有何区别?|英伟达深夜再发文:芯片没有后门、终止开关和监控软件", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247488332&idx=1&sn=e86f533bbe0e522d01a2db2484ca87b7": "【腾讯SRC】漏洞挖掘之并发点赞/点踩漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247494014&idx=1&sn=c89b80c3f089b2e0bae5b72757cab215": "漏洞预警 | 万户ezOFFICE SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247494014&idx=2&sn=d7e745190dfd0f5a13364c2154311b0a": "漏洞预警 | 金和OA XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611747&idx=1&sn=abcd7943875cae102550cb640a3fd141": "股价一年暴涨600%,这家安全公司扬言重塑全球秩序|思科:身份服务引擎中存在严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247522694&idx=1&sn=dfd30fb430144c52e32e111e916389ab": "黑客工具 | OA漏洞利用工具 I-Wanna-Get-All", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652071062&idx=2&sn=35e99b81766690d322e81f5f8c5c67c8": "【安全圈】Win10/Win11 用户请升级 7.13 版:WinRAR 修复高危漏洞", "https://infosecwriteups.com/day-6-rce-how-i-hacked-a-bank-using-a-forgotten-excel-file-e0eb14758136?source=rss----7b722bfd1b8d---4": "“Day 6: RCE — How I Hacked a Bank Using a Forgotten Excel File”", "https://mp.weixin.qq.com/s?__biz=MzkzNTcwOTgxMQ==&mid=2247486139&idx=1&sn=54eb63ae860d0ce30d4f5ad152e756f6": "荣耀SRC | 邀请你,挖秋天的第一个漏洞!", "https://mp.weixin.qq.com/s?__biz=MzI3Njk2OTIzOQ==&mid=2247487000&idx=1&sn=46e7accf39c45239402403c64980d3e4": "SDL 81/100问:如何快速应急开源组件漏洞,比如fastjson?", "https://infosecwriteups.com/mirror-mirror-in-the-cache-the-day-i-became-a-digital-pickpocket-ce695a86dc87?source=rss----7b722bfd1b8d--bug_bounty": "Mirror, Mirror in the Cache: The Day I Became a Digital Pickpocket", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519647&idx=1&sn=131935688857f3a70253d746c15118d0": "src | 奇怪的任意用户重置密码组合拳漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488870&idx=1&sn=2a5ddc7a82a22f342e3990037633bff8": "大华智能物联管理平台evo-runs/v1.0/push和evo-runs/v1.0/receive接口存在远程命令执行漏洞", "https://www.bleepingcomputer.com/news/security/netherlands-citrix-netscaler-flaw-cve-2025-6543-exploited-to-breach-orgs/": "Netherlands: Citrix Netscaler flaw CVE-2025-6543 exploited to breach orgs", "https://isc.sans.edu/diary/rss/32188": "ISC Stormcast For Monday, August 11th, 2025 https://isc.sans.edu/podcastdetail/9564, (Mon, Aug 11th)", "https://thehackernews.com/2025/08/researchers-spot-surge-in-erlangotp-ssh.html": "Researchers Spot Surge in Erlang/OTP SSH RCE Exploits, 70% Target OT Firewalls", "https://www.anquanke.com/post/id/311088": "ChatGPT连接器曝\"0-click\"漏洞,攻击者可窃取Google Drive数据", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138272&idx=2&sn=38363e9cb0a08878e53ec5f7008bc9be": "GPT-5重磅发布却遇“滑铁卢”,用户感受差,安全能力严重不足;联想部分型号网络摄像头中存有“BadCam”远程控制漏洞| 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651326116&idx=1&sn=20c7c5228db429877e2cce99fa9f8933": "Erlang/OTP SSH远程代码执行漏洞正被用于攻击工控网络", "https://www.tenable.com/blog/the-breach-you-didnt-see-coming-how-invisible-combinations-of-risk-are-exposing-your": "The Breach You Didn’t See Coming: How Invisible Combinations of Risk Are Exposing Your Organization", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138287&idx=2&sn=3e493cdafabfba15544bf44e46829728": "细思极恐!央媒起底英伟达芯片中可能存在的安全隐患;Zscaler等多家知名厂商零信任产品中均曝严重安全漏洞 | 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138294&idx=2&sn=99fce7aae5b536e68afbc68b5699adef": "中国联通突发大面积网络访问故障,疑似DNS被污染;Apache bRPC项目存在严重漏洞,可导致拒绝服务攻击 | 牛览", "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/when-hackers-call-social-engineering-abusing-brave-support-and-encrypthubs-expanding-arsenal/": "When Hackers Call: Social Engineering, Abusing Brave Support, and EncryptHub’s Expanding Arsenal", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664247534&idx=2&sn=8d9cf7a9d13ff49c0b4ae8dd95a3fab7": "CNNVD | 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247496913&idx=1&sn=297db7d38e9fae28835af87e566a49bc": "【论文速读】| 大语言模型与静态代码分析工具:漏洞检测的系统基准", "https://www.cybersecurity360.it/nuove-minacce/ai-generativa-e-frodi-le-sfide-regolatorie-dei-siti-ecommerce-clonati-con-tecnologie-llm/": "AI generativa e frodi: le sfide regolatorie dei siti eCommerce clonati con tecnologie LLM", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664247534&idx=3&sn=67100323fa0a8949ff110ff44fb8bade": "CNNVD | 关于Fortinet FortiWeb安全漏洞的通报", "https://www.4hou.com/posts/yzgW": "HTTP/1.1终将落幕,20年“幽灵漏洞”浮出水面,全球网站拉响警报!", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247515577&idx=1&sn=40b2abaf9aa69379e489dafcbed4e77c": "CVE-2025-32433: Erlang/OTP SSH 远程代码执行漏洞深度分析报告", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138319&idx=2&sn=5d31a44df09341b29444f26cd4c9c01c": "网信部门通报6类违法违规涉军自媒体账号典型案例;VMware ESXi严重漏洞威胁全球大量服务器安全性 | 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507889&idx=1&sn=4c71fa41da36a0f6084166454ec1043d": "漏洞通告 | Microsoft Windows文件资源管理器欺骗漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3Njk2OTIzOQ==&mid=2247487056&idx=1&sn=32048f8f16a9b288c4183f3ff9968f5a": "SDL 83/100问:上传图片的API,除了常见web漏洞外,是否还会有风险?", "https://mp.weixin.qq.com/s?__biz=MzkzMDg1MzIwNA==&mid=2247487812&idx=1&sn=5c6f5f82138d61c06c7a15c0f09d3dc2": "NextCyber学习记录—ThinkPHP5 5.0.22/5.1.29 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138335&idx=2&sn=3e6bd9073a107f1bf618b0c1e4813fb6": "国家信息安全漏洞库通报Fortinet安全漏洞;抖音曝光8类典型诈骗手段;施乐打印机紧急修复两个严重漏洞 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzU3OTAyODk4MQ==&mid=2247491369&idx=1&sn=13017e498a54120488de7554fb7ab73d": "SFSRC移动端\"黄金漏洞\"清单公布!最高可兑5倍奖励!", "https://mp.weixin.qq.com/s?__biz=Mzg4MDg5NzAxMQ==&mid=2247485936&idx=1&sn=75c60584c8ff8980eaea7f1bd6116e67": "【严重】WordPress测验和调查总插件<= 10.2.4- SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247491575&idx=1&sn=d65e65bfcbf7f2a26b67a50e5ec8dd12": "新手必看 | 如何成为一名“漏洞赏金猎人”", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247494056&idx=3&sn=cfc509075295647f2287615f7df10635": "漏洞预警 | 东胜物流软件SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247494056&idx=2&sn=8bdd40dd5e5919adcfd8e762c2e21ead": "漏洞预警 | 天锐绿盘文档安全管理平台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247494056&idx=1&sn=6a4c692dfcf862f682690a68fc0f1d8f": "漏洞预警 | 西部数码NAS命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484572&idx=1&sn=0453587999820ccbd738fdd3cd30bf3d": "【全网首发】金和OA 0/1/N Day漏洞合集", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492696&idx=1&sn=0df79784056b649736fc538318d22bbc": "漏洞复现 || Windows 文件资源管理器欺骗", "https://blog.lobsec.com/2025/08/analisi-di-un-dropper-html-js-per-internet-explorer-basato-su-activex-e-regsvr32/": "Analisi di un dropper HTML/JS per Internet Explorer basato su ActiveX e regsvr32", "https://securelist.com/pipemagic/117270/": "Evolution of the PipeMagic backdoor: from the RansomExx incident to CVE-2025-29824", "https://isc.sans.edu/diary/rss/32206": "ISC Stormcast For Monday, August 18th, 2025 https://isc.sans.edu/podcastdetail/9574, (Mon, Aug 18th)", "https://thehackernews.com/2025/08/weekly-recap-nfc-fraud-curly-comrades-n.html": "⚡ Weekly Recap: NFC Fraud, Curly COMrades, N-able Exploits, Docker Backdoors & More", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584284&idx=2&sn=040dd0fa476c39de2b6fbb311bf675fb": "安全动态回顾|70款违法违规收集使用个人信息的移动应用被通报 微软8月补丁周二修复了107个安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507893&idx=1&sn=70ab343dd7496ef4bee4c4d390b22cd7": "漏洞通告 | Smartbi 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIxNzEzNA==&mid=2247492909&idx=1&sn=a0beb8d9050124900598c579a61ef2a1": "【Java代审】小白如何根据1day挖出天锐绿盾前台RCE 0day?", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497566&idx=1&sn=493e4ccee61bc3f8d868ae3328a98234": "一款最全未授权访问漏洞批量检测工具,集成40+常见未授权访问漏洞 | GUI界面", "https://mp.weixin.qq.com/s?__biz=Mzg5NDU3NDA3OQ==&mid=2247491423&idx=1&sn=e7c4d1bb482e43192864c2c5554d4adb": "一款通用漏洞检测工具|漏洞利用-ExpScanner", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247574580&idx=1&sn=50287fb26666f440f4c89b61068f8d29": "工具分享 | 一款高价值漏洞情报爬取工具", "https://seclists.org/fulldisclosure/2025/Aug/14": "Insufficient Session Cookie Invalidation in nopCommerce v4.10 and 4.80.3", "https://seclists.org/fulldisclosure/2025/Aug/8": "Piciorgros TMO-100: Unauthorized configuration change via TFTP (CVE-2025-29617)", "https://blog.trailofbits.com/2025/08/20/marshal-madness-a-brief-history-of-ruby-deserialization-exploits/": "Marshal madness: A brief history of Ruby deserialization exploits", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458598760&idx=3&sn=837ea814a684184f017926330f0c0371": "更新:第11章 codeql代码审计 | 系统0day安全-二进制漏洞攻防(第4期)", "https://www.anquanke.com/post/id/311347": "CERT/CC 警告 Workhorse 市政会计软件存在严重漏洞", "https://www.netspi.com/blog/executive-blog/penetration-testing-as-a-service/def-con-33-netspis-access-everywhere-experience/": "DEF CON 33: NetSPI’s “Access Everywhere” Experience", "https://securityaffairs.com/181347/intelligence/fbi-russia-linked-group-static-tundra-exploit-old-cisco-flaw-for-espionage.html": "FBI: Russia-linked group Static Tundra exploit old Cisco flaw for espionage", "https://www.eff.org/deeplinks/2025/08/fourth-amendment-victory-michigan-supreme-court-reins-digital-device-fishing-1": "Fourth Amendment Victory: Michigan Supreme Court Reins in Digital Device Fishing Expeditions", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611952&idx=2&sn=8329494513383aef45c789b0fc88460d": "Agentic AI是否能化解网络安全危机?|研究员发现5G网络安全漏洞:可实时嗅探流量、拒绝服务、网络降级", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247489214&idx=1&sn=5d5333cebdb9c5e58ae31911d40c1b4c": "漏洞预警|Windows被曝休眠中的IPv6可被利用以劫持网络", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138387&idx=2&sn=78cc23e5afb435d849e9f00be2ae3f30": "微软拟限制我国企业获取安全漏洞通知权限;曾对DeepSeek发起攻击的22岁黑客在美被捕;日产汽车4TB机密数据泄露 | 牛览", "https://keenlab.tencent.com/zh/2025/08/22/2025-CVE-2025-9132/": "【漏洞分析】CVE-2025-9132 \"Await Using\" Can't Wait", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247493535&idx=1&sn=8874a2770afc252f5a107d712433dd37": "复旦大学 | 检测微服务应用中的污点风格漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MDc0NTIxOQ==&mid=2247484741&idx=1&sn=6419d3ee13028e338e18270a8d73fbbc": "漏洞自动分析和修复Agent:Buttercup 如何打通检索—分析—修补—验证闭环", "https://www.ictsecuritymagazine.com/articoli/law-enforcement/": "Law enforcement nel 2025: analisi tecnica dell’evoluzione degli attacchi informatici e delle operazioni di contrasto", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247492311&idx=1&sn=9922b0495216c1442d0b9868051388be": "通杀高版本JDK: Spring最新无依赖原生反序列化漏洞利用链分析", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611975&idx=2&sn=100e6c136244dda79adab498ce7b4dfc": "十年渗透:俄罗斯APT组织如何长期利用思科设备漏洞|Cisco FMC RADIUS远程代码执行漏洞CVE-2025-20265", "https://mp.weixin.qq.com/s?__biz=MzIxNTM4NDY2MQ==&mid=2247518376&idx=1&sn=32387485acf7334ef4f780a16b309e21": "权威背书 + 实战淬炼 | OSWE 从代码审计到漏洞利用全通关", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506880&idx=1&sn=de3a879d6541fbaf781e877ba74d2e3b": "每周网安资讯(8.19-8.25) | IBM多款产品存在指定输入类型的验证不恰当漏洞", "https://cyble.com/blog/top-it-vulnerabilities-this-week/": "The Week in Vulnerabilities: Threat Actors Claim Exploits, Zero Days", "https://isc.sans.edu/diary/rss/32230": "ISC Stormcast For Monday, August 25th, 2025 https://isc.sans.edu/podcastdetail/9584, (Mon, Aug 25th)", "https://thehackernews.com/2025/08/weekly-recap-password-manager-flaws.html": "⚡ Weekly Recap: Password Manager Flaws, Apple 0-Day, Hidden AI Prompts, In-the-Wild Exploits & More", "https://www.anquanke.com/post/id/311464": "CISA紧急警报:苹果iOS/iPadOS/macOS零日漏洞遭主动利用 数百万设备面临威胁", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247494482&idx=1&sn=38e831a33ec2e9a3dabcf66c0be60715": "渗透测试 | 某985高校漏洞挖掘小记", "https://securityaffairs.com/181556/data-breach/auchan-discloses-data-breach-data-of-hundreds-of-thousands-of-customers-exposed.html": "Auchan discloses data breach: data of hundreds of thousands of customers exposed", "https://www.tenable.com/blog/cve-2025-7775-citrix-netscaler-adc-and-netscaler-gateway-zero-day-remote-code-execution": "CVE-2025-7775: Citrix NetScaler ADC and NetScaler Gateway Zero-Day Remote Code Execution Vulnerability Exploited in the Wild", "https://www.tenable.com/blog/tenable-is-a-leader-in-the-idc-marketscape-for-exposure-management-2025": "Tenable Is a Leader in the IDC MarketScape: Worldwide Exposure Management 2025 Vendor Assessment", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507902&idx=1&sn=ef196d59c34733bf600830dc71d16500": "漏洞通告 | 微步情报局再次发现DataEase存在高危漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458598989&idx=3&sn=12ad73fc5a75757f5a26f9b787074cac": "Docker 修复 9.3 分高危漏洞,Win/mac 用户速升级", "https://portswigger.net/blog/the-entire-internet-is-broken-ethical-hacking-expert-john-hammond-meets-james-kettle": "\"The entire internet is broken\": ethical hacking expert John Hammond meets James Kettle", "https://xz.aliyun.com/news/18714": "幻影|一款漏洞挖掘的浏览器扩展辅助工具|收集中的隐藏接口和敏感信息", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507906&idx=1&sn=72fd63f59c6d92e8c1effe15196079d7": "漏洞通告 | CrushFTP 身份认证绕过漏洞被黑客组织积极利用", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247496946&idx=1&sn=ac3383562b3dd703bc22bf2a400797f5": "【论文速读】| LLM-GUARD:基于大语言模型的 C++ 和 Python 中的错误和安全漏洞的检测和修复", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489008&idx=1&sn=70800e9de65cc02e7b7ee9105efe6c43": "东胜物流软件SoftMng/FileInputHandler/Upload接口存在任意文件上传漏洞 附POC", "https://www.tenable.com/blog/cloud-security-cnapp-exposure-management-idc-white-paper": "Your Map for the Cloud Security Maze: An Integrated Cloud Security Solution That’s Part of an Exposure Management Approach", "https://www.anquanke.com/post/id/311746": "银狐(Silver Fox)APT黑客组织利用驱动漏洞攻击Windows 10和11系统以规避EDR/AV防护", "https://infosecwriteups.com/can-you-trust-what-you-see-deepfake-scams-are-exploding-in-2025-9eb1c7062468?source=rss----7b722bfd1b8d---4": "Can You Trust What You See? Deepfake Scams Are Exploding in 2025", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247551589&idx=1&sn=b78cdfc0a448fcd11f9651168455861a": "小程序漏洞挖掘 | 验证码缺陷+springboot未授权组合拳拿下多个中危", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650612070&idx=1&sn=0f5afaa319b7aea60041c3005866dd49": "腾讯云曝严重安全漏洞重要长期暴露公网|黑客动用上万IP,大规模扫描微软 RDP 服务", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506888&idx=1&sn=ae5dfa16c29ffcd25723289e2f56187b": "每周网安资讯(8.26-9.1) | Microsoft Tslint存在安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507910&idx=1&sn=362401b9a7dd66d10b30b0f51464af53": "漏洞通告 | Gitblit 身份认证绕过漏洞", "https://thehackernews.com/2025/09/weekly-recap-whatsapp-0-day-docker-bug.html": "⚡ Weekly Recap: WhatsApp 0-Day, Docker Bug, Salesforce Breach, Fake CAPTCHAs, Spyware App & More", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500092&idx=1&sn=08e22a5ec167c3a75d515147026e6a52": "挑战 | 从一段代码中发现漏洞并给出利用", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584427&idx=2&sn=3b968bf8c6f99b782d0c8acd1d8eedcf": "安全动态回顾|全国网安标委发布28项网络安全国家标准项目立项清单 超过28000台Citrix设备易受新型RCE漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653085927&idx=1&sn=823a2ef9f73c061d910320b76dc48ecb": "今起 AI 生成内容必须亮明身份;大疆双摄 Pocket 4 曝光;微信公号留言广告上线 | 极客早知道", "https://mp.weixin.qq.com/s?__biz=MzkzMDQwOTg3OQ==&mid=2247484747&idx=1&sn=f7c11dd9ce4228c3099801073347d46b": "ZERO-DAY预警: 自动化发现TP-Link路由器高危漏洞", "https://grahamcluley.com/the-ai-fix-66/": "The AI Fix #66: OpenAI and Anthropic test each other, and everyone fails the apocalypse test", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507918&idx=1&sn=d9bdcd4b113af5c8981e91d314331898": "漏洞通告 | 用友U8Cloud 文件上传绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507923&idx=1&sn=f891171bcd6f042a11b4b04ad34cf5f8": "漏洞通告 | 微步情报局发现h2o-3存在高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNDU5NQ==&mid=2247486585&idx=1&sn=5638bc0b244deb27780b2c6bd9a1fddc": "【工具分享】CVE Push Service | 自动化高危漏洞情报推送", "https://mp.weixin.qq.com/s?__biz=Mzk0MzY3MDE5Mg==&mid=2247484293&idx=1&sn=ca98698b4382e60ecca7865398c2b622": "漏洞预警/通知千千万,几张图让你知道谁家更权威", "https://mp.weixin.qq.com/s?__biz=MzI3Njk2OTIzOQ==&mid=2247487152&idx=1&sn=41d92752469e0ed30ae939b7c15ed6e1": "SDL 89/100问:如何推动业务方修复开源组件漏洞?", "https://dicorinto.it/formazione/meet-the-experts-ai-tra-hype-e-realta/": "Meet the Experts: AI tra hype e realtà", "https://www.bleepingcomputer.com/news/security/critical-sap-s-4hana-vulnerability-now-exploited-in-attacks/": "Critical SAP S/4HANA vulnerability now exploited in attacks", "https://securityaffairs.com/181930/hacking/critical-sap-s-4hana-flaw-cve-2025-42957-under-active-exploitation.html": "Critical SAP S/4HANA flaw CVE-2025-42957 under active exploitation", "https://www.tenable.com/blog/cybersecurity-snapshot-critical-infrastructure-cybersecurity-ot-ics-iot-security-09-05-2025": "Cybersecurity Snapshot: Expert Advice for Securing Critical Infrastructure’s OT and Industrial Control Systems, IoT Devices and Network Infrastructure", "https://thehackernews.com/2025/09/sap-s4hana-critical-vulnerability-cve.html": "SAP S/4HANA Critical Vulnerability CVE-2025-42957 Exploited in the Wild", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500513&idx=3&sn=f5797a15bf35ed200a6a5183e18172a8": "80 个反序列化漏洞全景系列 (1) | 一个大多数人都容易忽视的 Ysoserial.Net 使用误区", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651135391&idx=1&sn=c5931b26b8afe7c1d20315f7edee9f6b": "捷豹路虎遭网络攻击,机器人API漏洞允许黑客远程控制|一周特辑", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650612188&idx=4&sn=cd7bdb4fd3f89e9fcfe82c81b4d16337": "CVE Push Service | 高危漏洞实时情报自动化推送工具", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498151&idx=1&sn=76901c3747d1d876757bb2e601dbcf31": "小白如何根据1day挖出RCE 0day?", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247494284&idx=2&sn=0ed8f1c893a866c932a62586ca7c50f4": "漏洞预警 | 天锐绿盾审批系统SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247494284&idx=3&sn=ebea3aac3d5ec815e0e1588a968bb9df": "漏洞预警 | 富勒仓储管理系统任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247494284&idx=1&sn=02b1f4de6ce930ef7b509cef8401c94f": "漏洞预警 | 索贝融合媒体内容管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500147&idx=1&sn=179c21cba0542f55f239b31611689349": "漏洞 | CVE-2025-8220", "https://infosecwriteups.com/stories-of-sensitive-data-exposure-what-i-found-as-a-pentester-and-how-you-can-prevent-it-episode-1362bdf27049?source=rss----7b722bfd1b8d--bug_bounty": "Stories of Sensitive Data Exposure: What I Found as a Pentester and How You Can Prevent It: Episode…", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500532&idx=3&sn=a0a2ce8105d376db27a6dd3efd2953e9": "80个反序列化漏洞全景合集 (3) | 介绍一个 ViewState 反序列化不常见的知识点", "https://mp.weixin.qq.com/s?__biz=Mzk0MzcyNjMyNg==&mid=2247485594&idx=1&sn=e01f061388ea73543cc256691fef9c64": "【知乎粉丝福利】黑客/网络安全攻防学习资料最全合集(从0到挖漏洞、打CTF、护网、就业)", "https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247507973&idx=1&sn=3cf7fbfe936493e37e75b20bc3d0ba23": "从一台冰箱的漏洞看工业网络安全危机:IT/OT融合下的必由之路", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247488313&idx=1&sn=67e8cc68e0c6371598e9aeee47c87372": "漏洞实战案例 | FUZZ的艺术", "https://seclists.org/fulldisclosure/2025/Sep/36": "Defense in depth -- the Microsoft way (part 92): more stupid blunders of Windows' File Explorer", "https://seclists.org/fulldisclosure/2025/Sep/33": "SEC Consult SA-20250908-0 :: NFC Card Vulnerability Exploitation Leading to Free Top-Up in KioSoft \"Stored Value\" Unattended Payment Solution (Mifare)", "https://www.bleepingcomputer.com/news/security/salesloft-march-github-repo-breach-led-to-salesforce-data-theft-attacks/": "Salesloft: March GitHub repo breach led to Salesforce data theft attacks", "https://www.cybersecurity360.it/cultura-cyber/it-sa-expocongress-la-fiera-leader-in-europa-nel-settore-della-sicurezza-informatica-continua-a-crescere-nel-2025/": "it-sa Expo&Congress: la fiera leader in Europa nel settore della sicurezza informatica continua a crescere nel 2025", "https://isc.sans.edu/diary/rss/32264": "ISC Stormcast For Monday, September 8th, 2025 https://isc.sans.edu/podcastdetail/9602, (Mon, Sep 8th)", "https://www.tenable.com/blog/icymi-exposure-management-academy-on-attack-surface-management-proactive-security-and-more": "ICYMI: Exposure Management Academy on Attack Surface Management, Proactive Security and More", "https://www.tenable.com/blog/how-secrets-management-prevents-cloud-breaches": "Secrets at Risk: How Misconfigurations and Mistakes Expose Critical Credentials", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523967&idx=1&sn=4fb0beaa6d1cf5b33d3224c1e6783d9f": "SAP S/4HANA 中严重漏洞已遭在野利用", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500152&idx=1&sn=ae3dad1bd60056bdbac1d51b2cc43734": "挑战 | 一个图片展示功能存在什么漏洞?", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509317&idx=1&sn=176afa32403fd6b401b472ec75076c1d": "GROW计划 | 开学季-第一期漏洞挖掘实战(文末抽奖)", "https://infosecwriteups.com/web-cache-poisoning-via-fat-get-requests-exploiting-cache-key-flaws-37e8d5030a2d?source=rss----7b722bfd1b8d--bug_bounty": "Web Cache Poisoning via Fat GET Requests: Exploiting Cache Key Flaws", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489105&idx=1&sn=3d2ae0451294fc36fafb622d109a721b": "东胜物流软件Webservice/DsWebService.asmx接口存在SQL注入漏洞 附POC", "https://horizon3.ai/news/press-release/horizon3-ai-launches-threat-actor-intelligence-turning-exploitable-vulnerabilities-into-adversary-context/": "Horizon3.ai Launches Threat Actor Intelligence: Turning Exploitable Vulnerabilities Into Adversary Context", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138628&idx=2&sn=725d67b3147bdfc29fc3317dccb6d41d": "2025年国家网络安全宣传周将于9月15日在昆明开幕;NVDB提示防范WinRAR路径遍历高危漏洞风险 | 牛览", "https://infosecwriteups.com/idor-how-i-could-delete-any-product-image-on-an-e-commerce-platform-8998453a50ea?source=rss----7b722bfd1b8d---4": "IDOR: How I Could Delete Any Product Image on an E-Commerce Platform", "https://mp.weixin.qq.com/s?__biz=MzkwOTY3Njg4Nw==&mid=2247484426&idx=1&sn=0c90f96f1f463e321b2a9e844f0c3130": "CVE-2025-29927/Code reproduction/sink", "https://mp.weixin.qq.com/s?__biz=MzkwOTY3Njg4Nw==&mid=2247484435&idx=1&sn=ce2416defe7b4fdeba59159ff0acf62d": "flask CVE-2023-27524xa0Apache Superset Auth Bypass/sink", "https://www.hackingdream.net/2025/09/hacking-elasticsearch-pentesters-playbook-for-discovery-to-rce.html": "Hacking Elasticsearch: A Pentester's Playbook for Discovery to RCE", "https://www.tenable.com/blog/shift-from-reactive-to-proactive-leveraging-tenable-exposure-management-for-mssp-success": "Shift from Reactive to Proactive: Leveraging Tenable Exposure Management for MSSP Success", "https://www.eff.org/deeplinks/2025/09/eff-court-supreme-court-must-rein-expansive-secondary-copyright-liability": "EFF to Court: The Supreme Court Must Rein in Expansive Secondary Copyright Liability", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500575&idx=1&sn=22e578f7dc88411c68ad61039d1490b4": "80 个反序列化漏洞全景系列 (4) | 介绍一个业务功能叠加特殊环境下的绕过方法", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651135533&idx=1&sn=917214a9f02bac857cea7c28eaf762f5": "Salesforce数据攻击潮原因曝光,西门子平台曝严重漏洞|一周特辑", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247488373&idx=1&sn=8ac40123ec44e9e4baf489a39a297a61": "实战案例 | Edusrc三个985证书站漏洞案例", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247532718&idx=2&sn=73699dac09767c3b8b381f5b78ebbd30": "新的 HTTP/2“MadeYouReset”漏洞可引发大规模 DoS 攻击", "https://ptr-yudai.hatenablog.com/entry/2025/09/14/180326": "Dirty Pageflags: Revisiting PTE Exploitation in Linux", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247526437&idx=1&sn=29dcf490820d57dfbae9d461b82e3084": "【火绒安全周报】工信部:更新WinRAR/TP-Link 承认零日漏洞", "https://isc.sans.edu/diary/rss/32284": "ISC Stormcast For Monday, September 15th, 2025 https://isc.sans.edu/podcastdetail/9612, (Mon, Sep 15th)", "https://www.bellingcat.com/news/2025/09/15/active-club-fight-night-2025-san-diego/": "Like Clockwork: An Orange Wall Exposes Yet Another Active Club ‘Fight Night’", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500182&idx=1&sn=a15a0c0c8f60dd34990a5f2dbed35c1b": "挑战 | 一起来审计一个认证部分的代码漏洞", "https://www.4hou.com/posts/33NQ": "Salesloft: GitHub账户遭入侵 导致Drift令牌被盗并引发大规模Salesforce数据窃取", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664249526&idx=4&sn=5331ab2108ad15944a2a6be1d1539996": "2025网安周 | 国内首次AI大模型众测结果揭晓——2025年人工智能大模型产品漏洞众测结果发布", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138722&idx=2&sn=3bc91cd9a30362ccfbd472c112123577": "《数据安全国家标准体系(2025版)》、《个人信息保护国家标准体系(2025版)》发布;国内首次AI大模型漏洞众测结果发布|牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458600005&idx=3&sn=993d63fb4cece1d21e88c6d7723d095c": "25年秋季班招生啦 | 系统0day安全-IOT设备漏洞挖掘(第6期)", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487819&idx=1&sn=88bca3cb5ba6a7fdd4a6c75b00f9c4dd": "漏洞预警 | Flowise 任意文件读取漏洞", "https://www.eff.org/deeplinks/2025/09/ice-cyber-mercenaries-effector-3712": "ICE 🤝 Cyber Mercenaries | EFFector 37.12", "https://mp.weixin.qq.com/s?__biz=MzUzNDMyNjI3Mg==&mid=2247487653&idx=1&sn=311991a06f2a2bcd95e6102cade611eb": "CVE-2019-10086/CVE-2025-48734(commons-beanutils)", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247486107&idx=1&sn=eb0313303f44af90cb9c135f89a25de9": "【重大数据泄露】前有因瑞典政府将IT维护工作包中包导致数据泄露 | 现有因系统漏洞全国15%的居民数据", "https://www.guidepointsecurity.com/blog/ai-exposes-homoglyph-hustle/": "When the Dash Hits the Fan: Artificial Intelligence Exposes the Homoglyph Hustle", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500238&idx=1&sn=dd21fbd4367cbde5ce8768f4b86ed92e": "基础 | 内网渗透,一键拿下域控的两个漏洞", "https://infosecwriteups.com/ctf-pentest-translating-ctf-patterns-into-real-world-exploits-c74ba79dcf4e?source=rss----7b722bfd1b8d--bug_bounty": "CTF → Pentest: Translating CTF Patterns into Real-World Exploits", "https://infosecwriteups.com/extract-load-upload-a-20000-file-read-bug-poc-methodology-931383c987b2?source=rss----7b722bfd1b8d--bug_bounty": "Extract — Load — Upload | A $20000 File Read Bug POC Methodology", "https://www.tenable.com/blog/whats-new-in-tenable-cloud-security-a-more-personalized-global-and-comprehensive-experience": "What’s New in Tenable Cloud Security: A More Personalized, Global and Comprehensive Experience", "https://www.tenable.com/blog/who-owns-threat-and-exposure-management-in-your-organization": "Who Owns Threat and Exposure Management in Your Organization?", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507933&idx=1&sn=dc6c92cfb68c5538a39090f11470c009": "漏洞通告 | U8cloud 全版本 IPFxxFileService任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3Njk2OTIzOQ==&mid=2247487272&idx=1&sn=44224be88b3b93fc4bab788a52031c6c": "SDL 95/100问:针对有漏洞的代码,安全怎么不让发版?", "https://mp.weixin.qq.com/s?__biz=MjM5ODYyMTM4MA==&mid=2650472531&idx=1&sn=3deb2f34855df2a48a824ab443682c78": "再获荣誉 | 绿盟科技荣获2025年度CNNVD基础软硬件漏洞报送优秀企业", "https://cyble.com/blog/weekly-it-it-vulnerabilities-report/": "The Week in Vulnerabilities: 1000+ Bugs with 135 Publicly Known PoCs", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138757&idx=2&sn=838c11e6d6cea57a623335ee0a5d7e2c": "公安部公布“护网—2025”专项工作行政执法典型案例;ChatGPT“深度研究”功能曝严重漏洞,可窃取Gmail邮件数据| 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651327930&idx=2&sn=87e64d22b6e0d0770c5182b9d192fc9d": "FreeBuf周报 | 新供应链攻击波及40余npm软件包;苹果紧急修复ImageIO零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492711&idx=1&sn=5b5c62bc5d8564e75ff3e5a5e7744414": "漏洞复现 || Flowise 任意文件读取", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651135916&idx=1&sn=b5aa8cdac83fe2e42ec3475ca2e8a0bf": "Salesforce攻击泄露15亿数据,美国风投公司遭勒索|一周特辑", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582166&idx=2&sn=94b22b32ff3886df9ad346f94d1a044a": "360发布银狐木马预警: 新变种实现驱动漏洞武器化,手法堪比APT攻击", "https://mp.weixin.qq.com/s?__biz=MzUyNzk1NjA5MQ==&mid=2247483940&idx=1&sn=c19e2a3e2ae9f433070ce965cbfd87d4": "漏洞预警(已复现)| 用友 U8 Cloud NCCloudGatewayServlet存在命令执行漏洞", "https://thehackernews.com/2025/09/iframe-security-exposed-blind-spot.html": "iframe Security Exposed: The Blind Spot Fueling Payment Skimmer Attacks", "https://www.d3lab.net/phishing-contro-facebook-veicolato-da-salesforce-quando-i-criminali-sfruttano-i-crm-legittimi/": "Phishing contro Facebook veicolato da Salesforce: quando i criminali sfruttano i CRM legittimi", "https://seclists.org/fulldisclosure/2025/Sep/71": "SEC Consult SA-20250923-0 :: Missing Certificate Validation leading to RCE in CleverControl employee monitoring software #CVE-2025-10548", "https://seclists.org/fulldisclosure/2025/Sep/72": "SEC Consult SA-20250925-0 :: Multiple Vulnerabilities in iMonitorSoft EAM employee monitoring #CVE-2025-10540 #CVE-2025-10541 #CVE-2025-10542", "https://www.tenable.com/blog/cve-2025-20333-cve-2025-20362-faq-cisco-asa-ftd-zero-days-uat4356": "CVE-2025-20333, CVE-2025-20362: Frequently Asked Questions About Zero-Day Cisco Adaptive Security Appliance (ASA) and Firewall Threat Defense (FTD) Vulnerabilities", "https://mp.weixin.qq.com/s?__biz=MzkxMzYzMTE5OA==&mid=2247484396&idx=1&sn=a8f2c28abe260f1f3594dc50e17f5ad7": "WGCLOUD存在默认账号密码admin/111111 附POC", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651328148&idx=3&sn=3160acb4fb312738f62cc4538cc32cd1": "思科两大0day漏洞同时曝光:ASA/FTD设备VPN缺陷可导致Root权限远程代码执行", "https://forum.butian.net/share/4573": "红队攻防 | 外网打点不靠0day组合拳拿下目标系统", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247526870&idx=1&sn=4b3d64f4d2e067c054bf4f27cb1653e5": "【火绒安全周报】谷歌紧急修复被利用的零日漏洞/19岁黑客被指控面临最高95年徒刑", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651328200&idx=2&sn=9f395331a3fca6bdf373613d0779225b": "FreeBuf周报 | Chrome高危类型混淆0-Day漏洞技术分析;微软以AI成功对抗AI", "https://horizon3.ai/attack-research/vulnerabilities/cve-2025-55182/": "CVE-2025-55182", "https://mp.weixin.qq.com/s?__biz=MzI1NzQ0NTMxMQ==&mid=2247490904&idx=1&sn=2c70d87b0c99ae986ff36dbf43267cf8": "数智赋能 智御未来 | 第十五届网络安全漏洞分析与风险评估大会在天津盛大启幕", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247493026&idx=1&sn=335ea08dbc624b131e892b228237a17a": "【已复现】FineReport 帆软报表前台远程代码执行漏洞", "https://www.4hou.com/posts/J1v9": "黑客借 React2Shell 漏洞发起 EtherRAT 恶意软件攻击", "https://hackernews.cc/archives/62041": "MongoDB 紧急提醒:立即修补可致远程代码执行的高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1NzE0ODUyOA==&mid=2247492548&idx=1&sn=6e2d9002dc58b33d800ac6a00c892b92": "【复现】Windows PowerShell命令注入漏洞(CVE-2025-54100)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498465&idx=1&sn=376cefca383754d3b7c2740f994bfd46": "实战 | 记一次X站逻辑漏洞到到管理员后台", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247582562&idx=1&sn=59e12a0ed46baee10f84b93fbff492f3": "360协同国家相关单位极速封堵超危RCE漏洞,守护全球数百万大模型服务器安全", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496443&idx=1&sn=dde031f4c23e22aefa2f922cd60d1c11": "CNVD漏洞周报2025年第41期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496443&idx=2&sn=3d0eeedba3f78ad71a508a6347a50d2a": "上周关注度较高的产品安全漏洞(20251020-20251026)", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096578&idx=1&sn=4d17e0477116128a67b3bab4ba02efd9": "Dell Storage Manager 的严重漏洞让攻击者破坏系统", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489440&idx=1&sn=511a7d0447738373f0e6f10ef895b43f": "NestJSDevTools存在远程命令执行漏洞CVE-2025-54782 附POC", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490907&idx=1&sn=bbd24b1e11c96e79b2846ec90bd55e82": "【高危漏洞预警】Windows Cloud Files Filter Driver权限提升漏洞CVE-2025-55680", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096578&idx=2&sn=71c0e190ed439156e651b5c8f1eeabae": "黑客利用 Windows Server Update Services RCE 漏洞", "https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-windows-server-wsus-flaw-exploited-in-attacks/": "CISA orders feds to patch actively exploited Windows Server WSUS flaw", "https://www.cleafy.com/cleafy-labs/klopatra-exposing-a-new-android-banking-trojan-operation-with-roots-in-turkey": "Klopatra: exposing a new Android banking trojan operation with roots in Turkey | Cleafy LABS", "https://www.bleepingcomputer.com/news/security/the-state-of-exposure-management-in-2025-insights-from-3-000-plus-organizations/": "The State of Exposure Management in 2025: Insights From 3,000+ Organizations", "https://blog.talosintelligence.com/uncovering-qilin-attack-methods-exposed-through-multiple-cases/": "Uncovering Qilin attack methods exposed through multiple cases", "https://isc.sans.edu/diary/rss/32424": "ISC Stormcast For Monday, October 27th, 2025 https://isc.sans.edu/podcastdetail/9672, (Mon, Oct 27th)", "https://securityaffairs.com/183876/uncategorized/wordfence-blocks-8-7m-attacks-exploiting-old-gutenkit-and-hunk-companion-flaws.html": "Wordfence blocks 8.7M attacks exploiting old GutenKit and Hunk Companion flaws", "https://thehackernews.com/2025/10/new-chatgpt-atlas-browser-exploit-lets.html": "New ChatGPT Atlas Browser Exploit Lets Attackers Plant Persistent Hidden Commands", "https://thehackernews.com/2025/10/qilin-ransomware-combines-linux-payload.html": "Qilin Ransomware Combines Linux Payload With BYOVD Exploit in Hybrid Attack", "https://thehackernews.com/2025/10/weekly-recap-wsus-exploited-lockbit-50.html": "⚡ Weekly Recap: WSUS Exploited, LockBit 5.0 Returns, Telegram Backdoor, F5 Breach Widens", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500865&idx=1&sn=ff565fc267cda77f7a0e09342b886b8d": "从上周的 WSUS 远程代码执行谈 .NET 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524284&idx=2&sn=3db26e74afeb401ca38364146c82882b": "OpenWrt 修复 DSL 驱动中的 RCE 和内核内存泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524284&idx=1&sn=a47fdc708ae65d68939d797fb4f739ad": "黑客正在大规模利用受老旧漏洞影响的WordPress 插件", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484864&idx=1&sn=deecfb860d1988539c75df286513f252": "巡星漏洞扫描平台", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504063&idx=1&sn=028ec8f075afd68647fcbf48accfbaa3": "【已复现】Windows Server Update Service远程代码执行漏洞(CVE-2025-59287)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247516445&idx=1&sn=96ac3c139e429191e1472dcdb916cda7": "一次针对 iOS 间谍武器开发人员的 0day 攻击到美国十大政府承包商 L3Harris 的陷落", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524735&idx=1&sn=db46b53845369cfde708d16ccc463286": "【漏洞通告】Windows 服务器更新服务 (WSUS) 远程代码执行漏洞(CVE-2025-59287)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498469&idx=1&sn=d924920c7a9e0232c18d43f9ad13297b": "自动SSRF漏洞扫描与利用工具", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503580&idx=1&sn=8d76dbe1c9bcc3abe91c07cf0db46802": "雷神众测漏洞周报2025.10.20-2025.10.26", "https://mp.weixin.qq.com/s?__biz=MzI4MjI2NDI1Ng==&mid=2247485137&idx=1&sn=f732dd55711230c12f568804c05bddfc": "dddd新增POC及误报修改20251028", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489452&idx=1&sn=67565426dbcfb94e0c3ae04affae6818": "用友U8 Cloud pubsmsservlet接口存在远程代码执行漏洞 附POC", "https://www.guidepointsecurity.com/blog/cybersecurity-awareness-month-4-reasons-cisos-make-exposure-management-a-cornerstone-of-their-cybersecurity-strategy/": "Cybersecurity Awareness Month: 4 reasons CISOs make exposure management a cornerstone of their cybersecurity strategy", "https://www.bleepingcomputer.com/news/security/cisa-warns-of-two-more-actively-exploited-dassault-vulnerabilities/": "CISA warns of two more actively exploited Dassault vulnerabilities", "https://flashpoint.io/blog/data-extortion-ttps-exploiting-code-people/": "The Evolution of Data Extortion TTPs: From Exploiting Code to Exploiting People", "https://thehackernews.com/2025/10/chrome-zero-day-exploited-to-deliver.html": "Chrome Zero-Day Exploited to Deliver Italian Memento Labs' LeetAgent Spyware", "https://thehackernews.com/2025/10/researchers-expose-ghostcall-and.html": "Researchers Expose GhostCall and GhostHire: BlueNoroff's New Malware Chains", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524292&idx=1&sn=e8849782ea150ce733b1fafc7bbd3d73": "ChatGPT Atlas 浏览器漏洞可用于植入恶意命令并执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524292&idx=2&sn=358d93e91985d5c3e0efde32e60d34a6": "QNAP 提醒注意 Windows 备份软件中的严重 ASP.NET 漏洞", "https://www.4hou.com/posts/7M5w": "近7.6万台WatchGuard Firebox安全设备存在漏洞 面临高危远程代码执行风险", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484868&idx=1&sn=31ac8000346e928fa88a3272494dce4f": "智联云采 SRM2.0 restore 存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072445&idx=2&sn=485531ca561994a61f2a46cfebdaf989": "【安全圈】AI漏洞导致泄露数万亿记录", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072445&idx=4&sn=cb692dbf52cd58a24d940e30476438ca": "【安全圈】Jira中存在权限漏洞,可导致攻击者篡改Jira JVM进程有权访问的文件", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072445&idx=3&sn=02507b97ca4164aea3eaf58321f28d02": "【安全圈】Perplexity旗下Comet浏览器的截图功能存在漏洞,可被利用进行恶意提示词注入", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458602753&idx=2&sn=db90258fe95ba6b65b3aca7c6e45e664": "ChatGPT Atlas浏览器现新漏洞 可植入持久恶意指令", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489394&idx=1&sn=3d982b5916b54c77936bb6c9105d9f90": "【漏洞通告】Apache Tomcat路径遍历漏洞(CVE-2025-55752)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247503836&idx=1&sn=de7c5d844eb457cbaa3700f6821e1eae": "新版网络安全法迎来三大变化,影响每一位从业者", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533334&idx=1&sn=4e5683ce6127d0e21411e716c85de9ca": "CVE-2025-62725 – Docker Compose OCI 工件路径遍历", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247485495&idx=1&sn=14c17432a1a9e269c519a08b8cda0562": "【案例】Google Cloud SSRF 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490917&idx=1&sn=54d0997fc7d1e60ec54c4e9d59efdfa4": "【高危漏洞预警】Docker Desktop安装程序 DLL劫持漏洞CVE-2025-9164", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247637824&idx=4&sn=1406810b76eaedbf5184a183cd40202f": "主流AI浏览器普遍存在致命漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTY3MTE5MA==&mid=2247485578&idx=1&sn=32db29e4c455e418527ae0b88f84a8e8": "想靠挖SRC漏洞赚钱?先想清楚这几个问题", "https://seclists.org/fulldisclosure/2025/Oct/28": "SEC Consult SA-20251027-0 :: Unauthenticated Local File Disclosure in MPDV Mikrolab MIP 2 / FEDRA 2 / HYDRA X Manufacturing Execution System #CVE-2025-12055", "https://www.hackingdream.net/2025/10/sharepoint-online-exploitation-red-team-methodology.html": "SharePoint Online Exploitation: A Red Team Methodology", "https://techcrunch.com/2025/10/29/former-l3harris-trenchant-boss-pleads-guilty-to-selling-zero-day-exploits-to-russian-broker/": "Former L3Harris Trenchant boss pleads guilty to selling zero-day exploits to Russian broker", "https://therecord.media/trenchant-exec-pleads-guilty-russia-secrets": "Former Trenchant exec pleads guilty to selling cyber exploits to Russian broker", "https://www.bleepingcomputer.com/news/security/wordpress-security-plugin-exposes-private-data-to-site-subscribers/": "WordPress security plugin exposes private data to site subscribers", "https://securityaffairs.com/183999/apt/russian-hackers-likely-linked-to-sandworm-exploit-legitimate-tools-against-ukrainian-targets.html": "Russian hackers, likely linked to Sandworm, exploit legitimate tools against Ukrainian targets", "https://securityaffairs.com/183990/security/u-s-cisa-adds-dassault-systemes-delmia-apriso-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Dassault Systèmes DELMIA Apriso flaws to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2025/10/active-exploits-hit-dassault-and-xwiki.html": "Active Exploits Hit Dassault and XWiki — CISA Confirms Critical Flaws Under Attack", "https://thehackernews.com/2025/10/discover-practical-ai-tactics-for-grc.html": "Discover Practical AI Tactics for GRC — Join the Free Expert Webinar", "https://thehackernews.com/2025/10/experts-reports-sharp-increase-in.html": "Experts Reports Sharp Increase in Automated Botnet Attacks Targeting PHP Servers and IoT Devices", "https://lab.wallarm.com/api-attack-awareness-business-logic-abuse-exploits-rules-of-game/": "API Attack Awareness: Business Logic Abuse — Exploiting the Rules of the Game", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524305&idx=1&sn=60cf6de2e02ede50696541627d839f18": "MikroTik 严重漏洞可用于暴露路由器管理员凭据", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504071&idx=1&sn=3452fa2a86bf741b6d8c06e44929d62b": "【已复现】Apache Tomcat RewriteValve 路径遍历漏洞(CVE-2025-55752)安全风险通告", "https://www.anquanke.com/post/id/312882": "Docker Compose 中存在路径遍历漏洞(CVE-2025-62725),通过OCI制品可导致任意文件被覆盖", "https://www.anquanke.com/post/id/312888": "Magento 中存在严重漏洞(CVE-2025-54236),可导致会话劫持与RCE,且已被活跃利用", "https://www.anquanke.com/post/id/312885": "Wear OS 信息应用存在权限漏洞 (CVE-2025-12080),可导致无权限应用在未经用户授权的情况下发送短信/RCS消息,且POC已公开", "https://mp.weixin.qq.com/s?__biz=MzA4ODc0MTIwMw==&mid=2652543228&idx=1&sn=15d7ca8083048573096109f3848e060a": "BSRC漏洞收录规范特殊说明", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247503869&idx=1&sn=95c40ea9ec6d9714d962d2c03e8da4fc": "360漏洞云亮相看雪峰会|共筑数字安全新生态", "https://infosecwriteups.com/1000-bounty-gitlab-security-flaw-exposed-dd309788abb4?source=rss----7b722bfd1b8d---4": "$1000 Bounty: GitLab Security Flaw Exposed", "https://mp.weixin.qq.com/s?__biz=MzA5OTA0MTU4Mg==&mid=2247486348&idx=1&sn=1528d734b5fb4e0e8033500dbbe4b579": "2025-10-30 最新安全漏洞情报和技术资讯头条", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524309&idx=2&sn=6a1f2f3bc9f09a34ea32edd38d3bd146": "CISA:DELMIA 工厂软件漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247503848&idx=3&sn=5eed30437ee74ca9d999e86f92b5447d": "Chromium漏洞曝光:Brash DoS攻击让浏览器瞬间崩溃", "https://mp.weixin.qq.com/s?__biz=MzkwOTg4NDk5NQ==&mid=2247484983&idx=1&sn=a51807c73d5483ee7bdbf47cc5235152": "Copilot高危漏洞,黑客利用Excel表格隐藏指令", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247490775&idx=1&sn=8cdfdbb3497b8f3e14fd7a63362b6a78": "LangChain 任意命令执行漏洞分析", "https://www.4hou.com/posts/pn0r": "QNAP警示ASP.NET Core高危漏洞波及NetBak PC备份工具", "https://mp.weixin.qq.com/s?__biz=Mzk1NzgzMjkxOQ==&mid=2247485770&idx=1&sn=1b0c66de7ecd54785522c4c23597160f": "edusrc漏洞实战挖掘二", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247487479&idx=1&sn=7cd5225f53e3918ff0a5aff9c7723992": "【PHP代审】某客服系统前台RCE审计", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072486&idx=2&sn=df940bbc4e35d0f899c79dcbd9a40053": "【安全圈】Bitter APT 利用旧 WinRAR 漏洞发起新型后门攻击", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504077&idx=1&sn=c64d3f9372b9ed154653cdc467423555": "【已复现】Docker Compose OCI 路径遍历漏洞(CVE-2025-62725)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247495076&idx=1&sn=115b479dcced3ec9e25a5c809882bb8d": "【已复现】Docker Compose OCI 路径遍历漏洞可导致远程命令执行 (CVE-2025-62725)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524739&idx=1&sn=f2d1ead29085eb405715273345bc97d9": "【漏洞通告】Apache Tomcat RewriteValve 目录遍历漏洞 (CVE-2025-55752)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501724&idx=2&sn=0c17c5a1e6ed81094bc16791c5ab64ab": "【漏洞通告】Docker Compose 路径遍历漏洞(CVE-2025-62725)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODY3NDYxNA==&mid=2247486549&idx=1&sn=6be719e106cc2c46974869e1682a2d81": "一个开源的全球通用漏洞库 | 统一漏洞搜索平台", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486975&idx=1&sn=40aa436c0d1e9d629036703d57fb1bca": "一款人工智能驱动的高性能漏洞扫描器 -- Deep-Eye", "https://mp.weixin.qq.com/s?__biz=MzE5ODEwNDM4MA==&mid=2247484222&idx=1&sn=0b6ab90b86a023139db351a5f8219a38": "东胜物流软件 UserInfo.aspx SQL注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247493031&idx=1&sn=89ebec89515dc1f7c5ba4590adcdf6c4": "从用友U8Cloud-FileManageServlet反序列化漏洞开始的0day挖掘之旅", "https://mp.weixin.qq.com/s?__biz=Mzg3OTYxODQxNg==&mid=2247487041&idx=1&sn=bd0587fad6b4662598c6bdc7d4307fa3": "史诗级漏洞!Salesforce遭连环入侵,美APT身份信息数据外泄,FBI紧急查封泄密站", "https://mp.weixin.qq.com/s?__biz=MzIzNTUwMjUwNQ==&mid=2247485807&idx=1&sn=63a9fbcf9fff42c1d2ebc3b7b0ed6966": "如何让你的dddd扫描工具有更多的POC", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247537296&idx=5&sn=91bcdaed62bb74baab2e2f94b3fe31c3": "安全人必备!这款 Java CLI 工具,轻松爬取 Exploit-DB 漏洞数据,导出即用", "https://mp.weixin.qq.com/s?__biz=Mzg4Njk1NDg5NQ==&mid=2247483982&idx=1&sn=3f571601ae1a0c06f22b047bde5c6b58": "安全小知识-第九期-零基础漏洞挖掘入门", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247537296&idx=4&sn=6572c8d1d0a5821102d090762382a4c8": "无需认证可远程执行命令!TP-Link Omada 网关漏洞实锤", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247488360&idx=1&sn=8e83d24bcbbbd4380d34097017cfc2ce": "漏洞预警 | Apache Tomcat Rewrite 模块路径遍历漏洞(CVE-2025-55752)", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247537296&idx=3&sn=b403e7aefb935c2ab5e049792339454d": "警惕!Windows 曝高危漏洞 CVE-2025-59230,远程访问管理器遭攻击可提权控设备", "https://seclists.org/fulldisclosure/2025/Oct/29": "Dovecot CVE-2025-30189: Auth cache causes access to wrong account", "https://seclists.org/fulldisclosure/2025/Oct/30": "Re: : \"Glass Cage\" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885)", "https://www.bitdefender.com/en-us/blog/hotforsecurity/linkedin-gives-you-until-monday-to-stop-ai-from-training-on-your-profile": "LinkedIn gives you until Monday to stop AI from training on your profile", "https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-vmware-tools-flaw-exploited-since-october-2024/": "CISA orders feds to patch VMware Tools flaw exploited by Chinese hackers", "https://www.bleepingcomputer.com/news/security/ex-l3harris-exec-guilty-of-selling-cyber-exploits-to-russian-broker/": "Ex-L3Harris exec guilty of selling cyber exploits to Russian broker", "https://therecord.media/open-source-adaptixc2-red-teaming-tool-russian-cybercrime": "Open-source AdaptixC2 hacking tool has fans in Russian cybercrime underground", "https://securityaffairs.com/184035/hacking/brush-exploit-can-cause-any-chromium-browser-to-collapse-in-15-60-seconds.html": "Brush exploit can cause any Chromium browser to collapse in 15-60 seconds", "https://securityaffairs.com/184017/data-breach/dentsus-us-subsidiary-merkle-hit-by-cyberattack-staff-and-client-data-exposed.html": "Dentsu’s US subsidiary Merkle hit by cyberattack, staff and client data exposed", "https://securityaffairs.com/184025/security/ex-defense-contractor-exec-pleads-guilty-to-selling-cyber-exploits-to-russia.html": "Ex-Defense contractor exec pleads guilty to selling cyber exploits to Russia", "https://securityaffairs.com/184051/hacking/u-s-cisa-adds-xwiki-platform-and-broadcom-vmware-aria-operations-and-vmware-tools-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds XWiki Platform, and Broadcom VMware Aria Operations and VMware Tools flaws to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2025/10/new-brash-exploit-crashes-chromium.html": "New \"Brash\" Exploit Crashes Chromium Browsers Instantly with a Single Malicious URL", "https://thehackernews.com/2025/10/russian-ransomware-gangs-weaponize-open.html": "Russian Ransomware Gangs Weaponize Open-Source AdaptixC2 for Advanced Attacks", "https://mp.weixin.qq.com/s?__biz=MzU5MTExMjYwMA==&mid=2247485736&idx=1&sn=f27d430ad6b2b0865ec24fcaec9987c0": "急聘渗透测试工程师(郑州绿盟)", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451183237&idx=1&sn=c92702256a591c5076ee8d2e9f867e5d": "前情报机构员工与俄罗斯漏洞经纪人交易8个0day漏洞获得数百万美元", "https://infosecwriteups.com/exposed-api-keys-and-secrets-d9c08f34ab73?source=rss----7b722bfd1b8d--bug_bounty": "Exposed API Keys and Secrets with AI", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329712&idx=2&sn=1bbf917bb5b075e9ea9222ad64819470": "Blink渲染引擎漏洞可在60秒内导致Chromium内核浏览器崩溃,PoC已公开", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329712&idx=1&sn=49bb0e9917b02f6732864538cad4cce2": "OpenAI发布基于GPT-5的自主漏洞修复AI Agent", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329712&idx=4&sn=5ffb7573bc284b41f18ccddc7dcc511a": "RediShell RCE漏洞导致全球8500多个Redis实例面临代码执行攻击风险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072509&idx=2&sn=d3f8121beda67518cdde70e636d390d5": "【安全圈】新“Brash”漏洞:单个恶意 URL 即可在数秒内使 Chromium 系列浏览器瘫痪", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490929&idx=1&sn=b5563b8061a9a2847499ca24cd09ffe8": "【高危漏洞预警】Microsoft Windows SMB Server身份认证绕过漏洞CVE-2025-58726", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247494247&idx=1&sn=d4177459c870a0c51a257b1b630593ad": "复旦大学、清华大学等 | 超越漏洞扫描:一种功能性变更驱动的远程软件版本识别方法", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNTU2NA==&mid=2247486563&idx=1&sn=c04c32714a87a31aa3fe58fbaf719e4b": "小红书RCE漏洞?", "https://mp.weixin.qq.com/s?__biz=Mzk0NDM5MjczMw==&mid=2247484533&idx=1&sn=028aabc74d89dd98cb51234b1a20f11e": "小红书翻译模型RCE- LLM幻觉", "https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797278&idx=1&sn=5b3a0d787068a4ce564d4930fde67613": "想让XSS漏洞斩获翻倍?这组Payload利器不容错过!", "https://mp.weixin.qq.com/s?__biz=Mzk3NTE5NTI0OQ==&mid=2247484673&idx=1&sn=8ccbf6bb1560e3619382567f55d3191a": "漏洞预警 | Docker Compose OCI 路径遍历漏洞可导致远程命令执行 (CVE-2025-62725)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603005&idx=2&sn=40181b69e27466e402c789292a095783": "谷歌沉默以对,Chromium漏洞曝光!数十亿用户面临浏览器崩溃风险", "https://horizon3.ai/attack-research/vulnerabilities/cve-2025-59287/": "CVE-2025-59287", "https://horizon3.ai/intelligence/blogs/the-top-10-cves-nodezero-exploited-so-far-in-2025/": "The Top 10 CVEs NodeZero® Exploited So Far in 2025", "https://www.bleepingcomputer.com/news/security/cisa-linux-privilege-escalation-flaw-now-exploited-in-ransomware-attacks/": "CISA: High-severity Linux flaw now exploited by ransomware gangs", "https://therecord.media/chinese-hackers-scan-exploit-firewalls-government": "Chinese hackers scanning, exploiting Cisco ASA firewalls used by governments worldwide", "https://www.bleepingcomputer.com/news/security/chinese-hackers-exploit-windows-zero-day-to-spy-on-european-diplomats/": "Windows zero-day actively exploited to spy on European diplomats", "https://securityaffairs.com/184062/data-breach/ernst-young-exposes-4tb-sql-server-backup-publicly-on-microsoft-azure.html": "EY Exposes 4TB SQL Server Backup Publicly on Microsoft Azure", "https://securityaffairs.com/184076/security/old-linux-kernel-flaw-cve-2024-1086-resurfaces-in-ransomware-attacks.html": "Old Linux Kernel flaw CVE-2024-1086 resurfaces in ransomware attacks", "https://thehackernews.com/2025/10/cisa-flags-vmware-zero-day-exploited-by.html": "CISA Flags VMware Zero-Day Exploited by China-Linked Hackers in Active Attacks", "https://thehackernews.com/2025/10/china-linked-hackers-exploit-windows.html": "China-Linked Hackers Exploit Windows Shortcut Flaw to Target European Diplomats", "https://thehackernews.com/2025/10/china-linked-tick-group-exploits.html": "China-Linked Tick Group Exploits Lanscope Zero-Day to Hijack Corporate Systems", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484923&idx=1&sn=82437eab7e32359b428afff693d39597": "帆软反序列化漏洞利用工具", "https://www.anquanke.com/post/id/312968": "Chromium内核浏览器Blink渲染引擎中存在高危漏洞,可致攻击者在数秒内引发浏览器崩溃", "https://www.anquanke.com/post/id/312947": "Magecart团伙“剑齿虎”刷卡器通过恶意插件渗透WooCommerce,并将其有效载荷隐藏在伪造的PNG图片中", "https://www.anquanke.com/post/id/312957": "Progress公司为其MOVEit Transfer的AS2模块发布补丁,修复高危漏洞 (CVE-2025-10932)", "https://www.anquanke.com/post/id/312986": "RediShell远程代码执行漏洞致使8,500余个Redis实例面临代码执行攻击风险", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524750&idx=1&sn=d471c01bbc34fe3a5b16da387fd7d3dd": "【漏洞通告】Docker Compose OCI路径遍历漏洞 CVE-2025-62725", "https://mp.weixin.qq.com/s?__biz=Mzk3NTQ2MjAxMQ==&mid=2247483870&idx=1&sn=d91957783a27107f1fe818e7c7763843": "ActiveMQ漏洞检测工具发布!一键检测,守护企业安全", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247488285&idx=1&sn=3151f79e0fac6aab0561513a9621aa79": "Apache Tomcat 修补URL重写绕过(CVE-2025-55752)存在RCE和控制台ANSI注入风险", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650613020&idx=4&sn=1b359c1855699f863d7b07f542874c29": "Burp Suite插件 | 监听响应接口、拼接源地址、一键发送请求、快速验证未授权漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533368&idx=3&sn=8af813cf85c60fa876ed8502df5e31d3": "CVE-2025-49844:Redis Lua 脚本中的释放后使用漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247489175&idx=1&sn=54be721ef77fdfab78caeea34e6e1dc0": "Fastjson漏洞原理与绕过方法", "https://mp.weixin.qq.com/s?__biz=Mzk2NDkwMDg3Nw==&mid=2247483774&idx=1&sn=3e0e4d3fa507babbabeaa787c176e564": "Nacos nodes接口存在敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247503919&idx=4&sn=e4a9ff5a7658728ae5bec4974edb802a": "Windows 11“更新并关机”漏洞历经两年终于修复", "https://mp.weixin.qq.com/s?__biz=Mzk3NTE3MjU4Mg==&mid=2247484406&idx=1&sn=6378de6f0b6c01f8ca614e22a4c92e79": "【JAVA安全研究】 鉴权绕过 Spring与Shiro对于\"/\"和\";\"的处理差异导致绕过 CVE-2020-1957", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247486665&idx=1&sn=5a7ebd057dd281cbd1e2d0aa4388fecf": "【案例】HubSpot 账户接管漏洞:参数暴力破解", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247495146&idx=1&sn=96d740a86e8d9aae0437d4882834ef5d": "【真实复现】Redis Lua脚本 UAF 漏洞可导致远程代码执行(CVE-2025-49844)", "https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484830&idx=1&sn=07b8a85f89d2816332a98968035cecd8": "【连载】红蓝对抗-攻防演练-WEB安全渗透测试:SQL注入漏洞深度解析(一)", "https://mp.weixin.qq.com/s?__biz=Mzg4MzY3MTgyMw==&mid=2247484169&idx=1&sn=16d3899502f30a6f9a756535e463fb22": "国外软件漏洞预警!!!拒绝服务通杀全平台", "https://mp.weixin.qq.com/s?__biz=Mzk0NjY3NjE4Ng==&mid=2247485919&idx=1&sn=886982076d0abccabc11184b9b250a01": "微软 WSUS CVE-2025-59287 漏洞回顾分析", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247553127&idx=1&sn=e999f4a9abb58bb5ff153f36f80bb31c": "漏洞挖掘 | 从信息收集到接管统一小通杀(附案例详解)", "https://mp.weixin.qq.com/s?__biz=MzkzNzk5MjEyNg==&mid=2247486366&idx=1&sn=c09c172ea6a4dd0a4144a5832fd00c15": "网安技术入门:从漏洞原理到实战防御的 3 个核心维度(附工具包 + 视频课)", "https://www.bleepingcomputer.com/news/security/china-linked-hackers-exploited-lanscope-flaw-as-a-zero-day-in-attacks/": "China-linked hackers exploited Lanscope flaw as a zero-day in attacks", "https://any.run/cybersecurity-blog/release-notes-october-2025/": "Release Notes: ANY.RUN & ThreatQ Integration, 3,000+ New Rules, and Expanded Detection Coverage", "https://securityaffairs.com/184083/apt/china-linked-unc6384-exploits-windows-zero-day-to-spy-on-european-diplomats.html": "China-linked UNC6384 exploits Windows zero-day to spy on European diplomats", "https://thehackernews.com/2025/11/asd-warns-of-ongoing-badcandy-attacks.html": "ASD Warns of Ongoing BADCANDY Attacks Exploiting Cisco IOS XE Vulnerability", "https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797284&idx=1&sn=a6e02f657b19a94cebcceae764c71630": "WebSocket漏洞挖掘新手指南:轻松发现隐藏的XSS", "https://mp.weixin.qq.com/s?__biz=Mzg5NjUxOTM3Mg==&mid=2247490915&idx=1&sn=0644988af352918c6e44fa7872bf16ea": "XXE漏洞前置知识", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247637866&idx=4&sn=4e23302e960340ceb71edeeaa4dcccac": "《2025年暴露管理指数》深度解读:高危漏洞激增20%", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072545&idx=2&sn=c81c7308a4677ee750540927bea32d33": "【安全圈】潜伏十年的 Linux 高危漏洞正被勒索软件利用,影响Ubuntu等系统", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072545&idx=3&sn=b377ffd060e2d116ea5dc3583fc232c6": "【安全圈】黑客利用Windows零日漏洞攻击欧洲多国外交部门,微软未修补", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498494&idx=1&sn=bac97ff85c737b657923306d701e70b5": "从控股公司下手挖掘漏洞的骚思路", "https://mp.weixin.qq.com/s?__biz=MzkwMDcyMjQxOQ==&mid=2247484732&idx=1&sn=d28f22d90bc94e947dd883499c7ba723": "别把桌面当防线:Docker Desktop 的 Engine API 未授权访问(CVE-2025-9074)", "https://mp.weixin.qq.com/s?__biz=Mzk1NzgzMjkxOQ==&mid=2247485816&idx=1&sn=0df6eb6ed0a0296152aff918aff4ef3a": "记edusrc某高危漏洞的简单挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwNDg1NTU0Mg==&mid=2247484407&idx=1&sn=1e5e0ba7047b044c7a194eb1be3281cf": "远离赌博!德州扑克洗牌机漏洞可操控赌局", "https://isc.sans.edu/diary/rss/32440": "Scans for Port 8530/8531 (TCP). Likely related to WSUS Vulnerability CVE-2025-59287, (Sun, Nov 2nd)", "https://www.cnblogs.com/piaomiaohongchen/p/19148914": "CSPT漏洞浅析 - 飘渺红尘✨", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496464&idx=2&sn=41f254ee0dadde457d733b7b815fc85a": "上周关注度较高的产品安全漏洞(20251027-20251102)", "https://www.eff.org/deeplinks/2025/11/application-gatekeeping-ever-expanding-pathway-internet-censorship": "Application Gatekeeping: An Ever-Expanding Pathway to Internet Censorship", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329758&idx=2&sn=4c9f0a322f8727237074f2e6c888c42c": "Claude AI漏洞:攻击者可利用代码解释器窃取企业数据", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524320&idx=1&sn=306dfe01a82660773ae94222e26c6dc8": "ISC修复 Kea DHCPv4 中的高危DoS 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329758&idx=3&sn=84df5ebc3b5f2fb929e1a3dec1288c6c": "Linux 内核释放后重用漏洞正被用于勒索软件攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072559&idx=2&sn=bcf2305f77dbac5bf6b0b49f922f6bfb": "【安全圈】SMILODON 木马通过伪造 PNG 潜入 WooCommerce 执行支付信息窃取", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072559&idx=1&sn=0d7a0114f06acdd1cc9c2e8f0cd2a305": "【安全圈】新型BOF工具利用Microsoft Teams Cookie加密漏洞可访问用户聊天", "https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484836&idx=1&sn=e518b281f7cd728a8779d4b86cc1f195": "【连载】红蓝对抗-攻防演练-WEB安全渗透测试:SQL注入漏洞深度解析(三)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490936&idx=1&sn=67fb6a9539fe1317e913e84e6dd29759": "【高危漏洞预警】JumpServer ConnectionToken权限验证不当漏洞CVE-2025-62712", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489463&idx=1&sn=0f7ee91993801ca90365e208ebb93f30": "同享人力资源管理系统PeiXun.asmx接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486637&idx=1&sn=dbd8f8e92bdc4a375a39b1a5964a0d9e": "自动化检测 Swagger API 接口未授权访问漏洞工具 - SwaggerHound", "https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797290&idx=1&sn=f782f20396172b96390121a51b649314": "赏金猎人笔记:XSS漏洞的四种高级利用方式", "https://techcrunch.com/2025/11/03/how-an-ex-l3-harris-trenchant-boss-stole-and-sold-cyber-exploits-to-russia/": "How an ex-L3 Harris Trenchant boss stole and sold cyber exploits to Russia", "https://therecord.media/crypto-heist-balancer-exploit": "More than $100 million stolen in exploit of Balancer DeFi protocol", "https://www.cybersecurity360.it/nuove-minacce/incident-response-attacco-informatico-difesa-passo-passo/": "Risolvere un grave incidente informatico: dall’exploit alla difesa passo-passo", "https://www.bleepingcomputer.com/news/security/us-cybersecurity-experts-indicted-for-blackcat-ransomware-attacks/": "US cybersecurity experts indicted for BlackCat ransomware attacks", "https://isc.sans.edu/diary/rss/32442": "ISC Stormcast For Monday, November 3rd, 2025 https://isc.sans.edu/podcastdetail/9682, (Mon, Nov 3rd)", "https://isc.sans.edu/diary/rss/32444": "XWiki SolrSearch Exploit Attempts (CVE-2025-24893) with link to Chicago Gangs/Rappers, (Mon, Nov 3rd)", "https://thehackernews.com/2025/11/cybercriminals-exploit-remote.html": "Cybercriminals Exploit Remote Monitoring Tools to Infiltrate Logistics and Freight Networks", "https://thehackernews.com/2025/11/the-evolution-of-soc-operations-how.html": "The Evolution of SOC Operations: How Continuous Exposure Management Transforms Security Operations", "https://blog.torproject.org/arti_1_7_0_released/": "Arti 1.7.0 released: Onion service restricted discovery, experimental HTTP proxy, relay development, and more.", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585126&idx=2&sn=2bd8b21d75d17810d18190ddf4ae5231": "安全动态回顾|网络安全法完成修改 新型Atroposia恶意软件上线内置本地漏洞扫描功能", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504095&idx=1&sn=207d2951854a132a075d599eb74cacd7": "【已复现】JumpServer ConnectionToken 权限验证不当漏洞(CVE-2025-62712)安全风险通告", "https://www.solidot.org/story?sid=82700": "微软七个月都未修复的 Windows 0day 正被活跃利用", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507953&idx=1&sn=a0962b3d31b98a3207e211498969db4f": "已复现 | Redis Lua 远程代码执行漏洞,PoC公开", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509532&idx=1&sn=ed79c6207af431e823d899ecdb61f939": "秋冬福利季|速来⏳10个漏洞轻松赢最新款周边!", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503587&idx=1&sn=1eeb1f6ec48a5b08eded94f7eef3e282": "雷神众测漏洞周报2025.10.27-2025.11.02", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247628253&idx=1&sn=b1ca3e5f0a027031176a437c5f185c3e": "2024华为漏洞管理白皮书", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329791&idx=1&sn=a0f02e7bd2b67da12a3ef393ebba42e7": "APT组织利用LNK漏洞和OpenSSH后门攻击白俄罗斯军方始末", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524326&idx=2&sn=77c8f9b883e84dc5758247fd1b100205": "Elastic Cloud Enterprise 中存在高危提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247486639&idx=1&sn=ce43d9196d975a5d2b865ebed9fb566b": "Spring框架的漏洞扫描及漏洞利用图形化工具 - YYBaby-Spring_Scan", "https://mp.weixin.qq.com/s?__biz=MzkzNTgzOTg4Mg==&mid=2247486324&idx=1&sn=326ed1be8d277ded8f89f51ffe5f2487": "Struts2全版本漏洞检测工具 — Struts2VulsScanTools", "https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797298&idx=1&sn=c160483d59f47b2ac06595f16eac201b": "XXE漏洞狩猎指南:从原理到实战,斩获高额赏金", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247521027&idx=1&sn=badca6b9aede18e3d17f826fba93ab72": "【SRC实战】通过FUZZ挖掘高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072575&idx=2&sn=b0a0a119af928b981b818b1cfb4ac9cd": "【安全圈】黑客大规模扫描 TCP 端口 8530/8531疑似利用 WSUS 远程执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489404&idx=1&sn=e7c550ee55d4feea09a51b8516771a55": "【漏洞通告】JumpServer连接令牌验证不当漏洞(CVE-2025-62712)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490942&idx=1&sn=62039db9a9e74ecd9d1ad699b24da857": "【高危漏洞预警】React Native CLI 远程命令执行漏洞CVE-2025-11953", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489474&idx=1&sn=b3c36f4caf17aace1b5ca164f529243e": "中成科信票务管理系统OrderManager.ashx接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451183448&idx=1&sn=cca33a014a93e95880058180138294f5": "更新系统!安卓13-16存在零点击远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329791&idx=2&sn=2181e8520e9c3a7925bdf018c2d8a940": "研究人员披露Windows SMB服务器权限提升漏洞(CVE-2025-58726)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524326&idx=1&sn=82a7e38332ab7d2a0d31d4616e76a10d": "谷歌为两个 Chrome 漏洞各支付5万美元赏金", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247628253&idx=2&sn=27ad73fc752c7e7e67afae5a50831947": "车联网安全自动化漏洞利用方法研究", "https://www.bleepingcomputer.com/news/security/hackers-exploit-wordpress-plugin-post-smtp-to-hijack-admin-accounts/": "Hackers exploit WordPress plugin Post SMTP to hijack admin accounts", "https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-auth-bypass-flaw-in-jobmonster-wordpress-theme/": "Hackers exploit critical auth bypass flaw in JobMonster WordPress theme", "https://www.darknet.org.uk/2025/11/gitlab-runner-research-poc-for-abusing-self-hosted-gitlab-runners/": "gitlab-runner-research – PoC for abusing self-hosted GitLab runners", "https://mp.weixin.qq.com/s?__biz=MzUyMDgzMDMyMg==&mid=2247484636&idx=1&sn=916cae948132e44a511694e0869e6629": "价值25,000$的UniFi OS前台RCE发现之旅", "https://securityaffairs.com/184171/cyber-crime/crooks-exploit-rmm-software-to-hijack-trucking-firms-and-steal-cargo.html": "Crooks exploit RMM software to hijack trucking firms and steal cargo", "https://securityaffairs.com/184197/malware/sesameop-new-backdoor-exploits-openai-api-for-covert-c2.html": "SesameOp: New backdoor exploits OpenAI API for covert C2", "http://sites.libsyn.com/18678/researching-and-remediating-rces-via-github-actions-bar-kaduri-roi-nisimi-asw-355": "Researching and Remediating RCEs via GitHub Actions - Bar Kaduri, Roi Nisimi - ASW #355", "https://thehackernews.com/2025/11/a-cybercrime-merger-like-no-other.html": "A Cybercrime Merger Like No Other — Scattered Spider, LAPSUS$, and ShinyHunters Join Forces", "https://thehackernews.com/2025/11/critical-react-native-cli-flaw-exposed.html": "Critical React Native CLI Flaw Exposed Millions of Developers to Remote Attacks", "https://thehackernews.com/2025/11/ransomware-defense-using-wazuh-open.html": "Ransomware Defense Using the Wazuh Open Source Platform", "https://www.4hou.com/posts/8g5l": "Windows SMB高危提权漏洞遭活跃利用 未打补丁设备恐被获取SYSTEM权限", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504108&idx=1&sn=d836b9742399b6bfc3c9fe85eba49b25": "【已复现】React Native CLI 远程命令执行漏洞(CVE-2025-11953)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247516542&idx=1&sn=55df9e8ef778a5aee6bd099276a381b2": "Operation South Star:针对国产手机的 0day 间谍活动", "https://forum.butian.net/share/4631": "某ai系统反序列化漏洞分析CVE-2024-11039", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507958&idx=1&sn=02807b3fdc6e69de9452f8c7117b8b20": "漏洞通告 | JumpServer superconnectiontoken 权限管理错误漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498508&idx=1&sn=edcb4162c0da31e475113aecbbf40032": "分享一个白帽挖掘到漏洞的过程", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647691233&idx=1&sn=4cca7ddb3e402e72b2d107face27d54c": "0078.我是如何发现隐藏的数据泄露并赢得赏金的——检测数据泄露漏洞的实用指南", "https://mp.weixin.qq.com/s?__biz=Mzk0NjY3NjE4Ng==&mid=2247485933&idx=1&sn=001a5e0c635d58a109fe8c8cf5ba7a64": "Next.js应用安全:中间件重定向SSRF漏洞深度解析(CVE-2025-57822)", "https://mp.weixin.qq.com/s?__biz=MzkzNzM1MTcwMA==&mid=2247490372&idx=1&sn=f978e9c1cf8516b72b65c404375fea5e": "Webpack通用漏洞DOM Clobbering导致XSS", "https://mp.weixin.qq.com/s?__biz=MzkzNzg4MTI0NQ==&mid=2247488528&idx=1&sn=d03183a139f69651fd1d0776c05de802": "【cyberstrikelab】PT-17 CVE-2025-24813", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072589&idx=2&sn=f07d5f508e87d5fafda25dedc8ebccb3": "【安全圈】安卓系统组件中存在严重零点击漏洞,可导致远程代码执行攻击", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490947&idx=1&sn=e9152fae20ac24f8be508953e3803362": "【高危漏洞预警】高通Qualcomm代码执行漏洞(CVE-2025-47361)", "https://mp.weixin.qq.com/s?__biz=MzkzNTgzOTg4Mg==&mid=2247486352&idx=1&sn=4a2a0667923eeeb51284204826a7b426": "一款 Nacos 综合漏洞利用工具——NacosExploit", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247493190&idx=1&sn=4f311e26c749607ff100f202c43293d1": "汉王EFaceGO queryMeetingFile.do sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524330&idx=2&sn=bc54e02a8f815ed78b67d3135a9f9607": "热门 React Native NPM 包中存在严重漏洞,开发人员易受攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524330&idx=1&sn=5a3facd9ebc276e8428c3c0ea811bbd2": "谷歌:速修复系统组件中的这个安卓零点击RCE漏洞", "https://www.bleepingcomputer.com/news/security/cisa-warns-of-critical-centos-web-panel-bug-exploited-in-attacks/": "CISA warns of critical CentOS Web Panel bug exploited in attacks", "https://www.bleepingcomputer.com/news/security/hyundai-autoever-america-data-breach-exposes-ssns-drivers-licenses/": "Hyundai AutoEver America data breach exposes SSNs, drivers licenses", "https://therecord.media/japan-nikkei-slack-breach": "Japanese media giant Nikkei reports Slack breach exposing employee and partner records", "https://securityaffairs.com/184226/security/u-s-cisa-adds-gladinet-centrestack-and-cwp-control-web-panel-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Gladinet CentreStack, and CWP Control Web Panel flaws to its Known Exploited Vulnerabilities catalog", "https://www.tenable.com/blog/EDR-exposure-management-blind-spots-7-questions-to-ask": "7 Questions EDR Providers Hope You Won’t Ask About Their “Exposure Management” Solution", "https://thehackernews.com/2025/11/cisa-adds-gladinet-and-cwp-flaws-to-kev.html": "CISA Adds Gladinet and CWP Flaws to KEV Catalog Amid Active Exploitation Evidence", "https://thehackernews.com/2025/11/mysterious-smudgedserpent-hackers.html": "Mysterious 'SmudgedSerpent' Hackers Target U.S. Policy Experts Amid Iran–Israel Tensions", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500286&idx=1&sn=4cce2f7ac0c39a1ee98758a87e03cd64": "一不小心发现了一个 0day!!!", "https://forum.butian.net/share/4633": "新型云服务安全攻防:漏洞挖掘技术与实践", "https://www.anquanke.com/post/id/313015": "CISA发布关键漏洞紧急警报:Gladinet LFI/RCE漏洞与控制面板CWP管理员权限接管漏洞正遭积极利用", "https://www.anquanke.com/post/id/313021": "React Native CLI 中存在严重漏洞(CVE-2025-11953,CVSS 9.8),攻击者可经由暴露的Metro开发服务器实现RCE", "https://www.anquanke.com/post/id/313004": "WordPress的AI引擎插件中存在严重漏洞(CVE-2025-11749),可致网站被攻击者完全控制", "https://www.anquanke.com/post/id/313018": "全球网络间谍组织利用ZipperDown漏洞及Android零日漏洞,通过邮件客户端实现一键远程代码执行与账户接管", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603265&idx=3&sn=e6576c3dfd7b2ef0e1aa066a64add6c0": "谷歌AI再立新功,“Big Sleep”发现Safari五大安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096594&idx=2&sn=970fa3cc3b520c953a2d0473c1ffaa43": "Windows云文件功能中的驱动程序漏洞被黑客利用,成功提升系统权限", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490952&idx=1&sn=0b5578daea9adb8dffb366b87581ea56": "【高危漏洞预警】Django SQL注入漏洞CVE-2025-64459)", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649175011&idx=1&sn=180ecff686712cc7095b6b5897b23273": "有关单位未按规定发布漏洞信息被处罚", "https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797310&idx=1&sn=8fa6846d4161c0ece660b4de0ddb8b1a": "漏洞就藏在“乱码”里:赏金猎人的字符编码破译术", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096594&idx=1&sn=2d5fd738c828ab794b90e636bcfe4dff": "黑客利用OneDrive.exe的DLL侧载漏洞执行恶意代码", "https://blog.elcomsoft.com/2025/11/exploring-ipados-tvos-and-audioos-17-and-18-devices-file-system-and-keychain-extraction/": "Exploring iPadOS, tvOS and audioOS 17 and 18 Devices: File System and Keychain Extraction", "https://www.cybersecurity360.it/legal/privacy-dati-personali/videosorveglianza-urbana-pochi-giorni-e-i-filmati-spariscono-ma-la-privacy-non-e-un-alibi/": "Videosorveglianza urbana: pochi giorni e i filmati spariscono, ma la privacy non è un alibi", "https://securityaffairs.com/184268/hacking/alleged-russia-linked-curly-comrades-exploit-windows-hyper-v-to-evade-edrs.html": "Alleged Russia-linked Curly COMrades exploit Windows Hyper-V to evade EDRs", "https://thehackernews.com/2025/11/cisco-warns-of-new-firewall-attack.html": "Cisco Warns of New Firewall Attack Exploiting CVE-2025-20333 and CVE-2025-20362", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524336&idx=2&sn=8870a1783120abfbdf96905ba2fdddab": "CISA:CWP严重漏洞已遭在野利用", "https://www.4hou.com/posts/nlpD": "Windows Server WSUS高危漏洞遭在野利用 微软紧急发布补丁", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585178&idx=2&sn=316d25dca1d9667e401962858e65f20b": "Windows Server WSUS高危漏洞遭在野利用", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515173&idx=2&sn=5e1f052f72d215b27dece833459ae14a": "公安部网安局通报:某漏洞平台未按规定发布漏洞信息被责令整改", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072605&idx=3&sn=dc5ea66a360ae0467ff7bdf939c202e4": "【安全圈】React Native CLI 零日漏洞:开发者系统面临远程攻击风险", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139243&idx=2&sn=32e0c1ef5dee1a75ee8846f1987f2cd1": "“双11”反诈指南:警惕“退款理赔”与“百万保障”新骗局;加密货币价格飙升引发PHP漏洞利用潮,攻击者大规模部署挖矿程序| 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603667&idx=2&sn=03686a433abd68c496ed208b6aab988e": "微软Teams曝严重漏洞:攻击者可冒充高管伪造身份,全球3.2亿用户受威胁", "https://mp.weixin.qq.com/s?__biz=MzAwMTMzMDUwNg==&mid=2650889814&idx=1&sn=2900e94a67722c18d8ca7ab166ac85ef": "【荐书】《Web漏洞分析与防范实战》套装全2册来了!", "https://mp.weixin.qq.com/s?__biz=MzUyMjk4NzExMA==&mid=2247507464&idx=1&sn=fa744e1c4a49e29091fc417d2ca74226": "警惕!APT-C-08(蔓灵花)组织首次借WinRAR漏洞CVE-2025-6218实施网络攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329972&idx=1&sn=4710ad685f2dfafcaa9da7efd0ed5f9d": "AI 全自动漏扫工具更新!联合“资产发现”工具,帮你一键搞定找接口、测漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247496499&idx=1&sn=d6dcde468457c835229d2b83687fb0a5": "CCS'25 杰出论文奖: Web 应用越权漏洞检测新进展", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789373&idx=1&sn=23dbbc6520d871be580baf1455ec6516": "ChatGPT曝七大漏洞,可诱使AI泄露记忆与聊天记录", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524343&idx=1&sn=bafd6d107e51fa5d67f552a22dd26211": "Chrome紧急修复 WebGPU 和 V8引擎中的三个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3ODUzNzMzOQ==&mid=2648562853&idx=1&sn=bc0d16218fecc81ef5aa64ede6a8b026": "DudeSuite 漏洞更新播报 20251107", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651329972&idx=2&sn=6958144eaa1853dc966bc1000a97ae4f": "GPT-4o与GPT-5存在七项零点击攻击漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603945&idx=4&sn=496a77a25e59671f8e5c5b380d758c1a": "NVIDIA App曝高危漏洞,紧急更新防黑客入侵!", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096602&idx=1&sn=299bc901842aef25108f90b845a4b497": "NVIDIA NVApp 漏洞可致恶意代码执行", "https://mp.weixin.qq.com/s?__biz=MzkxODc0Mzk4OQ==&mid=2247484787&idx=1&sn=e85605021c07afbdcc238acc5dd88b86": "SSH高危漏洞修复、屏蔽工具----付费文章集合版本", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247524829&idx=1&sn=d0db4dd0d5eb7913ac16bf8f78e4ca9c": "wepoc 高效多任务nuclei 图形化POC扫描工具", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072620&idx=1&sn=8f70b2c8f6cc8495d0e6692ce5d981d8": "【安全圈】ChatGPT曝出七大安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072620&idx=4&sn=cd862a7afb4d45dad113fd278b270cb1": "【安全圈】NVIDIA 修复 Windows 版 NVApp 严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501753&idx=2&sn=98fb11fa65c0ecebfa4a1fa04ec9736a": "【漏洞通告】Django SQL注入漏洞(CVE-2025-64459)", "https://mp.weixin.qq.com/s?__biz=MzI1ODI0MTczNQ==&mid=2247491225&idx=1&sn=3fe6a97e7f7cd4411605787d25fa0830": "【赠书抽奖】《Web漏洞分析与防范实战》上下册", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490960&idx=1&sn=8c0d7ee4efff3cef20ee2be9727a6d4f": "【高危漏洞预警】AutoCAD权限提升漏洞(CVE-2025-10885)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490960&idx=2&sn=a931af8f0470f877a18f8c51e416a1f3": "【高危漏洞预警】Dataease拒绝服务漏洞CVE-2025-64164", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247537586&idx=4&sn=19899a2d043f495eda174ed453d85b0a": "不按规定发漏洞信息?有关单位被处罚,给行业敲警钟", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139258&idx=2&sn=1c5e3e24e36adb99a54567b2b477a1a7": "中国牵头制定的工业5G国际标准发布;92%漏洞检测率!OpenAI推出AI安全研究员颠覆传统防御模式 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064428&idx=1&sn=7b9e0004f744ee1edef9442b7b0724fc": "信息安全漏洞周报【第046期】", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247521259&idx=1&sn=921de1bb763fcf63e63342bdd12bc1fa": "安全大厂实验室的《Web漏洞分析与防范实战》什么水平?", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533421&idx=1&sn=30972cc727df5d6b837709fd7f5ed1a8": "安全报告:CVE-2025-64459 — Django QuerySet _connectorSQL 注入", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504113&idx=1&sn=ebbfa1f912a759a56775f303c03ba0ee": "安全热点周报:黑客利用 Gladinet 文件共享软件中的零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096602&idx=2&sn=aea8c8ae0fbae9ad74287a60f4b73cd7": "思科 UCCX存在远程任意代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524343&idx=2&sn=54f09a81eb6da8e9b06f5a17b8b70644": "思科修复 Contact Center Appliance 中的多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556711&idx=1&sn=921bc63ee014e892a8a53ec0adae25fb": "模拟红队进行漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797319&idx=1&sn=2b853936db4e5d2420749e9bb634f1ef": "漏洞无处可藏:OWASP dependency_check助你高效挖掘安全隐患", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247537586&idx=3&sn=eadb658ae974ce25311eb6b299d19010": "警惕!Windows SMB 高危漏洞遭滥用,设备或被获取最高权限", "https://seclists.org/fulldisclosure/2025/Nov/13": "runc container breakouts via procfs writes: CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881", "https://www.intigriti.com/researchers/blog/hacking-tools/exploiting-jwt-vulnerabilities": "Exploiting JWT vulnerabilities: A complete guide", "https://www.bleepingcomputer.com/news/security/cisco-actively-exploited-firewall-flaws-now-abused-for-dos-attacks/": "Cisco: Actively exploited firewall flaws now abused for DoS attacks", "https://therecord.media/revised-cyber-command-master-plan-dod-pentagon": "Don't call it Cyber Command 2.0: Master plan for digital forces will take years to implement", "https://www.bleepingcomputer.com/news/security/new-landfall-spyware-exploited-samsung-zero-day-via-whatsapp-messages/": "New LandFall spyware exploited Samsung zero-day via WhatsApp messages", "https://www.bleepingcomputer.com/news/security/qnap-fixes-seven-nas-zero-day-vulnerabilities-exploited-at-pwn2own/": "QNAP fixes seven NAS zero-day flaws exploited at Pwn2Own", "https://securityaffairs.com/184331/security/landfall-spyware-exploited-samsung-zero-day-cve-2025-21042-in-middle-east-attacks.html": "LANDFALL spyware exploited Samsung zero-day CVE-2025-21042 in Middle East attacks", "https://www.praetorian.com/blog/how-i-found-the-worst-asp-net-vulnerability-a-10k-bug-cve-2025-55315/": "How I Found the Worst ASP.NET Vulnerability — A $10K Bug (CVE-2025-55315)", "https://thehackernews.com/2025/11/samsung-zero-click-flaw-exploited-to.html": "Samsung Zero-Click Flaw Exploited to Deploy LANDFALL Android Spyware via WhatsApp", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500894&idx=1&sn=c3c917eb3fa8268ac1592741c312559b": ".NET 通过 LINQ 投影加载程序集实现命令执行", "https://www.anquanke.com/post/id/313045": "Django框架中存在多处安全漏洞,可引发SQL注入与拒绝服务攻击", "https://www.anquanke.com/post/id/313049": "思科发布警告:黑客正积极在野利用其ASA与FTD防火墙中的零日远程代码执行漏洞", "https://www.anquanke.com/post/id/313069": "美国CISA发布警告:Gladinet CentreStack与Triofox文件共享软件中的漏洞正遭攻击利用", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653090450&idx=1&sn=9b1cd05528a894225f16e2f7c2b9ca31": "复盘大疆 Pocket 的七年:从「定义产品」到「定义时代」", "https://mp.weixin.qq.com/s?__biz=Mzk3NTE3MjU4Mg==&mid=2247484441&idx=1&sn=40d4254b41abb0773586f2641cb78a6e": "Apache Tomcat RewriteValve目录遍历漏洞 | CVE-2025-55752 漏洞分析 漏洞研究", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330013&idx=2&sn=63074cae20f3c11bb7d35244d28b19a6": "FreeBuf周报 | GPT存在七项零点击攻击漏洞;JS库React高危漏洞威胁数百万开发者", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096610&idx=2&sn=f11a9a3651bbf0e888d716c28bb5d387": "HTTP/2 'MadeYouReset' 漏洞可被用于发起拒绝服务(DoS)攻击", "https://mp.weixin.qq.com/s?__biz=Mzk2NDkwMDg3Nw==&mid=2247483836&idx=1&sn=63b092a59ec09f93dfbef7e47539107f": "Oracle E-Business Suite存在远程代码执行漏洞(CVE-2025-61882)附POC", "https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797325&idx=1&sn=9e272c1790005e498e1b6d73bbc1544e": "XXE漏洞狩猎清单:掌握这7种Payload,告别“一无所获”", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072645&idx=4&sn=47d7d2203cd91624a0fcace92229b992": "【安全圈】三星Galaxy零日漏洞被利用在手机中植入间谍软件", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247527877&idx=1&sn=8799cd986549d66ffc5e8b3a1063003f": "一款红队未授权漏洞检测浏览器插件", "https://mp.weixin.qq.com/s?__biz=MzkzNTgzOTg4Mg==&mid=2247486392&idx=1&sn=c54fbfc68bbd4abac39d7424c51e4b26": "一款适用于Windows的漏洞库知识库批量下载与更新工具", "https://mp.weixin.qq.com/s?__biz=Mzk0NTYwNzY3NQ==&mid=2247483970&idx=1&sn=4a3e25ab2266a9790de9ec55f323bfb0": "双11特惠&&漏洞挖掘课程介绍", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247646358&idx=1&sn=1ed242c274fd5281d15b362088ef7389": "在看 | 周报:知道创宇数据泄漏事件实为“炒冷饭”;某漏洞平台未按规定发布漏洞信息被责令整改", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533471&idx=2&sn=ee990f9f76d32a9a9ebd4be3a4020b4b": "威胁日简报:恶意软件、僵尸网络、GDI漏洞、选举攻击等中的人工智能工具", "https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960252&idx=1&sn=a17f504cfb7c8844f295b02f099aa720": "我们的AI发现了一个零知识证明库的漏洞,Sam Altman的项目也用了这个库", "https://mp.weixin.qq.com/s?__biz=MzU3MjczNzA1Ng==&mid=2247500406&idx=1&sn=c1b7d81deb2e03b6e7fd1d9602ff070b": "挖漏洞一个月赚两万多?别被骗了!", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650613114&idx=4&sn=8854380a20a74a9710ea8cece0c20178": "日常运营提升效率 | 快速检索漏洞名称、问题描述、风险分析以及安全建议", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650613114&idx=1&sn=5435917840030de5c4b0e80be1cb5d32": "苹果新版网页版App Store 前端源代码因配置错误被泄露|安卓系统组件中存在严重零点击漏洞,可导致远程代码执行攻击", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533498&idx=2&sn=e6144f8518962086d4b156bda9cbc94e": "expr-eval JavaScript 库中的漏洞可能导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072656&idx=2&sn=98caa55fb6a7d4eab9cd8a415acc1541": "【安全圈】QNAP 紧急修复7大零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTI4NTY4MQ==&mid=2247491709&idx=1&sn=c44dc784996717a3b78bfa43cbcca570": "文末送《Web漏洞分析与防范实战》带你回到黑客梦开始的地方!", "https://mp.weixin.qq.com/s?__biz=Mzk1NzgzMjkxOQ==&mid=2247485929&idx=1&sn=2747540464ccff665c889c10ad6d98a6": "记一次edusrc漏洞8rank的简单挖掘", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496480&idx=1&sn=5904a29aaac5251ad3700c8e816a2cf9": "CNVD漏洞周报2025年第43期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496480&idx=2&sn=4ff4f71079f5049f3cfb2012b57cf177": "上周关注度较高的产品安全漏洞(20251103-20251109)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247521317&idx=1&sn=25c96159e70fb027e7b3b26849d96da8": "5分钟挖出网站漏洞的高效排查法u200bu200b", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489485&idx=1&sn=fe924fe786dbbef84430fa706e026deb": "KINGOSOFT高校智慧校园教学综合服务平台downloadzgkssmwd.jsp接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg5NjUxOTM3Mg==&mid=2247491024&idx=1&sn=5a7883a7ae546a7aeeddc22a203d7497": "XXE漏洞进阶玩法", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490966&idx=1&sn=9a2e2433c083d9e15361fd5c757308fa": "【高危漏洞预警】Open WebUI任意代码执行漏洞CVE-2025-64495", "https://therecord.media/california-data-privacy-agency-whistleblower-protections-proposal": "Data privacy whistleblowers would get expanded protections under California proposal", "https://therecord.media/enforcement-begins-new-york-pricing-law": "Enforcement begins for New York’s algorithmic pricing law", "https://www.bleepingcomputer.com/news/security/popular-javascript-library-expr-eval-vulnerable-to-rce-flaw/": "Popular JavaScript library expr-eval vulnerable to RCE flaw", "https://isc.sans.edu/diary/rss/32462": "ISC Stormcast For Monday, November 10th, 2025 https://isc.sans.edu/podcastdetail/9692, (Mon, Nov 10th)", "https://www.tenable.com/blog/tenable-is-a-leader-in-the-first-ever-gartner-magic-quadrant-for-exposure-assessment": "Tenable Is a Leader in the First-Ever Gartner® Magic Quadrant™ for Exposure Assessment Platforms", "https://thehackernews.com/2025/11/hackers-exploiting-triofox-flaw-to.html": "Hackers Exploiting Triofox Flaw to Install Remote Access Tools via Antivirus Feature", "https://thehackernews.com/2025/11/weekly-recap-hyper-v-malware-malicious.html": "⚡ Weekly Recap: Hyper-V Malware, Malicious AI Bots, RDP Exploits, WhatsApp Lockdown and More", "https://www.vmray.com/continuous-threat-exposure-management-ctem/": "The Ultimate Guide to Continuous Threat Exposure Management (CTEM)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524352&idx=1&sn=32cb3690b5c7841d5cd484997fc1a32b": "QNAP修复Pwn2Own大赛上发现的7个 NAS 0day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504126&idx=1&sn=6c30055553c4d0766ad738cb51c9fca2": "【已复现】Open WebUI 任意代码执行漏洞(CVE-2025-64495)安全风险通告", "https://forum.butian.net/share/4636": "当配置成了炸弹:利用 LibreNMS snmpget 配置篡改实现 RCE 的完整攻击链", "https://www.anquanke.com/post/id/313110": "Elastic Defend 中存在高危漏洞(CVE-2025-37735),可导致本地攻击者以SYSTEM权限删除任意文件", "https://www.anquanke.com/post/id/313094": "三星设备零点击漏洞(CVE-2025-21042)可通过恶意DNG图像传播LANDFALL间谍软件", "https://www.anquanke.com/post/id/313104": "智能体编排框架LangGraph中存在远程代码执行漏洞(CVE-2025-64439),系统面临安全风险", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789380&idx=1&sn=862e488d716da792b7aa1e1c2beeaba1": "卢浮宫惊天劫案背后:长达10余年的弱密码安全漏洞暴露", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139268&idx=2&sn=feebfcfb4ee786fc3fe369fa38127cf7": "数据安全国标体系日趋完善,44项标准护航《网络数据安全管理条例》落地;Meta巨额收入来自诈骗广告,平台监管漏洞引关注 | 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604044&idx=1&sn=b4a9afda0c3cbd7755e716331ec19d7a": "SDC2025 议题回顾 | 利用大模型辅助自动化 BYOVD 驱动漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604044&idx=3&sn=f4abd7819eccecbe85bc803633762cb2": "三星0Day漏洞遭间谍软件LANDFALL利用入侵Galaxy设备", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498546&idx=1&sn=c7088de23447268302257500ed480c3b": "SRC实战之严重漏洞", "https://checkmarx.com/blog/malicious-open-source-packages-the-imminent-appsec-threat-for-which-most-enterprises-are-underprepared/": "Malicious Open-Source Packages: The Imminent AppSec Threat for which Most Enterprises are Underprepared", "https://mp.weixin.qq.com/s?__biz=MzkwMDcyMjQxOQ==&mid=2247484756&idx=1&sn=ede7142b21db448a17230f2605116c65": "CVE-2025-34041 深挖:深信服EDR命令注入复现与检测要点", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524359&idx=3&sn=dca660000a6936def1900d3d5cf13519": "JavaScript 热门库 expr-eval 易受 RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604080&idx=2&sn=e8be2a3e73a6aecb13ebf43dc72aae0e": "Zoom曝高危漏洞:攻击者可越权获取会议数据,请立即更新!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524359&idx=2&sn=6daf5f0d15e7847808853efadff34393": "runC 存在多个严重漏洞,Docker 和K8s容器隔离机制面临风险", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330233&idx=3&sn=116042e940f4573d54f44b1b2e661f22": "runc关键漏洞威胁Docker和Kubernetes容器隔离安全", "https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797354&idx=1&sn=9af3a8cca6fe8af8e1488b0af7e36d14": "《别只盯着SQL注入了!这个被低估的漏洞,才是你的赏金“金矿”》", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072684&idx=3&sn=b6950f2c8a2430eae813fb56247c4863": "【安全圈】Zoom 多项漏洞可被利用绕过访问控制导致数据泄露", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072684&idx=2&sn=1e5dc92d90633b2491948fa3e9c91e0e": "【安全圈】三项严重漏洞允许攻击者突破 Docker、Kubernetes 容器隔离", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504138&idx=1&sn=139f49200a7c297b738fff871c805343": "【已复现】Milvus Proxy 身份认证绕过漏洞(CVE-2025-64513)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501767&idx=2&sn=bc024430f0ffdf5f7b6321ee1b553fc9": "【漏洞通告】Spring Cloud Gateway 表达式注入漏洞(CVE-2025-41253)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490971&idx=1&sn=2a5bbec0c03e3bb74c0de423185c0e64": "【高危漏洞预警】Spring Cloud Gateway表达式注入漏洞CVE-2025-41253", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489496&idx=1&sn=99a8baf34ce40094a54deb90cbaf7e4d": "东胜物流软件UnBind接口存在SQL注⼊漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg4Njk1NDg5NQ==&mid=2247483990&idx=1&sn=c9695b6c2db8c93807eeb2a6f485e90a": "安全小知识-第十期_密码找回逻辑漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzk1NzgzMjkxOQ==&mid=2247486038&idx=1&sn=9cb6015f1335927ac65406980fbb528a": "记一次edu漏洞挖掘/从信息泄露到内网滲透", "https://pixmsecurity.com/blog/blog/70-clicks-in-24-hours-onedrive-phish-explodes-via-backblaze/": "70 Clicks in 24 Hours: OneDrive Phish Explodes via Backblaze", "https://securityaffairs.com/184439/hacking/critical-triofox-bug-exploited-to-run-malicious-payloads-via-av-configuration.html": "Critical Triofox bug exploited to run malicious payloads via AV configuration", "https://securityaffairs.com/184452/hacking/u-s-cisa-adds-samsung-mobile-devices-flaw-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Samsung mobile devices flaw to its Known Exploited Vulnerabilities catalog", "https://steflan-security.com/offsec-web-expert-oswe-review/?utm_source=rss&utm_medium=rss&utm_campaign=offsec-web-expert-oswe-review": "OffSec Web Expert (OSWE) Review", "https://www.tenable.com/blog/microsofts-november-2025-patch-tuesday-addresses-63-cves-cve-2025-62215": "Microsoft’s November 2025 Patch Tuesday Addresses 63 CVEs (CVE-2025-62215)", "https://thehackernews.com/2025/11/cisos-expert-guide-to-ai-supply-chain.html": "CISO's Expert Guide To AI Supply Chain Attacks", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500902&idx=1&sn=b066c88be376d6aa18b4218946f872e8": ".NET 环境下的 CSRF 漏洞与防御策略详解", "https://www.rtl-sdr.com/talking-sasquach-reviews-the-uconsole-and-rtl-sdr-antenna-board-expansion/": "Talking Sasquach Reviews the uConsole and RTL-SDR Antenna Board Expansion", "https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247501482&idx=1&sn=f55d0e25e328af7fe37fd6a27677190f": "处罚案例 | 某科技公司未及时修复安全漏洞,网警依法处罚", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504132&idx=1&sn=053b67fe9460b2ac9fcc4ab6164d1c53": "【已复现】Spring Cloud Gateway 表达式注入漏洞(CVE-2025-41253)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540780&idx=1&sn=5a138792e01db25a9f60a56f7d0e93b2": "最新版 | OWASP TOP10 安全漏洞,新增两大类别", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503594&idx=1&sn=91fcc98336c62c1862488511fae73d97": "雷神众测漏洞周报2025.11.3-2025.11.9", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096626&idx=2&sn=d82f42ba2c88dcbbe48b2fe0193b92fc": "Ivanti Endpoint Manager 漏洞允许攻击者在目标系统任意位置写入文件", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247493256&idx=1&sn=cce5c81c2cf3bc28c377fba82062999b": "KINGOSOFT 高校智慧校园教学综合服务平台 downloadzgkssmwd.jsp 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1NzgzMjkxOQ==&mid=2247486040&idx=1&sn=80cfa917ec2d97904770ea3ce2842ddc": "Tomcat常见漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MzkzMzczODA0OQ==&mid=2247484340&idx=1&sn=78afafd1d411aaf7c8e49ca27766ef10": "Windows 11 PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710)附带POC", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096626&idx=1&sn=1e6187713ff19f2add287f5cd6afd618": "Windows内核0day漏洞遭野外利用实现权限提升", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490982&idx=1&sn=a362e9a8439901974275438d4d33a289": "【漏洞预警】Elastic Cloud Enterprise权限提升漏洞CVE-2025-37736", "https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484845&idx=1&sn=fd76d2aed5fc7fe185fda32fc683ba31": "【连载】红蓝对抗-攻防演练-WEB安全渗透测试:XSS跨站脚本攻击漏洞(一)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490982&idx=2&sn=a5aae0e1371bb8ca3e44a47d98d6f708": "【高危漏洞预警】微软11月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzM1MTcwMA==&mid=2247490463&idx=1&sn=8fb367135c738fdffdbed4b8c58fb3ed": "语法混淆:利用多语言语法差异实现漏洞利用的高级技巧", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533539&idx=1&sn=9116855ab894bfb28b959511c3e31666": "针对 CVE-2025-60710 的安全公告,这是针对该 LPE 的 PoC", "https://www.malwarebytes.com/blog/news/2025/11/update-now-november-patch-tuesday-fixes-windows-zero-day-exploited-in-the-wild": "Update now: November Patch Tuesday fixes Windows zero-day exploited in the wild", "https://therecord.media/cyber-command-nsa-potential-pick-lt-gen-joshua-rudd": "Army officer with Indo-Pacific experience emerges as potential Cyber Command, NSA pick", "https://any.run/cybersecurity-blog/click-fix-attacks-eric-parker-analysis/": "ClickFix Explosion: Cross-Platform Social Engineering Turns Users Into Malware Installers", "https://therecord.media/federal-cisco-patches-warning": "Federal agencies not fully patching vulnerable Cisco devices amid ‘active exploitation,’ CISA warns", "https://www.bleepingcomputer.com/news/security/hackers-exploited-citrix-cisco-ise-flaws-in-zero-day-attacks/": "Hackers exploited Citrix, Cisco ISE flaws in zero-day attacks", "https://therecord.media/strike-force-southeast-asia-scams": "US announces ‘strike force’ to counter Southeast Asian cyber scams, sanctions Myanmar armed group", "https://therecord.media/advanced-hacker-exploiting-cisco-citrix-zero-days-amazon": "‘Advanced’ hacker seen exploiting Cisco, Citrix zero-days", "https://securityaffairs.com/184507/security/microsoft-patch-tuesday-updates-for-november-2025-fixed-an-actively-exploited-windows-kernel-bug.html": "Microsoft Patch Tuesday security updates for November 2025 fixed an actively exploited Windows Kernel bug", "https://securityaffairs.com/184528/security/synology-patches-critical-beestation-rce-flaw-shown-at-pwn2own-ireland-2025.html": "Synology patches critical BeeStation RCE flaw shown at Pwn2Own Ireland 2025", "https://thehackernews.com/2025/11/amazon-uncovers-attacks-exploited-cisco.html": "Amazon Uncovers Attacks Exploited Cisco ISE and Citrix NetScaler as Zero-Day Flaws", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524369&idx=2&sn=07fedd121d307d4b3867834ea9b25395": "微软2025年11月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524369&idx=1&sn=98014966c8dafda944a1e00a5e3decb1": "群晖修复 Pwn2Own大赛中利用的BeeStation 0day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504139&idx=1&sn=cb450b5580783621b7ad808cff70f9c0": "微软11月补丁日多个产品安全漏洞风险通告:1个在野利用、4个紧急漏洞", "https://www.anquanke.com/post/id/313156": "Devolutions Server存在严重漏洞(CVE-2025-12485,CVSS 9.4),可通过预MFA Cookie劫持实现用户冒充", "https://www.anquanke.com/post/id/313189": "DragonForce勒索软件进化:利用BYOVD终结EDR并修复Conti V3加密缺陷", "https://www.anquanke.com/post/id/313150": "SuiteCRM中存在SQL注入漏洞(CVE-2025-64492与CVE-2025-64493),致客户数据面临泄露风险", "https://www.anquanke.com/post/id/313147": "Triofox零日漏洞(CVE-2025-12480)正遭积极利用:主机头验证绕过可导致未授权管理员接管", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247485769&idx=1&sn=a34faa266b8d8c0bde76edb3d3631726": "如何从漏洞管理升级到暴露面管理", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247527507&idx=1&sn=e5ae2eabdd0c445211130b727ce1f49f": "2025-11微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489408&idx=1&sn=2ce5c823d816b19d06644cfba27cee95": "【安全更新】微软11月安全更新多个产品高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072716&idx=4&sn=ef6a80b1a03ac75d4f0170b9932d19c1": "【安全圈】CISA 将 WatchGuard Fireware 高危漏洞列入已被利用漏洞目录", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072716&idx=1&sn=38412a9178d6f38b8c9329d74034513f": "【安全圈】OpenAI Sora 2 漏洞通过音频转录暴露系统提示", "https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484848&idx=1&sn=5045a798d5cceaa24256a99799cb5b86": "【连载】红蓝对抗-攻防演练-WEB安全渗透测试:XSS跨站脚本攻击漏洞(二)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490987&idx=1&sn=9a17f809b161cebad9fffd1da3961112": "【高危漏洞预警】东方通TongWeb ejbserver远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489507&idx=1&sn=d24ab1dbbf9f0f9362a6f2afcdfe17b9": "天地伟业Easy7 downloadWordRecord接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzE5ODEwNDM4MA==&mid=2247484241&idx=1&sn=585236988187708d216cf474110d78e7": "落云安全·内部圈子:POC、红队与源码的研究共同体", "https://horizon3.ai/attack-research/vulnerabilities/cve-2025-12480/": "CVE-2025-12480", "https://horizon3.ai/attack-research/vulnerabilities/n-able-n-central-vulnerabilities-cve-2025-9316-cve-2025-11700/": "CVE-2025-9316, CVE-2025-11700", "https://securityaffairs.com/184561/hacking/amazon-alerts-advanced-threat-actor-exploits-cisco-ise-citrix-netscaler-zero-days.html": "Amazon alerts: advanced threat actor exploits Cisco ISE & Citrix NetScaler zero-days", "https://securityaffairs.com/184573/security/u-s-cisa-adds-watchguard-firebox-microsoft-windows-and-gladinet-triofox-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds WatchGuard Firebox, Microsoft Windows, and Gladinet Triofox flaws to its Known Exploited Vulnerabilities catalog", "https://www.tenable.com/blog/how-rapid-ai-adoption-is-creating-an-exposure-gap": "How Rapid AI Adoption Is Creating an Exposure Gap", "https://thehackernews.com/2025/11/cisa-flags-critical-watchguard-fireware.html": "CISA Flags Critical WatchGuard Fireware Flaw Exposing 54,000 Fireboxes to No-Login Attacks", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504145&idx=1&sn=e87ffc546abe4fc51baa1e751a82f076": "【已复现】Windows 任务主机进程权限提升漏洞(CVE-2025-60710)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507962&idx=1&sn=f08e1364ea4ba789e5f7b77d4c5f9195": "漏洞通告 | TongWeb应用服务器 ejbserver 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604124&idx=3&sn=23593b87e2f899c70583a2e18866e9b8": "安全通告:Chrome V8引擎发现高危漏洞,官方发布修复更新", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498563&idx=1&sn=a7db785c1e15e5cc01dc9aff8975e4bf": "如何通过搜索JS文件找到一些有价值的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492984&idx=1&sn=427515004ded06320d11eb8ca7d04914": "【原创0day】东方通应用服务器 EJB 反序列化远程代码执行漏洞安全通告", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247496951&idx=1&sn=77a65b8884518163c1d72e1d34963aab": "2025年10月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096634&idx=2&sn=b80b5dd0f509e15cab90e65f3b925592": "Fortinet FortiWeb 零日漏洞遭利用,攻击者可获取完全管理权限", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096634&idx=1&sn=047260b234adfaa8e76c9ec9d56f912a": "GitLab多个漏洞允许攻击者注入恶意指令窃取敏感数据", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330440&idx=3&sn=46b796ec87fc7ebb7b8f00a1af392a30": "GitLab曝多个安全漏洞,攻击者可注入恶意指令窃取敏感数据", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489519&idx=1&sn=0829ee65125f779710573ace4dfd9e81": "React Native CLI open-url接口存在远程命令执行漏洞CVE-2025-11953 附POC", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072732&idx=3&sn=672a1a5548a136bfa3ef4c32224b534a": "【安全圈】Imunify360 漏洞暴露五千六百万站点面临远程入侵风险", "https://mp.weixin.qq.com/s?__biz=MzkxNjc0ODA3NQ==&mid=2247484633&idx=1&sn=38518418e9cf4927795058dd813d523f": "【漏洞挖掘Tips】模糊测试和绕过AWS WAF", "https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484855&idx=1&sn=066acb504bfe34e33e43346f359df5cc": "【连载】红蓝对抗-攻防演练-WEB安全渗透测试:文件上传漏洞原理(一)", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247484976&idx=1&sn=c72ab946f5728b58c819d32601bdf610": "【附POC】极易利用的Windows11提权漏洞复现(CVE-2025-60710)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490992&idx=1&sn=1271e5bd9762b896bd1c40b3c889518d": "【高危漏洞预警】Apache OFBiz任意文件上传漏洞CVE-2025-59118", "https://mp.weixin.qq.com/s?__biz=MzE5ODEzNDUwMA==&mid=2247485383&idx=2&sn=0412c268bb8e1b0c19fa3b79042d4330": "网安学习资料【之】漏洞(迭代新内容)", "https://horizon3.ai/attack-research/vulnerabilities/cve-2025-64446/": "CVE-2025-64446", "https://www.malwarebytes.com/blog/news/2025/11/be-careful-responding-to-unexpected-job-interviews": "Be careful responding to unexpected job interviews", "https://www.bleepingcomputer.com/news/security/doordash-hit-by-new-data-breach-in-october-exposing-user-information/": "DoorDash hit by new data breach in October exposing user information", "https://www.cybersecurity360.it/soluzioni-aziendali/exposure-management-come-avere-visibilita-controllo-e-un-piano-contro-le-minacce/": "Exposure Management: come avere visibilità, controllo e un piano contro le minacce", "https://www.bleepingcomputer.com/news/security/fortiweb-flaw-with-public-poc-actively-exploited-to-create-admin-users/": "Fortinet FortiWeb flaw with public PoC exploited to create admin users", "https://www.bleepingcomputer.com/news/security/fortinet-confirms-silent-patch-for-fortiweb-zero-day-exploited-in-attacks/": "Fortinet confirms silent patch for FortiWeb zero-day exploited in attacks", "https://www.bleepingcomputer.com/news/security/us-announces-new-strike-force-targeting-chinese-crypto-scammers/": "US announces new strike force targeting Chinese crypto scammers", "https://portswigger.net/blog/hacking-with-burp-ai-in-the-chesspocalypse-api-expert-corey-ball-showcases-how-burp-ai-can-support-pentesters": "Hacking with Burp AI in the Chesspocalypse: API expert Corey Ball showcases how Burp AI can support pentesters.", "https://securityaffairs.com/184636/security/critical-cve-2025-59367-flaw-lets-hackers-access-asus-dsl-routers-remotely.html": "Critical CVE-2025-59367 flaw lets hackers access ASUS DSL routers remotely", "https://securityaffairs.com/184628/security/millions-of-sites-at-risk-from-imunify360-critical-flaw-exploit.html": "Millions of sites at risk from Imunify360 critical flaw exploit", "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/microsoft-issues-emergency-patch-for-windows-server-update-services-rce-vulnerability-cve-2025-59287/": "Microsoft Issues Emergency Patch for Windows Server Update Services RCE Vulnerability CVE-2025-59287", "https://www.tenable.com/blog/cve-2025-64446-fortinet-fortiweb-zero-day-path-traversal-vulnerability-exploited-in-the-wild": "CVE-2025-64446: Fortinet FortiWeb Zero-Day Path Traversal Vulnerability Exploited in the Wild", "https://thehackernews.com/2025/11/fortinet-fortiweb-flaw-actively.html": "Now-Patched Fortinet FortiWeb Flaw Exploited in Attacks to Create Admin Accounts", "https://thehackernews.com/2025/11/researchers-find-serious-ai-bugs.html": "Researchers Find Serious AI Bugs Exposing Meta, Nvidia, and Microsoft Inference Frameworks", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504154&idx=1&sn=7a02f1c5ca0140088548aeb61ec9c2e7": "【已复现】东方通 TongWeb 应用服务器 ejbserver 远程代码执行漏洞(QVD-2025-44295)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524760&idx=1&sn=03e44ee319ff12e3aa7defe165dfb4d6": "【漏洞通告】东方通应用服务器Tongweb反序列化远程代码执行漏洞", "https://infosecwriteups.com/when-reading-the-source-code-is-the-real-hack-a-web-challenge-story-v1t-ctf-b6adfcaa0fee?source=rss----7b722bfd1b8d---4": "When Reading the Source Code Is the Real Hack: A Web Challenge Story | v1t CTF", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486217&idx=2&sn=3ea708014c3ff6273fba26cad4853a08": "CVE-2025-11001|7-Zip远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486217&idx=1&sn=50f7623f882357d6227f63904dff4e7e": "CVE-2025-61882|Oracle E-Business Suite 远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533568&idx=2&sn=acba643cf7f56aee70e503bb235302db": "Fortinet FortiWeb 管理界面中的路径遍历身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NjY3NjE4Ng==&mid=2247486067&idx=1&sn=dc2f86ee323603faf190f8f5bce8a80b": "Fortinet FortiWeb 认证绕过漏洞 CVE-2025-64446 分析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330449&idx=4&sn=196d2937587bc55a49abc9ec4f756874": "FreeBuf周报 | ChatGPT 被诱导自我注入攻击;Windows内核0Day漏洞遭野外利用提权", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096642&idx=1&sn=6ab07eed8ece1a1378863965a99cb8af": "NVIDIA NeMo框架漏洞可允许代码注入与权限提升", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533568&idx=1&sn=c551b6914611b0d059306d160c7a8d8d": "Windows TCP/IP 协议栈中存在一个严重的远程代码执行漏洞 (CVE-2025-26686)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072744&idx=3&sn=ed845332a76f0967ed40d52ddff0ae59": "【安全圈】群晖发布紧急更新,修复 BeeStation 严重远程执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484858&idx=1&sn=6fd81c53c3ad6b37e79fd74cf9306e77": "【连载】红蓝对抗-攻防演练-WEB安全渗透测试:文件上传漏洞原理(二)", "https://mp.weixin.qq.com/s?__biz=MzkwNjQxOTk1Mg==&mid=2247486096&idx=1&sn=94d39a574d2f3c21c9d5cab681f27205": "华盛顿邮报、哈佛大学数据泄露事件,consen提醒关注Oracle漏洞修复", "https://mp.weixin.qq.com/s?__biz=Mzg3NTUzOTg3NA==&mid=2247516710&idx=1&sn=57905e771ceb5e1a26dd8d93b54a2542": "安全人的价值:不在“修漏洞”,而在“护业务”", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096642&idx=2&sn=7411b33034b209e18125b808d353684e": "思科统一联络中心(CCX)多个漏洞暴露,攻击者可执行任意命令", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247493050&idx=1&sn=4b5983d65a088dce65a681550ae7a5ab": "攻防实战思路-不靠0day组合拳拿下目标系统", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNDMyOA==&mid=2247487947&idx=1&sn=d6d10acafa39b3cc3b391f5002e9a01c": "浅谈Java反射、反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247493266&idx=1&sn=640618f4d8e46de96d0cd54d3bc8a310": "深信服运维管理系统 set_port 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2Mzc3OTg1Ng==&mid=2247492734&idx=1&sn=43c405f96eb308ba15c420ca43b943ee": "漏洞复现 || React Native CLI远程命令执行", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485185&idx=1&sn=e846f4388d103d6471fdb8383a56025f": "漏洞推送|X华智能物联综合管理平台_receive命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330449&idx=2&sn=b944c440a5ca14eb9491a63f7df34466": "研究人员发现严重AI漏洞影响Meta、Nvidia及微软推理框架", "https://mp.weixin.qq.com/s?__biz=Mzk2NDkwMDg3Nw==&mid=2247483928&idx=1&sn=6928ceaef5487687da0c1254ddee2054": "科汛新职教网校系统CheckOrder存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650613251&idx=3&sn=67d230422b4ea628284ac86204bcabba": "补天漏洞提交助手 - 浏览器插件版", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247520646&idx=1&sn=2235b0f9eee8d8426c4da38160ebb136": "非常牛的Web漏洞分析与防范实战技术!", "https://isc.sans.edu/diary/rss/32486": "Honeypot: FortiWeb CVE-2025-64446 Exploits, (Sat, Nov 15th)", "https://securityaffairs.com/184652/hacking/u-s-cisa-adds-fortinet-fortiweb-flaw-to-its-known-exploited-vulnerabilities-catalog-2.html": "U.S. CISA adds Fortinet FortiWeb flaw to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2025/11/rondodox-exploits-unpatched-xwiki.html": "RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489530&idx=1&sn=cbe9b6102f57dd81d889c4f02aafe595": "RuvarHRM人力资源管理系统存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072762&idx=3&sn=b546a0312adffe65c8c06576f8144422": "【安全圈】微软推送 Win10 首个扩展安全更新:修复 63 个漏洞、解决误报 BUG", "https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484862&idx=1&sn=aeaccf3c2026debd6e8c4504621f6b55": "【连载】红蓝对抗-攻防演练-WEB安全渗透测试:文件上传漏洞原理(三)", "https://mp.weixin.qq.com/s?__biz=MzI3NzM5NDA0NA==&mid=2247492263&idx=1&sn=7a22f6368aa6fb330c86380c4e231f59": "重磅!FortiWeb 新漏洞 CVE-2025-64446 的 PoC 已公开,攻击风险陡升", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504170&idx=1&sn=0d94424a437dfe623e4407031fbad05f": "【在野利用】Fortinet FortiWeb 身份认证绕过漏洞(CVE-2025-64446)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247503913&idx=1&sn=f90fc0f22b56f6be66761b05ce5384f8": "【团队巅峰赛】年终冲榜ing,登顶豪享『出国行』", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496500&idx=2&sn=977daad0f50433197c5c8c2e0b1560f9": "上周关注度较高的产品安全漏洞(20251110-20251116)", "https://mp.weixin.qq.com/s?__biz=MzA3ODUzNzMzOQ==&mid=2648562869&idx=1&sn=d9dff5621160afb71f0f371ebf36d5d5": "DudeSuite 漏洞更新播报 20251117", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096650&idx=2&sn=a695e37043329ef8ddddde600c7b3ccb": "FortiWeb高危漏洞遭实战利用:攻击者提权完全控制", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247500993&idx=1&sn=fc6a423d268776244e5c59de0c4033f1": "G.O.S.S.I.P 阅读推荐 2025-11-12 一个漏洞能影响多少项目?", "https://mp.weixin.qq.com/s?__biz=Mzg2NzUzNzk1Mw==&mid=2247499126&idx=1&sn=cff5ec83340484e42712fe5a2fd2a225": "Multi-Platform Root Expert v9.0 - 全平台提权与刷机工具", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330508&idx=4&sn=73d5040902651535f7f0ca31ed48abe9": "Rust语言助力Android内存安全漏洞占比首次降至20%以下", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604263&idx=3&sn=991047edd9f272fd8afc98e7df4b3c11": "SAP紧急修复9.9分高危漏洞,系统面临完全失控风险", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096650&idx=1&sn=ffb181e03f0dc7c38b2ea1fe0cea9567": "pgAdmin4曝高危远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504178&idx=1&sn=6e1d45233182d65c523af799eb33491b": "【已复现】AstrBot 远程代码执行漏洞(CVE-2025-55449)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524782&idx=1&sn=d07c83a2c3ca1c7b02334f51bafb1135": "【漏洞通告】FortiWeb 路径遍历漏洞(CVE-2025-64446)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501789&idx=2&sn=4355d17c05a9a0eb89513b8ebe559271": "【漏洞通告】Fortinet FortiWeb 身份认证绕过漏洞(CVE-2025-64446)", "https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484865&idx=1&sn=325232da10bea5f2e29a7cee48fdb312": "【连载】红蓝对抗-攻防演练-WEB安全渗透测试:文件上传漏洞原理(四)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524415&idx=1&sn=3417918d2651ce32de3b5b5ee91d1907": "华硕:注意DSL系列路由器中严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247537715&idx=3&sn=07e586b7224cc82f1ef9aa64e7bb28b8": "卢浮宫惊天劫案真相:竟因弱密码漏洞藏了 10 余年!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524415&idx=2&sn=732f73ade3ec009bdf9b52d3163591a2": "因代码复用,Meta、英伟达和微软推理框架受多个严重AI漏洞影响", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540845&idx=1&sn=ec923893881e69010ad830ec852b0abb": "报告发布 | 数世咨询:漏洞情报选型指南报告(附下载)", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485202&idx=1&sn=1d7478f87397181fa54c8ee8345dd4f0": "漏洞推送|璐华RuvarHRM人力资源管理软件存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330508&idx=2&sn=fbe35770b9e616dce6bfd97afd16a81a": "赠书福利 | 《Web漏洞分析与防范实战》免费送", "https://mp.weixin.qq.com/s?__biz=MzkzNzM1MTcwMA==&mid=2247490471&idx=1&sn=c0922dda3e26b9693cfeb099de85ed62": "零点击接管全球顶级博彩平台:未绑定密码重置令牌漏洞深度分析", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503603&idx=1&sn=ce4371beab60e79f8e0215cfb17b9be9": "雷神众测漏洞周报2025.11.10-2025.11.16", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649175098&idx=2&sn=ec28fdbd407eea706b833a0283ed366d": "预警丨防范Redis数据库内存释放后重用超危漏洞", "https://therecord.media/fortinet-fortiweb-vulnerability-cisa-advisory": "CISA gives federal agencies one week to patch exploited Fortinet bug", "https://isc.sans.edu/diary/rss/32490": "Decoding Binary Numeric Expressions, (Mon, Nov 17th)", "https://isc.sans.edu/diary/rss/32494": "ISC Stormcast For Monday, November 17th, 2025 https://isc.sans.edu/podcastdetail/9702, (Mon, Nov 17th)", "https://securityaffairs.com/184702/malware/rondodox-expands-botnet-by-exploiting-xwiki-rce-bug-left-unpatched-since-february-2025.html": "RondoDox expands botnet by exploiting XWiki RCE bug left unpatched since February 2025", "https://thehackernews.com/2025/11/weekly-recap-fortinet-exploited-chinas.html": "⚡ Weekly Recap: Fortinet Exploited, China's AI Hacks, PhaaS Empire Falls & More", "https://forum.butian.net/share/4648": "Neural Solution 代码执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247518561&idx=1&sn=ccfc90491b139a991c4ad8fc70653c2a": "多重奖励来袭 | MiSRC 年末漏洞冲刺活动", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247503684&idx=1&sn=d4619219c1c49392743b36db8af0cb8f": "三方并肩:NOFX AI 交易系统漏洞守卫战", "https://checkmarx.com/blog/rumors-of-the-developers-demise-have-been-greatly-exaggerated-a-perspective-from-simon-bennetts-software-engineering-expert-at-checkmarx/": "Rumors of the Developer’s Demise Have Been Greatly Exaggerated: A perspective from Simon Bennetts, Software Engineering Expert at Checkmarx", "https://mp.weixin.qq.com/s?__biz=MzkwOTY3Njg4Nw==&mid=2247484466&idx=1&sn=865c224392668d9f8f5ec36b1983401c": "CVE-2025-64446 最新FortiWeb漏洞 网站秒拿下", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604320&idx=2&sn=364d0c2862669459505599b2fa67b41f": "Clop勒索团伙再出手,罗技确认因Oracle漏洞导致数据泄露", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330545&idx=4&sn=7cfd99639d749061b3f5b88c0c732fd2": "EchoGram漏洞可绕过主流大语言模型的护栏机制", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247575728&idx=1&sn=0c11034bea894adb27a404c22c39bb1d": "Java漏洞集合工具 | 更新v2.0.1", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485214&idx=1&sn=8ef5b6cf7fb8aa264dae55053d386da3": "ruoyi(若依)漏洞整合", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072795&idx=2&sn=d1a4fb92f3c9d076e6d36e4f58db2e97": "【安全圈】EchoGram 漏洞暴露大模型防护体系重大缺陷", "https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247521847&idx=1&sn=328e276d80732b0cb05e73567d3b4a96": "【扶摇(FUYIO)】一款JS漏洞检测与敏感信息挖掘工具", "https://mp.weixin.qq.com/s?__biz=MzUyNzk1NjA5MQ==&mid=2247483998&idx=1&sn=481e7e60c3f1829a3f2cdbb56b5f0270": "【漏洞复现及预警】 | 远程命令执行漏洞(CVE-2025-12916)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501795&idx=2&sn=8a6ed618e8b14f9857ed4f28466f07d6": "【漏洞通告】Chrome V8 类型混淆导致远程代码执行漏洞(CVE-2025-13223)", "https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484869&idx=1&sn=7186c1841d64a2af21c97d04affce4e5": "【连载】红蓝对抗-攻防演练-WEB安全渗透测试:文件上传漏洞原理(五)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247491005&idx=1&sn=fe60124fea2016fd57e72c0462b242a9": "【高危漏洞预警】深信服运维安全管理系统远程命令执行漏洞CVE-2025-12916", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247537777&idx=2&sn=e6a6a14a3c1facce246a2ba440553f28": "三星苹果用户警惕!严重漏洞缠身,已成间谍软件攻击重灾区", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247489185&idx=1&sn=2c05a505976dd65a9e6b3af10655a0af": "实战案例 | 组合拳漏洞导致全校的信息泄露", "https://mp.weixin.qq.com/s?__biz=MzkyNTUyNTE5OA==&mid=2247489185&idx=2&sn=568578ac37005f18f63d5d766ca1c5ae": "某edu站点打包高危9分漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247493311&idx=1&sn=457e4d75d108254ccce873d9b74c8b55": "汉王e脸通综合管理平台 getDoors.do SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247493058&idx=1&sn=3d15041bbc862e0df84103433f22ad25": "漏洞复现 | 深信服运维安全管理系统远程命令执行漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=MzkwOTczNzIxNQ==&mid=2247487307&idx=1&sn=f0f270d94165e2f69f7929966a8cfc40": "网安SRC漏洞审核常会碰到哪些漏洞?", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489586&idx=1&sn=6882f8581bb768a3bff007d9a577f4cd": "西软云XMS download接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524445&idx=1&sn=9145b7009a002f9da12dbec7be2ae727": "谷歌紧急修复已遭利用的Chrome V8 0day 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604320&idx=3&sn=4931474594577332913a3d537678c029": "重磅开课!系统0day安全——车联网安全入门(第8期)", "https://therecord.media/congressional-budget-office-director-testifies-hackers-expelled": "CBO director testifies that hackers have been expelled from email systems", "https://www.bleepingcomputer.com/news/security/fortinet-warns-of-new-fortiweb-zero-day-exploited-in-attacks/": "Fortinet warns of new FortiWeb zero-day exploited in attacks", "https://www.bleepingcomputer.com/news/security/google-fixes-new-chrome-zero-day-flaw-exploited-in-attacks/": "Google fixes new Chrome zero-day flaw exploited in attacks", "https://securityaffairs.com/184780/data-breach/doordash-data-breach-exposes-personal-info-after-social-engineering-attack.html": "DoorDash data breach exposes personal info after social engineering attack", "https://thehackernews.com/2025/11/google-issues-security-fix-for-actively.html": "Google Issues Security Fix for Actively Exploited Chrome V8 Zero-Day Vulnerability", "https://thehackernews.com/2025/11/meta-expands-whatsapp-security-research.html": "Meta Expands WhatsApp Security Research with New Proxy Tool and $4M in Bounties This Year", "https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/crowdsourced-penetration-testing-understanding-the-risks-for-better-decision-making/": "Crowdsourced Penetration Testing: Understanding the Risks for Better Decision-Making", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504189&idx=2&sn=49ca4eeb550114f1eafc9b886bec1354": "【在野利用】Google Chrome V8 类型混淆漏洞(CVE-2025-13223)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504189&idx=1&sn=84ad839ae62f05db65ffdfdc77c86d83": "【已复现】深信服运维安全管理系统远程命令执行漏洞(CVE-2025-12916)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650185145&idx=1&sn=860fcb695269c1a9d11716af04dff552": "漏洞库,免费的才是最贵的!", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507967&idx=1&sn=a9c41190456f92e998403e2424418e7c": "已在野 | 深信服运维安全管理系统 portal_login 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498600&idx=1&sn=e6caa2b23599841446d87ccd16d101c9": "价值$40,000的RCE!", "https://mp.weixin.qq.com/s?__biz=MzI2OTYzOTQzNw==&mid=2247488975&idx=1&sn=b6810635fecf5a790d90e928fc238965": "陌陌安全应急响应中心漏洞处理流程及评分标准V3.0", "https://cxsecurity.com/issue/WLB-2025110014": "Fortinet FortiWeb Auth-8.0.0 Bypass CVE-2025-64446", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545848&idx=1&sn=39877ba3745fe2763031035d80c00283": "技术分享 | EXP能力升级(第一期):从CVE-2025-61882看Goby如何破解路径固定难题", "https://horizon3.ai/intelligence/webinars/supercharging-enterprise-ai-with-real-world-exploitability-data-the-nodezero-mcp-server-advantage/": "Supercharging Enterprise AI with Real-World Exploitability Data: The NodeZero MCP Server Advantage", "https://www.intigriti.com/blog/business-insights/black-friday-and-cyber-monday-price-distortion-identification": "Black Friday and Cyber Monday price distortion identification", "https://www.securityinfo.it/2025/11/19/dragonforce-evolve-in-un-cartello-ransomware-e-diventa-piu-aggressivo/?utm_source=rss&utm_medium=rss&utm_campaign=dragonforce-evolve-in-un-cartello-ransomware-e-diventa-piu-aggressivo": "DragonForce evolve in un “cartello” ransomware e diventa più aggressivo", "https://any.run/cybersecurity-blog/lolbin-attacks-soc-detection-guide/": "LOLBin Attacks Explained with Examples: Everything SOC Teams Need to Know", "https://www.darknet.org.uk/2025/11/reconnoitre-open-source-reconnaissance-and-service-enumeration-tool/": "Reconnoitre – Open-Source Reconnaissance and Service Enumeration Tool", "https://www.darknet.org.uk/2025/11/scanners-box-open-source-reconnaissance-and-scanning-toolkit/": "Scanners-Box – Open-Source Reconnaissance and Scanning Toolkit", "https://securityaffairs.com/184850/security/7-zip-rce-flaw-cve-2025-11001-actively-exploited-in-attacks-in-the-wild.html": "7-Zip RCE flaw (CVE-2025-11001) actively exploited in attacks in the wild", "https://securityaffairs.com/184806/hacking/new-fortiweb-zero-day-cve-2025-58034-under-attack-patched-by-fortinet.html": "New FortiWeb zero-day CVE-2025-58034 under attack patched by Fortinet", "https://securityaffairs.com/184856/hacking/u-s-cisa-adds-a-google-chromium-v8-flaw-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds a Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog", "https://securityaffairs.com/184832/hacking/u-s-cisa-adds-a-new-fortinet-fortiweb-flaw-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds a new Fortinet FortiWeb flaw to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2025/11/fortinet-warns-of-new-fortiweb-cve-2025.html": "Fortinet Warns of New FortiWeb CVE-2025-58034 Vulnerability Exploited in the Wild", "https://thehackernews.com/2025/11/hackers-actively-exploiting-7-zip.html": "Hackers Actively Exploiting 7-Zip Symbolic Link–Based RCE Vulnerability (CVE-2025-11001)", "https://thehackernews.com/2025/11/wrthug-exploits-six-asus-wrt-flaws-to.html": "WrtHug Exploits Six ASUS WRT Flaws to Hijack Tens of Thousands of EoL Routers Worldwide", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524451&idx=1&sn=f71a1f0136eba7842b3360c9af52a53f": "IBM AIX 多个漏洞可导致远程攻击者执行任意命令", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524451&idx=2&sn=40767e9bab88232789546a1dcf703529": "W3 Total Cache 插件存在严重的命令注入漏洞,百万网站易受RCE攻击", "https://www.4hou.com/posts/Ar31": "【梆梆安全监测】安全隐私合规监管趋势及漏洞风险报告 (1012-1025)", "https://www.4hou.com/posts/XP4l": "高危runC漏洞曝光 黑客可突破Docker容器逃逸", "https://www.anquanke.com/post/id/313275": "Fortinet发布警告:其FortiWeb产品中的新零日漏洞正遭攻击利用", "https://www.anquanke.com/post/id/313245": "SolarWinds Serv-U 中存在严重漏洞(CVSS 9.1),可导致已认证的管理员实现远程代码执行并完成路径绕过", "https://www.anquanke.com/post/id/313261": "谷歌已修复2025年第7个被积极利用的Chrome零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247527689&idx=1&sn=e9b4678ab85705a50f61af1f9e45f274": "火绒小问答——「个人版」漏洞修复类top问题解答", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096658&idx=1&sn=8a5eab9c867402d27970098dbc644768": "7-Zip曝高危RCE漏洞(CVE-2025-11001)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524465&idx=1&sn=cf210939b4c44de97b60529383818aaa": "CISA要求政府机构在7天内修复这个 Fortinet 新0day", "https://mp.weixin.qq.com/s?__biz=MzI5NTUzNzY3Ng==&mid=2247489284&idx=1&sn=2641d7dedd9ae76df2352937b61e07f6": "Chrome修复2025年第七个0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096658&idx=2&sn=56298d867873c5d74d35b1d04625675f": "FortiWeb曝高危命令注入漏洞(CVE-2025-58034)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330685&idx=1&sn=2dd634c0df98b743e578697b13c40b6f": "Fortinet警告FortiWeb新漏洞(CVE-2025-58034)已被野外利用", "https://mp.weixin.qq.com/s?__biz=MzA4MzgzNTU5MA==&mid=2652040809&idx=1&sn=6a3af62023aba4661cbecef5602199c4": "JS逆向 -- 利用土办法+AI编写的视频下载脚本过程复现", "https://mp.weixin.qq.com/s?__biz=MzI4MjI2NDI1Ng==&mid=2247485392&idx=1&sn=1b412936be907f33772f9eaf91abdc2c": "JeecgBoot3.5.0版SQL注入漏洞详细分析记录", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247490894&idx=1&sn=3e063f33eb915ebd6eca714cedf93a02": "RocketMQ 命令执行漏洞复现分析", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247495318&idx=1&sn=1520e42c7cee2f4dcee0a2f720c16a65": "【在野利用】Fortinet FortiWeb OS命令注入漏洞(CVE-2025-58034)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072848&idx=2&sn=988a91ea3270a54f52e42d08973b89fb": "【安全圈】7-Zip 漏洞被证实遭到攻击利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072848&idx=1&sn=d86cbdc3bcd1c657ff0c80a9e915853a": "【安全圈】CISA 警告 Chrome V8 0-Day 被积极利用导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072848&idx=3&sn=5f9c47c03a34f8134402494b1cb87ca4": "【安全圈】Ollama 被曝模型解析漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247520724&idx=1&sn=ea5c82fc85f3cf5b05dabf1c21ed6d1b": "【已复现】Fortinetu2002FortiWeb 命令注入漏洞(CVE-2025-58034)", "https://mp.weixin.qq.com/s?__biz=MjM5NzE0NTIxMg==&mid=2651136479&idx=2&sn=2d18d0d67d888d122884e7191613e785": "【梆梆安全监测】安全隐私合规监管趋势及漏洞风险报告(1026-1108)", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247501805&idx=2&sn=8347174d02f34aa53010eee073b57c68": "【漏洞通告】FortiWeb API 与 CLI 多处命令注入漏洞(CVE-2025-58034)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489417&idx=1&sn=08bf5aa3fb48b70cdd6a884ad30b4659": "【漏洞通告】Fortinet FortiWeb身份验证绕过与命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484909&idx=1&sn=1076dd71abe896baf07402348c189630": "【连载】红蓝对抗-攻防演练-WEB安全渗透测试:XXE-XML实体注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247491020&idx=1&sn=a327b53864674a3f633b52a9f73593e1": "【高危漏洞预警】Fortinet FortiWeb命令注入漏洞CVE-2025-58034", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247493295&idx=1&sn=94d6e1334ca0b946028d766480e82648": "一公司因未处置高危漏洞被黑客攻击篡改,公安机关依法处罚", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712621&idx=1&sn=189f1dffeb2dfda6f58768294a239e2a": "常见未经授权漏洞测试及利用", "https://mp.weixin.qq.com/s?__biz=Mzk2NDM1NjY4Mw==&mid=2247483775&idx=1&sn=3bcc6d0273d6c7ec4d47b651c90993f3": "条件竞争导致的RCE", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524465&idx=2&sn=41ec03ab3c0572c4ecc61e20dcd8fdb6": "用AI攻击AI:Ray AI开源框架中的老旧漏洞被用于攻击集群", "https://mp.weixin.qq.com/s?__biz=Mzk0NTYwNzY3NQ==&mid=2247483982&idx=1&sn=ab2afe14cd00bc2cb011307420528611": "绕过JWT签名导致的越权漏洞-玄域靶场实操演示", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507976&idx=1&sn=6b5edb53f10e21451c6e14ae478b7268": "速修!FortiWeb无条件RCE利用链发现在野利用", "https://mp.weixin.qq.com/s?__biz=Mzg4MjY3NDQ2Ng==&mid=2247488438&idx=1&sn=e2c046be327b9ae0c5cffc891a87e45a": "重要通知丨第九届“强网杯”漏洞智能分析赛道决赛入围名单公布", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485224&idx=1&sn=12dab424ccfe7fab9086a9ce9e308175": "首发|天地伟业Easy7 存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk2NDkwMDg3Nw==&mid=2247483976&idx=1&sn=ec7abcbd830c3bccf43d6081661f843f": "鸿宇多用户商城scan_list.php存在SQL注入漏洞", "https://www.bleepingcomputer.com/news/security/d-link-warns-of-new-rce-flaws-in-end-of-life-dir-878-routers/": "D-Link warns of new RCE flaws in end-of-life DIR-878 routers", "https://www.bleepingcomputer.com/news/security/google-exposes-badaudio-malware-used-in-apt24-espionage-campaigns/": "Google exposes BadAudio malware used in APT24 espionage campaigns", "https://therecord.media/salesforce-cuts-off-access-to-third-party-unusual-activity": "Salesforce cuts off access to third-party app after discovering ‘unusual activity’", "https://www.bleepingcomputer.com/news/security/salesforce-investigates-customer-data-theft-via-gainsight-breach/": "Salesforce investigates customer data theft via Gainsight breach", "https://techcrunch.com/2025/11/20/salesforce-says-some-of-its-customers-data-was-accessed-after-gainsight-breach/": "Salesforce says some of its customers’ data was accessed after Gainsight breach", "https://isc.sans.edu/diary/rss/32506": "Oracle Identity Manager Exploit Observation from September (CVE-2025-61757), (Thu, Nov 20th)", "https://securityaffairs.com/184886/mobile-2/researchers-devised-a-new-enumeration-technique-that-exposed-3-5b-whatsapp-profiles.html": "Researchers devised a new enumeration technique that exposed 3.5B WhatsApp profiles", "https://www.praetorian.com/blog/cve-2025-52493-when-password-fieldsarent-enough-client-side-secretexposure-in-pagerduty-cloud-runbook/": "CVE-2025-52493: When Password FieldsAren’t Enough – Client-Side SecretExposure in PagerDuty Cloud Runbook", "https://thehackernews.com/2025/11/ctm360-exposes-global-whatsapp.html": "CTM360 Exposes a Global WhatsApp Hijacking Campaign: HackOnChat", "https://thehackernews.com/2025/11/shadowray-20-exploits-unpatched-ray.html": "ShadowRay 2.0 Exploits Unpatched Ray Flaw to Build Self-Spreading GPU Cryptomining Botnet", "https://thehackernews.com/2025/11/tsundere-botnet-expands-using-game.html": "Tsundere Botnet Expands Using Game Lures and Ethereum-Based C2 on Windows", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500916&idx=2&sn=c809d65e0ffe14a95ba22270c4d64f37": ".NET 环境下的 CSRF 漏洞与防御策略", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504197&idx=1&sn=99fe135087d866605140a294cccf24a6": "【已复现】Fortinet FortiWeb 命令注入漏洞(CVE-2025-58034)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247495788&idx=1&sn=c0996b5d49e67f725e68f37dc9511ac9": "PatchEval 发布:一个比你更关心修复效果的 AI 漏洞自动修复评测基准", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533668&idx=1&sn=4b4f72d1113552bc546a6cb9303f3984": "CVE-2025-50165:Windows 图形组件中的严重缺陷", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524471&idx=1&sn=2c5a11dba130eea68bd2080f69e5410e": "D-Link:注意 DIR-878 路由器中的多个RCE漏洞", "https://www.4hou.com/posts/rpAk": "ImunifyAV曝远程代码执行漏洞 数百万Linux托管网站面临风险", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096667&idx=1&sn=0bef30949785d5deb06f7105bd26f1ab": "Ollama曝高危漏洞:攻击者可通过解析恶意模型文件执行任意代码", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330742&idx=4&sn=74c6f1380ae5f5238e0a3209c45be96b": "Ollama漏洞允许攻击者通过解析恶意模型文件执行任意代码", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604437&idx=4&sn=c8c02adf4a01fb9a90ce98efa70ac380": "Oracle EBS零日漏洞遭大规模利用,近30家机构数据被窃", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096667&idx=2&sn=db7434ad863467236366196ab2e920ab": "SonicWall SSLVPN漏洞:攻击者可远程触发防火墙崩溃", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524471&idx=2&sn=e9b9286afdd20627c6c7da72d8249375": "SonicWall SonicOS 中的高危漏洞可导致防火墙崩溃", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072860&idx=3&sn=8a336e0838110ebd196af44ae856b4d4": "【安全圈】华硕 WRT 路由器漏洞被利用,劫持全球数万台淘汰设备", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247495335&idx=1&sn=e4c0cd0de0068291e79217c2d49e5dcb": "【已复现】Oracle Identity Manager 未授权远程代码执行漏洞(CVE-2025-61757)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504204&idx=1&sn=1bf43eaf6ac665c82af8d465c383dc27": "【已复现】Oracle Identity Manager 远程代码执行漏洞(CVE-2025-61757)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkwMzUyMjk2MQ==&mid=2247485076&idx=1&sn=619b6b7164fbdc85ba28c30af2231fdb": "【附POC及复现环境】飞塔Web防火墙双CVE漏洞链可致RCE(CVE-2025-64446+CVE-2025-58034)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247491029&idx=1&sn=17d13969bc072f34155c18f57b0f39d4": "【高危漏洞预警】Oracle Identity Manager 远程代码执行漏洞CVE-2025-61757", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556797&idx=1&sn=a19aa7905a911ea933d6633767814fe2": "什么?影视短剧后台登录漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064436&idx=1&sn=6bc588a4987b7c80a462e928dcb7a83c": "信息安全漏洞周报【第048期】", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533668&idx=2&sn=ff894f88d6f11e36fcc22343749ecbce": "利用 W3 Total Cache for WordPress 中的预身份验证远程代码执行漏洞 (CVE-2025-9501)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504208&idx=1&sn=4fcb7d56849a9a3b69f8fedb205fd2a3": "安全热点周报:谷歌紧急修复今年第七个在攻击中被利用的 Chrome 零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247490902&idx=1&sn=c82c8177a9e5c26a01c170a7c3ebfeb9": "影视短剧后台漏洞实战", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247493339&idx=1&sn=340f6b6c1adaf8f81829ab2c9dde7425": "明源地产ERP login.aspx 身份认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk4ODExOTU3Mw==&mid=2247483861&idx=1&sn=236f39aa339c63b2199f331ed3b5afb4": "某商城系统前台xss漏洞快速挖掘以及waf byass过程记录", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247493068&idx=1&sn=64ff97d14e2e197da64a64e5046fc47b": "漏洞复现 | 深信服运维安全管理系统protocol/session远程命令执行漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797420&idx=1&sn=2d2a1f7792ae4350742c7dfbce6972b1": "赏金翻倍秘籍:从JWT黑盒到RCE,那些让你报告单价飙升的越权技巧", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330742&idx=3&sn=9fe78d7bbeb3b2a8c97dad5f47d00d1b": "黑客论坛惊现微软Office 0Day RCE漏洞交易", "https://therecord.media/cleveland-county-okla-attleboro-mass-law-enforcement-cyberattacks": "Local law enforcement agencies in Oklahoma, Massachusetts responding to cyber incidents", "https://www.sei.cmu.edu/blog/how-to-align-security-requirements-and-controls-to-express-system-threats/?utm_source=blog&utm_medium=rss&utm_campaign=my_site_updates": "How to Align Security Requirements and Controls to Express System Threats", "https://securityaffairs.com/184896/hacking/salesforce-alerts-users-to-potential-data-exposure-via-gainsight-oauth-apps.html": "Salesforce alerts users to potential data exposure via Gainsight OAuth apps", "https://thehackernews.com/2025/11/salesforce-flags-unauthorized-data.html": "Salesforce Flags Unauthorized Data Access via Gainsight-Linked OAuth Activity", "https://www.anquanke.com/post/id/313305": "WSUS中存在关键远程代码执行漏洞(CVE-2025-59287),正被积极利用以部署ShadowPad后门", "https://www.anquanke.com/post/id/313312": "Windows图形组件存在关键漏洞,可致攻击者通过单张图片夺取系统控制权", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247553375&idx=1&sn=e9f991d7be8e50e71bd57404c0baa90b": "AI魅魔漏洞——训练一个不会拒绝\"我\"的你", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247491461&idx=1&sn=b91c099ddfbd5487e513b667f59c0092": "CVE-2025-41253:利用 Spring 表达式语言泄露环境变量与系统属性", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247489202&idx=1&sn=3b3f52e09dd8a55dd1cece91547d5ff5": "Java/Python/Golang/nodejs等常见语言代码漏洞扫描工具", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247516290&idx=2&sn=750f1948193832e9814800174bc1b71c": "VPN设备遭“地毯式”扫描,预计将有0day漏洞公布", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072874&idx=2&sn=63ac84c77120190944e17963678aa181": "【安全圈】漏洞,请立即更新Windows", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247486189&idx=1&sn=dcde7526cb7e1e39f69036bb78697569": "【服务升级】EnhancerSec第五期漏洞挖掘培训招生啦!", "https://mp.weixin.qq.com/s?__biz=MzU3OTYxNDY1NA==&mid=2247485927&idx=1&sn=99b2d3302694611e9c5ff29f6547961d": "大学生现在这样学网络安全,明年春招 offer 手到擒来!(漏洞挖掘+简历+面试全攻略)", "https://mp.weixin.qq.com/s?__biz=Mzk2NDkwMDg3Nw==&mid=2247483991&idx=1&sn=f946a5cc805f52dad55355c818f4bd03": "微信万能门店小程序系统存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330782&idx=1&sn=fbd4e7ec8b3580e701bf76b7bc90f801": "朝鲜黑客组织Kimsuky与Lazarus联手利用0Day漏洞攻击全球关键行业", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604463&idx=1&sn=63eb614120055ac689f6192c16cb2c74": "极路由远程命令执行漏洞-漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797424&idx=1&sn=b6a5199c330573d8db38417c9a13f2c7": "赏金猎人:请查收这份JSON登录漏洞“体检清单”", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330782&idx=2&sn=76b2fe93f8a2e796c282148d883cdda4": "高危Windows图形组件漏洞:单张图片即可让黑客接管系统", "https://www.bleepingcomputer.com/news/security/cisa-warns-oracle-identity-manager-rce-flaw-is-being-actively-exploited/": "CISA warns Oracle Identity Manager RCE flaw is being actively exploited", "https://securityaffairs.com/184935/security/u-s-cisa-adds-an-oracle-fusion-middleware-flaw-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds an Oracle Fusion Middleware flaw to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2025/11/cisa-warns-of-actively-exploited.html": "CISA Warns of Actively Exploited Critical Oracle Identity Manager Zero-Day Vulnerability", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072874&idx=3&sn=8c68d0c8e3f07ca185a9cdca270f6c70": "【安全圈】D-Link路由器出现新的远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485245&idx=1&sn=a165740f3a4a3ee47376e88928efa6cb": "Nday|深信服运维安全管理系统/protocol/session存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072888&idx=3&sn=63717f77b3d16b378601e736f8f73f3c": "【安全圈】ShinyHunters称通过 Gainsight 与 Salesforce 漏洞窃取百家公司数据", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247628921&idx=1&sn=87e20e10b3fc3cf37676275bfc4e31aa": "揭示汽车微处理器(MPU)中隐藏的漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651330796&idx=3&sn=28aff32b6f9551ac81732d6ad500755f": "每周PDF资源:域内漏洞和利用;跨域攻击分析与防御;url跳转挖掘;kafka集群扩容零数据丢失;25年网络安全意识培训", "https://fluxsec.red/creating-implant-dll-exports-wyrm-c2": "Creating a framework in Wyrm C2 to easily configure custom exports of an implant", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072888&idx=2&sn=75ce0dc2c6180e3da1bd88d64a4ae3c0": "【安全圈】Grafana 修复 SCIM 身份映射漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496518&idx=2&sn=bef823a86a950400c5366839b27c5cf9": "上周关注度较高的产品安全漏洞(20251117-20251123)", "https://horizon3.ai/attack-research/vulnerabilities/cve-2025-61757/": "CVE-2025-61757", "https://www.bleepingcomputer.com/news/microsoft/microsoft-tests-file-explorer-preloading-for-faster-launches/": "Microsoft tests File Explorer preloading for faster performance", "https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-11-24h2-bug-crashes-key-system-components/": "Microsoft: Windows 11 24H2 bug crashes Explorer and Start Menu", "https://www.bleepingcomputer.com/news/security/real-estate-finance-services-giant-situsamc-breach-exposes-client-data/": "Real-estate finance services giant SitusAMC breach exposes client data", "https://therecord.media/privacy-regulator-ico-collapse": "UK privacy regulator has seen ‘collapse in enforcement activity,’ rights coalition says", "https://isc.sans.edu/diary/rss/32516": "ISC Stormcast For Monday, November 24th, 2025 https://isc.sans.edu/podcastdetail/9712, (Mon, Nov 24th)", "https://securityaffairs.com/185007/malware/attackers-deliver-shadowpad-via-newly-patched-wsus-rce-bug.html": "Attackers deliver ShadowPad via newly patched WSUS RCE bug", "https://securityaffairs.com/185034/security/harvard-reports-vishing-breach-exposing-alumni-and-donor-contact-data.html": "Harvard reports vishing breach exposing alumni and donor contact data", "https://thehackernews.com/2025/11/new-fluent-bit-flaws-expose-cloud-to.html": "New Fluent Bit Flaws Expose Cloud to RCE and Stealthy Infrastructure Intrusions", "https://thehackernews.com/2025/11/shadowpad-malware-actively-exploits.html": "ShadowPad Malware Actively Exploits WSUS Vulnerability for Full System Access", "https://thehackernews.com/2025/11/weekly-recap-fortinet-exploit-chrome-0.html": "⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & More", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524481&idx=3&sn=6d0b161f8add2f6c1ee65e60ef6955d8": "vLLM 高危漏洞可导致RCE", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524481&idx=2&sn=46622d694aa60bc2d314867e3e424ec1": "微软Azure Bastion 严重漏洞可导致攻击者绕过认证和实现提权", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524481&idx=1&sn=14e321f1c3a2caf170a7ddad233657ac": "研究人员利用WhatsApp API 漏洞获取35亿个用户账号", "https://www.4hou.com/posts/J13l": "“ShadowRay 2.0”全球攻击活动:利用旧漏洞劫持Ray集群构建自传播挖矿僵尸网络", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585564&idx=2&sn=59dbad21b578073773c5b1d979e34ff0": "安全动态回顾|新型安卓银行木马Sturnus可窃取加密通讯并控制设备 WordPress插件W3TC存在PHP命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072904&idx=2&sn=a83d7a0a97369e8c7791076afb0628e5": "【安全圈】7-Zip 爆出严重漏洞 已有公开利用代码 需立即手动更新", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072904&idx=4&sn=e6ba143fb44ccf2e63d906f52ea3c80a": "【安全圈】ShadowPad 恶意软件正在利用 WSUS 漏洞获取系统最高权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072904&idx=1&sn=4ee3aa1b8b2892eed101535d1f516173": "【安全圈】Wireshark 多个漏洞可被恶意构造数据包触发崩溃", "https://mp.weixin.qq.com/s?__biz=MzU5MTExMjYwMA==&mid=2247485744&idx=1&sn=c37f988923d265ad36e3b3aac11ccf9a": "QuickSearch-chrome右键快速搜索插件", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604494&idx=2&sn=b62d0ad139306b8ae175c223238664a8": "vLLM曝高危漏洞CVE-2025-62164,恶意嵌入可致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604498&idx=3&sn=0d3802aa7534e61d602c5526e8f6d149": "Apache Syncope 硬编码密钥漏洞(CVE-2025-65998)可致用户密码泄露", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331145&idx=3&sn=18b7ba00d5bd991608304b94145548e1": "Fluent Bit曝出五个高危漏洞,可导致云基础设施遭远程控制", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524487&idx=2&sn=e85da781a2fe55ed8b1a2296242adb26": "Grafana SCIM 中存在严重漏洞,可导致身份冒充或提权", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072919&idx=4&sn=1e08e66183d64b564fd711464521f8f1": "【安全圈】Fluent Bit 多漏洞曝光引发云端入侵风险", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503715&idx=1&sn=555cfc1e0dda1a9c8a35fb51ad2fd1d6": "【样本对抗】PHP类型Webshell通用任意命令执行木马", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247497411&idx=1&sn=da1446685780eb704ce709d60ee3e211": "【论文速读】| VULPO:基于策略内LLM优化的上下文感知漏洞检测", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247491039&idx=1&sn=d49332f1827c961893e5492a319a40ef": "【高危漏洞预警】Claude Code工具命令注入漏洞CVE-2025-64755", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331145&idx=4&sn=0ef63ee983b17118be228b750a4b4e07": "代码注入漏洞威胁NVIDIA Isaac-GROOT机器人平台安全", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485261&idx=1&sn=50442f2b1c32b6c89da1ba558a856d0e": "未公开|邦永PM2项目管理系统存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk3NTE5NTI0OQ==&mid=2247484690&idx=1&sn=8e445c52eb6f94fec4630eab0225cf0c": "漏洞预警 | Claude Code任意文件写入漏洞(CVE-2025-64755)", "https://www.bleepingcomputer.com/news/security/code-beautifiers-expose-credentials-from-banks-govt-tech-orgs/": "Code beautifiers expose credentials from banks, govt, tech orgs", "https://www.bleepingcomputer.com/news/security/code-formatters-expose-thousands-of-secrets-from-banks-govt-tech-orgs/": "Code-formatters expose thousands of secrets from banks, govt, tech orgs", "https://thehackernews.com/2025/11/years-of-jsonformatter-and-codebeautify.html": "Years of JSONFormatter and CodeBeautify Leaks Expose Thousands of Passwords and API Keys", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247492305&idx=1&sn=5e680062af72d7df39c29441788ddcc2": "代码安全、漏洞管理与网络安全五年规划:关键问题与实践策略|总第304周", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485323&idx=1&sn=5a4ea2f99fc4dc0f9528f28a4896df70": "某统一认证系统前台RCE漏洞", "https://forum.butian.net/share/4661": "【补天白帽黑客城市沙龙-长沙站】Android APP客户端漏洞挖掘思路", "https://forum.butian.net/share/4660": "【补天白帽黑客城市沙龙-长沙站】MCP漏洞挖掘与Nday复现", "https://www.anquanke.com/post/id/313359": "NVIDIA Isaac-GROOT机器人平台存在代码注入漏洞,对系统安全构成严重威胁", "https://www.anquanke.com/post/id/313366": "vLLM框架存在漏洞(CVE-2025-62164),通过恶意提示嵌入可导致远程代码执行", "https://www.anquanke.com/post/id/313352": "美国CISA发布警告:Oracle身份管理器中的远程代码执行漏洞正遭攻击者积极利用", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503612&idx=1&sn=54aaea98c3701289462a696248155529": "雷神众测漏洞周报2025.11.17-2025.11.23", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487925&idx=1&sn=6fb3b07b46dde65f85f7088f53be5b0a": "漏洞预警 | GeoServer GetMap XXE注入漏洞(CVE-2025-58360)", "https://www.blackhillsinfosec.com/abusing-delegation-with-impacket-part-3/": "Abusing Delegation with Impacket (Part 3): Resource-Based Constrained Delegation", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247487034&idx=1&sn=d597ab1a9e6694bba006ba1dd5f2fc12": "100%私密,零API成本的AI驱动子域名枚举+漏洞分析检测工具 -- God's Eye", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489597&idx=1&sn=1cabbff938a345491b09685c2aa3aa1a": "GeoServer WMS GetMap存在未授权XXE漏洞CVE-2025-58360 附POC", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497002&idx=1&sn=1b0fe1efaf0798bec7b412d10c9265da": "GeoServer XXE 漏洞(CVE-2025-58360)来袭,腾讯云主机安全RASP可自动防护", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247492079&idx=1&sn=8798b3c7051c35f884aa5ed95d05211b": "别让 0-Day 毁掉你的年终奖!IntelliJ 这款「Maven 依赖漏洞秒扫」插件我直接吹爆", "https://www.intigriti.com/researchers/blog/hacking-tools/november-ctf-challenge-exploiting-jwt-vulnerabilities": "November CTF Challenge: Exploiting JWT vulnerabilities to achieve RCE", "https://techcrunch.com/2025/11/26/bug-in-jury-systems-used-by-several-us-states-exposed-sensitive-personal-data/": "Bug in jury systems used by several US states exposed sensitive personal data", "https://therecord.media/hackers-blender-software-malware": "Hackers exploit 3D design software to target game developers, animators", "https://therecord.media/house-commttee-unveils-new-kosa-bill": "House Energy and Commerce Committee unveils new draft children’s online safety bill", "https://securelist.com/ntlm-abuse-in-2025/118132/": "Old tech, new vulnerabilities: NTLM abuse, ongoing exploitation in 2025", "https://thehackernews.com/2025/11/shai-hulud-v2-campaign-spreads-from-npm.html": "Shai-Hulud v2 Campaign Spreads From npm to Maven, Exposing Thousands of Secrets", "https://www.4hou.com/posts/W13X": "Grafana :最高级别漏洞可实现管理员身份冒充", "https://www.4hou.com/posts/QX9q": "微软:Windows 11 24H2 高危漏洞导致文件资源管理器等核心组件崩溃", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504216&idx=1&sn=8fd53afa984f9768f72f34db2d5988b1": "【已复现】GeoServer XML外部实体注入漏洞(CVE-2025-58360)安全风险通告", "https://www.anquanke.com/post/id/313385": "Firefox曝出严重漏洞,致1.8亿用户面临安全风险", "https://www.anquanke.com/post/id/313397": "FluentBit中存在关键漏洞,可导致攻击者远程攻陷云环境", "https://www.anquanke.com/post/id/313413": "Google最新IDE“Antigravity”曝出安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507981&idx=1&sn=b47d2553b034b9ef84b26f9e7cc4b087": "已复现!GeoServer GetMap XXE注入漏洞(CVE-2025-58360)", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247540984&idx=1&sn=8d77973634f59b3dc7f01d8f39835936": "当攻击速度快于补丁速度:2026年漏洞到底该如何补?", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524793&idx=1&sn=62014d4ad4518c465dcc3f4f7c5151a4": "【漏洞通告】GeoServer XML外部实体注入漏洞(CVE-2025-58360)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604539&idx=2&sn=b39d4c8f84761e16602c7fb06ab27eed": "Firefox曝高危漏洞CVE-2025-13016,1.8亿用户面临代码执行风险", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604539&idx=1&sn=52ae9835635172918961d471e1302f7a": "第八届强网拟态防御国际精英挑战赛 - WIN!致敬mt 复现", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509800&idx=1&sn=18d19b2a1b50781b95372041369f4e61": "秋冬福利季|10个漏洞获取最新周边,等你来薅!", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247508392&idx=1&sn=e59b4d6433d7fc41d635c829a39dc20d": "2025年真正获得赏金的顶级漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3OTYxNDY1NA==&mid=2247485961&idx=1&sn=38d2b61ae1c653b09ed6e5b6216b2a50": "Burp封神插件!自动提取路由 + 被动递归探测,漏洞挖掘效率狂飙!", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247495776&idx=1&sn=3f4a7f368f6aefc10631ef61dc3c3df2": "FreeBuf培训“平台赔付保障”漏洞挖掘实战班 | 年终王炸", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247493406&idx=1&sn=d3c59b977c761f792a5ee72d8fcf9a4a": "GeoServer XXE注入漏洞(CVE-2025-58360)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604548&idx=1&sn=8375e00ae768fbb4d8b952b3fb61a204": "Hyper-V平台IUM进程调试工具及通用TPM漏洞CVE-2025-2884分析与复现", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331223&idx=4&sn=02a6568b348291d06a5f65eca456caab": "Next.js框架DoS漏洞仅需一次请求即可导致服务器崩溃", "https://mp.weixin.qq.com/s?__biz=Mzk1NzE0ODUyOA==&mid=2247492525&idx=1&sn=a47f5945a114ba286c34621fb5330b2e": "【复现】vLLM远程代码执行漏洞(CVE-2025-62164)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247495436&idx=1&sn=415814be6231de7eced23a9239477fcb": "【已复现】Ray AI计算引擎远程代码执行漏洞(CVE-2025-62593)", "https://mp.weixin.qq.com/s?__biz=MzA4NjMwMzI3Mg==&mid=2247504233&idx=1&sn=f08b53ea4d2faaa7da550e16761cfd5e": "【漏洞通告】GeoServer GetMap XXE注入漏洞(CVE-2025-58360)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247491050&idx=1&sn=833948f97aa25a0242fc074300d98ba9": "【高危漏洞预警】Cursor命令执行漏洞CVE-2025-62354", "https://mp.weixin.qq.com/s?__biz=MzkzMzkyNTQ0Ng==&mid=2247485102&idx=1&sn=c12a9f8663416b33c5b5d77d47329e76": "从0到挖到第一个漏洞的经验总结,附用过的视频教程和学习笔记!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524529&idx=1&sn=3ac1c504b6bdffbb4d5aa2dea1943445": "华硕紧急修复9个漏洞,包括1个严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247537959&idx=3&sn=291b400db5397535e07a3033422fb3f4": "情报 + 敛财双杀!朝鲜黑客用 0Day 漏洞横扫全球", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331223&idx=2&sn=bc50c5f58d1d49b6796ffd230f983a60": "攻击者在暗网兜售iOS 26全链0Day漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247525251&idx=1&sn=0be187e927653de8732e8acd84692287": "最详细审计PhpcmsV9.6.0注册文件上传漏洞-小白也能看懂", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524529&idx=2&sn=f430edc811448de4be9a55cfb12448d5": "热门JavaScript 加密库 Forge 修复签名验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247537959&idx=1&sn=89278c6400cc6020b0983f859bdd94c3": "警惕 “SaaS 连环劫”!一个接口漏洞,200 家大中型企业敏感数据外泄", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247575871&idx=2&sn=8cc5cbdc8948c1b9c42cbf2c7847cfe9": "黑客视角的运维安全:这 7 个 Linux 服务器配置漏洞,你中招了吗?", "https://securityaffairs.com/185121/data-breach/openai-data-may-have-been-exposed-after-a-cyberattack-on-analytics-firm-mixpanel.html": "OpenAI data may have been exposed after a cyberattack on analytics firm Mixpanel", "https://thehackernews.com/2025/11/bloody-wolf-expands-java-based.html": "Bloody Wolf Expands Java-based NetSupport RAT Attacks in Kyrgyzstan and Uzbekistan", "https://thehackernews.com/2025/11/gainsight-expands-impacted-customer.html": "Gainsight Expands Impacted Customer List Following Salesforce Security Alert", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247510969&idx=1&sn=7d8b2bb6618f6876bedcb77a689a4ac2": "Ollama 越界写入漏洞简报", "https://mp.weixin.qq.com/s?__biz=MzkzNzM1MTcwMA==&mid=2247490536&idx=1&sn=dbb9da8c2b79da55d99d0ac1e120df1d": "Antigravity 停飞!Google 最新 IDE 中的安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU1ODk1MzI1NQ==&mid=2247493293&idx=1&sn=1d3b8f8b59cbaf3a85b917e54a2c4815": "Intent本地拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5ODgxMTIzMg==&mid=2247483959&idx=1&sn=ac901f670ce7e23f53baad513f2b64ad": "fastjson0day报名直接送", "https://mp.weixin.qq.com/s?__biz=MzI0MTY5NDQyMw==&mid=2247526232&idx=1&sn=a59329238022edbb164a1dd34de6d3cd": "“共建共治、智护未来” | 第二届华为漏洞管理与应急响应技术大会于深圳成功举办", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489427&idx=1&sn=0de2d32a84d3e3685723814776d55971": "【漏洞通告】Cursor远程代码执行漏洞(CVE-2025-62354)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247491055&idx=1&sn=f15d0d3aa805fe81ac9293dd5b16248d": "【高危漏洞预警】Ray AI计算引擎远程代码执行漏洞CVE-2025-62593", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247485589&idx=1&sn=0aec0d0ad71583176b2325c99e90e35f": "东方通TongWeb反序列化漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064440&idx=1&sn=0f05abb5c71fa09d41987be333b56230": "信息安全漏洞周报【第049期】", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331296&idx=3&sn=13b59c62185fa7245c93506d7bcf9d1a": "攻击者利用物联网漏洞部署新型ShadowV2恶意软件", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604601&idx=3&sn=35dd5bd4c71a05d1a770635c98edf0ec": "新曝Next.js未授权DoS漏洞,可一键击溃服务器", "https://mp.weixin.qq.com/s?__biz=Mzk3NTE5NTI0OQ==&mid=2247484700&idx=1&sn=df5d841601a01cf413097400a672a53f": "漏洞预警 | Cursor远程代码执行漏洞(CVE-2025-62354)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331296&idx=4&sn=ae9c319b0b73d7888bb0e4af8b227255": "遗留Python包中的漏洞代码可通过域名劫持攻击Python包索引", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489626&idx=1&sn=e4ff68840a05df4bd3d70967f5ff1c44": "金蝶云星空CommonFileServer接口存在任意文件读取漏洞 附POC", "https://www.bleepingcomputer.com/news/security/malicious-llms-empower-inexperienced-hackers-with-advanced-tools/": "Malicious LLMs empower inexperienced hackers with advanced tools", "https://therecord.media/california-web-browser-law-national-implications": "California law regulating web browsers could have national data privacy impact, experts say", "https://therecord.media/asahi-says-ransomware-incident-exposed-data": "Japanese beer giant Asahi says ransomware attack may have exposed data of 1.5 million people", "https://www.bleepingcomputer.com/news/security/public-gitlab-repositories-exposed-more-than-17-000-secrets/": "Public GitLab repositories exposed more than 17,000 secrets", "https://securityaffairs.com/185135/malware/new-mirai-variant-shadowv2-tests-iot-exploits-amid-aws-disruption.html": "New Mirai variant ShadowV2 tests IoT exploits amid AWS disruption", "https://www.tenable.com/blog/cybersecurity-snapshot-what-security-pros-are-saying-about-exposure-management-risk": "Cybersecurity Snapshot: What Security Pros’ Are Saying About Exposure Management, Risk Prioritization, Tool Sprawl and More", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504220&idx=1&sn=558289331957486b5fa0f121fa99ceca": "安全热点周报:Oracle Identity Manager 中的严重漏洞正被积极利用", "https://www.anquanke.com/post/id/313482": "Apache SkyWalking 中存在漏洞,可导致攻击者发起跨站脚本攻击", "https://www.anquanke.com/post/id/313477": "GitLab发布安全更新,修复可导致认证绕过与拒绝服务攻击的多重漏洞", "https://www.anquanke.com/post/id/313486": "Next.js服务器存在未授权拒绝服务漏洞,单次请求即可致服务崩溃", "https://www.anquanke.com/post/id/313453": "遗留Python包中的代码漏洞,可通过劫持其依赖域名进而危及整个PyPI软件生态", "https://blog.upx8.com/4910": "NetExec 网络服务漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247486237&idx=1&sn=3827ad774c2fe98a0d84d8c0ae573656": "2025年团队漏洞挖掘赏金部分成果汇总", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096683&idx=2&sn=08e489e9a70ac35651616398b069d68a": "Apache SkyWalking曝XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331356&idx=3&sn=9b7004d09c1195707753dd1bfed00417": "FreeBuf周报 | 新型黑产AI工具KawaiiGPT降低黑客门槛;黑客出售微软Office 0Day RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096683&idx=1&sn=5644d33c5b40b1cd18e45d784d580c3c": "NVIDIA DGX Spark曝高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533792&idx=3&sn=2dab9ec6ceb1df3e71b70e33ac75abe4": "NVIDIA Triton推理服务器Python后端命令注入漏洞(CVE-2025-23316)", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485286&idx=1&sn=a55703f112c8d385f75ae1361629aa37": "POC|弥特科技全流程追溯系统geticp存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247493091&idx=1&sn=ec27d40db266a68e5298327a7c9df143": "QQ nt版本图片onerror代码注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5NDI0NzY3Mg==&mid=2247485144&idx=1&sn=6ef8a9eacc6df9dd0f87c2c453cf3912": "【漏洞情报】Revive Adserver用户管理系统中的\"添加用户\"查找功能导致信息泄露", "https://mp.weixin.qq.com/s?__biz=MzkxNjc0ODA3NQ==&mid=2247484674&idx=1&sn=ee0129f2674a549ee73e94ff0b5b8dcc": "【漏洞挖掘Tips】将JS伪造为 PDF 的一些方法", "https://mp.weixin.qq.com/s?__biz=Mzk2NDkwMDg3Nw==&mid=2247484007&idx=1&sn=53c08e5868de3d714124cfd6a5e75620": "佳会视频会议系统任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxMzU0NQ==&mid=2247484036&idx=1&sn=dc25468ecb7f8f6b2a1b51a080512757": "华天动力协同办公系统travelAjax存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247493434&idx=1&sn=0d783e2f46c13a3643987124b5048627": "南北软件ERP ListDir.jsp 目录遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247508416&idx=2&sn=bccda446909907dce49e9245b5f9e198": "导致我获得第一个赏金的简单漏洞(可复用的激活链接 → 账户接管)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247504295&idx=1&sn=18e0cd397bcb7f300f181e901bf86f17": "网传 Windows QQ NT 9.9.25.42744 存在严重跨站脚本攻击漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331395&idx=2&sn=ead8ab383d82ca76a2c85068d3300b13": "20年老协议仍威胁全球网络安全:黑客利用NTLM认证漏洞攻击Windows系统", "https://mp.weixin.qq.com/s?__biz=Mzk2NDgwNjA2NA==&mid=2247485843&idx=1&sn=d7b643d12902a3b47b1bce5119912bf5": "CVE-2025-27591: Below本地提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489637&idx=1&sn=4f46c90f4c225b491273c727dc0dd0f5": "SPON IP网络对讲广播系统php/getuserdata.php存在敏感信息漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652072974&idx=1&sn=0c3a26835ab03509894776e4bfc857a6": "【安全圈】Gitlab 修复多项可导致认证绕过与拒绝服务攻击的漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331395&idx=1&sn=5e54694c391552eb1aa4ca8929da49cc": "漏洞盒子十年:在线安全服务平台的演进与未来范式", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247493443&idx=1&sn=c0a53060bb887e8fae5b0d129d6afa63": "用友时空KSOA workslist.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMzk5MTM2NA==&mid=2247484411&idx=1&sn=b70cb27e6d80b899b7aafad1a0415c89": "若依最新版本4.8.1漏洞 SSTI绕过获取ShiroKey至RCE", "https://mp.weixin.qq.com/s?__biz=Mzk1NzgzMjkxOQ==&mid=2247486089&idx=1&sn=eb925fe03aae8e2667a54859ccc772bc": "记一次edusrc的任意文件读取漏洞", "https://securityaffairs.com/185170/apt/contagious-interview-campaign-expands-with-197-npm-ppackages-spreading-new-ottercookie-malware.html": "Contagious Interview campaign expands with 197 npm Ppackages spreading new OtterCookie malware", "https://thehackernews.com/2025/11/cisa-adds-actively-exploited-xss-bug.html": "CISA Adds Actively Exploited XSS Bug CVE-2021-26829 in OpenPLC ScadaBR to KEV", "https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247496807&idx=1&sn=26e49f88d6ea359eb7f1f34ecfe1d725": "复旦白泽漏洞治理团队× 腾讯悟空|共建业界首个项目级 AI 生成代码安全性评测框架 A.S.E", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496536&idx=1&sn=17768b9365ef1c09eedf44ceac7c6ad3": "CNVD漏洞周报2025年第46期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496536&idx=2&sn=a5604ebf8176a3dc2d0fdf77633ad236": "上周关注度较高的产品安全漏洞(20251124-20251130)", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533818&idx=1&sn=d8b00e112ab096e0ad129302caa94bce": "CVE-2025-50168漏洞利用 PoC — Pwn2Own Berlin 2025-LPE(Windows 11)获奖漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247485814&idx=1&sn=295b9387886a66fbb9248d33b67ef244": "DIR823GA1_FW102B03启动项分析,命令执行漏洞复现。", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545861&idx=1&sn=d05699773dc9ff20d29276e7d77a16bb": "技术分享|EXP能力升级(二):还在手搓FTP?看Goby如何一键拿下服务依赖型漏洞shell", "https://isc.sans.edu/diary/rss/32526": "ISC Stormcast For Monday, December 1st, 2025 https://isc.sans.edu/podcastdetail/9718, (Mon, Dec 1st)", "https://securityaffairs.com/185185/security/u-s-cisa-adds-an-openplc-scadabr-flaw-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds an OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities catalog", "http://www.tgsoft.it/italy/news_archivio.asp?id=1694": "Vir.IT eXplorer 9.5.x premiato da OPSWAT con la "PLATINUM certification for Anti-Malware"!!!", "https://thehackernews.com/2025/12/weekly-recap-hot-cves-npm-worm-returns.html": "⚡ Weekly Recap: Hot CVEs, npm Worm Returns, Firefox RCE, M365 Email Raid & More", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524561&idx=1&sn=746ba33a46d787d0443917a920872276": "GeoServer 高危漏洞可导致未认证XXE", "https://forum.butian.net/share/4655": "红队快速高效挖掘.net系统漏洞技巧", "https://www.anquanke.com/post/id/313498": "Devolutions Server 中存在严重漏洞(CVE-2025-13757),已认证的攻击者可利用SQL注入窃取所有存储的密码", "https://www.anquanke.com/post/id/313505": "GeoServer 中存在高危漏洞(CVE-2025-58360),可利用未授权的XXE攻击实现文件窃取与服务端请求伪造", "https://www.anquanke.com/post/id/313517": "美国CISA已将OpenPLC ScadaBR系统中正遭积极利用的XSS漏洞(CVE-2021-26829)列入其关键漏洞目录", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604640&idx=2&sn=5c18988c87f29aa71e037b8faa8bbddb": "Outlook高危0点击漏洞PoC公开,无需交互即可远程执行代码", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247521530&idx=1&sn=77c6acb285240b1648fec2326698ece2": "CSPT漏洞是什么以及它如何结合其它漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451183936&idx=1&sn=e03dda64f4583661ffc66b3d92a36e57": "安卓系统远程拒绝服务攻击漏洞的隐藏价值", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247493461&idx=1&sn=fb73790d88342fd247488ce1206ec91b": "扁鹊飞救智能急救与质控系统 GetMonitorList sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNTgzOTg4Mg==&mid=2247486483&idx=1&sn=9a9b442c80efb3db4b07134e0d331cc0": "重磅披露 | Water Gamayun APT组织利用MSC“邪恶双胞胎”漏洞发起定向攻击", "https://www.malwarebytes.com/blog/news/2025/12/google-patches-107-android-flaws": "Google patches 107 Android flaws, including two being actively exploited", "https://www.bleepingcomputer.com/news/security/google-fixes-two-android-zero-days-exploited-in-attacks-107-flaws/": "Google fixes two Android zero days exploited in attacks, 107 flaws", "https://www.bleepingcomputer.com/news/microsoft/microsoft-kb5070311-triggers-file-explorer-bright-white-flashes-in-dark-mode/": "Microsoft: KB5070311 triggers File Explorer white flash in dark mode", "https://www.bleepingcomputer.com/news/security/shai-hulud-20-npm-malware-attack-exposed-up-to-400-000-dev-secrets/": "Shai-Hulud 2.0 NPM malware attack exposed up to 400,000 dev secrets", "https://securityaffairs.com/185226/security/googles-latest-android-security-update-fixes-two-actively-exploited-flaws.html": "Google’s latest Android security update fixes two actively exploited flaws", "https://securityaffairs.com/185217/cyber-crime/law-enforcement-shuts-down-cryptomixer-in-major-crypto-crime-takedown.html": "Law enforcement shuts down Cryptomixer in major crypto crime takedown", "https://securityaffairs.com/185252/security/u-s-cisa-adds-android-framework-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Android Framework flaws to its Known Exploited Vulnerabilities catalog", "https://www.tenable.com/blog/exposure-management-vs-siloed-security-tools-4-ways-to-supercharge-your-strategy": "Exposure Management Vs. Siloed Security Tools: 4 Ways to Supercharge Your Strategy — and Your Career", "https://thehackernews.com/2025/12/google-patches-107-android-flaws.html": "Google Patches 107 Android Flaws, Including Two Framework Bugs Exploited in the Wild", "https://forum.butian.net/share/4664": "手把手拆解:小程序/Web端加密鉴权绕过案例全复现", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604701&idx=2&sn=88b548d360e026b8d2ebc11d66d54240": "从C到Pwn:栈溢出漏洞利用实战入门", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604701&idx=3&sn=c8c472c30c1e3e7a9a38dd3a152f27c6": "安卓曝高危DoS漏洞及两个遭利用零日漏洞,请立即更新补丁", "https://mp.weixin.qq.com/s?__biz=MzkzNzM1MTcwMA==&mid=2247490575&idx=1&sn=3c1116c2140841d2a6f563feaf527933": "Rusty Pearl:Postgres 实例中的远程代码执行", "http://security.googleblog.com/2025/12/android-expands-pilot-in-call-scam-protection-financial-apps.html": "Android expands pilot for in-call scam protection for financial apps", "https://horizon3.ai/downloads/research/horizon3-ai-is-named-a-customers-choice-in-the-october-2025-gartner-peer-insights-voice-of-the-customer-adversarial-exposure-validation-report/": "Horizon3.ai is named a Customer’s Choice in the October 2025 Gartner® Peer Insights™ “Voice of the Customer”: Adversarial Exposure Validation report", "https://www.ictsecuritymagazine.com/articoli/il-prezzo-nascosto-dell-ai/": "Il prezzo nascosto dell’AI: quando i tuoi dati diventano merce di scambio", "https://www.malwarebytes.com/blog/inside-malwarebytes/2025/12/fileless": "Fileless protection explained: Blocking the invisible threat others miss", "https://www.bleepingcomputer.com/news/security/critical-flaw-in-wordpress-add-on-for-elementor-exploited-in-attacks/": "Critical flaw in WordPress add-on for Elementor exploited in attacks", "https://www.bleepingcomputer.com/news/security/deep-dive-into-dragonforce-ransomware-and-its-scattered-spider-connection/": "Deep dive into DragonForce ransomware and its Scattered Spider connection", "https://securelist.com/vulnerabilities-and-exploits-in-q3-2025/118197/": "Exploits and vulnerabilities in Q3 2025", "https://www.bleepingcomputer.com/news/security/freedom-mobile-discloses-data-breach-exposing-customer-data/": "Freedom Mobile discloses data breach exposing customer data", "https://www.bleepingcomputer.com/news/security/google-expands-android-scam-protection-feature-to-chase-cash-app-in-us/": "Google expands Android scam protection feature to Chase, Cash App in U.S.", "https://www.bleepingcomputer.com/news/microsoft/microsoft-mitigates-windows-lnk-flaw-exploited-as-zero-day/": "Microsoft \"mitigates\" Windows LNK flaw exploited as zero-day", "https://thehackernews.com/2025/12/microsoft-silently-patches-windows-lnk.html": "Microsoft Silently Patches Windows LNK Flaw After Years of Active Exploitation", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664254376&idx=1&sn=60b98a6e111737559ac81e5dcbc32f23": "中国信息安全测评中心主任彭涛:共谱国家漏洞治理生态新篇章", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524571&idx=2&sn=e4271fa2e064e2011e1b779ac929f05f": "OpenAI 编程代理中高危漏洞可用于攻击开发人员", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524571&idx=1&sn=877a0981b4dec19068dff6f479fce3b9": "谷歌修复107个安卓漏洞,其中2个已遭利用", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247495800&idx=1&sn=c59168da32a999aec01f6043b41ceac0": "抖音电商反爬专测上线!漏洞奖金千元起步~", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073023&idx=2&sn=d2056c788647c874cd8ebc8dffb274f9": "【安全圈】aaPanel(宝塔面板)数据库权限查询逻辑存在 SQL 注入漏洞", "https://www.anquanke.com/post/id/313545": "Django框架中存在漏洞(CVE-2025-13372),可导致PostgreSQL FilteredRelation功能出现SQL注入风险", "https://www.anquanke.com/post/id/313551": "Elementor插件中存在严重漏洞(CVE-2025-8489,CVSS 9.8),正被积极利用以获取未授权的网站管理员权限", "https://www.anquanke.com/post/id/313548": "美国CISA发布警告:Iskra iHUB智能计量枢纽存在严重漏洞(CVE-2025-13510),可致攻击者未授权接管智能计量系统", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247528228&idx=1&sn=5a610339da98ef6a8ea4423a04ec8ce1": "关于腾讯QQ NT 9.9.25.42744 Windows版本漏洞风险及安全防护建议的公告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604765&idx=1&sn=684d1b0ceaa34e63f3d276f6d9b7cb12": "SDC2025 议题回顾 | 不同芯片架构下的可信执行环境(TEE)安全漏洞研究", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503619&idx=1&sn=75146f8f9692093f97adc3ce9044a748": "雷神众测漏洞周报2025.11.24-2025.11.30", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451183972&idx=1&sn=d2a4411d2ea14dbfb3f7f7af6ef02a28": "Intellexa联盟0day漏洞攻击不止:泄露分析揭全球监视黑幕", "https://mp.weixin.qq.com/s?__biz=MzYzNDE4ODczNA==&mid=2247484715&idx=1&sn=b150ef2956b1094946f3c05e5f7ee43f": "【0day】泛微OA从历史漏洞到全新0day,附EXP", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247521677&idx=1&sn=dc1c13a8adb29c54e2bbc12453dced76": "【漏洞挖掘】业务响应状态码攻击面新思路", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488910&idx=1&sn=c67990691ed4bb87c158057807e38712": "假核弹:CVE-2025-55182", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247495499&idx=1&sn=0e4f3586f6618aa413593fa8b1666a17": "影响范围有限!【二次更新:代码审计+利用条件】React 远程代码执行漏洞(CVE-2025-55182)", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545870&idx=1&sn=578883ef2e196b4608cdf6afb6b8ad1b": "核弹级漏洞?请看CVE-2025-55182真实测验分析", "https://horizon3.ai/news/press-release/horizon3-ai-recognized-as-a-customers-choice-in-the-october-2025-gartner-peer-insights-voice-of-the-customer-adversarial-exposure-validation-report/": "Horizon3.ai Recognized as a Customers’ Choice in the October 2025 Gartner® Peer Insights™ “Voice of the Customer”: Adversarial Exposure Validation Report", "https://krypt3ia.wordpress.com/2025/12/04/the-krampus-list-2025-ai-apocalypse-edition/": "THE KRAMPUS LIST 2025: AI APOCALYPSE EDITION", "https://therecord.media/british-officials-seek-to-expand-facial-recognition-tech-use": "British officials seek to expand facial recognition technology use", "https://www.bleepingcomputer.com/news/security/hackers-are-exploiting-arrayos-ag-vpn-flaw-to-plant-webshells/": "Hackers are exploiting ArrayOS AG VPN flaw to plant webshells", "https://www.bleepingcomputer.com/news/security/ncscs-proactive-notifications-warns-orgs-of-flaws-in-exposed-devices/": "NCSC's ‘Proactive Notifications’ warns orgs of flaws in exposed devices", "https://securityaffairs.com/185327/hacking/u-s-cisa-adds-new-openplc-scadabr-flaw-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds a new an OpenPLC ScadaBR flaw to its Known Exploited Vulnerabilities catalog", "https://www.tenable.com/blog/react2shell-cve-2025-55182-react-server-components-rce": "CVE-2025-55182: Frequently Asked Questions About React2Shell: React Server Components Remote Code Execution Vulnerability", "https://www.tenable.com/blog/cloud-vulnerability-management-hybrid-cloud-security-exposure-management": "What’s New in Tenable Cloud Security: November Updates in Exposure Management", "https://lab.wallarm.com/wallarm-blocks-exploitation-remote-code-execution-vulnerability-react-server-components/": "Wallarm Halts Remote Code Execution Exploits: Defense for Vulnerable React Server Component Workflows", "https://bishopfox.com/blog/arista-nextgen-firewall-xss-to-rce-chain": "Arista NextGen Firewall XSS to RCE Chain", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727850291&idx=1&sn=4f9781a5441f3fe7bd2aa08597bef373": "悬挂的指针、脆弱的内存──从一个未公开的漏洞到 Pixel 9 Pro 提权", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524584&idx=1&sn=c3b264a905dace804ae6937303f8f391": "微软悄悄修复多年前就已遭利用的 LNK 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524584&idx=2&sn=d601040ac12c82888e8edba633d2fc02": "速修复!React满分漏洞同时影响 Next.js,可导致未认证RCE", "https://xz.aliyun.com/news/90756": "AI编程助手的上下文毒化技术深度解析与实战复现", "https://xz.aliyun.com/news/90753": "React 服务器组件原型链漏洞(CVE-2025-55182)", "https://xz.aliyun.com/news/90754": "React 框架 CVE-2025-55182 RCE CVSS 10.0分析", "https://xz.aliyun.com/news/90755": "满分漏洞?react2shell?核弹?CVE-2025-55182", "https://www.4hou.com/posts/mkrE": "漏洞预警 | React/Next.js组件存在RCE漏洞(CVE-2025-58360)", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485678&idx=1&sn=2fdcaddb6e41b9c23d2f4ebc1a547277": "Kubernetes攻防演练:十大安全漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247516887&idx=1&sn=37159cfcf5788326fd194b5cad50c4c2": "【严重!已复现】React Server Components (CVE-2025-55182)远程代码执行漏洞安全风险通告", "https://www.solidot.org/story?sid=82966": "React Server 高危漏洞影响无数网站", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650185216&idx=1&sn=203d00418fb5cdbbd5008e1720be6557": "TDP检测团队公开React漏洞检测规则与排查方案", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507996&idx=1&sn=f8e078d87c5c21bc4438d844a52837e7": "已复现!React/Next.js 组件爆RCE 漏洞,建议立即排查", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247504006&idx=1&sn=7706749452fb38721364f9fb247ab009": "900 万美元被盗:Yearn yETH 池漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524826&idx=1&sn=d18ec375b01544ede00a7d2f0c7d3837": "【漏洞通告】React/Next.js 远程命令执行漏洞 CVE-2025-55182/CVE-2025-66478", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604770&idx=1&sn=174d05be91d4dac9e2bfe20e7d389e50": "EXIF解析缓冲区溢出漏洞分析与利用", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489437&idx=1&sn=7f614ffd54ef7ad00b9119bafda9f9c7": "【复现+支持检测】React/Next.js远程代码执行漏洞(CVE-2025-55182/CVE-2025-66478)", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492991&idx=1&sn=195e26f28c4ba07246dc8c672e3fd602": "【已复现】React Server Components 远程代码执行漏洞(CVE-2025-55182)", "https://mp.weixin.qq.com/s?__biz=MzI5MzY2MzM0Mw==&mid=2247486381&idx=1&sn=153787d6906454c70ba0dc3252123d7c": "React框架被曝最高危险等级漏洞,阿里云一键防护指南速览", "https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247501483&idx=1&sn=ab38ad037d45ceb35a2309fb265eedbe": "【漏洞情报】React Server Components 远程代码执行漏洞(CVE-2025-55182)", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487947&idx=1&sn=6ef9030b02602853cb13a86b81006516": "漏洞预警 | React/Next.js组件RCE漏洞(CVE-2025-55182)详情分析-【附验证环境】", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496540&idx=1&sn=8ae3dd2daee466615da484b1ee44c286": "关于React Server Components存在远程代码执行漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489458&idx=2&sn=88878abfe7ae0df5e8e92b9a6e96010d": "AI赋能EASM与MDR服务,React漏洞风险排查的最优解", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524592&idx=2&sn=8aff82f7cd9318d952e1e19e57602fd6": "Cacti 高危漏洞可导致RCE", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524592&idx=1&sn=9908beba8dc24ac369a0fa794aaf3e72": "GitHub Actions 出现提示注入漏洞,影响财富500强公司", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497064&idx=1&sn=3225bf0b198d43103d466e7b111658a3": "React高危漏洞,腾讯云全系安全产品一键防护", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247494582&idx=1&sn=821c6f69a681f0d0451418e2b24923b7": "【CVE-2025-27389】应用安装流程校验缺陷可能导致风险提示被绕过的致谢公告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489458&idx=1&sn=b8d1d093a18a06d85074f785729bdc99": "【处置手册】React/Next.js远程代码执行漏洞(CVE-2025-55182/CVE-2025-66478)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664254692&idx=1&sn=ced051d3f2fd437a12a9ebd6d0498da5": "专题·漏洞生态 | 统筹发展和安全 推进基础软硬件产品漏洞生态体系建设", "https://seclists.org/fulldisclosure/2025/Dec/4": "Multiple Security Misconfigurations and Customer Enumeration Exposure in Convercent Whistleblowing Platform (EQS Group)", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545884&idx=1&sn=014a0a852d2ff74e197c2bb25b01e928": "【追更】已支持回显验证!新爆CVE-2025-55182 PoC可无条件利用,Dify受影响严重", "https://therecord.media/chinese-hackers-exploiting-react2shell-vulnerability-amazon": "Chinese hackers exploiting React2Shell bug impacting countless websites, Amazon researchers say", "https://techcrunch.com/2025/12/05/petco-confirms-security-lapse-exposed-customers-personal-data/": "Petco confirms security lapse exposed customers’ personal data", "https://www.bleepingcomputer.com/news/security/react2shell-critical-flaw-actively-exploited-in-china-linked-attacks/": "React2Shell critical flaw actively exploited in China-linked attacks", "https://securityaffairs.com/185346/intelligence/brickstorm-backdoor-exposed-cisa-warns-of-advanced-china-backed-intrusions.html": "BRICKSTORM backdoor exposed: CISA warns of advanced China-backed intrusions", "https://securityaffairs.com/185358/uncategorized/jpcert-cc-reports-widespread-exploitation-of-array-networks-ag-gateway-vulnerability.html": "JPCERT/CC Reports Widespread Exploitation of Array Networks AG Gateway Vulnerability", "https://www.sentinelone.com/blog/protecting-against-critical-react2shell-rce-exposure/": "From React to Remote Code – Protecting Against the Critical React2Shell RCE Exposure", "https://thehackernews.com/2025/12/chinese-hackers-have-started-exploiting.html": "Chinese Hackers Have Started Exploiting the Newly Disclosed React2Shell Vulnerability", "https://thehackernews.com/2025/12/critical-xxe-bug-cve-2025-66516-cvss.html": "Critical XXE Bug CVE-2025-66516 (CVSS 10.0) Hits Apache Tika, Requires Urgent Patch", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485680&idx=1&sn=3555dd6dccfd9786a0e7348222625bdb": "【CVE-2025-55182】漏洞情报员们疯狂的一天", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504298&idx=1&sn=4c3d5512ec94c6c762f66bee24aad389": "【在野利用】React Server Components 远程代码执行漏洞(CVE-2025-55182)安全风险通告", "https://www.anquanke.com/post/id/313602": "Cacti 中存在高危漏洞(CVE-2025-66399),通过SNMP团体字符串注入可导致远程代码执行", "https://www.anquanke.com/post/id/313598": "Splunk中存在高危漏洞,因Windows平台上的不当文件权限设置,可导致本地攻击者实现权限提升", "https://www.anquanke.com/post/id/313590": "“PDF陷阱”:Apache Tika核心组件存在严重漏洞(CVE-2025-66516,CVSS 10.0)", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650185281&idx=1&sn=6664f3249848140c49c2137ab5a3a279": "捕获在野利用!React漏洞无条件触发,通用规则可检出", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541076&idx=2&sn=4ab92438f6d90356ed1c1feab3b53258": "从“被动合规”到“主动运营”:漏洞风险例外管理机制实践", "https://mp.weixin.qq.com/s?__biz=MzU0MDcyMTMxOQ==&mid=2247487754&idx=1&sn=72ed5ee33e0e652093785170ca3cd2ac": "前端圈的核弹: CVE-2025-55182 React/next.js 内存马的一些玩法", "https://mp.weixin.qq.com/s?__biz=Mzk1NzUwNjAwOQ==&mid=2247485399&idx=1&sn=01b1cca5da300bc99ca960eec7721dc5": "CVE-2025-55182-Next.js 无条件RCE(payload)", "https://mp.weixin.qq.com/s?__biz=Mzg5NjUxOTM3Mg==&mid=2247491208&idx=1&sn=eb549be8cbb614797b2ccd5c4ff227b6": "CVE-2025-55182-React以及DIFY利用", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486268&idx=1&sn=8cd878ba7b925bed6f27280e5e44a90d": "CVE-2025-55182|React/Next.js远程代码执行漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486268&idx=2&sn=63b1734639c0250ae5c3bf52fd021c08": "CVE-2025-58360|GeoServer未经授权的XML外部实体注入漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331816&idx=2&sn=7936ebbb2ff0fc59a814790080075f07": "Cloudflare全球服务中断事件溯源:React漏洞修复适得其反", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331816&idx=3&sn=c98084779a9587e1a5eddb5e0137cb22": "FreeBuf周报 | 高通骁龙8 Gen3曝出高危漏洞;核弹级React远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247485944&idx=1&sn=5d02a7658f894eb04e36d94c543e73b7": "Iptime漏洞分析,未授权、未授权修改账号密码、远程调试(后门)", "https://mp.weixin.qq.com/s?__biz=Mzg2Mzg2NDM0NA==&mid=2247486773&idx=1&sn=7d5ae5792fb1fc34485c9b0a493b4caf": "React Server Components命令执行漏洞-react2shell-scanner扫描工具", "https://mp.weixin.qq.com/s?__biz=Mzk2NDI0MjUyNQ==&mid=2247485828&idx=1&sn=a2d15b6c6675e9e4726f5f21598b8fae": "Redis协议RCE:攻击逻辑与实战", "https://mp.weixin.qq.com/s?__biz=Mzk5MDYxODcwMA==&mid=2247484230&idx=1&sn=5c614ca804549d44d3206ff7ccc3b4ed": "【复现】React服务器组件 - 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073071&idx=3&sn=ff648efa97dae6e980b00152ee2d6763": "【安全圈】React Server Components 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk2NDkwMDg3Nw==&mid=2247484024&idx=1&sn=17062de33dbf8d15335f4c9b18cb1fd7": "帮管客CRM jiliyu接口存在SQL漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331816&idx=1&sn=f1c70f8695bdf5bc557b9a36459b7e91": "念古诗绕过AI安全护栏:25款顶尖模型栽跟头,模糊语义成安全大漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247545882&idx=1&sn=c7759fe40964a0a84d86445046f59391": "核弹级漏洞?名为核弹,实为跳蛋,CVE-2025-55182 复现", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247493478&idx=1&sn=d5e20d06528ccb02d4051ace2bf39541": "美特CRM druid组件 未授权访问漏洞", "https://www.ictsecuritymagazine.com/articoli/explainable-security/": "Explainable Security: dalle fiabe alla cybersecurity – quando Cenerentola insegna l’autenticazione multifattore", "https://www.bleepingcomputer.com/news/security/react2shell-flaw-exploited-to-breach-30-orgs-77k-ip-addresses-vulnerable/": "React2Shell flaw exploited to breach 30 orgs, 77k IP addresses vulnerable", "https://thehackernews.com/2025/12/critical-react2shell-flaw-added-to-cisa.html": "Critical React2Shell Flaw Added to CISA KEV After Confirmed Active Exploitation", "https://thehackernews.com/2025/12/researchers-uncover-30-flaws-in-ai.html": "Researchers Uncover 30+ Flaws in AI Coding Tools Enabling Data Theft and RCE Attacks", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485690&idx=1&sn=cfd58207cfb82ff071a776ff3c1c48ed": "漏洞速递 | 已复现 CVE-2025-55182 RCE漏洞(建议自查修复)", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653093477&idx=1&sn=cae657d45f2770190637dedb4223124d": "探索·向上!极客公园 2025 年度「InnoForce 50」发布", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331842&idx=1&sn=1f7220c88577f037a95925bae76b0997": "215万台运行Next.js的Web服务暴露于互联网,CVSS10分漏洞需紧急修复", "https://mp.weixin.qq.com/s?__biz=Mzk0MzY5MzI3Mg==&mid=2247484021&idx=1&sn=7b75852cb1c8dc6583b5617dd990417d": "CVE-2025-23358 Windows版 NVIDIA APP 提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2Mjk4NjgxMg==&mid=2247483811&idx=1&sn=5cb349f959bd6fb3a1d44c8513fe1e50": "CVE-2025-55182 Next.js Server Actions RCE Vulnerability Analysis", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331842&idx=2&sn=b2b555d37c8629fcdad2e7d8ce2e4134": "Cursor等AI编程工具曝30余项漏洞,可导致数据窃取与远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzA5NDI0NzY3Mg==&mid=2247485186&idx=1&sn=748b7d0c876a930cff73ac5534ba89db": "Dify Next.js CVE-2025-55182 RCE漏洞本地复现详细版", "https://mp.weixin.qq.com/s?__biz=MzkxMDE5NTIyMA==&mid=2247485322&idx=1&sn=9d861f81f9d0c2a3af8260651bddf942": "Dscan:全方位自动化攻击面管理与漏洞扫描平台", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533866&idx=1&sn=f4c26307de54a5ac885678fda58598d9": "React 服务器组件飞行协议反序列化远程代码执行漏洞 (CVE-2025-55182)", "https://mp.weixin.qq.com/s?__biz=MzkxMjg3NzU0Mg==&mid=2247487274&idx=1&sn=e6f0b46fbc5a5e6ddfb6c503161526af": "React/Next.js RCE漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzYzNjAwMjQ3OQ==&mid=2247484628&idx=1&sn=0dfa641c6e0c93851068e426948a82ec": "【漏洞复现】React(next.js)远程代码执行漏洞(CVE-2025-55182)", "https://mp.weixin.qq.com/s?__biz=MzkxNTY5MjQ5OQ==&mid=2247487032&idx=1&sn=ee1f9872e27db431a4c75da2c810c046": "【漏洞检测POC】React Server Components RCE(CVE-2025-55182)", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247485340&idx=1&sn=4591f7f295b4d9eeb6d56d8609a64ef6": "【紧急提醒】React 与 Next.js 爆出安全漏洞,近期项目几乎全中招!", "https://mp.weixin.qq.com/s?__biz=MzU1Mjk3MDY1OA==&mid=2247521480&idx=1&sn=d6700e214daf4533a1d2d16660da0bbb": "【网络安全】目录索引漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247492538&idx=1&sn=fc886058323f7d23414ab5e734f8f8ee": "人工深度调试剖析 CVE-2025-55182 React4Shell 反序列化漏洞(一)", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064470&idx=1&sn=4ed4d45e68d204dd3e2be64ab87595ae": "信息安全漏洞周报【第050期】", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650613536&idx=2&sn=844ff30945c4be31bb51532692996474": "启动过程遭入侵:高通骁龙8 Gen3及5G调制解调器曝出高危漏洞(CVE-2025-47372)", "https://mp.weixin.qq.com/s?__biz=MzIyNDg2MDQ4Ng==&mid=2247487785&idx=1&sn=ae447bb4a6240c2d1808f9a91a13a4fb": "把 RSC 放进容器里:从 React2Shell 到 Next.js RCE 的一次远程执行完整复现", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331842&idx=3&sn=972e374404552be6f5b67e2a8c06950d": "每周PDF资源:苹果锁屏漏洞探究;Javassist代码审计关键点实践;网络安全实验教程;计算机病毒揭秘与对抗,网络防卫计划", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247493494&idx=1&sn=8ab1eb28894cb7c27f462c4948eea121": "汉王EFaceGO wxLogin.do 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485309&idx=1&sn=f9e334e988aa390362c5d86f16f34b41": "漏洞复现|QQ Windows客户端存在跨站脚本(XSS)漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496556&idx=2&sn=46f75ba780134844babc057455566d4d": "上周关注度较高的产品安全漏洞(20251201-20251207)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508037&idx=1&sn=1457472b23bedbbac0bcb58a395ba2a4": "5天近百万次!Reactxa0RCE漏洞正在被大范围利用", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331879&idx=2&sn=cf79186c77bbc4ed43e5bb14b7962893": "Next.js发布扫描工具,可检测并修复受React2Shell漏洞影响的应用", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489649&idx=1&sn=a83b6d0950f3777e3f8050bcd4af52f5": "React(next.js)存在远程命令执行漏洞CVE-2025-55182CVE-2025-55182 附POC", "https://mp.weixin.qq.com/s?__biz=MzA4MDk4NTIwMg==&mid=2454064475&idx=1&sn=fb2696f77b4d231e2012f72b43fe9c18": "【已复现】Apache Tika XML外部实体注入漏洞(CVE-2025-66516)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247493510&idx=1&sn=eef895948cb685d02f08df3d3ea1bb98": "孚盟云 GetIcon.aspx sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzYzNDE4ODczNA==&mid=2247484748&idx=1&sn=dd3ee5b458a51e3ca51e5a9699445484": "用友NC漏洞剖析,从Nday到1day的攻防实践", "https://mp.weixin.qq.com/s?__biz=MzkzOTQ5MzY3OQ==&mid=2247484534&idx=1&sn=94d82f9fead14e87fcee8f7f26c111f4": "闹麻了,Dify漏洞没修完整,被挖矿的小哥:我谢谢啊", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331879&idx=4&sn=334f57f901c649f97da439a2d2093f7d": "高危lz4-java漏洞可能导致敏感数据泄露(CVE-2025-66566)", "https://cyble.com/blog/react2shell-cve-2025-55182-rapid-exploitation/": "Zero-Day to Zero-Hour: React2Shell (CVE-2025-55182) Becomes One of the Most Rapidly Weaponized RSC Vulnerability", "https://isc.sans.edu/diary/rss/32546": "ISC Stormcast For Monday, December 8th, 2025 https://isc.sans.edu/podcastdetail/9728, (Mon, Dec 8th)", "https://securityaffairs.com/185427/security/u-s-cisa-adds-a-meta-react-server-components-flaw-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds a Meta React Server Components flaw to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2025/12/experts-confirm-jssmuggler-uses.html": "Experts Confirm JS#SMUGGLER Uses Compromised Sites to Deploy NetSupport RAT", "https://thehackernews.com/2025/12/sneeit-wordpress-rce-exploited-in-wild.html": "Sneeit WordPress RCE Exploited in the Wild While ICTBroadcast Bug Fuels Frost Botnet Attacks", "https://lab.wallarm.com/update-on-react-server-components-rce-vulnerability-cve-2025-55182-cve-2025-66478/": "Update on React Server Components RCE Vulnerability (CVE-2025-55182 / CVE-2025-66478)", "https://www.o2oxy.cn/4460.html": "React2Shell CVE-2025-55182 复现", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524600&idx=2&sn=10cbb52355fe219ed945912fcd54a0fd": "众多AI 编程工具存在30+漏洞,可导致数据被盗和RCE", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524600&idx=1&sn=fe09ca1df38ec9061341a2100567e69b": "速修复!Apache Tika 中存在严重的满分XXE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585760&idx=2&sn=fd8c8671593a86c7dedc53e47231c32a": "安全动态回顾|国家网络安全通报中心:重点防范境外恶意网址和恶意IP 黑客利用WordPress扩展插件高危漏洞发起攻击", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515305&idx=2&sn=90c2cfd9ff04c23d553318f6709f52fb": "CNCERT:关于React Server Components存在远程代码执行漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073104&idx=4&sn=d33462008b57bbbbd606c325b3923f15": "【安全圈】微软修复Windows LNK 0day漏洞", "https://keenlab.tencent.com/zh/2025/12/08/2025-CVE-2025-55182/": "【漏洞分析】CVE-2025-55182 React2shell远程代码执行解析", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503626&idx=1&sn=00df6e88fbbd202d9af6dd8dd566ba33": "雷神众测漏洞周报2025.12.1-2025.12.7", "https://cxsecurity.com/issue/WLB-2025120006": "Flask 3.0.0 CookApp - Multiple Unauthenticated RCE Vulnerabilities", "https://cxsecurity.com/issue/WLB-2025120005": "Flask 3.1.2 CookApp - Multiple - RCE-Unauthenticated-access", "https://cxsecurity.com/issue/WLB-2025120004": "XWiki Platform 15.10.10 Metasploit Module for Remote Code Execution (RCE)", "https://mp.weixin.qq.com/s?__biz=MzU0MDkxNjEwNg==&mid=2247494404&idx=2&sn=b2809daf57aafb2c0042240b7eb7e1c0": "12月,警惕!国家级的网络间谍活动和全球性的高危漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzYzNDE4ODczNA==&mid=2247484756&idx=1&sn=80c35d7fc84f630d65209f6874407b9e": "【0day】致远OA再曝反序列化漏洞,速览", "https://mp.weixin.qq.com/s?__biz=MjM5NDUxMTI2NA==&mid=2247485188&idx=1&sn=a2ccca75d76a974809d5edb49b881483": "【安全工具速递】CVE-2025-55182 批量检测工具,支持一键RCE、内存马注入、反向shell等。", "https://mp.weixin.qq.com/s?__biz=MzkxNTY5MjQ5OQ==&mid=2247487041&idx=1&sn=2b8e989c46e053219ee2fe6425a939a0": "【漏洞检测脚本】Apache Tika XXE注入漏洞(CVE-2025-66516)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247491107&idx=1&sn=2b238e2f0f16fc7b9a7def8fcd26528f": "【高危漏洞预警】n8n远程代码执行漏洞CVE-2025-65964", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664254909&idx=1&sn=73bcd5050fdac9157704db0bcf2a3c91": "专题·漏洞生态 | 关键信息基础设施国产化产品漏洞治理挑战与生态共建路径探析", "https://mp.weixin.qq.com/s?__biz=MzE5ODgzMDg3MQ==&mid=2247484627&idx=1&sn=a66153831c311f5c65db0dda9312b871": "反序列化远程代码执行漏洞-CVE-2025-55182-复现", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489660&idx=1&sn=e1bfaaa33438c8250520b8bf86aa7367": "天地伟业Easy7 queryPassword接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkxNjc0ODA3NQ==&mid=2247484771&idx=1&sn=8b73c59b002e8806d4a1b046e3b5119e": "如何发现 OpenAI Atlas的 OAuth泄漏漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247515698&idx=1&sn=116f866f4f19b9f0cd87ba5881d85eb9": "深度剖析:React Server Components安全漏洞CVE-2025-55182", "https://www.intigriti.com/researchers/blog/hacking-tools/exploiting-business-logic-error-vulnerabilities": "Exploiting business logic error vulnerabilities", "https://www.bleepingcomputer.com/news/security/north-korean-hackers-exploit-react2shell-flaw-in-etherrat-malware-attacks/": "North Korean hackers exploit React2Shell flaw in EtherRAT malware attacks", "https://www.tenable.com/blog/microsofts-december-2025-patch-tuesday-addresses-56-cves-cve-2025-62221": "Microsoft’s December 2025 Patch Tuesday Addresses 56 CVEs (CVE-2025-62221)", "https://thehackernews.com/2025/12/four-threat-clusters-using-castleloader.html": "Four Threat Clusters Using CastleLoader as GrayBravo Expands Its Malware Service Infrastructure", "https://thehackernews.com/2025/12/north-korea-linked-actors-exploit.html": "North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT Malware", "https://www.4hou.com/posts/wxGm": "新型Mirai衍生僵尸网络ShadowV2现身 瞄准多品牌IoT设备漏洞发起攻击", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504312&idx=1&sn=49d843f75bd521724afb5dffc51247a8": "【附IOC】Next.js RCE漏洞在野利用事件分析", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541090&idx=2&sn=dacecaa8471655e681a91d8a4d2027b6": "聚焦软件供应链安全: JAR包安全态势及开源组件包漏洞查询一站式方案", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247528384&idx=1&sn=4609e43f80479bafb225b2a2df9f6d63": "关于火绒安全产品防护CVE-2025-55182高危漏洞的公告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458605025&idx=1&sn=c887ac897c43aba332fd6c6835c68332": "TD路由器环境模拟与漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247510986&idx=1&sn=424be0708a67b3ef8a802ca6bb5e4fdb": "React 远程代码执行漏洞简报", "https://www.eff.org/deeplinks/2025/12/age-verification-coming-internet-we-built-you-resource-hub-fight-back": "Age Verification Is Coming For the Internet. We Built You a Resource Hub to Fight Back.", "https://www.eff.org/press/releases/eff-launches-age-verification-hub-resource-against-misguided-laws": "EFF Launches Age Verification Hub as Resource Against Misguided Laws", "https://mp.weixin.qq.com/s?__biz=MzA3NzgzNDM0OQ==&mid=2664998744&idx=1&sn=de9c8b5ab0bf81520a5ec6ed1d0f881b": "【业界动态】数智赋能xa0智御未来·第十五届网络安全漏洞分析与风险评估大会在天津盛大启幕", "https://mp.weixin.qq.com/s?__biz=MjM5NDUxMTI2NA==&mid=2247485197&idx=1&sn=8b76c1584eff5d2df908e4eec5151122": "【安全工具更新】CVE-2025-55182 批量检测工具,支持一键RCE、内存马注入、反向shell等。", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524865&idx=1&sn=6c1aeab5544b2ceb748233050fdcef10": "【漏洞通告】SAP Solution Manager 代码注入漏洞 (CVE-2025-42880)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247491113&idx=1&sn=795666ada27860166422f82caae12ae9": "【高危漏洞预警】vllm代码执行漏洞CVE-2025-66448", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463925&idx=1&sn=820456a81c63ed45a984d39f811be872": "信息安全漏洞周报(2025年第49期)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489680&idx=1&sn=0fcfc52711b7941a500dd62d1bd0fbe3": "畅捷通TPlus Ufida.T.SM.UIP.ashx存在SQL注入漏洞 附POC", "https://isc.sans.edu/diary/rss/32554": "Possible exploit variant for CVE-2024-9042 (Kubernetes OS Command Injection), (Wed, Dec 10th)", "https://securityaffairs.com/185515/breaking-news/microsoft-patch-tuesday-security-updates-for-december-2025-fixed-an-actively-exploited-zero-day.html": "Microsoft Patch Tuesday security updates for December 2025 fixed an actively exploited zero-day", "https://securityaffairs.com/185523/security/u-s-cisa-adds-microsoft-windows-and-winrar-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Microsoft Windows and WinRAR flaws to its Known Exploited Vulnerabilities catalog", "http://sites.libsyn.com/18678/salesforce-security-risks-boards-duty-of-care-and-managing-ciso-risks-justin-hazard-bsw-425": "Salesforce Security Risks, Boards Duty of Care, and Managing CISO Risks - Justin Hazard - BSW #425", "https://thehackernews.com/2025/12/microsoft-issues-security-fixes-for-56.html": "Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two Zero-Days", "https://thehackernews.com/2025/12/react2shell-exploitation-delivers.html": "React2Shell Exploitation Delivers Crypto Miners and New Malware Across Multiple Sectors", "https://thehackernews.com/2025/12/three-pcie-encryption-weaknesses-expose.html": "Three PCIe Encryption Weaknesses Expose PCIe 5.0+ Systems to Faulty Data Handling", "https://thehackernews.com/2025/12/warning-winrar-vulnerability-cve-2025.html": "Warning: WinRAR Vulnerability CVE-2025-6218 Under Active Attack by Multiple Threat Groups", "https://thehackernews.com/2025/12/webinar-how-attackers-exploit-cloud.html": "Webinar: How Attackers Exploit Cloud Misconfigurations Across AWS, AI Models, and Kubernetes", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524622&idx=1&sn=c4730e9500580e409534b376a56f70db": "Fortinet 提醒注意严重的 FortiCloud SSO 登录认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504313&idx=1&sn=58ffa041206ebb2618ea809b92125f9a": "微软12月补丁日多个产品安全漏洞风险通告:1个在野利用、2个紧急漏洞", "https://forum.butian.net/share/4676": "Apache Tika XXE漏洞分析(CVE-2025-66516)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073133&idx=4&sn=6f5fca41da4f09001f04914f054afcff": "【安全圈】Gemini AI曝出GeminiJack零点击漏洞,企业机密数据面临泄露风险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073133&idx=3&sn=c32827197752956ab0a30327e84ca924": "【安全圈】微软修复三处0Day漏洞:云文件驱动提权至SYSTEM与Copilot远程代码执行风险", "https://www.anquanke.com/post/id/313637": "FortiOS、FortiWeb 及 FortiProxy 漏洞可导致攻击者绕过 FortiCloud 单点登录(SSO)认证", "https://www.anquanke.com/post/id/313631": "Ivanti EPM 严重漏洞(CVE-2025-10573)存在管理员会话劫持与未授权远程代码执行风险", "https://www.anquanke.com/post/id/313634": "高危 n8n 远程代码执行漏洞(CVE-2025-65964)可通过操纵 Git 节点配置实现远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789506&idx=1&sn=70cb25cae6c2a4d7693cb4bc7dc0bddb": "AI仅用4天识别并修复NASA航天器存在三年的安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508044&idx=1&sn=06dd04f0b4832a93e07f355a8be27099": "用友U9Cloud最新RCE,微步TDP10月已支持检测!", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247528418&idx=1&sn=63edf0e97792d20e02f66844a474e865": "2025-12微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458605041&idx=3&sn=708372f05fbb66c1ed5cbc05bfe3f3f5": "Gemini漏洞让攻击者零点击窃取企业机密", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247503919&idx=1&sn=56528995065564e314b3c11a7ae15573": "报告发布 | 漏洞情报选型指南报告", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096694&idx=2&sn=4cf35e441cb5a745e69ea33fe929b7df": "Adobe Acrobat 阅读器存在允许攻击者执行任意代码漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096694&idx=1&sn=28812bde350edbde9e76b8c0fd5f66f1": "Windows Defender 防火墙服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjc0ODA3NQ==&mid=2247484779&idx=1&sn=5a96dcbe955001b24cfdfb9d3bf4a468": "【从公开报告到私有神器】:如何通过漏洞报告制作字典", "https://mp.weixin.qq.com/s?__biz=MzU1Mjk3MDY1OA==&mid=2247521806&idx=1&sn=1af97150a0d6f7457e1ff0aef5f85f56": "【网络安全】CORS跨域资源读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247491119&idx=1&sn=375f3263abbcc5416eb018c93ecc8a10": "【高危漏洞预警】Gogs远程命令注入漏洞CVE-2025-8110", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489692&idx=1&sn=43a295026dde3ba93cfa37a0be56ff51": "友加畅捷管理系统GetZTList接口存在信息泄露漏洞 附POC", "https://horizon3.ai/attack-research/the-freepbx-rabbit-hole-cve-2025-66039-and-others/": "The FreePBX Rabbit Hole: CVE-2025-66039 and others", "https://www.bleepingcomputer.com/news/security/google-fixes-eighth-chrome-zero-day-exploited-in-attacks-in-2025/": "Google fixes eighth Chrome zero-day exploited in attacks in 2025", "https://www.bleepingcomputer.com/news/security/hackers-exploit-gladinet-centrestack-cryptographic-flaw-in-rce-attacks/": "Hackers exploit Gladinet CentreStack cryptographic flaw in RCE attacks", "https://www.bleepingcomputer.com/news/security/unpatched-gogs-zero-day-rce-flaw-actively-exploited-in-attacks/": "Hackers exploit unpatched Gogs zero-day to breach 700 servers", "https://securelist.com/cve-2025-55182-exploitation/118331/": "It didn’t take long: CVE-2025-55182 is now under active exploitation", "https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-windows-explorer-white-flashes-in-dark-mode/": "Microsoft fixes Windows Explorer white flashes in dark mode", "https://cyble.com/blog/nis-2-implementation-act-germany/": "New NIS-2 Law in Germany Expands Cybersecurity Oversight and Introduces Heavy Fines", "https://www.schneier.com/blog/archives/2025/12/ais-exploiting-smart-contracts.html": "AIs Exploiting Smart Contracts", "https://securityaffairs.com/185566/hacking/google-fixed-a-new-actively-exploited-chrome-zero-day.html": "Google fixed a new actively exploited Chrome zero-day", "https://thehackernews.com/2025/12/hard-coded-gladinet-keys-let-attackers.html": "Active Attacks Exploit Gladinet's Hard-Coded Keys for Unauthorized Access and Code Execution", "https://thehackernews.com/2025/12/chrome-targeted-by-active-in-wild.html": "Chrome Targeted by Active In-the-Wild Exploit Tied to Undisclosed High-Severity Flaw", "https://thehackernews.com/2025/12/unpatched-gogs-zero-day-exploited.html": "Unpatched Gogs Zero-Day Exploited Across 700+ Instances Amid Active Attacks", "https://www.vmray.com/november-2025-detection-highlights-6-new-vtis-expanded-config-extractors-and-30-fresh-yara-rules/": "November 2025 Detection Highlights: 6 New VTIs, Expanded Config Extractors, and 30+ Fresh YARA Rules", "https://lab.wallarm.com/2026-ai-security-blind-spots-every-organization-needs-to-know/": "2026 API and AI Security Predictions: What Experts Expect in the Year Ahead", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664255145&idx=1&sn=997b63921bc9821b109c1788481a887b": "专题·漏洞生态 | 人工智能赋能的智能化漏洞治理研究", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524630&idx=1&sn=f3a9316989486371722d9656c43f333e": "Ivanti提醒注意 EPM 中严重的代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524630&idx=2&sn=be82a743b4b79c2cc101a8757cb82cc4": "谷歌Gemini Enterprise存在漏洞,可导致企业数据遭暴露", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504327&idx=1&sn=3e4ca68768c8adfec8ab348b27a08310": "【在野利用】Gogs 远程命令注入漏洞(CVE-2025-8110)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073159&idx=2&sn=71fd13ead231ec7f73e5e6aab55ebb0d": "【安全圈】GitLab高危XSS漏洞(CVE-2025-12716)可通过恶意Wiki页面劫持用户会话", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073159&idx=3&sn=4764b0749651731fc5ae430666805475": "【安全圈】Windows Defender 防火墙服务漏洞可致攻击者泄露敏感数据", "https://www.anquanke.com/post/id/313581": "逆向分析CVE-2025-13359:从危险点到攻击入口的完整追踪", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139670&idx=2&sn=3989c7c1cf0cd0c812e359dacb4814b1": "苹果\"围墙\"倒塌:iOS与Android互操作时代正式来临;2025年12月首周CNNVD安全漏洞统计及修复情况报告| 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508052&idx=1&sn=6c34b61745a3fec188b00a85000a694a": "漏洞奖励计划活动开启!奖金提升,提交减负!", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458605048&idx=2&sn=c18e16f62ca83d87766e8cb0b26ff187": "Adobe Acrobat现高危漏洞!攻击者可远程执行代码,需紧急更新", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458605048&idx=1&sn=f6d8c7ce14ce6f01273842199542f5ed": "CVE-2015-3456 Qemu逃逸复现", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489462&idx=1&sn=a11f3e997854bd97575bcc7c0be52bbe": "【安全更新】微软12月安全更新多个产品高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247493018&idx=1&sn=0a45ee7bc43dbddbde2b6433963eca36": "【已复现】Gogs 远程命令执行漏洞(CVE-2025-8110)", "https://mp.weixin.qq.com/s?__biz=MzYzNjMxODg1NA==&mid=2247483728&idx=1&sn=1880f55d13f8502b709ac1b09daafbe6": "Next.js/React漏洞利用工具,支持waf绕过、哥斯拉内存马、反弹shell等", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247493526&idx=1&sn=15f5d03a396bc348b6966415851313cc": "ZKTime 熵基智能考勤管理系统 ic1ock SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzNDczNjQ2OQ==&mid=2247485824&idx=1&sn=9b52b86a51db60e62c526c1bc4eb81fa": "redis 漏洞图形化利用工具", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073174&idx=1&sn=75188194abd1bc77cf57b710064bfeda": "【安全圈】React再曝新高危漏洞,可致拒绝服务攻击与源代码泄露", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524883&idx=1&sn=0c6adc6337df36f15bbe633bb2af3a7e": "【漏洞通告】Fortinet多产品身份验证绕过漏洞(CVE-2025-59718)", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247485360&idx=1&sn=ecdec287caa76b7ba5a15e6b017564fc": "【漏洞预警】Apache Tika XXE漏洞来袭(CVE-2025-66516)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247491124&idx=1&sn=88d031b8496434681ef279ca81871dd2": "【高危漏洞预警】React Server Components拒绝服务漏洞CVE-2025-55184", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247495654&idx=1&sn=ee1f517c81d035e8340cd2f3594a8b23": "亿赛通电子文档安全管理系统(CDG)存在前台GetShell漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484622&idx=1&sn=ff55a9a5b177d2e872df3a11e43de02f": "利用大语言模型优化 CodeQL 漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkwMTI3ODUxOQ==&mid=2247485290&idx=1&sn=c625fa1535bb8e1586b423db25574d7c": "安易科技参加第十五届网络安全漏洞分析与风险评估大会", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524650&idx=3&sn=b7863ac8099dfd54d53e02832cf2eb2f": "微软将影响在线服务的第三方漏洞纳入奖励计划", "https://mp.weixin.qq.com/s?__biz=MzI1NzQ0NTMxMQ==&mid=2247490923&idx=1&sn=0fdda6bf3e59e3f059ab2c2c780dbe2e": "第十五届网络安全漏洞分析与风险评估大会——企业家高峰论坛顺利举办", "https://mp.weixin.qq.com/s?__biz=MzYzNDE4ODczNA==&mid=2247484790&idx=1&sn=965b0ce5728d907e75fa916516b12dbe": "粉丝投稿干货!用友 U8 Cloud 漏洞审计实录", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651332187&idx=3&sn=586f41ea6d5e8dd71ff71d86ed1ee653": "紧急补丁:Notepad++ WinGUp漏洞可被利用劫持更新植入恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524650&idx=1&sn=2b90845db7d53c90cf5fea1670d12bfe": "谷歌紧急修复已遭利用的 Chrome 新 0day,无CVE编号", "https://www.bleepingcomputer.com/news/security/apple-fixes-two-zero-day-flaws-exploited-in-sophisticated-attacks/": "Apple fixes two zero-day flaws exploited in 'sophisticated' attacks", "https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-actively-exploited-geoserver-flaw/": "CISA orders feds to patch actively exploited Geoserver flaw", "https://techcrunch.com/2025/12/12/flaw-in-photo-booth-makers-website-exposes-customers-pictures/": "Flaw in photo booth maker’s website exposes customers’ pictures", "https://googleprojectzero.blogspot.com/2025/12/a-look-at-android-itw-dng-exploit.html": "A look at an Android ITW DNG exploit", "https://securityaffairs.com/185604/hacking/u-s-cisa-adds-an-osgeo-geoserver-flaw-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds an OSGeo GeoServer flaw to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2025/12/cisa-flags-actively-exploited-geoserver.html": "CISA Flags Actively Exploited GeoServer XXE Flaw in Updated KEV Catalog", "https://thehackernews.com/2025/12/new-react-rsc-vulnerabilities-enable.html": "New React RSC Vulnerabilities Enable DoS and Source Code Exposure", "https://thehackernews.com/2025/12/react2shell-exploitation-escalates-into.html": "React2Shell Exploitation Escalates into Large-Scale Global Attacks, Forcing Emergency Mitigation", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504343&idx=1&sn=6c44f2ccc0ede3207b75e8157faac028": "【已复现】React Server Components 拒绝服务漏洞(CVE-2025-55184)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504343&idx=2&sn=cea3e417e541c5aa75652768f7f71928": "安全热点周报:黑客利用 ArrayOS AG VPN 漏洞植入WebShel​​l 并创建恶意用户", "https://www.anquanke.com/post/id/312467": "CVE-2025-9868 Nexus Repository 2 – 远程浏览器插件导致的未授权 SSRF 漏洞复现", "https://www.anquanke.com/post/id/313725": "Notepad++ 漏洞存在重大风险:攻击者可劫持网络流量,通过更新通道植入恶意软件", "https://www.anquanke.com/post/id/313737": "高危 GitLab 跨站脚本漏洞(CVE-2025-12716):恶意 Wiki 页面可致会话劫持风险", "https://www.anquanke.com/post/id/313703": "高危漏洞预警 | CVE-2025-64188(CVSS 9.8):WordPress “Soledad” 主题存在严重缺陷,订阅用户可直接接管网站", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508054&idx=1&sn=846b91a0f451895b19642312792dee96": "还得继续修!React又爆新漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541135&idx=2&sn=ab3486e649151b680590c8a05cd30fe1": "新漏洞爆发,漏扫工具却“失效”!我该怎么办?", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247517215&idx=2&sn=ed62be135cee1941641ebbb440e01a77": "2025年最常被利用的20个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096702&idx=2&sn=ec1149680b5942bab4e065d621ef22f4": "Apache Struts 2曝拒绝服务漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNzk5MjEyNg==&mid=2247487116&idx=1&sn=6963ee74186a6523c0c2c701dc68c16b": "CTF Web巅峰拆解(第3期):2025高难度题核心,搞定这3类漏洞直接冲榜", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650613644&idx=4&sn=6188e3d518a3b38bbeaa64c9f2c5307d": "CTF竞赛系统、知识竞赛系统、漏洞靶场练习系统", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712691&idx=1&sn=531a0a739cd50fe21cbe6b89dc60951c": "CVE-2025-55182挖矿木马分析", "https://mp.weixin.qq.com/s?__biz=MzkxNzQ5OTQ0Mw==&mid=2247483807&idx=1&sn=3db967776e04e6692d3f76cae483fa27": "CVE-2025-8088武器化那些事", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247494270&idx=1&sn=0cc38e6864c15b3e9386c5f822d0632e": "Fortinet警告称FortiCloud SSO登录认证绕过存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651332234&idx=3&sn=165ba7417870cdd12222a3e987ebafec": "FreeBuf周报 | 大学生出售Webshell入侵5200余政府教育网站;Notepad++漏洞可被利用劫持更新植入恶意软件", "https://mp.weixin.qq.com/s?__biz=Mzk0MDMyNjUxNw==&mid=2247484465&idx=1&sn=bdd58e98db2e2146848fd14811136f7e": "React 组件远程代码执行漏洞-CVE-2025-55182 Poc", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651332234&idx=2&sn=27ae787533404873bbf570ce31825a16": "React再曝新高危漏洞,可致拒绝服务攻击与源代码泄露", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096702&idx=1&sn=8197b075c0e21a353a900e48ada418ee": "Windows远程访问连接管理器曝提权漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MDc0NTIxOQ==&mid=2247484788&idx=1&sn=cca5b14aa65c1754f0324eff9d3107c2": "android 12月公开漏洞分析:普通app绕过BAL限制(附poc)", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247500803&idx=1&sn=895e23d008aec77e4f1b75f09cebc79e": "「干货分享」应急响应之文件上传漏洞排查", "https://mp.weixin.qq.com/s?__biz=MzYzNDE4ODczNA==&mid=2247484792&idx=1&sn=d0611ab73488ad4c1518b95dc91c85e0": "【0day】契约锁高危漏洞首发,附 Nday POC", "https://mp.weixin.qq.com/s?__biz=MzYzNzExNjA1OA==&mid=2247483907&idx=1&sn=5813875d0aec32fdec320be76d763540": "【Nday】Go-fastdfs 未授权+任意文件上传", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073188&idx=3&sn=052ef64cb3596b544a0ab6914d1d2a76": "【安全圈】苹果 iOS26.2 修复 25 个漏洞 谷歌、字节跳动、阿里巴巴等参与“救场”", "https://mp.weixin.qq.com/s?__biz=MjM5NDUxMTI2NA==&mid=2247485244&idx=1&sn=95f35f1959d2dbadbd2500e62aaf74c4": "【安全工具速递】CVE-2025-55182 图形化利用工具更新至V1.1.5版本,爽到飞起~", "https://mp.weixin.qq.com/s?__biz=MzkxNTY5MjQ5OQ==&mid=2247487090&idx=1&sn=576ba6a08928185630bfbd3f6cc1b8af": "【漏洞检测脚本】React Server Components 拒绝服务漏洞(CVE-2025-55184)", "https://mp.weixin.qq.com/s?__biz=MzkxMDcwOTg5Nw==&mid=2247484038&idx=1&sn=ec78d5e9b1b7a639ea677c0943de91c0": "一次攻防演练中RCE绕过waf获取webshell", "https://mp.weixin.qq.com/s?__biz=MzUzNDczNjQ2OQ==&mid=2247485830&idx=1&sn=9ec4459b9a9c2e5ad31f02f7e2be0c70": "图形化反序列化漏洞综合利用工具", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247528704&idx=1&sn=fe14cffea9b7caf1d405e899fd7a1b23": "打工是没前途的:全球漏洞赏金实时更新汇总", "https://mp.weixin.qq.com/s?__biz=MzU2MDE2MjU1Mw==&mid=2247486937&idx=1&sn=306eeb91eab3c063b203f8bfa6db54cd": "技术分享会—LLM for 白盒漏洞检测", "https://mp.weixin.qq.com/s?__biz=MzkzMjk5MDU3Nw==&mid=2247484478&idx=1&sn=7cfdbc77e5062e7778a161af6be58361": "文件上传漏洞绕过记录", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247521803&idx=1&sn=6ef2c1380a7553883a99bfac5cefeabb": "无0day复杂利用!挖逻辑纯靠 “肉眼扫描器”?", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664255291&idx=1&sn=2c50d8255aa20a63e2fb1ff0457da3a5": "第十五届VARA大会 | 网络漏洞治理生态分会成功举办", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651464092&idx=1&sn=e9a5389533032154bf172cbae9164e8c": "第十五届网络安全漏洞分析与风险评估大会-网络漏洞治理生态分会成功举办", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247493543&idx=1&sn=f35cf8dad2d8da552a5840a3aa081e0c": "美特CRM mobileupload.jsp 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk2NDkwMDg3Nw==&mid=2247484061&idx=1&sn=5443ca9732ec6640787d1abab2efa7c6": "致远分析云存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651332234&idx=1&sn=121e3b62a5e2ac021fcedcfb4d9a55cc": "苹果0Day漏洞遭利用,针对特定iPhone用户发起复杂攻击", "https://mp.weixin.qq.com/s?__biz=MzE5ODgwNzgzMA==&mid=2247484997&idx=1&sn=23a873476ec22ffb9ff29d3310d8161f": "高危漏洞威胁情报合集 | 绿盟漏洞情报(2025-12-12)", "https://securityaffairs.com/185639/security/u-s-cisa-adds-google-chromium-and-sierra-wireless-airlink-aleos-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Google Chromium and Sierra Wireless AirLink ALEOS flaws to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2025/12/apple-issues-security-updates-after-two.html": "Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild", "https://thehackernews.com/2025/12/cisa-adds-actively-exploited-sierra.html": "CISA Adds Actively Exploited Sierra Wireless Router Flaw Enabling RCE Attacks", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489703&idx=1&sn=7c332a50f54489ad2e8f3d0dcc2f08af": "致远AnalyticsCloud分析云a接口存在任意文件读取漏洞 POC", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451184189&idx=1&sn=26f196ee19262d48195c0c797e5b51b2": "苹果修复了两个在定向攻击中被利用的Webkit漏洞,其中一个与谷歌ANGLE漏洞同源", "https://securityaffairs.com/185661/data-breach/experts-found-an-unsecured-16tb-database-containing-4-3b-professional-records.html": "Experts found an unsecured 16TB database containing 4.3B professional records", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073198&idx=1&sn=a8f89c45946624f7e850bf07b1ed02d7": "【安全圈】59元汉堡套餐“0元购”?上海一男子利用知名快餐APP系统漏洞,改价代下单1300笔牟利!", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496571&idx=2&sn=0783034e514e64ef03d33ae23d52e2c7": "上周关注度较高的产品安全漏洞(20251208-20251214)", "https://mp.weixin.qq.com/s?__biz=MzU2MTc4NTEyNw==&mid=2247493135&idx=1&sn=4f5a46ffa267761f42170df439467ed9": "2025最新!Linux常用10种提权方法复现,w字解析", "https://mp.weixin.qq.com/s?__biz=Mzk0ODYwNjI1NA==&mid=2247484170&idx=1&sn=45b80584d95f435953fdd0676941a111": "【安全预警】用友U9 Cloud DynamaticExport 任意文件下载", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247491129&idx=1&sn=54b8ec235f6c1fdc0a50b7fa115500a3": "【高危漏洞预警】Kubernetes服务器端请求伪造漏洞(CVE-2025-13281)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489714&idx=1&sn=73f913b8d7eb70f0d6e59634302eac5b": "友加畅捷管理系统RepFile.ashx接口存在任意文件读取漏洞 附POC", "https://www.microsoft.com/en-us/security/blog/2025/12/15/defending-against-the-cve-2025-55182-react2shell-vulnerability-in-react-server-components/": "Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components", "https://isc.sans.edu/diary/rss/32570": "ISC Stormcast For Monday, December 15th, 2025 https://isc.sans.edu/podcastdetail/9738, (Mon, Dec 15th)", "https://isc.sans.edu/diary/rss/32572": "More React2Shell Exploits CVE-2025-55182, (Mon, Dec 15th)", "https://securityaffairs.com/185710/security/atlassian-fixed-maximum-severity-flaw-cve-2025-66516-in-apache-tika.html": "Atlassian fixed maximum severity flaw CVE-2025-66516 in Apache Tika", "https://securityaffairs.com/185716/hacking/u-s-cisa-adds-apple-and-gladinet-centrestack-and-triofox-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Apple and Gladinet CentreStack and Triofox flaws to its Known Exploited Vulnerabilities catalog", "https://www.tenable.com/blog/security-for-ai-how-shadow-ai-platform-risks-and-data-leakage-leave-your-organization-exposed": "Security for AI: How Shadow AI, Platform Risks, and Data Leakage Leave Your Organization Exposed", "https://thehackernews.com/2025/12/featured-chrome-browser-extension.html": "Featured Chrome Browser Extension Caught Intercepting Millions of Users' AI Chats", "https://thehackernews.com/2025/12/freepbx-authentication-bypass-exposed.html": "FreePBX Patches Critical SQLi, File-Upload, and AUTHTYPE Bypass Flaws Enabling RCE", "https://thehackernews.com/2025/12/volklocker-ransomware-exposed-by-hard.html": "VolkLocker Ransomware Exposed by Hard-Coded Master Key Allowing Free Decryption", "https://thehackernews.com/2025/12/weekly-recap-apple-0-days-winrar.html": "⚡ Weekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & More", "https://www.bellingcat.com/news/2025/12/15/mark-resan-reface-deepfake-porn/": "Profiting From Exploitation: How We Found the Man Behind Two Deepfake Porn Sites", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524661&idx=1&sn=a7c928af6fec96c822d33060a6e3cd66": "苹果紧急修复两个已遭利用的 0day 漏洞", "https://www.anquanke.com/post/id/313768": "Apache StreamPark 漏洞风险通告:硬编码密钥与 AES ECB 模式致数据解密及令牌伪造风险", "https://www.anquanke.com/post/id/313774": "新型 BlackForce 钓鱼工具包:攻击者借浏览器中间人(MitB)攻击窃取凭证并绕过多因素认证(MFA)", "https://www.anquanke.com/post/id/313686": "最高危漏洞引爆T级DDoS海啸!React、Next.js用户集体告急", "https://www.anquanke.com/post/id/313765": "高危 Plesk 漏洞(CVE-2025-66430)风险通告:可通过本地权限提升与 Apache 配置注入实现服务器完全接管", "https://www.anquanke.com/post/id/313757": "高危 pgAdmin 远程代码执行漏洞(CVE-2025-13780)绕过此前修复:可通过恶意数据库恢复实现服务器接管", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458605280&idx=2&sn=3a78ff2f491c5072c958977b42355fab": "Windows惊现“连环漏洞”:未修补的RasMan缺陷可被任意用户触发崩溃,直通系统最高权限", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458605280&idx=1&sn=772414290f665251e45086ee738cd157": "强网杯2025决赛复现", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503633&idx=1&sn=ed8c46701570f36906982f6edf548eae": "雷神众测漏洞周报2025.12.8-2025.12.14", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247495706&idx=1&sn=6b01b5576bd631e1724a4839121e0766": "【已复现】帆软报表 export/excel 存在前台SQL注入漏洞,可导致远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247491134&idx=1&sn=8a7721d5c691361551042f6fdc46fe63": "【高危漏洞预警】帆软报表前台SQL远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545895&idx=1&sn=5be1e3c71709ed4bfe7268b10f86cdb3": "技术分享 | EXP能力升级(三):JDBC反序列化不再难!CVE-2025-6507 实战化EXP指南", "https://www.guidepointsecurity.com/blog/the-rise-of-the-agentic-workforce/": "The Rise of the Agentic Workforce: Why It’s Time to Rethink Identity", "https://www.malwarebytes.com/blog/news/2025/12/photo-booth-flaw-exposes-peoples-private-pictures-online": "Photo booth flaw exposes people’s private pictures online", "https://blog.nviso.eu/2025/12/16/the-detection-response-chronicles-exploring-telegram-abuse/": "The Detection & Response Chronicles: Exploring Telegram Abuse", "https://www.bleepingcomputer.com/news/security/hackers-exploit-newly-patched-fortinet-auth-bypass-flaws/": "Hackers exploit newly patched Fortinet auth bypass flaws", "https://cyble.com/blog/critical-ics-and-it-vulnerabilities-tracked/": "The Week in Vulnerabilities: Cyble Tracks New ICS Threats, Zero-Days, and Active Exploitation", "https://projectzero.google/2025/12/windows-exploitation-techniques.html": "Windows Exploitation Techniques: Winning Race Conditions with Path Lookups", "https://securityaffairs.com/185755/security/a-cyber-attack-hit-petroleos-de-venezuela-pdvsa-disrupting-export-operations.html": "A cyber attack hit Petróleos de Venezuela (PDVSA) disrupting export operations", "https://securityaffairs.com/185748/security/hackers-are-exploiting-critical-fortinet-flaws-days-after-patch-release.html": "Hackers are exploiting critical Fortinet flaws days after patch release", "https://securityaffairs.com/185735/data-breach/pornhub-targeted-in-extortion-attempt-following-mixpanel-breach-exposing-user-activity.html": "Pornhub targeted in extortion attempt following Mixpanel breach exposing user activity", "http://sites.libsyn.com/18678/developing-open-source-skills-for-maintaining-projects-kat-cosgrove-asw-361": "Developing Open Source Skills for Maintaining Projects - Kat Cosgrove - ASW #361", "https://www.tenable.com/blog/hidden-costs-single-agent-edr-exposure-management": "7 Questions to Unmask “Single Agent” Exposure Management Money Pits", "https://thehackernews.com/2025/12/amazon-exposes-years-long-gru-cyber.html": "Amazon Exposes Years-Long GRU Cyber Campaign Targeting Energy and Cloud Infrastructure", "https://thehackernews.com/2025/12/react2shell-vulnerability-actively.html": "React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors", "https://blog.trailofbits.com/2025/12/16/use-gwp-asan-to-detect-exploits-in-production-environments/": "Use GWP-ASan to detect exploits in production environments", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664255523&idx=1&sn=656cc065dd7f27e017e38178e804aa81": "专题·漏洞生态 | 对人工智能驱动网络漏洞治理的新思考", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524668&idx=1&sn=bc36c9f6d44d660e3000cd5b371b5f50": "FreePBX 修复多个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524668&idx=2&sn=bd7c744b1ab80e6eeb119c4307ab5cdd": "React RSC 新漏洞可导致 DoS 和源代码泄露", "https://www.4hou.com/posts/xyJz": "【梆梆安全监测】 安全隐私合规监管趋势及漏洞风险报告(1109-1122)", "https://forum.butian.net/share/4680": "CVE-2025-8110 0day 绕过分析与复现", "https://www.solidot.org/story?sid=83073": "React Server 高危漏洞正被黑客组织利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073227&idx=3&sn=82520125d0a2bfd6a170cb07064fcc26": "【安全圈】PCPcat 恶意软件利用 React2Shell 漏洞攻击 5.9 万余台服务器", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073227&idx=4&sn=c1841caa9f7803503c27e512e8039810": "【安全圈】严重的 Plesk 漏洞允许用户获取 Root 级别访问权限", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508065&idx=1&sn=1841693a3085a9b4ead40ec4ed33d2c3": "速修!帆软 FineReport 前台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541150&idx=2&sn=9dcb7efbe5b2f15fef0b9ce97d176c50": "漏洞管理警惕“账面修复”陷阱:测试与生产的脱节", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524894&idx=1&sn=84857c02e8f8e9111b6fc5c0ba7ab19e": "【漏洞通告】帆软 FineReport SQL注入漏洞", "https://cxsecurity.com/issue/WLB-2025120016": "Soosyze CMS 2.0 Brute Force Login", "https://mp.weixin.qq.com/s?__biz=MzkxNDYxMTc0Mg==&mid=2247484654&idx=1&sn=6cda01489ccdb21cb669bd316dd2905a": "EasyTools渗透测试工具箱V2.0.2更新(新增漏洞扫描功能,优化存在的诸多bug)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489725&idx=1&sn=7482eda0392c636e65ecbd04054b1747": "IdeaCMS GetList.html存在SQL注入漏洞CVE-2025-5569 附POC", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533963&idx=1&sn=a5d7834c19e638d051f722fed36ccaa1": "Windows 桌面窗口管理器(DWM)本地提权漏洞 CVE-2025-55681 详解", "https://mp.weixin.qq.com/s?__biz=MzkxNzQ5OTQ0Mw==&mid=2247483861&idx=1&sn=3194f10725a8740042885634385bfcc2": "react2shell 漏洞浅析", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247491142&idx=1&sn=e264bdd4d719baa434a734de6af2c7d4": "【高危漏洞预警】Redis缓冲区溢出漏洞CVE-2025-62507", "https://mp.weixin.qq.com/s?__biz=MzI4MjI2NDI1Ng==&mid=2247485511&idx=1&sn=f1ece4a6598fdab1cb8a8b0ebad9bdc3": "存储桶相关漏洞记录", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247494634&idx=1&sn=7cc83a90badea88d7d7d25583bd0c419": "学员投稿之edu漏洞的JS逆向解密导致任意密码重置", "https://techcrunch.com/2025/12/17/cisco-says-chinese-hackers-are-exploiting-its-customers-with-a-new-zero-day/": "Cisco says Chinese hackers are exploiting its customers with a new zero-day", "https://www.bleepingcomputer.com/news/security/cisco-warns-of-unpatched-asyncos-zero-day-exploited-in-attacks/": "Cisco warns of unpatched AsyncOS zero-day exploited in attacks", "https://www.bleepingcomputer.com/news/security/critical-react2shell-flaw-exploited-in-ransomware-attacks/": "Critical React2Shell flaw exploited in ransomware attacks", "https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-new-sma1000-zero-day-exploited-in-attacks/": "Sonicwall warns of new SMA1000 zero-day exploited in attacks", "https://isc.sans.edu/diary/rss/32578": "Maybe a Little Bit More Interesting React2Shell Exploit, (Wed, Dec 17th)", "https://securityaffairs.com/185790/security/askul-data-breach-exposed-over-700000-records-after-ransomware-attack.html": "Askul data breach exposed over 700,000 records after ransomware attack", "https://securityaffairs.com/185809/hacking/sonicwall-warns-of-actively-exploited-flaw-in-sma-100-amc.html": "SonicWall warns of actively exploited flaw in SMA 100 AMC", "https://securityaffairs.com/185765/security/u-s-cisa-adds-a-flaw-in-multiple-fortinet-products-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities catalog", "https://www.tenable.com/blog/cve-2025-40602-sonicwall-secure-mobile-access-sma-1000-zero-day-exploited": "CVE-2025-40602: SonicWall Secure Mobile Access (SMA) 1000 Zero-Day Exploited", "https://thehackernews.com/2025/12/sonicwall-fixes-actively-exploited-cve.html": "SonicWall Fixes Actively Exploited CVE-2025-40602 in SMA 100 Appliances", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524675&idx=2&sn=2c60923d7020c1f7e81eb9225bc5d57b": "JumpCloud 远程助手漏洞可导致系统遭接管", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524675&idx=1&sn=64506e72bae10c7c535780cce3738778": "ScreenConnect 严重漏洞可配置数据遭访问并安装不受信任的扩展", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485803&idx=1&sn=6b235b210fe2b8ab8907f84fb12e1d26": "NetExec 网络服务漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504352&idx=1&sn=91b4dc15094a68cfd5cebf65d6776607": "【已复现】帆软FineReport export/excel SQL注入漏洞(QVD-2025-48729)安全风险通告", "https://www.solidot.org/story?sid=83083": "苹果和 Google 释出紧急更新修复 0day", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073244&idx=3&sn=eea268248d5f05a6531dfc6d65cc575c": "【安全圈】NVIDIA发布关键AI安全补丁:Isaac Lab与NeMo框架漏洞可能导致任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073244&idx=4&sn=3aedb0b2fc2fe525da6950ddd7406c8f": "【安全圈】Windows Admin Center 漏洞(CVE-2025-64669)可导致攻击者提权", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073244&idx=2&sn=81e3a8defb0ce6d0ef666c41eb830db2": "【安全圈】谷歌Chrome紧急更新:修复WebGPU与V8引擎高危内存破坏漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247534000&idx=1&sn=ab47eaba5107082e25b484a84ce88c73": "Node.js 警报 漏洞可能导致超过 1600 万月活跃用户遭受 Windows 远程代码执行攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247495726&idx=1&sn=4a13b18201c9193548c50efd486f2a33": "【首发复现】Fortinet 多款产品身份认证绕过漏洞,已发现在野利用(CVE-2025-59718/59719)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247491148&idx=1&sn=035b3a419093b139ba48e5ff877f537c": "【高危漏洞预警】Fortinet FortiOS未正确验证加密签名漏洞CVE-2025-59718/59719", "https://levelblue.com/blogs/spiderlabs-blog/levelblue-spiderlabs-sql-injection-in-orkes-conductor-cve-2025-66387/": "LevelBlue SpiderLabs: SQL Injection in Orkes Conductor: CVE-2025-66387", "https://therecord.media/chinese-attackers-zero-day": "Chinese attackers exploiting zero-day to target Cisco email security products", "https://www.bleepingcomputer.com/news/security/hpe-warns-of-maximum-severity-rce-flaw-in-oneview-software/": "HPE warns of maximum severity RCE flaw in OneView software", "https://labs.yarix.com/2025/12/in-depth-analysis-of-the-alleged-qilin-dragonforce-and-lockbit-alliance/": "In depth analysis of the alleged Qilin, DragonForce and LockBit alliance", "https://www.bleepingcomputer.com/news/security/university-of-sydney-suffers-data-breach-exposing-student-and-staff-info/": "University of Sydney suffers data breach exposing student and staff info", "https://securityaffairs.com/185830/security/u-s-cisa-adds-cisco-sonicwall-and-asus-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Cisco, SonicWall, and ASUS flaws to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2025/12/cisa-flags-critical-asus-live-update.html": "CISA Flags Critical ASUS Live Update Flaw After Evidence of Active Exploitation", "https://thehackernews.com/2025/12/cisco-warns-of-active-attacks.html": "Cisco Warns of Active Attacks Exploiting Unpatched 0-Day in AsyncOS Email Security Appliances", "https://thehackernews.com/2025/12/threatsday-bulletin-whatsapp-hijacks.html": "ThreatsDay Bulletin: WhatsApp Hijacks, MCP Leaks, AI Recon, React2Shell Exploit and 15 More Stories", "https://trustedsec.com/blog/limiting-domain-controller-attack-surface-why-less-services-less-software-less-agents-less-exposure": "Limiting Domain Controller Attack Surface: Why Less Services, Less Software, Less Agents = Less Exposure", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524683&idx=3&sn=ccf1081df758629e4af0ca28f97b0972": "谷歌紧急修复 Chrome 中的两个高危内存损坏漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524683&idx=1&sn=7224ee1419a26c8bb16d70f9eed840e6": "速修复这个已遭利用的 SonicWall SMA1000 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524683&idx=2&sn=274d1e41d158b73e997e0244df454498": "首届 Zeroday Cloud 黑客大赛落幕,11个0day 获32万美元赏金", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515347&idx=2&sn=1f8b0cb96cac1cd524383b80dc8c5c13": "统筹发展和安全,推进基础软硬件产品漏洞生态体系建设", "https://www.anquanke.com/post/id/313803": "OpenShift GitOps 高危漏洞可致集群沦陷(CVE-2025-13888)—— 低权限用户可提权至 root 权限", "https://www.anquanke.com/post/id/313807": "ScreenConnect 高危漏洞(CVE-2025-14265)存在配置泄露与恶意扩展安装风险", "https://www.anquanke.com/post/id/313811": "飞塔防火墙单点登录高危漏洞遭在野利用:攻击者绕过认证并窃取配置文件", "https://www.anquanke.com/post/id/313827": "黑力钓鱼即服务平台(BlackForce PhaaS)滥用 React 框架与有状态会话,实现多因素认证绕过与凭证窃取", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139752&idx=1&sn=570fb6110c69cbcfed90d252fb73f816": "CNNVD统计本周公开漏洞新增1733个;美国三大金融监管机构联手出台AI网络安全新规| 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458605731&idx=3&sn=2079720e18f7880d3ce370f10c5426d8": "抢占智能汽车安全风口!系统0day安全——车联网安全入门(第8期)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458605731&idx=2&sn=cdd29f92be3ce9d1e4153037452d70cf": "致命漏洞!黑客可远程劫持汽车仪表盘", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096710&idx=1&sn=722b450510090b66f4ff07d79a70e43a": "Apache Commons Text曝高危漏洞:攻击者可远程执行任意代码", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651332591&idx=3&sn=30a66b97e06324151d758d47d470b0f7": "BugTrace-AI:基于人工智能的渗透测试工具,可检测潜在漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458605737&idx=3&sn=67acf1dbcec50f71ad78b37fa004a8d6": "CISA将华硕恶意代码漏洞列入KEV名单", "https://mp.weixin.qq.com/s?__biz=MzAxODg2MDU0MA==&mid=2247483896&idx=1&sn=e85b3d3de4f6ac511c5777725718b9ee": "CVE-2025-55182 React2Shell 深入详解", "https://mp.weixin.qq.com/s?__biz=MzUzNDczNjQ2OQ==&mid=2247486021&idx=1&sn=31e22c82a8bc5bd2214d58479134d841": "Geoserver综合漏洞图形化利用工具", "https://mp.weixin.qq.com/s?__biz=MzkxOTMxNzYxNA==&mid=2247491079&idx=1&sn=43b2ca325a050456ad588f0e4dc30c55": "Gogs远程命令注入漏洞(CVE-2025-8110)复现", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096710&idx=2&sn=7bcfecec21d7271821f4d56f748b3696": "Node.js库曝高危漏洞:Windows系统面临远程代码执行攻击风险", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651332591&idx=2&sn=60fa10702b10bd9bc1ef732d6ef37e7a": "OpenAI发布GPT-5.2-Codex:显著提升智能编程与漏洞检测能力", "https://mp.weixin.qq.com/s?__biz=Mzk3NTc2NDk2MQ==&mid=2247483976&idx=1&sn=fa58ba78113a1cac3408fa7c18f3e735": "appsx|V1.2.8 支持 JS 混淆解析和优化未授权漏洞扫描逻辑", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073282&idx=2&sn=3334a1f8d9dc4e659cf6933449d3e6eb": "【安全圈】华硕内置恶意代码漏洞遭活跃利用,被CISA列入高危漏洞目录", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247491153&idx=1&sn=41256cbdf79b54780d80dae55103bfc4": "【漏洞预警】Apache Airflow Providers Edge3权限提升漏洞(CVE-2025-67895)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664255787&idx=1&sn=65f3bff3e24fcb7e8483ab3901c4d504": "专题·漏洞生态 | 美国对华网络安全战略转向与漏洞攻防体系升级:演进、动向与启示", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247493587&idx=1&sn=8d998b1629d8a4bd038e8b3ac220e7b7": "中识云平台 sys_user_list 信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk4ODMxODQyMQ==&mid=2247483835&idx=1&sn=22362148fdb8ae6c7b24f012228d1bb4": "什么?瞎逛也能捡到高危漏洞?", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524697&idx=2&sn=2293ce91b3c44d394de4fe120df687b6": "慧与提醒注意 OneView 软件中的满分 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4ODI5MzAzMw==&mid=2247483965&idx=1&sn=cc617bbd698f9dfb0b5750f59a9bbf7c": "新的UEFI漏洞使得对ASRock、华硕、技嘉、MSI主板的早期启动DMA攻击成为可能", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651332591&idx=4&sn=a486ec2b0db73841f35fc4c06655a3f9": "流行Node.js库曝严重漏洞,可致Windows系统遭受RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzI1NTM4ODIxMw==&mid=2247501683&idx=1&sn=777f7002c33717152250ca88198c2ba7": "漏洞速递 | CVE-2025-13780 pgAdmin RCE漏洞", "https://horizon3.ai/attack-research/vulnerabilities/cve-2025-14611/": "CVE-2025-14611", "https://levelblue.com/blogs/spiderlabs-blog/holiday-fraud-2025-gift-card-schemes-exploiting-seasonal-shopping/": "Holiday Fraud 2025: Gift Card Schemes Exploiting Seasonal Shopping", "https://www.malwarebytes.com/blog/news/2025/12/cisa-warns-asus-live-update-backdoor-is-still-exploitable-seven-years-on": "CISA warns ASUS Live Update backdoor is still exploitable, seven years on", "https://www.bleepingcomputer.com/news/security/criminal-ip-and-palo-alto-networks-cortex-xsoar-integrate-to-bring-ai-driven-exposure-intelligence-to-automated-incident-response/": "Criminal IP and Palo Alto Networks Cortex XSOAR integrate to bring AI-driven exposure intelligence to automated incident response", "https://www.bleepingcomputer.com/news/security/watchguard-warns-of-new-rce-flaw-in-firebox-firewalls-exploited-in-attacks/": "New critical WatchGuard Firebox firewall flaw exploited in attacks", "https://www.bleepingcomputer.com/news/security/over-25-000-forticloud-sso-devices-exposed-to-remote-attacks/": "Over 25,000 FortiCloud SSO devices exposed to remote attacks", "https://flashpoint.io/blog/surfacing-threats-why-primary-source-collection-changes-intelligence/": "Surfacing Threats Before They Scale: Why Primary Source Collection Changes Intelligence", "https://thehackernews.com/2025/12/watchguard-warns-of-active-exploitation.html": "WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN Vulnerability", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247529239&idx=1&sn=a68cf207a58a85fba0bddb5d0973c8b6": "用 SyntaxFlow 规则“狩猎”逻辑漏洞", "https://xz.aliyun.com/news/90898": "帆软export/excelSQL注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485836&idx=1&sn=3403ff2db838de4b8ca07ef3f52bb155": "【工具分享】Web漏洞扫描工具Arachni", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504356&idx=1&sn=f5d2d7bd852745af850531ede48f2428": "安全热点周报:苹果修复了两个在“复杂”攻击中被利用的零日漏洞", "https://www.anquanke.com/post/id/313877": "2025 年 Chrome 零日漏洞遭在野利用:全面深度分析", "https://www.anquanke.com/post/id/313860": "CVE-2025-37164(CVSS 评分 10.0):未验证身份即可远程执行代码,HPE OneView 漏洞或致数据中心遭完全控制", "https://www.anquanke.com/post/id/313879": "Kubernetes 安全预警:Headlamp 漏洞(CVE-2025-14269)致未授权用户可劫持 Helm 集群", "https://www.anquanke.com/post/id/313882": "启动初期攻击:华擎、华硕、微星主板存在 UEFI 漏洞,攻击者可通过 PCIe 绕过操作系统安全机制", "https://www.anquanke.com/post/id/313863": "零日漏洞预警:黑客利用 SonicWall SMA1000 系列漏洞链,实现未验证身份的最高权限远程代码执行", "https://su18.org/post/CVE-2025-55182/": "CVE-2025-55182 的利⽤、控制与后利⽤", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651332621&idx=3&sn=6aff928a66bcd027a52142ceedc0bd25": "FreeBuf周报 | 2025年Chrome浏览器八大0Day漏洞;攻击者利用React2Shell漏洞部署Linux后门", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651332621&idx=2&sn=c887e63995c76837b3cd9b9c5b5718d2": "Linux内核首个Rust漏洞CVE-2025-68260曝光", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247493604&idx=1&sn=61a2e89683248aa440ff4654ac54a497": "Microsoft DNN NTLM暴露(CVE-2025-52488)", "https://mp.weixin.qq.com/s?__biz=Mzk3NTE3MjU4Mg==&mid=2247484478&idx=4&sn=45f69090997fd5ec2f11945e97c4b9ac": "【JAVA安全研究】鉴权绕过 Spring中间件双重编码%25%32%66 绕过 CVE-2020-11989", "https://mp.weixin.qq.com/s?__biz=Mzk3NTE3MjU4Mg==&mid=2247484478&idx=2&sn=d16a929844c24b43b5f82fd57c6dafaa": "【JAVA安全研究】鉴权绕过 shiro CVE-2010-3863 漏洞研究", "https://mp.weixin.qq.com/s?__biz=Mzk0ODYwNjI1NA==&mid=2247484171&idx=1&sn=733db8597cdc3a7ed74c6347496282ca": "【安全预警】东胜物流软件 WmsZXFeeGridSource SQL注入", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247487504&idx=1&sn=eff6d3a74615e9eae681887280304ed8": "【漏洞脚本】WPS文档中心 多人实时协作的在线Office operate 未授权访问至远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451184338&idx=1&sn=5fe0fd68cae5c63312da8c6f69d8dd1d": "主流主板新的BIOS漏洞攻陷某些游戏反作弊系统", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485847&idx=1&sn=6ef507eb9b153ac69e514c65f72f5e6c": "最新Nessus2025.12.8版本主机漏洞扫描/探测工具Windows/Linux下载", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485339&idx=1&sn=0122ace110f8c7e402ecc0f9dd9d892d": "漏洞复现|铜哨云用户中心/Fileopt.ashx存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzYyMzg3NDQ1Mw==&mid=2247486997&idx=1&sn=c3ea5a85ef34536fe746e51f3d593969": "记一次未授权访问到接管后台通杀漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgyODEzNQ==&mid=2247490130&idx=1&sn=5d7e0895711954457e9af592fe0d8b4b": "非典型SSRF漏洞详解", "https://securityaffairs.com/185896/hacking/u-s-cisa-adds-a-flaw-in-watchguard-fireware-os-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds a flaw in WatchGuard Fireware OS to its Known Exploited Vulnerabilities catalog", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073304&idx=2&sn=b1c32749fab00f883b96ae2d3966a433": "【安全圈】拳头游戏发现主板致命漏洞,多家厂商紧急修复", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496585&idx=2&sn=8d1cc1946fb76b328d36fef5a510056f": "上周关注度较高的产品安全漏洞(20251215-20251221)", "https://xavibel.com/2025/12/22/using-vulnerable-drivers-in-red-team-exercises/": "CVE-2025-7771: Exploiting a Signed Kernel Driver in a Red Team Operation", "https://www.malwarebytes.com/blog/news/2025/12/pornhub-tells-users-to-expect-sextortion-emails-after-data-exposure": "Pornhub tells users to expect sextortion emails after data exposure", "https://www.bleepingcomputer.com/news/security/over-115-000-watchguard-firewalls-vulnerable-to-ongoing-rce-attacks/": "Critical RCE flaw impacts over 115,000 WatchGuard firewalls", "https://www.bleepingcomputer.com/news/security/docker-hardened-images-now-open-source-and-available-for-free/": "Docker Hardened Images now open source and available for free", "https://www.bleepingcomputer.com/news/security/nissan-says-thousands-of-customers-exposed-in-red-hat-breach/": "Nissan says thousands of customers exposed in Red Hat breach", "https://www.bleepingcomputer.com/news/security/not-all-cisa-linked-alerts-are-urgent-asus-live-update-cve-2025-59374/": "Not all CISA-linked alerts are urgent: ASUS Live Update CVE-2025-59374", "https://therecord.media/spotify-disables-scraping-annas": "Spotify disables accounts after open-source group scrapes 86 million songs from platform", "https://isc.sans.edu/diary/rss/32588": "ISC Stormcast For Monday, December 22nd, 2025 https://isc.sans.edu/podcastdetail/9748, (Mon, Dec 22nd)", "https://thehackernews.com/2025/12/weekly-recap-firewall-exploits-ai-data.html": "⚡ Weekly Recap: Firewall Exploits, AI Data Theft, Android Hacks, APT Attacks, Insider Leaks & More", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524713&idx=1&sn=0bb209822721bbc91cb805c144f236a2": "WatchGuard:注意已遭利用的 Fireware OS VPN 严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524713&idx=2&sn=cbada2ec39c0947792f38de8f0b2282a": "如何通过一次供应链攻击同时攻破 X、Vercel、Cursor、Discord等数百家企业", "https://www.anquanke.com/post/id/313923": "Exim 恶意记录漏洞:失败补丁与 SQL 注入如何引发严重堆溢出漏洞", "https://www.anquanke.com/post/id/313921": "WatchGuard 防火墙遭零日漏洞猛攻:CVSS 9.3 高危漏洞致企业防火墙被劫持", "https://www.anquanke.com/post/id/313920": "n8n 深陷危机:CVSS 10.0 严重远程代码执行漏洞致服务器完全受控", "https://www.anquanke.com/post/id/313944": "微软发布紧急带外更新修复影响 IIS 站点的 MSMQ 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503640&idx=1&sn=ddab67ab2a56f1afe75b5e64de36950b": "雷神众测漏洞周报2025.12.15-2025.12.21", "https://mp.weixin.qq.com/s?__biz=MzI4MjI2NDI1Ng==&mid=2247485606&idx=1&sn=dcd065c2f4d672d87bfbc460815ce20c": "XXL-JOB的SSRF漏洞详细分析记录", "https://mp.weixin.qq.com/s?__biz=MzUyNzk1NjA5MQ==&mid=2247484013&idx=1&sn=514d45521e2166d6f28f10eee4417bef": "【已复现】| 帆软export/excel sql注入", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664256073&idx=1&sn=8862eb8de14b179335cfc86281a76981": "专题·漏洞生态 | 推动漏洞治理从单点防御向生态协同演进", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489749&idx=1&sn=a38c9a26fd76d97916149bed05f3d4a2": "短剧影视小程序平台juhecurl接口存在任意文件读取漏洞 附POC", "https://securelist.com/webrat-distributed-via-github/118555/": "From cheats to exploits: Webrat spreading via GitHub", "https://www.bleepingcomputer.com/news/security/webrat-malware-spread-via-fake-vulnerability-exploits-on-github/": "WebRAT malware spread via fake vulnerability exploits on GitHub", "https://securityaffairs.com/186048/data-breach/red-hat-gitlab-breach-exposes-data-of-21000-nissan-customers.html": "Red Hat GitLab breach exposes data of 21,000 Nissan customers", "https://securityaffairs.com/186021/security/u-s-cisa-adds-a-flaw-in-digiever-ds-2105-pro-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds a flaw in Digiever DS-2105 Pro to its Known Exploited Vulnerabilities catalog", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524719&idx=1&sn=e66447dfb5cb6f92f28d1ed15a93d766": "Log4j 的安全盲点:TLS新漏洞可用于拦截敏感日志", "https://www.4hou.com/posts/0MWV": "新型UEFI漏洞曝光:技嘉、微星、华硕、华擎主板面临启动前攻击风险", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504372&idx=1&sn=ec0ca2fb20e9061517a7d4a32162d553": "【已复现】FreeBSD rtsold 远程命令注入漏洞(CVE-2025-14558)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504372&idx=2&sn=59a1b1bff23e5eb7f44f8ac5c6c09d3d": "【已复现】n8n 远程代码执行漏洞(CVE-2025-68613)安全风险通告", "https://cxsecurity.com/issue/WLB-2025120023": "Ultimate Interactive Exploitation Framework for CVE-2025-55182 (React2Shell)", "https://cxsecurity.com/issue/WLB-2025120024": "promchimexport - SQL Injection", "https://www.cybersecurity360.it/legal/privacy-dati-personali/account-obbligatori-nelle-commerce-interviene-ledpb/": "Account obbligatori nell’e-commerce: interviene l’EDPB", "https://www.bleepingcomputer.com/news/security/mongodb-warns-admins-to-patch-severe-rce-flaw-immediately/": "MongoDB warns admins to patch severe RCE flaw immediately", "https://www.schneier.com/blog/archives/2025/12/urban-vpn-proxy-surreptitiously-intercepts-ai-chats.html": "Urban VPN Proxy Surreptitiously Intercepts AI Chats", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524734&idx=2&sn=7ccd5eea40d0b6a7a1e2dc6c3f41c681": "UEFI新漏洞可用于在多家厂商主板上执行预引导攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524734&idx=1&sn=7accfa41ad8e25a3c0a292eb451552af": "n8n严重漏洞可导致任意代码执行", "https://www.4hou.com/posts/XPN8": "黑客利用 Gladinet CentreStack 加密漏洞发起远程代码执行攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073367&idx=1&sn=fba048676467618b1282d93f6e25fc3a": "【安全圈】NVIDIA高危漏洞(CVE-2025-33222/33223/33224)可致AI系统完全沦陷", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073367&idx=2&sn=25e2681f63b6c5e1fd21f1f45ae2d07c": "【安全圈】n8n 高危漏洞致数千实例面临任意代码执行风险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073367&idx=3&sn=a3017b2a835ce9c84e5065e422339651": "【安全圈】索尼PSN账号系统曝致命漏洞,双重验证形同虚设", "https://www.anquanke.com/post/id/313972": "M-Files 身份窃取漏洞:高危缺陷致内部人员可劫持用户账户、获取敏感数据", "https://www.anquanke.com/post/id/313973": "“循环谎言攻击”:将人工智能安全对话框变为远程代码执行攻击的工具", "https://www.anquanke.com/post/id/314010": "慧与 OneView 产品高危漏洞(CVE-2025-37164):可被用于远程代码执行", "https://www.anquanke.com/post/id/313984": "零日漏洞警报:Linksys 身份验证绕过漏洞致黑客可无密码劫持路由器", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541252&idx=2&sn=ddbb3e5b658defc9aa1eb379bf586323": "漏洞定级困惑,运营者该信谁?", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524905&idx=1&sn=64675b20681ab339b6605e62383bf43b": "【漏洞通告】n8n 远程代码执行漏洞(CVE-2025-68613)", "https://mp.weixin.qq.com/s?__biz=MzU5MTExMjYwMA==&mid=2247485786&idx=1&sn=473504c49c301f74aa2c229027ac91ad": "国产大模型ClaudeCode编程能力测试!", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509944&idx=1&sn=223ff2fb1223f5ed72a07ba9a5844d45": "新春福利季打响!提交漏洞赢取新年礼盒,仅此一周!", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247583489&idx=1&sn=b3d9e83690ac67a68399e273e0e3583a": "年度盘点 | 360发布2025年度十大高危漏洞,揭示AI攻防元年安全新态势", "https://gh0st.cn/archives/2025-12-26/1": "黑盒视角下的 WebView 漏洞面探索", "https://mp.weixin.qq.com/s?__biz=MzU5NjYwNDIyOQ==&mid=2247485816&idx=1&sn=6ef920c149b587a9f11f7039c3ea2694": "Java 代码审计 - 反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489772&idx=1&sn=89ffd79780ffff9dc6f22c74d1e64649": "WVP-GB28181摄像头管理端api/user/all存在敏感信息泄露漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797585&idx=1&sn=f0d28ba4ba0334f8a2d57d6998f48202": "“缓存欺骗第五章第二节”漏洞挖掘实战:利用路径规范化差异,实现缓存欺骗漏洞的精准打击", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247491191&idx=2&sn=f8a0edca0c26d28848a0df6dc4f2349d": "【高危漏洞预警】LangChain序列化注入漏洞CVE-2025-68664", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247491191&idx=1&sn=1f328994d2a26d0fde8abd0372a1485d": "【高危漏洞预警】Windows PowerShell 命令注入漏洞CVE-2025-54100", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651464123&idx=1&sn=8fbfa7e1219d63ac3eafb92e90dd2325": "信息安全漏洞周报(2025年第51期)", "https://mp.weixin.qq.com/s?__biz=Mzk5MDYxODcwMA==&mid=2247484255&idx=1&sn=9c21d5518e80e693495d22ffd7d46522": "宇视科技视频管理系统VM.php接口存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485367&idx=1&sn=d2e25de7deb9e14c329b768b81aecf0d": "漏洞复现|建文工程管理系统download2.aspx接口处存在任意文件读取漏洞", "https://securityaffairs.com/186117/security/five-year-old-fortinet-fortios-ssl-vpn-flaw-actively-exploited.html": "Five-year-old Fortinet FortiOS SSL VPN vulnerability actively exploited", "https://securityaffairs.com/186107/security/high-severity-mongodb-flaw-cve-2025-14847-could-lead-to-server-takeover.html": "High-severity MongoDB flaw CVE-2025-14847 could lead to server takeover", "https://thehackernews.com/2025/12/cisa-flags-actively-exploited-digiever.html": "CISA Flags Actively Exploited Digiever NVR Vulnerability Allowing Remote Code Execution", "https://thehackernews.com/2025/12/fortinet-warns-of-active-exploitation.html": "Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability", "https://thehackernews.com/2025/12/threatsday-bulletin-stealth-loaders-ai.html": "ThreatsDay Bulletin: Stealth Loaders, AI Chatbot Flaws AI Exploits, Docker Hack, and 15 More Stories", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524741&idx=1&sn=068ebe6184b266845885514c29d92425": "MongoDB:立即修复这个严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524741&idx=2&sn=1d0e6c4dd1ea49e10ed0e2d46132543a": "硬编码后门:英伟达紧急修复多个高危漏洞,可用于完全控制AI系统", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485867&idx=1&sn=2e60a48afaafca387c37ab518126145f": "开源项目的“隐形杀手”,Google重磅神器OSV-Scanner,一键揪出所有漏洞!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073381&idx=3&sn=81ddefeda78657db996ee181ee4b8ff8": "【安全圈】WordPress 头部插件曝 9/10 分高危漏洞,官方连发三补丁全失效", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458606104&idx=2&sn=397f7d463ab27cf4f87c397937f2d6e6": "n8n自动化平台现致命漏洞,可远程执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524747&idx=1&sn=4048d2d12b0a64ce62d92a0b79a83100": "Fortinet:5年前的FortiOS SSL VPN 2FA绕过漏洞正遭活跃利用", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489784&idx=1&sn=859c354763a758a2aba703c21c772211": "KEDACOM phoenix监控平台upload_fcgi接口存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651333010&idx=4&sn=2bcffa8d170d91437698923133bc3465": "LangChain存在严重漏洞,威胁AI Agent机密数据安全", "https://mp.weixin.qq.com/s?__biz=Mzg4ODI5MzAzMw==&mid=2247483969&idx=1&sn=14c9a484f61d49658c99861beb1c151b": "LangChain核心严重漏洞通过序列化注入泄漏密钥", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247487065&idx=1&sn=af6aa4d6932fa5a161a7be6c77680b91": "React Shell与Next.js漏洞利用和WAF绕过工具 -- NextRce&NextRCSWaff", "https://mp.weixin.qq.com/s?__biz=MzI3NjU1OTk0MA==&mid=2247495751&idx=1&sn=eceb2739987c59f6e14bc23a402a0f19": "Spring Framework目录遍历漏洞技术修复思路对Web应用开发安全的启示", "https://mp.weixin.qq.com/s?__biz=Mzg5MDk4MzkyMA==&mid=2247485147&idx=1&sn=0ecbb04c0fc82b3b2c7f446c941ee85d": "Spring-gateway RCE分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524747&idx=2&sn=51ac4b38d86a59e2a6d418263e3e6405": "TeamViewer DEX高危漏洞可导致 Nomad 服务遭劫持", "https://mp.weixin.qq.com/s?__biz=MzkxNzU2NDgxNQ==&mid=2247484563&idx=1&sn=5e0bf9f09e0918e189875feb2d817b8d": "【AI安全】太狠了!AI Fuzzing 深度评测,让越权漏洞无处遁形", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524915&idx=1&sn=1ffdb6448c8cb0c7db885c2f53ee7374": "【漏洞通告】PowerShell 远程代码执行漏洞(CVE-2025-54100)", "https://mp.weixin.qq.com/s?__biz=MzkwMDMwNDgwNQ==&mid=2247485935&idx=1&sn=7f93536f07c81b13f416f35586d506e0": "一款赏金猎人xss漏洞扫描工具——Mey", "https://mp.weixin.qq.com/s?__biz=MzUzNDczNjQ2OQ==&mid=2247486089&idx=1&sn=129b42d1b7624a59476ff725d1f2e322": "无回显漏洞测试辅助平台,提供DNSLOG,HTTPLOG等功能,辅助渗透测试过程中无回显漏洞及SSRF等漏洞的验证和利用", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247493656&idx=1&sn=23b7e3430c93d9a8b57db6796e01d323": "用友NC Cloud IMetaWebService4BqCloud SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MTU3NTY2NA==&mid=2247488688&idx=1&sn=cb0f185e24189f506d98aa356d08bcb3": "速查 | CVE-2025-54100 PowerShell RCE漏洞", "https://thehackernews.com/2025/12/critical-langchain-core-vulnerability.html": "Critical LangChain Core Vulnerability Exposes Secrets via Serialization Injection", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485869&idx=1&sn=fafeb55461bbeef766d961f71be50ce5": "捡钱神洞,看我如何挖掘SRC的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504386&idx=1&sn=c1da5339a9c62457dae9f1b6f6d8f4cc": "【已复现】MongoDB Zlib 压缩协议堆内存信息泄露漏洞(CVE-2025-14847)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651138923&idx=1&sn=90e0196ba42344b621f8c057f28b9be7": "日产汽车客户数据遭泄露,甲骨文曝0Day漏洞|一周特辑", "https://www.anquanke.com/post/id/314053": "TeamViewer DEX 高危漏洞暴露风险 攻击者可劫持 Nomad 服务", "https://www.anquanke.com/post/id/314023": "零点击漏洞攻击元年:2025 年带给现代恶意软件防御的启示", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498847&idx=1&sn=c65b0ed836f812f3d33486ec0df11aba": "一个$20,000的漏洞", "https://cxsecurity.com/issue/WLB-2025120027": "ESLockDecryptor: Tool for decrypt ES File Explorer encrypted files (.eslock)", "https://mp.weixin.qq.com/s?__biz=Mzk2NDI0MjUyNQ==&mid=2247485892&idx=1&sn=bb9aeef0289a5bbf168303c7c927c425": "CVE-2015-5254:Apache ActiveMQ JMS ObjectMessage反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247515871&idx=1&sn=7d0348c3ad45ca1c0de0bf9ad1bbe4d2": "CVE-2025-14847 - MongoDB Unauthenticated Memory Leak", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247534143&idx=1&sn=ef078bd7a7a0e818720560e8f82780f6": "CurseForge 中 WebSocket 导致远程代码执行的情况", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247492607&idx=1&sn=9553fda05577db648d3eb864cb961909": "Eurostar AI 聊天机器人漏洞:当客服机器人“脱轨”", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096726&idx=1&sn=228279ed066060f276ef9564b91d4429": "NVIDIA Isaac曝高危漏洞:攻击者可远程执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzUzNDczNjQ2OQ==&mid=2247486124&idx=2&sn=046b7d2e8380673235bacd734417e1f7": "OAExploit一款基于产品的一键扫描工具", "https://mp.weixin.qq.com/s?__biz=MzUzNDczNjQ2OQ==&mid=2247486124&idx=1&sn=a23a757fd7e1d862a14d6fb48a8f70f6": "Shiro漏洞利用工具合集", "https://mp.weixin.qq.com/s?__biz=Mzg3MDU1MjgwNA==&mid=2247487704&idx=1&sn=86490ab1343db8a9caa4009bac801f10": "Spring-Gateway RCE 漏洞,CVE-2022-22947&CVE-2025-41243 环境部署及源码分析", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096726&idx=2&sn=af9d2fb574e557a2ef19e3378045e728": "TeamViewer DEX曝漏洞:攻击者可触发拒绝服务攻击并泄露敏感数据", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247488724&idx=1&sn=7af8030e1ae48f996e80559b0b918ba5": "Zimbra 遭受围攻:高危本地文件包含漏洞将内部文件暴露给未经身份验证的攻击者", "https://mp.weixin.qq.com/s?__biz=MzkyNDI2NjQzNg==&mid=2247493861&idx=1&sn=ff82b5608ba051b9439615e2d3b31c18": "powershell-CVE-2025-54100漏洞POC补充复现", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY3OTc5Mw==&mid=2247485165&idx=1&sn=8203f1bbda3da11609c0e3adc723f8a0": "【cve-2025-54100】Windows Powershell 命令注入漏洞(附poc)", "https://mp.weixin.qq.com/s?__biz=MzIzMDQwMjg5NA==&mid=2247508589&idx=1&sn=4427a06330c55c2d6c8e91076b3b522d": "【一周安全资讯1227】美国FCC发布外国无人机禁令;n8n自动化平台现致命漏洞,可远程执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073425&idx=3&sn=be60462d15f04b1ca6624a2b2f13fdf0": "【安全圈】甲骨文 EBS 漏洞导致 350 万人信息泄露", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651333161&idx=3&sn=b6c34abade3012970ba08282d075ec97": "亚马逊利用110毫秒\"延迟\"捕获朝鲜间谍;零点击漏洞肆虐的2025年 | FreeBuf周报", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247510660&idx=1&sn=c689dc798def81d264e8f9a37d794081": "分享一个ThinkPHP综合漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247493402&idx=1&sn=b72bd9f1bbfa3003f660e8f184a47bd7": "漏洞复现 | 帆软报表 FineReport export/excel 存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247522178&idx=1&sn=31c55b5ac109f26de13549a369a236cf": "漏洞挖掘:众测 SRC 高频漏洞测试姿势全总结(支付 / XSS / 验证码篇)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651333161&idx=1&sn=1cd636f72540cad36e71da0735b70445": "零点击漏洞肆虐的一年:2025年现代恶意软件带来的启示", "https://securityaffairs.com/186185/hacking/langchain-core-vulnerability-allows-prompt-injection-and-data-exposure.html": "LangChain core vulnerability allows prompt injection and data exposure", "https://mp.weixin.qq.com/s?__biz=MzA4NDQ5NTU0MA==&mid=2647691593&idx=1&sn=3e464fe7410a6dc971925ca1a1a0902b": "0106.我如何在漏洞赏金第一年就赚到六位数:我的经验", "https://mp.weixin.qq.com/s?__biz=MzE5ODA3NjAzNg==&mid=2247485239&idx=1&sn=1c41acb5ce4b0afc1e8aa668589896f9": "xingrin——自动化资产发现与漏洞扫描系统", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247493033&idx=1&sn=153b8c986cc2a5c1992934f0b292203e": "【已复现】MongoDB 未授权内存泄露漏洞(CVE-2025-14847)", "https://www.bleepingcomputer.com/news/security/exploited-mongobleed-flaw-leaks-mongodb-secrets-87k-servers-exposed/": "Exploited MongoBleed flaw leaks MongoDB secrets, 87K servers exposed", "https://isc.sans.edu/diary/rss/32590": "ISC Stormcast For Sunday, December 28th, 2025 https://isc.sans.edu/podcastdetail/9750, (Sun, Dec 28th)", "https://mp.weixin.qq.com/s?__biz=Mzg3OTUxNTU2NQ==&mid=2247491400&idx=1&sn=3c08a7567535cd8e4b1549ae5595318b": "漏洞预警 | MongoDB 存在未授权内存泄露漏洞(CVE-2025-14847)", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496602&idx=2&sn=f2586ef15dc4dcb74fbe5677bee036bb": "上周关注度较高的产品安全漏洞(20251222-20251228)", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg2NTM3NQ==&mid=2247485897&idx=1&sn=3ba4555654cc9f788719b0a72cc6fe51": "【吃瓜】爆料称MongoDB漏洞致育碧数十TB源代码泄露", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489795&idx=1&sn=22f73512d0df61047abeb439472f96a7": "赛普EAP企业适配管理平台AppData.ashx接口存在SQL注入漏洞 附POC", "https://www.bleepingcomputer.com/news/security/fortinet-warns-of-5-year-old-fortios-2fa-bypass-still-exploited-in-attacks/": "Fortinet warns of 5-year-old FortiOS 2FA bypass still exploited in attacks", "https://www.bleepingcomputer.com/news/security/korean-air-data-breach-exposes-data-of-thousands-of-employees/": "Korean Air data breach exposes data of thousands of employees", "https://therecord.media/us-australia-bug-exploitation": "US, Australia say ‘MongoBleed’ bug being exploited", "https://securityaffairs.com/186241/hacking/mongobleed-flaw-actively-exploited-in-attacks-in-the-wild.html": "MongoBleed flaw actively exploited in attacks in the wild", "https://www.tenable.com/blog/cve-2025-14847-mongobleed-mongodb-memory-leak-vulnerability-exploited-in-the-wild": "CVE-2025-14847 (MongoBleed): MongoDB Memory Leak Vulnerability Exploited in the Wild", "https://thehackernews.com/2025/12/mongodb-vulnerability-cve-2025-14847.html": "MongoDB Vulnerability CVE-2025-14847 Under Active Exploitation Worldwide", "https://thehackernews.com/2025/12/traditional-security-frameworks-leave.html": "Traditional Security Frameworks Leave Organizations Exposed to AI-Specific Attack Vectors", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524761&idx=2&sn=1b94ad55c3aaf6d0f95f5c0d1386a2e4": "CISA 将已遭利用的 Digiever NVR RCE漏洞纳入KEV", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524761&idx=1&sn=b5d8363914b09d269fa325e5e3010cbf": "LangChain Core存在严重的序列化注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504401&idx=1&sn=0a41c93f61610d2de21b143cf5346f92": "【已复现】Zimbra 本地文件包含漏洞(CVE-2025-68645)安全风险通告", "https://forum.butian.net/share/4698": "AI安全之间接提示词注入实现RCE(CVE-2025-53773绕过分析)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073453&idx=2&sn=4ad2cb470ecbf8e9ebddb77c454c0eeb": "【安全圈】CVE-2025-54322(CVSS 10分):AI Agent发现全球网络设备关键0Day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073453&idx=1&sn=f1dbd8bd525c3a389121fa141f0374ab": "【安全圈】\"耳机劫持\":索尼等主流无线耳机芯片曝高危漏洞,黑客可接管用户手机", "https://www.anquanke.com/post/id/314086": "CVE-2025-54322(CVSS 10 分满分):AI 智能体发现全球网络设备高危零日漏洞", "https://www.anquanke.com/post/id/314068": "Livewire 框架高危漏洞致 Laravel 应用面临隐蔽远程代码执行风险,漏洞验证工具已公开", "https://www.anquanke.com/post/id/314075": "MongoBleed 漏洞 PoC 已发布:未授权攻击者可窃取 MongoDB 内存敏感信息", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651139869&idx=1&sn=28439d6defc435d13edc538b1afc3108": "从POC到规模化生产:为什么2025年是AI-SOC的真正爆发点?", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524926&idx=1&sn=228995f6ca3b9742e101526240c5cc5b": "【漏洞通告】MongoDB 未授权内存泄露漏洞(CVE-2025-14847)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458606699&idx=2&sn=56ed1fca7dd1011e0b211a57baebeb2e": "“耳机劫持”惊魂!热门蓝牙耳机藏致命漏洞,手机恐被远程操控", "https://www.eff.org/deeplinks/2025/12/effs-investigations-expose-flock-safetys-surveillance-abuses-2025-review": "EFF's Investigations Expose Flock Safety's Surveillance Abuses: 2025 in Review", "https://www.malwarebytes.com/blog/news/2025/12/2025-exposed-risks-we-ignored-while-rushing-ai": "2025 exposed the risks we ignored while rushing AI", "https://www.bleepingcomputer.com/news/security/cisa-orders-federal-agencies-to-patch-mongobleed-flaw-actively-exploited-in-attacks/": "CISA orders feds to patch MongoBleed flaw exploited in attacks", "https://www.bleepingcomputer.com/news/security/us-cybersecurity-experts-plead-guilty-to-blackcat-alphv-ransomware-attacks/": "US cybersecurity experts plead guilty to BlackCat ransomware attacks", "https://securityaffairs.com/186297/hacking/u-s-cisa-adds-a-flaw-in-mongodb-server-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds a flaw in MongoDB Server to its Known Exploited Vulnerabilities catalog", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524768&idx=2&sn=20905d614bd42f347918e74592b8682f": "IBM API严重漏洞可导致登录遭绕过", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524768&idx=1&sn=9637d0eb4df20ac66e8c9fa5c1d84ddd": "SmarterMail 严重漏洞可导致服务器遭完全接管", "https://forum.butian.net/share/4721": "【2025补天白帽黑客盛典】大模型时代的移动端攻防:基于LLM的App漏洞挖掘", "https://forum.butian.net/share/4724": "【2025补天白帽黑客盛典】推广漏洞的特殊思路", "https://www.solidot.org/story?sid=83185": "黑客利用育碧 MongoDB 软件漏洞窃取源代码", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515403&idx=2&sn=4b0460c5ed5ecc1568115ad062c7c3ae": "CNCERT:关于NutsBot新型僵尸网络利用React2Shell漏洞传播的风险提示", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073476&idx=1&sn=adf8c250e520bbcee2f52917017272d8": "【安全圈】Xplora 儿童手表惊现“万能钥匙”漏洞,黑客可监听通话", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073476&idx=2&sn=75eb6eae26e4c17509d77f97cdbd2e19": "【安全圈】通过内核驱动与命名管道实现Windows本地提权漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247494547&idx=1&sn=7f6cb8743233b9263deb08f8eaf92af5": "喜报!锦行科技获2025年度CNNVD漏洞奖励二级贡献奖!", "https://danielmiessler.com/blog/ai-changes-2026?utm_source=rss&utm_medium=feed&utm_campaign=website": "AI Changes I Expect in 2026", "https://danielmiessler.com/blog/cybersecurity-changes-2026?utm_source=rss&utm_medium=feed&utm_campaign=website": "Cybersecurity Changes I Expect in 2026", "https://www.bleepingcomputer.com/news/security/rondodox-botnet-exploits-react2shell-flaw-to-breach-nextjs-servers/": "RondoDox botnet exploits React2Shell flaw to breach Next.js servers", "https://securityaffairs.com/186338/hacking/mongobleed-cve-2025-14847-the-us-china-and-the-eu-are-among-the-top-exploited-geos.html": "MongoBleed (CVE-2025-14847): the US, China, and the EU are among the top exploited GEOs", "https://securityaffairs.com/186353/security/singapore-csa-warns-of-maximun-severity-smartermail-rce-flaw.html": "Singapore CSA warns of maximun severity SmarterMail RCE flaw", "https://thehackernews.com/2025/12/darkspectre-browser-extension-campaigns.html": "DarkSpectre Browser Extension Campaigns Exposed After Impacting 8.8 Million Users Worldwide", "https://www.rtl-sdr.com/the-thought-emporium-explores-imsi-cell-phone-tracking-and-other-advanced-cell-phone-attacks-with-software-defined-radios/": "The Thought Emporium Explores IMSI Cell Phone Tracking and Other Advanced Cell Phone Attacks with Software Defined Radios", "https://www.4hou.com/posts/OGNB": "MongoBleed高危漏洞遭在野利用 8万台MongoDB服务器暴露风险", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504410&idx=1&sn=0d7e1c182d22de87183f283e2db41c8d": "【已复现】RustFS gRPC 身份认证绕过漏洞(CVE-2025-68926)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073493&idx=1&sn=99d83b30da4e7086118f985c334a167c": "【安全圈】蓝牙芯片供应链重大漏洞披露:数亿设备面临「耳机劫持」风险", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503655&idx=1&sn=857eb870488d1f649d19455fefa34e04": "雷神众测漏洞周报2025.12.22-2025.12.28", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247488268&idx=1&sn=a175fcf0c3dc3d7a416dcbb7e2e3af45": "从nginx堆溢出RCE到root提权漏洞分析与复现", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496982&idx=2&sn=ee3fe17716d285c547ebea8276b35a91": "上周关注度较高的产品安全漏洞(20260525-20260531)", "https://horizon3.ai/attack-research/vulnerabilities/cve-2026-42271-chained-with-cve-2026-48710/": "CVE-2026-42271 Chained with CVE-2026-48710 | LiteLLM Unauthenticated Remote Code Execution via Starlette Host Header Validation Bypass", "https://horizon3.ai/intelligence/blogs/exploit-window-shrinking-rapid-response/": "The Exploit Window Is Shrinking. Most Security Workflows Are Not.", "https://thecyberexpress.com/cbse-osm-vulnerability/": "CBSE Engages IIT Experts After Admitting OSM Security Vulnerabilities", "https://www.bleepingcomputer.com/news/microsoft/critical-windows-netlogon-remote-code-execution-flaw-now-exploited-in-attacks/": "Critical Windows Netlogon RCE flaw now exploited in attacks", "https://www.bleepingcomputer.com/news/security/dashlane-password-manager-users-locked-out-by-brute-force-attacks/": "Dashlane password manager users locked out by brute force attacks", "https://techcrunch.com/2026/06/01/grand-theft-auto-v-cheat-service-gets-hacked-exposing-thousands-of-gamers/": "Grand Theft Auto V cheat service gets hacked, exposing thousands of gamers", "https://isc.sans.edu/diary/rss/33036": "ISC Stormcast For Monday, June 1st, 2026 https://isc.sans.edu/podcastdetail/9952, (Mon, Jun 1st)", "https://securityaffairs.com/192977/hacking/cve-2026-8732-the-wp-maps-pro-flaw-that-lets-anyone-create-a-wordpress-admin-without-a-password.html": "CVE-2026-8732: The WP Maps Pro Flaw That Lets Anyone Create a WordPress Admin Without a Password", "https://securityaffairs.com/192951/security/u-s-cisa-adds-palo-alto-networks-pan-os-flaw-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Palo Alto Networks PAN-OS flaw to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2026/06/critical-wp-maps-pro-flaw-actively.html": "Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts", "https://thehackernews.com/2026/06/weekly-recap-new-linux-flaw-pan-os.html": "⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and More", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526149&idx=2&sn=58f20be37a8c71d4f0e7d16aa1e8f1b5": "Comet Backup 服务器严重漏洞可导致客户数据被远程泄露", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526149&idx=1&sn=64865321252297906000fede942608f5": "PAN-OS GlobalProtect 认证绕过漏洞已遭活跃利用", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506083&idx=1&sn=576c2a782ab030f6030666f787637cd9": "【在野利用】Windows Netlogon 零点击远程代码执行漏洞(CVE-2026-41089)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077114&idx=2&sn=d3c366be59991023edf3faa2bbc3cdb3": "【安全圈】紧急!紧急!2026年首个“核弹级”漏洞爆发!你的网站正在裸奔,请立即更新!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077114&idx=3&sn=b1b1ff705f0f63b7c7f89b2c99d64d2b": "【安全圈】警告!Palo Alto VPN重大漏洞正在被疯狂利用!你的企业内网可能已经“裸奔”!", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458616009&idx=3&sn=d0791374d6acd99a1da324b455dfe0c4": "Liquidjs 曝 RCE 漏洞,730万月下载用户面临系统接管风险", "https://infosecwriteups.com/uncovering-the-blind-spot-bypassing-a-security-patch-cve-2026-24884-to-achieve-arbitrary-file-bc385eaa73fa?source=rss----7b722bfd1b8d---4": "Uncovering the Blind Spot: Bypassing a Security Patch (CVE-2026–24884) to Achieve Arbitrary File…", "https://www.hackingdream.net/2026/06/agentic-seo-skill-llm-seo-audit-tool.html": "Agentic SEO Skill for Codex, Claude, Cursor and many more: Open-Source LLM SEO Audits", "https://horizon3.ai/attack-research/vulnerabilities/cve-2026-44825/": "CVE-2026-44825 | Apache Solr AuthTool Hardcoded Credentials Vulnerability", "https://www.malwarebytes.com/blog/data-breaches/2026/06/23andme-exposed-genetic-information-of-millions-lawsuit-says": "23andMe exposed genetic information of millions, lawsuit says", "https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-actively-exploited-oracle-weblogic-flaw/": "CISA flags two-year-old Oracle flaw as actively exploited in attacks", "https://www.bleepingcomputer.com/news/security/critical-kirki-flaw-exploited-to-hijack-wordpress-admin-accounts/": "Critical Kirki flaw exploited to hijack WordPress admin accounts", "https://thecyberexpress.com/cve-2026-41089-windows-netlogon-vulnerability/": "Threat Actors Target Critical Windows Netlogon Flaw CVE-2026-41089", "https://securityaffairs.com/193034/hacking/instagram-account-hijacks-expose-the-security-risks-of-ai-powered-support.html": "Instagram Account Hijacks Expose the Security Risks of AI-Powered Support", "https://securityaffairs.com/193027/security/u-s-cisa-adds-oracle-weblogic-flaw-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Oracle WebLogic flaw to its Known Exploited Vulnerabilities catalog", "http://sites.libsyn.com/18678/badhost-dead-ctfs-exploding-npms-and-the-verizon-dbir-asw-385": "BadHost, Dead CTFs, Exploding NPMs, and the Verizon DBIR - ASW #385", "https://thehackernews.com/2026/06/ai-driven-exploitation-is-destroying.html": "AI-Driven Exploitation is Destroying Vulnerability Management. Here’s How to Handle It.", "https://thehackernews.com/2026/06/dashlane-discloses-brute-force-attack.html": "Dashlane Discloses Brute-Force Attack, Encrypted Vaults of Fewer Than 20 Users Downloaded", "https://thehackernews.com/2026/06/gamaredon-exploits-winrar-to-deliver.html": "Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine", "https://thehackernews.com/2026/06/google-june-2026-android-update-patches.html": "Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited", "https://thehackernews.com/2026/06/oracle-weblogic-cve-2024-21182-added-to.html": "Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664263180&idx=1&sn=462c579296ee76347df937fa7a3dd32b": "CNNVD | 人工智能重要漏洞通报(2026年第八期)", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141509&idx=2&sn=73fc2aa6fdcc3d272b65636c0f805fc7": "安全厂商共识:AI可接管告警处置,人类仍是SOC决策核心;CNVD 第 21 期漏洞周报:高危漏洞占比高,0day 漏洞成主要威胁| 牛览", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503828&idx=1&sn=8be0b40b97edbea59f07e9072cb07558": "雷神众测漏洞周报2026.5.25-2026.5.31", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247488276&idx=1&sn=d97727e1af44baf52675d3ce2eb3c131": "漏洞预警 | Apache ActiveMQ Jolokia 远程代码执行漏洞(CVE-2026-42588)", "https://horizon3.ai/news/press-release/horizon3-ai-brinqa-partnership/": "Horizon3.ai and Brinqa Partner to Help Enterprises Prioritize Real-World Cyber Exposure", "https://www.bleepingcomputer.com/news/security/cisa-warns-of-active-attacks-exploiting-android-linux-bugs/": "CISA warns of active attacks exploiting Android, Linux bugs", "https://thecyberexpress.com/cve-2025-48595-android-june-2026/": "Google Patches Android Zero-Day CVE-2025-48595 Exploited in Targeted Attacks", "https://therecord.media/new-cyber-force-would-cost-11-billion-commission": "New cyber force would cost up to $11 billion to start, commission says", "https://www.bleepingcomputer.com/news/security/what-345-days-of-untested-exposure-looks-like-at-a-bank/": "What 345 Days of Untested Exposure Looks Like at a Bank", "https://securityaffairs.com/193057/breaking-news/google-patches-actively-exploited-android-flaw-affecting-millions-of-devices.html": "Google Patches Actively Exploited Android Flaw Affecting Millions of Devices", "https://securityaffairs.com/193067/security/u-s-cisa-adds-android-and-linux-kernel-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Android and Linux Kernel flaws to its Known Exploited Vulnerabilities catalog", "https://www.tenable.com/blog/tenable-cto-ai-security-threats-exposure-management": "Tenable CTO Q&A: C-suite views AI as massive threat, as cyber teams adopt exposure management to counter AI attacks", "https://thehackernews.com/2026/06/autonomous-ai-tool-finds-2-year-old-rce.html": "Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526201&idx=1&sn=d0ae405e9794aaabe6f66ce780e5f88c": "TP-Link:速修复这个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526201&idx=2&sn=94f249f0b82ed4528faa20db71165ca7": "XCharge C6电动汽车充电桩存在多个严重漏洞,可导致任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506107&idx=1&sn=ab9619c197f6e0980d741bcee13f2d45": "【已复现】Redis Lua 脚本远程代码执行漏洞(CVE-2026-23631)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247518995&idx=1&sn=018d3db3d1595052798589b766ad7d70": "4天内两波入侵:PAN-OS GlobalProtect认证绕过漏洞(CVE-2026-0257)利用攻击剖析", "http://0.0.0.0:8080/post/64289": "惠普 VoIP 电话现严重漏洞,或致企业网络遭入侵", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141521&idx=2&sn=e2b4b2aae8d3a993eb7af1bf0986335a": "AI时代,攻防先行——2026北京网络安全大会(BCS)开幕 ;CNNVD 发布 2026 第八期 AI 漏洞| 牛览", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247543080&idx=1&sn=98de9948cffe3e8c1cfaa0f2caffa048": "Anthropic“玻璃翼计划”的50多家合作伙伴已发现约1万个关键/高危漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458616117&idx=2&sn=f55100b6a7b4ad1a3ec77d31a47927dc": "高危 HTTP/2 炸弹漏洞突袭!5大主流服务器全中招,家用宽带就能打崩站点", "https://infosecwriteups.com/frontend-security-bug-hunting-the-env-file-crisis-and-real-world-exploitation-60c4fd28ab4b?source=rss----7b722bfd1b8d---4": "Frontend Security & Bug Hunting: The .env File Crisis and Real-World Exploitation", "https://www.bleepingcomputer.com/news/software/brave-software-releases-origin-for-a-paid-bloat-free-browsing-experience/": "Brave Software releases Origin for a paid, bloat-free browsing experience", "https://www.bleepingcomputer.com/news/security/cisco-warns-of-critical-unified-cm-flaw-with-poc-exploit-code/": "Cisco warns of critical Unified CM flaw with PoC exploit code", "https://www.bleepingcomputer.com/news/security/dentaquest-data-breach-exposed-info-of-26-million-accounts/": "DentaQuest data breach exposed info of 2.6 million accounts", "https://www.bleepingcomputer.com/news/microsoft/microsoft-blames-unexpected-windows-driver-updates-on-caching-issue/": "Microsoft blames unexpected Windows driver updates on caching issue", "https://therecord.media/researcher-publishes-github-token-stealing-exploit-microsoft": "Researcher publishes GitHub token-stealing exploit, blames Microsoft’s disclosure process", "https://therecord.media/un-food-agency-investigates-gaza-aid-breach": "UN food agency investigates breach exposing data of Gaza aid recipients", "https://securityaffairs.com/193142/hacking/critical-cisco-unified-cm-bug-patched-as-public-exploit-code-emerges.html": "Critical Cisco Unified CM Bug Patched as Public Exploit Code Emerges", "https://securityaffairs.com/193156/security/u-s-cisa-adds-mirasvit-full-page-cache-warmer-flaw-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Mirasvit Full Page Cache Warmer flaw to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2026/06/china-linked-ta4922-expands-phishing.html": "China-Linked TA4922 Expands Phishing Attacks to U.K., Germany, Italy, and South Africa", "https://thehackernews.com/2026/06/cisco-patches-cve-2026-20230-in-unified.html": "Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public", "https://thehackernews.com/2026/06/fake-sites-mimicking-open-source-tools.html": "Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS", "https://sensepost.com/blog/2026/mobile-device-interception-with-mikrotik/": "Mobile device interception with MikroTik", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526217&idx=2&sn=c37bf440448f6e7dd008eef5ab1c1ac5": "五个 OpenClaw 0day 可导致攻击者劫持可信 AI 代理访问权限", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526217&idx=1&sn=2d18f49cad2a86d32715224cece54a62": "宏碁:注意 Wave 7 路由器中的这两个CVSS满分 0day", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506117&idx=1&sn=08b47237c20e3f91d6d564ab4fd72abe": "【已复现】HTTP/2 Bomb 远程拒绝服务漏洞(CVE-2026-49975)安全风险通告", "http://0.0.0.0:8080/post/64299": "谷歌修复一款在野利用安卓高危漏洞,数百万设备受影响", "https://mp.weixin.qq.com/s?__biz=MzI3Njk2OTIzOQ==&mid=2247487527&idx=1&sn=351a7bfefe1aff7f4850140f97cdc824": "【AI复盘】Palo Alto防火墙漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzU5MTExMjYwMA==&mid=2247485849&idx=1&sn=50102137f1e718e45c486234e51725be": "KKfileview<4.4.0-beta 目录穿越漏洞无损测试Poc", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458616188&idx=2&sn=6d008b0a8f911bf5e3753c2e5d358ea5": "双满分10.0漏洞暴击!宏碁路由器紧急升级:黑客可远程接管,用户请速打补丁", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499527&idx=1&sn=d9236dd2f4efe441b0b0b6539038b18f": "有些漏洞不需要技巧,只需要开发相信用户", "https://horizon3.ai/attack-research/vulnerabilities/cve-2026-0257/": "CVE-2026-0257 | Palo Alto Networks PAN-OS GlobalProtect Authentication Bypass Vulnerability | Active Exploitation", "https://www.ictsecuritymagazine.com/notizie/cisco-sd-wan-zero-day/": "Cisco SD-WAN zero-day: sfruttata senza patch la CVE-2026-20245, root sul Manager", "https://www.bleepingcomputer.com/news/security/cisa-hackers-now-exploit-solarwinds-serv-u-flaw-to-crash-servers/": "CISA: Hackers now exploit SolarWinds Serv-U flaw to crash servers", "https://thecyberexpress.com/china-verdantbamboo-18-month-campaign/": "China’s VerdantBamboo Experimented With Three Re-Entries and Three Malware in a Company Network", "https://www.bleepingcomputer.com/news/security/new-cisco-sd-wan-flaw-exploited-in-zero-day-attacks-to-gain-root/": "Cisco warns of unpatched SD-WAN zero-day exploited in attacks", "https://flashpoint.io/blog/connecting-vulnerability-intelligence-to-real-world-exposure-with-flashpoint-easm/": "Connecting Vulnerability Intelligence to Real-World Exposure With Flashpoint EASM", "https://www.bleepingcomputer.com/news/security/over-900-us-gas-station-tank-gauge-systems-exposed-to-attacks/": "Over 900 US gas station tank gauge systems exposed to attacks", "https://thecyberexpress.com/tce-weekly-roundup-extortion-android-cloud/": "The Cyber Express Weekly Roundup: Cloud Extortion, Long-Term Espionage, Android Zero-Days, and Public Sector Security Reviews", "https://securityaffairs.com/193189/cyber-crime/pcpjack-exposed-researchers-uncover-230-node-cloud-email-relay-network.html": "PCPJack Exposed: Researchers Uncover 230-Node Cloud Email Relay Network", "http://sites.libsyn.com/18678/local-ai-salesforce-fluttershell-aspose-http2-cisco-used-tech-josh-marpet-swn-587": "Local AI, Salesforce, Fluttershell, Aspose, http/2, Cisco, Used Tech, Josh Marpet - SWN #587", "https://blog.silentsignal.eu/2026/06/05/unauthenticated-rce-as-qsecofr-via-ibm-i-management-central/": "Unauthenticated RCE as QSECOFR via IBM i Management Central", "https://thehackernews.com/2026/06/hackers-exploit-critical-everest-forms.html": "Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites", "https://bishopfox.com/blog/popping-root-on-unifi-os-server-unauthenticated-rce-chain-detection-analysis": "Popping Root on UniFi OS Server: Unauthenticated RCE Chain Detection & Analysis", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526228&idx=2&sn=cbc3a57a98b3117c33dc6847aa4c4e14": "思科:Unified CM 严重漏洞的 PoC 已发布", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526228&idx=1&sn=aa8606b21d2d15f6de0e55d784eef216": "思科:注意无补丁但已遭利用的 SD-WAN 高危 0day", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247496271&idx=1&sn=a630bd22ae3422d027df864aca82d7a9": "共建开源生态安全!ByteSRC开源项目漏洞专测开启", "http://0.0.0.0:8080/post/64305": "Gamaredon 利用 WinRAR 漏洞对乌克兰目标发起模块化间谍攻击", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495446&idx=1&sn=67b20253fbab14532ca67ee8a4b1d468": "漏洞实际价值“大众点评”,微信社群与小程序同步上线", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458616264&idx=4&sn=1c6504123c6124e74d59f043a6aa73fe": "2026夏季班火热报名 | 系统0day安全-IOT设备漏洞挖掘(第6期)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458616264&idx=3&sn=f4c250c9a1b1dd408dd66d17b01787e6": "点个链接就能偷光你的GitHub仓库,VS Code零日漏洞遭研究员直接公开", "https://blog.nsfocus.net/ai%e6%94%bb%e9%98%b2%e8%a7%86%e7%95%8c%ef%bc%9a%e4%bb%8emythos%e7%a0%b4%e5%b1%80%e7%9c%8b%e6%bc%8f%e6%b4%9e%e6%8c%96%e6%8e%98%e7%9a%84%e5%b7%a5%e7%a8%8b%e5%8c%96%e8%b7%83%e8%bf%81/": "AI攻防视界:从Mythos破局看漏洞挖掘的工程化跃迁", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247510812&idx=1&sn=1d4dfd70fd94c720aa66f487118d224d": "关于提交AI生成漏洞报告的行为规范及违规处置通告", "https://cxsecurity.com/issue/WLB-2026060004": "ZTE H298A / H108N Unauthenticated Credential Exposure", "https://www.bleepingcomputer.com/news/security/critical-everest-forms-pro-flaw-exploited-to-take-over-wordpress-sites/": "Critical Everest Forms Pro flaw exploited to take over WordPress sites", "https://securityaffairs.com/193245/security/u-s-cisa-adds-solarwinds-serv-u-flaw-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds SolarWinds Serv-U flaw to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2026/06/cisa-adds-actively-exploited-solarwinds.html": "CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog", "https://thehackernews.com/2026/06/cisco-catalyst-sd-wan-manager-cve-2026.html": "Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077286&idx=3&sn=b58b232de63d38cb40d22f5c07af49d6": "【安全圈】AI Agent 发现 FFmpeg 21 个 0Day 漏洞;Chrome 创纪录修复 429 处缺陷", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077286&idx=1&sn=aab9a53a638861367f5b5bec17bc689a": "【安全圈】谷歌 Gemini 语音助理曝漏洞,黑客利用通知信息为 AI “下毒”", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497001&idx=2&sn=828ccb1c060def926082f4d32dbd9937": "上周关注度较高的产品安全漏洞(20260601-20260607)", "https://blog.exodusintel.com/2026/06/08/off-by-exploiting-a-use-after-free-in-the-linux-kernel/": "Off By !: Exploiting a Use-after-Free in the Linux Kernel", "https://www.cybersecurity360.it/news/cyber-attacco-allecommerce-di-eataly-ecco-i-dati-a-rischio-e-come-proteggersi/": "Cyber attacco all’eCommerce di Eataly: ecco i dati a rischio e come proteggersi", "https://isc.sans.edu/diary/rss/33058": "ISC Stormcast For Monday, June 8th, 2026 https://isc.sans.edu/podcastdetail/9962, (Mon, Jun 8th)", "https://securityaffairs.com/193307/ai/meta-ai-recovery-tool-flaw-exposed-20000-instagram-accounts.html": "Meta AI Recovery Tool Flaw Exposed 20,000+ Instagram Accounts", "https://taosecurity.blogspot.com/2026/06/bill-to-create-independent-us-cyber.html": "Bill to Create Independent US Cyber Force Wants to Place It Under the US Army", "https://thehackernews.com/2026/06/critical-check-point-vpn-flaw-exploited.html": "Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups", "https://thehackernews.com/2026/06/one-character-linux-kernel-flaw-enables.html": "One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664263332&idx=1&sn=77303f15aa352379a96f8227e6e296e3": "CNNVD | 重要安全漏洞通报(2026年第三期)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526239&idx=1&sn=b82af1b66a48bb2e151a8dbfe889d0b8": "CISA:SolarWinds Serv-U 高危漏洞已遭利用", "http://0.0.0.0:8080/post/64310": "关键 Everest Forms Pro 漏洞被利用,可接管 WordPress 网站", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486767&idx=1&sn=0a2e19fb822c3ea77423c1e284e9d6f6": "Agentic AI赋能的 ARM Metis 系统,推动软件安全漏洞检测技术升级", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525873&idx=1&sn=68c4717d3f89c67bcc8a51edeee798c6": "【漏洞通告】Apache Solr 硬编码凭据漏洞(CVE-2026-44825)", "https://www.malwarebytes.com/blog/bugs/2026/06/update-chrome-google-patches-actively-exploited-vulnerability-and-73-others": "Update Chrome: Google patches actively exploited vulnerability and 73 others", "https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-check-point-flaw-exploited-by-ransomware-gangs/": "CISA gives feds 3 days to patch Check Point VPN bug exploited as zero-day", "https://www.bleepingcomputer.com/news/security/google-patches-fifth-chrome-zero-day-bug-exploited-in-attacks-this-year/": "Google patches new Chrome zero-day flaw exploited in the wild", "https://www.bleepingcomputer.com/news/security/new-veeam-vulnerability-exposes-backup-servers-to-rce-attacks/": "New Veeam vulnerability exposes backup servers to RCE attacks", "https://www.bleepingcomputer.com/news/security/sap-fixes-critical-flaws-in-netweaver-and-commerce-cloud/": "SAP fixes critical flaws in NetWeaver and Commerce Cloud", "https://www.bleepingcomputer.com/news/security/servicenow-discloses-security-incident-exposing-customer-data/": "ServiceNow discloses security incident exposing customer data", "https://securityaffairs.com/193352/hacking/cve-2026-23111-linux-nf_tables-flaw-enables-root-exploits.html": "CVE-2026-23111: Linux nf_tables Flaw Enables Root Exploits", "https://securityaffairs.com/193385/uncategorized/critical-veeam-rce-flaw-lets-low-privilege-users-take-over-backup-servers.html": "Critical Veeam RCE Flaw Lets Low-Privilege Users Take Over Backup Servers", "https://securityaffairs.com/193371/hacking/google-fixes-fifth-actively-exploited-chrome-zero-day-of-2026.html": "Google fixes the fifth actively exploited Chrome zero-day of 2026", "https://securityaffairs.com/193343/security/u-s-cisa-adds-berriai-litellm-and-check-point-security-gateway-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds BerriAI LiteLLM and Check Point Security Gateway flaws to its Known Exploited Vulnerabilities catalog", "https://www.tenable.com/blog/microsofts-june-2026-patch-tuesday-addresses-198-cves-cve-2026-49160-cve-2026-50507": "Microsoft’s June 2026 Patch Tuesday Addresses 198 CVEs ( CVE-2026-49160, CVE-2026-50507)", "https://thehackernews.com/2026/06/chrome-v8-zero-day-cve-2026-11645.html": "Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild - Patch Now", "https://thehackernews.com/2026/06/litellm-flaw-cve-2026-42271-exploited.html": "LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE", "https://thehackernews.com/2026/06/veeam-backup-replication-rce-flaw-lets.html": "Veeam Backup & Replication RCE Flaw Lets Domain Users Run Remote Code", "https://thehackernews.com/2026/06/winrar-flaw-exploited-by-russia-aligned.html": "WinRAR Flaw Exploited by Russia-Aligned Groups to Deploy Stealers in Ukraine", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497729&idx=1&sn=fc16ade24a0b3a04dab1b977331f0497": "5月必修漏洞清单:Dirty Frag、ChromaToast等8大高危,务必速查", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526245&idx=1&sn=942ddc523d8dc55a98e7c1dd469ec6c9": "一个字符引起的 Linux Kernel 漏洞可导致本地 root 访问", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526245&idx=2&sn=68e8292c0af96d6449b41e76e900ebba": "谷歌紧急修复今年以来的第5个 Chrome 0day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506174&idx=1&sn=651a9f3d7f013ffce2a192909c3c6cc6": "【在野利用】Google Chrome V8 越界读写漏洞(CVE-2026-11645)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247519053&idx=1&sn=7ff9f3cb3a7f056e23b11ec73b99c628": "Qilin勒索软件利用Check Point VPN 0day漏洞(CVE-2026-50751)武器化攻击:跨厂商VPN已成突破口", "http://0.0.0.0:8080/post/64317": "Gogs 修复导致远程代码执行的严重零日漏洞", "http://0.0.0.0:8080/post/64316": "Google 修复 2026 年第 5 个已遭利用的 Chrome 零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3Njk2OTIzOQ==&mid=2247487578&idx=1&sn=0bade105cbef9238dc73108a076b85e2": "【AI复盘】AI Agent发现FFmpeg 21个0day", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525890&idx=1&sn=d975402cc61c1dc6621effdc2840e123": "【漏洞通告】Google Chrome V8 越界读写漏洞(CVE-2026-11645)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458616400&idx=1&sn=11eb9317495fc02fe2d1a4d60fb692db": "从POC到EXP:从0基础到v8 CVE-2021-38003复现", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458616400&idx=3&sn=b4e838270729d81162080e1f5192743e": "单字符Linux内核漏洞:普通用户直取宿主root,攻击代码已疯传", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503835&idx=1&sn=25ee46b4e8794894bdecda4830fc2865": "雷神众测漏洞周报2026.6.02-2024.6.07", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247586157&idx=1&sn=0e8eaaa3381969e2c8c8bd7c5de06e31": "独家!360漏洞挖掘智能体发现Flowise平台13个0day漏洞", "https://www.ictsecuritymagazine.com/notizie/vulnerabilita-veeam-backup-cve-2026-44963-rce/": "Vulnerabilità Veeam Backup: una RCE critica espone l’ultima linea anti-ransomware", "https://www.bleepingcomputer.com/news/security/china-linked-jdy-botnet-expands-targeting-of-us-military-networks/": "China-linked JDY botnet expands targeting of U.S. military networks", "https://www.bleepingcomputer.com/news/microsoft/microsoft-patches-exchange-server-zero-day-exploited-in-attacks/": "Microsoft patches Exchange Server zero-day exploited in attacks", "https://www.bleepingcomputer.com/news/security/path-traversal-flaw-in-ai-dev-platform-langflow-exploited-in-attacks/": "Path traversal flaw in AI dev platform Langflow exploited in attacks", "https://www.bleepingcomputer.com/news/security/the-miasma-worm-source-code-briefly-leaked-on-github/": "The ‘Miasma’ worm source code briefly leaked on GitHub", "https://securityaffairs.com/193436/security/chaotic-eclipse-unveils-rogueplanet-exploit-targeting-fully-patched-windows.html": "Chaotic Eclipse Unveils RoguePlanet Exploit Targeting Fully Patched Windows", "https://securityaffairs.com/193476/apt/russian-apts-still-exploiting-patched-winrar-flaw-cve-2025-8088.html": "Russian APTs Still Exploiting Patched WinRAR Flaw CVE-2025-8088", "https://securityaffairs.com/193464/security/u-s-cisa-adds-cisco-catalyst-sd-wan-arista-extensible-operating-system-eos-and-google-chromium-v8-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Cisco Catalyst SD-WAN, Arista Extensible Operating System (EOS), and Google Chromium V8 flaws to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2026/06/cisa-adds-cisco-chrome-and-arista-flaws.html": "CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation", "https://thehackernews.com/2026/06/china-linked-jdy-botnet-expands-to-1500.html": "China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance", "https://thehackernews.com/2026/06/microsoft-patches-record-206-flaws.html": "Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs", "https://thehackernews.com/2026/06/servicenow-flaw-exploited-to-gain.html": "ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances", "https://thehackernews.com/2026/06/six-proto6-vulnerabilities-in.html": "Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS", "https://thehackernews.com/2026/06/unpatched-langflow-flaw-cve-2026-5027.html": "Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE", "https://thehackernews.com/2026/06/your-automated-pentest-looks-clean-see.html": "Your Automated Pentest Looks Clean. See What It Missed in This Expert Webinar", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664263429&idx=2&sn=25d527a40d4c123d239cdf2876d16b92": "CNNVD | 关于Google Chrome安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497730&idx=1&sn=e2ebde5c4e706cd621031db1a3b7d792": "应用AI对ActiveMQ补丁深度审计后,又挖出两个新高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526255&idx=2&sn=e65c7331cf40704380d18555dad266f7": "Veeam 新漏洞导致Backup 服务器易受 RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506194&idx=1&sn=c32f37ae2f3ba862b46c3a5db2c72946": "微软6月补丁日多个产品安全漏洞风险通告:35个紧急漏洞、11个重要漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077328&idx=2&sn=7249ec24c28a5c743bdaa486b737ba93": "【安全圈】Instagram 再曝严重安全漏洞:扎克伯格、姆巴佩等身份信息泄露", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247534485&idx=1&sn=2eb977e6e73afacbf1fc0dfad6ff8d1a": "2026-06微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzU3MTY5MzQxMA==&mid=2247485242&idx=1&sn=f04c9172f016a16174e7b9f6cca6c4b1": "横跨近半年的高通8Gen5漏洞利用时间线", "https://infosecwriteups.com/ai-security-explanation-to-exploitation-part-1-4e63637f7fd1?source=rss----7b722bfd1b8d---4": "AI Security: explanation to Exploitation || Part 1", "https://horizon3.ai/attack-research/vulnerabilities/cve-2026-10520/": "CVE-2026-10520 | Ivanti Sentry Pre-Authenticated OS Command Injection Vulnerability |", "https://www.bleepingcomputer.com/news/security/cisa-tells-govt-agencies-to-patch-critical-exploited-flaws-in-3-days/": "CISA tells govt agencies to patch critical exploited flaws in 3 days", "https://therecord.media/cyber-force-not-included-senate-defense-roadmap": "Cyber Force not included in Senate defense policy roadmap", "https://thecyberexpress.com/mackay-sugar-security-incident/": "Mackay Sugar Security Incident Forces Mill Shutdowns and Halts Harvesting Operations", "https://www.bleepingcomputer.com/news/security/max-severity-ivanti-sentry-vulnerability-now-exploited-in-attacks/": "Max severity Ivanti Sentry vulnerability now exploited in attacks", "https://www.bleepingcomputer.com/news/security/oracle-mitigates-peoplesoft-zero-day-exploited-in-data-theft-attacks/": "Oracle mitigates PeopleSoft zero-day exploited in data theft attacks", "https://thecyberexpress.com/servicenow-flaw-exploited/": "ServiceNow Flaw Exploited by Threat Actors to Access Customer Instances", "https://www.bleepingcomputer.com/news/security/why-ai-driven-threats-are-exposing-the-limits-of-msp-security-stacks/": "Why AI-driven threats are exposing the limits of MSP security stacks", "https://securityaffairs.com/193530/uncategorized/cve-2026-10520-exploited-ivanti-sentry-gateways-compromised-shortly-after-patch-release.html": "CVE-2026-10520 Exploited: Ivanti Sentry Gateways Compromised Shortly After Patch Release", "https://thehackernews.com/2026/06/new-greatxml-exploit-bypasses-windows.html": "New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files", "https://thehackernews.com/2026/06/shinyhunters-exploits-oracle-peoplesoft.html": "ShinyHunters Exploits Oracle PeopleSoft Zero-Day (CVE-2026-35273) to Breach Universities", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526263&idx=1&sn=44d7301902f8d562003d4f81fc2efe9a": "FortiSandbox 严重漏洞可导致未授权命令执行", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247519069&idx=1&sn=e0d7cce4fcd7ab8676edbc5239a49eba": "致命组合拳:Ivanti Sentry 两个10分漏洞允许未认证拿下企业移动网关", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247516074&idx=2&sn=8fe23bce8d014d54f736c5c1954547be": "补丁空窗期告急:Anthropic公司称N日漏洞利用已进入“小时级”时代", "http://0.0.0.0:8080/post/64328": "AI 开发平台 Langflow 的路径遍历漏洞遭攻击利用", "http://0.0.0.0:8080/post/64327": "Ivanti、Fortinet 和 SAP 发布多个严重漏洞补丁", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649790051&idx=1&sn=52cfd439a009d5ae32e098a4bd6706b0": "Mythos可数小时内把漏洞变成武器:Anthropic还是未开放使用", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141646&idx=1&sn=6cfa7756ee3d6bacf47feae9aac9b93b": "Mythos 对阵 360 智能体:全球 AI 漏洞挖掘分化成两大技术路线", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458616508&idx=3&sn=1c6e6cc9bc4381299603e714a30459c4": "Ivanti Sentry漏洞已遭大规模在野利用,暴露网关极可能已失陷", "https://www.eff.org/deeplinks/2026/06/victory-702-has-expired": "Victory! 702 has Expired!", "https://horizon3.ai/intelligence/blogs/ai-exploit-speed-scale/": "AI-Powered Exploit Generation: Speed, Scale & Cyber Risk", "https://horizon3.ai/attack-research/vulnerabilities/cve-2026-35273/": "CVE-2026-35273 | Oracle PeopleSoft PeopleTools Unauthenticated Remote Code Execution Vulnerability | Active Exploitation", "https://horizon3.ai/attack-research/disclosures/cve-2026-48558-simplehelp-authentication-bypass-iocs/": "CVE-2026-48558: SimpleHelp Authentication Bypass Indicators of Compromise", "https://cyble.com/blog/borrowed-trust-cloud-dns-takeover-thai-gambling-seo-poisoning/": "Borrowed Trust – Systematic Exploitation of Abandoned Cloud DNS Delegations to serve Thai Gambling SEO Content", "https://www.bleepingcomputer.com/news/security/cisa-gives-feds-3-days-to-patch-ivanti-flaw-exploited-in-attacks/": "CISA orders feds to patch actively exploited Ivanti flaw by Sunday", "https://thecyberexpress.com/tce-weekly-roundup-cybersecurity-ai/": "The Cyber Express Weekly Roundup: AI Security Controls, Major Patch Releases, Public Sector Audits, and Emerging Online Scams", "https://securityaffairs.com/193543/cyber-crime/oracle-peoplesoft-rce-flaw-used-as-zero-day-in-ongoing-shinyhunters-campaign.html": "Oracle PeopleSoft RCE Flaw Used as Zero-Day in Ongoing ShinyHunters Campaign", "https://securityaffairs.com/193557/security/u-s-cisa-adds-ivanti-sentry-flaw-to-its-known-exploited-vulnerabilities-catalog-and-urges-patching-by-june-14.html": "U.S. CISA adds Ivanti Sentry flaw to its Known Exploited Vulnerabilities catalog and urges patching by June 14", "https://thehackernews.com/2026/06/langgraph-flaw-chain-exposes-self.html": "LangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code Execution", "https://trustedsec.com/blog/js-tap-v3-endpoint-post-exploitation-with-javascript-implants": "JS-Tap v3: Endpoint Post-Exploitation With JavaScript Implants", "https://www.bellingcat.com/news/2026/06/12/shadow-fleet-russian-grain-stolen-ukraine-libya-ais-technique-grumant/": "Heading Off: New Technique Helps Track Grain Smuggling Expansion to Libya", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526269&idx=2&sn=0d7a31b3a12799330b0f67e3123dcd7c": "Langflow 高危漏洞被用于未认证RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077359&idx=2&sn=f04ad531a707f7abdfca50819c7a8acb": "【安全圈】甲骨文确认 PeopleSoft 漏洞被利用 已影响百余家机构", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077359&idx=1&sn=35ee41cc4c3b1e7fec01cf1954699743": "【安全圈】紧急提醒!WinRAR漏洞仍未绝迹:大量用户已中招 立即检查更新", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141657&idx=2&sn=28eccd56beafa8f8a7d67ea5f1a04f52": "中央网信办发布关于30款App个人信息收集使用问题的通报;CNNVD关于微软多个安全漏洞的通报| 牛览", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247534519&idx=2&sn=ab11387ca6aa5982cb4128f334e8c1d4": "【火绒安全周报】国家安全部发文/Instagram再曝严重安全漏洞", "https://blog.nsfocus.net/%e5%be%ae%e8%bd%af6%e6%9c%88%e5%ae%89%e5%85%a8%e6%9b%b4%e6%96%b0%e5%a4%9a%e4%b8%aa%e4%ba%a7%e5%93%81%e9%ab%98%e5%8d%b1%e6%bc%8f%e6%b4%9e%e9%80%9a%e5%91%8a/": "微软6月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499557&idx=1&sn=0d29b1a40e6c5aa235df0aba816c5ce9": "让AI直接操作Burp做漏洞分析", "https://horizon3.ai/intelligence/blogs/ai-accelerated-exploitation-mythos-era-threat-model/": "AI-Accelerated Exploitation: The Mythos-Era Threat Model", "https://www.ictsecuritymagazine.com/notizie/export-control-usa-anthropic-mythos-fable/": "Gli USA mettono sotto export control Mythos 5 e Fable 5: Anthropic costretta a spegnere i due modelli nel mondo", "https://securityaffairs.com/193574/security/u-s-cisa-adds-oracle-peoplesoft-enterprise-peopletools-flaw-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Oracle PeopleSoft Enterprise PeopleTools flaw to its Known Exploited Vulnerabilities catalog", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247486070&idx=1&sn=19fa6e9e77fb50bacab27bfebfcf1d9a": "Anthropic Mythos——当AI能发现所有漏洞,谁来发现AI的漏洞?", "https://www.freebuf.com/articles/system/486038.html": "Wazuh CVSS 10 分漏洞细节与PoC公开", "https://www.freebuf.com/articles/485981.html": "以防大家不知道,Anthropic开源了自己的漏洞挖掘Harness", "https://www.freebuf.com/articles/endpoint/486039.html": "俄罗斯相关攻击者持续利用WinRAR漏洞攻击乌克兰目标", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077404&idx=2&sn=ddcbe0d234be3bd9a05f91b647416052": "【安全圈】严重漏洞:UniFi OS 无需密码即可拿下 Root 权限", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497017&idx=1&sn=8020ac3e84ac35d4e81f23db98d031e4": "CNVD漏洞周报2026年第23期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497017&idx=2&sn=00137171d6c664cded0154995a3b132c": "上周关注度较高的产品安全漏洞(20260608-20260614)", "https://www.bitdefender.com/en-us/blog/hotforsecurity/maine-take-down-data-breach-portal": "Maine forced to take down data breach portal after fake notices filed with authorities", "https://horizon3.ai/attack-research/vulnerabilities/cve-2026-48558/": "CVE-2026-48558 | SimpleHelp OIDC Authentication Bypass Vulnerability", "https://www.netspi.com/blog/executive-blog/critical-vulnerability/cve-2026-20253-splunk-enterprise-overview-and-takeaways/": "Splunk Enterprise Unauthenticated Arbitrary File Operations/RCE (CVE-2026-20253): Overview and Takeaways", "https://therecord.media/anthropic-says-gov-forced-it-to-disable-cyber-ai-models": "Anthropic says US government forced it to disable cybersecurity AI models", "https://www.bleepingcomputer.com/news/security/cisco-fixes-sd-wan-vmanage-flaw-exploited-in-zero-day-attacks/": "Cisco fixes SD-WAN vManage flaw exploited in zero-day attacks", "https://isc.sans.edu/diary/rss/33076": "ISC Stormcast For Monday, June 15th, 2026 https://isc.sans.edu/podcastdetail/9972, (Mon, Jun 15th)", "https://securityaffairs.com/193638/security/palo-alto-warns-of-exploitation-of-vpn-bypass-exploits-cve-2026-0257-in-pan-os-flaw.html": "Palo Alto Warns of Exploitation of VPN Bypass Exploits (CVE-2026-0257) in PAN-OS Flaw", "https://thehackernews.com/2026/06/palo-alto-warns-of-active-exploitation.html": "Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw", "https://thehackernews.com/2026/06/weekly-recap-chrome-0-day-unifi.html": "⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526272&idx=1&sn=f79160dd0916a71743130bac5538397f": "phpBB 论坛软件修复已存在10年的认证绕过漏洞", "https://blog.nsfocus.net/%e3%80%90%e6%bc%8f%e6%b4%9e%e9%80%9a%e5%91%8a%e3%80%91nginx%e8%bf%9c%e7%a8%8b%e4%bb%a3%e7%a0%81%e6%89%a7%e8%a1%8c%e6%bc%8f%e6%b4%9e%ef%bc%88cve-2026-42945%ef%bc%89-2/": "【漏洞通告】Nginx远程代码执行漏洞(CVE-2026-42945)", "https://mp.weixin.qq.com/s?__biz=MzIzODQxMjM2NQ==&mid=2247501857&idx=1&sn=3821c8f3284a6f293249c764f1382423": "战报:从海量告警到精准漏洞 雳鉴SAST AI落地实践", "https://horizon3.ai/attack-research/vulnerabilities/cve-2026-20253/": "CVE-2026-20253 | Splunk Enterprise PostgreSQL Sidecar Service Arbitrary File Write Vulnerability", "https://horizon3.ai/attack-research/vulnerabilities/cve-2026-50751/": "CVE-2026-50751 | Check Point Security Gateway Improper Authentication Vulnerability", "https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247495213&idx=1&sn=4a0140b546ecff9e02b2dd640a9a8dc8": "从“权重封锁”到“Harness突围”:Mythos/Fable 5事件与国产漏洞挖掘智能体的自主实践", "https://www.bleepingcomputer.com/news/security/cisa-warns-of-another-actively-exploited-cpanel-plugin-flaw/": "CISA warns of another cPanel plugin flaw exploited in attacks", "https://www.bleepingcomputer.com/news/security/critical-fortinet-fortisandbox-flaws-now-exploited-in-attacks/": "Critical Fortinet FortiSandbox flaws now exploited in attacks", "https://thecyberexpress.com/searchleak-vulnerability-microsoft-365-copilot/": "Critical SearchLeak Flaw in Microsoft 365 Copilot Exposed Sensitive Enterprise Data", "https://securityaffairs.com/193693/security/cve-2026-20262-cisco-catalyst-sd-wan-flaw-under-active-targeted-exploitation.html": "CVE-2026-20262: CISCO Catalyst SD-WAN Flaw Under Active Targeted Exploitation", "https://securityaffairs.com/193684/security/u-s-cisa-adds-cisco-catalyst-and-litespeed-cpanel-plugin-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Cisco Catalyst and LiteSpeed cPanel plugin flaws to its Known Exploited Vulnerabilities catalog", "https://www.tenable.com/blog/ctem-exposure-management-validation": "Improving precision in CTEM: How continuous controls validation in Tenable One transforms exposure management", "https://thehackernews.com/2026/06/attackers-exploit-three-fortinet.html": "Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week", "https://thehackernews.com/2026/06/cisa-flags-litespeed-cpanel-plugin-flaw.html": "CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation", "https://thehackernews.com/2026/06/china-linked-sprysocks-backdoor-expands.html": "China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth", "https://thehackernews.com/2026/06/cisco-releases-security-updates-for.html": "Cisco Releases Security Updates for Actively Exploited SD-WAN Manager Flaw", "https://thehackernews.com/2026/06/clickfix-campaigns-expand-malware.html": "ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures", "https://bishopfox.com/blog/a-crash-not-a-shell-solarwinds-serev-u-cve-2026-28318": "A Crash, Not a Shell: SolarWinds Serve-U CVE-2026-28318", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526306&idx=1&sn=276b8774c724ae48ddfa09529366c4cd": "思科修复已遭利用的 SD-WAN vManage 漏洞", "https://xz.aliyun.com/news/92319": "内核漏洞深度剖析:从最新案例到 AI辅助的0day发现之路", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247486091&idx=1&sn=d08735fda7dc1abf2d9ebf90889af3b5": "Apache 近期热点漏洞分析报告(一文带你了解Apache近期所有高危漏洞)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506286&idx=1&sn=21b031051ce202a9df71b97127810281": "【已复现】Splunk Enterprise 未授权文件操作漏洞(CVE-2026-20253)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247519104&idx=1&sn=52df3a70d32c3b6abe3418a28ad8b110": "AI网关LiteLLM遭漏洞链攻击,默认账户致全面接管风险", "https://www.solidot.org/story?sid=84594": "curl 暂停一个月接受漏洞报告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077442&idx=2&sn=965601119a78e94e14f6075057cb5093": "【安全圈】开源论坛软件 phpBB 曝身份认证绕过漏洞,官方发布 3.3.17 版本更新修复", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141700&idx=2&sn=59d1b6ec6c1f2072d85cb8927dd2aa6e": "AI裁员潮引发连锁风险,科技行业或步入“火药桶”阶段;CNVD 第 23 期漏洞周报:高危漏洞占比过半 多款主流产品现严重漏洞| 牛览", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247543275&idx=2&sn=55d6aeb72fa7438b6e7cb5c54bca76b0": "漏洞管理的分水岭 | 全球第一个国家级漏洞优先级强制指令BOD26-04", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458616639&idx=4&sn=426f18975dd6414f064b195391cbdccb": "6/17直播预约 | 手把手教你搭建IoT漏洞挖掘智能体", "https://www.ictsecuritymagazine.com/notizie/fortisandbox-tre-falle-critiche-exploit-ai/": "FortiSandbox sotto attacco: tre falle critiche sfruttate e un exploit che sembra generato dall’AI", "https://www.malwarebytes.com/blog/news/2026/06/24-billion-stolen-records-found-in-giant-data-dump-check-if-youre-affected": "24 billion stolen records exposed online. Here’s what to do", "https://www.praetorian.com/blog/ai-vulnerability-research-freebsd-kernel/": "FreeBSoD: Leveraging Language Models to Find and Exploit Kernel Bugs (Part 1 of 2)", "https://www.bleepingcomputer.com/news/security/fortibleed-leak-exposes-fortinet-vpn-credentials-for-73-000-devices/": "FortiBleed leak exposes Fortinet VPN credentials for 73,000 devices.", "https://www.hudsonrock.com/blog/fortibleed-75000-fortinet-firewalls-compromised-global-enterprises-exposed-claim-your-ethical-disclosure": "FortiBleed: 75,000 Fortinet Firewalls Compromised: Global Enterprises Exposed – Claim Your Ethical Disclosure | Hudson Rock", "https://therecord.media/github-dismissed-reports-shai-hulud-deep-specter": "GitHub dismissed security reports on flaws now exploited by supply-chain worm, researchers say", "https://thecyberexpress.com/novo-nordisk-it-security-incident/": "Novo Nordisk IT Security Incident Exposes Limited Patient and HCP Data", "https://blog.bushidotoken.net/2026/06/uk-cybercrime-journal-sustained.html": "UK Cybercrime Journal: Sustained DragonForce Campaign", "https://securityaffairs.com/193801/security/dragonforce-hid-inside-microsoft-teams-and-nobody-noticed-for-two-months.html": "DragonForce Hid Inside Microsoft Teams and Nobody Noticed for Two Months", "https://securityaffairs.com/193775/hacking/u-s-cisa-adds-widget-factory-joomla-content-editor-jce-flaw-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Widget Factory Joomla Content Editor flaw to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2026/06/adversarial-exposure-validation-turns.html": "Adversarial Exposure Validation Turns Security Visibility into Confident Prioritization", "https://thehackernews.com/2026/06/cisa-warns-of-actively-exploited-joomla.html": "CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution", "https://thehackernews.com/2026/06/the-top-10-attack-surface-exposures-in.html": "The Top 10 Attack Surface Exposures in 2026", "http://0.0.0.0:8080/post/64351": "Google Vertex AI SDK 漏洞允许攻击者通过存储桶抢占劫持模型上传", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077453&idx=1&sn=dcf088b926d0cc3dd13df3ed9b648787": "【安全圈】紧急预警!哪吒监控面板曝 9.1 分高危漏洞,仅需 2 次请求即可免密接管!", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503842&idx=1&sn=dafc4e8c43a6f3bdfac78e41531a6a39": "雷神众测漏洞周报2026.6.08-2026.6.14", "https://mp.weixin.qq.com/s/MrJiLWZVvHsNWK7KrXHOTA": "某大模型 rce 瓜", "https://www.huntress.com/blog/klue-breach-investigation?hnt=pznifbfhot7e": "Cybercrime Breaches Klue: Salesforce Data Impacted for Many Victims, including Huntress | Huntress", "https://www.bleepingcomputer.com/news/security/klue-oauth-breach-linked-to-icarus-salesforce-data-theft-attacks/": "Klue OAuth breach linked to 'Icarus' Salesforce data theft attacks", "https://thecyberexpress.com/cve-2026-50656-rogueplanet-windows-defender/": "Windows Defender Vulnerability Exposed as RoguePlanet PoC Spreads Online", "https://isc.sans.edu/diary/rss/33086": "The Behavior of Coordinated SSH Brute Force Attacks over the last three months [Guest Diary], (Wed, Jun 17th)", "https://securityaffairs.com/193817/hacking/fortibleed-exposes-admin-passwords-for-75000-fortinet-firewalls.html": "FortiBleed Exposes Admin Passwords for 75,000 Fortinet Firewalls", "https://www.tenable.com/blog/oracle-june-2026-critical-security-patch-update-addresses-243-cves-cve-2026-35273": "Oracle June 2026 Critical Security Patch Update Addresses 243 CVEs (CVE-2026-35273)", "https://thehackernews.com/2026/06/dragonforce-hackers-abuse-microsoft.html": "DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic", "https://thehackernews.com/2026/06/f5-patches-two-critical-nginx-open.html": "F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497782&idx=1&sn=26de363234b141e682c1fc30321013a1": "从低权限 Key 到 AI Gateway 接管:LiteLLM 漏洞链完整剖析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526330&idx=1&sn=42e983016d623f7d964bffc4b9b3466e": "CISA 要求联邦机构在本周五前修复Joomla 插件满分漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526330&idx=2&sn=634ff7aee7d1db205f90e279a8c74f64": "Fortra 访问管理器漏洞可导致远程命令注入攻击", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247486107&idx=1&sn=aa97bfadad24a0e9a4cbda697cef52e2": "发新一个寄快递“漏洞”!运费直接省50%", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141720&idx=1&sn=eb04f766392c97e2ef29ef5c95fabd70": "从“零日漏洞”到国家级封禁:Fable 5与Mythos 5下架背后的AI安全权力博弈", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508753&idx=1&sn=b5ee55949e117ad9e73d583f957368c4": "原创漏洞 | NGINX堆缓冲区溢出漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525944&idx=1&sn=0068a85063edf376b9e29d4bdf0baf00": "【漏洞通告】Linux Kernel net/sched act_pedit 权限提升漏洞(CVE-2026-46331)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458616781&idx=2&sn=cdffb0e31362c473f09b0712e981f34c": "无需交互即可提权至SYSTEM!微软承认Defender曝“RoguePlanet”高危零日漏洞", "https://infosecwriteups.com/breaking-down-two-simple-vulnerabilities-that-exposed-a-schools-admission-records-040bd636a7f3?source=rss----7b722bfd1b8d---4": "Breaking Down Two Simple Vulnerabilities That Exposed A School’s Admission Records", "https://www.microsoft.com/en-us/security/blog/2026/06/18/autojack-single-page-rce-host-running-ai-agent/": "AutoJack: How a single page can RCE the host running your AI agent", "https://www.bleepingcomputer.com/news/security/cisa-splunk-enterprise-flaw-actively-exploited-patch-by-sunday/": "CISA: Splunk Enterprise flaw actively exploited, patch by Sunday", "https://thecyberexpress.com/cve-2026-48907-joomla-jce-litespeed-cpanel/": "CVE-2026-48907 and LiteSpeed cPanel Plugin Flaws Come Under Active Attack", "https://techcrunch.com/2026/06/19/encryption-spyware-and-now-mythos-history-shows-why-cyber-export-control-doesnt-work/": "Encryption, spyware, and now Mythos: History shows why cyber export control doesn’t work", "https://www.bleepingcomputer.com/news/security/hackers-exploit-info-disclosure-bug-in-gravity-smtp-wordpress-plugin/": "Hackers exploit info disclosure bug in Gravity SMTP WordPress plugin", "https://www.bleepingcomputer.com/news/security/texas-govt-data-breach-exposes-over-3-million-drivers-licenses/": "Texas govt data breach exposes over 3 million driver’s licenses", "https://thecyberexpress.com/tce-weekly-roundup-global-threats/": "The Cyber Express Weekly Roundup: Cybersecurity Weekly Round on Emerging Threats, Data Breaches, and Global Policy Shifts", "https://securityaffairs.com/193864/security/24-billion-stolen-credentials-exposed-in-massive-data-leak.html": "24 Billion Stolen Credentials Exposed in Massive Data Leak", "https://securityaffairs.com/193888/security/u-s-cisa-adds-splunk-enterprise-flaw-to-its-known-exploited-vulnerabilities-catalog-and-urges-agencies-to-fix-it-by-sunday.html": "U.S. CISA adds Splunk Enterprise flaw to its Known Exploited Vulnerabilities catalog and urges agencies to fix it by Sunday", "https://thehackernews.com/2026/06/salesforce-disables-klue-app.html": "Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data", "https://thehackernews.com/2026/06/unpatchable-usbliter8-exploit-breaks.html": "Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247534616&idx=3&sn=95b13e491c2ed2995691a24359d8b1f7": "【火绒安全周报】世界杯官方赛事系统曝漏洞/新一批重点防范境外恶意网址和恶意IP公布", "https://blog.upx8.com/CVE-2026-53519": "哪吒监控面板高危漏洞(CVE-2026-53519)深度分析与修复指南", "https://securityaffairs.com/193902/hacking/cisa-warns-of-active-exploitation-following-fortibleed-leak.html": "CISA Warns of Active Exploitation Following FortiBleed Leak", "https://securityaffairs.com/193931/hacking/fortibleed-exposes-global-credential-spraying-operation.html": "FortiBleed Exposes Global Credential-Spraying Operation", "https://thehackernews.com/2026/06/hackers-exploit-gravity-smtp-wordpress.html": "Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077497&idx=1&sn=78843c56369db38734d325ad4542c041": "【安全圈】国际足联后台曝高危漏洞 黑客能随意篡改全球世界杯直播", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458616783&idx=1&sn=219d3d357722602c80071a048c05a2b7": "面向复现的逆向工程实践:Hermes 在设备刷写、提权与 Frida 魔改中的自动化能力验证", "https://seclists.org/fulldisclosure/2026/Jun/10": "CVE-2025-68624: Cross-Tenant Authentication Bypass by Spoofing in N-able Mail Assure", "https://seclists.org/fulldisclosure/2026/Jun/16": "SEC Consult SA-20260616-0 :: Broken Access Control in syracom AG Secure Login (2FA) for Atlassian Jira / Confluence / Bitbucket #CVE-2026-12225", "https://blog.backbox.org/2026/06/22/backbox-labs-launches-cybersecurity-company-from-the-open-source-ecosystem/": "BackBox Labs Launches: Cybersecurity Company from the Open Source Ecosystem", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497044&idx=2&sn=9e47bc978f20d00c66818029c9f39bde": "上周关注度较高的产品安全漏洞(20260615-20260621)", "https://payatu.com/blog/bypass-of-bypass-in-mozilla-firefox-cve-2026-8971/": "Bypass of Bypass in Mozilla Firefox – CVE-2026-8971", "https://isc.sans.edu/diary/rss/33092": "ISC Stormcast For Monday, June 22nd, 2026 https://isc.sans.edu/podcastdetail/9980, (Mon, Jun 22nd)", "https://securityaffairs.com/193965/hacking/usbliter8-brings-unpatchable-bootrom-exploit-to-apple-a12-and-a13-devices.html": "usbliter8 Brings Unpatchable BootROM Exploit to Apple A12 and A13 Devices", "https://thehackernews.com/2026/06/researchers-detail-difytap-flaws-in.html": "Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506369&idx=1&sn=f3e34e1a2ecddc21e1dc2066270eb1cd": "【已复现】FreeBSD KTLS 本地权限提升漏洞(CVE-2026-45257)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499586&idx=1&sn=6e282e57f4d714c86ea88b9c2d337840": "$7,000高危漏洞披露", "https://krypt3ia.wordpress.com/2026/06/23/threat-report-ukraine-as-russias-downrange-cyber-warfare-target-and-europes-emerging-exposure/": "Threat Report: Ukraine as Russia’s Downrange Cyber-Warfare Target and Europe’s Emerging Exposure", "https://www.group-ib.com/blog/cybersecurity-priorities-ecommerce/": "10 Cybersecurity Priorities for E-Commerce Teams This Year", "https://www.bleepingcomputer.com/news/security/cisco-unified-cm-sme-flaw-cve-2026-20230-now-exploited-in-attacks/": "Cisco Unified CM flaw CVE-2026-20230 now exploited in attacks", "https://zenox.ai/en/fortibleed-anatomy-of-the-fortibleed-campaign-based-on-the-server-that-the-attackers-themselves-left-exposed/": "Fortibleed: Anatomy of the FortiBleed campaign based on the server that the attackers themselves left exposed.", "https://www.bleepingcomputer.com/news/security/the-exploit-doesnt-exist-you-can-still-prove-it-works-against-you/": "The Exploit Doesn't Exist. You Can Still Prove It Works Against You", "https://isc.sans.edu/diary/rss/33094": "CVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration., (Tue, Jun 23rd)", "https://securityaffairs.com/194090/security/samsung-knox-kernel-uaf-exposes-millions-of-galaxy-devices.html": "Samsung KNOX Kernel UAF Exposes Millions of Galaxy Devices", "https://blog.sucuri.net/2026/06/pci-compliance-isnt-a-checkbox-how-to-secure-ecommerce-checkouts-before-attackers-arrive.html": "PCI Compliance Isn’t a Checkbox: How to Secure Ecommerce Checkouts Before Attackers Arrive", "https://thehackernews.com/2026/06/openai-expands-daybreak-with-gpt-55.html": "OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077535&idx=2&sn=ff2c18d1d3b61c782dd25fb2418b897c": "【安全圈】苹果手机出了个\"绝症漏洞\":修不了、防不住,影响上亿部设备!", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458616819&idx=3&sn=5ef5283583b302e88636f5228fd3b47b": "潜伏29年!Squidbleed 漏洞曝光,明文账号 Cookie 直接泄露", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499590&idx=1&sn=66ec7d040f86ce65103b1c0a5d39a1af": "5000刀的高危burp漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503850&idx=1&sn=c9fd18a3b1fda1ae9a6865401506f92d": "雷神众测漏洞周报2026.6.15-2026.6.21", "https://starlabs.sg/blog/2026/06-old-bug-harder-rules-exploiting-cve-2023-36802-without-the-usual-shortcuts/": "Old Bug, Harder Rules : Exploiting CVE-2023-36802 Without the Usual Shortcuts", "https://infosecwriteups.com/i-wasted-3-days-intercepting-a-flutter-app-heres-what-actually-works-d3e9a4816818?source=rss----7b722bfd1b8d---4": "I Wasted 3 Days Intercepting a Flutter App. Here’s What Actually Works.", "https://horizon3.ai/attack-research/vulnerabilities/cve-2026-20230/": "CVE-2026-20230 | Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability", "https://horizon3.ai/attack-research/vulnerabilities/cve-2026-47729/": "CVE-2026-47729 | Squid Heap Buffer Overread Vulnerability", "https://www.ictsecuritymagazine.com/notizie/cisco-unified-cm-cve-2026-20230-sfruttata/": "Cisco Unified CM: la falla SSRF CVE-2026-20230 è ora sfruttata in rete", "https://www.intigriti.com/researchers/blog/hacking-tools/exploiting-web-cache-poisoning-vulnerabilities": "Exploiting web cache poisoning vulnerabilities", "https://www.bleepingcomputer.com/news/security/cisa-warns-of-max-severity-ubiquiti-flaws-exploited-in-attacks/": "CISA warns of max severity Ubiquiti flaws exploited in attacks", "https://thecyberexpress.com/kddi-data-breach-14-million-email-leak-2026/": "KDDI Data Breach May Have Exposed Up to 14.22 Million Email Accounts", "https://thecyberexpress.com/transport-for-london-cyberattack-plead-guilty/": "TfL Hackers Plead Guilty After Breach Exposed Customer Data and Cost £29 Million", "https://therecord.media/stealc-amadey-socgholish-malware-takedown-europol-microsoft": "Three ‘cybercrime as a service’ operations undercut by Microsoft, law enforcement", "https://securityaffairs.com/194153/uncategorized/cisco-unified-cm-flaw-cve-2026-20230-actively-exploited-in-the-wild.html": "Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild", "https://securityaffairs.com/194142/security/u-s-cisa-adds-ubiquiti-unifi-os-and-lantronix-eds5000-plugin-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Ubiquiti UniFi OS and Lantronix EDS5000 plugin flaws to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2026/06/cisa-warns-critical-lantronix-eds5000.html": "CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited", "https://thehackernews.com/2026/06/cisco-unified-cm-flaw-exploited-after.html": "Cisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to Root", "https://thehackernews.com/2026/06/cordyceps-cicd-flaws-expose-300-github.html": "Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141764&idx=2&sn=20b4d55e40749b12b09f2c6998db979e": "OpenAI升级Daybreak:网络安全重心从漏洞发现转向自动化修复:CNVD 发布上周热门漏洞:命令注入等多款软硬件漏洞需及时修复| 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525956&idx=1&sn=c39c853322d0a417d4b054ed9c794974": "【漏洞通告】Joomla JCE Editor 与 SP Page Builder 文件上传漏洞(CVE-2026-48907/CVE-2026-48908)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458616937&idx=1&sn=dca56c624bc3cea8fc248b38a91b560f": "【重磅上线】系统0day安全——主流企业防火墙漏洞挖掘(覆盖10+厂商、30+高危CVE)", "https://www.hackmageddon.com/2026/06/25/exploited-security-vendor-vulnerabilities-in-2026/": "Exploited Security Vendor Vulnerabilities in 2026", "https://www.malwarebytes.com/blog/scams/2026/06/beware-of-parcel-expert-job-offers-theyre-parcel-mule-scams": "Beware of “Parcel Expert” job offers: They’re parcel mule scams", "https://www.malwarebytes.com/blog/privacy/2026/06/elite-network-says-it-was-hacked-after-members-personal-data-was-left-exposed": "Elite network says it was hacked after members’ personal data was left exposed", "https://www.schneier.com/blog/archives/2026/06/interesting-paper-exploring-prompt-injection.html": "Interesting Paper Exploring Prompt Injection", "https://securityaffairs.com/194200/hacking/cisco-catalyst-sd-wan-zero-day-cve-2026-20245-exploited-months-before-disclosure.html": "Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited Months Before Disclosure", "https://thehackernews.com/2026/06/cisco-catalyst-sd-wan-zero-day-cve-2026.html": "Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264013&idx=1&sn=91f7ac7d6ed54e56493deb1962504059": "周鸿祎ISC宣布打造“中国版Mythos”:已具备同等漏洞自动挖掘能力", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526389&idx=2&sn=a692a0a18f59def9c6fa164c8ac2ccec": "Langflow 严重漏洞可导致未认证远程代码执行后果", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526389&idx=1&sn=142e87f0bc58a8d8877a6e2f4b4127e2": "三星 KNOX 漏洞已存在8年,可导致数百万 Galaxy 设备遭内核攻击", "https://xz.aliyun.com/news/92368": "CVE-2026-42740 漏洞复现:Tainacan REST API 子查询 SQL 注入", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506403&idx=1&sn=e72f2cbcf9ff253a62fd1185c69ab148": "【已复现】Microsoft Exchange Server 服务器端请求伪造漏洞(CVE-2026-45504)安全风险通告", "http://0.0.0.0:8080/post/64385": "DifyTap:四个漏洞使超过 100 万个 AI 应用面临风险", "https://www.ictsecuritymagazine.com/notizie/dirtyclone-cve-2026-43503-lpe-kernel-linux/": "DirtyClone (CVE-2026-43503): una variante residua riapre la falla del kernel Linux e dà root nel multi-tenant", "https://www.bleepingcomputer.com/news/security/cisa-sets-urgent-deadline-to-fix-cisco-flaw-exploited-in-attacks/": "CISA sets urgent deadline to fix Cisco flaw exploited in attacks", "https://thecyberexpress.com/cve-2026-20245-cisco-catalyst/": "CVE-2026-20245 Zero-Day Exploited in Cisco Catalyst SD-WAN Manager to Gain Root Access", "https://thecyberexpress.com/tce-weekly-roundup-five-eyes-ai-kddi-tfl/": "The Cyber Express Weekly Roundup: Five Eyes AI Warning, KDDI Data Breach, Garfield AI Legal Milestone, and Iranian Hacker Arrest", "https://securityaffairs.com/194312/intelligence/chinese-apt-cl-sta-1062-expands-attacks-on-southeast-asian-critical-infrastructure-with-custom-malware.html": "Chinese APT CL-STA-1062 Expands Attacks on Southeast Asian Critical Infrastructure With Custom Malware", "https://securityaffairs.com/194290/security/u-s-cisa-adds-cisco-and-ptc-windchill-and-flexplm-flaws-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds Cisco and PTC Windchill and FlexPLM flaws to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2026/06/cisa-adds-exploited-ptc-windchill-rce.html": "CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue", "https://thehackernews.com/2026/06/new-linux-pedit-cow-exploit-enables.html": "New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506445&idx=1&sn=e0591c581c111418a650ca1f9294b5f8": "安全热点周报:Cisco Unified CM 漏洞补丁发布数周后遭攻击者利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077560&idx=2&sn=974f33634010c57a66f4e6023b1e159f": "【安全圈】思科零日漏洞被潜伏两月", "https://mp.weixin.qq.com/s/1-dTkVPBiySZGYrlcUhUaw": "入门网安必备!6款主流开源漏洞扫描神器", "https://www.intigriti.com/researchers/blog/hacking-tools/exploiting-insecure-cookie-policies": "Exploiting insecure cookie policies", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077571&idx=2&sn=94626f4fbfa16457a6aade2de4dddcbe": "【安全圈】Linux 漏洞 DirtyClone 披露,可提权至 root 最高权限", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247505166&idx=1&sn=bf7a7f8a99ebc0d2ca6e835a1eabd512": "「智弈」AI智能体攻防实战沙龙 · 6.24圆满落幕", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497061&idx=2&sn=7e1c78eda535041347201571da7f530a": "上周关注度较高的产品安全漏洞(20260622-20260628)", "https://www.intigriti.com/blog/business-insights/reconnaissance-for-exposure-management-why-context-matters-in-the-ai-era": "Reconnaissance for exposure management: why context matters in the AI era", "https://isc.sans.edu/diary/rss/33108": "ISC Stormcast For Monday, June 29th, 2026 https://isc.sans.edu/podcastdetail/9986, (Mon, Jun 29th)", "https://thehackernews.com/2026/06/gamaredon-expands-ukraine-attacks-with.html": "Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse", "https://thehackernews.com/2026/06/malicious-perplexity-chrome-extension.html": "Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input", "https://thehackernews.com/2026/06/public-poc-released-for-critical.html": "Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw", "http://0.0.0.0:8080/post/64400": "Amazon Q 漏洞使恶意代码仓库可窃取云凭据", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141792&idx=2&sn=d6e10386465435365422e034e897cd47": "美国恢复Claude Mythos 5部分权限,仅向关键基础设施开放;OpenAI发布GPT-5.6Sol:漏洞分析能力接近MythosPreview | 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247526016&idx=1&sn=a6ec5b9eef9fc1828b48803fed9d4c82": "【漏洞通告】Linux Kernel Dirty Clone 权限提升漏洞(CVE-2026-43503)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617083&idx=3&sn=0e7fd8aa645c5a5735b64692d3b16f01": "SSH客户端库曝高危0day:libssh2 PoC公开,或影响大量基础设施组件", "https://securityaffairs.com/194463/security/attackers-actively-exploit-the-oracle-e-business-suite-flaw-cve-2026-46817.html": "Attackers actively exploit the Oracle E-Business Suite flaw CVE-2026-46817", "https://securityaffairs.com/194503/security/u-s-cisa-adds-simplehelp-flaw-to-its-known-exploited-vulnerabilities-catalog.html": "U.S. CISA adds SimpleHelp flaw to its Known Exploited Vulnerabilities catalog", "https://thehackernews.com/2026/06/attackers-exploit-simplehelp-cve-2026.html": "Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer", "https://thehackernews.com/2026/06/guardfall-exposes-open-source-ai-coding.html": "GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks", "https://thehackernews.com/2026/06/langflow-rce-exploited-to-deploy-monero.html": "Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints", "https://thehackernews.com/2026/06/oracle-e-business-suite-flaw-cve-2026.html": "Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild", "https://www.rtl-sdr.com/openstint-an-open-source-rc-car-lap-timing-system-using-an-rtl-sdr-or-hackrf/": "OpenStint: An Open-Source RC Car Lap Timing System Using an RTL-SDR or HackRF", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141803&idx=2&sn=ad81bc7b8d7fa2cae7211de28c273221": "国安部预警:AR 手游采集 300 亿实景数据,民用地理数据存在军事化泄密风险 ;CNVD2026 第 25 期漏洞周报:零日漏洞占比超八成 | 牛览", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503857&idx=1&sn=48b004c760c0a580f12401aa74a176ea": "雷神众测漏洞周报2026.6.22-2026.6.28", "https://mp.weixin.qq.com/s?__biz=MzkzNjMxNDM0Mg==&mid=2247485450&idx=1&sn=5662a9f2c081fc8521eee651b357323f&chksm=c2a1dc83f5d655957cf2a1c88adf45cd0d028316f536e0a8a18c9e7cb0440869ed4077822ce8&scene=58&subscene=0#rd": "最新CS RCE(CVE-2022-39197)复现心得分享", "https://mp.weixin.qq.com/s?__biz=Mzg3NDU2MTg0Ng==&mid=2247493619&idx=1&sn=830636d5e0d954cd9d03f2431b6e253f&chksm=cecc4faaf9bbc6bceb4b91027c620ce2ba2ed0369c41a4cc7380f5541eee29cad4e1ff4703b2&scene=58&subscene=0#rd": "GoEXP WANTED 3", "https://mp.weixin.qq.com/s?__biz=MzkzNjMxNDM0Mg==&mid=2247485621&idx=1&sn=a1100c88b37dada37eb0222c62cba845&chksm=c2a1dc3cf5d6552ad8e7c906b9843cb2fc7bed904b93bbb8e657fe6debfd03d093614af79aea&scene=58&subscene=0#rd": "Modbus Slave缓冲区溢出漏洞CVE-2022-1068分析与复现", "https://mp.weixin.qq.com/s?__biz=MzkzNjMxNDM0Mg==&mid=2247485644&idx=1&sn=4bfa7d4ec2944dfa8755cc26b0454aa8&chksm=c2a1dc45f5d655534fe3205299ace389b080f51ce5ec3698cf1690c49171024b27cbfba4fa8d&scene=58&subscene=0#rd": "禅道系统权限绕过与命令执行漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzU3NDY1NTYyOQ==&mid=2247485510&idx=1&sn=b27ee7d43c4343f1fa2c98a991a3e0c8&chksm=fd2e55a4ca59dcb238ce700aa2becae0474a6b98f47105153acff55361fbbf19cb51ab3b707a&scene=58&subscene=0#rd": "cve-2023-25947目标变化监测演示", "https://mp.weixin.qq.com/s?__biz=MzU3NDY1NTYyOQ==&mid=2247485516&idx=1&sn=636a9f412d09ae444d7596e304e2e3f0&chksm=fd2e55aeca59dcb8613432ce0402f5eb0d87e795e46bc29bd31127d8ce75255053bd850e4862&scene=58&subscene=0#rd": "漏洞数据分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652031340&idx=1&sn=eb024d9081082b2007a2aafbd3d8e6a0&chksm=f36fe52cc4186c3ac92fd912db0df4ccf5c43e35b3ff420bcdfdf1dc862f075ff7da10dc8cf2&scene=58&subscene=0#rd": "【安全圈】某国产电商 APP 利用 Android 漏洞细节曝光:内嵌提权代码、动态下发 Dex", "https://mp.weixin.qq.com/s?__biz=MzU3NDY1NTYyOQ==&mid=2247485550&idx=1&sn=04f7c2a593890d7f30b1b06b19c9b45b&chksm=fd2e558cca59dc9ad88d34dd87649f81594293ce86e490c17d34b9c3ffe22ff51e260aaf51a9&scene=58&subscene=0#rd": "技术分析_检测和应对向日葵历史漏洞行为", "https://mp.weixin.qq.com/s?__biz=Mzg4MjcxMTAwMQ==&mid=2247488174&idx=1&sn=cb996e5288d383affb6ca6cd815ea1bf": "四月份68个0day_1day_nday漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247485220&idx=2&sn=f00c1d70b7279409f3959182e3465bc7": "【漏洞复现】Cisco IOS XE Web UI存在权限提升漏洞(CVE-2023-20198)", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247485220&idx=4&sn=1fc46525fba38653b72b7cf73be0acf8": "【漏洞复现】LiveGBS user_save存在逻辑缺陷漏洞(CNVD-2023-72138)", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247485220&idx=1&sn=4191854d1b3be6136309bbaf9da619ac": "【漏洞复现】WordPress Automatic插件存在SQL注入漏洞(CVE-2024-27956)", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247485220&idx=3&sn=047c229be5ee0086fc0a1183e27cffba": "【漏洞复现】YzmCMS pay_callback.html存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MTc1MjY5OQ==&mid=2247485455&idx=1&sn=60121fa022f25e54986c15895c68cdbe": "支付漏洞实现0元购", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247488647&idx=3&sn=750f8d2711766c3ff8e2f1430ce07ee1": "漏洞预警 _ 大华智慧园区综合管理平台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247485240&idx=1&sn=df42f7720d47f9572dc52d4c5e0d111c": "【漏洞复现】CVE-2024-28253", "https://mp.weixin.qq.com/s?__biz=Mzg5NTYwMDIyOA==&mid=2247504394&idx=1&sn=5bbb29c2f253fa99c5a6a9680a34557b": "代码审计-某产品高清智能录播系统漏洞分析附未公开POC", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247484270&idx=1&sn=c59fafbeef122219676f2b5eff2eb92e": "某云算力矿机交易所审计(未公开漏洞)", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247485246&idx=1&sn=3da112accc5ba468ffbbf8afee18ecd2": "【漏洞复现】AJ-Report开源数据大屏存在远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUxMjc0MTE3Mw==&mid=2247493146&idx=1&sn=672a7e4fb2b794b6754d42aca8860b2f": "Windows Hyper-V远程代码执行漏洞(CVE-2024-21407)", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247485239&idx=1&sn=bd7d338abd062fcc4f0ed7220cde078c": "【0day】致远OA移动智能办公平台存在Session敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247491659&idx=1&sn=7a51b229ef51bf09a3e9d22e2487f2ff&chksm=fa594ea6cd2ec7b088d340e4bc9f0c9731a262d0e5f2b78671c8a08914a18f33bfffa212c62e&scene=58&subscene=0#rd": ".NET 1day情报 _ 复现用友某通KeyEdit注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247505691&idx=1&sn=16406315a3cd7426e431ac258cde3fa3&chksm=cfcab40ff8bd3d19983a3be80849d8452556a1078cd25fde5a9003f97258a4f8f84c6d7034ac&scene=58&subscene=0#rd": "漏洞通告 _ 瑞友天翼应用虚拟化系统远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247485266&idx=1&sn=e53f4adfdb12a208c94b683be940e544": "【0day】瑞友天翼应用虚拟化系统appsave存在SQL注入漏洞-复现", "https://mp.weixin.qq.com/s?__biz=MzkwNzYzNTkzNA==&mid=2247485653&idx=1&sn=cb1f9a408da12c787020184792594c38": "【漏洞复现】瑞友天翼应用虚拟化系统index.php接口处存在SQL注入漏洞导致RCE", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492500&idx=1&sn=0fb96a4cda9da578641ccc8f4e41924c&chksm=96f7fcf9a18075ef7b6cbdc8cafd4a05fbd72a9e97f8f8726328fcb3d8713123ac459380af1c&scene=58&subscene=0#rd": "【原创0day】瑞友天翼应用虚拟化系统SQL注入致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNzYzNTkzNA==&mid=2247485694&idx=1&sn=43b3ab52f7c9ccc6cdb6b99ee58ebee7": "【漏洞复现】中城科信票务管理平台 PageInfo接口处存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247485319&idx=1&sn=0dd428f5a5bb76be3a5b8c6d00e865b2": "【未公开】微厦在线学习平台OrganSetup存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNzYzNTkzNA==&mid=2247485787&idx=1&sn=5bd05661f511e36ccd8ac1c162361936": "【漏洞复现】脸爱云一脸通智慧平台MoneyMng.ashx接口处存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247484628&idx=2&sn=022011f7d1aefe772f130f71ae6a3577": "大华智慧园区综合管理平台ipms接口存在远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247484628&idx=4&sn=45493081d7bb1cf72a61cd9e7c3a918b": "泛微OA E-Cology ln.FileDownload文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2MzkwNDU1Mw==&mid=2247484628&idx=3&sn=968514d7b58b512009ef26a14c5f4b18": "瑞友天翼应用虚拟化系统小于7.0.5.1远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492519&idx=1&sn=f5fe81e8e8f28c5f717ea46ff2cb2e1e&chksm=96f7fccaa18075dcd464b3914859a83c1238077e0261d169a3c9e2518f193d2313dcdf092501&scene=58&subscene=0#rd": "【已复现】瑞友天翼应用虚拟化系统SQL注入致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUxMDQzNTMyNg==&mid=2247504304&idx=2&sn=e87dfd8be058044c029ab43d1a4c5cc3": "【漏洞通告】Telit Cinterion Modems缓冲区溢出漏洞(CVE-2023-47610)", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492530&idx=1&sn=6b55f3cec12cb47667048197c7e6d371&chksm=96f7fcdfa18075c94d6d9b066939a5077b7397b3a75329f37ae5106946ca925846f0db3339c3&scene=58&subscene=0#rd": "【原创0day】 通天星CMSV6车载定位监控平台SQL注入致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNzYzNTkzNA==&mid=2247485997&idx=1&sn=ca5cc7ad7ff057f7204b70cb023c6371": "【漏洞复现】蓝海卓越计费管理系统 agent_setstate 接口处存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NDU1MDc1OA==&mid=2247485638&idx=2&sn=bbc239d8dd8651d3036e387a3127814e": "漏洞复现-CVE-2024-4956", "https://mp.weixin.qq.com/s?__biz=Mzg5NDU1MDc1OA==&mid=2247485638&idx=1&sn=5edc5f98745cf306fb664fb57c670cd1": "漏洞复现-铭飞CMS-search接口存在sql注入", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492545&idx=1&sn=cc3ff69cfd809437c6449e9e0bff364c&chksm=96f7fcaca18075ba42e5ba40d6c7b273ed43433f815e63d2b1b0c8a66a72e2ae7c1880787945&scene=58&subscene=0#rd": "【已复现】Nexus Repository 3 路径穿越漏洞(CVE-2024-4956)", "https://mp.weixin.qq.com/s?__biz=MzkyNzM2MjM0OQ==&mid=2247493545&idx=1&sn=9f1c2ebb3c77b6df1230e2a05a03b1de": "Src公开课第二讲:APP漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247485796&idx=1&sn=b34a73332d0f8954fb2330e3686e0647": "【1day】用友分析云存在未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDUwOTU1MA==&mid=2247484299&idx=1&sn=ce2ba8ff554943a429fc5d15b73ac7a3": "【漏洞复现】用友 GRP-U8 FileUpload 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484509&idx=1&sn=0b2b586d32de101a394e5836a01bf6ad": "碧海威科技-L7云路由jumper.php存在命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247489495&idx=1&sn=020bea28e386791eb7aae6ad76ae6a42": "【已复现】GeoServer 存在远程代码执行漏洞(CVE-2024-36401)", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY5Nzc1OA==&mid=2247483982&idx=1&sn=e4eee53d9676298dc070c0da5151ecc3": "0day_GeoServer远程代码执行漏洞(CVE-2024-36401)", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247485369&idx=1&sn=9ec2e24c359ba59bd997e5e3631926e6": "Geoserver Xpath 属性名表达式前台RCE漏洞(CVE-2024-36401)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTg0MjQ5OA==&mid=2247485531&idx=1&sn=25f1f0f1c2c2b7e509c7c246f4657772": "CVE-2024-32709 POC", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247514834&idx=1&sn=284ea76f8688cfdee75efd3a480d9099": "CVE-2024-36401 POC", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247486259&idx=1&sn=11adb33b9f236413fb3ffe0566309772": "Docker逃逸CVE-2019-5736、procfs云安全漏洞复现,全文4k字,超详细解析!", "https://mp.weixin.qq.com/s?__biz=MjM5Mzc4MzUzMQ==&mid=2650259238&idx=1&sn=700f56bcbc07abdf45c5c2a36fbc4694": "【CVE-2024-36991】Splank PoC", "https://mp.weixin.qq.com/s?__biz=MzkwMzY5NTg0Mg==&mid=2247483868&idx=1&sn=0d6faf3dd0e0604af24d8f78e7d17451": "【漏洞复现】某景eHR sduty-getSdutyTree SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDUwOTU1MA==&mid=2247484330&idx=1&sn=30b6750a83808473315d61c92afd6e18": "【漏洞复现】用友 时空KSOA com.sksoft.bill.QueryService SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247541629&idx=1&sn=a833efe23fdc86f8c1fa14b76a666e87": "记一次CNVD漏洞的挖掘(上)", "https://mp.weixin.qq.com/s?__biz=MzkyMDUwOTU1MA==&mid=2247484382&idx=1&sn=535dad489a072dc1c878cb59c7641a15": "【漏洞复现】亿赛通 电子文档安全管理系统 PolicyAjax Sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247486562&idx=1&sn=0bd6a4361a6d555b4f3c3bb4a4c437e6": "【预警】windows本地提权0day漏洞在暗网售卖(未被证实,还处于第三方校验阶段)", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652093147&idx=1&sn=384018a7aa07fbeb482872c5e48c05d7": "影响 300 万款苹果 iOS _ macOS 应用,CocoaPods 平台漏洞披露", "https://mp.weixin.qq.com/s?__biz=MzkxMzY5NDUyMQ==&mid=2247484404&idx=1&sn=873563bd3847024c70677061547006c2": "Fastjson反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486727&idx=1&sn=70b8b2c9cca537b4c7edde0d05f8046f": "泛微e-cology getFileViewUrl接口存在SSRF漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzk0NzUyNTk1NQ==&mid=2247485574&idx=1&sn=e790d83f379c209c2b145948e49c21b4": "【红队武器库_漏洞利用工具】2024HVV准备均收集来源于Github(包含海康威视、大华等等一把梭)", "https://mp.weixin.qq.com/s?__biz=MzIzNTE0Mzc0OA==&mid=2247485753&idx=1&sn=0da2c2b1a4cfdc0d418e1bb2d8e33ec4": "大华综合漏洞利用工具 - dahuaExploitGUI", "https://mp.weixin.qq.com/s?__biz=Mzg4MTg0MjQ5OA==&mid=2247485588&idx=1&sn=2903594bbc38b22a85f382263c306721": "CVE-2024-36991 POC", "https://mp.weixin.qq.com/s?__biz=MzkwMzY5NTg0Mg==&mid=2247483876&idx=1&sn=03f73d435e335c8c276c43da6dcfa5ea": "【漏洞复现】某微OA E-Cology getFileViewUrl接口SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMjM0ODAwNg==&mid=2247487960&idx=1&sn=6d7a4597f975a91ac80c93af2113a8a6": "红队武器库漏洞利用工具合集整理", "https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247523353&idx=1&sn=fa6be2ab607e7f60ceb3e68a1101ca07": "Geoserver后台漏洞检测一键化工具", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247510758&idx=1&sn=b9888ab398cce1121f87af198d41f4d0": "VMware vCenter - CVE-2024-37081 任意命令执行", "https://mp.weixin.qq.com/s?__biz=MzkyMDUwOTU1MA==&mid=2247484428&idx=1&sn=ad98d5372352cb1cde37cc7eb0c821bf": "【漏洞复现】用友 时空KSOA imagefield SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MzcxNzg1Ng==&mid=2247485506&idx=1&sn=5627122e5bc034c7923293290b662060": "【0day预警】综合监管云平台存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzODY2ODA0OA==&mid=2247485410&idx=1&sn=1dccc311ead7ca873ed21acbc478a84b": "【未公开】启明星辰天清汉马VPN存在client任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247486529&idx=1&sn=f794f6937a333d3fdd5717c61c16508b": "对某CMS漏洞练习平台的一次xss、sql注入、越权黑盒思路分析", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247499987&idx=1&sn=5fc5b449c656a40c8a8158e8fca50a20": "【0 day】阿里 NACOS 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMjYzNTE4MA==&mid=2247484764&idx=1&sn=dbc327b48438fb72255c59167f05e1e0": "【0day】Nacos SQL注入导致的命令执行", "https://mp.weixin.qq.com/s?__biz=MzUxMjc0MTE3Mw==&mid=2247493716&idx=1&sn=274dfdfdefd7e1216a27757884a435e2": "Palo Alto Networks Expedition 缺少认证导致管理员账号接管(CVE-2024-5910)", "https://mp.weixin.qq.com/s?__biz=MzkwMjYzNTE4MA==&mid=2247484779&idx=1&sn=0a2a515526270a06e815bdad1e5d0ae0": "【nday】NetgearWN604 CVE-2024-6646 信息泄露漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502204&idx=1&sn=83aafca8039c4d0e8715e78a93c02be3": "【成功复现】Vercel next服务器端请求伪造漏洞(CVE-2024-34351)", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247483806&idx=1&sn=1e88b314988ef2101e085e860db2f3bf": "【漏洞复现】通达OA moare接口反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMjYzNTE4MA==&mid=2247484787&idx=1&sn=ef0b63ea5bd79f2dcb8978c84db3f248": "【1day】微信公众平台回调系统 ajax SQL注入漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=Mzg2MDY2ODc5MA==&mid=2247484000&idx=1&sn=6139011e269c9412277398cb88dcf7e2&chksm=ce239479f9541d6fbabdee61d583c21a8b101458156197e2fcd6e7b764d320f47a86af0e2150&scene=58&subscene=0#rd": "Nacos RCE漏洞分析、复现及不出网利用姿势", "https://mp.weixin.qq.com/s?__biz=MzkwMjYzNTE4MA==&mid=2247484802&idx=1&sn=cb185f62e03695595301c667a7ffd244": "【1day】用友U8CRM import 任意文件上传漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492622&idx=1&sn=3b226da623357a9dc0cabdef70bac9fa": "【原创0day】Oracle WebLogic Server 远程代码执行漏洞(CVE-2024-21181)", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651451607&idx=1&sn=2748396828e84e0c715a8e5f0c93e9bd": "网事焦点5 防微杜渐,加强漏洞治理的应急响应环节", "https://mp.weixin.qq.com/s?__biz=MzU2NjgzMDM3Mg==&mid=2247492215&idx=1&sn=db6b2529659dec94604108131caa3938": "最新Weblogic反序列化0day临时修补方案", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247493446&idx=1&sn=438d4044355c6e95baa654b6a968ff6c&chksm=fa5949abcd2ec0bd297c8de1bd162e7fb0629a2302059813057002d88cc340ce955da65118cb&scene=58&subscene=0#rd": "代码审计 _ .NET SqlSugar框架注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTg0MjQ5OA==&mid=2247485763&idx=1&sn=ff45a13f471c7d9eda84aaa7c906b0c3": "HVV威胁IP、必修漏洞(0722)", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659210067&idx=1&sn=2b88d4d96c7f722afe7b685aa82c39ea": "HVV第一天0DAY流出:天清汉马VPN", "https://mp.weixin.qq.com/s?__biz=MzkxNjQyODY5MA==&mid=2247486607&idx=1&sn=2f2eed6a212bcf72977bdb1f8368f11a": "【情报速递】亿赛通HW 2024-07-22漏洞威胁情报", "https://mp.weixin.qq.com/s?__biz=MzkyMzI3OTY4Mg==&mid=2247486731&idx=1&sn=c02b667cdedd097891afaf83aee96652": "安全研究|某安全工具RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247493471&idx=1&sn=774287a5a8ce855c6e6f75fb5e0aa012&chksm=fa5949b2cd2ec0a47221d91863fa5e2d2e2623c3b0e0c7f69c99a205e8b6d4044c6407f857a7&scene=58&subscene=0#rd": ".NET 情报 _ 分析某云系统添加管理员漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247493471&idx=3&sn=dc60ff3186c2b78eb971823eba236ea4&chksm=fa5949b2cd2ec0a4f52afa2accf6a018ef36c9d36107cf7a5846f1d0b153ab6f7d3d3753a95c&scene=58&subscene=0#rd": "代码审计 _ .NET SqlSugar框架注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247513991&idx=2&sn=b32b56146b0049488d075fbce5d3c06f": "2024HVV-day3 漏洞情报", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247515034&idx=1&sn=f33767d166bce9101627652f88946865": "2024HW漏洞_IP_钓鱼样本等汇总(0724)", "https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247486197&idx=1&sn=b3f3143249febbf3fcd313df16275a19": "2024HW漏洞情报整合", "https://mp.weixin.qq.com/s?__biz=MzUxMjc0MTE3Mw==&mid=2247493768&idx=1&sn=08090e0d9af650ce1bc96f76a9c8ffc8": "Apache CloudStack SAML 签名排除漏洞(CVE-2024-41107)", "https://mp.weixin.qq.com/s?__biz=MzkwMjYzNTE4MA==&mid=2247484827&idx=1&sn=eb82874dc10aad8a27e016e22e946736": "【1day】小学智慧校园信息管理系统 Upload 文件上传漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=Mzg4NDk4MTk5OA==&mid=2247485351&idx=1&sn=6dce321a765e241e24d97648aa87ed9e": "第三天攻防漏洞更新,最快最新!", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247493515&idx=1&sn=debf59f4176eeb7f78b9d285fbd5b6dc&chksm=fa594966cd2ec0700e2147bc483dda14ed15c567a8d67a2aebdbb491e1b426ecb0d0e47c339f&scene=58&subscene=0#rd": ".NET _ 2024hvv 第2天漏洞威胁情报", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506570&idx=1&sn=48d2fa87c16035d36be1b4fc1833d768&chksm=cfcab99ef8bd308864b34e293604b36bf4f7b3f453df263e6dc25b2e79e96fe08623f44e9c40&scene=58&subscene=0#rd": "微步 TDP&OneSIG 已于24年4月支持检测、拦截 WebLogic 0day", "https://mp.weixin.qq.com/s?__biz=MzkzOTY1MzcyOQ==&mid=2247488458&idx=1&sn=8420d908f1e2d82a19dc8a237dbeb72e": "2024hvv day1-4漏洞威胁情报", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247515047&idx=1&sn=efc44ced9ff86620254df0c6e27efa92": "CVE-2024-41107 POC", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247515047&idx=2&sn=993b167890563f6d6a2fd03a785e87be": "CVE-2024-41110 POC", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247493559&idx=2&sn=5337a60351ab4b9a4914313bf606c3fc&chksm=fa59495acd2ec04cf8cc3c9571b00a6044cccc4a2703d2c02b5f6ccf3700471cc740f6421ee0&scene=58&subscene=0#rd": "2024hvv _ 第3天.NET漏洞威胁情报", "https://mp.weixin.qq.com/s?__biz=MzkxNTczMjA1Ng==&mid=2247483713&idx=1&sn=9c6bb65c8b5d9cbf8aeeb4f9b60b0170": "2024HW之《向日葵远程RCE》", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247514031&idx=1&sn=cb11d2a42c3ee3bed028f966528e7498": "2024hvv最新漏洞威胁情报", "https://mp.weixin.qq.com/s?__biz=MzU4Mzc4MDQyOQ==&mid=2247484007&idx=1&sn=34a92fb82cdd1533cc5173eaa93d8ed3": "hvv最近的一些漏洞脚本(only xray)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247493583&idx=1&sn=5dad5dd11d13e21691d89d8c64bf8412&chksm=fa594922cd2ec034aaa1d74e9f28a0908bb43a8d5cbea13c33542c5f0acc3603d468a9eb5c24&scene=58&subscene=0#rd": ".NET威胁情报 _ 某水务系统堆叠注入可RCE", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247515053&idx=1&sn=8c9c779cb68b7c8024faed1e2ea5d6c5": "2024HW漏洞威胁情报合集", "https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247486221&idx=1&sn=77cb1cfda7c0a7f55b2c2cc63a37036f": "2024HW漏洞验证报告合集(二)", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247485737&idx=1&sn=513f6239141f1af10f959ebf5d78b4e0": "【漏洞复现】泛微E-Mobile installOperate.do SSRF漏洞 _ HW POC", "https://mp.weixin.qq.com/s?__biz=MzkwMjYzNTE4MA==&mid=2247484857&idx=1&sn=e4c3239e8745070a0b1c13f3c8a8942e": "【HW】用友NC UserAuthenticationServlet反序列化漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=MzkwMjYzNTE4MA==&mid=2247484878&idx=1&sn=5ec4b0ca30130267f90fa427c04a7712": "【Nday】Raisecom智能网关 list_base_config 远程命令执行漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247493686&idx=2&sn=302f88149636be9c0748b507b13db919&chksm=fa5946dbcd2ecfcdde588dc533aec75d3bf75bf27fb01fb9d4af8b56dbc93d71db675a7559d0&scene=58&subscene=0#rd": "2024hvv _ 10套.NET系统漏洞威胁情报(持续更新)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247491591&idx=1&sn=080a7526231c0d2df27c8595ce575052": "240730漏洞威胁情报【情报知识库已更新】", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484765&idx=1&sn=931743727356304c27853124a114c12d": "【0day】某慧综合管理信息系统GetUserPic存在SQL漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMzY5NTg0Mg==&mid=2247483924&idx=1&sn=42ba1696d6f62a8de43ac71cd5e84869": "【漏洞复现】某赛通电子文档安全管理系统druid存在弱口令漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247493717&idx=2&sn=161eb21297e1bc23c0ed4c2305e0de41&chksm=fa5946b8cd2ecfae8c014d23d4f0117bed182f9b1fd7ef9221eff42aaa3d65b2afb52a355570&scene=58&subscene=0#rd": "2024hvv _ 11套.NET系统漏洞威胁情报(07.30更新)", "https://mp.weixin.qq.com/s?__biz=Mzg5MDg0MzYxMg==&mid=2247486778&idx=2&sn=4edecc8007ac941098a7d57d6cad4c2a": "2024HW漏洞梭哈工具上线", "https://mp.weixin.qq.com/s?__biz=Mzg5MDg0MzYxMg==&mid=2247486778&idx=1&sn=604a5a3db947dae9f9ef45fce1d7f132": "【hw】2024护网漏洞情报-第六弹", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247493787&idx=2&sn=f1c27de73f75dad3e18d2559e5b6f3eb&chksm=fa594676cd2ecf60eeb0f7ef1e6daa64261c9248ff1f02027b5feded21793ec621cf4ace3913&scene=58&subscene=0#rd": "2024hvv _ 13套.NET系统漏洞威胁情报(07.31更新)", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247486509&idx=2&sn=8d73d0ae5c7ed41a3b08e50e8837b55a&chksm=c22294d4f5551dc28167145e4d34d6da32ab414d5faaf30b6810b5416d331548a0dfc8861260&scene=58&subscene=0#rd": "【漏洞预警】搜狗输入法绕过windows锁屏机制获取系统权限", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247515080&idx=1&sn=6c90e1a51f6a021248ef9872bfa0a77f": "CVE-2024-41468 POC", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506627&idx=1&sn=3d33f48c29c5ab1445a7a0cf5a4ef165": "搜狗输入法漏洞可绕过Windows锁屏?OneSEC能检测!", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247510320&idx=1&sn=a34ae11e1941ddbcc37f9e0deaa0ae32": "烽火狼烟|搜狗输入法0day复现及分析", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247493818&idx=2&sn=a8afd7af5ffd366dc43acddbca1b231e&chksm=fa594657cd2ecf4115513f38013d04d2398ad6461dcc381dc6076cd8d9481f8244146cae85de&scene=58&subscene=0#rd": "2024hvv _ 13套.NET系统漏洞威胁情报(08.01更新)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485169&idx=1&sn=f4bf46c9357386afde6da1330db0e82b": "(0day)小狐狸Chatgpt付费创作系统存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4Mzg4OTIyMA==&mid=2247485586&idx=1&sn=a67a3e0b4b17538ccb0d1211da9e4ccb": "2024HW漏洞梭哈工具上线", "https://mp.weixin.qq.com/s?__biz=Mzg4Mzg4OTIyMA==&mid=2247485586&idx=2&sn=6040028160422e14a6686ce8a57eb57b": "Kpamda漏洞库-24年希望成为最好的安全知识库", "https://mp.weixin.qq.com/s?__biz=Mzg5MDg0MzYxMg==&mid=2247486884&idx=1&sn=b1e98cfeca777ce323f688dcf49a0097": "【hw】2024护网漏洞情报-第九弹", "https://mp.weixin.qq.com/s?__biz=Mzk0MzQxODc3NA==&mid=2247484307&idx=1&sn=25fd925bcce35829fa7ba964e42af61f": "漏洞挖掘 _ 记一次某微信小程序的渗透测试", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485179&idx=1&sn=3e5fc57115c51ea18b55976106985570": "(Nday)IP网络广播服务平台存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247486776&idx=1&sn=3857368a370b62e6695531fb59d29b74": "【0day】易捷OA ShowPic存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMjYzNTE4MA==&mid=2247484904&idx=1&sn=6b8d8bd32ebb278b112be593e5d9b681": "【HW-day】用友NC Cloud queryStaffByName SQL注入漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247515098&idx=1&sn=a0f63705de4bafbbfe321dda5c973378": "一款java漏洞集合工具", "https://mp.weixin.qq.com/s?__biz=MzkyMzYwNTEyNg==&mid=2247486743&idx=1&sn=0f46f731911dea4a9c5bc0ed0df3339a": "(EDU 0day)某格智慧心理服务平台某接口存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247486343&idx=1&sn=93d979b49d9c18588f2118aef02f0b4b": "2024HW内部漏洞情报库已更新至今日", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247494017&idx=2&sn=0b66294aadc9c7d1ec9f5d6e214e1624": "2024hvv _ 17套.NET系统漏洞威胁情报(08.05更新)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTg0MjQ5OA==&mid=2247486109&idx=1&sn=1d8b7ea511844128780c63cad8ac2bb2": "CVE-2024-39914 POC", "https://mp.weixin.qq.com/s?__biz=MzkyNDYwNTcyNA==&mid=2247486612&idx=1&sn=25c6bebb9fc895ff308363cafe974691": "X捷漏洞综合检查工具v1.0", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485421&idx=1&sn=f18919e01ee0e6fc90c64935bc8c444f": "【漏洞复现】某餐饮系统-goodcost-getlistdata-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247515102&idx=1&sn=b4392058e9a021d61b4b89491aea9304": "一个永久的HW漏洞情报、渗透知识库", "https://mp.weixin.qq.com/s?__biz=MzI1ODY3MTA3Nw==&mid=2247485916&idx=1&sn=2dfdca0d3dd532e60ec61c70faa86173": "价值3个亿的安全漏洞,唯一被美国双制裁的安全企业,360还是低调了!", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247542421&idx=1&sn=ffcb988ae36f3efa4de413d7689eeda4": "漏洞挖掘 _ 记一次某中学系统越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247494191&idx=2&sn=f861b1c59c6ff9642549fc297796613a&chksm=fa5944c2cd2ecdd444c5c76857efb1323dc263cb60e1c03db43e42762b8d28ec292f39572b15&scene=58&subscene=0#rd": "2024hvv _ 18套.NET系统漏洞威胁情报(08.06更新)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486773&idx=1&sn=be57e8e5e7652a23ec259bca0d7f5b3b": "Apache OFBiz系统ProgramExport接口存在远程命令执行漏洞CVE-2024-38856 附POC", "https://mp.weixin.qq.com/s?__biz=MzkyMzI3OTY4Mg==&mid=2247486779&idx=1&sn=ae212c2bc7745e8a05f857444f52836d": "安全研究|公开冰蝎传输协议RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247494252&idx=2&sn=f19200d4e0676b4690beb22fbca2a663&chksm=fa594481cd2ecd975574c5540c2a5043ae6e823034a7006dcb67d0b6f5fca1753ef575d1f017&scene=58&subscene=0#rd": "2024hvv _ 19套.NET系统漏洞威胁情报(08.07更新)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506683&idx=1&sn=89d5f4dbe231e408fd2437e6c62aa292&chksm=cfcab9eff8bd30f9cbca2728b60018862d36f644c3db2dcbd5f03b4eb459f27884051a76b492&scene=58&subscene=0#rd": "微步协助H3C修复iMC智能管理中心远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MDg0MzYxMg==&mid=2247486929&idx=1&sn=de608b82473757fe22abf0f53c1640d6": "0day专项很慌?亿赛通0day专项已经发布漏洞补丁", "https://mp.weixin.qq.com/s?__biz=MzkwOTIzODg0MA==&mid=2247491082&idx=1&sn=8c3848e01eda4c65cd94666f4b26031c": "Apache OFBiz (CVE-2024-38856) 漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg4MTg0MjQ5OA==&mid=2247486123&idx=1&sn=18e6369ff972076b014f46c4f44b4e0b": "CVE-2024-38856 POC", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247485608&idx=1&sn=2543f16e7b36c644db8e76594b4a8e25": "[周报]2024_8_1-2024_8_7 POC更新进度", "https://mp.weixin.qq.com/s?__biz=MzkzMDcxNzg4MA==&mid=2247484082&idx=1&sn=035e73c23ad2d095f80288ceba5518da": "[漏洞复现]章管家前台任意文件上传漏洞(XVE-2024-19042)", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502262&idx=1&sn=99b14d87b4cbd609ef08230413f74c1e": "【成功复现】Apache OFBiz代码执行漏洞(CVE-2024-38856)", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484476&idx=2&sn=6376360922a34ec0251c2713ab116889": "【漏洞分享】亿赛通 Sql注入漏洞 电子文档安全管理系统 SaveCDGPermissionFromGFOA sql", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485429&idx=1&sn=f0486e5f5a603fffb0c30335c65b2202": "【漏洞复现】某管理平台-search-info-leak-信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMzY5NTg0Mg==&mid=2247483951&idx=1&sn=2b14643ef4acd30346e40a12636d8853": "某微云桥addResume存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247492860&idx=1&sn=2a26c5d1ef6385bc443ac827c279a279": "漏洞分析 _ 某智慧管理平台RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzUxMjc0MTE3Mw==&mid=2247493807&idx=1&sn=f8a72c4c68b77934637995d779de9418": "Windows 远程桌面授权服务远程代码执行漏洞(CVE-2024-38077)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247494340&idx=2&sn=59bed32bb4ad776169844afae6cdbd59&chksm=fa594429cd2ecd3f5ee74084115058bc341d5bf781f38dbc0bc756448220e907580474b659a2&scene=58&subscene=0#rd": "2024hvv _ 21套.NET系统漏洞威胁情报(08.09更新)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506694&idx=1&sn=0f991fc7ee72908179ba7b50fe7639fb&chksm=cfcab812f8bd31042807cb86ed2c739fe5f5f28e00a3620aa8cb9091ef80f36b9b6d6d89b104&scene=58&subscene=0#rd": "Windows Server 远程桌面授权服务 RDL曝高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485113&idx=1&sn=36b6a97a4d2b361a5db5c2897cd93cda": "「漏洞复现」驰骋BPM RunSQL_Init SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247502435&idx=1&sn=f5d9c1cdd4da2daf5774f398bc53e2d5": "【七夕活动】一个永久的HW漏洞情报、渗透知识库", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486589&idx=1&sn=db8f0d9996059fb6b9e0d6a04d0ef819": "【漏洞预警 _ 已复现】Windows 远程桌面授权服务远程代码执行漏洞(CVE-2024-38077)附POC", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485229&idx=1&sn=6c3b360693a8bd5ef81d5b0c50196dfd": "某TP6对接U支付系统RCE漏洞审计", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659210280&idx=1&sn=da34db288dff77273c01dcca4acf6eb8": "从0到1,一篇搞定帮你挖到人生第一个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MDU0NTQ4Mw==&mid=2247522110&idx=2&sn=a6c36e91dfdc57c86e8326e7c3a9b839": "光伏电网曝出高危漏洞,可导致全球停电", "https://mp.weixin.qq.com/s?__biz=Mzg5MDg0MzYxMg==&mid=2247486987&idx=1&sn=603378fb2efa2b336cb6beb4bca191e4": "【hw】2024护网漏洞情报-第十三弹", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484896&idx=1&sn=b13979623819e3286d57a4a676aa42c1": "漏洞复现_某讯CRM-MyImportData存在sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247494406&idx=2&sn=c6bd84fa4b6045d22cc3a1eb5d561b21&chksm=fa5945ebcd2eccfd2052cbb398552261d36f484ca44181fcc41bfab1759e95c27a1911a77d17&scene=58&subscene=0#rd": "2024hvv _ 22套.NET系统漏洞威胁情报(08.12更新)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247494434&idx=2&sn=eacf506fa11dee2e4dc4120a17bc5aa2&chksm=fa5945cfcd2eccd9dde70f2f623e099ad3d3006d7d068d88fcb71acf1f8e5a49dce023a9fd18&scene=58&subscene=0#rd": "2024hvv _ 23套.NET系统漏洞威胁情报(08.13更新)", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247485459&idx=1&sn=d6f46bf0b216add10c8b5c1140eb56f2": "Apache OFBiz RCE:从CVE-2020-9496到最新CVE-2024-38856", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486866&idx=1&sn=2a707e762c42fdc4b89b55c335f9bda6": "润申信息科技ERP CommentStandardHandler.ashx接口存在sql注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486866&idx=2&sn=2f8151bd353d6f4b16ea1409034406f0": "润申信息科技ERP ashx_DefaultHandler.ashx接口存在sql注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkwOTUyODE5Mg==&mid=2247485086&idx=3&sn=fff964d1cdd9aff3546653a59320ebc2": "湾Snews _ 研究人员发现Solarman和Deye太阳能系统中的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484903&idx=1&sn=57811505dfaadcb0ac202316f6d014de": "漏洞复现_杭州三汇网关debug存在远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486887&idx=1&sn=9b89350e418549aa779210085aa5b3cc": "wookteam协作平台api_users_searchinfo接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI0NzY1MDgyMw==&mid=2247511986&idx=1&sn=0376a0cbb1abf7825a6162edf79d449c": "《中国信息安全》 _ 坚持总体国家安全观 加快推进国家网络安全漏洞治理 赋能新质生产力发展", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484921&idx=1&sn=b953a859ccd5453f6c4a6ab3e80c4d01": "【新】漏洞复现_云时空ERP存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247494505&idx=3&sn=fe7cdc02b9dae2c3bba3f2acbb2bf192": "2024hvv _ 26套.NET系统漏洞威胁情报(08.16更新)", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247487065&idx=1&sn=acdaf2966dd082d57d230c99e79b6258": "【0day】方天云ERP系统Ge___Link___存在SQL注入导致RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMjYzNTE4MA==&mid=2247484977&idx=1&sn=4d25cb6ee088d7c3935cf2b89aa93adc": "【HW-day】某某康达vpn list_base_config 远程命令执行漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=MzkxMTY1MTIzOA==&mid=2247484228&idx=1&sn=2fbf91002904df2f6b6949e5747e99a2": "【漏洞复现】Nacos服务漏洞汇总", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485457&idx=1&sn=bab4e62b3a01d18607174c22b09b6be4": "【漏洞复现】某平台-searchinfo-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247502479&idx=1&sn=5fd028730a148f1863abb075397634e8": "存储桶OSS遍历漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485286&idx=1&sn=0c4785a885992df04c8931ba698d1aaf": "龙腾CMS存在远程文件写入漏洞(RCE)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247506752&idx=1&sn=702e0d715814b8422e9290cd649b772a&chksm=cfcab854f8bd31428dd6e29b1bbb6201da4065e369230b445a32f2d2fbe5c9d296ea878d1f0d&scene=58&subscene=0#rd": "_核弹_?Windows TCP_IP 远程代码漏洞利用条件还挺多", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247488251&idx=1&sn=5348a39b47f3940a8d9af119b75610e3": "CVE-2024-7262(9.3) WPS 漏洞已经被武器化", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247487112&idx=1&sn=012a26bc1cf95b0db17fa310edede0f1": "【0day】用友畅捷通CRM存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMjYzNTE4MA==&mid=2247484978&idx=1&sn=d045b1313bf2725e9a5a753b8ed67a8e": "【HW-day】WookTeam searchinfo SQL注入漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=Mzg5MDg0MzYxMg==&mid=2247487104&idx=1&sn=249c7125c94eb39a8804907222e8ace6": "【疑似 Poc】疑似赛博昆仑发现的TCP_IP 漏洞 CVE-2024-38063的 PoC", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485295&idx=1&sn=dd3ffa2ed8a52ba7f0fab138fc2a2698": "某微商城系统RCE漏洞审计", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247516729&idx=1&sn=b87244132d4328a380c9b8acf3057f54": "漏洞预警:WPS Office 任意代码执行漏洞_2", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247490794&idx=1&sn=2499477cc7ea9a763314249eba90e9b3": "针对Nacos漏洞猎杀的各种骚姿势", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485306&idx=1&sn=516c184ad66de99b12db7be6a8693293": "(Nday)泛微E-office 10 OfficeServer.php 下载+上传漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg4MjcxMTAwMQ==&mid=2247488376&idx=1&sn=eb5b30f26f9710d474376f8781c70777": "2024攻防演练POC合集(含多个1day 8.12-8.18)", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484561&idx=1&sn=a687b1252285da595a96c30823354e3b": "【漏洞分享】用友nc Sql注入漏洞 NC bill SQL SQL注入", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486929&idx=1&sn=8463c3e63c9e5045784c31b8ccd20f8d": "瑞斯康达智能网关list_base_config.php接口存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkwMjYzNTE4MA==&mid=2247484997&idx=1&sn=24a46d737a3fced8b8b262d89b2647ef": "【HW-day】某某通某子文档安全管理系统 getAllUsers 信息泄露漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485318&idx=1&sn=f56ba882c31d5263a1898a8fd7b88acc": "【原创】某智能系统存在多个漏洞(CVE)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247494628&idx=2&sn=17372fd45b04a65da3415e271eee2d8d&chksm=fa594509cd2ecc1fdb2fa380968bcf2e19f6c3a46685c28dbeaf5e9deeb2102234c5b7c9ae9a&scene=58&subscene=0#rd": "2024hvv _ 28套.NET系统漏洞威胁情报(08.20更新)", "https://mp.weixin.qq.com/s?__biz=Mzk0MzU5NTg1Ng==&mid=2247484761&idx=1&sn=f7c0b330c1618b8b31035c5b4f151461": "帆软报表 channel 反序列化漏洞分析与利用_复习_", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247494659&idx=2&sn=968de6a574a07a8469c638282e4541a5&chksm=fa5942eecd2ecbf85dbe9886fa86e139e3380612e6af06c3dc73377082caacf3e4f58b7f03aa&scene=58&subscene=0#rd": "2024hvv _ 29套.NET系统漏洞威胁情报(08.21更新)", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247486282&idx=1&sn=3b154d33b26bfe5f848001ddb3f0bd2b": "【漏洞复现】SeaCMS海洋影视管理系统index.php存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247485786&idx=1&sn=a2420298b8c37663004835628cd7b37e": "【漏洞复现】华夏ERP信息泄露漏洞 (附批量验证脚本)", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247486282&idx=2&sn=fd567532d2308a8a49573634d3ff990a": "【漏洞复现】南京星源图科技SparkShop存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247485786&idx=4&sn=ed075e4e35c83c81a77da2ba7f8acec0": "【漏洞复现】用友NC-Cloud接口blobRefClassSearch存在FastJson反序列化漏洞 (附批量验证脚本)", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247485786&idx=3&sn=0678add8f6e29633525259fbaa33918b": "【漏洞复现】百易云资产管理运营系统 comfileup.php 任意文件上传漏洞 (附批量验证脚本)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485330&idx=1&sn=687d6470dd2370245fc872ce3cc3526c": "记一次edu系统通杀漏洞审计(内附0day)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247494725&idx=3&sn=eeb9a3c23d84a76ec25c716c7d98590c&chksm=fa5942a8cd2ecbbeb1c286e905f5dd1396d23c5af14f49f835c802edb130bde86cc66d199ed1&scene=58&subscene=0#rd": "2024hvv _ 31套.NET系统漏洞威胁情报(08.23更新)", "https://mp.weixin.qq.com/s?__biz=Mzg4MjcxMTAwMQ==&mid=2247488387&idx=1&sn=b55a0d63ebd32308e743305f8027fba9": "2024攻防演练POC合集(含多个1day 8.12-8.23)", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247485788&idx=2&sn=3609dabc2899cb9bf5450632731fd8d9": "【漏洞复现】华夏ERP信息泄露漏洞 (附批量验证脚本)", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247485788&idx=1&sn=df72ca8505f84f05f518119af1f7c859": "【漏洞复现】瑞斯康达智能网关list_base_config.php接口存在远程命令执行漏洞 (附批量验证脚本)", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247485788&idx=5&sn=18fc821f6a667412a08233fc151c0ff3": "【漏洞复现】用友NC-Cloud接口blobRefClassSearch存在FastJson反序列化漏洞 (附批量验证脚本)", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247485788&idx=4&sn=ec415848a87d0ad0dbda112ddf832fde": "【漏洞复现】百易云资产管理运营系统 comfileup.php 任意文件上传漏洞 (附批量验证脚本)", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247487185&idx=1&sn=3e6b6794ba45775932ecbc63e7139a5b": "利用漏洞实现 Outlook 的 RCE:第一部分", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247486992&idx=1&sn=cc4b661a9cdfd82449d050e93c8fa3d2": "华夏ERP getAllList接口存在敏感信息泄露 附POC", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484610&idx=1&sn=d7a37b01dea4ed384db89c91767ffa62": "【漏洞分享】用友GRP-U8 漏洞利用 用友GRP-U8 userInfoWeb SQL注入", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247488607&idx=1&sn=34613d47e98c35cb3a0eb0565c2c73ee": "我国0day研究能力探究", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484974&idx=1&sn=712190c086dc21988098aff96ced06ce": "漏洞复现_漏洞复现_短视频矩阵营销系统漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247487794&idx=1&sn=c4bd65be7fe2cc91075dcb12ea79c586": "regreSSHion:发现 OpenSSH 中的 CVE-2024-6387 - 一个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247494772&idx=2&sn=1ad2f8a060f7a91015a11eca9a2d9d42&chksm=fa594299cd2ecb8febd431b5a8878a92ee98a655043d4b2eaa2b2067c0030cea22796f07a0e8&scene=58&subscene=0#rd": "2024hvv _ 32套.NET系统漏洞威胁情报(08.26更新)", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650182066&idx=1&sn=9b2e3cfee799b977eb90ebf192818ea2&chksm=f4486a0ec33fe3180af56ba9ecc68ef972e5ff2642296667cb1b4f489a73fd30ed7016921f3c&scene=58&subscene=0#rd": "又捕获一起0day!这次是禅道RCE", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247487798&idx=1&sn=ce21d93ccefd2614ba806735b3268e41": "CVE-2024-3094 XZ 后门:您需要了解的一切", "https://mp.weixin.qq.com/s?__biz=Mzg4Mzg4OTIyMA==&mid=2247485643&idx=1&sn=eb2939717ce4f0a4dc3f0b0602a5afc3": "【漏洞复现】全程云OA UploadEditorFile 存在文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDUwOTU1MA==&mid=2247484485&idx=1&sn=b8c4c7c8d56b6eece0b7e54f713569fa": "【漏洞复现】百易云资产管理运营系统 comfileup.php 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NzUyMTM0NA==&mid=2247487116&idx=1&sn=a951aa4338edb9ddec2479d0d012c9c5": "漏洞复现 _ Windows TCP_IP IPv6 远程代码执行CVE-2024-38063", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247484984&idx=1&sn=6daedaf3e6a7ce49682d9a70f9c8f9f6": "漏洞推送_某云OA UploadFile存在任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247509878&idx=1&sn=12b99920e81622e62f5ee72a5ce1dd64": "重保战报20240827|TOP恶意IP、高危漏洞、热点事件分析持续更新中", "https://mp.weixin.qq.com/s?__biz=MzkzMjIxNjExNg==&mid=2247485467&idx=1&sn=10730020cf92cdff4ab0bbf587b49ec0": "Windows TCP_IP IPv6 RCE POC复现(CVE-2024-38063)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487005&idx=1&sn=fe5e527b07878d4b1d5609d4531f346a": "全程云OA UploadEditorFile接口存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247488083&idx=1&sn=0a6857b31785ed74ba52529b81d6e077": "SSH 协议漏洞 – Terrapin 攻击 CVE-2023-48795:你需要知道的一切", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502346&idx=1&sn=f5538cdc0d11bbc9a15d23835da23386": "【成功复现】FastAdmin路径遍历漏洞(CVE-2024-7928)", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247486399&idx=1&sn=e3630e888de38493c37898df236b38f0": "【漏洞复现】珠海新华通软件股份有限公司云平台存在登录绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487019&idx=1&sn=65164ab646daec6fd420eb119ea3a36f": "百易云资产管理运营系统comfileup.php接口存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247494858&idx=2&sn=8ee07e66df786446561521824b615f02&chksm=fa594227cd2ecb31e00e3ca6b4f76d518f47a2d6f287f1894e1418042f790c19804e487e4da8&scene=58&subscene=0#rd": "2024hvv _ 33套.NET系统漏洞威胁情报(08.29更新)", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485405&idx=1&sn=7d43ed69bd1a349487661220b5e8fded": "某WooCloud 8国语言交易所任意文件上传漏洞(RCE)", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502377&idx=1&sn=453981c8da15fb44352bc8c43f5c795d": "【成功复现】SPIP porte_plume远程代码执行漏洞(CVE-2024-7954)", "https://mp.weixin.qq.com/s?__biz=Mzg5NTUyNTI5OA==&mid=2247485828&idx=1&sn=7363589e4e901c21dfab146714d83f1b": "【漏洞复现】奥威亚-教学视频应用云平台-任意文件上传漏洞 (附批量验证脚本)", "https://mp.weixin.qq.com/s?__biz=MzkwMzY5NTg0Mg==&mid=2247483987&idx=1&sn=e5d4db5e84993a7093c043463af873f3": "某联云采 SRM autologin 逻辑漏洞登录后台", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659210381&idx=1&sn=7f04098ef1ffd706a6b0aaec5cb004e3": "网络安全揭秘 _ 白帽黑客常用的漏洞挖掘技巧分享", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247486410&idx=1&sn=7b5edf0f3306388887fd104ac0e25802": "【漏洞复现】众诚网上订单系统o_sa_order.ashx存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247514793&idx=1&sn=b40fb8576edca98579a72894af0a93df": "建了个SRC 专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487094&idx=1&sn=5cecab5a34bc41b38db47e566e6149ef": "FastBee开源物联网平台download接口存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkwMjYzNTE4MA==&mid=2247485034&idx=1&sn=a543ab65e44afa6e7005e89a07781327": "【Nday】FastBee开源物联网平台 download 任意文件下载漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487094&idx=2&sn=87071190f7641385e72f511b1b74b4d5": "紫光档案管理系统selectFileRemote接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzAxNzkyOTgxMw==&mid=2247493305&idx=1&sn=3b1c209c3d35b1a15869e47790339194": "红队武器库漏洞利用工具合集整理-附地址", "https://mp.weixin.qq.com/s?__biz=MzU4Mzc4MDQyOQ==&mid=2247484197&idx=1&sn=012203ed668d404c9f4b973ac4917fce": "泛微E-mobile7-rce", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247495006&idx=2&sn=b806b02d05f4de79c0ae1cab8b9f9b49&chksm=fa5943b3cd2ecaa5d22d7176519c47612df1ae262f8db6e09e74bd82bf02c99b0dd1ece1ea28&scene=58&subscene=0#rd": "34套.NET系统漏洞威胁情报(09.04更新)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487128&idx=2&sn=613b08b8614568d7255d3ba429bdc01b": "X管家listUploadIntelligent.htm接口存在sql注入 附POC", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487128&idx=1&sn=8688d1bf204b59296c0048c6ae50f73d": "u200b用友UFIDA NC portal_pt_file_upload接口存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkyMDUwOTU1MA==&mid=2247484762&idx=1&sn=74e590572f6cc17ce4d8bcf4bd0a0089": "【漏洞复现】赛蓝企业管理系统 EHR_Holidays_SubmitUploadify 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwNTE4Mzc2Mg==&mid=2247486425&idx=1&sn=4b7d6635d25edcb99a4d9a308c151382": "【漏洞复现】Apache OFBiz存在远程代码执行漏洞(CVE-2024-45195)", "https://mp.weixin.qq.com/s?__biz=Mzg2MDY2ODc5MA==&mid=2247484002&idx=1&sn=7936818b93f2d9a656d8ed48843272c0&chksm=ce23947bf9541d6de98ac6157af40225e36db9de27e1c1d07b8e4f2b17fcefea20998dfc9a1d&scene=58&subscene=0#rd": "Tomcat CVE-2024-21733漏洞简单复现、分析", "https://mp.weixin.qq.com/s?__biz=MzkyMDUwOTU1MA==&mid=2247484764&idx=1&sn=bb538679faff7c45f7f312772d1b99cd": "【漏洞复现】易天智能eHR CreateUser 任意用户添加漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515016&idx=2&sn=25975e0ad977212217e860396ec90e85": "建了个SRC 专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247489305&idx=4&sn=5b53cb692fbcbb8b00a070b5b42728e9": "疑似中文黑产组织利用GeoServer漏洞CVE-2024-36401挖矿的详细技术分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTc1ODY0Mw==&mid=2247486087&idx=1&sn=880ee6f09abda67dd090a172005d3552": "学工系统0day挖掘-危害拉满", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487158&idx=1&sn=9fa35acf41d7ad52e73724893bb223f5": "IP网络广播服务平台upload接口存在任意文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485492&idx=1&sn=c6b82c6e06115c83d95a3339203ac2a3": "国外某CMS存在SQL注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515075&idx=2&sn=9051db5ef8f597f5fa6ad7ad0508ca52": "建了个SRC 专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MzkwMjYzNTE4MA==&mid=2247485058&idx=1&sn=2726848aba4bbbeab6b9115213542efd": "【Nday】某户-ezOFFICE filesendcheck_gd SQL注入漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487313&idx=1&sn=3c32a87bc50f6e328b8afcb0095afdb0": "用友NC Cloud queryStaffByName接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247495194&idx=3&sn=94b0d8e5680e680e69a58549b7e4dec5&chksm=fa5940f7cd2ec9e1d218f4405a711c71a8499d436093ca0e38fd6d0c19872053a344d53eaba9&scene=58&subscene=0#rd": "35套.NET系统漏洞威胁情报(09.11更新)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515333&idx=2&sn=c673c7796688cc4a8d420aace93db0ca": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659210441&idx=1&sn=7718216bcdb6b0676d315cbf2cf3ae2f": "暗网惊现我国某企业内部敏感数据,安全漏洞成主因!", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487326&idx=1&sn=ee8203fa87a7f67dcd8330a0b004c65c": "用友NC Cloud blobRefClassSearch接口存在反序列化漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515433&idx=2&sn=12a4029f28499aee5deb901f1f9a4af1": "建了个SRC 专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=Mzg4MjcxMTAwMQ==&mid=2247488433&idx=2&sn=abd228e4cc8ecf441035fc371270161a": "重发【已复现】e-cology v10远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDUwOTU1MA==&mid=2247484772&idx=1&sn=85c4fd0aad46a6cb6091c8b6e7b6352d": "【漏洞复现】用友 U8-cloud ActionServlet sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485566&idx=1&sn=da88bb6b448a3cc1a3bc3837b5065f8a": "某8国语言黑色UI货币合约交易所存在前台RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515471&idx=1&sn=ca35172561ae389cc3dbe5bb64c50377": "记!一次供应链导致教育漏洞通杀,通杀五十多个学校弱口令,SQL注入,越权修改密码!(新手小白也能看懂的文章)", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247489593&idx=1&sn=3a5ae6bb20fa8179fa2840ecd000a46f": "近期暗网0day售卖情报预警", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247487588&idx=1&sn=faed80b767169e8376b0762365f4b77e": "【0day】某智能科技有限公司票务管控平台服务端存在任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxMTY1MTIzOA==&mid=2247484252&idx=1&sn=8070a3e92564931fd641c093d16cac65": "【漏洞复现】HTTPD-AC1.0服务未授权漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515472&idx=2&sn=a0b7a52975924ea18b659ff389b3401b": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247488186&idx=1&sn=6019361be713f08c52d31a36a2884ef9": "探索 RPC 运行时中的三个远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MTkwMTI5Mw==&mid=2247485575&idx=1&sn=9fdae79874c329a20250cf1b5b558487": "某思CMS V10存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487339&idx=1&sn=f9851d542e5ffb6a7ecb9fc3f3ef3c22": "智能AC管理系统HTTPD-AC 1.0服务存在未授权访问漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487489&idx=3&sn=eeec96bacae92ec8af139c90b086005f": "【漏洞复现】Kedacom-Phoenix-监控平台任意文件上传", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487489&idx=4&sn=98af270f66e28f390628d681e247ad33": "【漏洞复现】九思OA系列漏洞之文件上传-文件读取-SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487489&idx=2&sn=bc6a6bc9014e5f1c67428cbfd6ea3a1f": "【漏洞复现】某联达软件存在前台任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIyNjk0ODYxMA==&mid=2247487489&idx=1&sn=c79f3987b9a591ee2832d864b94900ec": "【漏洞复现】泛微e-Mobile移动管理任意文件读取", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515495&idx=2&sn=da6a6ac0f91f10afad4ab7f3301b6a41": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247495378&idx=3&sn=25ac7d0dee1e058434544afc88c7dab5&chksm=fa59403fcd2ec929310f6c82fa008e4a567bd7f3afadca5d246f1103e2ebbd5989f8c7d65787&scene=58&subscene=0#rd": "36套.NET系统漏洞威胁情报(09.19更新)", "https://mp.weixin.qq.com/s?__biz=MzkwMzY5NTg0Mg==&mid=2247484014&idx=1&sn=6b07fad0650e976a8fac19f733225be0": "某微E-Mobile client_cdnfile 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDUwOTU1MA==&mid=2247484779&idx=1&sn=367fdd9d5cbaa74d48afe3482b65b353": "【漏洞复现】华三 H3C IMC 智能管理中心 _byod_index.xhtml RCE", "https://mp.weixin.qq.com/s?__biz=MzkxNDcxNjk1MQ==&mid=2247483795&idx=1&sn=97ae2ab36c56ae80a7e4dc57b51afef5": "灵当CRM marketing_index.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjczNzEyMw==&mid=2247483760&idx=1&sn=6ac5833546565e4e67f227df23207f35": "记一次二进制漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkzNjczNzEyMw==&mid=2247483828&idx=1&sn=02276ec92924d5255fc36a4d8cda5fb5": "PWN基础入门_栈溢出漏洞简单利用", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515555&idx=2&sn=e34d8b1663fef5c51219700f5f819dbe": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487378&idx=1&sn=9c1726c2f6cba503c6a1146deebcb23c": "灵当CRM multipleUpload.php接口处存在文件上传漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247502426&idx=1&sn=86b60a346cf8656f4d63207bc18cae3d": "【成功复现】Docassemble任意文件读取漏洞(CVE-2024-27292)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247495485&idx=3&sn=2c12b1669672a889ac90a71c75169b1d&chksm=fa5941d0cd2ec8c6da20139acc782850b58e11a26f9592a62f1ba61ce878cdc30a455cd054ca&scene=58&subscene=0#rd": "37套.NET系统漏洞威胁情报(09.24更新)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247487674&idx=1&sn=dff8eba46a5425ab7f994167109a25ba": "[周报]2024_9_19-2024_9_25 POC更新进度", "https://mp.weixin.qq.com/s?__biz=MzkwMjYzNTE4MA==&mid=2247485097&idx=1&sn=f3d52324121d9c6445d67d3883ad79dd": "【Nday】某混ERP系统 TaskCarToQueue SQL注入漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=MzkyMDUwOTU1MA==&mid=2247484834&idx=1&sn=800f3f56a2d862d3c0f5f16b61583c40": "【漏洞复现】泛微OA E-Cology HrmCareerApplyPerEdit.jsp SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MDQ5MjY1Mg==&mid=2247514252&idx=1&sn=3c65551213ad37aa430b9a928fab677f": "跨平台漏洞扫描器 -- EZ(9月25日更新)", "https://mp.weixin.qq.com/s?__biz=MzkyMDUwOTU1MA==&mid=2247484842&idx=1&sn=036d5aa9c7d6caf62cb2248bdcfbe568": "【漏洞复现】赛蓝企业管理系统 DownloadBuilder 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247495641&idx=3&sn=8a84679c1f0b07870bc57d97f9dd9970&chksm=fa594134cd2ec8225cf31371d15fdac42eb17ae0a12ede90227104bdcd43ee4a9947ff39b5d2&scene=58&subscene=0#rd": "38套.NET系统漏洞威胁情报(09.30更新)", "https://mp.weixin.qq.com/s?__biz=MzkzOTQ5MzY3OQ==&mid=2247484134&idx=1&sn=5e0a98cd6317a39e02170b350f3b8099": "Linux 默认打印系统RCE漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU4NDY3MTk2NQ==&mid=2247490735&idx=1&sn=c8f51c283a18cad600c0473d883c9968": "RCE in zimbra CVE-2024-45519", "https://mp.weixin.qq.com/s?__biz=MzkyMDUwOTU1MA==&mid=2247484845&idx=1&sn=9005bacb63c496fec108427ad7aefde8": "【漏洞复现】泛微OA E-Cology WorkflowServiceXml Sql注入", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247495664&idx=1&sn=881387049afb410d004cc8ecba50476c": "39套.NET系统漏洞威胁情报(10.02更新)", "https://mp.weixin.qq.com/s?__biz=MzkyMDUwOTU1MA==&mid=2247484846&idx=1&sn=3a340aeb4873e66d555ac9d9564718e0": "【漏洞复现】华天动力OA downloadWpsFile 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDUwOTU1MA==&mid=2247484848&idx=1&sn=35c630e3939d89cfdfd4488e606714d4": "【漏洞复现】泛微OA E-Cology ifNewsCheckOutByCurrentUser.dwr Sql注入", "https://mp.weixin.qq.com/s?__biz=MzkyMDUwOTU1MA==&mid=2247484849&idx=1&sn=c8f8be1eb397698f7b83ca710d84bded": "【漏洞复现】赛蓝企业管理系统 ReadTxtLog 任意文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMDUwOTU1MA==&mid=2247484850&idx=1&sn=a974bb78e24c30cb87fe0dc079f8bba8": "【漏洞复现】金蝶云星空ERP SaveUserPassport .net反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzUxMjc0MTE3Mw==&mid=2247494206&idx=1&sn=53874173f0b08cbd2f2beb8eb66b410c": "Express 3.x 存在开放重定向漏洞!立即更新以避免潜在风险(CVE-2024-9266)", "https://mp.weixin.qq.com/s?__biz=MzU4MjYxNTYwNA==&mid=2247487501&idx=1&sn=0961e11b95dad0b8a5be7da2f8f29e99": "CVE-2024-45507分析学习(Poc,EXP)", "https://mp.weixin.qq.com/s?__biz=MzkwMjYzNTE4MA==&mid=2247485105&idx=1&sn=d52f956198614ec232abd363536a3ba5": "【Nday】苹果IOS签名安装系统 request_post 任意文件读取漏洞【附poc】", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484035&idx=1&sn=a1e5fec01d77476d0dbfab488e8253ba": "【漏洞复现】DataEase 数据库配置信息泄露漏洞(CVE-2024-30269)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487483&idx=1&sn=39f5431a4ebab248283593a789a2c205": "微信公众号小说漫画系统fileupload.php接口存在任意文件上传 附POC", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247487496&idx=1&sn=b5325c0a3dbd7c88c71e6b571069ab33": "孚盟云平台AjaxSendDingdingMessage.ashx接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzkyMjcxNzE2MQ==&mid=2247484069&idx=1&sn=76bb22a1092e679d59e4f72a79140231": "【漏洞复现】孚盟云系统_Ajax_AjaxSendDingdingMessage接口处存在sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515926&idx=2&sn=21b4470bffb348ba83e54b8fe2336742": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247540846&idx=1&sn=1f650057538a092e0d99c957b0269cae": "黑客必刷的16个靶场(渗透基础、CTF、漏洞实战、内网渗透)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247495927&idx=3&sn=6340fb33f191831c9331e80b17ec66b1&chksm=fa595e1acd2ed70c0e72c47aee0b6f3d72718bb516dd23798d1eca7567f2055f61418f2b93e1&scene=58&subscene=0#rd": "40套.NET系统漏洞威胁情报(10.11更新)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247515947&idx=1&sn=6a4966bc8e2946d2cb9e52edb7a2a5b2": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659210622&idx=1&sn=eed625a86b29768bce965c7a9dc9378f": "公交车系统多处RCE漏洞【我最近跟公交车杠上了】", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496003&idx=2&sn=27bf2ed18f664c836fdabaac79c5fdc6&chksm=fa595faecd2ed6b860f060550a55f53fde00e5b09ebe9b1266caf5ab84442132a5a136cb4eb4&scene=58&subscene=0#rd": "41套.NET系统漏洞威胁情报(10.15更新)", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247485185&idx=1&sn=d8d2da272b024a9dc34e068fbf213b29": "【提权】最新 windows 提权 CVE-2024-35250", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516132&idx=2&sn=7410d526cc35778bc6fd0a4cbe386455": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492644&idx=1&sn=68cf1da50833d7661ef54fef2e9d60f9&chksm=96f7fb49a180725fa70e1df9968b661694eeef5bbfd398f61aff77400c7ee770ffa86e0d51ed&scene=58&subscene=0#rd": "【已复现】Oracle WebLogic Server 远程代码执行漏洞(CVE-2024-21216)", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659210658&idx=1&sn=14e5f8e3ae9ec50090ac58d590851990": "英飞达软件有限公司信息泄露漏洞【带工具】", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247510960&idx=1&sn=6f5447b3ce38ef2bff32143af90115d6": "漏洞复现|Eking管理易Html5Upload接口任意文件上传漏洞复现", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247510960&idx=2&sn=e9424546d00c280b0bac0222609e90f0": "漏洞复现|信呼RockOA openmodhetong 前台SQL注入漏洞(CVE-2024-7327)", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659210700&idx=1&sn=303cc3f4dd8a3e90d79a77ec5e2d5021": "明源云ERP报表服务信息泄露漏洞导致后台登录", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247511181&idx=1&sn=fe5d74d382772456e3745072eceb44b4": "漏洞复现|Apache OFBiz代码执行漏洞(CVE-2024-38856)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496182&idx=3&sn=f9018f80f2fd36a4c07e8bd9f8fdd0f5&chksm=fa595f1bcd2ed60dda83645fc8c5b3568cf2b7d0792452a64fde0a032a3a6d62e7a6c62a71af&scene=58&subscene=0#rd": "42套.NET系统漏洞威胁情报(10.23更新)", "https://mp.weixin.qq.com/s?__biz=MzUxMjc0MTE3Mw==&mid=2247494310&idx=1&sn=2d2d04e123e8c3d56e9503a36f97019a": "Cisco Adaptive Security Appliance 软件 SSH 远程命令注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247511943&idx=1&sn=7be9a47bb2c4aff82bd3e3333ba731c6": "漏洞复现|用友畅捷通-TPlus FileUploadHandler.ashx 任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY5Nzc1OA==&mid=2247484032&idx=1&sn=deb1adbff41e2bd3dd94f372b38bd78f": "明源云ERP报表服务GetErpConfig信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247511945&idx=1&sn=15fc6c494f45e02d3c5ad67df4f1f3a4": "漏洞复现|Qualitor系统接口processVariavel.php命令执行漏洞(CVE-2023-47253)", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY5Nzc1OA==&mid=2247484032&idx=2&sn=5f4a4c329391f13a806bc414958a39bb": "网动统一通信平台ActiveUC信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0NTY5Nzc1OA==&mid=2247484032&idx=3&sn=72a06923d8f79b803e4c71a75a110cca": "英飞达医学WebUserLogin信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516303&idx=2&sn=5778437a246049bfebc5df748b50c5e8": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485882&idx=1&sn=5bcfd307ba64ba66467533247a3cf54f": "「漏洞复现」Cyberu200bu200bPanel upgrademysqlstatus 远程命令执行漏洞(QVD-2024-44346)", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247512179&idx=1&sn=d0e4d882fdfa97fc9d2e68ce04c1f5df": "精彩复现|JeecgBoot 权限绕过漏洞:AviatorScript 表达式注入问题剖析", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247494980&idx=1&sn=8a18a7c58f8a08ec83734e1e2def6c8a&chksm=96d8e69ea1af6f8812a5821ad2b4b2de493d2946c72e472dc61c884ffd822a69dbdf6c948c8d&scene=58&subscene=0#rd": "漏洞盒子SRC:「基因」优势打赢漏洞收集持久战", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492651&idx=1&sn=bf7370a6aa81e52fb02de73a1822bc65&chksm=96f7fb46a1807250fec7797040547d9a8f0fac669b94e75124aff19059caaf1cc84cd75e3d6f&scene=58&subscene=0#rd": "【已复现】CyberPanel upgrademysqlstatus 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516547&idx=2&sn=ef38656157b9ac6144052aed8e84ddb1": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247512180&idx=1&sn=be1bb96263d84e21d87febd4d44ca6bb": "漏洞复现|高校人力资源管理服务平台系统ReportServer接口存在敏感信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwNTI1NDI3MQ==&mid=2649619683&idx=1&sn=60a15fd441cd9eab219b60845a04dbe7&chksm=830621f3b471a8e5e11cc53b92b9756704bbee8115dbe4190e0b328174348e1c15e74a33205e&scene=58&subscene=0#rd": "Apache Solr漏洞CVE-2024-45216分析", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247512181&idx=1&sn=e7cc39ba87feeec6790afd43f9afc8c4": "漏洞复现|迪普SSLVPN存在文件读取漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496374&idx=2&sn=9758658db671e8f95f2dd01a213a54cf&chksm=fa595c5bcd2ed54d2aec9c2e692be3c19efd199d0c450f8372d8c30f3033808fd54c1b34c05c&scene=58&subscene=0#rd": "43套.NET系统漏洞威胁情报(11.01更新)", "https://mp.weixin.qq.com/s?__biz=MzUxMjc0MTE3Mw==&mid=2247494329&idx=1&sn=2a858dbb91398426920e066362c37cd0": "CyberPanel远程命令执行漏洞(CVE-2024-51567)", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485919&idx=1&sn=cf660aceb9e1a40a084ff7a8871e8e2c": "「冷漠安全」十月份0day_1day_nday漏洞汇总", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516620&idx=2&sn=a026a718e0433263bb4c1ce7949213fe": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247512232&idx=1&sn=d148df835abbc43fb9571364ab040468": "漏洞分析|Cyberu200bu200bPanel 控制面板存在远程命令执行漏洞(QVD-2024-44346)", "https://mp.weixin.qq.com/s?__biz=MzkzNzU5MDMxOA==&mid=2247484113&idx=1&sn=b22a7f15608d9f77dd44cd962b9e7bb9": "1day TOTOLINK路由器 LR350免密登录后台(CVE-2024-10654)附POC", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247516713&idx=2&sn=567fd12f91f2fb6eeb56d3185569258b": "建了个SRC专项漏洞知识库", "https://mp.weixin.qq.com/s?__biz=MjM5MTAzNjYyMA==&mid=2650593671&idx=1&sn=978e04c0d21de26307c2438fd6af6389": "深信服漏洞治理综合技术能力获认可!CNVD给予12星好评", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496555&idx=2&sn=d9721f1c584ea638e4d85ae57490e97d&chksm=fa595d86cd2ed49008ca9adfbbb78fd6f5c71e1357031398deff956f273fccb2e1cd18952f7a&scene=58&subscene=0#rd": "44套.NET系统漏洞威胁情报(11.08更新)", "https://mp.weixin.qq.com/s?__biz=MzUxMTk4OTA1NQ==&mid=2247484564&idx=3&sn=011a195568b0bfdc9f5e88dcaed20666": "【漏洞复现】易思智能物流无人值守系统DownFile任意文件读取", "https://mp.weixin.qq.com/s?__biz=MzkxNjQyODY5MA==&mid=2247486922&idx=1&sn=fa5403e9fb2b5572ffb28ad0b872e5b7": "【经典回顾】任意用户密码重置漏洞解析", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247485996&idx=1&sn=e5b1cefeb81713f045269f0dc74c9464": "「漏洞复现」易思智能物流无人值守系统 login SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzOTM2MzczNQ==&mid=2247485115&idx=1&sn=208c6b149bb78cfc60abc037d2ac895f": "漏洞推送_易思智能物流无人值守系统login存在SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247496668&idx=3&sn=17eaae61f32d1549d14b297d1450e268&chksm=fa595d31cd2ed427bdd3e50091b302be05dc6652c666bda6aa87c92868861fbb87e3ef3498c7&scene=58&subscene=0#rd": "45套.NET系统漏洞威胁情报(11.13更新)", "https://mp.weixin.qq.com/s?__biz=MzI0NjE1NDYyOA==&mid=2247484672&idx=1&sn=b29631f90f08d44608ca93414b61a942": "【漏洞分享】用友反序列化漏洞 NC-Cloud blobRefClassSearch 反序列化 用友RCE", "https://mp.weixin.qq.com/s?__biz=MzIyNTIxNDA1Ng==&mid=2659211079&idx=1&sn=f967da206f6499f163ebc87084cd186f": "【漏洞复现】D-Link NAS设备 account_mgr.cgi 未授权RCE漏洞复现(CVE-2024-10914)", "https://mp.weixin.qq.com/s?__biz=MzkzNjYwODg3Ng==&mid=2247485708&idx=1&sn=45797d1d040807d63eab4bccee45952b": "【漏洞复现】某平台-poweroms-APPGetUser-sql注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwODM3NjIxOQ==&mid=2247502141&idx=1&sn=f7e19ad84c7a39f767da0b54cad21967": "网传 PHP 0day ?", "https://mp.weixin.qq.com/s?__biz=MzI5MDcyODIzNg==&mid=2247484665&idx=1&sn=d007c3bd4e1bce3f81bade335bb1e6be": "【src漏洞挖掘】恶意文件xxe漏洞是什么?怎么挖?", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247485454&idx=1&sn=9559ea0622537e93574b1247ba9ada9f": "渗透测试案例 _ 证书站学校漏洞挖掘(二)", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247545622&idx=2&sn=3099cfe4cf75dff1d387631371431aec&chksm=f9ebedbbce9c64ad21b4f0d3a2ece60e6a5a01157d7c4621ea2a3c811ddf2158e8e72bc5e9b5&scene=58&subscene=0#rd": "资料下载 _ 电力安全治理、推动数字金融高质量发展行动方案、湖南省数据资产管理、2024上半年暗网报告、大模型安全漏洞报告...", "https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247514008&idx=1&sn=5c670c62b4c5fa4a355f424e56645be1": "网安瞭望台第9期:0day 情报,OAuth 2.0授权流程学习", "https://mp.weixin.qq.com/s?__biz=Mzk0MzUxOTc2MQ==&mid=2247484788&idx=1&sn=dedff1df112f5ec319e5b27f37b31f7a": "漏洞提交通道关闭通知", "https://mp.weixin.qq.com/s?__biz=MzkyNDY3MTY3MA==&mid=2247486349&idx=1&sn=5069dd6e02130465e3f4a9570e58caac": "「漏洞复现」JeecgBoot onlDragDatasetHead_getTotalData SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNjM4OTM1Ng==&mid=2247484057&idx=1&sn=6e0bddba024b89166e4775b6524830f1": "改个名,叫 “poc+1”", "https://mp.weixin.qq.com/s?__biz=MzU1NjgzOTAyMg==&mid=2247522134&idx=1&sn=3c53d74f4c29806fea82e55665086d92": "今晚8点免费课 _ 二进制漏洞利用 Pwn之初体验", "https://mp.weixin.qq.com/s?__biz=MzI5MDcyODIzNg==&mid=2247484747&idx=1&sn=99e476601d7a1ab2b97f5184a0deb0c2": "【src漏洞挖掘】超简单逻辑漏洞之“天天过生日漏洞”!", "https://mp.weixin.qq.com/s?__biz=MzkzODQzNTU2NA==&mid=2247485932&idx=1&sn=f0b5d578627affa8e98c1f8549c7a477": "【首发1day详情】CVE-2024-51479 全网首发漏洞复现分析+POC (Next.js权限绕过)", "https://mp.weixin.qq.com/s?__biz=MzU1MTA4ODM4MQ==&mid=2247485767&idx=1&sn=26a1739e56efcc8f65c6d620b2201642": "手写一个漏洞靶场玩玩", "https://mp.weixin.qq.com/s?__biz=Mzg3MTE0NTg4OQ==&mid=2247484051&idx=1&sn=2120d2cda3aa5f3b5ab1f41c7b26c1ef": "勒索软件攻击中利用了关键的 Cleo 漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651311189&idx=1&sn=3bb87c68e235612df53f3e19c0978f53": "HACKPROVE DISCORD社区:匿名交流、漏洞鉴定,还有神秘环节?", "https://mp.weixin.qq.com/s?__biz=MzkxMzIwNTY1OA==&mid=2247510709&idx=1&sn=0ba982135c9676de49536fc693b7eb38": "自建IPTV源iptv-sources", "https://mp.weixin.qq.com/s?__biz=Mzg2NzY0MzM3Ng==&mid=2247484039&idx=1&sn=aa24d5513649d3c1c35aafdf95bb280b": "【黑帽大会2024】生成式AI助力开发的安全隐患与漏洞!", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247502932&idx=1&sn=e25ff79a3219ee2852cf3acaf061c735&chksm=cfc56b0bf8b2e21de32cebb397dd7229aedd586b34f0f047b129bb6d3150a34e41c51b2d7864&scene=58&subscene=0#rd": "月圆人团圆,网安护周全——360漏洞云祝您元宵佳节幸福美满", "https://mp.weixin.qq.com/s?__biz=Mzg4NTUwMzM1Ng==&mid=2247513054&idx=1&sn=71557c49ab4d8aeb0aacf310d161f8e1": "你们真行,0day都不要?给我呀!!!", "https://mp.weixin.qq.com/s?__biz=MzkzNzY5OTg2Ng==&mid=2247500800&idx=2&sn=073d9340ae748aba1da028d541fa411d": "【漏洞通告】Veeam Backup Enterprise Manager身份验证绕过漏洞(CVE-2024-29849)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247503663&idx=1&sn=bcc78eeb0df6d8f28972e7a1b672eea8": "漏洞挖掘展锋芒,五一佳节乐无疆——360漏洞云祝您五一劳动节快乐", "https://mp.weixin.qq.com/s?__biz=MzkwODM0MTgyNQ==&mid=2247489555&idx=1&sn=26d41fdb1cf22a34a78bcc50863c1854": "漏洞挖掘铸辉煌,五一安康乐满堂——360众测祝您五一劳动节快乐", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247498639&idx=1&sn=a3f58180fc77231ef9995c3bfc8c9634": "【预警】存在后门的AnyDesk Exploit", "https://mp.weixin.qq.com/s?__biz=MzkxNTIxNzAwNg==&mid=2247484221&idx=1&sn=03504f986bdb7ede658cef148d9103c3": "【漏洞亮点分析】SQL注入亮点解读分享1", "https://mp.weixin.qq.com/s?__biz=Mzg2MTg4NTMzNw==&mid=2247484267&idx=1&sn=600a4211acc304489869fb85518ff512": "20个存储桶,100多G文件,近5万敏感数据,被判定低危漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NDE1MjU2Mg==&mid=2649877196&idx=1&sn=19c499e2cf0110b58c8949023e55495a": "Google惊爆漏洞!任意账户关联手机号均可被暴力破解 飞天诚信:硬件安全密钥不用关联手机号", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247500142&idx=2&sn=cf476f2a200acb32881e43ae5476faef": "Realtek RTL8762E SDK v1.4.0 中的配对随机数过早注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531375&idx=1&sn=15a705cf292ef9d6f2122c57749947de": "UAT-6382 利用 Cityworks 零日漏洞传播恶意软件", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484900&idx=1&sn=987e33d854d2403c3a6e423aa4282b73": "【复现】Gogs 远程命令注入漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651323846&idx=1&sn=ce9854e060a565ed66030f32df82d949": "实战漏洞报告合集首发,赏金已超万元", "https://mp.weixin.qq.com/s?__biz=Mzg3MDcxNTkyMA==&mid=2247484601&idx=1&sn=647bbc72478c156bb98058d68cf4101d": "破解和sql漏洞利用,双管齐下的1433", "https://mp.weixin.qq.com/s?__biz=MzI3Njk2OTIzOQ==&mid=2247486927&idx=1&sn=dbb77f91c713bd32ff77f0f93dc4378f": "SDL 77_100问:日常的漏洞运营,也应该是SDL团队来做吗?", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499957&idx=1&sn=87ae1a8de70567795058011dbd6f5cb8": "分析和挖掘 .NET 系统全局权限访问绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484481&idx=1&sn=12f6a7fef44109a965c102f35130580b": "【已复现】用Notepad++提权漏洞社工钓鱼控制系统最高权限", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486060&idx=3&sn=a5a5c6016886294629d6e3236bd45cf4": "CVE-2025-33073|Windows SMB权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247486065&idx=1&sn=2b17d4f5f226e587c16f63c58cafc874": "【安全风险通告】Roundcube Webmail后台代码执行漏洞 (CVE-2025-49113)", "https://mp.weixin.qq.com/s?__biz=Mzg5NTU2NjA1Mw==&mid=2247503251&idx=1&sn=4348ac59de6d6181d46ee70e3fb46e97": "【攻防实战】实战中的某钉RCE", "https://mp.weixin.qq.com/s?__biz=MzkyNzQzNDI5OQ==&mid=2247486706&idx=1&sn=d9e5d1e4447758f5410a1fed8c43be42": "【漏洞预警】IBM WebSphere Application Server 远程代码执行漏洞(CVE-2025-36038)", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096358&idx=2&sn=0bdd6716511352a19ae6a051668361dd": "思科 ISE 漏洞允许远程攻击者执行恶意命令", "https://mp.weixin.qq.com/s?__biz=MzI0MTUwMjQ5Nw==&mid=2247489259&idx=1&sn=289b70216c1df342d2d2f5405f38c0f1": "有限路径遍历 RCE 之旅,赏金 40,000 美元!", "https://mp.weixin.qq.com/s?__biz=MzkyNzIxMjM3Mg==&mid=2247490817&idx=1&sn=ed22afb84906586ab151f012d376f7b3": "若依Vue漏洞检测工具", "https://mp.weixin.qq.com/s?__biz=MzkwOTE3MzAxOA==&mid=2247485724&idx=1&sn=78443e46894a904a053cbdf53fa1fe02": "Cobaltstrike反制浅析——从伪装上线到RCE", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531434&idx=1&sn=286150bf9b2ff07aab70a2d1b6518619": "威胁行为者利用 CVE-2025-3248 传播 Flodrix 僵尸网络", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555326&idx=2&sn=cebb6d2e0961666408a1b3ae0bc5cac4": "【免费领】新手必备!Web安全漏洞挖掘实战入门教程", "https://mp.weixin.qq.com/s?__biz=Mzg3MTY3NzUwMQ==&mid=2247490570&idx=1&sn=d35d9af3d4bc790baa81a45861ae4c91": "【多人运动】明日开启-漏洞情报群启动!", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486063&idx=1&sn=cb7aa62c4cda3c38d7fe2d23d4d77b49": "【漏洞复现】CVE-2025-33073|Windows SMBxa0权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490329&idx=1&sn=7a5a2c55b2fbbb3fa44d710232beeb33": "【高危漏洞预警】Apache Seata反序列化漏洞(CVE-2025-32897)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324036&idx=3&sn=986b86eed49f12e022d02e8a20274ca8": "群晖ABM漏洞泄露全局客户端密钥,危及所有微软365租户", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523404&idx=2&sn=3ff2f901d13c30f8048d7a38b567880f": "蓝牙芯片集多个漏洞可导致攻击者窃听或盗取敏感信息", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096366&idx=1&sn=1f824c99f63b3324ed70f4623df29c43": "Chrome 0 Day 在野外被利用以执行任意代码漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458596324&idx=2&sn=9aceb4a1f80e7cd75b8c79e45465f11a": "Linux Sudo 曝重大漏洞可提权至root并绕过主机限制,速更新!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523414&idx=2&sn=35dbec1ac12ce977cb52bd37b9d9860a": "MongoDB 服务器预认证漏洞可用于触发 DoS 条件", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494141&idx=2&sn=b3c49f08044fa93f0b294e0ed8852e00": "【在野利用】Chrome V8 引擎类型混淆漏洞(CVE-2025-6554)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494141&idx=1&sn=7bf65d26e4d8ee07d1bb79a849c00f27": "【已复现】Linux sudo 本地提权漏洞(CVE-2025-32462、CVE-2025-32463)", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247499989&idx=3&sn=ffe4d01494f91fdfb954e714686d7dc2": "实战级权限维持,从配置到命令执行一键部署 ViewState WebShell", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500070&idx=1&sn=9cb23c555cc9c7543e717b2bda925227": "CNVD漏洞周报2025年第24期", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487528&idx=1&sn=30eebba649d6c713043d17db3ea68364": "Cisco ISE ERS u200bu200bAPI CVE-2025-20281 RCE", "https://mp.weixin.qq.com/s?__biz=MzkzNjIzMjM5Ng==&mid=2247492739&idx=1&sn=a31825fbcf1672e35b9a57a9b549c2db": "从漏洞到韧性:服务器安全防护全景解析", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503550&idx=2&sn=2f98d1c24d7cacca9fa9bfac2fb1adb8": "【已复现】Linux sudo 本地提权漏洞(CVE-2025-32462、CVE-2025-32463)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458596501&idx=3&sn=8d167e29f2f70304d76cb865431e2fad": "13岁少年Dylan发现 Teams 漏洞,微软为其修改赏金计划", "https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247545079&idx=2&sn=65abb29b5e5223f43305537aabeaa842": "2025攻防演练必修高危漏洞集合", "https://mp.weixin.qq.com/s?__biz=Mzk1NzE0ODUyOA==&mid=2247492291&idx=1&sn=016611bd54e6385d9c7ac784ba2e1355": "【复现】Google Chrome浏览器在野利用漏洞(CVE-2025-6554)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523440&idx=2&sn=85a84a9138ea24b09e9ea0bcb9efe061": "速修复!Grafana 修复中存在四个严重的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664245177&idx=2&sn=6683aa774f604f52b1f4752b54de0147": "前沿 _ 基于人工智能的漏洞挖掘应用实践探讨", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523450&idx=2&sn=6fb767fa5ebe3a22a7b0a961be3c6df2": "CISA提醒注意已遭利用的两个 TeleMessage 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514637&idx=1&sn=fa07c6d1743943a472d11181a4524966": "微软云身份曝严重漏洞:对低级别用户过度授权,导致客户VPN密钥泄露", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497805&idx=1&sn=8e219abdc3c2828bd937f2aaa04b6cd7": "7个让我赚取漏洞赏金的技巧", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247531649&idx=2&sn=e7df67683a084053ceec541815be401e": "CVE-2025-53367:DjVuLibre 中可利用的越界写入漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyODY3NjkyNQ==&mid=2247485146&idx=1&sn=af8e2991ba6ad6d2a3648681ae65aca0": "Gogs最新RCE分析与利用详情 全网首发", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247511636&idx=1&sn=94681386248c3ac747670b841ce822a3": "《使命召唤:二战》曝重大安全漏洞,数千玩家电脑遭远程控制", "https://mp.weixin.qq.com/s?__biz=Mzk0MjU5NTY2MQ==&mid=2247484411&idx=1&sn=219cff6f844ff1b4d4f3a7c23eebf135": "【漏洞复现】0day-网关系统存在信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488231&idx=1&sn=c07da2830aebc1cfa6f73c23b3ced056": "护网行动进行时!攻击队武器库新增10大高危漏洞,蓝队紧急加固!", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324483&idx=3&sn=1ef1f6e0a656c9697273135ef8bdf2d5": "新型僵尸网络利用四信工业路由器漏洞发动DDoS攻击", "https://mp.weixin.qq.com/s?__biz=MzUyODkwNDIyMg==&mid=2247550744&idx=1&sn=2af56c38b8479339ec6a8b2406b7c962": "某前后端分离BI低代码通用漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5NDcxMDQzNA==&mid=2247489743&idx=1&sn=48f097e5b2792e8b696abd83ed3b00a0": "CVE-2025-6218 Poc复现及1Day研究", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096374&idx=1&sn=aa9233641ab5de3a299f4d20e0b510ea": "多个 PHP 支持 SQLi 和 DoS 攻击漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTM4OTQ5Mg==&mid=2247636489&idx=4&sn=2133ab4c53798a33591c247a0492d1d0": "夜鹰APT组织利用微软Exchange漏洞攻击国内军工与科技领域", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324515&idx=1&sn=e502828a52cb7663487c30f07c064387": "联想Windows目录可写文件漏洞可隐秘绕过AppLocker防护", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497815&idx=1&sn=2e590228585b24abbfe047e87ea21252": "赏金15000美元的 RCE", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496107&idx=1&sn=a0eb976580ef5924a6411c6055618526": "CNVD漏洞周报2025年第25期", "https://mp.weixin.qq.com/s?__biz=Mzg4NDk4MTk5OA==&mid=2247485596&idx=1&sn=7bc13ba63d58c7e30f858f1d985f6a56": "必看---当前国护0day漏洞权威汇总", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247521663&idx=1&sn=1a7aa58916d280391fd2526ffe2c169f": "护网情报 |汉王e脸通综合管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458596966&idx=1&sn=d16d119a7e4c6b4d16fe0e3570c1b46f": "CVE-2024-0582 内核提权详细分析", "https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447900881&idx=1&sn=8830ee98683a574b4f6ba828fc40e84e": "CVSS 10.0!思科犯下“低级但致命”的错误,统一通信管理器曝出硬编码root密码漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjY1ODE5Mg==&mid=2247486439&idx=1&sn=7933cffc8933c2ce2452dba21bc125eb": "Ingram【网络摄像头漏洞扫描工具】", "https://mp.weixin.qq.com/s?__biz=MzA3NTc0MTA1Mg==&mid=2664712402&idx=1&sn=c474ae778a24fb49e2dfe5be1573a1ac": "Redis hyperloglog 远程代码执行漏洞(CVE-2025-32023)复现研究", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070555&idx=4&sn=a0045b414dc83b5ccab5d88ec4c10558": "【安全圈】《使命召唤:二战》曝严重漏洞,PC玩家遭远程黑客攻击,游戏被紧急下线", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247573910&idx=2&sn=ca0beb1967b43d9d39bca8eeb7715732": "一个用于 Burp Suite 的插件,专为检测和分析 SQL 注入漏洞而设计。", "https://mp.weixin.qq.com/s?__biz=MzkxNzY2MjU2Mg==&mid=2247483857&idx=1&sn=93db8bf128d335497ee7d8c989f635a3": "平平无奇的越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1NTM4ODIxMw==&mid=2247501391&idx=1&sn=d7d59fa8789b9b499680ba16642dbbb0": "漏洞速递|Redis CVE-2025-32023 RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507831&idx=1&sn=0494cdb26d682d39f195fa3ebed8fef8": "收漏洞!收X情报社区的漏洞!", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492859&idx=1&sn=66a45e4f38874a4b0c0e0d9f5234dfe9": "【已复现】Redis hyperloglog 远程代码执行漏洞(CVE-2025-32023)", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247525965&idx=1&sn=4cce799f1eac9ea200619ceea69704db": "2025-07微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494180&idx=2&sn=842aa35155a1456c7ffced77317fd433": "【已复现】Windows Update Service 本地权限提升漏洞(CVE-2025-48799)", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486516&idx=1&sn=8ce41df1c1c32eddb5762dc6c362a85b": "新一代SQL注入检测技术,小白也能轻松挖到漏洞!", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503573&idx=1&sn=23659d5f1d53b4d6927caad698660884": "微软7月补丁日多个产品安全漏洞风险通告:12个紧急漏洞、12个重要漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788773&idx=1&sn=55305289f7f57f30bee8bcac340fbe90": "某电动汽车充电控制器曝严重漏洞,可被远程控制", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484909&idx=1&sn=f7c17bd3c58d6e06afe0eee7178e533f": "【复现】泛微Ecology前台SQL注入漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247500394&idx=1&sn=fa2fc8a9b7314e92c8443b15116c277e": "G.O.S.S.I.P 阅读推荐 2025-07-10 完蛋,AI已经可以找到内核的0day漏洞啦?", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523537&idx=2&sn=5d168afda91b79b08357b3c4cc3f579d": "Splunk 修复 SOAR 版本中的第三方包漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTU2NzMwOQ==&mid=2247485271&idx=1&sn=9bd6f0e52177bd802a736f7c9ed39a53": "123456当密码?!麦当劳AI招聘工具McHire漏洞导致6400万求职者数据泄露", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324803&idx=1&sn=c3170ccca7509e132f790f5050e51312": "半导体巨头AMD新型漏洞影响多款CPU,计时攻击可导致数据泄露", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492877&idx=1&sn=f6c804a45992dbfc7e82c40884909de9": "【已复现】契约锁电子签章系统 pdfverifier 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MTY3NzUwMQ==&mid=2247490628&idx=1&sn=08154901b772cc417b47d0eb49d166dd": "2025-7-12日漏洞情报汇总", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503602&idx=1&sn=b6dc54a7100f76968a25f6db47d5e0eb": "【已复现】Fortinet FortiWeb SQL注入漏洞(CVE-2025-25257)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyNTYxNDAwNQ==&mid=2247484920&idx=1&sn=adfe24d7cee65a50ea24cc4d8f7be624": "【漏洞复现】契约锁电子签章系统 pdfverifier 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486079&idx=2&sn=b06c26e63d5694cb6383efb350fb9f34": "【漏洞复现】CVE-2025-6218|WinRAR目录遍历远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk5MDYxODcwMA==&mid=2247483898&idx=1&sn=479ca01aab6c21e9d19081497f01a809": "孚盟云 Getlcon.aspx 接口存在SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496126&idx=1&sn=4bbd11a17c961421e365773e0d458184": "CNVD漏洞周报2025年第26期", "https://mp.weixin.qq.com/s?__biz=MzkwOTE5MDY5NA==&mid=2247506973&idx=1&sn=d258cb8eb078305c2c2e3a6e9ac1b51a": "RXSS! on Mercedes-Benz", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484509&idx=1&sn=058b3c0362ca6c339b1936b23669784e": "JS漏洞挖掘|分享使用FindSomething联动的挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523576&idx=2&sn=cae33dc0a4154ffe056c01f3975eb200": "ImageMagick存在栈缓冲溢出漏洞,可导致RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070668&idx=3&sn=f6738b4d25376f97072651a492c6a6f8": "【安全圈】500美元就能遥控列车急刹?美国铁路12年前的惊天漏洞,如今才被曝光!", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247493321&idx=1&sn=ccb64d65a92e030fab4bd17e36c69881": "一键获取上万份资料和漏洞情报的资源情报网站", "https://mp.weixin.qq.com/s?__biz=MzIwMzU0ODczOA==&mid=2247486946&idx=3&sn=1c613f08674533cd087ddd5f7e44e002": "技嘉主板存在RCE漏洞,POC_EXP请私发我,谢谢", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497447&idx=1&sn=bcc588c3c8ac5d3f6fbbcef7b0a88061": "网络摄像头漏洞扫描工具 _ Ingram", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247539573&idx=2&sn=5e63b2c04cc00ee78f68f039abff0d77": "资产维度分类之全球数据库漏洞大盘点", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500108&idx=1&sn=5214bcced9f87f936538ab7e10b1fe4f": "CNVD漏洞周报2025年第26期", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497892&idx=1&sn=a1df282edd7c66180e2301060336e771": "如何使用 Frida 漏洞利用加密移动 API 中的 IDOR", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651324992&idx=3&sn=2ef9f5b48a5e4cc585fa2555af0fd05f": "Git CLI高危任意文件写入漏洞曝光,PoC已公开", "https://mp.weixin.qq.com/s?__biz=Mzk3NTIyOTA0OQ==&mid=2247485246&idx=1&sn=ab3c5eb8fd8c119eada00719b8986fa0": "Java组件安全&数据处理&FastJson各个版本&JackSon&XStream&自动BP插件&CVE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096390&idx=1&sn=66c0d876dfb455de07d6dd757c11785c": "Node.js 漏洞使 Windows 应用程序面临路径遍历和 HashDoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096390&idx=2&sn=7b2eebc0e92101cb685e047f60813844": "VMware ESXi 和 Workstation 允许执行主机级代码漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjQyODY5MA==&mid=2247487268&idx=1&sn=32c18f49eefc14d6b05cb8af3b337109": "【辟谣】微信最新XSS漏洞?1click?真相原来是这样的!", "https://mp.weixin.qq.com/s?__biz=MzUzOTE2OTM5Mg==&mid=2247490488&idx=1&sn=ad59955ddfe083c98460da614db3e54e": "【风险通告】Oracle WebLogic Server存在未授权访问漏洞(CVE-2025-30762)", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490445&idx=1&sn=d31f158d701b9c31fcc7c33cc05b2c61": "【高危漏洞预警】LaRecipe服务器端模板注入漏洞CVE-2025-53833", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486558&idx=1&sn=e150a399f701a2a8c0b490ea631bfa05": "代码审计-Java项目-反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2MTc4NTEyNw==&mid=2247487071&idx=1&sn=449a01cf695ea85b26246981212e2483": "挖SRC必须知道的25个漏洞提交平台", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488693&idx=1&sn=b67691800d32ebf2dc55f5bc0558137e": "汉王e脸通综合管理平台存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523583&idx=1&sn=f3695d751d9189ce3ff6b61f71cc9942": "谷歌紧急修复已遭利用的 Chrome 0day", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597249&idx=2&sn=0a38ca2fa195a6fe70b51f15cdf2db5f": "速更新!谷歌修复正遭活跃利用的关键零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247583835&idx=1&sn=2754957b43cf398a180399f4a359413c": "Citrix Bleed 2漏洞被网络犯罪分子利用进行攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507850&idx=1&sn=92e3b86bb828888ef9f72653adc6c80c": "漏洞通告 _ 用友YonBIP(R6旗舰版)任意用户密码重置漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664245703&idx=2&sn=5b268c55fba13203ab8183247a139c63": "CNNVD _ 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIxMTg1ODAwNw==&mid=2247500987&idx=1&sn=25f8d604058e852f92ef77abc5548ad6": "WPS 文档中心与文档中台远程代码执行漏洞远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3Mzg3OTU4OQ==&mid=2247493234&idx=1&sn=78f2aa07ca247e24d83adb816efaaf01": "别让__入门慢__拖慢你的脚步_庆尘Src三期课程来袭——聚焦独家漏洞挖掘技巧", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484515&idx=1&sn=d274ebd46203ed436d99ecc51abf3caf": "【已复现】存在20年的Windows虚拟硬盘权限提升漏洞(CVE-2025-49689)", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247514705&idx=2&sn=ed3298db2e4591a6131808dc09a0ecb4": "CNCERT:关于Google Chrome V8存在类型混淆漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzkzNDIzNDUxOQ==&mid=2247500853&idx=1&sn=576d41188ad95e4b9c29db4b606ef5db": "微信桌面端3.9及以下版本均存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247555499&idx=1&sn=f55fba0243e6ea5428e082e3da30a95f": "渗透测试高手-漏洞挖掘中的隐藏陷阱", "https://mp.weixin.qq.com/s?__biz=MzkzMzE5OTQzMA==&mid=2247487737&idx=1&sn=cbb6a1cb0b5f83638f71454a5ffba8d4": "用友OA系统U8Cloud FilterCondAction SQL注入漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484517&idx=1&sn=e03f98bbb89978b550a97c773fa5a27a": "盘点闭眼就扫的RCE漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486091&idx=2&sn=18fd68348f0aa5ac8cf42fe1d25cfe00": "CVE-2025-30762|Oracle WebLogic Server存在未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247490046&idx=1&sn=3e3b0e6e437b0c67ab0fee641495004c": "WX RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247521903&idx=1&sn=1fd7e0366f5859e4c0707a8c6325bcaa": "一键触发漏洞:Oracle云代码编辑器RCE漏洞允许攻击者上传恶意文件", "https://mp.weixin.qq.com/s?__biz=MzkzNTgzOTg4Mg==&mid=2247485687&idx=1&sn=86cffa4f901e856cecc1af10f6c9ab90": "微信rce", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070725&idx=3&sn=0ed096ca126a498dcb6caff13372e355": "【安全圈】黑客利用 Apache HTTP 服务器漏洞,部署 Linuxsys 加密货币挖矿程序", "https://mp.weixin.qq.com/s?__biz=Mzg2Nzk0NjA4Mg==&mid=2247504063&idx=1&sn=3862aedb5fdb4ae21a2600a1dbbfb8e7": "Kernelhub,一个聚合了linux、windows、macOS的提权漏洞合集,带复现过程", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070749&idx=1&sn=050b8e30630112c924e35a27ee30ecd3": "【安全圈】赶快升级!微信Windows端安全漏洞曝光 黑客可执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496156&idx=1&sn=28783f7f38aca937197c716460e77131": "CNVD漏洞周报2025年第27期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496156&idx=2&sn=7858d5d8239a0dde15b3ef6f39a62ac1": "上周关注度较高的产品安全漏洞(20250714-20250720)", "https://mp.weixin.qq.com/s?__biz=Mzg2MTg4NTMzNw==&mid=2247484516&idx=1&sn=3872d7dfca4a596395b59d3c9c0bee98": "25HVV丨联想电脑管家RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MzUwNDEzNg==&mid=2247484305&idx=1&sn=74f8bcf6726c3f25573c3c11d5c7f338": "Golang 也能写出丝滑 GUI?试试 Wails 框架开发GUI EXP工具!", "https://mp.weixin.qq.com/s?__biz=MzU3MjU4MjM3MQ==&mid=2247490189&idx=1&sn=8931feffa6930193a9832388783f7688": "【漏洞情报】联想电脑管家存在远程命令执行漏洞 _ 联想电脑管家RCE", "https://mp.weixin.qq.com/s?__biz=MzkxNTUwNjgxOQ==&mid=2247484400&idx=1&sn=e831c59dacc0e92729b437568f87437c": "从一次waf绕过来学习.Net JavaScriptDeserialize反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMzMwODg2Mw==&mid=2247513122&idx=1&sn=e260c6d32a42deb961028d23ddef7832": "使用联想电脑的伙伴们请注意 | 联想电脑管家RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMjg0MjM5OQ==&mid=2247488109&idx=1&sn=7fa7570f97cc629fecd2820af9742cc3": "小心!联想电脑管家存在rce!", "https://mp.weixin.qq.com/s?__biz=MzI4NzA1Nzg5OA==&mid=2247486006&idx=1&sn=670efdd62c093c7f18dfd3058aab155e": "给开发工程师讲的log4j漏洞原理", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523615&idx=2&sn=cac2857656da7d1c204446add8dfee9a": "CrushFTP 新0day被用于劫持服务器", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523615&idx=1&sn=1df256011200be03dc2afc80016c587e": "固件开发和更新缺陷导致漏洞多年难修,供应链安全深受其害", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503632&idx=1&sn=4ab1a5158296cf2066a8b0a1d42f7fb3": "【在野利用】Microsoft SharePoint 远程代码执行漏洞(CVE-2025-53770)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070764&idx=1&sn=522969c64e7e97b9653ead4faf6c2488": "【安全圈】微软服务器软件被曝严重安全漏洞,黑客借此在全球发起攻击", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649788823&idx=1&sn=2b397642630b9a70a1623898b1607955": "多年补丁难及终端,固件漏洞持续困扰供应链", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138086&idx=2&sn=3b46f80fea1f45497396540150d8a0a2": "国家网信办正式开展个人信息保护负责人信息报送工作;微信 Windows客户端3.9及以下版本被曝存在远程代码执行漏洞 _ 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597663&idx=2&sn=7653176976d03c02843744f4f628e2ff": "7-Zip 曝双重漏洞:恶意文件可致系统崩溃,旧版本用户需紧急升级", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650990970&idx=1&sn=70703fd989d5db86ff515653bf9aaf50": "原创 Paper _ CitrixBleed 2 (CVE-2025-5777) 成因分析", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492890&idx=1&sn=a6e376f994c56d69bd1ef926c3b08fb9": "【风险提示】Microsoft SharePoint 远程代码执行漏洞(CVE-2025-53770)", "https://mp.weixin.qq.com/s?__biz=MzA4NTAxMjA5Mg==&mid=2247484505&idx=1&sn=c0dba45ada70165178714e3b53469b96": "CPU环境复现NVIDIAxa0GPU容器逃逸xa0(买不起gpu的小伙伴有福啦", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070784&idx=3&sn=c065d3383291c74a450df32ea40c4fc0": "【安全圈】7-Zip 存在两处漏洞,或引发拒绝服务攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070784&idx=4&sn=24b532f0ec23a1ec4ea0d7342a8a4624": "【安全圈】NVIDIA 容器工具包被曝高危漏洞:权限提升和任意代码执行", "https://mp.weixin.qq.com/s?__biz=Mzk5MDYxODcwMA==&mid=2247483995&idx=1&sn=e1a8829d4e7182eb79a9925774ad8248": "【已复现】泛微OA前台未授权登录认证绕过+远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486590&idx=1&sn=9240707506eca943fd35ddcf3239697e": "代码审计-未授权访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzNTY5NzA0Mg==&mid=2247484635&idx=1&sn=35950231d626a3ddd07b9f958059b664": "打穿AD域漏洞CVE-2025-33073的矛与盾 - 域安全", "https://mp.weixin.qq.com/s?__biz=MzI4NzA1Nzg5OA==&mid=2247486012&idx=1&sn=35d1d9b3238ac72a9b31e4948abce50e": "给开发工程师讲的 Fastjson 漏洞原理", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492213&idx=1&sn=b091b151a24f78d4565b341602cd8f5e": "维达外贸客户关系管理系统xa0sendmailview.jspxa0SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500143&idx=1&sn=156d0461d545373d64808e07ec5a46b1": "Microsoft SharePoint 零日漏洞详解与 ysoserial.Net 利用分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523622&idx=1&sn=c4eb0888b2daa2d7906fdc8f6b53d8cf": "微软紧急修复正遭利用的 SharePoint RCE 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484523&idx=1&sn=fd9b5e9523aaff802563938e30e59002": "绑定微信功能挖掘的 0-Click 任意账号接管漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247515391&idx=1&sn=c7106be4cceef2d65d657bd4ee313993": "Chrome 在野 0day CVE-2025-6554 浅析", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247507856&idx=1&sn=9eafe16d62fadfec22ce1e8d612164b1": "漏洞通告 _ Microsoft SharePoint 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247510575&idx=1&sn=2ae5471d69e47e606bd4141d7b1ada2c": "SharePoint 漏洞简报(CVE-2025-53770)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503474&idx=1&sn=7a175af68c7e327480511d253fc5abe6": "雷神众测漏洞周报2025.7.14-2025.7.20", "https://mp.weixin.qq.com/s?__biz=MzAwNDE4Mzc1NA==&mid=2650850632&idx=1&sn=c8f215d69a3fd121b281540c538e0582": "青藤天睿RASP再次发威!捕获E签宝RCE 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4NjQxMDcxNA==&mid=2709355333&idx=1&sn=898ff32f538eef40225a20bdd44c5717": "CVE-2025-6218 WinRAR解压钓鱼复现", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488705&idx=1&sn=7732c96f5bc64dc651513f04997d1901": "MetaCRM美特crm系统headimgsave接口存在SQL注入 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg2ODYxMzY3OQ==&mid=2247519538&idx=1&sn=c13bef9214bbb6627148bf366efe6323": "OAuth2.0劫持账号漏洞挖掘案例", "https://mp.weixin.qq.com/s?__biz=Mzg2NTk4MTE1MQ==&mid=2247487613&idx=1&sn=cc31d9ccdfe5610238cd53466bbc9b38": "SharePoint WebPart 注入漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=Mzk2NDI0MjUyNQ==&mid=2247485102&idx=1&sn=045a359400a21dafa31d8904200bcaff": "Web基础2,漏洞与基础请求知识", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247496821&idx=1&sn=dc031b4ed1bb68fec6ed33ef9afd86e8": "【论文速读】_网络安全中的大语言模型:应用、漏洞和防御技术", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492222&idx=1&sn=2c4684d601c1ee24ff0d9a175624329f": "上海网仕科技 Transcoder MS index.php SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxNTIzNTExMQ==&mid=2247491993&idx=1&sn=6e3afd32c003a4b8d9b6dc9c8066bdc7": "猎洞时刻漏洞挖掘公开课", "https://mp.weixin.qq.com/s?__biz=MzI2MzU0NTk3OA==&mid=2247506777&idx=2&sn=a257e29d11cf91fbea46677d24f913b7": "精品产品 _ 捷普WEB应用漏洞扫描系统", "https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247512242&idx=1&sn=922c2417e6b979d9c41c6a0dc8f70de9": "美国国家核安全局遭入侵,微软SharePoint漏洞再度引发高度安全警惕", "https://mp.weixin.qq.com/s?__biz=MzkzNjQ3MTk1OA==&mid=2247484012&idx=1&sn=828d32c4ba8b5de336ab5578d7c19c5e": "补充一下一次0day的应急响应的处置", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597680&idx=2&sn=94bdebbd207e6017185371d965e5113c": "黑客论坛售卖macOS零日漏洞,影响多版本", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651325319&idx=3&sn=cee97f8e475cb1b36f4b32bb2eace10a": "黑客论坛惊现 macOS 零日本地提权漏洞交易", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523635&idx=1&sn=8c51538655121cf80560593da54665bc": "Chrome 多个高危漏洞可用于执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzI1MDA1MjcxMw==&mid=2649908613&idx=1&sn=5c3aebe6f73de2ddf5a8cf50a115d594": "NOTLogon漏洞:一个空指针引用包打爆域控", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484525&idx=1&sn=2db12eaa1256fd9ed0c5d967dea515b6": "CVE-2025-6218 Poc复现及1Day研究", "https://mp.weixin.qq.com/s?__biz=MzU1NzczNTM1MQ==&mid=2247485420&idx=2&sn=448535073443acf8ed4408d1e20e51cc": "3.9亿设备面临微信客户端RCE攻击,攻击链已完整曝光", "https://mp.weixin.qq.com/s?__biz=MzI3NDEzMDgzNw==&mid=2247485186&idx=1&sn=0b9b4923dfcdad4ba212d3014d0f7bef": "CVE-2025-29824 clfs.sys的UAF漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzkxMzYzMTE5OA==&mid=2247484362&idx=1&sn=e89bc8bfade78737523f513468f313ce": "Nacos系统存在默认口令nacos_nacos 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg5NDg4MzYzNQ==&mid=2247486595&idx=1&sn=2ca5fc4e2f4f0df2e855315d89f8d094": "WAF绕过-漏洞发现-AWVS+Xray+Goby+sqlmap-绕过waf", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247490168&idx=1&sn=3c75835deb0d6723467fd22d9098aa11": "《漏洞评审争议背后的标准迷思》", "https://mp.weixin.qq.com/s?__biz=Mzk5MDYxODcwMA==&mid=2247484006&idx=1&sn=858a46e3dd83119ab370bb6fd331b6e9": "【已复现】MetaCRM 客户关系管理系统headimgsave接口存在SQL注入", "https://mp.weixin.qq.com/s?__biz=MzU2NDgzOTQzNw==&mid=2247503476&idx=1&sn=21871b51c9ff1c7cb9ea7c6393f4c1b8": "【成功复现】AstrBot路径遍历漏洞(CVE-2025-48957)", "https://mp.weixin.qq.com/s?__biz=MzAxODY1OTM5OQ==&mid=2651463292&idx=1&sn=33b99f9b806b90a6af64eb885779c623": "信息安全漏洞周报(2025年第29期)", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM0NDIxNQ==&mid=2247494834&idx=1&sn=5112e9ad2bd9ef71708f8a11fbc0f599": "可爬取、更新并将 K8S 官方漏洞翻译(通过 DeepSeek)成简体中文", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247485001&idx=1&sn=ac4555cb31fd7645cf0d284b9ae474d0": "安钥®「漏洞防治标准作业程序(SOP)」征文启示 [2025年第28期,总第46期]", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5NDM3NQ==&mid=2247486631&idx=1&sn=3ef2e52f8a53a2943df42d77360d0f7a": "某运维管理系统RCE漏洞分析-Nday", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488717&idx=1&sn=f95d70b7e0757b7e912dbaa54c877d15": "汉王e脸通综合管理平台exportResourceByFilePath.do接口存在任意文件读取 附POC", "https://mp.weixin.qq.com/s?__biz=Mzg3ODE2MjkxMQ==&mid=2247493437&idx=1&sn=8acb00256a050fd6cb060cf419b50cf2": "网络摄像头漏洞扫描工具 Ingram _工具分享", "https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247498220&idx=4&sn=92a51538f3a0efd23e2eedfa0779945b": "美国核安全管理局NNSA 因微软服务器漏洞遭黑客入侵", "https://mp.weixin.qq.com/s?__biz=MzAxODM5ODQzNQ==&mid=2247489688&idx=1&sn=a3221ac18bf8a6b9fd3f426976328d2a": "虚拟机中的不速之客:VMWare Tools 本地提权漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzU2NzY5MzI5Ng==&mid=2247506877&idx=1&sn=ebbfad01eb66611732c13c286491d0f7": "高效资产收集工具,漏洞挖掘更轻松", "https://mp.weixin.qq.com/s?__biz=Mzg3ODY0NTczMA==&mid=2247493230&idx=1&sn=d169d6061da449780ed33686d8d898fc": "黑客扫描 TeleMessage Signal 克隆漏洞,暴露密码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523648&idx=2&sn=6461eaba86ba00b9a0037571a4781bba": "Synology BeeDrive 漏洞可导致代码执行和任意文件删除", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503644&idx=1&sn=8ed32f63b126cd67e44ecc1ede6379a1": "【已复现】Microsoft SharePoint 远程代码执行漏洞(CVE-2025-53770)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597699&idx=3&sn=d77a82a459b7571dc87a94b5d4895545": "更新:第九章 LibAFL实战 _ 系统0day安全-二进制漏洞攻防(第4期)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497930&idx=1&sn=854d41fe5750f6ce9001b83214285dad": "AI自动化代码审计RCE", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096414&idx=2&sn=436c3c90ae970c1975ed9f621a592460": "Google Chromium 输入验证漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488377&idx=1&sn=61c9e7954dba7b73b6c1f1430d5064d4": "HW(2025-7-25)护网漏洞信息收集汇总", "https://mp.weixin.qq.com/s?__biz=MzA4MTQ2MjI5OA==&mid=2664092725&idx=1&sn=7bcf1bbf85c78d24e1ca050bc3d16573": "Ollama漏洞引发的“血案”—自建LLM的安全思考", "https://mp.weixin.qq.com/s?__biz=Mzk0ODM3NTU5MA==&mid=2247494428&idx=1&sn=60bb4811d514a7ac89ad90e0352993e1": "【首发复现】用友 U8Cloud 未授权远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488729&idx=1&sn=076815b5fb8ddf81010ab0266848b8a2": "东胜物流软件GetDataList接口存在SQL注入漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597709&idx=3&sn=459727893b5255e204c5c5435b77c00e": "后果严重!Mitel 曝高危漏洞,黑客可直闯系统、窃取数据,补丁已出速更新", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492240&idx=1&sn=57c9e5c3e3d6b925c22f719df68e209c": "汉王e脸通综合管理平台 queryDoorInfoList.do SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247494035&idx=1&sn=422326cc617c33c78b3d518471e0862d": "难忘的优惠劵漏洞(深情哥破防版)", "https://mp.weixin.qq.com/s?__biz=MjM5MzMwMDU5NQ==&mid=2649173932&idx=2&sn=b0b7d212a13a7c15786e535e59d3b559": "预警丨防范Windows SPNEGO扩展协商(NEGOEX)安全机制远程代码执行超危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247484529&idx=1&sn=f3bea780785bfaf1d8916e63e811330f": "Notepad++提权漏洞POC及一键部署环境【CVE-2025-49144】", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503650&idx=1&sn=8d98c085b18a76e46301fa9d8792e58e": "【已复现】XWiki getdeleteddocuments.vm SQL注入漏洞(CVE-2025-32429)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651134513&idx=1&sn=e45e9026cacc3b8c742efae3c27dae95": "戴尔测试平台遭入侵,惠普紧急修补接入点高危漏洞_一周特辑", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070835&idx=4&sn=408c54d8f2b9343081c41c78b58f0bd6": "【安全圈】严重安全漏洞使得黑客可以绕过登录系统,完全控制Mitel MiVoice MX-ONE通信设备", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651138126&idx=2&sn=491bf92938894d032afd1fe94bf57984": "信安世纪实际控制人减持股份;漏洞赏金计划面临困扰,如何应对AI带来的挑战?;人工智能幻觉:网络安全运营的潜在 “暗礁” _ 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597710&idx=2&sn=9ed60b245e5e8b137bc5a454490e8852": "The shadow over Netfilter:新一代脏页表利用技巧-CVE-2024-1086", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497938&idx=1&sn=17fa70439728c3d08b79a4760c28e4d0": "命令执行", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497956&idx=1&sn=330650442e400cf88ae9025a067c2ab0": "一次从0到1的逻辑漏洞挖掘之旅", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496172&idx=1&sn=6183c9b805850e89ffd7d8419543fcd0": "CNVD漏洞周报2025年第28期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496172&idx=2&sn=e0abea418c6e17511d26553f8a88057e": "上周关注度较高的产品安全漏洞(20250721-20250727)", "https://mp.weixin.qq.com/s?__biz=MzA3NDE0NTY0OQ==&mid=2247487863&idx=1&sn=b451f03cd377d4a40551bd2e92a39162": "Day22 Kali漏洞扫描", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523661&idx=1&sn=82fc7e9202b8cc0883f061531bc6026d": "Niagara 框架中存在多个严重漏洞 影响全球智能楼宇和工业系统", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597737&idx=3&sn=ea27b4501f50ec6e839f422cb46fe26d": "Niagara框架曝高危漏洞,警惕 “链条式攻击”", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247485025&idx=1&sn=e01f98aed33a984fff2673f33d4b0f65": "Roadmap:一年实现安全漏洞防治自动化", "https://mp.weixin.qq.com/s?__biz=MzU5ODgzNTExOQ==&mid=2247642100&idx=3&sn=ba8009827068b2ae06d5a48e83356e78": "关于开展“「智御」安全漏洞处置SOP征集”活动的通知", "https://mp.weixin.qq.com/s?__biz=MzkyNDU2MDk4NQ==&mid=2247484107&idx=1&sn=a5134ebd6e1d040e544e11e769c94c7c": "如何编写POC", "https://mp.weixin.qq.com/s?__biz=MzkyNDcwMTAwNw==&mid=2247535730&idx=5&sn=5978e12c88c2556189af183a6f0176cf": "用友漏洞检测:模块持续更新,防护不脱节", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247574150&idx=2&sn=df01a55708e7f369b0b6308bf2953ea9": "高效资产收集工具,漏洞挖掘更轻松", "https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652997935&idx=1&sn=b619357efebce1c257ced6f0455af05e": "赛道二比赛目标发布!模型应用线上环境漏洞赏金赛邀你来挑战", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247490216&idx=1&sn=1da2bc12edf2086f1affa6c2070bfbeb": "Apache Solr 敏感信息泄露漏洞分析及复现", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523673&idx=1&sn=e9be201d67d443c5563ef93eab78ef92": "Gemini CLI AI 编程助手中存在严重漏洞 可导致代码执行", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247492279&idx=1&sn=ed87bd660034fce3d0e8c302be2c8fad": "LaRecipe 模板注入漏洞 (CVE-2025-53833)", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247488749&idx=1&sn=1c423178cbd791a8ba41d813aea50e35": "Nacos nodes接口存在敏感信息泄露漏洞 附POC -老漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247488546&idx=1&sn=96df472e30e251326d80cc5b340bbd77": "pdf 解析器漏洞集成工具", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497962&idx=1&sn=f9f0320f4c6aed8713ad2d9c01cfd1d2": "【SRC实战】验证码漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070888&idx=2&sn=861dcaf974546affdcc3238542b40ce2": "【安全圈】WordPress 插件曝 9.8 分高危漏洞,超 1 万网站面临风险", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU0OTQyMg==&mid=2247484448&idx=1&sn=e8e60d36b5a35639405ad5120a4be7b7": "【漏洞预警】用友U8cloud 任意文件上传漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MjkwODc4MA==&mid=2247487099&idx=1&sn=1b7e1f97fb09b724347f29cbf7230e36": "【腾讯云开发者先锋(文字版直播回放)】从 CVE-2025-32463 谈及 chroot 的容器隔离安全性", "https://mp.weixin.qq.com/s?__biz=MzUzNTkyODI0OA==&mid=2247529233&idx=1&sn=a625bac5d8c4e9e534e0b00d6c48bdf6": "【重金悬赏】全网白帽集结!金融众测开启,漏洞猎手速来挑战!", "https://mp.weixin.qq.com/s?__biz=Mzg3MjAwMTk1OQ==&mid=2247484620&idx=1&sn=ca7e40c695ae8d418f5de9c6cbecac6c": "大华智能物联综合管理平台命令执行", "https://mp.weixin.qq.com/s?__biz=MzkxOTUyOTc0NQ==&mid=2247493577&idx=1&sn=4abb5442ec65208df2d38f82d6807222": "挖矿进程出现,服务器必有漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MzM3NTQ5MA==&mid=2247484644&idx=1&sn=3956cff3c810eefa911f5136dadf5242": "跨站脚本攻击XSS漏洞大盘点", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523673&idx=2&sn=7e3edc76733c9d62472d05dc47bf60fd": "微软:macOS Spotlight 漏洞可泄露苹果的情报数据", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247503663&idx=1&sn=64afb8fc07851e69f2cf392d42ccadc0": "【已复现】用友U8cloud 任意文件上传漏洞(QVD-2025-29445)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzkyODM5NzQwNQ==&mid=2247496868&idx=1&sn=46f998ac9412fca1788073bb43fe8467": "从安全角度分析开发和应用架构变化及其对典型Web漏洞的影响|证券行业专刊3·安全村", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247539709&idx=2&sn=a25b7e943680abdde66a18e4f5c0ad5c": "资产维度分类之全球中间件漏洞大盘点", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096435&idx=1&sn=6812312962a1bc5b511dbf6409921b4b": "Chrome 允许内存纵和任意代码执行高危漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597859&idx=2&sn=778a66fb2b8f508daf6ef734f973fa59": "Chrome 曝高危漏洞,可被远程操控", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247495230&idx=1&sn=3f08b0fee21e0fee9278679eefdc382a": "LLM安全漏洞挖掘|ByteSRC白帽技术沙龙预约开启", "https://mp.weixin.qq.com/s?__biz=MzkwMzQyMTg5OA==&mid=2247488085&idx=1&sn=19c0895c234b114d9024b5eb76281568": "PHP 文件包含 _ 最新爆出的文件内容不含 PHP 代码的代码执行 trick(include邂逅phar)", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651325576&idx=3&sn=02438fd80501230e4d3221ec277425f0": "TP-Link Archer C50路由器曝安全漏洞,硬编码DES密钥可解密敏感配置", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096435&idx=2&sn=7ac4ba1575912f7a4d07a78f29b7ded9": "macOS存在允许攻击者绕过 TCC 窃取私人文件漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247492654&idx=1&sn=8796c36c3404bec4f0a869ebf94f4949": "《我真得控制你了》-厂商和白帽扯皮,披露了远程控制性玩具漏洞细节", "https://mp.weixin.qq.com/s?__biz=Mzg4NDg2NTM3NQ==&mid=2247485132&idx=1&sn=2873bcc060b7ebf227d968c066b19ca8": "【吃瓜】前端不算扒丨 成人性玩具厂商被曝产品存在远程控制漏洞与白帽扯皮", "https://mp.weixin.qq.com/s?__biz=MzkzNDUxOTk2Mw==&mid=2247496844&idx=1&sn=0d8429445b3be26af3874e18b5f9374e": "【论文速读】_ PrompTrend:持续社区驱动的大型语言模型漏洞发现与评估", "https://mp.weixin.qq.com/s?__biz=Mzk0OTQzMDI4Mg==&mid=2247485034&idx=1&sn=a00fae67a433b6f5f5fb09dd44349aad": "关于开展「安全漏洞防治SOP征集活动」通知", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458597859&idx=3&sn=c430f4e245e5305bb614f85b01bcc04b": "更新:LibAFL兼容AFL _ 系统0day安全-二进制漏洞攻防(第4期)", "https://mp.weixin.qq.com/s?__biz=Mzk0NTc2MTMxNQ==&mid=2247484031&idx=1&sn=44275afd4139d402668eb8966113dca0": "渗透测试与SRC漏洞挖掘基础教程", "https://mp.weixin.qq.com/s?__biz=MzI1Mjc3NTUwMQ==&mid=2247539553&idx=1&sn=4e5b82ca1488323390cd75a14662f76e": "红队进阶之0day零日漏洞挖掘——污点分析(一)", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247574189&idx=2&sn=7e0adedda980ac68d36e81be075dde89": "通过iptables策略修复安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500195&idx=1&sn=9c2e942816b81434c96bd805c67ab196": "挖掘 .NET DLL文件任意下载和会话ID明文暴露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523681&idx=2&sn=04aa3868cd4f8755fd8ba20df4c94714": "SonicWall:严重的SSL VPN漏洞可用于在防火墙上执行远程DoS 攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247523681&idx=1&sn=bb43f95f1d03fa21eae1845fcae81a3d": "谷歌修复 Chrome Media Stream 中的高危UAF漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652070904&idx=3&sn=aace47863f6b3da8fb587156cdaab020": "【安全圈】LG Innotek摄像头惊现严重漏洞 攻击者可获取最高管理权限", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247497966&idx=1&sn=8b99193182105154a51adbca181d83bd": "命令注入漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492897&idx=1&sn=cb17b5d6f766327ae400d4de106496e0": "【已复现】用友 U8 Cloud 文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwMTQ0NDA1NQ==&mid=2247494014&idx=3&sn=f4709ee1ef3886bae1a03a25797196f5": "漏洞预警 _ 汉王e脸通智慧园区管理平台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247495820&idx=1&sn=59299a7a5f763cde29a53b19759d287a": "成果分享 _ [USENIX Security 2025] Web应用漏洞检测新突破:基于导向式模糊测试的高效漏洞检测技术", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650611913&idx=3&sn=f9ff85f109cdfcd9c583594ff5187eae": "CNNVD _ 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=Mzg3NzkwMTYyOQ==&mid=2247490178&idx=1&sn=c36737d916f6c330dbe442a191faded7": "【Java代审】小白如何根据1day挖出天锐绿盾前台RCE 0day_", "https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247495821&idx=1&sn=41de034baa092ff85b77bd715a91cf45": "成果分享 _ [USENIX Security 2025] XSSky:融合动静态分析,精准狙击XSS漏洞的新一代“利剑”", "https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247495822&idx=1&sn=74b4e61b671f2b2a918865e79d2861c0": "成果分享|[USENIX Security 2025] LinkZard_ LFVulns漏洞自动化检测与利用框架", "https://mp.weixin.qq.com/s?__biz=MzkxMTUwOTY1MA==&mid=2247491284&idx=1&sn=865884431f18938668728db998c1ad9a": "幻影_一款漏洞挖掘的辅助工具_收集中的隐藏接口和敏感信息", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500505&idx=2&sn=86d160d643980a64da27a602a03f49b7": "[80]个反序列化漏洞全景合集 (2) _ 回答一个 .NET 反序列化漏洞载荷的问题", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500505&idx=3&sn=5cdb8db7e9b012effddfdd3f7d2e1f51": "[80]个反序列化漏洞全景合集 (3) _ 介绍一个 ViewState 反序列化不常见的知识点", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500505&idx=1&sn=d33d0d67d6079717ef63bbbb14705154": "[80]个反序列化漏洞全景系列 (1) _ 一个大多数人都容易忽视的 Ysoserial.Net 使用误区", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500538&idx=3&sn=b9f4c38ddf4a25e40c094a305368ef85": "80个反序列化漏洞全景合集 (3) _ 介绍一个 ViewState 反序列化不常见的知识点", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247584597&idx=1&sn=f0d3ab10d20c359c03bdb0438eca748b": "Salesloft_ GitHub账户遭入侵 导致Drift令牌被盗并引发大规模Salesforce数据窃取", "https://mp.weixin.qq.com/s?__biz=MzkwOTg3NzAyNQ==&mid=2247484191&idx=1&sn=1948ff2c9b082581327e702f02f56fab": "水漏洞这一块._", "https://mp.weixin.qq.com/s?__biz=Mzk0NDM1MDkyNw==&mid=2247547424&idx=1&sn=e8b2c9a8fe38b3acc00c3c92c48ba64f": "告别终端安全盲区!MVS终端漏洞检测系统安卓版正式开放试用", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484948&idx=1&sn=f8f6b3e55768ab8d5e09d021d91da747": "【复现】Windows Server Update Service远程代码执行漏洞(CVE-2025-59287)风险通告", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585050&idx=2&sn=a94c25a5c24a7c2b25a50b09e21673c0": "近7.6万台WatchGuard Firebox安全设备存在漏洞 面临高危远程代码执行风险", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247487881&idx=1&sn=b975b18e75fc3df9fa52525abc2b4ed7": "第139篇:美国苹果手机_三角测量_验证器后门样本及0day漏洞是如何被捕捉到的 _ _三角测量_系列第5篇", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524305&idx=2&sn=151df83a78bc5a9f5351bf4c295a1d03": "Apache Tomcat 漏洞导致服务器易受RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247496482&idx=1&sn=6e40c6687b9958a37c6a07a49f55d286": "成果分享|[ASE 2025] 在智能体应用的漏洞缓解中,开发者将面临怎样的艰难权衡?", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247487906&idx=1&sn=0ce66c1d60e3ea87a264d1e7b4200824": "第140篇:美国NSA苹果手机_零点击_漏洞入侵中国国家授时中心的流程图梳理和分析 _ _三角测量_系列第6篇", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498478&idx=1&sn=3e7df424e1fd0324097c5570ea0671e7": "命令执行", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585093&idx=2&sn=b67f779335e628b55d77fadd0fcbb0a4": "QNAP警示ASP.NET Core高危漏洞波及NetBak PC备份工具", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498482&idx=1&sn=6a166478c4d959ddb066087e416daaf7": "RCE", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247492975&idx=1&sn=722f62cc55573832023fab778eaa76e3": "【已复现】泛微e-cology 前台SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247498449&idx=1&sn=6a6fd80869ecc7582ba815d8e92d7011": "针对若依系统nday的常见各种姿势利用", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492811&idx=1&sn=42b3c4b5cd5e150b840ec25abe9be8d4": "新的ChatGPT Atlas浏览器首个漏洞让攻击者可以植入恶意代码", "https://mp.weixin.qq.com/s?__biz=Mzg4MDcyMDkxNQ==&mid=2247483755&idx=1&sn=abb1d39ce574168cdfd03117ac36308d": "小红薯rce", "https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247498624&idx=1&sn=24b361695a7d97a4afe6a07e23d7d40c": "【攻防渗透集锦】漏洞组合拳与JS攻击面的博弈", "https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247493510&idx=1&sn=50d977641b59f4936252285fe8cbac4c": "从用友U8Cloud-FileManageServlet反序列化漏洞开始的0day挖掘之旅", "https://mp.weixin.qq.com/s?__biz=Mzk1NzgzMjkxOQ==&mid=2247485799&idx=1&sn=11954a764293d1730ba6f7c8d17ad041": "某次内部行业渗透测试&攻防演练多个系统从资产打点到RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk1NzgzMjkxOQ==&mid=2247485839&idx=1&sn=bf0975b9b26b44a918b5150f403ba4fe": "src-歪门邪道分享+支付漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585143&idx=2&sn=a94dc8104b295d873d3064cc8fbf8149": "Windows SMB高危提权漏洞遭活跃利用 未打补丁设备恐被获取SYSTEM权限", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500788&idx=1&sn=d11e9f9c37c26205894a35a035e886c1": "CNVD漏洞周报2025年第42期", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458603667&idx=3&sn=b5343c47a4fba2f54b0ea381d7574ab9": "3个月直通大厂高新岗位!全程实战案例解析,掌握高危漏洞攻防技巧", "https://mp.weixin.qq.com/s?__biz=MzkzNTYwMTk4Mw==&mid=2247490055&idx=1&sn=a91b235f679c8c88d77574a91738b45c": "密码重置漏洞挖掘指南:从原理到实战的完整路径", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247509629&idx=2&sn=8f6f1eb82c1f9c446e57d9186f8438c6": "秋冬福利季|速来⏳10个漏洞轻松赢最新款周边!", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498521&idx=1&sn=9306378db8f472d0d916be7e9389dcfc": "【SRC实战】通过FUZZ挖掘高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498525&idx=1&sn=43ecdd1da56e7a91cb9d09eec9afbc27": "RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556736&idx=2&sn=abab1d84614d35c7322963eb98200745": "【免费领】Android系统漏洞实战权威教程", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664253314&idx=2&sn=bc04651b2917327c7550323318e60ac8": "CNNVD _ 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484960&idx=1&sn=bb4bce6fbb24e6c7d577576a1950346a": "【复现】TongWeb ejbserver反序列化漏洞风险通告", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485122&idx=1&sn=9629a1d89e3ed5b977dbd806305e38e1": "2025年10月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650613251&idx=4&sn=eed01252a233b8c46ce4309a4a72d28d": "【高危漏洞预警】微软11月多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MjkxNzY1NQ==&mid=2247487330&idx=1&sn=f9e19f30f6ae64dea0484540c901b738": "通达OA前台任意用户登录漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247628694&idx=1&sn=5019972e07d564b3ea0fff7086c4eeba": "2024华为漏洞管理白皮书", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247490998&idx=1&sn=a15329f03254ad907c7aea3989b740ac": "【漏洞通告】Fortinet FortiWeb身份认证绕过漏洞CVE-2025-64446", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247525051&idx=1&sn=cc33e9b88a9f7e33c21200d76c80da71": "研究人员发现严重AI漏洞影响Meta、Nvidia及微软推理框架", "https://mp.weixin.qq.com/s?__biz=MzAwNTczMjAzMg==&mid=2650240593&idx=1&sn=f1931ee6328916c4589576e85f0caf18": "相约蓉城・共话前沿|OSR与您在2025 ICCAD-Expo 不见不散", "https://mp.weixin.qq.com/s?__biz=MzkzMDY3ODg5MQ==&mid=2247484284&idx=1&sn=c4d5fd2a48118883a1a805018fca3e0a": "发几个POC", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500839&idx=1&sn=a863ad43b5b3c51fd7ff75f2f69d2cd4": "CNVD漏洞周报2025年第44期", "https://mp.weixin.qq.com/s?__biz=MzU2MTQwMzMxNA==&mid=2247543288&idx=1&sn=84f03402334a772c9736b9081094fd65": "高危runC漏洞曝光 黑客可突破Docker容器逃逸", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585547&idx=2&sn=3e77e5b7f44413ebc737e426f38c4059": "ImunifyAV曝远程代码执行漏洞 数百万Linux托管网站面临风险", "https://mp.weixin.qq.com/s?__biz=MzAwNTczMjAzMg==&mid=2650240687&idx=1&sn=5c45a2e76f90d1eb8449a7bfdd5c9eb9": "直击ICCAD-Expo!纽创信安深度解析PQC IP防御之道,后量子安全新品引关注", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604463&idx=2&sn=ec105db6a0b9106aec654784d428fcab": "3个月直通大厂高新岗位!全程实战案例解析,掌握高危漏洞攻防技巧", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498695&idx=1&sn=aec67b7e7d012992f641150550dfb39c": "实战 _ 记一次X站逻辑漏洞到到管理员后台", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585564&idx=1&sn=8565d809f7627078ba1e77c25694c714": "“ShadowRay 2.0”全球攻击活动:利用旧漏洞劫持Ray集群构建自传播挖矿僵尸网络", "https://mp.weixin.qq.com/s?__biz=MzkxMzMyNzMyMA==&mid=2247575840&idx=1&sn=e29b2442c178a47b89a0ffcd4af4cbf4": "企业管理类系统常见漏洞挖掘指北", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500874&idx=1&sn=2969a6ae7a779058a73064b5eb50028f": "CNVD漏洞周报2025年第45期", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585610&idx=2&sn=ffd605079a514679b1ccf53d84e3b5f6": "Grafana:最高级别漏洞可实现管理员身份冒充", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585610&idx=1&sn=56a1cfab6932567180d39a59e6b18a03": "微软:Windows11 24H2高危漏洞导致文件资源管理器等核心组件崩溃", "https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247490928&idx=1&sn=5152b1bd5d74f7cdb16da1b762571fb4": "Solon框架模板漏洞深度剖析与修复实战", "https://mp.weixin.qq.com/s?__biz=MzU5OTMxNjkxMA==&mid=2247489596&idx=1&sn=5b9f0a2a25af8b8c1be8e3b874590f0c": "高质量漏洞库", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498716&idx=1&sn=b798bb8fe5b5dfeaab3a4ac80b8a2900": "接口越权漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzkxNTIwNTkyNg==&mid=2247556844&idx=2&sn=2a18bcce1553d9801df6f48c92aad23f": "【免费领】全网最详尽的漏洞挖掘实战技巧大全", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331356&idx=1&sn=357f3fe1b69f30e01015e6c7c4bf9cfc": "FreeBuf培训“平台赔付保障”漏洞挖掘实战班 _ 年终王炸", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533792&idx=2&sn=52e4ee539fc4a1faf5b3ebc351c24389": "GeoServer WMS GetMap XML 外部实体注入漏洞(CVE-2025-58360)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458604608&idx=2&sn=04ed151f1624d653c618dff4dbce99f5": "“共建共治、智护未来” _ 第二届华为漏洞管理与应急响应技术大会于深圳成功举办", "https://mp.weixin.qq.com/s?__biz=Mzg5NjUxOTM3Mg==&mid=2247491099&idx=1&sn=3fb7bdf0c4248143981bd006cd6e89bb": "RCE安全(一)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498731&idx=1&sn=3dd9a4a3b5eb577becb796205a4fda3d": "渗透实战:记一次JP web服务RCE到内网", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073041&idx=4&sn=1ce2b8f049342beec102ab2bc1e56e40": "【安全圈】aaPanel(宝塔面板)数据库权限查询逻辑存在 SQL 注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMjk4NzExMA==&mid=2247507617&idx=1&sn=9a64ed18ff9ef62dc3e66b76b1ac6a8b": "APT-C-53(Gamaredon)利用CVE-2025-8088进行网络钓鱼攻击活动", "https://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247533855&idx=1&sn=dac7a39bf1a471bf6a1e580c37aa9d07": "CVE-2025-55182 的解释和完整的 RCE PoC", "https://mp.weixin.qq.com/s?__biz=MzkxMDQ3MTYxMA==&mid=2247484234&idx=1&sn=97cc567f40632d4a5cdd6d5edc5f7134": "CVE-2025-55182:React Server Components", "https://mp.weixin.qq.com/s?__biz=MzkzNTgzOTg4Mg==&mid=2247486629&idx=1&sn=dd2d3845695f46fccca499405e1237d6": "CVE-2025-55182:React_Next.js RCE漏洞验证与分析", "https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488914&idx=1&sn=1027545ff7e0db022159ac215ba26c9f": "Dify已复现,速修(CVE-2025-55182)", "https://mp.weixin.qq.com/s?__biz=Mzg4NzgzMjUzOA==&mid=2247486192&idx=1&sn=be1d8b998951712a0408bd0d8767d350": "Next.js RCE(CVE-2025-55182) POC和EXP(凑个热闹)", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247525431&idx=1&sn=f485ce18c7aa69c3afa97fea90fbf3b1": "Next.js无条件RCE漏洞 - 浏览器插件", "https://mp.weixin.qq.com/s?__biz=Mzk0MTY5NDg3Mw==&mid=2247484354&idx=1&sn=19743e5b1ea1a1d13e0fa65efe8f57f4": "REACT RCE CVE-2025-55182 复现", "https://mp.weixin.qq.com/s?__biz=Mzk0MTQ5MjIwNg==&mid=2247484076&idx=1&sn=242246f2cb9e905596517aed73367c7f": "React CVE-2025-55182 漏洞介绍与 AWD 靶场复现环境", "https://mp.weixin.qq.com/s?__biz=Mzk0NjQ2NzQ0Ng==&mid=2247485194&idx=1&sn=59fca13a3b60537c046f9c6bb08c575e": "React Server Components 远程RCE利用工具", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247493469&idx=1&sn=f84fe7c15e50d162607b21323939e72c": "React Server Components 远程代码执行漏洞(CVE-2025-55182)", "https://mp.weixin.qq.com/s?__biz=MzkxNzQ5OTQ0Mw==&mid=2247483800&idx=1&sn=a9e49aac5845dd67edec52413401d48b": "React漏洞有感", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331769&idx=4&sn=99a3f10cc259b6668a0c62159704bd54": "WebXR漏洞影响40亿Chromium用户,请立即更新浏览器", "https://mp.weixin.qq.com/s?__biz=MzYzNDE4ODczNA==&mid=2247484720&idx=1&sn=cdd8a3894b02daa48cfc124c04b30586": "【已复现】CVE-2025-55182:Next.js RCE漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg4MzkwNzI1OQ==&mid=2247487731&idx=1&sn=dd3113831eae589af627a569026d2648": "【已复现】Next.js 无条件RCE,回显Payload+内存马Payload", "https://mp.weixin.qq.com/s?__biz=MzU4MjUxNjQ1Ng==&mid=2247525901&idx=1&sn=3e390077c15c453a0e61bd77ca3b1bf9": "学员分享 _ 我的 OSED 漏洞利用实战备考历程", "https://mp.weixin.qq.com/s?__biz=MzIzOTc2OTAxMg==&mid=2247563724&idx=1&sn=e5cb38ae105397323681700b5309681e": "揭示AUTOSAR中隐藏的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247525438&idx=1&sn=1407fa031a669dc037e016ba777421ef": "新鲜出炉 _ CVE-2025-66478打了一个小鬼子的站", "https://mp.weixin.qq.com/s?__biz=MzIyNDkwNjQ5Ng==&mid=2247486130&idx=1&sn=37407e304bb73930d0ee805852ab801f": "极危!覆盖面广!有关CVE-2025-55182漏洞分析与检测", "https://mp.weixin.qq.com/s?__biz=Mzg4NDk4MTk5OA==&mid=2247485664&idx=1&sn=542f2c9867b3b3c0909874fb9e88ca01": "满分RCE漏洞__Next.js!!poc全", "https://mp.weixin.qq.com/s?__biz=Mzg2NDU2MzI1MA==&mid=2247485569&idx=1&sn=74fc106233461632ac111ebbacc32be5": "紧急|已复现|CVE-2025-55182漏洞全景分析", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247629235&idx=1&sn=24fa94fcec236e1d1775444e9103153b": "车联网漏洞挖掘方法及典型案例剖析", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651331769&idx=3&sn=b9be04ec1f8fa8bfce8097e0b8b086ef": "高危级Splunk漏洞:Windows文件权限配置错误导致本地提权", "https://mp.weixin.qq.com/s?__biz=MzkxMDQyMTIzMA==&mid=2247484967&idx=1&sn=289c62bd373166618cde6703422c3454": "【复现】React Server Components远程代码执行漏洞(CVE-2025-55182)风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5Mjk3MDA5Ng==&mid=2247486626&idx=1&sn=bf57ceb215310f854948c18f36ba61ba": "Next.js RCE(CVE-2025-55182)", "https://mp.weixin.qq.com/s?__biz=MzkwODQyMjgwNg==&mid=2247485783&idx=1&sn=478458527537b3408c2d703745959626": "让Trae全自主学习开发近期爆出的React RCE漏洞靶场并自主利用验证(CVE-2025-55182)", "https://mp.weixin.qq.com/s?__biz=Mzg5MjcxMDA4OQ==&mid=2247483816&idx=1&sn=1ff5273b0744dace5620e169fc788c38": "CyberStrikeAI新增fofa_search MCP,自然语言一键搞定靶场发现与漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzYyMzg3NDQ1Mw==&mid=2247486554&idx=1&sn=cb18f3b4b1b2c2775ab3f48b6a2d86dc": "【0day】泛微OA从历史漏洞到全新0day,附EXP", "https://mp.weixin.qq.com/s?__biz=Mzk0OTY1NTI5Mw==&mid=2247495877&idx=1&sn=c2107028bbc3080b66ae8458e5184a00": "Dscan:全方位自动化攻击面管理与漏洞扫描平台", "https://mp.weixin.qq.com/s?__biz=MzkwOTY3Njg4Nw==&mid=2247484665&idx=1&sn=14d6e2e806acac8b766a71cb86865dca": "[CVE code Trace]CVE-2025-55182 react code sink trace", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247585783&idx=1&sn=0c38edfcdb97d208efa52ac6a7ca3bab": "新型Mirai衍生僵尸网络ShadowV2现身 瞄准多品牌IoT设备漏洞发起攻击", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500922&idx=1&sn=bf69f957b7428838db209676e2e270f9": "CNVD漏洞周报2025年第47期", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247517208&idx=1&sn=92ee1ae869f212bb8cec41dc715ac438": "【附IOC】Next.js RCE漏洞在野利用事件分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073119&idx=3&sn=8dd5ed4e3d25661a4f2f176cc278ef76": "【安全圈】新型Mirai衍生僵尸网络ShadowV2现身 瞄准多品牌IoT设备漏洞发起攻击", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664254971&idx=1&sn=0ba397323a5f59261ba85f7306f59d11": "数智赋能 智御未来 _ 第十五届网络安全漏洞分析与风险评估大会在天津盛大启幕", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524622&idx=2&sn=ba8c3120218ed455901938344a91aa4f": "微软12月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664255145&idx=3&sn=7dda2b383a1e35ff6989408a85547126": "CNNVD _ 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247551728&idx=2&sn=2997ddc64f6753ac393314ca68a06f86": "数智赋能 智御未来_第十五届网络安全漏洞分析与风险评估大会在天津盛大启幕", "https://mp.weixin.qq.com/s?__biz=MzUyMjk4NzExMA==&mid=2247507693&idx=1&sn=e73e1cca5af2ee80c3037daa1dbd2ab1": "APT-C-26(Lazarus)组织利用WinRAR漏洞部署Blank Grabber木马的技术分析", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485795&idx=1&sn=bac2643be2fc1915fe33a2766a5b1464": "【安全工具更新】CVE-2025-55182 批量检测工具,已适配哥斯拉内存马注入连接。", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485126&idx=1&sn=9725c8d9c998e8d681b2254469fa44d1": "2025年11月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzU2MjY1ODEwMA==&mid=2247493084&idx=1&sn=5a1c91109518f88f24fc4db8daeb8352": "密码重置漏洞挖掘指南:从原理到实战的完整路径", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247485154&idx=2&sn=4136c509ec8dbdad012b01cfc01bea73": "[SWPUCTF 2021 新生赛]babyrce", "https://mp.weixin.qq.com/s?__biz=MzkyMTUzMDY1OA==&mid=2247485154&idx=3&sn=8d00e4a55aeeb73a9b0d1f9f4a98b747": "[SWPUCTF 2021 新生赛]easyrce", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500938&idx=1&sn=33d42912089c8bf3209d479f546f7df6": "CNVD漏洞周报2025年第48期", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458605634&idx=1&sn=e5ae14490afe4efc0bae3837f333ce0f": "从零开始绕过 DexProtector 加固的 Frida 检测", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498806&idx=1&sn=2981a41e00b1a2568fa50c9170567bac": "无0day复杂利用!挖逻辑纯靠 “肉眼扫描器”?", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489886&idx=1&sn=154747ae6a9868ce0f9022a39d5c406f": "已复现】FineReport 帆软报表前台远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586013&idx=1&sn=0eb362c1a48a9b56edd4bdc1d4ec6887": "黑客借React2Shell漏洞发起EtherRAT恶意软件攻击", "https://mp.weixin.qq.com/s?__biz=MzUzNDczNjQ2OQ==&mid=2247486028&idx=1&sn=7895f3743c1c751042ae9de2e50f7e1d": "GitHub上所有CVE漏洞利用合集-并持续更新", "https://mp.weixin.qq.com/s?__biz=Mzk3NTM5MDA5MA==&mid=2247483837&idx=1&sn=fc345fd3a9bd0e97fab43e22a6021d0b": "详解MagicDot漏洞及其利用手段", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586042&idx=2&sn=e4c71c7c6977a72cfa6ba1d0e49d8b0e": "新型UEFI漏洞曝光:技嘉、微星、华硕、华擎主板面临启动前攻击风险", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247500972&idx=1&sn=e4d505e64f71c2c946b8c816f028d384": "CNVD漏洞周报2025年第49期", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485863&idx=1&sn=a228a3989709b4114ebc2f1150ba7100": "EasyTools渗透测试工具箱V2.0.2更新(新增漏洞扫描功能,优化存在的诸多bug)", "https://mp.weixin.qq.com/s?__biz=MzkzMTcwMTg1Mg==&mid=2247493638&idx=1&sn=2c56dfe32704f9db9a572f64eb32fb17": "东胜物流软件 WorkFlowGridSource.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3Mjk2NDU2Nw==&mid=2247494659&idx=1&sn=e357db59d806c93f3a5a36b5c312b335": "服务号存在注入之有意思的edu漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489761&idx=1&sn=9f142000e179c9d2a438a3044fd11c84": "浙江宇视视频管理系统VM.php接口存在远程命令执行漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MzI4NzA1Nzg5OA==&mid=2247486349&idx=1&sn=eace76809f64080c9b24e6160657f813": "读懂《GB_T 30279-2020 信息安全技术 网络安全漏洞分类分级指南》", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586062&idx=2&sn=020407397854aad03874c64e26b327d4": "黑客利用 Gladinet CentreStack 加密漏洞发起远程代码执行攻击", "https://mp.weixin.qq.com/s?__biz=Mzk0MTIzNTgzMQ==&mid=2247524079&idx=1&sn=86442649afa66fc853ebd4876bca2e7d": "记一次对母校的漏洞挖掘经历", "https://mp.weixin.qq.com/s?__biz=MzIxODIzNzgwMw==&mid=2654075618&idx=1&sn=c912ebe98798c0d54f462e77a88dfba9": "【公告】漏洞盒子服务器升级通知", "https://mp.weixin.qq.com/s?__biz=MzkxNzUxMjU5OQ==&mid=2247485606&idx=1&sn=0095e213fbb942d8adf67039b8a92d19": "帆软 excel SQL注入漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073425&idx=2&sn=4e934b9a78bf80855ef578ca18001427": "【安全圈】MongoDB 紧急提醒:立即修补可致远程代码执行的高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247521315&idx=1&sn=a1e9b76a5db75f79013585edf532a3c6": "【已复现】Windows PowerShell 命令注入漏洞(CVE-2025-54100)", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487977&idx=1&sn=3699c611534ecba93aae075c431fa837": "漏洞预警 _ MongoDB 存在未授权内存泄露漏洞(CVE-2025-14847)", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501030&idx=1&sn=39a27628a7c74d9bee12f6862a58c236": "CNVD漏洞周报2025年第50期", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458606724&idx=3&sn=f4867ec9a446a8be54257fad99d53e04": "抢占智能汽车安全风口!系统0day安全——车联网安全入门(第8期)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586144&idx=2&sn=82369bded59acf2efd43574195ee052b": "MongoBleed高危漏洞遭在野利用 8万台MongoDB服务器暴露风险", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247493523&idx=1&sn=dbf5655654463b32aa499e58ef840149": "0day _ 大华智能物联综合管理平台evo-websocket接口存在SSRF漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458606963&idx=2&sn=c7265f29dd183dd2b5789254e8d3d979": "DLINK路由器命令注入漏洞从1DAY到0DAY", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073505&idx=3&sn=1f708018b52c1c6e8db067f71be3f5e7": "【安全圈】22岁女天才攻破NVIDIA Tegra X2:暴露特斯拉及更多设备的不可修复漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651333436&idx=1&sn=8e69920b7ff101d37b208b8cdf0e7f4f": "攻击者操纵大语言模型实现漏洞利用自动化", "https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797631&idx=1&sn=4a9296d25d073528b5c726f3ff7a5774": "第一章——API侦察的本质差异:为什么普通路径发现已不足以发现关键漏洞", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248745&idx=1&sn=50a56c4e67ff93ef24faf5999d167d8f": "零点击漏洞肆虐的一年:2025年现代恶意软件带来的启示", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096742&idx=2&sn=d8288b4081c04c148817c4ee8c3394e5": "Apache StreamPipes曝高危漏洞:攻击者可夺取管理员控制权限", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486275&idx=2&sn=e1aff49d11c193e105b70355f82602f1": "CVE-2024-57521|RuoYi v4.7.9认证用户SQL注入漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg2ODcxMjYzMA==&mid=2247486275&idx=1&sn=b3eda104a3c7f41dca6faf1240b95f8a": "CVE-2025-52691|SmarterMail 未授权文件上传漏洞(POC)", "https://mp.weixin.qq.com/s?__biz=Mzg5MjcxMDA4OQ==&mid=2247483834&idx=1&sn=435fda398fe72ce417b190ad6e17f581": "CyberStrikeAI 用户体验升级:批量任务+漏洞管理+对话分组,三大功能全面升级!", "https://mp.weixin.qq.com/s?__biz=MzUzNDczNjQ2OQ==&mid=2247486207&idx=1&sn=9985dd75ea237ecf4b49c01e4b660f03": "Hikvision综合漏洞利用工具", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096742&idx=1&sn=162812358e87d74218564ebdb8920488": "IBM API Connect高危漏洞可使攻击者绕过身份验证", "https://mp.weixin.qq.com/s?__biz=MzI1OTA1MzQzNA==&mid=2651248749&idx=1&sn=0ce09c05efb1abd640c320cb9fb58c27": "LangChain存在严重漏洞,威胁AI Agent机密数据安全", "https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247493051&idx=1&sn=56527338940927f7d7baf815d3063ebe": "React2Shell(CVE-2025-55182)原理拆解", "https://mp.weixin.qq.com/s?__biz=Mzg4ODI5MzAzMw==&mid=2247484001&idx=1&sn=864d5d0ba23110bc1fde9292d486fe85": "RondoDox僵尸网络利用React2Shell的严重漏洞挟持物联网设备和web服务器", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651333503&idx=3&sn=da8e7f3c1a71e907826c62dee883b95c": "RondoDox僵尸网络利用高危React2Shell漏洞劫持IoT设备与Web服务器", "https://mp.weixin.qq.com/s?__biz=MzkyNDI2NjQzNg==&mid=2247494367&idx=1&sn=5a319d6771ebf687b220b8664de8cd47": "[代码审计]蓝凌EIS存在多个后台文件上传0day", "https://mp.weixin.qq.com/s?__biz=Mzk2NDkwMDg3Nw==&mid=2247484187&idx=1&sn=3e3d7ece37b57b4989be64e13cffd09c": "swagger接口未授权访问漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MjM5MzM0MTY4OQ==&mid=2447797637&idx=1&sn=146b87dfae227ac4b1c75cc0abd76d68": "【接口漏洞第二章第一节】API漏洞狩猎第一步:如何顺藤摸瓜挖出隐藏的接口文档", "https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247629865&idx=3&sn=63b742cbf82a048614766de46895f5a9": "基于汽车领域 TARA 的有效漏洞优先级排序", "https://mp.weixin.qq.com/s?__biz=MzA5NDI0NzY3Mg==&mid=2247485259&idx=1&sn=01226ea83f0683f685b7edcbbb6abe81": "复现MongoDB(CVE-2025-14847)CVSS8.7漏洞攻击", "https://mp.weixin.qq.com/s?__biz=Mzg3ODkzNjkxMg==&mid=2247484040&idx=1&sn=d729d6bc80fad2162a5f9b3b0c36a10c": "天地伟业Easy7漏洞-浅析", "https://mp.weixin.qq.com/s?__biz=MzU2NDY2OTU4Nw==&mid=2247525901&idx=1&sn=f2c4b62dd99f242ec910769ecc228ef4": "威胁分子操纵大语言模型实现漏洞利用自动化", "https://mp.weixin.qq.com/s?__biz=MzU0MTc2NTExNg==&mid=2247493574&idx=1&sn=00e2232daaf9dd343c42f9894af53a59": "漏洞复现 _ 用友NC ContactsFuzzySearchServlet反序列化代码执行RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMjYzMjU3OA==&mid=2247486447&idx=1&sn=b06ea1354c1880d01d19a3a252ea6d6a": "漏洞扫描踩坑!出口 IP 被合作伙伴封禁?3 大转发原因 + 解决方案来了", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247529749&idx=1&sn=1f9ef5e171c56cb6aef4d8e388c34ade": "火绒小问答——「企业版」漏洞修复类top问题解答", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096750&idx=1&sn=2cbd11760ead584d48a357a2da3c66b7": "Apache NuttX曝内存损坏漏洞(CVE-2025-48769)", "https://mp.weixin.qq.com/s?__biz=MzI0NzE4ODk1Mw==&mid=2652096750&idx=2&sn=20e99cd981c04249e98c2345fbda786f": "GNU Wget2曝高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497949&idx=1&sn=18bbfce8834956f826005559f5e050c6": "Redis 漏洞图形化利用工具", "https://mp.weixin.qq.com/s?__biz=Mzg3MTY3NzUwMQ==&mid=2247490911&idx=1&sn=d7f4d8de2d9e3e38d000ff23c4b0eb8c": "安卓安全神器ASec!一站式搞定情报、漏洞、测绘全需求", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247492684&idx=1&sn=bebf9986b8676ec80749f180d3711595": "浅析 CVE-2025-68645 Zimbra 属性覆盖导致本地文件包含漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498889&idx=1&sn=e55979b020f3eb1f484446a2cd99b374": "漏洞挖掘|多个海外SRC产商2FA绕过实战", "https://mp.weixin.qq.com/s?__biz=Mzk5MDc5MDY2OA==&mid=2247483774&idx=1&sn=c8785c9db9470f541a84aab15e8394fd": "2025年Vite的一系列漏洞解读", "https://mp.weixin.qq.com/s?__biz=Mzg5NzUyNTI1Nw==&mid=2247497966&idx=1&sn=6ad06679fe9b9effa72b3225e3dd82d2": "CTF竞赛系统、知识竞赛系统、漏洞靶场练习系统", "https://mp.weixin.qq.com/s?__biz=MzYzOTE5Mjk0NQ==&mid=2247483941&idx=1&sn=1bd7ed203885335789bdc0953933bad6": "EDUSRC挖掘之如何挖到第一个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NDYwMDA1NA==&mid=2247547646&idx=2&sn=33d32b82f86d260f54a69790853f315c": "【已复现】Zimbra 本地文件包含漏洞(CVE-2025-68645)", "https://mp.weixin.qq.com/s?__biz=MzkwMDA5OTc0Mg==&mid=2247484195&idx=1&sn=ce9c6aba5dabbc95059a83ab516c58d0": "【已复现】n8n代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NzMzNzE5Ng==&mid=2247491218&idx=1&sn=8f08cabab7024e9d6552a724ed9c6a6e": "【高危漏洞预警】n8n Python沙箱绕过漏洞CVE-2025-68668", "https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489830&idx=1&sn=3ace9c5e3dd3ac3c15c35c057d369cc6": "微力同步Verysync存在任意文件读取漏洞 附POC", "https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651333596&idx=4&sn=8de8c4eccded72a916e4a40c501468c3": "每周PDF资源:智能体应用程序安全指南;蓝牙芯片供应链重大漏洞披露;深度分析MangoBleed;30个内网渗透信息收集技巧", "https://mp.weixin.qq.com/s?__biz=MzE5ODQ0ODQ3NA==&mid=2247484004&idx=1&sn=6219ed551411a065352fef52c83f501d": "速速来战 _ “常态化漏洞挖掘演习活动”今日开始,活动期间仍可报名", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524778&idx=2&sn=17e6675d731950fb6f61f841bb161ef5": "Apache StreamPipes 严重漏洞可用于获取管理员权限", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586155&idx=1&sn=1a0a0a55fe04941ad4741193fe988630": "WebRAT恶意软件借GitHub伪造漏洞利用程序传播", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495268&idx=1&sn=d3bc1813528061e01b1508ffbcb892b6": "智能汽车安全,始于但不止于漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496620&idx=1&sn=7dcdb0e72cb2062feb57e74402621f75": "CNVD漏洞周报2025年第51期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496620&idx=2&sn=d06621f01f2014a14d05cfdaaf61d2e3": "上周关注度较高的产品安全漏洞(20251229-20260104)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524792&idx=2&sn=b115387a5980ae618431dc31a198d636": "CISA提醒注意 WHILL Model C2 电动轮椅中的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524792&idx=1&sn=95cde699800fa12ea3a6a3dd3d890634": "QNAP修复高危SQL注入和路径遍历漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485942&idx=2&sn=a2d634ed236f10a39b28aaf84f5fa708": "漏洞与补丁管理|安全运维的基础防线", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504424&idx=1&sn=d3c8145bfaaa63da85cbf396ba122a0c": "【已复现】n8n Pyodide 命令执行漏洞(CVE-2025-68668)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247519910&idx=1&sn=4a273b7a6101af9d703595bf7981414d": "新年礼盒已就位 _ MiSRC 新年漏洞活动来啦~", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541340&idx=1&sn=8a00e8055be4d9ac9c6dff76e4255372": "MITRE发布2025年最危险软件漏洞榜单Top25", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503662&idx=1&sn=64fde59b05adcf796945c0f6f6feed6c": "雷神众测漏洞周报2025.12.29-2026.1.4", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524804&idx=2&sn=a95d956157098ba83a9cc5da708ab3ba": "AdonisJS 9.2 框架存在严重漏洞,可导致任意文件写入和RCE", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524804&idx=1&sn=1381c6e257d31d7dbe89101f6123fd8b": "CISA KEV 清单共收录1048个已遭利用漏洞,2025年增长20%", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073585&idx=3&sn=cc23d3a13250549d9a85b4399df1b886": "【安全圈】WhatsApp 漏洞泄露用户元数据,包含设备操作系统信息", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073585&idx=4&sn=ce36b82edc5a856930b413e719701e26": "【安全圈】威胁行为者声称泄露 NordVPN Salesforce 数据库及源代码", "https://mp.weixin.qq.com/s?__biz=MzAxNDY2MTQ2OQ==&mid=2650991098&idx=1&sn=b1f43c3fbd177de2eb9ab409d0e157e0": "盘点 2025 年度重大安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524812&idx=1&sn=f525d9edab2101534877ebaa069472f2": "D-Link:遗留 DSL 路由器中存在已遭利用漏洞,速修复", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504435&idx=1&sn=cf7689de7e6702d8a2265d95cb7bc8c9": "【已复现】ComfyUI-Manager 远程代码执行漏洞(CVE-2025-67303)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073601&idx=3&sn=dea95a9fbe14ba2f6a20a39754e7f77a": "【安全圈】0Day漏洞Chronomaly可获取Linux内核root权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073601&idx=4&sn=9c7154506dafe5b5720c6a61411d4662": "【安全圈】D-Link 多款老旧 DSL 网关路由器被曝命令注入 0day,已遭野外利用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458607524&idx=2&sn=b3b2085a4a5679c063ceb49dae3c505b": "安卓音频解码组件曝高危漏洞,可致恶意代码执行,谷歌紧急发布补丁", "https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998491&idx=1&sn=0db5039114f7a7bae17301a318fe02ad": "先知通用软件漏洞收集及奖励计划第十期 正式开始!", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497080&idx=1&sn=8cdafd619daa577dec7993b88c646783": "2025年12月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524822&idx=2&sn=bf38cc5485bf41c1eb57971488d1f356": "Veeam 修复备份服务器中的RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524822&idx=1&sn=e3ab93e00fc28bdb1a256d94e84507f3": "n8n 满分漏洞 Ni8mare 可导致服务器遭劫持", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504447&idx=1&sn=b867a6a515f1ea35f79031f34ae71aac": "【已复现】n8n 远程代码执行漏洞(CVE-2026-21858)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247495930&idx=1&sn=e6199dfd21a6fb4cb25defde788019ca": "ByteSRC开年首测|火山引擎AI业务单个漏洞赏金10万元!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073616&idx=4&sn=7d5cf4b99c2b8b5ea8da8517901c5016": "【安全圈】GoBruteforcer 僵尸网络全球攻击 Linux 服务器,5 万台公网服务器面临风险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073616&idx=1&sn=00ddec83cd6f42d948271422e027e84c": "【安全圈】三星 SSD 管理软件曝高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073616&idx=3&sn=a2ce68c4ee7e78945fbd110650da74e4": "【安全圈】安卓 _ Linux 内核高危漏洞 CVE-2025-38352 验证性利用代码已公开", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073616&idx=2&sn=741da551e46d5f17cae1ee738d1010fe": "【安全圈】黑客利用0Day漏洞工具包在野攻击VMware ESXi实例", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485128&idx=1&sn=1fbc1ceef8a90709e3d5644a809a5c12": "2025年12月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458607554&idx=2&sn=938d93225f6b22535124b87b074f2578": "自动化平台n8n曝高危漏洞CVE-2026-21858,10万服务器面临接管风险", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247493050&idx=2&sn=1f6febc527b5c1ebc9cfb93de814e380": "【已复现】ComfyUI-Manager 远程代码执行漏洞(CVE-2025-67303)", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247493050&idx=1&sn=a3d82655ccef7eef5f6df8f29024f162": "【已复现】n8n 前台远程代码执行漏洞(CVE-2026-21858)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524828&idx=2&sn=21af241f60f1452013815133745e9a72": "开源自托管平台 Coolify 修复11个严重漏洞,可导致服务器遭完全攻陷", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524828&idx=1&sn=d0696191628f6b13a09be6edecbbec4d": "思科:速修复已出现 exp 的身份服务引擎漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504458&idx=1&sn=df0dba80f623b350fad0bb89ff0d1e65": "【已复现】SmarterMail 邮件服务器任意文件上传漏洞(CVE-2025-52691)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651139461&idx=1&sn=cc08882420a97a7293f34e0f7d675d47": "僵尸网络攻击全球Linux服务器、ChatGPT曝高危漏洞_一周特辑", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524939&idx=1&sn=12e526574239156d24f25811e3248164": "【漏洞通告】n8n 远程代码执行漏洞(CVE-2026-21858)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458607710&idx=2&sn=bdc6e048ee353a1bb325c8bd61cdfd79": "周日20点直播 _ FART14秒脱海外加固厂商dexprotector加壳app", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247510052&idx=1&sn=9edf8afdc1e83ef78c8322b5b7d2e2f6": "通用 _ 春节第三趴,提交几个漏洞能拿万元奖励金_大疆运动相机?(文末抽奖)", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247493058&idx=1&sn=945121473d6b788598234ceef4ea3bf2": "【0day预警】ComfyUI-Manager CRLF注入导致远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073647&idx=3&sn=dc42dce00e90108d55e8d5ba87118a10": "【安全圈】思科交换机DNS客户端漏洞事件", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496634&idx=1&sn=8686d9754dfcde9f260aaf03b297f079": "CNVD漏洞周报2026年第1期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496634&idx=2&sn=32b5950802c2c35531024c09ef3c4e9d": "上周关注度较高的产品安全漏洞(20260105-20260111)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524853&idx=2&sn=15cdbed3f4fa83676d37cd78d148ed31": "Java Apps 严重漏洞可用于劫持会话", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524853&idx=1&sn=c4cd6fbd85899f9051551aad7c427db0": "趋势科技:速修复这个严重的 Apex Central RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586311&idx=1&sn=3125ef178376c2c15a9fbc347e6118cc": "Ni8mare高危漏洞来袭 黑客可远程劫持n8n服务器", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504467&idx=1&sn=9464f866ea93eb407f9ae6b83c39be3b": "安全热点周报:D-Link 老旧 DSL 路由器曝新漏洞,正遭黑客活跃攻击", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508073&idx=1&sn=0c8700c435e0541402b4e6734e4a8edb": "漏洞通告 _ Apache Struts S2-069 XXE漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247504176&idx=1&sn=f2cf74e966df087cb6ef9f582938e1e2": "2644 万美元被盗背后:Truebit Protocol 合约漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458607716&idx=2&sn=f5d444c58d3d67312e7d95bbd04251ed": "游戏工具变后门?InputPlumber高危漏洞曝光,Linux游戏玩家面临劫持风险", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489906&idx=1&sn=92b4a74ac266363efbe64a4a935311ff": "GGML_GGUF 文件格式漏洞深度解读与挖掘思路", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497101&idx=1&sn=bf9b5c37f748f072b12c6b0f8d78e2e3": "Struts2 S2-069 XXE漏洞 (CVE-2025-68493) 来袭,腾讯云主机安全RASP可自动防护", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524857&idx=1&sn=7d98b989a61c9b25103ccef5b0524560": "Apache Struts 2 严重 XXE 漏洞可用于窃取敏感数据", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524857&idx=2&sn=8c1f832d3fbc13cae125177e8f0247af": "React Router严重漏洞可用于访问或修改服务器文件", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073695&idx=4&sn=080d75ef27ce9b31399927cffaf20808": "【安全圈】GoBruteforcer 僵尸网络利用弱凭证攻击加密货币项目数据库", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247501261&idx=1&sn=15aa1c7063a90bda5c4aafac96d211c5": "G.O.S.S.I.P 阅读推荐 2026-01-13 十三年零漏洞的密码学算法库,翻车了?", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653097107&idx=1&sn=0eb4e14ceac1eaf580a3045a71f45a3f": "Alphabet 成第四家四万亿美元公司;德亚官网偷跑大疆 Pocket 4;国内首起 AI 服务涉黄案二审在即 _ 极客早知道", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458607943&idx=1&sn=5fcf7ec92bff6761d0d98524fa5e166a": "《Linux Pwn 番外篇》重磅上线!6大架构全覆盖,异构漏洞利用5h学透", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489472&idx=1&sn=db2067a5b796dfec6e3aadef74bb9c40": "【漏洞通告】Apache Struts外部实体(XXE)注入漏洞S2-069(CVE-2025-68493)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503684&idx=1&sn=ff960cdd5ce6f5c6e73c4cfc426d26a2": "雷神众测漏洞周报2026.1.5-2026.1.11", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664257467&idx=2&sn=39a85214b1acf94004aeefa1206d4efe": "CNNVD _ 关于Apache Struts安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524868&idx=2&sn=734a45fb6b2c137eff46cd0261228384": "OpenSSH 严重漏洞可导致 Moxa 以太网交换机易受RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524868&idx=1&sn=511dcdb0c6fcd3cd07ef7783b225bcf4": "微软2026年1月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247497514&idx=1&sn=7ed15683104dc3efaac59deb8bb680ba": "成果分享 _ 智能体漏洞检测 [ASE'25, Security'25_26, BlackHat EU]", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504481&idx=1&sn=4a9739d375bee82302c907aab53accbd": "微软1月补丁日多个产品安全漏洞风险通告:1个在野利用、8个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073709&idx=3&sn=28e46901cfcbe9c4eaf461852c6db800": "【安全圈】微软桌面窗口管理器0Day漏洞遭野外利用", "https://mp.weixin.qq.com/s?__biz=MzA3NzE2ODk1Mg==&mid=2647797602&idx=1&sn=1fabd021b6f8a2d023b859a39731989f": "灵脉IAST 5.4 _ AI漏洞治理 X 业务逻辑漏洞检测", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524963&idx=1&sn=bdc6b135d8846c856337ff22dcefe3f0": "【漏洞通告】Apache Struts XML外部实体注入漏洞(CVE-2025-68493)", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247529934&idx=2&sn=1ca685ecb422e7ac54f77133cfce709a": "2026-01微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608141&idx=2&sn=c19b6cf882e4ef220bac802d3136a28b": "周五20点直播 _ 想挖IoT漏洞?这个Tenda 0day案例你不能错过", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489476&idx=1&sn=3520c03b51e279ce544a362114c705d2": "【安全更新】微软1月安全更新多个产品高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524906&idx=1&sn=042b50af44fdb5d36a87c4aa47750af2": "奇安信发布智能网联汽车云平台漏洞报告:九成存漏洞,超七成涉高危风险", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485960&idx=1&sn=51aec823340b0159b87f40d9d1ebf652": "Struts2 XXE漏洞(CVE-2025-68493)分析及复现", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504487&idx=1&sn=e64c861b77b37e5a7bf180bb0abceb6f": "【已复现】OpenCode 远程代码执行漏洞(CVE-2026-22812)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651139610&idx=1&sn=d1c29183a3174bcaf50573bb5532eb6a": "VPN漏洞频发,威努特零信任如何守护企业数字边界?", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073727&idx=3&sn=4e4471fde2273c957d656e6532c405b0": "【安全圈】Apache Struts 2曝高危漏洞:攻击者可窃取敏感数据", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073727&idx=2&sn=e0c8016ed9626a7cec7c2b600f592b4d": "【安全圈】微软Copilot曝一键式漏洞:攻击者可悄无声息窃取敏感数据", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524974&idx=1&sn=f9ea9aeeb56719262d22f245d298458e": "【漏洞通告】Fortinet FortiSIEM phMonitor服务命令注入漏洞(CVE-2025-64155)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608278&idx=2&sn=a74eb8d323b5228da92136491333e075": "Palo Alto Networks 紧急修复高危漏洞,攻击者可致防火墙瘫痪", "https://mp.weixin.qq.com/s/z_CIJ1EEuRF1r6dj_kZmMA": "WordPress漏洞后台RCE漏洞审计过程", "https://mp.weixin.qq.com/s/nF48nz4642lMtup9rcU3AA": "挖漏洞等于挖坟! 请把后事准备好。", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524907&idx=1&sn=56ac025aa6a6fcc0f1243163f93a12bc": "在线阅读版:《智能网联汽车云平台漏洞分析报告》全文", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586382&idx=2&sn=ecd8789a25a92b246a88cc0d18af16a1": "CVE-2026-20824漏洞:Windows远程协助存在安全功能绕过风险", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586382&idx=1&sn=769ccf33f87c460c993b65f5757bea08": "HPE Aruba漏洞致敏感信息遭未授权访问", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651139632&idx=1&sn=320aecd7aad9fb642fc495cfef2ab4b8": "国家漏洞库通报Apache漏洞、西班牙能源巨头1TB数据泄露_一周特辑", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247494791&idx=1&sn=48f766f78cde227c2476ee008ed6d850": "北京大学 _ ContractTinker:基于大语言模型的真实场景智能合约漏洞修复系统", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608285&idx=2&sn=26ef1de70e528ff6d82da8c6ef3280ba": "今晚20点直播 _ 想挖IoT漏洞?这个Tenda 0day案例你不能错过", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451184838&idx=1&sn=d4c35e35eca232ae996a5d4c50d06b08": "Android Pixel 9 的零点击漏洞利用链全解析:从发送杜比音频解码到内核提权", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664257584&idx=1&sn=03dc63897eec3eeffc5eaebf1dc7d243": "CNNVD _ 人工智能重要漏洞通报(2026年第一期)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664257584&idx=3&sn=d265efe8a38a8c6feed55b0fdeb89dd3": "CNNVD _ 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073757&idx=2&sn=568bc60bf24ebbbc562831d29e7b2c5a": "【安全圈】AMD Zen 1~5全系CPU曝出StackWarp漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073757&idx=1&sn=b7baabf15c246b7188cec3311d4fcb74": "【安全圈】男子利用购物平台漏洞窃取用户信息并骗取佣金1878万被判刑", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496648&idx=1&sn=01d8d7fdffebef6f4bd46e5bc28e0e68": "CNVD漏洞周报2026年第2期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496648&idx=2&sn=b3ab5466e4b6c25034f4be202ab758e9": "上周关注度较高的产品安全漏洞(20260112-20260118)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524913&idx=1&sn=8f401332b3245f7cccbc382a184094e2": "Glibc 修复高危堆损坏和已存在数十年的信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524913&idx=2&sn=02e06fbe27ab50566ac1d367922f44b7": "严重的FortiSIEM漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586404&idx=1&sn=76433e88c0fab00b3b85829927154758": "GoBruteforcer僵尸网络新攻势:利用AI生成配置漏洞 瞄准加密货币数据库", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073786&idx=3&sn=c8f4af29c23aa47e5266e6d73a79b296": "【安全圈】Deno 曝出高危漏洞(CVE-2026-22863 和 CVE-2026-22864)可导致密钥泄露与任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073786&idx=2&sn=a05dc4ac75eeb1922cbaac6a8bce9ee9": "【安全圈】全球恶意广告劫持DNS漏洞,日均欺诈百万用户", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073786&idx=1&sn=651dca9c8e72b03014a22b79574bf873": "【安全圈】苹果督促用户更新 iPhone 高危漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608330&idx=2&sn=db978609e85f81923fdb2003165acdb3": "横跨数十年的漏洞与新型堆破坏:glibc 重大安全缺陷曝光", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524925&idx=1&sn=66f2c70dfd469368ba99eb7c01321130": "Livewire Filemanager 漏洞导致web 应用易受RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524925&idx=2&sn=f89ae14d71d858aa5b0a3b1ba66faf9d": "谷歌 Gemini 提示注入漏洞可用于暴露私有日历数据", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485964&idx=1&sn=78c2d90de0e51f8b4dbdb2fb7a1c5788": "从 XSS 到 RCE:Electron 应用中的真实攻击链", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140230&idx=2&sn=036ac8c3dadd0179599cea9f96646798": "美国首次公开承认对委内瑞拉使用网络武器:几分钟内关闭并恢复电网供电;2026年1月12-18日CNVD漏洞态势研判报告 _ 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608458&idx=2&sn=2bdd5c55f5a0388eaadf3679c6b92827": "Cloudflare曝零日漏洞:攻击者可借证书验证路径绕过WAF访问任意源站", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608458&idx=1&sn=a2d35a8ebfe8b57b29b4000968090400": "NETGEAR 路由器环境模拟与漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608458&idx=3&sn=e0f5efeee2b34911138bb6c44c60cc8c": "满10人开班:系统0day安全——车联网安全入门(第8期)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503691&idx=1&sn=84c8cd82e1bafcf7d4f46966d8d85ec4": "雷神众测漏洞周报2026.1.12-2026.1.18", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497165&idx=1&sn=b2df840698d325a1079d672d0205bde3": "未来已来:漏洞挖掘智能体VulnAgent 发现两个Suricata 高危漏洞,并获官方致谢!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524939&idx=2&sn=a0b5639d3c077f9d7f283ee4872d5c0d": "Anthropic MCP Git 服务器漏洞可用于访问文件和执行代码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524939&idx=1&sn=3b78a85d34e70b90de763e54f7cdd239": "Cloudflare 修复可绕过 WAF 访问源服务器的 ACM 验证漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485966&idx=1&sn=5468b4706a61a7cf1396ac6ff8c41f11": "DeepAudit——代码漏洞挖掘多智能体ai系统", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504501&idx=1&sn=e5729e9e83c6d610ae05b054ac747d4c": "Oracle 2026年1月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073823&idx=3&sn=c3951d395ab247469235b1bedcd3f029": "【安全圈】WordPress 插件漏洞导致 10 万余个网站面临权限提升攻击风险", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789628&idx=1&sn=eeee12f87f31b54f145b66896be008fa": "研究显示:GPT-5.2可稳定量产零日漏洞利用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608480&idx=2&sn=7fb7a1fd128f9485c34b6412149976d8": "Redis 远程代码执行漏洞曝光:官方容器现“老式”栈溢出高危风险", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247487983&idx=1&sn=f4a51b543bf0adba0467b533bef5befa": "漏洞预警 _ GNU InetUtils telnetd 远程认证绕过漏洞(CVE-2026-24061)", "https://mp.weixin.qq.com/s/TDZzAQ4CK1oDWHvAFdwRTg": "今日互联网安全速报2026-01-22_Log4j_Apache Struts_CVE-20126-2091_华为MatePad_小米智能手表_8n8【黑客驰】", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664257741&idx=2&sn=757fb33ee9873420a58c8265bb81350b": "CNNVD _ 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzU5NTA3MTk5Ng==&mid=2247490014&idx=1&sn=a246acbc4b5b17bf95fbafb43ff17b83": "逆天漏洞:《明日方舟:终末地》海外首日公测上线就遭遇T0级事故", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524947&idx=2&sn=5596e7b09c6e905e054610915db4a6e1": "Orval 中存在严重的代码注入漏洞,存在供应链安全风险", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586453&idx=1&sn=84306048957277309041d293a3975287": "严重漏洞WhisperPair曝光:黑客可通过蓝牙音频设备实施追踪与窃听", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504524&idx=1&sn=b7a52d0ad7bb616eb4bbb3a6c823386f": "【在野利用】SmarterMail 身份认证绕过漏洞(QVD-2026-4572)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073840&idx=3&sn=23ce288e15bb2a4454965ba7e82e8c0b": "【安全圈】Cloudflare 零日漏洞:可绕过 WAF 访问全球任意后端主机", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508218&idx=1&sn=026c119b24e58480bc982acf4be329d5": "附排查方法!GNU InetUtils Telnetd 远程认证绕过漏洞(CVE-2026-24061)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489484&idx=1&sn=708c34d925835056baf7652dfdd9d5dd": "【漏洞通告】GNU InetUtils Telnetd远程身份验证绕过漏洞(CVE-2026-24061)", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247511005&idx=1&sn=b5b4aa6ee28a9331ff4c0cf194b40db8": "n8n远程代码执行漏洞简报(CVE-2026-21858)", "https://mp.weixin.qq.com/s/qrIa7_dvkE3S3rm2Q7YfPA": "DeepAudit !Multi-Agent 协作击穿代码漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524955&idx=1&sn=34fffd85602bd5f7fa445177131ff399": "SmarterMail 认证绕过新漏洞被用于劫持管理员账号", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524955&idx=2&sn=922edf69046bb2a552b3f58f4f21f882": "思科修复已遭利用的 Unified CM RCE 0day漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247497579&idx=1&sn=098004b068f0cc79064d27fef22d4df6": "首尔特辑 _ 白泽PoC 2025 参会小记", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247552188&idx=1&sn=174805f47befdcf92f1873647af7d1fa": "2026年SaaS安全13大威胁:从零日漏洞到高级持续性威胁", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247524986&idx=1&sn=a422cf093b0026dd885f85e347af22f5": "【漏洞通告】Oracle WebLogic Server Proxy Plug-in身份认证绕过漏洞(CVE-2026-21962)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608566&idx=2&sn=bf87ede159ec3f36f21eee4298f52ab5": "​原来有人靠「找漏洞」每月多赚几万", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247488179&idx=1&sn=cb9342ab385cd66617a65c93388841e2": "第153篇:Struts2-069 XXE 实体注入漏洞分析+复现", "https://mp.weixin.qq.com/s?__biz=MzkwMTE4NDM5NA==&mid=2247486811&idx=1&sn=ac135f423dad429e7efba75f6b53d11e": "拆解 AI Skills 的五大逻辑漏洞与防御实践", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653097749&idx=1&sn=8716212769bff47a25e7ab1bc42c6544": "传 iPhone 17e 配灵动岛不涨价;大疆 Osmo Pocket 4 或春节后发布;中奖规则调整,买彩票成不了亿万富翁 _ 极客早知道", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496669&idx=1&sn=bb28f432589cb86f9ac1f9a1e500eacc": "CNVD漏洞周报2026年第3期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496669&idx=2&sn=3bdde749cf6d4cef12694e441706e279": "上周关注度较高的产品安全漏洞20260119-20260125)", "https://mp.weixin.qq.com/s/NzOpzOAYQqmmYEesuOQTfA": "REINFORCE 越狱攻击让 Llama 3 彻底黑化", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524969&idx=2&sn=f5c3f208265141f2ef4d2fca7dd25c76": "CISA:四款企业软件中的漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247485828&idx=1&sn=e96ec9b2bd3cb95f89618868e299f99f": "ChatGPT新漏洞可让攻击者窃取谷歌邮箱、微软邮箱及代码托管平台数据", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608579&idx=1&sn=b2ea4f72fed798e5537bb1f1dd511cad": "Meta低调修复Instagram高危权限漏洞,安全社区质疑其响应透明度", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727850450&idx=1&sn=f643efa9414dfb921586ca27e5c7f3f7": "【活动】通用漏洞全年3倍奖励,百万奖金持续悬赏!!!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524977&idx=1&sn=60a6766757d720c5fdd8346ba3b98c0b": "微软紧急修复已遭利用的 Office 0day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501163&idx=1&sn=5974e326145ca843bf2705f43f40dc28": "CNVD漏洞周报2026年第3期", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504534&idx=1&sn=b1d383f36870389f1d3f5756013896f9": "【在野利用】Microsoft Office 安全功能绕过漏洞(CVE-2026-21509)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515511&idx=1&sn=fae2eb853370c6ec1a091657183fc575": "2025年新增漏洞5万个,公开遭到利用的不足千个", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608741&idx=1&sn=432dff90252a270f0d35e2d76e0e2b78": "初识IO_FILE Exploitation", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247498970&idx=1&sn=5b7bb9540772df10eed8edad620ee479": "某小程序rce", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503700&idx=1&sn=291040c751308c295b6f74a5b544c846": "雷神众测漏洞周报2026.1.19-2026.1.25", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247584705&idx=1&sn=4905d62688a89808180dfa7a486de44f": "81%中高危漏洞!360年度漏洞报告出炉:攻防进入AI时代", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664258292&idx=2&sn=b7765078147d374971d27457ccee4f3a": "CNNVD _ 关于Microsoft Office安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524984&idx=2&sn=e5fceae455445bc2b4660ccfb24127dd": "热门 NodeJS 库 vm2中存在严重的沙箱逃逸漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524984&idx=1&sn=19aef4ce8e288278782458e430a710d8": "热门包管理器中存在多个漏洞,JavaScript 生态系统易受供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586526&idx=2&sn=d2ab675855e8ce84afaf88acbcb53c9d": "Pwn2Own Automotive 2026 落幕:76 个零日漏洞被攻破,研究人员斩获百万美元奖金", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504548&idx=2&sn=82db7c283ba71172c1615913d7671f48": "【在野利用】Fortinet 多款产品身份认证绕过漏洞(CVE-2026-24858)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504548&idx=1&sn=3ec06d42760edb5b95e85ea6888dae63": "【已复现】SmarterTools SmarterMail 远程代码执行漏洞(CVE-2026-24423)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073891&idx=2&sn=37b25475a55602fcc0f9d4adb0230448": "【安全圈】Office漏洞正被黑客大量利用!2016、2019、2021、365全中招", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073891&idx=1&sn=5a28b35ef1f9877f68769c480ec7c614": "【安全圈】谷歌警告WinRAR必须更新!漏洞正被黑客疯狂利用:已有大量用户中招", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525003&idx=1&sn=86cbde8e44b1d3c4a12735928ef89679": "【漏洞通告】Microsoft Office 安全功能绕过漏洞(CVE-2026-21509)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608753&idx=2&sn=9a4513bbabaae7ccc05bd7139de32feb": "周六19点 _ 如何绕过路由器的认证机制?D-Link设备漏洞挖掘实战直播", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247510181&idx=1&sn=0a0f911338d32b56abb675f7cac32e68": "补天春节快闪!速来⏳10个漏洞轻松赢礼盒,限时掉落!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524999&idx=2&sn=ff036e0f85b25e6ee0f685062e7a537f": "Fortinet 修复已遭利用的严重 FortiOS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247524999&idx=1&sn=29baedb21e9e4bef4466b10bc66abcde": "n8n 两个高危漏洞可导致认证RCE", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247485970&idx=1&sn=5ebed8531e7d650a2b17b9dbff4497a0": "ChatGPT新漏洞可让攻击者窃取谷歌邮箱、微软邮箱及代码托管平台数据", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504619&idx=1&sn=2b304680299a0a0b75bfeddca8b596ac": "年度报告 _ 2025年漏洞态势全景复盘!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073915&idx=4&sn=cc70511df2d49f4ff6dd41538bf3b02a": "【安全圈】Chrome 发布安全更新,修复后台 Fetch API 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073915&idx=3&sn=ad2665e9be5ec05d1f5f1bcdabcfa2d4": "【安全圈】PyTorch _安全_模式被严重RCE漏洞攻破,可执行任意代码", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140373&idx=2&sn=b1916017fe472a1a4bc6b0f817c69ea8": "国家漏洞库CNNVD:关于Microsoft Office安全漏洞的通报;韩国公共系统全面沦陷:模拟攻击揭示安全防护重大缺陷_ 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247501360&idx=1&sn=7483d15098ee377f789328685b925985": "G.O.S.S.I.P 阅读推荐 2026-01-29 超越答案正确性:揪出大模型推理回复中的“隐性逻辑漏洞”", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608775&idx=3&sn=9f868b248a90e9f4119d7b6f76803edd": "CVE-2026-24747:PyTorch模型加载功能曝出8.8分高危漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608775&idx=2&sn=d7c9a376e077cb25a0ac432f8b6eb448": "Linux 内核攻击:Punch hole (2025 Backdoor skernel 复现)", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247584738&idx=2&sn=9ecda9723b6a097aec78697c293c2cda": "工信部致谢!360荣膺“优秀技术支撑单位”并获颁原创漏洞证书", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525028&idx=2&sn=762ebd580b93c85ca6f361c47033a215": "Ivanti 提醒注意已遭利用的两个 EPMM 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525028&idx=3&sn=70181900e6f00cf38ce9655f395495d9": "SolarWinds 修复四个严重漏洞,可导致未认证RCE和认证绕过", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525028&idx=1&sn=d5e0573d332c81e32499c1d81a8c616c": "奇安信获NVDB-CAVD年度优秀技术支撑单位 10项原创漏洞证书彰显车联网安全实力", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651139827&idx=1&sn=5f018b2377de83fed165b08fdb29f942": "微软Office曝高危漏洞、耐克遭勒索攻击_一周特辑", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073946&idx=2&sn=9b93e65f9ea42f56a293adcf299febd6": "【安全圈】Metasploit 发布 7 个新漏洞利用模块 覆盖 FreePBX、Cacti 和 SmarterMail", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073946&idx=1&sn=bdc710b97937508dd118e83b9f789587": "【安全圈】国产飞牛系统fnOS疑似出现重大安全漏洞 官方已修复但没有发布安全公告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608873&idx=2&sn=4ca0b40d05e4611144274a07a6e2bab1": "今晚7点直播 _ 如何绕过路由器的认证机制?D-Link设备漏洞挖掘实战直播", "https://mp.weixin.qq.com/s?__biz=Mzg5MTM5ODU2Mg==&mid=2247502511&idx=1&sn=79752daf374cf8eaf321f3b6dbd208e4": "[系统安全] 六十四.漏洞挖掘与利用 (1)WinRAR漏洞在APT攻击中的应用总结", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073959&idx=3&sn=3979835f9237351359e08771b9781191": "【安全圈】Chrome 发布安全更新,修复后台 Fetch API 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073959&idx=2&sn=5b4af53f24f7e46133988e49401751da": "【安全圈】两个 n8n 高危漏洞可使认证用户远程执行代码", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247488190&idx=1&sn=6862d27a6a6998eeb9d2f6a357adac2b": "第154篇:美国NSA苹果手机硬件级后门漏洞的分析 _ _三角测量_系列第8篇", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496683&idx=1&sn=cd757aad8add0b967838b6bf556ad101": "CNVD漏洞周报2026年第4期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496683&idx=2&sn=f1636f176936e7f3a30ce1f43b453905": "上周关注度较高的产品安全漏洞(20260126-20260201)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525034&idx=1&sn=0937f8c4b8169acd746e47cdce1254e7": "SmarterMail 修复严重的未认证RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586586&idx=2&sn=134c3dcc84aa1d42f3b82514bd96d092": "vm2 Node.js沙箱库曝高危漏洞 可突破沙箱执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073971&idx=2&sn=7eb6eabc5a3c83bc7a5fe8427776717e": "【安全圈】Moltbook AI 漏洞暴露邮箱地址、登录令牌与 API 密钥", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247488222&idx=1&sn=c8874b0a7b7843a406e204a463b0182f": "第155篇:Weblogic反序列化漏洞的多种回显方法总结(上篇)", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653098212&idx=1&sn=2587a562e54b50ed31f2b4a703b78d22": "AI 代理社交平台 Moltbook 曝严重漏洞;雷军:新 SU7 量产,春节到店;宇树机器人挑战极寒天自主行走|极客早知道", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501184&idx=1&sn=a511281503bade6821dbfa75a7f133cc": "CNVD漏洞周报2026年第4期", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073982&idx=2&sn=de21d8160a6914ed983588d94ca30082": "【安全圈】海康威视修复DS-3WAP无线接入点命令注入漏洞(CVE-2026-0709)", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541639&idx=2&sn=12f7cd3cef3e56241cef5126615b3b7d": "从美国CISA KEV看 “主权”合规漏洞清单的价值变迁", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608987&idx=2&sn=e1ca0e9a1a5c81f2114d6194072f76fa": "Office 最新高危漏洞遭利用,多国政府机构被定向攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458608987&idx=1&sn=eb20b7a211d3d0a14aee4d810d146e57": "fnOS路径穿越与命令执行漏洞利用分析", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499009&idx=1&sn=204909ba828eadcc428e26d229ad0d2e": "某通杀漏洞思路分享", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525048&idx=1&sn=cdf70fc2422b01678c8735e83fc62b3b": "AI 助手OpenClaw 易遭一次点击 RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525048&idx=2&sn=58b797888d5027994282725ccb9f23de": "Apache Syncope 漏洞可用于劫持用户会话", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504636&idx=1&sn=3faa5525b063245cb853d84c65a94254": "【已复现】Microsoft Office 安全功能绕过漏洞(CVE-2026-21509)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247496013&idx=1&sn=99e9040f0bcba562aa2143bd984b498a": "共建开源生态安全!ByteSRC正式启动开源项目漏洞收录计划!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073999&idx=3&sn=43e865de647357006d609f2404190a10": "【安全圈】Fancy Bear 利用微软 Office 漏洞对乌克兰及欧盟发动网络攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652073999&idx=1&sn=5508575686fa7be60539730ca202eb59": "【安全圈】爆火 AI 智能体 OpenClaw 被发现严重漏洞,可传播 _ 植入 macOS 病毒", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508235&idx=1&sn=470133ecf4a177386fd1e0b23fdea8c6": "已复现!大蚂蚁 (BigAnt) 即时通讯系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247493091&idx=1&sn=c92a2154e012e66e1f5b25ac34742bc5": "【已复现】大蚂蚁 (BigAnt) 即时通讯系统任意文件上传漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247584868&idx=1&sn=ec2f56aa33c90ee7676e7d17e2026498": "续写三连冠传奇!360勇夺2026天府杯漏洞防护赛独立战队第一名", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525056&idx=2&sn=1c1e4b6c2a7cfb3e7fcba30a93483c43": "Moxa 交换机中存在严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525056&idx=1&sn=15cdf06676ec490a668ee9af2a579306": "n8n出现新漏洞,可用于执行系统命令", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140430&idx=2&sn=d946d3717568d28c0fee5e3d00dcf40c": "工信部:关于防范Microsoft Office安全功能绕过高危漏洞的风险提示;网络攻击新手法:签名合法驱动被利用,59款EDR_防护软件遭终止_ 牛览", "https://mp.weixin.qq.com/s/qBCIfgVHPco-PxLn5JGmMw": "AMD 不予修复的远程代码执行漏洞(中间人)", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497185&idx=1&sn=b8378d3048f988204e2ad9540453d7cb": "2026年1月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525062&idx=1&sn=56b0657b15f93ca3c67f9c4063a221c6": "两个漏洞可用于攻陷谷歌 Looker 实例", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504647&idx=1&sn=4af7eb7843246e7602f87927bfd67674": "安全热点周报:SolarWinds 严重远程代码执行漏洞已被积极利用", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485136&idx=1&sn=99db518f5db0321868f0810a424375b8": "2026年1月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525014&idx=1&sn=99f5eb409f66f96f13fef0a4d2d4fb66": "【漏洞通告】n8n 表达式沙箱逃逸导致远程代码执行漏洞(CVE-2026-25049)", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492877&idx=1&sn=9a3758da4a64b0808278133932f8901c": "疑似俄罗斯背景APT28组织利用最新漏洞及云C2基础设施发起隐蔽攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458609245&idx=1&sn=e7111d374843bb2c5ae4344177656ea5": "JerryScript引擎ecma_op_to_index漏洞分析与越界读写利用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458609245&idx=3&sn=9c72500d0544dd0c5119aee9e839a325": "jsPDF库两大漏洞可致代码注入与系统崩溃,千万开发者需立即升级", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451185181&idx=1&sn=694f1b9edbb43493063bde24dad2b8bc": "AMD 不予修复的远程代码执行漏洞(中间人)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074052&idx=2&sn=8e912398d2bf5ec8260e938a07b552b0": "【安全圈】紧急预警!n8n 曝严重漏洞", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653098622&idx=1&sn=e19610df6307729a3eaca5c2ca544d18": "小米 YU7 Ultra 曝光,极速 300KM_小时;影石「Pocket」相机曝光;传英伟达 2026 可能不推新显卡", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496701&idx=1&sn=3dbd1b15bab5141997f2c3443603193c": "CNVD漏洞周报2026年第5期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496701&idx=2&sn=37cf7cd1606ba0d031288880a1baca2e": "上周关注度较高的产品安全漏洞(20260202-20260208)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525079&idx=1&sn=bc6beaea30527b11fef87c2999455814": "BeyondTrust 严重漏洞可导致预认证RCE", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074077&idx=3&sn=2212433e0052234e208a36638250a811": "【安全圈】SandboxJS 四大高危漏洞(CVSS 10.0)可导致宿主系统沦陷", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503707&idx=1&sn=c5920a30446db974acf080295d5c45a9": "雷神众测漏洞周报2026.2.2-2026.2.8", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525085&idx=2&sn=db60b15e1fca3dbe39ef14ac28b16914": "Claude Opus 4.6 找到主流开源库中的500多个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525085&idx=1&sn=446f5400a46600a37f24df299ba852d2": "Fortinet 修复可导致未认证代码执行的严重 SQLi 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247495002&idx=1&sn=e1cc4d548f09e6960ee302121e72c6ca": "印第安纳大学布卢明顿分校 _ 基于掩码图注意力网络的漏洞情报对齐", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458609652&idx=3&sn=585c9c3a555a370d3cf0d7e0264abe4c": "Axios 曝高危漏洞,可致 Node.js 服务崩溃", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525101&idx=1&sn=ebdb207062b81e30e6939a2fa2e85a8e": "开源库 Libpng 漏洞已存在30年,可导致数百万系统遭代码执行攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525101&idx=2&sn=973a3ab33cfe6290521da6d90b4c743e": "微软2月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504653&idx=1&sn=00b7b70c52946fc115d6caa367bb93fd": "微软2月补丁日多个产品安全漏洞风险通告:5个在野利用漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074106&idx=1&sn=72e574f6313d73bd75cec9f20e036c27": "【安全圈】CVE-2026-1868:GitLab AI Gateway 严重漏洞(CVSS 9.9),可致远程代码执行", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508241&idx=1&sn=a0b8ee65257340f64f3ca267fd1e090b": "已修复 _ 微信Linux版本远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247530583&idx=1&sn=593aa8b3be42abd3c36f877d4f2bf243": "微信Linux版高危漏洞已修复 信创安全防护仍需重点强化", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458610691&idx=2&sn=80d56bc5de67e2fddbdb31d16d97a8c6": "紧急修复!Windows 记事本漏洞可致远程代码执行", "https://mp.weixin.qq.com/s/I86m2ysuGDPxgB-jIzj8zw": "安全专家要失业?MoCQ 手搓漏洞挖掘机", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525108&idx=2&sn=eb3ace41d769ee7dcd8d459a227040f3": "Ivanti Endpoint 管理器漏洞可导致远程攻击者泄露任意数据", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525108&idx=1&sn=2b500bf8aa918225bd717208dcda3326": "苹果新 0day 漏洞已用于“极其复杂的”攻击", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504661&idx=1&sn=08fc7397e3412a0f78a9decd0660c052": "【已复现】Microsoft Windows 记事本远程代码执行漏洞(CVE-2026-20841)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA4ODEyODA3MQ==&mid=2247495675&idx=1&sn=248f97c07d4041fa3521a2b472a59a9f": "伪装成漏洞检测工具样本分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074123&idx=3&sn=56d3b7691413517a4c4f08c06962d8c9": "【安全圈】Apple 紧急修复在野零日漏洞:dyld 组件被用于“高度复杂”定向攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074123&idx=1&sn=9b1a9c993553c060ba4ff0723b80d66f": "【安全圈】“本地回环”成突破口:Clawdbot 默认配置漏洞导致上千实例暴露公网", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247530609&idx=2&sn=e28e5652606dc4ef0e31163d78994802": "2026-02微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458610783&idx=2&sn=b22f07373e8540d85dd62682cc5b01af": "AI写病毒首次实战!React2Shell漏洞遭“代码代写”式攻击,91台服务器沦为矿机", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499059&idx=1&sn=5478013a4686e11d3ef928e9cfd28e4f": "【SRC实战】逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451185265&idx=1&sn=f0e19b84580055e1ab849a13ef7462bb": "苹果修复动态链接器漏洞:曾被用于针对特定个人的极其复杂攻击", "https://mp.weixin.qq.com/s/djpmWYH4tLwJlNZeP0aYxw": "新春福利 _ 车联网漏洞报告平台公开了他们漏洞数据!!!", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664259365&idx=1&sn=31085a68ec263da2da987c324b76b107": "论坛·2025全球网安概览 _ 2025年网络安全漏洞态势与治理趋势", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586781&idx=2&sn=1c95c531cb164c3eb0dc6bd366c36e17": "黑客利用React Native Metro高危漏洞入侵开发者系统", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074144&idx=1&sn=205f661350ec7cdc90c4a04b3268345a": "【安全圈】飞牛 fnOS 漏洞被批量利用", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541759&idx=2&sn=e1576b69d1de35ee786bdca2de933727": "漏洞扫描不是“点一下”:揭秘安服巡检背后的“硬功夫”", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499104&idx=1&sn=177f60dfbf265322390cd98eac4a2a81": "2026年需重点关注的几类高价值漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496716&idx=1&sn=b86955a94e460fbcfc73396c793de098": "CNVD漏洞周报2026年第6、7期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496716&idx=2&sn=ef1d15f61efedbe064a601c35cf7ac98": "上周关注度较高的产品安全漏洞(20260209-20260222)", "https://mp.weixin.qq.com/s/jWvMR9EDCt-6PTUVuS1ttw": "国内某知名AI现严重漏洞,可被绕过生成暴露图片", "https://mp.weixin.qq.com/s?__biz=Mzg4NDU0ODMxOQ==&mid=2247485855&idx=1&sn=460e5fceb4ef06fdef994a6a363eea32": "红队实战利器:RapidDNS CLI + Nuclei_Httpx 打造自动化漏洞挖掘流水线", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140556&idx=2&sn=5e20c15bf2fc75a843db1dd9f042a1ec": "庄荣文:锚定网络强国战略目标推进“十五五”网信事业实现良好开局;OpenAI 工程师因代码漏洞损失 25 万美元加密资产 _ 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458611129&idx=2&sn=f70da9ce36978a9cc8c121f73a801b65": "Apache ActiveMQ漏洞遭利用,LockBit勒索软件批量入侵企业", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499115&idx=1&sn=8cd8fe1c9269c51c8f8195754b889ebc": "实战漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525116&idx=2&sn=05bb28ebbcccd3533d24a8ea4ee1f19f": "SolarWinds Serv-U 多个严重漏洞可用于提供服务器root权限", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525116&idx=1&sn=ffcebdc0199d9d01b890547013c04998": "合勤:注意影响十几款路由器的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074198&idx=1&sn=09a467e0d06230cc6b463f9ca34e345f": "【安全圈】大疆扫地机被曝安全漏洞,6700台设备可被远程控制", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541825&idx=1&sn=fceb62f0005edd783d6aa3c95a45a468": "Check Point帮Claude找了3个漏洞,真没想到引来了...", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458611191&idx=1&sn=2059dce6296e9b4e376e9e6d2666c11e": "CVE-2021-1732 内核提权详细分析", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499120&idx=1&sn=00d11b43a4c20b715f420cdea3aff2ac": "通过js发现的一个信息泄露漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525129&idx=2&sn=0315a8afa05e856df83c5d71fc10d9b5": "Juniper Networks PTX严重漏洞可导致路由器遭完全接管", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525129&idx=1&sn=7cc5ee0c0cb45f07913db3cc42f403dd": "趋势科技:注意这些严重的 Apex One 代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586872&idx=2&sn=c5762aafdfec86b06c7d6c8d9c1882e8": "多款谷歌应用商店心理健康App曝安全漏洞 超千万用户敏感医疗信息面临泄露风险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074218&idx=1&sn=dbc3ef3759a7705b77b093a33c6f0804": "【安全圈】Python 热门 ORM 爆出 9.8 分致命漏洞,数据库或被完全读取", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140586&idx=2&sn=718013972d4d8b32c9a9906c9887cc12": "八部门新规3月1日实施,网安从业者需筑牢未成年人网络防火墙;120万法国银行账户泄露:公职人员权限成最大安全漏洞 _ 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458611434&idx=1&sn=3f8c4b616b1d9d215bf5f202f4d8322a": "重磅打造 _ 0day系列——Web框架漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525250&idx=1&sn=d3f966b7d7e8878b93bfd7f39a3ed86b": "特斯拉 Model 3 和 Cybertruck 存在多个漏洞,无线连接栈可遭拦截", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586888&idx=1&sn=e09b85b1e6eebce36d4b3e398e6d4f83": "思科Catalyst SD-WAN严重认证绕过漏洞遭长期入侵,可植入恶意节点控制网络", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486711&idx=1&sn=01691784270b9587404a4bf1dc5eee84": "美国防部推进AI网络作战工具 重点锁定中国电网与关键基础设施漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504670&idx=1&sn=598e4ea6c7dc25cee2882cdb3ce26379": "安全热点周报:谷歌修复了今年攻击中首个被利用的 Chrome 零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074234&idx=1&sn=2f8e4442c9c605c764d28286413dffa2": "【安全圈】ClawJacked 漏洞曝光:网站可远程劫持 OpenClaw AI 代理,开发者需立即升级", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140598&idx=1&sn=3bcbfa4869ea7f88e369b53c10f6b6aa": "CNVD公开Apache Continuum命令注入漏洞;谷歌发布 Nano Banana 2,AI 图像生成安全与效率双升级 _ 牛览", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492882&idx=1&sn=95d1dea15a591022177965e053fad8b9": "俄系雇佣APT组织Mercenary Akula针对欧洲援乌金融机构展开攻击", "https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651390189&idx=1&sn=b0e0e54993897e8fc65d4cf25fca2ea0": "Claude “发现”,MonkeyScan “闭环”:AI 代码漏洞挖掘落地才是真能力", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500955&idx=1&sn=9ef7fcbc67f98a450db87dd9c4ca65d9": "从会话管理模式解读 .NET 身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500955&idx=2&sn=070df2e12c19f963f7b7cae112249e25": "从安全分析视角一文解读 .NET 越权漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074254&idx=4&sn=220582e3efca7ffda799725da03f01c4": "【安全圈】OpenClaw本地网关漏洞导致AI代理成攻击入口", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074254&idx=1&sn=ff5f13cf1f85685f93f04e01f75455c2": "【安全圈】Windows CLFS漏洞PoC公开:普通用户两次API调用即可触发不可恢复蓝屏", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074254&idx=2&sn=92bf6443aa4d7fddab0bda209138d268": "【安全圈】黑客利用Claude批量生成漏洞窃取政府数据", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496736&idx=1&sn=cf9703d5d05aa0ba9b2a714e119699fc": "CNVD漏洞周报2026年第8期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496736&idx=2&sn=65c30532982b048b97bac72925caa2cd": "上周关注度较高的产品安全漏洞(20260223-20260301)", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247586910&idx=2&sn=89e2c670e32e5a5faa2e54249252e3d8": "谷歌API密钥安全漏洞曝光:前端暴露密钥可直接访问Gemini并窃取隐私数据", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504678&idx=1&sn=d7c2da91f2a4e0a7adf007ff146e80eb": "【已复现】青龙面板身份认证绕过漏洞(QVD-2026-10895)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486006&idx=1&sn=82248fcc2c21e88ab245e37d1d4426c7": "漏洞管理指标:是时候超越指标幻象了", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489930&idx=1&sn=e67201aaa8a6b6389c47de9f12c87719": "OpenClaw近期生态安全事件解读:从RCE漏洞到Skill供应链投毒分析", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247488672&idx=1&sn=0466567e096d3e21f03c32336069d1e1": "从籍籍无名到排行第一:XBOW智能漏洞挖掘的构建", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458611640&idx=2&sn=79acbf9f7b4c0a49f524eeb3135f9155": "Claude Code配置文件藏漏洞,API密钥秒泄露", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247499499&idx=1&sn=4b38edb5c8905038e92ee734f22e4b25": "OpenClaw近期生态安全事件解读:从RCE漏洞到Skill供应链投毒分析", "https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651208167&idx=1&sn=201535bb50624721e9d426ac27509388": "共启安全年|瓜分微信百万奖池!漏洞赏金翻倍,先到先得", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525298&idx=2&sn=425ca98f5c96c967d36a88bbf4d252de": "Chrome 漏洞可导致恶意扩展通过 Gemini 面板提权", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501248&idx=1&sn=c671e79f57af6b57eb8c08427e0d245a": "CNVD漏洞周报2026年第8期", "https://mp.weixin.qq.com/s?__biz=MzI2OTYzOTQzNw==&mid=2247489167&idx=1&sn=470a4f3eb8f8ecf9af7d78cc355d1af1": "2026元宵福利来袭:漏洞奖金翻倍,陌陌SRC邀你共庆佳节!", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503714&idx=1&sn=068b37a0d68b2f0ee42a3b6074c73775": "雷神众测漏洞周报2026.2.9-2026.3.1", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525306&idx=2&sn=bd95e3c5ab9c19e0a8d50c704895e37c": "CISA:VMware Aria Operations RCE漏洞已遭利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525306&idx=1&sn=59467f3b0deb077d61354be5265c743a": "谷歌安卓更新修复已遭利用的高通 0day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074287&idx=4&sn=b834869c9992c41a8c629f4ff55b149d": "【安全圈】Chrome 安全漏洞致 Gemini Live 助手遭劫持,可被用于间谍活动", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486020&idx=1&sn=31de6bd96eeb98947f15dc4f1c288dd7": "日益严峻的安全隐患:MCP系统中的提示注入漏洞", "https://mp.weixin.qq.com/s?__biz=MzA3Mjc1MTkwOA==&mid=2650566998&idx=2&sn=230d2b7e1c8b99d4a01bfe0bb515af38": "美以“史诗怒火”联合斩首行动看伊朗安保漏洞对我借鉴与启示", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458611838&idx=1&sn=923c97232b245b602a3f1b917c769aa5": "Tenda堆栈缓冲区溢出漏洞 (CVE-2024-2986)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458611838&idx=2&sn=2e5b777a8090e5207a891214ac4c89b3": "谷歌披露iOS漏洞攻击套件Coruna,数千iPhone用户面临威胁", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451185590&idx=1&sn=e1ea601b5542c6467ef6a372e9bf0db7": "23个IOS漏洞打包的Coruna工具包,已完成从国家级到黑产的三级扩散", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525317&idx=2&sn=3114ade284237f3a92e848ed15d94829": "FreeScout 严重漏洞可导致服务器遭完全接管", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525317&idx=1&sn=400b0183f75f78413cb8fd0ab335e576": "思科提醒注意满分 Secure FMC 漏洞可用于获取 root 权限", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504685&idx=1&sn=23883cdee93b778e1f2b2d6b719763c6": "【已复现】Cisco Catalyst SD-WAN 身份验证绕过漏洞(CVE-2026-20127)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074304&idx=4&sn=c541beb5d36c901fe3af1636fafc01a0": "【安全圈】思科修复最高危 Secure FMC 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525349&idx=2&sn=d24d6683fb3bc04d5b47bb36bf521194": "思科:注意已遭利用的两个 Catalyst SD-WAN 管理器 0day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525349&idx=1&sn=352cbd47ed06c60804138658fa37fece": "电动汽车充电网络告警:Everon OCCP 后端系统存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504689&idx=1&sn=2e3461baad817de9e286567c3e15e786": "安全热点周报:Android 发布了针对高通零日漏洞攻击的补丁", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247496045&idx=1&sn=1e497fbd635488d89cd0a3ff4584c466": "ByteSRC入侵类漏洞限时享高系数奖励,高危额外再奖2w元!新人&伯乐礼同步上线!", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515644&idx=1&sn=5225e463062df00e90439d4927d5cfc1": "2025年至少90个零日漏洞遭滥用,企业软件及设备占比近一半", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074321&idx=1&sn=22258cb41004bbbeb3efc3c2b7c209d4": "【安全圈】Wi-Fi 爆出史上最大安全漏洞!所有路由器无一幸免:HTTPS 加密也没用", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541929&idx=1&sn=b78e4140b81848db276284ae280c34ee": "大多数网络攻击的成功只因1%的漏洞导致", "https://mp.weixin.qq.com/s?__biz=MzIyOTAxOTYwMw==&mid=2650238794&idx=1&sn=0198fce32f72d00e3a7704d0cc5c8a21": "漏洞情报高效应用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458611851&idx=1&sn=27ff9a6fb47fca740b0fc19cc5cd70e1": "Tenda CH22 多个漏洞分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458611851&idx=2&sn=00a933e82a28087f929bf6272751dc73": "攻击者可删除文件、植入后门:MS-Agent漏洞曝出完整利用链", "https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998641&idx=1&sn=ee4df449a324b6bfa0158f167c37fbf6": "先知通用漏洞收集计划AI应用专项报名开启!", "https://mp.weixin.qq.com/s?__biz=MzI2OTYzOTQzNw==&mid=2247489502&idx=1&sn=c0314b2a211b439d3b96e5a5645d66a0": "AI代码审计(逻辑漏洞方向)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074335&idx=3&sn=701d79e4920ac96f99b26a882526964c": "【安全圈】WordPress 会员插件漏洞遭利用,攻击者可创建管理员账户", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074459&idx=1&sn=ef939eb4d183296256162bca1d577177": "【安全圈】紧急!思科发布最高级别预警,一口气修复48个漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074459&idx=2&sn=41aac7caec6bd6da98ec4c7c6b1f785f": "【安全圈】重磅!IBM X-Force报告:AI驱动攻击狂飙,勒索软件激增49%", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074459&idx=4&sn=f3ae22e08096eab2957816229960f85b": "【安全圈】高危0day突袭!俄APT28借MSHTML漏洞突破防线,政企紧急戒备", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247492706&idx=1&sn=fdd3a02e537a160a014f2b3e2870d60e": "如何利用 AI 分析 CVE-2025-20393 思科安全邮件网关 CVSS10 满分复杂匿名 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496753&idx=1&sn=21ce2395a69f4278957e21c2c5e3cb9b": "CNVD漏洞周报2026年第9期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496753&idx=2&sn=bc7ec7f281f139df3b306fa2290ff35f": "上周关注度较高的产品安全漏洞(20260302-20260308)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525357&idx=2&sn=9bdb60d59d4633a80fe9fe32bdec1c60": "开源 IAM 平台ZITADEL中存在漏洞,可导致用户账户遭完全接管", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500375&idx=1&sn=8ae8bc84e5a28a4b75f5723c370dc021": "写文章随便打开一个案例就发现了漏洞,真好玩儿!", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504717&idx=1&sn=2c1b2c7b2be106e334544a2bf934f9d9": "【已复现】Nginx UI 信息泄露漏洞(CVE-2026-27944)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789723&idx=1&sn=864d06bec8122f6ed8a2dd34d43c29f7": "OpenAI发布应用安全智能体:可自主发现、验证并修复漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486033&idx=1&sn=a43280d97d4e7e5c5477c5c993e4ba6e": "2025年安全漏洞疯长,但仅1%被用于攻击", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458611860&idx=2&sn=42538345809533671f7986f4a6b83846": "效率封神!Claude Opus 4.6联合Mozilla,挖出Firefox 22个全新漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247496058&idx=1&sn=798b2573f8b05d6f454854b2b2ff660f": "抖省省反爬专测上线!漏洞奖金1000元起步!", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247552449&idx=1&sn=2eefcc448f78fc82ec51aaa9fd1df71c": "国家信息安全漏洞库(CNNVD)重要漏洞提示 _ 人工智能重要安全漏洞的通报-OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074555&idx=4&sn=e459cc19b5d7c01eb6275c532cacf8b2": "【安全圈】微软已修复:黑客 22 万美元暗网兜售 Win10_Win11 高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525086&idx=2&sn=e45679fde28a38c59eac984113ab93a8": "【漏洞通告】Nginx UI 信息泄露漏洞 (CVE-2026-27944)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458611998&idx=3&sn=89a9fa2d4af7c8994d25051cf5f8de6d": "火热招生中!系统0day安全-Web框架漏洞挖掘(第10期)", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503721&idx=1&sn=41705ec6eca57ec5d8748e66891ea39d": "雷神众测漏洞周报2026.3.2-2026.3.8", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727850621&idx=1&sn=c3ccebaef5ebc17b93ed89b7319a792d": "「神医」专家级智能安全助手,一键检修代码漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525382&idx=2&sn=06b4525563ab07cf6f52031e2bfe2464": "HPE:严重的 AOS-CX 漏洞可导致管理员密码重置", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525382&idx=1&sn=a2fde96ec371ca6512bbfc25b9f18f99": "微软3月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500383&idx=1&sn=5a555f31730386c319e15e55b153cccb": "仅 1 小时 首个腾讯超低危漏洞确认了!!!", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587063&idx=2&sn=548c42597bf635c81fecc50d8c4233c4": "国家信息安全漏洞库(CNNVD)重要漏洞提示 _ 人工智能重要安全漏洞的通报-OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587063&idx=1&sn=cb86147fd9dc9a1ad5ff055ffc99b99c": "蠕虫式XMRig挖矿攻击借BYOVD漏洞规避检测", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504728&idx=1&sn=05337017aead9b7f6854278892acf8c0": "微软3月补丁日多个产品安全漏洞风险通告:5个紧急漏洞、6个重要漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074602&idx=2&sn=a2631a48700407c06cf33e85949c71f4": "【安全圈】Windows 系统级漏洞开卖:要价超 150 万元!可获系统级权限", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789731&idx=1&sn=20e4f6c24d62417dc43d53e241c10d0c": "ClaudeOpus4.6发现Firefox22个安全漏洞,AI自主漏洞研究实现关键突破", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140699&idx=2&sn=0d2eda037d3d1cb7a6c0bf7b91b91e55": "国家信息安全漏洞库通报多个OpenClaw安全漏洞;问境AIST首发|以AI治理AI,悬镜原创多模态AIST新品发布_ 牛览", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247541983&idx=2&sn=bd87a1eb329980db1484710200628d54": "通报来了 _ OpenClaw多个安全漏洞被国家信息安全漏洞库(CNNVD)通报", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247531349&idx=1&sn=14642cabd26f7b318d2d7ea7af1a740c": "2026-03微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612011&idx=4&sn=4ef13d019b611249d05604179064f5c9": "26年春季招生中 _ 系统0day安全-IOT设备漏洞挖掘(第6期)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612011&idx=1&sn=128b33964750a5d037c8e6e5bdd61483": "Linux Netfilter 匿名集合 UAF 漏洞 (CVE-2023-32233) 复现与利用分析", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499179&idx=1&sn=48d5e01246f8f8373e621116b105b6fa": "电子宠物“龙虾”(OpenClaw 🦞)偷拍,窃密漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260124&idx=2&sn=ebcd8f5fefaaeb0c761f800f4a9da866": "CNNVD _ 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649789738&idx=2&sn=122e85b5b8a505c14a1dbeb853ab860e": "258 个漏洞,你的 OpenClaw 真的安全吗?", "https://mp.weixin.qq.com/s?__biz=MzA3Mzk1MDk1NA==&mid=2651909111&idx=1&sn=7738525759dcbac61aea7404049a3acd": "【联合活动】春锋猎洞全面启动,DSRC邀您共赴漏洞狩猎场!", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247489488&idx=1&sn=e20d8759b908c428a906acdba24d075c": "【安全更新】微软3月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525403&idx=2&sn=8252f2b425ef4c9eeee6dfaff6a20253": "n8n 严重漏洞可导致RCE和存储凭据暴露", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525403&idx=1&sn=a7ca207e2fb245b56f2a17c2cf9d5f80": "思科修复多个高危 IOS XR 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486072&idx=1&sn=270287f0de9877296a4efa538f6bc68a": "常见AI助手的安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508338&idx=1&sn=e9929866b23e8e86eb17a39c0a6f1bcd": "速修!泛微Ecology10多个远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612076&idx=3&sn=75fa9c5d8464253d56f4a60e18836228": "联发科芯片曝严重安全漏洞:45秒即可窃取手机PIN码与加密资产", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612076&idx=2&sn=e10cb17a3b4c4f65f0ef2746e748de1a": "荣耀邀你「三月争锋」:提交漏洞,赢荣耀500手机!", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499171&idx=1&sn=d72424ce5bb5520ce60d44781996b5b3": "0元购漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504745&idx=2&sn=b1d3ac2be88aeacf1c9a86c78f542eb5": "安全热点周报:n8n 严重安全漏洞已遭利用,仍有 24700 个实例处于暴露状态", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074689&idx=3&sn=925594fed2ebed6205ae0da7c35ab3fd": "【安全圈】3月漏洞风暴:思科48个洞、微软83个CVE,这个月不太平", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074689&idx=2&sn=df039d7dd8bb90f3e37e7590c242a92e": "【安全圈】紧急预警!Chrome再曝两个高危漏洞已被在野利用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612077&idx=1&sn=c66bc5a24d6fa102332f98f8c550be5e": "HGAME 2026复现", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496773&idx=1&sn=3bd33ad9d330722dba14113cb0479abf": "CNVD漏洞周报2026年第10期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496773&idx=2&sn=000f421f1f4c320f7ee916a173effab2": "上周关注度较高的产品安全漏洞(20260309-20260315)", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497339&idx=1&sn=6fdc55c3a0e5f35b58ca6e777a21d12c": "OpenClaw 新型绕过漏洞,上榜企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525415&idx=2&sn=259129929dcb8d74602ea462298ce874": "Veeam 修复位于备份服务器上的多个 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525415&idx=1&sn=55278f01895a398c324b6e1d68a3202d": "谷歌修复已遭利用的两个新 0day", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515679&idx=1&sn=058025b13fbc829c3ece8df7befc0b9f": "谷歌2025年发放了近1.2亿元漏洞赏金,单个漏洞最高奖励170万元", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485138&idx=1&sn=6bfe45e19c28b9fc48036f9ef09fb8e6": "OpenClaw 新型绕过漏洞,上榜企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247489986&idx=1&sn=b71354dd4388e4c93ce505f0528dd43a": "【已复现】泛微 E-cology10 多个远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612100&idx=2&sn=23496cd01b2d0342734b8a9ca8f6708a": "更进一步:CVE-2013-3660漏洞分析报告与利用", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247493123&idx=1&sn=428ca62b9d879f3ef4f433194519e90d": "【已复现】泛微 E-cology10 多个远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525482&idx=2&sn=92844a4f59d7d7b8344f344ed41a3600": "CISA:Wing FTP 已遭利用漏洞可泄露服务器路径", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501326&idx=1&sn=3760d4aefa27f6648cff7bc58a7f06f3": "CNVD漏洞周报2026年第10期", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525166&idx=1&sn=4f3f183b0c41fa2af4a1c7ffb2c39046": "【漏洞通告】OpenClaw WebSocket共享令牌权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503728&idx=1&sn=f96a470e1923b29265ac1e8098ca6cc7": "雷神众测漏洞周报2026.3.9-2026.3.15", "https://mp.weixin.qq.com/s?__biz=MzUyOTc3NTQ5MA==&mid=2247500961&idx=2&sn=2d55fe082f1b8c010fce3edbb83f9404": "从会话管理模式解读 .NET 身份验证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727850679&idx=1&sn=aaa05bacb10d70d6c87c7df11161606e": "春日活动开启 漏洞挖掘奖励翻倍!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525496&idx=2&sn=8b4589e0dd8a4476339a143d7ead5a5b": "File Browser 满分漏洞可用于完全控制管理员权限", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500439&idx=1&sn=7b38c27d13109e978fb38bf66b8a513c": "这类漏洞危害有点低,SRC 好像不收录!", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587192&idx=2&sn=d5708b179033ace845fbf6c326179368": "嘶吼安全动态|360回应“安全龙虾”私钥泄露:已吊销证书,系发布失误微博Delta工业通信系统曝高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074842&idx=1&sn=7ee374e3e9bd7db9d13be0e70464f9c8": "【安全圈】“ AI 刺客”漏洞披露:小字等方式伪装实现执行恶意代码", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542152&idx=1&sn=e4f8d27e7483ea61c05cb216315a205b": "智能体时代 漏洞管理要跃迁到10.0版本", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612312&idx=3&sn=695fb5c7dad0f5c246b1676d8956efc9": "苹果紧急发布WebKit安全修复,同源策略绕过漏洞影响iOS_macOS", "https://mp.weixin.qq.com/s?__biz=MzUyMjk4NzExMA==&mid=2247508019&idx=1&sn=d6d9df690f1943dae9e64a641b1c9a92": "ComfyUI-Manager RCE(CVE-2026-22777)遭在野利用,数万台设备亟待修复", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585474&idx=1&sn=53b14b545cacdccc7581fa98e01cf5e1": "独家!OpenClaw之父确认漏洞,360为所有“养虾人”筑牢安全防线", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525508&idx=2&sn=64b8a410384155e1fa92afa41950ba05": "IP KVM 中存在9个严重漏洞,可用于获得未认证root访问权限", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525508&idx=1&sn=2833d5727c1faf94104890b325bb6d75": "Ubunntu 高危漏洞可导致攻击者获得根权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074879&idx=3&sn=f2683ea27641f32a563e177c417115b9": "【安全圈】CVE-2026-3888:Ubuntu 桌面版 24.04+ 易受提权漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074879&idx=1&sn=a99f5ab259944d0f68ee8f470256a869": "【安全圈】iOS18 爆高危漏洞!不升危险,升级变卡", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451185849&idx=1&sn=90f390064e47068e7f7b5a5c0eef796c": "通过攻陷合法网站传播的新型iOS漏洞利用工具包DarkSword", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585481&idx=1&sn=c8af1530771a87484a2c12b6056020b0": "别让“养虾”变“养险”:基础环境漏洞有多危险?", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260510&idx=2&sn=7c0fd3088d7ab1be70f0778b63c73ae1": "CNNVD _ 人工智能重要漏洞通报(2026年第三期)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525516&idx=2&sn=f2ba1657254018cbcc2be50de9f7fe9c": "Atlassian Bamboo 高危RCE漏洞威胁 CI_CD 环境安全", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525516&idx=1&sn=164d0ad922d6e64b64438bd5a5cc0db0": "Jenkins 严重漏洞导致CI_CD服务器易受RCE攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074903&idx=2&sn=e636b8da74d7d7be60e53dfb4fae8b17": "【安全圈】请装 3 月 Win11 更新:高危漏洞被修复,黑客利用能掌控你的电脑", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140782&idx=2&sn=281e659a14a24ac60f4b9a3d7bc88893": "工信部:关于防范Windows远程桌面服务(RDS)权限提升高危漏洞的风险提示;AI 加持新型社工攻击 浏览器权限滥用致生物信息泄露 _ 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508351&idx=1&sn=3942ff47bae96d8731ad7bdba12764b7": "OpenClaw最新完整漏洞,实时可查!(附高危列表)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525178&idx=1&sn=ef5675b8d508c4556d8ab410983d70fe": "【漏洞通告】Langflow 任意文件创建漏洞 CVE-2026-33309", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612340&idx=3&sn=9fed8531874e9998ddb80e6c5fc54c8e": "顶级iPhone黑客工具“DarkSword”曝光:六连环漏洞,多国用户数据遭窃", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247510435&idx=1&sn=ad86a5de0f61a7ff596dd81d50241b53": "OpenClaw 安全全景分析:从公开漏洞、利用链到最安全安装基线", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074942&idx=3&sn=dbb38e4711a7e692560c30e332b0060b": "【安全圈】ScreenConnect 曝高危漏洞 设备密钥面临泄露风险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652074976&idx=3&sn=e44d3940cd71a59f922c6c604f93c4a8": "【安全圈】CVE-2026-3888:Ubuntu 桌面版 24.04+ 易受提权漏洞攻击", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496792&idx=1&sn=eecb977192773972606f6b9b93bb5ea1": "CNVD漏洞周报2026年第11期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496792&idx=2&sn=ba909405a6af97022c0d588795a9acca": "上周关注度较高的产品安全漏洞(20260316-20260322)", "https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247514232&idx=1&sn=7d017000c6bfc7392de13005e7b4fe2f": "红队实战指南:AI驱动的渗透测试、红队评估和漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525520&idx=1&sn=8e9967e4c7c296e96e50612d5cd0a1cd": "Oracle 紧急修复 Identity Manager 和 Web Services Manager 中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525536&idx=1&sn=374ba844d9e8b8936f3ab544ef312259": "QNAP QVR Pro 严重漏洞可导致系统遭远程访问", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587334&idx=2&sn=13c14c65944712b54b9bd2e8ae678683": "嘶吼安全动态|工信部部署2026年信息通信业安全生产和网络运行安全工作 Copilot及Cursor等AI编码助手曝规则文件注入漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508389&idx=1&sn=a3afdb49432f816d071a103ec98add35": "AI Coding Agent最新攻击总结:7大漏洞利用手法", "https://mp.weixin.qq.com/s?__biz=MzAwMTMzMDUwNg==&mid=2650890250&idx=2&sn=1ca01bbcde640b131dd2e02b7248f3f9": "【赠书2本】红队实战指南:AI驱动的渗透测试、红队评估和漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503735&idx=1&sn=2f1ae3388f3a9c703a7606d6b2ca7d44": "雷神众测漏洞周报2026.3.16-2026.3.22", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587371&idx=2&sn=f9da0bc552f25720f23340a014c31b66": "Trivy漏洞扫描器遭入侵,攻击者通过GitHub Actions分发窃密恶意软件", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515729&idx=1&sn=e89ad98e20e9e813c713f2faa4fdd570": "苹果漏洞利用工具遭公开,数亿台iPhone随时可被静默入侵窃密", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140862&idx=2&sn=9764a27a0247ca0de8469ee6b4950d21": "Claude.ai曝“Claudy Day”漏洞链,聊天链接可被利用窃取敏感数据;工信部印发 2026 年信息通信业安全工作通知,强化全链条安全管控_牛览", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542231&idx=1&sn=90896406142faa119526bff118a833cf": "谷歌15年累计发放了8160万美元漏洞赏金", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525554&idx=2&sn=1cd600c5708dc44ab8e2421ef606e780": "Citrix:尽快修复这两个 NetScaler 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525554&idx=1&sn=c3b2f7032bfd43bff06a8e5940645966": "TP-Link:速修复这个严重的路由器认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500501&idx=1&sn=5c53d57ac297669909b6cf318e1d66cf": "快来看,编辑器正在帮我挖漏洞啦!", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247499691&idx=1&sn=9a5c0303bdfcc6f525fdcc2db947beb8": "OpenClaw安全实战系列二:白名单也防不住?复盘CVE-2026-28363授权绕过全过程", "https://mp.weixin.qq.com/s?__biz=MzI5ODk3OTM1Ng==&mid=2247511501&idx=1&sn=dee1f9ede8c0605190a859354bb8cbdd": "OpenClaw 近期安全漏洞修复汇总报告", "https://mp.weixin.qq.com/s?__biz=MzU3MTY5MzQxMA==&mid=2247485085&idx=1&sn=967334ef09adfaa7d93c6b34c7a9ed6c": "安卓逆向第二阶段正式完结!三阶段来了,EXP开发、Frida与AI逆向机器人、算法还原与模拟、设备指纹与游戏分析。木鱼沙箱内测", "https://mp.weixin.qq.com/s/x316x2uD8v0ql8Vn2yvjug": "AI被人下蛊了!这6个漏洞比你想的恐怖100倍", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525564&idx=1&sn=87a38b04609d00236ed5984ced8a6243": "OpenAI 发布AI安全漏洞奖励计划", "https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651144017&idx=1&sn=32caa5562058036a673f43eb55cc78c5": "SourceInsight4.0 最新4.00.0150 2026版本 破解分析", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140899&idx=2&sn=c5ac08cbf0f6d9d718a2ba13ab43d1d8": "中央网信办召开全国网络举报工作会议;Google停止接受AI生成的漏洞报告,投资千万美元改善开源安全_ 牛览", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492905&idx=1&sn=ec4bedfe53fc3dea90dde861bd6477a8": "疑似APT28组织利用Zimbra高危漏洞展开网络攻击活动", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585581&idx=1&sn=0b75e5a0293241e114a4f9a5165ab903": "34万星系统破防!360漏洞挖掘智能体揪出OpenClaw高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496809&idx=1&sn=2db62d67bc97271b6af9bf9845928dc2": "CNVD漏洞周报2026年第12期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496809&idx=2&sn=bfe39e048853c801b423b3c8d8b6b845": "上周关注度较高的产品安全漏洞(20260323-20260329)", "https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247489546&idx=1&sn=c5c6a044f6ddc321b2897d9ce70a3c9b": "Apache ActiveMQ漏洞导致LockBit勒索软件攻击事件分析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525571&idx=1&sn=3596dc720ddc3cfdb3245a4b7597f249": "CISA要求三天内修复这个严重的 F5 BIG-IP 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525571&idx=2&sn=eae427dd1fadd452e77ca0ed22f49ddf": "n8n 两个严重 RCE 漏洞利用使工作流沦为后门", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075204&idx=2&sn=f5c0bfeaf0614eabe75d0b22d42892c3": "【安全圈】Telegram 遭遇严重 0-day 漏洞,CVSS 评分高达 9.8 分", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247488268&idx=1&sn=40970694de8f1f03dbfe068a2eee681f": "第158篇:某AI IDE智能体越权劫持会话+提示词注入导致命令执行", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657165759&idx=1&sn=7f3fe29c27a207f74884508598380179": "Telegram 9.8 分零日漏洞警示:富媒体时代,即时通讯的安全红线在哪?", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525189&idx=1&sn=2458d6bc7b6b65d61cd8c40e38e13933": "【漏洞通告】Citrix NetScaler ADC和NetScaler Gateway越界读取漏洞 CVE-2026-3055", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525587&idx=2&sn=a18525fe72676659d744674b7d8fdd16": "Grafana 多个严重漏洞可用于实现 RCE", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525587&idx=1&sn=402fc52dcbd813d3c5d2c26bf077fab0": "Telegram 否认这个零点击高危 0day 漏洞的存在", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587479&idx=1&sn=7756cf1662db5725ee22be9a7eba7df8": "VoidStealer恶意软件利用调试器漏洞窃取Chrome主密钥", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587479&idx=2&sn=94638a85f8dd5ec785e150589e6d3b0e": "嘶吼安全动态|全国网安标委发布关于征集个人信息保护标准应用实践案例的通知 AI工作流工具Langflow曝未授权RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501368&idx=1&sn=ebfcad9dc22f95a2407acca0cfcec9ba": "CNVD漏洞周报2026年第12期", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247504921&idx=1&sn=fd2fbb100f4d90fbd6aeca192a15d929": "【已复现】Vim 代码执行漏洞(CVE-2026-34714)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075253&idx=2&sn=1c58b6f95327d26411281829e92a8fcd": "【安全圈】360漏洞挖掘智能体发现OpenClaw高危漏洞,或波及全球17万实例", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140924&idx=2&sn=a899a782f7de03f6f3f5e3296760e67b": "CNVD发布上周关注度较高的产品安全漏洞;伊朗黑客组织 Handala 宣称入侵 FBI 局长邮箱 _ 牛览", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542414&idx=3&sn=3cc41f3c83cc4c87344c7bef5e5d8d91": "360漏洞挖掘智能体揪出OpenClaw新高危漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458612921&idx=3&sn=645d2addefbbd1fa075e998b38bdb0dc": "Telegram 惊曝零日漏洞争议:发个贴纸就能控制手机?官方却全盘否认", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503742&idx=1&sn=cc4e84af64875685998a079b34941f9b": "雷神众测漏洞周报2026.3.23-2026.3.29", "https://mp.weixin.qq.com/s/MejtNOZLPG2zJq2FtqtL1A": "今晚开始,查询XVI扩展漏洞情报免费了", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587498&idx=2&sn=b03bc0d15554223016a1711586de1a72": "嘶吼安全动态|国家计算机病毒应急处理中心通报71款违法违规收集使用个人信息的APP OpenAI Code爆出严重漏洞:黑客可劫持GitHub访问令牌", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075285&idx=3&sn=5b9f8a46ba792cd92b902840f2b22187": "【安全圈】请升级:技嘉控制中心曝 9.2 分高危漏洞,黑客可远程接管电脑", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508518&idx=1&sn=f6a96ec06480962b7fd83fa0c8baf4fc": "AI一句话挖出Vim RCE?还缺亿点点细节", "https://mp.weixin.qq.com/s/RJRB2yeUHy3A2jfPCKjZZw": "今晚开始,查询XVI扩展漏洞情报免费了", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525630&idx=1&sn=c92b1cfa77120afb058a49b0490a079b": "Vertex AI 漏洞暴露谷歌云数据和非公开制品", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525630&idx=2&sn=5b4bcf1e200cad3b1abc1fb6e2e578d6": "libpng 官方参考库中的这两个严重漏洞已存在30年之久", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587521&idx=1&sn=14494dcb432adab394c111df7172d184": "代码钟馗启动AI漏洞雷达,OpenClaw隐秘漏洞浮出水面", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495359&idx=1&sn=3b8689b390d9732455daa904ba659532": "今晚开始,查询XVI扩展漏洞情报免费了", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525235&idx=1&sn=563a4d108e95fcc2e7dc4594454957e2": "【漏洞通告】Google Chrome Dawn 释放后重用漏洞(CVE-2026-5281)", "https://mp.weixin.qq.com/s/jGLggmLUlOw3YAiZCI6Z-Q": "Chrome浏览器的Dawn组件0day漏洞已被利用", "https://mp.weixin.qq.com/s/JJPKbDIW90AIB4gdafBhNg": "Web前端组件漏洞总结,安服水洞必备", "https://mp.weixin.qq.com/s/gX0r1Zalb2aU8TdUtcGWmQ": "漏洞发布2026年第四期", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664260988&idx=2&sn=04b93b54c595b4abaaf01d91d7660ff5": "CNNVD _ 通报OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497433&idx=1&sn=77d0db9bdf75c8d28f231e0cdfc7be9e": "「AI开源组件安全风险」系列二:VulnAgent发现 NVIDIA 3个AI基础设施漏洞,并获官方致谢", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525643&idx=2&sn=46f21b64114594cdb5db7473129e09a8": "Progress ShareFile 漏洞可用于发动预认证 RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525643&idx=1&sn=123aa4e38d29ce29d7107d5e7378e00f": "思科 IMC 中存在严重的认证绕过漏洞,可用于获取管理员权限", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587535&idx=1&sn=3f0d70d2c23c4a658381dbc97ef1e3fb": "PolyShell高危漏洞可致电商Magento系统遭遇未授权远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzkzNTI4NjU1Mw==&mid=2247485145&idx=1&sn=a715bdf057310c8fa51676cfd6976a84": "「AI开源组件安全风险」系列二:VulnAgent发现 NVIDIA 3个AI基础设施漏洞,并获官方致谢", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492909&idx=1&sn=54c0d7d9fa6b0a93c21f1ebb2cdc8d44": "APT28组织利用多个Windows 0Day漏洞开展攻击活动分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458613033&idx=3&sn=1dc818bb4a6a1e53f68c6deb22fc2203": "React2Shell漏洞被批量利用:超700台Next.js服务器凭证大规模失窃", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451186162&idx=1&sn=a68cfdbb6be44e191236f85fbff0cd30": "Chrome浏览器的Dawn组件0day漏洞已被利用", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664261030&idx=1&sn=0e642eac58fd18e6e2f843afd9e37717": "工信部提醒:苹果用户警惕网络攻击,及时升级版本、修复漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075364&idx=2&sn=33a8436b6dcf51f88f8a1244ce1ab87d": "【安全圈】Linux 内核维护者崩溃了!AI 每天狂塞 10 份漏洞报告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505147&idx=1&sn=89fe2878c3fb4cf1379fdb01ae46bf92": "今日(2026年4月6日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585624&idx=1&sn=e63909b79f120de22eaab3688d009340": "涉及1高危,2中危!360再曝OpenClaw高价值漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496824&idx=1&sn=b6ce3ee662fd4823ea71e96e15bbf91d": "CNVD漏洞周报2026年第13期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496824&idx=2&sn=445ba48ab65e21063a3ae13a0b7b3df3": "上周关注度较高的产品安全漏洞(20260330-20260405)", "https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247489851&idx=1&sn=7fc718677485810c802f270890b5a306": "BlueHammer:研究员公开未修复 Windows 零日漏洞,可提权至 SYSTEM", "https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247489851&idx=2&sn=f52ba86620a3a137ed8d5d797b5eab00": "CVE-2026-35616:Fortinet FortiClientEMS 零日漏洞已被野外利用(CVSS 9.1)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525661&idx=1&sn=052e45a26cbea5f9364bf03c39a7abc8": "Fortinet 紧急修复已遭利用的 FortiClient EMS 严重漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Mjc3MDM2Mw==&mid=2651144234&idx=1&sn=8ae477d7d05e1c3b8ab0775ab9162e25": "全流程使用AI,完成一次APK重打包。改包名、绕过 Native 校验、重建签名并去掉奖励广告的完整复现", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587554&idx=2&sn=3562827709797e3033981d7530e898d2": "嘶吼安全动态|工信部NVDB平台发布风险提示:利用苹果iOS漏洞的攻击活动激增 黑客利用React2Shell发起自动化凭证窃取活动", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247552867&idx=1&sn=91c17a4d85998afcd44c68d49347d8cf": "安全419|一周国际网安资讯:APT活跃 AI漏洞爆发", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515770&idx=2&sn=3177f777e9ed09388a73f2dec02e6329": "工信部:关于及时更新iOS特定版本 防范漏洞攻击利用的风险提示", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651140978&idx=2&sn=e01813a4a4abee1959d908ff1d55167e": "CNNVD 通报:OpenClaw 高危漏洞集中爆发,未授权可远程控机;ChatGPT 惊现 DNS 隧道数据泄露漏洞,敏感信息可被静默窃取_ 牛览", "https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998767&idx=2&sn=b7fcb384ccef686845acce1736d67937": "先知通用软件漏洞收集及奖励计划第十一期 正式开始!", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585642&idx=2&sn=497ff6df3ec12d30294baa8e09008838": "勒索月报 _ 360披露3月勒索软件流行态势_Web漏洞武器化构建系统性风险", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727850798&idx=1&sn=b3803f9d5ff0261779a0add6a2dfdbf3": "反爬专测延期,单个漏洞奖励最高可达7.5w!", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525680&idx=2&sn=7f352c49de57475122f8901028f1e192": "OpenAI Codex 漏洞可导致攻击者窃取 GitHub 访问令牌", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525680&idx=1&sn=5dbab9da81c7d42eda6c2082c7f2ac03": "开源平台 Flowise 中的满分 RCE 漏洞已遭在野利用", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505167&idx=1&sn=d636c4a823bc2e6ebfbd1f4395306da7": "【已复现】Vite WebSocket 任意文件读取漏洞(CVE-2026-39363)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247501556&idx=1&sn=a32caba9286b7848e0516c0457b8b3a0": "G.O.S.S.I.P 阅读推荐 2026-04-08 Exploit Programming", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525264&idx=2&sn=b3d0bc48834a9994797b63a4f7500427": "【漏洞通告】Apache ActiveMQ Classic 远程代码执行漏洞 CVE-2026-34197", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525264&idx=1&sn=f4a58c6f08416197403e3f78f959a97a": "【漏洞通告】Vite WebSocket 任意文件读取漏洞 CVE-2026-39363", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499286&idx=1&sn=e2444c7b449318e4f94e694d91e32c71": "rce", "https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247489917&idx=1&sn=44598525c50ceac6773a8d3fa9a37421": "Rapid7一线实录:CVE-2025-59718 FortiGate 防火墙入侵事件深度剖析", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525686&idx=2&sn=a7cb71292f83e55b49f1e23a7f775864": "CISA:须在周日前修复已遭利用的 Ivanti EPMM 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525686&idx=1&sn=51e7e391e06000c6fad494187241de39": "已存在13年的Apache ActiveMQ 严重漏洞可用于远程执行命令", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505186&idx=2&sn=72d008e6d01b20a4f5665f9ab8d2b570": "【已复现】OpenAM 远程代码执行漏洞(CVE-2026-33439)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505186&idx=1&sn=751723948fc9f225730b57f1fb8b0fba": "【已复现】OpenPrinting CUPS 多个高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247496148&idx=1&sn=fb2fd4d520333d0575983a48395c5bc0": "抖音生活服务邀你来测!单个漏洞奖励10万元!", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508577&idx=1&sn=9b54d7cab51cf308ac60ce38eaeeba12": "漏洞通告 _ ActiveMQ远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458613203&idx=3&sn=6eb93ad2f08d3e6ef4629b8c9e5e0660": "未完全修复旧漏洞!Docker Engine新漏洞可致容器逃逸与主机接管", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247499810&idx=1&sn=7375526e25605ffefa701ee5b2d5b474": "无需认证即可执行:Langflow CVE-2026-33017 未授权远程代码执行漏洞深度剖析与靶标实战", "https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651208316&idx=1&sn=159300723ea3cb7e287573f5c1cd9653": "发现 33 个 OpenClaw 与 Linux 内核漏洞后,我们也从 Claude Mythos 看到了安全攻防的下半场", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585680&idx=1&sn=a7adca59046dbf877ee9430df574890e": "行业首家!360漏洞挖掘智能体率先完成在野0-day漏洞根因分析与复现", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247529665&idx=1&sn=d77c2fe3c7b2e4e1c3c4d9bd01753c9a": "IRify 智能化改造:AI 代码审计 + Poc 自动生成,安全效率翻倍", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525729&idx=2&sn=4776ef6ac621cacfac94cd6c25ca0452": "AI漏洞发现量激增,HackerOne 宣布暂停开源漏洞奖励计划", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525729&idx=1&sn=25b2c6b4e1fa57bb09f2dda0e8b95549": "AI编程月产代码从2.5万到25万行:一场被忽视的_漏洞危机_", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525729&idx=3&sn=bc8793597b56f124d19e242d87e8273d": "Grafana 修复可泄露用户数据的 AI 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587637&idx=1&sn=814883a513ca83c6f66df42c560504ba": "Progress ShareFile曝新漏洞 可组合实现未认证远程代码执行", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505190&idx=1&sn=caf54cd235dbb15d2bb14d2894aae2fa": "安全热点周报:Fortinet 发布紧急补丁修复 FortiClient 零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075510&idx=3&sn=01f56607f2697cadf824b6f6f3136a1b": "【安全圈】Adobe Acrobat Reader 零日漏洞已被黑客利用", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542523&idx=1&sn=f43e597f1e4496e6cf39bb4cba48b0b2": "谷歌不再接受AI提交的漏洞检测报告", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653103702&idx=1&sn=45049b7a562568016a3cc2bcdf92bd48": "大疆 Pocket 4 将在 4 月 16 日发布;Claude 推出新版 Agent 管理工具;曝 Red Hat 裁撤 500 名中国区员工|极客早知道", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458613208&idx=1&sn=96da0d35d2c028fe1709a7648f2e98aa": "D-Link 摄像头栈溢出漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247489949&idx=2&sn=7b943f69a1b768242793bacd88687ffc": "Storm-1175 高频勒索攻击全链路:从 N-day 漏洞到 Medusa 部署最快仅 24 小时", "https://mp.weixin.qq.com/s/u_h5oYny_jonaRStZFpP2A": "NSA TAO负责人Mythos的漏洞利用能力已超过", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508609&idx=1&sn=e96453088406b1327576791d35a60bde": "Nginx曝新漏洞,特定配置下可实现任意文件读写", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451186333&idx=1&sn=0f961cc26fb5c839905fdc2e4a447893": "Adobe正式官宣Reader漏洞已被在野利用,打开PDF可执行任意代码", "https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247489979&idx=2&sn=10e3e338edf91c89f0cba32705a61c67": "AI驱动漏洞海啸来袭:修复窗口从数周压缩到数小时", "https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247489979&idx=1&sn=7c177ee4f22f902eeb36bba930457fcf": "又一个Confluence倒下了:CVE-2023-22527漏洞导致ELPACO-team勒索软件入侵", "https://mp.weixin.qq.com/s?__biz=Mzg5NjAxNjc5OQ==&mid=2247484644&idx=1&sn=2de6211f598ae85287dd08baa0b12b8d": "规模化 SAST & SCA 漏洞修复", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585686&idx=1&sn=ffbce29f6487a5f230b70e838191385b": "筑牢开源安全防线,360荣膺开源鸿蒙社区漏洞挖掘双料大奖", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496841&idx=1&sn=8608e4497450755acb1095ce7582ee75": "CNVD漏洞周报2026年第14期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496841&idx=2&sn=919149cb1306363172c34cb692a13da1": "上周关注度较高的产品安全漏洞(20260406-20260412)", "https://mp.weixin.qq.com/s/rmLOTdxU2b_9kIJ9mQBKVQ": "漏洞预警:LiteLLM未鉴权命令执行", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525746&idx=1&sn=5294bb3a6a8e16b13a220df8b12654c7": "Adobe 紧急修复已遭利用的 0day", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525746&idx=2&sn=777605c08e8d6f2e0dbad63e8f408da4": "Marimo 高危预认证 RCE 漏洞已遭活跃利用", "https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247498222&idx=1&sn=be9999e3b98053641c2a73c08075df30": "从漏洞到规则:安全知识自动提取的初步探索", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505216&idx=1&sn=2a570e936bed484504986c43d7242a2c": "【在野利用】Adobe Acrobat Reader 远程代码执行漏洞(CVE-2026-34621)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505216&idx=2&sn=20c8c942f3ee8f9b79a0f2ce1fea5a0d": "【已复现】Nginx ngx_http_dav_module 堆缓冲区溢出漏洞(CVE-2026-27654)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247496155&idx=1&sn=293c661a5e3b2eb381943c7f3fc8f410": "漏洞预警:LiteLLM未鉴权命令执行", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515804&idx=1&sn=0b0221f05c3de44eccd583eb303ff59b": "Anthropic新模型颠覆网络安全:美英德政府加急评估影响,传统漏洞或不复存在", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486476&idx=1&sn=cfd924fc1b97cb4790286504d193128e": "Anthropic:你们所有的零日漏洞,都归 Mythos 所有", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525295&idx=1&sn=57c607219c1557cadb6de52ccf6c2dc0": "【漏洞通告】Nginx 缓冲区溢出漏洞 CVE-2026-27654", "https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247490000&idx=2&sn=3ba228aaa0d3a1b9e2f1e6e41eebae23": "第三方 SDK 重大漏洞曝光:超 3000 万加密货币钱包面临数据泄露风险", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497462&idx=1&sn=5b9db9b15e768352ad174eb07d2948ac": "2026年3月企业必修安全漏洞清单", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525768&idx=1&sn=1c34f092d86b657532a27c79a93f83a3": "Apache Tomcat 紧急修复多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525768&idx=2&sn=b8967ced3022f4f88a311a652e635650": "Axios 严重漏洞可导致 RCE", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515814&idx=2&sn=c4add54fd603fad96df85c248460e2f1": "美英报告称Mythos模型无限压缩漏洞披露到武器化时间窗口", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075647&idx=2&sn=8b9601124f9fd4627498d6920d66e5c9": "【安全圈】开源监控平台 Grafana 曝漏洞,黑客可诱导 AI 助手泄露企业数据", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075647&idx=1&sn=fa2ee897d05ae80591734bbcffa07abd": "【安全圈】金山毒霸、360 安全卫士被曝存在内核驱动高危漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508614&idx=1&sn=b0d4f042ae9147e26d0eb657c7bcb744": "Axios爆SSRF漏洞,特定条件下可导致RCE", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653103896&idx=1&sn=b5cd7865838919d54b32379edcb138a1": "Anthropic最强模型被质疑夸大找漏洞能力;奥尔特曼住所一周内两次遇袭;需求火爆,苹果提升初代Macbook Neo产量至1000 万台|极客早知道", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525306&idx=1&sn=73f3462b7398a6cb2d7de0318e6aa81c": "【漏洞通告】Marimo WebSocket 认证绕过漏洞(CVE-2026-39987)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458613407&idx=1&sn=30bf32e1f57fead35b98087dc646ed4d": "ivanti CVE-2025-0282 漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247490012&idx=1&sn=57fbfca6b63cd2cb604be12c93157df2": "2026年4月补丁日深度解析:163个漏洞含零日与多个严重RCE", "https://mp.weixin.qq.com/s/WQWlAz1FHnNS7xS_KnE6fQ": "🚨 警告:Juniper 网络设备存在严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497479&idx=1&sn=44f8232429ff85ec83255d3de8f2534d": "Apache Tomcat RCE 漏洞来袭,腾讯云安全已支持防护​", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525778&idx=1&sn=f575dcb35ac2b3091d3f1a2359e1ae4d": "PHP Composer 多个新漏洞可导致任意命令执行", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525778&idx=2&sn=b5edef54c4ece70f1affe656616e58df": "微软4月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505225&idx=1&sn=b58bfb52a75a55c62527875f1c9176f5": "【已复现】Apache Tomcat 远程代码执行漏洞(CVE-2026-34486)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505225&idx=2&sn=7245dbf9b07c83cd708b6155bd300820": "微软4月补丁日多个产品安全漏洞风险通告:1个在野利用、8个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075679&idx=1&sn=6c0e8d061d29da3af35a3914330ee403": "【安全圈】Adobe 修复 PDF 阅读器零日漏洞,已被黑客利用至少四个月", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075679&idx=2&sn=7f36a44c547210554fed60111cd0c94c": "【安全圈】微软 SharePoint Server 0Day漏洞遭在野利用", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486468&idx=1&sn=f905fc037523250b71260197512aed69": "Agentic workforce 已然到来:思科为何要为 AI 安全装上一只 “Claw”", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508620&idx=1&sn=c31f1cadfa7661cddf43b3388c7ead33": "Apache Tomcat 远程代码执行漏洞,附漏洞自查方案", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525339&idx=1&sn=aaab6e4838ba21ae6ebb1cfa6018c207": "【漏洞通告】Axios SSRF漏洞 (CVE-2026-40175)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458613414&idx=3&sn=d5076ce31c456b0a5d868670a8138e94": "微软确认SharePoint Server关键零日漏洞遭活跃攻击(CVE-2026-32201)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247490027&idx=1&sn=097da91bd350f86fda58d7d57838acc7": "【安全更新】微软4月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247499830&idx=1&sn=7e8e642a37a47609bbff7a318c88da55": "OpenClaw安全实战系列三:利用网关劫持实现 OpenClaw控制端1-Click RCE (CVE-2026-25253)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664261455&idx=2&sn=25c9abf4d4d499a5bd1ae3cc94f7c24f": "CNNVD _ 关于微软多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664261455&idx=1&sn=87df5befc5585a9c088cf2b7b1348629": "人工智能重要漏洞 _ CNNVD通报新一批OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525782&idx=1&sn=95b7f1a90c60099f0b4ed5ecbfc983d2": "已遭活跃利用的 nginx-ui 漏洞可导致 Nginx 服务器遭完全接管", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505244&idx=1&sn=7fb5fa772c415724c24dec6f5b4ee48a": "【已复现】Cockpit 远程代码执行漏洞(CVE-2026-4631)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505244&idx=2&sn=ccbfe03aa4b3cf19ab081e04511cb4ae": "【已复现】Windows 截图工具 NTLM 信息泄露漏洞(CVE-2026-33829)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247518385&idx=1&sn=d58d026a8394e3b8a17a1409246d5653": "CVE-2026-33032 深度分析:nginx-ui MCP端点认证绕过导致 Nginx 服务器完全接管", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141053&idx=2&sn=aa8ec1d92134b8a9eb61a234538bb968": "IoT僵尸网络发动2Tbps级DDoS攻击,金融科技行业成重点目标;CNNVD通报OpenClaw多个安全漏洞_ 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508630&idx=1&sn=543bb7f3dbe8c36f4b62d8fdd61c0931": "无条件接管Nginx!Nginx-UI漏洞链发现在野利用", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653104021&idx=1&sn=8b223218ed8c733e8d867ed61a250b28": "大疆 OSMO Pocket 4 深度体验:三年之后,大疆如何继续定义「手持云台相机」", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247532137&idx=1&sn=8b3cbd5ac37ff1d3cb2a83d56e414ad1": "2026-04微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458613420&idx=2&sn=731c575f108348537ca001ef93c4a021": "Codex 如何利用三星电视内核漏洞实现权限越狱", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499322&idx=1&sn=0a9f63b29d3c47ba8e791aedd13f4e2a": "某rce漏洞挖掘等案例分享", "https://mp.weixin.qq.com/s?__biz=Mzg5OTU1NTEwMg==&mid=2247484521&idx=1&sn=f85a7ae0d8375841ac57664a7631a0d8": "CVE-2026-34621 Root Cause Analysis", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585736&idx=1&sn=3f8646fdec13122c42f50da17a326780": "覆盖亿级用户!360发现全球高危漏洞 漏洞挖掘智能体首次披露", "https://mp.weixin.qq.com/s?__biz=MzIzOTE1ODczMg==&mid=2247500237&idx=1&sn=e9880580ec6b69027016c2e8025bdd27": "免费AI代码漏洞扫描神器!MonkeyScan开放注册,限时速领3000积分", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525791&idx=1&sn=8e8b1cc8aa09816bba96ee685aa24394": "思科紧急修复高危 ISE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247498287&idx=1&sn=cfb1678feb5e2fa37e8e0e45db513fbd": "成果分享 _ [USENIX Security 2026] KernelRCA:Linux内核漏洞的自动化成因分析", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505248&idx=1&sn=5d29547754806bda2da31d2a75c24db4": "安全热点周报:Adobe 修复已被利用数月的 Reader 零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075765&idx=3&sn=a588e1c5afd9f96b2e0c70d421d8b1fc": "【安全圈】开源AI中转站现高危漏洞 利用缺陷可以伪造任意金额充值", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141063&idx=2&sn=0676a1147b4aefbc60868519f1f70e05": "Anthropic发布Claude Opus 4.7:自动化网络安全防护上线,面向长时自主任务;CNNVD发布关于微软多个安全漏洞的通报_ 牛览", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653104072&idx=1&sn=9cf8d55af3672ba05cfeb7f55940e29a": "雷军15小时直播验证「一次充电」到上海;大疆 Pocket 4 上市即售罄;Opus4.7 正式上线 _ 极客早知道", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525356&idx=1&sn=937dcf233c3dd1df9a2d77f81c9a211b": "【漏洞通告】Nginx UI MCP接口绕过认证漏洞(CVE-2026-33032)", "https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651390359&idx=1&sn=63fe73fcd9180d0b4fb8476201925c6d": "免费AI代码漏洞扫描神器!MonkeyScan开放注册,限时速领3000积分", "https://mp.weixin.qq.com/s/xKxghgmtRL8YTi613_5HyQ": "漏洞利用技术的“起源”", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075807&idx=2&sn=fbb1043d986644c3e4bb0d107b0ecaea": "【安全圈】Windows截图工具漏洞可导致攻击者通过网络实施欺骗攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075807&idx=1&sn=eea54b2e1d0364ac026a747fddb396d1": "【安全圈】泄露的Windows Defender 0Day漏洞正遭活跃利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075807&idx=3&sn=1cbc47d7ccaa3c6d94793aacac6e9e98": "【安全圈】白宫拟向联邦机构开放Anthropic的Claude Mythos漏洞挖掘AI访问权限", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247495270&idx=1&sn=3e7673892424a6d556cd051eeb27e368": "【征稿】EXPRESS 2026:从云原生到AI原生,重塑软件系统的可解释性与可靠性", "https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247490121&idx=2&sn=dfccc966802d7982f4a0f4e217490a02": "第三方 SDK 重大漏洞曝光:超 3000 万加密货币钱包面临数据泄露风险", "https://mp.weixin.qq.com/s/nbSb3v8HZ85a38o0agRACQ": "未来2-3,AI漏洞发现速度碾压人类防御", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247518473&idx=1&sn=39cc2ea54cae3aee275196ef01298f3f": "MCP协议架构级漏洞深度分析:STDIO设计缺陷引发大规模AI供应链安全危机", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496857&idx=1&sn=3d4b41dbe1073f02db12fcd9fda61a99": "CNVD漏洞周报2026年第15期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496857&idx=2&sn=6823408c6cbd6556270d427a018a31b2": "上周关注度较高的产品安全漏洞(20260413-20260419)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525802&idx=1&sn=a61b75215e7f74c70a2d3ef040e72b52": "Protobuf 库中严重漏洞可导致 JavaScript 代码执行", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525802&idx=2&sn=cc7315bbd06c22cde1e453867a1534fc": "因漏洞数量激增,NIST 已停止对低优先级漏洞的评分", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587662&idx=1&sn=5414d8727dcb434d48c8c18597b78c72": "不只是 0day 盛宴!DEF CON 新加坡站议题公布,藏着 4 个攻防新趋势", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505295&idx=1&sn=496cfccc26e4f49a8027901612b77394": "今日(2026年4月20日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075867&idx=3&sn=c4e8c5140eefcc3084417bf23fb8614f": "【安全圈】主流网页部署平台 Vercel 遭黑客入侵,第三方 AI 工具成攻击突破口", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075867&idx=2&sn=a7ff34572d07e4ee322da8b63417ed04": "【安全圈】因漏洞数量激增,NIST 将停止评估非优先级漏洞评级", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653104339&idx=1&sn=35bff55ed033308afa434a3bdf44b7c0": "Pocket 4 登上北影节红毯,它凭什么?", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458613891&idx=3&sn=4f85df835c3f694eadf42864731ae502": "Vercel 确认遭第三方 OAuth 劫持入侵,内部访问令牌与部分环境变量暴露", "https://mp.weixin.qq.com/s/10WYY5-OM3qg19Wgcj5jbQ": "海外漏洞赏金猎人从0到1行动地图", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525820&idx=1&sn=43dddbdd81acc2370c91e72867508c0f": "Anthropic MCP 设计漏洞可导致 RCE,威胁 AI 供应链安全", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525820&idx=2&sn=a665e9a9c0bf680b899406f43327e8c4": "因第三方AI工具受陷,Vercel 内部系统遭未授权访问", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501464&idx=1&sn=c4654662e249fa701fbe69a156ca7be1": "CNVD漏洞周报2026年第15期", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505328&idx=1&sn=8b25fc530e8a01fcb44c1a7800eeb89f": "今日(2026年4月21日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247518496&idx=1&sn=0c47ed4847403380fdfe3a8f80103b05": "Vercel供应链攻击事件深度分析:第三方AI工具成为企业安全突破口", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075911&idx=3&sn=3d039fdbeb5d6dafe9b5231823c3e587": "【安全圈】Anthropic MCP 设计漏洞可致远程代码执行,威胁人工智能供应链", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141097&idx=2&sn=2e2d05c2829b1647f8a8d2b63781a85f": "Windows 解除 FAT32 三十年限制,最大分区扩容至 2TB;CNVD发布上周关注度较高的产品安全漏洞_ 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614003&idx=2&sn=00f7fd3b236ff69a40d15b75a8604bc2": "Windows截图工具漏洞PoC公开,NTLM哈希可静默窃取", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503769&idx=1&sn=3587638dcd77bd607e5e86fb20019a3c": "雷神众测漏洞周报2026.4.13-2026.4.19", "https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247490145&idx=2&sn=e5169e35623b190bdee22607794a5c37": "Qualys深度剖析:AI代理安全风险——OpenClaw漏洞到域管理员的攻击链", "https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247490145&idx=3&sn=c99d6c210b23ce355fbb303a19feaa4e": "Tenable Hexa AI:用AI智能体将漏洞修复从人工速度提升到机器速度", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525833&idx=2&sn=7c86ed109ee9c483df20e68912fb1680": "谷歌修复 Antigravity IDE 漏洞,本可导致提示词注入代码执行", "https://mp.weixin.qq.com/s?__biz=MzU0MzgyMzM2Nw==&mid=2247486949&idx=1&sn=54485911a0c61c248acff80b6a9f7fc2": "Mythos找到了漏洞,但接下来才是噩梦的开始", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505333&idx=1&sn=5d8eb18fb03812a7cd87753fe8e14929": "Oracle 2026年4月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247518497&idx=1&sn=6c8168f317a01d94b67558c6c18cbd5a": "Mirai变种Nexcorium深度解析:针对视频监控设备的命令注入漏洞利用与僵尸网络演化分析", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515853&idx=1&sn=a118f98eb5fcb3846c4194b9f9d94d3b": "仅花1.5万元,就能把关键漏洞变成直接运行的网络武器", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075943&idx=1&sn=473119abec6a4c6ed316801316b3723b": "【安全圈】未受保护的 Perforce 服务器暴露主要组织的敏感数据", "https://mp.weixin.qq.com/s?__biz=MzU5MTM5MTQ2MA==&mid=2247495274&idx=1&sn=e544afc1fff1200b156bc89a1367021d": "会议征稿 _ EXPRESS 2026", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525367&idx=1&sn=e73780f0f75d9788028f066f5abdcb82": "【漏洞通告】FortiClientEMS绕过认证漏洞(CVE-2026-35616)", "https://mp.weixin.qq.com/s?__biz=MzA5NDYyNDI0MA==&mid=2651960454&idx=1&sn=4f80bd8d5539a8888c3586bf8bc6a36e": "我们发现了 Hermes Agent 的第一个远程代码执行漏洞,但这已经不重要了", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247505106&idx=1&sn=d03bf915dd581b70aef84e47aa60f39a": "360漏洞云关于AI生成漏洞报告的处置公告", "https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247494999&idx=1&sn=8a33dea317d873ca1912b36c3fab507f": "AI安全案例分析 _ Marimo 零日漏洞与Hugging Face平台滥用(文末附邀请码)", "https://mp.weixin.qq.com/s?__biz=MzUyMTcwNTY3Mg==&mid=2247486646&idx=1&sn=1659e438858303dc1b6a440198931f9b": "中通SRC关于AI生成漏洞报告的处置公告", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727850820&idx=1&sn=d437e9c1db71941782dcf1e0e5cb7cc5": "【公告】JSRC关于AI生成漏洞报告提交规范", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525844&idx=1&sn=a5155ad25d1a9cad18cd399ac56c9d05": "微软紧急修复严重的 ASP.NET 漏洞", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247496182&idx=1&sn=8c843d9a103ba7f711df7f6e06771f43": "ByteSRC发布《AI生成漏洞报告提交规范》", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247553069&idx=1&sn=4f36887e769ae2f6329b6252ae7cc0d0": "安全419|一周国际网安资讯:AI写漏洞 古典漏洞重燃", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075971&idx=3&sn=d88245ccf278317f520a1fdb52cbc91b": "【安全圈】Claude Mythos 发现 271 个火狐浏览器漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486519&idx=1&sn=477feb6c180059b6dbb58e7a541a3fc6": "ChatGPT 安全漏洞:仅需一条提示词即可窃取数据", "https://mp.weixin.qq.com/s?__biz=MzI2NzI2OTExNA==&mid=2247520758&idx=1&sn=780378239f8aae74642d2d63164517c7": "小米安全中心关于AI生成漏洞报告的处置公告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614046&idx=1&sn=4141c556c1195141951d4ee5fe9911b3": "更好理解:CVE-2021-1732漏洞分析报告与利用", "https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651208362&idx=1&sn=d023ab60dba98fa2e6d7f35d1f371664": "TSRC关于AI辅助漏洞挖掘报告的提交规范:每一份漏洞报告,都值得被认真对待", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499371&idx=1&sn=32c47ad71d300fe9cbe182df852f982c": "1day_可实现Nginx服务器完全控制", "https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998827&idx=1&sn=87a4ffd29c09a117121fa8beccca7ce5": "先知平台关于AI生成漏洞报告的处置公告", "https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247490202&idx=2&sn=c31f41d5bdfc6aec48078e9dce3336c3": "Bissa Scanner 曝光:AI辅助的大规模漏洞利用与凭据收割行动", "https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247490202&idx=3&sn=852d27587c230759b2823382a79a9eab": "Oracle 2026年4月关键补丁更新:241个CVE、481个补丁、34个严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247490202&idx=1&sn=efb02065da0cfb7134c61c98c5047564": "RedSun 零日漏洞:Microsoft Defender 权限提升漏洞深度剖析(暂无补丁)", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247494815&idx=1&sn=88f0ce69c3ef080b56b197e316d7d20a": "关于AI辅助挖掘漏洞报告提交规范的公告", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664261837&idx=2&sn=bff15f7d81514d3c40be96796be48bf1": "CNNVD _ 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664261837&idx=1&sn=a8712f632d7a22e50a42cab23fca0811": "重磅 _ 国家人工智能安全漏洞库启动运行", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525856&idx=1&sn=b1bcd2ca134b03705eca8fb363272731": "苹果紧急修复可导致 FBI 恢复已删除 Signal 消息的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505376&idx=1&sn=743a69b443b77628360e088602c8d620": "【已复现】Apache ActiveMQ 远程代码执行漏洞(CVE-2026-40466)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247553127&idx=3&sn=5545eb9e60ed65aa165fc1b427302925": "国家人工智能安全漏洞库启动运行", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075982&idx=2&sn=a7bc11b6b729c07530b178c4e19f03e7": "【安全圈】黑客利用 Breeze Cache WordPress 插件文件上传漏洞发动攻击", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542675&idx=1&sn=00354b0f88206c6b1bf3a91ec33eb454": "漏洞爆炸了NIST停止为不符合标准的漏洞做详细分析", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525409&idx=3&sn=7d8ac68421247c6192fa11298fc0c3eb": "【漏洞通告】Apache ActiveMQ 远程代码执行漏洞(CVE-2026-40466)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525409&idx=2&sn=59c0589b623e6dab519fe3c291a01d44": "【漏洞通告】FortiSandbox目录遍历漏洞(CVE-2026-39813)", "https://mp.weixin.qq.com/s?__biz=MzA3Mzk1MDk1NA==&mid=2651909207&idx=1&sn=a7c7e4342c1ee9b857416f946f5004e6": "【公告】DSRC关于AI生成漏洞报告的处置公告", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247532450&idx=2&sn=e1dd0fc476ef8e7e4ad22e356047d676": "【火绒安全周报】Vercel遭黑客入侵_黑客多次入侵美最高法院", "https://mp.weixin.qq.com/s?__biz=MzI0MTE4ODY3Nw==&mid=2247492921&idx=1&sn=d3ec1f4aa39e58f7b3689e7f2fdb6605": "黑客组织利用D-Link路由器漏洞部署Mirai僵尸网络展开攻击活动", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614096&idx=2&sn=6390be4b1ccae0fef17b8f3482706c09": "今晚8点直播 _ 路由设备漏洞分析之NETGEAR", "https://mp.weixin.qq.com/s?__biz=MzI5MDc4MTM3Mg==&mid=2247494883&idx=1&sn=f6eba6477129792a9c38896caff14be0": "美团SRC发布|AI生成漏洞报告提交规范公告", "https://mp.weixin.qq.com/s?__biz=MzI2NzY5MDI3NQ==&mid=2247510687&idx=1&sn=0fed65ae6573e5aa936e129ee3b9638c": "补天漏洞响应平台关于AI生成漏洞报告提交规范", "https://mp.weixin.qq.com/s?__biz=MzI2OTYzOTQzNw==&mid=2247489533&idx=1&sn=c758a42bb50af4a60bfb89bdbb19bce4": "陌陌安全平台关于 AI 生成漏洞报告的处置公告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505395&idx=1&sn=a5431ef0adac64038847f523795a947c": "今日(2026年04月25日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075996&idx=2&sn=9ef45ec99e970a6bf4e6c4b5d170a1c6": "【安全圈】存在12年之久的Pack2TheRoot漏洞允许Linux用户获取root权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652075996&idx=3&sn=3889d86cde91acd668a715177a3327c2": "【安全圈】黑客利用 Telegram 机器人追踪 900 余次成功的 React2Shell 漏洞利用", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505416&idx=1&sn=636e54844098a4c16540cd568eab6150": "今日(2026年4月26日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076007&idx=3&sn=7b7cd810015615c15d6232964cb06d5f": "【安全圈】装机必备的GPU-Z出事了!曝出严重安全漏洞:黑客可获取系统最高权限", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451186537&idx=1&sn=3ccf3691425dab440a91a09009211e4a": "如何通过漏洞组合链为工控平台CODESYS植入后门", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585815&idx=2&sn=102ee62fdf9bdf24a85130ecb3573e91": "900余家企业遭自动化攻击,360专家预警:AI正在重塑漏洞利用和攻防体系", "https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247490238&idx=3&sn=8186501eb56679747f4a11eb5bb77ee9": "AI漏洞海啸来袭:五步构建Mythos-ready安全体系", "https://mp.weixin.qq.com/s/q2d017-iOE3NJWjaMrIwVw": "别只防输出!AI&nbsp;Agent的中间漏洞百出", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525878&idx=1&sn=d8d9ab01c77cdf9aa112172faeb09a28": "OpenAI 推出GPT-5.5 生物漏洞奖励计划,最高赏金2.5万美元", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525878&idx=2&sn=79f2e56b6855b12ec6fb1acde9a488e5": "已存在12年之久的Pack2TheRoot 漏洞可导致攻击者获得 Linux root 访问权限", "https://mp.weixin.qq.com/s?__biz=MzI4MzI4MDg1NA==&mid=2247485342&idx=1&sn=cb96cf0f429ba77e502a35a418d77023": "LYSRC 关于AI辅助漏洞挖掘的报告提交规范", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505461&idx=1&sn=0fe3a34ae11aec8b611a69da04394e50": "今日(2026年4月27日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076031&idx=1&sn=eabb23f8054d5d871eea7bf9685cea47": "【安全圈】潜伏 8 年的漏洞,WPS 365 轻舟 AI 如何从源头免疫?", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650186262&idx=1&sn=c9672e3b21f32b0d63cfdb3c660dfdea": "NVD“撑不住”了:以后NVD的漏洞该咋运营", "https://mp.weixin.qq.com/s?__biz=Mzg4Nzk3MTg3MA==&mid=2247488705&idx=1&sn=1879caaae575634a0cb00d9ad9882d31": "AI能在15分钟内武器化CVE漏洞么?答案是能", "https://mp.weixin.qq.com/s?__biz=MzA4ODc0MTIwMw==&mid=2652544059&idx=1&sn=54d3b57e5ac302690f81e44294f1a6fc": "百度SRC发布《AI生成漏洞报告规范》", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614166&idx=3&sn=c37e0a23d3aa9ff2095335f4f0207e29": "务必升级!Nessus Agent Windows版曝高危提权漏洞,攻击者可获取SYSTEM权限", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451186543&idx=1&sn=917b2d0aa0bedbd8008ce0902392ab95": "影响Firefox与Tor浏览器的跨会话指纹跟踪漏洞", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585831&idx=1&sn=56f7e93bb23289cb8912ba30cbde6b3d": "环球时报报道:全球紧张“AI挖漏洞”,中国提供新方案", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247494834&idx=2&sn=d4ab4e215f2d8dd82e28fe9b2f2711c5": "【CVE-2026-22077】OPPO钱包可信域绕过导致敏感信息泄露漏洞的致谢公告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525887&idx=1&sn=294cc8c49080c6239db19c1f8525457e": "Gemini CLI 严重漏洞可触发 RCE 攻击和软件供应链风险", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525887&idx=2&sn=7db60b91da692db0076bc3c7f3d29cfa": "Pipecat 语音代理可遭严重 RCE 漏洞利用劫持", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501525&idx=1&sn=f9cc040dd3056d42367c7c9685d0fffe": "CNVD漏洞周报2026年第16期", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076045&idx=3&sn=ef57ae6fb805d4a4d501ec4d8c9a61f6": "【安全圈】OpenSSH 漏洞暗藏 15 年,可致完全 root 权限访问", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076045&idx=1&sn=d9eecb878e9564d2a2967040fcb4511b": "【安全圈】“幻影核心” 利用 TrueConf 漏洞入侵俄罗斯网络", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508656&idx=1&sn=23a36f4a8c5d30c1f7e696db704e78ca": "LiteLLM SQL注入漏洞可无条件触发", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614238&idx=3&sn=d861c4aebd91848548289ade30df70a1": "直播更新 _ 系统0day安全-IOT设备漏洞挖掘(第6期)", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247499862&idx=1&sn=615174d4044f15bd9f7a7d9bf6a88372": "OpenClaw安全实战系列(四):幽灵连通性 — 揭秘CVE-2026-32038沙箱网络隔离绕过与靶标实战", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503776&idx=1&sn=4a2477b5411eb14edcf0a637f66f21db": "雷神众测漏洞周报2026.4.20-2026.4.26", "https://mp.weixin.qq.com/s/RpN6WMjou-yH-sGyWtnCWg": "咱网安人自己的度娘,漏洞情报查询一步直达", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525909&idx=1&sn=3a1d88cd8e20887b0792cd899f1b843e": "仅凭一条 git push 命令,即可在 GitHub 实现RCE 并访问数百万仓库", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525909&idx=2&sn=80fc4007516f0fcfc9072f775b3c330a": "刚刚,cPanel紧急修复影响所有受支持版本的认证漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141181&idx=1&sn=378f9848d3f349beb7a1bd6a965d6b46": "2283美元,AI造出可用Chrome漏洞武器:网络攻防平衡已被彻底颠覆", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141181&idx=2&sn=a454d1c6b28958fd4ffe80cb59bd0a57": "网信部门依法查处剪映 App 等 AI 生成合成内容标识违法平台;CNVD周报:高危0day漏洞激增,Adobe、NVIDIA、Cisco成重灾区_ 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525429&idx=1&sn=efffa2a9040316ec6d7753bd4b59e865": "【漏洞通告】Github-Enterprise远程命令执行漏洞(CVE-2026-3854)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525429&idx=2&sn=576d9806998fdf7f0dbf7b40e17dcfcb": "【漏洞通告】LiteLLM SQL注入漏洞(CVE-2026-42208)", "https://mp.weixin.qq.com/s?__biz=MzA4NzQwNzY3OQ==&mid=2247484086&idx=1&sn=5d6bbe68afada10fbfe35201dfeb801e": "CVE-2024-38812 深度分析:从堆风水到远程代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614348&idx=2&sn=ce07c53a847420a458cfab9e46207714": "单个Git Push就能攻陷GitHub?CVE-2026-3854高危漏洞曝光", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585876&idx=1&sn=0148a95dc5e3b15e4a02b10fffa551de": "360漏洞挖掘智能体亮相DEFCON 中国AI安全能力实现关键突破", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496881&idx=1&sn=563b3c5245be0c633987b1613867773c": "关于Linux内核存在本地权限提升漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzkzMDE3ODc1Mw==&mid=2247490274&idx=1&sn=b1d1c3aa8c892bdd85567321081a0bca": "Copy Fail:732字节通杀所有Linux的史诗级LPE漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247494908&idx=2&sn=fadace1e79c4554fecf7e51ec930333b": "【CVE-2026-22070】ColorOS助手的路径穿越漏洞的致谢公告", "https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247522091&idx=1&sn=9c38b02b19e5f211a6d6c9fd10f009cc": "记某SRC高危漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262153&idx=2&sn=ae790fc7924edd4d34893a1bddc2c839": "CNNVD _ 人工智能重要漏洞通报(2026年第六期)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262153&idx=1&sn=fd4a2110a6d3cf0e85ffb46c50f2db71": "人工智能重要漏洞 _ CNNVD通报最新一批OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497528&idx=1&sn=bd11cb8bf23b2ae520fc1723d37cf85b": "Linux Kernel _Copy Fail_ 漏洞预警,可本地稳定提权至 root", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525926&idx=2&sn=487c60cb3cbc5568392caaeb46a3b33d": "Copy Fail_ 仅732字节,通杀所有主流 Linux 发行版,隐藏9年的 root 提权漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496705&idx=1&sn=f6b76bcbd3beb393983e7cb3b4c0eea4": "【风险提示】天融信关于Java Ghost Bits 漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496705&idx=2&sn=2f53fc8a4a3695c13f1ea7fc09bb1b9c": "【风险提示】天融信关于Linux Kernel本地权限提升漏洞(CVE-2026-31431)的风险提示", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505520&idx=1&sn=782f41f065f5b44a1724fe083a86f80e": "【已复现】Linux Kernel _Copy Fail_ 本地权限提升漏洞(CVE-2026-31431)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505520&idx=2&sn=17a49e5024765e8f6bd8b09c1f4719f8": "【已复现】cPanel&WHM 身份认证绕过漏洞(CVE-2026-41940)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076090&idx=1&sn=955f8155ca08aea02fa3e25775c3bcf4": "【安全圈】Linux 内核潜伏 9 年漏洞披露:732 字节脚本攻破 Ubuntu 等发行版,提权至 root 最高权限", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076090&idx=2&sn=e5ba8445daca48ad1bb3795002895e7c": "【安全圈】cPanel被曝惊天高危漏洞,千万级服务器面临“裸奔”,官方紧急发布补丁!", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141199&idx=2&sn=2665ad35bc0a3671c0a8b561063451f2": "恶意机器人占全网流量 40%,AI 驱动攻击暴增 12.5 倍;CNNVD 周报:本周新增漏洞 1447 个,超危 96 个需紧急修复_ 牛览", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650186347&idx=1&sn=a62188947f420de663dfc428891b361b": "人工验真!Linux提权漏洞,影响这么多信创!(附稳定验证PoC)", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508662&idx=1&sn=41def071baa5eeadd5303f2ccb43cf01": "Linux提权漏洞!10行代码直接root", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542765&idx=2&sn=fb4be51e89b2c51a565c30835320a5eb": "Copy Fail:横扫所有Linux,成为最危险的提权漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MzA3OTgxOA==&mid=2657165769&idx=1&sn=458df7885e2f72bea989f80e27528947": "732 字节通杀 Linux内核 近 9 年!100% 稳定获取 root 权限。附Poc。", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247490029&idx=1&sn=fc9c3feee41b708f86dab16be4154af5": "1秒root、九年无人知——Linux近年最屌提权漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525464&idx=1&sn=8acda386bfbde5ad1c91b714adbca8f2": "【漏洞通告】Linux Kernel Copy Fail 本地权限提升漏洞(CVE-2026-31431)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247492097&idx=1&sn=718add4ed82d4ce779728a3ac56c09c7": "【已复现】Linux内核权限提升漏洞(CVE-2026-31431)", "https://mp.weixin.qq.com/s?__biz=MzI1MTE3MDAwMw==&mid=2650436281&idx=1&sn=1c92351b2a2947a1a2d0ae9808a49a50": "CVE-2026-31431 漏洞原理、缓解和修复", "https://mp.weixin.qq.com/s?__biz=MzU3MTY5MzQxMA==&mid=2247485140&idx=1&sn=46a3b04ac859dd1c8adc3ac08459a719": "最新通杀全线Linux发行版的CVE漏洞解析", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247493214&idx=1&sn=0bd0bf00dcf29c2419c42c454c82f1f5": "【已复现】732字节、1秒root、九年无人知——Linux近年最稳定提权漏洞", "https://mp.weixin.qq.com/s/OgOS7WT1hVBdeVVW-wsQPg": "CopyFail漏洞分析博客", "https://mp.weixin.qq.com/s/PAi68-ZQ0gkEOsViL5rWnw": "五一不打烊 · 漏洞挖掘正当时", "https://mp.weixin.qq.com/s/1eoPGqkoN7Yc7XdFJdHQlw": "从找漏洞到证明漏洞:多Agent架构3.0", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505530&idx=1&sn=394e32f3072d2a116e8a753bd3f6557a": "今日(2026年5月1日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076105&idx=2&sn=69e1060f56966577b4e2d2a05cebb8cb": "【安全圈】开源电子病历软件 OpenEMR 发现 38 个漏洞", "https://mp.weixin.qq.com/s?__biz=MzAwMTMzMDUwNg==&mid=2650890306&idx=1&sn=8244399ea7d24e712ba1400604e6ad53": "Copy Fail(CVE-2026-31431):732字节脚本提权linux", "https://mp.weixin.qq.com/s/hrft5q8VmUGU7fFGGvEtNA": "Spring Boot 框架反序列化漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247495017&idx=1&sn=21e245531ce13c5507dd18dc05bd3663": "5分钟原理分析,20分钟容器逃逸:ApexEye漏洞研究智能体自主攻破_Copy Fail_内核通杀漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MzM0NjcxNw==&mid=2247485783&idx=1&sn=dd472c09e33232ab844dc0d30614ee09": "警惕,最新LINUX漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505535&idx=1&sn=c1754d49df01973d9cfcb9d0eabdef41": "今日(2026年5月2日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653105123&idx=1&sn=0e8737cc434ec9bec91b2155ad778b19": "iPhone Air 销量疲软,安卓厂商集体叫停超薄旗舰;佳能或将推出 Pocket 相机;腾讯增持游戏科学,持股达 24% _ 极客早知道", "https://mp.weixin.qq.com/s?__biz=MzI2MzM0NjcxNw==&mid=2247485790&idx=1&sn=ad6ce9c4ab67c830b03edc85ee02f976": "如何检测利用CVE-2026-31431漏洞的攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076171&idx=1&sn=de9da65cb58255549d731bae73e7077e": "【安全圈】Wireshark 高危漏洞可致攻击者通过畸形数据包执行任意代码", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486587&idx=1&sn=9039d12f325b9377e87583d4b22342e8": "MCP 漏洞披露:AI时代的 “Open Redirect” 时刻", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505570&idx=1&sn=7b0ccc76465f5158fd40c96d835d4fc9": "今日(2026年5月5日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076183&idx=1&sn=9d34b2fc14abfd37f943b2df7423829c": "【安全圈】Apache HTTP Server 漏洞致数百万服务器面临远程代码执行攻击风险", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496900&idx=1&sn=49bed22ebc39742e20c189f53538f961": "CNVD漏洞周报2026年第17期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496900&idx=2&sn=1991f529308bac06911fe613c6256b3d": "上周关注度较高的产品安全漏洞(20260427-20260503)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525932&idx=2&sn=a1f8acec7865ec3eec445777c4ad6251": "Palo Alto 提醒注意严重的 PAN-OS RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525932&idx=1&sn=cf1d9580501b94ce494712fa2e09e95c": "Progress 提醒注意严重的 MOVEit 自动化认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501551&idx=1&sn=18e7edf237362243bedb7a681a53cc15": "CNVD漏洞周报2026年第17期", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505584&idx=1&sn=ca44217a8c928da367571bb4e022801c": "【已复现】Ollama 内存泄漏漏洞(CVE-2026-7482)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515890&idx=2&sn=01daa1c7be2168b06ef9189578893d6d": "CNCERT:关于Linux内核存在本地权限提升漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076197&idx=1&sn=f04ddcae84cf9ff13b2696de01ec65eb": "【安全圈】安卓高危0Day漏洞可远程获取Shell访问权限", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141220&idx=2&sn=440899fbec56c3e3d84cb7f8e2790e74": "全球首例!美国州政府起诉 AI 聊天机器人非法冒充执业医师;CNNVD 发布 AI 漏洞通报:213 个漏洞集中爆发,超危 8 个高危 89 个_ 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486593&idx=1&sn=2e77c910fc4084754cfa7361c288ae4d": "谷歌Antigravity AI 智能体管理器曝出漏洞:可逃出沙箱,让攻击者实现远程代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614579&idx=2&sn=ad625ae6a74ef9508c95bad9c6cea4ef": "Palo Alto PAN-OS 高危漏洞已遭在野利用:可获root权限,官方下周发补丁", "https://mp.weixin.qq.com/s/ma2iR2G0e7PFoE56GnqQTw": "漏洞原理小零食之SQL注入", "https://mp.weixin.qq.com/s/TdOwLdeQtpXf-VSaHd6sYg": "漏洞挖掘实战|4月热门靶机+0day审计技巧", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262288&idx=2&sn=cbefb698864e237ecb7905419702c1da": "CNNVD _ 关于人工智能重要安全漏洞通报Ollama安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525945&idx=2&sn=6c90b2a2b1a68169a53e78b17473ff15": "Apache HTTP_2 严重漏洞可导致 DoS 和 RCE", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525945&idx=1&sn=bec17dd2f9792543fa111253143b26a3": "vm2 沙箱严重漏洞可导致在宿主机执行代码", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505635&idx=1&sn=1741c76300211a0f18007e72828d2003": "今日(2026年5月7日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141243&idx=2&sn=f992a44c8a10e79d11a3254c67b76c5d": "攻击比补丁早7天:十亿级数据揭穿漏洞修复的“人力天花板”", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508686&idx=1&sn=c8044c778acb9ba9419eb689209824d4": "漏洞通告 _ Apache HTTP Server 远程命令执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614619&idx=3&sn=3c6bd50dafd56f3e109a00efc03687b1": "攻击者可执行任意代码!vm2 沙箱库曝12连杀漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497541&idx=1&sn=2114e00c017f9afce4b05acb9a1ca29a": "速查!Linux 内核又曝 _Dirty Frag_ 提权漏洞,无需竞争条件可直接 root", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525953&idx=1&sn=40c610f460f60706c41341497c18c035": "Ivanti 提醒注意已遭利用的 EPMM 高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525953&idx=2&sn=1a26c3978eeeaebb1b34b4427e58b4ae": "速修复已存在21年的 FreeBSD RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488401&idx=1&sn=7821a4d753764560bc4391f3c1aef39b": "墨菲安全联合公安三所、国泰海通证券发布《漏洞及投毒情报应用实践指南》", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496708&idx=1&sn=d371ec89db29d4d25db8e5dd5d339c2c": "【风险提示】天融信关于Linux Kernel本地权限提升漏洞Dirty Frag的风险提示", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505651&idx=1&sn=851bea5967f41e36826cece869716677": "【已复现】Linux Kernel Dirty Frag 本地权限提升漏洞(QVD-2026-24699)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651141523&idx=1&sn=04814a9c120099845905bb8fae7f7640": "当工控系统“漏洞百出”,威努特如何筑起“钢铁防线”", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247553258&idx=1&sn=83a4fa668907842ce1ea97fcd090457f": "安全419|一周国际网安资讯:AI代理成新攻击面 MOVEit漏洞警报再响", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076237&idx=1&sn=30e0c0d6f2c1d613c004fdfcccaa4172": "【安全圈】Chrome 148 安全大更新127 个漏洞,立刻升级", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076237&idx=3&sn=cf888f50ed50f6f3e877ab1eae838d07": "【安全圈】思科修复高危漏洞,防范 SSRF 与代码执行攻击", "https://mp.weixin.qq.com/s?__biz=MzI5NjA0NjI5MQ==&mid=2650186437&idx=1&sn=78c033288678c7b40d772884356c57a0": "DirtyFrag漏洞细节及PoC已公开", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508690&idx=1&sn=4bd97e12d5898b4f379ccfac5d4e849c": "Dirty Frag 漏洞爆发!影响9年Linux内核的“确定性”提权漏洞", "https://mp.weixin.qq.com/s?__biz=MTMwNDMwODQ0MQ==&mid=2653106146&idx=1&sn=f7db2dbe986ddff32f91d87a6272f3d6": "OSMO Pocket 4P,是大疆自己打响的「云台相机下半场」第一枪", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525526&idx=1&sn=07ac03abdde556813ff744b9ca642ed8": "【漏洞通告】Apache HTTP Server mod_http2 双重释放漏洞(CVE-2026-23918)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614670&idx=1&sn=364bd9c47201a3c4b46f3ab61839a403": "一条命令就能提权!Copy Fail 还没补完,Linux 内核又曝 Dirty Frag 漏洞", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247492267&idx=1&sn=7cfc3683a6dd463030f8bfa2c6806ccf": "【漏洞通告】Linux内核权限提升漏洞(Dirty Frag)", "https://mp.weixin.qq.com/s?__biz=MzU3MTY5MzQxMA==&mid=2247485155&idx=1&sn=297226eb7a1334739226f0ac851e1e65": "最近是怎么了?又一款通杀全线Linux发行版的0Day漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247493223&idx=1&sn=951de34d09aadbbf791103bdc856deb1": "【已复现】Copy Fail 补丁失效——Linux 提权漏洞 Dirty Frag 预警", "https://mp.weixin.qq.com/s?__biz=MzIwNDA2NDk5OQ==&mid=2651390386&idx=2&sn=6e77c1b10a9a6838b85e4ca9587ea430": "【立即修复】Dirty Frag 漏洞已公开 EXP!一条命令阻断攻击路径", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451186656&idx=1&sn=280b99bf1a17385aae56b5958b9d8e2f": "Mozilla如何用Claude Mythos修复Firefox 中271个潜伏漏洞", "https://mp.weixin.qq.com/s/xJe410QxhZRijDBpKlBQRg": "漏洞复现 _ Docker相关漏洞", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664262395&idx=1&sn=23aa56726180c772418711b802f8d79f": "CNNVD _ 重要安全漏洞通报(2026年第二期)", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497553&idx=1&sn=1560b8dc68804729cbbc82e00a4c4ed9": "8 个高危漏洞拉响警报:Linux_Tomcat_ActiveMQ 等 4 月必修清单", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525959&idx=1&sn=c447f4cb6c61f03248a015b4f72927f1": "Microsoft 365 Copilot 多个严重漏洞可导致敏感信息暴露", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505667&idx=1&sn=a8495867e1a57d53c473e8d416c6009f": "Chromium项目史上最大规模:Chrome 148一次性修复127个漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542813&idx=2&sn=769dcd9d1008731dba227d14a23cf142": "AI无法给安全运营中心补漏洞,反而会造成漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542813&idx=1&sn=681fec119daead073cec40e3d69f9452": "Claude Opus写了一个EXP 用了2283美元", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525551&idx=1&sn=e0910e9cbc4926fc58dc4fca4045af92": "【漏洞通告】FreeBSD dhclient 远程代码执行(CVE-2026-42511)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505710&idx=1&sn=1bbefe5abcea4225c415ab03499775ef": "今日(2026年5月10日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076309&idx=3&sn=7c377bc2b093b887d9cafa553f8db622": "【安全圈】“Dirty Frag”:一种新的 Linux 提权漏洞已在野外出现", "https://mp.weixin.qq.com/s/onNP6j9oNurHwZZp5U7z-A": "咱网安人自己的度娘,漏洞情报查询一步直达", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525970&idx=1&sn=722d2a9f2b63e4126c12f9ca480729ea": "cPanel 修复三个新漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525970&idx=2&sn=e66e02c461742b7371d5a521395c7643": "斯柯达网上商店漏洞遭利用,客户信息遭短暂未授权访问", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501575&idx=1&sn=15c33f114280aeb57af657797685810f": "CNVD漏洞周报2026年第18期", "https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247498407&idx=1&sn=4f9e0e9ae91d1b1cbb48d7e55c43abe7": "白泽成果分享:通过补丁语义分析让“依赖库漏洞传播”看得更准", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076342&idx=2&sn=8322fe758ba6d6af735a4d12979d1c0a": "【安全圈】Ollama 越界读取漏洞致远程进程内存泄漏", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076342&idx=1&sn=30dee5e2a1337bda6b57e2ae8e2f3e7b": "【安全圈】cPanel新漏洞可能导致文件泄露与远程代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614849&idx=1&sn=fe3114822b287b4d43b6eb503c2682ca": "Copy Fail 深度研究:Linux 页缓存漏洞的根因、利用与检测", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614849&idx=2&sn=de29a1fa63bf7c372893b84f4aae2906": "Ollama惊曝高危漏洞:远程即可窃取全部进程内存,Windows版后门风险更高", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503783&idx=1&sn=0cd9652d230f934aa5ea468e08a04dd8": "雷神众测漏洞周报2026.4.27-2026.5.10", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247585949&idx=1&sn=3a9961caf97d6bf505fdaaf76f1c06e4": "360发布“龙虾”生态安全报告:23个漏洞覆盖10余款产品,智能体安全风险蔓延全行业", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505729&idx=1&sn=2935cba9e61f3fa04a47c062b529d715": "今日(2026年5月12日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515926&idx=1&sn=347bcbc856a812c74954c74e814786f0": "首次发现!AI生成零日漏洞利用工具并实施网络攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076374&idx=2&sn=6ddc9b61db17560810d8e2ede885638d": "【安全圈】谷歌确认黑客利用 AI 生成零日漏洞攻击 可提升攻击速度", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508706&idx=1&sn=0a47dc86458f4a42dc94b1b142c304b4": "从OA进,靠AI横移,半数都是RCE:2026红队攻击彻底变了", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458614891&idx=3&sn=0de81f82941d24d10b76da58cb08c893": "安卓惊现零点击核弹漏洞!远程Shell权限被轻易窃取,PoC已公开", "https://mp.weixin.qq.com/s?__biz=Mzg2NTA4OTI5NA==&mid=2247522129&idx=1&sn=770301431953ea49e2c8377e319eb4a8": "VS命令执行与防御", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525995&idx=1&sn=c32aec58266325bad875fe920c376035": "Fortinet 提醒注意 FortiSandbox 和 FortiAuthenticator 中的严重RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247525995&idx=2&sn=44ea067953995b6d553d7f0d078f3b37": "微软2026年5月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505730&idx=1&sn=77a45407d42fdb43830a4d78aa46f329": "微软5月补丁日多个产品安全漏洞风险通告:14个紧急漏洞、9个重要漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247518785&idx=1&sn=8777ef11aef31d8aa6472fc48d7a53c2": "秘密活动6年的神秘黑客组织Mr_Rot13正在利用cPanel高危漏洞部署后门木马", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247496205&idx=1&sn=ad6ff89e324e32df8a6f3cc199676a2a": "抖音专测享3倍积分!重大漏洞奖励20万元!", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076415&idx=3&sn=4a801e88018faba5f0fdb72a80373270": "【安全圈】Exim 新 BDAT 漏洞致 GnuTLS 构建面临代码执行风险", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076415&idx=1&sn=28c320ab902f356686e31c217bcd9b65": "【安全圈】苹果修复 macOS 和 iOS 系统数十个漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525589&idx=1&sn=a0baa79de2e0db34d1820583c6d9fe37": "【漏洞通告】LiteLLM 远程代码执行漏洞(CVE-2026-42203)", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247532707&idx=2&sn=3f6f45e9d9ff469876e6a5479905d35f": "2026-05微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247492560&idx=1&sn=cf9c11c7f70d68ebdfcd3f105396ff92": "【安全更新】微软5月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526003&idx=2&sn=c20e54e5adb2f700ddd645f3b36b2e09": "Exim BDAT 严重漏洞可导致内存损坏和代码执行攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526003&idx=1&sn=5e04c332e1da0696e277729a63c4007b": "Ivanti 紧急修复暴露敏感数据的严重 Xtraction 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526003&idx=3&sn=280e2920486fd297c8b0912e1bf5eb48": "速修复!Composer 漏洞可暴露 GitHub 密钥", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505770&idx=1&sn=7dd912798e894e61bea35d7783fe5f65": "【已复现】Linux Kernel Fragnesia 本地权限提升漏洞(CVE-2026-46300)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076449&idx=3&sn=a4f35a4e89fcd8cd11fe4ce831687029": "【安全圈】微软警告“ Dirty Frag ” Linux 内核漏洞已遭黑客利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076449&idx=2&sn=d5cd359cfaa12b85e67dd5ecd70ae36c": "【安全圈】研究人员公布概念验证,利用 Windows BitLocker 零日漏洞可访问受保护驱动器", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141332&idx=2&sn=4c06f32aa30d02ca0a24519e4cdefa7f": "后量子密码 + 无加密勒索,2026 勒索攻击战术全面升级 ;CNNVD 19 期周报:新增漏洞 1657 个,PAN-OS 曝超危代码执行漏洞_ 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508711&idx=1&sn=689a40df2241578556ccbf3e178f2c0b": "NGINX爆新漏洞,特定配置下可实现远程代码执行", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458615049&idx=2&sn=afd37e6cc49b0050d5882fd4d1626eb2": "如何让AI不分析你的混淆后的代码:一种思路(含PoC)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458615049&idx=1&sn=929dce8d5bf8cad73eb7978697900a4d": "潜伏18年,CVSS 9.2分!NGINX核心模块曝“无认证RCE”漏洞,PoC已公开", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247492593&idx=2&sn=564647c61e416fc272f49b45dec287ab": "【已复现】Linux内核Fragnesia权限提升漏洞(CVE-2026-46300)", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247492593&idx=1&sn=98331857503f56a95034d59968079fa2": "【漏洞通告】Nginx远程代码执行漏洞(CVE-2026-42945)", "https://mp.weixin.qq.com/s/B3xab2GMKLpWDFQ__qXnNg": "我终于成功组装了我的Socket 775 + AGP电脑,主板:Intel D865GSA,CPU:奔腾 4 HT 641,内存:2GB DDR400,GPU:128MB PNY GeForce 6200", "https://mp.weixin.qq.com/s/izVy1U113E-dxqZ_edKunA": "能信安:漏洞通告", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247529794&idx=1&sn=c3679fba273e0aec1c10f18624c02e12": "Web Fuzzer 强化:AI自动修改数据包与智能测漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497563&idx=1&sn=7d07cd3ae00c707873cecb78adc26675": "【漏洞预警】Linux Kernel 越权任意文件读取漏洞,PoC 已公开", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526019&idx=2&sn=ff7a5425883dc59896247c3cc01d5e4d": "已存在18年的 Nginx 漏洞可导致 RCE 攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526019&idx=1&sn=a356c936f290fca11bdc81d87da6081f": "思科:注意已遭利用的满分 SD-WAN 新 0day", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505839&idx=1&sn=6b738b4bdf330f23c5c9e2c7369a138c": "【已复现】Linux Kernel ptrace 本地权限提升漏洞(QVD-2026-26977)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076488&idx=3&sn=cffc7b6754f6e27eeac5cfa00da6a263": "【安全圈】OpenAI 确认在 TanStack 供应链攻击中出现安全漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141364&idx=2&sn=d335881f17dd59da610237880440da71": "OpenAI 推出 Daybreak,对标 Anthropic Mythos 发力 AI 网络防御;CNNVD发布关于微软多个安全漏洞的通报_ 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525652&idx=3&sn=71147ace39e5cb83bb48d2dc74302c28": "【漏洞通告】Linux Kernel Fragnesia 权限提升漏洞(CVE-2026-46300)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525652&idx=2&sn=cf15a9fe232a95f5f9af354e449ed6f6": "【漏洞通告】Nginx ngx_http_rewrite_module 缓冲区溢出漏洞(CVE-2026-42945)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525652&idx=1&sn=1b0f5add038e08a736263f502e4cd35b": "【漏洞通告】Palo Alto Networks PAN-OS身份绕过认证漏洞(CVE-2026-0265)", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505856&idx=1&sn=eb8d3df614c46d54e0a827b6befd0823": "今日(2026年5月16日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076524&idx=1&sn=85724f6aa9c493a3823cc2988e73c7ec": "【安全圈】Linux内核漏洞_ssh-keysign-pwn_允许攻击者窃取SSH密钥与影子密码文件", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076524&idx=3&sn=8adfa54adbe431abba673a75db6ad228": "【安全圈】微软Exchange Server高危漏洞正遭攻击者积极利用", "https://mp.weixin.qq.com/s/mPNPN2JnOtGjhw-n0DI9KA": "CVE-2019-0227漏洞复现", "https://mp.weixin.qq.com/s/arJUKGIVMXWvJxfEPfdUgw": "网安必知的50个高危端口,新手挖漏洞必备!", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505871&idx=1&sn=7c7eb03516ce8b20b1dc9ebe22d6282a": "今日(2026年5月17日)热点网络安全漏洞动态", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076557&idx=3&sn=c636faff278cae3d93f0d1ff35483775": "【安全圈】黑客利用 Burst Statistics WordPress 插件认证绕过漏洞发动攻击", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496945&idx=1&sn=9cc7d733d3a25ee42b4046331ef2bb81": "CNVD漏洞周报2026年第19期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496945&idx=2&sn=1abf49fbb97682b3d478368ae12be45a": "上周关注度较高的产品安全漏洞(20260511-20260517)", "https://mp.weixin.qq.com/s/bCtX2GiVm_sPVVnoc-hpfQ": "AI安全案例分析:Prompts Become Shells —— 从提示词注入到AI Agent远程代码执行(RCE)", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247518833&idx=1&sn=2a77ea8001191d2debe33540842c66e4": "紧急!微软Exchange Server新高危XSS漏洞(CVE-2026-42897)已被利用执行攻击", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542893&idx=1&sn=206275bade8718a268a7ae6c53d78c69": "Mythos漏洞发现能力强,但验证能力弱", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525672&idx=1&sn=c337c05c9659b626d9c452f9d72c3e1b": "【漏洞通告】Linux Kernel ptrace 权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458615215&idx=2&sn=b23cac49b2b1df3cf65ff41e031c4987": "微软3年前补丁形同虚设,MiniPlasma漏洞可一秒提权至SYSTEM", "https://mp.weixin.qq.com/s?__biz=MzIyODYzNTU2OA==&mid=2247499913&idx=1&sn=986f30c79aee4d990ca1feacd729705c": "复现Copy Fail漏洞(CVE-2026-31431)没环境?云攻防靶场一键开启,深度还原容器逃逸攻击链", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503790&idx=1&sn=86a9d3e59a69769a7f866e5e2fcacfc5": "雷神众测漏洞周报2026.5.11-2026.5.17", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526048&idx=1&sn=0cc70737a4725595d2a468599e295579": "奇安信Qcode Agents重磅升级,正式解锁操作系统级漏洞挖掘能力", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501599&idx=1&sn=6e909b7b963fad1d8cb6d2787d68eb08": "CNVD漏洞周报2026年第19期", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505907&idx=1&sn=fa84a90f4eb664f50485b423f8db03cd": "【已复现】Next.js 服务器端请求伪造漏洞(CVE-2026-44578)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505907&idx=2&sn=205c4c3a6ab07259e746d3f430f9c72e": "【已复现】PostgreSQL pgcrypto 堆缓冲区溢出漏洞(CVE-2026-2005)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247518838&idx=1&sn=a33e7f05cd5a946c51b0ff0fe8caa3eb": "n8n 自动化平台惊现三重漏洞链:低权限即可引爆完整 RCE,攻击面已蔓延至供应链核心节点", "https://mp.weixin.qq.com/s?__biz=MzAwNTgyODU3NQ==&mid=2651141692&idx=1&sn=98cdfb983eb21c11dc54f4a4ba586cf4": "凌晨三点收到一千条漏洞告警,AI 替我看完了", "https://mp.weixin.qq.com/s?__biz=MzUzMzcyMDYzMw==&mid=2247496216&idx=1&sn=aca419e15554c51a85d2afcf3163a0b6": "火山引擎安全专测上线!漏洞多倍积分、情报特殊奖励奉上", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141382&idx=2&sn=0f2196553effffefe1816429bd1a7aed": "AI金矿分化加剧:高额股权 vs 技能贬值,安全从业者面临新挑战;CNVD漏洞周报2026年第19期_ 牛览", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141382&idx=1&sn=47da5ef47e9e139e5ce6f6c83270df6c": "微软AI安全新突破:MDASH多模型智能体扫描系统,以AI速度重塑漏洞防御格局", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486726&idx=1&sn=bcc2154395b67dddb7a99e7f3510e625": "首款由AI研发的零日漏洞利用程序", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499455&idx=1&sn=87c2a66ec757c4c28ee6dd3411bca40b": "【src实战】_ 业务逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451186756&idx=1&sn=df5398f285f6d4714f9fde8c4fad8d8b": "Android Pixel 10 零点击漏洞利用链", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247586000&idx=2&sn=e15e6705eee9705417548f9e2dce70a3": "权威认可!360获评国家信息安全漏洞库核心级技术支撑单位", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505918&idx=1&sn=2d857360ee78feeb5301de3fecce7f0e": "【已复现】Linux Kernel PinTheft 本地权限提升漏洞(QVD-2026-27616)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247553441&idx=1&sn=196970f8a09fe5cdfa3044d6081b27b5": "安全419|一周国际网安资讯:APT与0Day齐袭 AI代理漏洞显现", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525731&idx=3&sn=a9e7a28b0943020656cea0634dd29feb": "【漏洞通告】Microsoft Exchange Server OWA跨站脚本漏洞(CVE-2026-42897)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525731&idx=1&sn=2c7d1aac21ffcef30868bb9e53450933": "【漏洞通告】Next.js 服务器端请求伪造漏洞(CVE-2026-44578)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525731&idx=2&sn=cd67147630c31a649d9985873792a2eb": "【漏洞通告】n8n多个节点远程代码执行漏洞(CVE-2026-44789_CVE-2026-44790_CVE-2026-44791)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458615353&idx=1&sn=772e8df0c2ce473468d1a0880f4548e4": "第三方MiniFilter中常见的一种TOCTOU漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc5Mzk2OA==&mid=2247505129&idx=1&sn=b886267049920b17ef845f225e9e6f37": "360漏洞云携安全龙虾亮相HPW白帽世界大会", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247488075&idx=1&sn=ac894fe8c8f2cb13199b50fa048474fa": "漏洞预警 _ Linux内核RDS零拷贝与io_uring组合本地提权漏洞(PinTheft)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526078&idx=1&sn=2b669f642fd4b13d42c79cc8a544e482": "思科:速修复满分 Secure Workload 未授权 API 访问漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505952&idx=1&sn=c7636af71cd3a1470ad313b5274a038d": "【已复现】FreeBSD setcred(2) 栈缓冲区溢出漏洞(CVE-2026-45250)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247518848&idx=1&sn=90b15138b9f9cc9e7698039e29fbcdce": "疑似Coruna卷土重来:npm包art-template遭供应链攻击沦为iOS漏洞投送工具", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247515978&idx=1&sn=33f216e51504edd839dc8b5e44ae380b": "AI重塑网络攻击:漏洞利用成最流行手段,利用门槛被大幅拉低", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525764&idx=1&sn=694c58e134be2843b714a5e85ae2c533": "【漏洞通告】Linux Kernel PinTheft 权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247488081&idx=1&sn=03f4c2ef9d46f04b018e91232c3356ca": "漏洞预警 _ Linux Kernel Fragnesia 本地权限提升漏洞(CVE-2026-46300)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526088&idx=3&sn=353fe1e4d9d79dec6b4cce44a35da5fe": "NGINX 新漏洞可导致远程攻击者触发恶意代码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526088&idx=2&sn=054aa51bb5ff7800aed3baf374ec14bf": "已存在9年的 Linux Kernel 漏洞可导致执行 root 命令", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526088&idx=1&sn=b80d042e47259040384c71978889be86": "微软提醒注意两个已遭利用的 Defender 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247505961&idx=1&sn=6b09d0e85e05b52460244fe8e84eec07": "【已复现】cPanel&WHM 任意文件读取漏洞(CVE-2026-29205)安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486740&idx=1&sn=9532faa2125265606c27c96db56f8aa1": "GTIG AI 威胁追踪报告:攻击者利用AI开展漏洞利用、作战赋能与初始入侵", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458615448&idx=3&sn=818c2d9d2813d32261998d80b1c601c2": "vm2 沙箱曝5大高危漏洞:最高 CVSS 10.0,波及所有3.11.3及以下版本", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076796&idx=3&sn=957360c8847377bd11e2714149619033": "【安全圈】趋势科技警告称,Apex One 零日漏洞已被利用", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496966&idx=1&sn=ac3699b4b31bce4c5b16877fd623757d": "CNVD漏洞周报2026年第20期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247496966&idx=2&sn=e60e7fcef20b977ae462ccddd14972dc": "上周关注度较高的产品安全漏洞(20260518-20260524)", "https://mp.weixin.qq.com/s/M3U2Gw04lzVjaH1pDi1Zmw": "什么是 CVE 公共漏洞和暴露?", "https://mp.weixin.qq.com/s/oQdbevdGyUGtD8BbHaHcnA": "网安必知的50个高危端口,新手挖漏洞必备!", "https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247495083&idx=1&sn=f13abeb4a11eb21249dc9e6e46d7e6e7": "AI安全案例分析:Prompts Become Shells —— 从提示词注入到AI Agent远程代码执行(RCE)(文末附邀请码)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526099&idx=1&sn=d07e28ac6d092fa30327a6c688e850a5": "趋势科技提醒注意已遭利用的 Apex One 0day 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076871&idx=3&sn=8b7e1ab3adc698e9b50411d949be259c": "【安全圈】已修复:微软 Win11 内核曝 7.8 高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247542986&idx=1&sn=b97ba56003ced175f3894af25166c243": "AI带来的影响初现:互联网漏洞赏金大幅下降", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525807&idx=1&sn=d2d585508a04051bd1604794e648dd71": "【漏洞通告】Drupal Core SQL注入漏洞(CVE-2026-9082)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525807&idx=2&sn=d883b4663246394babb72bb364b34d39": "【漏洞通告】cPanel-WHM 任意文件读取漏洞(CVE-2026-29205)", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451186831&idx=1&sn=7a0ed378ca1323a830b4cfb7f28b7ae5": "警惕Underminr新型网络规避技术:CDN共享边缘的隐形漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526103&idx=2&sn=42086b8ee7fc8a8d7a402f058ce882f1": "7-Zip 多个新漏洞可导致任意代码执行和系统受陷", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501694&idx=1&sn=35afc2518a89d16100bc36091ceb392f": "CNVD漏洞周报2026年第20期", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506015&idx=2&sn=f28e0c902b82e300d95f799ba1a7bebe": "【已复现】LiteLLM 权限提升漏洞(CVE-2026-47101)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506015&idx=1&sn=c4ae2804d3056bb81d6bd96100f12d9b": "【已复现】NGINX ngx_http_rewrite_module 堆缓冲区溢出漏洞(CVE-2026-9256)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247518891&idx=1&sn=30210c8d46e7f04405496429c99ff321": "Mythos 宇宙漫游指南:当 AI 开始帮你修漏洞,你才发现代码有多烂", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458615525&idx=3&sn=deeb3affeda9640dfd6f5bea564a46b5": "7-Zip 曝高危代码执行漏洞,打开伪装压缩包直接被控", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503797&idx=1&sn=e8e58bddc7e1e53b3b290ce7f6c161f4": "雷神众测漏洞周报2026.5.18-2026.5.24", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451186845&idx=1&sn=2faa3e9338baeb8eeff238a63188eb27": "AI 助手类应用通用安全漏洞:间接提示注入可窃取企业敏感数据", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526116&idx=2&sn=1eb3d2f31e394abe74da622bc4d6cf66": "ConnectWise Automate 平台高危漏洞可导致攻击者绕过安全检查", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526116&idx=1&sn=2dba11975b0d1b5a35299b0e18f14c1d": "微软修复影响 SharePoint 多个版本的 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247518898&idx=1&sn=f57bdfaa9e7277834b118c25f343f848": "紧急:Akira勒索组织利用9.1分高危漏洞! SonicWall Gen6 LDAP MFA完整利用链还原", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247553517&idx=1&sn=f204a6c622f4bf3f8b7a237fffaeff8c": "安全419|一周国际网安资讯:漏洞利用首超凭证窃取 供应链攻击肆虐", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247516002&idx=1&sn=5398061bf3555207ae6f5e371823af67": "AI驱动防御:一国家要求AI辅助修漏洞,关键漏洞12小时修复", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247543009&idx=2&sn=6dd7c4c396a11e23f580df9f9c90f510": "Nightmare-Eclipse事件:零日漏洞武器化、供应链安全与国产化替代反思", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525835&idx=1&sn=84f87c4476ff4e967561fef371be747a": "【漏洞通告】NGINX ngx_http_rewrite_module 堆缓冲区溢出漏洞(CVE-2026-9256)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499490&idx=1&sn=ae6ad2c17beb5fae3bb2160c11724bf5": "RCE漏洞", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451186850&idx=1&sn=47552902a24f58aec66f7d057fefbdd8": "2026 年上半年全球常规被利用漏洞全景分析", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247586067&idx=1&sn=524608965c10b006f474e2f5d48e8d46": "AI安全不止一条路:海外热议360漏洞挖掘智能体", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506035&idx=1&sn=444122b3c72f3107dc00512bcab53a62": "【已复现】Apache PyFory 反序列化策略绕过漏洞(CVE-2026-48207)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247516011&idx=2&sn=98612c24ec1be4d53ba785c37d1332f3": "2026年上半年全球常规被利用漏洞全景分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652076993&idx=3&sn=36b9169ea87d92b89d36eae6b3f2528e": "【安全圈】Gitea 漏洞无需身份验证即可暴露私有容器镜像", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141476&idx=1&sn=c286b17576292779c7e4f92d0757d743": "别只盯漏洞!开源软件已是关键基础设施,企业必须重新审视风险", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458615842&idx=2&sn=ddbb5a83b03f8d6a6589d2251d0218f8": "立即更新!Notepad++ 高危漏洞曝光,可直接执行恶意代码", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497614&idx=1&sn=17725f77d54ae7fbd07e62e47c7e2d65": "【PoC 已公开】Linux Kernel CIFSwitch 提权漏洞,本地用户可直取 root", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506048&idx=1&sn=33a96fd147d2fe736053b1799d65b73f": "【已复现】Linux Kernel CIFSwitch 本地权限提升漏洞(QVD-2026-29453)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247553537&idx=1&sn=009d182d6634dc03d65f6c0004198c98": "Verizon发布新报告 漏洞依然是网络攻击者入侵企业的头号途径", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077025&idx=3&sn=65c045cad2521dcbcb76ffeb9fd9520e": "【安全圈】黑客利用 FortiClient EMS 漏洞推送信息窃取恶意软件", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141487&idx=2&sn=aab3f1735e81caacc42ec8cd678d002d": "Anthropic 发布 Opus 4.8,动态工作流强化复杂任务安全管控;CNNVD 发布最新漏洞周报:WordPress 漏洞居首,AI 安全风险凸显_ 牛览", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247543027&idx=2&sn=3e5df934d89825439620b89cc5ba6a8b": "不用漏扫也能查漏洞!罩妖镜+玄猫,三大场景解决用户真痛点", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525862&idx=1&sn=920a12a67e69e462696d3314cb9a660e": "【漏洞通告】Apache PyFory 反序列化策略绕过漏洞(CVE-2026-48207)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525862&idx=2&sn=e75184eb190a0a8ca4c8038630721fae": "【漏洞通告】Linux Kernel CIFSwitch 权限提升漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501721&idx=1&sn=4ede339288579eccad79666e8f729b1b": "CNVD漏洞周报2026年第21期", "https://mp.weixin.qq.com/s?__biz=MzUyMjk4NzExMA==&mid=2247508667&idx=1&sn=3557c4427627029226bda2a9de3a81ca": "APT-C-26(Lazarus)组织利用CVE-2025-55182与Copperhedge组件的攻击行动分析", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247553596&idx=1&sn=5c44517fc86e27cc50a929d65c50d0db": "安全419|一周国际网安资讯:供应链攻击肆虐 AI驱动漏洞成常态", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077214&idx=2&sn=fa5625366eefc6914680bb5245603722": "【安全圈】惠普 VoIP 电话现严重漏洞,或致企业网络遭入侵", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077248&idx=2&sn=9ca01538ec319d31197477dd6b17ccb8": "【安全圈】谷歌修复一款在野利用安卓高危漏洞,数百万设备受影响", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077261&idx=3&sn=0fdc29a5bdd38321cae81a6ef447631e": "【安全圈】Gamaredon 利用 WinRAR 漏洞对乌克兰目标发起模块化间谍攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077297&idx=2&sn=61e797a708a9e147ce97abc80cca35b7": "【安全圈】关键 Everest Forms Pro 漏洞被利用,可接管 WordPress 网站", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501738&idx=1&sn=987bb1e15f4c1586d4d6554df8f3b9ee": "CNVD漏洞周报2026年第22期", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077312&idx=3&sn=b9fba0c86b86feffe304adea43d44404": "【安全圈】Gogs 修复导致远程代码执行的严重零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077312&idx=2&sn=4bb85f6cd2431ba75617f1d8cbfcf05d": "【安全圈】Google 修复 2026 年第 5 个已遭利用的 Chrome 零日漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526255&idx=1&sn=b5c19c4120582e72f64c7e7a6e4c4ae4": "微软六月补丁星期二值得关注的漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077347&idx=1&sn=a6cdda39deff28a5a8e6137ce269653d": "【安全圈】AI 开发平台 Langflow 的路径遍历漏洞遭攻击利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077347&idx=3&sn=205d65becb1503b4f290566bb0042ef2": "【安全圈】Ivanti、Fortinet 和 SAP 发布多个严重漏洞补丁", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247586255&idx=1&sn=4c4868f5bc1567c1f98e57f13e69cea5": "攻防演练前,这679个漏洞建议先查一遍", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501776&idx=1&sn=9e18d5ef546f2d407a9023adc6dce79b": "CNVD漏洞周报2026年第23期", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247586269&idx=1&sn=69bbe8ecf24060ed8b241b827f1ed95f": "三项荣誉!360漏洞挖掘智能体登顶华为终端安全贡献榜", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499564&idx=1&sn=c93da6721292878bb3562a47bc5ad788": "AI会扼杀漏洞赏金产业吗?", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526319&idx=2&sn=dd48e102a2751f99b4ea33b644ef79a5": "OpenBSD 修复已存在27年的 PPP 协议栈认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506323&idx=1&sn=0b3116c8fb5209e97f3a493c18175675": "2026上半年你需要关注的高危漏洞合集!", "https://mp.weixin.qq.com/s?__biz=MzI1MzYzMjE0MQ==&mid=2247520428&idx=2&sn=ba831c615e816966bbfde36d7fe936a2": "直播预约|2026 火山引擎 Force 数据智能论坛 全新升级+核心能力抢先看", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247553764&idx=1&sn=6632b1156a621c397aab9c96c75328f1": "安全419|一周国际网安资讯:AI漏洞频发 供应链攻击持续升级", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247516111&idx=2&sn=84279cb2acb155ff13913e2e95b07dd3": "世界杯官方赛事系统曝漏洞:电视直播流未设置权限,可被任意查看篡改", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077453&idx=3&sn=8609933c2ae9419836b855460349c8ce": "【安全圈】Google Vertex AI SDK 漏洞允许攻击者通过存储桶抢占劫持模型上传", "https://mp.weixin.qq.com/s?__biz=MzIwMjcyNzA5Mw==&mid=2247495460&idx=1&sn=046839cdcab38da2de665b0a4e4cd972": "2026攻防演练必修高危漏洞集合(1.0版)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525926&idx=1&sn=e45c9ee8a56851cca66b2a7e8cb55a92": "【漏洞通告】Splunk Enterprise 预认证远程代码执行漏洞(CVE-2026-20253)", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499570&idx=1&sn=845974de723dbcd86e8358ada0bbc851": "折扣逻辑漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077470&idx=2&sn=e1fb1a4e832121ae7a088023cf1bf5f8": "【安全圈】微软 Copilot 被曝高危漏洞:点击一个链接,验证码、邮件全泄露", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649790099&idx=1&sn=17ef8b65a5934d609189271357051b6a": "Splunk AI Toolkit曝高危漏洞:CVSS 9.1,可远程执行任意系统命令", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451187085&idx=1&sn=dfebfb0d691ba51a7ecdf6f8cb8e5d79": "SearchLeak漏洞_微软365 Copilot如何沦为一键数据窃取工具", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451187115&idx=1&sn=7f5c9068ae5957b1cd79e9ece8c47195": "usbliter8:苹果 A12_A13 BootROM 硬件漏洞的完整利用路径", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526334&idx=1&sn=e353058df9e3673f97b4cec3ed0de092": "NGINX Open Source 中存在两个可导致RCE的严重漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526357&idx=1&sn=207133ea8154315db4af728cf84cf2e5": "“乌贼出血”漏洞:已存在29年,由 Mythos Preview 辅助发现", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526357&idx=2&sn=347d85dad46151e681d50e79e8824f61": "谷歌拒修 Kubernetes 操作器满分漏洞并拒发赏金", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501801&idx=1&sn=acf5f19f6f595e722444ab2c2bec59a4": "CNVD漏洞周报2026年第24期", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526367&idx=1&sn=75309fe9323e5ed5c44c05f759fa40d9": "Libssh2 严重漏洞可导致攻击者执行远程代码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526367&idx=2&sn=873a39cf55d45ffab906c2a6ab004056": "“冬虫夏草”供应链漏洞影响数千家组织机构的代码仓库", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077548&idx=2&sn=320021d6e2cddac1997f86034d3b1daa": "【安全圈】DifyTap:四个漏洞使超过 100 万个 AI 应用面临风险", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525981&idx=2&sn=2bc0ce71e97816891cf1068afa06d4e7": "【漏洞通告】Cisco Unified Communications Manager WebDialer 服务器端伪造请求漏洞(CVE-2026-20230)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525981&idx=1&sn=d4dd00ac4babcd8f28fa3470d74cdafa": "【漏洞通告】FFmpeg MagicYUV PixelSmash 解码器堆越界写入漏洞(CVE-2026-8461)", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247493232&idx=1&sn=af7a21ab113b9f220345289c75ef5b3c": "【已复现】Gogs 组织名称路径遍历导致 Git hooks 远程代码执行漏洞(CVE-2026-52813)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526397&idx=2&sn=81d412b7caec3eb3575207cb16e7211b": "CISA:Lantronix EDS5000 严重漏洞正遭活跃利用", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526397&idx=1&sn=6fcea84bb393afc9f0c716a1a05472c6": "cURL 严重漏洞已存在25年,影响300亿台设备", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247486133&idx=1&sn=ef5d18c0757439c59d128b6f0a72dc8e": "Microsoft Exchange Server 服务器端请求伪造漏洞(CVE-2026-45504)漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247525993&idx=1&sn=e0f64139cc1145ddb87559c952471a0a": "【漏洞通告】Gogs 目录遍历漏洞(CVE-2026-52813)", "https://mp.weixin.qq.com/s?__biz=MzUzOTI4NDQ3NA==&mid=2247485070&idx=1&sn=d4483a9d95a91235a17c255b383cdcbc": "[译苑雅集Vol. 12]高强度使用 Mythos 两个月后,Cloudflare 打造了一套不依赖单一模型的企业级漏洞发现工程系统", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499608&idx=1&sn=dbc0176bdee0182256a678e443f2aa2f": "用AI挖了隐藏N年的组合拳漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617012&idx=2&sn=1b98a307ca4be3e02485dd2f2f897a75": "【重磅上线】系统0day安全——主流企业防火墙漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617012&idx=1&sn=7807b0af5bbb8bd7d1a6b67e998cf678": "探索CVE-2026-31431的热补丁修复方案", "https://mp.weixin.qq.com/s?__biz=MzU3MTY5MzQxMA==&mid=2247485280&idx=1&sn=1fcdc3c1ef0b8299952a470ef99300d9": "最新Linux的本地提权漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077584&idx=1&sn=2e19796b96a8daf5fd98c9b38425cca3": "【安全圈】三星 Galaxy 手机被曝高危安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526443&idx=3&sn=920c195bb40bbe944e31328e511161f6": "Amazon 的AI编程助手高危漏洞可导致代码执行和敏感云环境访问", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526443&idx=2&sn=c847b004b20a9d1f991dad8dcd81c7b4": "DirtyClone_ Linux 内核新漏洞,通过克隆的数据包获得根权限", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506467&idx=1&sn=4289470a02c8bae44210c05cf1acff0b": "【已复现】Linux Kernel DirtyClone 本地权限提升漏洞(CVE-2026-43503)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077594&idx=2&sn=40ec8125a630cd3027a7e95340a34fbc": "【安全圈】Amazon Q 漏洞使恶意代码仓库可窃取云凭据", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247494966&idx=2&sn=76ba8dea5a546da773d9216f579fe321": "【CVE-2026-22078】关于O+互联未对IPC通道进行身份校验导致本地提权漏洞的致谢公告", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501817&idx=1&sn=8871b7ed57b9d9ae9943bdef4185521f": "CNVD漏洞周报2026年第25期", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247553911&idx=1&sn=e62504af47360876f9b6cfc1374de34f": "安全419 _ 一周国际网安资讯:Cisco曝9.8分漏洞 VulnGPT提升3倍漏洞挖掘效率", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508756&idx=1&sn=4e23ef9150204cd3bd3f5ab93b9d7a6b": "微步 XGPT 发现 Apple 内核漏洞并获致谢", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617129&idx=3&sn=18432103dc762bac8fda66d695a25548": "【重磅上线】系统0day安全——主流企业防火墙漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzUyMjk4NzExMA==&mid=2247508724&idx=1&sn=32fa81b1b5252242419bdb06df6423c4": "APT-C-20利用explorer劫持和LSB隐写等技术实施隐蔽攻击活动分析", "https://mp.weixin.qq.com/s/683mJo7AvkQ46B0nQChP5g": "基于 Claude Code 构建可控,持续漏洞挖掘", "https://mp.weixin.qq.com/s/63ss2-c4Jd0rpMfrHMmdIg": "学习一手价值7000块钱的漏洞姿势", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649790145&idx=1&sn=5d7762af4c15ab9b0f7d4ee3a075e73b": "RedAmon:串联侦察、漏洞利用与后渗透的 AI 安全工具", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499629&idx=1&sn=ce31d190bddea6d193475e463b76fb08": "第一个高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIxMjEwNTc4NA==&mid=2652998993&idx=1&sn=57d8e63ea2653f4b5a8ab9176f320ca0": "先知通用软件漏洞收集及奖励计划第十二期 正式开始!", "https://mp.weixin.qq.com/s?__biz=MzUyNzc4Mzk3MQ==&mid=2247494971&idx=1&sn=0f700a376cd6d1ba91081a43a8c0cdd4": "关于 O+ Connect PC 端漏洞暂停收录的公告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526489&idx=1&sn=70f1d92bbf820f6f31eaeaed6636eb22": "Citrix 修复可导致文件读取和拒绝服务的多个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526489&idx=2&sn=f1c623643e04146a17dfc7725875808f": "Cursor IDE 严重漏洞可用于零点击提示词注入攻击", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506500&idx=1&sn=0eaa84cc141e483ba8ddda80a0a270ee": "【已复现】Gitea act_runner 容器逃逸漏洞(CVE-2026-58053)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077635&idx=2&sn=ff1b58c3db45fe363feb913cafcb6c3b": "【安全圈】Chrome 382漏洞速更!", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508758&idx=1&sn=4ec1a3cca91613fa4e71c40032b2297f": "libseccomp 修复数个漏洞,可导致绕过seccomp限制", "https://mp.weixin.qq.com/s?__biz=MzI3Njk2OTIzOQ==&mid=2247487741&idx=1&sn=dec4a1ed5fdc36e63a6f40dee0774a7c": "【AI复盘】Copilot三阶段提示注入漏洞链", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617262&idx=3&sn=4b442adefc6b975648d669dffbdd4c31": "ClamAV曝高危漏洞:远程投毒即可“打崩”杀毒引擎,Cisco紧急发布修复", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499637&idx=1&sn=35bbc3d75068d847fddc117055773678": "白盒审计出的一个RCE", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247586528&idx=1&sn=ecb93cc96fdfe475da8529bf34eb54f7": "7月20日!360 AI漏洞挖掘智能体 “图龙锋” 开放试用", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264209&idx=1&sn=6dc786f060d3a02efb092ca8612b82cc": "聚焦 _ 2026年度基础软硬件产品漏洞生态联盟大会成功召开", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526496&idx=1&sn=187a180a17fcdb0443b13c0175b0bcd6": "Adobe 修复多个 CVSS 满分漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526496&idx=2&sn=99d4d6361012ecfa264bb5958914d11c": "JetBrains 修复 CVSS 满分漏洞,影响1500万开发", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077646&idx=3&sn=114dac59899df5c95325aefab44a2833": "【安全圈】CISA:Microsoft SharePoint RCE 漏洞现已被积极利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077646&idx=2&sn=030e4557b02a843ad920a01a2670b8fe": "【安全圈】Cisco 确认 Unified CM 漏洞已在野外被利用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617300&idx=3&sn=a04d95311bbf28a2da1a37d0cac0b8c6": "ChatGPT下载链路曝高危漏洞:一句“误导性对话”竟可触达系统文件", "https://mp.weixin.qq.com/s?__biz=MzIzMTIzNTM0MA==&mid=2247499641&idx=1&sn=7f30c697fbeccd68201903d9390d8277": "Chrome V8 沙箱逃逸漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500609&idx=1&sn=7587d82df5f38fbecacec0e73313c22f": "蜜罐抓到的几个 RCE 漏洞利用情报", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247496716&idx=1&sn=fc7a8879079acd68f4c7ba4266acadd7": "【风险提示】天融信关于Linux Kernel本地权限提升漏洞CVE-2026-46242(Bad Epoll)的风险提示", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077654&idx=1&sn=a686c79c41874b66d1f9e9ea4bf7abf7": "【安全圈】Linux惊现_Bad Epoll_零日漏洞,服务器和安卓均中招", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077654&idx=2&sn=1ab239e93225350d7a4fd85eaf6f1aa2": "【安全圈】今天是deadline!微软SharePoint高危漏洞正在被疯狂利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077708&idx=2&sn=0f773845ae723911c9ff2e5798a2c063": "【安全圈】6 月高危漏洞数量暴涨", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077708&idx=3&sn=864b0445b461bd238e8f78e65a4e38ec": "【安全圈】Linux本地权限提升漏洞「Bad Epoll」曝光:CVSS 7.8", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497081&idx=1&sn=1710ca9cc571ec4dfcc6e0025086e739": "CNVD漏洞周报2026年第26期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497081&idx=2&sn=7af90f016bbe05799c5a175dfb16bc17": "上周关注度较高的产品安全漏洞(20260629-20260705)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526510&idx=1&sn=5d8dd588bd5df97068ed04c486fd6458": "Bad Epoll:Linux 内核新漏洞,导致低权限用户获得 root 权限", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501840&idx=1&sn=f9658306fa118df2760e04539184aa22": "CNVD漏洞周报2026年第26期", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506533&idx=1&sn=8ae63928c0dadc6f23fbbaa4966afefd": "【已复现】Citrix NetScaler 内存越界读取漏洞(CVE-2026-8451)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141847&idx=1&sn=192957ac8faff837b087c64ed0882d9f": "AI安全现状:AI 漏洞风险是传统软件 2.7 倍,修复差距高达 25 倍", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486814&idx=1&sn=cde7be827720cb6d8b5c885358f84ef3": "OpenAI Daybreak平台推出自动化漏洞检测与修复功能", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617318&idx=2&sn=5fefff506b6f81b7815f92895ee5ca9b": "Linux再曝“秒提权”0day:一个看不见的6指令窗口,黑客可直通root", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617318&idx=3&sn=07f37875dfcfcb09667c640cc9554ea6": "系统0day安全——主流企业防火墙漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503864&idx=1&sn=5a6a9cf7033ad7a586c59b69e009da52": "雷神众测漏洞周报2026.6.29-2026.7.5", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497800&idx=1&sn=6157c390d7c8d692950917c03807bc77": "6月必修漏洞清单:涵盖Gogs、Vite等多组件高危漏洞,务必速查", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526532&idx=2&sn=4f737299033d13d7cabebbe6acee6b34": "BeyondTrust 修复多个严重的认证绕过漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526532&idx=1&sn=cadb21f6556d420bb88549f455cfa643": "已存在16年的 Linux KVM 漏洞可导致从客户虚拟机逃逸至宿主机", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247519409&idx=1&sn=dcc6363e9057f950e57e15f52e0efa1b": "一封邮件、零点击、零门槛:拆解 2026 年最让企业 IT 头疼的 Exchange XSS 攻击链(CVE-2026-42897 )", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077739&idx=3&sn=cf0cb509a64fb70946bc756edcf48216": "【安全圈】FatFs 中的漏洞使 IoT 和嵌入式设备面临风险", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649790196&idx=1&sn=3f00c235b885725bac7aae84b3f9860e": "T3MP3ST 安全框架:集成 35 款工具,将 AI 代码智能体转化为零日漏洞挖掘器", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141868&idx=2&sn=8dd0815ebc49a17b1feecb02dd6321cf": "AI 大幅拉低漏洞挖掘门槛,开源安全守夜人该如何突围?", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617378&idx=3&sn=79c21f6f53344bd046ddfeac65446951": "潜伏16年!KVM 跨架构逃逸漏洞曝光,AWS、GCP 全线告急", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264398&idx=1&sn=9eb8018925fde12a00e3d79c9410dc4a": "CNNVD _ 重要安全漏洞通报(2026年第四期)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526554&idx=1&sn=62d794dc43dc49ccb43d31be669f3712": "Linux 内核0day已修复:隐藏19+年、利用稳定性极高、影响极广", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247519414&idx=1&sn=06331b7197bacc2ff353c3934da04352": "BeyondTrust 远程接入平台四枚高危漏洞全拆解:从认证绕过到_零信任_信任崩塌的完整攻击链", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077749&idx=3&sn=b6213ef302076e810b733f47e915bdb1": "【安全圈】新的 Januscape Linux 漏洞允许在 Intel 和 AMD 设备上实现虚拟机逃逸", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651141887&idx=2&sn=6c24394700ccab0157676de8a3636185": "CNVD 本周漏洞态势研判:零日漏洞占比超八成,政企漏洞事件环比大幅上涨;Microsoft加速采用自研MAI模型,降低对OpenAI依赖_ 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486826&idx=1&sn=6ef65917299f0993768630dff5d5b3df": "黑客利用AI开发漏洞利用、攻击自动化", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526586&idx=1&sn=19edacadf8bc184c678b7e5c5ce9ac6b": "GhostLock:已存在15年的内核 UAF 漏洞,影响 Linux 所有发行版", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526586&idx=2&sn=3757390c1aa4853a8fbc99be4bb1c55b": "优倍快:注意这个CVSS满分的 UniFi OS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247486213&idx=1&sn=5ebbcaa6debb1eb23b13260f2489eb62": "本周漏洞速递|13个高危漏洞预警+漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506571&idx=1&sn=c291af83bbb50b32b4cefb969edf12c5": "【已复现】用友U8cloud XChangeServlet SQL注入漏洞(QVD-2026-38848)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247553966&idx=1&sn=413030cb70038a4d60cca431a407d085": "安全419|一周国际网安资讯:AI平台漏洞集中爆发 勒索软件向内核演进", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247526036&idx=2&sn=2a1b3160d6537cece6ed63bf95562c47": "【漏洞通告】Linux Kernel GhostLock 权限提升漏洞(CVE-2026-43499)", "https://mp.weixin.qq.com/s?__biz=Mzg2NjgzNjA5NQ==&mid=2247526036&idx=1&sn=b6c55cfbcccaf3a13fe0dddbfabab1cb": "【漏洞通告】XWiki Platform Old Core 目录遍历漏洞(CVE-2026-34151)", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451187608&idx=1&sn=d0397197cbc8664d3cdba598ba15c196": "安卓17 IonStack全链路0day漏洞利用链", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526598&idx=2&sn=10c96c869a77aaf19ae7c16ff0c786cf": "PAN-OS 高危缓冲溢出漏洞可导致任意代码执行", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526598&idx=1&sn=d941c2cb5c34c57f75d892d6de97004a": "微软修复可获得系统权限的 RoguePlanet Defender 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4MzI4MDg1NA==&mid=2247485439&idx=1&sn=7519d22f53a5544d65e90a280e73a7a9": "关于暂停接收同程旅行旗下子公司业务漏洞公告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506579&idx=1&sn=91e99060ffe9719d45562a11733bdd78": "安全热点周报:Adobe ColdFusion 曝高危漏洞,披露后两小时内即遭利用", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077782&idx=1&sn=7618468fc5072e3fefd2e8f69fe0eefa": "【安全圈】Windows Defender又爆提权漏洞,赶紧打补丁", "https://mp.weixin.qq.com/s/oyyF6qKDdY-WN6gL9b7D-g": "教育行业SRC供应商漏洞变化 (2026-07-11)", "https://mp.weixin.qq.com/s/NmcYehhagAlagbfAifzTJQ": "教育行业SRC供应商漏洞变化 (2026-07-12)", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077805&idx=3&sn=25c8e82adf36c3d2c1df13e21c11b131": "【安全圈】从路由器到服务器:潜伏 13 年的 U-Boot 漏洞曝光,威胁数百万设备", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247488305&idx=1&sn=67ce6e9247931c0962ac6703689663fe": "悬赏令:寻找数字世界的守夜人 _ DayDayPOC 0day漏洞悬赏计划正式启动", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497100&idx=1&sn=2d293d88cb0b49d8ea0a7615081e96d2": "CNVD漏洞周报2026年第27期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497100&idx=2&sn=ac9146bfb4881155b3fb28465f9109c4": "上周关注度较高的产品安全漏洞(20260706-20260712)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526606&idx=1&sn=98ad31e009af96d9536be560cb9f7fa3": "Zimbra:速修复这个严重的 Web Client XSS 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247486221&idx=1&sn=a21d8e52aca4ed0fe45e5f3eb149e821": "最新高危漏洞与零日威胁(底层与AI层面)", "https://mp.weixin.qq.com/s/-BhEYxGfOvBApDTZ9dZmrA": "教育行业SRC供应商漏洞变化 (2026-07-14)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264647&idx=5&sn=729fd6ff91322e692c8fe4a80e8db5f8": "评论 _ 堵住“仅退款”规则漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526614&idx=1&sn=52998f2ed993d525f8db65adf3507e3a": "ServiceNow 严重漏洞导致远程攻击者执行恶意代码", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501866&idx=1&sn=f6c869743e237ff0a2385b6d5b9bb4d0": "CNVD漏洞周报2026年第27期", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506606&idx=1&sn=623d2ac0057653292d595cf9145bbe3f": "【已复现、利用难度高】Windows HTTP.sys 整数溢出漏洞(CVE-2026-47291)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617595&idx=3&sn=c738c70df4d2631bd66ccd4ca2233bba": "自研LangGraph漏洞挖掘工作流 · 高阶实训 · CVE全链路复现", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503871&idx=1&sn=7f1d3e71b700a3ce4e00c973c2ff2c95": "雷神众测漏洞周报2026.7.6-2026.7.12", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526630&idx=1&sn=3f9411edee6fd9805cd5ac7a7991a3c2": "SonicWall:立即修复已遭0day攻击利用的 SMA1000 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526630&idx=2&sn=0dd3f439ec51453fe46eef04eb0970fe": "微软7月补丁星期二修复史上数量最多的漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0MDY1MDU4MQ==&mid=2247587754&idx=1&sn=d648e4127937ada23eafb8c38e3332f1": "XCon2026议题__一触即溃:AI赋能的LLM推理引擎模糊测试及基础设施漏洞挖掘", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506617&idx=1&sn=c75e95b55101fd5c8ab87eee2f9bbde4": "微软7月补丁日多个产品安全漏洞风险通告:2个在野利用、43个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247516266&idx=2&sn=ac47a71404723b44c902e23269251553": "“金鹰计划”启动:美国政府依托前沿AI构建漏洞发现与修复协同体系", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247516266&idx=1&sn=4311301b6135b944202304ed3ecd2e55": "伊朗利用电信漏洞实时监视美军位置,疑似用于作战打击行动", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247535346&idx=2&sn=85d009b76b2a3781a0547b62387c2759": "2026-07微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617607&idx=2&sn=7521a846e88151a555ba4193940755c8": "微软史诗级补丁日:622个漏洞、两个在野0Day", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451187692&idx=1&sn=3bbdbc69fac5f16ca1fc30e077e770c9": "SS7 漏洞与广告技术,如何盯上美军中东人员", "https://mp.weixin.qq.com/s/-2A5Sscw0Y0eAj-4f6eUaw": "教育行业SRC供应商漏洞变化 (2026-07-16)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526636&idx=2&sn=fe817375b8e1b3316d7d8bc37bfe109f": "CISA:立即修复这些已遭利用的 SharePoint 漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526636&idx=1&sn=7a16b14bc318e77d8eaa96cd6c7f7025": "Zoom:注意这个严重的账户接管漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077869&idx=2&sn=afe6269498d72500b766add22dac0d26": "【安全圈】SonicWall爆出两个零日漏洞,黑客已在利用", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508760&idx=1&sn=dc6529b7677375b6b25b63a962ed7fed": "微步情报局发现并协助修复Eclipse Jetty 12 路径穿越漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NDA5MDYyNA==&mid=2648257342&idx=1&sn=dfb0ede540af1cb3a4b311414e6537a0": "用缓冲区溢出漏洞把矿卡变成 A100", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617641&idx=2&sn=c9db90ecf64e7fc1a85189aaaeff52d4": "又撕微软!无补丁 LegacyHive 0day,低权限可读取管理员注册表数据", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497104&idx=1&sn=8762ad9c1040c82f3d1cb9aef1b80e41": "关于微软SharePoint存在远程代码执行漏洞的安全公告", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526654&idx=2&sn=d8f23341320a2fc13ca387fb35b9f4ad": "n8n 令牌交换漏洞导致攻击者以其它颁发者的用户身份登录", "https://mp.weixin.qq.com/s?__biz=MzkwOTM0MjI5NQ==&mid=2247488574&idx=1&sn=af475a6e9ac889cfc9f2df80dfad2543": "50万+漏洞数据背后,墨菲安全想解决国产大模型的一个关键问题", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506691&idx=1&sn=948c5c08a0dfa7e76a03bf5ac4537588": "微软创纪录的漏洞补丁月意味了什么", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077880&idx=3&sn=b5b8579b32d4941fcefd1b45a0e197f9": "【安全圈】微软 SharePoint 高危漏洞遭快速利用:补丁窗口再次被压缩", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486847&idx=1&sn=87eb2c52f17ea3dc9c2f0be230c36633": "GPT-Red:OpenAI的AI 红队系统,攻击自家模型、挖掘安全漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617657&idx=1&sn=3610a9f9925a214f6b8918df666db2e6": "CVE-2022-0847 Dirty Pipe 漏洞原理深度分析", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617657&idx=3&sn=b0a57e8b36ffb50937e75a2beb0992be": "你的摄像头可能被劫持!TP-Link两款设备曝高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077891&idx=2&sn=1e6c79980d3efbe5351e4760aa11aa3c": "【安全圈】WordPress致命漏洞:无需密码即可远程控制", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247488506&idx=1&sn=47235d2dccf2695a9575db35928d19ec": "第170篇:2026年攻防比赛中漏洞类型总结(AI改变漏洞挖掘方式)", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247505450&idx=1&sn=ae635e290bb3eae061844bce426261c4": "xAI Grok Build 开源次日 0day 挖掘:信任机制绕过与 AI 编程工具的安全碎片化", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506720&idx=1&sn=395e656dda950f7619cc76f2d3e05d1e": "【已复现】无需账号密码即可 RCE——WordPress REST API 批处理路由混淆与 SQL 注入组合利用安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzI1NDg4MTIxMw==&mid=2247486761&idx=1&sn=b116dd76dfb5663aa23bef2ffb035496": "【漏洞预警】WordPress wp2shell 紧急漏洞预警:CVE-2026-63030 _ CVE-2026-60137 未授权 RCE 链", "https://mp.weixin.qq.com/s?__biz=Mzk0NTU5Mjg0Ng==&mid=2247492898&idx=1&sn=a509a16301531642ba529a3d28a11e71": "WordPress 核心框架严重漏洞 wp2shell :从路由错位到 SQL 注入再到 RCE", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497119&idx=1&sn=e308a231b1a56233979f0e7104fbd577": "CNVD漏洞周报2026年第28期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497119&idx=2&sn=feaf4461e7f4799caa2985157ccb194d": "上周关注度较高的产品安全漏洞(20260713-20260719)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526666&idx=2&sn=e3e7dab6e1c8b4dd6255180cf5b117a1": "wp2shell RCE 严重漏洞获紧急补丁,影响数亿WordPress 站点", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247497065&idx=1&sn=96b10823e37a18659b50ab9166138d92": "【风险提示】天融信关于WordPress Core预认证远程代码执行漏洞链wp2shell(CVE-2026-63030)的风险提示", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247554083&idx=1&sn=de36ce68dca4d7804ebec938f9120ed8": "AI漏洞挖掘激增 企业急需重构漏洞管理体系", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077928&idx=1&sn=0ef9805dd0a523c60d38ae8873a9d0bd": "【安全圈】WordPress Core _wp2shell_ RCE 漏洞利用代码已公开,请立即修补", "https://mp.weixin.qq.com/s?__biz=MzU0MzgzNTU0Mw==&mid=2247486128&idx=1&sn=791ba32939688d0a2e21fdf74b02af4b": "2026年网安_软工_AI顶会基于Agent 的漏洞挖掘、验证、利用与修复的论文汇编", "https://mp.weixin.qq.com/s?__biz=MzI1NDg4MTIxMw==&mid=2247486768&idx=1&sn=9c698e79b089f7118865d81d0ac09e10": "【漏洞预警】Fastjson 远程代码执行漏洞预警:1.2.68–1.2.83 受影响", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617674&idx=2&sn=f646ceb2019b4a6ace17085153503c60": "潜伏15年!Nginx核心漏洞曝光,无需密码即可远程拿下服务器", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247492651&idx=1&sn=e497a59c9aa813cd958277f2a0849778": "【漏洞通告】WordPress远程代码执行漏洞(CVE-2026-63030&CVE-2026-60137)", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247493249&idx=1&sn=117bdf1acec5e7493910c2335141d0c5": "【已复现】无需 gadget、黑名单失效--Fastjson 1.2.83 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503878&idx=1&sn=0f08b2a64878c9e4b82b193c9a481d60": "雷神众测漏洞周报2026.7.13-2026.7.19", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247488318&idx=1&sn=1cb8e928879c0fcccd787994b39edbdf": "漏洞预警丨WordPress Core 未授权远程代码执行漏洞(CVE-2026-60137)", "https://mp.weixin.qq.com/s?__biz=Mzk0MTM4NzIxMQ==&mid=2247530009&idx=1&sn=101c81bd3b9b13aa9cff78872e481180": "使用Memfit复现最新的Fastjson远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497827&idx=1&sn=3ec8c27389f00958493443b3d15cdfa4": "腾讯云安全已支持防护最新Fastjson远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526682&idx=3&sn=ecc7543242c5bf90b3396d150d52ce48": "7-Zip 新漏洞可导致构造的 XZ 文档文件在解压过程中执行代码", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526682&idx=2&sn=ec15c9ace9d49725ba668dd6da12949f": "【已复现】Fastjson 1.2.83 远程代码执行漏洞(QVD-2026-43021)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526682&idx=1&sn=7610fee3a9f96ecb3c9e96f04db49188": "已存在15年之久的 NGINX 漏洞可导致RCE", "https://mp.weixin.qq.com/s?__biz=MzI5MDQ2NjExOQ==&mid=2247500626&idx=1&sn=dca535f3a68a0add8cba6b4b75cf8cdc": "关于 Fastjson 1.2.83 RCE 漏洞,看这一篇就够了,包含漏洞细节与影响面分析!", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501894&idx=1&sn=03478f7d71c61599ba07c61c9bda51f0": "CNVD漏洞周报2026年第28期", "https://mp.weixin.qq.com/s?__biz=MzU4NzUxOTI0OQ==&mid=2247499497&idx=1&sn=ae659465485d3c3071c926abe34c6969": "成果分享 _ [ACM CCS 2026] PHPBench:自动化合成高质量Web漏洞基准数据集", "https://mp.weixin.qq.com/s?__biz=Mzg3MDAzMDQxNw==&mid=2247497072&idx=1&sn=8fca263a9a6d7154f01c872f45eeda83": "【风险提示】天融信关于 Fastjson 1.2.83 默认配置下远程代码执行漏洞的风险提示", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506836&idx=1&sn=3d27e287c7014529ffc69619bcafa121": "【已复现】Fastjson 1.2.83 远程代码执行漏洞(QVD-2026-43021)安全风险通告第二次更新", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508767&idx=1&sn=a30a94ada407131159de8052f9145269": "已捕获攻击,Fastjson 远程代码执行漏洞二次更新", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247492688&idx=1&sn=9a2d77050851934abb5d9cd375b6c2be": "【漏洞通告】Fastjson 1.2.x无需gadget远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247493266&idx=1&sn=2d09079d7c72f570bd9569981bfa06f0": "【已支持检测&常见问题汇总】Fastjson 1.2.83 远程代码执行漏洞二次更新", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247488327&idx=1&sn=ae854a7a8a2f88e193f36763fc58c272": "漏洞预警丨fastjson @JSONType 远程类加载远程代码执行漏洞", "https://mp.weixin.qq.com/s/-6XB3qf6GO94PPooKw1tpQ": "SQL注入漏洞详解,不信你还听不懂", "https://mp.weixin.qq.com/s/ZEAef-FWgZHo3Yn0kvSihw": "各位师傅见过这么忽略漏洞的吗", "https://mp.weixin.qq.com/s?__biz=MzI4MzcwNTAzOQ==&mid=2247545924&idx=1&sn=d396e79ad63b5182bf60d63a3e8c70ff": "Goby POC 接入 LLM:让漏洞验证从硬匹配走向智能辅助判断", "https://mp.weixin.qq.com/s?__biz=MzkwNzMyNjU0MQ==&mid=2247484341&idx=1&sn=522af3f09633a3a50db2604e6a6c1435": "2026年了,核弹还是fastjson,fastjson1.2.83 RCE是怎么回事?", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526704&idx=1&sn=f282bc7a3fa4fff9fe57440a56757187": "Zimbra 修复严重的 SNMP 命令注入和 XSS漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506847&idx=1&sn=23a4dd4b28b5470da2ae125c347f5a5c": "Oracle 2026年7月补丁日多产品高危漏洞安全风险通告", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508772&idx=1&sn=c2ce0975b5118b7fbc726a6ea125417b": "NGINX 新漏洞,特定配置下可实现远程代码执行(CVE-2026-42533)", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247488337&idx=1&sn=621a9719182247265a2067568c761593": "漏洞预警丨Redis stream 消费组 NACK 双重释放远程代码执行漏洞(CVE-2026-25243 补丁绕过)", "https://mp.weixin.qq.com/s?__biz=MjM5NDU3MjExNw==&mid=2247516592&idx=1&sn=fcc48ad5c78269e3739fd1626330d429": "比赛规则 _ 第二届OpenHarmony CTF(Capture The Flaw)智能漏洞挖掘赛", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664264985&idx=3&sn=542068544a5ddf99e42f05c63179de5f": "CNNVD _ 关于Oracle多个安全漏洞的通报", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497835&idx=1&sn=0fa58497b63e1139bbe65b6d38f852bc": "Redis 再曝远程代码执行漏洞,多版本受影响", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506858&idx=1&sn=488974dbbfedaf4327deea3d4451900b": "年中报告 _ AI 重构攻防:2026 漏洞态势深度解读", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247554123&idx=1&sn=a192e2c79e7607b39e6ca571e20d9fe5": "平安PSRC关停背后:大模型“漏洞海啸”与白帽经济的黄昏", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077963&idx=2&sn=6d462247bfe833f7f1fd8cd4e68fb750": "【安全圈】Ubuntu提权漏洞曝光,普通用户可直取root", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077963&idx=1&sn=fbc6bc660881348ada2f776fd0cc1e20": "【安全圈】稳定币归零只需一步:预言机漏洞让350万美元蒸发", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617771&idx=2&sn=0ce04995a5a97075abbd65f5e052b951": "比Dirty COW更致命?Linux内核9年漏洞曝光:普通用户10秒夺取root权限", "https://mp.weixin.qq.com/s?__biz=MjM5NjQ5MTI5OA==&mid=2651783046&idx=1&sn=a18ff849165bb78a263bdc32c4f55309": "让AI离开温室,走向动态世界:MineExplorer揭示顶级多模态大模型被忽视的能力断层", "https://mp.weixin.qq.com/s?__biz=MzkwNzMyNjU0MQ==&mid=2247484346&idx=1&sn=749018d8cbde606a72975d9cdadd6915": "Wordpress7.0 wp2shell 未授权RCE(CVE-2026-63030 _ CVE-2026-60137)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526724&idx=2&sn=0a25dcdaee8bc34e615e2810c85393ef": "Claude Cowork 漏洞可导致虚拟机逃逸,访问Mac 文件", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526724&idx=1&sn=e450a187189ae76bc556333fbc37648d": "Exim 目录遍历漏洞可导致提权攻击", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652077973&idx=3&sn=80897a1548847b963e2ede10cd064e0c": "【安全圈】数百万辆车可被远程熄火!这个漏洞比你想的更恐怖", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651142060&idx=2&sn=af18310d2c276b39f3d8578227ed9fa1": "CNVD发布上周漏洞周报:上周新增漏洞 2613 个数量大幅反弹;Google将CodeMender推向企业,AI实现漏洞验证与自动修复_ 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg5ODUxMzg0Ng==&mid=2247501882&idx=1&sn=288ad43b9c6ea1554a94c7dd61473d7e": "G.O.S.S.I.P 特别推荐 2026-07-24 “千里码”安全漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617790&idx=2&sn=a5bd468f11bd6ba992a4c51df69aec0a": "AI代理90分钟挖出19个Redis零日?Kimi K3再曝RCE利用链", "https://mp.weixin.qq.com/s/PnGTTACKPwU9dihhmsveeQ": "SRC漏洞挖掘实战培训招生第一期|附带文末抽奖", "https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451187808&idx=1&sn=2607e55afbe7f12de9eaa6b9a738fe80": "研究人员公布usbliter8 硬件漏洞越狱iOS 27方案", "https://mp.weixin.qq.com/s/1WX1ihuin8GEHFesJFKJVQ": "国内挖漏洞众测平台最全合集,拿赏金必看", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497136&idx=1&sn=6afa6bbee11b2b7fa66ca5a4b21a0df7": "CNVD漏洞周报2026年第29期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497136&idx=2&sn=982dd172fe8bf161e4ce77ac7d323754": "上周关注度较高的产品安全漏洞(20260720-20260726)", "https://mp.weixin.qq.com/s/KNJxeZ8XfRukdKlWOe30ag": "Fastjson2劲爆RCE!!!官方临时缓解建议。", "https://mp.weixin.qq.com/s/8EoP3RnjXrsoEcbz5ddHkw": "教育行业SRC供应商漏洞变化 (2026-07-27)", "https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247495356&idx=1&sn=9844e7939456e9d50a409a01c9f3c240": "AI安全案例分析 _ OpenAI模型自主突破测试边界,利用漏洞入侵Hugging Face", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497858&idx=1&sn=c1bac134fc263afa948bad82607a9028": "Fastjson2 现远程代码执行漏洞,建议立即升级官方补丁", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526733&idx=1&sn=4c426f7be66cbd1f1bd9469fa33cd1f2": "NodeBB 修复由AI发现的8个漏洞,可暴露管理员访问权限和私密聊天记录", "https://mp.weixin.qq.com/s?__biz=MzU5OTQ0NzY3Ng==&mid=2247504535&idx=1&sn=d97f005160b6ebbef3c99e0f0653ffbd": "转载_AI发现漏洞速度远超修补能力 网络风险持续累积", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649790269&idx=1&sn=f865dda3e4caf7f67ccabcfa99489c0f": "PentesterFlow —— 面向渗透测试人员和漏洞赏金猎人的 AI 自动化工作流工具", "https://mp.weixin.qq.com/s?__biz=MzkzMjI1NjI3Ng==&mid=2247488547&idx=1&sn=23b13837c5635acb63ceda6441bc0b2f": "第172篇:方程式远程溢出漏洞检测工具箱v0.68版本发布,大幅度更新", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508781&idx=1&sn=55335d8904b3febd9c1e254a78fc2cc2": "已复现 _ Fastjson2远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzU0MzkzOTYzOQ==&mid=2247490088&idx=1&sn=a14e827ad3ebfd1e69db9dacd0ebd09c": "【原创0day】Fastjson2 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617805&idx=2&sn=e1ee118af48566137e4ba298017311d1": "Fastjson 1.x 新高危RCE漏洞被野外利用,官方尚未推出正式补丁", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247493359&idx=1&sn=915333aa5eb9d96178927a9e8851ba71": "【漏洞通告】Fastjson 2.x远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwMDk1MjMyMg==&mid=2247493275&idx=1&sn=84a8090f201a655ff1e019c2edd57dba": "【原创0day】Fastjson2 远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501929&idx=1&sn=6a609170a1a228d71e3ee8c86b5fdf19": "CNVD漏洞周报2026年第29期", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247486289&idx=1&sn=7bdb8c282b7ff5ac348a4cb4650ad83d": "hvv 2026 - 最近Redis的RCE 怎么看", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247554223&idx=1&sn=a404451379d96d60a86b5f150e7deddc": "安全419|一周国际网安资讯:勒索攻击手法升级 AI代理漏洞频现", "https://mp.weixin.qq.com/s?__biz=MzI4NDY2MDMwMw==&mid=2247516333&idx=1&sn=935d953ebc91d33599251a5e208f9e17": "无法快速修补漏洞的技术供应商,或将被禁止进入政府市场", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078052&idx=3&sn=1b7a5451da0901f8bfff2bc720e1cfce": "【安全圈】Fastjson2紧急修复远程代码执行漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651142101&idx=2&sn=ae683cd5002e5ff7b5acda2871f9186c": "Microsoft 发布 MAI-Cyber-1-Flash 安全大模型,安全 AI 成本直降五成;CNVD漏洞周报2026年第29期_ 牛览", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508786&idx=1&sn=1767edab5eb87d5123429de2bd4749ae": "原创漏洞 _ macOS_iOS Libnotify 栈溢出漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617841&idx=3&sn=7faccad30acbaa141542da1dd08a7f9a": "内容更新!系统0day安全——主流企业防火墙漏洞挖掘(第11期)", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617841&idx=2&sn=03b8eba807a9925bd6c8f538ddaee869": "突发!libssh2曝四枚高危漏洞,恶意SSH服务器可操控客户端内存", "https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651208514&idx=1&sn=a2490b5914b28f9534786c4126f39b2d": "TSRC关于AI辅助漏洞挖掘报告的违规处理通告", "https://mp.weixin.qq.com/s?__biz=Mzg5OTU1NTEwMg==&mid=2247484581&idx=1&sn=eeec633b0d9a5c694ed33ba4e6ad5783": "【转】Mythos向左,AiPy往右|继Mythos之后,他们又发现100多个漏洞", "https://mp.weixin.qq.com/s/HqYi_jNztyYug4DXLagQqA": "黑客的漏洞监控平台,随时可能失效", "https://mp.weixin.qq.com/s?__biz=MjM5NDU3MjExNw==&mid=2247516616&idx=1&sn=8e356c728b7dec1f96753f0c92b3ddb7": "倒计时3天|第二届OpenHarmony CTF(Capture The Flaw)智能漏洞挖掘赛", "https://mp.weixin.qq.com/s?__biz=MzI5NTQ5MTAzMA==&mid=2247486291&idx=1&sn=a02060010a5e026011668cfa2072d079": "Fastjson2 AutoType 安全问题确认:现有版本尚无正式修复,公开 EXP 到底能走多远", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078064&idx=1&sn=79d6a8b9aa80aaae459d916c7b6cb35a": "【安全圈】Check Point 紧急修复!认证绕过漏洞 PoC 已公开,CVSS 9.3", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078064&idx=3&sn=305d40c9560536981df8cf7e2f5ab9a5": "【安全圈】Gitea 紧急修复!CVSS 9.8 RCE 漏洞 PoC 已公开", "https://mp.weixin.qq.com/s?__biz=MzA5ODA0NDE2MA==&mid=2649790293&idx=1&sn=3dafe8f68a7666a50c6edd26cfbe7932": "OpenAI开源Codex Security CLI:用于发现、验证和修复安全漏洞", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508789&idx=1&sn=1b37679a0aa07a0b0486336a9bf731a1": "原创漏洞 _ Apple macOS SMB 内核内存损坏漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458617960&idx=3&sn=90434953831a389eb1c96a400518f879": "速更!iOS 26.6 修复内核代码执行、Root提权等高危漏洞", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503889&idx=1&sn=4a1cc75b84e95e0eca72681aedaadb01": "雷神众测漏洞周报2026.7.20-2026.7.26", "https://mp.weixin.qq.com/s?__biz=MjM5NDU3MjExNw==&mid=2247516623&idx=1&sn=6ab58c2fc410ac8bd46f28a5f26d093d": "倒计时2天|第二届OpenHarmony CTF(Capture The Flaw)智能漏洞挖掘赛", "https://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727851083&idx=1&sn=9b6f68096f5b1959fbf0fe5c816ad560": "【公告】关于 AI 生成漏洞报告提交违规行为通告及成长守卫分规则更新", "https://mp.weixin.qq.com/s?__biz=Mzg5MTc3ODY4Mw==&mid=2247508794&idx=1&sn=a1930c22e9e7e12cedb3628319463abd": "原创漏洞 _ Apple iOS_macOS Kernel NECP 内核内存损坏漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3MTY5MzQxMA==&mid=2247485374&idx=1&sn=70e3f7da734cb81e92aedc72e7e58988": "安卓最新Root提权漏洞分析与利用", "https://mp.weixin.qq.com/s?__biz=MzkyMjM5MTk3NQ==&mid=2247498204&idx=1&sn=0eb64ee8ba811819d343e36aff57769b": "Pwn2Own 击穿微软 Edge 全链路漏洞分析|deepsec 攻防实录", "https://mp.weixin.qq.com/s?__biz=MjM5NDU3MjExNw==&mid=2247516627&idx=1&sn=a62923ed0e58ef99e6368c3a8dfca486": "倒计时1天|第二届OpenHarmony CTF(Capture The Flaw)智能漏洞挖掘赛", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526780&idx=2&sn=9caf8a3656313521d7bfc27e0ebb7451": "JetBrains:注意这个严重的 TeamCity RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506937&idx=1&sn=f57c0b203511bf655e0f73453828c875": "【已复现】KindaRails2Shell——Ruby on Rails 远程代码执行漏洞(CVE-2026-66066)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506937&idx=2&sn=ad8e60fa30dcceebfbea231d5aadcda8": "安全热点周报:Cisco FMC 零日漏洞已被积极利用,静态凭证可能泄露敏感数据", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078098&idx=4&sn=f87818de9e6d4077d074cfa79ad14bac": "【安全圈】Unturned开源22天就爆RCE漏洞!创意工坊模组成攻击入口", "https://mp.weixin.qq.com/s?__biz=Mzg3NjU4MDI4NQ==&mid=2247486867&idx=1&sn=6c231219ce00d3c8f591b7f9c095dc5f": "用于发现安全漏洞的 7 款最佳 AI 红队测试工具", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247543636&idx=1&sn=09e466f9fef9c91b2f6136a0f60756f8": "从现有证据来看,AI漏洞挖掘被过度炒作", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458618071&idx=3&sn=5564f1056881f84d2f145f89fe05892c": "PHP紧急修复3大高危漏洞!SQL注入、内存破坏、服务宕机风险并存", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458618071&idx=1&sn=73c6a5d862ebf6afddeef4b6ff3ac5e2": "攻破微软 Edge 浏览器的 Pwn2Own 全链路逻辑漏洞技术分析", "https://mp.weixin.qq.com/s/0ETr-wlcu-do83e5B-r2Jw": "谁说挖漏洞日入2000?先避开这6个大坑再说", "https://mp.weixin.qq.com/s/pt9Et-YbwxLL66YvkVOsLw": "黑客视角下的“银狐病毒”漏洞复现", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078107&idx=2&sn=2cf8dfe411ee04cc89037c2656e58a0c": "【安全圈】Adobe曝CVSS 10.0满分漏洞!无需交互即可远程执行代码", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078127&idx=2&sn=6ae0e3468281094b71a924e772335be6": "【安全圈】Chrome近3个版本修复1442个漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497156&idx=1&sn=1eb1b912c9b26a5d43b35b4f48dc31ce": "CNVD漏洞周报2026年第30期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497156&idx=2&sn=e41a59b8f6316b5a0190cf2a683c882e": "上周关注度较高的产品安全漏洞(20260727-20260802)", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497869&idx=1&sn=eb12a910ec9c91de2c73398e22aaac56": "【漏洞预警】Linux Kernel OVSwrap 权限提升漏洞,PoC 已公开", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526788&idx=2&sn=7f4b4916527a0b69b3f51b0b28b6c5ed": "Rails 修复严重的 Active Storage 漏洞,可导致 RCE 后果", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526788&idx=1&sn=31b126ba90fa61c7de56aff42e8761fd": "SolarWinds 严重漏洞可导致绕过 Web Help Desk SAML 登录认证机制", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078137&idx=2&sn=17a2d4ad4d423e7a8453c8dad79df73f": "【安全圈】DNA证据遭篡改?赛默飞修复高危漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458618175&idx=2&sn=6e07d97e55af6343f2567a424a9b98fe": "9.10 北京|AI Agent 驱动 Android 逆向与 Root 漏洞实战训练营", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458618175&idx=3&sn=0fea3852280411019ea5dfeb331b8a52": "硬件钱包重大漏洞!Coldcard固件缺陷,近9000万BTC资产失窃", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503896&idx=1&sn=0bca57a0325ae780a651fb39a4e3517a": "雷神众测漏洞周报2026.7.27-2026.8.2", "https://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247495383&idx=1&sn=99b7861a651cf69a68fc33e9f414c949": "【已复现】CVE-2026-68771 ComfyUI RCE:Moby.AI 0day漏洞 先知 · 先验 · 即检", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526802&idx=1&sn=eefdd011c62ed054dd09f9d2b64cc8a1": "TP-Link 修复高危 RCE 漏洞", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501964&idx=1&sn=2d46f791db4937623ea31e13f89ccfaa": "CNVD漏洞周报2026年第30期", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506974&idx=1&sn=21b913f487a7fc67f9f8400534e93bd3": "【已复现】Linux Kernel Open vSwitch 本地权限提升漏洞(CVE-2026-64531)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506974&idx=2&sn=5dc83af260f18813a37b7d4a29ae32db": "【已复现】MariaDB 认证远程代码执行漏洞(QVD-2026-48306)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078150&idx=3&sn=53ec1170b05595683f3b4f2ef20e35e3": "【安全圈】打了补丁也不安全:N-able漏洞已被利用", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651142150&idx=2&sn=38105f74c8153d63ca038f5db456c756": "IBM 2026数据泄露报告:92%的AI安全事件源于缺失访问控制;CNVD发布漏洞周报2026年第30期_ 牛览", "https://mp.weixin.qq.com/s?__biz=MzI3Njk2OTIzOQ==&mid=2247487889&idx=1&sn=9167e250ea2a4c5d75aaabf1beb98c30": "【AI复盘】AI Agent符号链接劫持漏洞事件", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458618256&idx=2&sn=b4a421fcc927a4107b85cd2591609adc": "Apache NiFi 连爆四漏洞,权限失控与内存炸弹问题亟待修复", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497875&idx=1&sn=e893fe08888b24b48960719b80872197": "Linux Kernel SCTP _SCTPhantom_ 本地权限提升漏洞风险预警", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526822&idx=2&sn=cf608132413b195cbe7d10ca9c2177b9": "TP-Link 修复 Omada ZTP 中的15个 RCE 漏洞,可导致网络受陷", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526822&idx=1&sn=fa6cba51e606ca4da3062cfdb3a53640": "cPanel 存在严重漏洞,可导致托管客户以数据库 root 身份执行 SQL", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078163&idx=1&sn=bfceeaca8e7343eed1b2ca73a6d0570c": "【安全圈】CISA紧急预警:三大高危漏洞正被黑客积极利用", "https://mp.weixin.qq.com/s?__biz=MjM5NzE1NjA0MQ==&mid=2651208584&idx=1&sn=fe28c3d4e1ee43b16379d36785ebe1b9": "TencentOS 科维斯AI首秀:SCTPhantom——潜伏18年的Linux内核提权与容器逃逸漏洞", "https://mp.weixin.qq.com/s/LTtw5yHNTmFgcmWVwMGgeA": "多套系统各说各话,资产漏洞治理如何闭环?", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664265420&idx=1&sn=970fcc06554336e8302a1c417f27f32d": "CNNVD _ 人工智能重要漏洞通报(2026年第十一期)", "https://mp.weixin.qq.com/s?__biz=MzA5MzE5MDAzOA==&mid=2664265420&idx=2&sn=1d0449a1167acbad8c1876a86efe809a": "CNNVD _ 最新OpenClaw多个安全漏洞通报", "https://mp.weixin.qq.com/s?__biz=MzU3ODAyMjg4OQ==&mid=2247497881&idx=1&sn=53aef74dafccf767eb850d3ddd166e10": "7月必修漏洞清单:8个高危含Redis补丁绕过", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526830&idx=2&sn=31c5fbcfaf1c1a6c8aa6adf63782a51d": "Django 紧急提醒修复这四个漏洞", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526830&idx=1&sn=44638325ecb2486a572ad5c691767ffd": "Linux 内核存在内存损坏漏洞,可使本地用户提权至 root", "https://mp.weixin.qq.com/s?__biz=MzI2MDc2MDA4OA==&mid=2247519706&idx=1&sn=2b99e60929c3f340e2faf2174d18951d": "当 AI 助手开始替攻击者_打工_:微软 365 Copilot 连环提示注入漏洞深度解析", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078176&idx=3&sn=3cd33ddc855043588e9d8d1a0536658f": "【安全圈】JetBrains爆严重漏洞,正在被黑客利用", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458618398&idx=3&sn=2570bf825d99e4963e297b6d5c88e2bb": "13年“幽灵”漏洞浮出水面:Linux内核OVS组件曝本地提权零日,普通用户可秒变Root", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247586711&idx=1&sn=add050ca4f00455c37e305e6c4809253": "_中国版Mythos_图龙锋接入山石网科,AI漏洞挖掘能力拓展至网安产品", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526840&idx=2&sn=45556dffc35484aa67d144e24667f622": "Anthropic、谷歌和OpenAI 的编程代理严重漏洞可致RCE和供应链攻击", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526840&idx=1&sn=d925710bf66e2f5889e993d29d7d276c": "思科修复12个 SD-WAN 和 IOS XE 漏洞,含多个高危", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651142202&idx=1&sn=406012da69a0d4835b8aa2f2af8ab9ef": "负7天:当攻击窗口倒转,防守者还剩多少时间?——漏洞利用平均发生在补丁发布前7天。这句话,正在重写网络安全的时间规则", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247506994&idx=1&sn=40b43738c615a5624f431ef45b046b41": "【已复现】WordPress Core XSS2Shell 预认证 XSS 远程代码执行漏洞(CVE-2026-64638)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078200&idx=3&sn=49de3825deea363025a052d568a9baaa": "【安全圈】WordPress再次爆出高危安全漏洞,全网约有5亿个网站受影响", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078200&idx=2&sn=3fc2c3a12c55a34bfab18b638219139a": "【安全圈】电商平台前员工利用系统漏洞,0元购3000多件家电", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247586720&idx=1&sn=457cc957fec98fdf1b310cd955da0783": "“中国版Mythos”图龙锋开放试用首月:近500家企业申请接入,累计发现近9000漏洞", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497175&idx=1&sn=240955573c2f01ac589a40ab5594978a": "CNVD漏洞周报2026年第31期", "https://mp.weixin.qq.com/s?__biz=MzU3ODM2NTg2Mg==&mid=2247497175&idx=2&sn=20743fdb244c980dc4318b626b4c8440": "上周关注度较高的产品安全漏洞(20260803-20260809)", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526848&idx=1&sn=b29b6dc57efb2687f969776b26ce49fe": "XSS2Shell:WordPress Core 漏洞利用预认证登录XSS实现 PHP RCE", "https://mp.weixin.qq.com/s?__biz=MzI2MjQ1NTA4MA==&mid=2247492511&idx=1&sn=1bdecc94bbd6bb2a0781509e819180f6": "从“测漏洞”走向“管业务”:企业安全建设、资产测绘与零信任接入|总第317周", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247507002&idx=1&sn=97e9f830d318a051a7e4e4acda250c68": "【已复现】JetBrains TeamCity 远程代码执行漏洞(CVE-2026-63077)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078224&idx=2&sn=cdb595c396ed85c7d7cbec78a2e74951": "【安全圈】200万人身份告急!比利时电子身份证曝致命漏洞", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247543655&idx=2&sn=29b9e8f3b3d428dd37fe8276ec51cf41": "“漏洞清零” 从数量合规到结果合规", "https://mp.weixin.qq.com/s?__biz=MzIzMTc1MjExOQ==&mid=2247514371&idx=1&sn=d1dbddfd7f231df8354bf52925161a55": "绕过IDE直连云端:PLC编程软件AI助手漏洞分析", "https://mp.weixin.qq.com/s?__biz=MzIwNDk0MDgxMw==&mid=2247501987&idx=1&sn=16975e5395e03b9d128963b0671533a7": "CNVD漏洞周报2026年第31期", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247507043&idx=2&sn=d63e9983c803ce4c3e5462036277f481": "【已复现】Docker cp 容器到主机任意文件写入漏洞(CVE-2026-17106)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078235&idx=3&sn=f1a447a6e44f91a7769a0b4821676fc5": "【安全圈】SharePoint 漏洞被用于入侵瑞士联邦 IT 机构", "https://mp.weixin.qq.com/s?__biz=MzU4ODQ3NTM2OA==&mid=2247505655&idx=1&sn=a5f18b42903c14b84d67001b665b5d0c": "Coldcard 1.11 亿美元被盗事件:私钥破解漏洞深度解析", "https://mp.weixin.qq.com/s?__biz=MzkxNzA3MTgyNg==&mid=2247543663&idx=1&sn=5a8cbab044f06bbd3c5a2ded31807539": "不容忽视的浏览器安全漏洞", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458618507&idx=2&sn=238e162f45daadcdd87812141a952284": "ClamAV曝出7个高危漏洞,远程可触发杀毒引擎拒绝服务", "https://mp.weixin.qq.com/s?__biz=MzI0NzEwOTM0MA==&mid=2652503903&idx=1&sn=1b9bd70ba166bdd46721e13658e84010": "雷神众测漏洞周报2026.8.3-2026.8.9", "https://mp.weixin.qq.com/s?__biz=MzA4MTg0MDQ4Nw==&mid=2247586730&idx=1&sn=1be19089145a9bea27019d9b50de329a": "360图龙锋破解OpenAI自检盲区,最新发现Codex 6个高价值安全漏洞", "https://mp.weixin.qq.com/s?__biz=MzkyNzcxNTczNA==&mid=2247488351&idx=1&sn=980afea9fb9c8603216716225b041e7b": "DayDayPOC 0day漏洞悬赏计划活动时间延期公告", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247507057&idx=1&sn=a81bd63b6d1244e069a1ba3d78ca2541": "微软8月补丁日多个产品安全漏洞风险通告:1个在野利用、44个紧急漏洞", "https://mp.weixin.qq.com/s?__biz=MzUyMDQ4OTkyMg==&mid=2247554446&idx=2&sn=b2ce3d12282936d9acc38746b6a8a524": "安全419|一周国际网安资讯:AI攻防加剧 供应链漏洞与勒索软件肆虐", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078250&idx=2&sn=34426cd070c154e05ba5124be77afa1b": "【安全圈】Cisco防火墙零日漏洞遭野利用,可远程触发拒绝服务", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078250&idx=3&sn=9d7391717461158a504a5999d9912672": "【安全圈】Zoom严重漏洞曝光,参会者可零点击劫持他人电脑", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078250&idx=1&sn=c18ade501dbd6bc5f8350697f568826b": "【安全圈】微软8月补丁修复398个漏洞,含一个被积极利用的零日", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651142345&idx=2&sn=00126cd71e7a7c8e1866a30f454997ad": "122次安全测试出现19次越界行为,AI Agent自主采用欺骗和攻击手段;CNVD漏洞周报2026年第31期_ 牛览", "https://mp.weixin.qq.com/s?__biz=MzI3NjYzMDM1Mg==&mid=2247536457&idx=2&sn=a5ac381439f14afca3adabf187281438": "2026-08微软漏洞通告", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458618567&idx=3&sn=8dc784b6eb4841a0deb858b515724e91": "Lazarus 组织利用 Windows AFD.sys零日漏洞投放 FudModule 内核 Rootkit", "https://mp.weixin.qq.com/s?__biz=MzI2NTg4OTc5Nw==&mid=2247526866&idx=1&sn=adb5f2d68c7b6168285eee413c364a6a": "Adobe 修复三个 CVSS 满分漏洞", "https://mp.weixin.qq.com/s?__biz=MzU5NDgxODU1MQ==&mid=2247507089&idx=1&sn=738a25f378623a67d8bc4f5dfa6ef085": "【已复现】Microsoft SharePoint JWT 令牌身份认证绕过漏洞(CVE-2026-55040)安全风险通告", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078262&idx=2&sn=dd24d6b1bffa2629060c81672365d629": "【安全圈】Lazarus利用Windows零日漏洞,假招聘真窃密", "https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652078262&idx=3&sn=0eb5e034c6ee86ec40d35df86526f829": "【安全圈】SharePoint漏洞PoC刚发布,就被黑客盯上利用", "https://mp.weixin.qq.com/s?__biz=MjM5Njc3NjM4MA==&mid=2651142352&idx=1&sn=d21e412ca69fede5b4eedf47c4f0ca5b": "同一个严重漏洞,别人拿3万你只拿1万:GitHub赏金腰斩背后的_信任市场_真相", "https://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458618624&idx=3&sn=ad1379f0308b86ff67b12d02c68a237c": "Cisco防火墙零日漏洞遭野外利用,可无认证触发DoS瘫痪", "https://mp.weixin.qq.com/s?__biz=Mzk0MjE3ODkxNg==&mid=2247493564&idx=1&sn=c5b1fb86e789a4e1a13bf7951a830c72": "【安全更新】微软8月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s/-dd_jQ4BbwwG0UmfnCen2A": "漏洞复现 | Alibaba-Sentinel login 默认口令漏洞", "https://mp.weixin.qq.com/s/YT1YTulsAZ4LN-bEufoUBA": "AI让漏洞暴增72%,NIST求助AI管理漏洞库", "https://mp.weixin.qq.com/s/F7YuUpgICQ1I3AIYTVGRhg": "漏洞复现 | 聚恒中台 data.aspx 任意文件上传漏洞", "https://mp.weixin.qq.com/s/KK4w6QmEfOkB6trnt4kdqA": "8月17日高危CVE漏洞速报", "https://mp.weixin.qq.com/s/aKwnS6l5Hcw-_IG--B_hpg": "关于顺丰SRC平台升级维护及暂停漏洞测试的公告", "https://mp.weixin.qq.com/s/pSUVzv0kyLBzO7HHUFMKwA": "从\"人\"的漏洞到\"人\"的防线:安在携手HumanRisk重塑企业安全意识教育", "https://mp.weixin.qq.com/s/3BMvBXIW9MNgnyNTcKPZKg": "【0DAY漏洞】 全球5G手机芯片厂商之一‌的紫光展锐SOC存在RCE漏洞,影响数十家手机厂商,还未发布补丁", "https://mp.weixin.qq.com/s/zX6Ie2KIzY3O4BTGjoKK5Q": "SRC漏洞挖掘新手入门指南:怎么挖、去哪挖?一篇文章带你零基础入门到精通!", "https://mp.weixin.qq.com/s/zTsMaHKh4UynXXbbK1g8kg": "启明星辰周涛:AI重塑漏洞攻防范式", "https://mp.weixin.qq.com/s/3VSiAcVZS87Q5rY4lns8gA": "攻击者利用 MLflow 漏洞窃取云凭据和机密信息", "https://mp.weixin.qq.com/s/-M1Uo3ku3ypovxwz77xN4w": "潜伏40年、影响全球九成DNS系统的漏洞,被一个开源模型找到了", "https://mp.weixin.qq.com/s/_wbUVPRvkaY6n4wyNbSBZQ": "WiFiSRC|AI生成漏洞报告提交规范公告", "https://mp.weixin.qq.com/s/T5RqQ6lQ54lG6KVnfVClHw": "一个公共软件漏洞,批量击穿几十家大厂", "https://mp.weixin.qq.com/s/mm9jwOIAHRdu73zzBZ5vvw": "Cursor 0-day 漏洞预警:打开文件夹即中招,开发者该如何紧急防护?", "https://mp.weixin.qq.com/s/k6c4LF0xqpq0VHX2rx4U_A": "【CVE-2026-22078】关于Webview任意URL加载导致Token泄露风险的致谢公告", "https://mp.weixin.qq.com/s/TdQovX34rdzHOv4UbJF1gQ": "CNNVD | 人工智能重要漏洞通报(2026年第十二期)", "https://mp.weixin.qq.com/s/cEWF0XVx5NW4qTzkIFoy2g": "Web漏洞扫描工具 -- Webscanner", "https://mp.weixin.qq.com/s/8qgRMizqCfzhcs1K5V_oQA": "吊打所有传统扫描器!这款开源工具让漏洞挖掘效率提升1000%", "https://mp.weixin.qq.com/s/DAiN8DCWXcmVQJslL171Hg": "8月20日高危CVE漏洞速报", "https://mp.weixin.qq.com/s/-StXHrFyKVizNKs1MITHYg": "CNVD漏洞周报2026年第32期", "https://mp.weixin.qq.com/s/zh0szU9aOLkehqMBfvMBgg": "一周4500万次攻击,全球wp2shell漏洞遭大规模利用", "https://mp.weixin.qq.com/s/gHb_zj88a3EjmGCj0TFkEw": "3.61美元一个PoC,21分钟出利用:微软MSRC内部数据曝光,漏洞响应团队正在失效\"", "https://mp.weixin.qq.com/s/DqF_MytTbd3AlPO4b6_ocQ": "从用户注销到优惠券复用:一次应用逻辑漏洞的完整剖析!", "https://mp.weixin.qq.com/s/huGhgojDXfX44VuaMvZ9Pg": "漏洞复现 | 金和C6协同管理平台 AjaxForBudgetDecompose.aspx SQL注入漏洞", "https://mp.weixin.qq.com/s/fwcren6Sj_4ZVufzV92T5w": "BYOVD 过时了?无需漏洞,微软签名驱动如何被 “合法” 武器化?", "https://mp.weixin.qq.com/s/9bneN_4_er7aEt0zGZhlBg": "AI能找到零日漏洞 但仍无法写出安全的代码", "https://mp.weixin.qq.com/s/6J6nKF0Sya1WK4G0joSoCg": "TSE 2024 | LIVABLE:破解软件漏洞类型识别中的“长尾”难题", "https://mp.weixin.qq.com/s/VAqE3rnRNnz8s0a1Zth6ig": "若依专项漏洞扫描工具 -- Ruoyi-Scan", "https://mp.weixin.qq.com/s/VqMmpkrVZvO5EKth5z-cxw": "CNVD漏洞周报2026年第33期", "https://mp.weixin.qq.com/s/-_78BTpRTr2Glt1eDxGzLg": "【漏洞威胁】DeepSeek Harness(DSH)未授权远程代码执行漏洞", "https://mp.weixin.qq.com/s/h-qy2_wC2EGNabtt__8NbQ": "360图龙锋发现Codex、Claude Code等高价值漏洞,入选工信部CAIVD最高级技术支撑单位", "https://mp.weixin.qq.com/s/LmNR-zDC4J6ZVgfpjpJT1g": "RegPwn:Github再现exp投毒?", "https://mp.weixin.qq.com/s/VOl8lkVxJI2VtsWqpbNusg": "VARA 2026 | 数智拓远 善治久安 第十六届网络安全漏洞分析与风险评估大会展品征集", "https://mp.weixin.qq.com/s/wgrmSt4KemP6XKWhCABFqg": "奇安信获评NVDB多个安全漏洞专业库年度技术支撑单位", "https://mp.weixin.qq.com/s/HrOvkBMJHANWmIjqyegTwQ": "【漏洞预警】Redis 又双叒爆高危 TLS Pending-List UAF 漏洞,已公开完整EXP,速修!(已复现)", "https://mp.weixin.qq.com/s/Xo1--CZnpj6QK41d4-9-2w": "继 AI 漏洞库之后,长亭再度入选 NVDB 两大安全漏洞专业库", "https://mp.weixin.qq.com/s/GfuUqAgDt3H8fa7f8v6_Xg": "白帽子的新战友:一个会自己找漏洞的 AI 智能体", "https://mp.weixin.qq.com/s/gwFtIAfo2rPbE8QYs2EffA": "四叶草安全再次获评NVDB通用网络产品安全漏洞专业库技术支撑单位", "https://mp.weixin.qq.com/s/i4F3CGbVqusRNefTk7XYaQ": "一个晚上,AI 挖出 Call of Duty 1 埋了 20 年的 RCE", "https://mp.weixin.qq.com/s/yYeXBAqNB1nPAGC705esQg": "前沿AI正在重塑漏洞管理,传统修复体系面临系统性变革", "https://mp.weixin.qq.com/s/RBmdjtaXllVpFS1KsiOelQ": "炸裂!这款漏洞扫描器让安全圈彻底沸腾了", "https://mp.weixin.qq.com/s/TuBXG0JGwXICgsPc-qXZQA": "OpenShell存在危险行为漏洞(CVE-2026-65093)", "https://mp.weixin.qq.com/s/J67yyQ3OhzpgCPlGT0fqRA": "【已复现】漏洞通告 | Next.js 远程代码执行漏洞(CVE-2026-75604)", "https://mp.weixin.qq.com/s/xl3LEPsmiLLzIFkKnyxevw": "以无厚入有间:CodeBuddy Security的漏洞发现思路与实践", "https://mp.weixin.qq.com/s/xTs0_sXjxuEtQP-jh9xoBA": "【漏洞案例】越权之修改HTML+CE绕过签名校验", "https://mp.weixin.qq.com/s/snLFuFV3ruvF7hwfBv3EhA": "大满贯!天融信入选工信部六大安全漏洞专业库技术支撑单位", "https://mp.weixin.qq.com/s/S7hxvbIOjCC0Owy6GjNTsg": "Apache Log4j2 新问题曝光:不是所有 RCE 都普遍,但窄场景也不能忽略", "https://mp.weixin.qq.com/s/EF3kM-xigIdm7F_VxcQ75Q": "常规操作下,安全漏洞无所遁形", "https://mp.weixin.qq.com/s/yZ-wtOU99e5tqpSTNUNjig": "【漏洞通告】Nacos 管理接口权限绕过漏洞", "https://mp.weixin.qq.com/s/mYyTkLv21_d1XfFe7jqmTg": "覆盖车联网、信创、AI等领域,360入选工信部六大漏洞专业库技术支撑单位", "https://mp.weixin.qq.com/s/Is8X1mg1NfQAdLSDoiJvQA": "国家安全部:境外间谍瞄准网联无人机巡检平台,多类安全漏洞亟待补齐;OpenAI等百余家机构,呼吁联合抵御失控AI带来的网络威胁| 牛览", "https://mp.weixin.qq.com/s/-THC_W6Ddc9sWb601Ze4Fw": "实力认证|华云安双向入选工信部 NVDB 两大漏洞专业库技术支撑单位", "https://mp.weixin.qq.com/s/fsunndt3L9ANweVxQp1-1Q": "能信安:安全漏洞通报", "https://mp.weixin.qq.com/s/ksVPDWmLnacL4HSHpsA2gg": "NASA严重安全漏洞,可导致黑客向飞船发送任意指令", "https://mp.weixin.qq.com/s/O8Yfomwf1HU1beM0-RIJ7Q": "【漏洞挖掘】新手入门SRC漏洞挖掘!从入门到高阶实战指南,从哪学?选什么平台?学习路线?", "https://mp.weixin.qq.com/s/seFA7amuHcHy4nBU8BF-qg": "MongoDB 严重安全漏洞需立即修补", "https://mp.weixin.qq.com/s/K5l0GEK9z3BjdoN-ftGjWQ": "【安全速报】8月31日高危漏洞紧急预警", "https://mp.weixin.qq.com/s/TnmdeoFPqxp7HQIaMVtYLw": "SRC漏洞怎么挖?App挖洞让你爽那赏金", "https://mp.weixin.qq.com/s/JOROH30bMRhdNzPraHO_UA": "121 个逆向Skills,覆盖恶意软件分析、软件逆向、固件∕嵌入式、移动应用、脱壳∕反混淆、软件破解、漏洞挖掘、托管代码、取证∕情报、CTF等", "https://mp.weixin.qq.com/s/WEiDDAsjK2XViH_StBuzqA": "第十六届网络安全漏洞分析与风险评估大会--信息安全企业家论坛邀您参会", "https://mp.weixin.qq.com/s/KBwto0VeECB2FdgibnvRfg": "95.02%漏洞成功率 | 绿盟科技NSFOCUS AI斩获CyberGym全球第一", "https://mp.weixin.qq.com/s/2WTRR76u-OTCRCTQT5uI6g": "记一次有趣的逻辑漏洞挖洞经历", "https://mp.weixin.qq.com/s/qxYWo5NbOOiJHpPd99gARg": "JeecgBoot 积木报表 | 最新漏洞已成功复现", "https://mp.weixin.qq.com/s/btQjna0Ho_EOxjFjRwcRSw": "漏洞速递 | CVE-2026-22679泛微RCE漏洞(附EXP)", "https://mp.weixin.qq.com/s/Xddr4j9TxMnV2wVKsxCOeg": "Nacos 管理接口权限绕过漏洞", "https://mp.weixin.qq.com/s/87_Ntg3kKDb0Z6qUGCPRHA": "Unitree G1 人形机器人蓝牙漏洞:会动的设备一旦失守,风险比电脑更直观", "https://mp.weixin.qq.com/s/kHX9N2PXWNhZy55qkALnnw": "9月安全预警|开学季诈骗爆发+高危漏洞频发,企业轻量化自查加固方案", "https://mp.weixin.qq.com/s/f4xMViM1KN0zxh--s5k4iQ": "漏洞预警 | 亿赛通电子文档安全管理系统SQL注入漏洞", "https://mp.weixin.qq.com/s/dMcvIyMpjhuvUTm1l_7vaA": "工具分享 | 一款全功能 Web 漏洞扫描工具", "https://mp.weixin.qq.com/s/F7kHn038WxtvPKS683ajmA": "深信服运维安全管理系统 change_net 命令执行漏洞", "https://mp.weixin.qq.com/s/ECvtZO1iY2Xj7zDLilHsoA": "一个 BOLA 漏洞", "https://mp.weixin.qq.com/s/hI_J8xEsFGdzZskpVlA-Ww": "Sign in with Apple 0day 复盘:十万美元赏金背后的认证绕过", "https://mp.weixin.qq.com/s/LCFrnxpW2_5c2l6ucedcvg": "【2026hvv】JeecgBoot 【0day】,文档细琐~【附验证exp】,速修~!", "https://mp.weixin.qq.com/s/AqB7dmY-ePSDJfg0kH3Rgw": "汉王e脸通综合管理平台 uploadMeetingFile.do 任意文件上传漏洞", "https://mp.weixin.qq.com/s/nOiGJp5cjdor0kikm-eKZw": "就在明天15点!CRA合规专题直播:如何打通从漏洞通报到产品安全的最后一公里?", "https://mp.weixin.qq.com/s/NFfmCp0_uMpccxUc-9DSLw": "从 Halo 通知模板 SSTI 到 H2 Alias RCE:一次完整的踩坑记录", "https://mp.weixin.qq.com/s/QeXmCZb0xcLFA6mrDXFh9A": "【安全速报】9月2日高危漏洞紧急预警", "https://mp.weixin.qq.com/s/pnUGEgjLrCCuJ5UnqIn3Zg": "【漏洞复现】JeecgBoot 积木报表远程代码执行漏洞", "https://mp.weixin.qq.com/s/Fsyy1rsCWJqNBf2zKWmkvA": "SonicWall 提醒注意已遭利用的 SMA1000 0day 漏洞", "https://mp.weixin.qq.com/s/8o6hld9pVQPR1I34xOYttA": "Langflow 严重漏洞被用于窃取 OpenAI 和 AWS 密钥", "https://mp.weixin.qq.com/s/AngwtKu2qZ04-tLfMnlZGQ": "【漏洞通告】Proxmox VE身份认证绕过漏洞", "https://mp.weixin.qq.com/s/iUK_0wdVIu_TanleUUZEGg": "神漏洞!近距离劫持人形机器人实现完全控制,还能“人传人”感染", "https://mp.weixin.qq.com/s/FGGb9RtQ4efQspzHvcLPqw": "【漏洞通告】Windows HTTP.sys 特权提升漏洞(CVE-2026-62735)", "https://mp.weixin.qq.com/s/rhAgrwZHUOrXMDwfrQwJpQ": "半日漏洞登场:AI 时代的 0-day", "https://mp.weixin.qq.com/s/8_UkfV7G6-mDubFPX-7OCA": "【热点安全风险】9月3日 | Langflow 漏洞遭利用,攻击者瞄准 AI 开发平台(CVE-2026-0768)", "https://mp.weixin.qq.com/s/9kUs7I3bOSwtVloaaSyyQg": "【漏洞预警】Linux三年前补上的洞,又一次被挖开了", "https://mp.weixin.qq.com/s/kvzFHISM36g-opZ0B-ZFdg": "PaperCut 双漏洞链式在野攻击爆发,欧美教育机构已遭入侵,47% 设备尚未打补丁", "https://mp.weixin.qq.com/s/D-Ys21MXo0VahWBHkSvK6Q": "学计算机,网络安全,漏洞挖掘,电脑配置到底有没有要求", "https://mp.weixin.qq.com/s/bcZRXrDIDkJFk6UkSn8LIw": "【安全速报】9月7日高危漏洞紧急预警", "https://mp.weixin.qq.com/s/71yNBxRnvNtHy00uiH5zOA": "【已复现】漏洞通告 | RouterOS SSH 公钥认证绕过漏洞(CVE-2026-67276)", "https://mp.weixin.qq.com/s/ftHuHkq-DChpCzpPuW0ywg": "AiPy 再获 OpenVPN 官方致谢:发现并协助修复多个安全漏洞", "https://mp.weixin.qq.com/s/9eDO8xuhyTrEENhtxc-d2Q": "天锐绿盘文档安全管理平台userExitList存在信息泄露漏洞", "https://mp.weixin.qq.com/s/udxrRBzhCWnudDZW4FCO9g": "第九期漏洞挖掘培训,1元先试水,3档任你选,带你从0挖到高危", "https://mp.weixin.qq.com/s/g_HDhBcEJt9zWRayt1DW0g": "行业资讯| Chrome等高危漏洞被积极利用 &网络安全项目中标情况汇总(9月8日)", "https://mp.weixin.qq.com/s/oEuv8YWvwNmf2JozL5SiXw": "漏洞通告|DELL Cloud Disaster Recovery操作系统命令注入漏洞(CVE-2026-71171)", "https://mp.weixin.qq.com/s/upYdPZxCA9Kd4cZ-Lu1UqA": "国家安全部警示:军事禁区不可越界;欧盟《网络弹性法案》漏洞披露相关义务将于2026年9月11日正式生效 | 牛览", "https://mp.weixin.qq.com/s/XMloH8KZLXuf0gD56mVapg": "SAP 提醒注意满分 “OVERPASS” 内核漏洞", "https://mp.weixin.qq.com/s/p-HXXlx6SY2XkVH3R5hLqA": "【漏洞通告】微软9月多个安全漏洞", "https://mp.weixin.qq.com/s/TEcXSfV1OE8V8jTaJnejTg": "Okta 多项工具的关键漏洞已完成修补", "https://mp.weixin.qq.com/s/aWzoMnsjkG485VVaDd2v3A": "【玲珑安全】第九期漏洞挖掘培训,1元先试水,3档任你选,带你从0挖到高危", "https://mp.weixin.qq.com/s/uexFjnRW7T8zDkOk7_JF5Q": "微信曝零点击高危漏洞:响铃无需接听即遭账号接管", "https://mp.weixin.qq.com/s/zMZjuqWQDeo-tNikswA-Vg": "ChatGPT漏洞:允许植入的提示信息将受害者的Gmail数据发送到另一个帐户", "https://mp.weixin.qq.com/s/-ibfrmodL5o3scrZjkouoA": "【安全圈】微软9月修复974个漏洞:2个在野0day且含蠕虫风险", "https://mp.weixin.qq.com/s/y8H8XC-Ioujeglphw3oNJQ": "9月社区投稿活动 | 漏洞挖掘∕AI渗透∕面试经验∕简历编写", "https://mp.weixin.qq.com/s/SoYXFlCxQ2LtV85rVWfP5g": "Mercusys 热销 4G 路由:从拆机焊 UART 拿 root,到预认证 httpd 栈溢出(CVE-2026-12495)", "https://mp.weixin.qq.com/s/Lk8waN4j9PpRfioLsUHG0Q": "四个间谍集团在一周内使用了同一套Chrome和Windows漏洞利用工具包", "https://mp.weixin.qq.com/s/550zpQDw2SNlXXYQWq3RLA": "Exchange 预授权 RCE :CVE-2026-62911 深度剖析与企业级防御实战", "https://mp.weixin.qq.com/s/9ZsQF9mCx4mitNrK5oTLIg": "(7.8分) CVE-2026-81963:Windows 更新组件本地提权,已在野外被利用", "https://mp.weixin.qq.com/s/mDNYKQ2XrYoEOGdHI2xLag": "DeepSeek V4.1 Flash 内测曝光:5 美分挖出 handlebars.js 0day RCE,Pro 版都做不到", "https://mp.weixin.qq.com/s/HFLTo9ty2yWPujoQqQZPSQ": "【安全速报】9月9日高危漏洞紧急预警", "https://mp.weixin.qq.com/s/yYFG4CjwEZWAgnKLogUxVw": "【安全更新】微软9月安全更新多个产品高危漏洞通告", "https://mp.weixin.qq.com/s/G2_XCyMIjd1_kO2f2oxOOg": "CVE-2026-10520 一条 form 表单换 root shell", "https://mp.weixin.qq.com/s/R4xjjcw1JpbAfMgnLWPmXg": "紧急安全预警|ArangoDB曝两枚严重漏洞,未认证攻击者可通过漏洞链实现Root级RCE", "https://mp.weixin.qq.com/s/v0wHmfferwdEqNCyRZPAuA": "Jenkins Performance 插件反序列化 RCE(CVE-2026-84670):一个\"假白名单\",七年潜伏,一删了之", "https://mp.weixin.qq.com/s/um7ftEJAQrlIam1pZ6Bvfw": "雷神众测漏洞周报2026.8.31-2026.9.6", "https://mp.weixin.qq.com/s/XRup8swaJft-PWCzM5dwuA": "【梆梆安全监测】安全隐私合规监管趋势及漏洞风险报告(0810-0823)", "https://mp.weixin.qq.com/s/MvVW40JEMG8hAAB3na1KRQ": "【安全圈】微信曝零点击高危漏洞:响铃无需接听即遭账号接管", "https://mp.weixin.qq.com/s/l0aWXO4eDe34TR-KJcyugQ": "Coruna iOS 漏洞利用套件 C2 网页面板", "https://mp.weixin.qq.com/s/h7PoQ1vYfnYCXS7cF6E5xQ": "微信出现严重漏洞,可在无交互的情况下导致微信账户被黑客控制,影响安卓和 IOS 设备!", "https://mp.weixin.qq.com/s/kThk-yBlYsype1Tjc8kdlw": "【成功复现】KafkaUI代码执行漏洞(CVE-2026-5562)", "https://mp.weixin.qq.com/s/vXBX2pqIg8dFgK2pcf8EDA": "山石安全能力中心|微软2026年9月份漏洞补丁日安全通告", "https://mp.weixin.qq.com/s/rcVNsnvcN3nQsScciPusWg": "【已复现】从 Zerocopy 到 Root:Linux RDS 本地提权漏洞 ZcopyReaper(CVE-2026-43502)", "https://mp.weixin.qq.com/s/DVRp4OrAiQPYxQTBPSCF-Q": "【CVE-2026-82533】DeepSeek Harness高危漏洞让Agent一键突破沙箱限制", "https://mp.weixin.qq.com/s/10jOf3NSJEmJVg40kvcKEg": "【漏洞通告】Next-Cart迁移插件认证绕过漏洞(CVE-2026-76009)", "https://mp.weixin.qq.com/s/Z3Z1R7hV47S_hZYnKmZkoQ": "【漏洞通告】cjose JWE全零密钥漏洞(CVE-2026-53939)", "https://mp.weixin.qq.com/s/nvgl_PFA6qhgfpkjePCIkQ": "【漏洞通告】Apache-Impala存在代码注入漏洞(CVE-2026-65181)", "https://mp.weixin.qq.com/s/mHtAoHdXTuLERDLZYTHjEA": "【漏洞通告】FireBox存在权限提升漏洞(CVE-2026-76801)", "https://mp.weixin.qq.com/s/N6QOcUIrJ-skWzL4G_XZVg": "第75篇 AI全栈 · 静态分析工具Joern原理分析及0Day漏洞挖掘_", "https://mp.weixin.qq.com/s/0PF1F4Vtqc1GFj2yO4moxQ": "SAP Kernel曝两枚严重漏洞,最高CVSS 10.0", "https://mp.weixin.qq.com/s/-CI0PEEqKBIvtNDxaMFxBg": "Android 九月更新一次补 180 个漏洞:国内设备先确认补丁层级", "https://mp.weixin.qq.com/s/LL15wwwUJsWstDSL4YFgkw": "SAP 内核出现满分远程代码执行漏洞:别让 ERP 补丁停在维护窗口里", "https://mp.weixin.qq.com/s/pksvtje37mzLwReiLHbwzw": "普通用户注册即可投毒!某高校虚拟仿真平台爆出存储 XSS 漏洞", "https://mp.weixin.qq.com/s/73DyuQaAbc5Ei57E3CqqoQ": "漏洞复现 | 山东启恒信息科技有限公司数智化平台 CommonHandler 存在SQL注入漏洞", "https://mp.weixin.qq.com/s/fgdiF9PUxAeSMPYSVfABbw": "漏洞扫描智能体 -- vuln-scan-agent", "https://mp.weixin.qq.com/s/2BJIlsWq8idNksSwsY86DQ": "CISA 将 Cisco、Chromium V8、Fortinet 和 Citrix NetScaler 漏洞添加到其已知被利用漏洞目录中", "https://mp.weixin.qq.com/s/s4hgv3k6dc09klsKUPAYtw": "靠 Android 逆向挖漏洞赚了几十万的工具分享", "https://mp.weixin.qq.com/s/9o9W4F3aJhO9vvRVTBBLTQ": "安全工具丨大模型驱动的自动化渗透测试系统:智能体自主规划「探测→资产枚举→漏洞检测→AI分析与报告」的完整测试流程", "https://mp.weixin.qq.com/s/i-MZHG_Tr3gvI0pmseDukA": "宏景人力资源管理系统 XFireServlet SQL注入漏洞", "https://mp.weixin.qq.com/s/uX9rXrbtnCmwdr_hFeRA6g": "管防火墙的系统,被三个团伙排队打穿:Cisco FMC CVE-2026-20079 全链拆解", "https://mp.weixin.qq.com/s/Nsip3mfrydYirZEZ5kFs2g": "大华智慧园区综合管理平台queryById接口存在敏感信息泄露  附POC", "https://mp.weixin.qq.com/s/MCFCFY41Y7URuzOhlJAvxQ": "价值图谱 | WEB漏洞扫描产品核心能力介绍", "https://mp.weixin.qq.com/s/azoyt805nHgrJXyV0qKY7g": "每日一学:若依(Ruoyi)框架,你必须知道的四个通用漏洞", "https://mp.weixin.qq.com/s/ISKAINAr_SMsnDsfG9ldfQ": "DeepSeek开源工具爆严重漏洞,AI编程代理可自破沙箱", "https://mp.weixin.qq.com/s/Pqb8nzX84X5R6OrZvCnqqA": "OnePlus会话劫持漏洞导致Android数据泄露", "https://mp.weixin.qq.com/s/EPUMtgc4LhWqTLC07X1JEA": "揭秘:企业WiFi的11个隐形漏洞,你的网络中了几个?", "https://mp.weixin.qq.com/s/ExUaUWGcsmV65hut614kvA": "紧急安全预警|AWS SSM Agent曝CVSS 9.9严重SSRF漏洞(CVE-2026-89049),可窃取EC2临时IAM凭据", "https://mp.weixin.qq.com/s/Sau0nL0QW6tbIifF0OAujA": "关于暂停接收中通子公司中危、低危漏洞报告的通知", "https://mp.weixin.qq.com/s/0AuN4K7QcXniRvdFHlH_2w": "能信安:8月安全漏洞态势汇总", "https://mp.weixin.qq.com/s/6IZewtwtr5bXtIhbWSuuCw": "【已复现】GitLab CVE-2026-85706 未授权任意文件读取漏洞", "https://mp.weixin.qq.com/s/50SzqdU4bqWqsXU0HSWCYQ": "无泄漏也能打:INSTAR 摄像头固件到无 ASLR 泄漏 RCE", "https://mp.weixin.qq.com/s/Z11WnoCXoENGATvZlv6Eeg": "CVE-2026-39262 分析 | rag-web-ui RAG 越权问题", "https://mp.weixin.qq.com/s/3iRgmnNM5CkoYSe8RXfmGw": "iPhone18 Pro 新增 Apple Reference Image,以像素签名对抗 AI 图像伪造;CNNVD发布信息安全漏洞周报第849期| 牛览", "https://mp.weixin.qq.com/s/6A4JfadSG5PXlmxseKptuA": "Anthropic 点名中国黑客+7家AI巨头:长沙学生用Claude搞出十几个0day,阿里被指薅了1.5亿次", "https://mp.weixin.qq.com/s/y-BrlE8I-Tx8OIN0FqDzog": "紧急安全预警|GitLab曝CVSS 10.0严重漏洞(CVE-2026-85706),未认证攻击者可读取任意文件", "https://mp.weixin.qq.com/s/KejUNiJxdQgKsVp94ALqiw": "「PyRIT实测:微软AI红队框架,多轮越狱攻击自动编排,LLM安全漏洞一次摸底」", "https://mp.weixin.qq.com/s/tcaAt4Jg_f3ff9Jx6TSZfQ": "亿赛通电子文档安全管理系统SecureUsbConnection存在反序列化漏洞", "https://mp.weixin.qq.com/s/teOVmSF8KncbQsih3mhDeg": "表单提交下的越权删除漏洞", "https://mp.weixin.qq.com/s/QGDB2_-2Tom3ExB1BZvGeg": "Check Point 提醒注意两个严重的未认证 RCE 漏洞", "https://mp.weixin.qq.com/s/68Oq4r5lF2rEUfAsmHt98g": "【通知】关于讯飞SRC暂停接收安全漏洞的通知", "https://mp.weixin.qq.com/s/LIu2Lci38T6ThERDeN03SQ": "速修复这些 Apache Aremis 漏洞", "https://mp.weixin.qq.com/s/Fb8EEGUbipH2Y66hBdKn8A": "【已复现】漏洞通告 | JumpServer Access Key 越权泄露漏洞", "https://mp.weixin.qq.com/s/ABCmXoVDwNxI_iKvj3Sk2g": "97.28%成功率!沥泉科技WeepStone完成CyberGym Level 1漏洞复现测试", "https://mp.weixin.qq.com/s/dzLXMIpIiqWwJSpDD-OL2g": "【已复现】GitLab 满分路径遍历漏洞,可未授权读取服务器任意文件(CVE-2026-85706)", "https://mp.weixin.qq.com/s/QLq_fhOx_lSuvWTwfSPW3w": "2026 CCS | “第二届基础软硬件智能化漏洞治理生态创新技术交流活动”议程公布", "https://mp.weixin.qq.com/s/KRkVcTWfKueuoUJo_pPVAQ": "工具分享 | 一款若依(Ruoyi-Vue)漏洞检测工具", "https://mp.weixin.qq.com/s/ufx42QP9mtVjnM_DLqeS0A": "【热点安全风险】9月12日 | rclone双高危认证绕过同日修补,S3服务与远程控制接口可被无认证接管(CVE-2026-88018∕CVE-2026-88044)", "https://mp.weixin.qq.com/s/3VE5MmFzzxyNr1FjNfcoRw": "【附exp】GitLab CVE-2026-85706 未授权路径遍历", "https://mp.weixin.qq.com/s/vb3yjzvlHMIHJGJs3NIe3Q": "用友时空KSOA resubject 存在sql注入漏洞", "https://mp.weixin.qq.com/s/SheB9NUayWaTBOjdvn9qSw": "一日四停:四家头部SRC同日按下暂停接收漏洞", "https://mp.weixin.qq.com/s/tn8lOumHI6Lr7CPmLjESbA": "用友NC Cloud accept.jsp接口存在任意文件上传漏洞", "https://mp.weixin.qq.com/s/FOtsCdNuB2vQqUAwiG7pvw": "从脚本小子到 AI 小子:漏洞报告成本归零之后", "https://mp.weixin.qq.com/s/LC1ZLpWExfJBZck8E92Wwg": "Chrome V8 引擎遭类型混淆攻击——CVE-2026-85046 实战解析与 POC", "https://mp.weixin.qq.com/s/RJQI_HqqfmcS-3ImEvAXYQ": "10分漏洞:GitLab未授权任意文件读取", "https://mp.weixin.qq.com/s/SA8fH7tDZ3YJEVaRXhsE3A": "俄罗斯黑客利用 Zimbra 零日漏洞窃取电子邮件无需点击链接", "https://mp.weixin.qq.com/s/As_iBJBGrvbl0vAstjUpIw": "Next js 远程代码执行", "https://mp.weixin.qq.com/s/SIVLLARuRbrXC1dOFVfssQ": "Linux 系统中的 AD ResetNightmare (CVE-2026-27912) 和 KerberLoss (CVE-2026-25177) 漏洞", "https://mp.weixin.qq.com/s/8FstaTft_R3QDoKPPyCBew": "厦门四信通信科技 userLogin.do SQL注入漏洞", "https://mp.weixin.qq.com/s/4m54ExpMl47aP4hLf-4HXA": "【安全圈】GitLab曝CVSS 10满分漏洞:免密盗源码,数小时遭在野狂扫", "https://mp.weixin.qq.com/s/lobtV2MSNLA-8Tc-XvHBAQ": "黑客正积极利用 MikroTik RouterOS 的 MikroTrick 漏洞来完全控制路由器", "https://mp.weixin.qq.com/s/GoWqN3RysQSnDmBr-rB3xQ": "(9.1分) CVE-2026-89009:WAVLINK 路由器未认证任意文件写入,可远程提权 root", "https://mp.weixin.qq.com/s/MZzh6rGWDM44CkXpXIMR3g": "【安全漏洞分析】网站或系统存在SQL注入漏洞怎么办?", "https://mp.weixin.qq.com/s/5gnc5bqKDOwPKEyiv6jdlA": "TSRC某大佬总结的价值1800元的10万条POC", "https://mp.weixin.qq.com/s/wyz2F_7Q8OrcUl_V8ObEsQ": "Fortinet 特权访问代理漏洞:任意网站都能接管你的代理和屏幕", "https://mp.weixin.qq.com/s/B2edlxX9t3rWMb__CcLPVA": "19.9 美元路由拆到 RCE:Dbit N300 UART + Boa 溢出(CVE-2026-20374)", "https://mp.weixin.qq.com/s/J7BBAqVBqEAcgKW0Rf5mUQ": "暗网惊现macOS 0day本地提权exp:兼容Big Sur到26.5", "https://mp.weixin.qq.com/s/gBv4VTbLKQt-UFbv44Li1w": "黑客可将存在漏洞的 LiteLLM AI 网关转化为获取 root 权限和窃取云凭证的途径", "https://mp.weixin.qq.com/s/HikwWitv49UYV9hO1h-4hw": "被改写的系统服务:IDM 内核驱动 CVE-2026-90493 提权", "https://mp.weixin.qq.com/s/bxDoc8f55krA-cR3urfIIg": "GitLab CVE-2026-85706 未授权任意文件读取分析:一个末尾斜杠打穿的满分漏洞", "https://mp.weixin.qq.com/s/ljrlhFcm7nKvKWTAf1SDKg": "(9.9分) CVE-2026-84869:ScreenConnect 任意文件执行,野外已出现蠕虫式传播", "https://mp.weixin.qq.com/s/Kmd3VSRg5I0A-324hgWIsw": "深科特LEAN MES系统 WarehouseCheck.ashx SQL注入漏洞", "https://mp.weixin.qq.com/s/LNQB6ep3t8FI39zI30H-mQ": "iOS 27.0 越狱前夜:拿到root权限,可能发现未修补内核漏洞", "https://mp.weixin.qq.com/s/p9As2jhdwPhJYhvxsDsidw": "SRC漏洞挖掘器 -- SRCTOOLS", "https://mp.weixin.qq.com/s/c8yOsQB9Ou5NxAxmN7-vCQ": "Android反编译核武器Droid ASC:352MB APK全局交叉引用1.79秒,发现Honor和小米两个RCE", "https://mp.weixin.qq.com/s/kz1c35vTDAdvpDEmfD_Hlg": "从越狱继续思考:LLM 危险内容生成 ≠ 真实漏洞利用", "https://mp.weixin.qq.com/s/6RARlyW91vhFUTioivxaTQ": "Plesk 备份管理器两项漏洞直指 root:低权限账号也可能掀开整台服务器", "https://mp.weixin.qq.com/s/m-alNYyQLozh3Nqc8uRrwA": "已复现 | 搜狗输入法 1-click RCE", "https://mp.weixin.qq.com/s/_ZCbCPY8iHMJWn8-ddgcog": "9月社区投稿活动 | 漏洞挖掘∕AI渗透∕面试经验∕简历编写", "https://mp.weixin.qq.com/s/Zf77r2kyZ1xEUkYT4efb4A": "CVE-2026-88062(CVSS 9.5):OmniRoute远程代码执行漏洞PoC已公开", "https://mp.weixin.qq.com/s/tCGV0NhDzFW1JJHbRDNYKA": "JeecgBoot 积木报表 v2.5.1 未授权 RCE & Aviator 沙箱逃逸", "https://mp.weixin.qq.com/s/hlm2wLHm2rjV1nkSE9XDEw": "CVE-2026-74997|Roundcube Webmail插件可实现服务器远程代码执行", "https://mp.weixin.qq.com/s/n1sK_tZMZCWglWOHv0Qjqg": "关于设置待审核漏洞队列的公告", "https://mp.weixin.qq.com/s/ynTDBD7VZzOxwzofkihrCg": "天地伟业Easy7 loadAllUserBeans 信息泄露漏洞", "https://mp.weixin.qq.com/s/4SxZ1gTgvcCe-cR5HQEvjQ": "2026年还能让Google掏出百万奖金的漏洞", "https://mp.weixin.qq.com/s/bUnia_c25Pz72w1AkqRaZA": "CVE-2026-67276 | RouterOS SSH公钥认证绕过漏洞(POC)", "https://mp.weixin.qq.com/s/EkS1EuHcwOU1piHT1IUnpg": "OpenAI 智能体被指策划 RubyGems 攻击,并在 RubyDoc 服务器上实现远程代码执行", "https://mp.weixin.qq.com/s/nwlpIXUto_amyDeI1AF1QA": "装了Foxit(福昕阅读器)的机器要看一眼: CVE-2026-57239 提权链解析", "https://mp.weixin.qq.com/s/oDP5XJ4KXyqjiOMM12XV4w": "VulnHunter 正式开源!AI 漏洞挖掘平台,重塑代码审计工作流", "https://mp.weixin.qq.com/s/u2zemJyjxXBKOHwdcagcIA": "关于LYSRC暂停接收漏洞公告", "https://mp.weixin.qq.com/s/RMXhuL_YettDO47vo6xhKg": "(9.9分) CVE-2026-90605:Totolink路由器formFilter缓冲区溢出", "https://mp.weixin.qq.com/s/TAfELBir0dA7gtKG5Znbcg": "高危预警|CVE-2026-51990 搜狗输入法RCE漏洞!可植入灰兔后门,已被APT野利用", "https://mp.weixin.qq.com/s/AEHea_NgsPtQh6yL7dkjLA": "网安标委发布《人工智能安全治理框架3.0》,风险分类与技术应对措施同步更新;CNVD发布2026年第36期漏洞周报| 牛览", "https://mp.weixin.qq.com/s/x-1QzlFO8ffKL5DpOJTvPg": "CNVD漏洞周报2026年第36期", "https://mp.weixin.qq.com/s/HZXA47-_Gt9AdU8A8eCYrQ": "WooCommerce批发潜客捕获插件漏洞遭在野利用", "https://mp.weixin.qq.com/s/rGODvKFJ_ID2-pTL2rgauw": "iOS 27 发布当日即遭破解:AirLift 配对越狱 PoC 深度技术分析", "https://mp.weixin.qq.com/s/ZUINewc4p6R1U2h9mGMRcg": "dddd-Next 自动化资产测绘 + 漏洞扫描工具,覆盖指纹识别、弱口令、nuclei POC、Shiro 专项检测和 HTML 报告", "https://mp.weixin.qq.com/s/2vBN21nh0KK6tF7tpx8z8w": "GitLab CVE-2026-85706路径遍历漏洞:无认证任意文件读取", "https://mp.weixin.qq.com/s/rC8uFUAeDcYnhXA2a7SClg": "搜狗输入法曝一键 RCE 漏洞(CVE-2026-51990),已被在野利用投放后门", "https://mp.weixin.qq.com/s/S0Soo6bIHFOxiMFRHNHM8g": "普通用户能拿到管理员密钥:JumpServer 过滤漏洞已公开 PoC", "https://mp.weixin.qq.com/s/2TyIwuivZQ6wJ7Mm-E3RYw": "【2026hvv】搜狗一键RCE漏洞之三个\"各自不算致命\"的缺陷如何变成 Critical,文章详谈~【附验证exp】", "https://mp.weixin.qq.com/s/CkhLyM5FtUgtUAmc0_sJ0Q": "vivo 通过ISO漏洞管理体系认证,漏洞治理全面接轨国际标准", "https://mp.weixin.qq.com/s/aTapxCJ62HhbipP0qrcmmQ": "【热点安全风险】9月15日 | ConnectWise ScreenConnect 提权漏洞遭在野利用,攻击者可接管企业终端运维通道(CVE-2026-84869)", "https://mp.weixin.qq.com/s/gmVrqqnkAXo4cL4U9eQcIw": "Avast 防病毒软件零日漏洞利用概念验证允许攻击者导出 SAM 数据库并获得 SYSTEM Shell", "https://mp.weixin.qq.com/s/KfQKypZlvpd_mvP94k05Qw": "AI编程安全:业务逻辑漏洞,至今过不了的坎", "https://mp.weixin.qq.com/s/rGr1WhpTcPK2WoFngUcVHw": "使用ASC + 自建 MCP 做APK漏洞面定位流水线", "https://mp.weixin.qq.com/s/hQphKssKvTZ0q3G2mrny8A": "网安入门必学:基础不牢,漏洞白学", "https://mp.weixin.qq.com/s/Sf9ns4WBGhxVNjOpQ1IqBg": "已复现 | 搜狗输入法“1点击”远程代码执行漏洞(视频)", "https://mp.weixin.qq.com/s/Dys5lUgDo39zIv4wEOaOSQ": "Fortinet FortiWeb 8.0–8.0.1 未授权 RCE 利用链地下售卖事件", "https://mp.weixin.qq.com/s/KdYT3GHcEEutVY-sXkTa8w": "SPIP spip.php 存在远程命令执行漏洞复现poc CVE-2026-77806", "https://mp.weixin.qq.com/s/TkLi9e8bq0-IDbrSU4WCZw": "【成功复现】InvoicePlane路径遍历漏洞(CVE-2026-23491)", "https://mp.weixin.qq.com/s/UAywPSxyEDaHD9XkWZ93QQ": "【漏洞通告】Oracle WebLogic Server未授权远程接管漏洞(CVE-2026-70756)", "https://mp.weixin.qq.com/s/vw9rN0G2_32n6gs2qO36kw": "某微信小程序漏洞挖掘", "https://mp.weixin.qq.com/s/LUipytQlqiq5bZRGdOBDcg": "别乱点!你电脑里的搜狗输入法曾曝“点一下链接就中招”漏洞", "https://mp.weixin.qq.com/s/PzQm7pYMyOaTKL6Fzh9vnQ": "雷神众测漏洞周报2026.9.7-2026.9.13", "https://mp.weixin.qq.com/s/CxggiQE97GFPOAuZjpoEnQ": "9月社区投稿活动 | 漏洞挖掘∕AI渗透∕面试经验∕简历编写", "https://mp.weixin.qq.com/s/5WjpSTcOTXPGhvibS_nfHw": "基础软硬件智能化漏洞治理生态创新技术交流活动成功举办", "https://mp.weixin.qq.com/s/aYNGJ8fhElqgF8NDuVDVdg": "Marimo 漏洞把云凭据交到攻击者手里:从笔记本到堡垒机只需几秒", "https://mp.weixin.qq.com/s/7NUR-THvCuqWIiNtFBt6yA": "火绒企业版2.0功能升级|跨平台漏洞检测上线 查杀支持断点续杀", "https://mp.weixin.qq.com/s/qPdkwy1Y9a_M3ZQ9cICt4A": "宇树暴跌!从4400亿到1900亿,制度漏洞还是估值泡沫?", "https://mp.weixin.qq.com/s/rV5a1d74Y2545LxjTW5bEw": "收到欧盟CERT漏洞通知邮件怎么办?制造商必读的CRA合规应对指南", "https://mp.weixin.qq.com/s/eN7zn6kvuNzWR_tDz0SwVg": "Cisco邮件网关9.8分漏洞被在野利用:一封邮件直接拿root,没有任何绕过的余地", "https://mp.weixin.qq.com/s/2lkqxLJghdDjWTFWbVcyZQ": "五个 V8 漏洞里唯一的 Medium:Chrome 在野0Day CVE-2026-87491", "https://mp.weixin.qq.com/s/d7RYPvYUGfUiydZJPOoslw": "防火墙不是安全终点:PAN-OS未认证漏洞可拿到PA设备root权限", "https://mp.weixin.qq.com/s/bEvCh5YQzsMil0TUXSXPzA": "【风险通告】微软9月安全更新补丁和多个高危漏洞风险提示(CVE-2026-85880)", "https://mp.weixin.qq.com/s/tb6lbASyfaf5tqv8q8gWFw": "【长亭AI安全·网安周进行时】9奖齐发!漏洞治理见真章,AI成果树标杆", "https://mp.weixin.qq.com/s/nUkpVh3YJ7ejdG0SIAb5bA": "点开一个sgbiz链接就植入后门:搜狗输入法漏洞已被真实利用", "https://mp.weixin.qq.com/s/HfmWdQkKsppP8Y_4akp8Ww": "华顺信安荣获CNVD“2025年度漏洞应急工作突出贡献单位”", "https://mp.weixin.qq.com/s/Hg5KbPZeA24zDtKcHWI9Pg": "cPanel:LiteSpeed Web Server 企业版严重漏洞可导致提权", "https://mp.weixin.qq.com/s/dhG4uwa_zWI_Ng_7wmt-ZQ": "ThinkPHP框架:2.x-8.x全版本必须知道的10个通用漏洞(附实战getshell案例)", "https://mp.weixin.qq.com/s/g7C_-SkNwavzz5K3kODpsg": "众测 30 分钟挖到鸿蒙App高危上传漏洞 | 从 APP 一条异常图片请求,发现被忽略的外围攻击面", "https://mp.weixin.qq.com/s/A0h3oCFG6EB8TEomt5Pxbw": "已复现 | Langflow post-auth RCE", "https://mp.weixin.qq.com/s/di-2_6CBcmYkiEy_lFw8dA": "搜狗输入法 Windows 版远程代码执行漏洞(CVE-2026-51990)", "https://mp.weixin.qq.com/s/dmvcbKBWuy1bldoNOLSDaA": "Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability(CVE-2026-85893)", "https://mp.weixin.qq.com/s/4qCVhYUMEBac6u4BsJbHkg": "Black Hat USA 2026:.NET类型转换RCE", "https://mp.weixin.qq.com/s/wydc3xRVypiRJTC5ggnzZQ": "漏洞预警 | cPanel&WHM SQL注入漏洞", "https://mp.weixin.qq.com/s/C_Cwnay_Hkfoz52ETYuCFQ": "Windows BitLocker漏洞允许攻击者远程执行恶意代码", "https://mp.weixin.qq.com/s/4HWdWBzvbueHgd_3EHj41w": "投毒、RCE、提权窃密:深度复盘OpenAI智能体发起的这波高阶供应链攻击", "https://mp.weixin.qq.com/s/NNXcguncp4LDABaQ1OBDMQ": "漏洞名称权限参数值规范化缺失导致的权限绕过", "https://mp.weixin.qq.com/s/wFhxhtQv-xxtNu4U6c2Q3A": "我花6000块买的SRC技能包,最值钱的不是漏洞打法,是那90行“假点”清单", "https://mp.weixin.qq.com/s/itx8ZMxsqgenumrS1LOY1w": "SAP 修复 CVSS 10.0 内核漏洞,该漏洞允许未经身份验证的远程代码执行", "https://mp.weixin.qq.com/s/fEn4e7uDkEbhF5vQmGNEjw": "红队固件级漏洞挖掘工具包:moria + mithril 全离线、可空气隔离", "https://mp.weixin.qq.com/s/lHDQi-ujQWNLI22YlFj8dQ": "一次简单的漏洞挖掘背后,我用了白帽集市上的这些资源", "https://mp.weixin.qq.com/s/Mkn-yWDWJmZ8x8q_MVUQUA": "还在等什么?黑盒漏洞挖掘agent等你来收货", "https://mp.weixin.qq.com/s/LZ1EGlIg2ce0FVQe1bRlQA": "让 AI 改了五遍,漏洞多了 37.6%:一份 AI 编码安全复查清单", "https://mp.weixin.qq.com/s/Zj7HcnoBWeehoW0gdTuAMg": "Langflow爆出代码执行漏洞CVE-2026-17633 (POC已公开)", "https://mp.weixin.qq.com/s/kkoDPby6QVu3Y-r4dVZApg": "CVE-2025-11395 Podman任意文件写入漏洞", "https://mp.weixin.qq.com/s/0v2vugZitjf_qj704pVQAQ": "Parallels Desktop 本地提权漏洞 ParaShells:Intel Mac 永久躺枪", "https://mp.weixin.qq.com/s/vj9ZCEnRV2wnyD7_iRnZ2A": "漏洞预警 | JumpServer Access Key越权泄露漏洞", "https://mp.weixin.qq.com/s/1IRY1AJ_ETCgk5fy6nwTtw": "DeepSeek Al:POC EXP_工具化与漏洞验证实战与代码审计与央企安全日志分析", "https://mp.weixin.qq.com/s/qa_mSab3iGXl9Bk-O0OKuQ": "CVE-2026-58704:零点击、近距离、间谍级攻击", "https://mp.weixin.qq.com/s/wX2MQJyGN4gkEAkxdEXTkw": "Check Point 严重登录漏洞可导致远程接管", "https://mp.weixin.qq.com/s/hVfISmQ0u7zrZ8QI25dZjQ": "白帽子的新战友:一个会自己找漏洞的 AI 智能体", "https://mp.weixin.qq.com/s/LixCIhp1j4pUZhSnv6Hp5w": "9月社区投稿活动 | 漏洞挖掘∕AI渗透∕面试经验∕简历编写", "https://mp.weixin.qq.com/s/3LkqpEEXSr8egHV5571wQg": "微软打印服务漏洞重现江湖", "https://mp.weixin.qq.com/s/i4c36SjHK9nDHoUExsVwuw": "Check Point 紧急修复严重漏洞,可使远程未认证攻击者获得 root 权限", "https://mp.weixin.qq.com/s/_9thMwvmLN5U4-hubOogyw": "【附exp】GitLab CVE-2026-85706 未授权路径遍历", "https://mp.weixin.qq.com/s/qJSfJtcJAjg7dqfUvOGXTQ": "OA系统长期未修补漏洞致重要数据被窃!国家安全部最新提醒", "https://mp.weixin.qq.com/s/svsTj3JTxTpz91wx_Smi8g": "关于《网络安全漏洞管理体系与标准化研究》研究课题征集意见和参与单位的通知", "https://mp.weixin.qq.com/s/jF1r7_xCk-cDwvNcmF_VLg": "安全快报 | 威胁组织Red Heron利用远程代码漏洞攻击多国政府和关基单位", "https://mp.weixin.qq.com/s/Ch95gbakrRl7dTZP8RsDEw": "紧急安全预警|Linux KVM曝CVSS 9.3严重虚拟机逃逸漏洞(CVE-2026-89775),可突破Guest与Host隔离", "https://mp.weixin.qq.com/s/hx0EZWCymHFhQX0EGeh-bA": "【漏洞通告】Cisco ISE远程代码执行漏洞(CVE-2026-20211)", "https://mp.weixin.qq.com/s/Gx7k_MoSkSecliz0Ws0knw": "Log4j框架:1.x-2.x全版本你必须知道的12个通用漏洞(附2个Log4Shell实战案例)", "https://mp.weixin.qq.com/s/llON131cr386aAVj2h8e9g": "AI 驱动的自动化渗透测试平台 | AI漏洞挖掘系统 - 黑板架构 ∕ 模型分级 ∕ 结果验证铁律", "https://mp.weixin.qq.com/s/OgB8U8q7UhgoVPNWgQCDeA": "泛微云桥 e-Bridge sendWxMsg SQL注入漏洞", "https://mp.weixin.qq.com/s/1JZyYwRH2bL-h_FbDhrbEw": "CVE-2026-83271 Oracle Database 权限提升漏洞", "https://mp.weixin.qq.com/s/222lMSVi6KNzWXXhIvVq3A": "无需授权直取CI∕CD密钥?聊聊GitLab刚修复的这个“离谱”漏洞", "https://mp.weixin.qq.com/s/94tut5zTcJdJdZASWdi_sQ": "存储桶遍历漏洞安全检测工具 - v2.0", "https://mp.weixin.qq.com/s/Clv1QqdkkSwNMsMv5RxdbA": "比起死磕上班内卷,我更建议年轻人试试挖漏洞", "https://mp.weixin.qq.com/s/SAflPeNEiwsTat-_mOjAtw": "惠普修复 HPLIP 严重漏洞", "https://mp.weixin.qq.com/s/c6gJ90yfw0XIFrP6YeIC1g": "漏洞预警 | GitLab路径遍历漏洞", "https://mp.weixin.qq.com/s/9MB11GsI3jho5GE0--FEpg": "微软发布补丁修复了974个漏洞,其中包括两个已被利用的Windows零日漏洞", "https://mp.weixin.qq.com/s/zjxbMfSyNdXjpgFC5QxPRw": "紧急安全预警|HP Advance曝3个严重漏洞,最高CVSS 9.3可导致远程代码执行", "https://mp.weixin.qq.com/s/tUd4i-O228nT-QuTwDrqjg": "漏洞预警 | 搜狗输入法远程代码执行漏洞", "https://mp.weixin.qq.com/s/sPlZg4Uw32w89FCltw0b2Q": "网络安全正在从“漏洞防护”走向“能力治理”", "https://mp.weixin.qq.com/s/aFhcAegPx_QYwvocBRn53A": "2026年度(第二期)CNNVD漏洞奖励评选结果公告", "https://mp.weixin.qq.com/s/OUapQ8KZn8TdzttSZt9j7w": "【安全速报】9月18日高危漏洞紧急预警", "https://mp.weixin.qq.com/s/-i-FdACwFS2yTAUx-9oNEg": "关于成长体系 V2.0「守卫计划」上线及通用漏洞计划调整公告", "https://mp.weixin.qq.com/s/tpiQrxBHyYqLyXIXE5jkcQ": "Unbound DNS解析器曝9.1漏洞:不是所有发行版都补了", "https://mp.weixin.qq.com/s/qWZEFKixXDj3asXm7Hme-A": "无需认证!本地知识库 QAnything 任意文件写入漏洞可提权至 Root RCE(CVE-2026-88533)", "https://mp.weixin.qq.com/s/OOdvTDwl0rr-GsjrweCkOg": "9月社区投稿活动 | 漏洞挖掘∕AI渗透∕面试经验∕简历编写", "https://mp.weixin.qq.com/s/clOVoHiHPC6M7FiDX8mtIw": "小白SRC如何快速自动挖出第一个SQL注入漏洞", "https://mp.weixin.qq.com/s/_j8Ke5AsPhR9-_6UX4qiNA": "从智能代码审计到 AI 漏洞挖掘,看灵脉Code AI如何赋能Agentic Coding", "https://mp.weixin.qq.com/s/CeamGBWwohwgcfBS9fC9EQ": "【勒索预警】快转发!某财务ERP曝最新0day,Weax勒索病毒携杭州代理IP再次爆发,全网同类资产超十万,完整溯源复盘(附IOC)", "https://mp.weixin.qq.com/s/HnPHtleUt3p-k0Ri6bO0_A": "【已复现】CUPS 本地权限提升漏洞(QVD-2026-70361)安全风险通告", "https://mp.weixin.qq.com/s/CG6ApB2MunusiRXWaoEUEg": "CISA将停发每周漏洞公告,漏洞管理转向真实风险优先;国家计算机病毒应急处理中心发布《大模型与智能体安全综合测评报告(2026)》| 牛览", "https://mp.weixin.qq.com/s/C7Wf8KlGuocngl5BPSP6TQ": "安恒信息获CNVD、CCTGA及多个国家级平台安全漏洞治理荣誉", "https://mp.weixin.qq.com/s/kvU0LZQtXlmIW-lCW_Y4BA": "QQ飞车桌面版曝\"一键式\"远程代码执行风险?", "https://mp.weixin.qq.com/s/jlLMC-N1IOtRPmLHRONG9A": "QQ飞车桌面客户端 RCE 报告的事实核查-好像给了($515)", "https://mp.weixin.qq.com/s/T0qJypSuaNL8qjhHrX5Nqw": "搜狗输入法 CVE-2026-51990 全链复现:参数注入 → 无沙箱浏览器 → V8 RCE", "https://mp.weixin.qq.com/s/JO3Si2rnltqhfZw22KXWXw": "7-Zip RAR5备用流名碰撞绕过MotW---CVE-2026-58052分析", "https://mp.weixin.qq.com/s/w5bVmDNTqLSLMWSPYeiuIg": "信息安全漏洞预警(2026年9月14日-2026年9月18日)", "https://mp.weixin.qq.com/s/dhIM1kpM_AAukHQfntFFlw": "【已复现】CVE-2026-72529 CVE-2026-72530TrueConf Server 未授权远程代码执行漏洞", "https://mp.weixin.qq.com/s/FsKTjuPVwZ5NvDnf7eJFSg": "2026网安周 | 再获权威认可!中孚信息获评CNVD原创漏洞发现贡献单位", "https://mp.weixin.qq.com/s/RpB5-hwLT-0-q7ClbQ-x5w": "全流程 AI 化:沥泉科技TraceLoom从发现漏洞到验证漏洞", "https://mp.weixin.qq.com/s/vur3G7YqbIC2P_cN27kXoQ": "(10分) CVE-2026-69865:微软Azure容器仓库鉴权绕过", "https://mp.weixin.qq.com/s/kCNEL8eA7w9miTKTLpeclg": "伪造 Object Header:一次 C++ 解释器类型混淆漏洞利用分析", "https://mp.weixin.qq.com/s/6v00MkyOxvuIUnDB7DW8gw": "近期漏洞简单整理复现-showdoc∕Nacos∕JimuReport", "https://mp.weixin.qq.com/s/yf_HO1-2HGX26wLzNFgHtg": "信息安全漏洞周报【第092期】", "https://mp.weixin.qq.com/s/ok6WTTCgN2L3QPgsvmQVDg": "Docker Sandboxes曝严重逃逸漏洞,恶意代码可读写macOS主机文件", "https://mp.weixin.qq.com/s/C7Z9cpxznj9o6Qu3rlwW4A": "智能网联汽车漏洞管理实践探索", "https://mp.weixin.qq.com/s/mooA-oI9oEqOEwYfQgS46g": "【一周安全资讯0919】全国网安标委发布《人工智能安全治理框架3.0》;Telegram Desktop曝存储型XSS漏洞", "https://mp.weixin.qq.com/s/wBnhLBZ4Kjwe6UOYMnQGFQ": "CVE-2026-93435 redis-parser 拒绝服务漏洞", "https://mp.weixin.qq.com/s/zdXAvMDq5trrV1om-OagzA": "黑客攻陷OpenAI:两个漏洞让我们拿下ChatGPT控制权", "https://mp.weixin.qq.com/s/Sw59H6HMs_Ogx9an7H-iBw": "AWS 严重漏洞使攻击者能够绕过端口转发限制并窃取 IAM 凭证", "https://mp.weixin.qq.com/s/gCzjmru9awQp-YrMH3MyPg": "【已复现】WordPress 核心主题预览缺陷可导致RCE漏洞(Click2Shell)", "https://mp.weixin.qq.com/s/A9XSM4sLw91lPYEo3_-nsw": "国家信息安全漏洞共享平台认证!360揽获三项漏洞治理核心殊荣", "https://mp.weixin.qq.com/s/8sEpo2P5dHyXqAnHjGOzsQ": "众测复盘:从 APP 一条普通图片请求,挖掘外围服务器文件上传漏洞", "https://mp.weixin.qq.com/s/1_ALUqD3yoiOV3tuxWOjLw": "专家解读 | 依法堵住网络“小设备”的安全大漏洞", "https://mp.weixin.qq.com/s/2o_t5sK6Cn_ULn-BXwp07g": "【AI安全】40个Agent∕MCP漏洞归成13类后,扫描器为何仍只能找候选", "https://mp.weixin.qq.com/s/ZAJIk-inmt0496wYuo96Gg": "车联网漏洞挖掘方法及典型案例剖析", "https://mp.weixin.qq.com/s/qonAHlNXe90mvsmwsMRqNw": "(7.1分) CVE-2025-39682:Linux内核TLS UAF本地提权", "https://mp.weixin.qq.com/s/A62MrfscxdDyH2Vbo5LnUA": "工具分享 | 一款若依(Ruoyi-Vue)漏洞检测工具", "https://mp.weixin.qq.com/s/reYpJTR0GNez94zb4V5Bgg": "紧急安全预警|CUPS曝本地提权漏洞,lpadmin低权限用户可获取Root权限", "https://mp.weixin.qq.com/s/9gcZXxMaT7tkMpp7-aI0yQ": "【安全圈】攻击者利用 Issabel Framework 漏洞实现未经身份验证的 OS 命令执行", "https://mp.weixin.qq.com/s/Wi3L7UgVk_ewaVVmOxb7GA": "APP漏洞挖掘全套自动化工具(自动化检测程序+漏洞报告模板+检测指南)", "https://mp.weixin.qq.com/s/3Vhnvfkz_NPpaWmb2qBj_Q": "千万别忽视!这个逻辑漏洞可绕过管理员的审核", "https://mp.weixin.qq.com/s/JvOp_vQxbVDRXjdCnX5cmQ": "Claude Code、Codex、Copilot与Gemini CLI四大编程代理惊爆零点击RCE", "https://mp.weixin.qq.com/s/6AqwVTnQ1BBW1nPo4KSE1A": "Windows 内核 WMI 计数回绕 CVE-2026-42980", "https://mp.weixin.qq.com/s/XlGxJeKunR6f4u15Ispnrg": "Adobe 修复了 Magento 零日漏洞,该漏洞已被利用来部署 Rust 后门和 PHP Web Shell", "https://mp.weixin.qq.com/s/ycXjYy0JMAjt62EAE84tPg": "AI在企业级漏洞预警中的应用", "https://mp.weixin.qq.com/s/YrcGxhNFYEWAF1paVRcjvg": "JumpServer越权漏洞:URL里加个参数,管理员Access Key直接裸奔", "https://mp.weixin.qq.com/s/efNIaxaD1hZwlJjmQYcN3w": "Linux内核3漏洞被在野利用:只比较版本号会漏掉补丁", "https://mp.weixin.qq.com/s/hIQVdHMTjdsssqkCOAOlOQ": "英国国家网络安全中心警告Check Point VPN 关键漏洞可能面临大规模利用", "https://mp.weixin.qq.com/s/fXMVrCaaAY74-C2ccLssjw": "工作流接口没登录就能执行命令:Orkes漏洞已遭利用", "https://mp.weixin.qq.com/s/0MMrKYoQy9dS6HOvH1vIJQ": "IBM Langflow OSS 高危漏洞分析:VackBot 已实现检测覆盖", "https://mp.weixin.qq.com/s/vbI1v1on0v7TZq6QKaT6hQ": "macOS公布提权漏洞CVE-2026-43783(POC已公开)", "https://mp.weixin.qq.com/s/v2md-Axy5XAvCxaLJuSwPA": "CVE-2026-62943:btrbk SSH命令过滤绕过漏洞,CVSS 8.7分", "https://mp.weixin.qq.com/s/vfQrAeAenmdS6TXJWyn_1A": "Black Hat USA 2026:拖拉机ECU漏洞修复", "https://mp.weixin.qq.com/s/az7IGc_eGOXQ_tNKD0nM2Q": "Cisco ISE遭遇在野攻击,最高严重级别漏洞必须尽快修复", "https://mp.weixin.qq.com/s/eDnMc8yy5evaCSdP0gpuPw": "Pwn2Own 汽车赛事:漏洞、利用与经验总结", "https://mp.weixin.qq.com/s/BJFj__Z1ZDRkMO6wljMD1w": "D-Link DIR803 getcfg.php 信息泄露漏洞(CVE-2025-14528)", "https://mp.weixin.qq.com/s/SiHvJvwxiWq_0j6a3SXuBg": "强推一个自动化 SRC 漏洞挖掘系统", "https://mp.weixin.qq.com/s/T4E-K_t60Uq4atJs1ze3HA": "在野被利用的 Linux 内核漏洞", "https://mp.weixin.qq.com/s/QcANtCnambV4lliJp2qHGQ": "(10分) CVE-2026-76460:思科Cisco ISE 认证绕过可拿root", "https://mp.weixin.qq.com/s/jyXPKk1pei5But-bycMEtg": "Giskard实测:AI Agent漏洞扫描器 一句话自动穷举提示注入 OWASP全查 5828星", "https://mp.weixin.qq.com/s/z9TcJ95ZSTQLcsGvhBFbqw": "【漏洞分析】CVE-2026-81642:一行恶意 DNS 记录如何无接触拿下你的服务器", "https://mp.weixin.qq.com/s/liynIdGoUigpU2ZIYcvDUQ": "紧急安全预警|Node.js vm2曝3个CVSS 10.0沙箱逃逸漏洞,可突破隔离实现RCE", "https://mp.weixin.qq.com/s/fyY5CJwdVcUgvOb8ct6ijQ": "9月社区投稿活动 | 漏洞挖掘∕AI渗透∕面试经验∕简历编写", "https://mp.weixin.qq.com/s/ATMTciDytiZIc_Q5o0ZpGQ": "【漏洞通告】pgAdmin 4 Webserver身份认证绕过漏洞(CVE-2026-86863)", "https://mp.weixin.qq.com/s/gSrqT9wfRKYMk3L3uW_SFg": "CVE-2026-49176 深度解析:Windows WalletService 本地提权链", "https://mp.weixin.qq.com/s/T0RDiYQJ7BuY1FXO8N6VUA": "甲方运维注意:30万 Ollama 裸奔公网 A.I.G 揪出漏洞", "https://mp.weixin.qq.com/s/NVEji4oWEYNMs1LZvTrwOw": "【已复现】漏洞通告 | CUPS 本地权限提升漏洞", "https://mp.weixin.qq.com/s/jvU0gb8_oQkrvnD0QiY5hA": "【漏洞通告】CUPS配置及权限边界缺陷导致本地权限提升漏洞", "https://mp.weixin.qq.com/s/Kta0nvZlLnHw6ENLwMA5Dg": "SolarWinds 修复 ARM 硬编码密钥严重漏洞,可导致未认证RCE", "https://mp.weixin.qq.com/s/83nLAv_Lc7xIkIn5FF_Zmg": "Docker Mac沙箱逃逸漏洞详解", "https://mp.weixin.qq.com/s/xMF-Lu_y5PfejJAIkxLWCw": "Fortinet:Orkes Conductor 工作流平台上严重的预认证 RCE 已遭利用", "https://mp.weixin.qq.com/s/yAkS1WJ431Zx7nW5FNmv7Q": "【已复现】WordPress Click2Shell 核心预认证远程代码执行漏洞(QVD-2026-70986)安全风险通告", "https://mp.weixin.qq.com/s/MAfOiJ0Tbpqe07_4lFlW2g": "BlindRop | 二进制漏洞中的盲注 使用二分算法测试栈溢出长度", "https://mp.weixin.qq.com/s/f2qsP8coahnqHnXQ-0z0nw": "(9.1分) CVE-2026-93958:D-Link R95 路由器命令注入", "https://mp.weixin.qq.com/s/dYsPpa3YYDhaVa6VuKKt3w": "pgAdmin 严重认证绕过漏洞:伪造 HTTP 头即可冒充管理员登录", "https://mp.weixin.qq.com/s/bdw-V7iIqXslZ43XfTar9g": "直播回顾 | 漏洞刚披露,攻击已经开始:企业的响应窗口还剩多久?", "https://mp.weixin.qq.com/s/UCUVdORqv2S1VwjrztqC9w": "从HTML注入到CSRF:一次漏洞组合拳实战", "https://mp.weixin.qq.com/s/fAylyI9RH-nJNSPd45rEog": "【已复现】Cisco ISE 认证绕过漏洞(CVE-2026-76460)", "https://mp.weixin.qq.com/s/Gz08tZD2tmK2Sy2yPrrEMA": "CRA漏洞上报实战:从漏洞研判到24小时报告,企业应该怎么做?", "https://mp.weixin.qq.com/s/Euc-zl-ioMRCVfYQoFNPhg": "Linux 内核曝四个提权漏洞,攻击者可借此获取 root 权限", "https://mp.weixin.qq.com/s/Am4GMFyi-9866VOom0DZIQ": "护网出局单位的RCE", "https://mp.weixin.qq.com/s/YTEGK_981f9JkjJBLmPc_Q": "SRC漏洞报告成稿 Skill(SRC∕0day 提交稿、分层验证门、Step 式 PoC、截图铁律)", "https://mp.weixin.qq.com/s/EBu8Lt9R48-TVcqtgTLqzQ": "CVE-2026-80844:Linux 内核 IPv6 AH6 路由头重排越界漏洞", "https://mp.weixin.qq.com/s/rYJBOndcq977WBHZdQ58ng": "Chrome 153 版本修复了 230 个漏洞,其中包括一个已被实际利用的零日漏洞", "https://mp.weixin.qq.com/s/z5x4ksLh554DbY7FuAU7Sg": "漏洞利用概率更新了,补丁优先级为什么不能只按分数排?", "https://mp.weixin.qq.com/s/dO1QzXuH6gE2O-NK1bOpWA": "通杀 Edusrc通杀70rank漏洞实战高危思路和WAF绕过", "https://mp.weixin.qq.com/s/4f9Lezm_uf3bPr8KtTDUow": "“AI Force”何以成了“人工智能部队”?——难道吸睛比严谨更重要?", "https://mp.weixin.qq.com/s/g6fMza8ZJJRD-7c53QsiqQ": "带宽被陌生人跑满?用护卫神防盗链堵住漏洞", "https://mp.weixin.qq.com/s/gXcwoDdZwk1VtVzs-N7Jjw": "一次扫描出141个子域+201个漏洞目标,这个AI侦察引擎太猛了", "https://mp.weixin.qq.com/s/rLwrYBAZ4-TlGtBilF4Flg": "五域 skill(资产侦察∕漏洞扫描∕漏洞利用∕ 后渗透操作∕攻击产物分析)", "https://mp.weixin.qq.com/s/2A94RWAa9yDAgGxQC2KVDw": "车联网情报速递|COVESA Open1722双CVE复现:以太网→CAN 桥接网关的“任督二脉”被打穿", "https://mp.weixin.qq.com/s/VPNybCGaJMMeBWQltg949Q": "CNVD 通用型未授权漏洞广扫Skill · 便携工具包", "https://mp.weixin.qq.com/s/STiIDJO6nF4AYT1BdSBHLQ": "【热点安全风险】9月21日 | Linux 内核三漏洞确认已遭在野利用,攻击者可借其本地提权并横向渗透内网服务器", "https://mp.weixin.qq.com/s/10vv1x8zttBB00Y_TFxoMw": "积木报表 testConnection 远程命令执行漏洞(CVE-2025-66913)", "https://mp.weixin.qq.com/s/sp3LI-DNcEjvg5QkkDdVvw": "vBulletin 存在严重身份验证前远程代码执行漏洞,可执行任意 PHP 代码", "https://mp.weixin.qq.com/s/1wKzDuJzDKcfq_puIPs8Dw": "你充电,他买单:ISO 15118协议漏洞致中间人攻击", "https://mp.weixin.qq.com/s/VbC7MJGR3SNkXUnW-oiQzw": "AI agent提示词:适用渗透测试&src漏洞挖掘工作流模版分享!", "https://mp.weixin.qq.com/s/N4VoYoMyf6qp577gLZUS3g": "暴风(Storm):让漏洞自己\"跑\"出来", "https://mp.weixin.qq.com/s/3DH8B5dMS9mtvfEIlQ1wHg": "(9.9分) CVE-2026-94095:Netcore企业路由器traceroute命令注入", "https://mp.weixin.qq.com/s/jShHV_V3tbhH80SzE9J5uA": "一款自动化文件上传漏洞检测工具", "https://mp.weixin.qq.com/s/XpiVT64ftdDO8lnWP83M2w": "如何用AI Agent拿下漏洞赏金大赛冠军", "https://mp.weixin.qq.com/s/QebTP9rX3KvQMRpdCkf1Gg": "CVE复现 | CVE-2026-39363漏洞复现", "https://mp.weixin.qq.com/s/8g_LDDcyUu978rcBp7OzqQ": "AI大模型Web站点在渗透测试中常见实战漏洞", "https://mp.weixin.qq.com/s/zPu7-0WkeHPJLqmxz2EzMQ": "PWN二进制漏洞挖掘与利用(全套视频+工具资料)", "https://mp.weixin.qq.com/s/zoQGl-d49r7iVQgt1rMKqQ": "震惊!这款漏洞检测框架让全球安全研究员为之疯狂", "https://mp.weixin.qq.com/s/Foo5ppNW4Zh_mfE88SvOtQ": "AI 能自主做安全研究吗?PortSwigger 用 700 个漏洞回答:能", "https://mp.weixin.qq.com/s/GLw1oXn8JZr6_0UFJzkKTg": "【已复现】WordPress 核心主题预览缺陷可导致 RCE 漏洞(Click2Shell)", "https://mp.weixin.qq.com/s/H0HlVJpKudkM0BdPpB-AvA": "【重磅】Citrix 漏洞利用全集:从路径穿越到域控沦陷,边界网关攻击路径全解析", "https://mp.weixin.qq.com/s/Y2b8TPziE_3PBMUmRn3oxg": "CNVD漏洞周报2026年第37期", "https://mp.weixin.qq.com/s/v5AXwhSnTZ8uDciJbRS7NA": "CVE-2026-81000(TUNderflow)技术分析", "https://mp.weixin.qq.com/s/E-wf3I29hTedk9Zo3c3fVA": "谷歌Chrome浏览器发布153版本,修复了42个安全漏洞", "https://mp.weixin.qq.com/s/2icIijrqTvUIcUs_Ju4FeQ": "运维和信息安全同学注意: 内网AVCON系统管理平台SQL注入漏洞,可能正被一条 SQL 语句掀了底", "https://mp.weixin.qq.com/s/NXIGo_vZPoyi_u00UtM5XQ": "AI编程时代,多语言混写的调用链漏洞", "https://mp.weixin.qq.com/s/sOLCG_N55TdVhuhmAcbHuw": "2026最新CTF知识库:12大Web漏洞深度文章+1156篇历年大赛WP+50+脚本+Payload速查 +AI∕RAG离线在线知识库", "https://mp.weixin.qq.com/s/Hmh4Gos6EY1PmiLO1ux6zw": "漏洞永远出现在意想不到的地方", "https://mp.weixin.qq.com/s/k7hKMATOvHNwqZtxXtTrSA": "WordPress插件MStore API存在认证绕过漏洞(POC已公开)CVE-2026-13447", "https://mp.weixin.qq.com/s/xKOZmS4_xuwjBZWM2v55yA": "关于2026年人工智能大模型安全众测活动典型漏洞风险的通报", "https://mp.weixin.qq.com/s/zGeczDAzLr1Vna6_NlYnDg": "9月社区投稿活动 | 漏洞挖掘∕AI渗透∕面试经验∕简历编写", "https://mp.weixin.qq.com/s/Nad6mJLxN-HvrcllkRXCHA": "D-Link R95曝CVSS 9.1命令注入漏洞,认证用户可获取Root权限", "https://mp.weixin.qq.com/s/jE8eNysx08Lbc3sf_W31fA": "安全工具丨若依 Vue 漏洞检测工具,支持自动化扫描若依(RuoYi-Vue)系列系统的多种安全漏洞", "https://mp.weixin.qq.com/s/7vUN5e7WP5Q-ejVA0MxCcg": "Amazon封禁Meta AI Agent Muse,AI购物代理的数据安全争议升级;CNVD周报:Apache与Google产品漏洞集中爆发,电信行业风险突出| 牛览", "https://mp.weixin.qq.com/s/cNbGqX-pBY4apXbWJdCS5A": "漏洞预警 | OpenPrinting CUPS本地权限提升漏洞", "https://mp.weixin.qq.com/s/qds45EBM-5KoKAZNYhyLfg": "神漏洞:突破ChatGPT智能体沙箱,远程执行任意命令", "https://mp.weixin.qq.com/s/-NvAS5PpA537RzZm3Ea58w": "struts2 xmlParser.action XXE漏洞(CVE-2025-68493)", "https://mp.weixin.qq.com/s/vd3yzWVpIMqpnfaZFVLe-g": "中兴SmartLife安卓应用的4个CVE漏洞直至账户接管", "https://mp.weixin.qq.com/s/eHJeFT79z5eO3mU9A7GYHg": "“始”逆向[ 零创技 ]—猎人笔记(4)—Windows内核漏洞利序言+30小时思维逻辑的重铸与安全逆向“沙盒”标记H6!", "https://mp.weixin.qq.com/s/o0PkhokcH90BY8aYcHkXLg": "雷神众测漏洞周报2026.9.14-2026.9.20", "https://mp.weixin.qq.com/s/8p2W2lV8qQ9BOm0YHUj6bw": "国内首部智能体安全漏洞治理蓝皮书发布!", "https://mp.weixin.qq.com/s/1t7cNhqCLWNU--vrb6W2yQ": "每天学一个 Kali 工具 · Day22 nuclei:YAML 模板驱动的漏洞扫描\"精确制导武器\"", "https://mp.weixin.qq.com/s/6Fi7pLt5VN0CY1-zT0rwQw": "内网交换机出现未登录命令执行,Zyxel 用户要在 9 月 24 日前答完三问", "https://mp.weixin.qq.com/s/eKNczbLr8hmGpwHqqyAPoA": "解决代码审计漏洞痛点!阿里内部AI审计工具OpenCodeReview低误报精准筛查SQL注入、命令执行、权限绕过漏洞", "https://mp.weixin.qq.com/s/6BCifmg618mrLMkG0cAbuQ": "(9.1分)CVE-2026-94098:Netcore 路由器固件升级接口命令注入", "https://mp.weixin.qq.com/s/99n5l7ozCGf1ZJdXyHGPXQ": "假期挖洞不卡壳,X漏洞计划焕新升级!", "https://mp.weixin.qq.com/s/Gob0jBl4-WQAcELen-DlTg": "Ivanti EPMM、Neurons 和 Sentry 漏洞可导致权限提升和远程代码执行攻击", "https://mp.weixin.qq.com/s/iAHABd8ZXfesTTSTswWipg": "AI辅助漏洞挖掘系统设计指南", "https://mp.weixin.qq.com/s/QgSX0LP_mx50JN7VrC7vxw": "【热点安全风险】9月22日 | Cisco ISE 满分认证绕过进 KEV,攻击者可直取身份中枢 root 权限(CVE-2026-76460)", "https://mp.weixin.qq.com/s/0nT8ofHbloTjdC8qwd6OEA": "AI辅助漏洞挖掘三种失真:边界、上下文、多 agent 同步", "https://mp.weixin.qq.com/s/CnTuFt5WrsflpISYeSpv4A": "某公众号 RSS 平台存在未授权 RCE:从模板注入到内存马", "https://mp.weixin.qq.com/s/jYysRFxLV_c8XU5m4PwGbg": "强推一个自动化 SRC 漏洞挖掘系统", "https://mp.weixin.qq.com/s/WfgXSesERNF77648ydOPOw": "【已复现】WordPress 无需认证的零点击存储型 XSS 可导致 RCE(Comment2Shell)" }